This commit is contained in:
Aevann1 2022-04-22 15:23:56 +02:00
parent 5ea316b1a4
commit 97aba453c2
6 changed files with 18 additions and 15 deletions

View file

@ -613,6 +613,8 @@ def admin_userawards_post(v):
try: u = request.values.get("username").strip()
except: abort(404)
whitelist = ("shit", "fireflies", "train", "scooter", "wholesome", "tilt", "glowie")
u = get_user(u, graceful=False, v=v)
notify_awards = {}
@ -620,6 +622,8 @@ def admin_userawards_post(v):
for key, value in request.values.items():
if key not in AWARDS: continue
if v.admin_level < 3 and key not in whitelist: continue
if value:
if int(value) > 10: abort(403)