aboutsummaryrefslogtreecommitdiffstats
diff options
context:
space:
mode:
-rw-r--r--action.php8
1 files changed, 6 insertions, 2 deletions
diff --git a/action.php b/action.php
index fb2287ac3..485457642 100644
--- a/action.php
+++ b/action.php
@@ -103,9 +103,13 @@ $file='';
switch ($_GET['part'])
{
case 'e':
- if ( $user['enabled_high']!='true' )
+ if ( !$user['enabled_high'] )
{
- do_error(401, 'Access denied e');
+ $deriv = new DerivativeImage(IMG_XXLARGE, new SrcImage($element_info));
+ if ( !$deriv->same_as_source() )
+ {
+ do_error(401, 'Access denied e');
+ }
}
$file = get_element_path($element_info);
break;