The wonderful remove feature - Where is the feature to remove that???

[Chris M]

Ok...

Some of you may know that we have had some bad times over the last few weeks...

I would like to know how I can :

a.) make the remove feature not work for any admin unless they are userid 1 or 3
b.) male it so that it only shows for members unless they are userid 1 or 3...

i.e. Only myself and the owner can remove admins, but other admins can remove anyone except other admins...

This is because myself and the owner are not a security leak, but the other admins could be...

Can it be done?

Satan

[Takara]

Sure it is, go into /admin/user.php

Find

PHP Code:

// ###################### Start Remove #######################

if ($action=="remove") { 


Add below:

PHP Code:


if (($bbuserinfo[userid]!=1 AND $bbuserinfo[userid]!=3)) {
  echo "<p>You cannot edit profiles.</p>";
  cpfooter();
  exit;
} 


I dont really get your second request, but. That should do what you want.

[edit] I think its if (($bbuserinfo[userid]!=1 OR $bbuserinfo[userid]!=3)) ... it might be AND. I get mixed up with those things... And I changed my mind, I set it at and... eurgh *head hurts*

Actually, dont trust that. lol, firefly or someone else, can you tell me if its OR or AND? @_@;

[Chris M]

Yeh...

It is AND...

Thanks for the first bit

Now to get it so that Admins can remove members, mods, super mods etc, but not other Admins...

Satan

[Takara]

well, you can put something like OR $user[usergroupid]==<admin group> in there... I think

hehe ^_^

[Xenon]

yes, but AND, not or

[Takara]

well, for the usergroup part, wouldnt you want to be doing

"If userid isnt 1 and userid isnt 3 or usergroupid is 1"

hmm, it might not be $user[usergroupid] that you want to use.. I dunno

/me <-- stupid

[Xenon]

yo have to find this lines:

PHP Code:

if ($HTTP_POST_VARS['action']=="kill") {

  $user=$DB_site->query_first("SELECT username FROM user WHERE userid='$userid'"); 


replace them with this:

PHP Code:

if ($HTTP_POST_VARS['action']=="kill") {

  $user=$DB_site->query_first("SELECT username,usergroupid FROM user WHERE userid='$userid'");
if ($bbuserinfo[userid]!=1 AND $bbuserinfo[userid]!=3 AND $user[usergroupid]==6) {
  echo "<p>You cannot delete Admin users.</p>";
  cpfooter();
  exit;
} 


[Chris M]

Thanks

Satan

[Xenon]

np, hope you'll have more luck in the future than in past...

[Chris M]

Thanks...

So do I

Satan