1
0
mirror of https://github.com/vichan-devel/vichan.git synced 2024-11-24 07:30:10 +01:00

fix minor exploit with banning

This commit is contained in:
Lorenzo Yario 2024-09-21 14:39:13 -07:00 committed by GitHub
parent c95877bdcb
commit 428a686f47
No known key found for this signature in database
GPG Key ID: B5690EEEBB952194

View File

@ -1549,7 +1549,7 @@ function mod_ban_post(Context $ctx, $board, $delete, $post, $token = false) {
if (!openBoard($board))
error($config['error']['noboard']);
if (!hasPermission($config['mod']['delete'], $board))
if (!hasPermission($config['mod']['ban'], $board))
error($config['error']['noaccess']);
$security_token = make_secure_link_token($board . '/ban/' . $post);