Browse code

reviews.php: Have no one try and create reviews to nonexistent stories and series - previous null patches stay, however

Clarissa Walker authored on 2026/09/21 19:55:47
Showing 1 changed files
... ...
@@ -264,6 +264,7 @@ else {
264 264
 		$story = dbassoc($storyquery);
265 265
 		$title = title_link($story);
266 266
 		$authoruid = ($story['uid']) ?? null;
267
+		if(empty($story)) accessDenied();
267 268
 		if(!empty($story['coauthors'])) {
268 269
 			$colist = dbquery("SELECT uid FROM ".TABLEPREFIX."fanfiction_coauthors WHERE sid = '$item'");
269 270
 			while($c = dbassoc($colist)) {
... ...
@@ -276,6 +277,7 @@ else {
276 277
 		list($title, $authoruid) = dbrow($storyquery);
277 278
 		$titletext = $title;
278 279
 		$title = "<a href=\"series.php?seriesid=$item\">".stripslashes($title)."</a>";
280
+		if(empty($title && $authoruid)) accessDenied();
279 281
 	}
280 282
 	else { 
281 283
 		$titlequery = dbquery("SELECT * FROM ".TABLEPREFIX."fanfiction_codeblocks WHERE code_type = 'revtitle'");