up-port 8d828e1 - check goodtoken while approving comments

This commit is contained in:
Ian 2012-04-11 18:09:56 +02:00
parent 3c7dfd935e
commit d8bcff11a7

View File

@ -658,7 +658,7 @@ function serendipity_approveComment($cid, $entry_id, $force = false, $moderate =
$rs = serendipity_db_query($sql, true);
// Check for adminEntriesMaintainOthers
if (!$force && $rs['entry_authorid'] != $serendipity['authorid'] && !serendipity_checkPermission('adminEntriesMaintainOthers')) {
if (!$force && !$goodtoken && $rs['entry_authorid'] != $serendipity['authorid'] && !serendipity_checkPermission('adminEntriesMaintainOthers')) {
return false; // wrong user having no adminEntriesMaintainOthers right
}