From d66bd0a94371eccd203390d0fd64b99c936ba8ce Mon Sep 17 00:00:00 2001
From: "What.CD" <committer@what.cd>
Date: Tue, 7 Jun 2011 08:00:10 +0000
Subject: [PATCH] Prevent users from viewing arbitrary cache keys

---
 sections/tools/misc/clear_cache.php | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/sections/tools/misc/clear_cache.php b/sections/tools/misc/clear_cache.php
index f8816982..8706158e 100644
--- a/sections/tools/misc/clear_cache.php
+++ b/sections/tools/misc/clear_cache.php
@@ -1,5 +1,5 @@
 <?
-if(!check_perms('admin_clear_cache')) {
+if(!check_perms('users_mod') || !check_perms('admin_clear_cache')) {
 	error(403);
 }