From 6a7c4a0c75b74b0732b5a9834cb09ecacf47e393 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Fe=CC=81lix=20Pe=CC=81ault?= <hello@flayks.com>
Date: Fri, 29 Jul 2022 23:46:03 +0200
Subject: [PATCH] Restrict location page access to matching country slug from
 param

Location page would be accessible if the country page param was set to anything else than the country it should be linked to from the data
---
 src/routes/[country]/[location]/index.ts | 11 +++++++----
 1 file changed, 7 insertions(+), 4 deletions(-)

diff --git a/src/routes/[country]/[location]/index.ts b/src/routes/[country]/[location]/index.ts
index 1ba01cf..e18caae 100644
--- a/src/routes/[country]/[location]/index.ts
+++ b/src/routes/[country]/[location]/index.ts
@@ -25,7 +25,7 @@ export async function GET ({ params }: RequestEvent): Promise<RequestHandlerOutp
                     filter: {
                         slug: { _eq: "${slug}" },
                         status: { _eq: "published" },
-                    }
+                    },
                 ) {
                     id
                     name
@@ -41,7 +41,10 @@ export async function GET ({ params }: RequestEvent): Promise<RequestHandlerOutp
                             website
                         }
                     }
-                    country { name }
+                    country {
+                        name
+                        slug
+                    }
                     has_poster
                 }
 
@@ -62,9 +65,9 @@ export async function GET ({ params }: RequestEvent): Promise<RequestHandlerOutp
                 }
             }
         `)
-        const { data: { location, photos, total_published } } = res
+        const { data: { location: location, photos, total_published }} = res
 
-        if (!location.length) {
+        if (params.country !== location[0].country.slug || !location.length) {
             return { status: 404 }
         }