API filter per user level

2017-02-01 11:38:43 +01:00
parent 028c2373c1
commit e414a1633e
18 changed files with 309 additions and 268 deletions
--- a/website/public/API/loadChatNotifications.php
+++ b/website/public/API/loadChatNotifications.php
@@ -4,5 +4,11 @@ session_start();

 require_once ("../../queries/connect.php");
 require_once ("../../queries/private_message.php");
+require_once("../../queries/user.php");

-echo selectAllUnreadChat();
+if (isset($_SESSION["userID"]) &&
+    getRoleByID($_SESSION["userID"]) != 'banned') {
+    echo selectAllUnreadChat();
+} else {
+    header('HTTP/1.0 403 Forbidden');
+}