AS1024/itflow
1
0
Fork 0
mirror of https://github.com/itflow-org/itflow synced 2026-08-16 12:35:11 +00:00
Code Issues Packages Projects Releases Wiki Activity

Updated validateCSRFToken to automatically grab and compare get or post csrf token no longer need to pass an argument to the function which fixed the issue if no hash was present

Browse Source
This commit is contained in:
johnnyq
2026-07-24 13:40:37 -04:00
parent dd358da65d
commit af51c4316f
80 changed files with 519 additions and 517 deletions
Download Patch File Download Diff File Expand all files Collapse all files

20
agent/ajax.php
View File

@@ -42,7 +42,7 @@ if (isset($_GET['certificate_fetch_parse_json_details'])) {
if (isset($_POST['client_set_notes'])) {
validateCSRFToken($_POST['csrf_token']);
validateCSRFToken();
enforceUserPermission('module_client', 2);
@@ -61,7 +61,7 @@ if (isset($_POST['client_set_notes'])) {
if (isset($_POST['contact_set_notes'])) {
validateCSRFToken($_POST['csrf_token']);
validateCSRFToken();
enforceUserPermission('module_client', 2);
@@ -88,7 +88,7 @@ if (isset($_POST['contact_set_notes'])) {
if (isset($_POST['asset_set_notes'])) {
validateCSRFToken($_POST['csrf_token']);
validateCSRFToken();
enforceUserPermission('module_support', 2);
@@ -159,7 +159,7 @@ if (isset($_GET['ticket_query_views'])) {
*/
if (isset($_GET['share_generate_link'])) {
validateCSRFToken($_GET['csrf_token']);
validateCSRFToken();
enforceUserPermission('module_support', 2);
@@ -587,7 +587,7 @@ if (isset($_POST['update_kanban_ticket'])) {
if (isset($_POST['update_ticket_tasks_order'])) {
// Update multiple ticket tasks order
validateCSRFToken($_POST['csrf_token']);
validateCSRFToken();
enforceUserPermission('module_support', 2);
@@ -609,7 +609,7 @@ if (isset($_POST['update_ticket_tasks_order'])) {
if (isset($_POST['update_task_templates_order'])) {
// Update multiple task templates order
validateCSRFToken($_POST['csrf_token']);
validateCSRFToken();
enforceUserPermission('module_support', 2);
@@ -630,7 +630,7 @@ if (isset($_POST['update_task_templates_order'])) {
if (isset($_POST['update_project_template_ticket_order'])) {
validateCSRFToken($_POST['csrf_token']);
validateCSRFToken();
enforceUserPermission('module_support', 2);
@@ -652,7 +652,7 @@ if (isset($_POST['update_project_template_ticket_order'])) {
if (isset($_POST['update_quote_items_order'])) {
// Update multiple quote items order
validateCSRFToken($_POST['csrf_token']);
validateCSRFToken();
enforceUserPermission('module_sales', 2);
@@ -674,7 +674,7 @@ if (isset($_POST['update_quote_items_order'])) {
if (isset($_POST['update_invoice_items_order'])) {
// Update multiple invoice items order
validateCSRFToken($_POST['csrf_token']);
validateCSRFToken();
enforceUserPermission('module_sales', 2);
@@ -696,7 +696,7 @@ if (isset($_POST['update_invoice_items_order'])) {
if (isset($_POST['update_recurring_invoice_items_order'])) {
// Update multiple recurring invoice items order
validateCSRFToken($_POST['csrf_token']);
validateCSRFToken();
enforceUserPermission('module_sales', 2);

8
agent/post/account.php
View File

@@ -8,7 +8,7 @@ defined('FROM_POST_HANDLER') || die("Direct file access is not allowed");
if (isset($_POST['add_account'])) {
validateCSRFToken($_POST['csrf_token']);
validateCSRFToken();
enforceUserPermission('module_financial', 2);
@@ -29,7 +29,7 @@ if (isset($_POST['add_account'])) {
if (isset($_POST['edit_account'])) {
validateCSRFToken($_POST['csrf_token']);
validateCSRFToken();
enforceUserPermission('module_financial', 2);
@@ -49,7 +49,7 @@ if (isset($_POST['edit_account'])) {
if (isset($_GET['archive_account'])) {
validateCSRFToken($_GET['csrf_token']);
validateCSRFToken();
enforceUserPermission('module_financial', 2);
@@ -70,7 +70,7 @@ if (isset($_GET['archive_account'])) {
// Not used anywhere?
if (isset($_GET['delete_account'])) {
validateCSRFToken($_GET['csrf_token']);
validateCSRFToken();
enforceUserPermission('module_financial', 3);

72
agent/post/asset.php
View File

@@ -8,7 +8,7 @@ defined('FROM_POST_HANDLER') || die("Direct file access is not allowed");
if (isset($_POST['add_asset'])) {
validateCSRFToken($_POST['csrf_token']);
validateCSRFToken();
enforceUserPermission('module_support', 2);
@@ -80,7 +80,7 @@ if (isset($_POST['add_asset'])) {
if (isset($_POST['edit_asset'])) {
validateCSRFToken($_POST['csrf_token']);
validateCSRFToken();
enforceUserPermission('module_support', 2);
@@ -149,7 +149,7 @@ if (isset($_POST['edit_asset'])) {
if (isset($_GET['archive_asset'])) {
validateCSRFToken($_GET['csrf_token']);
validateCSRFToken();
enforceUserPermission('module_support', 2);
@@ -178,7 +178,7 @@ if (isset($_GET['archive_asset'])) {
if (isset($_GET['restore_asset'])) {
validateCSRFToken($_GET['csrf_token']);
validateCSRFToken();
enforceUserPermission('module_support', 2);
@@ -207,7 +207,7 @@ if (isset($_GET['restore_asset'])) {
if (isset($_GET['delete_asset'])) {
validateCSRFToken($_GET['csrf_token']);
validateCSRFToken();
enforceUserPermission('module_support', 3);
@@ -233,7 +233,7 @@ if (isset($_GET['delete_asset'])) {
if (isset($_POST['bulk_assign_asset_tags'])) {
validateCSRFToken($_POST['csrf_token']);
validateCSRFToken();
enforceUserPermission('module_client', 2);
@@ -281,7 +281,7 @@ if (isset($_POST['bulk_assign_asset_tags'])) {
if (isset($_POST['bulk_assign_asset_location'])) {
validateCSRFToken($_POST['csrf_token']);
validateCSRFToken();
enforceUserPermission('module_support', 2);
@@ -329,7 +329,7 @@ if (isset($_POST['bulk_assign_asset_location'])) {
if (isset($_POST['bulk_assign_asset_physical_location'])) {
validateCSRFToken($_POST['csrf_token']);
validateCSRFToken();
enforceUserPermission('module_support', 2);
@@ -369,7 +369,7 @@ if (isset($_POST['bulk_assign_asset_physical_location'])) {
if (isset($_POST['bulk_transfer_client_asset'])) {
validateCSRFToken($_POST['csrf_token']);
validateCSRFToken();
enforceUserPermission('module_support', 2);
@@ -459,7 +459,7 @@ if (isset($_POST['bulk_transfer_client_asset'])) {
if (isset($_POST['bulk_assign_asset_contact'])) {
validateCSRFToken($_POST['csrf_token']);
validateCSRFToken();
enforceUserPermission('module_support', 2);
@@ -504,7 +504,7 @@ if (isset($_POST['bulk_assign_asset_contact'])) {
if (isset($_POST['bulk_edit_asset_status'])) {
validateCSRFToken($_POST['csrf_token']);
validateCSRFToken();
enforceUserPermission('module_support', 2);
@@ -545,7 +545,7 @@ if (isset($_POST['bulk_edit_asset_status'])) {
if (isset($_POST['bulk_favorite_assets'])) {
validateCSRFToken($_POST['csrf_token']);
validateCSRFToken();
enforceUserPermission('module_support', 2);
@@ -583,7 +583,7 @@ if (isset($_POST['bulk_favorite_assets'])) {
if (isset($_POST['bulk_unfavorite_assets'])) {
validateCSRFToken($_POST['csrf_token']);
validateCSRFToken();
enforceUserPermission('module_support', 2);
@@ -621,7 +621,7 @@ if (isset($_POST['bulk_unfavorite_assets'])) {
if (isset($_POST['bulk_archive_assets'])) {
validateCSRFToken($_POST['csrf_token']);
validateCSRFToken();
enforceUserPermission('module_support', 2);
@@ -662,7 +662,7 @@ if (isset($_POST['bulk_archive_assets'])) {
if (isset($_POST['bulk_restore_assets'])) {
validateCSRFToken($_POST['csrf_token']);
validateCSRFToken();
enforceUserPermission('module_support', 2);
@@ -704,7 +704,7 @@ if (isset($_POST['bulk_restore_assets'])) {
if (isset($_POST['bulk_delete_assets'])) {
validateCSRFToken($_POST['csrf_token']);
validateCSRFToken();
enforceUserPermission('module_support', 3);
@@ -742,7 +742,7 @@ if (isset($_POST['bulk_delete_assets'])) {
if (isset($_POST['link_software_to_asset'])) {
validateCSRFToken($_POST['csrf_token']);
validateCSRFToken();
enforceUserPermission('module_support', 2);
@@ -772,7 +772,7 @@ if (isset($_POST['link_software_to_asset'])) {
if (isset($_GET['unlink_software_from_asset'])) {
validateCSRFToken($_GET['csrf_token']);
validateCSRFToken();
enforceUserPermission('module_support', 2);
@@ -803,7 +803,7 @@ if (isset($_GET['unlink_software_from_asset'])) {
// Right now 1 login and have many assets but not many to many
if (isset($_POST['link_asset_to_credential'])) {
validateCSRFToken($_POST['csrf_token']);
validateCSRFToken();
enforceUserPermission('module_support', 2);
@@ -833,7 +833,7 @@ if (isset($_POST['link_asset_to_credential'])) {
if (isset($_GET['unlink_credential_from_asset'])) {
validateCSRFToken($_GET['csrf_token']);
validateCSRFToken();
enforceUserPermission('module_support', 2);
@@ -863,7 +863,7 @@ if (isset($_GET['unlink_credential_from_asset'])) {
if (isset($_POST['link_service_to_asset'])) {
validateCSRFToken($_POST['csrf_token']);
validateCSRFToken();
enforceUserPermission('module_support', 2);
@@ -893,7 +893,7 @@ if (isset($_POST['link_service_to_asset'])) {
if (isset($_GET['unlink_service_from_asset'])) {
validateCSRFToken($_GET['csrf_token']);
validateCSRFToken();
enforceUserPermission('module_support', 2);
@@ -923,7 +923,7 @@ if (isset($_GET['unlink_service_from_asset'])) {
if (isset($_POST['link_asset_to_file'])) {
validateCSRFToken($_POST['csrf_token']);
validateCSRFToken();
enforceUserPermission('module_support', 2);
@@ -954,7 +954,7 @@ if (isset($_POST['link_asset_to_file'])) {
if (isset($_GET['unlink_asset_from_file'])) {
validateCSRFToken($_GET['csrf_token']);
validateCSRFToken();
enforceUserPermission('module_support', 2);
@@ -987,7 +987,7 @@ if (isset($_GET['unlink_asset_from_file'])) {
if (isset($_POST["import_assets_csv"])) {
validateCSRFToken($_POST['csrf_token']);
validateCSRFToken();
enforceUserPermission('module_support', 2);
@@ -1190,7 +1190,7 @@ if (isset($_GET['download_assets_csv_template'])) {
if (isset($_POST['export_assets_csv'])) {
validateCSRFToken($_POST['csrf_token']);
validateCSRFToken();
enforceUserPermission('module_support');
@@ -1253,7 +1253,7 @@ if (isset($_POST['add_asset_interface'])) {
// 1) Permissions & CSRF
validateCSRFToken($_POST['csrf_token']);
validateCSRFToken();
enforceUserPermission('module_support', 2);
@@ -1328,7 +1328,7 @@ if (isset($_POST['add_asset_interface'])) {
if (isset($_POST['add_asset_multiple_interfaces'])) {
validateCSRFToken($_POST['csrf_token']);
validateCSRFToken();
enforceUserPermission('module_support', 2);
@@ -1375,7 +1375,7 @@ if (isset($_POST['add_asset_multiple_interfaces'])) {
if (isset($_POST['edit_asset_interface'])) {
validateCSRFToken($_POST['csrf_token']);
validateCSRFToken();
enforceUserPermission('module_support', 2);
@@ -1456,7 +1456,7 @@ if (isset($_POST['edit_asset_interface'])) {
if (isset($_GET['delete_asset_interface'])) {
validateCSRFToken($_GET['csrf_token']);
validateCSRFToken();
enforceUserPermission('module_support', 2);
@@ -1501,7 +1501,7 @@ if (isset($_GET['delete_asset_interface'])) {
if (isset($_POST['bulk_edit_asset_interface_type'])) {
validateCSRFToken($_POST['csrf_token']);
validateCSRFToken();
enforceUserPermission('module_support', 2);
@@ -1547,7 +1547,7 @@ if (isset($_POST['bulk_edit_asset_interface_type'])) {
if (isset($_POST['bulk_edit_asset_interface_network'])) {
validateCSRFToken($_POST['csrf_token']);
validateCSRFToken();
enforceUserPermission('module_support', 2);
@@ -1595,7 +1595,7 @@ if (isset($_POST['bulk_edit_asset_interface_network'])) {
if (isset($_POST['bulk_edit_asset_interface_ip_dhcp'])) {
validateCSRFToken($_POST['csrf_token']);
validateCSRFToken();
enforceUserPermission('module_support', 2);
@@ -1639,7 +1639,7 @@ if (isset($_POST['bulk_edit_asset_interface_ip_dhcp'])) {
if (isset($_POST['bulk_delete_asset_interfaces'])) {
validateCSRFToken($_POST['csrf_token']);
validateCSRFToken();
enforceUserPermission('module_support', 2);
@@ -1682,7 +1682,7 @@ if (isset($_POST['bulk_delete_asset_interfaces'])) {
if (isset($_POST["import_client_asset_interfaces_csv"])) {
validateCSRFToken($_POST['csrf_token']);
validateCSRFToken();
enforceUserPermission('module_support', 2);
@@ -1837,7 +1837,7 @@ if (isset($_GET['download_client_asset_interfaces_csv_template'])) {
if (isset($_POST['export_client_asset_interfaces_csv'])) {
validateCSRFToken($_POST['csrf_token']);
validateCSRFToken();
enforceUserPermission('module_support');

