Added some more check
This commit is contained in:
parent
f9ea9e2e97
commit
9841096ce4
|
@ -3293,6 +3293,9 @@ api_register_func('api/friendships/destroy', 'api_friendships_destroy', true, AP
|
||||||
*/
|
*/
|
||||||
function api_direct_messages_box($type, $box, $verbose)
|
function api_direct_messages_box($type, $box, $verbose)
|
||||||
{
|
{
|
||||||
|
if (empty(BaseApi::getCurrentUserID())) {
|
||||||
|
throw new ForbiddenException();
|
||||||
|
}
|
||||||
BaseApi::checkAllowedScope(BaseApi::SCOPE_READ);
|
BaseApi::checkAllowedScope(BaseApi::SCOPE_READ);
|
||||||
|
|
||||||
// params
|
// params
|
||||||
|
|
Loading…
Reference in a new issue