Fixed problem with users editing posts they did not create

git-svn-id: file:///svn/phpbb/trunk@423 89ea8834-ac86-4346-8a33-228a782c2dd0
This commit is contained in:
Paul S. Owen 2001-06-04 00:14:26 +00:00
parent 764ec889a9
commit df638e5d2e

View file

@ -696,9 +696,27 @@ switch($mode)
if($result = $db->sql_query($sql)) if($result = $db->sql_query($sql))
{ {
$postrow = $db->sql_fetchrowset($result); $postrow = $db->sql_fetchrow($result);
$subject = stripslashes($postrow[0]['post_subject']);
$message = stripslashes($postrow[0]['post_text']); if($userdata['user_id'] != $postrow['user_id'] && !$is_auth['auth_mod'])
{
include('includes/page_header.'.$phpEx);
$msg = "Sorry but you can only edit your own posts.";
$template->set_filenames(array(
"reg_header" => "error_body.tpl"
));
$template->assign_vars(array(
"ERROR_MESSAGE" => $msg
));
$template->pparse("reg_header");
include('includes/page_tail.'.$phpEx);
}
$subject = stripslashes($postrow['post_subject']);
$message = stripslashes($postrow['post_text']);
if(eregi("\[addsig]$", $message)) if(eregi("\[addsig]$", $message))
{ {
$attach_sig = TRUE; $attach_sig = TRUE;
@ -718,14 +736,14 @@ switch($mode)
$message = preg_replace('#</textarea>#si', '&lt;/TEXTAREA&gt;', $message); $message = preg_replace('#</textarea>#si', '&lt;/TEXTAREA&gt;', $message);
// is_first_post needs functionality! // is_first_post needs functionality!
if($postrow[0]['topic_notify'] && $is_first_post) if($postrow['topic_notify'] && $is_first_post)
{ {
$notify = TRUE; $notify = TRUE;
} }
if($is_first_post) if($is_first_post)
{ {
$subject = stripslashes($postrow[0]['topic_title']); $subject = stripslashes($postrow['topic_title']);
} }
} }
else else