From 307eba42188bb1cae5d4c41c649e4f3ecb28e1bf Mon Sep 17 00:00:00 2001 From: Peder Bergebakken Sundt Date: Sun, 12 Aug 2018 03:43:50 +0200 Subject: [PATCH] Disallow visiting unexisting project pages --- src/pvv/side/projectmanager.php | 3 +++ www/prosjekt/info.php | 4 ++++ 2 files changed, 7 insertions(+) diff --git a/src/pvv/side/projectmanager.php b/src/pvv/side/projectmanager.php index deff2ce..87a75a6 100644 --- a/src/pvv/side/projectmanager.php +++ b/src/pvv/side/projectmanager.php @@ -36,6 +36,9 @@ class ProjectManager{ $statement->execute(); $dbProj = $statement->fetch(); + if (!$dbProj) { + return false; + } $project = new Project( $dbProj['id'], $dbProj['name'], diff --git a/www/prosjekt/info.php b/www/prosjekt/info.php index ae5f37a..2746c21 100644 --- a/www/prosjekt/info.php +++ b/www/prosjekt/info.php @@ -15,6 +15,10 @@ $attrs = $as->getAttributes(); $projectManager = new \pvv\side\ProjectManager($pdo); $project = $projectManager->getByID($projectID); +if (!$project) { + echo ":^)"; + exit(); +} $members = $projectManager->getProjectMembers($projectID); $is_owner = False;