potential for privacy leakage, plus photo not showing occasionally

[friendica.git] / mod / openid.php

diff --git a/mod/openid.php b/mod/openid.php
index 443d839fa1b1863a3fd7a26d4bdbef3ccd47a78d..84d4bf4bf0b783e6f4f8769559ccb2e41a455fbd 100644 (file)
--- a/mod/openid.php
+++ b/mod/openid.php
@@ -6,6 +6,10 @@ require_once('library/openid.php');
 
 function openid_content(&$a) {
 
+       $noid = get_config('system','no_openid');
+       if($noid)
+               goaway($a->get_baseurl());
+
        if((x($_GET,'openid_mode')) && (x($_SESSION,'openid'))) {
                $openid = new LightOpenID;
 
@@ -25,6 +29,10 @@ function openid_content(&$a) {
                                                        $args .= '&username=' . notags(trim($v));
                                                if($k === 'contact/email')
                                                        $args .= '&email=' . notags(trim($v));
+                                               if($k === 'media/image/aspect11')
+                                                       $photosq = bin2hex(trim($v));
+                                               if($k === 'media/image/default')
+                                                       $photo = bin2hex(trim($v));
                                        }
                                }
                                if($nick)
@@ -32,6 +40,11 @@ function openid_content(&$a) {
                                elseif($first)
                                        $args .= '&nickname=' . $first;
 
+                               if($photosq)
+                                       $args .= '&photo=' . $photosq;
+                               elseif($photo)
+                                       $args .= '&photo=' . $photo;
+
                                $args .= '&openid_url=' . notags(trim($_SESSION['openid']));
                                if($a->config['register_policy'] != REGISTER_CLOSED)
                                        goaway($a->get_baseurl() . '/register' . $args);