SECURITY: communityhome - can leak photos from people with hidden walls (Thx Chris Case)

2012-12-17 14:13:37 -08:00
parent 1d233755b4
commit 974da7e5f5
2 changed files with 1 additions and 0 deletions
--- a/communityhome.tgz
+++ b/communityhome.tgz
--- a/communityhome/communityhome.php
+++ b/communityhome/communityhome.php
@@ -105,6 +105,7 @@ function communityhome_home(&$a, &$o){
 				`user` 
 				WHERE `user`.`uid` = `photo`.`uid`
 				AND `user`.`blockwall`=0
+				AND `user`.`hidewall` = 0
 				ORDER BY `photo`.`edited` DESC
 				LIMIT 0, 12",
 				dbesc(t('Contact Photos')),