mirror of
https://github.com/itflow-org/itflow
synced 2026-03-24 14:35:38 +00:00
Client POST: Added comment regarding MySQLi Prepared statement usage within Client add/edit POST
This commit is contained in:
@@ -8,6 +8,8 @@ defined('FROM_POST_HANDLER') || die("Direct file access is not allowed");
|
||||
|
||||
if (isset($_POST['add_client'])) {
|
||||
|
||||
// JQ - Using Prepared MySQLi Statements here for show this is not our standard and is only used in the client add/edit POST.
|
||||
|
||||
validateCSRFToken($_POST['csrf_token']);
|
||||
|
||||
enforceUserPermission('module_client', 2);
|
||||
|
||||
Reference in New Issue
Block a user