diff options
| author | Mario Vavti <mario@mariovavti.com> | 2019-04-30 12:08:19 +0200 |
|---|---|---|
| committer | Mario Vavti <mario@mariovavti.com> | 2019-04-30 12:08:19 +0200 |
| commit | a04689b7840f336fed92ec648754cca02dcd90f0 (patch) | |
| tree | cdcc3f5cd58a109f336d30329baec5e7b82db685 /Zotlabs/Module | |
| parent | 0b062d0b8ae89b40b4e036f874f6af3780c30451 (diff) | |
| download | volse-hubzilla-a04689b7840f336fed92ec648754cca02dcd90f0.tar.gz volse-hubzilla-a04689b7840f336fed92ec648754cca02dcd90f0.tar.bz2 volse-hubzilla-a04689b7840f336fed92ec648754cca02dcd90f0.zip | |
do not allow editing events that do not belong to us
Diffstat (limited to 'Zotlabs/Module')
| -rw-r--r-- | Zotlabs/Module/Channel_calendar.php | 5 |
1 files changed, 5 insertions, 0 deletions
diff --git a/Zotlabs/Module/Channel_calendar.php b/Zotlabs/Module/Channel_calendar.php index 6741d611c..7fa03fb34 100644 --- a/Zotlabs/Module/Channel_calendar.php +++ b/Zotlabs/Module/Channel_calendar.php @@ -147,6 +147,11 @@ class Channel_calendar extends \Zotlabs\Web\Controller { } return; } + + if($x[0]['event_xchan'] !== $channel['xchan_hash']) { + notice( t('Not allowed.') . EOL); + return; + } $acl->set($x[0]); |