AS1024/itflow
1
0
Fork 0
mirror of https://github.com/itflow-org/itflow synced 2026-02-28 19:04:52 +00:00
Code Issues Packages Projects Releases Wiki Activity

More user post function migration and cleanup

Browse Source
This commit is contained in:
johnnyq
2025-08-04 11:27:24 -04:00
parent 76b48378ab
commit fef0d8761f
6 changed files with 128 additions and 217 deletions
Download Patch File Download Diff File Expand all files Collapse all files

16
user/post/budget.php
View File

@@ -9,10 +9,10 @@ defined('FROM_POST_HANDLER') || die("Direct file access is not allowed");
if (isset($_POST['save_budget'])) {
enforceUserPermission('module_financial', 2);
validateCSRFToken($_POST['csrf_token']);
enforceUserPermission('module_financial', 2);
$budgets = $_POST['budget'];
$year = intval($_POST['year']);
@@ -34,31 +34,27 @@ if (isset($_POST['save_budget'])) {
}
}
// Logging
logAction("Budget", "Edit", "$session_name edited the budget for $year");
$_SESSION['alert_message'] = "Budget Updated for $year";
flash_alert("Budget Updated for $year");
redirect();
exit;
}
if (isset($_POST['delete_budget'])) {
enforceUserPermission('module_financial', 3);
validateCSRFToken($_POST['csrf_token']);
enforceUserPermission('module_financial', 3);
$year = intval($_POST['year']);
mysqli_query($mysqli,"DELETE FROM budget WHERE budget_year = $year");
// Logging
logAction("Budget", "Delete", "$session_name deleted the budget for $year");
$_SESSION['alert_type'] = "error";
$_SESSION['alert_message'] = "Budget deleted for $year";
flash_alert("Budget deleted for $year", 'error');
redirect();