dbxe/fusionpbx
2
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Update contact_setting_edit.php

Browse Source
This commit is contained in:
FusionPBX
2018-07-11 23:00:05 -06:00
committed by GitHub
parent bfc051f4e0
commit 2471f74ca7
1 changed files with 33 additions and 29 deletions
Download Patch File Download Diff File Expand all files Collapse all files
app/contacts/contact_setting_edit.php
+33 -29
View File
@@ -24,16 +24,20 @@
Mark J Crane <markjcrane@fusionpbx.com> Mark J Crane <markjcrane@fusionpbx.com>
Luis Daniel Lucio Quiroz <dlucio@okay.com.mx> Luis Daniel Lucio Quiroz <dlucio@okay.com.mx>
*/ */
require_once "root.php";
require_once "resources/require.php"; //includes
require_once "resources/check_auth.php"; require_once "root.php";
if (permission_exists('contact_setting_edit') || permission_exists('contact_setting_add')) { require_once "resources/require.php";
//access granted require_once "resources/check_auth.php";
}
else { //check permissions
echo "access denied"; if (permission_exists('contact_setting_edit') || permission_exists('contact_setting_add')) {
exit; //access granted
} }
else {
echo "access denied";
exit;
}
//add multi-lingual support //add multi-lingual support
$language = new text; $language = new text;
@@ -167,7 +171,7 @@ else {
if ($action == "add") { if ($action == "add") {
messages::add($text['message-add']); messages::add($text['message-add']);
} }
header("Location: contact_edit.php?id=".$contact_uuid); header("Location: contact_edit.php?id=".escape($contact_uuid));
return; return;
} //if ($_POST["persistformvar"] != "true") } //if ($_POST["persistformvar"] != "true")
} //(count($_POST)>0 && strlen($_POST["persistformvar"]) == 0) } //(count($_POST)>0 && strlen($_POST["persistformvar"]) == 0)
@@ -182,14 +186,13 @@ else {
$prep_statement->execute(); $prep_statement->execute();
$result = $prep_statement->fetchAll(PDO::FETCH_NAMED); $result = $prep_statement->fetchAll(PDO::FETCH_NAMED);
foreach ($result as &$row) { foreach ($result as &$row) {
$contact_setting_category = $row["contact_setting_category"]; $contact_setting_category = escape($row["contact_setting_category"]);
$contact_setting_subcategory = $row["contact_setting_subcategory"]; $contact_setting_subcategory = escape($row["contact_setting_subcategory"]);
$contact_setting_name = $row["contact_setting_name"]; $contact_setting_name = escape($row["contact_setting_name"]);
$contact_setting_value = $row["contact_setting_value"]; $contact_setting_value = escape($row["contact_setting_value"]);
$contact_setting_order = $row["contact_setting_order"]; $contact_setting_order = escape($row["contact_setting_order"]);
$contact_setting_enabled = $row["contact_setting_enabled"]; $contact_setting_enabled = escape($row["contact_setting_enabled"]);
$contact_setting_description = $row["contact_setting_description"]; $contact_setting_description = escape($row["contact_setting_description"]);
break; //limit to 1 row
} }
unset ($prep_statement); unset ($prep_statement);
} }
@@ -237,7 +240,7 @@ else {
echo " ".$text['label-contact_setting_category']."\n"; echo " ".$text['label-contact_setting_category']."\n";
echo "</td>\n"; echo "</td>\n";
echo "<td class='vtable' align='left'>\n"; echo "<td class='vtable' align='left'>\n";
echo " <input class='formfld' type='text' name='contact_setting_category' maxlength='255' value=\"".escape($contact_setting_category)."\" required='required'>\n"; echo " <input class='formfld' type='text' name='contact_setting_category' maxlength='255' value=\"".$contact_setting_category."\" required='required'>\n";
echo "<br />\n"; echo "<br />\n";
echo $text['description-contact_setting_category']."\n"; echo $text['description-contact_setting_category']."\n";
echo "</td>\n"; echo "</td>\n";
@@ -248,7 +251,7 @@ else {
echo " ".$text['label-contact_setting_subcategory']."\n"; echo " ".$text['label-contact_setting_subcategory']."\n";
echo "</td>\n"; echo "</td>\n";
echo "<td class='vtable' align='left'>\n"; echo "<td class='vtable' align='left'>\n";
