From ff4b69b5113a1c81aff813beb5921a9392f31b8b Mon Sep 17 00:00:00 2001
From: johnnyq <johnny@pittpc.com>
Date: Sat, 25 Jul 2026 00:35:47 -0400
Subject: [PATCH] Client Enforcement via function on client edit instad of in
 sql query

---
 agent/modals/client/client_edit.php | 4 +++-
 1 file changed, 3 insertions(+), 1 deletion(-)

diff --git a/agent/modals/client/client_edit.php b/agent/modals/client/client_edit.php
index 0cec4221..60fdf343 100644
--- a/agent/modals/client/client_edit.php
+++ b/agent/modals/client/client_edit.php
@@ -6,7 +6,9 @@ enforceUserPermission('module_client', 2);
 
 $client_id = intval($_GET['id']);
 
-$sql = mysqli_query($mysqli, "SELECT * FROM clients WHERE client_id = $client_id $access_permission_query LIMIT 1");
+enforceClientAccess();
+
+$sql = mysqli_query($mysqli, "SELECT * FROM clients WHERE client_id = $client_id LIMIT 1");
 
 $row = mysqli_fetch_assoc($sql);
 $client_name = escapeHtml($row['client_name']);