From 51212c2bfac6e5569cc35cc7cf25d1ac1d96be7c Mon Sep 17 00:00:00 2001
From: barisusakli <barisusakli@gmail.com>
Date: Mon, 27 Apr 2015 16:02:08 -0400
Subject: [PATCH] closes #3096

---
 src/controllers/users.js | 6 +++++-
 1 file changed, 5 insertions(+), 1 deletion(-)

diff --git a/src/controllers/users.js b/src/controllers/users.js
index 5c669d6e6d..7b0047b7ad 100644
--- a/src/controllers/users.js
+++ b/src/controllers/users.js
@@ -7,7 +7,8 @@ var async = require('async'),
 	meta = require('../meta'),
 	pagination = require('../pagination'),
 	plugins = require('../plugins'),
-	db = require('../database');
+	db = require('../database'),
+	helpers = require('./helpers');
 
 usersController.getOnlineUsers = function(req, res, next) {
 	var	websockets = require('../socket.io');
@@ -96,6 +97,9 @@ function getUsersAndCount(set, uid, count, callback) {
 }
 
 usersController.getUsersForSearch = function(req, res, next) {
+	if (!req.uid) {
+		return helpers.notAllowed(req, res);
+	}
 	var resultsPerPage = parseInt(meta.config.userSearchResultsPerPage, 10) || 20;
 
 	getUsersAndCount('users:joindate', req.uid, resultsPerPage, function(err, data) {