From ca06a24df234a98ec101204061441f13df045c77 Mon Sep 17 00:00:00 2001
From: Baris Soner Usakli <barisusakli@gmail.com>
Date: Sat, 1 Feb 2014 23:14:44 -0500
Subject: [PATCH] only logged in users can flag

---
 src/socket.io/posts.js | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/src/socket.io/posts.js b/src/socket.io/posts.js
index 56bb38aea6..475466f5c6 100644
--- a/src/socket.io/posts.js
+++ b/src/socket.io/posts.js
@@ -214,6 +214,10 @@ SocketPosts.getPidPage = function(socket, pid, callback) {
 }
 
 SocketPosts.flag = function(socket, pid, callback) {
+	if (!socket.uid) {
+		return callback(new Error('not-logged-in'));
+	}
+
 	var message = '',
 		path = '';