Bugfixes.

[z.facultad/75.43/tp1.git] / src / admin.creditos.php

diff --git a/src/admin.creditos.php b/src/admin.creditos.php
index 6b7fb75f0c5e9d1a980a89db6c17a1d80b6a3134..c04af012a626c57ca912a316c7d1b8592e021f62 100644 (file)
--- a/src/admin.creditos.php
+++ b/src/admin.creditos.php
@@ -12,26 +12,19 @@ require_once 'lib/pagina.php';
 require_once 'lib/validacion.php';
 require_once 'lib/Usuario.php';
 require_once 'lib/admin.forms.php';
+require_once 'lib/admin.util.php';
 
 marco_cabecera('Asignación de créditos');
 
-// Solo para admins
-if (!$_SESSION['user']->esAdmin()) {
-    error('Acceso denegado!');
-    marco_pie('Leandro Lucarella', 'llucare@fi.uba.ar');
-    exit;
-}
-
 // Si llenó el formulario
 if (isset($_POST['admin_cred']) and isset($_POST['admin_cred_user'])
         and isset($_POST['admin_cred_pass']))
 {
     if (check_numero($_POST['admin_cred'])
             and check_asociado($_POST['admin_cred_user'])
-            and check_password($_SESSION['user']->getId(),
+            and check_password($u = new Usuario($_POST['admin_cred_user']),
                 $_POST['admin_cred_pass']))
     {
-        $u = new Usuario($_POST['admin_cred_user']);
         $u->addCreditos($_POST['admin_cred']);
         ok('Se agregaron '.$_POST['admin_cred'].' créditos al usuario '
             .$u->getNombre().' '.$u->getApellido());