fix minor exploit with banning

This commit is contained in:
Lorenzo Yario
2024-09-21 14:39:13 -07:00
committed by GitHub
parent c95877bdcb
commit 428a686f47

View File

@@ -1549,7 +1549,7 @@ function mod_ban_post(Context $ctx, $board, $delete, $post, $token = false) {
if (!openBoard($board))
error($config['error']['noboard']);
if (!hasPermission($config['mod']['delete'], $board))
if (!hasPermission($config['mod']['ban'], $board))
error($config['error']['noaccess']);
$security_token = make_secure_link_token($board . '/ban/' . $post);