+INSERT INTO phpbb_auth_forums (forum_id, auth_view, auth_read, auth_post, auth_reply, auth_edit, auth_delete, auth_announce, auth_sticky, auth_votecreate, auth_vote) VALUES (1, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0);

+INSERT INTO phpbb_auth_access (group_id, forum_id, auth_view, auth_read, auth_post, auth_reply, auth_edit, auth_delete, auth_announce, auth_sticky, auth_votecreate, auth_vote, auth_mod) VALUES (2, 1, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 1);

+ auth_announce tinyint(1) DEFAULT '0' NOT NULL,

+ auth_sticky tinyint(1) DEFAULT '0' NOT NULL,

+ auth_announce tinyint(4) DEFAULT '0' NOT NULL,

+ auth_sticky tinyint(4) DEFAULT '0' NOT NULL,

+ user_level tinyint(4) DEFAULT '0',

+ user_template varchar(50),

+ user_theme int(11),

+ user_lang varchar(255),

+ user_viewemail tinyint(1),

+ user_attachsig tinyint(1),

+ user_allowhtml tinyint(1),

+ user_allowbbcode tinyint(1),

+ user_allowsmile tinyint(1),

+ user_regdate int(11) DEFAULT '0' NOT NULL,

+ PRIMARY KEY (user_id)

+ auth_announce int2 DEFAULT '0' NOT NULL,

+ auth_sticky int2 DEFAULT '0' NOT NULL,

+ auth_announce int2 DEFAULT '0' NOT NULL,

+ auth_sticky int2 DEFAULT '0' NOT NULL,

+ $a_sql = "au.auth_view, au.auth_read, au.auth_post, au.auth_reply, au.auth_edit, au.auth_delete, au.auth_announce, au.auth_sticky, au.auth_votecreate, au.auth_vote, au.auth_attachments";

+ $auth_fields = array("auth_view", "auth_read", "auth_post", "auth_reply", "auth_edit", "auth_delete", "auth_announce", "auth_sticky", "auth_votecreate", "auth_vote", "auth_attachments");

+

+ $a_sql = "au.auth_view";

+

+ $a_sql = "au.auth_read";

+ $a_sql = "au.auth_post";

+ $a_sql = "au.auth_reply";

+ $a_sql = "au.auth_edit";

+ $a_sql = "au.auth_delete";

+

+ case AUTH_ANNOUNCE:

+ $a_sql = "au.auth_announce";

+ $auth_fields = array("auth_announce");

+ break;

+ case AUTH_STICKY:

+ $a_sql = "au.auth_sticky";

+ $auth_fields = array("auth_sticky");

+ break;

+ $a_sql = "au.auth_votecreate";

+ $a_sql = "au.auth_vote";

+ $a_sql = "au.auth_attachments";

+

+ case AUTH_ALLOW_HTML:

+ break;

+ case AUTH_ALLOW_BBCODE:

+ break;

+ case AUTH_ALLOW_SMILIES:

+ break;

+

+ $forum_match_sql = ($forum_id != AUTH_LIST_ALL) ? "WHERE au.forum_id = $forum_id" : "";

+ $sql = "SELECT au.forum_id, $a_sql

+ FROM ".AUTH_FORUMS_TABLE." au

+ if($userdata['session_logged_in'])

+ $forum_match_sql = ($forum_id != AUTH_LIST_ALL) ? "AND au.forum_id = $forum_id" : "";

+ $sql = "SELECT au.forum_id, $a_sql, au.auth_mod, g.group_single_user

+ FROM ".AUTH_ACCESS_TABLE." au, " . USER_GROUP_TABLE. " ug, " . GROUPS_TABLE. " g

+ AND au.group_id = ug.group_id

+ }

+ $is_admin = ($userdata['user_level'] == ADMIN) ? 1 : 0;

+ $auth_user = array();

+

+ for($i = 0; $i < count($auth_fields); $i++)

+ {

+ $key = $auth_fields[$i];

+ //

+ // If the user is logged on and the forum type is either

+ // ALL or REG then the user has access

+ //

+ // If the type if ACL, MOD or ADMIN then we need to see

+ // if the user has specific permissions to do whatever it

+ // is they want to do ... to do this we pull relevant

+ // information for the user (and any groups they belong to)

+ //

+ // Now we compare the users access level against the forums

+ // We assume here that a moderator and admin automatically

+ // have access to an ACL forum, similarly we assume admins

+ // meet an auth requirement of MOD

+ //

+ // The access level assigned to a single user automatically

+ // takes precedence over any levels granted by that user being

+ // a member of a multi-user usergroup, eg. a user who is banned

+ // from a forum won't gain access to it even if they belong to

+ // a group which has access (and vice versa). This check is

+ // done via the single_user check

+ //

+ // PS : I appologise for the fantastically clear and hugely

+ // readable code here ;) Simple gist is, if this row of

+ // auth_access doesn't represent a single user then OR the

+ // contents of relevant auth_access levels against the current

+ // level (allows maximum group privileges to be assigned). If

+ // the row does represent a single user then forget any previous

+ // group results and instead set the auth to whatever the OR'd

+ // contents of the access levels are.

