perdedora/leftypol
1
0
Fork 0
forked from leftypol/leftypol
Code Pull requests Activity

Revert "pages.php: QUICKFIX handle unban and notes in mod_user_posts_by_ip to workaround security token issue"

Browse source 
This reverts commit 4b49019282.
This commit is contained in:
Zankaria 2024-12-29 00:01:41 +01:00
parent e87f50407c
commit c718eb70b0
1 changed files with 0 additions and 39 deletions
Download patch file Download diff file Expand all files Collapse all files

39
inc/mod/pages.php
View file

@ -928,45 +928,6 @@ function mod_user_posts_by_ip(Context $ctx, string $ip, string $encoded_cursor =
$config = $ctx->get('config');
if (isset($_POST['ban_id'], $_POST['unban'])) {
if (!hasPermission($config['mod']['unban']))
error($config['error']['noaccess']);
Bans::delete($_POST['ban_id'], true, $mod['boards']);
if (empty($encoded_cursor)) {
\header("Location: ?/user_posts/ip/$ip#bans", true, $config['redirect_http']);
} else {
\header("Location: ?/user_posts/ip/$ip/cursor/$encoded_cursor#bans", true, $config['redirect_http']);
}
return;
}
if (isset($_POST['note'])) {
if (!hasPermission($config['mod']['create_notes']))
error($config['error']['noaccess']);
$_POST['note'] = escape_markup_modifiers($_POST['note']);
markup($_POST['note']);
$query = prepare('INSERT INTO ``ip_notes`` VALUES (NULL, :ip, :mod, :time, :body)');
$query->bindValue(':ip', $ip);
$query->bindValue(':mod', $mod['id']);
$query->bindValue(':time', time());
$query->bindValue(':body', $_POST['note']);
$query->execute() or error(db_error($query));
Cache::delete("mod_page_ip_view_notes_$ip");
modLog("Added a note for <a href=\"?/user_posts/ip/{$ip}\">{$ip}</a>");
if (empty($encoded_cursor)) {
\header("Location: ?/user_posts/ip/$ip#notes", true, $config['redirect_http']);
} else {
\header("Location: ?/user_posts/ip/$ip/cursor/$encoded_cursor#notes", true, $config['redirect_http']);
}
return;
}
$args = [
'ip' => $ip,
'posts' => []