From 1d541e285c2918c9bbd6b1442ba3a3af46740157 Mon Sep 17 00:00:00 2001 From: NOrtmann1 Date: Fri, 17 Jul 2026 15:54:47 +0200 Subject: [PATCH 1/5] Update showArticle-controller.php --- php/controller/showArticle-controller.php | 8 ++++++++ 1 file changed, 8 insertions(+) diff --git a/php/controller/showArticle-controller.php b/php/controller/showArticle-controller.php index 6e140f9..6c1e929 100644 --- a/php/controller/showArticle-controller.php +++ b/php/controller/showArticle-controller.php @@ -25,6 +25,14 @@ if (isset($_GET["id"]) && !empty($_GET["id"])){ exit(); } + if($_GET["pfad"] == "updateArticle"){ + if($article->getAuthor() != $_SESSION["user"]){ + $_SESSION["message"] = "unauthorized_access"; + header("location: ../../index.php"); + exit(); + } + } + $commentManager = CommentManager::getInstance(); $comments = $commentManager->getCommentsByArticle($_GET["id"]); From c00443b6fada897d65fcf6ad7b283e58b2f3d39c Mon Sep 17 00:00:00 2001 From: NOrtmann1 Date: Fri, 17 Jul 2026 15:56:34 +0200 Subject: [PATCH 2/5] Update showArticle-controller.php --- php/controller/showArticle-controller.php | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/php/controller/showArticle-controller.php b/php/controller/showArticle-controller.php index 6c1e929..27174dc 100644 --- a/php/controller/showArticle-controller.php +++ b/php/controller/showArticle-controller.php @@ -26,7 +26,7 @@ if (isset($_GET["id"]) && !empty($_GET["id"])){ } if($_GET["pfad"] == "updateArticle"){ - if($article->getAuthor() != $_SESSION["user"]){ + if($article->getAuthor() != $_SESSION["user_email"]){ $_SESSION["message"] = "unauthorized_access"; header("location: ../../index.php"); exit(); From 2d2bbeb39f383346632db9e24dbafe5768a6713e Mon Sep 17 00:00:00 2001 From: NOrtmann1 Date: Fri, 17 Jul 2026 15:57:15 +0200 Subject: [PATCH 3/5] Update showArticle-controller.php --- php/controller/showArticle-controller.php | 1 - 1 file changed, 1 deletion(-) diff --git a/php/controller/showArticle-controller.php b/php/controller/showArticle-controller.php index 27174dc..6475220 100644 --- a/php/controller/showArticle-controller.php +++ b/php/controller/showArticle-controller.php @@ -28,7 +28,6 @@ if (isset($_GET["id"]) && !empty($_GET["id"])){ if($_GET["pfad"] == "updateArticle"){ if($article->getAuthor() != $_SESSION["user_email"]){ $_SESSION["message"] = "unauthorized_access"; - header("location: ../../index.php"); exit(); } } From e07051b356446bff31ddbfed1ce261157691e4dd Mon Sep 17 00:00:00 2001 From: NOrtmann1 Date: Fri, 17 Jul 2026 15:58:10 +0200 Subject: [PATCH 4/5] Update showArticle-controller.php --- php/controller/showArticle-controller.php | 1 + 1 file changed, 1 insertion(+) diff --git a/php/controller/showArticle-controller.php b/php/controller/showArticle-controller.php index 6475220..901ac05 100644 --- a/php/controller/showArticle-controller.php +++ b/php/controller/showArticle-controller.php @@ -28,6 +28,7 @@ if (isset($_GET["id"]) && !empty($_GET["id"])){ if($_GET["pfad"] == "updateArticle"){ if($article->getAuthor() != $_SESSION["user_email"]){ $_SESSION["message"] = "unauthorized_access"; + header("location: ../index.php"); exit(); } } From cebbe8869acbc5a3dd496549d21ae26f7032ef17 Mon Sep 17 00:00:00 2001 From: NOrtmann1 Date: Fri, 17 Jul 2026 15:59:29 +0200 Subject: [PATCH 5/5] Update showArticle-controller.php --- php/controller/showArticle-controller.php | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/php/controller/showArticle-controller.php b/php/controller/showArticle-controller.php index 901ac05..61c6f99 100644 --- a/php/controller/showArticle-controller.php +++ b/php/controller/showArticle-controller.php @@ -28,7 +28,7 @@ if (isset($_GET["id"]) && !empty($_GET["id"])){ if($_GET["pfad"] == "updateArticle"){ if($article->getAuthor() != $_SESSION["user_email"]){ $_SESSION["message"] = "unauthorized_access"; - header("location: ../index.php"); + header("location: index.php"); exit(); } }