mirror of
https://gitlab.archlinux.org/archlinux/aurweb.git
synced 2025-02-03 09:43:03 +00:00
fix bug #5403 - privilege issue in safe flag
This commit is contained in:
parent
5686ba6516
commit
7a6681635a
1 changed files with 2 additions and 2 deletions
|
@ -476,7 +476,7 @@ if (isset($_REQUEST["do_Flag"])) {
|
|||
print __("You must be logged in before you can flag packages.");
|
||||
print "<br />\n";
|
||||
} else {
|
||||
if (!empty($ids) || $atype == "User") {
|
||||
if (!empty($ids) && $atype == "Trusted User") {
|
||||
$dbh = db_connect();
|
||||
# There currently shouldn't be multiple requests here, but the format in which
|
||||
# it's sent requires this
|
||||
|
@ -500,7 +500,7 @@ if (isset($_REQUEST["do_Flag"])) {
|
|||
print __("You must be logged in before you can unflag packages.");
|
||||
print "<br />\n";
|
||||
} else {
|
||||
if (!empty($ids) || $atype == "User") {
|
||||
if (!empty($ids) && $atype == "Trusted User") {
|
||||
$dbh = db_connect();
|
||||
# There currently shouldn't be multiple requests here, but the format in which
|
||||
# it's sent requires this
|
||||
|
|
Loading…
Add table
Add a link
Reference in a new issue