[Xenon]

ok, here it is, but im taking no garantee if i have forgotten a piece of code

open mod/user.php

search

PHP Code:

$user=$DB_site->query_first("SELECT userid,usergroupid,username,password,email,parentemail,coppauser,homepage,icq,aim,yahoo,signature,adminemail,showemail,invisible,usertitle,customtitle,FROM_UNIXTIME(joindate) AS joindate,cookieuser,daysprune,FROM_UNIXTIME(lastvisit) AS lastvisit,FROM_UNIXTIME(lastactivity) AS lastactivity,FROM_UNIXTIME(lastpost) AS lastpost,posts,timezoneoffset,emailnotification,emailonpm,receivepm,ipaddress FROM user WHERE userid=$userid");

  doformheader("user",""); 


after Start viewuser

replace it with

PHP Code:

$user=$DB_site->query_first("SELECT userid,usergroupid,username,password,email,parentemail,coppauser,homepage,icq,aim,yahoo,signature,adminemail,showemail,invisible,usertitle,customtitle,FROM_UNIXTIME(joindate) AS joindate,cookieuser,daysprune,FROM_UNIXTIME(lastvisit) AS lastvisit,FROM_UNIXTIME(lastactivity) AS lastactivity,FROM_UNIXTIME(lastpost) AS lastpost,posts,timezoneoffset,emailnotification,emailonpm,receivepm,ipaddress FROM user WHERE userid=$userid");
  if ($user[usergroupid]!=2) {
    echo "<p>You do not have permission to do this!</p>";
    exit;
  }
  
  doformheader("user","doupdate");
  makehiddencode("userid","$userid"); 


then goto this two lines:

PHP Code:

echo "</table></td></tr></table></form>\n";
} 


and replace them with

PHP Code:

doformfooter("Save Changes");
  //echo "</table></td></tr></table></form>\n";
}

// ###################### Start do update  Hack by Xenon#######################
if ($HTTP_POST_VARS['action']=="doupdate") {
 
  $DB_site->query("UPDATE user SET username='".addslashes(htmlspecialchars($ausername))."'$pwdinclude,homepage='".addslashes(htmlspecialchars($homepage))."',signature='".addslashes($signature)."' WHERE userid=$userid");
  echo "<p>Record updated!</p>";
} 


in doupdate you could allow more changes if you want to.

hope i could help