← All changes | includes/admin/projects/open_project/wppm_delete_proj_thread.php +36 -36 4.0.9 → 6.0.6 View file →

		@@ -1,37 +1,37 @@
1		-<?php
2		-if ( ! defined( 'ABSPATH' ) ) {
3		- exit; // Exit if accessed directly
4		-}
5		-global $wpdb,$wppmfunction,$current_user;
6		-$proj_id = isset($_POST['proj_id']) ? intval(sanitize_text_field($_POST['proj_id'])) : '' ;
7		-$projectdata = $wppmfunction->get_project($proj_id);
8		-$comment_id = isset($_POST['comment_id']) ? sanitize_text_field($_POST['comment_id']) : 0 ;
9		-$project_comment = $wppmfunction->get_proj_comment($comment_id);
10		-if (!(($current_user->ID && $current_user->has_cap('manage_options')) || $wppmfunction->has_proj_comment_permission('delete_proj_thread',$proj_id,$comment_id) || ($current_user->ID && $current_user->has_cap('wppm_admin')) || ($current_user->has_cap('wppm_manager') && $projectdata['created_by']==$current_user->ID ))) {exit;}
11		-ob_start();
12		-?>
13		-<form id="frm_delete_proj_thread">
14		- <p><?php echo esc_html_e('Are you sure to delete this thread?','taskbuilder');?></p>
15		- <input type="hidden" name="action" value="wppm_set_delete_proj_thread" />
16		- <input type="hidden" name="_ajax_nonce" value="<?php echo esc_attr( wp_create_nonce( 'wppm_set_delete_proj_thread' ) ); ?>">
17		- <input type="hidden" name="proj_id" value="<?php echo htmlentities(esc_attr($proj_id))?>" />
18		- <input type="hidden" name="comment_id" value="<?php echo htmlentities(esc_attr($comment_id))?>" />
19		-</form>
20		-<?php
21		-$body = ob_get_clean();
22		-ob_start();
23		-?>
24		-<div class="row">
25		- <div class="col-md-12" style="text-align: right;">
26		- <button type="button" class="btn wppm_modal_close" onclick="wppm_modal_close()"><?php echo esc_html_e('Cancel','taskbuilder');?></button>
27		- <button type="button" class="btn wppm_popup_action" onclick="wppm_set_delete_proj_thread(<?php echo esc_attr($proj_id); ?>);"><?php echo esc_html_e('Confirm','taskbuilder');?></button>
28		- </div>
29		-</div>
30		-<?php
31		-$footer = ob_get_clean();
32		-$output = array(
33		- 'body' => $body,
34		- 'footer' => $footer
35		-);
36		-echo json_encode($output);
	1	+<?php
	2	+if ( ! defined( 'ABSPATH' ) ) {
	3	+ exit; // Exit if accessed directly
	4	+}
	5	+global $wpdb,$wppmfunction,$current_user;
	6	+$proj_id = isset($_POST['proj_id']) ? intval(sanitize_text_field(wp_unslash($_POST['proj_id']))) : '' ;
	7	+$projectdata = $wppmfunction->get_project($proj_id);
	8	+$comment_id = isset($_POST['comment_id']) ? intval(sanitize_text_field(wp_unslash($_POST['comment_id']))) : 0 ;
	9	+$project_comment = $wppmfunction->get_proj_comment($comment_id);
	10	+if (!(($current_user->ID && $current_user->has_cap('manage_options')) || $wppmfunction->has_proj_comment_permission('delete_proj_thread',$proj_id,$comment_id) || ($current_user->ID && $current_user->has_cap('wppm_admin')) || ($current_user->has_cap('wppm_manager') && $projectdata['created_by']==$current_user->ID ))) {exit;}
	11	+ob_start();
	12	+?>
	13	+<form id="frm_delete_proj_thread">
	14	+ <p><?php echo esc_html_e('Are you sure to delete this thread?','taskbuilder');?></p>
	15	+ <input type="hidden" name="action" value="wppm_set_delete_proj_thread" />
	16	+ <input type="hidden" name="_ajax_nonce" value="<?php echo esc_attr( wp_create_nonce( 'wppm_set_delete_proj_thread' ) ); ?>">
	17	+ <input type="hidden" name="proj_id" value="<?php echo (esc_attr($proj_id))?>" />
	18	+ <input type="hidden" name="comment_id" value="<?php echo (esc_attr($comment_id))?>" />
	19	+</form>
	20	+<?php
	21	+$body = ob_get_clean();
	22	+ob_start();
	23	+?>
	24	+<div class="row">
	25	+ <div class="col-md-12" style="text-align: right;">
	26	+ <button type="button" class="btn wppm_modal_close" onclick="wppm_modal_close()"><?php echo esc_html_e('Cancel','taskbuilder');?></button>
	27	+ <button type="button" class="btn wppm_popup_action" onclick="wppm_set_delete_proj_thread(<?php echo esc_attr($proj_id); ?>);"><?php echo esc_html_e('Confirm','taskbuilder');?></button>
	28	+ </div>
	29	+</div>
	30	+<?php
	31	+$footer = ob_get_clean();
	32	+$output = array(
	33	+ 'body' => $body,
	34	+ 'footer' => $footer
	35	+);
	36	+echo wp_json_encode($output);
37	37	?>