From 8f883bfa4554dd8894eb5236f6f06f7b49ea3225 Mon Sep 17 00:00:00 2001 From: Karl 'vollmerk' Vollmer Date: Wed, 21 Nov 2007 08:35:31 +0000 Subject: two fixes for invalid artist ids in album xml and parse error on image.php --- image.php | 12 ++++++------ 1 file changed, 6 insertions(+), 6 deletions(-) (limited to 'image.php') diff --git a/image.php b/image.php index 415bcb76..8ea39ecd 100644 --- a/image.php +++ b/image.php @@ -27,14 +27,14 @@ // This file is a little weird it needs to allow API session // this needs to be done a little better, but for now... eah -if ($_REQUEST['auth']) { - if (Access::session_exists(array(),$_REQUEST['auth'],'api')) { - define('NO_SESSION','1'); - } -} // extra layer of auth - +define('NO_SESSION','1'); require 'lib/init.php'; +// Check their session manually +if (!session_exists(session_id()) && !Access::session_exists(array(),$_REQUEST['auth'],'api')) { + exit; +} + /* Decide what size this image is */ switch ($_REQUEST['thumb']) { case '1': -- cgit