WordPress.org
Get WordPress

Plugin Directory

Changeset 2512006


Ignore:
Timestamp:
04/09/2021 08:46:53 AM (5 years ago)
Author:
wphrmanager
Message:

Fixed leave and Add Employee issues

Location:
wp-hr-manager/trunk
Files:
20 edited

Legend:

Unmodified
Added
Removed

  • wp-hr-manager/trunk/includes/admin/class-ajax.php

    r2485387 r2512006  
    143143        $this->verify_nonce( 'wp-wphr-hr-nonce' );
    144144
    145         $log_id = sanitize_text_field( intval( $_POST['id'] ) );
     145        $log_id = intval( sanitize_text_field( $_POST['id'] ) );
    146146
    147147        if ( ! $log_id ) {
    … …  
    491491        $this->verify_nonce( 'wphr-api-key' );
    492492
    493         $id = isset( $_POST['id'] ) ? sanitize_text_field( intval( $_POST['id'] ) ) : 0;
     493        $id = isset( $_POST['id'] ) ? intval( sanitize_text_field( $_POST['id'] ) ) : 0;
    494494
    495495        if ( $id ) {
    … …  
    498498            $api_key->update( [
    499499                'name'    => sanitize_text_field( $_POST['name'] ),
    500                 'user_id' => sanitize_text_field( intval( $_POST['user_id'] ) ),
     500                'user_id' => intval( sanitize_text_field( $_POST['user_id'] ) ),
    501501            ] );
    502502
    … …  
    508508            'api_key'    => 'ck_' . wphr_generate_key(),
    509509            'api_secret' => 'cs_' . wphr_generate_key(),
    510             'user_id'    => sanitize_text_field( intval( $_POST['user_id'] ) ),
     510            'user_id'    => intval( sanitize_text_field( $_POST['user_id'] ) ),
    511511            'created_at' => current_time( 'mysql' ),
    512512        ];
    … …  
    525525        $this->verify_nonce( 'wphr-nonce' );
    526526
    527         $id = isset( $_POST['id'] ) ? sanitize_text_field( intval( $_POST['id'] ) ) : 0;
     527        $id = isset( $_POST['id'] ) ? intval( sanitize_text_field( $_POST['id'] ) ) : 0;
    528528
    529529        if ( $id ) {

  • wp-hr-manager/trunk/includes/admin/class-setup-wizard.php

    r2485387 r2512006  
    347347        check_admin_referer( 'wphr-setup' );
    348348
    349         $departments = array_map( 'sanitize_text_field', $_POST['departments'] );
     349        $departments = custom_sanitize_array( $_POST['departments'] );
    350350
    351351        if ( $departments ) {

  • wp-hr-manager/trunk/includes/functions.php

    r2485387 r2512006  
    683683        $format = wphr_get_option( 'date_format', 'wphr_settings_general', 'd-m-Y' );
    684684    }
    685 
     685   
    686686    $time = strtotime( $date );
    687687    if( $time < 0 ){
    … …  
    19681968
    19691969    if ( isset( $_REQUEST['imported'] ) ) {
    1970         if ( sanitize_text_field( intval( $_REQUEST['imported'] ) ) == 0 ) {
     1970        if ( intval( sanitize_text_field ($_REQUEST['imported'] ) ) == 0 ) {
    19711971            $message = __( 'Nothing to import or items are already exists.', 'wphr' );
    19721972            echo "<div class='notice error'><p>{$message}</p></div>";

  • wp-hr-manager/trunk/modules/hrm/includes/admin/class-menu.php

    r2485387 r2512006  
    210210    {
    211211        $action = ( isset( $_GET['action'] ) ? sanitize_text_field($_GET['action']) : 'list' );
    212         $id = ( isset( $_GET['id'] ) ? sanitize_text_field( intval( $_GET['id'] ) ) : 0 );
     212        $id = ( isset( $_GET['id'] ) ? intval(sanitize_text_field( $_GET['id'] ) ) : 0 );
     213        switch ( $action ) {
     214            case 'view':
     215                $employee = new Employee( intval( $id ) );
     216                if ( !$employee->id ) {
     217                    wp_die( __( 'Employee not found!', 'wphr' ) );
     218                }
     219                $template = WPHR_HRM_VIEWS . '/employee/single.php';
     220                break;
     221            default:
     222                $template = WPHR_HRM_VIEWS . '/employee.php';
     223                break;
     224        }
     225        $template = apply_filters(
     226            'wphr_hr_employee_templates',
     227            $template,
     228            $action,
     229            $id
     230        );
     231        if ( file_exists( $template ) ) {
     232            include $template;
     233        }
     234    }
     235   
     236    /**
     237     * Employee my profile page template
     238     *
     239     * @since 0.1
     240     *
     241     * @return void
     242     */
     243    public function employee_my_profile_page()
     244    {
     245        $action = ( isset( $_GET['action'] ) ? sanitize_text_field($_GET['action']) : 'view' );
     246        $id = ( isset( $_GET['id'] ) ? intval(sanitize_text_field( $_GET['id'] ) ) : intval( get_current_user_id() ) );
    213247        switch ( $action ) {
    214248            case 'view':
    … …  
    220254                break;
    221255            default:
    222                 $template = WPHR_HRM_VIEWS . '/employee.php';
    223                 break;
    224         }
    225         $template = apply_filters(
    226             'wphr_hr_employee_templates',
    227             $template,
    228             $action,
    229             $id
    230         );
    231         if ( file_exists( $template ) ) {
    232             include $template;
    233         }
    234     }
    235    
    236     /**
    237      * Employee my profile page template
    238      *
    239      * @since 0.1
    240      *
    241      * @return void
    242      */
    243     public function employee_my_profile_page()
    244     {
    245         $action = ( isset( $_GET['action'] ) ? sanitize_text_field($_GET['action']) : 'view' );
    246         $id = ( isset( $_GET['id'] ) ? sanitize_text_field( intval( $_GET['id'] ) ) : intval( get_current_user_id() ) );
    247         switch ( $action ) {
    248             case 'view':
    249                 $employee = new Employee( $id );
    250                 if ( !$employee->id ) {
    251                     wp_die( __( 'Employee not found!', 'wphr' ) );
    252                 }
    253                 $template = WPHR_HRM_VIEWS . '/employee/single.php';
    254                 break;
    255             default:
    256256                $template = WPHR_HRM_VIEWS . '/employee/single.php';
    257257                break;
    … …  
    281281    {
    282282        $action = ( isset( $_GET['action'] ) ? sanitize_text_field($_GET['action']) : 'list' );
    283         $id = ( isset( $_GET['id'] ) ? sanitize_text_field( intval( $_GET['id'] ) ) : 0 );
     283        $id = ( isset( $_GET['id'] ) ? intval(sanitize_text_field( $_GET['id'] ) ) : 0 );
    284284        switch ( $action ) {
    285285            case 'view':

