aboutsummaryrefslogtreecommitdiff
path: root/engine/lib/pageowner.php
diff options
context:
space:
mode:
authorMatt Beckett <beck24@gmail.com>2013-02-12 23:56:50 -0700
committerMatt Beckett <beck24@gmail.com>2013-02-12 23:56:50 -0700
commite7eb5590470fe5e78c527f5d69d8621d7223943d (patch)
tree7c1242871c0ebf022184f682d654f6288a54e4b0 /engine/lib/pageowner.php
parenta9a7c39540e196a4673775b6ec277a54b8436552 (diff)
downloadelgg-e7eb5590470fe5e78c527f5d69d8621d7223943d.tar.gz
elgg-e7eb5590470fe5e78c527f5d69d8621d7223943d.tar.bz2
fixes #5067 - elgg_get_page_owner_guid() can bypass all access for the rest of the pageload
Diffstat (limited to 'engine/lib/pageowner.php')
-rw-r--r--engine/lib/pageowner.php1
1 files changed, 1 insertions, 0 deletions
diff --git a/engine/lib/pageowner.php b/engine/lib/pageowner.php
index bf5901aad..7e8e6e430 100644
--- a/engine/lib/pageowner.php
+++ b/engine/lib/pageowner.php
@@ -113,6 +113,7 @@ function default_page_owner_handler($hook, $entity_type, $returnvalue, $params)
}
if ($user = get_user_by_username($username)) {
+ elgg_set_ignore_access($ia);
return $user->getGUID();
}
}