diff options
| author | friendica <info@friendica.com> | 2012-03-06 14:53:14 -0800 |
|---|---|---|
| committer | friendica <info@friendica.com> | 2012-03-06 14:53:14 -0800 |
| commit | 21887a36fde1f287c73c7cc3a57ac9ba2ec2135b (patch) | |
| tree | c37ed5f185d71e774ebc08fd88eb03e8bff6b2f2 /mod/display.php | |
| parent | 8fb0ea4048745c09ece6c84f23bffdccfc59d67d (diff) | |
| download | volse-hubzilla-21887a36fde1f287c73c7cc3a57ac9ba2ec2135b.tar.gz volse-hubzilla-21887a36fde1f287c73c7cc3a57ac9ba2ec2135b.tar.bz2 volse-hubzilla-21887a36fde1f287c73c7cc3a57ac9ba2ec2135b.zip | |
[PRIVACY] privacy issue bug #314
Diffstat (limited to 'mod/display.php')
| -rwxr-xr-x | mod/display.php | 7 |
1 files changed, 5 insertions, 2 deletions
diff --git a/mod/display.php b/mod/display.php index f510f793d..4f2e5ff9a 100755 --- a/mod/display.php +++ b/mod/display.php @@ -34,7 +34,7 @@ function display_content(&$a) { $contact = null; $remote_contact = false; - +dbg(1); if(remote_user()) { $contact_id = $_SESSION['visitor_id']; $groups = init_groups_visitor($contact_id); @@ -87,6 +87,9 @@ function display_content(&$a) { $sql_extra = permissions_sql($a->profile['uid'],$remote_contact,$groups); + if(! local_user() && ! remote_user()) + $sql_extra .= " and `item`.`private` = 0 "; + $r = q("SELECT `item`.*, `item`.`id` AS `item_id`, `contact`.`name`, `contact`.`photo`, `contact`.`url`, `contact`.`rel`, `contact`.`network`, `contact`.`thumb`, `contact`.`self`, `contact`.`writable`, @@ -135,7 +138,7 @@ function display_content(&$a) { } } - +dbg(0); return $o; } |