The Arcive of vBulletin Modifications Site. |
|
user can edit admins? Details »»
|
|||||||||||||||||||||||||
i did this to allow only user 1 to edit other admins:
forum/admin/config.php add at the bottom: Code:
// user can edit admins $editadmin='1'; forum/admin/user.php find: Code:
adminlog(iif($userid!=0,"user id = $userid","")); Code:
unset($editadmin); Code:
if ($HTTP_POST_VARS['action']=="doupdate") {
Code:
if ($HTTP_POST_VARS['action']=="doupdate" && checklogperms($editadmin,1,"<p>You are not allowed to edit this user.</p>")) {
Show Your Support
|
|||||||||||||||||||||||||
| Comments |
|
#2
|
||||
|
||||
|
Remove
Code:
unset($editadmin); |
|
#3
|
||||
|
||||
|
thanks firefly. can you please explain to me why it must be done this way, unseting $editadmin before config.php file? if i use my logic, an unset should work anywhere before an related action.
|
|
#4
|
||||
|
||||
|
You can also unset the variable before requiring global.php, it pretty much does the same thing.
However, if you unset it after you require global.php (and config.php), the variable won't be present anymore and the checklogperms() call will fail no matter what. |
|
#5
|
||||
|
||||
|
aha... i understand now. thanks alot chen.
|
|
#6
|
|||
|
|||
|
find:
code: if ($HTTP_POST_VARS['action']=="doupdate") { erm .... this aint on my admin/config.php script m8 wot do i do now ?? |
|
#7
|
||||
|
||||
|
<a href="https://vborg.vbsupport.ru/showthread.php?s=&threadid=40787" target="_blank">https://vborg.vbsupport.ru/showt...threadid=40787</a>
|
|
#8
|
||||
|
||||
|
chen, i need your help. i cant figure a way to make it dentify with the username that edits another user. here it is what i tried as an alternative:
Code:
if ($HTTP_POST_VARS['action']=="doupdate") {
if (!in_array($bbuserinfo['userid'],array($caneditadmin)) and $user['userid']!=$bbuserinfo['userid']) {
echo "<p>You are not allowed to edit this user</p>";
exit;
}
|
|
#9
|
||||
|
||||
|
i got it working.
![]() thanks chen!! |
![]() |
|
|