Nemcio/NodeBB
1
0
Fork 0
mirror of https://github.com/NodeBB/NodeBB.git synced 2025-11-06 22:15:48 +01:00
Code Issues Packages Projects Releases Wiki Activity

dont add category/topic slug if user doesnt have read permission

Browse Source 
or category is disabled etc.
This commit is contained in:
barisusakli
2015-04-08 21:16:06 -04:00
parent 0c851d864e
commit 835d4db481
4 changed files with 12 additions and 25 deletions
Download Patch File Download Diff File Expand all files Collapse all files

6
src/controllers/categories.js
View File

@@ -188,7 +188,7 @@ categoriesController.get = function(req, res, next) {
return helpers.notFound(req, res);
}
if (cid + '/' + req.params.slug !== results.categoryData.slug) {
if (req.params.slug && cid + '/' + req.params.slug !== results.categoryData.slug) {
return helpers.notFound(req, res);
}
@@ -196,6 +196,10 @@ categoriesController.get = function(req, res, next) {
return helpers.notAllowed(req, res);
}
if (!req.params.slug && results.categoryData.slug && results.categoryData.slug !== cid + '/') {
return helpers.redirect(res, '/category/' + encodeURI(results.categoryData.slug));
}
var topicIndex = utils.isNumber(req.params.topic_index) ? parseInt(req.params.topic_index, 10) - 1 : 0;
var topicCount = parseInt(results.categoryData.topic_count, 10);