aboutsummaryrefslogtreecommitdiff
path: root/engine/lib/extender.php
diff options
context:
space:
mode:
authorben <ben@36083f99-b078-4883-b0ff-0f9b5a30f544>2008-04-29 14:49:30 +0000
committerben <ben@36083f99-b078-4883-b0ff-0f9b5a30f544>2008-04-29 14:49:30 +0000
commit8d9ef94c28b99f60c1cad79d54b5a324bffb2ebf (patch)
tree5999cce5f28b9a5e48d48246c72e2a1bb9ca9cca /engine/lib/extender.php
parentabb70054a8094360bc406f7346e39fa741dc6427 (diff)
downloadelgg-8d9ef94c28b99f60c1cad79d54b5a324bffb2ebf.tar.gz
elgg-8d9ef94c28b99f60c1cad79d54b5a324bffb2ebf.tar.bz2
Sledgehammer tactics on can_edit_extender
git-svn-id: https://code.elgg.org/elgg/trunk@559 36083f99-b078-4883-b0ff-0f9b5a30f544
Diffstat (limited to 'engine/lib/extender.php')
-rw-r--r--engine/lib/extender.php5
1 files changed, 5 insertions, 0 deletions
diff --git a/engine/lib/extender.php b/engine/lib/extender.php
index 7cbc647af..5858d6432 100644
--- a/engine/lib/extender.php
+++ b/engine/lib/extender.php
@@ -275,6 +275,9 @@
*/
function can_edit_extender($extender_id, $type, $user_guid = 0) {
+ if (!isloggedin())
+ return false;
+
if ($user_guid == 0) {
if (isset($_SESSION['user'])) {
$user = $_SESSION['user'];
@@ -290,6 +293,8 @@
$extender = $functionname($extender_id);
} else return false;
+ if (!is_a($extender,"ElggExtender")) return false;
+
// If the owner is the specified user, great! They can edit.
if ($extender->getOwner() == $user->getGUID()) return true;