$serendipity['serendipityUserlevel']) {
if (!empty($_POST['username'])) {
if ( ( empty($_POST['password']) || $_POST['password'] == $_SESSION['serendipityPassword'] || serendipity_passwordhash($_POST['password']) == $_SESSION['serendipityPassword'] ) || $_POST['check_password'] == $_SESSION['serendipityPassword'] || serendipity_passwordhash($_POST['check_password']) == $_SESSION['serendipityPassword']) {
$valid_groups = serendipity_getGroups($serendipity['authorid'], true);
foreach($config as $category) {
foreach ($category['items'] as $item) {
if (in_array('groups', $item['flags'])) {
if (serendipity_checkPermission('adminUsersMaintainOthers')) {
// Void, no fixing neccessarry
} elseif (serendipity_checkPermission('adminUsersMaintainSame')) {
if (!is_array($_POST[$item['var']])) {
continue;
}
// Check that no user may assign groups he's not allowed to.
foreach($_POST[$item['var']] AS $groupkey => $groupval) {
if (in_array($groupval, $valid_groups)) {
continue;
} elseif ($groupval == 2 && in_array(3, $valid_groups)) {
// Admin is allowed to assign users to chief editors
continue;
} elseif ($groupval == 1 && in_array(2, $valid_groups)) {
// Chief is allowed to assign users to editors
continue;
}
unset($_POST[$item['var']][$groupkey]);
}
} else {
continue;
}
/*
if (count($_POST[$item['var']]) < 1) {
echo ' . ')
' . WARNING_NO_GROUPS_SELECTED . '
' . USERCONF_CHECK_USERNAME_ERROR . '
' . CREATE_NOT_AUTHORIZED_USERLEVEL . '
; ?>)