From 0faf101fd1ed8e0b9ae013ac6df9040daa59426f Mon Sep 17 00:00:00 2001
From: Lizandro Guarnizo <77708265+lizandrogd@users.noreply.github.com>
Date: Thu, 19 Mar 2026 07:55:31 -0500
Subject: [PATCH] conversations: fix auth con isUserLoggedIn + escapar comillas
 dobles y backticks en onclick

---
 conversations.php | 9 +++++----
 1 file changed, 5 insertions(+), 4 deletions(-)

diff --git a/conversations.php b/conversations.php
index aea0cce..06ca766 100644
--- a/conversations.php
+++ b/conversations.php
@@ -1,8 +1,9 @@
 <?php
 session_start();
+require_once 'config/config.php';
 
-// Verificar autenticación
-if (!isset($_SESSION['user_id'])) {
+// Verificar autenticación igual que el resto del sistema
+if (!isUserLoggedIn()) {
     header('Location: login.php');
     exit;
 }
@@ -2762,8 +2763,8 @@ if (!isset($_SESSION['user_id'])) {
                     const unreadClass = (conv.unread_count && conv.unread_count > 0 && !isActive) ? 'unread' : '';
                     const attentionClass = conv.advisor_requested ? ' attention' : '';
 
-                    // Escapar apóstrofes/comillas en nombre y teléfono para no romper el onclick
-                    const safeName  = (conv.name        || '').replace(/\\/g, '\\\\').replace(/'/g, "\\'");
+                    // Escapar caracteres especiales en nombre y teléfono para no romper el onclick
+                    const safeName  = (conv.name        || '').replace(/\\/g, '\\\\').replace(/'/g, "\\'").replace(/"/g, '&quot;').replace(/`/g, '\\`');
                     const safePhone = (conv.phone_number || '').replace(/\\/g, '\\\\').replace(/'/g, "\\'");
                     return `
                         <div class="conversation-item ${isActive} ${unreadClass}${attentionClass}" data-user-id="${conv.user_id}" onclick="chat.openConversation(${conv.user_id}, '${safeName}', '${safePhone}')">