aboutsummaryrefslogtreecommitdiffstats
path: root/Zotlabs
diff options
context:
space:
mode:
authorMario Vavti <mario@mariovavti.com>2019-04-30 12:08:19 +0200
committerMario Vavti <mario@mariovavti.com>2019-04-30 12:08:19 +0200
commita04689b7840f336fed92ec648754cca02dcd90f0 (patch)
treecdcc3f5cd58a109f336d30329baec5e7b82db685 /Zotlabs
parent0b062d0b8ae89b40b4e036f874f6af3780c30451 (diff)
downloadvolse-hubzilla-a04689b7840f336fed92ec648754cca02dcd90f0.tar.gz
volse-hubzilla-a04689b7840f336fed92ec648754cca02dcd90f0.tar.bz2
volse-hubzilla-a04689b7840f336fed92ec648754cca02dcd90f0.zip
do not allow editing events that do not belong to us
Diffstat (limited to 'Zotlabs')
-rw-r--r--Zotlabs/Module/Channel_calendar.php5
1 files changed, 5 insertions, 0 deletions
diff --git a/Zotlabs/Module/Channel_calendar.php b/Zotlabs/Module/Channel_calendar.php
index 6741d611c..7fa03fb34 100644
--- a/Zotlabs/Module/Channel_calendar.php
+++ b/Zotlabs/Module/Channel_calendar.php
@@ -147,6 +147,11 @@ class Channel_calendar extends \Zotlabs\Web\Controller {
}
return;
}
+
+ if($x[0]['event_xchan'] !== $channel['xchan_hash']) {
+ notice( t('Not allowed.') . EOL);
+ return;
+ }
$acl->set($x[0]);