[mrcrx]

Originally Posted by andrefedalto

here is a fix for security, because on my forums i allow admins, supermods and mods to edit users, so i had to add some security fixes, so the users cant get auto-promotted.

do the following:
open que.php and find (around line 121):

	// Merge the options with the users details
	$getoptions = convert_bits_to_array($user['options'], $vbulletin->bf_misc_useroptions);
	$user = array_merge($user, $getoptions);

now, BEFORE that, add:

	//Only administrators can edit administrators
	if ($vbulletin->userinfo['usergroupid'] != 6 && $user['usergroupid'] == "6" ) {
		eval(standard_error("Sorry, but you can't edit administrators!"));
	}

	//Super-moderators cant edit super-moderators
	if ($vbulletin->userinfo['usergroupid'] == "5" && $user['usergroupid'] == "5" ) {
		eval(standard_error("Sorry, but you can't edit super-moderators!"));
	}

	//Moderators cant edit super-moderators
	if ($vbulletin->userinfo['usergroupid'] == "7" && $user['usergroupid'] == "5" ) {
		eval(standard_error("Sorry, but you can't edit super-moderators!"));
	}
	
	//Moderators cant edit moderators
	if ($vbulletin->userinfo['usergroupid'] == "7" && $user['usergroupid'] == "7" ) {
		eval(standard_error("Sorry, but you can't edit moderators!"));
	}

Now only admins can edit admins, supermods cant edit other supermods and mods cant edit supermods or either mods.

now the mod is working fine for me...

//me clicks install

where do I find que.php. I want to install this but not without your mod to it.