2026-07-17 17:36:05 +02:00
1 changed files with 8 additions and 0 deletions
@@ -25,6 +25,14 @@ if (isset($_GET["id"]) && !empty($_GET["id"])){
            exit();
        }

+        if($_GET["pfad"] == "updateArticle"){
+            if($article->getAuthor() != $_SESSION["user"]){
+                $_SESSION["message"] = "unauthorized_access";
+                header("location: ../../index.php");
+                exit();
+            }
+        }
+
        $commentManager = CommentManager::getInstance();
        $comments = $commentManager->getCommentsByArticle($_GET["id"]);