| 1 |
<?php |
| 2 |
if ( ! defined( 'ABSPATH' ) ) { |
| 3 |
exit; // Exit if accessed directly |
| 4 |
} |
| 5 |
|
| 6 |
global $current_user, $wppmfunction ,$wpdb; |
| 7 |
$project_id = isset($_POST['project_id']) ? intval(sanitize_text_field($_POST['project_id'])) : 0 ; |
| 8 |
$project = $wpdb->get_row( "SELECT * FROM {$wpdb->prefix}wppm_project where id = '".esc_sql($project_id)."'" ); |
| 9 |
$wppm_current_user_capability = get_user_meta( $current_user->ID, 'wppm_capability', true ); |
| 10 |
if (!(($current_user->ID && $current_user->has_cap('manage_options')) || $wppmfunction->has_project_permission('delete_project',$project_id) || ($project->created_by==$current_user->ID && $wppm_current_user_capability == 'wppm_manager') || ($current_user->ID && $current_user->has_cap('wppm_admin')))) {exit;} |
| 11 |
|
| 12 |
if ( check_ajax_referer( 'wppm_set_delete_project', '_ajax_nonce', false ) != 1 ) { |
| 13 |
wp_send_json_error( 'Unauthorised request!', 401 ); |
| 14 |
} |
| 15 |
|
| 16 |
$tasks = $wpdb->get_results("SELECT * FROM {$wpdb->prefix}wppm_task where project = '".esc_sql($project_id)."'" ); |
| 17 |
/*************delete project********/ |
| 18 |
$wpdb->delete($wpdb->prefix.'wppm_project',array('id'=>"$project_id")); |
| 19 |
|
| 20 |
/*************delete project comment********/ |
| 21 |
$sql="SELECT attachment_ids FROM {$wpdb->prefix}wppm_project_comment WHERE proj_id ='".esc_sql($project_id)."'" ; |
| 22 |
$proj_comm_attachment_ids= $wpdb->get_results( $sql ); |
| 23 |
if(!empty($proj_comm_attachment_ids)){ |
| 24 |
foreach ($proj_comm_attachment_ids as $proj_attachment_id){ |
| 25 |
$proj_attachment_ids_temp=array(); |
| 26 |
if($proj_attachment_id->attachment_ids){ |
| 27 |
$proj_attachment_ids_temp= explode(',', $proj_attachment_id->attachment_ids); |
| 28 |
} |
| 29 |
foreach ($proj_attachment_ids_temp as $proj_attachment_id){ |
| 30 |
$proj_attachment_id = esc_sql($proj_attachment_id); |
| 31 |
$sql="SELECT * FROM {$wpdb->prefix}wppm_attachments WHERE id ='$proj_attachment_id'"; |
| 32 |
$att_result=$wpdb->get_row($sql); |
| 33 |
if(!empty($att_result)){ |
| 34 |
$sql_query="SELECT file_path FROM {$wpdb->prefix}wppm_attachments WHERE file_path ='".esc_sql($att_result->file_path)."'"; |
| 35 |
$proj_attach_result=$wpdb->get_results($sql_query); |
| 36 |
$proj_result_count = count($proj_attach_result); |
| 37 |
if(file_exists($att_result->file_path) && $proj_result_count < 2) |
| 38 |
{ |
| 39 |
unlink($att_result->file_path); |
| 40 |
} |
| 41 |
$wpdb->delete($wpdb->prefix.'wppm_attachments', array( 'id' => "$proj_attachment_id")); |
| 42 |
} |
| 43 |
} |
| 44 |
} |
| 45 |
} |
| 46 |
$wpdb->delete($wpdb->prefix.'wppm_project_comment',array('proj_id'=>esc_sql($project_id))); |
| 47 |
$wpdb->delete($wpdb->prefix.'wppm_project_meta',array('project_id'=>esc_sql($project_id))); |
| 48 |
$wpdb->delete($wpdb->prefix.'wppm_project_comment_meta',array('proj_id'=>esc_sql($project_id))); |
