Vergleich admin/index.php - 1.6.5 - 1.6.10

  Keine Änderungen   Hinzugefügt   Modifiziert   Entfernt
Zeile 6Zeile 6
 * Website: http://mybb.com
 * License: http://mybb.com/about/license
 *

 
 * Website: http://mybb.com
 * License: http://mybb.com/about/license
 *

 * $Id: index.php 5621 2011-09-26 18:35:54Z ralgith $

 * $Id$

 */

define("IN_MYBB", 1);

 */

define("IN_MYBB", 1);

Zeile 62Zeile 62
unset($user);

// Load Admin CP style

 
unset($user);

// Load Admin CP style

if(!$cp_style)

if(!isset($cp_style))

{
	if(!empty($mybb->settings['cpstyle']) && file_exists(MYBB_ADMIN_DIR."/styles/".$mybb->settings['cpstyle']."/main.css"))
	{

{
	if(!empty($mybb->settings['cpstyle']) && file_exists(MYBB_ADMIN_DIR."/styles/".$mybb->settings['cpstyle']."/main.css"))
	{

Zeile 80Zeile 80
$fail_check = 0;
$post_verify = true;


 
$fail_check = 0;
$post_verify = true;


if($mybb->input['action'] == "logout")

foreach(array('action', 'do', 'module') as $input)

{

 
{

	// Delete session from the database
	$db->delete_query("adminsessions", "sid='".$db->escape_string($mybb->cookies['adminsid'])."'");
	my_setcookie("adminsid", "");
	$logged_out = true;

	if(!isset($mybb->input[$input]))
	{
		$mybb->input[$input] = '';
	}

}

 
}

elseif($mybb->input['action'] == "unlock")



if($mybb->input['action'] == "unlock")

{
	$user = array();
	if($mybb->input['username'])

{
	$user = array();
	if($mybb->input['username'])

Zeile 158Zeile 159
			"ip" => $db->escape_string(get_ip()),
			"dateline" => TIME_NOW,
			"lastactive" => TIME_NOW,

 
			"ip" => $db->escape_string(get_ip()),
			"dateline" => TIME_NOW,
			"lastactive" => TIME_NOW,

			"data" => "",

			"data" => serialize(array()),

		);
		$db->insert_query("adminsessions", $admin_session);

 
		);
		$db->insert_query("adminsessions", $admin_session);

 
		$admin_session['data'] = array();

		$db->update_query("adminoptions", array("loginattempts" => 0, "loginlockoutexpiry" => 0), "uid='".intval($mybb->user['uid'])."'", 1);
		my_setcookie("adminsid", $sid);
		my_setcookie('acploginattempts', 0);

		$db->update_query("adminoptions", array("loginattempts" => 0, "loginlockoutexpiry" => 0), "uid='".intval($mybb->user['uid'])."'", 1);
		my_setcookie("adminsid", $sid);
		my_setcookie('acploginattempts', 0);

Zeile 171Zeile 173
		if(!empty($mybb->input['module']))
		{
			// $query_string should contain the module

 
		if(!empty($mybb->input['module']))
		{
			// $query_string should contain the module

			$query_string = '?module='.htmlspecialchars($mybb->input['module']);

			$query_string = '?module='.htmlspecialchars_uni($mybb->input['module']);

			
			// Now we look for any paramters passed in $_SERVER['QUERY_STRING']
			if($_SERVER['QUERY_STRING'])

			
			// Now we look for any paramters passed in $_SERVER['QUERY_STRING']
			if($_SERVER['QUERY_STRING'])

Zeile 195Zeile 197
				{
					$params = explode("=", $param);
					

				{
					$params = explode("=", $param);
					

					$query_string .= '&'.htmlspecialchars($params[0])."=".htmlspecialchars($params[1]);

					$query_string .= '&'.htmlspecialchars_uni($params[0])."=".htmlspecialchars_uni($params[1]);

				}
			}
		

				}
			}

Zeile 262Zeile 264
		// No matching admin session found - show message on login screen
		if(!$admin_session['sid'])
		{

 
		// No matching admin session found - show message on login screen
		if(!$admin_session['sid'])
		{

			$login_message = $lang->invalid_admin_session;

			$login_message = $lang->error_invalid_admin_session;

		}
		else
		{

		}
		else
		{

Zeile 313Zeile 315
						unset($mybb->user);
					}
				}

 
						unset($mybb->user);
					}
				}

			}
		}
	}
}

if(!$mybb->user['usergroup'])











