Delete a group need user password as confirmation.

This commit is contained in:
Pierre HUBERT 2018-08-31 10:27:06 +02:00
parent 827fec68c7
commit 4f5ab6e966

View File

@ -715,6 +715,10 @@ class GroupsController {
user_login_required(); user_login_required();
//Check user password
if(!check_post_password(userID, "password"))
Rest_fatal_error(401, "Password required!");
//Get the group //Get the group
$groupID = getPostGroupIdWithAccess("groupID", GroupInfo::ADMIN_ACCESS); $groupID = getPostGroupIdWithAccess("groupID", GroupInfo::ADMIN_ACCESS);