| @@ -4,13 +4,16 @@ | ||
| 4 | 4 | } |
| 5 | 5 | global $wpdb,$wppmfunction,$current_user; |
| 6 | 6 | $wppm_users_role = get_option('wppm_user_role'); |
| 7 | 7 | $proj_id = isset($_POST['proj_id']) ? sanitize_text_field($_POST['proj_id']) : '' ; |
| 8 | -if (!(($current_user->ID && $current_user->has_cap('manage_options')) || $wppmfunction->has_project_permission('assign_project_users',$proj_id))) {exit;} | |
| 9 | -$project = $wpdb->get_row( "SELECT * FROM {$wpdb->prefix}wppm_project where id = $proj_id" ); | |
| 8 | +$proj_id = esc_sql($proj_id); | |
| 9 | +$wppm_current_user_capability = get_user_meta( $current_user->ID, 'wppm_capability', true ); | |
| 10 | +$project = $wpdb->get_row( "SELECT * FROM {$wpdb->prefix}wppm_project where id = '$proj_id'" ); | |
| 11 | +if (!(($current_user->ID && $current_user->has_cap('manage_options')) || $wppmfunction->has_project_permission('assign_project_users',$proj_id) || ($project->created_by==$current_user->ID && $wppm_current_user_capability == 'wppm_manager') || ($current_user->ID && $current_user->has_cap('wppm_admin')))) {exit;} | |
| 10 | 12 | if(!empty($project->users)){ |
| 11 | 13 | $users = explode(",",$project->users); |
| 12 | 14 | } |
| 15 | +$settings = get_option("wppm-ap-modal"); | |
| 13 | 16 | ob_start(); |
| 14 | 17 | ?> |
| 15 | 18 | <form id="frm_get_project_users"> |
| 16 | 19 | <div id="wppm_get_users"> |
| @@ -20,8 +23,9 @@ | ||
| 20 | 23 | foreach($users as $user){ ?> |
| 21 | 24 | <div id="wppm_user_display_container_<?php echo esc_attr($user)?>" class="row wppm_user_display_container"> |
| 22 | 25 | <?php |
| 23 | 26 | $userdata = get_userdata( $user ); |
| 27 | + $user = esc_sql($user); | |
| 24 | 28 | $project_user = $wpdb->get_row("SELECT * FROM {$wpdb->prefix}wppm_project_users WHERE proj_id = '$proj_id' AND user_id = '$user'"); |
| 25 | 29 | ?> |
| 26 | 30 | <div class="flex-container col-sm-4"> |
| 27 | 31 | <span class="wppm_filter_display_text"> |
| @@ -56,11 +60,17 @@ | ||
| 56 | 60 | } |
| 57 | 61 | ?> |
| 58 | 62 | </div> |
| 59 | 63 | <input type="hidden" name="action" value="wppm_set_project_users" /> |
| 64 | + <input type="hidden" name="_ajax_nonce" value="<?php echo esc_attr( wp_create_nonce( 'wppm_set_project_users' ) ); ?>"> | |
| 60 | 65 | <input type="hidden" id="wppm_proj_id" name="proj_id" value="<?php echo esc_attr($proj_id) ?>" /> |
| 61 | 66 | </div> |
| 62 | 67 | </form> |
| 68 | +<style> | |
| 69 | + li { | |
| 70 | + color:<?php echo esc_attr( $settings['body-text-color'])?>!important; | |
| 71 | + } | |
| 72 | +</style> | |
| 63 | 73 | <script> |
| 64 | 74 | jQuery(document).ready(function(){ |
| 65 | 75 | jQuery("input[name='user_name']").keypress(function(e) { |
| 66 | 76 | //Enter key |
