From 951e66861e58ba5c430a3608e9e68bc3c1935b60 Mon Sep 17 00:00:00 2001
From: Kyle Drake <kyle@kyledrake.net>
Date: Tue, 22 May 2018 22:06:16 -0700
Subject: [PATCH] check for site owner instead of crashing on missing
 current_site

---
 app/site.rb          | 2 +-
 views/site/stats.erb | 2 ++
 2 files changed, 3 insertions(+), 1 deletion(-)

diff --git a/app/site.rb b/app/site.rb
index 09564eb1..1a0b7bbf 100644
--- a/app/site.rb
+++ b/app/site.rb
@@ -103,7 +103,7 @@ get '/site/:username/stats' do
 
   stats = stats_dataset.all.reverse
 
-  if params[:format] == 'csv'
+  if current_site && @site.owned_by?(current_site) && params[:format] == 'csv'
     content_type 'application/csv'
     attachment "#{current_site.username}-stats.csv"
 
diff --git a/views/site/stats.erb b/views/site/stats.erb
index d2b0d1a2..ed944187 100644
--- a/views/site/stats.erb
+++ b/views/site/stats.erb
@@ -166,11 +166,13 @@
 
         <canvas id="myChart" style="width:100%;height:300px;display:block"></canvas>
 
+        <% if @site == current_site %>
         <div class="row">
           <div class="col col-50">
             <p><a href="?days=<%= params[:days] %>&format=csv">Export as CSV File</a></p>
           </div>
         </div>
+        <% end %>
 
         <!--
         <div class="row">