mirror of
https://github.com/itflow-org/itflow
synced 2026-03-09 15:24:51 +00:00
Fix In Comntat Details Contact must belong to the client
This commit is contained in:
@@ -31,6 +31,12 @@ if (isset($_GET['contact_id'])) {
|
|||||||
$contact_location_id = intval($row['contact_location_id']);
|
$contact_location_id = intval($row['contact_location_id']);
|
||||||
$location_name = nullable_htmlentities($row['location_name']);
|
$location_name = nullable_htmlentities($row['location_name']);
|
||||||
$auth_method = nullable_htmlentities($row['contact_auth_method']);
|
$auth_method = nullable_htmlentities($row['contact_auth_method']);
|
||||||
|
$contact_client_id = intval($row['contact_client_id']);
|
||||||
|
|
||||||
|
// Check to see if Contact belongs to client
|
||||||
|
if($contact_client_id !== $client_id) {
|
||||||
|
exit();
|
||||||
|
}
|
||||||
|
|
||||||
// Related Assets Query
|
// Related Assets Query
|
||||||
$sql_related_assets = mysqli_query($mysqli, "SELECT * FROM assets WHERE asset_contact_id = $contact_id ORDER BY asset_name DESC");
|
$sql_related_assets = mysqli_query($mysqli, "SELECT * FROM assets WHERE asset_contact_id = $contact_id ORDER BY asset_name DESC");
|
||||||
|
|||||||
Reference in New Issue
Block a user