archives/FHeD
1
0
Fork 0
Code Issues Pull Requests Actions Packages Releases 40 Activity

🐛 Fix deciding if user is authorised

Browse Source 
Signed-off-by: Luke Tainton <luke@tainton.uk>
This commit is contained in:
Luke Tainton
2020-08-10 17:48:53 +01:00
parent 38694bef55
commit 47f8750fd7
3 changed files with 15 additions and 3 deletions
Download Patch File Download Diff File Expand all files Collapse all files

6
app/public/actions/addsub.php
View File

@@ -4,7 +4,11 @@
$request = get_request($db, $_POST['rid']);
$authorised_users = get_subscribers($db, $request);
$is_authorised = if ($_SESSION['uuid'] == $request['created_by']) {return true} else {return false};
if ($_SESSION['uuid'] == $request['created_by']) {
$is_authorised = true;
} else {
$is_authorised = false;
};
// Add subscriber
if ($is_authorised == true) {

6
app/public/actions/delsub.php
View File

@@ -4,7 +4,11 @@
$request = get_request($db, $_POST['rid']);
$authorised_users = get_subscribers($db, $request);
$is_authorised = if ($_SESSION['uuid'] == $request['created_by']) {return true} else {return false};
if ($_SESSION['uuid'] == $request['created_by']) {
$is_authorised = true;
} else {
$is_authorised = false;
};
if (!empty($_POST['delSubSelector'])) {
$subs_to_remove = implode(",", $_POST['delSubSelector']);

6
app/public/editsub.php
View File

@@ -4,7 +4,11 @@
$request = get_request($db, $_GET['rid']);
$authorised_users = get_subscribers($db, $request);
$is_authorised = if ($_SESSION['uuid'] == $request['created_by']) {return true} else {return false};
if ($_SESSION['uuid'] == $request['created_by']) {
$is_authorised = true;
} else {
$is_authorised = false;
};
$all_users = get_all_users($db);