Unverified Commit aa560237 authored by Birte Kristina Friesel's avatar Birte Kristina Friesel
Browse files

user_status redirect: check visibility independent of token

parent 6a734a09

lib/Travelynx/Controller/Traveling.pm

+19 −24
Original line number Diff line number Diff line
@@ -528,12 +528,10 @@ sub user_status { 
			)

		  )

		{

			my $token = $self->param('token');

			if ($token) {

				my $visibility = $self->compute_effective_visibility(

			my $visibility

			  = $self->compute_effective_visibility(

				$user->{default_visibility_str},

					$journey->{visibility_str}

				);

				$journey->{visibility_str} );

			if (

				$visibility eq 'public'

				or (    $visibility eq 'unlisted'
@@ -545,16 +543,13 @@ sub user_status { 
				)

			  )

			{

				my $token = $self->param('token') // q{};

				$self->redirect_to(

					"/p/${name}/j/$journey->{id}?token=${token}-${ts}");

			}

			else {

				$self->render('not_found');

			}

			}

			else {

				$self->redirect_to("/p/${name}/j/$journey->{id}");

			}

			return;

		}

		$self->render('not_found');