Assholes everywhere

kohler · Sep 5, 2024 · c145497 · c145497
1 parent 5e5de3d
commit c145497
Showing 1 changed file with 5 additions and 2 deletions.
diff --git a/src/api/api_user.php b/src/api/api_user.php
@@ -21,9 +21,12 @@ static function user(Contact $user, Qrequest $qreq, ?PaperInfo $prow) {
         if (($email = trim($qreq->email ?? "")) === "") {
             return JsonResult::make_missing_error("email");
         }
+        if (!is_valid_utf8($email)) {
+            return JsonResult::make_parameter_error("email");
+        }
 
-        $slice = Contact::SLICE_MINIMAL - Contact::SLICEBIT_COLLABORATORS
-            - Contact::SLICEBIT_COUNTRY - Contact::SLICEBIT_ORCID;
+        $slice = Contact::SLICE_MINIMAL & ~(Contact::SLICEBIT_COLLABORATORS
+            | Contact::SLICEBIT_COUNTRY | Contact::SLICEBIT_ORCID);
         $broad_lookup = $user->conf->opt("allowLookupUser");
 
         $found = null;