Merge pull request #7449 from annando/img-upload

[friendica.git] / view / theme / quattro / style.php

diff --git a/view/theme/quattro/style.php b/view/theme/quattro/style.php
index 8158468327ac39ae9c10fc2eb5471da60c471000..cca458a254ff4529b84d7bc3ca0c9cf646fe38f5 100644 (file)
--- a/view/theme/quattro/style.php
+++ b/view/theme/quattro/style.php
@@ -6,7 +6,7 @@ use Friendica\Core\Config;
 use Friendica\Core\PConfig;
 use Friendica\Model\Profile;
 
-$uid = Profile::getThemeUid();
+$uid = defaults($_REQUEST, 'puid', 0);
 
 $color = false;
 $quattro_align = false;
@@ -26,6 +26,8 @@ if ($quattro_align === false) {
        $quattro_align = $site_quattro_align;
 }
 
+$color = \Friendica\Util\Strings::sanitizeFilePathItem($color);
+
 if (file_exists("$THEMEPATH/$color/style.css")) {
        echo file_get_contents("$THEMEPATH/$color/style.css");
 }