bitPickups/friendica_2019-12_sharedHosting_hotFix
1
1
Fork 0
Code Pull requests Activity

api_get_user() should not return false right away if the number in the URL is not a valid user

Browse source
This commit is contained in:
Pierre Rudloff 2018-04-10 10:46:10 +02:00
parent 799bd75fb2
commit f3d98b2864
1 changed files with 6 additions and 8 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

14
include/api.php
View file

@ -577,14 +577,12 @@ function api_get_user(App $a, $contact_id = null)
if (is_numeric($user)) {
$user = dbesc(api_unique_id_to_nurl(intval($user)));
if ($user == "") {
return false;
}
$url = $user;
$extra_query = "AND `contact`.`nurl` = '%s' ";
if (api_user() !== false) {
$extra_query .= "AND `contact`.`uid`=" . intval(api_user());
if ($user != "") {
$url = $user;
$extra_query = "AND `contact`.`nurl` = '%s' ";
if (api_user() !== false) {
$extra_query .= "AND `contact`.`uid`=" . intval(api_user());
}
}
} else {
$user = dbesc($user);