Prevent blocked users from buying items.

1 files changed, 4 insertions, 0 deletions

diff --git a/main.py b/main.py
index 75afabf..cda4edd 100755
--- a/main.py
+++ b/main.py
@@ -392,6 +392,10 @@ def process_whisper(nick, msg, mapserv):
             mapserv.sendall(whisper(nick, "Syntax incorrect."))
             return
 
+        if int(user.get("accesslevel")) == -1:
+            mapserv.sendall(whisper(nick, "You don't have the correct permissions."))
+            return
+
         if broken_string[1].isdigit() and broken_string[2].isdigit():
             amount = int(broken_string[1])
             uid = int(broken_string[2])