From 744c95f7ca7e7582d97a2aae974fcdbf5fb16399 Mon Sep 17 00:00:00 2001 From: Aevann Date: Wed, 3 May 2023 17:50:42 +0300 Subject: [PATCH] lock user profiles from logged-out-cels --- files/routes/users.py | 8 ++++---- files/templates/settings/personal.html | 2 +- 2 files changed, 5 insertions(+), 5 deletions(-) diff --git a/files/routes/users.py b/files/routes/users.py index 995a14091..fb566197b 100644 --- a/files/routes/users.py +++ b/files/routes/users.py @@ -812,7 +812,7 @@ def userpagelisting(user:User, v=None, page:int=1, sort="new", t="all"): @app.get("/@") @limiter.limit(DEFAULT_RATELIMIT) -@auth_desired_with_logingate +@auth_required def u_username_wall(v:Optional[User], username:str): u = get_user(username, v=v, include_blocks=True) if username != u.username: @@ -863,7 +863,7 @@ def u_username_wall(v:Optional[User], username:str): @app.get("/@/wall/comment/") @limiter.limit(DEFAULT_RATELIMIT) -@auth_desired_with_logingate +@auth_required def u_username_wall_comment(v:User, username:str, cid): comment = get_comment(cid, v=v) if not comment.wall_user_id: abort(400) @@ -912,7 +912,7 @@ def u_username_wall_comment(v:User, username:str, cid): @app.get("/@/posts") @limiter.limit(DEFAULT_RATELIMIT) -@auth_desired_with_logingate +@auth_required def u_username(v:Optional[User], username:str): u = get_user(username, v=v, include_blocks=True) if username != u.username: @@ -987,7 +987,7 @@ def u_username(v:Optional[User], username:str): @app.get("/@/comments") @limiter.limit(DEFAULT_RATELIMIT) -@auth_desired_with_logingate +@auth_required def u_username_comments(username, v=None): u = get_user(username, v=v, include_blocks=True) if username != u.username: diff --git a/files/templates/settings/personal.html b/files/templates/settings/personal.html index ceef9c92e..395cd75ea 100644 --- a/files/templates/settings/personal.html +++ b/files/templates/settings/personal.html @@ -215,7 +215,7 @@ {{common.text_area_section('profile-enemies', '/settings/personal', 'enemies', 'Enemies', v.enemies, 'Limit of ' ~ BIO_FRIENDS_ENEMIES_LENGTH_LIMIT ~ ' characters', 'Enter your enemies on the site...', false, false, BIO_FRIENDS_ENEMIES_LENGTH_LIMIT, true)}} {{common.text_area_section('profile-signature', '/settings/personal', 'sig', 'Signature', v.sig, 'Limit of 200 characters', 'Enter a signature...', true, false, 200, v.patron or v.sig)}} {# toggle_section(title, id, name, flag, below_text, disabled) #} - {{common.toggle_section('Private Mode', 'privateswitch', 'private', v.is_private, 'This will hide your post and comment history from others. We will also ask search engines to not index your profile page. (Your content will still be accessible via direct link.)', false)}} + {{common.toggle_section('Private Mode', 'privateswitch', 'private', v.is_private, 'This will hide your profile page from others.', false)}} {{common.toggle_section('Spider', 'spiderswitch', 'spider', v.spider, 'Have a spider friend accompany you during your journey on the site.', false)}}