From 845042ce77baa8adec81762a30e97d1640caa332 Mon Sep 17 00:00:00 2001 From: CaramelKat <32065563+caramelkat@users.noreply.github.com> Date: Thu, 9 Dec 2021 12:43:01 -0600 Subject: [PATCH] Added additional check when someone attempts to post in Announcements --- src/services/juxt-web/routes/console/posts.js | 4 +++- 1 file changed, 3 insertions(+), 1 deletion(-) diff --git a/src/services/juxt-web/routes/console/posts.js b/src/services/juxt-web/routes/console/posts.js index 023f65a..3d4f537 100644 --- a/src/services/juxt-web/routes/console/posts.js +++ b/src/services/juxt-web/routes/console/posts.js @@ -54,7 +54,9 @@ router.post('/:post_id/new', upload.none(), async function (req, res, next) { if(user.account_status !== 0 || req.body.olive_community_id === 'announcements') { throw new Error('User not allowed to post') } - let parentPost = await database.getPostByID(req.params.post_id.toString()) + let parentPost = await database.getPostByID(req.params.post_id.toString()); + if(!parentPost) + return res.sendStatus(403); let community = await database.getCommunityByID(req.body.olive_community_id); if(req.body.body === '' && req.body.painting === '' && req.body.screenshot === '') { res.status(422);