From 4cfa6ec63bf0fa25ffd774cb9076dd7e93376b8f Mon Sep 17 00:00:00 2001
From: Bob Mottram <bob@freedombone.net>
Date: Wed, 17 Feb 2021 09:52:06 +0000
Subject: [PATCH] Check users in path

---
 daemon.py | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/daemon.py b/daemon.py
index 0f81c6199..f994ee2b2 100644
--- a/daemon.py
+++ b/daemon.py
@@ -11601,7 +11601,8 @@ class PubServer(BaseHTTPRequestHandler):
                     print('DEBUG: replydm path ' + self.path)
 
             # Edit a blog post
-            if '/tlblogs' in self.path and \
+            if authorized and \
+               '/users/' in self.path and \
                '?editblogpost=' in self.path and \
                '?actor=' in self.path:
                 messageId = self.path.split('?editblogpost=')[1]