mirror of
https://github.com/Pathduck/gallery3.git
synced 2026-05-28 07:19:09 -04:00
Allow File_Proxy_Controller to run in private gallery mode since it
does all the right permission checks. This prevents a hotlink to a private photo in a private gallery from kicking the user out to a login page. Fixes #1594.
This commit is contained in:
@@ -27,6 +27,7 @@
|
||||
* input is sanitized against the database before we perform any file I/O.
|
||||
*/
|
||||
class File_Proxy_Controller extends Controller {
|
||||
const ALLOW_PRIVATE_GALLERY = true;
|
||||
public function __call($function, $args) {
|
||||
// request_uri: gallery3/var/trunk/albums/foo/bar.jpg
|
||||
$request_uri = rawurldecode(Input::instance()->server("REQUEST_URI"));
|
||||
|
||||
Reference in New Issue
Block a user