diff options
| author | redmatrix <redmatrix@redmatrix.me> | 2015-05-20 18:46:23 -0700 |
|---|---|---|
| committer | redmatrix <redmatrix@redmatrix.me> | 2015-05-20 18:46:23 -0700 |
| commit | 6466774b6e6ed72ea1cc57cbc76e451205934aca (patch) | |
| tree | de1b5415812e3cc9b9ee8d1e7d481dd9bc26cc8f /include/security.php | |
| parent | fe00d29047da1cb99cbc06af938268ec9e6a8fcb (diff) | |
| download | volse-hubzilla-6466774b6e6ed72ea1cc57cbc76e451205934aca.tar.gz volse-hubzilla-6466774b6e6ed72ea1cc57cbc76e451205934aca.tar.bz2 volse-hubzilla-6466774b6e6ed72ea1cc57cbc76e451205934aca.zip | |
PRIVACY: possible privacy leakage under a defined set of circumstances
Diffstat (limited to 'include/security.php')
| -rw-r--r-- | include/security.php | 10 |
1 files changed, 5 insertions, 5 deletions
diff --git a/include/security.php b/include/security.php index c3b0e9763..91683cc98 100644 --- a/include/security.php +++ b/include/security.php @@ -148,7 +148,7 @@ function change_channel($change_channel) { * * @return string additional SQL where statement */ -function permissions_sql($owner_id, $remote_verified = false, $groups = null) { +function permissions_sql($owner_id, $remote_observer = null) { $local_channel = local_channel(); @@ -181,7 +181,7 @@ function permissions_sql($owner_id, $remote_verified = false, $groups = null) { */ else { - $observer = get_observer_hash(); + $observer = (($remote_observer) ? $remote_observer : get_observer_hash()); if($observer) { $groups = init_groups_visitor($observer); @@ -217,7 +217,7 @@ function permissions_sql($owner_id, $remote_verified = false, $groups = null) { * * @return string additional SQL where statement */ -function item_permissions_sql($owner_id, $remote_verified = false, $groups = null) { +function item_permissions_sql($owner_id, $remote_observer = null) { $local_channel = local_channel(); @@ -227,7 +227,7 @@ function item_permissions_sql($owner_id, $remote_verified = false, $groups = nul * default permissions - anonymous user */ - $sql = " AND item_private=0 "; + $sql = " AND item_private = 0 "; /** * Profile owner - everything is visible @@ -246,7 +246,7 @@ function item_permissions_sql($owner_id, $remote_verified = false, $groups = nul */ else { - $observer = get_observer_hash(); + $observer = (($remote_observer) ? $remote_observer : get_observer_hash()); if($observer) { $groups = init_groups_visitor($observer); |