Fix that eliminates the ability for other users to add posts

ostiwe · Feb 14, 2020 · cda9154 · cda9154
1 parent 53e9177
commit cda9154
Showing 1 changed file with 6 additions and 0 deletions.
diff --git a/src/ostiwe-saver/Client/UserClient.php b/src/ostiwe-saver/Client/UserClient.php
@@ -70,6 +70,12 @@ public function callbackHandler($callbackObj = [])
         if (empty($callbackObj)) {
             throw new Exception ('Empty message.');
         }
+
+        if ($callbackObj['message']['from_id'] !== $this->userId) {
+            echo 'ok';
+            return;
+        }
+
         if (!isset($callbackObj['group_id']) || empty($callbackObj['group_id'])) {
             throw new Exception ('Param "group_id" is required.');
         }