CVS Update: gleipnir

[Dan Brosemer <odin@cleannorth.org>]

Log Message:
-----------
Add group check on delete

Modified Files:
--------------
    gleipnir/public_html/gallery:
        picture.pl

Revision Data
-------------
Index: picture.pl
===================================================================
RCS file: /cvs/gleipnir/public_html/gallery/picture.pl,v
retrieving revision 1.6
retrieving revision 1.7
diff -Lpublic_html/gallery/picture.pl -Lpublic_html/gallery/picture.pl -u -r1.6 -r1.7
--- public_html/gallery/picture.pl
+++ public_html/gallery/picture.pl
@@ -113,13 +113,15 @@
 		my $pictureid = $cgi->param('id')||($ENV{PATH_INFO} =~ m%/(\d+)\.(jpg|png|jpeg)$%i)[0];
 
 		my $SQL = <<EOT;
-select gallery from gallery_picture
+select gp.gallery, g.gid from gallery_picture gp left join gallery g
+on gp.gallery = g.galleryid
 where pictureid = ?
 EOT
 
 		my $cursor = $dbh->prepare($SQL);
 		$cursor->execute($pictureid);
-		my $gallery = $cursor->fetchrow;
+		my ($gallery, $gid) = $cursor->fetchrow;
+		return $gleipnir->error('403') if defined($gid) and !$gleipnir->ingroup($gid);
 
 		$SQL = <<EOT;
 delete from gallery_picture