mirror/php-phpbb
1
0
Fork 0
mirror of https://github.com/phpbb/phpbb.git synced 2025-03-13 20:28:44 +01:00
Code Issues Releases Wiki Activity

Fixed problem with users editing posts they did not create

Browse Source 
git-svn-id: file:///svn/phpbb/trunk@423 89ea8834-ac86-4346-8a33-228a782c2dd0
This commit is contained in:
Paul S. Owen 2001-06-04 00:14:26 +00:00
parent 764ec889a9
commit df638e5d2e
1 changed files with 23 additions and 5 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

28
phpBB/posting.php
View File

@ -696,9 +696,27 @@ switch($mode)
if($result = $db->sql_query($sql))
{
$postrow = $db->sql_fetchrowset($result);
$subject = stripslashes($postrow[0]['post_subject']);
$message = stripslashes($postrow[0]['post_text']);
$postrow = $db->sql_fetchrow($result);
if($userdata['user_id'] != $postrow['user_id'] && !$is_auth['auth_mod'])
{
include('includes/page_header.'.$phpEx);
$msg = "Sorry but you can only edit your own posts.";
$template->set_filenames(array(
"reg_header" => "error_body.tpl"
));
$template->assign_vars(array(
"ERROR_MESSAGE" => $msg
));
$template->pparse("reg_header");
include('includes/page_tail.'.$phpEx);
}
$subject = stripslashes($postrow['post_subject']);
$message = stripslashes($postrow['post_text']);
if(eregi("\[addsig]$", $message))
{
$attach_sig = TRUE;
@ -718,14 +736,14 @@ switch($mode)
$message = preg_replace('#</textarea>#si', '&lt;/TEXTAREA&gt;', $message);
// is_first_post needs functionality!
if($postrow[0]['topic_notify'] && $is_first_post)
if($postrow['topic_notify'] && $is_first_post)
{
$notify = TRUE;
}
if($is_first_post)
{
$subject = stripslashes($postrow[0]['topic_title']);
$subject = stripslashes($postrow['topic_title']);
}
}
else