diff options
| author | Dries Buytaert <dries@buytaert.net> | 2008-02-10 19:29:29 +0000 |
|---|---|---|
| committer | Dries Buytaert <dries@buytaert.net> | 2008-02-10 19:29:29 +0000 |
| commit | f383ceef6d8ffb8e824478b1eb8089907fc267bb (patch) | |
| tree | faf8964738d506cd24aea455d376409029fe5c8c | |
| parent | ec9f8e090a3572511b7f42490c70d7f3d5d590c8 (diff) | |
| download | brdo-f383ceef6d8ffb8e824478b1eb8089907fc267bb.tar.gz brdo-f383ceef6d8ffb8e824478b1eb8089907fc267bb.tar.bz2 | |
- Patch #218471 by pwolanin: menus and books exposed unpublished nodes.
| -rw-r--r-- | includes/menu.inc | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/includes/menu.inc b/includes/menu.inc index e40579fd6..331253868 100644 --- a/includes/menu.inc +++ b/includes/menu.inc @@ -949,7 +949,7 @@ function menu_tree_check_access(&$tree, $node_links = array()) { // Use db_rewrite_sql to evaluate view access without loading each full node. $nids = array_keys($node_links); $placeholders = '%d'. str_repeat(', %d', count($nids) - 1); - $result = db_query(db_rewrite_sql("SELECT n.nid FROM {node} n WHERE n.nid IN (". $placeholders .")"), $nids); + $result = db_query(db_rewrite_sql("SELECT n.nid FROM {node} n WHERE n.status = 1 AND n.nid IN (". $placeholders .")"), $nids); while ($node = db_fetch_array($result)) { $nid = $node['nid']; foreach ($node_links[$nid] as $mlid => $link) { |