Version 4.5.0

applications/core/tasks/deletecontent.php

@@ -11,7 +11,7 @@
 namespace IPS\core\tasks;
 
 /* To prevent PHP errors (extending class does not exist) revealing path */
-if ( !defined( '\IPS\SUITE_UNIQUE_KEY' ) )
+if ( !\defined( '\IPS\SUITE_UNIQUE_KEY' ) )
 {
 	header( ( isset( $_SERVER['SERVER_PROTOCOL'] ) ? $_SERVER['SERVER_PROTOCOL'] : 'HTTP/1.0' ) . ' 403 Forbidden' );
 	exit;
@@ -47,7 +47,14 @@ class _deletecontent extends \IPS\Task
 					$class		= $log->content_class;
 					if ( class_exists ( $class ) )
 					{
-						$content	= $class::load( $log->content_id );
+						$content = $class::load( $log->content_id );
+
+						/* Make sure that the content is flagged for deletion */
+						if( $content->hidden() !== -2 )
+						{
+							throw new \OutOfRangeException;
+						}
+
 						$content->delete();
 					}
 				}