From 981efb3211e438d0b9a69c2b8fd2aa8a553fe9ef Mon Sep 17 00:00:00 2001
From: xiaomlove <i353856593@163.com>
Date: Sun, 21 Aug 2022 17:00:14 +0800
Subject: [PATCH] fix user_can: torrent_hr

---
 public/edit.php     | 4 ++--
 public/takeedit.php | 2 +-
 2 files changed, 3 insertions(+), 3 deletions(-)

diff --git a/public/edit.php b/public/edit.php
index 91c6cb77..915ea331 100644
--- a/public/edit.php
+++ b/public/edit.php
@@ -163,7 +163,7 @@ else {
 	if (user_can('torrentsticky') || (user_can('torrentmanage') && $CURUSER["picker"] == 'yes')){
 		$pickcontent = $pickcontentPrefix =  "";
 
-        if(get_user_class() >= $torrentonpromotion_class)
+        if(user_can('torrentonpromotion'))
         {
             $pickcontent .= "<b>".$lang_edit['row_special_torrent'].":&nbsp;</b>"."<select name=\"sel_spstate\" style=\"width: 100px;\">" .promotion_selection($row["sp_state"], 0). "</select>&nbsp;&nbsp;&nbsp;".'<select name="promotion_time_type" onchange="if (this.value == \'2\') {document.getElementById(\'promotion_until_note\').style.display = \'\';} else {document.getElementById(\'promotion_until_note\').style.display = \'none\';}"><option value="0"'.($row['promotion_time_type'] == 0 ? ' selected="selected"' : '').'>'.$lang_edit['select_use_global_setting'].'</option><option value="1"'.($row['promotion_time_type'] == 1 ? ' selected="selected"' : '').'>'.$lang_edit['select_forever'].'</option><option value="2"'.($row['promotion_time_type'] == 2 ? ' selected="selected"' : '').'>'.$lang_edit['select_until'].'</option></select><span id="promotion_until_note"'.($row['promotion_time_type'] == 2 ? '' : ' style="display: none;"').'>';
             $pickcontent .= '<input type="text" id="promotionuntiltime" name="promotionuntil" style="width: 120px;" value="'.($row['promotion_until'] > $row['added'] ? $row['promotion_until'] : '').'" />';
@@ -196,7 +196,7 @@ else {
 		}
 		tr($lang_edit['row_pick'], $pickcontent, 1);
 	}
-	if (get_setting('hr.mode') == \App\Models\HitAndRun::MODE_MANUAL && get_user_class() >= get_setting('authority.torrent_hr')) {
+	if (get_setting('hr.mode') == \App\Models\HitAndRun::MODE_MANUAL && user_can('torrent_hr')) {
         $hrRadio = sprintf('<label><input type="radio" name="hr" value="0"%s />NO</label>', (string)$row['hr'] === '0' ? ' checked' : '');
         $hrRadio .= sprintf('<label><input type="radio" name="hr" value="1"%s />YES</label>', (string)$row['hr'] === '1' ? ' checked' : '');
         tr('H&R', $hrRadio, 1);
diff --git a/public/takeedit.php b/public/takeedit.php
index d1b67a5a..2352112f 100644
--- a/public/takeedit.php
+++ b/public/takeedit.php
@@ -57,7 +57,7 @@ $torrentOperationLog = [];
  * hr
  * @since 1.6.0-beta12
  */
-if (isset($_POST['hr']) && isset(\App\Models\Torrent::$hrStatus[$_POST['hr']])) {
+if (isset($_POST['hr']) && isset(\App\Models\Torrent::$hrStatus[$_POST['hr']]) && user_can('torrent_hr')) {
     $updateset[] = "hr = " . sqlesc($_POST['hr']);
 }