bitPickups/friendica_2019-12_sharedHosting_hotFix
1
1
Fork 0
Code Pull requests Activity

check author url to see if it matches current contact before relay is accepted

Browse source
This commit is contained in:
Friendika 2011-10-06 00:26:25 -07:00
parent ce11d231b8
commit e232c50c9e
1 changed files with 8 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

8
mod/dfrn_notify.php
View file

@ -462,10 +462,18 @@ function dfrn_notify_post(&$a) {
); );
if($r && count($r)) { if($r && count($r)) {
logger('dfrn_notify: received remote comment'); logger('dfrn_notify: received remote comment');
$is_like = false; $is_like = false;
// remote reply to our post. Import and then notify everybody else. // remote reply to our post. Import and then notify everybody else.
$datarray = get_atom_elements($feed,$item); $datarray = get_atom_elements($feed,$item);
if(! link_compare($datarray['author-link'],$importer['url'])) {
logger('dfrn_notify: received relay claiming to be from ' . $importer['url'] . ' however comment author url is ' . $datarray['author-link'] );
// they won't know what to do so don't report an error. Just quietly die.
xml_status(0);
}
$datarray['type'] = 'remote-comment'; $datarray['type'] = 'remote-comment';
$datarray['wall'] = 1; $datarray['wall'] = 1;
$datarray['parent-uri'] = $parent_uri; $datarray['parent-uri'] = $parent_uri;