flashii/misuzu
1
1
Fork 0
Code Issues 1 Pull requests Releases 140 Activity

Fixed forum post deletion and editing.

Browse source
This commit is contained in:
flash 2023-08-04 22:49:09 +00:00
parent cf71129153
commit 87915b6a25
3 changed files with 4 additions and 4 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

2
public-legacy/forum/posting.php
View file

@ -120,7 +120,7 @@ if($mode === 'edit') {
return;
}
if(!perms_check($perms, $post['poster_id'] === $currentUserId ? MSZ_FORUM_PERM_EDIT_POST : MSZ_FORUM_PERM_EDIT_ANY_POST)) {
if(!perms_check($perms, (string)$post['poster_id'] === $currentUserId ? MSZ_FORUM_PERM_EDIT_POST : MSZ_FORUM_PERM_EDIT_ANY_POST)) {
echo render_error(403);
return;
}

4
templates/_layout/input.twig
View file

@ -4,10 +4,10 @@
{% endapply %}
{% endmacro %}
{% macro input_csrf() %}
{% macro input_csrf(name) %}
{% from _self import input_hidden %}
{% apply spaceless %}
{{ input_hidden('_csrf', csrf_token()) }}
{{ input_hidden(name|default('_csrf'), csrf_token()) }}
{% endapply %}
{% endmacro %}

2
templates/forum/confirm.twig
View file

@ -7,7 +7,7 @@
{% block content %}
<form action="" method="get" class="container forum__confirm">
{{ container_title('<i class="' ~ class|default('fas fa-exclamation-circle') ~ ' fa-fw"></i> ' ~ title) }}
{{ input_csrf() }}
{{ input_csrf('csrf') }}
{% for name, value in params %}
<input type="hidden" name="{{ name }}" value="{{ value }}">
{% endfor %}