浏览代码

Update ParentalControlsController, prevent children from adding accounts

Daniel Supernault 1 年之前
父节点
当前提交
c91f1c595a
共有 1 个文件被更改,包括 1 次插入0 次删除
  1. 1 0
      app/Http/Controllers/ParentalControlsController.php

+ 1 - 0
app/Http/Controllers/ParentalControlsController.php

@@ -19,6 +19,7 @@ class ParentalControlsController extends Controller
     {
         if($authCheck) {
             abort_unless($request->user(), 404);
+            abort_unless($request->user()->has_roles === 0, 404);
         }
         abort_unless(config('instance.parental_controls.enabled'), 404);
         if(config_cache('pixelfed.open_registration') == false) {