Leahnaya/pokemon-showdown-client
1
0
Fork 0
mirror of https://github.com/smogon/pokemon-showdown-client.git synced 2026-03-21 17:50:29 -05:00
Code Issues Actions Packages Projects Releases Wiki Activity

Users: Prevent ladder tour accounts from resetting W/L

Browse Source
This commit is contained in:
Marty-D 2024-07-27 13:53:51 -04:00 committed by GitHub
parent dd392d9fa9
commit d3bd677d75
No known key found for this signature in database
GPG Key ID: B5690EEEBB952194
1 changed files with 4 additions and 3 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

7
pokemonshowdown.com/users.php
View File

@ -469,7 +469,8 @@ if (!$user) {
// Ladder
if ($user['userid'] === $curuser['userid']) {
$ladderTourID = str_starts_with($user['userid'], 'lt11');
if ($user['userid'] === $curuser['userid'] && !$ladderTourID) {
if ($users->csrfCheck() && @$_POST['resetLadder']) {
$formatLadder = new NTBBLadder(@$_POST['resetLadder']);
if (substr($formatLadder->formatid, -7) !== 'current' && substr($formatLadder->formatid, -11) !== 'suspecttest') {
@ -492,7 +493,7 @@ if (!$user) {
} else {
$bufs[$buftype] .= '<td style="text-align:center" colspan="2"><small style="color:#777">(more games needed)</small>';
}
if ($user['userid'] === $curuser['userid']) {
if ($user['userid'] === $curuser['userid'] && !$ladderTourID) {
$bufs[$buftype] .= '</td><td style="text-align:center"><small>' . $row['w'] . '</small></td><td style="text-align:center"><small>' . $row['l'] . '</small></td>';
if (substr($row['formatid'], -7) !== 'current' && substr($row['formatid'], -11) !== 'suspecttest') {
$bufs[$buftype] .= '<td><button name="openReset" value="'.htmlspecialchars($row['formatid']).'"><small>Reset</small></button></td>';
@ -546,7 +547,7 @@ if (!$user) {
}
?>
<?php
if ($user['userid'] === $curuser['userid']) {
if ($user['userid'] === $curuser['userid'] && !$ladderTourID) {
?>
<tr style="display:none" class="ladderresetform">
<td colspan="7">