fix: only allow valid uids

5 years ago · 00d8ce2663
parent 4f6b6c5631
commit 00d8ce2663
1 changed files with 1 additions and 1 deletions
--- a/src/socket.io/user/profile.js
+++ b/src/socket.io/user/profile.js
@ -162,7 +162,7 @@ module.exports = function (SocketUser) {
 			throw new Error('[[error:invalid-uid]]');
 		}

-		if (!data || !data.uid) {
+		if (!data || !(parseInt(data.uid, 10) > 0)) {
 			throw new Error('[[error:invalid-data]]');
 		}