403 all guests on /search & /search/term regardless of mobile/desktop - closes #612

src/routes/api.js

@@ -215,6 +215,7 @@ var path = require('path'),
 			});
 
 			app.get('/search', function (req, res) {
+				if (req.user && req.user.uid) {
 					return res.json({
 						show_no_topics: 'hide',
 						show_no_posts: 'hide',
@@ -223,6 +224,9 @@ var path = require('path'),
 						posts: [],
 						topics: []
 					});
+				} else {
+					res.send(403);
+				}
 			});
 
 			app.get('/search/:term', function (req, res, next) {
@@ -254,6 +258,7 @@ var path = require('path'),
 					});
 				}
 
+				if (req.user && req.user.uid) {
 					async.parallel([searchPosts, searchTopics], function (err, results) {
 						if (err) {
 							return next();
@@ -268,6 +273,9 @@ var path = require('path'),
 							topics: results[1]
 						});
 					});
+				} else {
+					res.send(403);
+				}
 			});
 
 			app.get('/reset', function (req, res) {