  • wp-hr-manager/trunk/modules/hrm/includes/class-ajax.php

    r2485387 r2512006  
    120120        }
    121121
    122         $request_id = isset($_POST['leave_request_id']) ? sanitize_text_field( intval($_POST['leave_request_id']) ) : 0;
     122        $request_id = isset($_POST['leave_request_id']) ? intval(sanitize_text_field( $_POST['leave_request_id']) ) : 0;
    123123        $comments = isset($_POST['reason']) ? sanitize_text_field($_POST['reason']) : '';
    124124
    … …  
    148148        }
    149149
    150         $holiday = wphr_hr_delete_holidays(array('id' => sanitize_text_field( intval($_POST['id']))));
     150        $holiday = wphr_hr_delete_holidays(array('id' => intval( sanitize_text_field($_POST['id']))));
    151151        $this->send_success();
    152152    }
    … …  
    290290        }
    291291
    292         $id = isset($_POST['id']) ? sanitize_text_field( intval($_POST['id']) ) : 0;
    293         $user_id = isset($_POST['user_id']) ? sanitize_text_field( intval($_POST['user_id'] ) ) : 0;
    294         $policy_id = isset($_POST['policy_id']) ? sanitize_text_field( intval($_POST['policy_id']) ) : 0;
     292        $id = isset($_POST['id']) ? intval(sanitize_text_field($_POST['id']) ) : 0;
     293        $user_id = isset($_POST['user_id']) ? intval(sanitize_text_field($_POST['user_id'] ) ) : 0;
     294        $policy_id = isset($_POST['policy_id']) ? intval(sanitize_text_field($_POST['policy_id']) ) : 0;
    295295
    296296        if ($id && $user_id && $policy_id) {
    … …  
    338338        $this->verify_nonce('wp-wphr-hr-nonce');
    339339
    340         $id = isset($_POST['id']) ? sanitize_text_field( intval($_POST['id']) ) : 0;
     340        $id = isset($_POST['id']) ? intval( sanitize_text_field( $_POST['id'] ) ) : 0;
    341341
    342342        if ($id) {
    … …  
    366366        $emp_profile_label = isset($_POST['emp_profile_label']) ? sanitize_text_field( $_POST['emp_profile_label'] ) : '';
    367367        $desc = isset($_POST['dept-desc']) ? sanitize_text_field( $_POST['dept-desc'] ) : '';
    368         $dept_id = isset($_POST['dept_id']) ? sanitize_text_field( intval($_POST['dept_id']) ) : 0;
    369         $lead = isset($_POST['lead']) ? sanitize_text_field( intval($_POST['lead']) ) : 0;
    370         $parent = isset($_POST['parent']) ? sanitize_text_field( intval($_POST['parent']) ): 0;
     368        $dept_id = isset($_POST['dept_id']) ? intval( sanitize_text_field( $_POST['dept_id']) ) : 0;
     369        $lead = isset($_POST['lead']) ? intval( sanitize_text_field($_POST['lead']) ) : 0;
     370        $parent = isset($_POST['parent']) ? intval( sanitize_text_field ($_POST['parent']) ): 0;
    371371
    372372        // on update, ensure $parent != $dept_id
    … …  
    410410        }
    411411
    412         $id = isset($_POST['id']) ? sanitize_text_field( intval($_POST['id']) ) : 0;
     412        $id = isset($_POST['id']) ? intval( sanitize_text_field( $_POST['id']) ) : 0;
    413413        if ($id) {
    414414            $deleted = wphr_hr_delete_department($id);
    … …  
    439439        $title = isset($_POST['title']) ? sanitize_text_field( $_POST['title'] ) : '';
    440440        $desc = isset($_POST['desig-desc']) ? sanitize_text_field( $_POST['desig-desc'] ) : '';
    441         $desig_id = isset($_POST['desig_id']) ? sanitize_text_field( intval($_POST['desig_id']) ) : 0;
     441        $desig_id = isset($_POST['desig_id']) ? intval(sanitize_text_field($_POST['desig_id']) ) : 0;
    442442
    443443        $desig_id = wphr_hr_create_designation(array(
    … …  
    466466        $this->verify_nonce('wp-wphr-hr-nonce');
    467467
    468         $id = isset($_POST['id']) ? sanitize_text_field( intval($_POST['id']) ) : 0;
     468        $id = isset($_POST['id']) ? intval(sanitize_text_field($_POST['id']) ) : 0;
    469469
    470470        if ($id) {
    … …  
    489489        }
    490490
    491         $id = isset($_POST['id']) ? sanitize_text_field( intval($_POST['id']) ) : 0;
     491        $id = isset($_POST['id']) ? intval(sanitize_text_field($_POST['id']) ) : 0;
    492492        if ($id) {
    493493            // @TODO: check permission
    … …  
    517517        unset($_POST['action']);
    518518
    519         $posted = array_map('sanitize_text_field', $_POST);
     519        //$posted = array_map('sanitize_text_field', $_POST);
     520        $posted = custom_sanitize_array($_POST);
    520521
    521522        $posted['type'] = 'customer';
    … …  
    533534
    534535        $employee_id = wphr_hr_employee_create($posted);
    535   // print_r($employee_id);
    536     //    die();
     536
    537537        if (is_wp_error($employee_id)) {
    538538            $this->send_error($employee_id->get_error_message());
    … …  
    544544        $employee = new Employee($employee_id);
    545545        $data = $employee->to_array();
    546        // print_r($employee);
    547        // die();
     546
    548547        $data['work']['joined'] = $employee->get_joined_date();
    549548        $data['work']['type'] = $employee->get_type();
    … …  
    571570        $this->verify_nonce('wp-wphr-hr-nonce');
    572571
    573         $employee_id = isset($_REQUEST['id']) ? sanitize_text_field( intval($_REQUEST['id']) ) : 0;
     572        $employee_id = isset($_REQUEST['id']) ? intval(sanitize_text_field($_REQUEST['id']) ) : 0;
    574573        $user = get_user_by('id', $employee_id);
    575574
    … …  
    597596        }
    598597
    599         $employee_id = isset($_REQUEST['id']) ? sanitize_text_field( intval($_REQUEST['id']) ) : 0;
    600         $hard = isset($_REQUEST['hard']) ? sanitize_text_field( intval($_REQUEST['hard']) ) : 0;
     598        $employee_id = isset($_REQUEST['id']) ?  intval(sanitize_text_field($_REQUEST['id']) ) : 0;
     599        $hard = isset($_REQUEST['hard']) ?  intval(sanitize_text_field($_REQUEST['hard']) ) : 0;
    601600        $user = get_user_by('id', $employee_id);
    602601
    … …  
    625624        global $wpdb;
    626625
    627         $employee_id = isset($_REQUEST['id']) ? sanitize_text_field( intval($_REQUEST['id']) ) : 0;
     626        $employee_id = isset($_REQUEST['id']) ?  intval(sanitize_text_field($_REQUEST['id']) ) : 0;
    628627        $user = get_user_by('id', $employee_id);
    629628
    … …  
    647646        $this->verify_nonce('employee_update_employment');
    648647
    649         $employee_id = isset($_REQUEST['employee_id']) ? sanitize_text_field( intval($_REQUEST['employee_id']) ) : 0;
     648        $employee_id = isset($_REQUEST['employee_id']) ? intval(sanitize_text_field( $_REQUEST['employee_id']) ) : 0;
    650649
    651650        // Check permission
    … …  
    681680        $this->verify_nonce('employee_update_compensation');
    682681
    683         $employee_id = isset($_REQUEST['employee_id']) ? sanitize_text_field( intval($_REQUEST['employee_id']) ) : 0;
     682        $employee_id = isset($_REQUEST['employee_id']) ? intval(sanitize_text_field( $_REQUEST['employee_id']) ) : 0;
    684683
    685684        // Check permission
    … …  
    730729        $this->verify_nonce('wp-wphr-hr-nonce');
    731730
    732         $id = isset($_POST['id']) ? sanitize_text_field( intval($_POST['id']) ) : 0;
     731        $id = isset($_POST['id']) ? intval(sanitize_text_field($_POST['id']) ) : 0;
    733732        $query = $wpdb->prepare( "SELECT module, user_id FROM {$wpdb->prefix}wphr_hr_employee_history WHERE id = %d", $id);
