<?

	$configPath = substr(__DIR__,0,strpos(__DIR__,"/public_html"))."/config.php";
	include_once($configPath);

  	$error = true;
  
  	if (!empty($_SESSION["utente"]) && $_SESSION["utente"]->permission($radice, $_POST["codice"])) {
		$form = $pdo->go("SELECT * FROM b_guue WHERE codice = :codice", [":codice" => $_POST["codice"]])->fetch(PDO::FETCH_OBJ);
		if ($form->stato == "BOZZA") {
			$bind = array(":codice" => $_POST["codice"]);
			$sql = "UPDATE b_guue SET soft_delete = 'S' WHERE codice = :codice";
			$ris = $pdo->go($sql,$bind);
			if ($ris->rowCount() === 1) {
				$error = false;
				scriviLog("b_guue", "DELETE", $pdo->getSQL(), $_POST["codice"]);
			}
		}
  	}

	if (! $error) {

		?>window.location.reload();<?

	} else {

		header('HTTP/1.0 403 Forbidden');
		die();

	}
?>