From 311fd00ecdd45a4a2037e62250784ae0637b6d76 Mon Sep 17 00:00:00 2001 From: barisusakli Date: Wed, 4 Feb 2015 00:33:15 -0500 Subject: [PATCH] dont allow guests to join groups --- src/groups.js | 4 ++++ 1 file changed, 4 insertions(+) diff --git a/src/groups.js b/src/groups.js index 462a0854a8..12d1c3a307 100644 --- a/src/groups.js +++ b/src/groups.js @@ -642,6 +642,10 @@ var async = require('async'), callback = callback || function() {}; + if (!parseInt(uid, 10)) { + return callback(new Error('[[error:invalid-uid]]')); + } + Groups.exists(groupName, function(err, exists) { if (err) { return callback(err);