2
agent/post/category.php
View File

@@ -8,7 +8,7 @@ defined('FROM_POST_HANDLER') || die("Direct file access is not allowed");
if (isset($_POST['add_category'])) {
validateCSRFToken($_POST['csrf_token']);
validateCSRFToken();
require_once 'category_model.php';

18
agent/post/certificate.php
View File

@@ -8,7 +8,7 @@ defined('FROM_POST_HANDLER') || die("Direct file access is not allowed");
if (isset($_POST['add_certificate'])) {
validateCSRFToken($_POST['csrf_token']);
validateCSRFToken();
enforceUserPermission('module_support', 2);
@@ -48,7 +48,7 @@ if (isset($_POST['add_certificate'])) {
if (isset($_POST['edit_certificate'])) {
validateCSRFToken($_POST['csrf_token']);
validateCSRFToken();
enforceUserPermission('module_support', 2);
@@ -121,7 +121,7 @@ if (isset($_POST['edit_certificate'])) {
if (isset($_GET['refresh_certificate'])) {
validateCSRFToken($_GET['csrf_token']);
validateCSRFToken();
enforceUserPermission('module_support', 2);
@@ -161,7 +161,7 @@ if (isset($_GET['refresh_certificate'])) {
if (isset($_GET['archive_certificate'])) {
validateCSRFToken($_GET['csrf_token']);
validateCSRFToken();
enforceUserPermission('module_support', 2);
@@ -187,7 +187,7 @@ if (isset($_GET['archive_certificate'])) {
if (isset($_GET['restore_certificate'])) {
validateCSRFToken($_GET['csrf_token']);
validateCSRFToken();
enforceUserPermission('module_support', 2);
@@ -213,7 +213,7 @@ if (isset($_GET['restore_certificate'])) {
if (isset($_GET['delete_certificate'])) {
validateCSRFToken($_GET['csrf_token']);
validateCSRFToken();
enforceUserPermission('module_support', 3);
@@ -239,7 +239,7 @@ if (isset($_GET['delete_certificate'])) {
if (isset($_POST['bulk_refresh_certificates'])) {
validateCSRFToken($_POST['csrf_token']);
validateCSRFToken();
enforceUserPermission('module_support', 2);
@@ -300,7 +300,7 @@ if (isset($_POST['bulk_refresh_certificates'])) {
if (isset($_POST['bulk_delete_certificates'])) {
validateCSRFToken($_POST['csrf_token']);
validateCSRFToken();
enforceUserPermission('module_support', 3);
@@ -340,7 +340,7 @@ if (isset($_POST['bulk_delete_certificates'])) {
if (isset($_POST['export_certificates_csv'])) {
validateCSRFToken($_POST['csrf_token']);
validateCSRFToken();
enforceUserPermission('module_support');

34
agent/post/client.php
View File

@@ -10,7 +10,7 @@ if (isset($_POST['add_client'])) {
// JQ - Using Prepared MySQLi Statements here for show this is not our standard and is only used in the client add/edit POST.
validateCSRFToken($_POST['csrf_token']);
validateCSRFToken();
enforceUserPermission('module_client', 2);
@@ -254,7 +254,7 @@ if (isset($_POST['add_client'])) {
if (isset($_POST['edit_client'])) {
validateCSRFToken($_POST['csrf_token']);
validateCSRFToken();
enforceUserPermission('module_client', 2);
@@ -332,7 +332,7 @@ if (isset($_POST['edit_client'])) {
if (isset($_GET['archive_client'])) {
validateCSRFToken($_GET['csrf_token']);
validateCSRFToken();
enforceUserPermission('module_client', 2);
@@ -362,7 +362,7 @@ if (isset($_GET['archive_client'])) {
if (isset($_GET['restore_client'])) {
validateCSRFToken($_GET['csrf_token']);
validateCSRFToken();
enforceUserPermission('module_client', 2);
@@ -383,7 +383,7 @@ if (isset($_GET['restore_client'])) {
if (isset($_GET['delete_client'])) {
validateCSRFToken($_GET['csrf_token']);
validateCSRFToken();
enforceUserPermission('module_client', 3);
@@ -485,7 +485,7 @@ if (isset($_GET['delete_client'])) {
if (isset($_POST['export_clients_csv'])) {
validateCSRFToken($_POST['csrf_token']);
validateCSRFToken();
enforceUserPermission('module_client', 1);
@@ -537,7 +537,7 @@ if (isset($_POST['export_clients_csv'])) {
if (isset($_POST["import_clients_csv"])) {
validateCSRFToken($_POST['csrf_token']);
validateCSRFToken();
enforceUserPermission('module_client', 2);
$error = false;
@@ -773,7 +773,7 @@ if (isset($_GET['download_clients_csv_template'])) {
if (isset($_POST['bulk_add_client_ticket'])) {
validateCSRFToken($_POST['csrf_token']);
validateCSRFToken();
enforceUserPermission('module_support', 2);
@@ -885,7 +885,7 @@ if (isset($_POST['bulk_add_client_ticket'])) {
if (isset($_POST['bulk_edit_client_industry'])) {
validateCSRFToken($_POST['csrf_token']);
validateCSRFToken();
enforceUserPermission('module_client', 2);
@@ -919,7 +919,7 @@ if (isset($_POST['bulk_edit_client_industry'])) {
if (isset($_POST['bulk_edit_client_referral'])) {
validateCSRFToken($_POST['csrf_token']);
validateCSRFToken();
enforceUserPermission('module_client', 2);
@@ -953,7 +953,7 @@ if (isset($_POST['bulk_edit_client_referral'])) {
if (isset($_POST['bulk_edit_client_hourly_rate'])) {
validateCSRFToken($_POST['csrf_token']);
validateCSRFToken();
enforceUserPermission('module_client', 2);
@@ -987,7 +987,7 @@ if (isset($_POST['bulk_edit_client_hourly_rate'])) {
if (isset($_POST['bulk_edit_client_net_terms'])) {
validateCSRFToken($_POST['csrf_token']);
validateCSRFToken();
enforceUserPermission('module_client', 2);
@@ -1021,7 +1021,7 @@ if (isset($_POST['bulk_edit_client_net_terms'])) {
if (isset($_POST['bulk_assign_client_tags'])) {
validateCSRFToken($_POST['csrf_token']);
validateCSRFToken();
enforceUserPermission('module_client', 2);
@@ -1066,7 +1066,7 @@ if (isset($_POST['bulk_assign_client_tags'])) {
if (isset($_POST['bulk_send_client_email']) && isset($_POST['client_ids'])) {
validateCSRFToken($_POST['csrf_token']);
validateCSRFToken();
enforceUserPermission('module_client', 1);
@@ -1155,7 +1155,7 @@ if (isset($_POST['bulk_send_client_email']) && isset($_POST['client_ids'])) {
if (isset($_POST['bulk_archive_clients'])) {
validateCSRFToken($_POST['csrf_token']);
validateCSRFToken();
enforceUserPermission('module_client', 2);
@@ -1191,7 +1191,7 @@ if (isset($_POST['bulk_archive_clients'])) {
if (isset($_POST['bulk_unarchive_clients'])) {
validateCSRFToken($_POST['csrf_token']);
validateCSRFToken();
enforceUserPermission('module_client', 2);
@@ -1225,7 +1225,7 @@ if (isset($_POST['bulk_unarchive_clients'])) {
if (isset($_POST["export_client_pdf"])) {
validateCSRFToken($_POST['csrf_token']);
validateCSRFToken();
// Enforce permissions
enforceUserPermission("module_client", 3);

62
agent/post/contact.php
View File

@@ -8,7 +8,7 @@ defined('FROM_POST_HANDLER') || die("Direct file access is not allowed");
if (isset($_POST['add_contact'])) {
validateCSRFToken($_POST['csrf_token']);
validateCSRFToken();
enforceUserPermission('module_client', 2);
@@ -84,7 +84,7 @@ if (isset($_POST['add_contact'])) {
if (isset($_POST['edit_contact'])) {
validateCSRFToken($_POST['csrf_token']);
validateCSRFToken();
enforceUserPermission('module_client', 2);
@@ -229,7 +229,7 @@ if (isset($_POST['edit_contact'])) {
if (isset($_POST['add_contact_note'])) {
validateCSRFToken($_POST['csrf_token']);
validateCSRFToken();
enforceUserPermission('module_client', 2);
@@ -260,7 +260,7 @@ if (isset($_POST['add_contact_note'])) {
if (isset($_GET['archive_contact_note'])) {
validateCSRFToken($_GET['csrf_token']);
validateCSRFToken();
enforceUserPermission('module_client', 2);
@@ -288,7 +288,7 @@ if (isset($_GET['archive_contact_note'])) {
if (isset($_GET['restore_contact_note'])) {
validateCSRFToken($_GET['csrf_token']);
validateCSRFToken();
enforceUserPermission('module_client', 2);
@@ -316,7 +316,7 @@ if (isset($_GET['restore_contact_note'])) {
if (isset($_GET['delete_contact_note'])) {
validateCSRFToken($_GET['csrf_token']);
validateCSRFToken();
enforceUserPermission('module_client', 3);
@@ -344,7 +344,7 @@ if (isset($_GET['delete_contact_note'])) {
if (isset($_POST['bulk_assign_contact_location'])) {
validateCSRFToken($_POST['csrf_token']);
validateCSRFToken();
enforceUserPermission('module_client', 2);
@@ -389,7 +389,7 @@ if (isset($_POST['bulk_assign_contact_location'])) {
if (isset($_POST['bulk_edit_contact_phone'])) {
validateCSRFToken($_POST['csrf_token']);
validateCSRFToken();
enforceUserPermission('module_client', 2);
@@ -429,7 +429,7 @@ if (isset($_POST['bulk_edit_contact_phone'])) {
if (isset($_POST['bulk_edit_contact_department'])) {
validateCSRFToken($_POST['csrf_token']);
validateCSRFToken();
enforceUserPermission('module_client', 2);
@@ -469,7 +469,7 @@ if (isset($_POST['bulk_edit_contact_department'])) {
if (isset($_POST['bulk_edit_contact_role'])) {
validateCSRFToken($_POST['csrf_token']);
validateCSRFToken();
enforceUserPermission('module_client', 2);
@@ -513,7 +513,7 @@ if (isset($_POST['bulk_edit_contact_role'])) {
if (isset($_POST['bulk_assign_contact_tags'])) {
validateCSRFToken($_POST['csrf_token']);
validateCSRFToken();
enforceUserPermission('module_client', 2);
@@ -566,7 +566,7 @@ if (isset($_POST['bulk_assign_contact_tags'])) {
if (isset($_POST['send_bulk_mail_now'])) {
validateCSRFToken($_POST['csrf_token']);
validateCSRFToken();
enforceUserPermission('module_client');
@@ -617,7 +617,7 @@ if (isset($_POST['send_bulk_mail_now'])) {
if (isset($_POST['bulk_archive_contacts'])) {
validateCSRFToken($_POST['csrf_token']);
validateCSRFToken();
enforceUserPermission('module_client', 2);
@@ -668,7 +668,7 @@ if (isset($_POST['bulk_archive_contacts'])) {
if (isset($_POST['bulk_restore_contacts'])) {
validateCSRFToken($_POST['csrf_token']);
validateCSRFToken();
enforceUserPermission('module_client', 2);
@@ -713,7 +713,7 @@ if (isset($_POST['bulk_restore_contacts'])) {
if (isset($_POST['bulk_delete_contacts'])) {
validateCSRFToken($_POST['csrf_token']);
validateCSRFToken();
enforceUserPermission('module_client', 3);
@@ -759,7 +759,7 @@ if (isset($_POST['bulk_delete_contacts'])) {
if (isset($_GET['anonymize_contact'])) {
validateCSRFToken($_GET['csrf_token']);
validateCSRFToken();
enforceUserPermission('module_client', 3);
@@ -867,7 +867,7 @@ if (isset($_GET['anonymize_contact'])) {
if (isset($_GET['archive_contact'])) {
validateCSRFToken($_GET['csrf_token']);
validateCSRFToken();
enforceUserPermission('module_client', 2);
@@ -899,7 +899,7 @@ if (isset($_GET['archive_contact'])) {
if (isset($_GET['restore_contact'])) {
validateCSRFToken($_GET['csrf_token']);
validateCSRFToken();
enforceUserPermission('module_client', 2);
@@ -931,7 +931,7 @@ if (isset($_GET['restore_contact'])) {
if (isset($_GET['delete_contact'])) {
validateCSRFToken($_GET['csrf_token']);
validateCSRFToken();
enforceUserPermission('module_client', 3);
@@ -963,7 +963,7 @@ if (isset($_GET['delete_contact'])) {
if (isset($_POST['link_contact_to_asset'])) {
validateCSRFToken($_POST['csrf_token']);
validateCSRFToken();
enforceUserPermission('module_client', 2);
@@ -993,7 +993,7 @@ if (isset($_POST['link_contact_to_asset'])) {
if (isset($_GET['unlink_asset_from_contact'])) {
validateCSRFToken($_POST['csrf_token']);
validateCSRFToken();
enforceUserPermission('module_client', 2);
@@ -1023,7 +1023,7 @@ if (isset($_GET['unlink_asset_from_contact'])) {
if (isset($_POST['link_software_to_contact'])) {
validateCSRFToken($_POST['csrf_token']);
validateCSRFToken();
enforceUserPermission('module_client', 2);
@@ -1053,7 +1053,7 @@ if (isset($_POST['link_software_to_contact'])) {
if (isset($_GET['unlink_software_from_contact'])) {
validateCSRFToken($_POST['csrf_token']);
validateCSRFToken();
enforceUserPermission('module_client', 2);
@@ -1083,7 +1083,7 @@ if (isset($_GET['unlink_software_from_contact'])) {
if (isset($_POST['link_contact_to_credential'])) {
validateCSRFToken($_POST['csrf_token']);
validateCSRFToken();
enforceUserPermission('module_client', 2);
@@ -1113,7 +1113,7 @@ if (isset($_POST['link_contact_to_credential'])) {
if (isset($_GET['unlink_credential_from_contact'])) {
validateCSRFToken($_GET['csrf_token']);
validateCSRFToken();
enforceUserPermission('module_client', 2);
@@ -1143,7 +1143,7 @@ if (isset($_GET['unlink_credential_from_contact'])) {
if (isset($_POST['link_service_to_contact'])) {
validateCSRFToken($_POST['csrf_token']);
validateCSRFToken();
enforceUserPermission('module_client', 2);
@@ -1173,7 +1173,7 @@ if (isset($_POST['link_service_to_contact'])) {
if (isset($_GET['unlink_service_from_contact'])) {
validateCSRFToken($_GET['csrf_token']);
validateCSRFToken();
enforceUserPermission('module_client', 2);
@@ -1203,7 +1203,7 @@ if (isset($_GET['unlink_service_from_contact'])) {
if (isset($_POST['link_contact_to_file'])) {
validateCSRFToken($_POST['csrf_token']);
validateCSRFToken();
enforceUserPermission('module_client', 2);
@@ -1234,7 +1234,7 @@ if (isset($_POST['link_contact_to_file'])) {
if (isset($_GET['unlink_contact_from_file'])) {
validateCSRFToken($_GET['csrf_token']);
validateCSRFToken();
enforceUserPermission('module_client', 2);
@@ -1264,7 +1264,7 @@ if (isset($_GET['unlink_contact_from_file'])) {
if (isset($_POST['export_contacts_csv'])) {
validateCSRFToken($_POST['csrf_token']);
validateCSRFToken();
enforceUserPermission('module_client');
@@ -1322,7 +1322,7 @@ if (isset($_POST['export_contacts_csv'])) {
if (isset($_POST["import_contacts_csv"])) {
validateCSRFToken($_POST['csrf_token']);
validateCSRFToken();
enforceUserPermission('module_client', 2);

