Revize ad5ad0be

Enhancement #8757 Refactoring, server-side

application/controller/UpdateUserRoleController.php

@@ -4 +4 @@
 
 if (array_key_exists("loggedIn", $_SESSION) && $_SESSION['loggedIn'] == "true" && array_key_exists("role", $_SESSION) && $_SESSION['role'] == "admin") {
     $DB = new DB();
-
-    $results = $DB->updateUserRole($_POST["userId"], $_POST["role"]);
+    $results = $DB->select("SELECT id, username, role from USERS WHERE role = 'admin'", array());
+    if (sizeof($results) == 1) { //at least one admin must still exist
+        if ($results[0]["id"] != $_POST['userId']) {
+            $results = $DB->updateUserRole($_POST["userId"], $_POST["role"]);
+        }
+    } else if (sizeof($results) > 1) {
+        $results = $DB->updateUserRole($_POST["userId"], $_POST["role"]);
+    }
 
     echo json_encode(count($results) == 0 ? null : $results);
 }