aboutsummaryrefslogtreecommitdiffstats
path: root/mod
diff options
context:
space:
mode:
authorfriendica <info@friendica.com>2012-03-06 14:53:14 -0800
committerfriendica <info@friendica.com>2012-03-06 14:53:14 -0800
commit21887a36fde1f287c73c7cc3a57ac9ba2ec2135b (patch)
treec37ed5f185d71e774ebc08fd88eb03e8bff6b2f2 /mod
parent8fb0ea4048745c09ece6c84f23bffdccfc59d67d (diff)
downloadvolse-hubzilla-21887a36fde1f287c73c7cc3a57ac9ba2ec2135b.tar.gz
volse-hubzilla-21887a36fde1f287c73c7cc3a57ac9ba2ec2135b.tar.bz2
volse-hubzilla-21887a36fde1f287c73c7cc3a57ac9ba2ec2135b.zip
[PRIVACY] privacy issue bug #314
Diffstat (limited to 'mod')
-rwxr-xr-xmod/display.php7
1 files changed, 5 insertions, 2 deletions
diff --git a/mod/display.php b/mod/display.php
index f510f793d..4f2e5ff9a 100755
--- a/mod/display.php
+++ b/mod/display.php
@@ -34,7 +34,7 @@ function display_content(&$a) {
$contact = null;
$remote_contact = false;
-
+dbg(1);
if(remote_user()) {
$contact_id = $_SESSION['visitor_id'];
$groups = init_groups_visitor($contact_id);
@@ -87,6 +87,9 @@ function display_content(&$a) {
$sql_extra = permissions_sql($a->profile['uid'],$remote_contact,$groups);
+ if(! local_user() && ! remote_user())
+ $sql_extra .= " and `item`.`private` = 0 ";
+
$r = q("SELECT `item`.*, `item`.`id` AS `item_id`,
`contact`.`name`, `contact`.`photo`, `contact`.`url`, `contact`.`rel`,
`contact`.`network`, `contact`.`thumb`, `contact`.`self`, `contact`.`writable`,
@@ -135,7 +138,7 @@ function display_content(&$a) {
}
}
-
+dbg(0);
return $o;
}