From: millette Date: Wed, 10 Dec 2008 18:11:23 +0000 (-0500) Subject: make sure passed profile_id is valid in Notice::saveNew X-Git-Url: https://git.mxchange.org/?a=commitdiff_plain;h=8b15411865b216f20b4f029a94310a12ab59ddc1;p=quix0rs-gnu-social.git make sure passed profile_id is valid in Notice::saveNew darcs-hash:20081210181123-099f7-b13ae11d136512655fc5ba4bb314c80256244593.gz --- diff --git a/classes/Notice.php b/classes/Notice.php index b85dccd237..77e0948dc2 100644 --- a/classes/Notice.php +++ b/classes/Notice.php @@ -92,6 +92,10 @@ class Notice extends Memcached_DataObject } static function saveNew($profile_id, $content, $source=NULL, $is_local=1, $reply_to=NULL, $uri=NULL) { + if (!Profile::staticGet($profile_id)) { + common_log(LOG_ERR, 'Problem saving notice. Unknown user.'); + return _('Problem saving notice. Unknown user.'); + } if (!Notice::checkEditThrottle($profile_id)) { common_log(LOG_WARNING, 'Excessive posting by profile #' . $profile_id . '; throttled.');