Move payment provider post vars to a model to reduce repetition

This commit is contained in:
Wrongecho
2026-08-30 15:12:14 +01:00
parent 318eb7cf77
commit 5a925f8784
2 changed files with 12 additions and 12 deletions

View File

@@ -11,12 +11,7 @@ if (isset($_POST['add_payment_provider'])) {
validateCSRFToken();
$provider = escapeSql($_POST['provider']);
$public_key = escapeSql($_POST['public_key']);
$private_key = escapeSql($_POST['private_key']);
$threshold = floatval($_POST['threshold']);
$account = intval($_POST['account']);
$expense_vendor = intval($_POST['expense_vendor']) ?? 0;
$expense_category = intval($_POST['expense_category']) ?? 0;
require_once 'payment_provider_model.php';
// Check to ensure provider isn't added twice
$sql = mysqli_query($mysqli, "SELECT 1 FROM payment_providers WHERE payment_provider_name = '$provider' LIMIT 1");
@@ -53,13 +48,9 @@ if (isset($_POST['edit_payment_provider'])) {
validateCSRFToken();
require_once 'payment_provider_model.php';
$provider_id = intval($_POST['provider_id']);
$public_key = escapeSql($_POST['public_key']);
$private_key = escapeSql($_POST['private_key']);
$threshold = floatval($_POST['threshold']);
$account = intval($_POST['account']);
$expense_vendor = intval($_POST['expense_vendor']) ?? 0;
$expense_category = intval($_POST['expense_category']) ?? 0;
mysqli_query($mysqli,"UPDATE payment_providers SET payment_provider_public_key = '$public_key', payment_provider_private_key = '$private_key', payment_provider_threshold = $threshold, payment_provider_account = $account, payment_provider_expense_vendor = $expense_vendor, payment_provider_expense_category = $expense_category WHERE payment_provider_id = $provider_id");

View File

@@ -0,0 +1,9 @@
<?php
defined('FROM_POST_HANDLER') || die("Direct file access is not allowed");
$public_key = escapeSql($_POST['public_key']);
$private_key = escapeSql($_POST['private_key']);
$threshold = floatval($_POST['threshold']);
$account = intval($_POST['account']);
$expense_vendor = intval($_POST['expense_vendor']) ?? 0;
$expense_category = intval($_POST['expense_category']) ?? 0;