diff options
| author | Friendika <info@friendika.com> | 2011-06-30 23:21:58 -0700 |
|---|---|---|
| committer | Friendika <info@friendika.com> | 2011-06-30 23:21:58 -0700 |
| commit | 762fb878f838e329dd2e0245b1f597203c3833b6 (patch) | |
| tree | c7cccd63ccafb50be51df18d463ceaa832142a1b | |
| parent | c08b85777aed76a45b0cfbfa381db419f58d047f (diff) | |
| download | volse-hubzilla-762fb878f838e329dd2e0245b1f597203c3833b6.tar.gz volse-hubzilla-762fb878f838e329dd2e0245b1f597203c3833b6.tar.bz2 volse-hubzilla-762fb878f838e329dd2e0245b1f597203c3833b6.zip | |
don't allow editing of somebody else's event
| -rw-r--r-- | mod/events.php | 9 |
1 files changed, 3 insertions, 6 deletions
diff --git a/mod/events.php b/mod/events.php index 642da3cb7..879a66742 100644 --- a/mod/events.php +++ b/mod/events.php @@ -183,7 +183,8 @@ function events_content(&$a) { $adjust_finish = datetime_convert('UTC', date_default_timezone_get(), $finish); - $r = q("SELECT `event`.*, `item`.`id` AS `itemid`,`item`.`plink` FROM `event` LEFT JOIN `item` ON `item`.`event-id` = `event`.`id` + $r = q("SELECT `event`.*, `item`.`id` AS `itemid`,`item`.`plink`, + `item`.`author-name`, `item`.`author-avatar`, `item`.`author-link` FROM `event` LEFT JOIN `item` ON `item`.`event-id` = `event`.`id` WHERE `event`.`uid` = %d AND (( `adjust` = 0 AND `start` >= '%s' AND `start` <= '%s' ) OR ( `adjust` = 1 AND `start` >= '%s' AND `start` <= '%s' )) ", @@ -218,10 +219,6 @@ function events_content(&$a) { - - - - $last_date = ''; $fmt = t('l, F j'); @@ -235,7 +232,7 @@ function events_content(&$a) { $o .= '<hr /><a name="link-' . $j . '" ><div class="event-list-date">' . $d . '</div></a>'; $last_date = $d; $o .= format_event_html($rr); - $o .= '<a href="' . $a->get_baseurl() . '/events/event/' . $rr['id'] . '" title="' . t('Edit event') . '" class="edit-event-link icon pencil"></a>'; + $o .= (($rr['cid']) ? '<a href="' . $a->get_baseurl() . '/events/event/' . $rr['id'] . '" title="' . t('Edit event') . '" class="edit-event-link icon pencil"></a>' : ''); if($rr['plink']) $o .= '<a href="' . $rr['plink'] . '" title="' . t('link to source') . '" target="external-link" class="plink-event-link icon remote-link"></a></div>'; |