			}
		}
	}
}

if($mybb->input['action'] == "logout" && $mybb->user)
{
	if(verify_post_check($mybb->input['my_post_key']))
	{
		$db->delete_query("adminsessions", "sid='".$db->escape_string($mybb->cookies['adminsid'])."'");
		my_unsetcookie('adminsid');
		$logged_out = true;
	}
}

if(!isset($mybb->user['usergroup']))

{
	$mybbgroups = 1;

 
{
	$mybbgroups = 1;

}

}

else

 
else

{

{

	$mybbgroups = $mybb->user['usergroup'].",".$mybb->user['additionalgroups'];
}
$mybb->usergroup = usergroup_permissions($mybbgroups);

if($mybb->usergroup['cancp'] != 1 || !$mybb->user['uid'])
{

 
	$mybbgroups = $mybb->user['usergroup'].",".$mybb->user['additionalgroups'];
}
$mybb->usergroup = usergroup_permissions($mybbgroups);

if($mybb->usergroup['cancp'] != 1 || !$mybb->user['uid'])
{

	$db->delete_query("adminsessions", "uid='".intval($mybb->user['uid'])."'");






	$uid = 0;
	if(isset($mybb->user['uid']))
	{
		$uid = intval($mybb->user['uid']);
	}
	$db->delete_query("adminsessions", "uid = '{$uid}'");

	unset($mybb->user);

 
	unset($mybb->user);

	my_setcookie("adminsid", "");

	my_unsetcookie('adminsid');

}

if($mybb->user['uid'])

}

if($mybb->user['uid'])

Zeile 342Zeile 359
	
	if(!empty($admin_options['cpstyle']) && file_exists(MYBB_ADMIN_DIR."/styles/{$admin_options['cpstyle']}/main.css"))
	{

 
	
	if(!empty($admin_options['cpstyle']) && file_exists(MYBB_ADMIN_DIR."/styles/{$admin_options['cpstyle']}/main.css"))
	{

		$page->style = $cp_style = $admin_options['cpstyle'];

		$cp_style = $admin_options['cpstyle'];

	}

	// Update the session information in the DB

	}

	// Update the session information in the DB

Zeile 383Zeile 400
$page->style = $cp_style;

// Do not have a valid Admin user, throw back to login page.

 
$page->style = $cp_style;

// Do not have a valid Admin user, throw back to login page.

if(!$mybb->user['uid'] || $logged_out == true)

if(!isset($mybb->user['uid']) || $logged_out == true)

{	
	if($logged_out == true)
	{

{	
	if($logged_out == true)
	{

Zeile 396Zeile 413
	else
	{
		// If we have this error while retreiving it from an AJAX request, then send back a nice error

 
	else
	{
		// If we have this error while retreiving it from an AJAX request, then send back a nice error

		if($mybb->input['ajax'] == 1)

		if(isset($mybb->input['ajax']) && $mybb->input['ajax'] == 1)

		{
			echo "<error>login</error>";
			die;

		{
			echo "<error>login</error>";
			die;

Zeile 408Zeile 425
$page->add_breadcrumb_item($lang->home, "index.php");

// Begin dealing with the modules

 
$page->add_breadcrumb_item($lang->home, "index.php");

// Begin dealing with the modules

 
$is_super_admin = is_super_admin($mybb->user['uid']);


$modules_dir = MYBB_ADMIN_DIR."modules";
$dir = opendir($modules_dir);
while(($module = readdir($dir)) !== false)

$modules_dir = MYBB_ADMIN_DIR."modules";
$dir = opendir($modules_dir);
while(($module = readdir($dir)) !== false)

Zeile 422Zeile 441
		$has_permission = false;
		if(function_exists($module."_admin_permissions"))
		{

 
		$has_permission = false;
		if(function_exists($module."_admin_permissions"))
		{

			if(isset($mybb->admin['permissions'][$module]))

			if(isset($mybb->admin['permissions'][$module]) || $is_super_admin == true)

			{
				$has_permission = true;
			}

			{
				$has_permission = true;
			}

Zeile 461Zeile 480
else
{
	$current_module = explode("-", $mybb->input['module'], 2);

 
else
{
	$current_module = explode("-", $mybb->input['module'], 2);

 
}

if(!isset($current_module[1]))
{
	$current_module[1] = 'home';

}

if($mybb->input['module'] && isset($modules[$current_module[0]]))

}

if($mybb->input['module'] && isset($modules[$current_module[0]]))