mirror of
https://github.com/phpbb/phpbb.git
synced 2025-06-06 06:25:04 +02:00
Add acl, remove user_level ... this needs fixing to ensure user can admin if board is disabled
git-svn-id: file:///svn/phpbb/trunk@2699 89ea8834-ac86-4346-8a33-228a782c2dd0
This commit is contained in:
parent
183718f25f
commit
bab8906f13
@ -34,6 +34,9 @@ include($phpbb_root_path . 'common.'.$phpEx);
|
||||
// Set page ID for session management
|
||||
//
|
||||
$userdata = $session->start();
|
||||
$session->configure($userdata);
|
||||
|
||||
$acl = new auth('list', $userdata);
|
||||
//
|
||||
// End session management
|
||||
//
|
||||
@ -41,7 +44,6 @@ $userdata = $session->start();
|
||||
//
|
||||
// Configure style, language, etc.
|
||||
//
|
||||
$session->configure($userdata);
|
||||
|
||||
$header_location = ( @preg_match('/Microsoft|WebSTAR|Xitami/', getenv('SERVER_SOFTWARE')) ) ? 'Refresh: 0; URL=' : 'Location: ';
|
||||
|
||||
@ -57,7 +59,7 @@ if ( isset($HTTP_POST_VARS['login']) || isset($HTTP_GET_VARS['login']) || isset(
|
||||
$username = ( isset($HTTP_POST_VARS['username']) ) ? $HTTP_POST_VARS['username'] : '';
|
||||
$password = ( isset($HTTP_POST_VARS['password']) ) ? $HTTP_POST_VARS['password'] : '';
|
||||
|
||||
$sql = "SELECT user_id, username, user_email, user_password, user_active, user_level
|
||||
$sql = "SELECT user_id, username, user_email, user_password, user_active
|
||||
FROM " . USERS_TABLE . "
|
||||
WHERE username = '" . str_replace("\'", "''", $username) . "'";
|
||||
$result = $db->sql_query($sql);
|
||||
|
Loading…
x
Reference in New Issue
Block a user