aboutsummaryrefslogtreecommitdiffstats
path: root/mod/ping.php
diff options
context:
space:
mode:
authorMichael <icarus@dabo.de>2012-05-26 11:59:19 +0200
committerMichael <icarus@dabo.de>2012-05-26 11:59:19 +0200
commit7b3c02057db47a627b56bdd79f1055ea7f876617 (patch)
tree8c9b11fa72e544aea721f385b40bff7254e42ed2 /mod/ping.php
parent6342b3e0bdd5774857a8fca809994f05e0208d25 (diff)
parentf5290a5a107ef2d6c309c4a3205319c9b0d13994 (diff)
downloadvolse-hubzilla-7b3c02057db47a627b56bdd79f1055ea7f876617.tar.gz
volse-hubzilla-7b3c02057db47a627b56bdd79f1055ea7f876617.tar.bz2
volse-hubzilla-7b3c02057db47a627b56bdd79f1055ea7f876617.zip
Merge remote branch 'upstream/master'
Diffstat (limited to 'mod/ping.php')
-rw-r--r--mod/ping.php8
1 files changed, 8 insertions, 0 deletions
diff --git a/mod/ping.php b/mod/ping.php
index 63aaa0f45..55dcb26bb 100644
--- a/mod/ping.php
+++ b/mod/ping.php
@@ -10,8 +10,16 @@ function ping_init(&$a) {
<result>";
$xmlhead="<"."?xml version='1.0' encoding='UTF-8' ?".">";
+
if(local_user()){
+ // Different login session than the page that is calling us.
+
+ if(intval($_GET['uid']) && intval($_GET['uid']) != local_user()) {
+ echo '<invalid>1</invalid></result>';
+ killme();
+ }
+
$firehose = intval(get_pconfig(local_user(),'system','notify_full'));
$t = q("select count(*) as total from notify where uid = %d and seen = 0",