From 783c192726cf8998a445849e110839eb51cd3be4 Mon Sep 17 00:00:00 2001
From: Peter 'Pita' Martischka <petermartischka@googlemail.com>
Date: Tue, 16 Aug 2011 18:17:46 +0100
Subject: [PATCH] ensure password and publicStatus functions are only used with
 group pads

---
 node/db/API.js | 28 ++++++++++++++++++++++++++++
 1 file changed, 28 insertions(+)

diff --git a/node/db/API.js b/node/db/API.js
index 1fd1bb7b..acce6485 100644
--- a/node/db/API.js
+++ b/node/db/API.js
@@ -280,6 +280,13 @@ Example returns:
 */
 exports.setPublicStatus = function(padID, publicStatus, callback)
 {
+  //ensure this is a group pad
+  if(padID.indexOf("$") == -1)
+  {
+    callback({stop: "You can only get/set the publicStatus of pads that belong to a group"});
+    return;
+  }
+
   //get the pad
   getPadSafe(padID, true, function(err, pad)
   {
@@ -310,6 +317,13 @@ Example returns:
 */
 exports.getPublicStatus = function(padID, callback)
 {
+  //ensure this is a group pad
+  if(padID.indexOf("$") == -1)
+  {
+    callback({stop: "You can only get/set the publicStatus of pads that belong to a group"});
+    return;
+  }
+  
   //get the pad
   getPadSafe(padID, true, function(err, pad)
   {
@@ -333,6 +347,13 @@ Example returns:
 */
 exports.setPassword = function(padID, password, callback)
 {
+  //ensure this is a group pad
+  if(padID.indexOf("$") == -1)
+  {
+    callback({stop: "You can only get/set the password of pads that belong to a group"});
+    return;
+  }
+  
   //get the pad
   getPadSafe(padID, true, function(err, pad)
   {
@@ -359,6 +380,13 @@ Example returns:
 */
 exports.isPasswordProtected = function(padID, callback)
 {
+  //ensure this is a group pad
+  if(padID.indexOf("$") == -1)
+  {
+    callback({stop: "You can only get/set the password of pads that belong to a group"});
+    return;
+  }
+
   //get the pad
   getPadSafe(padID, true, function(err, pad)
   {