From 5e507fbb5ec514a31ac2b028a63a6fc219042109 Mon Sep 17 00:00:00 2001
From: Stefano Pigozzi <ste.pigozzi@gmail.com>
Date: Sun, 3 Feb 2019 01:56:44 +0100
Subject: [PATCH] idk i think this might work but i'm too sleepy to check

---
 templates/wikipage.html | 2 +-
 webserver.py            | 3 +++
 2 files changed, 4 insertions(+), 1 deletion(-)

diff --git a/templates/wikipage.html b/templates/wikipage.html
index 1ac06bd7..2bd39d64 100644
--- a/templates/wikipage.html
+++ b/templates/wikipage.html
@@ -43,7 +43,7 @@
                 Ultima modifica di <span class="last-author"><a href="/profile/{{ wiki_log.editor.username }}">{{ wiki_log.editor.username }}</a></span> alle <span class="last-timestamp">{{ wiki_log.timestamp.strftime('%Y-%m-%d %H:%M:%S %Z') }}</span>{% if wiki_log.reason %}, motivo: <span class="last-reason">{{ wiki_log.reason }}</span>{% endif %}
             </div>
         {% endif %}
-        {% if g.user %}
+        {% if g.user and not wiki_page.locked %}
             <div class="wiki-edit">
                 <h4>Modifica</h4>
                 <form action="{{ url_for('page_wiki', key=key) }}" method="POST">
diff --git a/webserver.py b/webserver.py
index c8f09661..9e5eb25d 100644
--- a/webserver.py
+++ b/webserver.py
@@ -260,6 +260,9 @@ def page_wiki(key: str):
     elif request.method == "POST":
         if not fl_g.user:
             return redirect(url_for("page_login"))
+        if wiki_page.locked:
+            abort(403)
+            return
         user = fl_g.session.query(db.Royal).filter_by(id=fl_g.user.id).one()
         new_content = request.form.get("content")
         # Create new page