carpathianflorist
/
MarseyWorld
forked from MarseyWorld/MarseyWorld
1
0
Fork 0
Code Pull Requests Activity

dfs

master
Aevann1 2022-03-05 02:47:04 +02:00
parent 67d807f5b4
commit d0f0e2bad2
1 changed files with 2 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

3
files/routes/admin.py
View File

@ -621,7 +621,8 @@ def badge_grant_post(v):
try: badge_id = int(request.values.get("badge_id"))
except: abort(400)
if badge_id in {16,17,94,95,96,97,98,109}: abort(403)
if badge_id in {16,17,94,95,96,97,98,109} and v.id != AEVANN_ID:
abort(403)
if user.has_badge(badge_id):
return render_template("admin/badge_grant.html", v=v, badge_types=badges, error="User already has that badge.")