Only allow creator to modify subscribers

Signed-off-by: Luke Tainton <luke@tainton.uk>
This commit was merged in pull request #67.
This commit is contained in:
2020-08-10 17:42:19 +01:00
parent b7d70b953e
commit 38694bef55
4 changed files with 9 additions and 7 deletions

View File

@@ -1,10 +1,10 @@
<?php
$PAGE_NAME = "Add subscriber";
$PAGE_NAME = "Add Subscriber";
require_once __DIR__ . "/../../includes/prereqs.php";
$request = get_request($db, $_POST['rid']);
$authorised_users = get_subscribers($db, $request);
$is_authorised = isAuthorised($_SESSION['uuid'], $authorised_users, $request);
$is_authorised = if ($_SESSION['uuid'] == $request['created_by']) {return true} else {return false};
// Add subscriber
if ($is_authorised == true) {