$name created"); redirect(); } if (isset($_POST['edit_ticket_template'])) { validateCSRFToken($_POST['csrf_token']); $ticket_template_id = intval($_POST['ticket_template_id']); $name = escapeSql($_POST['name']); $description = escapeSql($_POST['description']); $subject = escapeSql($_POST['subject']); $details = mysqli_real_escape_string($mysqli, $_POST['details']); mysqli_query($mysqli, "UPDATE ticket_templates SET ticket_template_name = '$name', ticket_template_description = '$description', ticket_template_subject = '$subject', ticket_template_details = '$details' WHERE ticket_template_id = $ticket_template_id"); logAudit("Ticket Template", "Edit", "$session_name edited ticket template $name", 0, $ticket_template_id); flashAlert("Ticket Template $name edited"); redirect(); } if (isset($_GET['delete_ticket_template'])) { validateCSRFToken($_GET['csrf_token']); $ticket_template_id = intval($_GET['delete_ticket_template']); $ticket_template_name = escapeSql(getFieldById('ticket_templates', $ticket_template_id, 'ticket_template_name')); mysqli_query($mysqli, "DELETE FROM ticket_templates WHERE ticket_template_id = $ticket_template_id"); // Delete Associations mysqli_query($mysqli, "DELETE FROM task_templates WHERE task_template_ticket_template_id = $ticket_template_id"); mysqli_query($mysqli, "DELETE FROM project_template_ticket_templates WHERE ticket_template_id = $ticket_template_id"); logAudit("Ticket Template", "Delete", "$session_name deleted ticket template $ticket_template_name"); flashAlert("Ticket Template $ticket_template_name and its associated tasks deleted", 'error'); redirect(); } if (isset($_POST['add_ticket_template_task'])) { validateCSRFToken($_POST['csrf_token']); $ticket_template_id = intval($_POST['ticket_template_id']); $task_name = escapeSql($_POST['task_name']); mysqli_query($mysqli, "INSERT INTO task_templates SET task_template_name = '$task_name', task_template_ticket_template_id = $ticket_template_id"); $task_template_id = mysqli_insert_id($mysqli); logAudit("Ticket Template", "Create", "$session_name created task $task_name for ticket template", 0, $ticket_template_id); flashAlert("Added Task $task_name"); redirect(); } if (isset($_GET['delete_task_template'])) { validateCSRFToken($_GET['csrf_token']); $task_template_id = intval($_GET['delete_task_template']); $task_template_name = escapeSql(getFieldById('tags', $task_template_id, 'task_template_name')); mysqli_query($mysqli, "DELETE FROM task_templates WHERE task_template_id = $task_template_id"); logAudit("Ticket Template", "Edit", "$session_name deleted task $task_template_name from ticket template"); flashAlert("Task $task_template_name deleted", 'error'); redirect(); }