Expense: On create enforce client Access only if Client is selected

This commit is contained in:
johnnyq
2026-07-08 18:13:14 -04:00
parent ae5c9fe8ec
commit c01645c4e2

View File

@@ -14,6 +14,10 @@ if (isset($_POST['add_expense'])) {
require_once 'expense_model.php';
if ($client_id) {
enforceClientAccess();
}
mysqli_query($mysqli,"INSERT INTO expenses SET expense_date = '$date', expense_amount = $amount, expense_currency_code = '$session_company_currency', expense_account_id = $account, expense_vendor_id = $vendor, expense_client_id = $client_id, expense_category_id = $category, expense_description = '$description', expense_reference = '$reference'");
$expense_id = mysqli_insert_id($mysqli);