From 2032fe43d4c1957e10d7583f8076fce7a0525ddf Mon Sep 17 00:00:00 2001
From: johnnyq <johnny@pittpc.com>
Date: Sat, 8 Jun 2024 16:20:28 -0400
Subject: [PATCH] Added Bulk Delete to Archived Contacts

---
 client_contacts.php  |  5 +++++
 client_locations.php | 13 +++++------
 post/contact.php     | 51 ++++++++++++++++++++++++++++++++++++++++++--
 3 files changed, 61 insertions(+), 8 deletions(-)

diff --git a/client_contacts.php b/client_contacts.php
index cd17c53b..ec7306d0 100644
--- a/client_contacts.php
+++ b/client_contacts.php
@@ -163,6 +163,11 @@ $num_rows = mysqli_fetch_row(mysqli_query($mysqli, "SELECT FOUND_ROWS()"));
                                         type="submit" form="bulkActions" name="bulk_unarchive_contacts">
                                         <i class="fas fa-fw fa-redo mr-2"></i>Unarchive
                                     </button>
+                                    <div class="dropdown-divider"></div>
+                                    <button class="dropdown-item text-danger text-bold"
+                                        type="submit" form="bulkActions" name="bulk_delete_contacts">
+                                        <i class="fas fa-fw fa-trash mr-2"></i>Delete
+                                    </button>
                                     <?php } else { ?>
                                     <div class="dropdown-divider"></div>
                                     <button class="dropdown-item text-danger confirm-link"
diff --git a/client_locations.php b/client_locations.php
index 3e7a7b6e..b7875392 100644
--- a/client_locations.php
+++ b/client_locations.php
@@ -255,18 +255,19 @@ $num_rows = mysqli_fetch_row(mysqli_query($mysqli, "SELECT FOUND_ROWS()"));
                                             <a class="dropdown-item text-info confirm-link" href="post.php?unarchive_location=<?php echo $location_id; ?>">
                                                 <i class="fas fa-fw fa-redo mr-2"></i>Unarchive
                                             </a>
-                                            <?php } else { ?>
-                                            <div class="dropdown-divider"></div>
-                                            <a class="dropdown-item text-danger confirm-link" href="post.php?archive_location=<?php echo $location_id; ?>">
-                                                <i class="fas fa-fw fa-archive mr-2"></i>Archive
-                                            </a>
-                                            <?php } ?>
                                             <?php if ($config_destructive_deletes_enable) { ?>
                                             <div class="dropdown-divider"></div>
                                             <a class="dropdown-item text-danger text-bold confirm-link" href="post.php?delete_location=<?php echo $location_id; ?>">
                                                 <i class="fas fa-fw fa-trash mr-2"></i>Delete
                                             </a>
                                             <?php } ?>
+                                            <?php } else { ?>
+                                            <div class="dropdown-divider"></div>
+                                            <a class="dropdown-item text-danger confirm-link" href="post.php?archive_location=<?php echo $location_id; ?>">
+                                                <i class="fas fa-fw fa-archive mr-2"></i>Archive
+                                            </a>
+                                            <?php } ?>
+                                            
                                         <?php } ?>
                                     </div>
                                 </div>
diff --git a/post/contact.php b/post/contact.php
index 54bf2752..2090ee63 100644
--- a/post/contact.php
+++ b/post/contact.php
@@ -461,6 +461,50 @@ if (isset($_POST['bulk_unarchive_contacts'])) {
     header("Location: " . $_SERVER["HTTP_REFERER"]);
 }
 
+if (isset($_POST['bulk_delete_contacts'])) {
+    validateAdminRole();
+    validateCSRFToken($_POST['csrf_token']);
+
+    $count = 0; // Default 0
+    $contact_ids = $_POST['contact_ids']; // Get array of IDs to be deleted
+
+    if (!empty($contact_ids)) {
+
+        // Cycle through array and delete each record
+        foreach ($contact_ids as $contact_id) {
+
+            $contact_id = intval($contact_id);
+
+            // Get Name and Client ID for logging and alert message
+            $sql = mysqli_query($mysqli,"SELECT contact_name, contact_client_id FROM contacts WHERE contact_id = $contact_id");
+            $row = mysqli_fetch_array($sql);
+            $contact_name = sanitizeInput($row['contact_name']);
+            $client_id = intval($row['contact_client_id']);
+            
+            mysqli_query($mysqli, "DELETE FROM contacts WHERE contact_id = $contact_id AND contact_client_id = $client_id");
+
+            // Remove Relations
+            mysqli_query($mysqli, "DELETE FROM contact_tags WHERE contact_id = $contact_id");
+            mysqli_query($mysqli, "DELETE FROM contact_assets WHERE contact_id = $contact_id");
+            mysqli_query($mysqli, "DELETE FROM contact_documents WHERE contact_id = $contact_id");
+            mysqli_query($mysqli, "DELETE FROM contact_files WHERE contact_id = $contact_id");
+            mysqli_query($mysqli, "DELETE FROM contact_logins WHERE contact_id = $contact_id");
+
+            mysqli_query($mysqli, "INSERT INTO logs SET log_type = 'Contact', log_action = 'Delete', log_description = '$session_name deleted contact $contact_name', log_ip = '$session_ip', log_user_agent = '$session_user_agent', log_client_id = $client_id, log_user_id = $session_user_id, log_entity_id = $contact_id");
+
+            $count++;
+        }
+
+        // Logging
+        mysqli_query($mysqli, "INSERT INTO logs SET log_type = 'Contact', log_action = 'Delete', log_description = '$session_name bulk deleted $count contacts', log_ip = '$session_ip', log_user_agent = '$session_user_agent', log_client_id = $client_id, log_user_id = $session_user_id");
+
+        $_SESSION['alert_message'] = "Deleted $count contact(s)";
+
+    }
+
+    header("Location: " . $_SERVER["HTTP_REFERER"]);
+}
+
 if (isset($_GET['anonymize_contact'])) {
 
     validateAdminRole();
@@ -616,9 +660,12 @@ if (isset($_GET['delete_contact'])) {
 
     mysqli_query($mysqli,"DELETE FROM contacts WHERE contact_id = $contact_id");
 
-    // Tags
-    // Delete existing tags
+    // Remove Relations
     mysqli_query($mysqli, "DELETE FROM contact_tags WHERE contact_id = $contact_id");
+    mysqli_query($mysqli, "DELETE FROM contact_assets WHERE contact_id = $contact_id");
+    mysqli_query($mysqli, "DELETE FROM contact_documents WHERE contact_id = $contact_id");
+    mysqli_query($mysqli, "DELETE FROM contact_files WHERE contact_id = $contact_id");
+    mysqli_query($mysqli, "DELETE FROM contact_logins WHERE contact_id = $contact_id");
 
     //Logging
     mysqli_query($mysqli,"INSERT INTO logs SET log_type = 'Contact', log_action = 'Delete', log_description = '$session_name deleted contact $contact_name', log_ip = '$session_ip', log_user_agent = '$session_user_agent', log_client_id = $client_id, log_user_id = $session_user_id, log_entity_id = $contact_id");