From: Michael <heluecht@pirati.ca>
Date: Mon, 16 Jul 2018 05:48:51 +0000 (+0000)
Subject: Don't accept posts from unknown owners
X-Git-Url: https://git.mxchange.org/?a=commitdiff_plain;h=78c9e29aa87feff1cea5efe76c9d1291914b28ab;p=friendica.git

Don't accept posts from unknown owners
---

diff --git a/src/Protocol/DFRN.php b/src/Protocol/DFRN.php
index 60daa378c8..4c4f629d0d 100644
--- a/src/Protocol/DFRN.php
+++ b/src/Protocol/DFRN.php
@@ -1556,6 +1556,7 @@ class DFRN
 				logger("Contact ".$author["link"]." wasn't found for user ".$importer["importer_uid"]." XML: ".$xml, LOGGER_DEBUG);
 			}
 
+			$author["contact-unknown"] = true;
 			$author["contact-id"] = $importer["id"];
 			$author["network"] = $importer["network"];
 			$onlyfetch = true;
@@ -2431,6 +2432,8 @@ class DFRN
 		// Fetch the owner
 		$owner = self::fetchauthor($xpath, $entry, $importer, "dfrn:owner", true);
 
+		$owner_unknown = (isset($owner["contact-unknown"]) && $owner["contact-unknown"]);
+
 		$item["owner-link"] = $owner["link"];
 		$item["owner-id"] = Contact::getIdForURL($owner["link"], 0);
 
@@ -2621,6 +2624,11 @@ class DFRN
 			$item["type"] = "remote-comment";
 			$item["wall"] = 1;
 		} elseif ($entrytype == DFRN::TOP_LEVEL) {
+			if ($owner_unknown) {
+				logger("Item won't be stored because user " . $importer["importer_uid"] . " doesn't follow " . $item["owner-link"] . ".", LOGGER_DEBUG);
+				return;
+			}
+
 			if (!isset($item["object-type"])) {
 				$item["object-type"] = ACTIVITY_OBJ_NOTE;
 			}