X-Git-Url: https://git.cworth.org/git?a=blobdiff_plain;f=lmno.js;fp=lmno.js;h=18e60efd947349be35218a643ac6ba7a9756971d;hb=92382a8dd4bfc9c83b7cf5fa1c0981b01096efd0;hp=5d4ca3e7b554025a2b367cf8aca6dae71945ec1b;hpb=b5a5c28f09756d7a7e65dd2bc75de130bc71e0dd;p=empires-server

diff --git a/lmno.js b/lmno.js
index 5d4ca3e..18e60ef 100644
--- a/lmno.js
+++ b/lmno.js
@@ -309,8 +309,15 @@ for (let key in engines) {
     router.post('/move', (request, response) => {
       const game = request.game;
       const move = request.body.move;
+      const player = game.players[request.session.id];
 
-      const result = game.add_move(move);
+      /* Reject move if there is no player for this session. */
+      if (! player) {
+        response.json({legal: false, message: "No valid player from session"});
+        return;
+      }
+
+      const result = game.add_move(player, move);
 
       /* Feed move response back to the client. */
       response.json(result);