$_POST['comment'] = Security::sqlsecure($_POST['comment']);
 }
 if (Security::is_action_allowed("change_status") && isset($_POST['t_status'])) {
     change_status($Ticket_Number, Security::sqlsecure($_POST['t_status']));
 }
 if (Security::is_action_allowed("change_priority") && isset($_POST['t_priority'])) {
     change_priority($Ticket_Number, Security::sqlsecure($_POST['t_priority']));
 }
 if (Security::is_action_allowed("change_category") && isset($_POST['t_category'])) {
     change_category($Ticket_Number, Security::sqlsecure($_POST['t_category']));
 }
 if (Security::is_action_allowed("change_stage") && isset($_POST['t_stage'])) {
     change_stage($Ticket_Number, Security::sqlsecure($_POST['t_stage']));
 }
 if (Security::is_action_allowed("change_due_date") && isset($_POST['due_date_d_m_y'])) {
     change_due_date($Ticket_Number, Security::sqlsecure($_POST['due_date_d_m_y']), Security::sqlsecure($_POST['due_date_h']), Security::sqlsecure($_POST['due_date_i']));
 }
 if (Security::is_action_allowed("change_end_date") && isset($_POST['end_date_d_m_y'])) {
     change_end_date($Ticket_Number, Security::sqlsecure($_POST['end_date_d_m_y']), Security::sqlsecure($_POST['end_date_h']), Security::sqlsecure($_POST['end_date_i']));
 }
 if (Security::is_action_allowed("change_assigned") && isset($_POST['t_assigned'])) {
     change_assigned($Ticket_Number, Security::sqlsecure($_POST['t_assigned']));
 }
 if (Security::is_action_allowed("change_activity") && isset($_POST['activity_id'])) {
     change_activity($Ticket_Number, Security::sqlsecure($_POST['activity_id']));
 }
 if (Security::is_action_allowed("enter_new_task") && isset($_POST['comment'])) {
     add_task($Ticket_Number, Security::sqlsecure($_POST['comment']));
 }
 if (Security::is_action_allowed("change_subject") && isset($_POST['t_subject'])) {
     change_subject($Ticket_Number, Security::sqlsecure($_POST['t_subject']));
예제 #2
0
파일: ajax.php 프로젝트: taqfu/rla-old
     break;
 case "cancel_todo":
     cancel_todo(filter_input(INPUT_POST, 'id', FILTER_SANITIZE_NUMBER_INT));
     break;
 case "cancel_work":
     cancel_work(filter_input(INPUT_POST, 'action_id', FILTER_SANITIZE_NUMBER_INT));
     break;
 case "change_description":
     change_description(filter_input(INPUT_POST, 'id', FILTER_SANITIZE_NUMBER_INT), filter_input(INPUT_POST, 'description', FILTER_SANITIZE_STRING));
     break;
 case "change_documentation_status":
     change_documentation_status(filter_input(INPUT_POST, 'id', FILTER_SANITIZE_NUMBER_INT), filter_input(INPUT_POST, 'status', FILTER_SANITIZE_STRING));
     break;
 case "change_due_date":
     echo "EX";
     change_due_date(filter_input(INPUT_POST, 'id', FILTER_SANITIZE_NUMBER_INT), filter_input(INPUT_POST, 'due', FILTER_SANITIZE_STRING));
     break;
 case "change_name":
     change_name(filter_input(INPUT_POST, 'id', FILTER_SANITIZE_NUMBER_INT), filter_input(INPUT_POST, 'new_name', FILTER_SANITIZE_STRING));
     break;
 case "change_power":
     change_power(filter_input(INPUT_POST, 'id', FILTER_SANITIZE_NUMBER_INT), filter_input(INPUT_POST, 'new_power', FILTER_SANITIZE_NUMBER_INT));
     break;
 case "change_quality":
     change_quality(filter_input(INPUT_POST, 'id', FILTER_SANITIZE_NUMBER_INT), filter_input(INPUT_POST, 'new_quality', FILTER_VALIDATE_BOOLEAN));
     break;
 case "change_rank":
     change_rank(filter_input(INPUT_POST, 'id', FILTER_SANITIZE_NUMBER_INT), filter_input(INPUT_POST, 'new_rank', FILTER_SANITIZE_NUMBER_INT));
     break;
 case "change_todo_name":
     change_todo_name(filter_input(INPUT_POST, 'id', FILTER_SANITIZE_NUMBER_INT), filter_input(INPUT_POST, 'name', FILTER_SANITIZE_STRING));