From c98f799d67a6d24c364c0641e36fdcd73efe9ad2 Mon Sep 17 00:00:00 2001 From: Xodrium <118943715+malloc62@users.noreply.github.com> Date: Thu, 16 Feb 2023 17:03:40 -0500 Subject: [PATCH] You can no longer upvote your own posts --- src/lib/db/db.js | 7 +++++++ 1 file changed, 7 insertions(+) diff --git a/src/lib/db/db.js b/src/lib/db/db.js index b8165e5..1508da0 100644 --- a/src/lib/db/db.js +++ b/src/lib/db/db.js @@ -248,6 +248,13 @@ backend.postBulk = async ({page, id, user, cookies, sort}) => { backend.vote = async ({id, vote, user}) => { if (!id || (vote != 'down' && vote != 'up')) return {success: 'fail' }; + + var isCreator = (await db.all('SELECT * from post WHERE id = ?', [ + id + ]))[0].username == user; + + if (isCreator) + return {success: 'fail' }; await db.run('DELETE FROM vote WHERE username = ? AND id = ?', [ user,