af_zz_imgproxy: redirect to caller url unless called in user context

8 years ago · 2187322cae
parent 4daaf23491
commit 2187322cae
1 changed files with 6 additions and 0 deletions
--- a/plugins/af_zz_imgproxy/init.php
+++ b/plugins/af_zz_imgproxy/init.php
@ -35,6 +35,12 @@ class Af_Zz_ImgProxy extends Plugin {
 		$url = rewrite_relative_url(SELF_URL_PATH, $_REQUEST["url"]);
 		$kind = (int) $_REQUEST["kind"]; // 1 = video

+		// called without user context, let's just redirect to original URL
+		if (!$_SESSION["uid"]) {
+			header("Location: $url");
+			return;
+		}
+
 		$extension = $kind == 1 ? '.mp4' : '.png';
 		$local_filename = CACHE_DIR . "/images/" . sha1($url) . $extension;