Fix public access to private book view

2025-11-27 09:27:40 +08:00
parent d850f54666
commit e51768622f
4 changed files with 19 additions and 9 deletions
@@ -12,6 +12,11 @@ class Book {
        $stmt->execute([$id]);
        return $stmt->fetch(PDO::FETCH_ASSOC);
    }
+    public function findByUserBook($id, $user_id) {
+        $stmt = $this->pdo->prepare("SELECT * FROM books WHERE id = ? AND user_id=?");
+        $stmt->execute([$id, $user_id]);
+        return $stmt->fetch(PDO::FETCH_ASSOC);
+    }
    
    public function findByShareToken($share_token) {
        $stmt = $this->pdo->prepare("SELECT * FROM books WHERE share_token = ?");