make sure passed profile_id is valid in Notice::saveNew

darcs-hash:20081210181123-099f7-b13ae11d136512655fc5ba4bb314c80256244593.gz
This commit is contained in:
millette 2008-12-10 13:11:23 -05:00
parent 9553072e49
commit 8b15411865

View File

@ -92,6 +92,10 @@ class Notice extends Memcached_DataObject
} }
static function saveNew($profile_id, $content, $source=NULL, $is_local=1, $reply_to=NULL, $uri=NULL) { static function saveNew($profile_id, $content, $source=NULL, $is_local=1, $reply_to=NULL, $uri=NULL) {
if (!Profile::staticGet($profile_id)) {
common_log(LOG_ERR, 'Problem saving notice. Unknown user.');
return _('Problem saving notice. Unknown user.');
}
if (!Notice::checkEditThrottle($profile_id)) { if (!Notice::checkEditThrottle($profile_id)) {
common_log(LOG_WARNING, 'Excessive posting by profile #' . $profile_id . '; throttled.'); common_log(LOG_WARNING, 'Excessive posting by profile #' . $profile_id . '; throttled.');