mirror of
https://github.com/itflow-org/itflow
synced 2026-03-11 08:14:52 +00:00
Fix file upload missing client_id
This commit is contained in:
@@ -18,8 +18,9 @@ ob_start();
|
||||
</div>
|
||||
<form action="post.php" method="post" enctype="multipart/form-data" autocomplete="off">
|
||||
<input type="hidden" name="csrf_token" value="<?= $_SESSION['csrf_token'] ?>">
|
||||
<input type="hidden" name="contact" value="<?php echo $contact_id; ?>">
|
||||
<input type="hidden" name="asset" value="<?php echo $asset_id; ?>">
|
||||
<input type="hidden" name="client_id" value="<?php echo $client_id; ?>">
|
||||
<input type="hidden" name="contact_id" value="<?php echo $contact_id; ?>">
|
||||
<input type="hidden" name="asset_id" value="<?php echo $asset_id; ?>">
|
||||
<div class="modal-body">
|
||||
|
||||
<div class="form-group">
|
||||
|
||||
@@ -16,8 +16,8 @@ if (isset($_POST['upload_files'])) {
|
||||
$client_id = intval($_POST['client_id']);
|
||||
$folder_id = intval($_POST['folder_id']);
|
||||
$description = sanitizeInput($_POST['description']);
|
||||
$contact_id = intval($_POST['contact'] ?? 0);
|
||||
$asset_id = intval($_POST['asset'] ?? 0);
|
||||
$contact_id = intval($_POST['contact_id'] ?? 0);
|
||||
$asset_id = intval($_POST['asset_id'] ?? 0);
|
||||
$client_dir = "../uploads/clients/$client_id";
|
||||
|
||||
enforceClientAccess();
|
||||
|
||||
Reference in New Issue
Block a user