From 18ca3a32bc9f5ec84b6abba3c79920d23df8c778 Mon Sep 17 00:00:00 2001 From: Igor Wiedler Date: Sun, 30 Oct 2011 19:06:34 +0100 Subject: [PATCH] [ticket/10365] Require m_report permission to see reports in mcp_post This was exposed to anyone with m_ perms in mcp_post_details. PHPBB3-10365 --- phpBB/includes/mcp/mcp_post.php | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/phpBB/includes/mcp/mcp_post.php b/phpBB/includes/mcp/mcp_post.php index de7f3e63ee..ba45037a18 100644 --- a/phpBB/includes/mcp/mcp_post.php +++ b/phpBB/includes/mcp/mcp_post.php @@ -246,7 +246,7 @@ function mcp_post_details($id, $mode, $action) } // Get Reports - if ($auth->acl_get('m_', $post_info['forum_id'])) + if ($auth->acl_get('m_report', $post_info['forum_id'])) { $sql = 'SELECT r.*, re.*, u.user_id, u.username FROM ' . REPORTS_TABLE . ' r, ' . USERS_TABLE . ' u, ' . REPORTS_REASONS_TABLE . " re