Vergleich admin/index.php - 1.6.2 - 1.6.10

  Keine Änderungen   Hinzugefügt   Modifiziert   Entfernt
Zeile 6Zeile 6
 * Website: http://mybb.com
* License: http://mybb.com/about/license
*

 * Website: http://mybb.com
* License: http://mybb.com/about/license
*

 * $Id: index.php 5156 2010-07-31 22:58:56Z RyanGordon $

 * $Id$

 */

define("IN_MYBB", 1);

 */

define("IN_MYBB", 1);

Zeile 62Zeile 62
unset($user);

// Load Admin CP style

unset($user);

// Load Admin CP style

if(!$cp_style)

if(!isset($cp_style))

{
if(!empty($mybb->settings['cpstyle']) && file_exists(MYBB_ADMIN_DIR."/styles/".$mybb->settings['cpstyle']."/main.css"))
{

{
if(!empty($mybb->settings['cpstyle']) && file_exists(MYBB_ADMIN_DIR."/styles/".$mybb->settings['cpstyle']."/main.css"))
{

Zeile 80Zeile 80
$fail_check = 0;
$post_verify = true;


$fail_check = 0;
$post_verify = true;


if($mybb->input['action'] == "logout")

foreach(array('action', 'do', 'module') as $input)

{

{

	// Delete session from the database
$db->delete_query("adminsessions", "sid='".$db->escape_string($mybb->cookies['adminsid'])."'");
my_setcookie("adminsid", "");
$logged_out = true;

	if(!isset($mybb->input[$input]))
{
$mybb->input[$input] = '';
}

}

}

elseif($mybb->input['action'] == "unlock")



if($mybb->input['action'] == "unlock")

{
$user = array();
if($mybb->input['username'])

{
$user = array();
if($mybb->input['username'])

Zeile 158Zeile 159
			"ip" => $db->escape_string(get_ip()),
"dateline" => TIME_NOW,
"lastactive" => TIME_NOW,

			"ip" => $db->escape_string(get_ip()),
"dateline" => TIME_NOW,
"lastactive" => TIME_NOW,

			"data" => "",

			"data" => serialize(array()),

		);
$db->insert_query("adminsessions", $admin_session);

		);
$db->insert_query("adminsessions", $admin_session);

 
		$admin_session['data'] = array();

		$db->update_query("adminoptions", array("loginattempts" => 0, "loginlockoutexpiry" => 0), "uid='".intval($mybb->user['uid'])."'", 1);
my_setcookie("adminsid", $sid);
my_setcookie('acploginattempts', 0);
$post_verify = false;

$mybb->request_method = "get";

		$db->update_query("adminoptions", array("loginattempts" => 0, "loginlockoutexpiry" => 0), "uid='".intval($mybb->user['uid'])."'", 1);
my_setcookie("adminsid", $sid);
my_setcookie('acploginattempts', 0);
$post_verify = false;

$mybb->request_method = "get";

 
		
if(!empty($mybb->input['module']))
{
// $query_string should contain the module
$query_string = '?module='.htmlspecialchars_uni($mybb->input['module']);

// Now we look for any paramters passed in $_SERVER['QUERY_STRING']
if($_SERVER['QUERY_STRING'])
{
$qstring = '?'.preg_replace('#adminsid=(.{32})#i', '', $_SERVER['QUERY_STRING']);
$qstring = str_replace('action=logout', '', $qstring);
$qstring = preg_replace('#&+#', '&', $qstring);
$qstring = str_replace('?&', '?', $qstring);

// So what do we do? We know that parameters are devided by ampersands
// That means we must get to work!
$parameters = explode('&', $qstring);

// Remove our first member if it's for the module
if(substr($parameters[0], 0, 8) == '?module=')
{
unset($parameters[0]);
}

foreach($parameters as $key => $param)
{
$params = explode("=", $param);

$query_string .= '&'.htmlspecialchars_uni($params[0])."=".htmlspecialchars_uni($params[1]);
}
}

admin_redirect("index.php".$query_string);
}

	}
else
{

	}
else
{

Zeile 210Zeile 246
		}

$fail_check = 1;

		}

$fail_check = 1;

	}
}

	}
}

else
{
// No admin session - show message on the login screen

else
{
// No admin session - show message on the login screen

Zeile 228Zeile 264
		// No matching admin session found - show message on login screen
if(!$admin_session['sid'])
{

		// No matching admin session found - show message on login screen
if(!$admin_session['sid'])
{

			$login_message = $lang->invalid_admin_session;

			$login_message = $lang->error_invalid_admin_session;

		}
else
{

		}
else
{

Zeile 284Zeile 320
	}
}


	}
}


if(!$mybb->user['usergroup'])

if($mybb->input['action'] == "logout" && $mybb->user)

{

{

	$mybbgroups = 1;











	if(verify_post_check($mybb->input['my_post_key']))
{
$db->delete_query("adminsessions", "sid='".$db->escape_string($mybb->cookies['adminsid'])."'");
my_unsetcookie('adminsid');
$logged_out = true;
}
}

if(!isset($mybb->user['usergroup']))
{
$mybbgroups = 1;

