Update ParentalControlsController, prevent children from adding accounts

1 year ago · c91f1c595a
parent db1b466792
commit c91f1c595a
1 changed files with 1 additions and 0 deletions
--- a/app/Http/Controllers/ParentalControlsController.php
+++ b/app/Http/Controllers/ParentalControlsController.php
@ -19,6 +19,7 @@ class ParentalControlsController extends Controller
    {
        if($authCheck) {
            abort_unless($request->user(), 404);
+            abort_unless($request->user()->has_roles === 0, 404);
        }
        abort_unless(config('instance.parental_controls.enabled'), 404);
        if(config_cache('pixelfed.open_registration') == false) {