@@ -5,7 +5,7 @@ discard block |
||
5 | 5 | if ($result_of_query->num_rows > 0) { |
6 | 6 | $user = $result_of_query->fetch_object(); |
7 | 7 | |
8 | - if($_SESSION['user_level'] >= $user->user_level) { |
|
8 | + if($_SESSION['user_level'] >= $user->user_level) { |
|
9 | 9 | |
10 | 10 | if (isset($_POST["staffName"])) { |
11 | 11 | if (formtoken::validateToken($_POST)) { |
@@ -14,18 +14,18 @@ discard block |
||
14 | 14 | $staffPID = $_POST['staffPID']; |
15 | 15 | $permissions = include 'config/permissions.php'; |
16 | 16 | if (isset($_POST['ban'])) { |
17 | - if ($user->user_level == 5 && $_SESSION['user_level'] < 5) { $staffRank = 5; } else { $staffRank = 0; } |
|
18 | - } else { |
|
19 | - if ($_POST['staffRank'] > $_SESSION['user_level'] || $user->user_level > $_SESSION['user_level']) { $staffRank = $user->user_level; } else { $staffRank = $_POST['staffRank']; } |
|
20 | - } |
|
21 | - $userPerms = json_encode($permissions[$staffRank]); |
|
17 | + if ($user->user_level == 5 && $_SESSION['user_level'] < 5) { $staffRank = 5; } else { $staffRank = 0; } |
|
18 | + } else { |
|
19 | + if ($_POST['staffRank'] > $_SESSION['user_level'] || $user->user_level > $_SESSION['user_level']) { $staffRank = $user->user_level; } else { $staffRank = $_POST['staffRank']; } |
|
20 | + } |
|
21 | + $userPerms = json_encode($permissions[$staffRank]); |
|
22 | 22 | |
23 | 23 | $sql = "UPDATE `users` SET `user_name`='" . $staffName . "',`user_email`='" . $staffEmail . "',`playerid`='" . $staffPID . "',`user_level`='" . $staffRank . "', `permissions`='" . $userPerms . "' WHERE `user_id` ='" . $uId . "';"; |
24 | 24 | $result_of_query = $db_connection->query($sql); |
25 | - if ($user->user_level != $_POST['staffRank']) logAction($_SESSION['user_name'], $lang['edited'] . " " . $_POST['staffName'] . "\'s " . $lang['staff'] . " " . $lang['rank'] . " " . $lang['from'] . " (" . $settings['ranks'][$user->user_level] . ") " . $lang['to'] . " (" . $settings['ranks'][$_POST['staffRank']] . ")", 2); |
|
26 | - if ($user->user_name != $_POST['staffName']) logAction($_SESSION['user_name'], $lang['edited'] . " " . $user->user_name . "\'s " . strtolower($lang['name']) . " " . $lang['to'] . " " . $_POST['staffName'] . "", 2); |
|
27 | - if ($user->playerid != $_POST['staffPID']) logAction($_SESSION['user_name'], $lang['edited'] . " " . $_POST['staffName'] . "\'s " . $lang['player'] . " " . $lang['id'] . " " . $lang['from'] . " (" . $user->playerid . ") " . $lang['to'] . " (" . $_POST['staffPID'] . ")", 2); |
|
28 | - if ($user->user_email != $_POST['staffEmail']) logAction($_SESSION['user_name'], $lang['edited'] . " " . $user->user_name . "\'s " . strtolower($lang['email']) . " " . $lang['from'] . " (" . $user->user_email . ") " . $lang['to'] . " (" . $_POST['staffEmail'] . ")", 2); |
|
25 | + if ($user->user_level != $_POST['staffRank']) logAction($_SESSION['user_name'], $lang['edited'] . " " . $_POST['staffName'] . "\'s " . $lang['staff'] . " " . $lang['rank'] . " " . $lang['from'] . " (" . $settings['ranks'][$user->user_level] . ") " . $lang['to'] . " (" . $settings['ranks'][$_POST['staffRank']] . ")", 2); |
