Ignore:
Timestamp:
07/10/08 14:57:47 (4 years ago)
Author:
hverton
Message:

Fixed missing groupaccess() check in unread posts queries

File:
1 edited

Legend:

Unmodified
Added
Removed

  • themes/PLi-Fusion/PLiXmas/php-files/themes/PLiXmas/theme.php

    r1512 r1544  
    8181            SELECT count(*) as unread  
    8282                FROM ".$db_prefix."posts p  
    83                     LEFT JOIN ".$db_prefix."threads_read tr ON p.thread_id = tr.thread_id  
    84                 WHERE tr.user_id = '".$userdata['user_id']."'  
     83                    INNER JOIN ".$db_prefix."forums f ON f.forum_id = p.forum_id  
     84                    INNER JOIN ".$db_prefix."threads_read tr ON p.thread_id = tr.thread_id  
     85                WHERE ".groupaccess('f.forum_access')." 
     86                    AND tr.user_id = '".$userdata['user_id']."'  
    8587                    AND (p.post_datestamp > ".$settings['unread_threshold']." OR p.post_edittime > ".$settings['unread_threshold'].") 
    8688                    AND ((p.post_datestamp > tr.thread_last_read OR p.post_edittime > tr.thread_last_read) 
    … …  
    9193            SELECT count(*) as unread  
    9294                FROM ".$db_prefix."posts p  
    93                     LEFT JOIN ".$db_prefix."threads_read tr ON p.thread_id = tr.thread_id  
    94                 WHERE tr.user_id = '".$userdata['user_id']."'  
     95                    INNER JOIN ".$db_prefix."forums f ON f.forum_id = p.forum_id  
     96                    INNER JOIN ".$db_prefix."threads_read tr ON p.thread_id = tr.thread_id  
     97                WHERE ".groupaccess('f.forum_access')." 
     98                    AND tr.user_id = '".$userdata['user_id']."'  
    9599                    AND p.post_author != '".$userdata['user_id']."' 
    96100                    AND p.post_edituser != '".$userdata['user_id']."' 
Note: See TracChangeset for help on using the changeset viewer.