PonyMirrors/Pony.fm
1
0
Fork 0
mirror of https://github.com/Poniverse/Pony.fm.git synced 2024-11-22 04:58:01 +01:00
Code Issues Projects Releases Packages Wiki Activity

Fixes #18: Fix downloading of private playlists for playlist owners

Browse source
This commit is contained in:
Kelvin Zhang 2015-11-07 17:54:58 +00:00
parent 967b45c7a7
commit dc117351ce
1 changed files with 5 additions and 1 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

6
app/Http/Controllers/PlaylistsController.php
View file

@ -63,8 +63,12 @@ class PlaylistsController extends Controller
public function getDownload($id, $extension)
{
$playlist = Playlist::with('tracks', 'user', 'tracks.album')->find($id);
if (!$playlist || !$playlist->is_public) {
if (!$playlist || (!$playlist->is_public && !Auth::check())) {
App::abort(404);
} elseif (!$playlist->is_public && Auth::check()) {
if ($playlist->user_id !== Auth::user()->id) {
App::abort(404);
}
}
$format = null;