From 57fae5f53ab42a4a7998889459e6fab0bb40936a Mon Sep 17 00:00:00 2001
From: Hamid Reza Mohammadi <mohammadi.hr@gmail.com>
Date: Mon, 17 Mar 2025 21:16:31 +0330
Subject: [PATCH] search: validate catId based on poetId

---
 RMuseum/Services/Implementation/GanjoorService.cs | 8 ++++++++
 1 file changed, 8 insertions(+)

diff --git a/RMuseum/Services/Implementation/GanjoorService.cs b/RMuseum/Services/Implementation/GanjoorService.cs
index 8e07d679..d6426230 100644
--- a/RMuseum/Services/Implementation/GanjoorService.cs
+++ b/RMuseum/Services/Implementation/GanjoorService.cs
@@ -2800,6 +2800,14 @@ namespace RMuseum.Services.Implementation
             {
                 catId = null;
             }
+            if (poetId != null && catId != null)
+            {
+                var cat = await _context.GanjoorCategories.AsNoTracking().Where(c => c.Id == catId).SingleAsync();
+                if(cat.PoetId != poetId)
+                {
+                    catId = null;
+                }
+            }
             if (poetId != null && catId == null)
             {
                 var poetRes = await GetPoetById((int)poetId);