From a1f49f6ccf8e698d8723c9ade3936d9258bfc559 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Bar=C4=B1=C5=9F=20Soner=20U=C5=9Fakl=C4=B1?= Date: Thu, 14 May 2015 13:56:12 -0400 Subject: [PATCH] backport to 0.6.x --- src/socket.io/meta.js | 4 ++++ 1 file changed, 4 insertions(+) diff --git a/src/socket.io/meta.js b/src/socket.io/meta.js index 83fbcc13da..be7a6b07bc 100644 --- a/src/socket.io/meta.js +++ b/src/socket.io/meta.js @@ -57,6 +57,10 @@ SocketMeta.rooms.enter = function(socket, data, callback) { return callback(new Error('[[error:invalid-data]]')); } + if (data.enter && data.enter.startsWith('uid_') && data.enter !== 'uid_' + socket.uid) { + return callback(new Error('[[error:not-allowed]]')); + } + if (socket.currentRoom) { socket.leave(socket.currentRoom); if (socket.currentRoom.indexOf('topic') !== -1) {