+ //

+

+ if($forum_id != AUTH_LIST_ALL)

+ $value = $f_access[$key];

+ switch($value)

+ case AUTH_ALL:

+ $auth_user[$key] = 1;

+ $auth_user[$key . '_type'] = "Anonymous Users";

+ break;

+ case AUTH_REG:

+ $auth_user[$key] = ($userdata['session_logged_in']) ? 1 : 0;

+ $auth_user[$key . '_type'] = "Registered Users";

+ break;

+ case AUTH_ACL:

+ $auth_user[$key] = ($userdata['session_logged_in'] && $num_u_access) ? auth_check_user(AUTH_ACL, $key, $u_access, $is_admin) : 0;

+ $auth_user[$key . '_type'] = "Users granted special access";

+ break;

+ case AUTH_MOD:

+ $auth_user[$key] = ($userdata['session_logged_in'] && $num_u_access) ? auth_check_user(AUTH_MOD, $key, $u_access, $is_admin) : 0;

+ $auth_user[$key . '_type'] = "Moderators";

+ break;

+ case AUTH_ADMIN:

+ $auth_user[$key] = $is_admin;

+ $auth_user[$key . '_type'] = "Administrators";

+ break;

+

+ default:

+ $auth_user[$key] = 0;

+ break;

+ $value = $f_access[$k][$key];

+

+ switch($value)

+ {

+ case AUTH_ALL:

+ $auth_user[$f_forum_id][$key] = 1;

+ $auth_user[$f_forum_id][$key . '_type'] = "Anonymous Users";

+ break;

+

+ case AUTH_REG:

+ $auth_user[$f_forum_id][$key] = ($userdata['session_logged_in']) ? 1 : 0;

+ $auth_user[$f_forum_id][$key . '_type'] = "Registered Users";

+ break;

+

+ case AUTH_ACL:

+ $auth_user[$f_forum_id][$key] = ($userdata['session_logged_in'] && $num_u_access) ? auth_check_user(AUTH_ACL, $key, $u_access, $is_admin) : 0;

+ $auth_user[$f_forum_id][$key . '_type'] = "Users granted special access";

+ break;

+

+ case AUTH_MOD:

+ $auth_user[$f_forum_id][$key] = ($userdata['session_logged_in'] && $num_u_access) ? auth_check_user(AUTH_MOD, $key, $u_access, $is_admin) : 0;

+ $auth_user[$f_forum_id][$key . '_type'] = "Moderators";

+ break;

+

+ case AUTH_ADMIN:

+ $auth_user[$f_forum_id][$key] = $is_admin;

+ $auth_user[$f_forum_id][$key . '_type'] = "Administrators";

+ break;

+

+ default:

+ $auth_user[$f_forum_id][$key] = 0;

+ break;

+ }

+ }

+ //

+ // Is user a moderator?

+ //

+ if($forum_id != AUTH_LIST_ALL)

+ {

+ $auth_user['auth_mod'] = ($userdata['session_logged_in'] && $num_u_access) ? auth_check_user(AUTH_MOD, 'auth_mod', $u_access, $is_admin) : 0;

+ }

+ else

+ {

+ for($k = 0; $k < count($f_access); $k++)

+ $f_forum_id = $f_access[$k]['forum_id'];

+ $auth_user[$f_forum_id]['auth_mod'] = ($userdata['session_logged_in'] && $num_u_access) ? auth_check_user(AUTH_MOD, 'auth_mod', $u_access, $is_admin) : 0;

+ }

+

+ //

+ // Is user an admin (this is

+ // really redundant at this time)

+ //

+ if($forum_id != AUTH_LIST_ALL)

+ {

+ $auth_user['auth_admin'] = $is_admin;

+ }

+ else

+ {

+ for($k = 0; $k < count($f_access); $k++)

+ $f_forum_id = $f_access[$k]['forum_id'];

+ $auth_user[$f_forum_id]['auth_admin'] = $is_admin;

+

+

+define(AUTH_ANNOUNCE, 7);

+define(AUTH_STICKY, 8);

+define(AUTH_VOTECREATE, 9);

+define(AUTH_VOTE, 10);

+define(AUTH_ATTACH, 11);

+

+define(AUTH_LIST_ALL, 20);

+define('AUTH_ACCESS_TABLE', $table_prefix.'auth_access');

+define('AUTH_FORUMS_TABLE', $table_prefix.'auth_forums');

+define('GROUPS_TABLE', $table_prefix.'groups');

+define('USERS_TABLE', $table_prefix.'users');

+ $order_sql = (!isset($post_id)) ? "" : "GROUP BY p.post_id, t.topic_id, t.topic_title, t.topic_status, t.topic_replies, t.topic_time, f.forum_name, f.forum_id, fa.auth_view, fa.auth_read, fa.auth_post, fa.auth_reply, fa.auth_edit, fa.auth_delete, fa.auth_announce, fa.auth_sticky, fa.auth_votecreate, fa.auth_vote ORDER BY p.post_id ASC";

+ $sql = "SELECT t.topic_id, t.topic_title, t.topic_status, t.topic_replies, t.topic_time, f.forum_name, f.forum_id, fa.auth_view, fa.auth_read, fa.auth_post, fa.auth_reply, fa.auth_edit, fa.auth_announce, fa.auth_sticky, fa.auth_delete, fa.auth_votecreate, fa.auth_vote" . $count_sql . "