Ignore:
Timestamp:
07/10/08 11:40:54 (4 years ago)
Author:
hverton
Message:

Fixed missing groupaccess() check in unread posts queries

File:
1 edited

Legend:

Unmodified
Added
Removed
  • modules/common/forum_threads_list_panel/php-files/modules/forum_threads_list_panel/new_posts.php

    r1493 r1543  
    5757        SELECT count(*) as unread  
    5858            FROM ".$db_prefix."posts p  
     59                INNER JOIN ".$db_prefix."forums f ON p.forum_id = f.forum_id  
    5960                INNER JOIN ".$db_prefix."threads_read tr ON p.thread_id = tr.thread_id  
    60             WHERE tr.user_id = '".$userdata['user_id']."'  
     61            WHERE ".groupaccess('f.forum_access')." 
     62                AND  tr.user_id = '".$userdata['user_id']."'  
    6163                AND (p.post_datestamp > ".$settings['unread_threshold']." OR p.post_edittime > ".$settings['unread_threshold'].") 
    6264                AND ((p.post_datestamp > tr.thread_last_read OR p.post_edittime > tr.thread_last_read) 
     
    6769        SELECT count(*) as unread  
    6870            FROM ".$db_prefix."posts p  
     71                INNER JOIN ".$db_prefix."forums f ON p.forum_id = f.forum_id  
    6972                INNER JOIN ".$db_prefix."threads_read tr ON p.thread_id = tr.thread_id  
    70             WHERE tr.user_id = '".$userdata['user_id']."'  
     73            WHERE ".groupaccess('f.forum_access')." 
     74                AND tr.user_id = '".$userdata['user_id']."'  
    7175                AND p.post_author != '".$userdata['user_id']."' 
    7276                AND p.post_edituser != '".$userdata['user_id']."' 
     
    8993            SELECT count(*) as unread, tr.thread_id 
    9094                FROM ".$db_prefix."posts p  
     95                    INNER JOIN ".$db_prefix."forums f ON p.forum_id = f.forum_id  
    9196                    INNER JOIN ".$db_prefix."threads_read tr ON p.thread_id = tr.thread_id  
    92                 WHERE tr.user_id = '".$userdata['user_id']."'  
     97                WHERE ".groupaccess('f.forum_access')." 
     98                    AND tr.user_id = '".$userdata['user_id']."'  
    9399                    AND (p.post_datestamp > ".$settings['unread_threshold']." OR p.post_edittime > ".$settings['unread_threshold'].") 
    94100                    AND ((p.post_datestamp > tr.thread_last_read OR p.post_edittime > tr.thread_last_read) 
     
    100106            SELECT count(*) as unread, tr.thread_id  
    101107                FROM ".$db_prefix."posts p  
     108                    INNER JOIN ".$db_prefix."forums f ON p.forum_id = f.forum_id  
    102109                    INNER JOIN ".$db_prefix."threads_read tr ON p.thread_id = tr.thread_id  
    103                 WHERE tr.user_id = '".$userdata['user_id']."'  
     110                WHERE ".groupaccess('f.forum_access')." 
     111                    AND tr.user_id = '".$userdata['user_id']."'  
    104112                    AND p.post_author != '".$userdata['user_id']."' 
    105113                    AND p.post_edituser != '".$userdata['user_id']."' 
     
    121129                INNER JOIN ".$db_prefix."threads t ON p.thread_id = t.thread_id 
    122130                INNER JOIN ".$db_prefix."threads_read tr ON p.thread_id = tr.thread_id 
    123                 WHERE tr.user_id = '".$userdata['user_id']."'  
     131                WHERE ".groupaccess('f.forum_access')." 
     132                    AND tr.user_id = '".$userdata['user_id']."'  
    124133                    AND (p.post_datestamp > ".$settings['unread_threshold']." OR p.post_edittime > ".$settings['unread_threshold'].") 
    125134                    AND ((p.post_datestamp > tr.thread_last_read OR p.post_edittime > tr.thread_last_read) 
     
    136145                INNER JOIN ".$db_prefix."threads t ON p.thread_id = t.thread_id 
    137146                INNER JOIN ".$db_prefix."threads_read tr ON p.thread_id = tr.thread_id 
    138                 WHERE tr.user_id = '".$userdata['user_id']."'  
     147                WHERE ".groupaccess('f.forum_access')." 
     148                    AND tr.user_id = '".$userdata['user_id']."'  
    139149                    AND p.post_author != '".$userdata['user_id']."' 
    140150                    AND p.post_edituser != '".$userdata['user_id']."' 
Note: See TracChangeset for help on using the changeset viewer.