🐛 Fix request authorisation

Signed-off-by: Luke Tainton <luke@tainton.uk>
This commit is contained in:
2020-08-09 17:09:50 +01:00
parent 07eaf4d05d
commit 671e1826d0
7 changed files with 14 additions and 14 deletions

View File

@@ -136,6 +136,6 @@ function get_subscribers($db, $request) {
return $users_result;
}
function isAuthorised($authorised_users, $request) {
if (in_array($authorised_users, $_SESSION['uuid']) || $_SESSION['uuid'] == $request['created_by']) { return true; } else { return false; }
function isAuthorised($user, $authorised_users, $request) {
if ( in_array($user, $authorised_users) || $_SESSION['uuid'] == $request['created_by']) { return true; } else { return false; }
}