SECURITY: communityhome - can leak photos from people with hidden walls (Thx Chris...

diff --git a/communityhome.tgz b/communityhome.tgz
index 129081b613e8d3babac1e5ad3262e5558cf837c1..20f7b9642c0e676d43f9143eb52e1df174bde2ff 100755 (executable)
Binary files a/communityhome.tgz and b/communityhome.tgz differ

diff --git a/communityhome/communityhome.php b/communityhome/communityhome.php
index 2b14fd3381547eaa3da58f715836feb8976a8f4f..484842cce7b53e56b7cd4ae091edcf9d4067d6a8 100755 (executable)
--- a/communityhome/communityhome.php
+++ b/communityhome/communityhome.php
@@ -105,6 +105,7 @@ function communityhome_home(&$a, &$o){
                                `user` 
                                WHERE `user`.`uid` = `photo`.`uid`
                                AND `user`.`blockwall`=0
+                               AND `user`.`hidewall` = 0
                                ORDER BY `photo`.`edited` DESC
                                LIMIT 0, 12",
                                dbesc(t('Contact Photos')),