From 14cf45c168a6bdb5e0cd37a4bfc0ebc093a890f4 Mon Sep 17 00:00:00 2001 From: Pitu Date: Mon, 3 Apr 2017 17:29:10 -0300 Subject: [PATCH] Fixed bug that caused people to upload as anon even if running private --- controllers/uploadController.js | 8 +++++++- 1 file changed, 7 insertions(+), 1 deletion(-) diff --git a/controllers/uploadController.js b/controllers/uploadController.js index 0207253..400b559 100644 --- a/controllers/uploadController.js +++ b/controllers/uploadController.js @@ -42,8 +42,14 @@ uploadsController.upload = function(req, res, next) { if (token === undefined) token = '' db.table('users').where('token', token).then((user) => { + + if(user.length === 0) + if(config.private === true) + return res.status(401).json({ success: false, description: 'Invalid token provided' }) + let userid - if (user.length > 0) userid = user[0].id + if(user.length > 0) + userid = user[0].id // Check if user is trying to upload to an album let album