Cool_Tools/vichan
1
0
Fork 0
mirror of https://github.com/vichan-devel/vichan.git synced 2024-11-14 10:57:38 +01:00
Code Releases Wiki Activity

fix minor exploit with banning

Browse Source
This commit is contained in:
Lorenzo Yario 2024-09-21 14:39:13 -07:00 committed by GitHub
parent c95877bdcb
commit 428a686f47
No known key found for this signature in database
GPG Key ID: B5690EEEBB952194
1 changed files with 1 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
inc/mod/pages.php
View File

@ -1549,7 +1549,7 @@ function mod_ban_post(Context $ctx, $board, $delete, $post, $token = false) {
if (!openBoard($board)) if (!openBoard($board))
error($config['error']['noboard']); error($config['error']['noboard']);
if (!hasPermission($config['mod']['delete'], $board)) if (!hasPermission($config['mod']['ban'], $board))
error($config['error']['noaccess']); error($config['error']['noaccess']);
$security_token = make_secure_link_token($board . '/ban/' . $post); $security_token = make_secure_link_token($board . '/ban/' . $post);