echo " <input class='formfld' type='text' name='contact_setting_subcategory' maxlength='255' value=\"".escape($contact_setting_subcategory)."\">\n"; echo " <input class='formfld' type='text' name='contact_setting_subcategory' maxlength='255' value=\"".$contact_setting_subcategory."\">\n";
echo "<br />\n"; echo "<br />\n";
echo $text['description-contact_setting_subcategory']."\n"; echo $text['description-contact_setting_subcategory']."\n";
echo "</td>\n"; echo "</td>\n";
@@ -259,7 +262,7 @@ else {
echo " ".$text['label-contact_setting_type']."\n"; echo " ".$text['label-contact_setting_type']."\n";
echo "</td>\n"; echo "</td>\n";
echo "<td class='vtable' align='left'>\n"; echo "<td class='vtable' align='left'>\n";
echo " <input class='formfld' type='text' name='contact_setting_name' maxlength='255' value=\"".escape($contact_setting_name)."\">\n"; echo " <input class='formfld' type='text' name='contact_setting_name' maxlength='255' value=\"".$contact_setting_name."\">\n";
echo "<br />\n"; echo "<br />\n";
echo $text['description-contact_setting_type']."\n"; echo $text['description-contact_setting_type']."\n";
echo "</td>\n"; echo "</td>\n";
@@ -273,7 +276,7 @@ else {
$category = $row['contact_setting_category']; $category = $row['contact_setting_category'];
$subcategory = $row['contact_setting_subcategory']; $subcategory = $row['contact_setting_subcategory'];
$name = $row['contact_setting_name']; $name = $row['contact_setting_name'];
echo " <input class='formfld' type='text' name='contact_setting_value' maxlength='255' value=\"".escape($row['contact_setting_value'])."\">\n"; echo " <input class='formfld' type='text' name='contact_setting_value' maxlength='255' value=\"".$row['contact_setting_value']."\">\n";
echo "<br />\n"; echo "<br />\n";
echo $text['description-contact_setting_value']."\n"; echo $text['description-contact_setting_value']."\n";
echo "</td>\n"; echo "</td>\n";
@@ -290,13 +293,13 @@ else {
while($i<=999) { while($i<=999) {
$selected = ($i == $contact_setting_order) ? "selected" : null; $selected = ($i == $contact_setting_order) ? "selected" : null;
if (strlen($i) == 1) { if (strlen($i) == 1) {
echo " <option value='00$i' ".escape($selected).">00$i</option>\n"; echo " <option value='00$i' ".$selected.">00$i</option>\n";
} }
if (strlen($i) == 2) { if (strlen($i) == 2) {
echo " <option value='0$i' ".escape($selected).">0$i</option>\n"; echo " <option value='0$i' ".$selected.">0$i</option>\n";
} }
if (strlen($i) == 3) { if (strlen($i) == 3) {
echo " <option value='$i' ".escape($selected).">$i</option>\n"; echo " <option value='$i' ".$selected.">$i</option>\n";
} }
$i++; $i++;
} }
@@ -336,7 +339,7 @@ else {
echo " ".$text['label-description']."\n"; echo " ".$text['label-description']."\n";
echo "</td>\n"; echo "</td>\n";
echo "<td class='vtable' align='left'>\n"; echo "<td class='vtable' align='left'>\n";
echo " <input class='formfld' type='text' name='contact_setting_description' maxlength='255' value=\"".escape($contact_setting_description)."\">\n"; echo " <input class='formfld' type='text' name='contact_setting_description' maxlength='255' value=\"".$contact_setting_description."\">\n";
echo "<br />\n"; echo "<br />\n";
echo $text['description-description']."\n"; echo $text['description-description']."\n";
echo "</td>\n"; echo "</td>\n";
@@ -345,9 +348,9 @@ else {
echo " <tr>\n"; echo " <tr>\n";
echo " <td colspan='2' align='right'>\n"; echo " <td colspan='2' align='right'>\n";
echo " <br>"; echo " <br>";
echo " <input type='hidden' name='contact_uuid' value='".escape($contact_uuid)."'>\n"; echo " <input type='hidden' name='contact_uuid' value='".$contact_uuid."'>\n";
if ($action == "update") { if ($action == "update") {
echo " <input type='hidden' name='contact_setting_uuid' value='".escape($contact_setting_uuid)."'>\n"; echo " <input type='hidden' name='contact_setting_uuid' value='".$contact_setting_uuid."'>\n";
} }
echo " <input type='submit' name='submit' class='btn' value='".$text['button-save']."'>\n"; echo " <input type='submit' name='submit' class='btn' value='".$text['button-save']."'>\n";
echo " </td>\n"; echo " </td>\n";
@@ -358,4 +361,5 @@ else {
//include the footer //include the footer
require_once "resources/footer.php"; require_once "resources/footer.php";
?> ?>