ID && $current_user->has_cap('manage_options')) || ($wppmfunction->has_permission('view_task',$id)))) {exit;} $proj_id = isset($_POST) && isset($_POST['proj_id']) ? intval(sanitize_text_field($_POST['proj_id'])) : 0; $auth_id = $wppmfunction->wppm_get_auth_code($id); $auth_id = sanitize_text_field($auth_id); $current_date = date('Y-m-d'); $wppm_current_user_capability = get_user_meta( $current_user->ID, 'wppm_capability', true ); $cu_id = $current_user->ID; if(!empty($id)){ $task = $wpdb->get_row( "SELECT * FROM {$wpdb->prefix}wppm_task where id='".esc_sql($id)."'"); $project_data = $wppmfunction->get_project($task->project); $task_comment = $wpdb->get_results( "SELECT * FROM {$wpdb->prefix}wppm_task_comment where task_id='".esc_sql($id)."' ORDER BY create_time DESC"); $orderby_proj_sql = esc_sql(sanitize_sql_orderby( "create_time DESC" )); $task_comment = $wpdb->get_results( "SELECT * FROM {$wpdb->prefix}wppm_task_comment where task_id='".esc_sql($id)."' ORDER BY ". $orderby_proj_sql); $task_proj = isset($task->project) ? esc_sql($task->project) :""; $task_id = isset($task->id) ? esc_sql($task->id):""; } $user_role = $wpdb->get_var( "SELECT role_id FROM {$wpdb->prefix}wppm_project_users where proj_id = '$task_proj' AND user_id = '$cu_id'"); if(!empty($task_proj)){ $project_name = $wpdb->get_var( "SELECT project_name FROM {$wpdb->prefix}wppm_project where id= '$task_proj'"); } $wppm_checklist=$wpdb->get_results( "SELECT * FROM {$wpdb->prefix}wppm_checklist where task_id='$task_id'" ); if(!empty($task->status)){ $task_status_var = esc_sql($task->status); $task_status = $wpdb->get_row( "SELECT * FROM {$wpdb->prefix}wppm_task_statuses where id='$task_status_var'"); } if(!empty($task->priority)){ $task_priority_var = esc_sql($task->priority); $task_priority = $wpdb->get_row( "SELECT * FROM {$wpdb->prefix}wppm_task_priorities where id='$task_priority_var'"); } if(!empty($task->users)){ $users = explode(",",$task->users); } if(!empty($task->description)){ $task_description = stripslashes((htmlspecialchars_decode($task->description, ENT_QUOTES))); } if($wppm_task_time == 1){ $task_start_date = $task->start_date; $task_end_date = $task->end_date; } elseif($wppm_task_time == 0){ $tsDate = new DateTime($task->start_date); $teDate = new DateTime($task->end_date); $task_start_date = $tsDate->format('Y-m-d'); $task_end_date = $teDate->format('Y-m-d'); } $flag = false; $wppm_task_fillter = $wpdb->get_results("SELECT * FROM {$wpdb->prefix}wppm_task"); if(!empty($wppm_task_fillter)){ foreach($wppm_task_fillter as $key_filter=>$val_filter){ $val_array = (array) $val_filter; $tusers = $val_array['users']; $tusers_arr = explode(',',$tusers); $tproject_id = $val_array['project']; $tproject_id = esc_sql($tproject_id); if(!empty($tusers) && in_array($current_user->ID,$tusers_arr)){ $project_user_role = $wpdb->get_var("SELECT role_id FROM {$wpdb->prefix}wppm_project_users WHERE proj_id = '$tproject_id' AND user_id = '$cu_id'"); $project_users = $wpdb->get_var("SELECT users FROM {$wpdb->prefix}wppm_project WHERE id = '$tproject_id'"); $project_users_arr = explode(',',(string)$project_users); if((!empty($project_user_role)) && ($project_user_role == 1) && in_array($current_user->ID,$project_users_arr)){ $flag= true; break; } } } } $project_creator = $wpdb->get_var("SELECT created_by FROM {$wpdb->prefix}wppm_project WHERE created_by = '$cu_id'"); ?>