lock rounds

[alttp.git] / app / Http / Controllers / ResultController.php

diff --git a/app/Http/Controllers/ResultController.php b/app/Http/Controllers/ResultController.php
index b23c907f680b28edcc5dbb40efc1cbcd44c8933b..d72a10020dbe4b3e4f29cb8a488b808e5b583125 100644 (file)
--- a/app/Http/Controllers/ResultController.php
+++ b/app/Http/Controllers/ResultController.php
@@ -23,6 +23,9 @@ class ResultController extends Controller
 
                $participant = Participant::findOrFail($validatedData['participant_id']);
                $round = Round::findOrFail($validatedData['round_id']);
+               if (!$round || $round->locked) {
+                       abort(403);
+               }
 
                $user = $request->user();
                if ($user->id != $participant->user->id) {