← All changes | includes/admin/projects/wppm_set_delete_project.php +102 -37 1.0.2 → 6.0.6 View file →

		@@ -1,37 +1,102 @@
1		-<?php
2		-if ( ! defined( 'ABSPATH' ) ) {
3		- exit; // Exit if accessed directly
4		-}
5		-
6		-global $current_user, $wppmfunction ,$wpdb;
7		-$project_id = isset($_POST['project_id']) ? sanitize_text_field($_POST['project_id']) : 0 ;
8		-if (!(($current_user->ID && $current_user->has_cap('manage_options')) || $wppmfunction->has_project_permission('delete_project',$project_id))) {exit;}
9		-$tasks = $wpdb->get_results("SELECT * FROM {$wpdb->prefix}wppm_task where project = $project_id");
10		-/*************delete project********/
11		- $wpdb->delete($wpdb->prefix.'wppm_project',array('id'=>$project_id));
12		-
13		-/*************delete project's tasks and comments********/
14		-foreach($tasks as $task){
15		- $sql="SELECT attachment_ids FROM {$wpdb->prefix}wppm_task_comment WHERE task_id =".$task->id;
16		- $thread_attachment_ids= $wpdb->get_results( $sql );
17		-
18		- /***************************Code for deleting attachment files****************************************************/
19		- foreach ($thread_attachment_ids as $thread_attachment_id){
20		- $attachment_ids_temp=array();
21		- if($thread_attachment_id->attachment_ids){
22		- $attachment_ids_temp= explode(',', $thread_attachment_id->attachment_ids);
23		- }
24		- //$attachment_ids=$attachment_ids_temp;
25		- foreach ($attachment_ids_temp as $attachment_id){
26		- $sql="SELECT * FROM {$wpdb->prefix}wppm_attachments WHERE id =".$attachment_id;
27		- $result=$wpdb->get_row($sql);
28		- if(file_exists($result->file_path))
29		- {
30		- unlink($result->file_path);
31		- }
32		- $wpdb->delete($wpdb->prefix.'wppm_attachments', array( 'id' => $attachment_id));
33		- }
34		- }
35		- $wpdb->delete($wpdb->prefix.'wppm_task',array('project'=>$project_id));
36		- $wpdb->delete($wpdb->prefix.'wppm_task_comment',array('task_id'=>$task->id));
37		-}
	1	+<?php
	2	+if ( ! defined( 'ABSPATH' ) ) {
	3	+ exit; // Exit if accessed directly
	4	+}
	5	+
	6	+global $current_user, $wppmfunction ,$wpdb;
	7	+
	8	+if ( check_ajax_referer( 'wppm_set_delete_project', '_ajax_nonce', false ) != 1 ) {
	9	+ wp_send_json_error( 'Unauthorised request!', 401 );
	10	+}
	11	+$project_id = isset($_POST['project_id']) ? intval(sanitize_text_field(wp_unslash($_POST['project_id']))) : 0 ;
	12	+$project = $wpdb->get_row($wpdb->prepare("SELECT * FROM {$wpdb->prefix}wppm_project where id = %d",absint($project_id)));
	13	+$wppm_current_user_capability = get_user_meta( $current_user->ID, 'wppm_capability', true );
	14	+if (!(($current_user->ID && $current_user->has_cap('manage_options')) || $wppmfunction->has_project_permission('delete_project',$project_id) || ($project->created_by==$current_user->ID && $wppm_current_user_capability == 'wppm_manager') || ($current_user->ID && $current_user->has_cap('wppm_admin')))) {exit;}
	15	+
	16	+$tasks = $wpdb->get_results($wpdb->prepare("SELECT * FROM {$wpdb->prefix}wppm_task where project = %d",absint($project_id)));
	17	+/*************delete project********/
	18	+ $wpdb->delete($wpdb->prefix.'wppm_project',array('id'=>"$project_id"));
	19	+
	20	+/*************delete project comment********/
	21	+$sql=$wpdb->prepare("SELECT attachment_ids FROM {$wpdb->prefix}wppm_project_comment WHERE proj_id = %d",absint($project_id));
	22	+$proj_comm_attachment_ids= $wpdb->get_results( $sql );
	23	+if(!empty($proj_comm_attachment_ids)){
	24	+ foreach ($proj_comm_attachment_ids as $proj_attachment_id){
	25	+ $proj_attachment_ids_temp=array();
	26	+ if($proj_attachment_id->attachment_ids){
	27	+ $proj_attachment_ids_temp= explode(',', $proj_attachment_id->attachment_ids);
	28	+ }
	29	+ foreach ($proj_attachment_ids_temp as $proj_attachment_id){
	30	+ $proj_attachment_id = absint($proj_attachment_id);
