csrf protection in userauthorization

[quix0rs-gnu-social.git] / actions / subscriptions.php

diff --git a/actions/subscriptions.php b/actions/subscriptions.php
index e0643e0dc428f2341664377d709fb148bec9668b..5566acb41da0c3ecf9e73e21667c9f8acbc72e10 100644 (file)
--- a/actions/subscriptions.php
+++ b/actions/subscriptions.php
@@ -38,6 +38,7 @@ class SubscriptionsAction extends GalleryAction {
 
        function define_subs(&$subs, &$profile) {
                $subs->subscriber = $profile->id;
+               $subs->whereAdd('subscribed != ' . $profile->id);
        }
 
        function div_class() {