validateaction on event delete

concretecms · Nov 10, 2023 · c770ca0 · c770ca0
1 parent 3c7b8e6
commit c770ca0
Showing 1 changed file with 38 additions and 33 deletions.
diff --git a/concrete/controllers/dialog/event/delete.php b/concrete/controllers/dialog/event/delete.php
@@ -38,42 +38,47 @@ public function __construct()
 
     public function submit()
     {
-        $event = $this->eventService->getByID($_REQUEST['eventID'], EventService::EVENT_VERSION_RECENT);
-        $e = \Core::make('error');
-        if (!$event) {
-            $e->add(t('Invalid event.'));
-        }
-        if (!$this->canAccess()) {
-            $e->add(t('Access Denied.'));
-        }
+        if ($this->validateAction()) {
+            $event = $this->eventService->getByID($_REQUEST['eventID'], EventService::EVENT_VERSION_RECENT);
+            $e = \Core::make('error');
+            if (!$event) {
+                $e->add(t('Invalid event.'));
+            }
+            if (!$this->canAccess()) {
+                $e->add(t('Access Denied.'));
+            }
 
-        $r = new EditResponse($e);
-        $year = date('Y');
-        $month = date('m');
-        $r->setRedirectURL(
-            \URL::to(
-                $this->preferences->getPreferredViewPath(),
-                'view',
-                $event->getCalendar()->getID(),
-                $year,
-                $month
-            )
-        );
-
-        if (!$e->has()) {
-            $u = $this->app->make(User::class);
-            $pkr = new DeleteCalendarEventRequest();
-            $pkr->setCalendarEventVersionID($event->getRecentVersion()->getID());
-            $pkr->setRequesterUserID($u->getUserID());
-            $response = $pkr->trigger();
-            if ($response instanceof Response) {
-                $this->flash('success', t('Event deleted successfully.'));
-            } else {
-                $this->flash('success', t('Event deletion pending. This request must be approved before the event is fully removed.'));
+            $r = new EditResponse($e);
+            $year = date('Y');
+            $month = date('m');
+            $r->setRedirectURL(
+                \URL::to(
+                    $this->preferences->getPreferredViewPath(),
+                    'view',
+                    $event->getCalendar()->getID(),
+                    $year,
+                    $month
+                )
+            );
+
+            if (!$e->has()) {
+                $u = $this->app->make(User::class);
+                $pkr = new DeleteCalendarEventRequest();
+                $pkr->setCalendarEventVersionID($event->getRecentVersion()->getID());
+                $pkr->setRequesterUserID($u->getUserID());
+                $response = $pkr->trigger();
+                if ($response instanceof Response) {
+                    $this->flash('success', t('Event deleted successfully.'));
+                } else {
+                    $this->flash(
+                        'success',
+                        t('Event deletion pending. This request must be approved before the event is fully removed.')
+                    );
+                }
             }
-        }
 
-        $r->outputJSON();
+            $r->outputJSON();
+        }
     }