clones/friendica
1
0
Fork 0
Code Issues Pull Requests Projects Releases Wiki Activity

Prevent users from forcibly installing a disabled theme in mod/settings

This commit is contained in:
Hypolite Petovan 2019-07-17 23:08:03 -04:00
parent 4fc3eb8f06
commit ada699536a
1 changed files with 11 additions and 11 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

22
mod/settings.php
View File

@ -369,19 +369,19 @@ function settings_post(App $a)
PConfig::set(local_user(), 'system', 'bandwidth_saver' , $bandwidth_saver); PConfig::set(local_user(), 'system', 'bandwidth_saver' , $bandwidth_saver);
PConfig::set(local_user(), 'system', 'smart_threading' , $smart_threading); PConfig::set(local_user(), 'system', 'smart_threading' , $smart_threading);
if ($theme == $a->user['theme']) { if (in_array($theme, Theme::getAllowedList())) {
// call theme_post only if theme has not been changed if ($theme == $a->user['theme']) {
if (($themeconfigfile = get_theme_config_file($theme)) !== null) { // call theme_post only if theme has not been changed
require_once $themeconfigfile; if (($themeconfigfile = get_theme_config_file($theme)) !== null) {
theme_post($a); require_once $themeconfigfile;
theme_post($a);
}
} else {
$a->getDatabase()->update('user', ['theme' => $theme], ['uid' => local_user()]);
} }
} else {
notice(L10n::t('The theme you chose isn\'t available.'));
} }
Theme::install($theme);
q("UPDATE `user` SET `theme` = '%s' WHERE `uid` = %d",
DBA::escape($theme),
intval(local_user())
);
Hook::callAll('display_settings_post', $_POST); Hook::callAll('display_settings_post', $_POST);
$a->internalRedirect('settings/display'); $a->internalRedirect('settings/display');