mirror/pixelfed
1
0
Fork 1
mirror of https://github.com/pixelfed/pixelfed.git synced 2024-12-25 17:26:43 +00:00
Code Issues Releases Wiki Activity

Fixes #658

Browse source
This commit is contained in:
Daniel Supernault 2019-04-12 23:28:23 -06:00
parent b8bd5d160f
commit 11ce7e617d
No known key found for this signature in database
GPG key ID: 0DEF1C662C9033F7
2 changed files with 5 additions and 5 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

4
app/Http/Controllers/PublicApiController.php
View file

@ -180,8 +180,8 @@ class PublicApiController extends Controller
if(!$user) { if(!$user) {
abort(403); abort(403);
} else { } else {
$follows = $profile->followedBy(Auth::user()->profile); $follows = $profile->followedBy($user->profile);
if($follows == false && $profile->id !== $user->profile->id) { if($follows == false && $profile->id !== $user->profile->id && $user->is_admin == false) {
abort(404); abort(404);
} }
} }

6
app/Http/Controllers/StatusController.php
View file

@ -42,11 +42,11 @@ class StatusController extends Controller
if($status->visibility == 'private' || $user->is_private) { if($status->visibility == 'private' || $user->is_private) {
if(!Auth::check()) { if(!Auth::check()) {
abort(403); abort(404);
} }
$pid = Auth::user()->profile; $pid = Auth::user()->profile;
if($user->followedBy($pid) == false && $user->id !== $pid->id) { if($user->followedBy($pid) == false && $user->id !== $pid->id && Auth::user()->is_admin == false) {
abort(403); abort(404);
} }
} }