26
agent/post/credential.php
View File

@@ -8,7 +8,7 @@ defined('FROM_POST_HANDLER') || die("Direct file access is not allowed");
if (isset($_POST['add_credential'])) {
validateCSRFToken($_POST['csrf_token']);
validateCSRFToken();
enforceUserPermission('module_credential', 2);
@@ -40,7 +40,7 @@ if (isset($_POST['add_credential'])) {
if (isset($_POST['edit_credential'])) {
validateCSRFToken($_POST['csrf_token']);
validateCSRFToken();
enforceUserPermission('module_credential', 2);
@@ -85,7 +85,7 @@ if (isset($_POST['edit_credential'])) {
if(isset($_GET['archive_credential'])){
validateCSRFToken($_GET['csrf_token']);
validateCSRFToken();
enforceUserPermission('module_credential', 2);
@@ -111,7 +111,7 @@ if(isset($_GET['archive_credential'])){
if(isset($_GET['restore_credential'])){
validateCSRFToken($_GET['csrf_token']);
validateCSRFToken();
enforceUserPermission('module_credential', 2);
@@ -137,7 +137,7 @@ if(isset($_GET['restore_credential'])){
if (isset($_GET['delete_credential'])) {
validateCSRFToken($_GET['csrf_token']);
validateCSRFToken();
enforceUserPermission('module_credential', 3);
@@ -163,7 +163,7 @@ if (isset($_GET['delete_credential'])) {
if (isset($_POST['bulk_assign_credential_tags'])) {
validateCSRFToken($_POST['csrf_token']);
validateCSRFToken();
enforceUserPermission('module_credential', 2);
@@ -217,7 +217,7 @@ if (isset($_POST['bulk_assign_credential_tags'])) {
if (isset($_POST['bulk_favorite_credentials'])) {
validateCSRFToken($_POST['csrf_token']);
validateCSRFToken();
enforceUserPermission('module_support', 2);
@@ -255,7 +255,7 @@ if (isset($_POST['bulk_favorite_credentials'])) {
if (isset($_POST['bulk_unfavorite_credentials'])) {
validateCSRFToken($_POST['csrf_token']);
validateCSRFToken();
enforceUserPermission('module_support', 2);
@@ -293,7 +293,7 @@ if (isset($_POST['bulk_unfavorite_credentials'])) {
if (isset($_POST['bulk_archive_credentials'])) {
validateCSRFToken($_POST['csrf_token']);
validateCSRFToken();
enforceUserPermission('module_credential', 2);
@@ -332,7 +332,7 @@ if (isset($_POST['bulk_archive_credentials'])) {
if (isset($_POST['bulk_restore_credentials'])) {
validateCSRFToken($_POST['csrf_token']);
validateCSRFToken();
enforceUserPermission('module_credential', 2);
@@ -372,7 +372,7 @@ if (isset($_POST['bulk_restore_credentials'])) {
if (isset($_POST['bulk_delete_credentials'])) {
validateCSRFToken($_POST['csrf_token']);
validateCSRFToken();
enforceUserPermission('module_credential', 3);
@@ -412,7 +412,7 @@ if (isset($_POST['bulk_delete_credentials'])) {
if (isset($_POST['export_credentials_csv'])) {
validateCSRFToken($_POST['csrf_token']);
validateCSRFToken();
enforceUserPermission('module_credential');
@@ -472,7 +472,7 @@ if (isset($_POST['export_credentials_csv'])) {
if (isset($_POST["import_credentials_csv"])) {
validateCSRFToken($_POST['csrf_token']);
validateCSRFToken();
enforceUserPermission('module_credential', 2);

2
agent/post/credit.php
View File

@@ -8,7 +8,7 @@ defined('FROM_POST_HANDLER') || die("Direct file access is not allowed");
if (isset($_POST['add_credit'])) {
validateCSRFToken($_POST['csrf_token']);
validateCSRFToken();
enforceUserPermission('module_sales', 2);

44
agent/post/document.php
View File

@@ -8,7 +8,7 @@ defined('FROM_POST_HANDLER') || die("Direct file access is not allowed");
if (isset($_POST['add_document'])) {
validateCSRFToken($_POST['csrf_token']);
validateCSRFToken();
enforceUserPermission('module_support', 2);
@@ -55,7 +55,7 @@ if (isset($_POST['add_document'])) {
if (isset($_POST['add_document_from_template'])) {
validateCSRFToken($_POST['csrf_token']);
validateCSRFToken();
enforceUserPermission('module_support', 2);
@@ -139,7 +139,7 @@ if (isset($_POST['add_document_from_template'])) {
if (isset($_POST['edit_document'])) {
validateCSRFToken($_POST['csrf_token']);
validateCSRFToken();
enforceUserPermission('module_support', 2);
@@ -244,7 +244,7 @@ if (isset($_POST['edit_document'])) {
if (isset($_POST['move_document'])) {
validateCSRFToken($_POST['csrf_token']);
validateCSRFToken();
enforceUserPermission('module_support', 2);
@@ -277,7 +277,7 @@ if (isset($_POST['move_document'])) {
if (isset($_POST['rename_document'])) {
validateCSRFToken($_POST['csrf_token']);
validateCSRFToken();
enforceUserPermission('module_support', 2);
@@ -307,7 +307,7 @@ if (isset($_POST['rename_document'])) {
if (isset($_POST['bulk_move_document'])) {
validateCSRFToken($_POST['csrf_token']);
validateCSRFToken();
enforceUserPermission('module_support', 2);
@@ -349,7 +349,7 @@ if (isset($_POST['bulk_move_document'])) {
if (isset($_POST['link_file_to_document'])) {
validateCSRFToken($_POST['csrf_token']);
validateCSRFToken();
enforceUserPermission('module_support', 2);
@@ -380,7 +380,7 @@ if (isset($_POST['link_file_to_document'])) {
if (isset($_GET['unlink_file_from_document'])) {
validateCSRFToken($_GET['csrf_token']);
validateCSRFToken();
enforceUserPermission('module_support', 2);
@@ -410,7 +410,7 @@ if (isset($_GET['unlink_file_from_document'])) {
if (isset($_POST['link_vendor_to_document'])) {
validateCSRFToken($_POST['csrf_token']);
validateCSRFToken();
enforceUserPermission('module_support', 2);
@@ -441,7 +441,7 @@ if (isset($_POST['link_vendor_to_document'])) {
if (isset($_GET['unlink_vendor_from_document'])) {
validateCSRFToken($_GET['csrf_token']);
validateCSRFToken();
enforceUserPermission('module_support', 2);
@@ -471,7 +471,7 @@ if (isset($_GET['unlink_vendor_from_document'])) {
if (isset($_POST['link_contact_to_document'])) {
validateCSRFToken($_POST['csrf_token']);
validateCSRFToken();
enforceUserPermission('module_support', 2);
@@ -503,7 +503,7 @@ if (isset($_POST['link_contact_to_document'])) {
if (isset($_GET['unlink_contact_from_document'])) {
validateCSRFToken($_GET['csrf_token']);
validateCSRFToken();
enforceUserPermission('module_support', 2);
@@ -533,7 +533,7 @@ if (isset($_GET['unlink_contact_from_document'])) {
if (isset($_POST['link_asset_to_document'])) {
validateCSRFToken($_POST['csrf_token']);
validateCSRFToken();
enforceUserPermission('module_support', 2);
@@ -563,7 +563,7 @@ if (isset($_POST['link_asset_to_document'])) {
if (isset($_GET['unlink_asset_from_document'])) {
validateCSRFToken($_GET['csrf_token']);
validateCSRFToken();
enforceUserPermission('module_support', 2);
@@ -593,7 +593,7 @@ if (isset($_GET['unlink_asset_from_document'])) {
if (isset($_POST['link_software_to_document'])) {
validateCSRFToken($_POST['csrf_token']);
validateCSRFToken();
enforceUserPermission('module_support', 2);
@@ -624,7 +624,7 @@ if (isset($_POST['link_software_to_document'])) {
if (isset($_GET['unlink_software_from_document'])) {
validateCSRFToken($_GET['csrf_token']);
validateCSRFToken();
enforceUserPermission('module_support', 2);
@@ -654,7 +654,7 @@ if (isset($_GET['unlink_software_from_document'])) {
if (isset($_POST['toggle_document_visibility'])) {
validateCSRFToken($_POST['csrf_token']);
validateCSRFToken();
enforceUserPermission('module_support', 2);
@@ -687,7 +687,7 @@ if (isset($_POST['toggle_document_visibility'])) {
if (isset($_GET['export_document'])) {
validateCSRFToken($_GET['csrf_token']);
validateCSRFToken();
enforceUserPermission('module_support', 2);
@@ -735,7 +735,7 @@ if (isset($_GET['export_document'])) {
if (isset($_GET['archive_document'])) {
validateCSRFToken($_GET['csrf_token']);
validateCSRFToken();
enforceUserPermission('module_support', 2);
@@ -780,7 +780,7 @@ if (isset($_GET['archive_document'])) {
if (isset($_GET['restore_document'])) {
validateCSRFToken($_GET['csrf_token']);
validateCSRFToken();
enforceUserPermission('module_support', 2);
@@ -806,7 +806,7 @@ if (isset($_GET['restore_document'])) {
if (isset($_GET['delete_document_version'])) {
validateCSRFToken($_GET['csrf_token']);
validateCSRFToken();
enforceUserPermission('module_support', 3);
@@ -832,7 +832,7 @@ if (isset($_GET['delete_document_version'])) {
if (isset($_GET['delete_document'])) {
validateCSRFToken($_GET['csrf_token']);
validateCSRFToken();
enforceUserPermission('module_support', 3);

