Changeset 752:a7b3d527ad77 for plugins/antispam

Timestamp:

11/06/11 16:32:00 (14 years ago)

Author:

xave

Branch:

default

Message:

Antispam plugin ecurity fix: user rights on the selected blog are now checked. Thanks to Romuald Brunet.

File:

• plugins/antispam/inc/lib.dc.antispam.php (modified) (1 diff)

plugins/antispam/inc/lib.dc.antispam.php

@@ -163 +163 @@
           }
           
+          $permissions = $core->getBlogPermissions($core->blog->id);
+          
+          if ( empty($permissions[$rs->user_id]) ) {
+               return false;
+          }
+          
           return $rs->user_id;
      }