From 64cafb1fc08f57bf3d9960139f3fa30034432be9 Mon Sep 17 00:00:00 2001 From: Christopher Smith Date: Mon, 1 Apr 2013 20:47:21 +0100 Subject: for completeness (& defensive coding), test ['show'] against MSG_PUBLIC in case its redefined to a non-zero value --- inc/infoutils.php | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) (limited to 'inc/infoutils.php') diff --git a/inc/infoutils.php b/inc/infoutils.php index 3d1326624..da230da37 100644 --- a/inc/infoutils.php +++ b/inc/infoutils.php @@ -300,7 +300,7 @@ function info_msg_canshow($msg){ global $INFO, $auth; // is the message public? - everyone and anyone can see it - if (empty($msg['show'])) return true; + if (empty($msg['show']) || ($msg['show'] == MSG_PUBLIC)) return true; // restricted msg, but no authentication if (empty($auth)) return false; -- cgit v1.2.3