|
@@ -5,7 +5,7 @@ discard block |
|
|
block discarded – undo |
5
|
5
|
if ($result_of_query->num_rows > 0) { |
6
|
6
|
$user = $result_of_query->fetch_object(); |
7
|
7
|
|
8
|
|
- if($_SESSION['user_level'] >= $user->user_level) { |
|
8
|
+ if($_SESSION['user_level'] >= $user->user_level) { |
9
|
9
|
|
10
|
10
|
if (isset($_POST["staffName"])) { |
11
|
11
|
if (formtoken::validateToken($_POST)) { |
|
@@ -14,18 +14,18 @@ discard block |
|
|
block discarded – undo |
14
|
14
|
$staffPID = $_POST['staffPID']; |
15
|
15
|
$permissions = include 'config/permissions.php'; |
16
|
16
|
if (isset($_POST['ban'])) { |
17
|
|
- if ($user->user_level == 5 && $_SESSION['user_level'] < 5) { $staffRank = 5; } else { $staffRank = 0; } |
18
|
|
- } else { |
19
|
|
- if ($_POST['staffRank'] > $_SESSION['user_level'] || $user->user_level > $_SESSION['user_level']) { $staffRank = $user->user_level; } else { $staffRank = $_POST['staffRank']; } |
20
|
|
- } |
21
|
|
- $userPerms = json_encode($permissions[$staffRank]); |
|
17
|
+ if ($user->user_level == 5 && $_SESSION['user_level'] < 5) { $staffRank = 5; } else { $staffRank = 0; } |
|
18
|
+ } else { |
|
19
|
+ if ($_POST['staffRank'] > $_SESSION['user_level'] || $user->user_level > $_SESSION['user_level']) { $staffRank = $user->user_level; } else { $staffRank = $_POST['staffRank']; } |
|
20
|
+ } |
|
21
|
+ $userPerms = json_encode($permissions[$staffRank]); |
22
|
22
|
|
23
|
23
|
$sql = "UPDATE `users` SET `user_name`='" . $staffName . "',`user_email`='" . $staffEmail . "',`playerid`='" . $staffPID . "',`user_level`='" . $staffRank . "', `permissions`='" . $userPerms . "' WHERE `user_id` ='" . $uId . "';"; |
24
|
24
|
$result_of_query = $db_connection->query($sql); |
25
|
|
- if ($user->user_level != $_POST['staffRank']) logAction($_SESSION['user_name'], $lang['edited'] . " " . $_POST['staffName'] . "\'s " . $lang['staff'] . " " . $lang['rank'] . " " . $lang['from'] . " (" . $settings['ranks'][$user->user_level] . ") " . $lang['to'] . " (" . $settings['ranks'][$_POST['staffRank']] . ")", 2); |
26
|
|
- if ($user->user_name != $_POST['staffName']) logAction($_SESSION['user_name'], $lang['edited'] . " " . $user->user_name . "\'s " . strtolower($lang['name']) . " " . $lang['to'] . " " . $_POST['staffName'] . "", 2); |
27
|
|
- if ($user->playerid != $_POST['staffPID']) logAction($_SESSION['user_name'], $lang['edited'] . " " . $_POST['staffName'] . "\'s " . $lang['player'] . " " . $lang['id'] . " " . $lang['from'] . " (" . $user->playerid . ") " . $lang['to'] . " (" . $_POST['staffPID'] . ")", 2); |
28
|
|
- if ($user->user_email != $_POST['staffEmail']) logAction($_SESSION['user_name'], $lang['edited'] . " " . $user->user_name . "\'s " . strtolower($lang['email']) . " " . $lang['from'] . " (" . $user->user_email . ") " . $lang['to'] . " (" . $_POST['staffEmail'] . ")", 2); |
|
25
|
+ if ($user->user_level != $_POST['staffRank']) logAction($_SESSION['user_name'], $lang['edited'] . " " . $_POST['staffName'] . "\'s " . $lang['staff'] . " " . $lang['rank'] . " " . $lang['from'] . " (" . $settings['ranks'][$user->user_level] . ") " . $lang['to'] . " (" . $settings['ranks'][$_POST['staffRank']] . ")", 2); |
|
26
|
+ if ($user->user_name != $_POST['staffName']) logAction($_SESSION['user_name'], $lang['edited'] . " " . $user->user_name . "\'s " . strtolower($lang['name']) . " " . $lang['to'] . " " . $_POST['staffName'] . "", 2); |
|
27
|
+ if ($user->playerid != $_POST['staffPID']) logAction($_SESSION['user_name'], $lang['edited'] . " " . $_POST['staffName'] . "\'s " . $lang['player'] . " " . $lang['id'] . " " . $lang['from'] . " (" . $user->playerid . ") " . $lang['to'] . " (" . $_POST['staffPID'] . ")", 2); |
|
28
|
+ if ($user->user_email != $_POST['staffEmail']) logAction($_SESSION['user_name'], $lang['edited'] . " " . $user->user_name . "\'s " . strtolower($lang['email']) . " " . $lang['from'] . " (" . $user->user_email . ") " . $lang['to'] . " (" . $_POST['staffEmail'] . ")", 2); |
29
|
29
|
|
30
|
30
|
message(ucfirst($_POST['staffName']) . ' ' . $lang['updated']); |
31
|
31
|
} else message($lang['expired']); |
|
@@ -104,12 +104,12 @@ discard block |
|
|
block discarded – undo |
104
|
104
|
echo "<center>"; |
105
|
105
|
echo "<h4>" . $lang['name'] . ": <input id='staffName' class='form-control' name='staffName' type='text' value='" . $user->user_name . "'></h4>"; |
106
|
106
|
echo "<h4>" . $lang['emailAdd'] . ": <input id='staffEmail' class='form-control' name='staffEmail' type='text' value='" . $user->user_email . "'></h4>"; |
107
|
|
- echo "<h4>" . $lang['rank'] . ": "; |
108
|
|
- echo "<select id='staffRank' class='form-control' name='staffRank'>"; |
|
107
|
+ echo "<h4>" . $lang['rank'] . ": "; |
|
108
|
+ echo "<select id='staffRank' class='form-control' name='staffRank'>"; |
109
|
109
|
|
110
|
|
- for ($lvl = 0; $lvl <= $_SESSION['user_level']; $lvl++) { |
111
|
|
- echo '<option value="' . $lvl . '"' . select($lvl, $user->user_level) . '>' . $settings['ranks'][$lvl] . '</option>'; |
112
|
|
- } |
|
110
|
+ for ($lvl = 0; $lvl <= $_SESSION['user_level']; $lvl++) { |
|
111
|
+ echo '<option value="' . $lvl . '"' . select($lvl, $user->user_level) . '>' . $settings['ranks'][$lvl] . '</option>'; |
|
112
|
+ } |
113
|
113
|
|
114
|
114
|
echo "</select></h4>"; |
115
|
115
|
echo "<h4>" . $lang['playerID'] . ": <input id='staffPID' class='form-control' name='staffPID' type='text' value='" . $user->playerid . "'></h4>"; |
|
@@ -1104,7 +1104,7 @@ discard block |
|
|
block discarded – undo |
1104
|
1104
|
<?php } ?> |
1105
|
1105
|
<?php |
1106
|
1106
|
} else { |
1107
|
|
- echo '<h3>' . errorMessage(5, $lang) . '</h3>'; |
|
1107
|
+ echo '<h3>' . errorMessage(5, $lang) . '</h3>'; |
1108
|
1108
|
} |
1109
|
1109
|
|
1110
|
1110
|
} else { |