X-Git-Url: http://wagnertech.de/git?a=blobdiff_plain;f=predefined_expense_edit.php;h=3f0cb0c8c9dc5c9910a38c9799b0c06e9ad1b199;hb=HEAD;hp=64bf9d84d350e27e56a82430f2c5e204c303d4e3;hpb=b401022733a9645ed701522585b2d57db936f5cc;p=timetracker.git diff --git a/predefined_expense_edit.php b/predefined_expense_edit.php index 64bf9d84..3f0cb0c8 100644 --- a/predefined_expense_edit.php +++ b/predefined_expense_edit.php @@ -30,19 +30,27 @@ require_once('initialize.php'); import('form.Form'); import('ttPredefinedExpenseHelper'); -// Access check. -if (!ttAccessAllowed('manage_advanced_settings') || !$user->isPluginEnabled('ex')) { +// Access checks. +if (!ttAccessAllowed('manage_advanced_settings')) { header('Location: access_denied.php'); exit(); } - +if (!$user->isPluginEnabled('ex')) { + header('Location: feature_disabled.php'); + exit(); +} $predefined_expense_id = (int) $request->getParameter('id'); +$predefined_expense = ttPredefinedExpenseHelper::get($predefined_expense_id); +if (!$predefined_expense) { + header('Location: access_denied.php'); + exit(); +} +// End of access checks. if ($request->isPost()) { $cl_name = trim($request->getParameter('name')); $cl_cost = trim($request->getParameter('cost')); } else { - $predefined_expense = ttPredefinedExpenseHelper::get($predefined_expense_id); $cl_name = $predefined_expense['name']; $cl_cost = $predefined_expense['cost']; } @@ -51,26 +59,25 @@ $form = new Form('predefinedExpenseForm'); $form->addInput(array('type'=>'hidden','name'=>'id','value'=>$predefined_expense_id)); $form->addInput(array('type'=>'text','maxlength'=>'100','name'=>'name','style'=>'width: 250px;','value'=>$cl_name)); $form->addInput(array('type'=>'text','maxlength'=>'40','name'=>'cost','style'=>'width: 100px;','value'=>$cl_cost)); -$form->addInput(array('type'=>'submit','name'=>'btn_submit','value'=>$i18n->getKey('button.submit'))); +$form->addInput(array('type'=>'submit','name'=>'btn_submit','value'=>$i18n->get('button.submit'))); if ($request->isPost()) { // Validate user input. - if (!ttValidString($cl_name)) $err->add($i18n->getKey('error.field'), $i18n->getKey('label.thing_name')); - if (!ttValidFloat($cl_cost)) $err->add($i18n->getKey('error.field'), $i18n->getKey('label.cost')); + if (!ttValidString($cl_name)) $err->add($i18n->get('error.field'), $i18n->get('label.thing_name')); + if (!ttValidFloat($cl_cost)) $err->add($i18n->get('error.field'), $i18n->get('label.cost')); if ($err->no()) { if (ttPredefinedExpenseHelper::update(array( 'id' => $predefined_expense_id, - 'team_id' => $user->team_id, 'name' => $cl_name, 'cost' => $cl_cost))) { header('Location: predefined_expenses.php'); exit(); } else - $err->add($i18n->getKey('error.db')); + $err->add($i18n->get('error.db')); } } // isPost $smarty->assign('forms', array($form->getName()=>$form->toArray())); -$smarty->assign('title', $i18n->getKey('title.edit_predefined_expense')); +$smarty->assign('title', $i18n->get('title.edit_predefined_expense')); $smarty->assign('content_page_name', 'predefined_expense_edit.tpl'); $smarty->display('index.tpl');