From 5fdec63e8cf7e467ecf23ebb5248e74e0e75fd67 Mon Sep 17 00:00:00 2001 From: Aevann Date: Tue, 27 Dec 2022 07:25:29 +0200 Subject: [PATCH] disallow changing site settings in devrama --- files/routes/admin.py | 3 +++ 1 file changed, 3 insertions(+) diff --git a/files/routes/admin.py b/files/routes/admin.py index 8f10d0380..a604c10e5 100644 --- a/files/routes/admin.py +++ b/files/routes/admin.py @@ -489,6 +489,9 @@ def admin_git_head(): @app.post("/admin/site_settings/") @admin_level_required(PERMS['SITE_SETTINGS']) def change_settings(v:User, setting): + if SITE == 'rdrama.net': + abort(403, "Can't change this shit in devrama!") + if setting not in get_settings().keys(): abort(404, f"Setting '{setting}' not found") val = toggle_setting(setting)