    734733        $get_module = $wpdb->get_row($query);
    … …  
    760759        $this->verify_nonce('employee_update_jobinfo');
    761760
    762         $employee_id = isset($_POST['employee_id']) ? sanitize_text_field( intval($_POST['employee_id']) ) : 0;
    763 
    764         $location = isset($_POST['location']) ? sanitize_text_field( intval($_POST['location']) ) : 0;
    765         $department = isset($_POST['department']) ? sanitize_text_field( intval($_POST['department']) ) : 0;
    766         $designation = isset($_POST['designation']) ? sanitize_text_field( intval($_POST['designation']) ) : 0;
    767         $reporting_to = isset($_POST['reporting_to']) ? sanitize_text_field(intval($_POST['reporting_to']) ) : 0;
     761        $employee_id = isset($_POST['employee_id']) ? intval(sanitize_text_field( $_POST['employee_id']) ) : 0;
     762
     763        $location = isset($_POST['location']) ? intval(sanitize_text_field($_POST['location']) ) : 0;
     764        $department = isset($_POST['department']) ?  intval(sanitize_text_field($_POST['department']) ) : 0;
     765        $designation = isset($_POST['designation']) ?  intval(sanitize_text_field($_POST['designation']) ) : 0;
     766        $reporting_to = isset($_POST['reporting_to']) ?  intval(sanitize_text_field($_POST['reporting_to']) ) : 0;
    768767        $date = ( empty($_POST['date']) ) ? current_time('mysql') : sanitize_text_field( $_POST['date'] );
    769768        $additional=serialize($_POST['additional']);
    … …  
    791790    public function employee_update_notes() {
    792791        $this->verify_nonce('wp-wphr-hr-employee-nonce');
    793         $employee_id = isset($_POST['employee_id']) ? sanitize_text_field( intval($_POST['employee_id']) ) : 0;
     792        $employee_id = isset($_POST['employee_id']) ? intval(sanitize_text_field($_POST['employee_id']) ) : 0;
    794793        // $note = isset($_POST['note']) ? sanitize_text_field( $_POST['note'] ) : 0;
    795794        // $note_by = get_current_user_id();
    … …  
    826825        $this->verify_nonce('wp-wphr-hr-employee-nonce');
    827826
    828         $employee_id = isset($_POST['user_id']) ? sanitize_text_field( intval($_POST['user_id']) ) : 0;
     827        $employee_id = isset($_POST['user_id']) ? intval(sanitize_text_field($_POST['user_id']) ) : 0;
    829828
    830829        $note = isset($_POST['note']) ? sanitize_text_field($_POST['note']) : 0;
    … …  
    848847     */
    849848    public function employee_load_note() {
    850         $employee_id = isset($_POST['user_id']) ? sanitize_text_field( intval($_POST['user_id']) ) : 0;
    851         $total_no = isset($_POST['total_no']) ? sanitize_text_field( intval($_POST['total_no']) ) : 0;
    852         $offset_no = isset($_POST['offset_no']) ? sanitize_text_field( intval($_POST['offset_no']) ) : 0;
     849        $employee_id = isset($_POST['user_id']) ? intval(sanitize_text_field($_POST['user_id']) ) : 0;
     850        $total_no = isset($_POST['total_no']) ? intval(sanitize_text_field($_POST['total_no']) ) : 0;
     851        $offset_no = isset($_POST['offset_no']) ? intval(sanitize_text_field($_POST['offset_no']) ) : 0;
    853852
    854853        $employee = new Employee($employee_id);
    … …  
    871870        check_admin_referer('wp-wphr-hr-nonce');
    872871
    873         $note_id = isset($_POST['note_id']) ? sanitize_text_field( intval($_POST['note_id']) ) : 0;
     872        $note_id = isset($_POST['note_id']) ? intval(sanitize_text_field($_POST['note_id']) ) : 0;
    874873        $employee = new Employee();
    875874
    … …  
    896895        $this->verify_nonce('employee_update_terminate');
    897896
    898         $employee_id = isset($_POST['employee_id']) ? sanitize_text_field( intval($_POST['employee_id']) ) : 0;
     897        $employee_id = isset($_POST['employee_id']) ? intval(sanitize_text_field($_POST['employee_id']) ) : 0;
    899898        $terminate_date = ( empty($_POST['terminate_date']) ) ? current_time('mysql') : sanitize_text_field($_POST['terminate_date']);
    900899        $termination_type = isset($_POST['termination_type']) ? sanitize_text_field($_POST['termination_type']) : '';
    … …  
    934933        $this->verify_nonce('wp-wphr-hr-nonce');
    935934
    936         $id = isset($_POST['id']) ? sanitize_text_field( intval($_POST['id']) ) : 0;
     935        $id = isset($_POST['id']) ? intval(sanitize_text_field($_POST['id']) ) : 0;
    937936
    938937        if (!$id) {
    … …  
    10281027    public function mark_read_announcement() {
    10291028        $this->verify_nonce('wp-wphr-hr-nonce');
    1030         $row_id = sanitize_text_field( intval($_POST['id']) );
     1029        $row_id = intval(sanitize_text_field($_POST['id']) );
    10311030
    10321031        \WPHR\HR_MANAGER\HRM\Models\Announcement::find($row_id)->update(['status' => 'read']);
    … …  
    10461045
    10471046        $this->verify_nonce('wp-wphr-hr-nonce');
    1048         $post_id = sanitize_text_field( intval($_POST['id']) );
     1047        $post_id = intval(sanitize_text_field($_POST['id']) );
    10491048        if (!$post_id) {
    10501049            $this->send_error();
    … …  
    10831082
    10841083        if ($type && $type == 'reviews') {
    1085             $employee_id = isset($_POST['employee_id']) ? sanitize_text_field( intval($_POST['employee_id']) ) : 0;
    1086             $review_id = isset($_POST['review_id']) ? sanitize_text_field( intval($_POST['review_id']) ) : 0;
    1087             $reporting_to = isset($_POST['reporting_to']) ? sanitize_text_field( intval($_POST['reporting_to']) ) : 0;
    1088             $job_knowledge = isset($_POST['job_knowledge']) ? sanitize_text_field( intval($_POST['job_knowledge']) ) : 0;
    1089             $work_quality = isset($_POST['work_quality']) ? sanitize_text_field( intval($_POST['work_quality']) ) : 0;
    1090             $attendance = isset($_POST['attendance']) ? sanitize_text_field( intval($_POST['attendance']) ) : 0;
    1091             $communication = isset($_POST['communication']) ? sanitize_text_field( intval($_POST['communication']) ) : 0;
    1092             $dependablity = isset($_POST['dependablity']) ? sanitize_text_field( intval($_POST['dependablity']) ) : 0;
     1084            $employee_id = isset($_POST['employee_id']) ? intval(sanitize_text_field($_POST['employee_id']) ) : 0;
     1085            $review_id = isset($_POST['review_id']) ? intval(sanitize_text_field($_POST['review_id']) ) : 0;
     1086            $reporting_to = isset($_POST['reporting_to']) ? intval(sanitize_text_field($_POST['reporting_to']) ) : 0;
     1087            $job_knowledge = isset($_POST['job_knowledge']) ? intval(sanitize_text_field($_POST['job_knowledge']) ) : 0;
     1088            $work_quality = isset($_POST['work_quality']) ? intval(sanitize_text_field($_POST['work_quality']) ) : 0;
     1089            $attendance = isset($_POST['attendance']) ? intval(sanitize_text_field($_POST['attendance']) ) : 0;
     1090            $communication = isset($_POST['communication']) ? intval(sanitize_text_field($_POST['communication']) ) : 0;
     1091            $dependablity = isset($_POST['dependablity']) ? intval(sanitize_text_field($_POST['dependablity']) ) : 0;
    10931092            $performance_date = ( empty($_POST['performance_date']) ) ? current_time('mysql') : sanitize_text_field( $_POST['performance_date'] );
    10941093           $additional=serialize($_POST['additional']);
    … …  
    11191118        if ($type && $type == 'comments') {
