diff --git a/admin_helpdesk.php b/admin_helpdesk.php index fc41a43..5f49cdb 100644 --- a/admin_helpdesk.php +++ b/admin_helpdesk.php @@ -36,6 +36,11 @@ if ($view !== false){ } $ticketData = mysql_select_single("SELECT * FROM znote_tickets WHERE id='$view' LIMIT 1;"); + if(!$ticketData) { + echo 'You can not view this ticket!'; + include 'layout/overall/footer.php'; + die; + } ?>

View Ticket #

@@ -144,4 +149,4 @@ if ($view !== false){ } else echo 'No helpdesk tickets has been submitted.'; } include 'layout/overall/footer.php'; -?> \ No newline at end of file +?> diff --git a/helpdesk.php b/helpdesk.php index 51c7134..ab09cf9 100644 --- a/helpdesk.php +++ b/helpdesk.php @@ -21,7 +21,7 @@ if ($view !== false) { } $ticketData = mysql_select_single("SELECT * FROM znote_tickets WHERE id='$view' LIMIT 1;"); - if($ticketData['owner'] != $session_user_id) { + if(!$ticketData || $ticketData['owner'] != $session_user_id) { echo 'You can not view this ticket!'; include 'layout/overall/footer.php'; die;