mirror of
https://github.com/HDInnovations/UNIT3D-Community-Edition.git
synced 2026-02-11 14:09:31 -06:00
fix: check message existence before deletion
This commit is contained in:
@@ -304,7 +304,7 @@ class ChatController extends Controller
|
||||
|
||||
public function deleteMessage(Request $request, int $id): \Illuminate\Contracts\Routing\ResponseFactory|\Illuminate\Http\Response
|
||||
{
|
||||
$message = Message::find($id);
|
||||
$message = Message::findOrFail($id);
|
||||
|
||||
abort_unless($request->user()->id === $message->user_id || $request->user()->group->is_modo, 403);
|
||||
|
||||
|
||||
Reference in New Issue
Block a user