    11201119
    1121             $employee_id = isset($_POST['employee_id']) ? sanitize_text_field( intval($_POST['employee_id']) ) : 0;
    1122             $review_id = isset($_POST['review_id']) ? sanitize_text_field( intval($_POST['review_id']) ) : 0;
    1123             $reviewer = isset($_POST['reviewer']) ? sanitize_text_field( intval($_POST['reviewer']) ) : 0;
     1120            $employee_id = isset($_POST['employee_id']) ? intval(sanitize_text_field($_POST['employee_id']) ) : 0;
     1121            $review_id = isset($_POST['review_id']) ? intval(sanitize_text_field($_POST['review_id']) ) : 0;
     1122            $reviewer = isset($_POST['reviewer']) ? intval(sanitize_text_field($_POST['reviewer']) ) : 0;
    11241123            $comments = isset($_POST['comments']) ? esc_textarea($_POST['comments']) : '';
    11251124            $performance_date = ( empty($_POST['performance_date']) ) ? current_time('mysql') : sanitize_text_field( $_POST['performance_date'] );
    … …  
    11441143        if ($type && $type == 'goals') {
    11451144
    1146             $employee_id = isset($_POST['employee_id']) ? sanitize_text_field( intval($_POST['employee_id']) ) : 0;
    1147             $review_id = isset($_POST['review_id']) ? sanitize_text_field( intval($_POST['review_id']) ) : 0;
     1145            $employee_id = isset($_POST['employee_id']) ? intval(sanitize_text_field($_POST['employee_id']) ) : 0;
     1146            $review_id = isset($_POST['review_id']) ? intval(sanitize_text_field($_POST['review_id']) ) : 0;
    11481147            $completion_date = ( empty($_POST['completion_date']) ) ? current_time('mysql') : sanitize_text_field( $_POST['completion_date'] );
    11491148            $goal_description = isset($_POST['goal_description']) ? esc_textarea($_POST['goal_description']) : '';
    11501149            $employee_assessment = isset($_POST['employee_assessment']) ? esc_textarea($_POST['employee_assessment']) : '';
    1151             $supervisor = isset($_POST['supervisor']) ? sanitize_text_field( intval($_POST['supervisor']) ) : 0;
     1150            $supervisor = isset($_POST['supervisor']) ? intval(sanitize_text_field($_POST['supervisor']) ) : 0;
    11521151            $supervisor_assessment = isset($_POST['supervisor_assessment']) ? esc_textarea($_POST['supervisor_assessment']) : '';
    11531152            $performance_date = ( empty($_POST['performance_date']) ) ? current_time('mysql') : sanitize_text_field($_POST['performance_date']);
    … …  
    11981197        $this->verify_nonce('wp-wphr-hr-nonce');
    11991198
    1200         $id = isset($_POST['id']) ? sanitize_text_field( intval($_POST['id']) ) : 0;
     1199        $id = isset($_POST['id']) ? intval(sanitize_text_field($_POST['id']) ) : 0;
    12011200
    12021201        if (!current_user_can('wphr_delete_review')) {
    … …  
    12171216        $this->verify_nonce('wphr-work-exp-form');
    12181217
    1219         $employee_id = isset($_POST['employee_id']) ? sanitize_text_field( intval($_POST['employee_id']) ) : 0;
     1218        $employee_id = isset($_POST['employee_id']) ? intval(sanitize_text_field($_POST['employee_id']) ) : 0;
    12201219
    12211220        // Check permission
    … …  
    12241223        }
    12251224
    1226         $exp_id = isset($_POST['exp_id']) ? sanitize_text_field( intval($_POST['exp_id']) ): 0;
     1225        $exp_id = isset($_POST['exp_id']) ? intval(sanitize_text_field($_POST['exp_id']) ): 0;
    12271226        $company_name = isset($_POST['company_name']) ? sanitize_text_field($_POST['company_name']) : '';
    12281227        $job_title = isset($_POST['job_title']) ? sanitize_text_field($_POST['job_title']) : '';
    … …  
    12721271        $this->verify_nonce('wp-wphr-hr-nonce');
    12731272
    1274         $id = isset($_POST['id']) ? sanitize_text_field( intval($_POST['id']) ) : 0;
    1275         $employee_id = isset($_POST['employee_id']) ? sanitize_text_field( intval($_POST['employee_id']) ) : 0;
     1273        $id = isset($_POST['id']) ? intval(sanitize_text_field($_POST['id']) ) : 0;
     1274        $employee_id = isset($_POST['employee_id']) ? intval(sanitize_text_field($_POST['employee_id']) ) : 0;
    12761275
    12771276        if (!$employee_id) {
    … …  
    13001299        $this->verify_nonce('wphr-hr-education-form');
    13011300
    1302         $employee_id = isset($_POST['employee_id']) ? sanitize_text_field( intval($_POST['employee_id']) ) : 0;
     1301        $employee_id = isset($_POST['employee_id']) ? intval(sanitize_text_field($_POST['employee_id']) ) : 0;
    13031302
    13041303        // Check permission
    … …  
    13071306        }
    13081307
    1309         $edu_id = isset($_POST['edu_id']) ? sanitize_text_field( intval($_POST['edu_id']) ) : 0;
     1308        $edu_id = isset($_POST['edu_id']) ? intval(sanitize_text_field($_POST['edu_id']) ) : 0;
    13101309        $school = isset($_POST['school']) ? sanitize_text_field($_POST['school']) : '';
    13111310        $degree = isset($_POST['degree']) ? sanitize_text_field($_POST['degree']) : '';
    13121311        $field = isset($_POST['field']) ? sanitize_text_field($_POST['field']) : '';
    1313         $finished = isset($_POST['finished']) ? sanitize_text_field( intval($_POST['finished']) ) : '';
     1312        $finished = isset($_POST['finished']) ? intval(sanitize_text_field($_POST['finished']) ) : '';
    13141313        $notes = isset($_POST['notes']) ? sanitize_text_field($_POST['notes']) : '';
    13151314        $interest = isset($_POST['interest']) ? sanitize_text_field($_POST['interest']) : '';
    … …  
    13571356        $this->verify_nonce('wp-wphr-hr-nonce');
    13581357
    1359         $id = isset($_POST['id']) ? sanitize_text_field( intval($_POST['id']) ) : 0;
    1360         $employee_id = isset($_POST['employee_id']) ? sanitize_text_field( intval($_POST['employee_id']) ) : 0;
     1358        $id = isset($_POST['id']) ? intval(sanitize_text_field( $_POST['id']) ) : 0;
     1359        $employee_id = isset($_POST['employee_id']) ? intval(sanitize_text_field($_POST['employee_id']) ) : 0;
    13611360
    13621361        if (!$employee_id) {
    … …  
    13841383    public function employee_dependent_create() {
    13851384        $this->verify_nonce('wphr-hr-dependent-form');
    1386         $employee_id = isset($_POST['employee_id']) ? sanitize_text_field( intval($_POST['employee_id']) ) : 0;
     1385        $employee_id = isset($_POST['employee_id']) ? intval(sanitize_text_field($_POST['employee_id']) ) : 0;
    13871386
    13881387        // Check permission
    … …  
    13911390        }
    13921391
    1393         $dep_id = isset($_POST['dep_id']) ? sanitize_text_field( intval($_POST['dep_id']) ): 0;
     1392        $dep_id = isset($_POST['dep_id']) ? intval(sanitize_text_field($_POST['dep_id']) ): 0;
    13941393        $name = isset($_POST['name']) ? sanitize_text_field($_POST['name']) : '';
    13951394        $relation = isset($_POST['relation']) ? sanitize_text_field($_POST['relation']) : '';
    … …  
    14331432        $this->verify_nonce('wp-wphr-hr-nonce');
    14341433
    1435         $id = isset($_POST['id']) ? sanitize_text_field( intval($_POST['id']) ) : 0;
    1436         $employee_id = isset($_POST['employee_id']) ? sanitize_text_field( intval($_POST['employee_id']) ) : 0;
     1434        $id = isset($_POST['id']) ? intval(sanitize_text_field($_POST['id']) ) : 0;
     1435        $employee_id = isset($_POST['employee_id']) ? intval(sanitize_text_field($_POST['employee_id']) ) : 0;
