From cdbd6d4a684909cc80a2f113fd105252767db63d Mon Sep 17 00:00:00 2001 From: Cédric Bonhomme Date: Wed, 9 Apr 2014 21:21:09 +0200 Subject: Fixed bug: all users were able to access to any article. --- pyaggr3g470r/views.py | 4 +++- 1 file changed, 3 insertions(+), 1 deletion(-) diff --git a/pyaggr3g470r/views.py b/pyaggr3g470r/views.py index 7ca3ac02..0f0d6822 100644 --- a/pyaggr3g470r/views.py +++ b/pyaggr3g470r/views.py @@ -250,7 +250,9 @@ def article(article_id=None): if not article.readed: article.readed = True db.session.commit() - return render_template('article.html', head_title=utils.clear_string(article.title), article=article) + return render_template('article.html', head_title=utils.clear_string(article.title), article=article) + return redirect(redirect_url()) + @app.route('/mark_as_read/', methods=['GET']) @app.route('/mark_as_read/', methods=['GET']) -- cgit