fix user_can: torrent_hr

This commit is contained in:
xiaomlove
2022-08-21 17:00:14 +08:00
parent 9534dcead6
commit 981efb3211
2 changed files with 3 additions and 3 deletions

View File

@@ -57,7 +57,7 @@ $torrentOperationLog = [];
* hr
* @since 1.6.0-beta12
*/
if (isset($_POST['hr']) && isset(\App\Models\Torrent::$hrStatus[$_POST['hr']])) {
if (isset($_POST['hr']) && isset(\App\Models\Torrent::$hrStatus[$_POST['hr']]) && user_can('torrent_hr')) {
$updateset[] = "hr = " . sqlesc($_POST['hr']);
}