From 8dbbef37bb262cdfd3978e850c1d1ae7d800cf04 Mon Sep 17 00:00:00 2001
From: johnnyq <johnny@pittpc.com>
Date: Sat, 7 Mar 2026 16:50:11 -0500
Subject: [PATCH] Fix file upload missing client_id

---
 agent/modals/file/file_upload.php | 5 +++--
 agent/post/file.php               | 4 ++--
 2 files changed, 5 insertions(+), 4 deletions(-)

diff --git a/agent/modals/file/file_upload.php b/agent/modals/file/file_upload.php
index 03a79463..2cb367fd 100644
--- a/agent/modals/file/file_upload.php
+++ b/agent/modals/file/file_upload.php
@@ -18,8 +18,9 @@ ob_start();
 </div>
 <form action="post.php" method="post" enctype="multipart/form-data" autocomplete="off">
     <input type="hidden" name="csrf_token" value="<?= $_SESSION['csrf_token'] ?>">
-    <input type="hidden" name="contact" value="<?php echo $contact_id; ?>">
-    <input type="hidden" name="asset" value="<?php echo $asset_id; ?>">
+    <input type="hidden" name="client_id" value="<?php echo $client_id; ?>">
+    <input type="hidden" name="contact_id" value="<?php echo $contact_id; ?>">
+    <input type="hidden" name="asset_id" value="<?php echo $asset_id; ?>">
     <div class="modal-body">
 
         <div class="form-group">
diff --git a/agent/post/file.php b/agent/post/file.php
index 4dc5da22..814f08da 100644
--- a/agent/post/file.php
+++ b/agent/post/file.php
@@ -16,8 +16,8 @@ if (isset($_POST['upload_files'])) {
     $client_id   = intval($_POST['client_id']);
     $folder_id   = intval($_POST['folder_id']);
     $description = sanitizeInput($_POST['description']);
-    $contact_id = intval($_POST['contact'] ?? 0);
-    $asset_id = intval($_POST['asset'] ?? 0);
+    $contact_id = intval($_POST['contact_id'] ?? 0);
+    $asset_id = intval($_POST['asset_id'] ?? 0);
     $client_dir  = "../uploads/clients/$client_id";
 
     enforceClientAccess();