Move unsecured GET endpoint handlers before security token check in Module\Contact

[friendica.git] / mod / display.php

diff --git a/mod/display.php b/mod/display.php
index ad61134e5f5c53beff2b878b14365321b0d70850..bb69a611cb1029e672f7e8e399a50f15214a49c0 100644 (file)
--- a/mod/display.php
+++ b/mod/display.php
@@ -62,7 +62,7 @@ function display_init(App $a)
                if (local_user()) {
                        $item = Post::selectFirstForUser(local_user(), $fields, ['guid' => DI::args()->getArgv()[1], 'uid' => local_user()]);
                        if (DBA::isResult($item)) {
-                               $nick = $a->getNickname();
+                               $nick = $a->getLoggedInUserNickname();
                        }
                }
 
@@ -173,7 +173,7 @@ function display_content(App $a, $update = false, $update_uid = 0)
 
        if ($update) {
                $uri_id = $_REQUEST['uri_id'];
-               $item = Post::selectFirst(['uid', 'parent-uri-id'], ['uri-id' => $uri_id, 'uid' => $update_uid]);
+               $item = Post::selectFirst(['uid', 'parent-uri-id'], ['uri-id' => $uri_id, 'uid' => [0, $update_uid]]);
                if (!empty($item)) {
                        if ($item['uid'] != 0) {
                                $a->setProfileOwner($item['uid']);