From 159586329f404236e7e877036bc46201600ba251 Mon Sep 17 00:00:00 2001 From: johnnyq Date: Wed, 18 Jan 2023 18:12:14 -0500 Subject: [PATCH] Feature: Document Templates - You can now officially create document template and create documents from a template - WIP list/edit/delete document templates --- client_document_add_from_template_modal.php | 83 +++++++++++++++++++++ client_document_add_modal.php | 1 - client_documents.php | 13 ++-- post.php | 40 ++++++++++ 4 files changed, 131 insertions(+), 6 deletions(-) create mode 100644 client_document_add_from_template_modal.php diff --git a/client_document_add_from_template_modal.php b/client_document_add_from_template_modal.php new file mode 100644 index 00000000..983af75b --- /dev/null +++ b/client_document_add_from_template_modal.php @@ -0,0 +1,83 @@ + \ No newline at end of file diff --git a/client_document_add_modal.php b/client_document_add_modal.php index 02e540ca..bbb04e00 100644 --- a/client_document_add_modal.php +++ b/client_document_add_modal.php @@ -30,7 +30,6 @@ diff --git a/client_documents.php b/client_documents.php index dbb952bb..398021b1 100644 --- a/client_documents.php +++ b/client_documents.php @@ -49,13 +49,15 @@ $num_rows = mysqli_fetch_row(mysqli_query($mysqli,"SELECT FOUND_ROWS()"));

Documents

- -
- + +
+ +
- Folder + Folder
- Document From Template
@@ -213,5 +215,6 @@ $num_rows = mysqli_fetch_row(mysqli_query($mysqli,"SELECT FOUND_ROWS()")); + \ No newline at end of file diff --git a/post.php b/post.php index aa52622f..89e43245 100644 --- a/post.php +++ b/post.php @@ -6778,6 +6778,46 @@ if(isset($_POST['add_document'])){ } +if(isset($_POST['add_document_from_template'])){ + + // ROLE Check + validateTechRole(); + + // HTML Purifier + require("plugins/htmlpurifier/HTMLPurifier.standalone.php"); + $purifier_config = HTMLPurifier_Config::createDefault(); + $purifier_config->set('URI.AllowedSchemes', ['data' => true, 'src' => true, 'http' => true, 'https' => true]); + $purifier = new HTMLPurifier($purifier_config); + + // GET POST Data + $client_id = intval($_POST['client_id']); + $document_name = trim(strip_tags(mysqli_real_escape_string($mysqli,$_POST['name']))); + $document_template_id = intval($_POST['document_template_id']); + $folder = intval($_POST['folder']); + + //GET Document Info + $sql_document = mysqli_query($mysqli,"SELECT * FROM documents WHERE document_id = $document_template_id AND company_id = $session_company_id"); + + $row = mysqli_fetch_array($sql_document); + + $document_template_name = trim(strip_tags(mysqli_real_escape_string($mysqli,$row['document_name']))); + $content = trim(mysqli_real_escape_string($mysqli,$purifier->purify(html_entity_decode($row['document_content'])))); + $content_raw = trim(mysqli_real_escape_string($mysqli, strip_tags($_POST['name'] . " " . str_replace("<", " <", $row['document_content'])))); + + // Document add query + $add_document = mysqli_query($mysqli,"INSERT INTO documents SET document_name = '$document_name', document_content = '$content', document_content_raw = '$content_raw', document_template = 0, document_folder_id = $folder, document_client_id = $client_id, company_id = $session_company_id"); + + $document_id = $mysqli->insert_id; + + // Logging + mysqli_query($mysqli,"INSERT INTO logs SET log_type = 'Document', log_action = 'Create', log_description = 'Document $document_name created from template $document_template_name', log_ip = '$session_ip', log_user_agent = '$session_user_agent', log_client_id = '$client_id', company_id = $session_company_id, log_user_id = $session_user_id"); + + $_SESSION['alert_message'] = "Document created from template"; + + header("Location: client_document_details.php?client_id=$client_id&folder_id=$folder_id&document_id=$document_id"); + +} + if(isset($_POST['edit_document'])){ validateTechRole();