Check if user exists before deleting

x10102 · Dec 22, 2024 · 1b858e5 · 1b858e5
1 parent 48a7fe7
commit 1b858e5
Showing 1 changed file with 2 additions and 1 deletion.
diff --git a/blueprints/users.py b/blueprints/users.py
@@ -69,7 +69,8 @@ def user(uid: int):
 @UserController.route('/user/<int:uid>/delete', methods=["POST", "GET"])
 @login_required
 def delete_user(uid: int):
-    name = dbs.get_user(uid).nickname
+    user = dbs.get_user(uid) or abort(404)
+    name = user.nickname
     dbs.delete_user(uid)
     info(f"User {name} deleted by {current_user.nickname} (ID: {current_user.uid})")
     flash(f'Uživatel {name} smazán')