diff options
author | redmatrix <git@macgirvin.com> | 2016-01-16 14:00:22 -0800 |
---|---|---|
committer | redmatrix <git@macgirvin.com> | 2016-01-16 14:00:22 -0800 |
commit | 110ef6201e0a3731967a662afed1606b7077d0b0 (patch) | |
tree | ab940bb7e966d94520bc5bf5fe74ff0b5dd0f938 /mod/item.php | |
parent | f66c6bfebfd48274c9b29cd62b1fac933c6530e4 (diff) | |
download | volse-hubzilla-110ef6201e0a3731967a662afed1606b7077d0b0.tar.gz volse-hubzilla-110ef6201e0a3731967a662afed1606b7077d0b0.tar.bz2 volse-hubzilla-110ef6201e0a3731967a662afed1606b7077d0b0.zip |
add $deliver flag to item_store() and item_store_update() [default true]. If false, do not send any notifications or process tag_deliver. This should avoid any network activity from happening as the result of a channel (actually item) import. Other minor fixes in the handling of the $allow_exec flag and further protecting CSS passed to widgets from rogue code and XSS.
Diffstat (limited to 'mod/item.php')
-rw-r--r-- | mod/item.php | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/mod/item.php b/mod/item.php index b6d00e030..f100c9dfe 100644 --- a/mod/item.php +++ b/mod/item.php @@ -446,7 +446,7 @@ function item_post(&$a) { $execflag = false; - if($mimetype === 'application/x-php') { + if($mimetype !== 'text/bbcode') { $z = q("select account_id, account_roles, channel_pageflags from account left join channel on channel_account_id = account_id where channel_id = %d limit 1", intval($profile_uid) ); |