Vergleich admin/modules/user/admin_permissions.php - 1.8.4 - 1.8.10

		$title = $admin['username'];

		$title = htmlspecialchars_uni($admin['username']);

	// Get users whose primary or secondary usergroup has ACP access
	$comma = $primary_group_list = $secondary_group_list = '';
	foreach($usergroups as $gid => $group_info)

	if(!empty($usergroups))

		$primary_group_list .= $comma.$gid;
		switch($db->type)

		// Get users whose primary or secondary usergroup has ACP access
		$comma = $primary_group_list = $secondary_group_list = '';
		foreach($usergroups as $gid => $group_info)

			case "pgsql":
			case "sqlite":
				$secondary_group_list .= " OR ','|| u.additionalgroups||',' LIKE '%,{$gid},%'";
				break;
			default:
				$secondary_group_list .= " OR CONCAT(',', u.additionalgroups,',') LIKE '%,{$gid},%'";
		}

		$comma = ',';
	}

	$group_list = implode(',', array_keys($usergroups));
	$secondary_groups = ','.$group_list.',';

	// Get usergroups with ACP access
	$query = $db->query("
		SELECT g.title, g.cancp, a.permissions, g.gid
		FROM ".TABLE_PREFIX."usergroups g
		LEFT JOIN ".TABLE_PREFIX."adminoptions a ON (a.uid = -g.gid)
		WHERE g.cancp = 1
		ORDER BY g.title ASC
	");
	while($group = $db->fetch_array($query))
	{
		$group_permissions[$group['gid']] = $group['permissions'];
	}

			$primary_group_list .= $comma.$gid;
			switch($db->type)
			{
				case "pgsql":
				case "sqlite":
					$secondary_group_list .= " OR ','|| u.additionalgroups||',' LIKE '%,{$gid},%'";
					break;
				default:
					$secondary_group_list .= " OR CONCAT(',', u.additionalgroups,',') LIKE '%,{$gid},%'";
			}

	$query = $db->query("
		SELECT u.uid, u.username, u.lastactive, u.usergroup, u.additionalgroups, a.permissions
		FROM ".TABLE_PREFIX."users u
		LEFT JOIN ".TABLE_PREFIX."adminoptions a ON (a.uid=u.uid)
		WHERE u.usergroup IN ({$primary_group_list}) {$secondary_group_list}
		ORDER BY u.username ASC
	");
	while($admin = $db->fetch_array($query))
	{
		if($admin['permissions'] != "")
		{
			$perm_type = "user";

			$comma = ',';

		// Build a list of group memberships that have access to the Admin CP
		// Primary usergroup?
		if($usergroups[$admin['usergroup']]['cancp'] == 1)

		$group_list = implode(',', array_keys($usergroups));
		$secondary_groups = ','.$group_list.',';

		// Get usergroups with ACP access
		$query = $db->query("
			SELECT g.title, g.cancp, a.permissions, g.gid
			FROM ".TABLE_PREFIX."usergroups g
			LEFT JOIN ".TABLE_PREFIX."adminoptions a ON (a.uid = -g.gid)
			WHERE g.cancp = 1
			ORDER BY g.title ASC
		");
		while($group = $db->fetch_array($query))

			$usergroup_list[] = "<i>".$usergroups[$admin['usergroup']]['title']."</i>";

			$group_permissions[$group['gid']] = $group['permissions'];

		// Secondary usergroups?
		$additional_groups = explode(',', $admin['additionalgroups']);
		if(is_array($additional_groups))

		$query = $db->query("
			SELECT u.uid, u.username, u.lastactive, u.usergroup, u.additionalgroups, a.permissions
			FROM ".TABLE_PREFIX."users u
			LEFT JOIN ".TABLE_PREFIX."adminoptions a ON (a.uid=u.uid)
			WHERE u.usergroup IN ({$primary_group_list}) {$secondary_group_list}
			ORDER BY u.username ASC
		");
		while($admin = $db->fetch_array($query))

			foreach($additional_groups as $gid)

			if($admin['permissions'] != "")
			{
				$perm_type = "user";
			}
			else

				if($usergroups[$gid]['cancp'] == 1)

				$groups = explode(",", $admin['additionalgroups'].",".$admin['usergroup']);
				foreach($groups as $group)

					$usergroup_list[] = $usergroups[$gid]['title'];

					if($group == "") continue;
					if($group_permissions[$group] != "")
					{
						$perm_type = "group";
						break;
					}

		$table->construct_cell(my_date('relative', $admin['lastactive']), array("class" => "align_center"));

		$popup = new PopupMenu("adminperm_{$admin['uid']}", $lang->options);
		if(!is_super_admin($admin['uid']))
		{
			if($admin['permissions'] != "")

				if(!$group_permissions)
				{
					$perm_type = "default";
				}
			}

			$usergroup_list = array();

			// Build a list of group memberships that have access to the Admin CP
			// Primary usergroup?
			if($usergroups[$admin['usergroup']]['cancp'] == 1)

				$popup->add_item($lang->edit_permissions, "index.php?module=user-admin_permissions&action=edit&uid={$admin['uid']}");
				$popup->add_item($lang->revoke_permissions, "index.php?module=user-admin_permissions&action=delete&uid={$admin['uid']}&my_post_key={$mybb->post_code}", "return AdminCP.deleteConfirmation(this, '{$lang->confirm_perms_deletion2}')");

				$usergroup_list[] = "<i>".$usergroups[$admin['usergroup']]['title']."</i>";

			else

			// Secondary usergroups?
			$additional_groups = explode(',', $admin['additionalgroups']);
			if(is_array($additional_groups))

				$popup->add_item($lang->set_permissions, "index.php?module=user-admin_permissions&action=edit&uid={$admin['uid']}");

				foreach($additional_groups as $gid)
				{
					if($usergroups[$gid]['cancp'] == 1)
					{
						$usergroup_list[] = $usergroups[$gid]['title'];
					}
				}

	if($table->num_rows() == 0)

	if(empty($usergroups) || $table->num_rows() == 0)