kjao/archive
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

upped security on joinPrivateClass

Browse Source
This commit is contained in:
Yaman Qalieh 2016-08-17 18:52:38 -04:00
parent a5fc08ea04
commit 6231a743ea
1 changed files with 6 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

8
hourglass/server/main.js
View File

@ -415,9 +415,13 @@ Meteor.methods({
} }
}, },
'joinPrivateClass': function(input) { 'joinPrivateClass': function(input) {
input.status = true;
input.privacy = true;
var found = classes.findOne(input); var found = classes.findOne(input);
if (found !== undefined && input.code !== undefined) { current = Meteor.user().profile;
current = Meteor.user().profile; if (found !== undefined && input.code !== undefined &&
current.classes.indexOf(found._id) === -1) {
classes.update({_id: found._id}, {$set: {subscribers: found.subscribers + 1}});
current.concat(found._id); current.concat(found._id);
Meteor.users.update({_id: Meteor.userId()}, {$set: {profile: current}}); Meteor.users.update({_id: Meteor.userId()}, {$set: {profile: current}});
} }