Added some more check

This commit is contained in:
Michael 2021-11-18 05:57:46 +00:00
parent f9ea9e2e97
commit 9841096ce4

View file

@ -3293,6 +3293,9 @@ api_register_func('api/friendships/destroy', 'api_friendships_destroy', true, AP
*/
function api_direct_messages_box($type, $box, $verbose)
{
if (empty(BaseApi::getCurrentUserID())) {
throw new ForbiddenException();
}
BaseApi::checkAllowedScope(BaseApi::SCOPE_READ);
// params