[E] Check user existence before sending message #1883

opensource-socialnetwork · Apr 16, 2021 · 3b4a517 · 3b4a517
1 parent 53de6b3
commit 3b4a517
Showing 1 changed file with 5 additions and 0 deletions.
diff --git a/components/OssnMessages/actions/message/send.php b/components/OssnMessages/actions/message/send.php
@@ -16,6 +16,11 @@
 	exit;
 }
 $to = input('to');
+//[E] Check user existence before sending message #1883
+if(!ossn_user_by_guid($to)) {
+    echo 0;
+    exit;
+}
 if ($message_id = $send->send(ossn_loggedin_user()->guid, $to, $message)) {
 	$user = ossn_user_by_guid(ossn_loggedin_user()->guid);