From d0f0e2bad22d0944ecac8920790d4c82c9ed6c83 Mon Sep 17 00:00:00 2001 From: Aevann1 Date: Sat, 5 Mar 2022 02:47:04 +0200 Subject: [PATCH] dfs --- files/routes/admin.py | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/files/routes/admin.py b/files/routes/admin.py index 9ed53f65b9..1815837122 100644 --- a/files/routes/admin.py +++ b/files/routes/admin.py @@ -621,7 +621,8 @@ def badge_grant_post(v): try: badge_id = int(request.values.get("badge_id")) except: abort(400) - if badge_id in {16,17,94,95,96,97,98,109}: abort(403) + if badge_id in {16,17,94,95,96,97,98,109} and v.id != AEVANN_ID: + abort(403) if user.has_badge(badge_id): return render_template("admin/badge_grant.html", v=v, badge_types=badges, error="User already has that badge.")