carpathianflorist
/
MarseyWorld
forked from MarseyWorld/MarseyWorld
1
0
Fork 0
Code Pull Requests Activity

only give an error when its the same person

master
Aevann 2024-11-15 19:41:21 +02:00
parent 083be80dd5
commit 07c0fcf302
1 changed files with 10 additions and 4 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

14
files/routes/users.py
View File

@ -210,8 +210,11 @@ def transfer_currency(v, username, currency_name, apply_tax):
def upvoters_downvoters(v, username, username2, cls, vote_cls, vote_dir, template, standalone):
u = get_user(username, v=v)
kind = "posts" if cls == Post else "comments"
if not u.is_visible_to(v, 0, kind): stop(403)
if username == username2:
kind = "posts" if cls == Post else "comments"
if not u.is_visible_to(v, 0, kind): stop(403)
id = u.id
uid = get_user(username2, attributes=[User.id]).id
@ -277,8 +280,11 @@ def downvoters_comments(v, username, username2):
def upvoting_downvoting(v, username, username2, cls, vote_cls, vote_dir, template, standalone):
u = get_user(username, v=v)
kind = "posts" if cls == Post else "comments"
if not u.is_visible_to(v, 0, kind): stop(403)
if username == username2:
kind = "posts" if cls == Post else "comments"
if not u.is_visible_to(v, 0, kind): stop(403)
id = u.id
uid = get_user(username2, attributes=[User.id]).id