|
26 | + if ($user->user_name != $_POST['staffName']) logAction($_SESSION['user_name'], $lang['edited'] . " " . $user->user_name . "\'s " . strtolower($lang['name']) . " " . $lang['to'] . " " . $_POST['staffName'] . "", 2); |
|
27 | + if ($user->playerid != $_POST['staffPID']) logAction($_SESSION['user_name'], $lang['edited'] . " " . $_POST['staffName'] . "\'s " . $lang['player'] . " " . $lang['id'] . " " . $lang['from'] . " (" . $user->playerid . ") " . $lang['to'] . " (" . $_POST['staffPID'] . ")", 2); |
|
28 | + if ($user->user_email != $_POST['staffEmail']) logAction($_SESSION['user_name'], $lang['edited'] . " " . $user->user_name . "\'s " . strtolower($lang['email']) . " " . $lang['from'] . " (" . $user->user_email . ") " . $lang['to'] . " (" . $_POST['staffEmail'] . ")", 2); |
|
29 | 29 | |
30 | 30 | message(ucfirst($_POST['staffName']) . ' ' . $lang['updated']); |
31 | 31 | } else message($lang['expired']); |
@@ -104,12 +104,12 @@ discard block |
||
104 | 104 | echo "<center>"; |
105 | 105 | echo "<h4>" . $lang['name'] . ": <input id='staffName' class='form-control' name='staffName' type='text' value='" . $user->user_name . "'></h4>"; |
106 | 106 | echo "<h4>" . $lang['emailAdd'] . ": <input id='staffEmail' class='form-control' name='staffEmail' type='text' value='" . $user->user_email . "'></h4>"; |
107 | - echo "<h4>" . $lang['rank'] . ": "; |
|
108 | - echo "<select id='staffRank' class='form-control' name='staffRank'>"; |
|
107 | + echo "<h4>" . $lang['rank'] . ": "; |
|
108 | + echo "<select id='staffRank' class='form-control' name='staffRank'>"; |
|
109 | 109 | |
110 | - for ($lvl = 0; $lvl <= $_SESSION['user_level']; $lvl++) { |
|
111 | - echo '<option value="' . $lvl . '"' . select($lvl, $user->user_level) . '>' . $settings['ranks'][$lvl] . '</option>'; |
|
112 | - } |
|
110 | + for ($lvl = 0; $lvl <= $_SESSION['user_level']; $lvl++) { |
|
111 | + echo '<option value="' . $lvl . '"' . select($lvl, $user->user_level) . '>' . $settings['ranks'][$lvl] . '</option>'; |
|
112 | + } |
|
113 | 113 | |
114 | 114 | echo "</select></h4>"; |
115 | 115 | echo "<h4>" . $lang['playerID'] . ": <input id='staffPID' class='form-control' name='staffPID' type='text' value='" . $user->playerid . "'></h4>"; |
@@ -1104,7 +1104,7 @@ discard block |
||
1104 | 1104 | <?php } ?> |
1105 | 1105 | <?php |
1106 | 1106 | } else { |
1107 | - echo '<h3>' . errorMessage(5, $lang) . '</h3>'; |
|
1107 | + echo '<h3>' . errorMessage(5, $lang) . '</h3>'; |
|
1108 | 1108 | } |
1109 | 1109 | |
1110 | 1110 | } else { |
@@ -5,7 +5,7 @@ discard block |
||
5 | 5 | if ($result_of_query->num_rows > 0) { |
6 | 6 | $user = $result_of_query->fetch_object(); |
7 | 7 | |
8 | - if($_SESSION['user_level'] >= $user->user_level) { |
|
8 | + if ($_SESSION['user_level'] >= $user->user_level) { |
|
9 | 9 | |
10 | 10 | if (isset($_POST["staffName"])) { |
11 | 11 | if (formtoken::validateToken($_POST)) { |
@@ -134,11 +134,11 @@ discard block |
||
134 | 134 | </div> |
135 | 135 | <div class="panel-body"> |
