X-Git-Url: https://git.mxchange.org/?a=blobdiff_plain;f=mod%2Fattach.php;h=cf2c8cc6dd55d68191fb94d639dce31e7158f3bd;hb=38734f17b900f46fe42bba10c245254784e6debc;hp=fd428286a6ec9d4ed655e442fe68950e86d2e389;hpb=d49f986d1eb6894dd948577288357b6c1755e3d3;p=friendica.git diff --git a/mod/attach.php b/mod/attach.php index fd428286a6..cf2c8cc6dd 100644 --- a/mod/attach.php +++ b/mod/attach.php @@ -2,12 +2,11 @@ /** * @file mod/attach.php */ + use Friendica\App; use Friendica\Core\L10n; -use Friendica\Database\DBM; - -require_once 'include/dba.php'; -require_once 'include/security.php'; +use Friendica\Database\DBA; +use Friendica\Util\Security; function attach_init(App $a) { @@ -20,21 +19,21 @@ function attach_init(App $a) // Check for existence, which will also provide us the owner uid - $r = dba::selectFirst('attach', [], ['id' => $item_id]); - if (!DBM::is_result($r)) { + $r = DBA::selectFirst('attach', [], ['id' => $item_id]); + if (!DBA::isResult($r)) { notice(L10n::t('Item was not found.'). EOL); return; } - $sql_extra = permissions_sql($r['uid']); + $sql_extra = Security::getPermissionsSQLByUserId($r['uid']); // Now we'll see if we can access the attachment $r = q("SELECT * FROM `attach` WHERE `id` = '%d' $sql_extra LIMIT 1", - dbesc($item_id) + DBA::escape($item_id) ); - if (!DBM::is_result($r)) { + if (!DBA::isResult($r)) { notice(L10n::t('Permission denied.') . EOL); return; }