From ae117d80aa2308c0ca2495a4f97f1580369f9e12 Mon Sep 17 00:00:00 2001
From: aozhiwei <aozhiwei@kingsome.cn>
Date: Thu, 10 Aug 2023 16:19:27 +0800
Subject: [PATCH] 1

---
 webapp/controller/UserController.class.php | 7 +++++++
 1 file changed, 7 insertions(+)

diff --git a/webapp/controller/UserController.class.php b/webapp/controller/UserController.class.php
index 9eb05681..fe7fc626 100644
--- a/webapp/controller/UserController.class.php
+++ b/webapp/controller/UserController.class.php
@@ -810,6 +810,13 @@ class UserController extends BaseAuthedController {
         $oldUser = User::findByAddress($address);
         if ($oldUser) {
             if ($oldUser['account_id'] != myself()->_getAccountId()) {
+                if (!phpcommon\isSameSeriesAccount(
+                    $oldUser['account_id'],
+                    myself()->_getAccountId()
+                )) {
+                    myself()->_rspErr(1, 'is not SameSeriesAccount');
+                    return;
+                }
                 User::updateOther(
                     $oldUser['account_id'],
                     array(