echo $_POST['uname']; ?> successfully added.</strong></p> <?php } else { ?> <p style="padding:2px;border:1px solid #CC9966;margin-bottom:10px;"><strong>Information missing (passwords do not match or username empty).</strong></p> <?php } } else { if ($_POST['aact'] == 'chguser' && $id !== FALSE) { if ($_POST['pass'] == $_POST['pass2'] && dname2name($_POST['uname'])) { $_PERSIST['users'][$id]['dname'] = $_POST['uname']; $_PERSIST['users'][$id]['name'] = dname2name($_POST['uname']); if ($_POST['pass'] && ($id > 1 || $id == 1 && $uid == 1)) { $_PERSIST['users'][$id]['pass'] = pwencode(dname2name($_POST['uname']), $_POST['pass']); } if ($_POST['temppass'] && ($id > 1 || $id == 1 && $uid == 1)) { $_PERSIST['users'][$id]['temppass'] = true; } else { if ($_PERSIST['users'][$id]['temppass']) { unset($_PERSIST['users'][$id]['temppass']); } } $_PERSIST['users'][$id]['psub'] = $_POST['psub']; $_PERSIST['users'][$id]['dpsub'] = $_POST['dpsub'] === '*' ? $_POST['psub'] : $_POST['dpsub']; $_PERSIST['users'][$id]['priv'] = upriv($_POST['rank']); if ($_PERSIST['users'][$id]['priv'] == 2 && $id == 0) { $_PERSIST['users'][$id]['priv'] = 1; } persist_update() or die('<strong>Error:</strong>Persist not writable, please CHMOD persist.inc.php to 777.');
$asid = '&fmsid=' . $sid; $hasid = '&fmsid=' . $sid; $qsid = $hqsid = '?fmsid=' . $sid; $isid = '<input type="hidden" name="fmsid" value="' . $sid . '" />'; $ssid = $sid; } } if (!$sid) { $sid = FALSE; } unset($i); $presub = $user['priv'] == 127 ? '' : $user['psub']; if ($presub) { $allow_php = $false; } if ($_POST['login'] && dname2name($_POST['uname']) === 'guest' && !$_PERSIST['users'][0]['priv']) { $status = $_PERSIST['users'][0]['priv'] ? 'gli' : 'gad'; } if ($user['priv'] == 127) { $aphp = TRUE; } //==================== // Parse GET strings //==================== if ($d === false) { $d = is_string($user['dpsub']) ? $user['dpsub'] : $user['psub']; } //$tmp = substr($d,0,strlen($presub)); //echo "<pre>";var_dump($presub);echo "\n";var_dump($d);echo "\n";var_dump($tmp);echo "</pre>"; if ($presub && substr($d, 0, strlen($presub)) !== $presub && !($nokill && !($isauth = false))) { die('<err>Access Denied (Trying to access forbidden directory).</err>');