Update InternalApiController

6 years ago · e7521c2cb4
parent 1e75b1688d
commit e7521c2cb4
1 changed files with 3 additions and 0 deletions
--- a/app/Http/Controllers/InternalApiController.php
+++ b/app/Http/Controllers/InternalApiController.php
@ -61,6 +61,9 @@ class InternalApiController extends Controller
        $cw = false;

        foreach($medias as $k => $media) {
+            if($k + 1 > config('pixelfed.max_album_length')) {
+                continue;
+            }
            $m = Media::findOrFail($media['id']);
            if($m->profile_id !== $profile->id || $m->status_id) {
                abort(403, 'Invalid media id');