PDA

View Full Version : permission problem


sabret00the
09-01-2003, 03:57 PM
i've got a super mod lounge which mods can't see yet if they guess the forum id they can see the threads, but they can't see threads in the admin lounge and the permissions are the same, if there anyway i can hard code it?

sabret00the
09-02-2003, 09:58 AM
*bump*

N9ne
09-02-2003, 10:14 AM
Which version of vB are you running?

sabret00the
09-02-2003, 11:25 AM
2.2.9

N9ne
09-02-2003, 12:34 PM
Have you done any hacking to forumdisplay.php?

Can they see posts themselves? Or can they just see the thread listing?

sabret00the
09-02-2003, 01:39 PM
they can see the posts and yes nearly every file has some hack or another in there :blush:

N9ne
09-02-2003, 01:49 PM
The only thing I can think of is a hack gone bad ;), as 2.2.9 didn't have this insecurity. Have you triple checked your permission settings?

Chris M
09-02-2003, 02:04 PM
Just put something like below in your showthread.php file:

if (($thread['forumid']=="X") && ($bbuserinfo['usergroupid']!="6")) {
show_nopermission();
exit;
}
Change X to your admin forumid, and make sure your admin usergroup is id 6;)
:)

Satan

Dean C
09-02-2003, 02:42 PM
Chris you don't need to quote integers and strings or letters should be sinqle quoted unless they contain a variable. :)


if (($thread['forumid'] == 'X') AND ($bbuserinfo['usergroupid'] != 6))
{
show_nopermission();
exit;
}


*Moved to the correct forum too* :)

sabret00the
09-02-2003, 06:04 PM
thanks i will try this out later :D

Tigga
09-02-2003, 09:34 PM
Make sure that the "Use Custom Permssions" radio button is checked when editing that forum's permissions. ;)

sabret00the
09-03-2003, 06:42 PM
yep it's checked, i've still gotta try the hard coding tho'

sabret00the
09-09-2003, 09:45 AM
// show no permission to normal mods in supermod lounge

if (($thread['forumid'] == '57') AND ($bbuserinfo['usergroupid'] != 7))
{
show_nopermission();
exit;
}

// end show no premission to normal mods in supermod lounge


ok this don't work, mods can still get in and view threads