Nemcio/NodeBB
1
0
Fork 0
mirror of https://github.com/NodeBB/NodeBB.git synced 2025-10-26 08:36:12 +01:00
Code Issues Packages Projects Releases Wiki Activity

fix(emails): dont allow retrieving user data if showemail is false @julianlam

Browse Source
This commit is contained in:
Barış Soner Uşaklı
2021-07-05 14:00:48 -04:00
committed by Julian Lam
parent 6694bdd550
commit 7d115c8ef2
1 changed files with 6 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

6
src/controllers/user.js
View File

@@ -46,6 +46,12 @@ userController.getUserDataByField = async function (callerUid, field, fieldValue
uid = await user.getUidByUsername(fieldValue); uid = await user.getUidByUsername(fieldValue);
} else if (field === 'email') { } else if (field === 'email') {
uid = await user.getUidByEmail(fieldValue); uid = await user.getUidByEmail(fieldValue);
if (uid) {
const settings = await user.getSettings(uid);
if (settings && !settings.showemail) {
uid = 0;
}
}
} }
if (!uid) { if (!uid) {
return null; return null;