Disallow export of subscribers for non-admin users

slackero · Sep 1, 2021 · 4babfa1 · 4babfa1
1 parent 0667786
commit 4babfa1
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/include/inc_act/act_export.php b/include/inc_act/act_export.php
@@ -191,7 +191,7 @@
 
     echo '</body></html>';
     exit();
-} elseif ($action == 'exportsubscriber') {
+} elseif ($action == 'exportsubscriber' && !empty($_SESSION["wcs_user_admin"])) {
 
     // export list of newsletter subscribers
     $_userInfo = array();