AS1024/itflow
1
0
Fork 0
mirror of https://github.com/itflow-org/itflow synced 2026-09-23 07:01:16 +00:00
Code Issues Packages Projects Releases Wiki Activity

Enfoce Sales Permission Read on products export

Browse Source
This commit is contained in:
johnnyq
2026-07-28 17:53:13 -04:00
parent 78e7e1c49e
commit 556ab22c79
1 changed files with 2 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
agent/post/product.php
View File

@@ -248,6 +248,8 @@ if (isset($_POST['export_products_csv'])) {
validateCSRFToken(); validateCSRFToken();
enforceUserPermission('module_sales');
//get records from database //get records from database
$sql = mysqli_query($mysqli,"SELECT * FROM products $sql = mysqli_query($mysqli,"SELECT * FROM products
LEFT JOIN categories ON product_category_id = category_id LEFT JOIN categories ON product_category_id = category_id