Mibew/tray
1
0
Fork 0
mirror of https://github.com/Mibew/tray.git synced 2025-01-22 18:10:34 +03:00
Code Issues Actions Packages Projects Releases Wiki Activity

Only administrators can change operators' logins

Browse Source
This commit is contained in:
Dmitriy Simushev 2012-01-18 10:24:09 +00:00
parent 169680eda7
commit 87064f2da4
2 changed files with 8 additions and 3 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

9
src/messenger/webim/operator/operator.php
View File

@ -29,9 +29,13 @@ $page = array('opid' => '');
$errors = array();
$opId = '';
if (isset($_POST['login']) && isset($_POST['password'])) {
if ((isset($_POST['login']) || !is_capable($can_administrate, $operator)) && isset($_POST['password'])) {
$opId = verifyparam("opid", "/^(\d{1,9})?$/", "");
$login = getparam('login');
if (is_capable($can_administrate, $operator)) {
$login = getparam('login');
} else {
$login = $operator['vclogin'];
}
$email = getparam('email');
$password = getparam('password');
$passwordConfirm = getparam('passwordConfirm');
@ -128,6 +132,7 @@ $canmodify = ($opId == $operator['operatorid'] && is_capable($can_modifyprofile,
$page['stored'] = isset($_GET['stored']);
$page['canmodify'] = $canmodify ? "1" : "";
$page['canchangelogin'] = is_capable($can_administrate, $operator);
$page['needChangePassword'] = $operator['vcpassword'] == md5('');
prepare_menu($operator);

2
src/messenger/webim/view/agent.php
View File

@ -59,7 +59,7 @@ require_once('inc_errors.php');
<div class="field">
<div class="flabel"><?php echo getlocal('form.field.login') ?><span class="required">*</span></div>
<div class="fvalue">
<input type="text" name="login" size="40" value="<?php echo form_value('login') ?>" class="formauth"<?php echo $page['canmodify'] ? "" : " disabled=\"disabled\"" ?>/>
<input type="text" name="login" size="40" value="<?php echo form_value('login') ?>" class="formauth"<?php echo $page['canchangelogin'] ? "" : " disabled=\"disabled\"" ?>/>
</div>
<div class="fdescr"> &mdash; <?php echo getlocal('form.field.login.description') ?></div>
<br clear="all"/>