Leisuretimedock/blessing-skin-server
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Check owner before operating player

Browse Source
This commit is contained in:
Pig Fang 2019-04-23 13:09:06 +08:00
parent b70004ec0f
commit d8f08176a2
1 changed files with 8 additions and 7 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

11
app/Http/Controllers/AdminController.php
View File

@ -483,11 +483,13 @@ class AdminController extends Controller
return json(trans('general.unexistent-player'), 1); return json(trans('general.unexistent-player'), 1);
} }
if ($player->user()->first()->uid !== $currentUser->uid) { $owner = $player->user;
if ($player->user->permission >= $currentUser->permission) { if (
$owner && $owner->uid !== $currentUser->uid &&
$owner->permission >= $currentUser->permission
) {
return json(trans('admin.players.no-permission'), 1); return json(trans('admin.players.no-permission'), 1);
} }
}
if ($action == 'texture') { if ($action == 'texture') {
$this->validate($request, [ $this->validate($request, [
@ -531,8 +533,7 @@ class AdminController extends Controller
$player->name = $name; $player->name = $name;
$player->save(); $player->save();
if (option('single_player', false)) { if (option('single_player', false) && $owner) {
$owner = $player->user;
$owner->nickname = $name; $owner->nickname = $name;
$owner->save(); $owner->save();
} }