    14371436
    14381437        if (!$employee_id) {
    … …  
    14671466        }
    14681467
    1469         $policy_id = isset($_POST['policy-id']) ? sanitize_text_field( intval($_POST['policy-id']) ) : 0;
     1468        $policy_id = isset($_POST['policy-id']) ? intval(sanitize_text_field($_POST['policy-id']) ) : 0;
    14701469        $name = isset($_POST['name']) ? sanitize_text_field($_POST['name']) : '';
    1471         $days = isset($_POST['days']) ? sanitize_text_field( intval($_POST['days']) ) : '';
     1470        $days = isset($_POST['days']) ? intval(sanitize_text_field($_POST['days']) ) : '';
    14721471        $color = isset($_POST['color']) ? sanitize_text_field($_POST['color']) : '';
    1473         $department = isset($_POST['department']) ? sanitize_text_field( intval($_POST['department']) ) : 0;
    1474         $designation = isset($_POST['designation']) ? sanitize_text_field( intval($_POST['designation']) ) : 0;
     1472        $department = isset($_POST['department']) ? intval(sanitize_text_field($_POST['department']) ) : 0;
     1473        $designation = isset($_POST['designation']) ? intval(sanitize_text_field($_POST['designation']) ) : 0;
    14751474        $gender = isset($_POST['gender']) ? sanitize_text_field($_POST['gender']) : 0;
    14761475        $marital_status = isset($_POST['maritial']) ? sanitize_text_field($_POST['maritial']) : 0;
    1477         $activate = isset($_POST['rateTransitions']) ? sanitize_text_field( intval($_POST['rateTransitions']) ) : 1;
     1476        $activate = isset($_POST['rateTransitions']) ? intval(sanitize_text_field($_POST['rateTransitions']) ) : 1;
    14781477        $description = isset($_POST['description']) ? sanitize_text_field($_POST['description']) : '';
    1479         $after_x_day = isset($_POST['no_of_days']) ? sanitize_text_field( intval($_POST['no_of_days']) ) : '';
     1478        $after_x_day = isset($_POST['no_of_days']) ? intval(sanitize_text_field($_POST['no_of_days']) ) : '';
    14801479        $effective_date = isset($_POST['effective_date']) ? convert_to_data_format( sanitize_text_field($_POST['effective_date']) ) : '';
    14811480        $location = isset($_POST['location']) ? sanitize_text_field($_POST['location']) : '';
    … …  
    15221521        }
    15231522
    1524         $holiday_id = isset($_POST['holiday_id']) ? sanitize_text_field( intval($_POST['holiday_id']) ) : 0;
     1523        $holiday_id = isset($_POST['holiday_id']) ? intval(sanitize_text_field( $_POST['holiday_id']) ) : 0;
    15251524        $title = isset($_POST['title']) ? sanitize_text_field($_POST['title']) : '';
    15261525        $start_date = isset($_POST['start_date']) ? convert_to_data_format( sanitize_text_field($_POST['start_date']) ): '';
    … …  
    15731572        }
    15741573
    1575         $id = isset($_POST['id']) ? sanitize_text_field( intval($_POST['id']) ) : 0;
     1574        $id = isset($_POST['id']) ? intval(sanitize_text_field($_POST['id']) ) : 0;
    15761575        if ($id) {
    15771576            wphr_hr_leave_policy_delete($id);
    … …  
    15971596        $this->verify_nonce('wp-wphr-hr-nonce');
    15981597
    1599         $id = isset($_POST['employee_id']) && $_POST['employee_id'] ? sanitize_text_field( intval($_POST['employee_id']) ) : false;
     1598        $id = isset($_POST['employee_id']) && $_POST['employee_id'] ? intval(sanitize_text_field( $_POST['employee_id']) ) : false;
    16001599
    16011600        if (!$id) {
    … …  
    16541653        $financial_end_date = date('Y-m-d', strtotime(wphr_financial_end_date()));
    16551654
    1656         $employee_id = isset($_POST['employee_id']) && sanitize_text_field( $_POST['employee_id'] ) > 0 ? sanitize_text_field( intval($_POST['employee_id']) ) : false;
     1655        $employee_id = isset($_POST['employee_id']) && sanitize_text_field( $_POST['employee_id'] ) > 0 ? intval(sanitize_text_field($_POST['employee_id']) ) : false;
    16571656
    16581657        if ($start_date > $end_date) {
    … …  
    17541753
    17551754        $flag = true;
    1756         $id = isset($_POST['employee_id']) && sanitize_text_field( $_POST['employee_id'] ) ? sanitize_text_field( intval($_POST['employee_id']) ) : false;
     1755        $id = isset($_POST['employee_id']) && sanitize_text_field( $_POST['employee_id'] ) ? intval(sanitize_text_field($_POST['employee_id']) ) : false;
    17571756
    17581757        if (!$id) {
    … …  
    18151814    public function leave_assign_employee_policy() {
    18161815        $this->verify_nonce('wp-wphr-hr-nonce');
    1817         $employee_id = isset($_POST['employee_id']) && sanitize_text_field($_POST['employee_id']) ? sanitize_text_field( intval($_POST['employee_id']) ) : false;
     1816        $employee_id = isset($_POST['employee_id']) && sanitize_text_field($_POST['employee_id']) ? intval(sanitize_text_field($_POST['employee_id']) ) : false;
    18181817
    18191818        if (!$employee_id) {
    … …  
    18911890        $this->verify_nonce('wp-wphr-hr-nonce');
    18921891
    1893         $employee_id = isset($_POST['employee_id']) && sanitize_text_field($_POST['employee_id']) ? sanitize_text_field( intval($_POST['employee_id']) ) : false;
    1894         $policy_id = isset($_POST['policy_id']) && sanitize_text_field($_POST['policy_id']) ? sanitize_text_field( intval($_POST['policy_id']) ) : false;
     1892        $employee_id = isset($_POST['employee_id']) && sanitize_text_field($_POST['employee_id']) ? intval(sanitize_text_field($_POST['employee_id']) ) : false;
     1893        $policy_id = isset($_POST['policy_id']) && sanitize_text_field($_POST['policy_id']) ? intval(sanitize_text_field($_POST['policy_id']) ) : false;
    18951894        $available = 0;
    18961895
    … …  
    19611960        $to_time = !empty($_POST['to_time']) ? strtotime( sanitize_text_field( $_POST['to_time']) ) : 0;
    19621961
    1963         $employee_id = isset($_POST['employee_id']) ? sanitize_text_field( intval($_POST['employee_id']) ) : 0;
    1964         $leave_policy = isset($_POST['leave_policy']) ? sanitize_text_field( intval($_POST['leave_policy']) ) : 0;
     1962        $employee_id = isset($_POST['employee_id']) ? intval(sanitize_text_field($_POST['employee_id']) ) : 0;
     1963        $leave_policy = isset($_POST['leave_policy']) ? intval(sanitize_text_field($_POST['leave_policy']) ) : 0;
    19651964        // @todo: date format may need to be changed when partial leave introduced
    19661965        $start_date = isset($_POST['leave_from']) ? sanitize_text_field( convert_to_data_format( $_POST['leave_from'] ) . ' 00:00:00') : date_i18n('Y-m-d 00:00:00');
    … …  
    21982197        $this->verify_nonce('wphr-hr-empl-leave-history');
    21992198
    2200         $year = isset($_POST['year']) ? sanitize_text_field( intval($_POST['year']) ) : date('Y');
    2201         $employee_id = isset($_POST['employee_id']) ? sanitize_text_field( intval($_POST['employee_id']) ) : 0;
    2202         $policy = isset($_POST['leave_policy']) ? sanitize_text_field( intval($_POST['leave_policy']) ) : 'all';
     2199        $year = isset($_POST['year']) ? intval(sanitize_text_field($_POST['year']) ) : date('Y');
     2200        $employee_id = isset($_POST['employee_id']) ? intval(sanitize_text_field($_POST['employee_id']) ) : 0;
     2201        $policy = isset($_POST['leave_policy']) ? intval(sanitize_text_field($_POST['leave_policy']) ) : 'all';
    22032202
    22042203        $args = array(

