diff options
| author | Eric Johansson (neku) <neku@pomf.se> | 2015-04-23 21:53:23 +0200 |
|---|---|---|
| committer | Eric Johansson (neku) <neku@pomf.se> | 2015-04-23 21:53:23 +0200 |
| commit | 0773dd1239b9e2023bd7dcb249dfcafb0c857289 (patch) | |
| tree | d7a0091ce1ad60183d5e2bee1a82826fecc08a7c /moe | |
| parent | 91250eeca032547b580973470d0583ce304c2afe (diff) | |
Update core.php
Diffstat (limited to 'moe')
| -rw-r--r-- | moe/includes/core.php | 22 |
1 files changed, 12 insertions, 10 deletions
diff --git a/moe/includes/core.php b/moe/includes/core.php index 1436897..b32ae58 100644 --- a/moe/includes/core.php +++ b/moe/includes/core.php @@ -179,10 +179,15 @@ function delete ($filename, $deleteid, $mod) { switch($action){ case "fetch": - $do = $db->prepare("SELECT * FROM files WHERE orginalname LIKE (:keyword) AND date LIKE (:date) OR filename LIKE (:keyword) AND date LIKE (:date) ORDER BY id DESC LIMIT 0,:amount"); - $do->bindValue(':date', "%".$date."%"); - $do->bindValue(':amount', (int) $count, PDO::PARAM_INT); - $do->bindValue(':keyword', "%".$keyword."%"); + if($_SESSION['level'] > '0'){ + $do = $db->prepare("SELECT * FROM files WHERE orginalname LIKE (:keyword) AND date LIKE (:date) OR filename LIKE (:keyword) AND date LIKE (:date) ORDER BY id DESC LIMIT 0,:amount"); + }else{ + $do = $db->prepare("SELECT * FROM files WHERE orginalname LIKE (:keyword) AND date LIKE (:date) AND user = (:userid) OR filename LIKE (:keyword) AND date LIKE (:date) AND user = (:userid) ORDER BY id$ + $do->bindValue(':userid', $_SESSION['id']);} + + $do->bindValue(':date', "%".$date."%"); + $do->bindValue(':amount', (int) $count, PDO::PARAM_INT); + $do->bindValue(':keyword', "%".$keyword."%"); $do->execute(); $i = 0; @@ -260,7 +265,9 @@ function delete ($filename, $deleteid, $mod) { break; case "remove": - if($_SESSION['id'] === '1'){ + if($_SESSION['id'] < '0'){ + delete($file, $fileid);} + if($_SESSION['id'] > '0'){ $do = $db->prepare("DELETE FROM files WHERE id = (:id)"); $do->bindParam(':id', $fileid); $do->execute(); @@ -271,13 +278,8 @@ function delete ($filename, $deleteid, $mod) { $do->bindValue(':fileid', $fileid); $do->execute(); echo 'Deleted'; - }else{ - echo 'You are not allowed to be here, yet.'; - } break; } - }else{ - header("Location: http://cayootie.pomf.se/user"); } } ?> |