Example #1
0
 static function has_permission($folderID, $userObj, $db)
 {
     $permission = false;
     $folder_owner = folder_utils::get_ownerID($folderID, $db);
     if ($folder_owner == $userObj->get_user_ID()) {
         return true;
     }
     $result = $db->prepare("SELECT idMod FROM folders_modules_staff WHERE folders_id = ?");
     $result->bind_param('i', $folderID);
     $result->execute();
     $result->bind_result($idMod);
     while ($result->fetch()) {
         if ($userObj->is_staff_user_on_module($idMod)) {
             $permission = true;
             break;
         }
     }
     $result->close();
     return $permission;
 }
Example #2
0
// You should have received a copy of the GNU General Public License
// along with Rogō.  If not, see <http://www.gnu.org/licenses/>.
/**
*
* Delete a personal folder.
*
* @author Simon Wilkinson
* @version 1.0
* @copyright Copyright (c) 2014 The University of Nottingham
* @package
*/
require '../include/staff_auth.inc';
require '../include/errors.inc';
require '../classes/folderutils.class.php';
$folderID = check_var('folderID', 'POST', true, false, true);
if ($userObject->get_user_ID() != folder_utils::get_ownerID($folderID, $mysqli)) {
    $msg = sprintf($string['furtherassistance'], $configObject->get('support_email'), $configObject->get('support_email'));
    $notice->display_notice_and_exit($mysqli, $string['pagenotfound'], $msg, $string['pagenotfound'], '../artwork/page_not_found.png', '#C00000', true, true);
}
$result = $mysqli->prepare("SELECT name FROM folders WHERE id = ?");
$result->bind_param('i', $folderID);
$result->execute();
$result->bind_result($name);
$result->fetch();
$result->close();
$directories = explode(';', $name);
$parent = '';
if (count($directories) > 1) {
    for ($i = 1; $i < count($directories); $i++) {
        if ($parent == '') {
            $parent = $directories[$i - 1];