Browse Source

Update ParentalControlsController, prevent children from adding accounts

Daniel Supernault 1 year ago
parent
commit
c91f1c595a
1 changed files with 1 additions and 0 deletions
  1. 1 0
      app/Http/Controllers/ParentalControlsController.php

+ 1 - 0
app/Http/Controllers/ParentalControlsController.php

@@ -19,6 +19,7 @@ class ParentalControlsController extends Controller
     {
         if($authCheck) {
             abort_unless($request->user(), 404);
+            abort_unless($request->user()->has_roles === 0, 404);
         }
         abort_unless(config('instance.parental_controls.enabled'), 404);
         if(config_cache('pixelfed.open_registration') == false) {