diff options
author | Thomas Willingham <founder@kakste.com> | 2014-03-18 02:41:58 +0000 |
---|---|---|
committer | Thomas Willingham <founder@kakste.com> | 2014-03-18 02:41:58 +0000 |
commit | 1446cc80960d278d26a2c2a0a529728beed10215 (patch) | |
tree | 6d2cc43912e719603cba8ee4db4381890245adba | |
parent | aa07edbdd107b512caf5a83d863c9d79a6e46694 (diff) | |
download | volse-hubzilla-1446cc80960d278d26a2c2a0a529728beed10215.tar.gz volse-hubzilla-1446cc80960d278d26a2c2a0a529728beed10215.tar.bz2 volse-hubzilla-1446cc80960d278d26a2c2a0a529728beed10215.zip |
Missed one
-rw-r--r-- | include/reddav.php | 5 |
1 files changed, 3 insertions, 2 deletions
diff --git a/include/reddav.php b/include/reddav.php index d6c3d126b..c65cb569b 100644 --- a/include/reddav.php +++ b/include/reddav.php @@ -276,7 +276,7 @@ class RedDirectory extends DAV\Node implements DAV\ICollection, DAV\IQuota { for($x = 1; $x < count($path_arr); $x ++) { - $r = q("select id, hash, filename, flags from attach where folder = '%s' and filename = '%s' and uid = %d and (flags & %d)", + $r = q("select id, hash, filename, flags from attach where folder = '%s' and filename = '%s' and uid = '%d' and (flags & %d)", dbesc($folder), dbesc($path_arr[$x]), intval($channel_id), @@ -581,9 +581,10 @@ function RedCollectionData($file,&$auth) { for($x = 1; $x < count($path_arr); $x ++) { - $r = q("select id, hash, filename, flags from attach where folder = '%s' and filename = '%s' and (flags & %d) $perms limit 1", + $r = q("select id, hash, filename, flags from attach where folder = '%s' and filename = '%s' and uid = %d and (flags & %d) $perms limit 1", dbesc($folder), dbesc($path_arr[$x]), + intval($channel_id), intval(ATTACH_FLAG_DIR) ); if(! $r) { |