nodehierarchy_get_children does not use db_rewrite_sql which results in a user being able to see nodes they shouldn't. Patch attached.

CommentFileSizeAuthor
rewritepatch.patch947 bytesmarcingy

Comments

markhalliwell’s picture

markhalliwell
Primary language English
commented
Component: Code » Drupal/PHP Code

Copy & Pasted: This issue pertains to the 6.x-1.x branch which is now legacy and is over one year old. If this issue is not applicable anymore, please consider closing it. Otherwise, please update this issue appropriately. Will be closed in two weeks if no response.