136 | 136 | <?php echo "<form method='post' action='" . $settings['url'] . 'editStaff/' . $uId . "' name='permsUpdate'>"; |
137 | - $permissions = json_decode($user->permissions,true); |
|
137 | + $permissions = json_decode($user->permissions, true); |
|
138 | 138 | ?> |
139 | 139 | <div class="col-md-4" style='padding-right: 0px; padding-left: 0px;'> |
140 | 140 | <div class="panel-heading"> |
141 | - <div class="pull-left"><h5><i class="fa fa-tasks"></i><?php echo ' '.$lang['admin'].' '.$lang['perms']; ?></h5></div> |
|
141 | + <div class="pull-left"><h5><i class="fa fa-tasks"></i><?php echo ' ' . $lang['admin'] . ' ' . $lang['perms']; ?></h5></div> |
|
142 | 142 | <br> |
143 | 143 | </div> |
144 | 144 | <div class="panel-body"> |
@@ -22,13 +22,23 @@ discard block |
||
22 | 22 | |
23 | 23 | $sql = "UPDATE `users` SET `user_name`='" . $staffName . "',`user_email`='" . $staffEmail . "',`playerid`='" . $staffPID . "',`user_level`='" . $staffRank . "', `permissions`='" . $userPerms . "' WHERE `user_id` ='" . $uId . "';"; |
24 | 24 | $result_of_query = $db_connection->query($sql); |
25 | - if ($user->user_level != $_POST['staffRank']) logAction($_SESSION['user_name'], $lang['edited'] . " " . $_POST['staffName'] . "\'s " . $lang['staff'] . " " . $lang['rank'] . " " . $lang['from'] . " (" . $settings['ranks'][$user->user_level] . ") " . $lang['to'] . " (" . $settings['ranks'][$_POST['staffRank']] . ")", 2); |
|
26 | - if ($user->user_name != $_POST['staffName']) logAction($_SESSION['user_name'], $lang['edited'] . " " . $user->user_name . "\'s " . strtolower($lang['name']) . " " . $lang['to'] . " " . $_POST['staffName'] . "", 2); |
|
27 | - if ($user->playerid != $_POST['staffPID']) logAction($_SESSION['user_name'], $lang['edited'] . " " . $_POST['staffName'] . "\'s " . $lang['player'] . " " . $lang['id'] . " " . $lang['from'] . " (" . $user->playerid . ") " . $lang['to'] . " (" . $_POST['staffPID'] . ")", 2); |
|
28 | - if ($user->user_email != $_POST['staffEmail']) logAction($_SESSION['user_name'], $lang['edited'] . " " . $user->user_name . "\'s " . strtolower($lang['email']) . " " . $lang['from'] . " (" . $user->user_email . ") " . $lang['to'] . " (" . $_POST['staffEmail'] . ")", 2); |
|
25 | + if ($user->user_level != $_POST['staffRank']) { |
|
26 | + logAction($_SESSION['user_name'], $lang['edited'] . " " . $_POST['staffName'] . "\'s " . $lang['staff'] . " " . $lang['rank'] . " " . $lang['from'] . " (" . $settings['ranks'][$user->user_level] . ") " . $lang['to'] . " (" . $settings['ranks'][$_POST['staffRank']] . ")", 2); |
|
27 | + } |
|
28 | + if ($user->user_name != $_POST['staffName']) { |
|
29 | + logAction($_SESSION['user_name'], $lang['edited'] . " " . $user->user_name . "\'s " . strtolower($lang['name']) . " " . $lang['to'] . " " . $_POST['staffName'] . "", 2); |
|
30 | + } |
|
31 | + if ($user->playerid != $_POST['staffPID']) { |
|
32 | + logAction($_SESSION['user_name'], $lang['edited'] . " " . $_POST['staffName'] . "\'s " . $lang['player'] . " " . $lang['id'] . " " . $lang['from'] . " (" . $user->playerid . ") " . $lang['to'] . " (" . $_POST['staffPID'] . ")", 2); |
