[Mapbender-commits] r4941 - trunk/mapbender/http/classes

[svn_mapbender at osgeo.org]

Author: christoph
Date: 2009-11-05 08:19:08 -0500 (Thu, 05 Nov 2009)
New Revision: 4941

Modified:
   trunk/mapbender/http/classes/class_wmc.php
Log:


Modified: trunk/mapbender/http/classes/class_wmc.php
===================================================================
--- trunk/mapbender/http/classes/class_wmc.php	2009-11-05 13:09:40 UTC (rev 4940)
+++ trunk/mapbender/http/classes/class_wmc.php	2009-11-05 13:19:08 UTC (rev 4941)
@@ -155,9 +155,10 @@
 		}
 		$this->createObjFromWMC_xml($doc);
         // FIXME:too hackisch to be proper
-        $sql = "SELECT wmc_timestamp,wmc_title,wmc_public FROM mb_user_wmc WHERE wmc_id = $1";
-        $v = array($wmcId);
-        $t = array("i");
+        $sql = "SELECT wmc_timestamp, wmc_title, wmc_public " . 
+			"FROM mb_user_wmc WHERE wmc_id = $1 AND fkey_user_id = $2";
+        $v = array($wmcId, Mapbender::session()->get("mb_user_id"));
+        $t = array("i", "i");
         
         // FIXME: might as well fetch title too, as long as we ŕe here  
         $res = db_prep_query($sql,$v,$t);
@@ -481,9 +482,9 @@
     {
       $wmcId = $this->wmc_Id;
       $public = $public ? 1 :0;
-      $sql = "UPDATE mb_user_wmc SET wmc_public = $1 WHERE wmc_id = $2;";
-      $v = array($public,$wmcId);
-      $t = array("i","s");
+      $sql = "UPDATE mb_user_wmc SET wmc_public = $1 WHERE wmc_id = $2 AND fkey_user_id = $2;";
+      $v = array($public,$wmcId, Mapbender::session()->get("mb_user_id"));
+      $t = array("i","s","i");
       $res = db_prep_query($sql,$v,$t);
       if(db_error()){
         return false;