From fe5635f1dcbfa8396dd03376e7d2ddc5d412992a Mon Sep 17 00:00:00 2001
From: Marcus Hill <bcf8c9f2@opayq.com>
Date: Sat, 12 Feb 2022 17:37:56 +0000
Subject: [PATCH 1/4] Add contact read to api

---
 api/v1/contacts/read.php | 30 ++++++++++++++++++++++++++++++
 1 file changed, 30 insertions(+)
 create mode 100644 api/v1/contacts/read.php

diff --git a/api/v1/contacts/read.php b/api/v1/contacts/read.php
new file mode 100644
index 00000000..5b4409ea
--- /dev/null
+++ b/api/v1/contacts/read.php
@@ -0,0 +1,30 @@
+<?php
+require('../validate_api_key.php');
+
+if($_SERVER['REQUEST_METHOD'] !== "GET"){
+    header("HTTP/1.1 405 Method Not Allowed");
+    $return_arr['success'] = "False";
+    $return_arr['message'] = "Can only send GET requests to this endpoint.";
+    echo json_encode($return_arr);
+    exit();
+}
+
+// Specific contact via ID (single)
+if(isset($_GET['contact_id'])){
+    $id = intval($_GET['contact_id']);
+    $sql = mysqli_query($mysqli, "SELECT * FROM contacts WHERE contact_id = '$id' AND company_id = '$company_id'");
+}
+
+// Specific contact via email (single)
+elseif(isset($_GET['contact_email'])){
+    $email = trim($_GET['contact_email']);
+    $sql = mysqli_query($mysqli, "SELECT * FROM contacts WHERE contact_email = '$email' AND company_id = '$company_id'");
+}
+
+// All contacts
+else{
+    $sql = mysqli_query($mysqli, "SELECT * FROM contacts WHERE company_id = '$company_id' ORDER BY contact_id LIMIT $limit OFFSET $offset");
+}
+
+// Output
+include("../read_output.php");
\ No newline at end of file

From 706ee685631d3c6b3023cd2e157d32f0a207541a Mon Sep 17 00:00:00 2001
From: Marcus Hill <bcf8c9f2@opayq.com>
Date: Sat, 12 Feb 2022 17:41:48 +0000
Subject: [PATCH 2/4] Add ticket read to api

---
 api/v1/tickets/read.php | 24 ++++++++++++++++++++++++
 1 file changed, 24 insertions(+)
 create mode 100644 api/v1/tickets/read.php

diff --git a/api/v1/tickets/read.php b/api/v1/tickets/read.php
new file mode 100644
index 00000000..3470b32d
--- /dev/null
+++ b/api/v1/tickets/read.php
@@ -0,0 +1,24 @@
+<?php
+require('../validate_api_key.php');
+
+if($_SERVER['REQUEST_METHOD'] !== "GET"){
+    header("HTTP/1.1 405 Method Not Allowed");
+    $return_arr['success'] = "False";
+    $return_arr['message'] = "Can only send GET requests to this endpoint.";
+    echo json_encode($return_arr);
+    exit();
+}
+
+// Specific ticket via ID (single)
+if(isset($_GET['ticket_id'])){
+    $id = intval($_GET['ticket_id']);
+    $sql = mysqli_query($mysqli, "SELECT * FROM tickets WHERE ticket_id = '$id' AND company_id = '$company_id'");
+}
+
+// All tickets
+else{
+    $sql = mysqli_query($mysqli, "SELECT * FROM tickets WHERE company_id = '$company_id' ORDER BY ticket_id LIMIT $limit OFFSET $offset");
+}
+
+// Output
+include("../read_output.php");
\ No newline at end of file

From dcde6313af9c61de55eb1e3f0400574aa53154e6 Mon Sep 17 00:00:00 2001
From: Marcus Hill <bcf8c9f2@opayq.com>
Date: Sat, 12 Feb 2022 18:02:43 +0000
Subject: [PATCH 3/4] Add documents to global search

---
 global_search.php | 74 +++++++++++++++++++++++++++++++++++++----------
 1 file changed, 59 insertions(+), 15 deletions(-)

diff --git a/global_search.php b/global_search.php
index 9759a044..b67eec48 100644
--- a/global_search.php
+++ b/global_search.php
@@ -9,8 +9,9 @@ if(isset($_GET['query'])){
     $sql_clients = mysqli_query($mysqli,"SELECT * FROM clients LEFT JOIN locations ON clients.client_id = locations.location_client_id WHERE client_name LIKE '%$query%' AND clients.company_id = $session_company_id ORDER BY client_id DESC LIMIT 5");
     $sql_vendors = mysqli_query($mysqli,"SELECT * FROM vendors WHERE vendor_name LIKE '%$query%' AND company_id = $session_company_id ORDER BY vendor_id DESC LIMIT 5");
     $sql_products = mysqli_query($mysqli,"SELECT * FROM products WHERE product_name LIKE '%$query%' AND company_id = $session_company_id ORDER BY product_id DESC LIMIT 5");
-    $sql_logins = mysqli_query($mysqli,"SELECT * FROM logins WHERE (login_name LIKE '%$query%' OR login_username LIKE '%$query%') AND company_id = $session_company_id ORDER BY login_id DESC LIMIT 5");
+    $sql_documents = mysqli_query($mysqli, "SELECT * FROM documents LEFT JOIN clients on document_client_id = clients.client_id WHERE document_name LIKE '%$query%' AND documents.company_id = $session_company_id ORDER BY document_id DESC LIMIT 5");
     $sql_tickets = mysqli_query($mysqli, "SELECT * FROM tickets LEFT JOIN clients on tickets.ticket_client_id = clients.client_id WHERE (ticket_subject LIKE '%$query%' OR ticket_number = '$query') AND tickets.company_id = $session_company_id ORDER BY ticket_id DESC LIMIT 5");
+    $sql_logins = mysqli_query($mysqli,"SELECT * FROM logins WHERE (login_name LIKE '%$query%' OR login_username LIKE '%$query%') AND company_id = $session_company_id ORDER BY login_id DESC LIMIT 5");
 
