Changeset 11377

Timestamp:

01/06/2017 03:47:06 AM (8 years ago)

Author:

boonebgorges

Message:

AJAX directory 'type' should not depend on 'action' whitelist.

Introduced in [11356], via some overzealous cutting and pasting.

Props slaFFik, hnla.
Fixes #7414.

File:

• trunk/src/bp-templates/bp-legacy/buddypress-functions.php (modified) (1 diff)

trunk/src/bp-templates/bp-legacy/buddypress-functions.php

@@ -688 +688 @@
     // Activity stream filtering on action.
     if ( ! empty( $_BP_COOKIE['bp-' . $object . '-filter'] ) && '-1' != $_BP_COOKIE['bp-' . $object . '-filter'] ) {
+        $qs[] = 'type=' . $_BP_COOKIE['bp-' . $object . '-filter'];
+
         $actions = bp_activity_get_actions_for_context();
         foreach ( $actions as $action ) {
             if ( $action['key'] === $_BP_COOKIE['bp-' . $object . '-filter'] ) {
-                $qs[] = 'type='   . $_BP_COOKIE['bp-' . $object . '-filter'];
                 $qs[] = 'action=' . $_BP_COOKIE['bp-' . $object . '-filter'];
             }