From 8b15411865b216f20b4f029a94310a12ab59ddc1 Mon Sep 17 00:00:00 2001 From: millette Date: Wed, 10 Dec 2008 13:11:23 -0500 Subject: make sure passed profile_id is valid in Notice::saveNew darcs-hash:20081210181123-099f7-b13ae11d136512655fc5ba4bb314c80256244593.gz --- classes/Notice.php | 4 ++++ 1 file changed, 4 insertions(+) (limited to 'classes/Notice.php') diff --git a/classes/Notice.php b/classes/Notice.php index b85dccd23..77e0948dc 100644 --- a/classes/Notice.php +++ b/classes/Notice.php @@ -92,6 +92,10 @@ class Notice extends Memcached_DataObject } static function saveNew($profile_id, $content, $source=NULL, $is_local=1, $reply_to=NULL, $uri=NULL) { + if (!Profile::staticGet($profile_id)) { + common_log(LOG_ERR, 'Problem saving notice. Unknown user.'); + return _('Problem saving notice. Unknown user.'); + } if (!Notice::checkEditThrottle($profile_id)) { common_log(LOG_WARNING, 'Excessive posting by profile #' . $profile_id . '; throttled.'); -- cgit v1.2.3-54-g00ecf