forked from MarseyWorld/MarseyWorld
remove exploit allowing jannies to unpin award pins
parent
1496f43ba6
commit
0b851d237c
|
@ -1121,8 +1121,6 @@ def remove_post(post_id, v):
|
|||
post = get_post(post_id)
|
||||
post.is_banned = True
|
||||
post.is_approved = None
|
||||
post.stickied = None
|
||||
post.is_pinned = False
|
||||
post.ban_reason = v.username
|
||||
g.db.add(post)
|
||||
|
||||
|
|
|
@ -804,7 +804,7 @@ def u_username(username, v=None):
|
|||
|
||||
if page == 1:
|
||||
sticky = []
|
||||
sticky = g.db.query(Submission).filter_by(is_pinned=True, author_id=u.id).all()
|
||||
sticky = g.db.query(Submission).filter_by(is_pinned=True, author_id=u.id, is_banned=False).all()
|
||||
if sticky:
|
||||
for p in sticky:
|
||||
ids = [p.id] + ids
|
||||
|
|
Loading…
Reference in New Issue