fds

2021-09-27 03:00:25 +02:00 · 2021-09-27 03:00:25 +02:00 · 2c61edf2f8
parent 23154d85a9
commit 2c61edf2f8
1 changed files with 4 additions and 1 deletions
--- a/files/routes/awards.py
+++ b/files/routes/awards.py
@ -327,7 +327,10 @@ def admin_userawards_post(v):
 	if v.admin_level < 6:
 		abort(403)

-	u = get_user(request.values.get("username", '1'), graceful=False, v=v)
+	try: u = request.values.get("username").strip()
+	except: abort(404)
+
+	u = get_user(u, graceful=False, v=v)

 	notify_awards = {}