This commit is contained in:
Aevann1 2022-03-05 02:47:04 +02:00
parent ce14b8ba5d
commit de88c55734

View file

@ -621,7 +621,8 @@ def badge_grant_post(v):
try: badge_id = int(request.values.get("badge_id"))
except: abort(400)
if badge_id in {16,17,94,95,96,97,98,109}: abort(403)
if badge_id in {16,17,94,95,96,97,98,109} and v.id != AEVANN_ID:
abort(403)
if user.has_badge(badge_id):
return render_template("admin/badge_grant.html", v=v, badge_types=badges, error="User already has that badge.")