aboutsummaryrefslogtreecommitdiffstats
path: root/mod/display.php
diff options
context:
space:
mode:
Diffstat (limited to 'mod/display.php')
-rw-r--r--mod/display.php20
1 files changed, 13 insertions, 7 deletions
diff --git a/mod/display.php b/mod/display.php
index f4d4c38c3..31cce95d3 100644
--- a/mod/display.php
+++ b/mod/display.php
@@ -55,7 +55,7 @@ function display_content(&$a, $update = 0, $load = false) {
'nickname' => $channel['channel_address'],
'lockstate' => (($group || $cid || $channel['channel_allow_cid'] || $channel['channel_allow_gid'] || $channel['channel_deny_cid'] || $channel['channel_deny_gid']) ? 'lock' : 'unlock'),
- 'acl' => populate_acl($channel_acl, false),
+ 'acl' => populate_acl($channel_acl),
'bang' => '',
'visitor' => true,
'profile_uid' => local_user(),
@@ -77,8 +77,8 @@ function display_content(&$a, $update = 0, $load = false) {
$target_item = null;
- $r = q("select id, uid, mid, parent_mid, item_restrict from item where mid = '%s' limit 1",
- dbesc($item_hash)
+ $r = q("select id, uid, mid, parent_mid, item_restrict from item where mid like '%s' limit 1",
+ dbesc($item_hash . '%')
);
if($r) {
@@ -149,6 +149,10 @@ function display_content(&$a, $update = 0, $load = false) {
if($load || ($_COOKIE['jsAvailable'] != 1)) {
$r = null;
+
+ require_once('include/identity.php');
+ $sys = get_sys_channel();
+
if(local_user()) {
$r = q("SELECT * from item
WHERE item_restrict = 0
@@ -162,22 +166,24 @@ function display_content(&$a, $update = 0, $load = false) {
$updateable = true;
}
+
}
if($r === null) {
$r = q("SELECT * from item
WHERE item_restrict = 0
and mid = '%s'
- AND ((( `item`.`allow_cid` = '' AND `item`.`allow_gid` = '' AND `item`.`deny_cid` = ''
+ AND (((( `item`.`allow_cid` = '' AND `item`.`allow_gid` = '' AND `item`.`deny_cid` = ''
AND `item`.`deny_gid` = '' AND item_private = 0 )
- and owner_xchan in ( " . stream_perms_xchans(($observer) ? PERMS_NETWORK : PERMS_PUBLIC) . " ))
+ and owner_xchan in ( " . stream_perms_xchans(($observer) ? (PERMS_NETWORK|PERMS_PUBLIC) : PERMS_PUBLIC) . " ))
+ OR owner_xchan = '%s')
$sql_extra )
group by mid limit 1",
- dbesc($target_item['parent_mid'])
+ dbesc($target_item['parent_mid']),
+ dbesc($sys['xchan_hash'])
);
}
-
}
else {
$r = array();