Merge branch 'release/1.8.31'

Author: bnu

config/config.inc.php

@@ -29,7 +29,7 @@
 /**
  * Display XE's full version.
  */
-define('__XE_VERSION__', '1.8.30');
+define('__XE_VERSION__', '1.8.31');
 define('__XE_VERSION_ALPHA__', (stripos(__XE_VERSION__, 'alpha') !== false));
 define('__XE_VERSION_BETA__', (stripos(__XE_VERSION__, 'beta') !== false));
 define('__XE_VERSION_RC__', (stripos(__XE_VERSION__, 'rc') !== false));

modules/member/member.controller.php

@@ -197,9 +197,22 @@ function procMemberDeleteSavedDocument()
 
 		$document_srl = (int)Context::get('document_srl');
 		if(!$document_srl) return new Object(-1,'msg_invalid_request');
-		// Variables
+
+		$oDocumentModel = getModel('document');
+		$oDocument = $oDocumentModel->getDocument($document_srl);
+		if ($oDocument->get('member_srl') != $logged_info->member_srl)
+		{
+			return new Object(-1,'msg_invalid_request');
+		}
+
+		$configStatusList = $oDocumentModel->getStatusList();
+		if ($oDocument->get('status') != $configStatusList['temp'])
+		{
+			return new Object(-1,'msg_invalid_request');
+		}
+
 		$oDocumentController = getController('document');
-		$oDocumentController->deleteDocument($document_srl, true);
+		$oDocumentController->deleteDocument($document_srl);
 	}
 
 	/**