From 428a686f4739e848c467de644401cd0f71db3564 Mon Sep 17 00:00:00 2001
From: Lorenzo Yario <angeleno@screamer.wiki>
Date: Sat, 21 Sep 2024 14:39:13 -0700
Subject: [PATCH] fix minor exploit with banning

---
 inc/mod/pages.php | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/inc/mod/pages.php b/inc/mod/pages.php
index a713d8fe..e7a8becd 100644
--- a/inc/mod/pages.php
+++ b/inc/mod/pages.php
@@ -1549,7 +1549,7 @@ function mod_ban_post(Context $ctx, $board, $delete, $post, $token = false) {
 	if (!openBoard($board))
 		error($config['error']['noboard']);
 
-	if (!hasPermission($config['mod']['delete'], $board))
+	if (!hasPermission($config['mod']['ban'], $board))
 		error($config['error']['noaccess']);
 
 	$security_token = make_secure_link_token($board . '/ban/' . $post);