mirror of
https://github.com/phpbb/phpbb.git
synced 2025-06-28 22:28:51 +00:00
[ticket/10365] Require m_report permission to see reports in mcp_post
This was exposed to anyone with m_ perms in mcp_post_details. PHPBB3-10365
This commit is contained in:
parent
d6c3e7785d
commit
18ca3a32bc
1 changed files with 1 additions and 1 deletions
|
@ -246,7 +246,7 @@ function mcp_post_details($id, $mode, $action)
|
|||
}
|
||||
|
||||
// Get Reports
|
||||
if ($auth->acl_get('m_', $post_info['forum_id']))
|
||||
if ($auth->acl_get('m_report', $post_info['forum_id']))
|
||||
{
|
||||
$sql = 'SELECT r.*, re.*, u.user_id, u.username
|
||||
FROM ' . REPORTS_TABLE . ' r, ' . USERS_TABLE . ' u, ' . REPORTS_REASONS_TABLE . " re
|
||||
|
|
Loading…
Add table
Reference in a new issue