harukin/core
Archived
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

fix delete missing permission check

Browse Source
This commit is contained in:
friendica 2014-03-28 01:12:52 -07:00
parent 3c23d1f9fe
commit 34403d3bd3
2 changed files with 8 additions and 3 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

9
mod/item.php
View File

@ -898,9 +898,14 @@ function item_content(&$a) {
);
if($i) {
$can_delete = false;
if(local_user() && local_user() == $i[0]['uid'])
$can_delete = true;
$ob_hash = get_observer_hash();
if($ob_hash !== $i[0]['author_xchan'] && $ob_hash !== $i[0]['owner_xchan'] && $ob_hash !== $i[0]['source_xchan']) {
if($ob_hash && ($ob_hash === $i[0]['author_xchan'] || $ob_hash === $i[0]['owner_xchan'] || $ob_hash === $i[0]['source_xchan']))
$can_delete = true;
if(! $can_delete) {
notice( t('Permission denied.') . EOL);
return;
}

2
version.inc
View File

@ -1 +1 @@
2014-03-27.629
2014-03-28.630