aljaz/CTFd
1
0
Fork 0
mirror of https://github.com/aljazceru/CTFd.git synced 2026-02-09 16:24:26 +01:00
Code Issues Packages Projects Releases Wiki Activity

Merge pull request #50 from ajvpot/master

Browse Source 
Fix authentication for certain admin actions
This commit is contained in:
Kevin Chung
2015-09-14 22:41:59 -04:00
parent 310d6b8071 9578355143
commit bd4bd96ce0
1 changed files with 3 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

3
CTFd/admin.py
View File

@@ -547,6 +547,7 @@ def admin_fails(teamid='all'):
@admin.route('/admin/chal/new', methods=['POST'])
@admins_only
def admin_create_chal():
files = request.files.getlist('files[]')
@@ -581,6 +582,7 @@ def admin_create_chal():
@admin.route('/admin/chal/delete', methods=['POST'])
@admins_only
def admin_delete_chal():
challenge = Challenges.query.filter_by(id=request.form['id']).first()
if challenge:
@@ -600,6 +602,7 @@ def admin_delete_chal():
@admin.route('/admin/chal/update', methods=['POST'])
@admins_only
def admin_update_chal():
challenge = Challenges.query.filter_by(id=request.form['id']).first()
challenge.name = request.form['name']