AS1024/itflow
1
0
Fork 0
mirror of https://github.com/itflow-org/itflow synced 2026-07-24 09:20:40 +00:00
Code Issues Packages Projects Releases Wiki Activity

Add Missing clientEnforcement in various modals, already handled on POST also add client selection in edit trip and enforce client permissions on trips

Browse Source
This commit is contained in:
johnnyq
2026-07-09 16:07:54 -04:00
parent 68f705b135
commit 317fe91359
50 changed files with 188 additions and 37 deletions
Download Patch File Download Diff File Expand all files Collapse all files

5
agent/modals/invoice/invoice_copy.php
View File

@@ -10,9 +10,12 @@ $row = mysqli_fetch_assoc($sql);
$invoice_prefix = nullable_htmlentities($row['invoice_prefix']);
$invoice_number = intval($row['invoice_number']);
$client_name = nullable_htmlentities($row['client_name']);
$client_id = intval($row['invoice_client_id']);
enforceClientAccess();
// Generate the HTML form content using output buffering.
ob_start();
?>
<div class="modal-header bg-dark">

4
agent/modals/invoice/invoice_edit.php
View File

@@ -18,8 +18,10 @@ $category_id = intval($row['invoice_category_id']);
$client_id = intval($row['client_id']);
$client_name = nullable_htmlentities($row['client_name']);
// Generate the HTML form content using output buffering.
enforceClientAccess();
ob_start();
?>
<div class="modal-header bg-dark">

7
agent/modals/invoice/invoice_item_edit.php
View File

@@ -4,7 +4,7 @@ require_once '../../../includes/modal_header.php';
$item_id = intval($_GET['id']);
$sql = mysqli_query($mysqli, "SELECT * FROM invoice_items WHERE item_id = $item_id LIMIT 1");
$sql = mysqli_query($mysqli, "SELECT * FROM invoice_items LEFT JOIN invoices ON invoice_id = item_invoice_id WHERE item_id = $item_id LIMIT 1");
$row = mysqli_fetch_assoc($sql);
$item_name = nullable_htmlentities($row['item_name']);
$item_description = nullable_htmlentities($row['item_description']);
@@ -13,9 +13,12 @@ $item_price = floatval($row['item_price']);
$item_created_at = nullable_htmlentities($row['item_created_at']);
$tax_id = intval($row['item_tax_id']);
$product_id = intval($row['item_product_id']);
$client_id = intval($row['invoice_client_id']);
enforceClientAccess();
// Generate the HTML form content using output buffering.
ob_start();
?>
<div class="modal-header bg-dark">

4
agent/modals/invoice/invoice_recurring_add.php
View File

@@ -9,8 +9,12 @@ $sql = mysqli_query($mysqli, "SELECT * FROM invoices WHERE invoice_id = $invoice
$row = mysqli_fetch_assoc($sql);
$invoice_prefix = nullable_htmlentities($row['invoice_prefix']);
$invoice_number = intval($row['invoice_number']);
$client_id = intval($row['invoice_client_id']);
enforceClientAccess();
ob_start();
?>
<div class="modal-header bg-dark">