diff options
| author | Angie Byron <webchick@24967.no-reply.drupal.org> | 2008-09-17 21:07:47 +0000 |
|---|---|---|
| committer | Angie Byron <webchick@24967.no-reply.drupal.org> | 2008-09-17 21:07:47 +0000 |
| commit | 14ff65379f490c9a8f844d143bc710b8115c49d9 (patch) | |
| tree | 69f3915369209e7b0f550d0d2e8b67d1830babb0 /modules/blogapi/blogapi.module | |
| parent | 893942bb4f0ab6261ea5ea39a5331ab021b392d4 (diff) | |
| download | brdo-14ff65379f490c9a8f844d143bc710b8115c49d9.tar.gz brdo-14ff65379f490c9a8f844d143bc710b8115c49d9.tar.bz2 | |
#224006 by Daniel Jalkut: blogapi_metaweblog_get_category_list() verified user access for the given content type but did not log in the user first.
Diffstat (limited to 'modules/blogapi/blogapi.module')
| -rw-r--r-- | modules/blogapi/blogapi.module | 5 |
1 files changed, 5 insertions, 0 deletions
diff --git a/modules/blogapi/blogapi.module b/modules/blogapi/blogapi.module index d43be71e0..2ae37ff83 100644 --- a/modules/blogapi/blogapi.module +++ b/modules/blogapi/blogapi.module @@ -397,6 +397,11 @@ function blogapi_metaweblog_new_media_object($blogid, $username, $password, $fil * associated with a blog node. */ function blogapi_metaweblog_get_category_list($blogid, $username, $password) { + $user = blogapi_validate_user($username, $password); + if (!$user->uid) { + return blogapi_error($user); + } + if (($error = _blogapi_validate_blogid($blogid)) !== TRUE) { // Return an error if not configured type. return $error; |