From d5d960e2f0f3c83d8abe4fbb50767447ff30bb9c Mon Sep 17 00:00:00 2001 From: Daniel Supernault Date: Sun, 24 Nov 2019 00:42:59 -0700 Subject: [PATCH] Update StatusController --- app/Http/Controllers/StatusController.php | 5 ++++- 1 file changed, 4 insertions(+), 1 deletion(-) diff --git a/app/Http/Controllers/StatusController.php b/app/Http/Controllers/StatusController.php index 465ef381..a5e9e09d 100644 --- a/app/Http/Controllers/StatusController.php +++ b/app/Http/Controllers/StatusController.php @@ -76,7 +76,10 @@ class StatusController extends Controller public function showEmbed(Request $request, $username, int $id) { - $profile = Profile::whereNull(['domain','status'])->whereUsername($username)->first(); + $profile = Profile::whereNull(['domain','status']) + ->whereIsPrivate(false) + ->whereUsername($username) + ->first(); if(!$profile) { $content = view('status.embed-removed'); return response($content)->header('X-Frame-Options', 'ALLOWALL');