← All changes | includes/admin/projects/get_users.php +20 -20 5.0.6 → 3.0.6 View file →

		@@ -3,11 +3,11 @@
3	3	exit; // Exit if accessed directly
4	4	}
5	5	global $wpdb,$wppmfunction,$current_user;
6	6	$wppm_users_role = get_option('wppm_user_role');
7		-$proj_id = isset($_POST['proj_id']) ? absint(sanitize_text_field(wp_unslash($_POST['proj_id']))) : '' ;
	7	+$proj_id = isset($_POST['proj_id']) ? sanitize_text_field($_POST['proj_id']) : '' ;
8	8	$wppm_current_user_capability = get_user_meta( $current_user->ID, 'wppm_capability', true );
9		-$project = $wpdb->get_row($wpdb->prepare("SELECT * FROM {$wpdb->prefix}wppm_project where id = %d", $proj_id));
	9	+$project = $wpdb->get_row( "SELECT * FROM {$wpdb->prefix}wppm_project where id = $proj_id" );
10	10	if (!(($current_user->ID && $current_user->has_cap('manage_options')) || $wppmfunction->has_project_permission('assign_project_users',$proj_id) || ($project->created_by==$current_user->ID && $wppm_current_user_capability == 'wppm_manager') || ($current_user->ID && $current_user->has_cap('wppm_admin')))) {exit;}
11	11	if(!empty($project->users)){
12	12	$users = explode(",",$project->users);
13	13	}
		@@ -22,30 +22,30 @@
22	22	foreach($users as $user){ ?>
23	23	<div id="wppm_user_display_container_<?php echo esc_attr($user)?>" class="row wppm_user_display_container">
24	24	<?php
25	25	$userdata = get_userdata( $user );
26		- $user = absint($user);
27		- $project_user = $wpdb->get_row($wpdb->prepare("SELECT * FROM {$wpdb->prefix}wppm_project_users WHERE proj_id = %d AND user_id = %d", $proj_id, $user));
	26	+ $project_user = $wpdb->get_row("SELECT * FROM {$wpdb->prefix}wppm_project_users WHERE proj_id = '$proj_id' AND user_id = '$user'");
28	27	?>
29	28	<div class="flex-container col-sm-4">
30	29	<span class="wppm_filter_display_text">
31		- <?php echo esc_html($userdata->display_name); ?>
	30	+ <?php echo esc_html_e($userdata->display_name,'taskbuilder'); ?>
32	31	<input type="hidden" name="user_names[]" value="<?php echo esc_attr($user) ?>">
33	32	</span>
34	33	</div>
35	34	<div class="col-sm-4 wppm_user_role">
36		- <select size="sm" class="form-control" id="wppm_select_user_role_<?php echo esc_attr( $user ); ?>" name="wppm_select_user_role_<?php echo esc_attr( $user ); ?>">
37		- <?php if ( ! empty( $wppm_users_role ) ) : ?>
38		- <?php foreach ( $wppm_users_role as $key => $role ) : ?><?php
39		- $selected = ( ! empty( $project_user ) && $key == $project_user->role_id )
40		- ? 'selected="selected"'
41		- : '';
42		- ?>
43		- <option <?php echo esc_attr( $selected ); ?> value="<?php echo esc_attr( $key ); ?>">
44		- <?php echo esc_html( $role['label'] ); ?>
45		- </option>
46		- <?php endforeach; ?>
47		- <?php endif; ?>
	35	+ <select size="sm" class="form-control" id="wppm_select_user_role_<?php echo esc_attr($user) ?>" name="wppm_select_user_role_<?php echo esc_attr($user) ?>">
	36	+ <?php
	37	+ if(!empty($wppm_users_role)){
	38	+ foreach($wppm_users_role as $key=>$role){
	39	+ if(!empty($role)){
	40	+ foreach($role as $k=>$val){
	41	+ $selected = (!empty($project_user) && $key == $project_user->role_id) ? 'selected="selected"' : '';
	42	+ ?><option <?php echo $selected?> value="<?php echo esc_attr($key) ?>"><?php echo esc_html_e($role['label'],'taskbuilder') ?></option><?php
	43	+ }
	44	+ }
	45	+ }
	46	+ }
	47	+ ?>
48	48	</select>
49	49	</div>
50	50	<div class="col-sm-4 wppm_delete_user_icon">
51	51	<span onclick="wppm_remove_filter(<?php echo esc_attr($user)?>);"><img src="<?php echo esc_url( WPPM_PLUGIN_URL . 'asset/images/trash.svg'); ?>" alt="delete"></span>
		@@ -53,9 +53,9 @@
53	53	?>
54	54	</div>
55	55	<?php }
56	56	} else{
57		- ?><span class="wppm_project_users_not_assign_label"><?php echo esc_html_e('None','taskbuilder');?></span><?php
	57	+ ?><span class="wppm_project_users_not_assign_label"><?php echo esc_html_e('None','wp_projects');?></span><?php
58	58	}
59	59	?>
60	60	</div>
61	61	<input type="hidden" name="action" value="wppm_set_project_users" />
		@@ -105,9 +105,9 @@
105	105	if(!empty($wppm_users_role)){
106	106	foreach($wppm_users_role as $key=>$role){
107	107	if(!empty($role)){
108	108	foreach($role as $k=>$val){
109		- ?>'<option value="<?php echo esc_attr($key) ?>"><?php echo esc_html($role['label']) ?></option>'+<?php
	109	+ ?>'<option value="<?php echo esc_attr($key) ?>"><?php echo esc_html_e($role['label'],'taskbuilder') ?></option>'+<?php
110	110	}
111	111	}
112	112	}
113	113	}
		@@ -138,5 +138,5 @@
138	138	$output = array(
139	139	'body' => $body,
140	140	'footer' => $footer
141	141	);
142		-echo wp_json_encode($output);
	142	+echo json_encode($output);