Explorar el Código

Quick fix for prevent removing myself from server

AY hace 4 años
padre
commit
18dcf5792a
Se han modificado 1 ficheros con 13 adiciones y 0 borrados
  1. 13 0
      user.go

+ 13 - 0
user.go

@@ -110,6 +110,19 @@ func user_handleUserRemove(w http.ResponseWriter, r *http.Request) {
 		return
 	}
 
+	currentUserinfo, err := userHandler.GetUserInfoFromRequest(w, r)
+	if err != nil {
+		//This user has not logged in
+		sendErrorResponse(w, "User not logged in")
+		return
+	}
+
+	if currentUserinfo.Username == userinfo.Username {
+		//This user has not logged in
+		sendErrorResponse(w, "You can't remove yourself")
+		return
+	}
+
 	//Clear Core User Data
 	userinfo.RemoveUser()