diff options
| -rw-r--r-- | routes/invoices.js | 3 |
1 files changed, 2 insertions, 1 deletions
diff --git a/routes/invoices.js b/routes/invoices.js index cc8549e1..f7682bfe 100644 --- a/routes/invoices.js +++ b/routes/invoices.js @@ -43,7 +43,8 @@ app.post( if (!user) throw new Error("user not provided"); if (!invoice.currency) invoice.currency = user.currency; if (!invoice.rate) invoice.rate = app.get("rates")[invoice.currency]; - if (invoice.tip > invoice.amount || invoice.tip > 1000000) throw new Error("tip is too large") + if (invoice.tip > invoice.amount || invoice.tip > 1000000) throw new Error("tip is too large"); + if (invoice.tip < 0 || invoice.amount < 0) throw new Error("invalid amount"); invoice.user_id = user.id; invoice.account_id = user.account_id; |