[geeklog-cvs] geeklog-1.3/public_html calendar_event.php,1.25,1.25.2.1

[dhaun at geeklog.net]

Update of /usr/cvs/geeklog/geeklog-1.3/public_html
In directory geeklog_prod:/tmp/cvs-serv3814/public_html

Modified Files:
      Tag: geeklog_1_3_8_1_1
	calendar_event.php 
Log Message:
Check user ID before attempting to delete an event.


Index: calendar_event.php
===================================================================
RCS file: /usr/cvs/geeklog/geeklog-1.3/public_html/calendar_event.php,v
retrieving revision 1.25
retrieving revision 1.25.2.1
diff -C2 -d -r1.25 -r1.25.2.1
*** calendar_event.php	16 Jun 2003 09:11:22 -0000	1.25
--- calendar_event.php	18 Jan 2004 20:04:30 -0000	1.25.2.1
***************
*** 391,396 ****
      break;
  case 'deleteevent':
!     DB_query("DELETE FROM {$_TABLES['personal_events']} WHERE uid={$_USER['uid']} AND eid='$eid'");
!     $display .= COM_refresh($_CONF['site_url'] . '/calendar.php?mode=personal&msg=26');
      break;
  default:
--- 391,401 ----
      break;
  case 'deleteevent':
!     if ($_USER['uid'] > 1) {
!         DB_query ("DELETE FROM {$_TABLES['personal_events']} WHERE uid={$_USER['uid']} AND eid='$eid'");
!         $display .= COM_refresh ($_CONF['site_url']
!                                  . '/calendar.php?mode=personal&msg=26');
!     } else {
!         $display .= COM_refresh ($_CONF['site_url'] . '/index.php');
!     }
      break;
  default: