From e9b62d1d76356e4f32d61e4f9e45a91946435be7 Mon Sep 17 00:00:00 2001
From: maTh <math-home@web.de>
Date: Sat, 16 Oct 2021 12:19:20 +0200
Subject: fix #3661: not logged in user: button to mark all as read leads to
 HTTP403 error (#3871)

* fix

* optimized

* Fix href

Co-authored-by: Alexandre Alapetite <alexandre@alapetite.fr>
---
 app/views/helpers/pagination.phtml | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

(limited to 'app/views')

diff --git a/app/views/helpers/pagination.phtml b/app/views/helpers/pagination.phtml
index 0022ba299..f4d48d3de 100755
--- a/app/views/helpers/pagination.phtml
+++ b/app/views/helpers/pagination.phtml
@@ -25,7 +25,7 @@
 		<a id="load_more" href="<?= Minz_Url::display($url_next) ?>">
 			<?= _t('gen.pagination.load_more') ?>
 		</a>
-	<?php } elseif ($url_mark_read) { ?>
+	<?php } elseif ($url_mark_read && FreshRSS_Auth::hasAccess()) { ?>
 		<button id="bigMarkAsRead"
 			class="as-link <?= FreshRSS_Context::$user_conf->reading_confirm ? 'confirm" disabled="disabled' : '' ?>"
 			form="mark-read-pagination"
@@ -36,9 +36,9 @@
 			<?= _t('gen.pagination.mark_all_read') ?>
 		</button>
 	<?php } else { ?>
-		<a id="bigMarkAsRead" href=".">
+		<div id="bigMarkAsRead">
 			<?= _t('gen.pagination.nothing_to_load') ?><br />
-		</a>
+		</div>
 	<?php } ?>
 	</li>
 </ul>
-- 
cgit v1.2.3