From ab2d1315a07d57fb6fb747fe6558a535b4ce6ae7 Mon Sep 17 00:00:00 2001 From: Daniel Supernault Date: Fri, 30 Sep 2022 22:23:58 -0600 Subject: [PATCH] Update CollectionController --- app/Http/Controllers/CollectionController.php | 10 ++++++++++ 1 file changed, 10 insertions(+) diff --git a/app/Http/Controllers/CollectionController.php b/app/Http/Controllers/CollectionController.php index e168e4ff..fca16f03 100644 --- a/app/Http/Controllers/CollectionController.php +++ b/app/Http/Controllers/CollectionController.php @@ -175,6 +175,11 @@ class CollectionController extends Controller { $user = $request->user(); $collection = CollectionService::getCollection($id); + + if(!$collection) { + return response()->json([], 404); + } + if($collection['published_at'] == null || $collection['visibility'] != 'public') { abort_unless($user, 404); if($user->profile_id != $collection['pid']) { @@ -192,6 +197,11 @@ class CollectionController extends Controller { $user = $request->user(); $collection = CollectionService::getCollection($id); + + if(!$collection) { + return response()->json([], 404); + } + if($collection['published_at'] == null || $collection['visibility'] != 'public') { abort_unless($user, 404); if($user->profile_id != $collection['pid']) {