Check request type before hitting DB.

misago/threads/views/generic/gotopostslist.py

@@ -21,6 +21,9 @@ class ModeratedPostsListView(ViewBase):
         return queryset.filter(is_moderated=True)
 
     def dispatch(self, request, *args, **kwargs):
+        if not request.is_ajax():
+            return not_allowed(request)
+
         relations = ['forum']
         thread = self.fetch_thread(request, select_related=relations, **kwargs)
         forum = thread.forum
@@ -30,9 +33,6 @@ class ModeratedPostsListView(ViewBase):
 
         self.allow_action(thread)
 
-        if not request.is_ajax():
-            return not_allowed(request)
-
         posts_qs = self.exclude_invisible_posts(
             thread.post_set, request.user, forum, thread)
         posts_qs = self.filter_posts_queryset(posts_qs)

misago/threads/views/privatethreads.py

@@ -245,11 +245,11 @@ class ThreadParticipantsView(PrivateThreadsMixin, generic.ViewBase):
     template = 'misago/privatethreads/participants.html'
 
     def dispatch(self, request, *args, **kwargs):
-        thread = self.get_thread(request, **kwargs)
-
         if not request.is_ajax():
             return not_allowed(request)
 
+        thread = self.get_thread(request, **kwargs)
+
         participants_qs = thread.threadparticipant_set
         participants_qs = participants_qs.select_related('user', 'user__rank')
 
@@ -269,14 +269,14 @@ class EditThreadParticipantsView(ThreadParticipantsView):
 class BaseEditThreadParticipantView(PrivateThreadsMixin, generic.ViewBase):
     @atomic
     def dispatch(self, request, *args, **kwargs):
-        thread = self.get_thread(request, lock=True, **kwargs)
-
         if not request.is_ajax():
             return not_allowed(request)
 
         if not request.method == "POST":
             raise AjaxError(_("Wrong action received."))
 
+        thread = self.get_thread(request, lock=True, **kwargs)
+
         if not thread.participant or not thread.participant.is_owner:
             raise AjaxError(_("Only thread owner can add or "
                               "remove participants from thread."))