From 0165dea2c690d98d72a2e16bceb895e1d37b706d Mon Sep 17 00:00:00 2001
From: skodak <skodak>
Date: Mon, 8 Oct 2007 19:55:39 +0000
Subject: [PATCH] MDL-11663 sanitise submitted data when editing users

---
 user/edit.php | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/user/edit.php b/user/edit.php
index 2180a69fd54..d6bfde3ada2 100644
--- a/user/edit.php
+++ b/user/edit.php
@@ -79,9 +79,9 @@
             check_for_restricted_user($USER->username, "$CFG->wwwroot/course/view.php?id=$course->id");
         }
 
-        if (isset($usernew->password)) {
-            unset($usernew->password);
-        }
+        unset($usernew->password);
+        unset($usernew->admin);
+        unset($usernew->newadminuser);
 
         // data cleanup 
         // username is validated in find_form_errors