harukin/core
Archived
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

check perms on ical attachments

Browse Source
This commit is contained in:
redmatrix 2015-08-19 17:16:19 -07:00
parent 8d66fbccfa
commit 863a979754
1 changed files with 6 additions and 3 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

9
mod/events.php
View File

@ -312,9 +312,12 @@ function events_content(&$a) {
if($mode === 'ical') {
$r = q("select * from event where event_hash = '%s' and uid = %d limit 1",
dbesc($event_id),
intval(local_channel())
require_once('include/security.php');
$sql_extra = permissions_sql(local_channel());
$r = q("select * from event where event_hash = '%s' $sql_extra limit 1",
dbesc($event_id)
);
if($r) {
header('Content-type: text/calendar');