More Client Enforcement in modals across the app

This commit is contained in:
johnnyq
2026-07-16 13:10:02 -04:00
parent 9e84ce4c07
commit 2c09ce097c
34 changed files with 172 additions and 36 deletions

View File

@@ -2,6 +2,8 @@
require_once '../../../includes/modal_header.php';
enforceUserPermission('module_credential', 2);
$asset_id = intval($_GET['id']);
$sql = mysqli_query($mysqli, "SELECT * FROM assets
@@ -13,7 +15,8 @@ $row = mysqli_fetch_assoc($sql);
$asset_name = escapeHtml($row['asset_name']);
$client_id = intval($row['asset_client_id']);
// Generate the HTML form content using output buffering.
enforceClientAccess();
ob_start();
?>
@@ -66,5 +69,5 @@ ob_start();
</form>
<?php
require_once '../../../includes/modal_footer.php';
?>

View File

@@ -13,7 +13,8 @@ $row = mysqli_fetch_assoc($sql);
$asset_name = escapeHtml($row['asset_name']);
$client_id = intval($row['asset_client_id']);
// Generate the HTML form content using output buffering.
enforceClientAccess();
ob_start();
?>
@@ -67,4 +68,5 @@ ob_start();
</form>
<?php
require_once '../../../includes/modal_footer.php';

View File

@@ -2,6 +2,8 @@
require_once '../../../includes/modal_header.php';
enforceUserPermission('module_credential', 2);
$asset_id = intval($_GET['id']);
$sql = mysqli_query($mysqli, "SELECT * FROM assets
@@ -13,7 +15,8 @@ $row = mysqli_fetch_assoc($sql);
$asset_name = escapeHtml($row['asset_name']);
$client_id = intval($row['asset_client_id']);
// Generate the HTML form content using output buffering.
enforceClientAccess();
ob_start();
?>
@@ -70,4 +73,5 @@ ob_start();
</form>
<?php
require_once '../../../includes/modal_footer.php';

View File

@@ -13,7 +13,8 @@ $row = mysqli_fetch_assoc($sql);
$asset_name = escapeHtml($row['asset_name']);
$client_id = intval($row['asset_client_id']);
// Generate the HTML form content using output buffering.
enforceClientAccess();
ob_start();
?>
@@ -66,4 +67,5 @@ ob_start();
</form>
<?php
require_once '../../../includes/modal_footer.php';

View File

@@ -13,7 +13,8 @@ $row = mysqli_fetch_assoc($sql);
$asset_name = escapeHtml($row['asset_name']);
$client_id = intval($row['asset_client_id']);
// Generate the HTML form content using output buffering.
enforceClientAccess();
ob_start();
?>
@@ -71,4 +72,5 @@ ob_start();
</form>
<?php
require_once '../../../includes/modal_footer.php';