This commit closes #29

modules/callbacks/spoiler.py

@@ -1,3 +1,4 @@
+from os import path
 from app import app
 from pyrogram.types import CallbackQuery, InlineKeyboardMarkup, InlineKeyboardButton
 from pyrogram.client import Client
@@ -5,7 +6,7 @@ from pyrogram import filters
 from modules.database import col_spoilers
 from bson.objectid import ObjectId
 
-from modules.utils import configGet, locale
+from modules.utils import configGet, jsonLoad, locale
 
 # Callback sid =================================================================================================================
 @app.on_callback_query(filters.regex("sid_[\s\S]*"))
@@ -17,6 +18,10 @@ async def callback_query_sid(app: Client, clb: CallbackQuery):
 @app.on_callback_query(filters.regex("shc_[\s\S]*"))
 async def callback_query_shc(app: Client, clb: CallbackQuery):
 
+    if (clb.from_user.id not in jsonLoad(path.join(configGet("cache", "locations"), "group_members"))):
+        await clb.answer(locale("spoiler_forbidden", "callback", locale=clb.from_user), show_alert=True)
+        return
+
     spoil = col_spoilers.find_one( {"_id": ObjectId(clb.data.split("_")[1])} )
 
     if spoil["description"] == "":