✨ Only allow creator to modify subscribers
Signed-off-by: Luke Tainton <luke@tainton.uk>
This commit was merged in pull request #67.
This commit is contained in:
@@ -1,10 +1,10 @@
|
||||
<?php
|
||||
$PAGE_NAME = "Manage request subscribers";
|
||||
$PAGE_NAME = "Manage Subscribers";
|
||||
require_once __DIR__ . "/../includes/header.php";
|
||||
|
||||
$request = get_request($db, $_GET['rid']);
|
||||
$authorised_users = get_subscribers($db, $request);
|
||||
$is_authorised = isAuthorised($_SESSION['uuid'], $authorised_users, $request);
|
||||
$is_authorised = if ($_SESSION['uuid'] == $request['created_by']) {return true} else {return false};
|
||||
|
||||
$all_users = get_all_users($db);
|
||||
|
||||
|
||||
Reference in New Issue
Block a user