cyberpresidentvanellope/Paradise
1
0
Fork 0
mirror of https://github.com/ParadiseSS13/Paradise.git synced 2026-08-22 11:37:40 +01:00
Code Issues Packages Projects Releases Wiki Activity

Notes IRC fix, add rights checks to watchlist/note procs

Browse Source
This commit is contained in:
Markolie
2015-09-15 19:21:56 +02:00
parent ccab45c495
commit 5fbbd39cbc
2 changed files with 45 additions and 13 deletions
Download Patch File Download Diff File Expand all files Collapse all files
code/modules/admin/watchlist.dm
+15 -5
View File
@@ -1,4 +1,6 @@
client/proc/watchlist_add(target_ckey, browse = 0)
/client/proc/watchlist_add(target_ckey, browse = 0)
if(!check_rights(R_ADMIN))
return
if(!target_ckey)
var/new_ckey = ckey(input(usr,"Who would you like to add to the watchlist?","Enter a ckey",null) as text)
if(!new_ckey)
@@ -37,7 +39,9 @@ client/proc/watchlist_add(target_ckey, browse = 0)
if(browse)
watchlist_show(target_sql_ckey)
client/proc/watchlist_remove(target_ckey, browse = 0)
/client/proc/watchlist_remove(target_ckey, browse = 0)
if(!check_rights(R_ADMIN))
return
var/target_sql_ckey = sanitizeSQL(target_ckey)
var/DBQuery/query_watchdel = dbcon.NewQuery("DELETE FROM [format_table_name("watch")] WHERE ckey = '[target_sql_ckey]'")
if(!query_watchdel.Execute())
@@ -49,7 +53,9 @@ client/proc/watchlist_remove(target_ckey, browse = 0)
if(browse)
watchlist_show()
client/proc/watchlist_edit(target_ckey, browse = 0)
/client/proc/watchlist_edit(target_ckey, browse = 0)
if(!check_rights(R_ADMIN))
return
var/target_sql_ckey = sanitizeSQL(target_ckey)
var/DBQuery/query_watchreason = dbcon.NewQuery("SELECT reason FROM [format_table_name("watch")] WHERE ckey = '[target_sql_ckey]'")
if(!query_watchreason.Execute())
@@ -75,7 +81,9 @@ client/proc/watchlist_edit(target_ckey, browse = 0)
if(browse)
watchlist_show(target_sql_ckey)
client/proc/watchlist_show(search)
/client/proc/watchlist_show(search)
if(!check_rights(R_ADMIN))
return
var/output
output += "<form method='GET' name='search' action='?'>\
<input type='hidden' name='_src_' value='holder'>\
@@ -105,7 +113,9 @@ client/proc/watchlist_show(search)
output += "<br>[reason]<hr style='background:#000000; border:0; height:1px'>"
usr << browse(output, "window=watchwin;size=900x500")
client/proc/check_watchlist(target_ckey)
/client/proc/check_watchlist(target_ckey)
if(!check_rights(R_ADMIN,0))
return
var/target_sql_ckey = sanitizeSQL(target_ckey)
var/DBQuery/query_watch = dbcon.NewQuery("SELECT reason FROM [format_table_name("watch")] WHERE ckey = '[target_sql_ckey]'")
if(!query_watch.Execute())