carpathianflorist
/
MarseyWorld
forked from MarseyWorld/MarseyWorld
1
0
Fork 0
Code Pull Requests Activity

dsf

master
Aevann1 2022-02-05 23:17:47 +02:00
parent ff60c3c821
commit 742368fcf1
1 changed files with 2 additions and 4 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

6
files/routes/admin.py
View File

@ -349,8 +349,7 @@ def get_sub_sidebar(v, sub):
sub = g.db.query(Sub).filter_by(name=sub).one_or_none()
if not sub: abort(404)
mod = g.db.query(Mod).filter_by(user_id=v.id, sub=sub.name).one_or_none()
if not mod: abort(403)
if not v.mods(sub.name): abort(403)
return render_template('admin/sidebar.html', v=v, sidebar=sub.sidebar, sub=sub)
@ -362,8 +361,7 @@ def post_sub_sidebar(v, sub):
sub = g.db.query(Sub).filter_by(name=sub).one_or_none()
if not sub: abort(404)
mod = g.db.query(Mod).filter_by(user_id=v.id, sub=sub.name).one_or_none()
if not mod: abort(403)
if not v.mods(sub.name): abort(403)
sub.sidebar = request.values.get('sidebar', '').strip()
sub.sidebar_html = sanitize(sub.sidebar)