From a2b20bd58f0b1c466235a96c41846aba613ea31b Mon Sep 17 00:00:00 2001 From: friendica Date: Sun, 22 Sep 2013 22:58:59 -0700 Subject: one more edge case in the public perms - don't match perms = 0 which is private, this and prior checkin are for issue #114 --- include/security.php | 5 +++-- 1 file changed, 3 insertions(+), 2 deletions(-) (limited to 'include/security.php') diff --git a/include/security.php b/include/security.php index 632b8d607..1181e6bf2 100644 --- a/include/security.php +++ b/include/security.php @@ -412,7 +412,7 @@ function stream_perms_api_uids($perms_min = PERMS_SITE) { $ret = array(); if(local_user()) $ret[] = local_user(); - $r = q("select channel_id from channel where channel_r_stream <= %d", + $r = q("select channel_id from channel where channel_r_stream > 0 and channel_r_stream <= %d", intval($perms_min) ); if($r) @@ -435,7 +435,8 @@ function stream_perms_xchans($perms_min = PERMS_SITE) { $ret = array(); if(local_user()) $ret[] = get_observer_hash(); - $r = q("select channel_hash from channel where channel_r_stream <= %d", + + $r = q("select channel_hash from channel where channel_r_stream > 0 and channel_r_stream <= %d", intval($perms_min) ); if($r) -- cgit v1.2.3