num_rows !== 1) {
echo "Requested experience does not exist.";
exit();
}
// IF EXPERIENCE DOESN'T BELONG TO USER (WHO IS NOT AN ADMIN), EXIT
if($_SESSION['dbUserData']['admin'] !== '1') {
$queryCheckUser = "SELECT id FROM experience WHERE id = '$experienceID' AND id IN (SELECT id_experience FROM researcher_experience WHERE id_researcher = '" . $_SESSION['dbUserData']['id_researcher'] . "');";
if(mysqli_query($connection, $queryCheckUser)->num_rows === 0) {
echo "You are not authorized to view this experience.";
exit();
}
}
include_once 'header.php';
?>
TANIA
