From 21887a36fde1f287c73c7cc3a57ac9ba2ec2135b Mon Sep 17 00:00:00 2001
From: friendica <info@friendica.com>
Date: Tue, 6 Mar 2012 14:53:14 -0800
Subject: [PATCH] [PRIVACY] privacy issue bug #314

---
 mod/display.php | 7 +++++--
 1 file changed, 5 insertions(+), 2 deletions(-)

diff --git a/mod/display.php b/mod/display.php
index f510f793df..4f2e5ff9aa 100755
--- a/mod/display.php
+++ b/mod/display.php
@@ -34,7 +34,7 @@ function display_content(&$a) {
 
 	$contact = null;
 	$remote_contact = false;
-
+dbg(1);
 	if(remote_user()) {
 		$contact_id = $_SESSION['visitor_id'];
 		$groups = init_groups_visitor($contact_id);
@@ -87,6 +87,9 @@ function display_content(&$a) {
 
 	$sql_extra = permissions_sql($a->profile['uid'],$remote_contact,$groups);
 
+	if(! local_user() && ! remote_user())
+		$sql_extra .= " and `item`.`private` = 0 ";
+
 	$r = q("SELECT `item`.*, `item`.`id` AS `item_id`, 
 		`contact`.`name`, `contact`.`photo`, `contact`.`url`, `contact`.`rel`,
 		`contact`.`network`, `contact`.`thumb`, `contact`.`self`, `contact`.`writable`, 
@@ -135,7 +138,7 @@ function display_content(&$a) {
 		}
 
 	}
-
+dbg(0);
 	return $o;
 }