kibi/f0ckm
1
0
Fork 0
Code Issues 3 Pull Requests Actions Packages Projects Releases Wiki Activity

fix hall creation

Browse Source
This commit is contained in:
Kibi Kelburton
2026-05-28 18:33:23 +02:00
parent dcdea5e9ea
commit 4ed87cd331
1 changed files with 3 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

3
src/hall_image_handler.mjs
View File

@@ -269,6 +269,9 @@ export const handleHallUpdate = async (req, res) => {
// POST /api/v2/admin/halls — create a new hall // POST /api/v2/admin/halls — create a new hall
export const handleHallCreate = async (req, res) => { export const handleHallCreate = async (req, res) => {
const session = await lookupSession(req);
if (!session || (!session.admin && !session.is_moderator)) return sendJson(res, { success: false, msg: 'Unauthorized' }, 403);
// CSRF check // CSRF check
const token = req.headers['x-csrf-token'] || req.url?.qs?.csrf_token; const token = req.headers['x-csrf-token'] || req.url?.qs?.csrf_token;
if (!token || token !== session.csrf_token) { if (!token || token !== session.csrf_token) {