Gazelle/sections/staffpm/ajax_delete_response.php

<?
enforce_login();

// Get user level
$DB->query("
	SELECT
		i.SupportFor,
		p.DisplayStaff
	FROM users_info as i
	JOIN users_main as m ON m.ID = i.UserID
	JOIN permissions as p ON p.ID = m.PermissionID
	WHERE i.UserID = ".$LoggedUser['ID']
);
list($SupportFor, $DisplayStaff) = $DB->next_record();

if (!($SupportFor != '' || $DisplayStaff == '1')) {
	// Logged in user is not FLS or Staff
	error(403);
}

if ($ID = (int)$_POST['id']) {
	$DB->query("DELETE FROM staff_pm_responses WHERE ID=$ID");
	echo '1';

} else {
	// No id
	echo '-1';
}
?>