diff --git a/app/extensions/extension_edit.php b/app/extensions/extension_edit.php index ea3b87bd9b..d668a75fd6 100644 --- a/app/extensions/extension_edit.php +++ b/app/extensions/extension_edit.php @@ -181,16 +181,20 @@ $array['extension_users'][0]['extension_uuid'] = $extension_uuid; $array['extension_users'][0]['user_uuid'] = $user_uuid; + //add temporary permission $p = new permissions; $p->add('extension_user_delete', 'temp'); + //save the array $database = new database; $database->app_name = 'extensions'; $database->app_uuid = 'e68d9689-2769-e013-28fa-6214bf47fca3'; $database->delete($array); unset($array); + //remove temporary permission $p->delete('extension_user_delete', 'temp'); + //redirect header("Location: extension_edit.php?id=".$extension_uuid); exit; @@ -201,19 +205,24 @@ if ($_REQUEST["delete_type"] == "device_line" && is_uuid($_REQUEST["delete_uuid"]) && permission_exists("extension_delete")) { //set the variables $device_line_uuid = $_REQUEST["delete_uuid"]; + //delete device_line $array['device_lines'][0]['device_line_uuid'] = $device_line_uuid; + //add temporary permission $p = new permissions; $p->add('device_line_delete', 'temp'); + //save the array $database = new database; $database->app_name = 'extensions'; $database->app_uuid = 'e68d9689-2769-e013-28fa-6214bf47fca3'; $database->delete($array); unset($array); + //remove temporary permission $p->delete('device_line_delete', 'temp'); + //redirect header("Location: extension_edit.php?id=".$extension_uuid); exit; @@ -224,7 +233,12 @@ if (count($_POST) > 0 && strlen($_POST["persistformvar"]) == 0) { //set the domain_uuid - $domain_uuid = permission_exists('extension_domain') ? $_POST["domain_uuid"] : $_SESSION['domain_uuid']; + if (permission_exists('extension_domain') && is_uuid($_POST["domain_uuid"])) { + $domain_uuid = $_POST["domain_uuid"]; + } + else { + $domain_uuid = $_SESSION['domain_uuid']; + } //validate the token $token = new token; @@ -1682,6 +1696,28 @@ echo "\n"; } + if (permission_exists('extension_domain')) { + echo "