Fix bad admin query, thanks to Urs Enke

This commit is contained in:
Garvin Hicking 2007-06-12 12:43:17 +00:00
parent 5b1f4d38cd
commit 8ffc7202bc

View File

@ -401,7 +401,7 @@ function serendipity_deleteComment($id, $entry_id, $type='comments') {
if ($_SESSION['serendipityAuthedUser'] === true) {
$admin = '';
if (!serendipity_checkPermission('adminEntriesMaintainOthers')) {
$admin = " AND authorid = " . (int)$_SESSION['serendipityAuthorid'] ."'";
$admin = " AND authorid = " . (int)$_SESSION['serendipityAuthorid'];
}
/* We have to figure out if the comment we are about to delete, is awaiting approval,
@ -465,7 +465,7 @@ function serendipity_allowCommentsToggle($entry_id, $switch = 'disable') {
if ($_SESSION['serendipityAuthedUser'] === true) {
$admin = '';
if (!serendipity_checkPermission('adminEntriesMaintainOthers')) {
$admin = " AND authorid = '" . (int)$_SESSION['serendipityAuthorid'] ."'";
$admin = " AND authorid = " . (int)$_SESSION['serendipityAuthorid'];
}
$query = "UPDATE {$serendipity['dbPrefix']}entries SET allow_comments = '" . ($switch == 'disable' ? 'false' : 'true') . "' WHERE id = '". (int)$entry_id ."' $admin";