}
else
{

}
else
{

Zeile 295Zeile 341
$mybb->usergroup = usergroup_permissions($mybbgroups);

if($mybb->usergroup['cancp'] != 1 || !$mybb->user['uid'])

$mybb->usergroup = usergroup_permissions($mybbgroups);

if($mybb->usergroup['cancp'] != 1 || !$mybb->user['uid'])

{
$db->delete_query("adminsessions", "uid='".intval($mybb->user['uid'])."'");
unset($mybb->user);
my_setcookie("adminsid", "");






{
$uid = 0;
if(isset($mybb->user['uid']))
{
$uid = intval($mybb->user['uid']);
}
$db->delete_query("adminsessions", "uid = '{$uid}'");
unset($mybb->user);
my_unsetcookie('adminsid');

}

if($mybb->user['uid'])

}

if($mybb->user['uid'])

Zeile 307Zeile 358
	$admin_options = $db->fetch_array($query);

if(!empty($admin_options['cpstyle']) && file_exists(MYBB_ADMIN_DIR."/styles/{$admin_options['cpstyle']}/main.css"))

	$admin_options = $db->fetch_array($query);

if(!empty($admin_options['cpstyle']) && file_exists(MYBB_ADMIN_DIR."/styles/{$admin_options['cpstyle']}/main.css"))

	{
$page->style = $cp_style = $admin_options['cpstyle'];
}


	{
$cp_style = $admin_options['cpstyle'];
}


	// Update the session information in the DB
if($admin_session['sid'])
{

	// Update the session information in the DB
if($admin_session['sid'])
{

Zeile 319Zeile 370

// Fetch administrator permissions
$mybb->admin['permissions'] = get_admin_permissions($mybb->user['uid']);


// Fetch administrator permissions
$mybb->admin['permissions'] = get_admin_permissions($mybb->user['uid']);

}


}


// Include the layout generation class overrides for this style
if(file_exists(MYBB_ADMIN_DIR."/styles/{$cp_style}/style.php"))
{

// Include the layout generation class overrides for this style
if(file_exists(MYBB_ADMIN_DIR."/styles/{$cp_style}/style.php"))
{

Zeile 340Zeile 391
{
// Style does not have this layout generation class, create it
if(!class_exists($style_name))

{
// Style does not have this layout generation class, create it
if(!class_exists($style_name))

	{

	{

		eval("class {$style_name} extends {$default_name} { }");

		eval("class {$style_name} extends {$default_name} { }");

	}
}


	}
}


$page = new Page;
$page->style = $cp_style;

// Do not have a valid Admin user, throw back to login page.

$page = new Page;
$page->style = $cp_style;

// Do not have a valid Admin user, throw back to login page.

if(!$mybb->user['uid'] || $logged_out == true)

if(!isset($mybb->user['uid']) || $logged_out == true)

{	
if($logged_out == true)
{

{	
if($logged_out == true)
{

Zeile 362Zeile 413
	else
{
// If we have this error while retreiving it from an AJAX request, then send back a nice error

	else
{
// If we have this error while retreiving it from an AJAX request, then send back a nice error

		if($mybb->input['ajax'] == 1)

		if(isset($mybb->input['ajax']) && $mybb->input['ajax'] == 1)

		{
echo "<error>login</error>";
die;

		{
echo "<error>login</error>";
die;

Zeile 370Zeile 421
		$page->show_login($login_message, "error");
}
}

		$page->show_login($login_message, "error");
}
}





$page->add_breadcrumb_item($lang->home, "index.php");

$page->add_breadcrumb_item($lang->home, "index.php");





// Begin dealing with the modules

// Begin dealing with the modules

 
$is_super_admin = is_super_admin($mybb->user['uid']);


$modules_dir = MYBB_ADMIN_DIR."modules";
$dir = opendir($modules_dir);
while(($module = readdir($dir)) !== false)

$modules_dir = MYBB_ADMIN_DIR."modules";
$dir = opendir($modules_dir);
while(($module = readdir($dir)) !== false)

Zeile 388Zeile 441
		$has_permission = false;
if(function_exists($module."_admin_permissions"))
{

		$has_permission = false;
if(function_exists($module."_admin_permissions"))
{

			if(isset($mybb->admin['permissions'][$module]))

			if(isset($mybb->admin['permissions'][$module]) || $is_super_admin == true)

			{
$has_permission = true;
}

			{
$has_permission = true;
}

Zeile 416Zeile 469
	}
}


	}
}


$plugins->run_hooks_by_ref("admin_tabs", $modules);

$modules = $plugins->run_hooks("admin_tabs", $modules);


closedir($dir);



closedir($dir);


Zeile 427Zeile 480
else
{
$current_module = explode("-", $mybb->input['module'], 2);

else
{
$current_module = explode("-", $mybb->input['module'], 2);

 
}

if(!isset($current_module[1]))
{
$current_module[1] = 'home';

}

if($mybb->input['module'] && isset($modules[$current_module[0]]))

}

if($mybb->input['module'] && isset($modules[$current_module[0]]))