provide a setting to control ALLOWCODE permissions at the channel level - it isn't always appropriate to apply this to all channels in an account.
This commit is contained in:
parent
98acefe228
commit
dfdef0af0d
2
boot.php
2
boot.php
@ -221,7 +221,7 @@ define ( 'PAGE_NORMAL', 0x0000 );
|
||||
define ( 'PAGE_HIDDEN', 0x0001 );
|
||||
define ( 'PAGE_AUTOCONNECT', 0x0002 );
|
||||
define ( 'PAGE_APPLICATION', 0x0004 );
|
||||
|
||||
define ( 'PAGE_ALLOWCODE', 0x0008 );
|
||||
define ( 'PAGE_PREMIUM', 0x0010 );
|
||||
define ( 'PAGE_ADULT', 0x0020 );
|
||||
define ( 'PAGE_CENSORED', 0x0040 ); // Site admin has blocked this channel from appearing in casual search results and site feeds
|
||||
|
@ -92,10 +92,10 @@ function z_input_filter($channel_id,$s,$type = 'text/bbcode') {
|
||||
return escape_tags($s);
|
||||
if($type == 'text/plain')
|
||||
return escape_tags($s);
|
||||
$r = q("select account_id, account_roles from account left join channel on channel_account_id = account_id where channel_id = %d limit 1",
|
||||
$r = q("select account_id, account_roles, channel_pageflags from account left join channel on channel_account_id = account_id where channel_id = %d limit 1",
|
||||
intval($channel_id)
|
||||
);
|
||||
if($r && ($r[0]['account_roles'] & ACCOUNT_ROLE_ALLOWCODE)) {
|
||||
if($r && (($r[0]['account_roles'] & ACCOUNT_ROLE_ALLOWCODE) || ($r[0]['channel_pageflags'] & PAGE_ALLOWCODE))) {
|
||||
if(local_user() && (get_account_id() == $r[0]['account_id'])) {
|
||||
return $s;
|
||||
}
|
||||
@ -1584,13 +1584,13 @@ function mimetype_select($channel_id, $current = 'text/bbcode') {
|
||||
'text/plain'
|
||||
);
|
||||
|
||||
$r = q("select account_id, account_roles from account left join channel on account_id = channel_account_id where
|
||||
$r = q("select account_id, account_roles, channel_pageflags from account left join channel on account_id = channel_account_id where
|
||||
channel_id = %d limit 1",
|
||||
intval($channel_id)
|
||||
);
|
||||
|
||||
if($r) {
|
||||
if($r[0]['account_roles'] & ACCOUNT_ROLE_ALLOWCODE) {
|
||||
if(($r[0]['account_roles'] & ACCOUNT_ROLE_ALLOWCODE) || ($r[0]['channel_pageflags'] & PAGE_ALLOWCODE)) {
|
||||
if(local_user() && get_account_id() == $r[0]['account_id'])
|
||||
$x[] = 'application/x-php';
|
||||
}
|
||||
|
@ -75,11 +75,11 @@ function impel_init(&$a) {
|
||||
$execflag = false;
|
||||
|
||||
if($arr['mimetype'] === 'application/x-php') {
|
||||
$z = q("select account_id, account_roles from account left join channel on channel_account_id = account_id where channel_id = %d limit 1",
|
||||
$z = q("select account_id, account_roles, channel_pageflags from account left join channel on channel_account_id = account_id where channel_id = %d limit 1",
|
||||
intval(local_user())
|
||||
);
|
||||
|
||||
if($z && ($z[0]['account_roles'] & ACCOUNT_ROLE_ALLOWCODE)) {
|
||||
if($z && (($z[0]['account_roles'] & ACCOUNT_ROLE_ALLOWCODE) || ($z[0]['channel_pageflags'] & PAGE_ALLOWCODE))) {
|
||||
$execflag = true;
|
||||
}
|
||||
}
|
||||
|
@ -449,10 +449,10 @@ function item_post(&$a) {
|
||||
$execflag = false;
|
||||
|
||||
if($mimetype === 'application/x-php') {
|
||||
$z = q("select account_id, account_roles from account left join channel on channel_account_id = account_id where channel_id = %d limit 1",
|
||||
$z = q("select account_id, account_roles, channel_pageflags from account left join channel on channel_account_id = account_id where channel_id = %d limit 1",
|
||||
intval($profile_uid)
|
||||
);
|
||||
if($z && ($z[0]['account_roles'] & ACCOUNT_ROLE_ALLOWCODE)) {
|
||||
if($z && (($z[0]['account_roles'] & ACCOUNT_ROLE_ALLOWCODE) || ($z[0]['channel_pageflags'] & PAGE_ALLOWCODE))) {
|
||||
if($uid && (get_account_id() == $z[0]['account_id'])) {
|
||||
$execflag = true;
|
||||
}
|
||||
|
Reference in New Issue
Block a user