From 68da4d90dcbda1240ae014768a66a164fd5d2b36 Mon Sep 17 00:00:00 2001 From: redmatrix Date: Tue, 17 Nov 2015 20:44:57 -0800 Subject: fix admin plugin hooks --- include/widgets.php | 17 +++++++++++++++++ 1 file changed, 17 insertions(+) (limited to 'include/widgets.php') diff --git a/include/widgets.php b/include/widgets.php index fc6fee2ef..2b1fb2859 100644 --- a/include/widgets.php +++ b/include/widgets.php @@ -1238,6 +1238,23 @@ function widget_album($args) { if($args['title']) $title = $args['title']; + /** + * This may return incorrect permissions if you have multiple directories of the same name. + * It is a limitation of the photo table using a name for a photo album instead of a folder hash + */ + + if($album) { + $x = q("select hash from attach where filename = '%s' and uid = %d limit 1", + dbesc($album), + intval($owner_uid) + ); + if($x) { + $y = attach_can_view_folder($owner_uid,get_observer_hash(),$x[0]['hash']); + if(! $y) + return ''; + } + } + $order = 'DESC'; $r = q("SELECT p.resource_id, p.id, p.filename, p.type, p.scale, p.description, p.created FROM photo p INNER JOIN -- cgit v1.2.3