diff --git a/clients.php b/clients.php index 23f7070e..38fc4641 100644 --- a/clients.php +++ b/clients.php @@ -289,10 +289,13 @@ $num_rows = mysqli_fetch_row(mysqli_query($mysqli, "SELECT FOUND_ROWS()")); Archive + diff --git a/inc_client_top_head.php b/inc_client_top_head.php index 0461bd48..6560108f 100644 --- a/inc_client_top_head.php +++ b/inc_client_top_head.php @@ -22,10 +22,12 @@ Archive Client + diff --git a/post/client.php b/post/client.php index dba60b21..de156d44 100644 --- a/post/client.php +++ b/post/client.php @@ -176,10 +176,12 @@ if (isset($_GET['undo_archive_client'])) { if (isset($_GET['delete_client'])) { + // Removing this function from the frontend as this is extremely destructive. Its best to use Archive, use this for development or test purposes only. + validateAdminRole(); // CSRF Check - validateCSRFToken($_GET['csrf_token']); + // validateCSRFToken($_GET['csrf_token']); $client_id = intval($_GET['delete_client']); diff --git a/ticket_assign_modal.php b/ticket_assign_modal.php index 98807a9a..34e90729 100644 --- a/ticket_assign_modal.php +++ b/ticket_assign_modal.php @@ -21,13 +21,18 @@