diff --git a/upload/source/module/forum/forum_ajax.php b/upload/source/module/forum/forum_ajax.php index cf8c204..ae459d5 100644 --- a/upload/source/module/forum/forum_ajax.php +++ b/upload/source/module/forum/forum_ajax.php @@ -356,6 +356,9 @@ if($_GET['action'] == 'checkusername') { } } elseif($_GET['action'] == 'downremoteimg') { + if(!$_G['group']['allowdownremoteimg']) { + dexit(); + } $_GET['message'] = str_replace(array("\r", "\n"), array($_GET['wysiwyg'] ? '
' : '', "\\n"), $_GET['message']); preg_match_all("/\[img\]\s*([^\[\<\r\n]+?)\s*\[\/img\]|\[img=\d{1,4}[x|\,]\d{1,4}\]\s*([^\[\<\r\n]+?)\s*\[\/img\]/is", $_GET['message'], $image1, PREG_SET_ORDER); preg_match_all("/\/ismUe", $_GET['message'], $image2, PREG_SET_ORDER);