Revize ad5ad0be

Enhancement #8757 Refactoring, server-side

application/controller/DeleteUserController.php

@@ -5 +5 @@
 
 if (array_key_exists("loggedIn", $_SESSION) && $_SESSION['loggedIn'] == "true" && array_key_exists("role", $_SESSION) && $_SESSION['role'] == "admin") {
     $DB = new DB();
-    $result = $DB->deleteUser($_POST['userId']);
+    $results = $DB->select("SELECT id, username, role from USERS WHERE role = 'admin'", array());
+    if (sizeof($results) == 1) { //at least one admin must still exist
+        if ($results[0]["id"] != $_POST['userId']) {
+            $result = $DB->deleteUser($_POST['userId']);
+        }
+    } else if (sizeof($results) > 1) {
+        $result = $DB->deleteUser($_POST['userId']);
+    }
 }