Hi,
Im in the final stages of my new module testing phase and just need a quick answer to my question if possible please.
The question is:
Everytime a user clicks the link into my new module, all the users seem to get admin rights to the rest of the site and when they come out of my module the admin rights stay.

Can anyone give me an answer to the question please.

Thanks in advance

Dave.

could be anything.

bad coding, bugs somewhere, improperly set permissions.. without seeing the module code, i doubt any1 could tell you where to start.

Hi,
Posted my index code, have a look see if you can see a prob
require_once('../../mainfile.php');
include_once ('../../header.php');
global $xoopsUser, $xoopsDB;

$tpl = new XoopsTpl();
if(!is_object($xoopsUser)) {
redirect_header(XOOPS_URL, 0, _NOPERM);
}

$sql = $xoopsDB->query("SELECT groupid FROM ".$xoopsDB->prefix('groups')." WHERE name='Affiliate'");

list($groupid) = $xoopsDB->fetchRow($sql);
$uid = $xoopsUser->getVar("uid");
$uname = $xoopsUser->getVar("uname");

$sql = $xoopsDB->query("SELECT payment FROM ".$xoopsDB->prefix('affiliate_perc')." WHERE payid=1");
list($payment) = $xoopsDB->fetchRow($sql);

$linkurl = substr(md5(uniqid(mt_rand(), 1)),0 ,8);

$tpl->append('affs', array(
'uid'=>$uid,
'uname'=>$uname,
'linkurl'=>$linkurl,
'payment'=>$payment,
'groupid'=>$groupid));

$tpl->display(XOOPS_ROOT_PATH . "/modules/affiliate/templates/affiliate_index.html");

include "../../footer.php";

Can you tell anything from this.
all permissions to the module have been set correctly
im using XOOPS 2.0.15 with the new form.php uploaded.
Thanks
Dave

hi,
Just to let you know, it happens the same with the module Wordpress. As a user you link into the module and it gives all users onsite, admin rights.
Thanks

Dave

i can't see anything in there that deals with permissions..

also a few other pointers >

you should use include_once() instead of require_once for mainfile.php

instead of having $uname = ..........

you could omit that and use >

'uname'=> xoops_getLinkedUnameFromId($this->getVar('uid'));

i'm not that experienced with PHP, but i think you would need to have someone look at the whole module code itself to figure out the issue. i can't tell just from looking at that.

Sorry m0nty, but I have to rebuff what you say here.

Quote:
Include or require is not important here, if the include cannot find the mainfile.php, the $xoopsDB call will throw a fatal error anyway.

Quote:
First off, $this is not defined when in the global scope, so this will throw a fatal error.
Secondly, there is absolutely no need to make another database call when you already have the information you want in the $xoopsUser object, so what he is doing is correct.

Quote:
on the other hand is wrong. You do not manually instantiate the XoopsTpl object as it is done in header.php

Quote:
Strictly speaking, what you have is not an SQL statement in the variable, but a DB resultset, so calling the variable $sql is misleading.
Also, querying the groups table directly instead of through the group or member handler class is a nono.
AND querying for a hardcoded group name is... in the lack of a better term... poor. You could use a module configuration option for selecting the proper group.

Quote:
No biggie, but append() adds another dimension to the array in Smarty, which is only really useful, when you call it several times. In this case, it would make the template easier to follow if you use assign()

Quote:
Again, not needed. Just set $xoopsOption['template_main'] = "affiliate_index.html";
preferably before including header.php

Quote:
Can you detail it more? Are people actually getting admin rights or does the "Administration menu" link just turn up in their user menu? What can they admin?

Hi,
Cheers for all that mithrandir.
I havent used XOOPS long so I dont know how to call the group yet through XOOPS so that is why I used a hard call to the DB.
The user is getting admin rights to my module only in the admin screen not the rest.
How do I stop this from happing?
and ok I am a newbie who is reading the manual and then trying to put together my module.

Thanks again for all your responses

Dave

Are you POSITIVE that you have not provided admin access to the module(s) to a group other than admins via Admin Section->System Admin->Groups ?

Cick Modify on all the groups you have (other than Webmaster) and look at the 'System Admin rights' under 'Description'... remove any checkmarks here.... only the Webmaster group should have access.

HTH

Hi,
Thanks for your response Tripmon

I will try that when I get home after finishing work and will post if it worked or not.

Once again thanks to everyone for there responses.

Can someone post a quick response regarding how to use the group of member handler because I am hard calling a group name instead of what is used in xoops.

Being a php programmer that is all I know how to do it.

Thanks

Dave