|
33 | + } |
|
34 | + if ($user->user_email != $_POST['staffEmail']) { |
|
35 | + logAction($_SESSION['user_name'], $lang['edited'] . " " . $user->user_name . "\'s " . strtolower($lang['email']) . " " . $lang['from'] . " (" . $user->user_email . ") " . $lang['to'] . " (" . $_POST['staffEmail'] . ")", 2); |
|
36 | + } |
|
29 | 37 | |
30 | 38 | message(ucfirst($_POST['staffName']) . ' ' . $lang['updated']); |
31 | - } else message($lang['expired']); |
|
39 | + } else { |
|
40 | + message($lang['expired']); |
|
41 | + } |
|
32 | 42 | } |
33 | 43 | if (isset($_POST["viewPlayer"])) { |
34 | 44 | if (formtoken::validateToken($_POST)) { |
@@ -80,7 +90,9 @@ discard block |
||
80 | 90 | message("Permissions Updated"); |
81 | 91 | session_destroy(); |
82 | 92 | session_start(); |
83 | - } else message($lang['expired']); |
|
93 | + } else { |
|
94 | + message($lang['expired']); |
|
95 | + } |
|
84 | 96 | } |
85 | 97 | ?> |
86 | 98 | <div class="row"> |
@@ -63,8 +63,8 @@ |
||
63 | 63 | echo "<td><a class='btn btn-primary btn-xs' href='" . $settings['url'] . "editStaff/" . $row["user_id"] . "'>"; |
64 | 64 | echo "<i class='fa fa-pencil'></i></a></td>"; |
65 | 65 | } else { |
66 | - echo "<td></td>"; |
|
67 | - } |
|
66 | + echo "<td></td>"; |
|
67 | + } |
|
68 | 68 | echo "</tr>"; |
69 | 69 | }; |
70 | 70 | echo "</tbody></table>"; |
@@ -7,14 +7,18 @@ discard block |
||
7 | 7 | $sql = "SELECT `uid` FROM `players` WHERE `uid` LIKE '" . $search . "' OR `name` LIKE '" . $search . "' OR `playerid` LIKE '" . $search . "';"; |
8 | 8 | $result_of_query = $db_link->query($sql); |
9 | 9 | $total_records = mysqli_num_rows($result_of_query); |
10 | - if ($pageNum > $total_records) $pageNum = $total_records; |
|
10 | + if ($pageNum > $total_records) { |
|
11 | + $pageNum = $total_records; |
|
12 | + } |
|
11 | 13 | $sql = "SELECT `playerid`,`name`,`bankacc`,`cash`,`coplevel`,`mediclevel`,`adminlevel`,`uid` FROM `players` WHERE `uid` LIKE '" . $search . "' OR `name` LIKE '" . $search . "' OR `playerid` LIKE '" . $search . "'" . $max . " ;"; |
12 | 14 | logAction($_SESSION['user_name'], $lang['searched'] . ' (' . $search . ') ' . $lang['in'] . ' ' . $lang['players'], 1); |
13 | 15 | } else { |
14 | 16 | $sql = "SELECT `uid` FROM `players`;"; |
15 | 17 | $result_of_query = $db_link->query($sql); |
16 | 18 | $total_records = mysqli_num_rows($result_of_query); |
17 | - if ($pageNum > $total_records) $pageNum = $total_records; |
|
19 | + if ($pageNum > $total_records) { |
|
20 | + $pageNum = $total_records; |
|
21 | + } |
|
18 | 22 | $sql = "SELECT `playerid`,`name`,`bankacc`,`cash`,`coplevel`,`mediclevel`,`adminlevel`,`uid` FROM `players` " . $max . " ;"; |
19 | 23 | } |
20 | 24 | |
@@ -107,4 +111,6 @@ discard block |
||
107 | 111 | ?> |
108 | 112 | </div> |
109 | 113 | <?php |
110 | -} else echo '<h3>' . errorMessage(36, $lang) . '</h3>'; |
|
111 | 114 | \ No newline at end of file |
115 | +} else { |
|
116 | + echo '<h3>' . errorMessage(36, $lang) . '</h3>'; |
|
117 | +} |