ssafronova (ssafronova) wrote in changelog,
ssafronova
ssafronova
changelog

[livejournal] r16114: LJSV-263: Non-member posting allows acce...

Committer: ssafronova
LJSV-263: Non-member posting allows access on editjournal.bml to community entries
U   trunk/cgi-bin/ljprotocol.pl
Modified: trunk/cgi-bin/ljprotocol.pl
===================================================================
--- trunk/cgi-bin/ljprotocol.pl	2010-01-20 12:29:51 UTC (rev 16113)
+++ trunk/cgi-bin/ljprotocol.pl	2010-01-21 09:57:25 UTC (rev 16114)
@@ -2341,7 +2341,7 @@
     # common SQL template:
     unless ($sql) {
         $sql = "SELECT jitemid, eventtime, security, allowmask, anum, posterid, replycount, UNIX_TIMESTAMP(eventtime) ".
-            "FROM log2 WHERE journalid=$ownerid $where $orderby $limit $offset";
+            "FROM log2 WHERE journalid=$ownerid $secwhere $where $orderby $limit $offset";
     }
 
     # whatever selecttype might have wanted us to use the master db.

Tags: livejournal, pl, ssafronova
Subscribe

  • Post a new comment

    Error

    Anonymous comments are disabled in this journal

    default userpic

    Your reply will be screened

    Your IP address will be recorded 

  • 0 comments