     $q = htmlentities($_GET['query']);
     ?>
@@ -140,37 +141,36 @@ if(isset($_GET['query'])){
             </div>
         </div>
 
+        <!-- Documents -->
         <!-- Logins -->
         <div class="col-6">
             <div class="card mb-3">
                 <div class="card-header">
-                    <h6 class="mt-1"><i class="fa fa-key"></i> Logins</h6>
+                    <h6 class="mt-1"><i class="fa fa-file-alt"></i> Documents</h6>
                 </div>
                 <div class="card-body">
                     <table class="table table-striped table-borderless">
                         <thead>
                         <tr>
-                            <th>Description</th>
-                            <th>Username</th>
-                            <th>Password</th>
+                            <th>Document</th>
+                            <th>Client</th>
+                            <th>Updated</th>
                         </tr>
                         </thead>
                         <tbody>
                         <?php
 
-                        while($row = mysqli_fetch_array($sql_logins)){
-                            $login_name = $row['login_name'];
-                            $login_client_id = $row['login_client_id'];
-                            $login_username = $row['login_username'];
-                            $login_password = decryptLoginEntry($row['login_password']);
+                        while($row = mysqli_fetch_array($sql_documents)){
+                            $document_name = $row['document_name'];
+                            $document_client_id = $row['document_client_id'];
+                            $document_client = $row['client_name'];
+                            $document_updated = $row['document_updated_at'];
 
                             ?>
                             <tr>
-                                <td><a href="client.php?client_id=<?php echo $login_client_id ?>&tab=logins&q=<?php echo $q ?>"><?php echo $login_name; ?></a></td>
-                                <td><?php echo $login_username; ?></td>
-                                <td><a tabindex="0" class="btn btn-sm" data-toggle="popover" data-trigger="focus" data-placement="left" data-content="<?php echo $login_password; ?>"><i class="far fa-eye text-secondary"></i></a><button class="btn btn-sm" data-clipboard-text="<?php echo $login_password; ?>"><i class="far fa-copy text-secondary"></i></button></td>
-
-
+                                <td><a href="client.php?client_id=<?php echo $document_client_id ?>&tab=documents&q=<?php echo $q ?>"><?php echo $document_name; ?></a></td>
+                                <td><?php echo $document_client ?></td>
+                                <td><?php echo $document_updated ?></td>
                             </tr>
 
                             <?php
@@ -183,6 +183,7 @@ if(isset($_GET['query'])){
             </div>
         </div>
 
+
         <!-- Tickets -->
         <div class="col-6">
             <div class="card mb-3">
@@ -225,6 +226,49 @@ if(isset($_GET['query'])){
             </div>
         </div>
 
+        <!-- Logins -->
+        <div class="col-6">
+            <div class="card mb-3">
+                <div class="card-header">
+                    <h6 class="mt-1"><i class="fa fa-key"></i> Logins</h6>
+                </div>
+                <div class="card-body">
+                    <table class="table table-striped table-borderless">
+                        <thead>
+                        <tr>
+                            <th>Description</th>
+                            <th>Username</th>
+                            <th>Password</th>
+                        </tr>
+                        </thead>
+                        <tbody>
+                        <?php
+
+                        while($row = mysqli_fetch_array($sql_logins)){
+                            $login_name = $row['login_name'];
+                            $login_client_id = $row['login_client_id'];
+                            $login_username = $row['login_username'];
+                            $login_password = decryptLoginEntry($row['login_password']);
+
+                            ?>
+                            <tr>
+                                <td><a href="client.php?client_id=<?php echo $login_client_id ?>&tab=logins&q=<?php echo $q ?>"><?php echo $login_name; ?></a></td>
+                                <td><?php echo $login_username; ?></td>
+                                <td><a tabindex="0" class="btn btn-sm" data-toggle="popover" data-trigger="focus" data-placement="left" data-content="<?php echo $login_password; ?>"><i class="far fa-eye text-secondary"></i></a><button class="btn btn-sm" data-clipboard-text="<?php echo $login_password; ?>"><i class="far fa-copy text-secondary"></i></button></td>
+
+
+                            </tr>
+
+                            <?php
+                        }
+                        ?>
+
+                        </tbody>
+                    </table>
+                </div>
+            </div>
+        </div>
+
     </div>
 
 

From 03d00f76efa3fba5e4bb930e4740844ae926c59b Mon Sep 17 00:00:00 2001
From: Marcus Hill <bcf8c9f2@opayq.com>
Date: Sat, 12 Feb 2022 18:05:19 +0000
Subject: [PATCH 4/4] Typo

---
 global_search.php | 1 -
 1 file changed, 1 deletion(-)

diff --git a/global_search.php b/global_search.php
index b67eec48..cb628179 100644
--- a/global_search.php
+++ b/global_search.php
@@ -142,7 +142,6 @@ if(isset($_GET['query'])){
         </div>
 
         <!-- Documents -->
-        <!-- Logins -->
         <div class="col-6">
             <div class="card mb-3">
                 <div class="card-header">