diff options
| author | Michael Foster <savetheinternet@tinyboard.org> | 2013-08-11 21:22:25 +1000 |
|---|---|---|
| committer | Michael Foster <savetheinternet@tinyboard.org> | 2013-08-11 21:22:25 +1000 |
| commit | 5836cd23d2d58c77bbb04d061c43c232a102c979 (patch) | |
| tree | afc50869e09b841ba56d3836691bc5fa6c9a4f2a | |
| parent | faf1d42a0844092e2a9dad88ff79e2476553f6f0 (diff) | |
Critical bug: users could not report OP posts, only replies (thanks to ctrlcctrlv for finding this)
| -rw-r--r-- | post.php | 26 |
1 files changed, 12 insertions, 14 deletions
@@ -117,20 +117,18 @@ if (isset($_POST['delete'])) { $thread = $query->fetchColumn(); - if ($thread) { - if ($config['syslog']) - _syslog(LOG_INFO, 'Reported post: ' . - '/' . $board['dir'] . $config['dir']['res'] . sprintf($config['file_page'], $thread ? $thread : $id) . ($thread ? '#' . $id : '') . - ' for "' . $reason . '"' - ); - $query = prepare("INSERT INTO ``reports`` VALUES (NULL, :time, :ip, :board, :post, :reason)"); - $query->bindValue(':time', time(), PDO::PARAM_INT); - $query->bindValue(':ip', $_SERVER['REMOTE_ADDR'], PDO::PARAM_STR); - $query->bindValue(':board', $board['uri'], PDO::PARAM_INT); - $query->bindValue(':post', $id, PDO::PARAM_INT); - $query->bindValue(':reason', $reason, PDO::PARAM_STR); - $query->execute() or error(db_error($query)); - } + if ($config['syslog']) + _syslog(LOG_INFO, 'Reported post: ' . + '/' . $board['dir'] . $config['dir']['res'] . sprintf($config['file_page'], $thread ? $thread : $id) . ($thread ? '#' . $id : '') . + ' for "' . $reason . '"' + ); + $query = prepare("INSERT INTO ``reports`` VALUES (NULL, :time, :ip, :board, :post, :reason)"); + $query->bindValue(':time', time(), PDO::PARAM_INT); + $query->bindValue(':ip', $_SERVER['REMOTE_ADDR'], PDO::PARAM_STR); + $query->bindValue(':board', $board['uri'], PDO::PARAM_INT); + $query->bindValue(':post', $id, PDO::PARAM_INT); + $query->bindValue(':reason', $reason, PDO::PARAM_STR); + $query->execute() or error(db_error($query)); } $is_mod = isset($_POST['mod']) && $_POST['mod']; |
