account check

1 files changed, 8 insertions, 0 deletions

diff --git a/routes/users.ts b/routes/users.ts
index ab8cb61a..8fb078e1 100644
--- a/routes/users.ts
+++ b/routes/users.ts
@@ -769,8 +769,12 @@ export default {
 
   async updateAccount(req, res) {
     const { id } = req.params;
+    const { id: uid } = req.user;
     const { name } = req.body;
 
+    const pos = await db.lPos(`${uid}:accounts`, id);
+    if (!pos) fail("account not found");
+
     const account = await g(`account:${id}`);
     account.name = name;
     await s(`account:${id}`, account);
@@ -783,6 +787,10 @@ export default {
       const { id } = req.body;
       const { id: uid } = req.user;
       const { type } = await g(`account:${id}`);
+
+      const pos = await db.lPos(`${uid}:accounts`, id);
+      if (!(type && pos)) fail("account not found");
+
       try {
         const node = rpc({ ...config[type], wallet: id });
         await node.unloadWallet(id);