up-port 8d828e1 - check goodtoken while approving comments
This commit is contained in:
parent
3c7dfd935e
commit
d8bcff11a7
@ -658,7 +658,7 @@ function serendipity_approveComment($cid, $entry_id, $force = false, $moderate =
|
||||
$rs = serendipity_db_query($sql, true);
|
||||
|
||||
// Check for adminEntriesMaintainOthers
|
||||
if (!$force && $rs['entry_authorid'] != $serendipity['authorid'] && !serendipity_checkPermission('adminEntriesMaintainOthers')) {
|
||||
if (!$force && !$goodtoken && $rs['entry_authorid'] != $serendipity['authorid'] && !serendipity_checkPermission('adminEntriesMaintainOthers')) {
|
||||
return false; // wrong user having no adminEntriesMaintainOthers right
|
||||
}
|
||||
|
||||
|
Loading…
x
Reference in New Issue
Block a user