<?php

if ($_SESSION['userlevel'] == 10 && request_token_valid($vars)) // Only valid forms from level 10 users
{

    foreach ($vars['permission'] as $permission) {
        if (isset($config['permissions'][$permission])) {
            if (!dbExist('roles_permissions', '`role_id` = ? AND `permission` = ?',
                         [$vars['role_id'], $permission]
            )) {
                dbInsert(['permission' => $permission, 'role_id' => $vars['role_id']], 'roles_permissions');
            }
        }
    }
}