X-Git-Url: https://git.mxchange.org/?a=blobdiff_plain;ds=sidebyside;f=mod%2Flockview.php;h=0ae54c8c125f92d07616113a7b52865e3d61fed1;hb=5f89cb09234bc79aab2be93778609b344239c3da;hp=b8f4318df113758f4acb91ac7e13d312814cedb1;hpb=dda51954185ef5a1801ef2b9a2b99cb796399a91;p=friendica.git diff --git a/mod/lockview.php b/mod/lockview.php index b8f4318df1..0ae54c8c12 100644 --- a/mod/lockview.php +++ b/mod/lockview.php @@ -2,20 +2,43 @@ function lockview_content(&$a) { - - $item_id = (($a->argc > 1) ? intval($a->argv[1]) : 0); + + $type = (($a->argc > 1) ? $a->argv[1] : 0); + if (is_numeric($type)) { + $item_id = intval($type); + $type='item'; + } else { + $item_id = (($a->argc > 2) ? intval($a->argv[2]) : 0); + } + if(! $item_id) killme(); - $r = q("SELECT * FROM `item` WHERE `id` = %d LIMIT 1", + if (!in_array($type, array('item','photo','event'))) + killme(); + + $r = q("SELECT * FROM `%s` WHERE `id` = %d LIMIT 1", + dbesc($type), intval($item_id) ); if(! count($r)) killme(); $item = $r[0]; - if($item['uid'] != local_user()) + + call_hooks('lockview_content', $item); + + if($item['uid'] != local_user()) { + echo t('Remote privacy information not available.') . '
'; killme(); + } + + + if(($item['private'] == 1) && (! strlen($item['allow_cid'])) && (! strlen($item['allow_gid'])) + && (! strlen($item['deny_cid'])) && (! strlen($item['deny_gid']))) { + echo t('Remote privacy information not available.') . '
'; + killme(); + } $allowed_users = expand_acl($item['allow_cid']); $allowed_groups = expand_acl($item['allow_gid']);