1
When viewing user details from userinfo.php as an admin, the edit profile & delete user buttons do not work.
This seems to be due to an error in the system_userinfo.html template, which only writes the line 3 <form name="usernav" action="user.php" method="post"> tag if the viewing the user's own page. The elseif used to check if the viewer is an admin does not have a <form> tag.
I have corrected this by modifying the line 23 <{elseif $xoops_isadmin != false> and adding another form statement as follows:
<{if $user_ownpage != true && $xoops_isadmin != false}>
<form name="usernav" action="user.php" method="post">
On a similar note, after fixing this I noticed that if an admin edits another user's profile, the admin userid is automatically entered into the nickname field on the update user form. Unfortunately, I have no solution to suggest for this bug.
IMHO, it probably adds needless complexity to have all these editing and account management functions on a viewing page. The Avatar upload function should just go in with the rest of the profile editing on in edituser.php. The delete user function can also go on that screen. The Inbox,