From 7b544103afe07e1c17eee0d11559963b189aff4e Mon Sep 17 00:00:00 2001
From: Jakob <jakob.matzkowski@gmx.de>
Date: Sun, 8 Mar 2020 18:19:37 +0100
Subject: [PATCH] board is visible to public, posting is only possible when
 logged in

---
 threadr/board/index.php | 27 ++++++++++++++-------------
 1 file changed, 14 insertions(+), 13 deletions(-)

diff --git a/threadr/board/index.php b/threadr/board/index.php
index b976536..e9fcdfc 100644
--- a/threadr/board/index.php
+++ b/threadr/board/index.php
@@ -3,7 +3,6 @@ session_start();
 %SET_LOGIN_VARIABLE%
 %NO_CHEAP_SESSION_STEALING%
 %PLEAZE_NO_CACHE%
-%REQUIRE_LOGIN%
 $navbar="boards";
 $id=$_GET['id'];
 ?>
@@ -51,19 +50,21 @@ $id=$_GET['id'];
       </div>
       <div class="item-3">
         <?php
-        if(isset($_GET['action'])) {
-          if($_GET['action']=='post') {
-            include("./post.php");
-          } elseif($_GET['action']=='submit') {
-            $user_id=$_SESSION[user_id];
-            $title=$_POST['title'];
-            $content=$_POST['content'];
-            include("./submit.php");
-          } elseif($_GET['action']=='edit') {
-            include("./edit.php");
+        if($login) {
+          if(isset($_GET['action'])) {
+            if($_GET['action']=='post') {
+              include("./post.php");
+            } elseif($_GET['action']=='submit') {
+              $user_id=$_SESSION[user_id];
+              $title=$_POST['title'];
+              $content=$_POST['content'];
+              include("./submit.php");
+            } elseif($_GET['action']=='edit') {
+              include("./edit.php");
+            }
+          } else {
+            include("./default.php");
           }
-        } else {
-          include("./default.php");
         }
         ?>
       </div>