SECURITY: communityhome - can leak photos from people with hidden walls (Thx Chris Case)

This commit is contained in:
friendica 2012-12-17 14:13:37 -08:00
parent 1d233755b4
commit 974da7e5f5
2 changed files with 1 additions and 0 deletions

Binary file not shown.

View file

@ -105,6 +105,7 @@ function communityhome_home(&$a, &$o){
`user`
WHERE `user`.`uid` = `photo`.`uid`
AND `user`.`blockwall`=0
AND `user`.`hidewall` = 0
ORDER BY `photo`.`edited` DESC
LIMIT 0, 12",
dbesc(t('Contact Photos')),