diff options
author | zotlabs <mike@macgirvin.com> | 2019-08-31 14:43:08 -0700 |
---|---|---|
committer | zotlabs <mike@macgirvin.com> | 2019-08-31 14:43:08 -0700 |
commit | bbc98db6b4071296ea02cea1a8c89fd33b251b1c (patch) | |
tree | 813c6656e62dfabb9e6b2bcc0db40de439591c56 /include | |
parent | 1f8d29a22171138c90377007496c4af2033b1095 (diff) | |
download | volse-hubzilla-bbc98db6b4071296ea02cea1a8c89fd33b251b1c.tar.gz volse-hubzilla-bbc98db6b4071296ea02cea1a8c89fd33b251b1c.tar.bz2 volse-hubzilla-bbc98db6b4071296ea02cea1a8c89fd33b251b1c.zip |
Clarify private mail deletion policy. Related to issue #1391.
Diffstat (limited to 'include')
-rw-r--r-- | include/connections.php | 5 |
1 files changed, 5 insertions, 0 deletions
diff --git a/include/connections.php b/include/connections.php index e942503f0..51df18b70 100644 --- a/include/connections.php +++ b/include/connections.php @@ -299,6 +299,11 @@ function remove_all_xchan_resources($xchan, $channel_id = 0) { $r = q("delete from pgrp_member where xchan = '%s'", dbesc($xchan) ); + + // Cannot delete just one side of the conversation since we do not allow + // you to block private mail replies. This would leave open a gateway for abuse. + // Both participants are owners of the conversation and both can remove it. + $r = q("delete from mail where ( from_xchan = '%s' or to_xchan = '%s' )", dbesc($xchan), dbesc($xchan) |