AC

发现一个越权漏洞，解决方案：authorId需根据article_id查询出来，因为前端的数据除了token，都不可信。 ```python json_data = request.json current_user_id = json_data.get('authorId') if g.user.id != current_user_id: # or g.current_user.can(Permission.ADMINISTER): return forbidden('Insufficient permissions') ```

On Windows， you must set environment variable `PATH`. * set it temporarily in python code. ``` import os os.environ['path'] = 'C:\\data\\ffmpeg.exe' # do someting ``` * set it permanently in...

Hi, @justincavery, is this project depreciated ? and the [NFTX APP V2.33.1 ](https://nftx.io/)online is NOT open-source ?

this is the file: [🗄️ classifier.txt](https://github.com/youzan/YZSpamFilter/files/4461667/classifier.txt)