| 1 |
<?php |
| 2 |
if ( ! defined( 'ABSPATH' ) ) { |
| 3 |
exit; // Exit if accessed directly |
| 4 |
} |
| 5 |
|
| 6 |
global $current_user, $wppmfunction, $wpdb; |
| 7 |
$attachment = isset($_POST['attachment']) ? intval(sanitize_text_field($_POST['attachment'])) : '0' ; |
| 8 |
$comment_id = isset($_POST['comment_id']) ? intval(sanitize_text_field($_POST['comment_id'])) : '0' ; |
| 9 |
$task_id = isset($_POST['task_id']) ? intval(sanitize_text_field($_POST['task_id'])) : '0' ; |
| 10 |
$task_comment = $wpdb->get_row( "SELECT * FROM {$wpdb->prefix}wppm_task_comment where id = $comment_id AND task_id=$task_id"); |
| 11 |
if(!(((!empty($task_comment)) && ($task_comment->created_by == $current_user->ID)) || ($current_user->has_cap('manage_options')) || ($wppmfunction->has_comment_permission('edit_task_comment',$task_id,$comment_id)))){ |
| 12 |
exit; |
| 13 |
} |
| 14 |
$success = $wpdb->delete( |
| 15 |
$wpdb->prefix . 'wppm_attachments', |
| 16 |
array( 'id' => $attachment ) |
| 17 |
); |
| 18 |
if( !$success ) return false; |
| 19 |
$task_attachment = $wpdb->get_var("SELECT attachment_ids FROM {$wpdb->prefix}wppm_task_comment WHERE id=$comment_id "); |
| 20 |
$task_attachment = explode(",",$task_attachment); |
| 21 |
if(!empty($task_attachment)){ |
| 22 |
foreach($task_attachment as $key=>$val){ |
| 23 |
if($val == $attachment){ |
| 24 |
unset($task_attachment[$key]); |
| 25 |
} |
| 26 |
} |
| 27 |
} |
| 28 |
$tattachment = implode(',',$task_attachment); |
| 29 |
$values=array( |
| 30 |
'attachment_ids'=>$tattachment |
| 31 |
); |
| 32 |
$wpdb->update($wpdb->prefix.'wppm_task_comment', $values, array('id'=>$comment_id)); |
| 33 |
$attachment = apply_filters('wppm_after_delete_comment_attachment',$attachment,$comment_id,$task_id); |
