From 88c4ef787e2ca0a954cfe41f60cb58eee461412b Mon Sep 17 00:00:00 2001
From: Savetheinternet <savetheinternet@n0v4.com>
Date: Fri, 10 Dec 2010 20:38:49 +1100
Subject: [PATCH] Simple permission handling

---
 inc/config.php | 1 +
 mod.php        | 2 ++
 2 files changed, 3 insertions(+)

diff --git a/inc/config.php b/inc/config.php
index 284692ce..832afffb 100644
--- a/inc/config.php
+++ b/inc/config.php
@@ -70,6 +70,7 @@
 	define('ERROR_MISSEDAFIELD', 'Your browser didn\'t submit an input when it should have.', true);
 	define('ERROR_REQUIRED', 'The %s field is required.', true);
 	define('ERROR_INVALIDFIELD', 'The %s field was invalid.', true);
+	define('ERROR_NOACCESS', 'You don\'t have permission to do that.', true);
 	
 	// For resizing, max values
 	define('THUMB_WIDTH',	200, true);
diff --git a/mod.php b/mod.php
index 744755c6..5695ad8b 100644
--- a/mod.php
+++ b/mod.php
@@ -65,6 +65,8 @@
 				)
 			);
 		} elseif(preg_match('/^\/new$/', $query)) {
+			if($mod['type'] != MOD_ADMIN) error(ERROR_NOACCESS);
+			
 			// New board
 			$body = '';