Don't allow redirecting to someones subscription. Closes #2047

This commit is contained in:
James Brooks
2016-08-10 12:56:18 +01:00
parent 5234c40590
commit 838beac285
2 changed files with 41 additions and 15 deletions

View File

@@ -69,12 +69,12 @@ class SubscribeController extends Controller
->withErrors($e->getMessageBag());
}
$message = $subscription->is_verified ?
trans('cachet.subscriber.email.already-subscribed', ['email' => $email]) :
trans('cachet.subscriber.email.subscribed');
if ($subscription->is_verified) {
return Redirect::route('status-page')->withSuccess(trans('cachet.subscriber.email.already-subscribed', ['email' => $email]));
}
return Redirect::route('subscribe.manage', $subscription->verify_code)
->withSuccess(sprintf('%s %s', trans('dashboard.notifications.awesome'), $message));
->withSuccess(sprintf('%s %s', trans('dashboard.notifications.awesome'), trans('cachet.subscriber.email.subscribed')));
}
/**