From 36cce15c06a1982065eec0a5f33094071a89c0e6 Mon Sep 17 00:00:00 2001 From: Nikolai R Kristiansen Date: Wed, 17 Aug 2016 01:39:09 +0200 Subject: [PATCH] card.php: Allow repurchase of membership for same user --- api/card.php | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/api/card.php b/api/card.php index 3e90ca8..0fea804 100644 --- a/api/card.php +++ b/api/card.php @@ -50,8 +50,8 @@ if($_SERVER['REQUEST_METHOD'] === 'POST') { return_json_response(array('error' => "Invalid phone number: '".$phone_number."'"), 400); } $card = get_card($card_number); - if($card['registered'] !== '') { - return_json_response(array('error' => 'Card number is in use and belongs to phone number: '.$card['owner_phone_number'].'.'), 400); + if($card['registered'] !== '' && $card['owner_phone_number'] !== $phone_number) { + return_json_response(array('error' => 'Card number is in use and belongs to another phone number: '.$card['owner_phone_number'].' (not '.$phone_number.').'), 400); } /* If user with phone number exists, then bail */ $user_id = getUseridFromPhone($phone_number);