From d13d06b986bc3ae067882f23b6ab8b35cf1a8262 Mon Sep 17 00:00:00 2001 From: Michael Andreen Date: Mon, 16 Oct 2017 17:48:33 +0200 Subject: [PATCH] Allow non member attackers to post own coords --- lib/NDWeb.pm | 1 + lib/NDWeb/Controller/Members.pm | 2 +- 2 files changed, 2 insertions(+), 1 deletion(-) diff --git a/lib/NDWeb.pm b/lib/NDWeb.pm index 81e8dee..a63eeaa 100644 --- a/lib/NDWeb.pm +++ b/lib/NDWeb.pm @@ -95,6 +95,7 @@ __PACKAGE__->deny_access_unless('/alliances/resources',[qw/alliances_resources/] __PACKAGE__->deny_access_unless('/graphs/alliancevsintel',[qw/graphs_intel/]); __PACKAGE__->deny_access_unless('/graphs/avgalliancevsintel',[qw/graphs_intel/]); __PACKAGE__->deny_access_unless('/members',[qw/members/]); +__PACKAGE__->allow_access_if('/members/postowncoords',[qw/attack_menu/]); __PACKAGE__->deny_access_unless('/members/defenders',[qw/members_defenders/]); __PACKAGE__->deny_access_unless('/covop',[qw/covop/]); __PACKAGE__->deny_access_unless('/calls',[qw/calls_edit/]); diff --git a/lib/NDWeb/Controller/Members.pm b/lib/NDWeb/Controller/Members.pm index d0d7e31..b885745 100644 --- a/lib/NDWeb/Controller/Members.pm +++ b/lib/NDWeb/Controller/Members.pm @@ -163,7 +163,7 @@ sub postowncoords : Local { $c->flash(error => $c->req->param('planet') . " are not valid coords."); } - $c->res->redirect($c->uri_for('')); + $c->res->redirect($c->uri_for('/'.$c->session->{referrer})); } sub postfleetsupdates : Local { -- 2.39.2