Changeset 149 for trunk/wp-admin/b2edit.showposts.php

Timestamp:

06/03/2003 12:08:51 AM (23 years ago)

Author:

mikelittle

Message:

Fixed admin level security problem.
Plus an user -> a user

File:

• trunk/wp-admin/b2edit.showposts.php (modified) (2 diffs)

trunk/wp-admin/b2edit.showposts.php

@@ -236 +236 @@
                                 <strong><?php the_time('Y/m/d @ H:i:s'); ?></strong> [ <a href="b2edit.php?p=<?php echo $id ?>&c=1"><?php comments_number('no comments', '1 comment', "% comments") ?></a>
                                 <?php
-                                if (($user_level > $authordata[13]) or ($user_login == $authordata[1])) {
+                                if (($user_level > $authordata->user_level) or ($user_login == $authordata->user_login)) {
                                 echo " - <a href='b2edit.php?action=edit&amp;post=$id";
                                 if ($m)
@@ -275 +275 @@
                                         <?php comment_date('Y/m/d') ?> @ <?php comment_time() ?> 
                                         <?php 
-                                        if (($user_level > $authordata[13]) or ($user_login == $authordata[1])) {
+                                        if (($user_level > $authordata->user_level) or ($user_login == $authordata->user_login)) {
                                                 echo "[ <a href=\"b2edit.php?action=editcomment&amp;comment=".$commentdata->comment_ID."\">Edit</a>";
                                                 echo " - <a href=\"b2edit.php?action=deletecomment&amp;p=".$post->ID."&amp;comment=".$commentdata->comment_ID."\">Delete</a> ]";