Merge pull request #7523 from christianbeeznest/fixes-updates259

Social: Use uid instead of id for social wall user loading (restrict to /social route)

Author: christianbeeznest

assets/vue/composables/useSocialInfo.js

@@ -42,24 +42,25 @@ export function useSocialInfo() {
   }
   const loadUser = async () => {
     try {
+      const isSocialRoute = route.path.includes("/social")
       const uid = route.query.uid
-      if (uid) {
+
+      // Only allow uid usage inside /social
+      if (isSocialRoute && uid) {
         const params = { ...route.query }
-        // Ensure id is never used even if present.
         delete params.id
 
-        if (route.path.includes("/social")) {
-          params.page_origin = "social"
-        }
+        params.page_origin = "social"
         const response = await axios.get(`/api/users/${uid}`, { params })
         user.value = response.data
         isCurrentUser.value = false
       } else {
         user.value = securityStore.user
         isCurrentUser.value = true
       }
-    } catch (e) {
-      user.value = {}
+    } catch (error) {
+      console.error("Error loading user:", error)
+      user.value = securityStore.user
       isCurrentUser.value = true
     }
   }