diff --git a/api/bulk_operation.php b/api/bulk_operation.php index 2783224..27fd7cb 100644 --- a/api/bulk_operation.php +++ b/api/bulk_operation.php @@ -3,7 +3,6 @@ require_once dirname(__DIR__) . '/middleware/RateLimitMiddleware.php'; RateLimitMiddleware::apply('api'); -session_start(); require_once dirname(__DIR__) . '/config/config.php'; require_once dirname(__DIR__) . '/helpers/Database.php'; require_once dirname(__DIR__) . '/models/BulkOperationsModel.php'; diff --git a/api/manage_workflows.php b/api/manage_workflows.php index 812cc81..628b5ab 100644 --- a/api/manage_workflows.php +++ b/api/manage_workflows.php @@ -17,7 +17,7 @@ try { require_once dirname(__DIR__) . '/models/AuditLogModel.php'; // Check authentication - session_start(); + if (session_status() === PHP_SESSION_NONE) session_start(); if (!isset($_SESSION['user']) || !isset($_SESSION['user']['user_id'])) { http_response_code(401); echo json_encode(['success' => false, 'error' => 'Authentication required']); @@ -81,13 +81,12 @@ try { $stmt = $conn->prepare("INSERT INTO status_transitions (from_status, to_status, requires_comment, requires_admin, is_active) VALUES (?, ?, ?, ?, ?)"); - $stmt->bind_param('ssiii', - $data['from_status'], - $data['to_status'], - $data['requires_comment'] ?? 0, - $data['requires_admin'] ?? 0, - $data['is_active'] ?? 1 - ); + $wf_from = $data['from_status']; + $wf_to = $data['to_status']; + $wf_comment = (int)($data['requires_comment'] ?? 0); + $wf_admin = (int)($data['requires_admin'] ?? 0); + $wf_active = (int)($data['is_active'] ?? 1); + $stmt->bind_param('ssiii', $wf_from, $wf_to, $wf_comment, $wf_admin, $wf_active); if ($stmt->execute()) { $transitionId = $conn->insert_id; @@ -120,14 +119,12 @@ try { $stmt = $conn->prepare("UPDATE status_transitions SET from_status = ?, to_status = ?, requires_comment = ?, requires_admin = ?, is_active = ? WHERE transition_id = ?"); - $stmt->bind_param('ssiiii', - $data['from_status'], - $data['to_status'], - $data['requires_comment'] ?? 0, - $data['requires_admin'] ?? 0, - $data['is_active'] ?? 1, - $id - ); + $wf_from = $data['from_status']; + $wf_to = $data['to_status']; + $wf_comment = (int)($data['requires_comment'] ?? 0); + $wf_admin = (int)($data['requires_admin'] ?? 0); + $wf_active = (int)($data['is_active'] ?? 1); + $stmt->bind_param('ssiiii', $wf_from, $wf_to, $wf_comment, $wf_admin, $wf_active, $id); $success = $stmt->execute(); if ($success) {