Mods can add/remove users

Mods can add/remove users
(by Martin64, martin64@vbhackers.com)

ABOUT:

A hack that's useful if you want your mods to be able to add and remove users. Your mods will not be able to create admins or mods (we don't want them to create admins so they can take over, do we? ). They are only able to remove users from the registered group.

WHAT IT DOES:

- Mods are able to create users other than admins and mods through the Mod CP.
- Mods are able to delete registered users through the Mod CP.
- Select which mods are allowed to add/remove users from Admin CP (Edit Moderator)

Hack requested by mauce in the following thread: https://vborg.vbsupport.ru/showthrea...threadid=47541

[Chris M]

Hehe no problems

Satan

[Martin64]

New instructions added. The security bug hellsatan noticed has been fixed, and mods are now able to select which usergroup the added user goes in. However, they are not able to create admins and mods. I believe this answer both mauce's and Jadelit's requests.

[mauce]

Thanx Martin64, but what is the delta with the former version?
I already tried the hack in first place, so what are the upgrade instructions ?

I tried to figure out the delta myself....
There is a nice pulldown list of usergroups now (well done) however, the groups moderator and supermoderator are in the list as well (but not administrators).
Where in the script we can define the usergroupid's that appear in the pull down list? Or is this possible at all?

Please advice and thanks again

[Martin64]

To upgrade, you just need to re-do the changes to mod/user.php as it's the only thing that's changed. The list of usergroups you can select from is pulled from the database, so all your usergroups should be listed (admins as well).

[Martin64]

The easiest way to do that would be to open mod/user.php and...

FIND:

if ($usergroupid==6 or $usergroupid==5 or $usergroupid==7)  {
		echo "<p>You can't add admins or mods!</p>";
		exit;
	}

REPLACE WITH:

if ($usergroupid==6 or $usergroupid==5 or $usergroupid==7 or $usergroupid==XX)  {
		echo "<p>You can't add admins or mods!</p>";
		exit;
	}

Replace the XX with the ID of the usergroup you don't want your mods to be able to add users to.

[Martin64]

Humm...you removed the post, mauce?

[mauce]

Yes,

that's because I found that out myself just now, and removed the post immediately.
Didn't notice your quick reply in the first place.

Thanks for your reply anyway Martin,