A user can tweak the HTML in the profile page to enable the status check boxes. He can then check them and submit the changes. Their should be a security allowing only admins to change a user's status.
I managed to do this by removing "disabled" for the check box in the page's HTML.
anthonygego
commented
1 month ago
A user can tweak the HTML in the profile page to enable the status check boxes. He can then check them and submit the changes. Their should be a security allowing only admins to change a user's status.
I managed to do this by removing "disabled" for the check box in the page's HTML.