From 04b2bf3d71e758dcf903a3d2cb25b22468c536ed Mon Sep 17 00:00:00 2001 From: liugang Date: Wed, 3 Apr 2024 14:42:23 +0800 Subject: [PATCH] * commonModel: allow user to access the main method of block module without privilege. --- module/common/model.php | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/module/common/model.php b/module/common/model.php index 1ddb6236ef..8b1479789a 100644 --- a/module/common/model.php +++ b/module/common/model.php @@ -397,7 +397,7 @@ class commonModel extends model if($this->loadModel('user')->isLogon() or ($this->app->company->guest and $this->app->user->account == 'guest')) { if(stripos($method, 'ajax') !== false) return true; - if($module == 'block' && stripos(',admin,set,delete,sort,resize,dashboard,dynamic,welcome,contribute,printblock,guide,close,', ",{$method},") !== false) return true; + if($module == 'block' && stripos(',admin,set,delete,sort,resize,dashboard,dynamic,welcome,contribute,printblock,main,guide,close,', ",{$method},") !== false) return true; if($module == 'my' and $method == 'guidechangetheme') return true; if($module == 'misc' and $method == 'downloadclient') return true; if($module == 'misc' and $method == 'changelog') return true;