如何防止已登录的用户从CMS的php脚本中删除其用户名？

Question

I am working on creating a CMS, and I would like to know the best approach to prevent logged in user to delete his or her username when deleting users from a php script.

The way I handled this before was to compare the userID in the session and the user to delete, if they don't match then delete the user. Is this approach is okay? is there a better way to do that?

I am not looking for code... just some tips.

Answer 1

从交互设计的角度来看，当您显示当前用户时，完全禁用/隐藏“删除”按钮可能是有意义的。