From fd62d027ecd4584a7e2efd0ed5448e45ffb862c4 Mon Sep 17 00:00:00 2001
From: FusionPBX <markjcrane@gmail.com>
Date: Tue, 5 Feb 2019 10:39:17 -0700
Subject: [PATCH] Update phrase_delete.php

---
 app/phrases/phrase_delete.php | 73 ++++++++++++++++++++---------------
 1 file changed, 41 insertions(+), 32 deletions(-)

diff --git a/app/phrases/phrase_delete.php b/app/phrases/phrase_delete.php
index 1a4e9e7a53..d2ff264d4e 100644
--- a/app/phrases/phrase_delete.php
+++ b/app/phrases/phrase_delete.php
@@ -17,24 +17,26 @@
 
 	The Initial Developer of the Original Code is
 	Mark J Crane <markjcrane@fusionpbx.com>
-	Portions created by the Initial Developer are Copyright (C) 2008-2012
+	Portions created by the Initial Developer are Copyright (C) 2008-2018
 	the Initial Developer. All Rights Reserved.
 
 	Contributor(s):
 	Mark J Crane <markjcrane@fusionpbx.com>
 */
-include "root.php";
-require_once "resources/require.php";
-require_once "resources/check_auth.php";
-require_once "resources/functions/save_phrases_xml.php";
+//includes
+	include "root.php";
+	require_once "resources/require.php";
+	require_once "resources/check_auth.php";
+	require_once "resources/functions/save_phrases_xml.php";
 
-if (permission_exists('phrase_delete')) {
-	//access granted
-}
-else {
-	echo "access denied";
-	exit;
-}
+//check permissions
+	if (permission_exists('phrase_delete')) {
+		//access granted
+	}
+	else {
+		echo "access denied";
+		exit;
+	}
 
 //add multi-lingual support
 	$language = new text;
@@ -43,29 +45,36 @@ else {
 //get values
 	$phrase_uuid = $_GET["id"];
 
-if ($phrase_uuid != '') {
-	//delete phrase details
-		$sql = "delete from v_phrase_details ";
-		$sql .= "where phrase_uuid = '".$phrase_uuid."' ";
-		$sql .= "and domain_uuid = '".$domain_uuid."' ";
-		$prep_statement = $db->prepare(check_sql($sql));
-		$prep_statement->execute();
-		unset($sql);
+//delete the data
+	if (is_uuid($phrase_uuid)) {
+		//delete phrase details
+			$sql = "delete from v_phrase_details ";
+			$sql .= "where phrase_uuid = '".$phrase_uuid."' ";
+			$sql .= "and domain_uuid = '".$domain_uuid."' ";
+			$prep_statement = $db->prepare(check_sql($sql));
+			$prep_statement->execute();
+			unset($sql);
 
-	//delete phrase
-		$sql = "delete from v_phrases ";
-		$sql .= "where phrase_uuid = '".$phrase_uuid."' ";
-		$sql .= "and domain_uuid = '".$domain_uuid."' ";
-		$prep_statement = $db->prepare(check_sql($sql));
-		$prep_statement->execute();
-		$result = $prep_statement->fetchAll(PDO::FETCH_NAMED);
-		unset ($prep_statement);
-}
+		//delete phrase
+			$sql = "delete from v_phrases ";
+			$sql .= "where phrase_uuid = '".$phrase_uuid."' ";
+			$sql .= "and domain_uuid = '".$domain_uuid."' ";
+			$prep_statement = $db->prepare(check_sql($sql));
+			$prep_statement->execute();
+			$result = $prep_statement->fetchAll(PDO::FETCH_NAMED);
+			unset ($prep_statement);
+	}
 
-save_phrases_xml();
+//save the xml
+	save_phrases_xml();
+
+//clear the cache
+	$fp = event_socket_create($_SESSION['event_socket_ip_address'], $_SESSION['event_socket_port'], $_SESSION['event_socket_password']);
+	$cache = new cache;
+	$cache->delete("languages:".$phrase_language);
 
 //redirect the user
 	message::add($text['message-delete']);
 	header("Location: phrases.php");
-	return;
-?>
\ No newline at end of file
+
+?>