From 6658e2a2ee9517bebd59cf69d7483e6eda691b4e Mon Sep 17 00:00:00 2001
From: Dan Moore <dan@moore.cx>
Date: Thu, 4 Jun 2009 17:57:03 -0400
Subject: Handle the ways Twitter accepts passing the user in the query string.

---
 actions/api.php | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

(limited to 'actions/api.php')

diff --git a/actions/api.php b/actions/api.php
index b25ba99f3..b8da852b5 100644
--- a/actions/api.php
+++ b/actions/api.php
@@ -144,8 +144,8 @@ class ApiAction extends Action
         }
 
         if (in_array($fullname, $bareauth)) {
-            # bareauth: only needs auth if without an argument
-            if ($this->api_arg) {
+            # bareauth: only needs auth if without an argument or query param specifying user
+            if ($this->api_arg || $this->arg('id') || is_numeric($this->arg('user_id')) || $this->arg('screen_name')) {
                 return false;
             } else {
                 return true;
-- 
cgit v1.2.3-54-g00ecf