Security line in all includes changed

[mailer.git] / inc / modules / admin / what-user_online.php

diff --git a/inc/modules/admin/what-user_online.php b/inc/modules/admin/what-user_online.php
index a7f4aca9ca9fded06546c46a1bd06e19c229626a..f1f7727ea4aed80fefd7152b34ad4f00c1fd2aa3 100644 (file)
--- a/inc/modules/admin/what-user_online.php
+++ b/inc/modules/admin/what-user_online.php
@@ -32,15 +32,13 @@
  ************************************************************************/
 
 // Some security stuff...
-if (ereg(basename(__FILE__), $_SERVER['PHP_SELF']))
-{
+if ((!defined('__SECURITY')) || (!IS_ADMIN())) {
        $INC = substr(dirname(__FILE__), 0, strpos(dirname(__FILE__), "/inc") + 4) . "/security.php";
        require($INC);
 }
 
 // Add description as navigation point
 ADD_DESCR("admin", basename(__FILE__));
-OUTPUT_HTML("</FONT><BR><BR>");
 
 // Count guests, members and admins
 $result_guests  = SQL_QUERY("SELECT id FROM "._MYSQL_PREFIX."_online WHERE is_admin='N' AND is_member='N'", __FILE__, __LINE__);
@@ -70,7 +68,7 @@ OUTPUT_HTML("<TABLE border=\"0\" cellspacing=\"0\" cellpadding=\"0\" align=\"cen
   <TD width=\"5%\">&nbsp;</TD>
   <TD width=\"10%\"><B>".SQL_NUMROWS($result_admins)."</B></TD>
 </TR>
-</TABLE><BR>");
+</TABLE><br />");
 
 $result = SQL_QUERY("SELECT id, ip, userid, refid, module, action, what, is_member, is_admin, timestamp FROM "._MYSQL_PREFIX."_online ORDER by timestamp DESC", __FILE__, __LINE__);
 if (SQL_NUMROWS($result) > 0)
@@ -85,12 +83,12 @@ if (SQL_NUMROWS($result) > 0)
                if ($action == "") $action = "---";
                if ($what   == "")   $what = "---";
 
-               if ($admin == 'Y')
+               if ($admin == "Y")
                {
                        // Is an administrator
                        $userid = _IS_ADMIN;
                }
-               elseif (($mem == 'N') && ($admin == 'N'))
+               elseif (($mem == "N") && ($admin == "N"))
                {
                        // Is a guest
                        $userid = _IS_GUEST;
@@ -122,7 +120,7 @@ if (SQL_NUMROWS($result) > 0)
        }
        OUTPUT_HTML("<TR>
   <TD colspan=\"8\" align=\"center\" class=\"admin_footer\">
-    ".ONLINE_TIMEOUT_IS_1.CREATE_FANCY_TIME($CONFIG['online_timeout']).ONLINE_TIMEOUT_IS_2."
+    ".ONLINE_TIMEOUT_IS_1.CREATE_FANCY_TIME($_CONFIG['online_timeout']).ONLINE_TIMEOUT_IS_2."
   </TD>
 </TR>
 </TABLE>");