@@ -6,13 +6,15 @@
|
||||
$authorised_users = get_subscribers($db, $request);
|
||||
$is_authorised = isAuthorised($_SESSION['uuid'], $authorised_users, $request);
|
||||
|
||||
$subs_to_remove = implode(",", $_POST['delSubSelector']);
|
||||
|
||||
// Remove subscriber(s)
|
||||
if ($is_authorised == true) {
|
||||
if($_SERVER['REQUEST_METHOD'] == 'POST') {
|
||||
try {
|
||||
$stmt = "DELETE FROM ticket_subscribers WHERE WHERE sub_id IN (:sublist)";
|
||||
$sql = $db->prepare($stmt);
|
||||
$sql->bindParam(':sublist', $_POST['delSubSelector']);
|
||||
$sql->bindParam(':sublist', $subs_to_remove);
|
||||
$sql->execute();
|
||||
} catch (PDOException $e) {
|
||||
$alert = array("danger", "Failed to remove subscriber(s): " . $e->getMessage());
|
||||
|
||||
@@ -116,7 +116,7 @@
|
||||
<div class="form-group">
|
||||
<input type="hidden" id="rid" name="rid" value="<?php echo($request['uuid']); ?>">
|
||||
<label for="delSubSelector">Remove subscribers:</label>
|
||||
<select multiple class="form-control" id="delSubSelector" name="delSubSelector">
|
||||
<select multiple class="form-control" id="delSubSelector" name="delSubSelector[]">
|
||||
<?php foreach($subs as $sub) {
|
||||
echo("<option value='" . $sub['sub_id'] . "'>" . get_user_name($db, $sub['user_uuid']) . "</option>");
|
||||
} ?>
|
||||
|
||||
Reference in New Issue
Block a user