i also replaced moderate user code in cms_transact_user with following.

case 'Modify Account':
if (isset($_POST['name'])
and isset($_POST['email'])
and isset($_POST['access_level'])
and isset($_POST['user_id']))
{
$sql = "UPDATE cms_users " .
"SET email='" . $_POST['email'] .
"', name='" . $_POST['name'] .
"', access_level=" . $_POST['access_level'] . " " .
" WHERE user_id=" . $_POST['user_id'];

mysql_query($sql, $db)
or die('Could not update user account; ' . mysql_error());
}
redirect('cms_admin.php');
break;