From 433c7d91eb478b39fcddd5674db0f6ddd875e65d Mon Sep 17 00:00:00 2001 From: Baris Usakli Date: Thu, 25 Jul 2013 14:44:43 -0400 Subject: [PATCH] some fixes --- src/routes/user.js | 9 ++++----- 1 file changed, 4 insertions(+), 5 deletions(-) diff --git a/src/routes/user.js b/src/routes/user.js index 0be3abcf12..4c98b6c81f 100644 --- a/src/routes/user.js +++ b/src/routes/user.js @@ -217,6 +217,7 @@ var user = require('./../user.js'), function api_method(req, res) { var callerUID = req.user ? req.user.uid : 0; + console.log(req.user); var userslug = req.params.userslug; var section = req.params.section ? String(req.params.section).toLowerCase() : null; @@ -297,7 +298,7 @@ var user = require('./../user.js'), res.json(404, { error: 'User not found!' }) ; return; } - uid = parseInt(uid, 10); + if(uid !== callerUid || callerUid === "0") { res.json(403, { error: 'Not allowed!' }); return; @@ -357,12 +358,10 @@ var user = require('./../user.js'), user.get_uid_by_userslug(userslug, function(uid) { if(uid === null) { - callback(null); + callback(null) return; } - - uid = parseInt(uid, 10); - + user.getUserData(uid, function(data) { if(data) { data.joindate = utils.relativeTime(data.joindate);