Vergleich admin/index.php - 1.6.4 - 1.6.8

  Keine Änderungen   Hinzugefügt   Modifiziert   Entfernt
Zeile 6Zeile 6
 * Website: http://mybb.com
 * License: http://mybb.com/about/license
 *

 
 * Website: http://mybb.com
 * License: http://mybb.com/about/license
 *

 * $Id: index.php 5441 2011-04-16 09:07:17Z jammerx2 $

 * $Id: index.php 5757 2012-03-09 15:11:56Z Tomm $

 */

define("IN_MYBB", 1);

 */

define("IN_MYBB", 1);

Zeile 80Zeile 80
$fail_check = 0;
$post_verify = true;


 
$fail_check = 0;
$post_verify = true;


if($mybb->input['action'] == "logout")
{
	// Delete session from the database
	$db->delete_query("adminsessions", "sid='".$db->escape_string($mybb->cookies['adminsid'])."'");
	my_setcookie("adminsid", "");
	$logged_out = true;
}
elseif($mybb->input['action'] == "unlock")

if($mybb->input['action'] == "unlock")








{
	$user = array();
	if($mybb->input['username'])

{
	$user = array();
	if($mybb->input['username'])

Zeile 104Zeile 97
		$query = $db->simple_select("users", "*", "uid='".intval($mybb->input['uid'])."'");
		$user = $db->fetch_array($query);
		if(!$user['uid'])

 
		$query = $db->simple_select("users", "*", "uid='".intval($mybb->input['uid'])."'");
		$user = $db->fetch_array($query);
		if(!$user['uid'])

		{

		{

			$error[] = $lang->error_invalid_uid;
		}
	}

			$error[] = $lang->error_invalid_uid;
		}
	}

Zeile 121Zeile 114
			$db->update_query("adminoptions", array('loginlockoutexpiry' => 0, 'loginattempts' => 0), "uid='".intval($user['uid'])."'");
			
			admin_redirect("index.php");

 
			$db->update_query("adminoptions", array('loginlockoutexpiry' => 0, 'loginattempts' => 0), "uid='".intval($user['uid'])."'");
			
			admin_redirect("index.php");

		}
		else

		}
		else

		{
			$error[] = $lang->error_invalid_token;
		}

		{
			$error[] = $lang->error_invalid_token;
		}

Zeile 158Zeile 151
			"ip" => $db->escape_string(get_ip()),
			"dateline" => TIME_NOW,
			"lastactive" => TIME_NOW,

 
			"ip" => $db->escape_string(get_ip()),
			"dateline" => TIME_NOW,
			"lastactive" => TIME_NOW,

			"data" => "",

			"data" => serialize(array()),

		);
		$db->insert_query("adminsessions", $admin_session);

 
		);
		$db->insert_query("adminsessions", $admin_session);

 
		$admin_session['data'] = array();

		$db->update_query("adminoptions", array("loginattempts" => 0, "loginlockoutexpiry" => 0), "uid='".intval($mybb->user['uid'])."'", 1);
		my_setcookie("adminsid", $sid);
		my_setcookie('acploginattempts', 0);

		$db->update_query("adminoptions", array("loginattempts" => 0, "loginlockoutexpiry" => 0), "uid='".intval($mybb->user['uid'])."'", 1);
		my_setcookie("adminsid", $sid);
		my_setcookie('acploginattempts', 0);

Zeile 168Zeile 162
	
		$mybb->request_method = "get";
		

	
		$mybb->request_method = "get";
		

		if($mybb->input['module'])

		if(!empty($mybb->input['module']))

		{

 
		{

			admin_redirect("index.php?module=".$mybb->input['module']);






























			// $query_string should contain the module
			$query_string = '?module='.htmlspecialchars($mybb->input['module']);
			
			// Now we look for any paramters passed in $_SERVER['QUERY_STRING']
			if($_SERVER['QUERY_STRING'])
			{
				$qstring = '?'.preg_replace('#adminsid=(.{32})#i', '', $_SERVER['QUERY_STRING']);
				$qstring = str_replace('action=logout', '', $qstring);
				$qstring = preg_replace('#&+#', '&', $qstring);
				$qstring = str_replace('?&', '?', $qstring);
				
				// So what do we do? We know that parameters are devided by ampersands
				// That means we must get to work!
				$parameters = explode('&', $qstring);
				
				// Remove our first member if it's for the module
				if(substr($parameters[0], 0, 8) == '?module=')
				{
					unset($parameters[0]);
				}
				
				foreach($parameters as $key => $param)
				{
					$params = explode("=", $param);
					
					$query_string .= '&'.htmlspecialchars($params[0])."=".htmlspecialchars($params[1]);
				}
			}
		
			admin_redirect("index.php".$query_string);

		}
	}
	else

		}
	}
	else

Zeile 286Zeile 309
				}
			}
		}

 
				}
			}
		}

 
	}
}

if($mybb->input['action'] == "logout" && $mybb->user)
{
	if(verify_post_check($mybb->input['my_post_key']))
	{
		$db->delete_query("adminsessions", "sid='".$db->escape_string($mybb->cookies['adminsid'])."'");
		my_setcookie("adminsid", "");
		$logged_out = true;

	}
}


	}
}


Zeile 379Zeile 412
$page->add_breadcrumb_item($lang->home, "index.php");

// Begin dealing with the modules

 
$page->add_breadcrumb_item($lang->home, "index.php");

// Begin dealing with the modules

 
$is_super_admin = is_super_admin($mybb->user['uid']);


$modules_dir = MYBB_ADMIN_DIR."modules";
$dir = opendir($modules_dir);
while(($module = readdir($dir)) !== false)

$modules_dir = MYBB_ADMIN_DIR."modules";
$dir = opendir($modules_dir);
while(($module = readdir($dir)) !== false)

Zeile 393Zeile 428
		$has_permission = false;
		if(function_exists($module."_admin_permissions"))
		{

 
		$has_permission = false;
		if(function_exists($module."_admin_permissions"))
		{

			if(isset($mybb->admin['permissions'][$module]))

			if(isset($mybb->admin['permissions'][$module]) || $is_super_admin == true)

			{
				$has_permission = true;
			}

			{
				$has_permission = true;
			}

Zeile 421Zeile 456
	}
}


 
	}
}


$plugins->run_hooks_by_ref("admin_tabs", $modules);

$modules = $plugins->run_hooks("admin_tabs", $modules);


closedir($dir);



closedir($dir);