| 49 |
|
| 50 |
/*************delete project's tasks and comments********/ |
| 51 |
foreach($tasks as $task){ |
| 52 |
$sql="SELECT attachment_ids FROM {$wpdb->prefix}wppm_task_comment WHERE task_id ='".esc_sql($task->id)."'"; |
| 53 |
$thread_attachment_ids= $wpdb->get_results( $sql ); |
| 54 |
$tid = esc_sql($task->id); |
| 55 |
/***************************Code for deleting attachment files****************************************************/ |
| 56 |
if(!empty($thread_attachment_ids)){ |
| 57 |
foreach ($thread_attachment_ids as $thread_attachment_id){ |
| 58 |
$attachment_ids_temp=array(); |
| 59 |
if($thread_attachment_id->attachment_ids){ |
| 60 |
$attachment_ids_temp= explode(',', $thread_attachment_id->attachment_ids); |
| 61 |
} |
| 62 |
//$attachment_ids=$attachment_ids_temp; |
| 63 |
foreach ($attachment_ids_temp as $attachment_id){ |
| 64 |
$sql="SELECT * FROM {$wpdb->prefix}wppm_attachments WHERE id = '".esc_sql($attachment_id)."'" ; |
| 65 |
$result=$wpdb->get_row($sql); |
| 66 |
if(!empty($result)){ |
| 67 |
$sql_query="SELECT file_path FROM {$wpdb->prefix}wppm_attachments WHERE file_path ='".esc_sql($result->file_path)."'"; |
| 68 |
$attach_result=$wpdb->get_results($sql_query); |
| 69 |
$result_count = count($attach_result); |
| 70 |
if(file_exists($result->file_path) && $result_count < 2) |
| 71 |
{ |
| 72 |
unlink($result->file_path); |
| 73 |
} |
| 74 |
$wpdb->delete($wpdb->prefix.'wppm_attachments', array( 'id' => esc_sql($attachment_id))); |
| 75 |
} |
| 76 |
} |
| 77 |
} |
| 78 |
} |
| 79 |
/***************************Code for deleting checklists****************************************************/ |
| 80 |
$sql="SELECT id FROM {$wpdb->prefix}wppm_checklist WHERE task_id = '".($tid)."'" ; |
| 81 |
$checklists = $wpdb->get_results( $sql ); |
| 82 |
if(!empty($checklists)){ |
| 83 |
foreach($checklists as $checklist){ |
| 84 |
$chk_array = (array) $checklist; |
| 85 |
$chk_id = esc_sql($chk_array['id']); |
| 86 |
$sql="SELECT id FROM {$wpdb->prefix}wppm_checklist_items WHERE checklist_id ='$chk_id '"; |
| 87 |
$checklist_items = $wpdb->get_results( $sql ); |
| 88 |
if(!empty($checklist_items)){ |
| 89 |
foreach($checklist_items as $ch_item){ |
| 90 |
$chk_items_array = (array) $ch_item; |
| 91 |
$chk_item_id = esc_sql($chk_items_array['id']); |
| 92 |
$wpdb->delete($wpdb->prefix.'wppm_checklist_items',array('id'=>"$chk_item_id")); |
| 93 |
} |
| 94 |
} |
| 95 |
$wpdb->delete($wpdb->prefix.'wppm_checklist',array('id'=> "$chk_id")); |
| 96 |
} |
| 97 |
} |
| 98 |
$wpdb->delete($wpdb->prefix.'wppm_task',array('project'=>esc_sql($project_id))); |
| 99 |
$wpdb->delete($wpdb->prefix.'wppm_task_meta',array('task_id'=>$tid)); |
| 100 |
$wpdb->delete($wpdb->prefix.'wppm_task_comment',array('task_id'=>$tid)); |
| 101 |
$wpdb->delete($wpdb->prefix.'wppm_task_comment_meta',array('task_id'=>$tid)); |
| 102 |
} |
| 103 |
|
