From c015bb1b7779381edc486ae1ab71eec561349e87 Mon Sep 17 00:00:00 2001
From: fabrixxm <fabrix.xm@gmail.com>
Date: Sun, 17 Jun 2018 19:57:32 +0200
Subject: [PATCH] API: fix sender/recipient of PMs
---
include/api.php | 9 ++++-----
1 file changed, 4 insertions(+), 5 deletions(-)
diff --git a/include/api.php b/include/api.php
index af71e2f1cf..6e704cb125 100644
--- a/include/api.php
+++ b/include/api.php
@@ -3700,11 +3700,6 @@ api_register_func('api/direct_messages/destroy', 'api_direct_messages_destroy',
function api_direct_messages_box($type, $box, $verbose)
{
$a = get_app();
- $user_info = api_get_user($a);
-
- if (api_user() === false || $user_info === false) {
- throw new ForbiddenException();
- }
// params
$count = (x($_GET, 'count') ? $_GET['count'] : 20);
@@ -3726,6 +3721,10 @@ function api_direct_messages_box($type, $box, $verbose)
unset($_REQUEST["screen_name"]);
unset($_GET["screen_name"]);
+ $user_info = api_get_user($a);
+ if (api_user() === false || $user_info === false) {
+ throw new ForbiddenException();
+ }
$profile_url = $user_info["url"];
// pagination