exit();
}
$cl_id = (int)$request->getParameter('id');
-// Get the time record we are deleting.
-$time_rec = ttTimeHelper::getRecord($cl_id, $user->getActiveUser());
+$time_rec = ttTimeHelper::getRecord($cl_id, $user->getUser());
if (!$time_rec || $time_rec['invoice_id']) {
// Prohibit deleting not ours or invoiced records.
header('Location: access_denied.php');
exit();
}
+// End of access checks.
// Escape comment for presentation.
$time_rec['comment'] = htmlspecialchars($time_rec['comment']);
if ($err->no()) {
// Delete the record.
- $result = ttTimeHelper::delete($cl_id, $user->getActiveUser());
+ $result = ttTimeHelper::delete($cl_id, $user->getUser());
if ($result) {
header('Location: time.php');