← All changes | includes/admin/projects/get_users.php +2 -12 5.0.3 → 2.0.8 View file →

		@@ -4,16 +4,13 @@
4	4	}
5	5	global $wpdb,$wppmfunction,$current_user;
6	6	$wppm_users_role = get_option('wppm_user_role');
7	7	$proj_id = isset($_POST['proj_id']) ? sanitize_text_field($_POST['proj_id']) : '' ;
8		-$proj_id = esc_sql($proj_id);
9		-$wppm_current_user_capability = get_user_meta( $current_user->ID, 'wppm_capability', true );
10		-$project = $wpdb->get_row( "SELECT * FROM {$wpdb->prefix}wppm_project where id = '$proj_id'" );
11		-if (!(($current_user->ID && $current_user->has_cap('manage_options')) || $wppmfunction->has_project_permission('assign_project_users',$proj_id) || ($project->created_by==$current_user->ID && $wppm_current_user_capability == 'wppm_manager') || ($current_user->ID && $current_user->has_cap('wppm_admin')))) {exit;}
	8	+if (!(($current_user->ID && $current_user->has_cap('manage_options')) || $wppmfunction->has_project_permission('assign_project_users',$proj_id))) {exit;}
	9	+$project = $wpdb->get_row( "SELECT * FROM {$wpdb->prefix}wppm_project where id = $proj_id" );
12	10	if(!empty($project->users)){
13	11	$users = explode(",",$project->users);
14	12	}
15		-$settings = get_option("wppm-ap-modal");
16	13	ob_start();
17	14	?>
18	15	<form id="frm_get_project_users">
19	16	<div id="wppm_get_users">
		@@ -23,9 +20,8 @@
23	20	foreach($users as $user){ ?>
24	21	<div id="wppm_user_display_container_<?php echo esc_attr($user)?>" class="row wppm_user_display_container">
25	22	<?php
26	23	$userdata = get_userdata( $user );
27		- $user = esc_sql($user);
28	24	$project_user = $wpdb->get_row("SELECT * FROM {$wpdb->prefix}wppm_project_users WHERE proj_id = '$proj_id' AND user_id = '$user'");
29	25	?>
30	26	<div class="flex-container col-sm-4">
31	27	<span class="wppm_filter_display_text">
		@@ -60,17 +56,11 @@
60	56	}
61	57	?>
62	58	</div>
63	59	<input type="hidden" name="action" value="wppm_set_project_users" />
64		- <input type="hidden" name="_ajax_nonce" value="<?php echo esc_attr( wp_create_nonce( 'wppm_set_project_users' ) ); ?>">
65	60	<input type="hidden" id="wppm_proj_id" name="proj_id" value="<?php echo esc_attr($proj_id) ?>" />
66	61	</div>
67	62	</form>
68		-<style>
69		- li {
70		- color:<?php echo esc_attr( $settings['body-text-color'])?>!important;
71		- }
72		-</style>
73	63	<script>
74	64	jQuery(document).ready(function(){
75	65	jQuery("input[name='user_name']").keypress(function(e) {
76	66	//Enter key