| @@ -19,8 +19,12 @@ | ||
| 19 | 19 | { |
| 20 | 20 | // Set the toolbar |
| 21 | 21 | $this->addToolBar(); |
| 22 | 22 | |
| 23 | + if (!JFactory::getUser()->authorise('core.vbo.availability', 'com_vikbooking') && !JFactory::getUser()->authorise('core.vbo.bookings', 'com_vikbooking')) { | |
| 24 | + VBOHttpDocument::getInstance()->close(403, JText::translate('JERROR_ALERTNOAUTHOR')); | |
| 25 | + } | |
| 26 | + | |
| 23 | 27 | $cid = VikRequest::getVar('cid', array(0)); |
| 24 | 28 | $aid = $cid[0]; |
| 25 | 29 | |
| 26 | 30 | $app = JFactory::getApplication(); |
| @@ -52,18 +56,19 @@ | ||
| 52 | 56 | |
| 53 | 57 | // new reservation ID default status |
| 54 | 58 | $new_res_id = 0; |
| 55 | 59 | |
| 56 | - $q = "SELECT `id`,`name`,`img`,`units` FROM `#__vikbooking_rooms` WHERE `id`=".$dbo->quote($aid); | |
| 60 | + $q = "SELECT * FROM `#__vikbooking_rooms` WHERE `id`=".$dbo->quote($aid); | |
| 57 | 61 | $dbo->setQuery($q, 0, 1); |
| 58 | 62 | $room = $dbo->loadAssoc(); |
| 59 | 63 | if (!$room) { |
| 64 | + $session->set('vbCalRid', ''); | |
| 60 | 65 | VikError::raiseWarning('', 'No Rooms.'); |
| 61 | 66 | $app->redirect("index.php?option=com_vikbooking&task=rooms"); |
| 62 | 67 | $app->close(); |
| 63 | 68 | } |
| 64 | 69 | |
| 65 | - $q = "SELECT `id`,`name`,`units` FROM `#__vikbooking_rooms` ORDER BY `#__vikbooking_rooms`.`name` ASC;"; | |
| 70 | + $q = "SELECT `id`,`name`,`img`,`units` FROM `#__vikbooking_rooms` ORDER BY `#__vikbooking_rooms`.`name` ASC;"; | |
| 66 | 71 | $dbo->setQuery($q); |
| 67 | 72 | $allc = $dbo->loadAssocList(); |
| 68 | 73 | |
| 69 | 74 | $q = "SELECT `id`,`name` FROM `#__vikbooking_gpayments` ORDER BY `#__vikbooking_gpayments`.`name` ASC;"; |
