| @@ -4,12 +4,10 @@ | ||
| 4 | 4 | } |
| 5 | 5 | global $wpdb,$wppmfunction,$current_user; |
| 6 | 6 | $wppm_users_role = get_option('wppm_user_role'); |
| 7 | 7 | $proj_id = isset($_POST['proj_id']) ? sanitize_text_field($_POST['proj_id']) : '' ; |
| 8 | -$proj_id = esc_sql($proj_id); | |
| 9 | -$wppm_current_user_capability = get_user_meta( $current_user->ID, 'wppm_capability', true ); | |
| 10 | -$project = $wpdb->get_row( "SELECT * FROM {$wpdb->prefix}wppm_project where id = '$proj_id'" ); | |
| 11 | -if (!(($current_user->ID && $current_user->has_cap('manage_options')) || $wppmfunction->has_project_permission('assign_project_users',$proj_id) || ($project->created_by==$current_user->ID && $wppm_current_user_capability == 'wppm_manager') || ($current_user->ID && $current_user->has_cap('wppm_admin')))) {exit;} | |
| 8 | +if (!(($current_user->ID && $current_user->has_cap('manage_options')) || $wppmfunction->has_project_permission('assign_project_users',$proj_id))) {exit;} | |
| 9 | +$project = $wpdb->get_row( "SELECT * FROM {$wpdb->prefix}wppm_project where id = $proj_id" ); | |
| 12 | 10 | if(!empty($project->users)){ |
| 13 | 11 | $users = explode(",",$project->users); |
| 14 | 12 | } |
| 15 | 13 | $settings = get_option("wppm-ap-modal"); |
| @@ -23,9 +21,8 @@ | ||
| 23 | 21 | foreach($users as $user){ ?> |
| 24 | 22 | <div id="wppm_user_display_container_<?php echo esc_attr($user)?>" class="row wppm_user_display_container"> |
| 25 | 23 | <?php |
| 26 | 24 | $userdata = get_userdata( $user ); |
| 27 | - $user = esc_sql($user); | |
| 28 | 25 | $project_user = $wpdb->get_row("SELECT * FROM {$wpdb->prefix}wppm_project_users WHERE proj_id = '$proj_id' AND user_id = '$user'"); |
| 29 | 26 | ?> |
| 30 | 27 | <div class="flex-container col-sm-4"> |
| 31 | 28 | <span class="wppm_filter_display_text"> |
