Make it impossible to delete self-subscriptions via the API

diff --git a/actions/twitapifriendships.php b/actions/twitapifriendships.php
index f2ea46910ee92edbf0c0618b1e51e66787085e0a..eea8945c393402d7080bda3534f38116ffe9bc7b 100644 (file)
--- a/actions/twitapifriendships.php
+++ b/actions/twitapifriendships.php
@@ -99,6 +99,12 @@ class TwitapifriendshipsAction extends TwitterapiAction
         $other = $this->get_profile($id);
         $user = $apidata['user']; // Alwyas the auth user
 
+       if ($user->id == $other->id) {
+           $this->clientError(_("You cannot unfollow yourself!"),
+                              403, $apidata['content-type']);
+           return;
+       }
+
         $sub = new Subscription();
         $sub->subscriber = $user->id;
         $sub->subscribed = $other->id;