From 7baf85536fd54e92a3feae35ef71d1e6fdbaedfa Mon Sep 17 00:00:00 2001
From: Casey Peel <cpeel@users.noreply.github.com>
Date: Wed, 30 Sep 2026 11:22:29 -0700
Subject: [PATCH] Validate the requested image exists within the project

---
 tools/project_manager/diff.php | 12 ++----------
 1 file changed, 2 insertions(+), 10 deletions(-)

diff --git a/tools/project_manager/diff.php b/tools/project_manager/diff.php
index f7a27a685..db2c60216 100644
--- a/tools/project_manager/diff.php
+++ b/tools/project_manager/diff.php
@@ -32,19 +32,11 @@
 }
 
 $project = new Project($projectid);
+// validate that the page exists within the project
+$project->get_project_page($image);
 $state = $project->state;
 $project_title = $project->nameofwork;
 
-if (!$project->pages_table_exists) {
-    // This shouldn't normally happen --
-    // if the page table doesn't exist, a "diff" link shouldn't be shown.
-    // But a user might have a bookmarked or otherwise saved a 'diff' URL.
-    echo "<p>", _("Page details are not available for this project."), "</p>\n";
-    echo "<p>", _("Project ID"), ": $projectid</p>\n";
-    echo "<p>", _("Title"), ": " . html_safe($project_title) . "</p>\n";
-    exit;
-}
-
 // --------------------------------------------------------------
 // get information about this diff
 $L_format = $L_round->id == "OCR" ? false : is_formatting_round($L_round);