diff options
Diffstat (limited to 'app')
| -rw-r--r-- | app/Controller/Task.php | 8 |
1 files changed, 6 insertions, 2 deletions
diff --git a/app/Controller/Task.php b/app/Controller/Task.php index 5f35be55..56d222d0 100644 --- a/app/Controller/Task.php +++ b/app/Controller/Task.php @@ -23,13 +23,17 @@ class Task extends Base // Token verification if (empty($project)) { - $this->forbidden(true); + return $this->forbidden(true); } $task = $this->taskFinder->getDetails($this->request->getIntegerParam('task_id')); if (empty($task)) { - $this->notfound(true); + return $this->notfound(true); + } + + if ($task['project_id'] != $project['id']) { + return $this->forbidden(true); } $this->response->html($this->helper->layout->app('task/public', array( |