From 8fe9e3c3fef0049df82281a62afe35dda516dfe2 Mon Sep 17 00:00:00 2001
From: historia <[not public]>
Date: Fri, 18 Sep 2026 17:48:26 -0400
Subject: fix: close combat ghost, admin traversal, login throttle, journal
 double-pay, and quality/economy gaps

---
 internal/admin/api_techs.go | 4 ++++
 1 file changed, 4 insertions(+)

(limited to 'internal/admin/api_techs.go')

diff --git a/internal/admin/api_techs.go b/internal/admin/api_techs.go
index 91eb929..9e742e1 100644
--- a/internal/admin/api_techs.go
+++ b/internal/admin/api_techs.go
@@ -38,6 +38,10 @@ func (s *AdminServer) handleTechs(w http.ResponseWriter, r *http.Request) {
 			failJSON(w, "missing id")
 			return
 		}
+		if !validEntityID(id) {
+			failJSON(w, "invalid id")
+			return
+		}
 		delete(m, "id")
 		if _, _, err := s.findTechFile(id); err == nil {
 			failJSON(w, "tech already exists")
-- 
cgit v1.2.3