Add current user check in transfer

1 files changed, 6 insertions, 1 deletions

diff --git a/bitvend/forms.py b/bitvend/forms.py
index 1f19577..212f3d2 100644
--- a/bitvend/forms.py
+++ b/bitvend/forms.py
@@ -1,5 +1,6 @@
 from flask_wtf import FlaskForm
 from wtforms import StringField
+from flask_login import current_user
 from bitvend.models import User
 from wtforms.fields.core import DecimalField
 from wtforms.validators import DataRequired, NumberRange, ValidationError
@@ -31,9 +32,13 @@ def UserExists(form, field):
     if not User.query.get(field.data):
         raise ValidationError('User does not exist.')
 
+def NotCurrentUser(form, field):
+    if field.data == current_user.uid:
+        raise ValidationError('Are you serious?')
+
 class TransferForm(FlaskForm):
     target = StringField("Target user", validators=[
-        DataRequired(), UserExists])
+        DataRequired(), UserExists, NotCurrentUser])
     amount = DecimalUnityField("Amount", default=0, validators=[
         NumberRange(min=1),
         ])