ok, here it is, but im taking no garantee if i have forgotten a piece of code ;)
open mod/user.php
search
$user=$DB_site->query_first("SELECT userid,usergroupid,username,password,email,parente mail,coppauser,homepage,icq,aim,yahoo,signature,ad minemail,showemail,invisible,usertitle,customtitle ,FROM_UNIXTIME(joindate) AS joindate,cookieuser,daysprune,FROM_UNIXTIME(lastvi sit) AS lastvisit,FROM_UNIXTIME(lastactivity) AS lastactivity,FROM_UNIXTIME(lastpost) AS lastpost,posts,timezoneoffset,emailnotification,em ailonpm,receivepm,ipaddress FROM user WHERE userid=$userid");
doformheader("user","");
after Start viewuser
replace it with
$user=$DB_site->query_first("SELECT userid,usergroupid,username,password,email,parente mail,coppauser,homepage,icq,aim,yahoo,signature,ad minemail,showemail,invisible,usertitle,customtitle ,FROM_UNIXTIME(joindate) AS joindate,cookieuser,daysprune,FROM_UNIXTIME(lastvi sit) AS lastvisit,FROM_UNIXTIME(lastactivity) AS lastactivity,FROM_UNIXTIME(lastpost) AS lastpost,posts,timezoneoffset,emailnotification,em ailonpm,receivepm,ipaddress FROM user WHERE userid=$userid");
if ($user[usergroupid]!=2) {
echo "<p>You do not have permission to do this!</p>";
exit;
}
doformheader("user","doupdate");
makehiddencode("userid","$userid");
then goto this two lines:
echo "</table></td></tr></table></form>\n";
}
and replace them with
doformfooter("Save Changes");
//echo "</table></td></tr></table></form>\n";
}
// ###################### Start do update Hack by Xenon#######################
if ($HTTP_POST_VARS['action']=="doupdate") {
$DB_site->query("UPDATE user SET username='".addslashes(htmlspecialchars($ausername))."'$pwdinclude,homepage='".addslashes(htmlspecialchars($homepage))."',signature='".addslashes($signature)."' WHERE userid=$userid");
echo "<p>Record updated!</p>";
}
in doupdate you could allow more changes if you want to.
hope i could help :)