  • wp-hr-manager/trunk/modules/hrm/includes/class-employee.php

    r2500839 r2512006  
    5353
    5454        if ( is_int( $employee ) ) {
    55 
     55           
    5656            $user = get_user_by( 'id', $employee );
    5757

  • wp-hr-manager/trunk/modules/hrm/includes/class-form-handler.php

    r2485387 r2512006  
    518518
    519519        $is_single = !isset($_POST['assignment_to']);
    520         $leave_policy = isset($_POST['leave_policy']) ? sanitize_text_field( intval($_POST['leave_policy']) ) : '-1';
     520        $leave_policy = isset($_POST['leave_policy']) ? intval(sanitize_text_field($_POST['leave_policy']) ) : '-1';
    521521        $leave_period = isset($_POST['leave_period']) ? sanitize_text_field($_POST['leave_period']) : '-1';
    522         $single_employee = isset($_POST['single_employee']) ? sanitize_text_field( intval($_POST['single_employee']) ) : '-1';
    523         $location = isset($_POST['location']) ? sanitize_text_field( intval($_POST['location']) ) : '-1';
    524         $department = isset($_POST['department']) ? sanitize_text_field( intval($_POST['department']) ) : '-1';
     522        $single_employee = isset($_POST['single_employee']) ? intval(sanitize_text_field($_POST['single_employee']) ) : '-1';
     523        $location = isset($_POST['location']) ? intval(sanitize_text_field($_POST['location']) ) : '-1';
     524        $department = isset($_POST['department']) ? intval(sanitize_text_field($_POST['department']) ) : '-1';
    525525        $comment = isset($_POST['comment']) ? wp_kses_post($_POST['comment']) : '-1';
    526526

  • wp-hr-manager/trunk/modules/hrm/includes/functions-employee.php

    r2485387 r2512006  
    208208
    209209    $employee_row_id1 = $wpdb->get_var( $wpdb->prepare('SELECT id FROM '.$wpdb->prefix .'wphr_hr_leave_requests WHERE user_id = %d', $user_id ));
    210     if( $employee_row_id1){
     210    /*if( $employee_row_id1){
    211211        $wpdb->update( $wpdb->prefix . 'wphr_hr_leave_requests', $employee_table_data, array( 'user_id' => $user_id ) );
    212212    }
    … …  
    215215        $employee_table_data['user_id'] = $user_id;
    216216        $wpdb->insert( $wpdb->prefix . 'wphr_hr_leave_requests', $employee_table_data );
    217     }
     217    }*/
    218218    foreach ( $data['personal'] as $key => $value ) {
    219219

