securité addedit

This commit is contained in:
= 2026-02-27 08:03:17 +00:00
parent 03b69928ae
commit fd8b2e6e4e

View file

@ -129,6 +129,10 @@
// Dans la cas de modif // Dans la cas de modif
if (isset($_GET['id'])){ if (isset($_GET['id'])){
$arrProject = $objProjectModel->findOne($_GET['id']); $arrProject = $objProjectModel->findOne($_GET['id']);
if($_SESSION['user']['user_id'] != $arrProject['project_user_id']){
header("Location:index.php?ctrl=error&action=error_403");
exit;
}
$objProject->hydrate($arrProject); // BDD $objProject->hydrate($arrProject); // BDD
$this->_arrData['arrImages'] = $objProjectModel->getImagesByProjectId($objProject->getId()); $this->_arrData['arrImages'] = $objProjectModel->getImagesByProjectId($objProject->getId());
} }