Added some more check
This commit is contained in:
parent
f9ea9e2e97
commit
9841096ce4
|
@ -3293,6 +3293,9 @@ api_register_func('api/friendships/destroy', 'api_friendships_destroy', true, AP
|
|||
*/
|
||||
function api_direct_messages_box($type, $box, $verbose)
|
||||
{
|
||||
if (empty(BaseApi::getCurrentUserID())) {
|
||||
throw new ForbiddenException();
|
||||
}
|
||||
BaseApi::checkAllowedScope(BaseApi::SCOPE_READ);
|
||||
|
||||
// params
|
||||
|
|
Loading…
Reference in a new issue