aboutsummaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorCash Costello <cash.costello@gmail.com>2013-02-19 06:16:54 -0800
committerCash Costello <cash.costello@gmail.com>2013-02-19 06:16:54 -0800
commitd7ca5d846ccf328ec8940950c4e50e8648bab58a (patch)
tree0362b126df1064175c398d55219921149c7309b3
parent2cc3a9e7d7721b0051bf261ca922972075b72d3c (diff)
parente7eb5590470fe5e78c527f5d69d8621d7223943d (diff)
downloadelgg-d7ca5d846ccf328ec8940950c4e50e8648bab58a.tar.gz
elgg-d7ca5d846ccf328ec8940950c4e50e8648bab58a.tar.bz2
Merge pull request #529 from beck24/5067-page-owner-ignore-access
fixes #5067 - elgg_get_page_owner_guid() can bypass all access for the r...
-rw-r--r--engine/lib/pageowner.php1
1 files changed, 1 insertions, 0 deletions
diff --git a/engine/lib/pageowner.php b/engine/lib/pageowner.php
index bf5901aad..7e8e6e430 100644
--- a/engine/lib/pageowner.php
+++ b/engine/lib/pageowner.php
@@ -113,6 +113,7 @@ function default_page_owner_handler($hook, $entity_type, $returnvalue, $params)
}
if ($user = get_user_by_username($username)) {
+ elgg_set_ignore_access($ia);
return $user->getGUID();
}
}