header('Location: feature_disabled.php');
exit();
}
-
-$cl_id = (int) $request->getParameter('id');
+$cl_id = (int)$request->getParameter('id');
+$client = ttClientHelper::getClient($cl_id, true);
+if (!$client) {
+ header('Location: access_denied.php');
+ exit();
+}
+// End of access checks.
$projects = ttGroupHelper::getActiveProjects();
$cl_status = $request->getParameter('status');
$cl_projects = $request->getParameter('projects');
} else {
- $client = ttClientHelper::getClient($cl_id, true);
$cl_name = $client['name'];
$cl_address = $client['address'];
$cl_tax = $client['tax'];
if ($request->getParameter('btn_copy')) {
if (!ttClientHelper::getClientByName($cl_name)) {
- if (ttClientHelper::insert(array(
- 'group_id' => $user->getGroup(),
- 'org_id' => $user->org_id,
- 'name' => $cl_name,
+ if (ttClientHelper::insert(array('name' => $cl_name,
'address' => $cl_address,
'tax' => $cl_tax,
'status' => $cl_status,