Security Fix: * Deny 'show_user' search for anonymous user. * allow only staff members to change the user ID via URL. * Add message, if user_id changed by GET parameter ---
Security Fix: * Deny 'show_user' search for anonymous user. * allow only staff members to change the user ID via URL. * Add message, if user_id changed by GET parameter
---

rashoodkhan/DjangoBB,saifrahmed/DjangoBB,hsoft/DjangoBB,rashoodkhan/DjangoBB,hsoft/DjangoBB,slav0nic/DjangoBB,agepoly/DjangoBB,hsoft/DjangoBB,agepoly/DjangoBB,slav0nic/DjangoBB,hsoft/slimbb,saifrahmed/DjangoBB,hsoft/slimbb,hsoft/slimbb,slav0nic/DjangoBB,saifrahmed/DjangoBB,agepoly/DjangoBB