Edit Profile (pop_editprofile.asp)

I am not sure if this a problem with the code or whether or not my usergroups are messed up but here goes.

No matter who is logged in, no matter what usergroup, if a user goes into a post, clicks the "PROFILE" button under the post he can see the "EDIT PROFILE" button and of course this allows him to change any information about the person.  It's nice that he can't change their password but all the information non-the-less.

I've tried to change the IF statement around the button and nothing seems to work.  I am about to remove the button all together.

Has anyone else had this problem?

Hello,

I think there is a serious problem in the pop_profile_edit.asp around line 384.

The line:

If ((blnAdmin) OR (blnModerator AND intUsersGroupID <> 1)) Then

should be

If blnAdmin Then

This should fix the problem.

If the OR condition is assumed to be OK, then there must be something else broken before getting to this point in the code.

Jamal

-boRg- wrote: Unless you have set moderator permissions on the group then this is not possible unless you have corrupted files. Check your group permissions setup for all your groups and make sure that only the modertor group (which only people you set as modertors should be part of) has moderator permissions. Also check the set up of the generic permissions themselves.

Hello,

I know for sure the files are not corrupted. I just started this webwiz forum and I haved converted the database to Access 2002 fromat to see what happens, but without luck.

I don't know if this has any effect, but I created a private group which has no moderation status, but still any member edit the others' profiles, of course if I did not make modification in the code.  Just like the others, as an Admin, I did not know about until a user informed me about it. I just can't believe that all the others who posted about the same problem have corruption in their databases. I'll dig thru the asp code and I'll see to find the cause, but there is definitly a problem.

Jamal

dead_angel wrote: that line is obviously used by all webwiz users.. and so should not really cause you any problem as it is used fine by others.. OR (blnModerator AND intUsersGroupID <> 1))  is used to allow MODERATORS permission to edit the profile is it not? so you need that piece of code.. again, like the others have said, you either have corrupt files (try reuploading them) or your permissions are set incorrect..