aboutsummaryrefslogtreecommitdiffstats
path: root/mod/item.php
diff options
context:
space:
mode:
authorredmatrix <git@macgirvin.com>2016-01-16 14:00:22 -0800
committerredmatrix <git@macgirvin.com>2016-01-16 14:00:22 -0800
commit110ef6201e0a3731967a662afed1606b7077d0b0 (patch)
treeab940bb7e966d94520bc5bf5fe74ff0b5dd0f938 /mod/item.php
parentf66c6bfebfd48274c9b29cd62b1fac933c6530e4 (diff)
downloadvolse-hubzilla-110ef6201e0a3731967a662afed1606b7077d0b0.tar.gz
volse-hubzilla-110ef6201e0a3731967a662afed1606b7077d0b0.tar.bz2
volse-hubzilla-110ef6201e0a3731967a662afed1606b7077d0b0.zip
add $deliver flag to item_store() and item_store_update() [default true]. If false, do not send any notifications or process tag_deliver. This should avoid any network activity from happening as the result of a channel (actually item) import. Other minor fixes in the handling of the $allow_exec flag and further protecting CSS passed to widgets from rogue code and XSS.
Diffstat (limited to 'mod/item.php')
-rw-r--r--mod/item.php2
1 files changed, 1 insertions, 1 deletions
diff --git a/mod/item.php b/mod/item.php
index b6d00e030..f100c9dfe 100644
--- a/mod/item.php
+++ b/mod/item.php
@@ -446,7 +446,7 @@ function item_post(&$a) {
$execflag = false;
- if($mimetype === 'application/x-php') {
+ if($mimetype !== 'text/bbcode') {
$z = q("select account_id, account_roles, channel_pageflags from account left join channel on channel_account_id = account_id where channel_id = %d limit 1",
intval($profile_uid)
);