From 30fe8e39d64c841b13c04f16c6dc290893bd9f79 Mon Sep 17 00:00:00 2001 From: Mike Macgirvin Date: Fri, 29 Oct 2010 22:18:05 -0700 Subject: [PATCH] security issue --- mod/profile.php | 3 +-- 1 file changed, 1 insertion(+), 2 deletions(-) diff --git a/mod/profile.php b/mod/profile.php index 6c60ea8..a39d839 100644 --- a/mod/profile.php +++ b/mod/profile.php @@ -2,7 +2,6 @@ if(! function_exists('profile_load')) { function profile_load(&$a, $username, $profile = 0) { - if(remote_user()) { $r = q("SELECT `profile-id` FROM `contact` WHERE `id` = %d LIMIT 1", intval($_SESSION['visitor_id'])); @@ -193,7 +192,7 @@ function profile_content(&$a, $update = 0) { // Profile owner - everything is visible - if(is_owner) { + if($is_owner) { $sql_extra = ''; // Oh - while we're here... reset the Unseen messages