Nemcio/NodeBB
1
0
Fork 0
mirror of https://github.com/NodeBB/NodeBB.git synced 2025-10-28 17:46:16 +01:00
Code Issues Packages Projects Releases Wiki Activity

dont allow invalid status to be set

Browse Source
This commit is contained in:
barisusakli
2014-09-24 13:36:32 -04:00
parent bedadd8b5f
commit 4eabf41a21
1 changed files with 5 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

5
src/socket.io/user.js
View File

@@ -350,6 +350,11 @@ SocketUser.setStatus = function(socket, status, callback) {
if (!socket.uid) {
return callback(new Error('[[invalid-uid]]'));
}
var allowedStatus = ['online', 'offline', 'dnd', 'away'];
if (allowedStatus.indexOf(status) === -1) {
return callback(new Error('[[invalid-user-status]]'));
}
user.setUserField(socket.uid, 'status', status, function(err) {
if (err) {
return callback(err);