AS1024/itflow
1
0
Fork 0
mirror of https://github.com/itflow-org/itflow synced 2026-08-17 04:55:13 +00:00
Code Issues Packages Projects Releases Wiki Activity

Ticket Merge: EnforceClientAccess on modal and ticket list

Browse Source
This commit is contained in:
johnnyq
2026-07-16 12:14:36 -04:00
parent a8ad16758c
commit 9e84ce4c07
1 changed files with 7 additions and 3 deletions
Download Patch File Download Diff File Expand all files Collapse all files

10
agent/modals/ticket/ticket_merge.php
View File

@@ -13,20 +13,24 @@ $sql = mysqli_query($mysqli, "SELECT * FROM tickets
$row = mysqli_fetch_assoc($sql); $row = mysqli_fetch_assoc($sql);
$ticket_prefix = escapeHtml($row['ticket_prefix']); $ticket_prefix = escapeHtml($row['ticket_prefix']);
$ticket_number = intval($row['ticket_number']); $ticket_number = intval($row['ticket_number']);
$client_id = intval($row['ticket_client_id']);
$client_name = escapeHtml($row['client_name']); $client_name = escapeHtml($row['client_name']);
$client_id = intval($row['ticket_client_id']);
enforceClientAccess();
$sql_merge = mysqli_query($mysqli, "SELECT * FROM tickets $sql_merge = mysqli_query($mysqli, "SELECT * FROM tickets
LEFT JOIN ticket_statuses ON ticket_status = ticket_status_id LEFT JOIN ticket_statuses ON ticket_status = ticket_status_id
LEFT JOIN clients ON client_id = ticket_client_id LEFT JOIN clients ON client_id = ticket_client_id
WHERE ticket_closed_at IS NULL AND ticket_id != $ticket_id WHERE ticket_closed_at IS NULL
AND ticket_id != $ticket_id
$access_permission_query
ORDER BY ticket_status ASC, ticket_id DESC" ORDER BY ticket_status ASC, ticket_id DESC"
); );
// Generate the HTML form content using output buffering.
ob_start(); ob_start();
?> ?>
<div class="modal-header bg-dark"> <div class="modal-header bg-dark">
<h5 class="modal-title"><i class="fa fa-fw fa-clone mr-2"></i>Merge & Close <?= "$ticket_prefix$ticket_number" ?> into another ticket</h5> <h5 class="modal-title"><i class="fa fa-fw fa-clone mr-2"></i>Merge & Close <?= "$ticket_prefix$ticket_number" ?> into another ticket</h5>
<button type="button" class="close text-white" data-dismiss="modal"> <button type="button" class="close text-white" data-dismiss="modal">