This fixes issue 29 from https://github.com/patricklam/JudoDB:

This php only currently checks that the user is logged in;
it needs to check that the logged-in user has access to the
client being requested (must have a services entry with a
club_id that intersects the logged in user and the user_club table).
	modified:   pull_one_client.php