  • wp-hr-manager/trunk/modules/hrm/includes/functions-leave.php

    r2500839 r2512006  
    146146    } );
    147147    $results = $leave_requests->get()->toArray();
    148     $query = $wpdb->prepare("select * from `{$wpdb->prefix}wphr_hr_leave_requests` where `status` in (1, 2) and `user_id` = %1$d and ( `start_date` BETWEEN %2$s AND %3$s OR  `end_date` BETWEEN %4$s AND %5$s )", $user_id, $start_dateTime, $end_dateTime, $start_dateTime, $end_dateTime );
     148    $query = $wpdb->prepare("select * from `{$wpdb->prefix}wphr_hr_leave_requests` where `status` in (1, 2) and `user_id` = %d and ( `start_date` BETWEEN %s AND %s OR  `end_date` BETWEEN %s AND %s )", $user_id, $start_dateTime, $end_dateTime, $start_dateTime, $end_dateTime );
    149149    $results2 = $wpdb->get_results( $query );
    150150    $exist = array();
    … …  
    12311231       
    12321232        if ( is_array( $args['status'] ) ) {
    1233             $where .= " `status` IN(" . implode( ",", array_map( 'intval', $args['status'] ) ) . ") ";
     1233            $where .= " req.status IN(" . implode( ",", array_map( 'intval', $args['status'] ) ) . ") ";
    12341234        } else {
    1235             $where .= " `status` = " . intval( $args['status'] ) . " ";
     1235            $where .= " req.status = " . intval( $args['status'] ) . " ";
    12361236        }
    12371237   
    … …  
    13011301    $limit = ( $args['number'] == '-1' ? '' : 'LIMIT %d, %d' );
    13021302    $table_name = $wpdb->prefix.'wphr_hr_leave_requests';
    1303     $sql = "SELECT req.id, req.user_id, u.display_name, req.policy_id, pol.name as policy_name, req.status, req.reason, req.comments, req.created_on, req.days, req.start_date, req.end_date FROM %1$s LEFT JOIN {$wpdb->prefix}wphr_hr_leave_policies AS pol ON pol.id = req.policy_id LEFT JOIN {$wpdb->users} AS u ON req.user_id = u.ID %2$s ORDER BY %3$s %4$s {$limit}";
     1303    $sql = "SELECT req.id, req.user_id, u.display_name, req.policy_id, pol.name as policy_name, req.status, req.reason, req.comments, req.created_on, req.days, req.start_date, req.end_date FROM {$table_name} as req LEFT JOIN {$wpdb->prefix}wphr_hr_leave_policies AS pol ON pol.id = req.policy_id LEFT JOIN {$wpdb->users} AS u ON req.user_id = u.ID {$where} ORDER BY {$args['orderby']} {$args['order']} {$limit}";
    13041304   
    13051305    if ( $requests === false ) {
    13061306       
    13071307        if ( $args['number'] == '-1' ) {
    1308             $requests = $wpdb->get_results( $wpdb->prepare( $sql, $table_name, $where, $args['orderby'], $args['order'] ) );
     1308            $requests = $wpdb->get_results( $sql );
    13091309        } else {
    1310             $requests = $wpdb->get_results( $wpdb->prepare( $sql, $table_name, $where, $args['orderby'], $args['order'], absint( $args['offset'] ), absint( $args['number'] ) ) );
     1310            $requests = $wpdb->get_results( $wpdb->prepare( $sql, absint( $args['offset'] ), absint( $args['number'] ) ) );
    13111311        }
    13121312       
    … …  
    13371337    $results = wp_cache_get( $cache_key, 'wphr' );
    13381338    $user_id_in = '';
    1339     if ( isset( $args['user_id_in'] ) ) {
    1340         $user_id_in = 'AND user_id IN (' . implode( ',', $args['user_id_in'] ) . ') ';
     1339    $user_id_list = (isset($args['user_id_in']) && is_array( $args['user_id_in'] ) ) ? $args['user_id_in'] : [];
     1340    if ( isset( $args['user_id_in'] ) && is_array( $args['user_id_in'] ) ) {
     1341        $user_id_in = 'AND user_id IN (' . implode( ',', array_fill(0, count($args['user_id_in']), '%d') ) . ') ';
    13411342    }
    13421343    foreach ( $statuses as $status => $label ) {
    … …  
    13471348       
    13481349        if ( $status == 4 ) {
    1349             $sql2 = "SELECT COUNT(id) as num FROM {$wpdb->prefix}wphr_hr_leave_requests WHERE status = 1 AND is_archived = 1 %s GROUP BY status;";
    1350             $archived_cnt = $wpdb->get_row( $wpdb->prepare( $sql2, $user_id_in ) );
     1350            $sql2 = "SELECT COUNT(id) as num FROM {$wpdb->prefix}wphr_hr_leave_requests WHERE status = %d AND is_archived = %d {$user_id_in} GROUP BY status;";
     1351            $data = array( 1, 1 ) + $user_id_list;
     1352            $archived_cnt = $wpdb->get_row( $wpdb->prepare( $sql2, $data) );
    13511353            if ( $archived_cnt ) {
    13521354                $counts[$status] = array(
    … …  
    13561358            }
    13571359        } elseif ( $status == 1 ) {
    1358             $sql3 = "SELECT COUNT(id) as num FROM {$wpdb->prefix}wphr_hr_leave_requests WHERE status = 1 AND is_archived = 0 %s GROUP BY status;";
    1359             $approved_cnt = $wpdb->get_row( $wpdb->prepare( $sql3, $user_id_in ) );
     1360            $sql3 = "SELECT COUNT(id) as num FROM {$wpdb->prefix}wphr_hr_leave_requests WHERE status = %d AND is_archived = %d {$user_id_in} GROUP BY status;";
     1361            $data = array( 1, 0 ) + $user_id_list;
     1362            $approved_cnt = $wpdb->get_row( $wpdb->prepare( $sql3, $data ) );
    13601363            if ( $approved_cnt ) {
    13611364                $counts[$status] = array(
    … …  
    13691372   
    13701373    if ( false === $results ) {
    1371         $sql = "SELECT status, COUNT(id) as num FROM {$wpdb->prefix}wphr_hr_leave_requests WHERE status != 0 %s GROUP BY status;";
    1372         $results = $wpdb->get_results( $wpdb->prepare( $sql, $user_id_in ) );
     1374        $sql = "SELECT status, COUNT(id) as num FROM {$wpdb->prefix}wphr_hr_leave_requests WHERE status != %d {$user_id_in} GROUP BY status;";
     1375         $data = array( 0 ) + $user_id_list;
     1376        $results = $wpdb->get_results( $wpdb->prepare( $sql, $data ) );
    13731377        wp_cache_set( $cache_key, $results, 'wphr' );
    13741378    }
    … …  
    15731577        $where .= " AND en.policy_id = " . intval( $args['policy_id'] );
    15741578    }
    1575     $query = "SELECT en.*, u.display_name as employee_name, pol.name as policy_name FROM {$wpdb->prefix}wphr_hr_leave_entitlements AS en LEFT JOIN {$wpdb->prefix}wphr_hr_leave_policies AS pol ON pol.id = en.policy_id LEFT JOIN {$wpdb->users} AS u ON en.user_id = u.ID %1$s ORDER BY %2$s %3$s LIMIT %4$d,%5$d";
    1576     $sql = $wpdb->prepare( $query, $where, $args['orderby'], $args['order'], absint( $args['offset'] ), absint( $args['number'] ) );
     1579    $query = "SELECT en.*, u.display_name as employee_name, pol.name as policy_name FROM {$wpdb->prefix}wphr_hr_leave_entitlements AS en LEFT JOIN {$wpdb->prefix}wphr_hr_leave_policies AS pol ON pol.id = en.policy_id LEFT JOIN {$wpdb->users} AS u ON en.user_id = u.ID {$where} ORDER BY {$args['orderby']} {$args['order']} LIMIT %d,%d";
     1580    $sql = $wpdb->prepare( $query, absint( $args['offset'] ), absint( $args['number'] ) );
    15771581    $results = $wpdb->get_results( $sql );
    15781582    return $results;
    … …  
    17591763    $query = "SELECT req.id, req.days, req.policy_id, req.start_date, req.end_date, en.days as entitlement";
    17601764    $query .= " FROM {$wpdb->prefix}wphr_hr_leave_requests AS req";
    1761     $query .= " LEFT JOIN {$wpdb->prefix}wphr_hr_leave_entitlements as en on (req.user_id = en.user_id and req.policy_id = en.policy_id and en.from_date >= %1$s )";
    1762     $query .= " WHERE req.status = 1 and req.user_id = %2$d AND ( req.start_date >= %3$s AND req.end_date <= %4$s )";
     1765    $query .= " LEFT JOIN {$wpdb->prefix}wphr_hr_leave_entitlements as en on (req.user_id = en.user_id and req.policy_id = en.policy_id and en.from_date >= %s )";
     1766    $query .= " WHERE req.status = 1 and req.user_id = %d AND ( req.start_date >= %s AND req.end_date <= %s )";
    17631767    $sql = $wpdb->prepare( $query, $financial_start_date, $user_id, $financial_start_date, $financial_end_date );
    17641768    $results = $wpdb->get_results( $sql );

