# # # patch "www/proj-ctrl.php" # from [1fe163e21ccc272810fe87e274e4d807c6771639] # to [e0275c0d892427b2e0cb5ab6cc42b179e751559b] # ============================================================ --- www/proj-ctrl.php 1fe163e21ccc272810fe87e274e4d807c6771639 +++ www/proj-ctrl.php e0275c0d892427b2e0cb5ab6cc42b179e751559b @@ -174,9 +174,13 @@ if ($action == "new_project") { } else print $json->encode(array("error" => "username or password incorrect.")); } else if ($action == "delete_project") { - if (!preg_match('/^[a-zA-Z0-9-]*$/D', $project)) { + $super_maintainer = $permissions['give'] && + $permissions['upload'] && $permissions['homepage'] && + $permissions['access'] && $permissions['server'] && + $permissions['description']; + if (!preg_match('/^[a-zA-Z0-9-]*$/D', $project) || $project == "") { print $json->encode(array("error" => "That is not a valid project name.")); - } else if (!$administrator) { + } else if (!$administrator && !$super_maintainer) { print $json->encode(array("error" => "You are not permitted to do that.")); } else { $db->Execute("DELETE FROM projects WHERE name=?", array($project));