2du vor 5 Jahren
Ursprung
Commit
bb564ca231
1 geänderte Dateien mit 9 neuen und 5 gelöschten Zeilen
  1. 9 5
      route/give_user_ban.py

+ 9 - 5
route/give_user_ban.py

@@ -8,6 +8,9 @@ def give_user_ban_2(conn, name):
     if ban_check(ip = ip, tool = 'login') == 1:
     if ban_check(ip = ip, tool = 'login') == 1:
     	if ip_or_user(ip) == 1 or admin_check('all', None, ip) == 0:
     	if ip_or_user(ip) == 1 or admin_check('all', None, ip) == 0:
             return re_error('/ban')
             return re_error('/ban')
+    else:
+    	if admin_check(1, None, ip) !=1:
+    	    return re_error('/error/4')
 
 
     if flask.request.method == 'POST':
     if flask.request.method == 'POST':
         end = flask.request.form.get('second', '0')
         end = flask.request.form.get('second', '0')
@@ -31,8 +34,12 @@ def give_user_ban_2(conn, name):
             if admin_check(None, 'ban' + (' ' + type_d if type_d else '') + ' (' + name + ')') != 1:
             if admin_check(None, 'ban' + (' ' + type_d if type_d else '') + ' (' + name + ')') != 1:
                 return re_error('/error/3')
                 return re_error('/error/3')
         else:
         else:
-            if admin_check(1, 'ban (' + name + ')') != 1:
-                return re_error('/error/3')
+            if name == ip:
+                if admin_check('all', 'ban (' + name + ')') != 1:
+                    return re_error('/error/3')
+            else:
+            	if admin_check(1, 'ban (' + name + ')') != 1:
+                    return re_error('/error/3')
 
 
         ban_insert(
         ban_insert(
             name,
             name,
@@ -45,9 +52,6 @@ def give_user_ban_2(conn, name):
 
 
         return redirect('/block_log')
         return redirect('/block_log')
     else:
     else:
-        if admin_check(1) != 1:
-            return re_error('/error/3')
-
         curs.execute(db_change("select end, why from rb where block = ? and ongoing = '1' and band = ?"), [name, band])
         curs.execute(db_change("select end, why from rb where block = ? and ongoing = '1' and band = ?"), [name, band])
         end = curs.fetchall()
         end = curs.fetchall()
         if end:
         if end: