diff --git a/webapp/controller/BattleController.class.php b/webapp/controller/BattleController.class.php
index dfed480d..a74a5296 100644
--- a/webapp/controller/BattleController.class.php
+++ b/webapp/controller/BattleController.class.php
@@ -1019,6 +1019,11 @@ class BattleController extends BaseAuthedController {
     public function useBattleItem()
     {
         $itemId = getReqVal('item_id', 0);
+        $itemMeta = mt\Item::get($itemId);
+        if (!$itemMeta) {
+            $this->_rspErr(2, 'config error');
+            return;
+        }
         $itemCount = Bag::getItemCount($itemId);
         if ($itemCount > 0) {
             Bag::decItem($itemId, 1);