  • wp-hr-manager/trunk/modules/hrm/views/employee/tab-general.php

    r2127919 r2512006  
    204204                    <tbody>
    205205                        <?php foreach ($dependents as $key => $dependent) { ?>
    206                             <?php $dependent->dob = wphr_format_date( $dependent->dob ); ?>
     206                            <?php //$dependent->dob = wphr_format_date( $dependent->dob ); ?>
    207207                            <tr class="<?php echo $key % 2 == 0 ? 'alternate' : 'odd'; ?>">
    208208                                <td><?php echo esc_html( $dependent->name ); ?></td>

  • wp-hr-manager/trunk/modules/hrm/views/employee/tab-job.php

    r2279207 r2512006  
    7373                <th><?php _e( 'Comment', 'wphr' ) ?></th>
    7474<?php
     75
    7576foreach ($jobes as $key => $value) {
    7677    # code...
    … …  
    8990            if ( $history['employment'] ) {
    9091                $types = wphr_hr_get_employee_types() + ['terminated' => __( 'Terminated', 'wphr' ) ];
    91 
     92               
    9293                foreach ($history['employment'] as $num => $row) {
    9394                    ?>

  • wp-hr-manager/trunk/modules/hrm/views/employee/tab-performance.php

    r2279207 r2512006  
    154154        <tbody>
    155155            <tr><td><ul>
    156                  <?php// do_action( 'wphr-hr-employee-single-performace-review', $employee ); ?></ul>
     156                <?php //do_action( 'wphr-hr-employee-single-performace-review', $employee ); ?></ul>
    157157            </td></tr>
    158158        </tbody>   

  • wp-hr-manager/trunk/modules/hrm/views/js-templates/compensation.php

    r2279207 r2512006  
    5050    </div>
    5151    <div class="row">
    52     <ul> <?php do_action( 'wphr-hr-employee-job-compensation', $employee ); ?>     
     52    <ul> <?php //do_action( 'wphr-hr-employee-job-compensation', $employee ); ?>     
    5353    </ul>
    5454    </div>

  • wp-hr-manager/trunk/modules/hrm/views/js-templates/employee-terminate.php

    r2485387 r2512006  
    1 <?php $employee_id = isset( $_GET['id'] ) ? sanitize_text_field( intval( $_GET['id'] ) ) : null; ?>
     1<?php $employee_id = isset( $_GET['id'] ) ? intval(sanitize_text_field( $_GET['id'] ) ) : null; ?>
    22
    33<div class="terminate-form-wrap">

  • wp-hr-manager/trunk/modules/hrm/views/js-templates/job-info.php

    r2485387 r2512006  
    1 <?php $employee_id = isset( $_GET['id'] ) ? sanitize_text_field( intval( $_GET['id'] ) ) : null; ?>
     1<?php $employee_id = isset( $_GET['id'] ) ? intval(sanitize_text_field( $_GET['id'] ) ) : null; ?>
    22
    33<div class="info-form-wrap">

  • wp-hr-manager/trunk/modules/hrm/views/js-templates/performance-comments.php

    r2485387 r2512006  
    1 <?php $employee_id = isset( $_GET['id'] ) ? sanitize_text_field( intval( $_GET['id'] ) ) : null; ?>
     1<?php $employee_id = isset( $_GET['id'] ) ? intval(sanitize_text_field( $_GET['id'] ) ) : null; ?>
    22
    33<div class="performance-form-wrap">

  • wp-hr-manager/trunk/modules/hrm/views/js-templates/performance-reviews.php

    r2485387 r2512006  
    1 <?php $employee_id = isset( $_GET['id'] ) ? sanitize_text_field( intval( $_GET['id'] ) ) : null; ?>
     1<?php $employee_id = isset( $_GET['id'] ) ? intval(sanitize_text_field( $_GET['id'] ) ) : null; ?>
    22
    33<div class="performance-form-wrap">

  • wp-hr-manager/trunk/modules/wp-hr-frontend/templates/employee-profile/employee-profile.php

    r2485387 r2512006  
    11<?php
    22$action = isset( $_GET['action'] ) ? sanitize_text_field($_GET['action']) : 'list';
    3 $id     = isset( $_GET['id'] ) ? sanitize_text_field( intval( $_GET['id'] ) ) : 0;
     3$id     = isset( $_GET['id'] ) ? intval(sanitize_text_field( $_GET['id'] ) ) : 0;
    44
    55switch ($action) {

  • wp-hr-manager/trunk/readme.txt

    r2500839 r2512006  
    66Requires at least: 5.0
    77Tested up to: 5.7
    8 Stable tag: 2.9.5
     8Stable tag: 2.9.6
    99License: GPLv2
    1010Donate Link: https://www.paypal.com/cgi-bin/webscr?cmd=_s-xclick&hosted_button_id=GLKGN964GRZJW
    … …  
    191191
    192192== Changelog ==
     193
     194= v2.9.6 -> 09 April 2021
     195* Fixed Leave Issue
     196* Fixed Add  New Employee Issue
     197
    193198= v2.9.5 -> 22 March 2021
    194199* Fixed All Security Issues

  • wp-hr-manager/trunk/wp-hr-manager.php

    r2500839 r2512006  
    77 * Author: Black and White Digital Ltd
    88 * Author URI: http://www.wphrmanager.com
    9  * Version: 2.9.5
     9 * Version: 2.9.6
    1010 * Requires at least: 5
    1111 * License: GPLv2
Note: See TracChangeset for help on using the changeset viewer.