Client POST: Added comment regarding MySQLi Prepared statement usage within Client add/edit POST

This commit is contained in:
johnnyq
2026-03-23 13:30:03 -04:00
parent 619dd0d472
commit 0e75106e1a

View File

@@ -8,6 +8,8 @@ defined('FROM_POST_HANDLER') || die("Direct file access is not allowed");
if (isset($_POST['add_client'])) {
// JQ - Using Prepared MySQLi Statements here for show this is not our standard and is only used in the client add/edit POST.
validateCSRFToken($_POST['csrf_token']);
enforceUserPermission('module_client', 2);