diff --git a/modules/member/member.controller.php b/modules/member/member.controller.php index e54f8d529..70e5dbab9 100644 --- a/modules/member/member.controller.php +++ b/modules/member/member.controller.php @@ -199,9 +199,22 @@ class memberController extends member $document_srl = (int)Context::get('document_srl'); if(!$document_srl) return new Object(-1,'msg_invalid_request'); + + $oDocumentModel = getModel('document'); + $oDocument = $oDocumentModel->getDocument($document_srl); + if ($oDocument->get('member_srl') != $logged_info->member_srl) + { + return new Object(-1,'msg_invalid_request'); + } + $configStatusList = $oDocumentModel->getStatusList(); + if ($oDocument->get('status') != $configStatusList['temp']) + { + return new Object(-1,'msg_invalid_request'); + } + // Variables $oDocumentController = getController('document'); - $oDocumentController->deleteDocument($document_srl, true); + $oDocumentController->deleteDocument($document_srl); } /**