From b855eea3495bd981528cf8747f7a494adfb47a17 Mon Sep 17 00:00:00 2001
From: Michael C <michael@mchang.name>
Date: Sun, 29 Jan 2023 16:10:59 -0500
Subject: [PATCH] make privateIDUsername check more lenient #532

---
 src/routes/setUsername.ts | 5 +++++
 1 file changed, 5 insertions(+)

diff --git a/src/routes/setUsername.ts b/src/routes/setUsername.ts
index 6465b80..e0beb9b 100644
--- a/src/routes/setUsername.ts
+++ b/src/routes/setUsername.ts
@@ -33,9 +33,14 @@ export async function setUsername(req: Request, res: Response): Promise<Response
     userName = userName.replace(/[\u0000-\u001F\u007F-\u009F]/g, "");
 
     // check privateID against publicID
+    /*
     if (!await checkPrivateUsername(userName, userID)) {
         return res.sendStatus(400);
     }
+    */
+    if (userName == userID) {
+        return res.sendStatus(400);
+    }
 
     if (adminUserIDInput != undefined) {
         //this is the admin controlling the other users account, don't hash the controling account's ID