From f5eb019e0883e4bbacd762ab2ab1a4647e74e750 Mon Sep 17 00:00:00 2001 From: jan Date: Mon, 14 Nov 2016 21:34:57 +0100 Subject: jetzt auch im backend nicht mehr diff --git a/modules/likes/likes.go b/modules/likes/likes.go index 02cf9d5..80f632b 100644 --- a/modules/likes/likes.go +++ b/modules/likes/likes.go @@ -142,6 +142,14 @@ func (m *Module) addLike(w http.ResponseWriter, r *http.Request, p httprouter.Pa return } + lists := m.lists.GetUserLists(user, false) + for _, list := range lists { + if list.Owner.ID == user.ID { + http.Error(w, "403", http.StatusForbidden) + return + } + } + _, err = m.g.DB.Exec(`INSERT INTO grilist.likes(content, "user", type) SELECT $1, $2, $3 WHERE NOT EXISTS (SELECT * FROM grilist.likes WHERE content = $1 AND "user" = $2 AND type = $3)`, contentId, userId, contentType) if err != nil { http.Error(w, "pq error", http.StatusInternalServerError) -- cgit v0.10.1