mirror of
https://github.com/NodeBB/NodeBB.git
synced 2025-11-02 12:05:57 +01:00
edit restrict
This commit is contained in:
@@ -419,7 +419,7 @@ passport.deserializeUser(function(uid, done) {
|
|||||||
|
|
||||||
app.get('/users/:uid/edit', function(req, res){
|
app.get('/users/:uid/edit', function(req, res){
|
||||||
|
|
||||||
if(req.user && req.params.uid)
|
if(req.user && req.params.uid && req.user.uid === req.params.uid)
|
||||||
res.send(templates['header'] + create_route('users/'+req.params.uid+'/edit','accountedit') + templates['footer']);
|
res.send(templates['header'] + create_route('users/'+req.params.uid+'/edit','accountedit') + templates['footer']);
|
||||||
else
|
else
|
||||||
return res.redirect('/403');
|
return res.redirect('/403');
|
||||||
|
|||||||
Reference in New Issue
Block a user