Cool_Tools/vichan
1
0
Fork 0
mirror of https://github.com/vichan-devel/vichan.git synced 2025-02-26 06:58:26 +01:00
Code Releases Wiki Activity

[SECURITY] JSON replies were leaking data for OPs of threads

Browse Source
This commit is contained in:
8chan 2015-09-24 13:20:55 -07:00
parent 0482c7918b
commit 5d8bd516e9
1 changed files with 8 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

9
inc/api.php
View File

@ -103,7 +103,14 @@ class Api {
$fields = $threadsPage ? $this->threadsPageFields : $this->postFields;
$this->translateFields($fields, $post, $apiPost);
if ($this->config['poster_ids']) $apiPost['id'] = poster_id($post->ip, $post->thread, $board['uri']);
if ($this->config['poster_ids']) {
if ($post->thread) {
$apiPost['id'] = poster_id($post->ip, $post->thread, $board['uri']);
} else {
$apiPost['id'] = poster_id($post->ip, $post->id, $board['uri']);
}
}
if ($threadsPage) return $apiPost;
// Handle country field