Nemcio/NodeBB
1
0
Fork 0
mirror of https://github.com/NodeBB/NodeBB.git synced 2025-11-03 12:36:02 +01:00
Code Issues Packages Projects Releases Wiki Activity

prevent hax voting via websockets if system disabled

Browse Source
This commit is contained in:
psychobunny
2014-06-26 13:52:47 -04:00
parent a2f85648c5
commit b040201764
1 changed files with 8 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

8
src/favourites.js
View File

@@ -98,10 +98,18 @@ var async = require('async'),
}
Favourites.upvote = function(pid, uid, callback) {
if (meta.config['votingEnabled'] === false) {
return callback(false);
}
toggleVote('upvote', pid, uid, callback);
};
Favourites.downvote = function(pid, uid, callback) {
if (meta.config['votingEnabled'] === false) {
return callback(false);
}
user.getUserField(uid, 'reputation', function(err, reputation) {
if (reputation < meta.config['privileges:downvote']) {
return callback(new Error('[[error:not-enough-reputation-to-downvote]]'));