X-Git-Url: http://wagnertech.de/git?a=blobdiff_plain;f=time_delete.php;h=5d721ab1f4fd882a7eb599095c2297172959cf07;hb=f58ab716cb0cc4b8be8e48723b345bfab29697a6;hp=060311e8776bdc09c1f5c846f9e2f53e2451e035;hpb=0a7886b373c91ef0c2c41307f81177d043c807be;p=timetracker.git diff --git a/time_delete.php b/time_delete.php index 060311e8..5d721ab1 100644 --- a/time_delete.php +++ b/time_delete.php @@ -38,13 +38,13 @@ if (!(ttAccessAllowed('track_own_time') || ttAccessAllowed('track_time'))) { exit(); } $cl_id = (int)$request->getParameter('id'); -// Get the time record we are deleting. $time_rec = ttTimeHelper::getRecord($cl_id, $user->getActiveUser()); if (!$time_rec || $time_rec['invoice_id']) { // Prohibit deleting not ours or invoiced records. header('Location: access_denied.php'); exit(); } +// End of access checks. // Escape comment for presentation. $time_rec['comment'] = htmlspecialchars($time_rec['comment']);