carpathianflorist
/
MarseyWorld
forked from MarseyWorld/MarseyWorld
1
0
Fork 0
Code Pull Requests Activity

vcvc

master
Aevann1 2022-01-27 22:25:48 +02:00
parent 485ae92e83
commit cabb0a49e8
1 changed files with 2 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
files/routes/awards.py
View File

@ -633,7 +633,7 @@ def award_comment(cid, v):
@app.get("/admin/awards")
@admin_level_required(2)
def admin_userawards_get(v):
if request.host == 'pcmemes.net': abort(403)
if request.host == 'pcmemes.net' and v.admin_level < 3: abort(403)
if v.admin_level != 3:
return render_template("admin/awards.html", awards=list(AWARDS3.values()), v=v)
@ -644,7 +644,7 @@ def admin_userawards_get(v):
@limiter.limit("1/second;30/minute;200/hour;1000/day")
@admin_level_required(2)
def admin_userawards_post(v):
if request.host == 'pcmemes.net': abort(403)
if request.host == 'pcmemes.net' and v.admin_level < 3: abort(403)
try: u = request.values.get("username").strip()
except: abort(404)