fixed auth check

This commit is contained in:
Andreas Gohr 2017-01-12 09:25:13 +01:00
commit 3ec07d58b7

View file

@ -49,7 +49,7 @@ class SVG {
$file = self::IMGDIR . $svg;
if(!file_exists($file)) {
// media files are ACL protected
if(auth_quickaclcheck($svg)) $this->abort(403);
if(auth_quickaclcheck($svg) < AUTH_READ) $this->abort(403);
$file = mediaFN($svg);
}
// check if media exists