From bbc98db6b4071296ea02cea1a8c89fd33b251b1c Mon Sep 17 00:00:00 2001 From: zotlabs Date: Sat, 31 Aug 2019 14:43:08 -0700 Subject: Clarify private mail deletion policy. Related to issue #1391. --- include/connections.php | 5 +++++ 1 file changed, 5 insertions(+) (limited to 'include/connections.php') diff --git a/include/connections.php b/include/connections.php index e942503f0..51df18b70 100644 --- a/include/connections.php +++ b/include/connections.php @@ -299,6 +299,11 @@ function remove_all_xchan_resources($xchan, $channel_id = 0) { $r = q("delete from pgrp_member where xchan = '%s'", dbesc($xchan) ); + + // Cannot delete just one side of the conversation since we do not allow + // you to block private mail replies. This would leave open a gateway for abuse. + // Both participants are owners of the conversation and both can remove it. + $r = q("delete from mail where ( from_xchan = '%s' or to_xchan = '%s' )", dbesc($xchan), dbesc($xchan) -- cgit v1.2.3