diff options
| author | Friendika <info@friendika.com> | 2011-04-19 21:09:25 -0700 |
|---|---|---|
| committer | Friendika <info@friendika.com> | 2011-04-19 21:09:25 -0700 |
| commit | 3787e1e500b72db49958c15ebe8991caaf06ec4d (patch) | |
| tree | aa0a6931096166dbc203f388e1d308ca7b39419f /mod/network.php | |
| parent | afdbbaf27d4f841fce977186f125db452292da7c (diff) | |
| download | volse-hubzilla-3787e1e500b72db49958c15ebe8991caaf06ec4d.tar.gz volse-hubzilla-3787e1e500b72db49958c15ebe8991caaf06ec4d.tar.bz2 volse-hubzilla-3787e1e500b72db49958c15ebe8991caaf06ec4d.zip | |
provide disclosure warning on private network page
Diffstat (limited to 'mod/network.php')
| -rw-r--r-- | mod/network.php | 6 |
1 files changed, 5 insertions, 1 deletions
diff --git a/mod/network.php b/mod/network.php index 9d5fb5b84..3e6c5dc4a 100644 --- a/mod/network.php +++ b/mod/network.php @@ -212,13 +212,17 @@ function network_content(&$a, $update = 0) { } elseif($cid) { - $r = q("SELECT `id`,`name` FROM `contact` WHERE `id` = %d + $r = q("SELECT `id`,`name`,`network`,`writable` FROM `contact` WHERE `id` = %d AND `blocked` = 0 AND `pending` = 0 LIMIT 1", intval($cid) ); if(count($r)) { $sql_extra = " AND `item`.`parent` IN ( SELECT `parent` FROM `item` WHERE `id` = `parent` AND `contact-id` IN ( " . intval($cid) . " )) "; $o = '<h2>' . t('Contact: ') . $r[0]['name'] . '</h2>' . $o; + if($r[0]['network'] !== NETWORK_MAIL && $r[0]['network'] !== NETWORK_DFRN && $r[0]['writable'] && (! get_pconfig(local_user(),'system','nowarn_insecure'))) { + notice( t('Private messages to this person are at risk of public disclosure.') . EOL); + } + } else { notice( t('Invalid contact.') . EOL); |