diff --git a/Yavsc/Controllers/DoController.cs b/Yavsc/Controllers/DoController.cs index 4a81f722..10bb188d 100644 --- a/Yavsc/Controllers/DoController.cs +++ b/Yavsc/Controllers/DoController.cs @@ -152,9 +152,10 @@ namespace Yavsc.Controllers // POST: Do/Delete/5 [HttpPost, ActionName("Delete"),Authorize] [ValidateAntiForgeryToken] - public IActionResult DeleteConfirmed(string id, string activityCode) + public IActionResult DeleteConfirmed(UserActivity userActivity) { - UserActivity userActivity = _context.UserActivities.Single(m => m.UserId == id && m.DoesCode == activityCode); + if (!ModelState.IsValid) + return new BadRequestObjectResult(ModelState); if (!User.IsInRole("Administrator")) if (User.GetUserId() != userActivity.UserId) { ModelState.AddModelError("User","You're not admin.");