🚨 Add numeric validation to user_id in MeetupController@index

2025-12-14 12:06:46 +00:00 · 2025-11-27 15:57:06 +01:00
parent 572889bf42
commit f7102f0d43
1 changed files with 4 additions and 0 deletions
--- a/app/Http/Controllers/Api/MeetupController.php
+++ b/app/Http/Controllers/Api/MeetupController.php
@@ -17,6 +17,10 @@ class MeetupController extends Controller

    public function index(Request $request)
    {
+        if (!is_numeric($request->input('user_id'))) {
+            abort(404);
+        }
+
        $myMeetupIds = User::query()
            ->findOrFail($request->input('user_id'))
            ?->meetups