Merge pull request #317 from CatoTH/master

[friendica.git] / mod / ping.php

diff --git a/mod/ping.php b/mod/ping.php
index 63aaa0f45f3c5263f6bf0f98fe1cb7b2d5270972..55dcb26bb5b199c70e7ddab8cb277e8d2f386e5d 100644 (file)
--- a/mod/ping.php
+++ b/mod/ping.php
@@ -10,8 +10,16 @@ function ping_init(&$a) {
                <result>";
 
        $xmlhead="<"."?xml version='1.0' encoding='UTF-8' ?".">";
+
        if(local_user()){
 
+               // Different login session than the page that is calling us. 
+
+               if(intval($_GET['uid']) && intval($_GET['uid']) != local_user()) {
+                       echo '<invalid>1</invalid></result>';
+                       killme();
+               }
+
                $firehose = intval(get_pconfig(local_user(),'system','notify_full'));
 
                $t = q("select count(*) as total from notify where uid = %d and seen = 0",