moon
/
sync
mirror of https://github.com/calzoneman/sync.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

Fix #335

This commit is contained in:
calzoneman 2014-03-20 09:17:19 -05:00
parent 74fc6aa81b
commit a6434ec47f
1 changed files with 9 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

9
lib/channel.js
View File

@ -1529,6 +1529,15 @@ Channel.prototype.handleQueue = function (user, data) {
var type = data.type; var type = data.type;
var link = util.formatLink(id, type); var link = util.formatLink(id, type);
/* Kick for this because there's no legitimate way to do this with the
UI. Can only be accomplished by manually sending a packet and people
abuse it to bypass the addnext permission
*/
if (data.pos !== "next" && data.pos !== "end") {
user.kick("Illegal queue packet: pos must be 'next' or 'end'");
return;
}
// Verify user has the permission to add at the position given // Verify user has the permission to add at the position given
if (data.pos === "next" && !this.hasPermission(user, "playlistnext")) { if (data.pos === "next" && !this.hasPermission(user, "playlistnext")) {
return; return;