22
agent/post/domain.php
View File

@@ -8,7 +8,7 @@ defined('FROM_POST_HANDLER') || die("Direct file access is not allowed");
if (isset($_POST['add_domain'])) {
validateCSRFToken($_POST['csrf_token']);
validateCSRFToken();
enforceUserPermission('module_support', 2);
@@ -66,7 +66,7 @@ if (isset($_POST['add_domain'])) {
if (isset($_POST['edit_domain'])) {
validateCSRFToken($_POST['csrf_token']);
validateCSRFToken();
enforceUserPermission('module_support', 2);
@@ -158,7 +158,7 @@ if (isset($_POST['edit_domain'])) {
if (isset($_GET['refresh_domain'])) {
validateCSRFToken($_GET['csrf_token']);
validateCSRFToken();
enforceUserPermission('module_support', 2);
@@ -200,7 +200,7 @@ if (isset($_GET['refresh_domain'])) {
if (isset($_GET['archive_domain'])) {
validateCSRFToken($_GET['csrf_token']);
validateCSRFToken();
enforceUserPermission('module_support', 2);
@@ -226,7 +226,7 @@ if (isset($_GET['archive_domain'])) {
if(isset($_GET['restore_domain'])){
validateCSRFToken($_GET['csrf_token']);
validateCSRFToken();
enforceUserPermission('module_support', 2);
@@ -252,7 +252,7 @@ if(isset($_GET['restore_domain'])){
if (isset($_GET['delete_domain'])) {
validateCSRFToken($_GET['csrf_token']);
validateCSRFToken();
enforceUserPermission('module_support', 3);
@@ -278,7 +278,7 @@ if (isset($_GET['delete_domain'])) {
if (isset($_POST['bulk_archive_domains'])) {
validateCSRFToken($_POST['csrf_token']);
validateCSRFToken();
enforceUserPermission('module_support', 3);
@@ -317,7 +317,7 @@ if (isset($_POST['bulk_archive_domains'])) {
if (isset($_POST['bulk_restore_domains'])) {
validateCSRFToken($_POST['csrf_token']);
validateCSRFToken();
enforceUserPermission('module_support', 2);
@@ -357,7 +357,7 @@ if (isset($_POST['bulk_restore_domains'])) {
if (isset($_POST['bulk_delete_domains'])) {
validateCSRFToken($_POST['csrf_token']);
validateCSRFToken();
enforceUserPermission('module_support', 3);
@@ -396,7 +396,7 @@ if (isset($_POST['bulk_delete_domains'])) {
if (isset($_POST['bulk_refresh_domains'])) {
validateCSRFToken($_POST['csrf_token']);
validateCSRFToken();
enforceUserPermission('module_support', 2);
@@ -457,7 +457,7 @@ if (isset($_POST['bulk_refresh_domains'])) {
if (isset($_POST['export_domains_csv'])) {
validateCSRFToken($_POST['csrf_token']);
validateCSRFToken();
enforceUserPermission('module_support');

12
agent/post/event.php
View File

@@ -8,7 +8,7 @@ defined('FROM_POST_HANDLER') || die("Direct file access is not allowed");
if (isset($_POST['add_calendar'])) {
validateCSRFToken($_POST['csrf_token']);
validateCSRFToken();
$name = escapeSql($_POST['name']);
$color = escapeSql($_POST['color']);
@@ -27,7 +27,7 @@ if (isset($_POST['add_calendar'])) {
if (isset($_POST['edit_calendar'])) {
validateCSRFToken($_POST['csrf_token']);
validateCSRFToken();
$calendar_id = intval($_POST['calendar_id']);
$name = escapeSql($_POST['name']);
@@ -45,7 +45,7 @@ if (isset($_POST['edit_calendar'])) {
if (isset($_GET['delete_calendar'])) {
validateCSRFToken($_GET['csrf_token']);
validateCSRFToken();
$calendar_id = intval($_GET['delete_calendar']);
@@ -70,7 +70,7 @@ if (isset($_GET['delete_calendar'])) {
if (isset($_POST['add_event'])) {
validateCSRFToken($_POST['csrf_token']);
validateCSRFToken();
require_once 'event_model.php';
@@ -147,7 +147,7 @@ if (isset($_POST['add_event'])) {
if (isset($_POST['edit_event'])) {
validateCSRFToken($_POST['csrf_token']);
validateCSRFToken();
require_once 'event_model.php';
@@ -221,7 +221,7 @@ if (isset($_POST['edit_event'])) {
if (isset($_GET['delete_event'])) {
validateCSRFToken($_GET['csrf_token']);
validateCSRFToken();
$event_id = intval($_GET['delete_event']);

16
agent/post/expense.php
View File

@@ -8,7 +8,7 @@ defined('FROM_POST_HANDLER') || die("Direct file access is not allowed");
if (isset($_POST['add_expense'])) {
validateCSRFToken($_POST['csrf_token']);
validateCSRFToken();
enforceUserPermission('module_financial', 2);
@@ -51,7 +51,7 @@ if (isset($_POST['add_expense'])) {
if (isset($_POST['edit_expense'])) {
validateCSRFToken($_POST['csrf_token']);
validateCSRFToken();
enforceUserPermission('module_financial', 2);
@@ -98,7 +98,7 @@ if (isset($_POST['edit_expense'])) {
if (isset($_GET['delete_expense'])) {
validateCSRFToken($_GET['csrf_token']);
validateCSRFToken();
enforceUserPermission('module_financial', 3);
@@ -128,7 +128,7 @@ if (isset($_GET['delete_expense'])) {
if (isset($_POST['bulk_edit_expense_category'])) {
validateCSRFToken($_POST['csrf_token']);
validateCSRFToken();
enforceUserPermission('module_financial', 2);
@@ -173,7 +173,7 @@ if (isset($_POST['bulk_edit_expense_category'])) {
if (isset($_POST['bulk_edit_expense_account'])) {
validateCSRFToken($_POST['csrf_token']);
validateCSRFToken();
enforceUserPermission('module_financial', 2);
@@ -218,7 +218,7 @@ if (isset($_POST['bulk_edit_expense_account'])) {
if (isset($_POST['bulk_edit_expense_client'])) {
validateCSRFToken($_POST['csrf_token']);
validateCSRFToken();
enforceUserPermission('module_financial', 2);
@@ -256,7 +256,7 @@ if (isset($_POST['bulk_edit_expense_client'])) {
if (isset($_POST['bulk_delete_expenses'])) {
validateCSRFToken($_POST['csrf_token']);
validateCSRFToken();
enforceUserPermission('module_financial', 3);
@@ -300,7 +300,7 @@ if (isset($_POST['bulk_delete_expenses'])) {
if (isset($_POST['export_expenses_csv'])) {
validateCSRFToken($_POST['csrf_token']);
validateCSRFToken();
enforceUserPermission('module_financial');

24
agent/post/file.php
View File

@@ -8,7 +8,7 @@ defined('FROM_POST_HANDLER') || die("Direct file access is not allowed");
if (isset($_POST['upload_files'])) {
validateCSRFToken($_POST['csrf_token']);
validateCSRFToken();
enforceUserPermission('module_support', 2);
@@ -105,7 +105,7 @@ if (isset($_POST['upload_files'])) {
if (isset($_POST['rename_file'])) {
validateCSRFToken($_POST['csrf_token']);
validateCSRFToken();
enforceUserPermission('module_support', 2);
@@ -134,7 +134,7 @@ if (isset($_POST['rename_file'])) {
if (isset($_POST['move_file'])) {
validateCSRFToken($_POST['csrf_token']);
validateCSRFToken();
enforceUserPermission('module_support', 2);
@@ -164,7 +164,7 @@ if (isset($_POST['move_file'])) {
if (isset($_GET['archive_file'])) {
validateCSRFToken($_GET['csrf_token']);
validateCSRFToken();
enforceUserPermission('module_support', 2);
@@ -190,7 +190,7 @@ if (isset($_GET['archive_file'])) {
if (isset($_GET['restore_file'])) {
validateCSRFToken($_GET['csrf_token']);
validateCSRFToken();
enforceUserPermission('module_support', 2);
@@ -216,7 +216,7 @@ if (isset($_GET['restore_file'])) {
if (isset($_POST['delete_file'])) {
validateCSRFToken($_POST['csrf_token']);
validateCSRFToken();
enforceUserPermission('module_support', 3);
@@ -253,7 +253,7 @@ if (isset($_POST['delete_file'])) {
if (isset($_POST['bulk_archive_files'])) {
validateCSRFToken($_POST['csrf_token']);
validateCSRFToken();
enforceUserPermission('module_support', 2);
@@ -316,7 +316,7 @@ if (isset($_POST['bulk_archive_files'])) {
if (isset($_POST['bulk_delete_files'])) {
validateCSRFToken($_POST['csrf_token']);
validateCSRFToken();
enforceUserPermission('module_support', 3);
@@ -397,7 +397,7 @@ if (isset($_POST['bulk_delete_files'])) {
if (isset($_POST['bulk_restore_files'])) {
validateCSRFToken($_POST['csrf_token']);
validateCSRFToken();
enforceUserPermission('module_support', 2);
@@ -461,7 +461,7 @@ if (isset($_POST['bulk_restore_files'])) {
// Unified bulk move for Files + Documents
if (isset($_POST['bulk_move_files'])) {
validateCSRFToken($_POST['csrf_token']);
validateCSRFToken();
enforceUserPermission('module_support', 2);
@@ -578,7 +578,7 @@ if (isset($_POST['bulk_move_files'])) {
if (isset($_POST['link_asset_to_file'])) {
validateCSRFToken($_POST['csrf_token']);
validateCSRFToken();
enforceUserPermission('module_support', 2);
@@ -609,7 +609,7 @@ if (isset($_POST['link_asset_to_file'])) {
if (isset($_GET['unlink_asset_from_file'])) {
validateCSRFToken($_GET['csrf_token']);
validateCSRFToken();
enforceUserPermission('module_support', 2);

6
agent/post/folder.php
View File

@@ -8,7 +8,7 @@ defined('FROM_POST_HANDLER') || die("Direct file access is not allowed");
if (isset($_POST['create_folder'])) {
validateCSRFToken($_POST['csrf_token']);
validateCSRFToken();
enforceUserPermission('module_support', 2);
@@ -33,7 +33,7 @@ if (isset($_POST['create_folder'])) {
if (isset($_POST['rename_folder'])) {
validateCSRFToken($_POST['csrf_token']);
validateCSRFToken();
enforceUserPermission('module_support', 2);
@@ -61,7 +61,7 @@ if (isset($_POST['rename_folder'])) {
if (isset($_GET['delete_folder'])) {
validateCSRFToken($_GET['csrf_token']);
validateCSRFToken();
enforceUserPermission('module_support', 3);

