Account for channel id when deleting messages

This commit is contained in:
Rory&
2026-06-16 00:29:47 +02:00
parent 42406c1838
commit e1de08a4d4
@@ -297,7 +297,7 @@ router.delete(
await channel.save();
}
const message = await Message.findOneOrFail({
where: { id: message_id },
where: { id: message_id, channel_id: channel_id },
});
const rights = await getRights(req.user_id);
@@ -309,7 +309,7 @@ router.delete(
}
} else rights.hasThrow("SELF_DELETE_MESSAGES");
await Message.delete({ id: message_id });
await Message.delete({ id: message_id, channel_id: channel_id });
await emitEvent({
event: "MESSAGE_DELETE",