AS1024/itflow
1
0
Fork 0
mirror of https://github.com/itflow-org/itflow synced 2026-03-11 08:14:52 +00:00
Code Issues Packages Projects Releases Wiki Activity

Fix file upload missing client_id

Browse Source
This commit is contained in:
johnnyq
2026-03-07 16:50:11 -05:00
parent 92b98b95ee
commit 8dbbef37bb
2 changed files with 5 additions and 4 deletions
Download Patch File Download Diff File Expand all files Collapse all files

5
agent/modals/file/file_upload.php
View File

@@ -18,8 +18,9 @@ ob_start();
</div> </div>
<form action="post.php" method="post" enctype="multipart/form-data" autocomplete="off"> <form action="post.php" method="post" enctype="multipart/form-data" autocomplete="off">
<input type="hidden" name="csrf_token" value="<?= $_SESSION['csrf_token'] ?>"> <input type="hidden" name="csrf_token" value="<?= $_SESSION['csrf_token'] ?>">
<input type="hidden" name="contact" value="<?php echo $contact_id; ?>"> <input type="hidden" name="client_id" value="<?php echo $client_id; ?>">
<input type="hidden" name="asset" value="<?php echo $asset_id; ?>"> <input type="hidden" name="contact_id" value="<?php echo $contact_id; ?>">
<input type="hidden" name="asset_id" value="<?php echo $asset_id; ?>">
<div class="modal-body"> <div class="modal-body">
<div class="form-group"> <div class="form-group">

4
agent/post/file.php
View File

@@ -16,8 +16,8 @@ if (isset($_POST['upload_files'])) {
$client_id = intval($_POST['client_id']); $client_id = intval($_POST['client_id']);
$folder_id = intval($_POST['folder_id']); $folder_id = intval($_POST['folder_id']);
$description = sanitizeInput($_POST['description']); $description = sanitizeInput($_POST['description']);
$contact_id = intval($_POST['contact'] ?? 0); $contact_id = intval($_POST['contact_id'] ?? 0);
$asset_id = intval($_POST['asset'] ?? 0); $asset_id = intval($_POST['asset_id'] ?? 0);
$client_dir = "../uploads/clients/$client_id"; $client_dir = "../uploads/clients/$client_id";
enforceClientAccess(); enforceClientAccess();