Skip to:
Content

BuddyPress.org

Changeset 10880


Ignore:
Timestamp:
06/12/2016 07:18:31 PM (9 years ago)
Author:
r-a-y
Message:

Activity: Ensure that single activity pages are only rendered from the activity author's page.

Props tw2113, imath.

Fixes #7113.

File:
1 edited

Legend:

Unmodified
Added
Removed
  • trunk/src/bp-activity/bp-activity-screens.php

    r10853 r10880  
    248248            }
    249249        }
     250    }
     251
     252    // If activity author does not match displayed user, block access.
     253    if ( true === $has_access && bp_displayed_user_id() !== $activity->user_id ) {
     254        $has_access = false;
    250255    }
    251256
Note: See TracChangeset for help on using the changeset viewer.