From 6da128bdfd605af08facc7c0a7c89c23465f22bc Mon Sep 17 00:00:00 2001
From: Rory& <root@rory.gay>
Date: Wed, 1 Jul 2026 14:01:29 +0200
Subject: [PATCH] Assert that emoji being updated belongs to the requested
 guild

---
 src/api/routes/guilds/#guild_id/emojis.ts | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/src/api/routes/guilds/#guild_id/emojis.ts b/src/api/routes/guilds/#guild_id/emojis.ts
index 6aadc2b14..bae895668 100644
--- a/src/api/routes/guilds/#guild_id/emojis.ts
+++ b/src/api/routes/guilds/#guild_id/emojis.ts
@@ -159,6 +159,10 @@ router.patch(
 
         if (body.name?.includes("-")) body.name = body.name?.replaceAll("-", ""); // Dashes are invalid apparently
 
+        await Emoji.findOneOrFail({
+            where: { guild_id: guild_id, id: emoji_id },
+        });
+
         const emoji = await Emoji.create({
             ...body,
             id: emoji_id,