diff options
| author | Sem <sembrestels@riseup.net> | 2012-07-20 07:09:38 +0200 |
|---|---|---|
| committer | Sem <sembrestels@riseup.net> | 2012-07-20 07:09:38 +0200 |
| commit | 07b599a683760d2542014bb04a681463420a3565 (patch) | |
| tree | cfcd06671529eeec7790fb70a8d490094d7942c9 /mod/notifications/actions/save.php | |
| parent | ea0140d87534c3b10e489d13a1449ebb79da832d (diff) | |
| parent | 174763bcbcd20812dc09f27b64908f9d71b523b9 (diff) | |
| download | elgg-07b599a683760d2542014bb04a681463420a3565.tar.gz elgg-07b599a683760d2542014bb04a681463420a3565.tar.bz2 | |
Merge branch 'lorea-preprod'
Conflicts:
.gitmodules
Diffstat (limited to 'mod/notifications/actions/save.php')
| -rw-r--r-- | mod/notifications/actions/save.php | 11 |
1 files changed, 10 insertions, 1 deletions
diff --git a/mod/notifications/actions/save.php b/mod/notifications/actions/save.php index 163b656aa..3fe0001a3 100644 --- a/mod/notifications/actions/save.php +++ b/mod/notifications/actions/save.php @@ -6,9 +6,18 @@ * @package ElggNotifications */ -$user = elgg_get_logged_in_user_entity(); +$current_user = elgg_get_logged_in_user_entity(); + +$guid = (int) get_input('guid', 0); +if (!$guid || !($user = get_entity($guid))) { + forward(); +} +if (($user->guid != $current_user->guid) && !$current_user->isAdmin()) { + forward(); +} global $NOTIFICATION_HANDLERS; +$subscriptions = array(); foreach($NOTIFICATION_HANDLERS as $method => $foo) { $subscriptions[$method] = get_input($method.'subscriptions'); $personal[$method] = get_input($method.'personal'); |