diff --git a/webroot/panel/ajax/get_group_members.php b/webroot/panel/ajax/get_group_members.php index 7ade536f..222c2e25 100644 --- a/webroot/panel/ajax/get_group_members.php +++ b/webroot/panel/ajax/get_group_members.php @@ -10,21 +10,10 @@ } $group = new UnityGroup($_GET["pi_uid"], $LDAP, $SQL, $MAILER, $REDIS, $WEBHOOK); -$members = $group->getGroupMembers(); - -// verify that the user querying is actually in the group -$found = false; -foreach ($members as $member) { - if ($member->getUID() == $USER->getUID()) { - $found = true; - break; - } -} - -if ($found) { +if (!$group->userExists($USER)) { UnitySite::forbidden("not a group member"); } - +$members = $group->getGroupMembers(); $count = count($members); foreach ($members as $key => $member) { if ($member->getUID() == $group->getOwner()->getUID()) {