From 3787e1e500b72db49958c15ebe8991caaf06ec4d Mon Sep 17 00:00:00 2001 From: Friendika Date: Tue, 19 Apr 2011 21:09:25 -0700 Subject: provide disclosure warning on private network page --- mod/network.php | 6 +++++- 1 file changed, 5 insertions(+), 1 deletion(-) (limited to 'mod/network.php') diff --git a/mod/network.php b/mod/network.php index 9d5fb5b84..3e6c5dc4a 100644 --- a/mod/network.php +++ b/mod/network.php @@ -212,13 +212,17 @@ function network_content(&$a, $update = 0) { } elseif($cid) { - $r = q("SELECT `id`,`name` FROM `contact` WHERE `id` = %d + $r = q("SELECT `id`,`name`,`network`,`writable` FROM `contact` WHERE `id` = %d AND `blocked` = 0 AND `pending` = 0 LIMIT 1", intval($cid) ); if(count($r)) { $sql_extra = " AND `item`.`parent` IN ( SELECT `parent` FROM `item` WHERE `id` = `parent` AND `contact-id` IN ( " . intval($cid) . " )) "; $o = '

' . t('Contact: ') . $r[0]['name'] . '

' . $o; + if($r[0]['network'] !== NETWORK_MAIL && $r[0]['network'] !== NETWORK_DFRN && $r[0]['writable'] && (! get_pconfig(local_user(),'system','nowarn_insecure'))) { + notice( t('Private messages to this person are at risk of public disclosure.') . EOL); + } + } else { notice( t('Invalid contact.') . EOL); -- cgit v1.2.3