Handle bad arguments to post method.

1 files changed, 2 insertions, 0 deletions

diff --git a/quoins/controllers.py b/quoins/controllers.py
index 1db761f..b8715be 100644
--- a/quoins/controllers.py
+++ b/quoins/controllers.py
@@ -721,6 +721,8 @@ Comment:
         # don't get .ext in our name argument.
         name = request.environ['PATH_INFO'].split('/')[-1]
         post = DBSession.query(Post).get(post_id)
+        if not post:
+            abort(404)
         media = None
         for m in post.media:
             if m.name==name: