From 78dc8746ca555bc979bd79c86f29233c28710285 Mon Sep 17 00:00:00 2001
From: Aevann1 <randomname42029@gmail.com>
Date: Mon, 28 Mar 2022 00:13:15 +0200
Subject: [PATCH] fsd

---
 files/routes/users.py | 16 ++++++++--------
 1 file changed, 8 insertions(+), 8 deletions(-)

diff --git a/files/routes/users.py b/files/routes/users.py
index 7a346dfd6..523f01014 100644
--- a/files/routes/users.py
+++ b/files/routes/users.py
@@ -85,7 +85,7 @@ gevent.spawn(leaderboard_thread())
 @auth_required
 def upvoters_posts(v, username, uid):
 	u = get_user(username)
-	if u.is_private and v.id != u.id: return render_template("userpage_private.html", u=u, v=v)
+	if u.is_private and v.id != u.id: abort(403)
 	id = u.id
 	uid = int(uid)
 
@@ -106,7 +106,7 @@ def upvoters_posts(v, username, uid):
 @auth_required
 def upvoters_comments(v, username, uid):
 	u = get_user(username)
-	if u.is_private and v.id != u.id: return render_template("userpage_private.html", u=u, v=v)
+	if u.is_private and v.id != u.id: abort(403)
 	id = u.id
 	uid = int(uid)
 
@@ -127,7 +127,7 @@ def upvoters_comments(v, username, uid):
 @auth_required
 def downvoters_posts(v, username, uid):
 	u = get_user(username)
-	if u.is_private and v.id != u.id: return render_template("userpage_private.html", u=u, v=v)
+	if u.is_private and v.id != u.id: abort(403)
 	id = u.id
 	uid = int(uid)
 
@@ -148,7 +148,7 @@ def downvoters_posts(v, username, uid):
 @auth_required
 def downvoters_comments(v, username, uid):
 	u = get_user(username)
-	if u.is_private and v.id != u.id: return render_template("userpage_private.html", u=u, v=v)
+	if u.is_private and v.id != u.id: abort(403)
 	id = u.id
 	uid = int(uid)
 
@@ -172,7 +172,7 @@ def downvoters_comments(v, username, uid):
 @auth_required
 def upvoting_posts(v, username, uid):
 	u = get_user(username)
-	if u.is_private and v.id != u.id: return render_template("userpage_private.html", u=u, v=v)
+	if u.is_private and v.id != u.id: abort(403)
 	id = u.id
 	uid = int(uid)
 
@@ -193,7 +193,7 @@ def upvoting_posts(v, username, uid):
 @auth_required
 def upvoting_comments(v, username, uid):
 	u = get_user(username)
-	if u.is_private and v.id != u.id: return render_template("userpage_private.html", u=u, v=v)
+	if u.is_private and v.id != u.id: abort(403)
 	id = u.id
 	uid = int(uid)
 
@@ -214,7 +214,7 @@ def upvoting_comments(v, username, uid):
 @auth_required
 def downvoting_posts(v, username, uid):
 	u = get_user(username)
-	if u.is_private and v.id != u.id: return render_template("userpage_private.html", u=u, v=v)
+	if u.is_private and v.id != u.id: abort(403)
 	id = u.id
 	uid = int(uid)
 
@@ -235,7 +235,7 @@ def downvoting_posts(v, username, uid):
 @auth_required
 def downvoting_comments(v, username, uid):
 	u = get_user(username)
-	if u.is_private and v.id != u.id: return render_template("userpage_private.html", u=u, v=v)
+	if u.is_private and v.id != u.id: abort(403)
 	id = u.id
 	uid = int(uid)