From 8b15411865b216f20b4f029a94310a12ab59ddc1 Mon Sep 17 00:00:00 2001 From: millette Date: Wed, 10 Dec 2008 13:11:23 -0500 Subject: [PATCH] make sure passed profile_id is valid in Notice::saveNew darcs-hash:20081210181123-099f7-b13ae11d136512655fc5ba4bb314c80256244593.gz --- classes/Notice.php | 4 ++++ 1 file changed, 4 insertions(+) diff --git a/classes/Notice.php b/classes/Notice.php index b85dccd237..77e0948dc2 100644 --- a/classes/Notice.php +++ b/classes/Notice.php @@ -92,6 +92,10 @@ class Notice extends Memcached_DataObject } static function saveNew($profile_id, $content, $source=NULL, $is_local=1, $reply_to=NULL, $uri=NULL) { + if (!Profile::staticGet($profile_id)) { + common_log(LOG_ERR, 'Problem saving notice. Unknown user.'); + return _('Problem saving notice. Unknown user.'); + } if (!Notice::checkEditThrottle($profile_id)) { common_log(LOG_WARNING, 'Excessive posting by profile #' . $profile_id . '; throttled.'); -- 2.39.5