Version: 1.1, by Revan
Developer Last Online: Jun 2014
Version: 3.5.4
Rating:
Released: 06-02-2006
Last Update: 06-03-2006
Installs: 60
DB Changes Uses Plugins Template Edits
Additional Files
No support by the author.
[high]
Threadmins v1.1
[/high] Why did you code something with such a silly name?
I got bored of doing purely RPG work, so I thought I would whip up something else for a change. And thus, I bring you, Threadmins v1.1!
And what exactly am I looking at?
For those that wonder what a "Threadmin" is, it's a "Thread Admin". Basically, a Forum Administrator with Can Administer Threads will be able to delegate thread management permissions to select users. By default, this kind of administrator will be able to quickly access the Threadmin Management through an item in the dropdown menu you get when clicking an username, however the page variable string can be altered to allow management of users not having posted in the thread as of yet (example is threadmin.php?t=6&u=6 even if userid 6 didn't post in the thread).
What's the skinny on this hack? What will it be doing to my forums?
File Changes: 0
Template Changes: 1
Tables Added: 0
Tables Altered: 1
SQL Queries Added: 0
As you can see, it won't add any load to your forums, so you are perfectly safe using this mod
Why should I use this mod?
Maybe you want someone to be able to manage his own RolePlaying thread without giving him full moderator permissions over the entire RP section. Maybe you want to give someone a trial run as a full-fledged Moderator by seeing how he handles himself in a live thread.
Or maybe you are feeling nice and want to increase my ego by giving me more install clicks
So how do I get this up and running?
Simple
Extract the zip, upload the .php file to your forums directory, import the product through the AdminCP, edit the template as per the readme.
You are done
Will you add feature x?
Maybe
Post it and I will try to get back to you when I have the time.
Whoops, I need some help! Can you help?
I will try to, but I can't promise rapid replies because of time restrains. I don't see how this mod could require any support, but if your forums should self-destruct for no apparent reason, I will get back to you when I have the time
Thanks a lot for this mod Revan, do you want some PayPal money?
I don't require donations, but they are most appreciated Please note that my Paypal account is Unverified, so I will not be able to accept Credit Card direct charges. Please "upload" some money to your Paypal account and send it to me from there if you wish to donate.
Thanks in advance
I don't have PayPal but I would like to show my support, what can I do?
Leave a nice message saying thanks and a click of the install button. Yep, that should do the trick
What's happened in the course of this mod?
3rd June 2006 - v1.0
Initital release
4th June 2006 - v1.1
Fixed a security issue, thanks to Alan-CIT.
Fixed a bug where adding a Threadmin to multiple threads would cause permissions to be overwritten.
Show Your Support
This modification may not be copied, reproduced or published elsewhere without author's permission.
Uh no this is to ADD permissions, not REMOVE them.
Though I can always make another hack to remove permissions.
Since I will be using much of the same methods, I will put those hacks on hold until I finish this one, sound ok?
haha, wow, after re-reading it all I bet you wonder what I was thinking, cuz I sure am. (for some reason when I read the part about adding a user that hasn't posted in the thread yet I assumed it meant adding them to the ban list for the thread, so you could stop a user from posting in the thread before they've ever done it)
but yes, sounds great to me.. I've clicked install.
Nice hack, I was going to write something like that but you were quicker.
Installed.
Suggestion:
Move the adder to the admin area, for greater security.
Including adminfunctions and can_administer('canadminthreads'); for all permission checking.
So if the user can make himself administrator with that permission then he can do pretty much anything else
The reason it is potentially insecure is that adminfunctions is not intended for inclusion in front-end. I noticed that admincp functions have less error checks that front-end functions do.
Well my point still stands; if they can somehow get past can_administer() in the frontend, they can do much worse things than ruining a single thread
Maybe we should take this to the Coders Discussion forums instead of cluttering this thread, I'll go start the thread now
Yeah. I am working on an AdminCP interface for managing permissions of all Threadmins in all threads, but for now you will have to add as you want and take away as you want.