aboutsummaryrefslogtreecommitdiffstats
diff options
context:
space:
mode:
authorMario Vavti <mario@mariovavti.com>2019-08-11 10:55:38 +0200
committerMario Vavti <mario@mariovavti.com>2019-08-11 10:55:38 +0200
commitf0d7a17b728a28ae1929785f4484a26b71bfb07f (patch)
tree476c1abf6ecdc2b3c42693cb66142df49ab41dcc
parent047dd31724f8da12c153b4a6f27dc5462f7b97e5 (diff)
downloadvolse-hubzilla-f0d7a17b728a28ae1929785f4484a26b71bfb07f.tar.gz
volse-hubzilla-f0d7a17b728a28ae1929785f4484a26b71bfb07f.tar.bz2
volse-hubzilla-f0d7a17b728a28ae1929785f4484a26b71bfb07f.zip
linkinfo: only allow to embed public items
-rw-r--r--Zotlabs/Module/Linkinfo.php2
1 files changed, 1 insertions, 1 deletions
diff --git a/Zotlabs/Module/Linkinfo.php b/Zotlabs/Module/Linkinfo.php
index fcf8a6aa1..76c679cc5 100644
--- a/Zotlabs/Module/Linkinfo.php
+++ b/Zotlabs/Module/Linkinfo.php
@@ -52,7 +52,7 @@ class Linkinfo extends \Zotlabs\Web\Controller {
if (!empty($mid) && $mid[1] == 'mid=b64.')
$mid[2] = base64_decode($mid[2]);
- $r = q("SELECT id FROM item WHERE mid = '%s' AND uid = %d LIMIT 1",
+ $r = q("SELECT id FROM item WHERE mid = '%s' AND uid = %d AND item_private = 0 LIMIT 1",
dbesc((empty($mid) ? $url : $mid[2])),
intval(local_channel())
);