carpathianflorist
/
MarseyWorld
forked from MarseyWorld/MarseyWorld
1
0
Fork 0
Code Pull Requests Activity

Fix /bet route not enforcing exclusive votes.

master
Snakes 2022-06-28 03:43:16 -04:00
parent 7e7450ef33
commit 159af40cfe
1 changed files with 4 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

6
files/routes/votes.py
View File

@ -239,8 +239,10 @@ def bet(comment_id, v):
vote = request.values.get("vote") vote = request.values.get("vote")
comment_id = int(comment_id) comment_id = int(comment_id)
comment = get_comment(comment_id) comment = get_comment(comment_id)
existing = g.db.query(CommentVote).filter_by(user_id=v.id, comment_id=comment.id).one_or_none() option_ids = map(lambda x: x.id, comment.post.bet_options)
existing = g.db.query(CommentVote).filter_by(user_id=v.id) \
.filter(CommentVote.comment_id.in_(option_ids)).one_or_none()
if existing: return "", 204 if existing: return "", 204
vote = CommentVote(user_id=v.id, vote_type=1, comment_id=comment.id) vote = CommentVote(user_id=v.id, vote_type=1, comment_id=comment.id)