diff options
| author | Igor Wiedler <igor@wiedler.ch> | 2011-10-30 19:06:34 +0100 |
|---|---|---|
| committer | Igor Wiedler <igor@wiedler.ch> | 2011-10-30 19:10:58 +0100 |
| commit | 18ca3a32bc9f5ec84b6abba3c79920d23df8c778 (patch) | |
| tree | 850c8a7f37684a989da5b4a9a7764dd582189989 /phpBB/includes | |
| parent | d6c3e7785d98190436acdd8468a1d343b673c55b (diff) | |
| download | forums-18ca3a32bc9f5ec84b6abba3c79920d23df8c778.tar forums-18ca3a32bc9f5ec84b6abba3c79920d23df8c778.tar.gz forums-18ca3a32bc9f5ec84b6abba3c79920d23df8c778.tar.bz2 forums-18ca3a32bc9f5ec84b6abba3c79920d23df8c778.tar.xz forums-18ca3a32bc9f5ec84b6abba3c79920d23df8c778.zip | |
[ticket/10365] Require m_report permission to see reports in mcp_post
This was exposed to anyone with m_ perms in mcp_post_details.
PHPBB3-10365
Diffstat (limited to 'phpBB/includes')
| -rw-r--r-- | phpBB/includes/mcp/mcp_post.php | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/phpBB/includes/mcp/mcp_post.php b/phpBB/includes/mcp/mcp_post.php index de7f3e63ee..ba45037a18 100644 --- a/phpBB/includes/mcp/mcp_post.php +++ b/phpBB/includes/mcp/mcp_post.php @@ -246,7 +246,7 @@ function mcp_post_details($id, $mode, $action) } // Get Reports - if ($auth->acl_get('m_', $post_info['forum_id'])) + if ($auth->acl_get('m_report', $post_info['forum_id'])) { $sql = 'SELECT r.*, re.*, u.user_id, u.username FROM ' . REPORTS_TABLE . ' r, ' . USERS_TABLE . ' u, ' . REPORTS_REASONS_TABLE . " re |