aboutsummaryrefslogtreecommitdiffstats
path: root/mod
diff options
context:
space:
mode:
authorredmatrix <git@macgirvin.com>2016-01-24 15:20:25 -0800
committerredmatrix <git@macgirvin.com>2016-01-24 15:20:25 -0800
commitbaed7d339ee0d5139fe1c93691a4225796e7e08c (patch)
treee30aaf4506b454a936236e130dee0177cafd5e80 /mod
parent6759a28579b755a41d4670e879de5f602aa411f5 (diff)
downloadvolse-hubzilla-baed7d339ee0d5139fe1c93691a4225796e7e08c.tar.gz
volse-hubzilla-baed7d339ee0d5139fe1c93691a4225796e7e08c.tar.bz2
volse-hubzilla-baed7d339ee0d5139fe1c93691a4225796e7e08c.zip
make exec the default for proc_run - use system.use_proc_open to use proc_open. Also prohibit delegated channels from manually invoking new_channel under the delegated account.
Diffstat (limited to 'mod')
-rw-r--r--mod/new_channel.php4
1 files changed, 2 insertions, 2 deletions
diff --git a/mod/new_channel.php b/mod/new_channel.php
index bec2a3c09..0429bbee7 100644
--- a/mod/new_channel.php
+++ b/mod/new_channel.php
@@ -64,7 +64,7 @@ function new_channel_post(&$a) {
$arr = $_POST;
- if(($arr['account_id'] = get_account_id()) === false) {
+ if((! $a->get_account()) || ($arr['account_id'] = get_account_id()) === false) {
notice( t('Permission denied.') . EOL );
return;
}
@@ -95,7 +95,7 @@ function new_channel_post(&$a) {
function new_channel_content(&$a) {
- if(! get_account_id()) {
+ if(! $a->get_account()) {
notice( t('Permission denied.') . EOL);
return;
}