From 481bd6727dd082877b617a0cb73c04785d6ff9f7 Mon Sep 17 00:00:00 2001 From: Sabe Jones Date: Tue, 13 Nov 2018 15:13:41 -0600 Subject: [PATCH] fix(usernames): exclude unverified users during query --- website/server/controllers/api-v3/members.js | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/website/server/controllers/api-v3/members.js b/website/server/controllers/api-v3/members.js index edb26b5571..cb96ad73ab 100644 --- a/website/server/controllers/api-v3/members.js +++ b/website/server/controllers/api-v3/members.js @@ -132,7 +132,7 @@ api.getMemberByUsername = { let username = req.params.username.toLowerCase(); let member = await User - .findOne({'auth.local.lowerCaseUsername': username}) + .findOne({'auth.local.lowerCaseUsername': username, 'flags.verifiedUsername': true}) .select(memberFields) .exec();