phpBB.de

Code: Alles auswählen

				$entry_id = intval($HTTP_GET_VARS[id]);

				$row = get_entry('entry', $entry_id);

Code: Alles auswählen

				if ( ($mode == 'edit' && ($userdata['user_id'] != $row['user_id'])) && (!$userdata['user_level'] >= ADMIN) )
				{
				        message_die(GENERAL_MESSAGE, $lang['Not_authorized']);
				}

Code: Alles auswählen

		case 'delete':

Code: Alles auswählen

			$row = get_entry('entry', $entry_id);
			if ( ($mode == 'delete' && ($userdata['user_id'] != $row['user_id'])) && (!$userdata['user_level'] >= ADMIN) )
			{
			        message_die(GENERAL_MESSAGE, $lang['Not_authorized']);
			}

Code: Alles auswählen

                	message_die(GENERAL_ERROR, 'Could not query entries.', '', __LINE__, __FILE__, $sql);
        }
        while( $row = $db->sql_fetchrow($result) )
        {

Code: Alles auswählen

                $entry_poster = $row['user_id'];

Code: Alles auswählen

                $template->assign_block_vars('entries', array(

Code: Alles auswählen

                $auth_edit = $userdata['user_level'] == $database_config['allow_edit'] || $userdata['user_level'] == ADMIN || ($database_config['allow_edit'] == all && $userdata['user_id'] != ANONYMOUS) && ($database_config['allow_edit'] == all && $userdata['user_id'] == $entry_poster);