SID & start_form() cleanup.

[fa-stable.git] / admin / attachments.php

diff --git a/admin/attachments.php b/admin/attachments.php
index e623f0b9887d5639ca4482ec111f9b27f0d0a61a..12bab6511915adf8c9854d1adf910765174fb431 100644 (file)
--- a/admin/attachments.php
+++ b/admin/attachments.php
@@ -1,13 +1,13 @@
 <?php
 /**********************************************************************
     Copyright (C) FrontAccounting, LLC.
-       Released under the terms of the GNU Affero General Public License,
-       AGPL, as published by the Free Software Foundation, either version 
-       3 of the License, or (at your option) any later version.
+       Released under the terms of the GNU General Public License, GPL, 
+       as published by the Free Software Foundation, either version 3 
+       of the License, or (at your option) any later version.
     This program is distributed in the hope that it will be useful,
     but WITHOUT ANY WARRANTY; without even the implied warranty of
     MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  
-    See the License here <http://www.gnu.org/licenses/agpl-3.0.html>.
+    See the License here <http://www.gnu.org/licenses/gpl-3.0.html>.
 ***********************************************************************/
 $path_to_root="..";
 $page_security = 8;
@@ -79,7 +79,7 @@ if ($Mode == 'ADD_ITEM' || $Mode == 'UPDATE_ITEM')
                        fwrite($fp, $index_file);
                        fclose($fp);
                }
-               if ($Mode == 'UPDATE_ITEM')
+               if ($Mode == 'UPDATE_ITEM' && file_exists($dir."/".$_POST['unique_name']))
                        unlink($dir."/".$_POST['unique_name']);
 
                $unique_name = uniqid('');
@@ -125,6 +125,10 @@ if ($Mode == 'ADD_ITEM' || $Mode == 'UPDATE_ITEM')
 
 if ($Mode == 'Delete')
 {
+       $row = get_attachment($selected_id);
+       $dir =  $comp_path."/".user_company(). "/attachments";
+       if (file_exists($dir."/".$row['unique_name']))
+               unlink($dir."/".$row['unique_name']);
        $sql = "DELETE FROM ".TB_PREF."attachments WHERE id = $selected_id";
        db_query($sql, "Could not delete attachment");
        display_notification(_("Attachment has been deleted.")); 
@@ -140,7 +144,7 @@ if ($Mode == 'RESET')
 
 function viewing_controls()
 {
-    start_form(false, true);
+    start_form();
 
     start_table("class='tablestyle_noborder'");
 
@@ -209,7 +213,7 @@ if (isset($_POST['filterType']))
 
 start_form(true);
 
-start_table("$table_style2 width=30%");
+start_table($table_style2);
 
 if ($selected_id != -1)
 {