// Get admin's defult access right
$default = GET_ADMIN_DEFAULT_ACL($aid);
-
if (!empty($wht)) {
// Check for parent menu:
// First get it's action value
// Rewrite cookie when it's own account
if ($aid == $id) {
// Set timeout cookie
- set_session("admin_last", time());
+ set_session('admin_last', time());
if ($login != get_session('admin_login')) {
// Update login cookie
- set_session("admin_login", $login);
+ set_session('admin_login', $login);
// Update password cookie as well?
- if (!empty($ADD)) set_session("admin_md5", $hash);
+ if (!empty($ADD)) set_session('admin_md5', $hash);
} elseif (generateHash($POST['pass1'][$id], $salt) != get_session('admin_md5')) {
// Update password cookie
- set_session("admin_md5", $hash);
+ set_session('admin_md5', $hash);
}
} // END - if
default_acl='%s',
la_mode='%s'
WHERE id=%s LIMIT 1",
- array(
- $login,
- $POST['email'][$id],
- $POST['mode'][$id],
- $POST['la_mode'][$id],
- $id
-), __FILE__, __LINE__);
+ array(
+ $login,
+ $POST['email'][$id],
+ $POST['mode'][$id],
+ $POST['la_mode'][$id],
+ $id
+ ), __FILE__, __LINE__);
} else {
// Do not allow it here
SQL_QUERY_ESC("UPDATE "._MYSQL_PREFIX."_admins SET
email='%s',
la_mode='%s'
WHERE id=%s LIMIT 1",
- array(
- $login,
- $POST['email'][$id],
- $POST['la_mode'][$id],
- $id
-), __FILE__, __LINE__);
+ array(
+ $login,
+ $POST['email'][$id],
+ $POST['la_mode'][$id],
+ $id
+ ), __FILE__, __LINE__);
}
// Purge cache
// Display message
if (!empty($MSG)) {
- LOAD_TEMPLATE("admin_settings_saved", false, "<SPAN class=\"admin_done\">".$MSG."</SPAN>");
+ LOAD_TEMPLATE("admin_settings_saved", false, $MSG);
}
}
// Make admin accounts editable
function ADMINS_EDIT_ADMIN_ACCOUNTS ($POST) {
+ // "Resolve" current's admin access mode
+ $currMode = GET_ADMIN_DEFAULT_ACL(GET_CURRENT_ADMIN_ID());
+
// Begin the edit loop
$SW = 2; $OUT = "";
foreach ($POST['sel'] as $id => $sel) {
// Get the admin's data
$result = SQL_QUERY_ESC("SELECT login, email, default_acl AS mode, la_mode FROM "._MYSQL_PREFIX."_admins WHERE id=%s LIMIT 1",
- array($id), __FILE__, __LINE__);
+ array($id), __FILE__, __LINE__);
if ((SQL_NUMROWS($result) == 1) && ($sel == 1)) {
// Entry found
$content = SQL_FETCHARRAY($result);
$content['id'] = $id;
// Shall we allow changing default ACL?
- if ($content['mode'] == "allow") {
+ if ($currMode == "allow") {
// Allow chaning it
$content['mode'] = ADD_OPTION_LINES("/ARRAY/", array("allow", "deny"), array(ADMINS_ALLOW_MODE, ADMINS_DENY_MODE), $content['mode']);
} else {
}
// Filter for adding extra data to the query
-function FILTER_ADD_EXTRA_SQL_DATA () {
- // Init extra data
- $ADD = "";
-
+function FILTER_ADD_EXTRA_SQL_DATA ($ADD = "") {
// Is the admins extension updated? (should be!)
if (GET_EXT_VERSION("admins") >= "0.3") $ADD .= ", default_acl AS def_acl";
if (GET_EXT_VERSION("admins") >= "0.6.7") $ADD .= ", la_mode";
- if (GET_EXT_VERSION("admins") >= "0.7.0") $ADD .= ", login_failtures, UNIX_TIMESTAMP(last_failture) AS last_failture";
+ if (GET_EXT_VERSION("admins") >= "0.7.2") $ADD .= ", login_failures, UNIX_TIMESTAMP(last_failure) AS last_failure";
// Return it
return $ADD;