Allow Limited Usergroup Changes Through ModCP

09 July 2005 UPDATE: Changegroup.php reworked for security

Thanks to boy genius KirbyDE this file has been reworked to secure that users who aren't already in your selected groups cannot be changed by your mods (with a check on attempted overrides).

To update, simply upload the new changegroup.php file in the zip to your /modcp/ directory. No other changes/modifications need to be made.

Please post if there are any problems!

######################################

08 May 2004 UPDATE: Modified file for error reported in post #16

Please download the new file and replace the old one with it. Post if there are any problems!

######################################

Hi all!

Here is the deal with this hack. We have usergroups set up with various permissions, mostly based on limiting their functions if they abuse their rights as a member (limiting them from certain forums, putting them under moderation, etc...).

Our mods need to be able to move our members into (and out of) these restricted groups rather than banning them, but at the same time, they should not be able to move members into (or out of) the mod, admin, waiting for confirmation groups, etc...

NOTE: Banned Groups are NOT touched in this hack -- this is for all groups OTHER than those addressed by the banning function as I wanted to keep that seperate!


What this hack does:

• Add a token to each usergroup that the admin can set to say 'yes' or 'no' that the mods can move users into and out of the group.
• Adds a token on the mod permissions level -- super mods can change allowable groups by default, and regular mods can only make these changes if you assign it on a mod by mod basis.
• Adds the functionality to the ModCP for the mods to make the changes.

Changes that need to be made:

Phrases to add: 5

PHP file edits:

• admincp/usergroup.php (1 change)
• admincp/moderator.php (1 change)
• includes/init.php (2 changes)
• modcp/user.php (4 changes)

New PHP file:

• changegroup.php (attached in this zip -- upload to your modcp folder)

Included in this zip:

• Modification .txt file
• changegroup.php
• Screenies!

The screen shots below are of the ACP -- adding the tokens to the Usergroup and giving permissions to the mods.

Enjoy, and as always, if anyone has any constructive feedback, or needs any help, post away.

[Sidewindr]

Actually it appears to work...

BUT .. It doesn't make the change ... the old one work and the new one doesn't work properly .. the only real difference I can see is the change from ..

WHERE username = '$username'

to

WHERE userid = '$userid'

dang .. had to go back to the old version where it didn't like quotes in names.

[Christine]

That is strange -- I have the new one working?

Let me go see if I can break it...

Edit to add -- it seems to be working fine on my test site still, but I changed the userid to addslashes($username).

Can you try again?

[Sidewindr]

Yep that fixed it ... what does addslashes do ??

[Christine]

It escapes any characters that would normally tell php to cut the script short. Instead of username=fred's it makes it username=fred\'s



Thanks for clicking install!

[TheRayden]

Very good hack!
At our forum we have a few rules regarding max sig sizes when it comes to graphics and text, at least I can allow our mods to change those sigs without giving them full access to the modcp.

Installed, and worked like a charm.
Well done.

note: one question, I can only seem to set this on a mod per mod basis. Is there a way to do this for an entire usergroup?

[BlackxRam]

Come on Christine.. you know you are able to make it use various mods for different groups... i would be eternally grateful because Xenon isnt working on it he said.

[Christine]

Hi TheRayden,

Originally Posted by TheRayden

note: one question, I can only seem to set this on a mod per mod basis. Is there a way to do this for an entire usergroup?

That is by design for the mods. SuperMods and Admins have these rights by default.



Hi BlackxRam,

Sorry -- there are just not enough hours in the day. It shouldn't take too much to modify this to do that, but as I said, I am only using SuperMods, so wouldn't even be able to test it on a live environment if I did have time.

[Spydertech]

OK - I've searched and can't find it...
Christine - this is the closest hack I've seen to what I am wanting to do.
Maybe you can help....

I want the mods and supermods to be able to change userstitles (and change the Custom Title Allowed) along with the group change....
But I don't want them to be able to globally change usergroups - so AdminCP access is out of the question...

Is there a way to implement Usertitles (and CustomUserTitle) into your hack?

Thanks,
Spydertech

[Christine]

Hi Spydertech,

Are you saying that you want mods to override the default ladder of titles:groups, or are you wanting the system to assign the appropriate title that belongs to the group when the group is changed?

[Spydertech]

I would like the mods to be able to override the default ladder of titles for the a few of the user groups..

i.e. a mod can "play around" with a users titles over-riding the Ladder of titles I have previously setup - (only in certain groups if that is possible)

BTW - Thanks!! The user group mod is extremely helpful!

Spydertech