Hoe kan ik zorgen dat bestanden met een hoog lvl niet gewijzigd kunnen worden?

Door zap op 04-09-2006 16:31

541 views

hallo,

Ik maak gebruik van het systeem van Jan Koehoorn, een super script, ik gebruik dit als edit page:


<?php
    require '../authenticatie.php';
?>
<?php

session_start();
$id = $_SESSION['id'];

$result = mysql_query("SELECT level FROM zap_members WHERE  id = '$id'") 
or die(mysql_error());

while($row = mysql_fetch_array($result)) {
if($row['level'] >= 8){

?>
<html>
<head>
<title>Edit the user!</title>
<meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1">
    <style type="text/css">
        @import '../source/login.css';
		 </style>

</head>

<body>
<table width="600" border="0" align="center">
<tr>
<td align="center" valign="top"> 
<h2><font color="#000066">Edit the user!</font></h2>
Fill in all fields!</td>
</tr>
<tr>
<td align="center" valign="top"> 
<?php
 $tb_name = 'zap_members';
    include '../config/config2.php';

           
      $query = "SELECT * FROM `$tb_name` WHERE `id`='$id'";
   
      $result = mysql_query( $query );

      if( $result && $contact = mysql_fetch_object( $result ) )
      {
         $name = $contact -> name;
         $username = $contact -> username;
         $date = $contact -> date;
		 $country = $contact -> country;
		 $website = $contact -> website;
		 $ip = $contact -> ip;
		 $host = $contact -> host;
		 $level = $contact -> level;
		 $password = $contact -> password;
      }
    
   ?> 
   <form action="save.php" method="get"> <input type="hidden" name="id" value="<?php echo($id) ?>">
<table border="1" cellpadding="4" cellspacing="2" bordercolor="#333333" bgcolor="#eeeeee">
<tr> 
<th align="left">Name</th><td align="left"><input name="name" type="text" value="<?php echo($name) ?>" /></td></tr> 
<tr><th align="left">Username</th><td align="left"><input name="username" type="text" value="<?php echo($username) ?>" /></td></tr> 
<tr><th align="left">Password</th><td align="left"><input name="password" type="text" value="<?php echo sha1($password) ?>" /></td></tr> 
<tr><th align="left">Date joined</th><td align="left"><input name="date" type="text" value="<?php echo($date) ?>" /></td></tr> 
<tr><th align="left">Country</th><td align="left"><input name="country" type="text" value="<?php echo($country) ?>" /></td></tr> 
<tr><th align="left">Website</th><td align="left"><input name="website" type="text" value="<?php echo($website) ?>" /></td></tr> 
<tr><th align="left">IP</th><td align="left"><input name="ip" type="text" value="<?php echo($ip) ?>" /></td></tr> 
<tr><th align="left">Host</th><td align="left"><input name="host" type="text" value="<?php echo($host) ?>" /></td></tr> 
<tr><th align="left">Level</th><td align="left"><select name="level"><option value="<?php echo($level) ?>"><?php echo($level) ?></option>
<option value="1">Normal</option>
<option value="2">Poster</option>
<option value="3">Moderator</option>
<option value="8">Administrator</option></select>
</td></tr> 
</table> 
<br> <input type="submit" value="Save">   <input type="reset" value="reset"> <br><br>
<a href=index.php><font color="#FF0000"><strong>Back</strong></font></a><br>

</form> 
</td>
</tr>
</table>
</body>
</html>
<?
} 
else { 
echo 'You are not an admin!';
}
}
?>

De script leest gegevens uit de db van een member system, hoe kan ik zorgen dat members alleen mensen kunnen editen van een level lager dan hun level. (ze moeten wel minimaal level 5 zijn om members te kunnen editen)

m.v.g. zap