35 lines
1.3 KiB
PHP
35 lines
1.3 KiB
PHP
<?php
|
|
$PAGE_NAME = "Delete subscribers";
|
|
require_once __DIR__ . "/../../includes/prereqs.php";
|
|
|
|
$request = get_request($db, $_POST['rid']);
|
|
$authorised_users = get_subscribers($db, $request);
|
|
$is_authorised = isAuthorised($_SESSION['uuid'], $authorised_users, $request);
|
|
|
|
// Remove subscriber(s)
|
|
if ($is_authorised == true) {
|
|
if($_SERVER['REQUEST_METHOD'] == 'POST') {
|
|
echo($_POST['addSubSelector']);
|
|
die();
|
|
foreach ($_POST['addSubSelector'] as $sub) {
|
|
try {
|
|
$stmt = "DELETE FROM ticket_subscribers WHERE ticket_uuid=:tktuuid AND user_uuid=:usruuid";
|
|
$sql = $db->prepare($stmt);
|
|
$sql->bindParam(':tktuuid', $request['uuid']);
|
|
$sql->bindParam(':usruuid', $sub);
|
|
$sql->execute();
|
|
} catch (PDOException $e) {
|
|
$alert = array("danger", "Failed to remove subscriber(s): " . $e->getMessage());
|
|
}
|
|
}
|
|
}
|
|
$newURL = "/editsub?rid=" . $request['uuid'];
|
|
echo("<script>window.location = '$newURL'</script>");
|
|
} else {
|
|
$alert = array("danger", "You are not authorised to manage subscribers on this request.");
|
|
$newURL = "/editsub?rid=" . $request['uuid'];
|
|
echo("<script>window.location = '$newURL'</script>");
|
|
}
|
|
|
|
?>
|