#I8XDG7 修复不能越权删除他人的文章
This commit is contained in:
parent
ac8149cfa2
commit
54cd728b68
@ -238,7 +238,7 @@ class Index extends BaseController
|
|||||||
public function delete()
|
public function delete()
|
||||||
{
|
{
|
||||||
$id = get_params("id");
|
$id = get_params("id");
|
||||||
$admin_id = Db::name('Article')->where('id',$id).value('uid');
|
$admin_id = Db::name('Article')->where('id',$id)->value('uid');
|
||||||
if($admin_id!=$this->uid){
|
if($admin_id!=$this->uid){
|
||||||
return to_assign(1, "你不是该知识的创建人,没权限删除");
|
return to_assign(1, "你不是该知识的创建人,没权限删除");
|
||||||
}
|
}
|
||||||
|
Loading…
x
Reference in New Issue
Block a user