aboutsummaryrefslogtreecommitdiff
path: root/engine
diff options
context:
space:
mode:
Diffstat (limited to 'engine')
-rw-r--r--engine/lib/extender.php5
1 files changed, 5 insertions, 0 deletions
diff --git a/engine/lib/extender.php b/engine/lib/extender.php
index 7cbc647af..5858d6432 100644
--- a/engine/lib/extender.php
+++ b/engine/lib/extender.php
@@ -275,6 +275,9 @@
*/
function can_edit_extender($extender_id, $type, $user_guid = 0) {
+ if (!isloggedin())
+ return false;
+
if ($user_guid == 0) {
if (isset($_SESSION['user'])) {
$user = $_SESSION['user'];
@@ -290,6 +293,8 @@
$extender = $functionname($extender_id);
} else return false;
+ if (!is_a($extender,"ElggExtender")) return false;
+
// If the owner is the specified user, great! They can edit.
if ($extender->getOwner() == $user->getGUID()) return true;