From 8b0a1ea368c48a14ad7d5ec01b3f98d513315ec1 Mon Sep 17 00:00:00 2001
From: Thomas Sileo <t@a4.io>
Date: Wed, 18 Jul 2018 00:06:42 +0200
Subject: [PATCH] Make the "With replies" section private

---
 app.py                | 1 +
 templates/header.html | 3 ++-
 2 files changed, 3 insertions(+), 1 deletion(-)

diff --git a/app.py b/app.py
index c2bf01c..a4c84fa 100644
--- a/app.py
+++ b/app.py
@@ -728,6 +728,7 @@ def index():
 
 
 @app.route("/with_replies")
+@login_required
 def with_replies():
     q = {
         "box": Box.OUTBOX.value,
diff --git a/templates/header.html b/templates/header.html
index 1d00568..388045c 100644
--- a/templates/header.html
+++ b/templates/header.html
@@ -13,7 +13,8 @@
 <div class="menu">
 <ul>
 <li><a href="/" {% if request.path == "/" %}class="selected"{% endif %}>Notes <small class="badge">{{ notes_count }}</small></a></li>
-<li><a href="/with_replies" {% if request.path == "/with_replies" %}class="selected"{% endif %}>With replies <small class="badge">{{ with_replies_count }}</small></a></li>
+{% if session.logged_in %}<li><a href="/with_replies" {% if request.path == "/with_replies" %}class="selected"{% endif %}>With replies <small class="badge">{{ with_replies_count }}</small></a></li>
+{% end %}
 <li><a href="/liked" {% if request.path == "/liked" %}class="selected"{% endif %}>Liked <small class="badge">{{ liked_count }}</small></a></li>
 <li><a href="/followers"{% if request.path == "/followers" %} class="selected" {% endif %}>Followers <small class="badge">{{ followers_count }}</small></a></li>
 {% if not config.HIDE_FOLLOWING or session.logged_in %}<li><a href="/following"{% if request.path == "/following" %} class="selected" {% endif %}>Following <small class="badge">{{ following_count }}</small></a></li>{% endif %}