harukin/core
Archived
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

missing uid check on comanche_block to ensure we get the block with that name that we own

Browse Source
This commit is contained in:
friendica 2013-09-20 18:41:15 -07:00
parent 7585b58d28
commit 15ae108832
1 changed files with 2 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

3
include/comanche.php
View File

@ -86,7 +86,8 @@ function comanche_replace_region($match) {
function comanche_block($name) { function comanche_block($name) {
$o = ''; $o = '';
$r = q("select * from item left join item_id on iid = item_id and item_id.uid = item.uid and service = 'BUILDBLOCK' and sid = '%s' limit 1", $r = q("select * from item left join item_id on iid = item_id and item_id.uid = item.uid and item.uid = %d and service = 'BUILDBLOCK' and sid = '%s' limit 1",
intval($a->profile['profile_uid']),
dbesc($name) dbesc($name)
); );
if($r) { if($r) {