mirror/php-phpbb
1
0
Fork 0
mirror of https://github.com/phpbb/phpbb.git synced 2025-08-03 23:37:39 +02:00
Code Issues Releases Wiki Activity

[ticket/10365] Require m_report permission to see reports in mcp_post

Browse Source 
This was exposed to anyone with m_ perms in mcp_post_details.

PHPBB3-10365
This commit is contained in:
Igor Wiedler
2011-10-30 19:06:34 +01:00
parent d6c3e7785d
commit 18ca3a32bc
1 changed files with 1 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
phpBB/includes/mcp/mcp_post.php
View File

@@ -246,7 +246,7 @@ function mcp_post_details($id, $mode, $action)
} }
// Get Reports // Get Reports
if ($auth->acl_get('m_', $post_info['forum_id'])) if ($auth->acl_get('m_report', $post_info['forum_id']))
{ {
$sql = 'SELECT r.*, re.*, u.user_id, u.username $sql = 'SELECT r.*, re.*, u.user_id, u.username
FROM ' . REPORTS_TABLE . ' r, ' . USERS_TABLE . ' u, ' . REPORTS_REASONS_TABLE . " re FROM ' . REPORTS_TABLE . ' r, ' . USERS_TABLE . ' u, ' . REPORTS_REASONS_TABLE . " re