Browse Source

Stop view.php from returning data of private photos

Tobias Reich 9 years ago
parent
commit
585bbb72ea
1 changed files with 3 additions and 0 deletions
  1. 3 0
      php/modules/misc.php

+ 3 - 0
php/modules/misc.php

@@ -56,6 +56,9 @@ function getGraphHeader($database, $photoID) {
 
 	if (!isset($database, $photoID)) return false;
 
+	$photo = new Photo($database, null, null, $photoID);
+	if ($photo->getPublic('')===false) return false;
+
 	$query	= Database::prepare($database, "SELECT title, description, url, medium FROM ? WHERE id = '?'", array(LYCHEE_TABLE_PHOTOS, $photoID));
 	$result	= $database->query($query);
 	$row	= $result->fetch_object();