Ian's patch: check goodtoken instead of token while approving comments
via email link
This commit is contained in:
@ -658,7 +658,7 @@ function serendipity_approveComment($cid, $entry_id, $force = false, $moderate =
|
||||
$rs = serendipity_db_query($sql, true);
|
||||
|
||||
// Check for adminEntriesMaintainOthers
|
||||
if (!$force && !$token && $rs['entry_authorid'] != $serendipity['authorid'] && !serendipity_checkPermission('adminEntriesMaintainOthers')) {
|
||||
if (!$force && !$goodtoken && $rs['entry_authorid'] != $serendipity['authorid'] && !serendipity_checkPermission('adminEntriesMaintainOthers')) {
|
||||
return false; // wrong user having no adminEntriesMaintainOthers right
|
||||
}
|
||||
|
||||
|
Reference in New Issue
Block a user