From 67a90ee18d63a673cc5092c79b51a5a7d4289336 Mon Sep 17 00:00:00 2001 From: Daniel Supernault Date: Sat, 30 Nov 2019 18:34:55 -0700 Subject: [PATCH] Fixes #1852 --- app/Http/Controllers/Api/BaseApiController.php | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/app/Http/Controllers/Api/BaseApiController.php b/app/Http/Controllers/Api/BaseApiController.php index b2ba00a94..e47d61e5e 100644 --- a/app/Http/Controllers/Api/BaseApiController.php +++ b/app/Http/Controllers/Api/BaseApiController.php @@ -193,11 +193,11 @@ class BaseApiController extends Controller ]); } - public function showTempMedia(Request $request, int $profileId, $mediaId, $timestamp) + public function showTempMedia(Request $request, $profileId, $mediaId, $timestamp) { abort_if(!$request->user(), 403); abort_if(!$request->hasValidSignature(), 404); - abort_if(Auth::user()->profile_id !== $profileId, 404); + abort_if(Auth::user()->profile_id != $profileId, 404); $media = Media::whereProfileId(Auth::user()->profile_id)->findOrFail($mediaId); $path = storage_path('app/'.$media->media_path); return response()->file($path);