Just a little bit of error handling.

ringo-framework · Sep 7, 2017 · 1bea2e7 · 1bea2e7
1 parent 542295f
commit 1bea2e7
Showing 1 changed file with 2 additions and 0 deletions.
diff --git a/ringo/views/users.py b/ringo/views/users.py
@@ -220,6 +220,8 @@ def setstandin(request, allowed_users=None):
             user_id = urlparse.urlparse(
                 request.GET.get('backurl')).path.split('/')[-1]
             user = request.db.query(User).get(user_id)
+            if not user:
+                raise HTTPBadRequest()
         # Otherwise the user sets the standin of his own group. In this
         # case the user is already in the request.
         else: