diff --git a/app/enterprise/controller/Posts.php b/app/enterprise/controller/Posts.php index e44b3ee..3123558 100644 --- a/app/enterprise/controller/Posts.php +++ b/app/enterprise/controller/Posts.php @@ -273,6 +273,9 @@ class Posts extends BaseController $user_type = $info['privacy'] == 2 ? 1 : 2; $privacy_users = []; foreach ($user_ids as $user_id) { + if (!is_numeric($user_id)) { + throw new \Exception(lang('system.error')); + } $privacy_users[] = [ 'posts_id' => $posts_id, 'user_id' => $user_id,