[geeklog-cvs] geeklog-1.3/public_html calendar_event.php,1.23,1.23.4.1

[dhaun at geeklog.net]

Update of /usr/cvs/geeklog/geeklog-1.3/public_html
In directory geeklog_prod:/tmp/cvs-serv8402

Modified Files:
      Tag: geeklog_1_3_7sr2_1
	calendar_event.php 
Log Message:
Check user ID before attempting to delete an event.


Index: calendar_event.php
===================================================================
RCS file: /usr/cvs/geeklog/geeklog-1.3/public_html/calendar_event.php,v
retrieving revision 1.23
retrieving revision 1.23.4.1
diff -C2 -d -r1.23 -r1.23.4.1
*** calendar_event.php	27 Nov 2002 18:11:26 -0000	1.23
--- calendar_event.php	19 Jan 2004 20:11:02 -0000	1.23.4.1
***************
*** 9,13 ****
  // |                                                                           |
  // +---------------------------------------------------------------------------+
! // | Copyright (C) 2000,2001 by the following authors:                         |
  // |                                                                           |
  // | Authors: Tony Bibbs       - tony at tonybibbs.com                            |
--- 9,13 ----
  // |                                                                           |
  // +---------------------------------------------------------------------------+
! // | Copyright (C) 2000-2004 by the following authors:                         |
  // |                                                                           |
  // | Authors: Tony Bibbs       - tony at tonybibbs.com                            |
***************
*** 391,396 ****
      break;
  case 'deleteevent':
!     DB_query("DELETE FROM {$_TABLES['personal_events']} WHERE uid={$_USER['uid']} AND eid='$eid'");
!     $display .= COM_refresh($_CONF['site_url'] . '/calendar.php?mode=personal&msg=26');
      break;
  default:
--- 391,400 ----
      break;
  case 'deleteevent':
!     if ($_USER['uid'] > 1) {
!         DB_query("DELETE FROM {$_TABLES['personal_events']} WHERE uid={$_USER['uid']} AND eid='$eid'");
!         $display .= COM_refresh($_CONF['site_url'] . '/calendar.php?mode=personal&msg=26');
!     } else {
!         $display .= COM_refresh($_CONF['site_url'] . '/index.php');
!     }
      break;
  default: