disable spam acccounts from accessing their account

leafo · Jan 17, 2024 · ba39dfc · ba39dfc
1 parent c305947
commit ba39dfc
Show file tree

Hide file tree

Showing 2 changed files with 9 additions and 0 deletions.
diff --git a/applications/users.moon b/applications/users.moon
@@ -310,6 +310,10 @@ class UsersApplication extends lapis.Application
       {"password", types.valid_text}
     }, (params) =>
       user = assert_error Users\login params.username, params.password
+
+      if user\is_spam!
+        return yield_error "Spammer account disabled"
+
       user\write_session @
 
       import unset_register_referrer from require "helpers.referrers"

diff --git a/models/users.moon b/models/users.moon
@@ -124,6 +124,11 @@ class Users extends Model
     if user_session = r.session.user
       if user_session.id
         user = @find user_session.id
+
+        -- don't let spammers have access to account
+        if user and user\is_spam!
+          return nil
+
         if user and user\salt! == user_session.key
           user