X-Git-Url: http://wagnertech.de/gitweb/gitweb.cgi/timetracker.git/blobdiff_plain/0a7886b373c91ef0c2c41307f81177d043c807be..11868a92089a10db070993b89e595f45fac3f6ff:/mobile/time_delete.php diff --git a/mobile/time_delete.php b/mobile/time_delete.php index 5d6918c5..f5305bc6 100644 --- a/mobile/time_delete.php +++ b/mobile/time_delete.php @@ -38,13 +38,14 @@ if (!ttAccessAllowed('track_own_time')) { exit(); } $cl_id = (int)$request->getParameter('id'); -// Get the time record we are deleting. -$time_rec = ttTimeHelper::getRecord($cl_id, $user->getActiveUser()); +$user_id = $user->getUser(); +$time_rec = ttTimeHelper::getRecord($cl_id, $user_id); if (!$time_rec || $time_rec['invoice_id']) { // Prohibit deleting not ours or invoiced records. header('Location: access_denied.php'); exit(); } +// End of access checks. // Escape comment for presentation. $time_rec['comment'] = htmlspecialchars($time_rec['comment']); @@ -62,11 +63,8 @@ if ($request->isPost()) { $err->add($i18n->get('error.range_locked')); if ($err->no()) { - // Delete the record. - $result = ttTimeHelper::delete($cl_id, $user->getActiveUser()); - - if ($result) { + if (ttTimeHelper::delete($cl_id, $user_id)) { header('Location: time.php'); exit(); } else {