From 3f3854e8c35952ab97eb9c7e900f03a70d5d181c Mon Sep 17 00:00:00 2001
From: Marcus Hill <bcf8c9f2@opayq.com>
Date: Wed, 11 May 2022 20:41:19 +0100
Subject: [PATCH] Add contact delete endpoint

---
 api/v1/contacts/delete.php | 28 ++++++++++++++++++++++++++++
 1 file changed, 28 insertions(+)
 create mode 100644 api/v1/contacts/delete.php

diff --git a/api/v1/contacts/delete.php b/api/v1/contacts/delete.php
new file mode 100644
index 00000000..8eeef9d5
--- /dev/null
+++ b/api/v1/contacts/delete.php
@@ -0,0 +1,28 @@
+<?php
+require('../validate_api_key.php');
+
+require('../require_post_method.php');
+
+// Parse ID
+$contact_id = intval($_POST['contact_id']);
+
+// Default
+$delete_count = FALSE;
+
+if(!empty($contact_id)){
+  $row = mysqli_fetch_assoc(mysqli_query($mysqli, "SELECT * FROM contacts WHERE contact_id = $contact_id AND contact_client_id = $client_id AND company_id = '$company_id' LIMIT 1"));
+  $contact_name = $row['contact_name'];
+
+  $delete_sql = mysqli_query($mysqli, "DELETE FROM contacts WHERE contact_id = $contact_id AND contact_client_id = $client_id AND company_id = '$company_id' LIMIT 1");
+
+  // Check delete & get affected rows
+  if($delete_sql && !empty($contact_name)){
+    $delete_count = mysqli_affected_rows($mysqli);
+
+    //Logging
+    mysqli_query($mysqli,"INSERT INTO logs SET log_type = 'Contact', log_action = 'Deleted', log_description = '$contact_name via API ($api_key_name)', log_ip = '$ip', log_client_id = $client_id, company_id = $company_id");
+  }
+}
+
+// Output
+include('../delete_output.php');
\ No newline at end of file