Fix Client PDF Export

2026-08-10 09:37:15 +00:00 · 2026-08-06 18:51:09 -04:00
parent 3cae52067a
commit 64423cbefa
22 changed files with 66 additions and 55 deletions
--- a/agent/post/asset.php
+++ b/agent/post/asset.php
@@ -1316,7 +1316,7 @@ if (isset($_GET['download_assets_csv_template'])) {

 }

-if (isset($_POST['export_assets'])) {
+if (isExportRequest('export_assets')) {

    validateCSRFToken();

@@ -2056,7 +2056,7 @@ if (isset($_GET['download_client_asset_interfaces_csv_template'])) {

 }

-if (isset($_POST['export_asset_interfaces'])) {
+if (isExportRequest('export_asset_interfaces')) {

    validateCSRFToken();

--- a/agent/post/certificate.php
+++ b/agent/post/certificate.php
@@ -338,7 +338,7 @@ if (isset($_POST['bulk_delete_certificates'])) {

 }

-if (isset($_POST['export_certificates'])) {
+if (isExportRequest('export_certificates')) {

    validateCSRFToken();

--- a/agent/post/client.php
+++ b/agent/post/client.php
@@ -356,7 +356,7 @@ if (isset($_GET['delete_client'])) {

 }

-if (isset($_POST['export_clients'])) {
+if (isExportRequest('export_clients')) {

    validateCSRFToken();

@@ -1192,26 +1192,26 @@ if (isset($_POST["export_client_pdf"])) {
    $company_logo = escapeHtml($row['company_logo']);

    $client_id = intval($_POST["client_id"]);
-    $export_contacts = intval($_POST["export_contacts"]);
-    $export_locations = intval($_POST["export_locations"]);
-    $export_assets = intval($_POST["export_assets"]);
-    $export_software = intval($_POST["export_software"]);
+    $export_contacts = intval($_POST["include_contacts"] ?? 0);
+    $export_locations = intval($_POST["include_locations"] ?? 0);
+    $export_assets = intval($_POST["include_assets"] ?? 0);
+    $export_software = intval($_POST["include_software"] ?? 0);
    $export_credentials = 0;
    if (lookupUserPermission("module_credential") >= 1) {
-        $export_credentials = intval($_POST["export_credentials"] ?? 0);
+        $export_credentials = intval($_POST["include_credentials"] ?? 0);
    }
-    $export_networks = intval($_POST["export_networks"]);
-    $export_certificates = intval($_POST["export_certificates"]);
-    $export_domains = intval($_POST["export_domains"]);
-    $export_tickets = intval($_POST["export_tickets"]);
-    $export_recurring_tickets = intval($_POST["export_recurring_tickets"]);
-    $export_vendors = intval($_POST["export_vendors"]);
-    $export_invoices = intval($_POST["export_invoices"]);
-    $export_recurring_invoices = intval($_POST["export_recurring_invoices"]);
-    $export_quotes = intval($_POST["export_quotes"]);
-    $export_payments = intval($_POST["export_payments"]);
-    $export_trips = intval($_POST["export_trips"]);
-    $export_logs = intval($_POST["export_logs"]);
+    $export_networks = intval($_POST["include_networks"] ?? 0);
+    $export_certificates = intval($_POST["include_certificates"] ?? 0);
+    $export_domains = intval($_POST["include_domains"] ?? 0);
+    $export_tickets = intval($_POST["include_tickets"] ?? 0);
+    $export_recurring_tickets = intval($_POST["include_recurring_tickets"] ?? 0);
+    $export_vendors = intval($_POST["include_vendors"] ?? 0);
+    $export_invoices = intval($_POST["include_invoices"] ?? 0);
+    $export_recurring_invoices = intval($_POST["include_recurring_invoices"] ?? 0);
+    $export_quotes = intval($_POST["include_quotes"] ?? 0);
+    $export_payments = intval($_POST["include_payments"] ?? 0);
+    $export_trips = intval($_POST["include_trips"] ?? 0);
+    $export_logs = intval($_POST["include_logs"] ?? 0);

    enforceClientAccess();

--- a/agent/post/contact.php
+++ b/agent/post/contact.php
@@ -1262,7 +1262,7 @@ if (isset($_GET['unlink_contact_from_file'])) {

 }

-if (isset($_POST['export_contacts'])) {
+if (isExportRequest('export_contacts')) {

    validateCSRFToken();

