mirror of
https://github.com/itflow-org/itflow
synced 2026-03-24 06:25:40 +00:00
Client POST: Added comment regarding MySQLi Prepared statement usage within Client add/edit POST
This commit is contained in:
@@ -8,6 +8,8 @@ defined('FROM_POST_HANDLER') || die("Direct file access is not allowed");
|
|||||||
|
|
||||||
if (isset($_POST['add_client'])) {
|
if (isset($_POST['add_client'])) {
|
||||||
|
|
||||||
|
// JQ - Using Prepared MySQLi Statements here for show this is not our standard and is only used in the client add/edit POST.
|
||||||
|
|
||||||
validateCSRFToken($_POST['csrf_token']);
|
validateCSRFToken($_POST['csrf_token']);
|
||||||
|
|
||||||
enforceUserPermission('module_client', 2);
|
enforceUserPermission('module_client', 2);
|
||||||
|
|||||||
Reference in New Issue
Block a user