diff --git a/r2/r2/controllers/validator/validator.py b/r2/r2/controllers/validator/validator.py index f56585163..7be55dee2 100644 --- a/r2/r2/controllers/validator/validator.py +++ b/r2/r2/controllers/validator/validator.py @@ -723,7 +723,10 @@ class VModhash(Validator): self.fatal = fatal def run(self, uh): - pass + if not c.user_is_loggedin or uh != c.user.name: + if self.fatal: + abort(403) + self.set_error('INVALID_MODHASH') def param_docs(self): return {