From bcbfe4132e232b2b0cc622fe6f8eea2aaf21bf09 Mon Sep 17 00:00:00 2001
From: jmontoyaa <gugli100@gmail.com>
Date: Thu, 24 Nov 2016 09:15:04 +0100
Subject: [PATCH] Replace global by session

---
 main/admin/user_list.php | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/main/admin/user_list.php b/main/admin/user_list.php
index ccb23b72c1..d76588695d 100755
--- a/main/admin/user_list.php
+++ b/main/admin/user_list.php
@@ -520,7 +520,7 @@ function user_filter($name, $params, $row)
  */
 function modify_filter($user_id, $url_params, $row)
 {
-	global $charset, $_admins_list;
+    $_admins_list = Session::read('admin_list');
     $is_admin = in_array($user_id, $_admins_list);
     $statusname = api_get_status_langvars();
     $user_is_anonymous = false;
@@ -655,7 +655,7 @@ function modify_filter($user_id, $url_params, $row)
                 api_global_admin_can_edit_admin($user_id)
             ) {
                 // you cannot lock yourself out otherwise you could disable all the accounts including your own => everybody is locked out and nobody can change it anymore.
-                $result .= ' <a href="user_list.php?action=delete_user&user_id='.$user_id.'&'.$url_params.'&sec_token='.$_SESSION['sec_token'].'"  onclick="javascript:if(!confirm('."'".addslashes(api_htmlentities(get_lang("ConfirmYourChoice"),ENT_QUOTES,$charset))."'".')) return false;">'.Display::return_icon('delete.png', get_lang('Delete'), array(), ICON_SIZE_SMALL).'</a>';
+                $result .= ' <a href="user_list.php?action=delete_user&user_id='.$user_id.'&'.$url_params.'&sec_token='.$_SESSION['sec_token'].'"  onclick="javascript:if(!confirm('."'".addslashes(api_htmlentities(get_lang("ConfirmYourChoice")))."'".')) return false;">'.Display::return_icon('delete.png', get_lang('Delete'), array(), ICON_SIZE_SMALL).'</a>';
             } else {
                 $result .= Display::return_icon('delete_na.png', get_lang('Delete'), array(), ICON_SIZE_SMALL);
             }
@@ -830,7 +830,7 @@ if (isset($_GET['keyword'])) {
 $parameters['sec_token'] = Security::get_token();
 
 $_admins_list = array_keys(UserManager::get_all_administrators());
-
+Session::write('admin_list', $_admins_list);
 // Display Advanced search form.
 $form = new FormValidator('advanced_search', 'get', '', '', array(), FormValidator::LAYOUT_HORIZONTAL);