From 68fb6666ffb4631cb0b50906d00997afb47af6eb Mon Sep 17 00:00:00 2001 From: Torsten Dittmann Date: Tue, 2 Mar 2021 10:57:22 +0100 Subject: [PATCH] move project check before abuse and cors validation --- app/realtime.php | 16 ++++++++-------- 1 file changed, 8 insertions(+), 8 deletions(-) diff --git a/app/realtime.php b/app/realtime.php index 0863b5aa7..503f1cae0 100644 --- a/app/realtime.php +++ b/app/realtime.php @@ -234,6 +234,14 @@ $server->on('open', function (Server $server, Request $request) use (&$connectio /** @var Appwrite\Database\Document $console */ $console = $app->getResource('console'); + /* + * Project Check + */ + if (empty($project->getId())) { + $server->push($connection, 'Missing or unknown project ID'); + $server->close($connection); + } + /* * Abuse Check */ @@ -265,14 +273,6 @@ $server->on('open', function (Server $server, Request $request) use (&$connectio $server->close($connection); } - /* - * Project Check - */ - if (empty($project->getId())) { - $server->push($connection, 'Missing or unknown project ID'); - $server->close($connection); - } - Realtime::setUser($user); $roles = Realtime::getRoles();