Skip to content
Permalink
Browse files

! Hoping to fix a privacy leak in profile pages when profile owner la…

…st posted in a regular topic that belongs to a private board. (Issue #69) (Load.php)
  • Loading branch information...
Nao committed Nov 28, 2017
1 parent f096a75 commit faa8f5b57a505adebdfca2e583bcafbe2eb9038f
Showing with 2 additions and 1 deletion.
  1. +2 −1 core/app/Load.php
@@ -998,7 +998,8 @@ function loadMemberData($users, $is_name = false, $set = 'normal')
SELECT m.id_member, m.poster_time, m.id_msg, m.id_topic, m.subject
FROM {db_prefix}messages AS m
LEFT JOIN {db_prefix}topics AS t ON t.id_topic = m.id_topic
WHERE m.id_member' . (count($new_loaded_ids) == 1 ? ' = {int:loaded_ids}' : ' IN ({array_int:loaded_ids})') . '
WHERE {query_see_board}
AND m.id_member' . (count($new_loaded_ids) == 1 ? ' = {int:loaded_ids}' : ' IN ({array_int:loaded_ids})') . '
AND {query_see_topic}
ORDER BY m.id_msg DESC
LIMIT 1',

0 comments on commit faa8f5b

Please sign in to comment.
You can’t perform that action at this time.