carpathianflorist
/
MarseyWorld
forked from MarseyWorld/MarseyWorld
1
0
Fork 0
Code Pull Requests Activity

Amend 9b17bb1cfe78: fix userpage for logged-out. 

The previous fix to shadowbanned users not being able to view their
own profile broke userpages for logged out users (and filled the log
up with 500s) due to sloppy logic around accessing v.id. This has
been remedied.
master
Snakes 2022-06-17 02:30:20 -04:00
parent 65c5351b02
commit b995b4ddfb
1 changed files with 1 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
files/routes/users.py
View File

@ -914,7 +914,7 @@ def u_username(username, v=None):
if request.headers.get("Authorization") or request.headers.get("xhr"): return {"error": f"That username is reserved for: {u.reserved}"}
return render_template("userpage_reserved.html", u=u, v=v)
if u.shadowbanned and not (v and v.admin_level >= 2) and not v.id == u.id:
if u.shadowbanned and not (v and v.admin_level >= 2) and not (v and v.id == u.id):
abort(404)
if v and v.id not in (u.id,DAD_ID) and (u.patron or u.admin_level > 1):