From 361137db9ffc0a32bee8211ce23230a0d804cf68 Mon Sep 17 00:00:00 2001
From: Daniel Winzen <d@winzen4.de>
Date: Fri, 30 Dec 2016 08:36:13 +0100
Subject: [PATCH] Prevent non-admins from loging in incognito via setup

---
 chat.php | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/chat.php b/chat.php
index 50578fc..70cfe89 100644
--- a/chat.php
+++ b/chat.php
@@ -2197,7 +2197,7 @@ function create_session($setup, $nickname, $password){
 		add_user_defaults($password);
 	}
 	$U['entry']=$U['lastpost']=time();
-	if($setup){
+	if($setup && $U['status']>=7){
 		$U['incognito']=1;
 	}
 	$captcha=(int) get_setting('captcha');