arman/science-ation
1
1
Fork 0
forked from science-ation/science-ation
Code Pull Requests Activity

- remember when a full load on a user is done

Browse Source 
- user mysql_escape_string on all fields before saving (oops!) :)
- add a committee login function to set SESSION variables.
This commit is contained in:
dave 2007-11-16 22:19:58 +00:00
parent 3904e2d9d8
commit 0d8f704cd8
1 changed files with 20 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

21
user.inc.php
View File

@ -165,7 +165,11 @@ function user_load($user, $load_full=false, $force_type=false)
}
$ret = array_merge($ret, $r);
}
$ret['load_full'] = true;
} else {
$ret['load_full'] = false;
}
/* Do this assignment without recursion :) */
$orig = $ret;
$ret['orig'] = $orig;
@ -190,7 +194,8 @@ function user_save($u)
// if($f == 'types')
// $set .= "$f='".implode(',', $u[$f])."'";
$set .= "$f='{$u[$f]}'";
$data = mysql_escape_string(stripslashes($u[$f]));
$set .= "$f='$data'";
}
//echo "<pre>";
//print_r($u);
@ -341,3 +346,17 @@ function user_update_complete(&$u, $status)
return;
}
}
function user_committee_login($u)
{
/* Double check, make sure the user is of this type */
if(!in_array('committee', $u['types'])) return false;
$u = user_load($u, true);
$_SESSION['access_admin'] = ($u['access_admin'] == 'Y') ? true : false;
$_SESSION['access_config'] = ($u['access_config'] == 'Y') ? true : false;
$_SESSION['access_super'] = ($u['access_super'] == 'Y') ? true : false;
}