diff --git a/blank.php b/blank.php index ec8a9603..72d5b54d 100644 --- a/blank.php +++ b/blank.php @@ -37,6 +37,12 @@ echo "

$start_date

";
+$date_time"; +?> + 0) { $conflicting_tickets = []; while ($row = mysqli_fetch_array($sql)) { @@ -1778,6 +1778,12 @@ if (isset($_POST['edit_ticket_schedule'])) { $cal_location = sanitizeInput($row["location_address"]); $email_datetime = date('l, F j, Y \a\t g:ia', strtotime($schedule)); + // Sanitize Config Vars + $config_ticket_from_email = sanitizeInput($config_ticket_from_email); + $config_ticket_from_name = sanitizeInput($config_ticket_from_name); + $session_company_name = sanitizeInput($session_company_name); + + /// Create iCal event $cal_str = createiCalStr($schedule, $cal_subject, $cal_description, $cal_location); @@ -1908,7 +1914,12 @@ if (isset($_GET['cancel_ticket_schedule'])) { $ticket_schedule = sanitizeInput($row['ticket_schedule']); $ticket_cal_str = sanitizeInput($row['ticket_cal_str']); - mysqli_query($mysqli, "UPDATE tickets SET ticket_schedule = NULL, ticket_status = 'Open' WHERE ticket_id = $ticket_id"); + mysqli_query($mysqli, "UPDATE tickets SET ticket_schedule = NULL, ticket_status = 2 WHERE ticket_id = $ticket_id"); + + // Sanitize Config Vars + $config_ticket_from_email = sanitizeInput($config_ticket_from_email); + $config_ticket_from_name = sanitizeInput($config_ticket_from_name); + $session_company_name = sanitizeInput($session_company_name); //Create iCal event $cal_str = createiCalStrCancel($ticket_cal_str);