From 675b76a52655e022e11acd8939cab354ac83f7ad Mon Sep 17 00:00:00 2001 From: mattf Date: Thu, 4 Mar 2021 21:52:47 +0000 Subject: [PATCH] Added modify_leads=5 read-only option to QC modify leads page git-svn-id: svn://192.168.202.10@3365 3d104415-ff17-0410-8863-d5cf3c621b8a --- www/vicidial/qc_modify_lead.php | 12 ++++++++++-- 1 file changed, 10 insertions(+), 2 deletions(-) diff --git a/www/vicidial/qc_modify_lead.php b/www/vicidial/qc_modify_lead.php index b971e4a9..56c2c0d2 100644 --- a/www/vicidial/qc_modify_lead.php +++ b/www/vicidial/qc_modify_lead.php @@ -6,7 +6,7 @@ # qc_modify_lead.php # # Copyright (C) 2012 poundteam.com LICENSE: AGPLv2 -# Copyright (C) 2017 Matt Florell LICENSE: AGPLv2 +# Copyright (C) 2021 Matt Florell LICENSE: AGPLv2 # # This script is designed to allow QC review and modification of leads, contributed by poundteam.com # @@ -28,6 +28,7 @@ # 170513-2256 - Added QC Webform, issue #1010 # 170527-2252 - Fix for rare inbound logging issue #1017 # 171001-1110 - Added in-browser audio control, if recording access control is disabled +# 210304-1650 - Added modify_leads=5 read-only option # require("dbconnect_mysqli.php"); @@ -429,6 +430,11 @@ echo "
0) { + if ($LOGmodify_leads == '5') + { + echo "ERROR: "._QXZ("You do not have permission to modify leads").": $LOGmodify_leads \n"; + exit; + } if($DB) { echo __LINE__."\n"; } ### update the lead record in the vicidial_list table $stmt="UPDATE vicidial_list set status='" . mysqli_real_escape_string($link, $status) . "',title='" . mysqli_real_escape_string($link, $title) . "',first_name='" . mysqli_real_escape_string($link, $first_name) . "',middle_initial='" . mysqli_real_escape_string($link, $middle_initial) . "',last_name='" . mysqli_real_escape_string($link, $last_name) . "',address1='" . mysqli_real_escape_string($link, $address1) . "',address2='" . mysqli_real_escape_string($link, $address2) . "',address3='" . mysqli_real_escape_string($link, $address3) . "',city='" . mysqli_real_escape_string($link, $city) . "',state='" . mysqli_real_escape_string($link, $state) . "',province='" . mysqli_real_escape_string($link, $province) . "',postal_code='" . mysqli_real_escape_string($link, $postal_code) . "',country_code='" . mysqli_real_escape_string($link, $country_code) . "',alt_phone='" . mysqli_real_escape_string($link, $alt_phone) . "',phone_number='$phone_number',phone_code='$phone_code',email='" . mysqli_real_escape_string($link, $email) . "',security_phrase='" . mysqli_real_escape_string($link, $security) . "',comments='" . mysqli_real_escape_string($link, $comments) . "',rank='" . mysqli_real_escape_string($link, $rank) . "',owner='" . mysqli_real_escape_string($link, $owner) . "' where lead_id='" . mysqli_real_escape_string($link, $lead_id) . "'"; @@ -1307,9 +1313,11 @@ else { $rowx=mysqli_fetch_row($rslt); $custom_records_count = $rowx[0]; + $submit_buttonURL = '&submit_button=YES'; + if ($LOGmodify_leads == '5') {$submit_buttonURL = '&submit_button=READONLY';} echo ""._QXZ("CUSTOM FIELDS FOR THIS LEAD").":
\n"; - echo "\n"; + echo "\n"; echo "

"; } }