throw a 404 if deleting a non-existing recipe

This commit is contained in:
Thomas Rubini 2023-01-27 10:23:57 +01:00
parent ed3f3eabc0
commit cfe0277df5
No known key found for this signature in database
GPG Key ID: C7D287C8C1CAC373

View File

@ -204,9 +204,13 @@ final class RecipeController
public function deleteAction(Array $A_urlParams = null, Array $A_postParams = null)
{
if(count($A_urlParams)!=1){
throw new HTTPSpecialCaseException(404);
}
Session::login_or_die();
$O_recipe = RecipeModel::getByID(Utils::intOrDie(Utils::getOrDie($A_urlParams, 0)));
$O_recipe = RecipeModel::getByID(Utils::intOrDie($A_urlParams[0]));
if ($O_recipe->I_AUTHOR_ID !== $_SESSION["ID"]) {
if(!Session::is_admin()){