diff options
| author | Cash Costello <cash.costello@gmail.com> | 2013-02-19 06:16:54 -0800 |
|---|---|---|
| committer | Cash Costello <cash.costello@gmail.com> | 2013-02-19 06:16:54 -0800 |
| commit | d7ca5d846ccf328ec8940950c4e50e8648bab58a (patch) | |
| tree | 0362b126df1064175c398d55219921149c7309b3 /engine/lib/pageowner.php | |
| parent | 2cc3a9e7d7721b0051bf261ca922972075b72d3c (diff) | |
| parent | e7eb5590470fe5e78c527f5d69d8621d7223943d (diff) | |
| download | elgg-d7ca5d846ccf328ec8940950c4e50e8648bab58a.tar.gz elgg-d7ca5d846ccf328ec8940950c4e50e8648bab58a.tar.bz2 | |
Merge pull request #529 from beck24/5067-page-owner-ignore-access
fixes #5067 - elgg_get_page_owner_guid() can bypass all access for the r...
Diffstat (limited to 'engine/lib/pageowner.php')
| -rw-r--r-- | engine/lib/pageowner.php | 1 |
1 files changed, 1 insertions, 0 deletions
diff --git a/engine/lib/pageowner.php b/engine/lib/pageowner.php index bf5901aad..7e8e6e430 100644 --- a/engine/lib/pageowner.php +++ b/engine/lib/pageowner.php @@ -113,6 +113,7 @@ function default_page_owner_handler($hook, $entity_type, $returnvalue, $params) } if ($user = get_user_by_username($username)) { + elgg_set_ignore_access($ia); return $user->getGUID(); } } |