X-Git-Url: https://git.mxchange.org/?a=blobdiff_plain;f=src%2FSecurity%2FSecurity.php;h=c6c2d806ef1724368034ea9ee56aa9252412002b;hb=d5703e350c6205e6ef2ef0c0e12347201909d35d;hp=a75b9168b56c623dc16108a2fc542b47763427cd;hpb=eacc806c4b2f99c3d89a250d8f21135c5819cb44;p=friendica.git

diff --git a/src/Security/Security.php b/src/Security/Security.php
index a75b9168b5..c6c2d806ef 100644
--- a/src/Security/Security.php
+++ b/src/Security/Security.php
@@ -1,6 +1,6 @@
 <?php
 /**
- * @copyright Copyright (C) 2020, Friendica
+ * @copyright Copyright (C) 2010-2021, the Friendica project
  *
  * @license GNU AGPL version 3 or any later version
  *
@@ -49,7 +49,7 @@ class Security
 			return true;
 		}
 
-		if (!empty(Session::getRemoteContactID($owner))) {
+		if (!empty($cid = Session::getRemoteContactID($owner))) {
 			// use remembered decision and avoid a DB lookup for each and every display item
 			// DO NOT use this function if there are going to be multiple owners
 			// We have a contact-id for an authenticated remote user, this block determines if the contact
@@ -60,22 +60,19 @@ class Security
 			} elseif ($verified === 1) {
 				return false;
 			} else {
-				$cid = Session::getRemoteContactID($owner);
-				if (!$cid) {
+				$user = User::getById($owner);
+				if (!$user || $user['blockwall']) {
+					$verified = 1;
 					return false;
 				}
 
-				$r = q("SELECT `contact`.*, `user`.`page-flags` FROM `contact` INNER JOIN `user` on `user`.`uid` = `contact`.`uid`
-					WHERE `contact`.`uid` = %d AND `contact`.`id` = %d AND `contact`.`blocked` = 0 AND `contact`.`pending` = 0
-					AND `user`.`blockwall` = 0 AND `readonly` = 0  AND (`contact`.`rel` IN (%d , %d) OR `user`.`page-flags` = %d) LIMIT 1",
-					intval($owner),
-					intval($cid),
-					intval(Contact::SHARING),
-					intval(Contact::FRIEND),
-					intval(User::PAGE_FLAGS_COMMUNITY)
-				);
-
-				if (DBA::isResult($r)) {
+				$contact = Contact::getById($cid);
+				if ($contact || $contact['blocked'] || $contact['readonly'] || $contact['pending']) {
+					$verified = 1;
+					return false;
+				}
+				
+				if (in_array($contact['rel'], [Contact::SHARING, Contact::FRIEND]) || ($user['page-flags'] == User::PAGE_FLAGS_COMMUNITY)) {
 					$verified = 2;
 					return true;
 				} else {