Don't add the user's domain to invitee domains unless it's on the whitelist

[quix0rs-gnu-social.git] / plugins / DomainWhitelist / DomainWhitelistPlugin.php

diff --git a/plugins/DomainWhitelist/DomainWhitelistPlugin.php b/plugins/DomainWhitelist/DomainWhitelistPlugin.php
index 9e1b31ef34a3445afc7e724ce75c2fb0829e6ef5..cf0d94884d1c954c9c6a5ec0fc59658f65766421 100644 (file)
--- a/plugins/DomainWhitelist/DomainWhitelistPlugin.php
+++ b/plugins/DomainWhitelist/DomainWhitelistPlugin.php
@@ -231,8 +231,9 @@ class DomainWhitelistPlugin extends Plugin
                 )
             );
 
-            array_unshift($orderedWhitelist, $userDomain);
-
+            if (in_array($userDomain, $whitelist)) {
+                array_unshift($orderedWhitelist, $userDomain);
+            }
             return $orderedWhitelist;
         }