| @@ -6,9 +6,9 @@ | ||
| 6 | 6 | $wppm_users_role = get_option('wppm_user_role'); |
| 7 | 7 | $proj_id = isset($_POST['proj_id']) ? sanitize_text_field($_POST['proj_id']) : '' ; |
| 8 | 8 | $proj_id = esc_sql($proj_id); |
| 9 | 9 | $wppm_current_user_capability = get_user_meta( $current_user->ID, 'wppm_capability', true ); |
| 10 | -$project = $wpdb->get_row( "SELECT * FROM {$wpdb->prefix}wppm_project where id = '$proj_id'" ); | |
| 10 | +$project = $wpdb->get_row( "SELECT * FROM {$wpdb->prefix}wppm_project where id = $proj_id" ); | |
| 11 | 11 | if (!(($current_user->ID && $current_user->has_cap('manage_options')) || $wppmfunction->has_project_permission('assign_project_users',$proj_id) || ($project->created_by==$current_user->ID && $wppm_current_user_capability == 'wppm_manager') || ($current_user->ID && $current_user->has_cap('wppm_admin')))) {exit;} |
| 12 | 12 | if(!empty($project->users)){ |
| 13 | 13 | $users = explode(",",$project->users); |
| 14 | 14 | } |
