external/aurweb
0
0
Fork 0
mirror of https://gitlab.archlinux.org/archlinux/aurweb.git synced 2025-02-03 09:43:03 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions

fix bug #5403 - privilege issue in safe flag

Browse source
This commit is contained in:
simo 2006-09-17 20:36:55 +00:00
parent 5686ba6516
commit 7a6681635a
1 changed files with 2 additions and 2 deletions
Download patch file Download diff file Expand all files Collapse all files

4
web/html/packages.php
View file

@ -476,7 +476,7 @@ if (isset($_REQUEST["do_Flag"])) {
print __("You must be logged in before you can flag packages."); print __("You must be logged in before you can flag packages.");
print "<br />\n"; print "<br />\n";
} else { } else {
if (!empty($ids) || $atype == "User") { if (!empty($ids) && $atype == "Trusted User") {
$dbh = db_connect(); $dbh = db_connect();
# There currently shouldn't be multiple requests here, but the format in which # There currently shouldn't be multiple requests here, but the format in which
# it's sent requires this # it's sent requires this
@ -500,7 +500,7 @@ if (isset($_REQUEST["do_Flag"])) {
print __("You must be logged in before you can unflag packages."); print __("You must be logged in before you can unflag packages.");
print "<br />\n"; print "<br />\n";
} else { } else {
if (!empty($ids) || $atype == "User") { if (!empty($ids) && $atype == "Trusted User") {
$dbh = db_connect(); $dbh = db_connect();
# There currently shouldn't be multiple requests here, but the format in which # There currently shouldn't be multiple requests here, but the format in which
# it's sent requires this # it's sent requires this