Here is the code around line 1573 on functions.php :
PHP Code:
if ( !isset($iforumcache) ) {
$iforums=$DB_site->query('SELECT forumid,parentid,displayorder,title FROM forum WHERE displayorder<>0 AND active=1 ORDER BY parentid,displayorder,forumid');
while ($iforum=$DB_site->fetch_array($iforums)) {
$iforumcache["$iforum[parentid]"]["$iforum[displayorder]"]["$iforum[forumid]"] = $iforum;
}
unset($iforum);
$DB_site->free_result($iforums);
$iforumperms=$DB_site->query("SELECT forumid,canview FROM forumpermission WHERE usergroupid='$bbuserinfo[usergroupid]'");
while ($iforumperm=$DB_site->fetch_array($iforumperms)) {
$ipermcache["$iforumperm[forumid]"] = $iforumperm;
}
And line 205 of global.php :
PHP Code:
// ###################### Start sessions #######################
/*if (!isset($bbadminon) and !$bbadminon) {
$sessionhash="";
$bbuserinfo[userid]="";
$bbuserinfo[password]="";
}*/
require("./sessions.php");
/*
if (isset($loginusername)) {
if ($user=$DB_site->query_first("SELECT userid,password FROM user WHERE username='".addslashes($loginusername)."'")) {
if ($user[password]==$password) {
$userid=$user[userid];
$bbuserinfo=getuserinfo($userid);
$DB_site->query("UPDATE session SET userid='$userid' WHERE sessionhash='$session[dbsessionhash]'");
}
}
}
*/
$getperms=$DB_site->query_first("SELECT cancontrolpanel FROM user,usergroup WHERE user.usergroupid=usergroup.usergroupid AND user.userid='$bbuserinfo[userid]'");
if ($getperms[cancontrolpanel]!=1) {
$bbuserinfo[userid]=0;
}
if ($bbuserinfo[userid]!=0 and $loginusername and !$createanonsession) {
vbsetcookie('bbadminon', 1, 0);
$HTTP_COOKIE_VARS['bbadminon']=1;
} else {
if ($bbuserinfo[userid]==0) {
$HTTP_COOKIE_VARS['bbadminon']=0;
}
}
if ($debug!=1) {
// check for files existance. Potential security risks!
if (file_exists("install.php")==1) {
echo "<html><body><p>Security alert! install.php still remains in the admin directory. This poses a security risk, so please delete that file immediately. You cannot access the control panel until you do.</p></body></html>";
exit;
}
if (file_exists("upgrade1.php")==1 and substr($PHP_SELF,-strlen("upgrade1.php"))!="upgrade1.php") {
echo "<html><body><p><a href=\"upgrade1.php?s=$session[sessionhash]\">upgrade1.php</a> exists. If you have already upgraded fully, please delete it. Otherwise, run it now.</p></body></html>";
exit;
}
}
Satan