From 14ff65379f490c9a8f844d143bc710b8115c49d9 Mon Sep 17 00:00:00 2001
From: Angie Byron <webchick@24967.no-reply.drupal.org>
Date: Wed, 17 Sep 2008 21:07:47 +0000
Subject: #224006 by Daniel Jalkut: blogapi_metaweblog_get_category_list()
 verified user access for the given content type but did not log in the user
 first.

---
 modules/blogapi/blogapi.module | 5 +++++
 1 file changed, 5 insertions(+)

(limited to 'modules/blogapi/blogapi.module')

diff --git a/modules/blogapi/blogapi.module b/modules/blogapi/blogapi.module
index d43be71e0..2ae37ff83 100644
--- a/modules/blogapi/blogapi.module
+++ b/modules/blogapi/blogapi.module
@@ -397,6 +397,11 @@ function blogapi_metaweblog_new_media_object($blogid, $username, $password, $fil
  * associated with a blog node.
  */
 function blogapi_metaweblog_get_category_list($blogid, $username, $password) {
+  $user = blogapi_validate_user($username, $password);
+  if (!$user->uid) {
+    return blogapi_error($user);
+  }
+
   if (($error = _blogapi_validate_blogid($blogid)) !== TRUE) {
     // Return an error if not configured type.
     return $error;
-- 
cgit v1.2.3