36
agent/post/invoice.php
View File

@@ -8,7 +8,7 @@ defined('FROM_POST_HANDLER') || die("Direct file access is not allowed");
if (isset($_POST['add_invoice'])) {
validateCSRFToken($_POST['csrf_token']);
validateCSRFToken();
enforceUserPermission('module_sales', 2);
@@ -55,7 +55,7 @@ if (isset($_POST['add_invoice'])) {
if (isset($_POST['edit_invoice'])) {
validateCSRFToken($_POST['csrf_token']);
validateCSRFToken();
enforceUserPermission('module_sales', 2);
@@ -95,7 +95,7 @@ if (isset($_POST['edit_invoice'])) {
if (isset($_POST['add_invoice_copy'])) {
validateCSRFToken($_POST['csrf_token']);
validateCSRFToken();
enforceUserPermission('module_sales', 2);
@@ -166,7 +166,7 @@ if (isset($_POST['add_invoice_copy'])) {
if (isset($_GET['mark_invoice_sent'])) {
validateCSRFToken($_GET['csrf_token']);
validateCSRFToken();
enforceUserPermission('module_sales', 2);
@@ -195,7 +195,7 @@ if (isset($_GET['mark_invoice_sent'])) {
if (isset($_GET['mark_invoice_non-billable'])) {
validateCSRFToken($_GET['csrf_token']);
validateCSRFToken();
enforceUserPermission('module_sales', 2);
@@ -224,7 +224,7 @@ if (isset($_GET['mark_invoice_non-billable'])) {
if (isset($_GET['cancel_invoice'])) {
validateCSRFToken($_GET['csrf_token']);
validateCSRFToken();
enforceUserPermission('module_sales', 2);
@@ -253,7 +253,7 @@ if (isset($_GET['cancel_invoice'])) {
if (isset($_GET['delete_invoice'])) {
validateCSRFToken($_GET['csrf_token']);
validateCSRFToken();
enforceUserPermission('module_sales', 3);
@@ -304,7 +304,7 @@ if (isset($_GET['delete_invoice'])) {
if (isset($_POST['add_invoice_item'])) {
validateCSRFToken($_POST['csrf_token']);
validateCSRFToken();
enforceUserPermission('module_sales', 2);
@@ -392,7 +392,7 @@ if (isset($_POST['add_invoice_item'])) {
if (isset($_POST['invoice_note'])) {
validateCSRFToken($_POST['csrf_token']);
validateCSRFToken();
enforceUserPermission('module_sales', 2);
@@ -420,7 +420,7 @@ if (isset($_POST['invoice_note'])) {
if (isset($_POST['edit_invoice_item'])) {
validateCSRFToken($_POST['csrf_token']);
validateCSRFToken();
enforceUserPermission('module_sales', 2);
@@ -479,7 +479,7 @@ if (isset($_POST['edit_invoice_item'])) {
if (isset($_GET['delete_invoice_item'])) {
validateCSRFToken($_GET['csrf_token']);
validateCSRFToken();
enforceUserPermission('module_sales', 2);
@@ -524,7 +524,7 @@ if (isset($_GET['delete_invoice_item'])) {
if (isset($_GET['email_invoice'])) {
validateCSRFToken($_GET['csrf_token']);
validateCSRFToken();
enforceUserPermission('module_sales', 2);
@@ -652,7 +652,7 @@ if (isset($_GET['email_invoice'])) {
if (isset($_POST['export_invoices_csv'])) {
validateCSRFToken($_POST['csrf_token']);
validateCSRFToken();
enforceUserPermission('module_sales');
@@ -720,7 +720,7 @@ if (isset($_POST['export_invoices_csv'])) {
if (isset($_POST['link_invoice_to_ticket'])) {
validateCSRFToken($_POST['csrf_token']);
validateCSRFToken();
enforceUserPermission('module_sales', 2);
@@ -741,7 +741,7 @@ if (isset($_POST['link_invoice_to_ticket'])) {
if (isset($_POST['add_ticket_to_invoice'])) {
validateCSRFToken($_POST['csrf_token']);
validateCSRFToken();
enforceUserPermission('module_sales', 2);
@@ -762,7 +762,7 @@ if (isset($_POST['add_ticket_to_invoice'])) {
if (isset($_GET['export_invoice_pdf'])) {
validateCSRFToken($_GET['csrf_token']);
validateCSRFToken();
enforceUserPermission('module_sales');
@@ -991,7 +991,7 @@ if (isset($_GET['export_invoice_pdf'])) {
if (isset($_GET['export_invoice_packing_slip'])) {
validateCSRFToken($_GET['csrf_token']);
validateCSRFToken();
enforceUserPermission('module_sales');
@@ -1138,7 +1138,7 @@ if (isset($_GET['export_invoice_packing_slip'])) {
if (isset($_POST['bulk_edit_invoice_category'])) {
validateCSRFToken($_POST['csrf_token']);
validateCSRFToken();
enforceUserPermission('module_sales', 2);

22
agent/post/location.php
View File

@@ -8,7 +8,7 @@ defined('FROM_POST_HANDLER') || die("Direct file access is not allowed");
if(isset($_POST['add_location'])){
validateCSRFToken($_POST['csrf_token']);
validateCSRFToken();
enforceUserPermission('module_client', 2);
@@ -66,7 +66,7 @@ if(isset($_POST['add_location'])){
if(isset($_POST['edit_location'])){
validateCSRFToken($_POST['csrf_token']);
validateCSRFToken();
enforceUserPermission('module_client', 2);
@@ -133,7 +133,7 @@ if(isset($_POST['edit_location'])){
if(isset($_GET['archive_location'])){
validateCSRFToken($_GET['csrf_token']);
validateCSRFToken();
enforceUserPermission('module_client', 2);
@@ -159,7 +159,7 @@ if(isset($_GET['archive_location'])){
if(isset($_GET['restore_location'])){
validateCSRFToken($_GET['csrf_token']);
validateCSRFToken();
enforceUserPermission('module_client', 2);
@@ -185,7 +185,7 @@ if(isset($_GET['restore_location'])){
if(isset($_GET['delete_location'])){
validateCSRFToken($_GET['csrf_token']);
validateCSRFToken();
enforceUserPermission('module_client', 3);
@@ -211,7 +211,7 @@ if(isset($_GET['delete_location'])){
if (isset($_POST['bulk_assign_location_tags'])) {
validateCSRFToken($_POST['csrf_token']);
validateCSRFToken();
enforceUserPermission('module_client', 2);
@@ -265,7 +265,7 @@ if (isset($_POST['bulk_assign_location_tags'])) {
if (isset($_POST['bulk_archive_locations'])) {
validateCSRFToken($_POST['csrf_token']);
validateCSRFToken();
enforceUserPermission('module_client', 2);
@@ -310,7 +310,7 @@ if (isset($_POST['bulk_archive_locations'])) {
if (isset($_POST['bulk_restore_locations'])) {
validateCSRFToken($_POST['csrf_token']);
validateCSRFToken();
enforceUserPermission('module_client', 2);
@@ -350,7 +350,7 @@ if (isset($_POST['bulk_restore_locations'])) {
if (isset($_POST['bulk_delete_locations'])) {
validateCSRFToken($_POST['csrf_token']);
validateCSRFToken();
enforceUserPermission('module_client', 3);
@@ -390,7 +390,7 @@ if (isset($_POST['bulk_delete_locations'])) {
if(isset($_POST['export_locations_csv'])){
validateCSRFToken($_POST['csrf_token']);
validateCSRFToken();
enforceUserPermission('module_client');
@@ -448,7 +448,7 @@ if(isset($_POST['export_locations_csv'])){
if (isset($_POST["import_locations_csv"])) {
validateCSRFToken($_POST['csrf_token']);
validateCSRFToken();
enforceUserPermission('module_client', 2);

16
agent/post/network.php
View File

@@ -8,7 +8,7 @@ defined('FROM_POST_HANDLER') || die("Direct file access is not allowed");
if (isset($_POST['add_network'])) {
validateCSRFToken($_POST['csrf_token']);
validateCSRFToken();
enforceUserPermission('module_support', 2);
@@ -32,7 +32,7 @@ if (isset($_POST['add_network'])) {
if (isset($_POST['edit_network'])) {
validateCSRFToken($_POST['csrf_token']);
validateCSRFToken();
enforceUserPermission('module_support', 2);
@@ -56,7 +56,7 @@ if (isset($_POST['edit_network'])) {
if (isset($_GET['archive_network'])) {
validateCSRFToken($_GET['csrf_token']);
validateCSRFToken();
enforceUserPermission('module_support', 2);
@@ -82,7 +82,7 @@ if (isset($_GET['archive_network'])) {
if (isset($_GET['restore_network'])) {
validateCSRFToken($_GET['csrf_token']);
validateCSRFToken();
enforceUserPermission('module_support', 2);
@@ -108,7 +108,7 @@ if (isset($_GET['restore_network'])) {
if (isset($_GET['delete_network'])) {
validateCSRFToken($_GET['csrf_token']);
validateCSRFToken();
enforceUserPermission('module_support', 3);
@@ -134,7 +134,7 @@ if (isset($_GET['delete_network'])) {
if (isset($_POST['bulk_delete_networks'])) {
validateCSRFToken($_POST['csrf_token']);
validateCSRFToken();
enforceUserPermission('module_support', 3);
@@ -174,7 +174,7 @@ if (isset($_POST['bulk_delete_networks'])) {
if (isset($_POST['export_networks_csv'])) {
validateCSRFToken($_POST['csrf_token']);
validateCSRFToken();
enforceUserPermission('module_support');
@@ -271,7 +271,7 @@ if (isset($_GET['download_networks_csv_template'])) {
// ----------------------------------------------------------
if (isset($_POST['import_networks_csv'])) {
validateCSRFToken($_POST['csrf_token']);
validateCSRFToken();
enforceUserPermission('module_support', 2);

14
agent/post/payment.php
View File

@@ -8,7 +8,7 @@ defined('FROM_POST_HANDLER') || die("Direct file access is not allowed");
if (isset($_POST['add_payment'])) {
validateCSRFToken($_POST['csrf_token']);
validateCSRFToken();
enforceUserPermission('module_sales', 2);
enforceUserPermission('module_financial', 2);
@@ -178,7 +178,7 @@ if (isset($_POST['add_payment'])) {
if (isset($_POST['edit_payment'])) {
validateCSRFToken($_POST['csrf_token']);
validateCSRFToken();
enforceUserPermission('module_sales', 3);
enforceUserPermission('module_financial', 3);
@@ -209,7 +209,7 @@ Apply Credit Not ready for use 2025-08-27 - JQ
if (isset($_POST['apply_credit'])) {
validateCSRFToken($_POST['csrf_token']);
validateCSRFToken();
enforceUserPermission('module_sales', 2);
enforceUserPermission('module_financial', 2);
@@ -319,7 +319,7 @@ if (isset($_POST['apply_credit'])) {
if (isset($_POST['add_payment_stripe'])) {
validateCSRFToken($_POST['csrf_token']);
validateCSRFToken();
enforceUserPermission('module_sales', 2);
enforceUserPermission('module_financial', 2);
@@ -506,7 +506,7 @@ if (isset($_POST['add_payment_stripe'])) {
if (isset($_POST['add_bulk_payment'])) {
validateCSRFToken($_POST['csrf_token']);
validateCSRFToken();
enforceUserPermission('module_sales', 2);
enforceUserPermission('module_financial', 2);
@@ -642,7 +642,7 @@ if (isset($_POST['add_bulk_payment'])) {
if (isset($_GET['delete_payment'])) {
validateCSRFToken($_GET['csrf_token']);
validateCSRFToken();
enforceUserPermission('module_sales', 2);
enforceUserPermission('module_financial', 2);
@@ -700,7 +700,7 @@ if (isset($_GET['delete_payment'])) {
if (isset($_POST['export_payments_csv'])) {
validateCSRFToken($_POST['csrf_token']);
validateCSRFToken();
enforceUserPermission('module_financial');

22
agent/post/product.php
View File

@@ -8,7 +8,7 @@ defined('FROM_POST_HANDLER') || die("Direct file access is not allowed");
if (isset($_POST['add_product'])) {
validateCSRFToken($_POST['csrf_token']);
validateCSRFToken();
enforceUserPermission('module_sales', 2);
@@ -29,7 +29,7 @@ if (isset($_POST['add_product'])) {
if (isset($_POST['edit_product'])) {
validateCSRFToken($_POST['csrf_token']);
validateCSRFToken();
enforceUserPermission('module_sales', 2);
@@ -49,7 +49,7 @@ if (isset($_POST['edit_product'])) {
if (isset($_GET['archive_product'])) {
validateCSRFToken($_GET['csrf_token']);
validateCSRFToken();
enforceUserPermission('module_sales', 2);
@@ -69,7 +69,7 @@ if (isset($_GET['archive_product'])) {
if (isset($_GET['restore_product'])) {
validateCSRFToken($_GET['csrf_token']);
validateCSRFToken();
enforceUserPermission('module_sales', 2);
@@ -89,7 +89,7 @@ if (isset($_GET['restore_product'])) {
if (isset($_GET['delete_product'])) {
validateCSRFToken($_GET['csrf_token']);
validateCSRFToken();
enforceUserPermission('module_sales', 3);
@@ -110,7 +110,7 @@ if (isset($_GET['delete_product'])) {
if (isset($_POST['bulk_edit_product_category'])) {
validateCSRFToken($_POST['csrf_token']);
validateCSRFToken();
enforceUserPermission('module_sales', 2);
@@ -148,7 +148,7 @@ if (isset($_POST['bulk_edit_product_category'])) {
if (isset($_POST['bulk_archive_products'])) {
validateCSRFToken($_POST['csrf_token']);
validateCSRFToken();
enforceUserPermission('module_sales', 2);
@@ -180,7 +180,7 @@ if (isset($_POST['bulk_archive_products'])) {
if (isset($_POST['bulk_restore_products'])) {
validateCSRFToken($_POST['csrf_token']);
validateCSRFToken();
enforceUserPermission('module_sales', 2);
@@ -213,7 +213,7 @@ if (isset($_POST['bulk_restore_products'])) {
if (isset($_POST['bulk_delete_products'])) {
validateCSRFToken($_POST['csrf_token']);
validateCSRFToken();
enforceUserPermission('module_sales', 3);
@@ -246,7 +246,7 @@ if (isset($_POST['bulk_delete_products'])) {
if (isset($_POST['export_products_csv'])) {
validateCSRFToken($_POST['csrf_token']);
validateCSRFToken();
//get records from database
$sql = mysqli_query($mysqli,"SELECT * FROM products
@@ -295,7 +295,7 @@ if (isset($_POST['export_products_csv'])) {
if (isset($_POST['add_product_stock'])) {
validateCSRFToken($_POST['csrf_token']);
validateCSRFToken();
enforceUserPermission('module_sales', 2);

