diff --git a/app/contacts/contact_edit.php b/app/contacts/contact_edit.php index 710ad64209..9c8246162f 100644 --- a/app/contacts/contact_edit.php +++ b/app/contacts/contact_edit.php @@ -353,10 +353,10 @@ if (count($_POST)>0 && strlen($_POST["persistformvar"]) == 0) { $result = $prep_statement->fetch(PDO::FETCH_NAMED); if ($result['time_start'] != '') { $time_start = $result['time_start']; - $btn_mod = "style='background-color: #a00; background-image: none;'"; + $btn_mod = "style='background-color: #3693df; background-image: none;'"; } unset ($sql, $prep_statement, $result); - echo " \n"; + echo " \n"; } echo " \n"; echo " \n"; diff --git a/app/contacts/contact_timer.php b/app/contacts/contact_timer.php index 3c7b0f57fe..2e1762a5ba 100644 --- a/app/contacts/contact_timer.php +++ b/app/contacts/contact_timer.php @@ -33,11 +33,11 @@ if (!permission_exists('contact_time_add')) { echo "access denied"; exit; } $text = $language->get(); //get contact uuid + $domain_uuid = check_str($_REQUEST['domain_uuid']); $contact_uuid = check_str($_REQUEST['contact_uuid']); //get posted variables & set time status if (sizeof($_POST) > 0) { - $domain_uuid = check_str($_POST['domain_uuid']); $contact_time_uuid = check_str($_POST['contact_time_uuid']); $contact_uuid = check_str($_POST['contact_uuid']); $time_action = check_str($_POST['time_action']); @@ -81,7 +81,7 @@ if (!permission_exists('contact_time_add')) { echo "access denied"; exit; } $db->exec(check_sql($sql)); unset($sql); } - header("Location: contact_timer.php?contact_uuid=".$contact_uuid); + header("Location: contact_timer.php?domain_uuid=".$domain_uuid."&contact_uuid=".$contact_uuid); } //get contact details @@ -91,7 +91,7 @@ if (!permission_exists('contact_time_add')) { echo "access denied"; exit; } $sql .= "contact_name_family, "; $sql .= "contact_nickname "; $sql .= "from v_contacts "; - $sql .= "where domain_uuid = '".$_SESSION['domain_uuid']."' "; + $sql .= "where domain_uuid = '".$domain_uuid."' "; $sql .= "and contact_uuid = '".$contact_uuid."' "; $prep_statement = $db->prepare(check_sql($sql)); $prep_statement->execute(); @@ -112,7 +112,7 @@ if (!permission_exists('contact_time_add')) { echo "access denied"; exit; } $sql .= "contact_time_uuid, "; $sql .= "time_description "; $sql .= "from v_contact_times "; - $sql .= "where domain_uuid = '".$_SESSION['domain_uuid']."' "; + $sql .= "where domain_uuid = '".$domain_uuid."' "; $sql .= "and user_uuid = '".$_SESSION['user']['user_uuid']."' "; $sql .= "and contact_uuid = '".$contact_uuid."' "; $sql .= "and time_start is not null "; @@ -291,7 +291,7 @@ if (!permission_exists('contact_time_add')) { echo "access denied"; exit; }