james/fembooru
1
0
Fork 0
Code Issues Pull Requests Projects Releases Wiki Activity

Users with insufficient privileges are now unable to use oekaki.

Browse Source
This commit is contained in:
pachuco 2012-06-24 23:21:22 +03:00
parent 4535299b2a
commit e1c04facdb
1 changed files with 3 additions and 5 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

8
ext/oekaki/main.php
View File

@ -10,12 +10,10 @@ class Oekaki extends Extension {
global $user, $page; global $user, $page;
if($event->page_matches("oekaki")) { if($event->page_matches("oekaki")) {
if(!$user->can("create_image")) { if($event->get_arg(0) == "create" and $user->can("create_image")){
$this->theme->display_permission_denied();
}
if($event->get_arg(0) == "create") {
$this->theme->display_page(); $this->theme->display_page();
}else{
$this->theme->display_permission_denied();
} }
if($event->get_arg(0) == "upload") { if($event->get_arg(0) == "upload") {
// FIXME: this allows anyone to upload anything to /data ... // FIXME: this allows anyone to upload anything to /data ...