From c7eadd4b0cf5f11a1edf47a4c50c4bd31ed085d9 Mon Sep 17 00:00:00 2001
From: Floorb <132411956+Neetpone@users.noreply.github.com>
Date: Thu, 25 Apr 2024 12:08:25 -0400
Subject: [PATCH] fix: fix a couple undefined variable errors

---
 includes/Helpers/AbilityHelper.php | 2 +-
 theme/bulma/common.php             | 2 +-
 2 files changed, 2 insertions(+), 2 deletions(-)

diff --git a/includes/Helpers/AbilityHelper.php b/includes/Helpers/AbilityHelper.php
index a08d6d6..878b0dc 100644
--- a/includes/Helpers/AbilityHelper.php
+++ b/includes/Helpers/AbilityHelper.php
@@ -29,7 +29,7 @@ class AbilityHelper {
 
                 return $publicly_visible // Everyone can see public pastes
                     || ($user !== null && $user->id === $paste->user_id) // Creators of pastes can see their own private pastes
-                    || $user->role >= User::ROLE_MODERATOR; // Moderators and above can see all pastes
+                    || ($user !== null && $user->role >= User::ROLE_MODERATOR); // Moderators and above can see all pastes
             },
             'edit' => function(User | null $user, Paste $paste) {
                 return $user !== null
diff --git a/theme/bulma/common.php b/theme/bulma/common.php
index 74a2b08..5a77389 100644
--- a/theme/bulma/common.php
+++ b/theme/bulma/common.php
@@ -155,7 +155,7 @@ $flashes = getFlashes();
 
 <?php if ($current_user): ?>
     <div class="hidden" id="js-data-holder" data-user-id="<?= $current_user->id ?>"
-         data-csrf-token="<?= $csrf_token ?>"></div>
+         data-csrf-token="<?= isset($csrf_token) ? $csrf_token : '' ?>"></div>
 <?php endif; ?>
 
 <div id="#signin" class="modal modal-fx-fadeInScale">