search

Noziro / MediaTracker

EXTREME ALPHA STATE. Track all of your media, from movies, to games, anime, books, and more. Official name TBD.
0 stars 0 forks source link

Users can post to boards and threads they do not have access to. #25

Closed Noziro closed 3 years ago

Noziro commented 4 years ago

Currently, you can simply HTML edit the

on forum pages to submit posts to boards you don't have access to. This can be fixed by checking the user's permission level in comparison to their destination on attempt of any submission. I began work on this in commit 962eb7f5ae5f0ca78ec13366395bf1548c0e0182, but it is currently broken for reasons unknown. See line: https://github.com/Noziro/MediaTracker/commit/962eb7f5ae5f0ca78ec13366395bf1548c0e0182#diff-f8866bf5b956f865204e5f52f8a0a778R26