Message Editing Hierarchy

Hi,

Have you ever noticed that Site Admins and Super Moderators can edit/delete/peak everyone's messages in your forum? This also applies to Moderators for the board they are assigned.

I never thought about the aftermath of this default behavior, until one of my SuperModerators peaked into my message and "stole" a hidden BB code from me! Then I have noticed that I really dont need/want ANYONE to edit my messages, even if they are Mods or Super Mods and this hack is born.

After applying the hack default editing permissions in your board will be changed like this:

• Moderators: Can edit everyone's posts in the board they're assigned, UNLESS author is a SuperMod or a Site Admin.
• SuperModerators: Can edit everyone's post in all boards UNLESS author is a Site Admin.
• Site Admins: Can edit eveyone's post in all boards UNLESS user is userid 1. (Why let other Site Admins edit your posts anyway? hehe)

So the hack will apply a "message editing hierarchy" in your board and everyone will be able to edit messages for ones who are below him and cant touch messages of his superiors..If they try, they'll get no permission page. This will apply for editing the messages, deleting the message via edit message or just peaking inside it. But be warned: messages can still be deleted via "Delete Thread / Posts" menu..

The hack is VERY EASY to install with 1 single modification and will work in any vbulletin versions I know..

If you install the hack, please click install, thank you..

Enjoy! \\=^))

Logician

[Marshalus]

After I applied this hack, I can no longer edit my own posts.

[Logician]

Originally posted by Marshalus
After I applied this hack, I can no longer edit my own posts.

Marshalus, I'm using the hack for weeks without any problems, so are u sure u applied it correctly? Anyway let's trace what's the problem with your editing problem:

In hack's code find:

PHP Code:

show_nopermission(); exit; 


Replace it as:

PHP Code:

echo "My userid=".$bbuserinfo[userid].'<br>';
echo "My user group id=".$bbuserinfo[usergroupid].'<br>';
echo "Message Owner user group id=".$log_usergroupid[usergroupid].'<br>';
echo "Message Owner user id=".$postinfo[userid].'<br>';
exit; 


Then try to edit your post that you say you cant edit and tell me what the hack will display to you.

This code is for debugging purposes only, so after you debugged, revert back to the original hack code.

[Chris M]

Nice one Logician

Satan

[Xenon]

Hi pal!

i have made an upgrade to your code. Permissions are no longer checked per usergroupid but on the normal getpermission base

also i have made some exact error-messages

and a cahnge of permission checks:
why let moderators edit other moderators posts?
normal members cannot edit other members post..

So Mods can edit Membersposts and their own, but no other mod's post

Supermods can edit Members/Moderators/own Posts, but no posts from other supermods... aso...

hope it's ok for ya pal

[inetd]

install this hack later
Good idea!

[Ein]

It works pretty good, except for two...my co-admin can edit my posts with no problem, but that doesn't really bug me. And one of my Mods can do whatever, too, but don't let it bug you, he's also able to access the Admin Forum for no reason. Good show!

Ohh...yea, I'm using vB version 2.2.8.

[Xenon]

are you sure your mod isn't in the admin group?

normally that shouldn't happen if you have setup all permissions correctly.

your coadmin can edit your posts?
do you have userid 1?

[N9ne]

What if I don't want the function that no one can edit userid=1's posts? I want it so only admins can edit admins' posts, not no one being able to edit userid=1's posts...so how can I remove that?

[Xenon]

just remove this block:

if($postinfo[userid]==1 or $postperms[cancontrolpanel]==1) {
    $editpriority="Root Admin";
    eval("standarderror(\"".gettemplate("error_editpriority")."\");");
    exit;	
  } else

next code should be: if(....

[NTLDR]

Originally posted by Logician
I never thought about the aftermath of this default behavior, until one of my SuperModerators peaked into my message and "stole" a hidden BB code from me!

Any user should be able to do this by just quoting your message if I'm correct?

This is still a good hack none the less