Client Enforcement via function on client edit instad of in sql query

This commit is contained in:
johnnyq
2026-07-25 00:35:47 -04:00
parent 761b2a7af4
commit ff4b69b511

View File

@@ -6,7 +6,9 @@ enforceUserPermission('module_client', 2);
$client_id = intval($_GET['id']);
$sql = mysqli_query($mysqli, "SELECT * FROM clients WHERE client_id = $client_id $access_permission_query LIMIT 1");
enforceClientAccess();
$sql = mysqli_query($mysqli, "SELECT * FROM clients WHERE client_id = $client_id LIMIT 1");
$row = mysqli_fetch_assoc($sql);
$client_name = escapeHtml($row['client_name']);