X-Git-Url: https://git.localhorst.tv/?a=blobdiff_plain;f=app%2FHttp%2FControllers%2FResultController.php;h=d72a10020dbe4b3e4f29cb8a488b808e5b583125;hb=d1f28ea443b090c7593791eba9631796ccaeafe1;hp=b23c907f680b28edcc5dbb40efc1cbcd44c8933b;hpb=812a270c7a410461e931394496512d36b34ef7b5;p=alttp.git

diff --git a/app/Http/Controllers/ResultController.php b/app/Http/Controllers/ResultController.php
index b23c907..d72a100 100644
--- a/app/Http/Controllers/ResultController.php
+++ b/app/Http/Controllers/ResultController.php
@@ -23,6 +23,9 @@ class ResultController extends Controller
 
 		$participant = Participant::findOrFail($validatedData['participant_id']);
 		$round = Round::findOrFail($validatedData['round_id']);
+		if (!$round || $round->locked) {
+			abort(403);
+		}
 
 		$user = $request->user();
 		if ($user->id != $participant->user->id) {