X-Git-Url: https://git.mxchange.org/?a=blobdiff_plain;f=mod%2Fattach.php;h=9ca701ba356ebde93865136b15dd19ef927d33b0;hb=f2ca3e5be44192c486e8e3af2a993e065ad40a7d;hp=0b88fe28fc4a769533a9a80a0b3937c8156dc32a;hpb=4e44b07dfe07dde78fe8a095fbb43d9ec1ffcb53;p=friendica.git diff --git a/mod/attach.php b/mod/attach.php index 0b88fe28fc..9ca701ba35 100644 --- a/mod/attach.php +++ b/mod/attach.php @@ -5,11 +5,10 @@ use Friendica\App; use Friendica\Core\L10n; -use Friendica\Database\dba; -use Friendica\Database\DBM; +use Friendica\Database\DBA; +use Friendica\Util\Security; require_once 'include/dba.php'; -require_once 'include/security.php'; function attach_init(App $a) { @@ -22,21 +21,21 @@ function attach_init(App $a) // Check for existence, which will also provide us the owner uid - $r = dba::selectFirst('attach', [], ['id' => $item_id]); - if (!DBM::is_result($r)) { + $r = DBA::selectFirst('attach', [], ['id' => $item_id]); + if (!DBA::isResult($r)) { notice(L10n::t('Item was not found.'). EOL); return; } - $sql_extra = permissions_sql($r['uid']); + $sql_extra = Security::getPermissionsSQLByUserId($r['uid']); // Now we'll see if we can access the attachment $r = q("SELECT * FROM `attach` WHERE `id` = '%d' $sql_extra LIMIT 1", - dbesc($item_id) + DBA::escape($item_id) ); - if (!DBM::is_result($r)) { + if (!DBA::isResult($r)) { notice(L10n::t('Permission denied.') . EOL); return; }