Move unsecured GET endpoint handlers before security token check in Module\Contact

[friendica.git] / mod / display.php

diff --git a/mod/display.php b/mod/display.php
index 5e24bd4b43d26981d4c32dd04ebd59416058760b..bb69a611cb1029e672f7e8e399a50f15214a49c0 100644 (file)
--- a/mod/display.php
+++ b/mod/display.php
@@ -173,7 +173,7 @@ function display_content(App $a, $update = false, $update_uid = 0)
 
        if ($update) {
                $uri_id = $_REQUEST['uri_id'];
-               $item = Post::selectFirst(['uid', 'parent-uri-id'], ['uri-id' => $uri_id, 'uid' => $update_uid]);
+               $item = Post::selectFirst(['uid', 'parent-uri-id'], ['uri-id' => $uri_id, 'uid' => [0, $update_uid]]);
                if (!empty($item)) {
                        if ($item['uid'] != 0) {
                                $a->setProfileOwner($item['uid']);