clones/friendica-addons
1
0
Fork 0
Code Issues Pull Requests Projects Releases Wiki Activity

SECURITY: communityhome - can leak photos from people with hidden walls (Thx Chris Case)

This commit is contained in:
friendica 2012-12-17 14:13:37 -08:00
parent 1d233755b4
commit 974da7e5f5
2 changed files with 1 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

BIN
communityhome.tgz
View File

Binary file not shown.

1
communityhome/communityhome.php
View File

@ -105,6 +105,7 @@ function communityhome_home(&$a, &$o){
`user` `user`
WHERE `user`.`uid` = `photo`.`uid` WHERE `user`.`uid` = `photo`.`uid`
AND `user`.`blockwall`=0 AND `user`.`blockwall`=0
AND `user`.`hidewall` = 0
ORDER BY `photo`.`edited` DESC ORDER BY `photo`.`edited` DESC
LIMIT 0, 12", LIMIT 0, 12",
dbesc(t('Contact Photos')), dbesc(t('Contact Photos')),