Update database_transactions.php (#3293)

This commit is contained in:
AlexanderDCrane 2018-08-27 15:12:43 -06:00 committed by FusionPBX
parent 22ba9413aa
commit 233b4650b6
1 changed files with 14 additions and 14 deletions

View File

@ -118,7 +118,7 @@
echo " <td width='50%' align='left' nowrap='nowrap'><b>".$text['title-database_transactions']."</b></td>\n"; echo " <td width='50%' align='left' nowrap='nowrap'><b>".$text['title-database_transactions']."</b></td>\n";
echo " <form method='get' action=''>\n"; echo " <form method='get' action=''>\n";
echo " <td width='50%' style='vertical-align: top; text-align: right; white-space: nowrap;'>\n"; echo " <td width='50%' style='vertical-align: top; text-align: right; white-space: nowrap;'>\n";
echo " <input type='text' class='txt' style='width: 150px' name='search' id='search' value='".$search."'>\n"; echo " <input type='text' class='txt' style='width: 150px' name='search' id='search' value='".escape($search)."'>\n";
echo " <input type='submit' class='btn' name='submit' value='".$text['button-search']."'>\n"; echo " <input type='submit' class='btn' name='submit' value='".$text['button-search']."'>\n";
echo " </td>\n"; echo " </td>\n";
echo " </form>\n"; echo " </form>\n";
@ -145,25 +145,25 @@
if (is_array($result)) { if (is_array($result)) {
foreach($result as $row) { foreach($result as $row) {
if (permission_exists('database_transaction_edit')) { if (permission_exists('database_transaction_edit')) {
$tr_link = "href='database_transaction_edit.php?id=".$row['database_transaction_uuid']."'"; $tr_link = "href='database_transaction_edit.php?id=".escape($row['database_transaction_uuid'])."'";
} }
echo "<tr ".$tr_link.">\n"; echo "<tr ".$tr_link.">\n";
echo " <td valign='top' class='".$row_style[$c]."'>".$row['domain_name']."&nbsp;</td>\n"; echo " <td valign='top' class='".$row_style[$c]."'>".escape($row['domain_name'])."&nbsp;</td>\n";
echo " <td valign='top' class='".$row_style[$c]."'>".$row['username']."&nbsp;</td>\n"; echo " <td valign='top' class='".$row_style[$c]."'>".escape($row['username'])."&nbsp;</td>\n";
echo " <td valign='top' class='".$row_style[$c]."'>".$row['app_name']."&nbsp;</td>\n"; echo " <td valign='top' class='".$row_style[$c]."'>".escape($row['app_name'])."&nbsp;</td>\n";
echo " <td valign='top' class='".$row_style[$c]."'>".$row['transaction_code']."&nbsp;</td>\n"; echo " <td valign='top' class='".$row_style[$c]."'>".escape($row['transaction_code'])."&nbsp;</td>\n";
echo " <td valign='top' class='".$row_style[$c]."'>".$row['transaction_address']."&nbsp;</td>\n"; echo " <td valign='top' class='".$row_style[$c]."'>".escape($row['transaction_address'])."&nbsp;</td>\n";
echo " <td valign='top' class='".$row_style[$c]."'>".$row['transaction_type']."&nbsp;</td>\n"; echo " <td valign='top' class='".$row_style[$c]."'>".escape($row['transaction_type'])."&nbsp;</td>\n";
echo " <td valign='top' class='".$row_style[$c]."'>".$row['transaction_date']."&nbsp;</td>\n"; echo " <td valign='top' class='".$row_style[$c]."'>".escape($row['transaction_date'])."&nbsp;</td>\n";
//echo " <td valign='top' class='".$row_style[$c]."'>".$row['transaction_old']."&nbsp;</td>\n"; //echo " <td valign='top' class='".$row_style[$c]."'>".escape($row['transaction_old']."&nbsp;</td>\n";
//echo " <td valign='top' class='".$row_style[$c]."'>".$row['transaction_new']."&nbsp;</td>\n"; //echo " <td valign='top' class='".$row_style[$c]."'>".escape($row['transaction_new']."&nbsp;</td>\n";
//echo " <td valign='top' class='".$row_style[$c]."'>".$row['transaction_result']."&nbsp;</td>\n"; //echo " <td valign='top' class='".$row_style[$c]."'>".escape($row['transaction_result']."&nbsp;</td>\n";
echo " <td class='list_control_icons'>"; echo " <td class='list_control_icons'>";
if (permission_exists('database_transaction_edit')) { if (permission_exists('database_transaction_edit')) {
echo "<a href='database_transaction_edit.php?id=".$row['database_transaction_uuid']."' alt='".$text['button-edit']."'>$v_link_label_edit</a>"; echo "<a href='database_transaction_edit.php?id=".escape($row['database_transaction_uuid'])."' alt='".$text['button-edit']."'>$v_link_label_edit</a>";
} }
//if (permission_exists('database_transaction_delete')) { //if (permission_exists('database_transaction_delete')) {
// echo "<a href='database_transaction_delete.php?id=".$row['database_transaction_uuid']."' alt='".$text['button-delete']."' onclick=\"return confirm('".$text['confirm-delete']."')\">$v_link_label_delete</a>"; // echo "<a href='database_transaction_delete.php?id=".escape($row['database_transaction_uuid'])."' alt='".$text['button-delete']."' onclick=\"return confirm('".$text['confirm-delete']."')\">$v_link_label_delete</a>";
//} //}
echo " </td>\n"; echo " </td>\n";
echo "</tr>\n"; echo "</tr>\n";