🐛 Fix request authorisation
Signed-off-by: Luke Tainton <luke@tainton.uk>
This commit is contained in:
@@ -136,6 +136,6 @@ function get_subscribers($db, $request) {
|
||||
return $users_result;
|
||||
}
|
||||
|
||||
function isAuthorised($authorised_users, $request) {
|
||||
if (in_array($authorised_users, $_SESSION['uuid']) || $_SESSION['uuid'] == $request['created_by']) { return true; } else { return false; }
|
||||
function isAuthorised($user, $authorised_users, $request) {
|
||||
if ( in_array($user, $authorised_users) || $_SESSION['uuid'] == $request['created_by']) { return true; } else { return false; }
|
||||
}
|
||||
|
||||
Reference in New Issue
Block a user