16
agent/post/project.php
View File

@@ -8,7 +8,7 @@ defined('FROM_POST_HANDLER') || die("Direct file access is not allowed");
if (isset($_POST['add_project'])) {
validateCSRFToken($_POST['csrf_token']);
validateCSRFToken();
enforceUserPermission('module_support', 2);
@@ -96,7 +96,7 @@ if (isset($_POST['add_project'])) {
if (isset($_POST['edit_project'])) {
validateCSRFToken($_POST['csrf_token']);
validateCSRFToken();
enforceUserPermission('module_support', 2);
@@ -125,7 +125,7 @@ if (isset($_POST['edit_project'])) {
if (isset($_GET['close_project'])) {
validateCSRFToken($_GET['csrf_token']);
validateCSRFToken();
enforceUserPermission('module_support', 2);
@@ -154,7 +154,7 @@ if (isset($_GET['close_project'])) {
if (isset($_GET['archive_project'])) {
validateCSRFToken($_GET['csrf_token']);
validateCSRFToken();
enforceUserPermission('module_support', 2);
@@ -183,7 +183,7 @@ if (isset($_GET['archive_project'])) {
if (isset($_GET['restore_project'])) {
validateCSRFToken($_GET['csrf_token']);
validateCSRFToken();
enforceUserPermission('module_support', 2);
@@ -212,7 +212,7 @@ if (isset($_GET['restore_project'])) {
if (isset($_GET['delete_project'])) {
validateCSRFToken($_GET['csrf_token']);
validateCSRFToken();
enforceUserPermission('module_support', 3);
@@ -241,7 +241,7 @@ if (isset($_GET['delete_project'])) {
if (isset($_POST['link_ticket_to_project'])) {
validateCSRFToken($_POST['csrf_token']);
validateCSRFToken();
enforceUserPermission('module_support', 2);
@@ -291,7 +291,7 @@ if (isset($_POST['link_ticket_to_project'])) {
if (isset($_POST['link_closed_ticket_to_project'])) {
validateCSRFToken($_POST['csrf_token']);
validateCSRFToken();
enforceUserPermission('module_support', 2);

32
agent/post/quote.php
View File

@@ -8,7 +8,7 @@ defined('FROM_POST_HANDLER') || die("Direct file access is not allowed");
if (isset($_POST['add_quote'])) {
validateCSRFToken($_POST['csrf_token']);
validateCSRFToken();
enforceUserPermission('module_sales', 2);
@@ -50,7 +50,7 @@ if (isset($_POST['add_quote'])) {
if (isset($_POST['add_quote_copy'])) {
validateCSRFToken($_POST['csrf_token']);
validateCSRFToken();
enforceUserPermission('module_sales', 2);
@@ -127,7 +127,7 @@ if (isset($_POST['add_quote_copy'])) {
if (isset($_POST['add_quote_to_invoice'])) {
validateCSRFToken($_POST['csrf_token']);
validateCSRFToken();
enforceUserPermission('module_sales', 2);
@@ -220,7 +220,7 @@ if (isset($_POST['add_quote_to_invoice'])) {
if (isset($_POST['add_quote_item'])) {
validateCSRFToken($_POST['csrf_token']);
validateCSRFToken();
enforceUserPermission('module_sales', 2);
@@ -280,7 +280,7 @@ if (isset($_POST['add_quote_item'])) {
if (isset($_POST['edit_quote_item'])) {
validateCSRFToken($_POST['csrf_token']);
validateCSRFToken();
enforceUserPermission('module_sales', 2);
@@ -339,7 +339,7 @@ if (isset($_POST['edit_quote_item'])) {
if (isset($_POST['quote_note'])) {
validateCSRFToken($_POST['csrf_token']);
validateCSRFToken();
enforceUserPermission('module_sales', 2);
@@ -367,7 +367,7 @@ if (isset($_POST['quote_note'])) {
if (isset($_POST['edit_quote'])) {
validateCSRFToken($_POST['csrf_token']);
validateCSRFToken();
enforceUserPermission('module_sales', 2);
@@ -405,7 +405,7 @@ if (isset($_POST['edit_quote'])) {
if (isset($_GET['delete_quote'])) {
validateCSRFToken($_GET['csrf_token']);
validateCSRFToken();
enforceUserPermission('module_sales', 3);
@@ -451,7 +451,7 @@ if (isset($_GET['delete_quote'])) {
if (isset($_GET['delete_quote_item'])) {
validateCSRFToken($_GET['csrf_token']);
validateCSRFToken();
enforceUserPermission('module_sales', 2);
@@ -489,7 +489,7 @@ if (isset($_GET['delete_quote_item'])) {
if (isset($_GET['mark_quote_sent'])) {
validateCSRFToken($_GET['csrf_token']);
validateCSRFToken();
enforceUserPermission('module_sales', 2);
@@ -517,7 +517,7 @@ if (isset($_GET['mark_quote_sent'])) {
if (isset($_GET['accept_quote'])) {
validateCSRFToken($_GET['csrf_token']);
validateCSRFToken();
enforceUserPermission('module_sales', 2);
@@ -547,7 +547,7 @@ if (isset($_GET['accept_quote'])) {
if (isset($_GET['decline_quote'])) {
validateCSRFToken($_GET['csrf_token']);
validateCSRFToken();
enforceUserPermission('module_sales', 2);
@@ -577,7 +577,7 @@ if (isset($_GET['decline_quote'])) {
if (isset($_GET['email_quote'])) {
validateCSRFToken($_GET['csrf_token']);
validateCSRFToken();
enforceUserPermission('module_sales', 2);
@@ -659,7 +659,7 @@ if (isset($_GET['email_quote'])) {
if (isset($_GET['mark_quote_invoiced'])) {
validateCSRFToken($_GET['csrf_token']);
validateCSRFToken();
enforceUserPermission('module_sales', 2);
@@ -687,7 +687,7 @@ if (isset($_GET['mark_quote_invoiced'])) {
if(isset($_POST['export_quotes_csv'])){
validateCSRFToken($_POST['csrf_token']);
validateCSRFToken();
enforceUserPermission('module_sales');
@@ -748,7 +748,7 @@ if(isset($_POST['export_quotes_csv'])){
if (isset($_GET['export_quote_pdf'])) {
validateCSRFToken($_GET['csrf_token']);
validateCSRFToken();
enforceUserPermission('module_sales');

16
agent/post/rack.php
View File

@@ -8,7 +8,7 @@ defined('FROM_POST_HANDLER') || die("Direct file access is not allowed");
if (isset($_POST['add_rack'])) {
validateCSRFToken($_POST['csrf_token']);
validateCSRFToken();
enforceUserPermission('module_support', 2);
@@ -55,7 +55,7 @@ if (isset($_POST['add_rack'])) {
if (isset($_POST['edit_rack'])) {
validateCSRFToken($_POST['csrf_token']);
validateCSRFToken();
enforceUserPermission('module_support', 2);
@@ -102,7 +102,7 @@ if (isset($_POST['edit_rack'])) {
if (isset($_GET['archive_rack'])) {
validateCSRFToken($_GET['csrf_token']);
validateCSRFToken();
enforceUserPermission('module_support', 2);
@@ -128,7 +128,7 @@ if (isset($_GET['archive_rack'])) {
if (isset($_GET['restore_rack'])) {
validateCSRFToken($_GET['csrf_token']);
validateCSRFToken();
enforceUserPermission('module_support', 2);
@@ -154,7 +154,7 @@ if (isset($_GET['restore_rack'])) {
if (isset($_GET['delete_rack'])) {
validateCSRFToken($_GET['csrf_token']);
validateCSRFToken();
enforceUserPermission('module_support', 3);
@@ -186,7 +186,7 @@ if (isset($_GET['delete_rack'])) {
if (isset($_POST['add_rack_unit'])) {
validateCSRFToken($_POST['csrf_token']);
validateCSRFToken();
enforceUserPermission('module_support', 2);
@@ -234,7 +234,7 @@ if (isset($_POST['add_rack_unit'])) {
if (isset($_POST['edit_rack_unit'])) {
validateCSRFToken($_POST['csrf_token']);
validateCSRFToken();
enforceUserPermission('module_support', 2);
@@ -265,7 +265,7 @@ if (isset($_POST['edit_rack_unit'])) {
if (isset($_GET['remove_rack_unit'])) {
validateCSRFToken($_GET['csrf_token']);
validateCSRFToken();
enforceUserPermission('module_support', 2);

6
agent/post/recurring_expense.php
View File

@@ -8,7 +8,7 @@ defined('FROM_POST_HANDLER') || die("Direct file access is not allowed");
if (isset($_POST['create_recurring_expense'])) {
validateCSRFToken($_POST['csrf_token']);
validateCSRFToken();
enforceUserPermission('module_financial', 2);
@@ -43,7 +43,7 @@ if (isset($_POST['create_recurring_expense'])) {
if (isset($_POST['edit_recurring_expense'])) {
validateCSRFToken($_POST['csrf_token']);
validateCSRFToken();
enforceUserPermission('module_financial', 2);
@@ -77,7 +77,7 @@ if (isset($_POST['edit_recurring_expense'])) {
if (isset($_GET['delete_recurring_expense'])) {
validateCSRFToken($_GET['csrf_token']);
validateCSRFToken();
enforceUserPermission('module_financial', 2);

24
agent/post/recurring_invoice.php
View File

@@ -8,7 +8,7 @@ defined('FROM_POST_HANDLER') || die("Direct file access is not allowed");
if (isset($_POST['add_invoice_recurring'])) {
validateCSRFToken($_POST['csrf_token']);
validateCSRFToken();
enforceUserPermission('module_sales', 2);
@@ -72,7 +72,7 @@ if (isset($_POST['add_invoice_recurring'])) {
if (isset($_POST['add_recurring_invoice'])) {
validateCSRFToken($_POST['csrf_token']);
validateCSRFToken();
enforceUserPermission('module_sales', 2);
@@ -111,7 +111,7 @@ if (isset($_POST['add_recurring_invoice'])) {
if (isset($_POST['edit_recurring_invoice'])) {
validateCSRFToken($_POST['csrf_token']);
validateCSRFToken();
enforceUserPermission('module_sales', 2);
@@ -155,7 +155,7 @@ if (isset($_POST['edit_recurring_invoice'])) {
if (isset($_GET['delete_recurring_invoice'])) {
validateCSRFToken($_GET['csrf_token']);
validateCSRFToken();
enforceUserPermission('module_sales', 3);
@@ -197,7 +197,7 @@ if (isset($_GET['delete_recurring_invoice'])) {
if (isset($_POST['add_recurring_invoice_item'])) {
validateCSRFToken($_POST['csrf_token']);
validateCSRFToken();
enforceUserPermission('module_sales', 2);
@@ -257,7 +257,7 @@ if (isset($_POST['add_recurring_invoice_item'])) {
if (isset($_POST['edit_recurring_invoice_item'])) {
validateCSRFToken($_POST['csrf_token']);
validateCSRFToken();
enforceUserPermission('module_sales', 2);
@@ -317,7 +317,7 @@ if (isset($_POST['edit_recurring_invoice_item'])) {
if (isset($_POST['recurring_invoice_note'])) {
validateCSRFToken($_POST['csrf_token']);
validateCSRFToken();
enforceUserPermission('module_sales', 2);
@@ -345,7 +345,7 @@ if (isset($_POST['recurring_invoice_note'])) {
if (isset($_GET['delete_recurring_invoice_item'])) {
validateCSRFToken($_GET['csrf_token']);
validateCSRFToken();
enforceUserPermission('module_sales', 2);
@@ -383,7 +383,7 @@ if (isset($_GET['delete_recurring_invoice_item'])) {
if (isset($_GET['force_recurring'])) {
validateCSRFToken($_GET['csrf_token']);
validateCSRFToken();
enforceUserPermission('module_sales', 2);
@@ -550,7 +550,7 @@ if (isset($_GET['force_recurring'])) {
if (isset($_POST['set_recurring_payment'])) {
validateCSRFToken($_POST['csrf_token']);
validateCSRFToken();
enforceUserPermission('module_sales', 2);
@@ -607,7 +607,7 @@ if (isset($_POST['set_recurring_payment'])) {
if (isset($_POST['export_client_recurring_invoice_csv'])) {
validateCSRFToken($_POST['csrf_token']);
validateCSRFToken();
enforceUserPermission('module_sales');
@@ -661,7 +661,7 @@ if (isset($_POST['export_client_recurring_invoice_csv'])) {
if (isset($_GET['recurring_invoice_email_notify'])) {
validateCSRFToken($_GET['csrf_token']);
validateCSRFToken();
enforceUserPermission('module_sales', 2);