--- a/agent/post/credential.php
+++ b/agent/post/credential.php
@@ -410,7 +410,7 @@ if (isset($_POST['bulk_delete_credentials'])) {

 }

-if (isset($_POST['export_credentials'])) {
+if (isExportRequest('export_credentials')) {

    validateCSRFToken();

--- a/agent/post/domain.php
+++ b/agent/post/domain.php
@@ -455,7 +455,7 @@ if (isset($_POST['bulk_refresh_domains'])) {

 }

-if (isset($_POST['export_domains'])) {
+if (isExportRequest('export_domains')) {

    validateCSRFToken();

--- a/agent/post/expense.php
+++ b/agent/post/expense.php
@@ -298,7 +298,7 @@ if (isset($_POST['bulk_delete_expenses'])) {

 }

-if (isset($_POST['export_expenses'])) {
+if (isExportRequest('export_expenses')) {

    validateCSRFToken();

--- a/agent/post/income.php
+++ b/agent/post/income.php
@@ -307,7 +307,7 @@ if (isset($_POST['bulk_edit_income_method'])) {

 }

-if (isset($_POST['export_income'])) {
+if (isExportRequest('export_income')) {

    validateCSRFToken();

--- a/agent/post/invoice.php
+++ b/agent/post/invoice.php
@@ -657,7 +657,7 @@ if (isset($_GET['email_invoice'])) {

 }

-if (isset($_POST['export_invoices'])) {
+if (isExportRequest('export_invoices')) {

    validateCSRFToken();

--- a/agent/post/location.php
+++ b/agent/post/location.php
@@ -388,7 +388,7 @@ if (isset($_POST['bulk_delete_locations'])) {

 }

-if (isset($_POST['export_locations'])) {
+if (isExportRequest('export_locations')) {

    validateCSRFToken();

--- a/agent/post/network.php
+++ b/agent/post/network.php
@@ -172,7 +172,7 @@ if (isset($_POST['bulk_delete_networks'])) {

 }

-if (isset($_POST['export_networks'])) {
+if (isExportRequest('export_networks')) {

    validateCSRFToken();

--- a/agent/post/product.php
+++ b/agent/post/product.php
@@ -244,7 +244,7 @@ if (isset($_POST['bulk_delete_products'])) {

 }

-if (isset($_POST['export_products'])) {
+if (isExportRequest('export_products')) {

    validateCSRFToken();

--- a/agent/post/quote.php
+++ b/agent/post/quote.php
@@ -692,7 +692,7 @@ if (isset($_GET['mark_quote_invoiced'])) {

 }

-if (isset($_POST['export_quotes'])) {
+if (isExportRequest('export_quotes')) {

    validateCSRFToken();

--- a/agent/post/recurring_invoice.php
+++ b/agent/post/recurring_invoice.php
@@ -617,7 +617,7 @@ if (isset($_POST['set_recurring_payment'])) {

 }

-if (isset($_POST['export_recurring_invoices'])) {
+if (isExportRequest('export_recurring_invoices')) {

    validateCSRFToken();

--- a/agent/post/software.php
+++ b/agent/post/software.php
@@ -226,7 +226,7 @@ if (isset($_GET['delete_software'])) {

 }

-if (isset($_POST['export_software'])) {
+if (isExportRequest('export_software')) {

    validateCSRFToken();

--- a/agent/post/ticket.php
+++ b/agent/post/ticket.php
@@ -2741,7 +2741,7 @@ if (isset($_POST['add_quote_from_ticket'])) {

 }

-if (isset($_POST['export_tickets'])) {
+if (isExportRequest('export_tickets')) {

    validateCSRFToken();

--- a/agent/post/transaction.php
+++ b/agent/post/transaction.php
@@ -9,7 +9,7 @@ if (!defined('FROM_POST_HANDLER')) {
    exit;
 }

-if (isset($_POST['export_transactions'])) {
+if (isExportRequest('export_transactions')) {

    validateCSRFToken();

--- a/agent/post/trip.php
+++ b/agent/post/trip.php
@@ -84,7 +84,7 @@ if (isset($_GET['delete_trip'])) {

 }

-if (isset($_POST['export_trips'])) {
+if (isExportRequest('export_trips')) {

    validateCSRFToken();

--- a/agent/post/vendor.php
+++ b/agent/post/vendor.php
@@ -353,7 +353,7 @@ if (isset($_POST['bulk_delete_vendors'])) {

 }

-if (isset($_POST['export_vendors'])) {
+if (isExportRequest('export_vendors')) {

    validateCSRFToken();