From: Hendrik B. <nh...@us...> - 2010-06-19 20:51:53
|
Update of /cvsroot/arianne/stendhal_website/scripts In directory sfp-cvsdas-4.v30.ch3.sourceforge.com:/tmp/cvs-serv21992/scripts Modified Files: account.php Log Message: based website permission on highest admin level of a character belonging to the logged in account (instead of the adminlevel of the character with the same name as the account) Index: account.php =================================================================== RCS file: /cvsroot/arianne/stendhal_website/scripts/account.php,v retrieving revision 1.16 retrieving revision 1.17 diff -C2 -d -r1.16 -r1.17 *** account.php 19 Jun 2010 20:48:09 -0000 1.16 --- account.php 19 Jun 2010 20:51:45 -0000 1.17 *************** *** 156,160 **** } ! $result = mysql_query('select admin from character_stats where name="'.mysql_real_escape_string($_SESSION['username']).'"', getGameDB()); while($row=mysql_fetch_assoc($result)) { return (int)$row['admin']; --- 156,160 ---- } ! $result = mysql_query('select max(admin) from character_stats, characters, account where character_stats.name=characters.charname AND characters.player_id=account.id AND account.username="'.mysql_real_escape_string($_SESSION['username']).'"', getGameDB()); while($row=mysql_fetch_assoc($result)) { return (int)$row['admin']; |