diff --git a/agent/post/document.php b/agent/post/document.php
index b23bd8cc..39ef579e 100644
--- a/agent/post/document.php
+++ b/agent/post/document.php
@@ -17,7 +17,7 @@ if (isset($_POST['add_document'])) {
// Document add query
mysqli_query($mysqli,"INSERT INTO documents SET document_name = '$name', document_description = '$description', document_content = '', document_content_raw = '$content_raw', document_folder_id = $folder, document_created_by = $session_user_id, document_client_id = $client_id");
-
+
$document_id = mysqli_insert_id($mysqli);
$processed_content = mysqli_escape_string(
@@ -62,7 +62,7 @@ if (isset($_POST['add_document_from_template'])) {
// Get template
$sql_document = mysqli_query(
$mysqli,
- "SELECT * FROM document_templates
+ "SELECT * FROM document_templates
WHERE document_template_id = $document_template_id"
);
@@ -246,7 +246,7 @@ if (isset($_POST['move_document'])) {
$sql_folder = mysqli_query($mysqli,"SELECT folder_name FROM folders WHERE folder_id = $folder_id");
$row = mysqli_fetch_array($sql_folder);
$folder_name = sanitizeInput($row['folder_name']);
-
+
// Document edit query
mysqli_query($mysqli,"UPDATE documents SET document_folder_id = $folder_id WHERE document_id = $document_id");
@@ -579,7 +579,7 @@ if (isset($_GET['unlink_software_from_document'])) {
mysqli_query($mysqli,"DELETE FROM software_documents WHERE software_id = $software_id AND document_id = $document_id");
logAction("Document", "Unlink", "$session_name unlinked software $software_name from document $document_name", $client_id, $document_id);
-
+
flash_alert("Software $software_name unlinked from Document $document_name", 'error');
redirect();
@@ -757,45 +757,3 @@ if (isset($_GET['delete_document'])) {
}
}
-
-if (isset($_POST['bulk_delete_documents'])) {
-
- validateCSRFToken($_POST['csrf_token']);
-
- enforceUserPermission('module_support', 3);
-
- if (isset($_POST['document_ids'])) {
-
- // Get selected document count
- $count = count($_POST['document_ids']);
-
- // Delete document loop
- foreach($_POST['document_ids'] as $document_id) {
- $document_id = intval($document_id);
- // Get document name for logging
- $sql = mysqli_query($mysqli,"SELECT document_name, document_client_id FROM documents WHERE document_id = $document_id");
- $row = mysqli_fetch_array($sql);
- $document_name = sanitizeInput($row['document_name']);
- $client_id = intval($row['document_client_id']);
-
- mysqli_query($mysqli,"DELETE FROM documents WHERE document_id = $document_id");
-
- // Delete all versions associated with the master document
- mysqli_query($mysqli,"DELETE FROM document_versions WHERE document_version_document_id = $document_id");
-
- // Delete uploads/document/$document_id if exists
- removeDirectory($_SERVER['DOCUMENT_ROOT'] . "/uploads/documents/" . $document_id);
-
- logAction("Document", "Delete", "$session_name deleted document $document_name and all versions", $client_id);
-
- }
-
- logAction("Document", "Bulk Delete", "$session_name deleted $count document(s) and all versions", $client_id);
-
- flash_alert("Deleted $count Documents and associated document versions", 'error');
-
- }
-
- redirect();
-
-}
diff --git a/agent/post/file.php b/agent/post/file.php
index 52163a40..30b6da5b 100644
--- a/agent/post/file.php
+++ b/agent/post/file.php
@@ -246,11 +246,41 @@ if (isset($_POST['bulk_delete_files'])) {
logAction("File", "Delete", "$session_name deleted file $file_name", $client_id);
}
- logAction("File", "Bulk Delete", "$session_name deleted $file_count file(s)", $client_id);
-
- flash_alert("You deleted $file_count files", 'error');
}
+ // Delete documents loop
+ if (isset($_POST['document_ids'])) {
+
+ // Get selected document count
+ $document_count = count($_POST['document_ids']);
+
+ // Delete document loop
+ foreach($_POST['document_ids'] as $document_id) {
+ $document_id = intval($document_id);
+ // Get document name for logging
+ $sql = mysqli_query($mysqli,"SELECT document_name, document_client_id FROM documents WHERE document_id = $document_id");
+ $row = mysqli_fetch_array($sql);
+ $document_name = sanitizeInput($row['document_name']);
+ $client_id = intval($row['document_client_id']);
+
+ mysqli_query($mysqli,"DELETE FROM documents WHERE document_id = $document_id");
+
+ // Delete all versions associated with the master document
+ mysqli_query($mysqli,"DELETE FROM document_versions WHERE document_version_document_id = $document_id");
+
+ // Delete uploads/document/$document_id if exists
+ removeDirectory($_SERVER['DOCUMENT_ROOT'] . "/uploads/documents/" . $document_id);
+
+ logAction("Document", "Delete", "$session_name deleted document $document_name and all versions", $client_id);
+
+ }
+
+ }
+
+ logAction("File", "Bulk Delete", "$session_name deleted $document_count document(s) and all versions and $file_count file(s)", $client_id);
+
+ flash_alert("Deleted $document_count Documents and associated document versions and $file_count files", 'error');
+
redirect();
}