mirror of
https://github.com/phpbb/phpbb.git
synced 2025-07-31 05:50:42 +02:00
[ticket/10365] Require m_report permission to see reports in mcp_post
This was exposed to anyone with m_ perms in mcp_post_details. PHPBB3-10365
This commit is contained in:
@@ -246,7 +246,7 @@ function mcp_post_details($id, $mode, $action)
|
||||
}
|
||||
|
||||
// Get Reports
|
||||
if ($auth->acl_get('m_', $post_info['forum_id']))
|
||||
if ($auth->acl_get('m_report', $post_info['forum_id']))
|
||||
{
|
||||
$sql = 'SELECT r.*, re.*, u.user_id, u.username
|
||||
FROM ' . REPORTS_TABLE . ' r, ' . USERS_TABLE . ' u, ' . REPORTS_REASONS_TABLE . " re
|
||||
|
Reference in New Issue
Block a user