cst1/openstreetmap-website
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Don't expose lat/lon of private traces

Browse source
This commit is contained in:
John Firebaugh 2012-09-21 15:20:15 -07:00
parent 20e5f756be
commit 02bdc8f1ad
1 changed files with 1 additions and 1 deletions
Download patch file Download diff file Expand all files Collapse all files

2
app/controllers/site_controller.rb
View file

@ -51,7 +51,7 @@ class SiteController < ApplicationController
@lat = bbox.centre_lat
@lon = bbox.centre_lon
elsif params[:gpx]
trace = Trace.find(params[:gpx])
trace = Trace.visible_to(@user).find(params[:gpx])
@lat = trace.latitude
@lon = trace.longitude
end