浏览代码

Quick fix for prevent removing myself from server

AY 4 年之前
父节点
当前提交
18dcf5792a
共有 1 个文件被更改,包括 13 次插入0 次删除
  1. 13 0
      user.go

+ 13 - 0
user.go

@@ -110,6 +110,19 @@ func user_handleUserRemove(w http.ResponseWriter, r *http.Request) {
 		return
 	}
 
+	currentUserinfo, err := userHandler.GetUserInfoFromRequest(w, r)
+	if err != nil {
+		//This user has not logged in
+		sendErrorResponse(w, "User not logged in")
+		return
+	}
+
+	if currentUserinfo.Username == userinfo.Username {
+		//This user has not logged in
+		sendErrorResponse(w, "You can't remove yourself")
+		return
+	}
+
 	//Clear Core User Data
 	userinfo.RemoveUser()