diff options
| author | Matt Beckett <beck24@gmail.com> | 2013-02-12 23:56:50 -0700 |
|---|---|---|
| committer | Matt Beckett <beck24@gmail.com> | 2013-02-12 23:56:50 -0700 |
| commit | e7eb5590470fe5e78c527f5d69d8621d7223943d (patch) | |
| tree | 7c1242871c0ebf022184f682d654f6288a54e4b0 /engine | |
| parent | a9a7c39540e196a4673775b6ec277a54b8436552 (diff) | |
| download | elgg-e7eb5590470fe5e78c527f5d69d8621d7223943d.tar.gz elgg-e7eb5590470fe5e78c527f5d69d8621d7223943d.tar.bz2 | |
fixes #5067 - elgg_get_page_owner_guid() can bypass all access for the rest of the pageload
Diffstat (limited to 'engine')
| -rw-r--r-- | engine/lib/pageowner.php | 1 |
1 files changed, 1 insertions, 0 deletions
diff --git a/engine/lib/pageowner.php b/engine/lib/pageowner.php index bf5901aad..7e8e6e430 100644 --- a/engine/lib/pageowner.php +++ b/engine/lib/pageowner.php @@ -113,6 +113,7 @@ function default_page_owner_handler($hook, $entity_type, $returnvalue, $params) } if ($user = get_user_by_username($username)) { + elgg_set_ignore_access($ia); return $user->getGUID(); } } |