| andrefedalto |
02-16-2006 01:42 AM |
Quote:
Originally Posted by stark427
Nice mod.
I just wish the security risk could be resolved so that mods would not be able to upgrade themselves to admins
Does this also mean that moderators could degrade admins by putting them to the moderators usergroup?
|
here is a fix for security, because on my forums i allow admins, supermods and mods to edit users, so i had to add some security fixes, so the users cant get auto-promotted.
do the following:
open que.php and find (around line 121):
Code:
// Merge the options with the users details
$getoptions = convert_bits_to_array($user['options'], $vbulletin->bf_misc_useroptions);
$user = array_merge($user, $getoptions);
now, BEFORE that, add:
Code:
//Only administrators can edit administrators
if ($vbulletin->userinfo['usergroupid'] != 6 && $user['usergroupid'] == "6" ) {
eval(standard_error("Sorry, but you can't edit administrators!"));
}
//Super-moderators cant edit super-moderators
if ($vbulletin->userinfo['usergroupid'] == "5" && $user['usergroupid'] == "5" ) {
eval(standard_error("Sorry, but you can't edit super-moderators!"));
}
//Moderators cant edit super-moderators
if ($vbulletin->userinfo['usergroupid'] == "7" && $user['usergroupid'] == "5" ) {
eval(standard_error("Sorry, but you can't edit super-moderators!"));
}
//Moderators cant edit moderators
if ($vbulletin->userinfo['usergroupid'] == "7" && $user['usergroupid'] == "7" ) {
eval(standard_error("Sorry, but you can't edit moderators!"));
}
Now only admins can edit admins, supermods cant edit other supermods and mods cant edit supermods or either mods.
now the mod is working fine for me...
//me clicks install :D :D :D |
More Information