[Done 1.4.0][Code] Global Moderators can no longer see Administor forums

[UNICRON]

Simple hack of BoardIndex.php and Recent.php that allows administrators to have a forum away from those pesky Global Moderators Now we call 'em "Almost Global" moderators.

BoardIndex.php:

lines 45, 152, 577

and Recent.php:

lines 36, 65, 147, 200, 203

In all cases remove the reference to Global Moderator so that

Code Select Expand

.....WHERE('$settings[7]'='Administrator' || 'settings[7]'='Global Moderator' || ......
Becomes

Code Select Expand

.....WHERE('$settings[7]'='Administrator' || ......

Nothin to it.

http://www.wilderssecurity.com

[groundup]

pointer:  don't make a mod by line numbers.  1/2 the people have different line numbers than you.

nice work though

[UNICRON]

pointer:  don't make a mod by line numbers.  1/2 the people have different line numbers than you.

True.

I assumed everyone had access to the original version. I guess I should have specified that these line numbers were based on the original 1.4 version. The hack is so simple, I think everyone is capable of figuring out where the chanfes go.

[groundup]

you would be suprised

[Tha Master]

oke, but in that recent.php file there are chanches with the scripts

[mephisto_kur]

Excellent!  I even posted asking for this.
One issue is that I get a parse error when I edit the first entry in Recent.php...  I put it back to default and the mod works great!

[UNICRON]

check the "recent posts" section of the main board index and see if a global mod can see an admin thread if it was the last one posted in. We had missed that at first.

[mephisto_kur]

Yeah, yer right.  I'll have to see if I can get that line to work.  I must have fubbed it somehow, it works everywhere else I edited.

[mephisto_kur]

EDIT: Update
If you are using the Recent Posts block in YaPP, remember to remove these references is Blocks.php...

[UNICRON]

If your recent.php hack is done right a global mod cannot see admin "recent posts". However if he guessed the thread id (not too dificult) he could read and post in an admin thread. I'll fix that tonight. no biggie.

[mephisto_kur]

That fix would be nice, yes.  I fixed my recent.php hack.  It works now.  I just had to take extra steps because of YaPP.  Of course, if I catch my Mods doing something like trying to find admin threads, I'll ban 'em.

[UNICRON]

Of course, if I catch my Mods doing something like trying to find admin threads, I'll ban 'em.

That was my thinking. It's not like they could hide it from me.

[Surfy]

is a Mod File for Boardmod Arround here?

I dont get it to work with this Linenumbers :-(

Surfy

[Surfy]

if (!$result) { echo "memcount SQL failed";}
   $condition = $settings[7]=='Administrator' || $settings[7]=='Global Moderator' ? '' : "&& (FIND_IN_SET('$settings[7]',c.memberGroups)!=0 || c.memberGroups='')";
   $result = mysql_query("SELECT COUNT(*) as totalm FROM {$db_prefix}messages as m,{$db_prefix}boards as b,{$db_prefix}topics as t,{$db_prefix}categories as c WHERE (m.ID_TOPIC=t.ID_TOPIC && t.ID_BOARD=b.ID_BOARD && b.ID_CAT=c.ID_CAT$condition)");

Please show me a sample! Please Post a prepared Line!

thx a lot, Surfy

[Surfy]

This Mod has a Security-Hole!!!!

The Global Mod can view all Posts Postet by a Admin, if he Click "View the last Posts" funktion!!!!

How can i fix this?

Surfy