From 9a4048af4bb26a50e801df680c811fd421f55aee Mon Sep 17 00:00:00 2001 From: Pierre HUBERT Date: Sun, 26 Aug 2018 14:58:01 +0200 Subject: [PATCH] Fix issue. --- RestControllers/friendsController.php | 4 ++++ 1 file changed, 4 insertions(+) diff --git a/RestControllers/friendsController.php b/RestControllers/friendsController.php index b6867e6..90b4506 100644 --- a/RestControllers/friendsController.php +++ b/RestControllers/friendsController.php @@ -113,6 +113,10 @@ class friendsController{ //Get target ID $friendID = getPostUserID('friendID'); + //Check if the current user is requesting himself as friend + if($friendID == userID) + Rest_fatal_error(401, "You can not become a friend to yourself!"); + //Check if the two persons are already friend if(CS::get()->components->friends->are_friend(userID, $friendID)) Rest_fatal_error(401, "The two personns are already friend !");