22
agent/post/recurring_ticket.php
View File

@@ -8,7 +8,7 @@ defined('FROM_POST_HANDLER') || die("Direct file access is not allowed");
if (isset($_POST['add_recurring_ticket'])) {
validateCSRFToken($_POST['csrf_token']);
validateCSRFToken();
enforceUserPermission('module_support', 2);
@@ -42,7 +42,7 @@ if (isset($_POST['add_recurring_ticket'])) {
if (isset($_POST['edit_recurring_ticket'])) {
validateCSRFToken($_POST['csrf_token']);
validateCSRFToken();
enforceUserPermission('module_support', 2);
@@ -76,7 +76,7 @@ if (isset($_POST['edit_recurring_ticket'])) {
if (isset($_POST['bulk_force_recurring_tickets'])) {
validateCSRFToken($_POST['csrf_token']);
validateCSRFToken();
enforceUserPermission('module_support', 2);
@@ -220,7 +220,7 @@ if (isset($_POST['bulk_force_recurring_tickets'])) {
if (isset($_GET['force_recurring_ticket'])) {
validateCSRFToken($_GET['csrf_token']);
validateCSRFToken();
enforceUserPermission('module_support', 2);
@@ -360,7 +360,7 @@ if (isset($_GET['force_recurring_ticket'])) {
if (isset($_GET['delete_recurring_ticket'])) {
validateCSRFToken($_GET['csrf_token']);
validateCSRFToken();
enforceUserPermission('module_support', 3);
@@ -388,7 +388,7 @@ if (isset($_GET['delete_recurring_ticket'])) {
if (isset($_POST['bulk_delete_recurring_tickets'])) {
validateCSRFToken($_POST['csrf_token']);
validateCSRFToken();
enforceUserPermission('module_support', 3);
@@ -427,7 +427,7 @@ if (isset($_POST['bulk_delete_recurring_tickets'])) {
if (isset($_POST['bulk_assign_recurring_ticket'])) {
validateCSRFToken($_POST['csrf_token']);
validateCSRFToken();
enforceUserPermission('module_support', 2);
@@ -519,7 +519,7 @@ if (isset($_POST['bulk_assign_recurring_ticket'])) {
if (isset($_POST['bulk_edit_recurring_ticket_priority'])) {
validateCSRFToken($_POST['csrf_token']);
validateCSRFToken();
enforceUserPermission('module_support', 2);
@@ -562,7 +562,7 @@ if (isset($_POST['bulk_edit_recurring_ticket_priority'])) {
if (isset($_POST['bulk_edit_recurring_ticket_category'])) {
validateCSRFToken($_POST['csrf_token']);
validateCSRFToken();
enforceUserPermission('module_support', 2);
@@ -604,7 +604,7 @@ if (isset($_POST['bulk_edit_recurring_ticket_category'])) {
if (isset($_POST['bulk_edit_recurring_ticket_billable'])) {
validateCSRFToken($_POST['csrf_token']);
validateCSRFToken();
enforceUserPermission('module_support', 2);
enforceUserPermission('module_sales', 2);
@@ -655,7 +655,7 @@ if (isset($_POST['bulk_edit_recurring_ticket_billable'])) {
if (isset($_POST['bulk_edit_recurring_ticket_next_run_date'])) {
validateCSRFToken($_POST['csrf_token']);
validateCSRFToken();
enforceUserPermission('module_support', 2);

6
agent/post/revenue.php
View File

@@ -8,7 +8,7 @@ defined('FROM_POST_HANDLER') || die("Direct file access is not allowed");
if (isset($_POST['add_revenue'])) {
validateCSRFToken($_POST['csrf_token']);
validateCSRFToken();
enforceUserPermission('module_sales', 2);
@@ -34,7 +34,7 @@ if (isset($_POST['add_revenue'])) {
if (isset($_POST['edit_revenue'])) {
validateCSRFToken($_POST['csrf_token']);
validateCSRFToken();
enforceUserPermission('module_sales', 2);
@@ -59,7 +59,7 @@ if (isset($_POST['edit_revenue'])) {
if (isset($_GET['delete_revenue'])) {
validateCSRFToken($_GET['csrf_token']);
validateCSRFToken();
enforceUserPermission('module_sales', 3);

6
agent/post/service.php
View File

@@ -8,7 +8,7 @@ defined('FROM_POST_HANDLER') || die("Direct file access is not allowed");
if (isset($_POST['add_service'])) {
validateCSRFToken($_POST['csrf_token']);
validateCSRFToken();
enforceUserPermission('module_support', 2);
@@ -88,7 +88,7 @@ if (isset($_POST['add_service'])) {
if (isset($_POST['edit_service'])) {
validateCSRFToken($_POST['csrf_token']);
validateCSRFToken();
enforceUserPermission('module_support', 2);
@@ -176,7 +176,7 @@ if (isset($_POST['edit_service'])) {
if (isset($_GET['delete_service'])) {
validateCSRFToken($_GET['csrf_token']);
validateCSRFToken();
enforceUserPermission('module_support', 3);

12
agent/post/software.php
View File

@@ -8,7 +8,7 @@ defined('FROM_POST_HANDLER') || die("Direct file access is not allowed");
if (isset($_POST['add_software_from_template'])) {
validateCSRFToken($_POST['csrf_token']);
validateCSRFToken();
enforceUserPermission('module_support', 2);
@@ -44,7 +44,7 @@ if (isset($_POST['add_software_from_template'])) {
if (isset($_POST['add_software'])) {
validateCSRFToken($_POST['csrf_token']);
validateCSRFToken();
enforceUserPermission('module_support', 2);
@@ -107,7 +107,7 @@ if (isset($_POST['add_software'])) {
if (isset($_POST['edit_software'])) {
validateCSRFToken($_POST['csrf_token']);
validateCSRFToken();
enforceUserPermission('module_support', 2);
@@ -171,7 +171,7 @@ if (isset($_POST['edit_software'])) {
if (isset($_GET['archive_software'])) {
validateCSRFToken($_GET['csrf_token']);
validateCSRFToken();
enforceUserPermission('module_support', 2);
@@ -201,7 +201,7 @@ if (isset($_GET['archive_software'])) {
if (isset($_GET['delete_software'])) {
validateCSRFToken($_GET['csrf_token']);
validateCSRFToken();
enforceUserPermission('module_support', 3);
@@ -227,7 +227,7 @@ if (isset($_GET['delete_software'])) {
if (isset($_POST['export_software_csv'])) {
validateCSRFToken($_POST['csrf_token']);
validateCSRFToken();
enforceUserPermission('module_support');

2
agent/post/tag.php
View File

@@ -8,7 +8,7 @@ defined('FROM_POST_HANDLER') || die("Direct file access is not allowed");
if (isset($_POST['add_tag'])) {
validateCSRFToken($_POST['csrf_token']);
validateCSRFToken();
require_once 'tag_model.php';

22
agent/post/task.php
View File

@@ -8,7 +8,7 @@ defined('FROM_POST_HANDLER') || die("Direct file access is not allowed");
if (isset($_POST['add_task'])) {
validateCSRFToken($_POST['csrf_token']);
validateCSRFToken();
enforceUserPermission('module_support', 2);
@@ -32,7 +32,7 @@ if (isset($_POST['add_task'])) {
if (isset($_POST['edit_ticket_task'])) {
validateCSRFToken($_POST['csrf_token']);
validateCSRFToken();
enforceUserPermission('module_support', 2);
@@ -58,7 +58,7 @@ if (isset($_POST['edit_ticket_task'])) {
if (isset($_POST['edit_ticket_template_task'])) {
validateCSRFToken($_POST['csrf_token']);
validateCSRFToken();
enforceUserPermission('module_support', 2);
@@ -79,7 +79,7 @@ if (isset($_POST['edit_ticket_template_task'])) {
if (isset($_GET['delete_task'])) {
validateCSRFToken($_GET['csrf_token']);
validateCSRFToken();
enforceUserPermission('module_support', 3);
@@ -103,7 +103,7 @@ if (isset($_GET['delete_task'])) {
if (isset($_GET['complete_task'])) {
validateCSRFToken($_GET['csrf_token']);
validateCSRFToken();
enforceUserPermission('module_support', 2);
@@ -137,7 +137,7 @@ if (isset($_GET['complete_task'])) {
if (isset($_GET['undo_complete_task'])) {
validateCSRFToken($_GET['csrf_token']);
validateCSRFToken();
enforceUserPermission('module_support', 2);
@@ -167,7 +167,7 @@ if (isset($_GET['undo_complete_task'])) {
if (isset($_POST['add_ticket_task_approver'])) {
validateCSRFToken($_POST['csrf_token']);
validateCSRFToken();
enforceUserPermission('module_support', 2);
@@ -341,7 +341,7 @@ if (isset($_POST['add_ticket_task_approver'])) {
if (isset($_GET['approve_ticket_task'])) {
validateCSRFToken($_GET['csrf_token']);
validateCSRFToken();
enforceUserPermission('module_support', 2);
@@ -392,7 +392,7 @@ if (isset($_GET['approve_ticket_task'])) {
if (isset($_GET['delete_ticket_task_approver'])) {
validateCSRFToken($_GET['csrf_token']);
validateCSRFToken();
enforceUserPermission('module_support', 3);
@@ -410,7 +410,7 @@ if (isset($_GET['delete_ticket_task_approver'])) {
if (isset($_GET['complete_all_tasks'])) {
validateCSRFToken($_GET['csrf_token']);
validateCSRFToken();
enforceUserPermission('module_support', 2);
@@ -436,7 +436,7 @@ if (isset($_GET['complete_all_tasks'])) {
if (isset($_GET['undo_complete_all_tasks'])) {
validateCSRFToken($_GET['csrf_token']);
validateCSRFToken();
enforceUserPermission('module_support', 2);

