From 4babfa1b496d7e4c8ad2f698ac38e68e1cc3f9ef Mon Sep 17 00:00:00 2001
From: slackero <slackero@gmail.com>
Date: Wed, 1 Sep 2021 07:07:24 +0200
Subject: [PATCH] Disallow export of subscribers for non-admin users

---
 include/inc_act/act_export.php | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/include/inc_act/act_export.php b/include/inc_act/act_export.php
index 2037020f2..e2b4c4e3c 100644
--- a/include/inc_act/act_export.php
+++ b/include/inc_act/act_export.php
@@ -191,7 +191,7 @@
 
     echo '</body></html>';
     exit();
-} elseif ($action == 'exportsubscriber') {
+} elseif ($action == 'exportsubscriber' && !empty($_SESSION["wcs_user_admin"])) {
 
     // export list of newsletter subscribers
     $_userInfo = array();