mirror/php-phpbb
1
0
Fork 0
mirror of https://github.com/phpbb/phpbb.git synced 2025-06-04 05:25:01 +02:00
Code Issues Releases Wiki Activity

[ticket/11474] Check read permission before sending *_in_queue notifications

Browse Source 
PHPBB3-11405
PHPBB3-11474
This commit is contained in:
Joas Schilling 2013-03-26 20:14:40 +01:00
parent 8a94e08e30
commit 1af89968dd
2 changed files with 16 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

9
phpBB/includes/notification/type/post_in_queue.php
View File

@ -101,8 +101,15 @@ class phpbb_notification_type_post_in_queue extends phpbb_notification_type_post
{
$has_permission = array_unique(array_merge($has_permission, $auth_approve[0][$this->permission]));
}
sort($has_permission);
return $this->check_user_notification_options($has_permission, array_merge($options, array(
$auth_read = $this->auth->acl_get_list($has_permission, 'f_read', $post['forum_id']);
if (empty($auth_read))
{
return array();
}
return $this->check_user_notification_options($auth_read[$post['forum_id']]['f_read'], array_merge($options, array(
'item_type' => self::$notification_option['id'],
)));
}

9
phpBB/includes/notification/type/topic_in_queue.php
View File

@ -101,8 +101,15 @@ class phpbb_notification_type_topic_in_queue extends phpbb_notification_type_top
{
$has_permission = array_unique(array_merge($has_permission, $auth_approve[0][$this->permission]));
}
sort($has_permission);
return $this->check_user_notification_options($has_permission, array_merge($options, array(
$auth_read = $this->auth->acl_get_list($has_permission, 'f_read', $topic['forum_id']);
if (empty($auth_read))
{
return array();
}
return $this->check_user_notification_options($auth_read[$topic['forum_id']]['f_read'], array_merge($options, array(
'item_type' => self::$notification_option['id'],
)));
}