Changeset 1542 in ExiteCMS

Timestamp:

07/10/08 11:34:16 (4 years ago)

Author:

root

Message:

Fixed missing groupaccess() check in unread posts queries

Location:

trunk

Files:

• files/locales/en.main.global.php (modified) (1 diff)
• files/locales/en.main.setup.php (modified) (3 diffs)
• modules/user_info_panel/user_info_panel.php (modified) (2 diffs)
• themes/ExiteCMS/theme.php (modified) (2 diffs)

trunk/files/locales/en.main.global.php

@@ -3 +3 @@
 // locale       : English
 // locale name  : main.global
-// generated on : Tue Jul 8 2008, 16:32:08 CEST
+// generated on : Tue Jul 8 2008, 20:58:11 CEST
 // translators  : ExiteCMS team,WanWizard
 // ----------------------------------------------------------

trunk/files/locales/en.main.setup.php

@@ -3 +3 @@
 // locale       : English
 // locale name  : main.setup
-// generated on : Tue Jul 1 2008, 19:42:17 CEST
+// generated on : Tue Jul 8 2008, 20:58:24 CEST
 // translators  : ExiteCMS team,WanWizard
 // ----------------------------------------------------------
@@ -53 +53 @@
 $locale['475'] = "News";
 $locale['476'] = "Panels";
-$locale['477'] = "x";
+$locale['477'] = "Reports";
 $locale['478'] = "PHP Info";
 $locale['479'] = "Polls";
-$locale['480'] = "x";
+$locale['480'] = "Searches";
 $locale['481'] = "Menu System";
 $locale['482'] = "x";
@@ -82 +82 @@
 $locale['507'] = "Search";
 $locale['508'] = "Register";
+$locale['509'] = "Reports";
 $locale['520'] = "Main Menu";
 $locale['521'] = "Online Users";

trunk/modules/user_info_panel/user_info_panel.php

@@ -37 +37 @@
             SELECT count(*) as unread 
                 FROM ".$db_prefix."posts p 
+                    INNER JOIN ".$db_prefix."forums f ON p.forum_id = f.forum_id 
                     INNER JOIN ".$db_prefix."threads_read tr ON p.thread_id = tr.thread_id 
-                WHERE tr.user_id = '".$userdata['user_id']."' 
+                WHERE ".groupaccess('f.forum_access')."
+                    AND tr.user_id = '".$userdata['user_id']."' 
                     AND (p.post_datestamp > ".$settings['unread_threshold']." OR p.post_edittime > ".$settings['unread_threshold'].")
                     AND ((p.post_datestamp > tr.thread_last_read OR p.post_edittime > tr.thread_last_read)
@@ -47 +49 @@
             SELECT count(*) as unread 
                 FROM ".$db_prefix."posts p 
+                    INNER JOIN ".$db_prefix."forums f ON p.forum_id = f.forum_id 
                     INNER JOIN ".$db_prefix."threads_read tr ON p.thread_id = tr.thread_id 
-                WHERE tr.user_id = '".$userdata['user_id']."' 
+                WHERE ".groupaccess('f.forum_access')."
+                    AND tr.user_id = '".$userdata['user_id']."' 
                     AND p.post_author != '".$userdata['user_id']."'
                     AND p.post_edituser != '".$userdata['user_id']."'

trunk/themes/ExiteCMS/theme.php

@@ -70 +70 @@
             SELECT count(*) as unread 
                 FROM ".$db_prefix."posts p 
+                    INNER JOIN ".$db_prefix."forums f ON p.forum_id = f.forum_id 
                     INNER JOIN ".$db_prefix."threads_read tr ON p.thread_id = tr.thread_id 
-                WHERE tr.user_id = '".$userdata['user_id']."' 
+                WHERE ".groupaccess('f.forum_access')."
+                    AND tr.user_id = '".$userdata['user_id']."' 
                     AND (p.post_datestamp > ".$settings['unread_threshold']." OR p.post_edittime > ".$settings['unread_threshold'].")
                     AND ((p.post_datestamp > tr.thread_last_read OR p.post_edittime > tr.thread_last_read)
@@ -80 +82 @@
             SELECT count(*) as unread 
                 FROM ".$db_prefix."posts p 
+                    INNER JOIN ".$db_prefix."forums f ON p.forum_id = f.forum_id 
                     INNER JOIN ".$db_prefix."threads_read tr ON p.thread_id = tr.thread_id 
-                WHERE tr.user_id = '".$userdata['user_id']."' 
+                WHERE ".groupaccess('f.forum_access')."
+                    AND tr.user_id = '".$userdata['user_id']."' 
                     AND p.post_author != '".$userdata['user_id']."'
                     AND p.post_edituser != '".$userdata['user_id']."'