xinyin025/TravianZ
1
0
Fork 0
mirror of https://github.com/Shadowss/TravianZ.git synced 2026-09-03 00:47:19 +00:00
Code Issues Packages Projects Releases Wiki Activity

General fixes

Browse Source 
+Fixed a bug that permitted to edit alliance leader's permissions
This commit is contained in:
iopietro
2018-05-30 20:25:29 +02:00
parent d171ac02cc
commit e0166b1242
4 changed files with 9 additions and 9 deletions
Download Patch File Download Diff File Expand all files Collapse all files
Templates/Alliance/assignpos.tpl
+3 -5
View File
@@ -24,10 +24,8 @@ if($session->access!=BANNED){
<td>
<select name="a_user" class="name dropdown">
<?php
foreach($memberlist as $member)
{
if($member['id'] != $session->uid)
{
foreach($memberlist as $member){
if($member['id'] != $session->uid && !$database->isAllianceOwner($member['id'])){
echo "<option value=".$member['id'].">".$member['username']."</option>";
}
}
@@ -40,7 +38,7 @@ if($session->access!=BANNED){
<p>
<input type="hidden" name="o" value="1">
<input type="hidden" name="s" value="5">
<button value="ok" name="s1" id="btn_ok" class="trav_buttons" alt="OK" /> Ok </button>
<button value="ok" name="s1" id="btn_ok" class="trav_buttons">OK</button>
</p>
</form>
<?php
Templates/Alliance/changepos.tpl
+3 -3
View File
@@ -1,9 +1,9 @@
<?php
if($database->getUserField($_POST['a_user'], "alliance", 0) != $session->alliance)
{
$form->addError("perm", USER_NOT_IN_YOUR_ALLY);
if($database->getUserField($_POST['a_user'], "alliance", 0) != $session->alliance){
$form->addError("perm", USER_NOT_IN_YOUR_ALLY);
}
elseif($_POST['a_user'] == $session->uid) $form->addError("perm", CANT_EDIT_YOUR_PERMISSIONS);
elseif($database->isAllianceOwner($_POST['a_user'])) $form->addError("perm", CANT_EDIT_LEADER_PERMISSIONS);
if($form->returnErrors() > 0)
{