72
agent/post/ticket.php
View File

@@ -8,7 +8,7 @@ defined('FROM_POST_HANDLER') || die("Direct file access is not allowed");
if (isset($_POST['add_ticket'])) {
validateCSRFToken($_POST['csrf_token']);
validateCSRFToken();
enforceUserPermission('module_support', 2);
@@ -198,7 +198,7 @@ if (isset($_POST['add_ticket'])) {
if (isset($_POST['edit_ticket'])) {
validateCSRFToken($_POST['csrf_token']);
validateCSRFToken();
enforceUserPermission('module_support', 2);
@@ -316,7 +316,7 @@ if (isset($_POST['edit_ticket'])) {
if (isset($_POST['edit_ticket_priority'])) {
validateCSRFToken($_POST['csrf_token']);
validateCSRFToken();
enforceUserPermission('module_support', 2);
@@ -359,7 +359,7 @@ if (isset($_POST['edit_ticket_priority'])) {
if (isset($_POST['edit_ticket_contact'])) {
validateCSRFToken($_POST['csrf_token']);
validateCSRFToken();
enforceUserPermission('module_support', 2);
@@ -450,7 +450,7 @@ if (isset($_POST['edit_ticket_contact'])) {
if (isset($_POST['edit_ticket_project'])) {
validateCSRFToken($_POST['csrf_token']);
validateCSRFToken();
enforceUserPermission('module_support', 2);
@@ -479,7 +479,7 @@ if (isset($_POST['edit_ticket_project'])) {
if (isset($_POST['add_ticket_watcher'])) {
validateCSRFToken($_POST['csrf_token']);
validateCSRFToken();
enforceUserPermission('module_support', 2);
@@ -564,7 +564,7 @@ if (isset($_POST['add_ticket_watcher'])) {
if (isset($_GET['delete_ticket_watcher'])) {
validateCSRFToken($_GET['csrf_token']);
validateCSRFToken();
enforceUserPermission('module_support', 2);
@@ -605,7 +605,7 @@ if (isset($_GET['delete_ticket_watcher'])) {
if (isset($_GET['delete_ticket_additional_asset'])) {
validateCSRFToken($_GET['csrf_token']);
validateCSRFToken();
enforceUserPermission('module_support', 2);
@@ -646,7 +646,7 @@ if (isset($_GET['delete_ticket_additional_asset'])) {
if (isset($_POST['edit_ticket_asset'])) {
validateCSRFToken($_POST['csrf_token']);
validateCSRFToken();
enforceUserPermission('module_support', 2);
@@ -699,7 +699,7 @@ if (isset($_POST['edit_ticket_asset'])) {
if (isset($_POST['edit_ticket_vendor'])) {
validateCSRFToken($_POST['csrf_token']);
validateCSRFToken();
enforceUserPermission('module_support', 2);
@@ -739,7 +739,7 @@ if (isset($_POST['edit_ticket_vendor'])) {
if (isset($_POST['assign_ticket'])) {
validateCSRFToken($_POST['csrf_token']);
validateCSRFToken();
enforceUserPermission('module_support', 2);
@@ -848,7 +848,7 @@ if (isset($_POST['assign_ticket'])) {
if (isset($_GET['delete_ticket'])) {
validateCSRFToken($_GET['csrf_token']);
validateCSRFToken();
enforceUserPermission('module_support', 3);
@@ -900,7 +900,7 @@ if (isset($_GET['delete_ticket'])) {
if (isset($_POST['bulk_delete_tickets'])) {
validateCSRFToken($_POST['csrf_token']);
validateCSRFToken();
enforceUserPermission('module_support', 3);
@@ -952,7 +952,7 @@ if (isset($_POST['bulk_delete_tickets'])) {
if (isset($_POST['bulk_assign_ticket'])) {
validateCSRFToken($_POST['csrf_token']);
validateCSRFToken();
enforceUserPermission('module_support', 2);
@@ -1059,7 +1059,7 @@ if (isset($_POST['bulk_assign_ticket'])) {
if (isset($_POST['bulk_edit_ticket_priority'])) {
validateCSRFToken($_POST['csrf_token']);
validateCSRFToken();
enforceUserPermission('module_support', 2);
@@ -1110,7 +1110,7 @@ if (isset($_POST['bulk_edit_ticket_priority'])) {
if (isset($_POST['bulk_edit_ticket_category'])) {
validateCSRFToken($_POST['csrf_token']);
validateCSRFToken();
enforceUserPermission('module_support', 2);
@@ -1162,7 +1162,7 @@ if (isset($_POST['bulk_edit_ticket_category'])) {
if (isset($_POST['bulk_merge_tickets'])) {
validateCSRFToken($_POST['csrf_token']);
validateCSRFToken();
enforceUserPermission('module_support', 2);
@@ -1236,7 +1236,7 @@ if (isset($_POST['bulk_merge_tickets'])) {
if (isset($_POST['bulk_resolve_tickets'])) {
validateCSRFToken($_POST['csrf_token']);
validateCSRFToken();
enforceUserPermission('module_support', 2);
@@ -1380,7 +1380,7 @@ if (isset($_POST['bulk_resolve_tickets'])) {
if (isset($_POST['bulk_ticket_reply'])) {
validateCSRFToken($_POST['csrf_token']);
validateCSRFToken();
enforceUserPermission('module_support', 2);
@@ -1551,7 +1551,7 @@ if (isset($_POST['bulk_ticket_reply'])) {
// Currently not UI Frontend for this
if (isset($_POST['bulk_add_ticket_project'])) {
validateCSRFToken($_POST['csrf_token']);
validateCSRFToken();
enforceUserPermission('module_support', 2);
@@ -1604,7 +1604,7 @@ if (isset($_POST['bulk_add_ticket_project'])) {
if (isset($_POST['bulk_add_asset_ticket'])) {
validateCSRFToken($_POST['csrf_token']);
validateCSRFToken();
enforceUserPermission('module_support', 2);
@@ -1724,7 +1724,7 @@ if (isset($_POST['bulk_add_asset_ticket'])) {
if (isset($_POST['add_ticket_reply'])) {
validateCSRFToken($_POST['csrf_token']);
validateCSRFToken();
enforceUserPermission('module_support', 2);
@@ -1909,7 +1909,7 @@ if (isset($_POST['add_ticket_reply'])) {
if (isset($_POST['edit_ticket_reply'])) {
validateCSRFToken($_POST['csrf_token']);
validateCSRFToken();
enforceUserPermission('module_support', 2);
@@ -1944,7 +1944,7 @@ if (isset($_POST['edit_ticket_reply'])) {
if (isset($_POST['redact_ticket_reply'])) {
validateCSRFToken($_POST['csrf_token']);
validateCSRFToken();
enforceUserPermission('module_support', 2);
@@ -1977,7 +1977,7 @@ if (isset($_POST['redact_ticket_reply'])) {
if (isset($_GET['archive_ticket_reply'])) {
validateCSRFToken($_GET['csrf_token']);
validateCSRFToken();
enforceUserPermission('module_support', 2);
@@ -2003,7 +2003,7 @@ if (isset($_GET['archive_ticket_reply'])) {
if (isset($_POST['merge_ticket'])) {
validateCSRFToken($_POST['csrf_token']);
validateCSRFToken();
enforceUserPermission('module_support', 2);
@@ -2083,7 +2083,7 @@ if (isset($_POST['merge_ticket'])) {
if (isset($_POST['change_client_ticket'])) {
validateCSRFToken($_POST['csrf_token']);
validateCSRFToken();
enforceUserPermission('module_support', 2);
@@ -2114,7 +2114,7 @@ if (isset($_POST['change_client_ticket'])) {
if (isset($_GET['resolve_ticket'])) {
validateCSRFToken($_GET['csrf_token']);
validateCSRFToken();
enforceUserPermission('module_support', 2);
@@ -2226,7 +2226,7 @@ if (isset($_GET['resolve_ticket'])) {
if (isset($_GET['close_ticket'])) {
validateCSRFToken($_GET['csrf_token']);
validateCSRFToken();
enforceUserPermission('module_support', 2);
@@ -2325,7 +2325,7 @@ if (isset($_GET['close_ticket'])) {
if (isset($_GET['reopen_ticket'])) {
validateCSRFToken($_GET['csrf_token']);
validateCSRFToken();
enforceUserPermission('module_support', 2);
@@ -2352,7 +2352,7 @@ if (isset($_GET['reopen_ticket'])) {
if (isset($_POST['add_invoice_from_ticket'])) {
validateCSRFToken($_POST['csrf_token']);
validateCSRFToken();
enforceUserPermission('module_support', 2);
enforceUserPermission('module_sales', 2);
@@ -2473,7 +2473,7 @@ if (isset($_POST['add_invoice_from_ticket'])) {
if (isset($_POST['add_quote_from_ticket'])) {
validateCSRFToken($_POST['csrf_token']);
validateCSRFToken();
enforceUserPermission('module_support', 2);
enforceUserPermission('module_sales', 2);
@@ -2548,7 +2548,7 @@ if (isset($_POST['add_quote_from_ticket'])) {
if (isset($_POST['export_tickets_csv'])) {
validateCSRFToken($_POST['csrf_token']);
validateCSRFToken();
enforceUserPermission('module_support', 2);
@@ -2605,7 +2605,7 @@ if (isset($_POST['export_tickets_csv'])) {
if (isset($_POST['edit_ticket_billable_status'])) {
validateCSRFToken($_POST['csrf_token']);
validateCSRFToken();
enforceUserPermission('module_support', 2);
enforceUserPermission('module_sales', 2);
@@ -2640,7 +2640,7 @@ if (isset($_POST['edit_ticket_billable_status'])) {
if (isset($_POST['edit_ticket_schedule'])) {
validateCSRFToken($_POST['csrf_token']);
validateCSRFToken();
enforceUserPermission('module_support', 2);
@@ -2818,7 +2818,7 @@ if (isset($_POST['edit_ticket_schedule'])) {
if (isset($_GET['cancel_ticket_schedule'])) {
validateCSRFToken($_GET['csrf_token']);
validateCSRFToken();
enforceUserPermission('module_support', 2);

2
agent/post/transaction.php
View File

@@ -11,7 +11,7 @@ if (!defined('FROM_POST_HANDLER')) {
if (isset($_POST['export_transactions_csv'])) {
validateCSRFToken($_POST['csrf_token']);
validateCSRFToken();
enforceUserPermission('module_financial');

6
agent/post/transfer.php
View File

@@ -8,7 +8,7 @@ defined('FROM_POST_HANDLER') || die("Direct file access is not allowed");
if (isset($_POST['add_transfer'])) {
validateCSRFToken($_POST['csrf_token']);
validateCSRFToken();
enforceUserPermission('module_financial', 2);
@@ -45,7 +45,7 @@ if (isset($_POST['add_transfer'])) {
if (isset($_POST['edit_transfer'])) {
validateCSRFToken($_POST['csrf_token']);
validateCSRFToken();
enforceUserPermission('module_financial', 2);
@@ -71,7 +71,7 @@ if (isset($_POST['edit_transfer'])) {
if (isset($_GET['delete_transfer'])) {
validateCSRFToken($_GET['csrf_token']);
validateCSRFToken();
enforceUserPermission('module_financial', 3);

8
agent/post/trip.php
View File

@@ -10,7 +10,7 @@ defined('FROM_POST_HANDLER') || die("Direct file access is not allowed");
if (isset($_POST['add_trip'])) {
validateCSRFToken($_POST['csrf_token']);
validateCSRFToken();
require_once 'trip_model.php';
@@ -34,7 +34,7 @@ if (isset($_POST['add_trip'])) {
if (isset($_POST['edit_trip'])) {
validateCSRFToken($_POST['csrf_token']);
validateCSRFToken();
require_once 'trip_model.php';
@@ -58,7 +58,7 @@ if (isset($_POST['edit_trip'])) {
if (isset($_GET['delete_trip'])) {
validateCSRFToken($_GET['csrf_token']);
validateCSRFToken();
enforceUserPermission('module_financial', 3);
@@ -86,7 +86,7 @@ if (isset($_GET['delete_trip'])) {
if (isset($_POST['export_trips_csv'])) {
validateCSRFToken($_POST['csrf_token']);
validateCSRFToken();
enforceUserPermission('module_financial');

20
agent/post/vendor.php
View File

@@ -10,7 +10,7 @@ defined('FROM_POST_HANDLER') || die("Direct file access is not allowed");
if (isset($_POST['add_vendor_from_template'])) {
validateCSRFToken($_POST['csrf_token']);
validateCSRFToken();
// GET POST Data
$client_id = intval($_POST['client_id']); //Used if this vendor is under a contact otherwise its 0 for under company and or template
@@ -61,7 +61,7 @@ if (isset($_POST['add_vendor_from_template'])) {
if (isset($_POST['add_vendor'])) {
validateCSRFToken($_POST['csrf_token']);
validateCSRFToken();
require_once 'vendor_model.php';
@@ -89,7 +89,7 @@ if (isset($_POST['add_vendor'])) {
if (isset($_POST['edit_vendor'])) {
validateCSRFToken($_POST['csrf_token']);
validateCSRFToken();
require_once 'vendor_model.php';
@@ -119,7 +119,7 @@ if (isset($_POST['edit_vendor'])) {
if (isset($_GET['archive_vendor'])) {
validateCSRFToken($_GET['csrf_token']);
validateCSRFToken();
$vendor_id = intval($_GET['archive_vendor']);
@@ -149,7 +149,7 @@ if (isset($_GET['archive_vendor'])) {
if(isset($_GET['restore_vendor'])){
validateCSRFToken($_GET['csrf_token']);
validateCSRFToken();
$vendor_id = intval($_GET['restore_vendor']);
@@ -179,7 +179,7 @@ if(isset($_GET['restore_vendor'])){
if (isset($_GET['delete_vendor'])) {
validateCSRFToken($_GET['csrf_token']);
validateCSRFToken();
$vendor_id = intval($_GET['delete_vendor']);
@@ -215,7 +215,7 @@ if (isset($_GET['delete_vendor'])) {
if (isset($_POST['bulk_archive_vendors'])) {
validateCSRFToken($_POST['csrf_token']);
validateCSRFToken();
if (isset($_POST['vendor_ids'])) {
@@ -258,7 +258,7 @@ if (isset($_POST['bulk_archive_vendors'])) {
if (isset($_POST['bulk_restore_vendors'])) {
validateCSRFToken($_POST['csrf_token']);
validateCSRFToken();
if (isset($_POST['vendor_ids'])) {
@@ -302,7 +302,7 @@ if (isset($_POST['bulk_restore_vendors'])) {
if (isset($_POST['bulk_delete_vendors'])) {
validateCSRFToken($_POST['csrf_token']);
validateCSRFToken();
if (isset($_POST['vendor_ids'])) {
@@ -352,7 +352,7 @@ if (isset($_POST['bulk_delete_vendors'])) {
if (isset($_POST['export_vendors_csv'])) {
validateCSRFToken($_POST['csrf_token']);
validateCSRFToken();
if ($_POST['client_id']) {
$client_id = intval($_POST['client_id']);

14
agent/user/post/profile.php
View File

@@ -8,7 +8,7 @@ defined('FROM_POST_HANDLER') || die("Direct file access is not allowed");
if (isset($_POST['edit_your_user_details'])) {
validateCSRFToken($_POST['csrf_token']);
validateCSRFToken();
$name = escapeSql($_POST['name']);
$email = escapeSql($_POST['email']);
@@ -94,7 +94,7 @@ if (isset($_POST['edit_your_user_details'])) {
if (isset($_GET['clear_your_user_avatar'])) {
validateCSRFToken($_GET['csrf_token']);
validateCSRFToken();
$user_avatar = escapeSql(getFieldById('users', $session_user_id, 'user_avatar'));
@@ -112,7 +112,7 @@ if (isset($_GET['clear_your_user_avatar'])) {
if (isset($_POST['edit_your_user_password'])) {
validateCSRFToken($_POST['csrf_token']);
validateCSRFToken();
$new_password = trim($_POST['new_password']);
@@ -163,7 +163,7 @@ if (isset($_POST['edit_your_user_password'])) {
if (isset($_POST['edit_your_user_preferences'])) {
validateCSRFToken($_POST['csrf_token']);
validateCSRFToken();
$calendar_first_day = intval($_POST['calendar_first_day']);
$dark_mode = intval($_POST['dark_mode'] ?? 0);
@@ -200,7 +200,7 @@ if (isset($_POST['edit_your_user_preferences'])) {
if (isset($_POST['enable_mfa'])) {
validateCSRFToken($_POST['csrf_token']);
validateCSRFToken();
require_once "../../libs/totp/totp.php";
@@ -268,7 +268,7 @@ if (isset($_GET['disable_mfa'])){
redirect();
}
validateCSRFToken($_GET['csrf_token']);
validateCSRFToken();
mysqli_query($mysqli,"UPDATE users SET user_token = '' WHERE user_id = $session_user_id");
@@ -308,7 +308,7 @@ if (isset($_GET['disable_mfa'])){
if (isset($_POST['revoke_your_2fa_remember_tokens'])) {
validateCSRFToken($_POST['csrf_token']);
validateCSRFToken();
// Delete tokens
mysqli_query($mysqli, "DELETE FROM remember_tokens WHERE remember_token_user_id = $session_user_id");