	31	+ $sql=$wpdb->prepare("SELECT * FROM {$wpdb->prefix}wppm_attachments WHERE id = %d",absint($proj_attachment_id));
	32	+ $att_result=$wpdb->get_row($sql);
	33	+ if(!empty($att_result)){
	34	+ $sql_query=$wpdb->prepare("SELECT file_path FROM {$wpdb->prefix}wppm_attachments WHERE file_path = %s",esc_sql($att_result->file_path));
	35	+ $proj_attach_result=$wpdb->get_results($sql_query);
	36	+ $proj_result_count = count($proj_attach_result);
	37	+ if(file_exists($att_result->file_path) && $proj_result_count < 2)
	38	+ {
	39	+ wp_delete_file($att_result->file_path);
	40	+ }
	41	+ $wpdb->delete($wpdb->prefix.'wppm_attachments', array( 'id' => "$proj_attachment_id"));
	42	+ }
	43	+ }
	44	+ }
	45	+}
	46	+$wpdb->delete($wpdb->prefix.'wppm_project_comment',array('proj_id'=>absint($project_id)));
	47	+$wpdb->delete($wpdb->prefix.'wppm_project_meta',array('project_id'=>absint($project_id)));
	48	+$wpdb->delete($wpdb->prefix.'wppm_project_comment_meta',array('proj_id'=>absint($project_id)));
	49	+
	50	+/*************delete project's tasks and comments********/
	51	+foreach($tasks as $task){
	52	+ $sql=$wpdb->prepare("SELECT attachment_ids FROM {$wpdb->prefix}wppm_task_comment WHERE task_id = %d",absint($task->id));
	53	+ $thread_attachment_ids= $wpdb->get_results( $sql );
	54	+ $tid = absint($task->id);
	55	+ /***************************Code for deleting attachment files****************************************************/
	56	+ if(!empty($thread_attachment_ids)){
	57	+ foreach ($thread_attachment_ids as $thread_attachment_id){
	58	+ $attachment_ids_temp=array();
	59	+ if($thread_attachment_id->attachment_ids){
	60	+ $attachment_ids_temp= explode(',', $thread_attachment_id->attachment_ids);
	61	+ }
	62	+ //$attachment_ids=$attachment_ids_temp;
	63	+ foreach ($attachment_ids_temp as $attachment_id){
	64	+ $sql=$wpdb->prepare("SELECT * FROM {$wpdb->prefix}wppm_attachments WHERE id = %d",absint($attachment_id));
	65	+ $result=$wpdb->get_row($sql);
	66	+ if(!empty($result)){
	67	+ $sql_query=$wpdb->prepare("SELECT file_path FROM {$wpdb->prefix}wppm_attachments WHERE file_path = %s",esc_sql($result->file_path));
	68	+ $attach_result=$wpdb->get_results($sql_query);
	69	+ $result_count = count($attach_result);
	70	+ if(file_exists($result->file_path) && $result_count < 2)
	71	+ {
	72	+ wp_delete_file($result->file_path);
	73	+ }
	74	+ $wpdb->delete($wpdb->prefix.'wppm_attachments', array( 'id' => absint($attachment_id)));
	75	+ }
	76	+ }
	77	+ }
	78	+ }
	79	+ /***************************Code for deleting checklists****************************************************/
	80	+ $sql=$wpdb->prepare("SELECT id FROM {$wpdb->prefix}wppm_checklist WHERE task_id = %d",$tid);
	81	+ $checklists = $wpdb->get_results( $sql );
	82	+ if(!empty($checklists)){
	83	+ foreach($checklists as $checklist){
	84	+ $chk_array = (array) $checklist;
	85	+ $chk_id = absint($chk_array['id']);
	86	+ $sql=$wpdb->prepare("SELECT id FROM {$wpdb->prefix}wppm_checklist_items WHERE checklist_id = %d",$chk_id);
	87	+ $checklist_items = $wpdb->get_results( $sql );
	88	+ if(!empty($checklist_items)){
	89	+ foreach($checklist_items as $ch_item){
	90	+ $chk_items_array = (array) $ch_item;
	91	+ $chk_item_id = absint($chk_items_array['id']);
	92	+ $wpdb->delete($wpdb->prefix.'wppm_checklist_items',array('id'=>"$chk_item_id"));
	93	+ }
	94	+ }
	95	+ $wpdb->delete($wpdb->prefix.'wppm_checklist',array('id'=> "$chk_id"));
	96	+ }
	97	+ }
	98	+ $wpdb->delete($wpdb->prefix.'wppm_task',array('project'=>absint($project_id)));
	99	+ $wpdb->delete($wpdb->prefix.'wppm_task_meta',array('task_id'=>absint($tid)));
	100	+ $wpdb->delete($wpdb->prefix.'wppm_task_comment',array('task_id'=>absint($tid)));
	101	+ $wpdb->delete($wpdb->prefix.'wppm_task_comment_meta',array('task_id'=>absint($tid)));
	102	+}