X-Git-Url: https://git.mxchange.org/?a=blobdiff_plain;f=mod%2Fattach.php;h=9ca701ba356ebde93865136b15dd19ef927d33b0;hb=049cd963f3a67c483a15335660280f09a14dc83d;hp=fd428286a6ec9d4ed655e442fe68950e86d2e389;hpb=29f7ebe307c22b275466390937b82ccb3820fb1c;p=friendica.git diff --git a/mod/attach.php b/mod/attach.php index fd428286a6..9ca701ba35 100644 --- a/mod/attach.php +++ b/mod/attach.php @@ -2,12 +2,13 @@ /** * @file mod/attach.php */ + use Friendica\App; use Friendica\Core\L10n; -use Friendica\Database\DBM; +use Friendica\Database\DBA; +use Friendica\Util\Security; require_once 'include/dba.php'; -require_once 'include/security.php'; function attach_init(App $a) { @@ -20,21 +21,21 @@ function attach_init(App $a) // Check for existence, which will also provide us the owner uid - $r = dba::selectFirst('attach', [], ['id' => $item_id]); - if (!DBM::is_result($r)) { + $r = DBA::selectFirst('attach', [], ['id' => $item_id]); + if (!DBA::isResult($r)) { notice(L10n::t('Item was not found.'). EOL); return; } - $sql_extra = permissions_sql($r['uid']); + $sql_extra = Security::getPermissionsSQLByUserId($r['uid']); // Now we'll see if we can access the attachment $r = q("SELECT * FROM `attach` WHERE `id` = '%d' $sql_extra LIMIT 1", - dbesc($item_id) + DBA::escape($item_id) ); - if (!DBM::is_result($r)) { + if (!DBA::isResult($r)) { notice(L10n::t('Permission denied.') . EOL); return; }