From: Evan Prodromou <evan@controlyourself.ca>
Date: Tue, 23 Sep 2008 18:20:24 +0000 (-0400)
Subject: better logic around protecting messages
X-Git-Url: https://git.mxchange.org/?a=commitdiff_plain;h=60baacf80e1b2d8f475633210b5589ab7de048d3;p=quix0rs-gnu-social.git

better logic around protecting messages

darcs-hash:20080923182024-5ed1f-cd751ae81cde929ab377734a41e0cdad321ffec5.gz
---

diff --git a/actions/showmessage.php b/actions/showmessage.php
index ce4a1f3727..28e3594506 100644
--- a/actions/showmessage.php
+++ b/actions/showmessage.php
@@ -38,15 +38,12 @@ class ShowmessageAction extends MailboxAction {
 		
 		$cur = common_current_user();
 		
-		if (!$cur ||
-			$cur->id != $message->from_profile &&
-			$cur->id != $message->to_profile) 
-		{
+		if ($cur && ($cur->id == $message->from_profile || $cur->id == $message->to_profile)) {
+			$this->show_page($cur, 1);
+		} else {
 			$this->client_error(_('Only the sender and recipient may read this message.'), 403);
 			return;
 		}
-			
-		$this->show_page($cur, 1);
 	}
 	
 	function get_message() {