Commit 5163445967b250a0a2beea376a1bc1f9c7649069
1 parent
e8b0e34e
+ дополнительная проверка на удаление
Showing
1 changed file
with
12 additions
and
5 deletions
Show diff stats
account/admin/orders.php
| ... | ... | @@ -419,11 +419,18 @@ include_once ($_SERVER['DOCUMENT_ROOT'] . "/account/func/func.php"); |
| 419 | 419 | } |
| 420 | 420 | } |
| 421 | 421 | |
| 422 | - delOrder (array ( | |
| 423 | - 'order_id' => $_GET['order_id']) | |
| 424 | - ); | |
| 425 | - | |
| 426 | - echo "<script language=\"JavaScript\">alert('Çàêàç óñïåøíî óäàëåí')</script>"; | |
| 422 | + if ($_SESSION['admin']['group'] == 1) // òîëüêî àäìèí | |
| 423 | + { | |
| 424 | + delOrder (array ( | |
| 425 | + 'order_id' => $_GET['order_id']) | |
| 426 | + ); | |
| 427 | + | |
| 428 | + echo "<script language=\"JavaScript\">alert('Çàêàç óñïåøíî óäàëåí')</script>"; | |
| 429 | + } | |
| 430 | + else | |
| 431 | + { | |
| 432 | + echo "<script language=\"JavaScript\">alert('Óäàëÿòü ìîæåò òîëüêî àäìèí!')</script>"; | |
| 433 | + } | |
| 427 | 434 | } |
| 428 | 435 | |
| 429 | 436 | // ================= | ... | ... |