fix(validation): invalidate unnatural IDs

KennethTrecy · Jun 7, 2024 · 3529c4f · 3529c4f
1 parent 57a5757
commit 3529c4f
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/app/Validation/DatabaseRules.php b/app/Validation/DatabaseRules.php
@@ -39,7 +39,7 @@ public function ensure_ownership(
         $current_user = auth()->user();
         $search_mode = $parameters[1];
 
-        if (!$model->isOwnedBy($current_user, $search_mode, intval($id))) {
+        if (intval($id) <= 0 || !$model->isOwnedBy($current_user, $search_mode, intval($id))) {
             return false;
         }