--- fenglin/bbs/search_user.php	2025/03/28 10:32:21	1.13
+++ fenglin/bbs/search_user.php	2025/03/28 12:16:25	1.14
@@ -221,7 +221,7 @@ while ($row = mysqli_fetch_array($rs))
 ?>
 					</td>
 					<td class="username">
-						<a class="s2" href="javascript:show_profile(<? echo $row["UID"]; ?>)"><? echo $row["username"]; ?></a>
+						<a class="s2" href="" onclick="return show_profile(<? echo $row["UID"]; ?>);"><? echo $row["username"]; ?></a>
 					</td>
 					<td class="dark">
 						<? echo $row["nickname"]; ?>
@@ -233,7 +233,14 @@ while ($row = mysqli_fetch_array($rs))
 						<? echo $row["last_login_dt"]; ?>
 					</td>
 					<td class="level">
-						<a class="s2" href="javascript:NW_open('send_msg.php?user_id=<? echo $row["UID"]; ?>','send_msg',500,300)">发送消息</a>
+<?
+	if ($_SESSION["BBS_priv"]->checkpriv(0, S_MSG))
+	{
+?>
+						<a class="s2" href="" onclick="return NW_open('send_msg.php?user_id=<? echo $row["UID"]; ?>', 'send_msg', 500, 300);">发送消息</a>
+<?
+	}
+?>
 					</td>
 					<td align="center">
 					</td>