diff options
| author | friendica <info@friendica.com> | 2013-01-04 01:41:18 -0800 |
|---|---|---|
| committer | friendica <info@friendica.com> | 2013-01-04 01:41:18 -0800 |
| commit | 0b2c85724642eada9f7b5195a829f4533efc5f67 (patch) | |
| tree | ee64bff6f86e1003fca5b63371fb72683b7aefbc | |
| parent | bd728e773ba9a0a92f9e5766c6441f84dec876f6 (diff) | |
| download | volse-hubzilla-0b2c85724642eada9f7b5195a829f4533efc5f67.tar.gz volse-hubzilla-0b2c85724642eada9f7b5195a829f4533efc5f67.tar.bz2 volse-hubzilla-0b2c85724642eada9f7b5195a829f4533efc5f67.zip | |
zfinger issue stray unfinished statement
| -rw-r--r-- | mod/zfinger.php | 6 |
1 files changed, 4 insertions, 2 deletions
diff --git a/mod/zfinger.php b/mod/zfinger.php index 32523ecac..3452db68c 100644 --- a/mod/zfinger.php +++ b/mod/zfinger.php @@ -126,17 +126,19 @@ function zfinger_init(&$a) { $ret['target_sig'] = $zsig; $ret['searchable'] = $searchable; - if(! $e['xchan_connurl']) +// wtf +// if(! $e['xchan_connurl']) // FIXME encrypt permissions when targeted so that only the target can view them, requires sending the pubkey and also checking that the target_sig is signed with that pubkey and isn't a forgery. + logger('zot-info: ' . print_r($e,true)); $permissions = get_all_perms($e['channel_id'],(($ztarget && $zsig) ? base64url_encode(hash('whirlpool',$ztarget . $zsig,true)) : '' ),false); - $ret['permissions'] = (($ztarget) ? aes_encapsulate(json_encode($permissions),$zkey) : $permissions); + $ret['permissions'] = (($ztarget && $zkey) ? aes_encapsulate(json_encode($permissions),$zkey) : $permissions); if($permissions['view_profile']) $ret['profile'] = $profile; |