up-port 8d828e1
- check goodtoken while approving comments
This commit is contained in:
@ -658,7 +658,7 @@ function serendipity_approveComment($cid, $entry_id, $force = false, $moderate =
|
|||||||
$rs = serendipity_db_query($sql, true);
|
$rs = serendipity_db_query($sql, true);
|
||||||
|
|
||||||
// Check for adminEntriesMaintainOthers
|
// Check for adminEntriesMaintainOthers
|
||||||
if (!$force && $rs['entry_authorid'] != $serendipity['authorid'] && !serendipity_checkPermission('adminEntriesMaintainOthers')) {
|
if (!$force && !$goodtoken && $rs['entry_authorid'] != $serendipity['authorid'] && !serendipity_checkPermission('adminEntriesMaintainOthers')) {
|
||||||
return false; // wrong user having no adminEntriesMaintainOthers right
|
return false; // wrong user having no adminEntriesMaintainOthers right
|
||||||
}
|
}
|
||||||
|
|
||||||
|
Reference in New Issue
Block a user