prepare('SELECT * FROM sessions WHERE id = ?'); $stmt->execute([(int)$_GET['id']]); $session = $stmt->fetch(); if (!$session) { header('Location: ' . BASE_URL . '/admin/'); exit; } // Ownership check: must own or be admin if (!has_role('admin') && (int)$session['user_id'] !== $uid) { header('Location: ' . BASE_URL . '/admin/'); exit; } } // Creating new session? Check rosary limit $limit_error = ''; if (!$session && !can_create_rosary($uid, $user['rosary_limit'])) { $limit = $user['rosary_limit']; $limit_error = "You have reached your rosary limit ({$limit}). Please contact an administrator to increase your limit."; } $page_title = $session ? 'Edit Session' : 'New Session'; ?>