diff --git a/app/bridges/bridge_delete.php b/app/bridges/bridge_delete.php index 153d1e4700..be775e77df 100644 --- a/app/bridges/bridge_delete.php +++ b/app/bridges/bridge_delete.php @@ -27,13 +27,23 @@ //includes require_once "root.php"; require_once "resources/require.php"; + require_once "resources/check_auth.php"; + +//check permissions + if (permission_exists('bridge_delete')) { + //access granted + } + else { + echo "access denied"; + exit; + } //add multi-lingual support $language = new text; $text = $language->get(); //delete the data - if (is_uuid($_GET["id"]) && permission_exists('bridge_delete')) { + if (is_uuid($_GET["id"])) { //get the id $bridge_uuid = $_GET["id"];