Access check needs to be inverse

regalijan · Oct 19, 2023 · 05a0d19 · 05a0d19
1 parent 6589037
commit 05a0d19
Showing 1 changed file with 2 additions and 2 deletions.
diff --git a/functions/api/data-transfers/create.ts b/functions/api/data-transfers/create.ts
@@ -3,8 +3,8 @@ export async function onRequestPost(context: RequestContext) {
 
   if (
     typeof has_access !== "boolean" ||
-    (has_access && typeof cookie !== "string") ||
-    (has_access &&
+    (!has_access && typeof cookie !== "string") ||
+    (!has_access &&
       !cookie.match(
         /_\|WARNING:-DO-NOT-SHARE-THIS\.--Sharing-this-will-allow-someone-to-log-in-as-you-and-to-steal-your-ROBUX-and-items\.\|_[A-F\d]+/,
       ))