Skip to content
Snippets Groups Projects
Commit b3aaf668 authored by Demian Katz's avatar Demian Katz
Browse files

More secure saved search ownership verification.

parent 80da5203
Branches
Tags
No related merge requests found
...@@ -142,7 +142,7 @@ class AbstractSearch extends AbstractBase ...@@ -142,7 +142,7 @@ class AbstractSearch extends AbstractBase
$sessId = $this->getServiceLocator()->get('VuFind\SessionManager')->getId(); $sessId = $this->getServiceLocator()->get('VuFind\SessionManager')->getId();
$user = $this->getUser(); $user = $this->getUser();
$userId = $user ? $user->id : false; $userId = $user ? $user->id : false;
if ($search->session_id == $sessId || $search->user_id == $userId) { if ($search->session_id == $sessId || $search->user_id === $userId) {
// They do, deminify it to a new object. // They do, deminify it to a new object.
$minSO = $search->getSearchObject(); $minSO = $search->getSearchObject();
$savedSearch = $minSO->deminify($this->getResultsManager()); $savedSearch = $minSO->deminify($this->getResultsManager());
......
0% or .
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment