AS1024
/
itflow
mirror of https://github.com/itflow-org/itflow
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

Merge pull request #568 from wrongecho/code-tidy 

Code tidy
This commit is contained in:
Johnny 2023-01-23 15:02:12 -05:00 committed by GitHub
parent 13edae48dc 4e2b8a86c3
commit 52196b7284
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
171 changed files with 1707 additions and 1723 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
SECURITY.md
View File

@ -20,7 +20,7 @@ ITFlow is in Beta.
**Please do not report security vulnerabilities through public GitHub issues.** **Please do not report security vulnerabilities through public GitHub issues.**
If you have discovered a security issue, please report it to us in as much detail as possible so we can fix it. If you have discovered a security issue, please report it to us in as much detail as possible, so we can fix it.
You should expect to receive an initial acknowledgement within 72 hours. If you do not, please get in touch discretely via GitHub issues/Forum/Discord to ensure we received your e-mail. You should expect to receive an initial acknowledgement within 72 hours. If you do not, please get in touch discretely via GitHub issues/Forum/Discord to ensure we received your e-mail.
Security contact: Security contact:

2
account_add_modal.php
View File

@ -39,7 +39,7 @@
<select class="form-control select2" name="currency_code" required> <select class="form-control select2" name="currency_code" required>
<option value="">- Currency -</option> <option value="">- Currency -</option>
<?php foreach($currencies_array as $currency_code => $currency_name) { ?> <?php foreach($currencies_array as $currency_code => $currency_name) { ?>
<option <?php if($session_company_currency == $currency_code){ echo "selected"; } ?> value="<?php echo $currency_code; ?>"><?php echo "$currency_code - $currency_name"; ?></option> <option <?php if ($session_company_currency == $currency_code) { echo "selected"; } ?> value="<?php echo $currency_code; ?>"><?php echo "$currency_code - $currency_name"; ?></option>
<?php } ?> <?php } ?>
</select> </select>
</div> </div>

10
accounts.php
View File

@ -1,6 +1,6 @@
<?php include("inc_all_settings.php"); <?php include("inc_all_settings.php");
if(!empty($_GET['sb'])){ if (!empty($_GET['sb'])) {
$sb = strip_tags(mysqli_real_escape_string($mysqli,$_GET['sb'])); $sb = strip_tags(mysqli_real_escape_string($mysqli,$_GET['sb']));
}else{ }else{
$sb = "account_name"; $sb = "account_name";
@ -27,7 +27,7 @@ $num_rows = mysqli_fetch_row(mysqli_query($mysqli,"SELECT FOUND_ROWS()"));
<div class="card-body"> <div class="card-body">
<form autocomplete="off"> <form autocomplete="off">
<div class="input-group"> <div class="input-group">
<input type="search" class="form-control col-md-4" name="q" value="<?php if(isset($q)){ echo strip_tags(htmlentities($q)); } ?>" placeholder="Search Accounts"> <input type="search" class="form-control col-md-4" name="q" value="<?php if (isset($q)) { echo strip_tags(htmlentities($q)); } ?>" placeholder="Search Accounts">
<div class="input-group-append"> <div class="input-group-append">
<button class="btn btn-primary"><i class="fa fa-search"></i></button> <button class="btn btn-primary"><i class="fa fa-search"></i></button>
</div> </div>
@ -36,7 +36,7 @@ $num_rows = mysqli_fetch_row(mysqli_query($mysqli,"SELECT FOUND_ROWS()"));
<hr> <hr>
<div class="table-responsive"> <div class="table-responsive">
<table class="table table-striped table-borderless table-hover"> <table class="table table-striped table-borderless table-hover">
<thead class="text-dark <?php if($num_rows[0] == 0){ echo "d-none"; } ?>"> <thead class="text-dark <?php if ($num_rows[0] == 0) { echo "d-none"; } ?>">
<tr> <tr>
<th><a class="text-dark" href="?<?php echo $url_query_strings_sb; ?>&sb=account_name&o=<?php echo $disp; ?>">Name</a></th> <th><a class="text-dark" href="?<?php echo $url_query_strings_sb; ?>&sb=account_name&o=<?php echo $disp; ?>">Name</a></th>
<th><a class="text-dark" href="?<?php echo $url_query_strings_sb; ?>&sb=account_currency_code&o=<?php echo $disp; ?>">Currency</a></th> <th><a class="text-dark" href="?<?php echo $url_query_strings_sb; ?>&sb=account_currency_code&o=<?php echo $disp; ?>">Currency</a></th>
@ -47,7 +47,7 @@ $num_rows = mysqli_fetch_row(mysqli_query($mysqli,"SELECT FOUND_ROWS()"));
<tbody> <tbody>
<?php <?php
while($row = mysqli_fetch_array($sql)){ while ($row = mysqli_fetch_array($sql)) {
$account_id = $row['account_id']; $account_id = $row['account_id'];
$account_name = htmlentities($row['account_name']); $account_name = htmlentities($row['account_name']);
$opening_balance = $row['opening_balance']; $opening_balance = $row['opening_balance'];
@ -80,7 +80,7 @@ $num_rows = mysqli_fetch_row(mysqli_query($mysqli,"SELECT FOUND_ROWS()"));
</button> </button>
<div class="dropdown-menu"> <div class="dropdown-menu">
<a class="dropdown-item" href="#" data-toggle="modal" data-target="#editAccountModal<?php echo $account_id; ?>">Edit</a> <a class="dropdown-item" href="#" data-toggle="modal" data-target="#editAccountModal<?php echo $account_id; ?>">Edit</a>
<?php if($balance == 0){ //Cannot Archive an Account until it reaches 0 Balance ?> <?php if ($balance == 0) { //Cannot Archive an Account until it reaches 0 Balance ?>
<div class="dropdown-divider"></div> <div class="dropdown-divider"></div>
<a class="dropdown-item" href="post.php?archive_account=<?php echo $account_id; ?>">Archive</a> <a class="dropdown-item" href="post.php?archive_account=<?php echo $account_id; ?>">Archive</a>
<?php } ?> <?php } ?>

2
api/v1/assets/delete.php
View File

@ -25,4 +25,4 @@ if (!empty($asset_id)) {
} }
// Output // Output
require_once('../delete_output.php'); require_once('../delete_output.php');

4
api/v1/assets/read.php
View File

@ -11,7 +11,7 @@ if (isset($_GET['asset_id'])) {
// Asset query via type // Asset query via type
elseif (isset($_GET['asset_type'])) { elseif (isset($_GET['asset_type'])) {
$type = mysqli_real_escape_string($mysqli,ucfirst($_GET['asset_type'])); $type = mysqli_real_escape_string($mysqli, ucfirst($_GET['asset_type']));
$sql = mysqli_query($mysqli, "SELECT * FROM assets WHERE asset_type = '$type' AND asset_client_id LIKE '$client_id' AND company_id = '$company_id' ORDER BY asset_id LIMIT $limit OFFSET $offset"); $sql = mysqli_query($mysqli, "SELECT * FROM assets WHERE asset_type = '$type' AND asset_client_id LIKE '$client_id' AND company_id = '$company_id' ORDER BY asset_id LIMIT $limit OFFSET $offset");
} }
@ -39,4 +39,4 @@ else {
} }
// Output // Output
require_once("../read_output.php"); require_once("../read_output.php");

2
api_key_add_modal.php
View File

@ -63,7 +63,7 @@ $key = bin2hex(random_bytes(78));
<?php <?php
$sql = mysqli_query($mysqli,"SELECT * FROM clients WHERE company_id = $session_company_id ORDER BY client_name ASC"); $sql = mysqli_query($mysqli,"SELECT * FROM clients WHERE company_id = $session_company_id ORDER BY client_name ASC");
while($row = mysqli_fetch_array($sql)){ while ($row = mysqli_fetch_array($sql)) {
$client_id = $row['client_id']; $client_id = $row['client_id'];
$client_name = htmlentities($row['client_name']); $client_name = htmlentities($row['client_name']);
?> ?>

10
calendar_event_add_modal.php
View File

@ -49,12 +49,12 @@
<?php <?php
$sql = mysqli_query($mysqli,"SELECT * FROM calendars WHERE company_id = $session_company_id ORDER BY calendar_name ASC"); $sql = mysqli_query($mysqli,"SELECT * FROM calendars WHERE company_id = $session_company_id ORDER BY calendar_name ASC");
while($row = mysqli_fetch_array($sql)){ while ($row = mysqli_fetch_array($sql)) {
$calendar_id = $row['calendar_id']; $calendar_id = $row['calendar_id'];
$calendar_name = htmlentities($row['calendar_name']); $calendar_name = htmlentities($row['calendar_name']);
$calendar_color = htmlentities($row['calendar_color']); $calendar_color = htmlentities($row['calendar_color']);
?> ?>
<option <?php if($config_default_calendar == $calendar_id){ echo "selected"; } ?> data-content="<i class='fa fa-circle mr-2' style='color:<?php echo $calendar_color; ?>;'></i> <?php echo $calendar_name; ?>" value="<?php echo $calendar_id; ?>"><?php echo $calendar_name; ?></option> <option <?php if ($config_default_calendar == $calendar_id) { echo "selected"; } ?> data-content="<i class='fa fa-circle mr-2' style='color:<?php echo $calendar_color; ?>;'></i> <?php echo $calendar_name; ?>" value="<?php echo $calendar_id; ?>"><?php echo $calendar_name; ?></option>
<?php <?php
} }
@ -105,7 +105,7 @@
<div class="tab-pane fade" id="pills-attendees"> <div class="tab-pane fade" id="pills-attendees">
<?php if(isset($client_id)){ ?> <?php if (isset($client_id)) { ?>
<input type="hidden" name="client" value="<?php echo $client_id; ?>"> <input type="hidden" name="client" value="<?php echo $client_id; ?>">
@ -122,7 +122,7 @@
<?php <?php
$sql = mysqli_query($mysqli,"SELECT * FROM clients LEFT JOIN contacts ON primary_contact = contact_id WHERE clients.company_id = $session_company_id ORDER BY client_name ASC"); $sql = mysqli_query($mysqli,"SELECT * FROM clients LEFT JOIN contacts ON primary_contact = contact_id WHERE clients.company_id = $session_company_id ORDER BY client_name ASC");
while($row = mysqli_fetch_array($sql)){ while ($row = mysqli_fetch_array($sql)) {
$client_id = $row['client_id']; $client_id = $row['client_id'];
$client_name = htmlentities($row['client_name']); $client_name = htmlentities($row['client_name']);
$contact_email = htmlentities($row['contact_email']); $contact_email = htmlentities($row['contact_email']);
@ -138,7 +138,7 @@
<?php } ?> <?php } ?>
<?php if(!empty($config_smtp_host)){ ?> <?php if (!empty($config_smtp_host)) { ?>
<div class="custom-control custom-checkbox"> <div class="custom-control custom-checkbox">
<input type="checkbox" class="custom-control-input" id="customControlAutosizing" name="email_event" value="1" > <input type="checkbox" class="custom-control-input" id="customControlAutosizing" name="email_event" value="1" >
<label class="custom-control-label" for="customControlAutosizing">Email Event</label> <label class="custom-control-label" for="customControlAutosizing">Email Event</label>

22
calendar_event_edit_modal.php
View File

@ -51,12 +51,12 @@
<?php <?php
$sql_calendars_select = mysqli_query($mysqli,"SELECT * FROM calendars WHERE company_id = $session_company_id ORDER BY calendar_name ASC"); $sql_calendars_select = mysqli_query($mysqli,"SELECT * FROM calendars WHERE company_id = $session_company_id ORDER BY calendar_name ASC");
while($row = mysqli_fetch_array($sql_calendars_select)){ while ($row = mysqli_fetch_array($sql_calendars_select)) {
$calendar_id_select = $row['calendar_id']; $calendar_id_select = $row['calendar_id'];
$calendar_name_select = htmlentities($row['calendar_name']); $calendar_name_select = htmlentities($row['calendar_name']);
$calendar_color_select = htmlentities($row['calendar_color']); $calendar_color_select = htmlentities($row['calendar_color']);
?> ?>
<option data-content="<i class='fa fa-circle mr-2' style='color:<?php echo $calendar_color_select; ?>;'></i> <?php echo $calendar_name_select; ?>"<?php if($calendar_id == $calendar_id_select){ echo "selected"; } ?> value="<?php echo $calendar_id_select; ?>"><?php echo $calendar_name_select; ?></option> <option data-content="<i class='fa fa-circle mr-2' style='color:<?php echo $calendar_color_select; ?>;'></i> <?php echo $calendar_name_select; ?>"<?php if ($calendar_id == $calendar_id_select) { echo "selected"; } ?> value="<?php echo $calendar_id_select; ?>"><?php echo $calendar_name_select; ?></option>
<?php <?php
} }
@ -91,11 +91,11 @@
<span class="input-group-text"><i class="fa fa-fw fa-recycle"></i></span> <span class="input-group-text"><i class="fa fa-fw fa-recycle"></i></span>
</div> </div>
<select class="form-control select2" name="repeat"> <select class="form-control select2" name="repeat">
<option <?php if(empty($event_repeat)){ echo "selected"; } ?> value="">Never</option> <option <?php if (empty($event_repeat)) { echo "selected"; } ?> value="">Never</option>
<option <?php if($event_repeat == "Day"){ echo "selected"; } ?>>Day</option> <option <?php if ($event_repeat == "Day") { echo "selected"; } ?>>Day</option>
<option <?php if($event_repeat == "Week"){ echo "selected"; } ?>>Week</option> <option <?php if ($event_repeat == "Week") { echo "selected"; } ?>>Week</option>
<option <?php if($event_repeat == "Month"){ echo "selected"; } ?>>Month</option> <option <?php if ($event_repeat == "Month") { echo "selected"; } ?>>Month</option>
<option <?php if($event_repeat == "Year"){ echo "selected"; } ?>>Year</option> <option <?php if ($event_repeat == "Year") { echo "selected"; } ?>>Year</option>
</select> </select>
</div> </div>
</div> </div>
@ -104,7 +104,7 @@
<div class="tab-pane fade" id="pills-attendees<?php echo $event_id; ?>"> <div class="tab-pane fade" id="pills-attendees<?php echo $event_id; ?>">
<?php if(isset($_GET['client_id'])){ ?> <?php if (isset($_GET['client_id'])) { ?>
<input type="hidden" name="client" value="<?php echo $client_id; ?>"> <input type="hidden" name="client" value="<?php echo $client_id; ?>">
@ -121,12 +121,12 @@
<?php <?php
$sql_clients = mysqli_query($mysqli,"SELECT * FROM clients LEFT JOIN contacts ON primary_contact = contact_id WHERE clients.company_id = $session_company_id ORDER BY client_name ASC"); $sql_clients = mysqli_query($mysqli,"SELECT * FROM clients LEFT JOIN contacts ON primary_contact = contact_id WHERE clients.company_id = $session_company_id ORDER BY client_name ASC");
while($row = mysqli_fetch_array($sql_clients)){ while ($row = mysqli_fetch_array($sql_clients)) {
$client_id_select = $row['client_id']; $client_id_select = $row['client_id'];
$client_name_select = htmlentities($row['client_name']); $client_name_select = htmlentities($row['client_name']);
$contact_email_select = htmlentities($row['contact_email']); $contact_email_select = htmlentities($row['contact_email']);
?> ?>
<option <?php if($client_id == $client_id_select){ echo "selected"; } ?> value="<?php echo $client_id_select; ?>"><?php echo $client_name_select; ?></option> <option <?php if ($client_id == $client_id_select) { echo "selected"; } ?> value="<?php echo $client_id_select; ?>"><?php echo $client_name_select; ?></option>
<?php <?php
} }
@ -137,7 +137,7 @@
<?php } ?> <?php } ?>
<?php if(!empty($config_smtp_host)){ ?> <?php if (!empty($config_smtp_host)) { ?>
<div class="custom-control custom-checkbox"> <div class="custom-control custom-checkbox">
<input type="checkbox" class="custom-control-input" id="customControlAutosizing<?php echo $event_id; ?>" name="email_event" value="1" > <input type="checkbox" class="custom-control-input" id="customControlAutosizing<?php echo $event_id; ?>" name="email_event" value="1" >
<label class="custom-control-label" for="customControlAutosizing<?php echo $event_id; ?>">Email Event</label> <label class="custom-control-label" for="customControlAutosizing<?php echo $event_id; ?>">Email Event</label>

16
calendar_events.php
View File

@ -4,7 +4,7 @@
<?php <?php
if(isset($_GET['calendar_id'])){ if (isset($_GET['calendar_id'])) {
$calendar_selected_id = intval($_GET['calendar_id']); $calendar_selected_id = intval($_GET['calendar_id']);
} }
@ -23,7 +23,7 @@ if(isset($_GET['calendar_id'])){
<?php <?php
//loop through IDs and create a modal for each //loop through IDs and create a modal for each
$sql = mysqli_query($mysqli,"SELECT * FROM events LEFT JOIN calendars ON event_calendar_id = calendar_id WHERE calendars.company_id = $session_company_id"); $sql = mysqli_query($mysqli,"SELECT * FROM events LEFT JOIN calendars ON event_calendar_id = calendar_id WHERE calendars.company_id = $session_company_id");
while($row = mysqli_fetch_array($sql)){ while ($row = mysqli_fetch_array($sql)) {
$event_id = $row['event_id']; $event_id = $row['event_id'];
$event_title = htmlentities($row['event_title']); $event_title = htmlentities($row['event_title']);
$event_description = htmlentities($row['event_description']); $event_description = htmlentities($row['event_description']);
@ -75,7 +75,7 @@ while($row = mysqli_fetch_array($sql)){
events: [ events: [
<?php <?php
$sql = mysqli_query($mysqli,"SELECT * FROM events LEFT JOIN calendars ON event_calendar_id = calendar_id WHERE calendars.company_id = $session_company_id"); $sql = mysqli_query($mysqli,"SELECT * FROM events LEFT JOIN calendars ON event_calendar_id = calendar_id WHERE calendars.company_id = $session_company_id");
while($row = mysqli_fetch_array($sql)){ while ($row = mysqli_fetch_array($sql)) {
$event_id = json_encode($row['event_id']); $event_id = json_encode($row['event_id']);
$event_title = json_encode($row['event_title']); $event_title = json_encode($row['event_title']);
$event_start = json_encode($row['event_start']); $event_start = json_encode($row['event_start']);
@ -91,7 +91,7 @@ while($row = mysqli_fetch_array($sql)){
<?php <?php
//Invoices Created //Invoices Created
$sql = mysqli_query($mysqli,"SELECT * FROM clients LEFT JOIN invoices ON client_id = invoice_client_id WHERE clients.company_id = $session_company_id"); $sql = mysqli_query($mysqli,"SELECT * FROM clients LEFT JOIN invoices ON client_id = invoice_client_id WHERE clients.company_id = $session_company_id");
while($row = mysqli_fetch_array($sql)){ while ($row = mysqli_fetch_array($sql)) {
$event_id = json_encode($row['invoice_id']); $event_id = json_encode($row['invoice_id']);
$event_title = json_encode($row['invoice_prefix'] . $row['invoice_number'] . " " . $row['invoice_scope']); $event_title = json_encode($row['invoice_prefix'] . $row['invoice_number'] . " " . $row['invoice_scope']);
$event_start = json_encode($row['invoice_date']); $event_start = json_encode($row['invoice_date']);
@ -103,7 +103,7 @@ while($row = mysqli_fetch_array($sql)){
<?php <?php
//Quotes Created //Quotes Created
$sql = mysqli_query($mysqli,"SELECT * FROM clients LEFT JOIN quotes ON client_id = quote_client_id WHERE clients.company_id = $session_company_id"); $sql = mysqli_query($mysqli,"SELECT * FROM clients LEFT JOIN quotes ON client_id = quote_client_id WHERE clients.company_id = $session_company_id");
while($row = mysqli_fetch_array($sql)){ while ($row = mysqli_fetch_array($sql)) {
$event_id = json_encode($row['quote_id']); $event_id = json_encode($row['quote_id']);
$event_title = json_encode($row['quote_prefix'] . $row['quote_number'] . " " . $row['quote_scope']); $event_title = json_encode($row['quote_prefix'] . $row['quote_number'] . " " . $row['quote_scope']);
$event_start = json_encode($row['quote_date']); $event_start = json_encode($row['quote_date']);
@ -115,7 +115,7 @@ while($row = mysqli_fetch_array($sql)){
<?php <?php
//Tickets Created //Tickets Created
$sql = mysqli_query($mysqli,"SELECT * FROM clients LEFT JOIN tickets ON client_id = ticket_client_id WHERE clients.company_id = $session_company_id"); $sql = mysqli_query($mysqli,"SELECT * FROM clients LEFT JOIN tickets ON client_id = ticket_client_id WHERE clients.company_id = $session_company_id");
while($row = mysqli_fetch_array($sql)){ while ($row = mysqli_fetch_array($sql)) {
$event_id = json_encode($row['ticket_id']); $event_id = json_encode($row['ticket_id']);
$event_title = json_encode($row['ticket_prefix'] . $row['ticket_number'] . " " . $row['ticket_subject']); $event_title = json_encode($row['ticket_prefix'] . $row['ticket_number'] . " " . $row['ticket_subject']);
$event_start = json_encode($row['ticket_created_at']); $event_start = json_encode($row['ticket_created_at']);
@ -129,7 +129,7 @@ while($row = mysqli_fetch_array($sql)){
<?php <?php
//Vendors Added Created //Vendors Added Created
$sql = mysqli_query($mysqli,"SELECT * FROM clients LEFT JOIN vendors ON client_id = vendor_client_id WHERE vendor_template = 0 AND clients.company_id = $session_company_id"); $sql = mysqli_query($mysqli,"SELECT * FROM clients LEFT JOIN vendors ON client_id = vendor_client_id WHERE vendor_template = 0 AND clients.company_id = $session_company_id");
while($row = mysqli_fetch_array($sql)){ while ($row = mysqli_fetch_array($sql)) {
$event_id = json_encode($row['vendor_id']); $event_id = json_encode($row['vendor_id']);
$event_title = json_encode($row['vendor_name']); $event_title = json_encode($row['vendor_name']);
$event_start = json_encode($row['vendor_created_at']); $event_start = json_encode($row['vendor_created_at']);
@ -141,7 +141,7 @@ while($row = mysqli_fetch_array($sql)){
<?php <?php
//Clients Added //Clients Added
$sql = mysqli_query($mysqli,"SELECT * FROM clients WHERE clients.company_id = $session_company_id"); $sql = mysqli_query($mysqli,"SELECT * FROM clients WHERE clients.company_id = $session_company_id");
while($row = mysqli_fetch_array($sql)){ while ($row = mysqli_fetch_array($sql)) {
$event_id = json_encode($row['client_id']); $event_id = json_encode($row['client_id']);
$event_title = json_encode($row['client_name']); $event_title = json_encode($row['client_name']);
$event_start = json_encode($row['client_created_at']); $event_start = json_encode($row['client_created_at']);

20
categories.php
View File

@ -1,12 +1,12 @@
<?php include("inc_all_settings.php"); <?php include("inc_all_settings.php");
if(isset($_GET['category'])){ if (isset($_GET['category'])) {
$category = strip_tags(mysqli_real_escape_string($mysqli,$_GET['category'])); $category = strip_tags(mysqli_real_escape_string($mysqli,$_GET['category']));
}else{ }else{
$category = "Expense"; $category = "Expense";
} }
if(!empty($_GET['sb'])){ if (!empty($_GET['sb'])) {
$sb = strip_tags(mysqli_real_escape_string($mysqli,$_GET['sb'])); $sb = strip_tags(mysqli_real_escape_string($mysqli,$_GET['sb']));
}else{ }else{
$sb = "category_name"; $sb = "category_name";
@ -32,7 +32,7 @@ $sql_colors_used = mysqli_query($mysqli,"SELECT category_color FROM categories
AND company_id = $session_company_id" AND company_id = $session_company_id"
); );
while($color_used_row = mysqli_fetch_array($sql_colors_used)){ while ($color_used_row = mysqli_fetch_array($sql_colors_used)) {
$colors_used_array[] = $color_used_row['category_color']; $colors_used_array[] = $color_used_row['category_color'];
} }
$colors_diff = array_diff($colors_array,$colors_used_array); $colors_diff = array_diff($colors_array,$colors_used_array);
@ -53,7 +53,7 @@ $colors_diff = array_diff($colors_array,$colors_used_array);
<div class="row"> <div class="row">
<div class="col-sm-4 mb-2"> <div class="col-sm-4 mb-2">
<div class="input-group"> <div class="input-group">
<input type="search" class="form-control" name="q" value="<?php if(isset($q)){ echo strip_tags(htmlentities($q)); } ?>" placeholder="Search Categories"> <input type="search" class="form-control" name="q" value="<?php if (isset($q)) { echo strip_tags(htmlentities($q)); } ?>" placeholder="Search Categories">
<div class="input-group-append"> <div class="input-group-append">
<button class="btn btn-primary"><i class="fa fa-search"></i></button> <button class="btn btn-primary"><i class="fa fa-search"></i></button>
</div> </div>
@ -61,10 +61,10 @@ $colors_diff = array_diff($colors_array,$colors_used_array);
</div> </div>
<div class="col-sm-8"> <div class="col-sm-8">
<div class="btn-group float-right"> <div class="btn-group float-right">
<a href="?category=Expense" class="btn <?php if($category == 'Expense'){ echo 'btn-primary'; }else{ echo 'btn-default'; } ?>">Expense</a> <a href="?category=Expense" class="btn <?php if ($category == 'Expense') { echo 'btn-primary'; }else{ echo 'btn-default'; } ?>">Expense</a>
<a href="?category=Income" class="btn <?php if($category == 'Income'){ echo 'btn-primary'; }else{ echo 'btn-default'; } ?>">Income</a> <a href="?category=Income" class="btn <?php if ($category == 'Income') { echo 'btn-primary'; }else{ echo 'btn-default'; } ?>">Income</a>
<a href="?category=Referral" class="btn <?php if($category == 'Referral'){ echo 'btn-primary'; }else{ echo 'btn-default'; } ?>">Referral</a> <a href="?category=Referral" class="btn <?php if ($category == 'Referral') { echo 'btn-primary'; }else{ echo 'btn-default'; } ?>">Referral</a>
<a href="?category=Payment Method" class="btn <?php if($category == 'Payment Method'){ echo 'btn-primary'; }else{ echo 'btn-default'; } ?>">Payment Method</a> <a href="?category=Payment Method" class="btn <?php if ($category == 'Payment Method') { echo 'btn-primary'; }else{ echo 'btn-default'; } ?>">Payment Method</a>
</div> </div>
</div> </div>
</div> </div>
@ -72,7 +72,7 @@ $colors_diff = array_diff($colors_array,$colors_used_array);
<hr> <hr>
<div class="table-responsive"> <div class="table-responsive">
<table class="table table-striped table-borderless table-hover"> <table class="table table-striped table-borderless table-hover">
<thead class="text-dark <?php if($num_rows[0] == 0){ echo "d-none"; } ?>"> <thead class="text-dark <?php if ($num_rows[0] == 0) { echo "d-none"; } ?>">
<tr> <tr>
<th><a class="text-dark" href="?<?php echo $url_query_strings_sb; ?>&sb=category_name&o=<?php echo $disp; ?>">Name</a></th> <th><a class="text-dark" href="?<?php echo $url_query_strings_sb; ?>&sb=category_name&o=<?php echo $disp; ?>">Name</a></th>
<th>Color</th> <th>Color</th>
@ -82,7 +82,7 @@ $colors_diff = array_diff($colors_array,$colors_used_array);
<tbody> <tbody>
<?php <?php
while($row = mysqli_fetch_array($sql)){ while ($row = mysqli_fetch_array($sql)) {
$category_id = $row['category_id']; $category_id = $row['category_id'];
$category_name = htmlentities($row['category_name']); $category_name = htmlentities($row['category_name']);
$category_color = htmlentities($row['category_color']); $category_color = htmlentities($row['category_color']);

25
check_login.php
View File

@ -1,9 +1,9 @@
<?php <?php
if(!isset($_SESSION)){ if (!isset($_SESSION)) {
// HTTP Only cookies // HTTP Only cookies
ini_set("session.cookie_httponly", True); ini_set("session.cookie_httponly", True);
if($config_https_only){ if ($config_https_only) {
// Tell client to only send cookie(s) over HTTPS // Tell client to only send cookie(s) over HTTPS
ini_set("session.cookie_secure", True); ini_set("session.cookie_secure", True);
} }
@ -11,14 +11,15 @@ if(!isset($_SESSION)){
} }
//Check to see if setup is enabled //Check to see if setup is enabled
if(!isset($config_enable_setup) || $config_enable_setup == 1){ if (!isset($config_enable_setup) || $config_enable_setup == 1) {
header("Location: setup.php"); header("Location: setup.php");
exit; exit;
} }
if(!isset($_SESSION['logged']) || !$_SESSION['logged']){ // Check user is logged in with a valid session
if (!isset($_SESSION['logged']) || !$_SESSION['logged']) {
header("Location: login.php"); header("Location: login.php");
die; exit;
} }
// SESSION FINGERPRINT // SESSION FINGERPRINT
@ -38,9 +39,9 @@ $session_avatar = $row['user_avatar'];
$session_token = $row['user_token']; $session_token = $row['user_token'];
$session_company_id = $row['user_default_company']; $session_company_id = $row['user_default_company'];
$session_user_role = $row['user_role']; $session_user_role = $row['user_role'];
if($session_user_role == 3){ if ($session_user_role == 3) {
$session_user_role_display = "Administrator"; $session_user_role_display = "Administrator";
}elseif($session_user_role == 2){ }elseif ($session_user_role == 2) {
$session_user_role_display = "Technician"; $session_user_role_display = "Technician";
}else{ }else{
$session_user_role_display = "Accountant"; $session_user_role_display = "Accountant";
@ -49,13 +50,13 @@ if($session_user_role == 3){
//LOAD USER COMPANY ACCESS PERMISSIONS //LOAD USER COMPANY ACCESS PERMISSIONS
$session_user_company_access_sql = mysqli_query($mysqli,"SELECT company_id FROM user_companies WHERE user_id = $session_user_id"); $session_user_company_access_sql = mysqli_query($mysqli,"SELECT company_id FROM user_companies WHERE user_id = $session_user_id");
$session_user_company_access_array = array(); $session_user_company_access_array = array();
while($row = mysqli_fetch_array($session_user_company_access_sql)){ while ($row = mysqli_fetch_array($session_user_company_access_sql)) {
$session_user_company_access_array[] = $row['company_id']; $session_user_company_access_array[] = $row['company_id'];
} }
$session_user_company_access = implode(',',$session_user_company_access_array); $session_user_company_access = implode(',',$session_user_company_access_array);
//Check to see if user has rights to company Prevents User from access a company he is not allowed to have access to. //Check to see if user has rights to company Prevents User from access a company he is not allowed to have access to.
if(!in_array($session_company_id,$session_user_company_access_array)){ if (!in_array($session_company_id,$session_user_company_access_array)) {
session_start(); session_start();
session_destroy(); session_destroy();
header('Location: login.php'); header('Location: login.php');
@ -71,12 +72,12 @@ $session_company_currency = $row['company_currency'];
include("get_settings.php"); include("get_settings.php");
//Detects if using an apple device and uses apple maps instead of google //Detects if using an Apple device and uses Apple Maps instead of google
$iPod = stripos($_SERVER['HTTP_USER_AGENT'],"iPod"); $iPod = stripos($_SERVER['HTTP_USER_AGENT'],"iPod");
$iPhone = stripos($_SERVER['HTTP_USER_AGENT'],"iPhone"); $iPhone = stripos($_SERVER['HTTP_USER_AGENT'],"iPhone");
$iPad = stripos($_SERVER['HTTP_USER_AGENT'],"iPad"); $iPad = stripos($_SERVER['HTTP_USER_AGENT'],"iPad");
if($iPod || $iPhone || $iPad){ if ($iPod || $iPhone || $iPad) {
$session_map_source = "apple"; $session_map_source = "apple";
}else{ }else{
$session_map_source = "google"; $session_map_source = "google";
@ -89,4 +90,4 @@ $num_notifications = $row['num'];
//Set Currency Format //Set Currency Format
$currency_format = numfmt_create($session_company_locale, NumberFormatter::CURRENCY); $currency_format = numfmt_create($session_company_locale, NumberFormatter::CURRENCY);
?>

16
client_add_modal.php
View File

@ -65,7 +65,7 @@
<?php <?php
$referral_sql = mysqli_query($mysqli,"SELECT * FROM categories WHERE category_type = 'Referral' AND category_archived_at IS NULL AND company_id = $session_company_id ORDER BY category_name ASC"); $referral_sql = mysqli_query($mysqli,"SELECT * FROM categories WHERE category_type = 'Referral' AND category_archived_at IS NULL AND company_id = $session_company_id ORDER BY category_name ASC");
while($row = mysqli_fetch_array($referral_sql)){ while ($row = mysqli_fetch_array($referral_sql)) {
$referral = htmlentities($row['category_name']); $referral = htmlentities($row['category_name']);
?> ?>
<option><?php echo $referral; ?></option> <option><?php echo $referral; ?></option>
@ -155,7 +155,7 @@
<select class="form-control select2" name="country"> <select class="form-control select2" name="country">
<option value="">- Country -</option> <option value="">- Country -</option>
<?php foreach($countries_array as $country_name) { ?> <?php foreach($countries_array as $country_name) { ?>
<option <?php if($session_company_country == $country_name){ echo "selected"; } ?> ><?php echo $country_name; ?></option> <option <?php if ($session_company_country == $country_name) { echo "selected"; } ?> ><?php echo $country_name; ?></option>
<?php } ?> <?php } ?>
</select> </select>
</div> </div>
@ -227,7 +227,7 @@
<div class="tab-pane fade" id="pills-additional"> <div class="tab-pane fade" id="pills-additional">
<?php if($config_module_enable_accounting){ ?> <?php if ($config_module_enable_accounting) { ?>
<div class="form-group"> <div class="form-group">
<label>Currency <strong class="text-danger">*</strong></label> <label>Currency <strong class="text-danger">*</strong></label>
<div class="input-group"> <div class="input-group">
@ -237,7 +237,7 @@
<select class="form-control select2" name="currency_code" required> <select class="form-control select2" name="currency_code" required>
<option value="">- Currency -</option> <option value="">- Currency -</option>
<?php foreach($currencies_array as $currency_code => $currency_name) { ?> <?php foreach($currencies_array as $currency_code => $currency_name) { ?>
<option <?php if($session_company_currency == $currency_code){ echo "selected"; } ?> value="<?php echo $currency_code; ?>"><?php echo "$currency_code - $currency_name"; ?></option> <option <?php if ($session_company_currency == $currency_code) { echo "selected"; } ?> value="<?php echo $currency_code; ?>"><?php echo "$currency_code - $currency_name"; ?></option>
<?php } ?> <?php } ?>
</select> </select>
</div> </div>
@ -251,7 +251,7 @@
</div> </div>
<select class="form-control select2" name="net_terms"> <select class="form-control select2" name="net_terms">
<?php foreach($net_terms_array as $net_term_value => $net_term_name) { ?> <?php foreach($net_terms_array as $net_term_value => $net_term_name) { ?>
<option <?php if($config_default_net_terms == $net_term_value){ echo "selected"; } ?> value="<?php echo $net_term_value; ?>"><?php echo $net_term_name; ?></option> <option <?php if ($config_default_net_terms == $net_term_value) { echo "selected"; } ?> value="<?php echo $net_term_value; ?>"><?php echo $net_term_name; ?></option>
<?php } ?> <?php } ?>
</select> </select>
</div> </div>
@ -277,7 +277,7 @@
<?php <?php
$sql_tags_select = mysqli_query($mysqli,"SELECT * FROM tags WHERE tag_type = 1 AND company_id = $session_company_id ORDER BY tag_name ASC"); $sql_tags_select = mysqli_query($mysqli,"SELECT * FROM tags WHERE tag_type = 1 AND company_id = $session_company_id ORDER BY tag_name ASC");
while($row = mysqli_fetch_array($sql_tags_select)){ while ($row = mysqli_fetch_array($sql_tags_select)) {
$tag_id_select = $row['tag_id']; $tag_id_select = $row['tag_id'];
$tag_name_select = htmlentities($row['tag_name']); $tag_name_select = htmlentities($row['tag_name']);
$tag_color_select = htmlentities($row['tag_color']); $tag_color_select = htmlentities($row['tag_color']);
@ -312,9 +312,9 @@
<script> <script>
// Checks/prompts that the primary contact field (required) is populated // Checks/prompts that the primary contact field (required) is populated
function promptPrimaryContact(){ function promptPrimaryContact() {
let primaryContactField = document.getElementById("primaryContact").value; let primaryContactField = document.getElementById("primaryContact").value;
if (primaryContactField == null || primaryContactField === ""){ if (primaryContactField == null || primaryContactField === "") {
document.getElementById("contactNavPill").click(); document.getElementById("contactNavPill").click();
} }
} }

18
client_asset_add_modal.php
View File

@ -2,7 +2,7 @@
<div class="modal-dialog"> <div class="modal-dialog">
<div class="modal-content bg-dark"> <div class="modal-content bg-dark">
<div class="modal-header"> <div class="modal-header">
<h5 class="modal-title"><i class="fa fa-fw fa-desktop"></i> New <?php if(!empty($_GET['type'])){ echo ucwords(strip_tags($_GET['type'])); }else{ echo "Asset"; } ?></h5> <h5 class="modal-title"><i class="fa fa-fw fa-desktop"></i> New <?php if (!empty($_GET['type'])) { echo ucwords(strip_tags($_GET['type'])); }else{ echo "Asset"; } ?></h5>
<button type="button" class="close text-white" data-dismiss="modal"> <button type="button" class="close text-white" data-dismiss="modal">
<span>&times;</span> <span>&times;</span>
</button> </button>
@ -64,7 +64,7 @@
</div> </div>
<?php //Do not display Make Model or Serial if Virtual is selected <?php //Do not display Make Model or Serial if Virtual is selected
if($_GET['type'] !== 'virtual'){ ?> if ($_GET['type'] !== 'virtual') { ?>
<div class="form-group"> <div class="form-group">
<label>Make </label> <label>Make </label>
<div class="input-group"> <div class="input-group">
@ -96,7 +96,7 @@
</div> </div>
<?php } ?> <?php } ?>
<?php if($_GET['type'] !== 'network' && $_GET['type'] !== 'other'){ ?> <?php if ($_GET['type'] !== 'network' && $_GET['type'] !== 'other') { ?>
<div class="form-group"> <div class="form-group">
<label>Operating System</label> <label>Operating System</label>
<div class="input-group"> <div class="input-group">
@ -123,7 +123,7 @@
<?php <?php
$sql = mysqli_query($mysqli,"SELECT * FROM locations WHERE location_archived_at IS NULL AND location_client_id = $client_id ORDER BY location_name ASC"); $sql = mysqli_query($mysqli,"SELECT * FROM locations WHERE location_archived_at IS NULL AND location_client_id = $client_id ORDER BY location_name ASC");
while($row = mysqli_fetch_array($sql)){ while ($row = mysqli_fetch_array($sql)) {
$location_id = $row['location_id']; $location_id = $row['location_id'];
$location_name = htmlentities($row['location_name']); $location_name = htmlentities($row['location_name']);
?> ?>
@ -136,7 +136,7 @@
</div> </div>
</div> </div>
<?php if($_GET['type'] !== 'network' && $_GET['type'] !== 'servers' && $_GET['type'] !== 'other'){ ?> <?php if ($_GET['type'] !== 'network' && $_GET['type'] !== 'servers' && $_GET['type'] !== 'other') { ?>
<div class="form-group"> <div class="form-group">
<label>Assigned To</label> <label>Assigned To</label>
<div class="input-group"> <div class="input-group">
@ -148,7 +148,7 @@
<?php <?php
$sql = mysqli_query($mysqli,"SELECT * FROM contacts WHERE contact_archived_at IS NULL AND contact_client_id = $client_id ORDER BY contact_name ASC"); $sql = mysqli_query($mysqli,"SELECT * FROM contacts WHERE contact_archived_at IS NULL AND contact_client_id = $client_id ORDER BY contact_name ASC");
while($row = mysqli_fetch_array($sql)){ while ($row = mysqli_fetch_array($sql)) {
$contact_id = $row['contact_id']; $contact_id = $row['contact_id'];
$contact_name = htmlentities($row['contact_name']); $contact_name = htmlentities($row['contact_name']);
?> ?>
@ -188,7 +188,7 @@
<?php <?php
$sql = mysqli_query($mysqli,"SELECT * FROM networks WHERE network_archived_at IS NULL AND network_client_id = $client_id ORDER BY network_name ASC"); $sql = mysqli_query($mysqli,"SELECT * FROM networks WHERE network_archived_at IS NULL AND network_client_id = $client_id ORDER BY network_name ASC");
while($row = mysqli_fetch_array($sql)){ while ($row = mysqli_fetch_array($sql)) {
$network_id = $row['network_id']; $network_id = $row['network_id'];
$network_name = htmlentities($row['network_name']); $network_name = htmlentities($row['network_name']);
$network = htmlentities($row['network']); $network = htmlentities($row['network']);
@ -238,7 +238,7 @@
<?php <?php
$sql = mysqli_query($mysqli,"SELECT * FROM vendors WHERE vendor_archived_at IS NULL AND vendor_client_id = $client_id AND vendor_template = 0 ORDER BY vendor_name ASC"); $sql = mysqli_query($mysqli,"SELECT * FROM vendors WHERE vendor_archived_at IS NULL AND vendor_client_id = $client_id AND vendor_template = 0 ORDER BY vendor_name ASC");
while($row = mysqli_fetch_array($sql)){ while ($row = mysqli_fetch_array($sql)) {
$vendor_id = $row['vendor_id']; $vendor_id = $row['vendor_id'];
$vendor_name = htmlentities($row['vendor_name']); $vendor_name = htmlentities($row['vendor_name']);
?> ?>
@ -261,7 +261,7 @@
</div> </div>
</div> </div>
<?php if($_GET['type'] !== 'virtual'){ ?> <?php if ($_GET['type'] !== 'virtual') { ?>
<div class="form-group"> <div class="form-group">
<label>Purchase Date</label> <label>Purchase Date</label>
<div class="input-group"> <div class="input-group">

26
client_asset_copy_modal.php
View File

@ -55,14 +55,14 @@
</div> </div>
<select class="form-control select2" name="type" required> <select class="form-control select2" name="type" required>
<?php foreach($asset_types_array as $asset_type_select => $asset_icon_select) { ?> <?php foreach($asset_types_array as $asset_type_select => $asset_icon_select) { ?>
<option <?php if($asset_type_select == $asset_type) { echo "selected"; } ?>><?php echo $asset_type_select; ?></option> <option <?php if ($asset_type_select == $asset_type) { echo "selected"; } ?>><?php echo $asset_type_select; ?></option>
<?php } ?> <?php } ?>
</select> </select>
</div> </div>
</div> </div>
<?php //Do not display Make Model or Serial if Virtual is selected <?php //Do not display Make Model or Serial if Virtual is selected
if($asset_type !== 'virtual'){ ?> if ($asset_type !== 'virtual') { ?>
<div class="form-group"> <div class="form-group">
<label>Make </label> <label>Make </label>
<div class="input-group"> <div class="input-group">
@ -94,7 +94,7 @@
</div> </div>
<?php } ?> <?php } ?>
<?php if($asset_type !== 'Phone' && $asset_type !== 'Mobile Phone' && $asset_type !== 'Tablet' && $asset_type !== 'Access Point' && $asset_type !== 'Printer' && $asset_type !== 'Camera' && $asset_type !== 'TV' && $asset_type !== 'Other'){ ?> <?php if ($asset_type !== 'Phone' && $asset_type !== 'Mobile Phone' && $asset_type !== 'Tablet' && $asset_type !== 'Access Point' && $asset_type !== 'Printer' && $asset_type !== 'Camera' && $asset_type !== 'TV' && $asset_type !== 'Other') { ?>
<div class="form-group"> <div class="form-group">
<label>Operating System</label> <label>Operating System</label>
<div class="input-group"> <div class="input-group">
@ -121,11 +121,11 @@
<?php <?php
$sql_locations = mysqli_query($mysqli,"SELECT * FROM locations WHERE location_client_id = $client_id ORDER BY location_name ASC"); $sql_locations = mysqli_query($mysqli,"SELECT * FROM locations WHERE location_client_id = $client_id ORDER BY location_name ASC");
while($row = mysqli_fetch_array($sql_locations)){ while ($row = mysqli_fetch_array($sql_locations)) {
$location_id_select = $row['location_id']; $location_id_select = $row['location_id'];
$location_name_select = htmlentities($row['location_name']); $location_name_select = htmlentities($row['location_name']);
?> ?>
<option <?php if($asset_location_id == $location_id_select){ echo "selected"; } ?> value="<?php echo $location_id_select; ?>"><?php echo $location_name_select; ?></option> <option <?php if ($asset_location_id == $location_id_select) { echo "selected"; } ?> value="<?php echo $location_id_select; ?>"><?php echo $location_name_select; ?></option>
<?php <?php
} }
@ -134,7 +134,7 @@
</div> </div>
</div> </div>
<?php if($asset_type !== 'Firewall/Router' && $asset_type !== 'Switch' && $asset_type !== 'Access Point' && $asset_type !== 'Printer' && $asset_type !== 'Server' && $asset_type !== 'Virtual Machine'){ ?> <?php if ($asset_type !== 'Firewall/Router' && $asset_type !== 'Switch' && $asset_type !== 'Access Point' && $asset_type !== 'Printer' && $asset_type !== 'Server' && $asset_type !== 'Virtual Machine') { ?>
<div class="form-group"> <div class="form-group">
<label>Assigned To</label> <label>Assigned To</label>
<div class="input-group"> <div class="input-group">
@ -146,7 +146,7 @@
<?php <?php
$sql_contacts = mysqli_query($mysqli,"SELECT * FROM contacts WHERE contact_archived_at IS NULL AND contact_client_id = $client_id ORDER BY contact_name ASC"); $sql_contacts = mysqli_query($mysqli,"SELECT * FROM contacts WHERE contact_archived_at IS NULL AND contact_client_id = $client_id ORDER BY contact_name ASC");
while($row = mysqli_fetch_array($sql_contacts)){ while ($row = mysqli_fetch_array($sql_contacts)) {
$contact_id = $row['contact_id']; $contact_id = $row['contact_id'];
$contact_name = htmlentities($row['contact_name']); $contact_name = htmlentities($row['contact_name']);
?> ?>
@ -168,7 +168,7 @@
</div> </div>
<select class="form-control select2" name="status"> <select class="form-control select2" name="status">
<?php foreach($asset_status_array as $asset_status_select) { ?> <?php foreach($asset_status_array as $asset_status_select) { ?>
<option <?php if($asset_status_select == $asset_status) { echo "selected"; } ?>><?php echo $asset_status_select; ?></option> <option <?php if ($asset_status_select == $asset_status) { echo "selected"; } ?>><?php echo $asset_status_select; ?></option>
<?php } ?> <?php } ?>
</select> </select>
</div> </div>
@ -185,13 +185,13 @@
<?php <?php
$sql_networks = mysqli_query($mysqli,"SELECT * FROM networks WHERE (network_archived_at > '$asset_created_at' OR network_archived_at IS NULL) AND network_client_id = $client_id ORDER BY network_name ASC"); $sql_networks = mysqli_query($mysqli,"SELECT * FROM networks WHERE (network_archived_at > '$asset_created_at' OR network_archived_at IS NULL) AND network_client_id = $client_id ORDER BY network_name ASC");
while($row = mysqli_fetch_array($sql_networks)){ while ($row = mysqli_fetch_array($sql_networks)) {
$network_id_select = $row['network_id']; $network_id_select = $row['network_id'];
$network_name_select = htmlentities($row['network_name']); $network_name_select = htmlentities($row['network_name']);
$network_select = htmlentities($row['network']); $network_select = htmlentities($row['network']);
?> ?>
<option <?php if($asset_network_id == $network_id_select){ echo "selected"; } ?> value="<?php echo $network_id_select; ?>"><?php echo $network_name_select; ?> - <?php echo $network_select; ?></option> <option <?php if ($asset_network_id == $network_id_select) { echo "selected"; } ?> value="<?php echo $network_id_select; ?>"><?php echo $network_name_select; ?> - <?php echo $network_select; ?></option>
<?php <?php
} }
@ -235,11 +235,11 @@
<?php <?php
$sql_vendors = mysqli_query($mysqli,"SELECT * FROM vendors WHERE (vendor_archived_at > '$asset_created_at' OR vendor_archived_at IS NULL) AND vendor_client_id = $client_id AND vendor_template = 0 ORDER BY vendor_name ASC"); $sql_vendors = mysqli_query($mysqli,"SELECT * FROM vendors WHERE (vendor_archived_at > '$asset_created_at' OR vendor_archived_at IS NULL) AND vendor_client_id = $client_id AND vendor_template = 0 ORDER BY vendor_name ASC");
while($row = mysqli_fetch_array($sql_vendors)){ while ($row = mysqli_fetch_array($sql_vendors)) {
$vendor_id_select = $row['vendor_id']; $vendor_id_select = $row['vendor_id'];
$vendor_name_select = htmlentities($row['vendor_name']); $vendor_name_select = htmlentities($row['vendor_name']);
?> ?>
<option <?php if($asset_vendor_id == $vendor_id_select){ echo "selected"; } ?> value="<?php echo $vendor_id_select; ?>"><?php echo $vendor_name_select; ?></option> <option <?php if ($asset_vendor_id == $vendor_id_select) { echo "selected"; } ?> value="<?php echo $vendor_id_select; ?>"><?php echo $vendor_name_select; ?></option>
<?php <?php
} }
@ -258,7 +258,7 @@
</div> </div>
</div> </div>
<?php if($asset_type !== 'Virtual Machine'){ ?> <?php if ($asset_type !== 'Virtual Machine') { ?>
<div class="form-group"> <div class="form-group">
<label>Purchase Date</label> <label>Purchase Date</label>
<div class="input-group"> <div class="input-group">

2
client_asset_documents_modal.php
View File

@ -10,7 +10,7 @@
<div class="modal-body bg-white"> <div class="modal-body bg-white">
<?php <?php
while($row = mysqli_fetch_array($sql_related_documents)){ while ($row = mysqli_fetch_array($sql_related_documents)) {
$related_document_id = $row['document_id']; $related_document_id = $row['document_id'];
$related_document_name = htmlentities($row['document_name']); $related_document_name = htmlentities($row['document_name']);
?> ?>

28
client_asset_edit_modal.php
View File

@ -56,14 +56,14 @@
</div> </div>
<select class="form-control select2" name="type" required> <select class="form-control select2" name="type" required>
<?php foreach($asset_types_array as $asset_type_select => $asset_icon_select) { ?> <?php foreach($asset_types_array as $asset_type_select => $asset_icon_select) { ?>
<option <?php if($asset_type_select == $asset_type) { echo "selected"; } ?>><?php echo $asset_type_select; ?></option> <option <?php if ($asset_type_select == $asset_type) { echo "selected"; } ?>><?php echo $asset_type_select; ?></option>
<?php } ?> <?php } ?>
</select> </select>
</div> </div>
</div> </div>
<?php //Do not display Make Model or Serial if Virtual is selected <?php //Do not display Make Model or Serial if Virtual is selected
if($asset_type !== 'virtual'){ ?> if ($asset_type !== 'virtual') { ?>
<div class="form-group"> <div class="form-group">
<label>Make </label> <label>Make </label>
<div class="input-group"> <div class="input-group">
@ -95,7 +95,7 @@
</div> </div>
<?php } ?> <?php } ?>
<?php if($asset_type !== 'Phone' && $asset_type !== 'Mobile Phone' && $asset_type !== 'Tablet' && $asset_type !== 'Access Point' && $asset_type !== 'Printer' && $asset_type !== 'Camera' && $asset_type !== 'TV' && $asset_type !== 'Other'){ ?> <?php if ($asset_type !== 'Phone' && $asset_type !== 'Mobile Phone' && $asset_type !== 'Tablet' && $asset_type !== 'Access Point' && $asset_type !== 'Printer' && $asset_type !== 'Camera' && $asset_type !== 'TV' && $asset_type !== 'Other') { ?>
<div class="form-group"> <div class="form-group">
<label>Operating System</label> <label>Operating System</label>
<div class="input-group"> <div class="input-group">
@ -122,11 +122,11 @@
<?php <?php
$sql_locations = mysqli_query($mysqli,"SELECT * FROM locations WHERE location_client_id = $client_id ORDER BY location_name ASC"); $sql_locations = mysqli_query($mysqli,"SELECT * FROM locations WHERE location_client_id = $client_id ORDER BY location_name ASC");
while($row = mysqli_fetch_array($sql_locations)){ while ($row = mysqli_fetch_array($sql_locations)) {
$location_id_select = $row['location_id']; $location_id_select = $row['location_id'];
$location_name_select = htmlentities($row['location_name']); $location_name_select = htmlentities($row['location_name']);
?> ?>
<option <?php if($asset_location_id == $location_id_select){ echo "selected"; } ?> value="<?php echo $location_id_select; ?>"><?php echo $location_name_select; ?></option> <option <?php if ($asset_location_id == $location_id_select) { echo "selected"; } ?> value="<?php echo $location_id_select; ?>"><?php echo $location_name_select; ?></option>
<?php <?php
} }
@ -146,12 +146,12 @@
<?php <?php
$sql_contacts = mysqli_query($mysqli,"SELECT * FROM contacts WHERE (contact_archived_at > '$asset_created_at' OR contact_archived_at IS NULL) AND contact_client_id = $client_id ORDER BY contact_name ASC"); $sql_contacts = mysqli_query($mysqli,"SELECT * FROM contacts WHERE (contact_archived_at > '$asset_created_at' OR contact_archived_at IS NULL) AND contact_client_id = $client_id ORDER BY contact_name ASC");
while($row = mysqli_fetch_array($sql_contacts)){ while ($row = mysqli_fetch_array($sql_contacts)) {
$contact_id_select = $row['contact_id']; $contact_id_select = $row['contact_id'];
$contact_name_select = htmlentities($row['contact_name']); $contact_name_select = htmlentities($row['contact_name']);
?> ?>
<option <?php if($asset_contact_id == $contact_id_select){ echo "selected"; } ?> value="<?php echo $contact_id_select; ?>"> <option <?php if ($asset_contact_id == $contact_id_select) { echo "selected"; } ?> value="<?php echo $contact_id_select; ?>">
<?php echo $contact_name_select; ?> <?php if(!empty($row['contact_archived_at'])){ echo " (Archived " . date('Y-m-d',strtotime($row['contact_archived_at'])) .")"; } ?> <?php echo $contact_name_select; ?> <?php if (!empty($row['contact_archived_at'])) { echo " (Archived " . date('Y-m-d',strtotime($row['contact_archived_at'])) .")"; } ?>
</option> </option>
<?php <?php
@ -169,7 +169,7 @@
</div> </div>
<select class="form-control select2" name="status"> <select class="form-control select2" name="status">
<?php foreach($asset_status_array as $asset_status_select) { ?> <?php foreach($asset_status_array as $asset_status_select) { ?>
<option <?php if($asset_status_select == $asset_status) { echo "selected"; } ?>><?php echo $asset_status_select; ?></option> <option <?php if ($asset_status_select == $asset_status) { echo "selected"; } ?>><?php echo $asset_status_select; ?></option>
<?php } ?> <?php } ?>
</select> </select>
</div> </div>
@ -186,13 +186,13 @@
<?php <?php
$sql_networks = mysqli_query($mysqli,"SELECT * FROM networks WHERE (network_archived_at > '$asset_created_at' OR network_archived_at IS NULL) AND network_client_id = $client_id ORDER BY network_name ASC"); $sql_networks = mysqli_query($mysqli,"SELECT * FROM networks WHERE (network_archived_at > '$asset_created_at' OR network_archived_at IS NULL) AND network_client_id = $client_id ORDER BY network_name ASC");
while($row = mysqli_fetch_array($sql_networks)){ while ($row = mysqli_fetch_array($sql_networks)) {
$network_id_select = $row['network_id']; $network_id_select = $row['network_id'];
$network_name_select = htmlentities($row['network_name']); $network_name_select = htmlentities($row['network_name']);
$network_select = htmlentities($row['network']); $network_select = htmlentities($row['network']);
?> ?>
<option <?php if($asset_network_id == $network_id_select){ echo "selected"; } ?> value="<?php echo $network_id_select; ?>"><?php echo $network_name_select; ?> - <?php echo $network_select; ?></option> <option <?php if ($asset_network_id == $network_id_select) { echo "selected"; } ?> value="<?php echo $network_id_select; ?>"><?php echo $network_name_select; ?> - <?php echo $network_select; ?></option>
<?php <?php
} }
@ -236,11 +236,11 @@
<?php <?php
$sql_vendors = mysqli_query($mysqli,"SELECT * FROM vendors WHERE (vendor_archived_at > '$asset_created_at' OR vendor_archived_at IS NULL) AND vendor_client_id = $client_id ORDER BY vendor_name ASC"); $sql_vendors = mysqli_query($mysqli,"SELECT * FROM vendors WHERE (vendor_archived_at > '$asset_created_at' OR vendor_archived_at IS NULL) AND vendor_client_id = $client_id ORDER BY vendor_name ASC");
while($row = mysqli_fetch_array($sql_vendors)){ while ($row = mysqli_fetch_array($sql_vendors)) {
$vendor_id_select = $row['vendor_id']; $vendor_id_select = $row['vendor_id'];
$vendor_name_select = htmlentities($row['vendor_name']); $vendor_name_select = htmlentities($row['vendor_name']);
?> ?>
<option <?php if($asset_vendor_id == $vendor_id_select){ echo "selected"; } ?> value="<?php echo $vendor_id_select; ?>"><?php echo $vendor_name_select; ?></option> <option <?php if ($asset_vendor_id == $vendor_id_select) { echo "selected"; } ?> value="<?php echo $vendor_id_select; ?>"><?php echo $vendor_name_select; ?></option>
<?php <?php
} }
@ -259,7 +259,7 @@
</div> </div>
</div> </div>
<?php if($asset_type !== 'Virtual Machine'){ ?> <?php if ($asset_type !== 'Virtual Machine') { ?>
<div class="form-group"> <div class="form-group">
<label>Purchase Date</label> <label>Purchase Date</label>
<div class="input-group"> <div class="input-group">

2
client_asset_interface_add_modal.php
View File

@ -76,7 +76,7 @@
<?php <?php
$sql_network_select = mysqli_query($mysqli,"SELECT * FROM networks WHERE network_archived_at IS NULL AND network_client_id = $client_id ORDER BY network_name ASC"); $sql_network_select = mysqli_query($mysqli,"SELECT * FROM networks WHERE network_archived_at IS NULL AND network_client_id = $client_id ORDER BY network_name ASC");
while($row = mysqli_fetch_array($sql_network_select)){ while ($row = mysqli_fetch_array($sql_network_select)) {
$network_id = $row['network_id']; $network_id = $row['network_id'];
$network_name = htmlentities($row['network_name']); $network_name = htmlentities($row['network_name']);
$network = htmlentities($row['network']); $network = htmlentities($row['network']);

2
client_asset_tickets_modal.php
View File

@ -11,7 +11,7 @@
<div class="modal-body bg-white"> <div class="modal-body bg-white">
<?php <?php
// Query is run from client_assets.php // Query is run from client_assets.php
while($row = mysqli_fetch_array($sql_tickets)){ while ($row = mysqli_fetch_array($sql_tickets)) {
$ticket_id = $row['ticket_id']; $ticket_id = $row['ticket_id'];
$ticket_prefix = htmlentities($row['ticket_prefix']); $ticket_prefix = htmlentities($row['ticket_prefix']);
$ticket_number = htmlentities($row['ticket_number']); $ticket_number = htmlentities($row['ticket_number']);

106
client_assets.php
View File

@ -31,22 +31,22 @@ $row = mysqli_fetch_assoc(mysqli_query($mysqli,"SELECT COUNT(*) AS count FROM as
AND asset_archived_at IS NULL AND asset_client_id = $client_id")); AND asset_archived_at IS NULL AND asset_client_id = $client_id"));
$other_count = $row['count']; $other_count = $row['count'];
if(!empty($_GET['sb'])){ if (!empty($_GET['sb'])) {
$sb = strip_tags(mysqli_real_escape_string($mysqli,$_GET['sb'])); $sb = strip_tags(mysqli_real_escape_string($mysqli,$_GET['sb']));
}else{ }else{
$sb = "asset_name"; $sb = "asset_name";
} }
//Asset Type from GET //Asset Type from GET
if(isset($_GET['type']) && ($_GET['type']) == 'workstation'){ if (isset($_GET['type']) && ($_GET['type']) == 'workstation') {
$type_query = "asset_type = 'desktop' OR asset_type = 'laptop'"; $type_query = "asset_type = 'desktop' OR asset_type = 'laptop'";
}elseif(isset($_GET['type']) && ($_GET['type']) == 'server'){ }elseif (isset($_GET['type']) && ($_GET['type']) == 'server') {
$type_query = "asset_type = 'server'"; $type_query = "asset_type = 'server'";
}elseif(isset($_GET['type']) && ($_GET['type']) == 'virtual'){ }elseif (isset($_GET['type']) && ($_GET['type']) == 'virtual') {
$type_query = "asset_type = 'Virtual Machine'"; $type_query = "asset_type = 'Virtual Machine'";
}elseif(isset($_GET['type']) && ($_GET['type']) == 'network'){ }elseif (isset($_GET['type']) && ($_GET['type']) == 'network') {
$type_query = "asset_type = 'Firewall/Router' OR asset_type = 'Switch' OR asset_type = 'Access Point'"; $type_query = "asset_type = 'Firewall/Router' OR asset_type = 'Switch' OR asset_type = 'Access Point'";
}elseif(isset($_GET['type']) && ($_GET['type']) == 'other'){ }elseif (isset($_GET['type']) && ($_GET['type']) == 'other') {
$type_query = "asset_type NOT LIKE 'laptop' AND asset_type NOT LIKE 'desktop' AND asset_type NOT LIKE 'server' AND asset_type NOT LIKE 'virtual machine' AND asset_type NOT LIKE 'firewall/router' AND asset_type NOT LIKE 'switch' AND asset_type NOT LIKE 'access point'"; $type_query = "asset_type NOT LIKE 'laptop' AND asset_type NOT LIKE 'desktop' AND asset_type NOT LIKE 'server' AND asset_type NOT LIKE 'virtual machine' AND asset_type NOT LIKE 'firewall/router' AND asset_type NOT LIKE 'switch' AND asset_type NOT LIKE 'access point'";
}else{ }else{
$type_query = "asset_type LIKE '%'"; $type_query = "asset_type LIKE '%'";
@ -75,7 +75,7 @@ $num_rows = mysqli_fetch_row(mysqli_query($mysqli,"SELECT FOUND_ROWS()"));
<div class="card-header py-2"> <div class="card-header py-2">
<h3 class="card-title mt-2"><i class="fa fa-fw fa-desktop"></i> Assets</h3> <h3 class="card-title mt-2"><i class="fa fa-fw fa-desktop"></i> Assets</h3>
<div class="card-tools"> <div class="card-tools">
<button type="button" class="btn btn-primary" data-toggle="modal" data-target="#addAssetModal"><i class="fas fa-fw fa-plus"></i> New <?php if(!empty($_GET['type'])){ echo ucwords(strip_tags(htmlentities($_GET['type']))); }else{ echo "Asset"; } ?></button> <button type="button" class="btn btn-primary" data-toggle="modal" data-target="#addAssetModal"><i class="fas fa-fw fa-plus"></i> New <?php if (!empty($_GET['type'])) { echo ucwords(strip_tags(htmlentities($_GET['type']))); }else{ echo "Asset"; } ?></button>
</div> </div>
</div> </div>
<div class="card-body"> <div class="card-body">
@ -86,7 +86,7 @@ $num_rows = mysqli_fetch_row(mysqli_query($mysqli,"SELECT FOUND_ROWS()"));
<div class="col-md-4"> <div class="col-md-4">
<div class="input-group mb-3 mb-md-0"> <div class="input-group mb-3 mb-md-0">
<input type="search" class="form-control" name="q" value="<?php if(isset($q)){ echo strip_tags(htmlentities($q)); } ?>" placeholder="Search <?php if(!empty($_GET['type'])){ echo ucwords(strip_tags(htmlentities($_GET['type']))); }else{ echo "Asset"; } ?>s"> <input type="search" class="form-control" name="q" value="<?php if (isset($q)) { echo strip_tags(htmlentities($q)); } ?>" placeholder="Search <?php if (!empty($_GET['type'])) { echo ucwords(strip_tags(htmlentities($_GET['type']))); }else{ echo "Asset"; } ?>s">
<div class="input-group-append"> <div class="input-group-append">
<button class="btn btn-dark"><i class="fa fa-search"></i></button> <button class="btn btn-dark"><i class="fa fa-search"></i></button>
</div> </div>
@ -94,30 +94,30 @@ $num_rows = mysqli_fetch_row(mysqli_query($mysqli,"SELECT FOUND_ROWS()"));
</div> </div>
<div class="col-sm-6"> <div class="col-sm-6">
<div class="btn-group btn-group-lg"> <div class="btn-group btn-group-lg">
<a href="?<?php echo $url_query_strings_sb; ?>&type=" class="btn <?php if($_GET['type'] == 'all' || empty($_GET['type'])){ echo 'btn-primary'; }else{ echo 'btn-default'; } ?>">All Assets <span class="right badge badge-light"><?php echo $all_count; ?></span></a> <a href="?<?php echo $url_query_strings_sb; ?>&type=" class="btn <?php if ($_GET['type'] == 'all' || empty($_GET['type'])) { echo 'btn-primary'; }else{ echo 'btn-default'; } ?>">All Assets <span class="right badge badge-light"><?php echo $all_count; ?></span></a>
<?php <?php
if($workstation_count > 0){ ?> if ($workstation_count > 0) { ?>
<a href="?<?php echo $url_query_strings_sb; ?>&type=workstation" class="btn <?php if($_GET['type'] == 'workstation'){ echo 'btn-primary'; }else{ echo 'btn-default'; } ?>"><i class="fa fa-fw fa-desktop"></i> Workstations <span class="right badge badge-light"><?php echo $workstation_count; ?></span></a> <a href="?<?php echo $url_query_strings_sb; ?>&type=workstation" class="btn <?php if ($_GET['type'] == 'workstation') { echo 'btn-primary'; }else{ echo 'btn-default'; } ?>"><i class="fa fa-fw fa-desktop"></i> Workstations <span class="right badge badge-light"><?php echo $workstation_count; ?></span></a>
<?php <?php
} ?> } ?>
<?php <?php
if($server_count > 0){ ?> if ($server_count > 0) { ?>
<a href="?<?php echo $url_query_strings_sb; ?>&type=server" class="btn <?php if($_GET['type'] == 'server'){ echo 'btn-primary'; }else{ echo 'btn-default'; } ?>"><i class="fa fa-fw fa-server"></i> Servers <span class="right badge badge-light"><?php echo $server_count; ?></span></a> <a href="?<?php echo $url_query_strings_sb; ?>&type=server" class="btn <?php if ($_GET['type'] == 'server') { echo 'btn-primary'; }else{ echo 'btn-default'; } ?>"><i class="fa fa-fw fa-server"></i> Servers <span class="right badge badge-light"><?php echo $server_count; ?></span></a>
<?php <?php
} ?> } ?>
<?php <?php
if($virtual_count > 0){ ?> if ($virtual_count > 0) { ?>
<a href="?<?php echo $url_query_strings_sb; ?>&type=virtual" class="btn <?php if($_GET['type'] == 'virtual'){ echo 'btn-primary'; }else{ echo 'btn-default'; } ?>"><i class="fa fa-fw fa-cloud"></i> Virtual <span class="right badge badge-light"><?php echo $virtual_count; ?></span></a> <a href="?<?php echo $url_query_strings_sb; ?>&type=virtual" class="btn <?php if ($_GET['type'] == 'virtual') { echo 'btn-primary'; }else{ echo 'btn-default'; } ?>"><i class="fa fa-fw fa-cloud"></i> Virtual <span class="right badge badge-light"><?php echo $virtual_count; ?></span></a>
<?php <?php
} ?> } ?>
<?php <?php
if($network_count > 0){ ?> if ($network_count > 0) { ?>
<a href="?<?php echo $url_query_strings_sb; ?>&type=network" class="btn <?php if($_GET['type'] == 'network'){ echo 'btn-primary'; }else{ echo 'btn-default'; } ?>"><i class="fa fa-fw fa-network-wired"></i> Network <span class="right badge badge-light"><?php echo $network_count; ?></span></a> <a href="?<?php echo $url_query_strings_sb; ?>&type=network" class="btn <?php if ($_GET['type'] == 'network') { echo 'btn-primary'; }else{ echo 'btn-default'; } ?>"><i class="fa fa-fw fa-network-wired"></i> Network <span class="right badge badge-light"><?php echo $network_count; ?></span></a>
<?php <?php
} ?> } ?>
<?php <?php
if($network_count > 0){ ?> if ($network_count > 0) { ?>
<a href="?<?php echo $url_query_strings_sb; ?>&type=other" class="btn <?php if($_GET['type'] == 'other'){ echo 'btn-primary'; }else{ echo 'btn-default'; } ?>"><i class="fa fa-fw fa-tag"></i> Other <span class="right badge badge-light"><?php echo $other_count; ?></span></a> <a href="?<?php echo $url_query_strings_sb; ?>&type=other" class="btn <?php if ($_GET['type'] == 'other') { echo 'btn-primary'; }else{ echo 'btn-default'; } ?>"><i class="fa fa-fw fa-tag"></i> Other <span class="right badge badge-light"><?php echo $other_count; ?></span></a>
<?php <?php
} ?> } ?>
</div> </div>
@ -135,23 +135,23 @@ $num_rows = mysqli_fetch_row(mysqli_query($mysqli,"SELECT FOUND_ROWS()"));
<hr> <hr>
<div class="table-responsive"> <div class="table-responsive">
<table class="table border table-hover"> <table class="table border table-hover">
<thead class="thead-light <?php if($num_rows[0] == 0){ echo "d-none"; } ?>"> <thead class="thead-light <?php if ($num_rows[0] == 0) { echo "d-none"; } ?>">
<tr> <tr>
<th><a class="text-secondary" href="?<?php echo $url_query_strings_sb; ?>&sb=asset_name&o=<?php echo $disp; ?>">Name</a></th> <th><a class="text-secondary" href="?<?php echo $url_query_strings_sb; ?>&sb=asset_name&o=<?php echo $disp; ?>">Name</a></th>
<?php if($_GET['type'] !== 'virtual' && $_GET['type'] !== 'servers'){ ?> <?php if ($_GET['type'] !== 'virtual' && $_GET['type'] !== 'servers') { ?>
<th><a class="text-secondary" href="?<?php echo $url_query_strings_sb; ?>&sb=asset_type&o=<?php echo $disp; ?>">Type</a></th> <th><a class="text-secondary" href="?<?php echo $url_query_strings_sb; ?>&sb=asset_type&o=<?php echo $disp; ?>">Type</a></th>
<?php } ?> <?php } ?>
<?php if($_GET['type'] !== 'virtual'){ ?> <?php if ($_GET['type'] !== 'virtual') { ?>
<th><a class="text-secondary" href="?<?php echo $url_query_strings_sb; ?>&sb=asset_make&o=<?php echo $disp; ?>">Make/Model</a></th> <th><a class="text-secondary" href="?<?php echo $url_query_strings_sb; ?>&sb=asset_make&o=<?php echo $disp; ?>">Make/Model</a></th>
<?php } ?> <?php } ?>
<?php if($_GET['type'] !== 'virtual'){ ?> <?php if ($_GET['type'] !== 'virtual') { ?>
<th><a class="text-secondary" href="?<?php echo $url_query_strings_sb; ?>&sb=asset_serial&o=<?php echo $disp; ?>">Serial Number</a></th> <th><a class="text-secondary" href="?<?php echo $url_query_strings_sb; ?>&sb=asset_serial&o=<?php echo $disp; ?>">Serial Number</a></th>
<?php } ?> <?php } ?>
<?php if($_GET['type'] !== 'network' && $_GET['type'] !== 'other'){ ?> <?php if ($_GET['type'] !== 'network' && $_GET['type'] !== 'other') { ?>
<th><a class="text-secondary" href="?<?php echo $url_query_strings_sb; ?>&sb=asset_os&o=<?php echo $disp; ?>">Operating System</a></th> <th><a class="text-secondary" href="?<?php echo $url_query_strings_sb; ?>&sb=asset_os&o=<?php echo $disp; ?>">Operating System</a></th>
<?php } ?> <?php } ?>
<th><a class="text-secondary" href="?<?php echo $url_query_strings_sb; ?>&sb=asset_install_date&o=<?php echo $disp; ?>">Install Date</a></th> <th><a class="text-secondary" href="?<?php echo $url_query_strings_sb; ?>&sb=asset_install_date&o=<?php echo $disp; ?>">Install Date</a></th>
<?php if($_GET['type'] !== 'network' && $_GET['type'] !== 'servers' && $_GET['type'] !== 'other'){ ?> <?php if ($_GET['type'] !== 'network' && $_GET['type'] !== 'servers' && $_GET['type'] !== 'other') { ?>
<th><a class="text-secondary" href="?<?php echo $url_query_strings_sb; ?>&sb=contact_name&o=<?php echo $disp; ?>">Assigned To</a></th> <th><a class="text-secondary" href="?<?php echo $url_query_strings_sb; ?>&sb=contact_name&o=<?php echo $disp; ?>">Assigned To</a></th>
<?php } ?> <?php } ?>
<th><a class="text-secondary" href="?<?php echo $url_query_strings_sb; ?>&sb=location_name&o=<?php echo $disp; ?>">Location</a></th> <th><a class="text-secondary" href="?<?php echo $url_query_strings_sb; ?>&sb=location_name&o=<?php echo $disp; ?>">Location</a></th>
@ -162,26 +162,26 @@ $num_rows = mysqli_fetch_row(mysqli_query($mysqli,"SELECT FOUND_ROWS()"));
<tbody> <tbody>
<?php <?php
while($row = mysqli_fetch_array($sql)){ while ($row = mysqli_fetch_array($sql)) {
$asset_id = $row['asset_id']; $asset_id = $row['asset_id'];
$asset_type = htmlentities($row['asset_type']); $asset_type = htmlentities($row['asset_type']);
$asset_name = htmlentities($row['asset_name']); $asset_name = htmlentities($row['asset_name']);
$asset_make = htmlentities($row['asset_make']); $asset_make = htmlentities($row['asset_make']);
$asset_model = htmlentities($row['asset_model']); $asset_model = htmlentities($row['asset_model']);
$asset_serial = htmlentities($row['asset_serial']); $asset_serial = htmlentities($row['asset_serial']);
if(empty($asset_serial)){ if (empty($asset_serial)) {
$asset_serial_display = "-"; $asset_serial_display = "-";
}else{ }else{
$asset_serial_display = $asset_serial; $asset_serial_display = $asset_serial;
} }
$asset_os = htmlentities($row['asset_os']); $asset_os = htmlentities($row['asset_os']);
if(empty($asset_os)){ if (empty($asset_os)) {
$asset_os_display = "-"; $asset_os_display = "-";
}else{ }else{
$asset_os_display = $asset_os; $asset_os_display = $asset_os;
} }
$asset_ip = htmlentities($row['asset_ip']); $asset_ip = htmlentities($row['asset_ip']);
if(empty($asset_ip)){ if (empty($asset_ip)) {
$asset_ip_display = "-"; $asset_ip_display = "-";
}else{ }else{
$asset_ip_display = "$asset_ip<button class='btn btn-sm' data-clipboard-text='$asset_ip'><i class='far fa-copy text-secondary'></i></button>"; $asset_ip_display = "$asset_ip<button class='btn btn-sm' data-clipboard-text='$asset_ip'><i class='far fa-copy text-secondary'></i></button>";
@ -191,7 +191,7 @@ $num_rows = mysqli_fetch_row(mysqli_query($mysqli,"SELECT FOUND_ROWS()"));
$asset_purchase_date = $row['asset_purchase_date']; $asset_purchase_date = $row['asset_purchase_date'];
$asset_warranty_expire = $row['asset_warranty_expire']; $asset_warranty_expire = $row['asset_warranty_expire'];
$asset_install_date = $row['asset_install_date']; $asset_install_date = $row['asset_install_date'];
if(empty($asset_install_date)){ if (empty($asset_install_date)) {
$asset_install_date_display = "-"; $asset_install_date_display = "-";
}else{ }else{
$asset_install_date_display = $asset_install_date; $asset_install_date_display = $asset_install_date;
@ -203,41 +203,41 @@ $num_rows = mysqli_fetch_row(mysqli_query($mysqli,"SELECT FOUND_ROWS()"));
$asset_contact_id = $row['asset_contact_id']; $asset_contact_id = $row['asset_contact_id'];
$asset_network_id = $row['asset_network_id']; $asset_network_id = $row['asset_network_id'];
if($asset_type == 'Laptop'){ if ($asset_type == 'Laptop') {
$device_icon = "laptop"; $device_icon = "laptop";
}elseif($asset_type == 'Desktop'){ }elseif ($asset_type == 'Desktop') {
$device_icon = "desktop"; $device_icon = "desktop";
}elseif($asset_type == 'Server'){ }elseif ($asset_type == 'Server') {
$device_icon = "server"; $device_icon = "server";
}elseif($asset_type == 'Printer'){ }elseif ($asset_type == 'Printer') {
$device_icon = "print"; $device_icon = "print";
}elseif($asset_type == 'Camera'){ }elseif ($asset_type == 'Camera') {
$device_icon = "video"; $device_icon = "video";
}elseif($asset_type == 'Switch' || $asset_type == 'Firewall/Router'){ }elseif ($asset_type == 'Switch' || $asset_type == 'Firewall/Router') {
$device_icon = "network-wired"; $device_icon = "network-wired";
}elseif($asset_type == 'Access Point'){ }elseif ($asset_type == 'Access Point') {
$device_icon = "wifi"; $device_icon = "wifi";
}elseif($asset_type == 'Phone'){ }elseif ($asset_type == 'Phone') {
$device_icon = "phone"; $device_icon = "phone";
}elseif($asset_type == 'Mobile Phone'){ }elseif ($asset_type == 'Mobile Phone') {
$device_icon = "mobile-alt"; $device_icon = "mobile-alt";
}elseif($asset_type == 'Tablet'){ }elseif ($asset_type == 'Tablet') {
$device_icon = "tablet-alt"; $device_icon = "tablet-alt";
}elseif($asset_type == 'TV'){ }elseif ($asset_type == 'TV') {
$device_icon = "tv"; $device_icon = "tv";
}elseif($asset_type == 'Virtual Machine'){ }elseif ($asset_type == 'Virtual Machine') {
$device_icon = "cloud"; $device_icon = "cloud";
}else{ }else{
$device_icon = "tag"; $device_icon = "tag";
} }
$contact_name = $row['contact_name']; $contact_name = $row['contact_name'];
if(empty($contact_name)){ if (empty($contact_name)) {
$contact_name = "-"; $contact_name = "-";
} }
$location_name = $row['location_name']; $location_name = $row['location_name'];
if(empty($location_name)){ if (empty($location_name)) {
$location_name = "-"; $location_name = "-";
} }
@ -264,7 +264,7 @@ $num_rows = mysqli_fetch_row(mysqli_query($mysqli,"SELECT FOUND_ROWS()"));
<i class="fa fa-fw text-secondary fa-<?php echo $device_icon; ?> mr-2"></i> <i class="fa fa-fw text-secondary fa-<?php echo $device_icon; ?> mr-2"></i>
<a class="text-secondary" href="#" data-toggle="modal" data-target="#editAssetModal<?php echo $asset_id; ?>"><?php echo $asset_name; ?></a> <a class="text-secondary" href="#" data-toggle="modal" data-target="#editAssetModal<?php echo $asset_id; ?>"><?php echo $asset_name; ?></a>
<?php <?php
if($login_id > 0){ if ($login_id > 0) {
?> ?>
<button type="button" class="btn btn-link btn-sm" data-toggle="modal" data-target="#viewPasswordModal<?php echo $login_id; ?>"><i class="fas fa-key text-dark"></i></button> <button type="button" class="btn btn-link btn-sm" data-toggle="modal" data-target="#viewPasswordModal<?php echo $login_id; ?>"><i class="fas fa-key text-dark"></i></button>
@ -304,20 +304,20 @@ $num_rows = mysqli_fetch_row(mysqli_query($mysqli,"SELECT FOUND_ROWS()"));
?> ?>
</th> </th>
<?php if($_GET['type'] !== 'virtual' && $_GET['type'] !== 'servers'){ ?> <?php if ($_GET['type'] !== 'virtual' && $_GET['type'] !== 'servers') { ?>
<td><?php echo $asset_type; ?></td> <td><?php echo $asset_type; ?></td>
<?php } ?> <?php } ?>
<?php if($_GET['type'] !== 'virtual'){ ?> <?php if ($_GET['type'] !== 'virtual') { ?>
<td><?php echo "$asset_make $asset_model"; ?></td> <td><?php echo "$asset_make $asset_model"; ?></td>
<?php } ?> <?php } ?>
<?php if($_GET['type'] !== 'virtual'){ ?> <?php if ($_GET['type'] !== 'virtual') { ?>
<td><?php echo $asset_serial_display; ?></td> <td><?php echo $asset_serial_display; ?></td>
<?php } ?> <?php } ?>
<?php if($_GET['type'] !== 'network' && $_GET['type'] !== 'other'){ ?> <?php if ($_GET['type'] !== 'network' && $_GET['type'] !== 'other') { ?>
<td><?php echo $asset_os_display; ?></td> <td><?php echo $asset_os_display; ?></td>
<?php } ?> <?php } ?>
<td><?php echo $asset_install_date_display; ?></td> <td><?php echo $asset_install_date_display; ?></td>
<?php if($_GET['type'] !== 'network' && $_GET['type'] !== 'other' && $_GET['type'] !== 'servers'){ ?> <?php if ($_GET['type'] !== 'network' && $_GET['type'] !== 'other' && $_GET['type'] !== 'servers') { ?>
<td><?php echo $contact_name; ?></td> <td><?php echo $contact_name; ?></td>
<?php } ?> <?php } ?>
<td><?php echo $location_name; ?></td> <td><?php echo $location_name; ?></td>
@ -329,13 +329,13 @@ $num_rows = mysqli_fetch_row(mysqli_query($mysqli,"SELECT FOUND_ROWS()"));
<a class="dropdown-item" href="#" data-toggle="modal" data-target="#addAssetInterfaceModal<?php echo $asset_id; ?>">Interfaces</a> <a class="dropdown-item" href="#" data-toggle="modal" data-target="#addAssetInterfaceModal<?php echo $asset_id; ?>">Interfaces</a>
<a class="dropdown-item" href="#" data-toggle="modal" data-target="#editAssetModal<?php echo $asset_id; ?>">Edit</a> <a class="dropdown-item" href="#" data-toggle="modal" data-target="#editAssetModal<?php echo $asset_id; ?>">Edit</a>
<a class="dropdown-item" href="#" data-toggle="modal" data-target="#copyAssetModal<?php echo $asset_id; ?>">Copy</a> <a class="dropdown-item" href="#" data-toggle="modal" data-target="#copyAssetModal<?php echo $asset_id; ?>">Copy</a>
<?php if($document_count > 0){ ?> <?php if ($document_count > 0) { ?>
<a class="dropdown-item" href="#" data-toggle="modal" data-target="#assetDocumentsModal<?php echo $asset_id; ?>">Documents (<?php echo $document_count; ?>)</a> <a class="dropdown-item" href="#" data-toggle="modal" data-target="#assetDocumentsModal<?php echo $asset_id; ?>">Documents (<?php echo $document_count; ?>)</a>
<?php } ?> <?php } ?>
<?php if($ticket_count > 0){ ?> <?php if ($ticket_count > 0) { ?>
<a class="dropdown-item" href="#" data-toggle="modal" data-target="#assetTicketsModal<?php echo $asset_id; ?>">Tickets (<?php echo $ticket_count; ?>)</a> <a class="dropdown-item" href="#" data-toggle="modal" data-target="#assetTicketsModal<?php echo $asset_id; ?>">Tickets (<?php echo $ticket_count; ?>)</a>
<?php } ?> <?php } ?>
<?php if($session_user_role == 3) { ?> <?php if ($session_user_role == 3) { ?>
<div class="dropdown-divider"></div> <div class="dropdown-divider"></div>
<a class="dropdown-item text-danger" href="post.php?archive_asset=<?php echo $asset_id; ?>">Archive</a> <a class="dropdown-item text-danger" href="post.php?archive_asset=<?php echo $asset_id; ?>">Archive</a>
<a class="dropdown-item text-danger" href="post.php?delete_asset=<?php echo $asset_id; ?>">Delete</a> <a class="dropdown-item text-danger" href="post.php?delete_asset=<?php echo $asset_id; ?>">Delete</a>

2
client_certificate_add_modal.php
View File

@ -74,7 +74,7 @@
<option value="">- Domain -</option> <option value="">- Domain -</option>
<?php <?php
$domains_sql = mysqli_query($mysqli, "SELECT * FROM domains WHERE domain_client_id = '$client_id'"); $domains_sql = mysqli_query($mysqli, "SELECT * FROM domains WHERE domain_client_id = '$client_id'");
while($domain_row = mysqli_fetch_array($domains_sql)){ while ($domain_row = mysqli_fetch_array($domains_sql)) {
$domain_id = $domain_row['domain_id']; $domain_id = $domain_row['domain_id'];
$domain_name = htmlentities($domain_row['domain_name']); $domain_name = htmlentities($domain_row['domain_name']);
echo "<option value=\"$domain_id\">$domain_name</option>"; echo "<option value=\"$domain_id\">$domain_name</option>";

22
client_certificates.php
View File

@ -2,7 +2,7 @@
<?php <?php
if(!empty($_GET['sb'])){ if (!empty($_GET['sb'])) {
$sb = strip_tags(mysqli_real_escape_string($mysqli,$_GET['sb'])); $sb = strip_tags(mysqli_real_escape_string($mysqli,$_GET['sb']));
}else{ }else{
$sb = "certificate_name"; $sb = "certificate_name";
@ -33,7 +33,7 @@ $num_rows = mysqli_fetch_row(mysqli_query($mysqli,"SELECT FOUND_ROWS()"));
<div class="col-md-4"> <div class="col-md-4">
<div class="input-group mb-3 mb-md-0"> <div class="input-group mb-3 mb-md-0">
<input type="search" class="form-control" name="q" value="<?php if(isset($q)){ echo strip_tags(htmlentities($q)); } ?>" placeholder="Search Certificates"> <input type="search" class="form-control" name="q" value="<?php if (isset($q)) { echo strip_tags(htmlentities($q)); } ?>" placeholder="Search Certificates">
<div class="input-group-append"> <div class="input-group-append">
<button class="btn btn-dark"><i class="fa fa-search"></i></button> <button class="btn btn-dark"><i class="fa fa-search"></i></button>
</div> </div>
@ -51,7 +51,7 @@ $num_rows = mysqli_fetch_row(mysqli_query($mysqli,"SELECT FOUND_ROWS()"));
<hr> <hr>
<div class="table-responsive"> <div class="table-responsive">
<table class="table table-striped table-borderless table-hover"> <table class="table table-striped table-borderless table-hover">
<thead class="text-dark <?php if($num_rows[0] == 0){ echo "d-none"; } ?>"> <thead class="text-dark <?php if ($num_rows[0] == 0) { echo "d-none"; } ?>">
<tr> <tr>
<th><a class="text-secondary" href="?<?php echo $url_query_strings_sb; ?>&sb=certificate_name&o=<?php echo $disp; ?>">Name</a></th> <th><a class="text-secondary" href="?<?php echo $url_query_strings_sb; ?>&sb=certificate_name&o=<?php echo $disp; ?>">Name</a></th>
<th><a class="text-secondary" href="?<?php echo $url_query_strings_sb; ?>&sb=certificate_domain&o=<?php echo $disp; ?>">Domain</a></th> <th><a class="text-secondary" href="?<?php echo $url_query_strings_sb; ?>&sb=certificate_domain&o=<?php echo $disp; ?>">Domain</a></th>
@ -63,7 +63,7 @@ $num_rows = mysqli_fetch_row(mysqli_query($mysqli,"SELECT FOUND_ROWS()"));
<tbody> <tbody>
<?php <?php
while($row = mysqli_fetch_array($sql)){ while ($row = mysqli_fetch_array($sql)) {
$certificate_id = $row['certificate_id']; $certificate_id = $row['certificate_id'];
$certificate_name = htmlentities($row['certificate_name']); $certificate_name = htmlentities($row['certificate_name']);
$certificate_domain = htmlentities($row['certificate_domain']); $certificate_domain = htmlentities($row['certificate_domain']);
@ -83,7 +83,7 @@ $num_rows = mysqli_fetch_row(mysqli_query($mysqli,"SELECT FOUND_ROWS()"));
</button> </button>
<div class="dropdown-menu"> <div class="dropdown-menu">
<a class="dropdown-item" href="#" data-toggle="modal" onclick="populateCertificateEditModal(<?php echo $client_id, ",", $certificate_id ?>)" data-target="#editCertificateModal">Edit</a> <a class="dropdown-item" href="#" data-toggle="modal" onclick="populateCertificateEditModal(<?php echo $client_id, ",", $certificate_id ?>)" data-target="#editCertificateModal">Edit</a>
<?php if($session_user_role == 3) { ?> <?php if ($session_user_role == 3) { ?>
<div class="dropdown-divider"></div> <div class="dropdown-divider"></div>
<a class="dropdown-item text-danger" href="post.php?delete_certificate=<?php echo $certificate_id; ?>">Delete</a> <a class="dropdown-item text-danger" href="post.php?delete_certificate=<?php echo $certificate_id; ?>">Delete</a>
<?php } ?> <?php } ?>
@ -115,7 +115,7 @@ include("client_certificate_add_modal.php");
jQuery.get( jQuery.get(
"ajax.php", "ajax.php",
{certificate_get_json_details: 'true', client_id: client_id, certificate_id: certificate_id}, {certificate_get_json_details: 'true', client_id: client_id, certificate_id: certificate_id},
function(data){ function(data) {
// If we get a response from post.php, parse it as JSON // If we get a response from post.php, parse it as JSON
const response = JSON.parse(data); const response = JSON.parse(data);
@ -145,7 +145,7 @@ include("client_certificate_add_modal.php");
// Populate domain dropdown // Populate domain dropdown
domains.forEach(domain => { domains.forEach(domain => {
if(parseInt(domain.domain_id) == parseInt(certificate.certificate_domain_id)){ if (parseInt(domain.domain_id) == parseInt(certificate.certificate_domain_id)) {
// Selected domain // Selected domain
domainDropdown[domainDropdown.length] = new Option(domain.domain_name, domain.domain_id, true, true); domainDropdown[domainDropdown.length] = new Option(domain.domain_name, domain.domain_id, true, true);
} }
@ -162,14 +162,14 @@ include("client_certificate_add_modal.php");
function fetchSSL(type) function fetchSSL(type)
{ {
// Get the domain name input & issued/expire/key fields, based on whether this is a new cert or updating an existing // Get the domain name input & issued/expire/key fields, based on whether this is a new cert or updating an existing
if(type == 'new'){ if (type == 'new') {
var domain = document.getElementById("domain").value; var domain = document.getElementById("domain").value;
var issuedBy = document.getElementById("issuedBy"); var issuedBy = document.getElementById("issuedBy");
var expire = document.getElementById("expire"); var expire = document.getElementById("expire");
var publicKey = document.getElementById("publicKey"); var publicKey = document.getElementById("publicKey");
} }
if(type == 'edit'){ if (type == 'edit') {
var domain = document.getElementById("editDomain").value; var domain = document.getElementById("editDomain").value;
var issuedBy = document.getElementById("editIssuedBy"); var issuedBy = document.getElementById("editIssuedBy");
var expire = document.getElementById("editExpire"); var expire = document.getElementById("editExpire");
@ -180,11 +180,11 @@ include("client_certificate_add_modal.php");
jQuery.get( jQuery.get(
"ajax.php", "ajax.php",
{certificate_fetch_parse_json_details: 'TRUE', domain: domain}, {certificate_fetch_parse_json_details: 'TRUE', domain: domain},
function(data){ function(data) {
//If we get a response from post.php, parse it as JSON //If we get a response from post.php, parse it as JSON
const ssl_data = JSON.parse(data); const ssl_data = JSON.parse(data);
if(ssl_data.success == "TRUE"){ if (ssl_data.success == "TRUE") {
// Fill the form fields with the cert data // Fill the form fields with the cert data
issuedBy.value = ssl_data.issued_by; issuedBy.value = ssl_data.issued_by;
expire.value = ssl_data.expire; expire.value = ssl_data.expire;

4
client_contact_add_modal.php
View File

@ -41,7 +41,7 @@
<input type="text" class="form-control" name="name" placeholder="Full Name" required autofocus> <input type="text" class="form-control" name="name" placeholder="Full Name" required autofocus>
<div class="input-group-append"> <div class="input-group-append">
<div class="input-group-text"> <div class="input-group-text">
<input type="checkbox" name="primary_contact" value="1" <?php if($primary_contact == 0){ echo "checked"; } ?>> <input type="checkbox" name="primary_contact" value="1" <?php if ($primary_contact == 0) { echo "checked"; } ?>>
</div> </div>
</div> </div>
</div> </div>
@ -120,7 +120,7 @@
<?php <?php
$sql = mysqli_query($mysqli,"SELECT * FROM locations WHERE location_archived_at IS NULL AND location_client_id = $client_id ORDER BY location_name ASC"); $sql = mysqli_query($mysqli,"SELECT * FROM locations WHERE location_archived_at IS NULL AND location_client_id = $client_id ORDER BY location_name ASC");
while($row = mysqli_fetch_array($sql)){ while ($row = mysqli_fetch_array($sql)) {
$location_id = $row['location_id']; $location_id = $row['location_id'];
$location_name = htmlentities($row['location_name']); $location_name = htmlentities($row['location_name']);
?> ?>

68
client_contact_details.php
View File

@ -2,7 +2,7 @@
<?php <?php
if(isset($_GET['contact_id'])){ if (isset($_GET['contact_id'])) {
$contact_id = intval($_GET['contact_id']); $contact_id = intval($_GET['contact_id']);
$sql = mysqli_query($mysqli,"SELECT * FROM contacts $sql = mysqli_query($mysqli,"SELECT * FROM contacts
@ -24,14 +24,14 @@ if(isset($_GET['contact_id'])){
$contact_notes = htmlentities($row['contact_notes']); $contact_notes = htmlentities($row['contact_notes']);
$contact_important = intval($row['contact_important']); $contact_important = intval($row['contact_important']);
$contact_created_at = $row['contact_created_at']; $contact_created_at = $row['contact_created_at'];
if($contact_id == $primary_contact){ if ($contact_id == $primary_contact) {
$primary_contact_display = "<small class='text-success'>Primary Contact</small>"; $primary_contact_display = "<small class='text-success'>Primary Contact</small>";
}else{ }else{
$primary_contact_display = FALSE; $primary_contact_display = FALSE;
} }
$contact_location_id = $row['contact_location_id']; $contact_location_id = $row['contact_location_id'];
$location_name = htmlentities($row['location_name']); $location_name = htmlentities($row['location_name']);
if(empty($location_name)){ if (empty($location_name)) {
$location_name_display = "-"; $location_name_display = "-";
}else{ }else{
$location_name_display = $location_name; $location_name_display = $location_name;
@ -65,7 +65,7 @@ if(isset($_GET['contact_id'])){
<div class="card card-dark"> <div class="card card-dark">
<div class="card-body"> <div class="card-body">
<div class="text-center"> <div class="text-center">
<?php if(!empty($contact_photo)){ ?> <?php if (!empty($contact_photo)) { ?>
<img class="img-fluid img-circle p-3" alt="contact_photo" src="<?php echo "uploads/clients/$session_company_id/$client_id/$contact_photo"; ?>"> <img class="img-fluid img-circle p-3" alt="contact_photo" src="<?php echo "uploads/clients/$session_company_id/$client_id/$contact_photo"; ?>">
<?php }else{ ?> <?php }else{ ?>
<span class="fa-stack fa-4x"> <span class="fa-stack fa-4x">
@ -76,19 +76,19 @@ if(isset($_GET['contact_id'])){
</div> </div>
<hr> <hr>
<h3><?php echo $contact_name; ?></h3> <h3><?php echo $contact_name; ?></h3>
<?php if(!empty($contact_title)){ ?> <?php if (!empty($contact_title)) { ?>
<div class="mb-3 text-secondary"><?php echo $contact_title; ?></div> <div class="mb-3 text-secondary"><?php echo $contact_title; ?></div>
<?php } ?> <?php } ?>
<?php if(!empty($contact_title)){ ?> <?php if (!empty($contact_title)) { ?>
<div class="mb-1"><i class="fa fa-fw fa-map-marker-alt text-secondary mr-3"></i><?php echo $location_name_display; ?></div> <div class="mb-1"><i class="fa fa-fw fa-map-marker-alt text-secondary mr-3"></i><?php echo $location_name_display; ?></div>
<?php } ?> <?php } ?>
<?php if(!empty($contact_email)){ ?> <?php if (!empty($contact_email)) { ?>
<div><i class="fa fa-fw fa-envelope text-secondary mr-3"></i><a href='mailto:<?php echo $contact_email; ?>'><?php echo $contact_email; ?></a><button class='btn btn-sm clipboardjs' data-clipboard-text='<?php echo $contact_email; ?>'><i class='far fa-copy text-secondary'></i></button></div> <div><i class="fa fa-fw fa-envelope text-secondary mr-3"></i><a href='mailto:<?php echo $contact_email; ?>'><?php echo $contact_email; ?></a><button class='btn btn-sm clipboardjs' data-clipboard-text='<?php echo $contact_email; ?>'><i class='far fa-copy text-secondary'></i></button></div>
<?php } ?> <?php } ?>
<?php if(!empty($contact_phone)){ ?> <?php if (!empty($contact_phone)) { ?>
<div class="mb-2"><i class="fa fa-fw fa-phone text-secondary mr-3"></i><?php echo "$contact_phone $contact_phone_extention"; ?></div> <div class="mb-2"><i class="fa fa-fw fa-phone text-secondary mr-3"></i><?php echo "$contact_phone $contact_phone_extention"; ?></div>
<?php } ?> <?php } ?>
<?php if(!empty($contact_mobile)){ ?> <?php if (!empty($contact_mobile)) { ?>
<div class="mb-2"><i class="fa fa-fw fa-mobile-alt text-secondary mr-3"></i><?php echo $contact_mobile; ?></div> <div class="mb-2"><i class="fa fa-fw fa-mobile-alt text-secondary mr-3"></i><?php echo $contact_mobile; ?></div>
<?php } ?> <?php } ?>
<div class="mb-2"><i class="fa fa-fw fa-clock text-secondary mr-3"></i><?php echo date('Y-m-d',strtotime($contact_created_at)); ?></div> <div class="mb-2"><i class="fa fa-fw fa-clock text-secondary mr-3"></i><?php echo date('Y-m-d',strtotime($contact_created_at)); ?></div>
@ -122,7 +122,7 @@ if(isset($_GET['contact_id'])){
</ol> </ol>
<div class="card card-dark <?php if($asset_count == 0){ echo "d-none"; } ?>"> <div class="card card-dark <?php if ($asset_count == 0) { echo "d-none"; } ?>">
<div class="card-header"> <div class="card-header">
<h3 class="card-title"><i class="fa fa-fw fa-desktop"></i> Assets</h3> <h3 class="card-title"><i class="fa fa-fw fa-desktop"></i> Assets</h3>
</div> </div>
@ -144,26 +144,26 @@ if(isset($_GET['contact_id'])){
<tbody> <tbody>
<?php <?php
while($row = mysqli_fetch_array($sql_related_assets)){ while ($row = mysqli_fetch_array($sql_related_assets)) {
$asset_id = $row['asset_id']; $asset_id = $row['asset_id'];
$asset_type = htmlentities($row['asset_type']); $asset_type = htmlentities($row['asset_type']);
$asset_name = htmlentities($row['asset_name']); $asset_name = htmlentities($row['asset_name']);
$asset_make = htmlentities($row['asset_make']); $asset_make = htmlentities($row['asset_make']);
$asset_model = htmlentities($row['asset_model']); $asset_model = htmlentities($row['asset_model']);
$asset_serial = htmlentities($row['asset_serial']); $asset_serial = htmlentities($row['asset_serial']);
if(empty($asset_serial)){ if (empty($asset_serial)) {
$asset_serial_display = "-"; $asset_serial_display = "-";
}else{ }else{
$asset_serial_display = $asset_serial; $asset_serial_display = $asset_serial;
} }
$asset_os = htmlentities($row['asset_os']); $asset_os = htmlentities($row['asset_os']);
if(empty($asset_os)){ if (empty($asset_os)) {
$asset_os_display = "-"; $asset_os_display = "-";
}else{ }else{
$asset_os_display = $asset_os; $asset_os_display = $asset_os;
} }
$asset_ip = htmlentities($row['asset_ip']); $asset_ip = htmlentities($row['asset_ip']);
if(empty($asset_ip)){ if (empty($asset_ip)) {
$asset_ip_display = "-"; $asset_ip_display = "-";
}else{ }else{
$asset_ip_display = "$asset_ip<button class='btn btn-sm' data-clipboard-text='$asset_ip'><i class='far fa-copy text-secondary'></i></button>"; $asset_ip_display = "$asset_ip<button class='btn btn-sm' data-clipboard-text='$asset_ip'><i class='far fa-copy text-secondary'></i></button>";
@ -173,7 +173,7 @@ if(isset($_GET['contact_id'])){
$asset_purchase_date = $row['asset_purchase_date']; $asset_purchase_date = $row['asset_purchase_date'];
$asset_warranty_expire = $row['asset_warranty_expire']; $asset_warranty_expire = $row['asset_warranty_expire'];
$asset_install_date = $row['asset_install_date']; $asset_install_date = $row['asset_install_date'];
if(empty($asset_install_date)){ if (empty($asset_install_date)) {
$asset_install_date_display = "-"; $asset_install_date_display = "-";
}else{ }else{
$asset_install_date_display = $asset_install_date; $asset_install_date_display = $asset_install_date;
@ -184,29 +184,29 @@ if(isset($_GET['contact_id'])){
$asset_location_id = $row['asset_location_id']; $asset_location_id = $row['asset_location_id'];
$asset_network_id = $row['asset_network_id']; $asset_network_id = $row['asset_network_id'];
if($asset_type == 'Laptop'){ if ($asset_type == 'Laptop') {
$device_icon = "laptop"; $device_icon = "laptop";
}elseif($asset_type == 'Desktop'){ }elseif ($asset_type == 'Desktop') {
$device_icon = "desktop"; $device_icon = "desktop";
}elseif($asset_type == 'Server'){ }elseif ($asset_type == 'Server') {
$device_icon = "server"; $device_icon = "server";
}elseif($asset_type == 'Printer'){ }elseif ($asset_type == 'Printer') {
$device_icon = "print"; $device_icon = "print";
}elseif($asset_type == 'Camera'){ }elseif ($asset_type == 'Camera') {
$device_icon = "video"; $device_icon = "video";
}elseif($asset_type == 'Switch' || $asset_type == 'Firewall/Router'){ }elseif ($asset_type == 'Switch' || $asset_type == 'Firewall/Router') {
$device_icon = "network-wired"; $device_icon = "network-wired";
}elseif($asset_type == 'Access Point'){ }elseif ($asset_type == 'Access Point') {
$device_icon = "wifi"; $device_icon = "wifi";
}elseif($asset_type == 'Phone'){ }elseif ($asset_type == 'Phone') {
$device_icon = "phone"; $device_icon = "phone";
}elseif($asset_type == 'Mobile Phone'){ }elseif ($asset_type == 'Mobile Phone') {
$device_icon = "mobile-alt"; $device_icon = "mobile-alt";
}elseif($asset_type == 'Tablet'){ }elseif ($asset_type == 'Tablet') {
$device_icon = "tablet-alt"; $device_icon = "tablet-alt";
}elseif($asset_type == 'TV'){ }elseif ($asset_type == 'TV') {
$device_icon = "tv"; $device_icon = "tv";
}elseif($asset_type == 'Virtual Machine'){ }elseif ($asset_type == 'Virtual Machine') {
$device_icon = "cloud"; $device_icon = "cloud";
}else{ }else{
$device_icon = "tag"; $device_icon = "tag";
@ -230,7 +230,7 @@ if(isset($_GET['contact_id'])){
<a class="dropdown-item" href="#" data-toggle="modal" data-target="#addAssetInterfaceModal<?php echo $asset_id; ?>">Interfaces</a> <a class="dropdown-item" href="#" data-toggle="modal" data-target="#addAssetInterfaceModal<?php echo $asset_id; ?>">Interfaces</a>
<a class="dropdown-item" href="#" data-toggle="modal" data-target="#editAssetModal<?php echo $asset_id; ?>">Edit</a> <a class="dropdown-item" href="#" data-toggle="modal" data-target="#editAssetModal<?php echo $asset_id; ?>">Edit</a>
<a class="dropdown-item" href="#" data-toggle="modal" data-target="#copyAssetModal<?php echo $asset_id; ?>">Copy</a> <a class="dropdown-item" href="#" data-toggle="modal" data-target="#copyAssetModal<?php echo $asset_id; ?>">Copy</a>
<?php if($session_user_role == 3) { ?> <?php if ($session_user_role == 3) { ?>
<div class="dropdown-divider"></div> <div class="dropdown-divider"></div>
<a class="dropdown-item text-danger" href="post.php?archive_asset=<?php echo $asset_id; ?>">Archive</a> <a class="dropdown-item text-danger" href="post.php?archive_asset=<?php echo $asset_id; ?>">Archive</a>
<a class="dropdown-item text-danger" href="post.php?delete_asset=<?php echo $asset_id; ?>">Delete</a> <a class="dropdown-item text-danger" href="post.php?delete_asset=<?php echo $asset_id; ?>">Delete</a>
@ -260,7 +260,7 @@ if(isset($_GET['contact_id'])){
<div class="card card-dark <?php if($login_count == 0){ echo "d-none"; } ?>"> <div class="card card-dark <?php if ($login_count == 0) { echo "d-none"; } ?>">
<div class="card-header"> <div class="card-header">
<h3 class="card-title"><i class="fa fa-fw fa-key"></i> Passwords</h3> <h3 class="card-title"><i class="fa fa-fw fa-key"></i> Passwords</h3>
</div> </div>
@ -280,17 +280,17 @@ if(isset($_GET['contact_id'])){
<tbody> <tbody>
<?php <?php
while($row = mysqli_fetch_array($sql_related_logins)){ while ($row = mysqli_fetch_array($sql_related_logins)) {
$login_id = $row['login_id']; $login_id = $row['login_id'];
$login_name = htmlentities($row['login_name']); $login_name = htmlentities($row['login_name']);
$login_uri = htmlentities($row['login_uri']); $login_uri = htmlentities($row['login_uri']);
if(empty($login_uri)){ if (empty($login_uri)) {
$login_uri_display = "-"; $login_uri_display = "-";
}else{ }else{
$login_uri_display = "$login_uri<button class='btn btn-sm clipboardjs' data-clipboard-text='$login_uri'><i class='far fa-copy text-secondary'></i></button><a href='https://$login_uri' target='_blank'><i class='fa fa-external-link-alt text-secondary'></i></a>"; $login_uri_display = "$login_uri<button class='btn btn-sm clipboardjs' data-clipboard-text='$login_uri'><i class='far fa-copy text-secondary'></i></button><a href='https://$login_uri' target='_blank'><i class='fa fa-external-link-alt text-secondary'></i></a>";
} }
$login_username = htmlentities($row['login_username']); $login_username = htmlentities($row['login_username']);
if(empty($login_username)){ if (empty($login_username)) {
$login_username_display = "-"; $login_username_display = "-";
}else{ }else{
$login_username_display = "$login_username<button class='btn btn-sm clipboardjs' data-clipboard-text='$login_username'><i class='far fa-copy text-secondary'></i></button>"; $login_username_display = "$login_username<button class='btn btn-sm clipboardjs' data-clipboard-text='$login_username'><i class='far fa-copy text-secondary'></i></button>";
@ -298,7 +298,7 @@ if(isset($_GET['contact_id'])){
$login_password = htmlentities(decryptLoginEntry($row['login_password'])); $login_password = htmlentities(decryptLoginEntry($row['login_password']));
$login_otp_secret = htmlentities($row['login_otp_secret']); $login_otp_secret = htmlentities($row['login_otp_secret']);
$login_id_with_secret = '"' . $row['login_id'] . '","' . $row['login_otp_secret'] . '"'; $login_id_with_secret = '"' . $row['login_id'] . '","' . $row['login_otp_secret'] . '"';
if(empty($login_otp_secret)){ if (empty($login_otp_secret)) {
$otp_display = "-"; $otp_display = "-";
}else{ }else{
$otp_display = "<span onmouseenter='showOTP($login_id_with_secret)'><i class='far fa-clock'></i> <span id='otp_$login_id'><i>Hover..</i></span></span>"; $otp_display = "<span onmouseenter='showOTP($login_id_with_secret)'><i class='far fa-clock'></i> <span id='otp_$login_id'><i>Hover..</i></span></span>";
@ -331,7 +331,7 @@ if(isset($_GET['contact_id'])){
<div class="dropdown-menu"> <div class="dropdown-menu">
<a class="dropdown-item" href="#" data-toggle="modal" data-target="#editLoginModal<?php echo $login_id; ?>">Edit</a> <a class="dropdown-item" href="#" data-toggle="modal" data-target="#editLoginModal<?php echo $login_id; ?>">Edit</a>
<a class="dropdown-item" href="#" data-toggle="modal" data-target="#shareModal" onclick="populateShareModal(<?php echo "$client_id, 'Login', $login_id"; ?>)">Share</a> <a class="dropdown-item" href="#" data-toggle="modal" data-target="#shareModal" onclick="populateShareModal(<?php echo "$client_id, 'Login', $login_id"; ?>)">Share</a>
<?php if($session_user_role == 3) { ?> <?php if ($session_user_role == 3) { ?>
<div class="dropdown-divider"></div> <div class="dropdown-divider"></div>
<a class="dropdown-item text-danger" href="post.php?delete_login=<?php echo $login_id; ?>">Delete</a> <a class="dropdown-item text-danger" href="post.php?delete_login=<?php echo $login_id; ?>">Delete</a>
<?php } ?> <?php } ?>

8
client_contact_details_modal.php
View File

@ -33,7 +33,7 @@
<?php <?php
while($row = mysqli_fetch_array($sql_related_assets)){ while ($row = mysqli_fetch_array($sql_related_assets)) {
$asset_id = $row['asset_id']; $asset_id = $row['asset_id'];
$asset_type = htmlentities($row['asset_type']); $asset_type = htmlentities($row['asset_type']);
$asset_name = htmlentities($row['asset_name']); $asset_name = htmlentities($row['asset_name']);
@ -56,7 +56,7 @@
<ul> <ul>
<?php <?php
while($row = mysqli_fetch_array($sql_related_logins)){ while ($row = mysqli_fetch_array($sql_related_logins)) {
$login_id = $row['login_id']; $login_id = $row['login_id'];
$login_name = htmlentities($row['login_name']); $login_name = htmlentities($row['login_name']);
$login_uri = htmlentities($row['login_uri']); $login_uri = htmlentities($row['login_uri']);
@ -82,7 +82,7 @@
<ul> <ul>
<?php <?php
while($row = mysqli_fetch_array($sql_related_software)){ while ($row = mysqli_fetch_array($sql_related_software)) {
$software_id = $row['software_id']; $software_id = $row['software_id'];
$software_name = htmlentities($row['software_name']); $software_name = htmlentities($row['software_name']);
$software_type = htmlentities($row['software_type']); $software_type = htmlentities($row['software_type']);
@ -103,7 +103,7 @@
<ul> <ul>
<?php <?php
while($row = mysqli_fetch_array($sql_related_tickets)){ while ($row = mysqli_fetch_array($sql_related_tickets)) {
$ticket_id = $row['ticket_id']; $ticket_id = $row['ticket_id'];
$ticket_prefix = htmlentities($row['ticket_prefix']); $ticket_prefix = htmlentities($row['ticket_prefix']);
$ticket_number = $row['ticket_number']; $ticket_number = $row['ticket_number'];

16
client_contact_edit_modal.php
View File

@ -43,7 +43,7 @@
<input type="text" class="form-control" name="name" placeholder="Full Name" value="<?php echo $contact_name; ?>" required> <input type="text" class="form-control" name="name" placeholder="Full Name" value="<?php echo $contact_name; ?>" required>
<div class="input-group-append"> <div class="input-group-append">
<div class="input-group-text"> <div class="input-group-text">
<input type="checkbox" name="primary_contact" value="1" <?php if($contact_id == $primary_contact){ echo "checked"; } ?>> <input type="checkbox" name="primary_contact" value="1" <?php if ($contact_id == $primary_contact) { echo "checked"; } ?>>
</div> </div>
</div> </div>
</div> </div>
@ -58,7 +58,7 @@
<input type="text" class="form-control" name="title" placeholder="Title" value="<?php echo $contact_title; ?>"> <input type="text" class="form-control" name="title" placeholder="Title" value="<?php echo $contact_title; ?>">
<div class="input-group-append"> <div class="input-group-append">
<div class="input-group-text"> <div class="input-group-text">
<input type="checkbox" name="contact_important" value="1" <?php if($contact_important == 1){ echo "checked"; } ?>> <input type="checkbox" name="contact_important" value="1" <?php if ($contact_important == 1) { echo "checked"; } ?>>
</div> </div>
</div> </div>
</div> </div>
@ -122,11 +122,11 @@
<?php <?php
$sql_locations = mysqli_query($mysqli,"SELECT * FROM locations WHERE (location_archived_at > '$contact_created_at' OR location_archived_at IS NULL) AND location_client_id = $client_id ORDER BY location_name ASC"); $sql_locations = mysqli_query($mysqli,"SELECT * FROM locations WHERE (location_archived_at > '$contact_created_at' OR location_archived_at IS NULL) AND location_client_id = $client_id ORDER BY location_name ASC");
while($row = mysqli_fetch_array($sql_locations)){ while ($row = mysqli_fetch_array($sql_locations)) {
$location_id_select = $row['location_id']; $location_id_select = $row['location_id'];
$location_name_select = htmlentities($row['location_name']); $location_name_select = htmlentities($row['location_name']);
?> ?>
<option <?php if($contact_location_id == $location_id_select){ echo "selected"; } ?> value="<?php echo $location_id_select; ?>"><?php echo $location_name_select; ?></option> <option <?php if ($contact_location_id == $location_id_select) { echo "selected"; } ?> value="<?php echo $location_id_select; ?>"><?php echo $location_name_select; ?></option>
<?php <?php
} }
@ -147,13 +147,13 @@
</div> </div>
<select class="form-control select2" name="auth_method"> <select class="form-control select2" name="auth_method">
<option value="">- None -</option> <option value="">- None -</option>
<option value="local" <?php if($auth_method == "local") {echo "selected";} ?>>Local</option> <option value="local" <?php if ($auth_method == "local") {echo "selected";} ?>>Local</option>
<option value="azure" <?php if($auth_method == "azure") {echo "selected";} ?>>Azure</option> <option value="azure" <?php if ($auth_method == "azure") {echo "selected";} ?>>Azure</option>
</select> </select>
</div> </div>
</div> </div>
<?php if($auth_method == "local") { ?> <?php if ($auth_method == "local") { ?>
<div class="form-group"> <div class="form-group">
<label>Password</label> <label>Password</label>
@ -180,7 +180,7 @@
<div class="tab-pane fade" id="pills-photo<?php echo $contact_id; ?>"> <div class="tab-pane fade" id="pills-photo<?php echo $contact_id; ?>">
<div class="mb-3 text-center"> <div class="mb-3 text-center">
<?php if(!empty($contact_photo)){ ?> <?php if (!empty($contact_photo)) { ?>
<img class="img-fluid" alt="contact_photo" src="<?php echo "uploads/clients/$session_company_id/$client_id/$contact_photo"; ?>"> <img class="img-fluid" alt="contact_photo" src="<?php echo "uploads/clients/$session_company_id/$client_id/$contact_photo"; ?>">
<?php }else{ ?> <?php }else{ ?>
<span class="fa-stack fa-4x"> <span class="fa-stack fa-4x">

32
client_contacts.php
View File

@ -2,11 +2,11 @@
<?php <?php
if(isset($_GET['q'])){ if (isset($_GET['q'])) {
$q = strip_tags(mysqli_real_escape_string($mysqli,$_GET['q'])); $q = strip_tags(mysqli_real_escape_string($mysqli,$_GET['q']));
//Phone Numbers //Phone Numbers
$n = preg_replace("/[^0-9]/", '',$q); $n = preg_replace("/[^0-9]/", '',$q);
if(empty($n)){ if (empty($n)) {
$n = $q; $n = $q;
} }
}else{ }else{
@ -15,7 +15,7 @@ if(isset($_GET['q'])){
$n = ""; $n = "";
} }
if(!empty($_GET['sb'])){ if (!empty($_GET['sb'])) {
$sb = strip_tags(mysqli_real_escape_string($mysqli,$_GET['sb'])); $sb = strip_tags(mysqli_real_escape_string($mysqli,$_GET['sb']));
}else{ }else{
$sb = "contact_name"; $sb = "contact_name";
@ -56,7 +56,7 @@ $num_rows = mysqli_fetch_row(mysqli_query($mysqli,"SELECT FOUND_ROWS()"));
<div class="col-md-4"> <div class="col-md-4">
<div class="input-group mb-3 mb-md-0"> <div class="input-group mb-3 mb-md-0">
<input type="search" class="form-control" name="q" value="<?php if(isset($q)){ echo strip_tags(htmlentities($q)); } ?>" placeholder="Search Contacts"> <input type="search" class="form-control" name="q" value="<?php if (isset($q)) { echo strip_tags(htmlentities($q)); } ?>" placeholder="Search Contacts">
<div class="input-group-append"> <div class="input-group-append">
<button class="btn btn-dark"><i class="fa fa-search"></i></button> <button class="btn btn-dark"><i class="fa fa-search"></i></button>
</div> </div>
@ -75,7 +75,7 @@ $num_rows = mysqli_fetch_row(mysqli_query($mysqli,"SELECT FOUND_ROWS()"));
<hr> <hr>
<div class="table-responsive"> <div class="table-responsive">
<table class="table border"> <table class="table border">
<thead class="thead-light <?php if($num_rows[0] == 0){ echo "d-none"; } ?>"> <thead class="thead-light <?php if ($num_rows[0] == 0) { echo "d-none"; } ?>">
<tr> <tr>
<th class="text-center"><a class="text-secondary" href="?<?php echo $url_query_strings_sb; ?>&sb=contact_name&o=<?php echo $disp; ?>">Name</a></th> <th class="text-center"><a class="text-secondary" href="?<?php echo $url_query_strings_sb; ?>&sb=contact_name&o=<?php echo $disp; ?>">Name</a></th>
<th><a class="text-secondary" href="?<?php echo $url_query_strings_sb; ?>&sb=contact_department&o=<?php echo $disp; ?>">Department</a></th> <th><a class="text-secondary" href="?<?php echo $url_query_strings_sb; ?>&sb=contact_department&o=<?php echo $disp; ?>">Department</a></th>
@ -89,36 +89,36 @@ $num_rows = mysqli_fetch_row(mysqli_query($mysqli,"SELECT FOUND_ROWS()"));
<tbody> <tbody>
<?php <?php
while($row = mysqli_fetch_array($sql)){ while ($row = mysqli_fetch_array($sql)) {
$contact_id = $row['contact_id']; $contact_id = $row['contact_id'];
$contact_name = htmlentities($row['contact_name']); $contact_name = htmlentities($row['contact_name']);
$contact_title = htmlentities($row['contact_title']); $contact_title = htmlentities($row['contact_title']);
if(empty($contact_title)){ if (empty($contact_title)) {
$contact_title_display = "-"; $contact_title_display = "-";
}else{ }else{
$contact_title_display = "<small class='text-secondary'>$contact_title</small>"; $contact_title_display = "<small class='text-secondary'>$contact_title</small>";
} }
$contact_department =htmlentities($row['contact_department']); $contact_department =htmlentities($row['contact_department']);
if(empty($contact_department)){ if (empty($contact_department)) {
$contact_department_display = "-"; $contact_department_display = "-";
}else{ }else{
$contact_department_display = $contact_department; $contact_department_display = $contact_department;
} }
$contact_phone = formatPhoneNumber($row['contact_phone']); $contact_phone = formatPhoneNumber($row['contact_phone']);
if(empty($contact_phone)){ if (empty($contact_phone)) {
$contact_phone_display = "-"; $contact_phone_display = "-";
}else{ }else{
$contact_phone_display = "$contact_phone"; $contact_phone_display = "$contact_phone";
} }
$contact_extension = htmlentities($row['contact_extension']); $contact_extension = htmlentities($row['contact_extension']);
$contact_mobile = formatPhoneNumber($row['contact_mobile']); $contact_mobile = formatPhoneNumber($row['contact_mobile']);
if(empty($contact_mobile)){ if (empty($contact_mobile)) {
$contact_mobile_display = "-"; $contact_mobile_display = "-";
}else{ }else{
$contact_mobile_display = "$contact_mobile"; $contact_mobile_display = "$contact_mobile";
} }
$contact_email = htmlentities($row['contact_email']); $contact_email = htmlentities($row['contact_email']);
if(empty($contact_email)){ if (empty($contact_email)) {
$contact_email_display = "-"; $contact_email_display = "-";
}else{ }else{
$contact_email_display = "<a href='mailto:$contact_email'>$contact_email</a><button class='btn btn-sm clipboardjs' data-clipboard-text='$contact_email'><i class='far fa-copy text-secondary'></i></button>"; $contact_email_display = "<a href='mailto:$contact_email'>$contact_email</a><button class='btn btn-sm clipboardjs' data-clipboard-text='$contact_email'><i class='far fa-copy text-secondary'></i></button>";
@ -128,14 +128,14 @@ $num_rows = mysqli_fetch_row(mysqli_query($mysqli,"SELECT FOUND_ROWS()"));
$contact_notes = htmlentities($row['contact_notes']); $contact_notes = htmlentities($row['contact_notes']);
$contact_important = intval($row['contact_important']); $contact_important = intval($row['contact_important']);
$contact_created_at = $row['contact_created_at']; $contact_created_at = $row['contact_created_at'];
if($contact_id == $primary_contact){ if ($contact_id == $primary_contact) {
$primary_contact_display = "<small class='text-success'>Primary Contact</small>"; $primary_contact_display = "<small class='text-success'>Primary Contact</small>";
}else{ }else{
$primary_contact_display = FALSE; $primary_contact_display = FALSE;
} }
$contact_location_id = $row['contact_location_id']; $contact_location_id = $row['contact_location_id'];
$location_name = htmlentities($row['location_name']); $location_name = htmlentities($row['location_name']);
if(empty($location_name)){ if (empty($location_name)) {
$location_name_display = "-"; $location_name_display = "-";
}else{ }else{
$location_name_display = $location_name; $location_name_display = $location_name;
@ -162,7 +162,7 @@ $num_rows = mysqli_fetch_row(mysqli_query($mysqli,"SELECT FOUND_ROWS()"));
<tr> <tr>
<th class="text-center"> <th class="text-center">
<a class="text-dark" href="client_contact_details.php?client_id=<?php echo $client_id; ?>&contact_id=<?php echo $contact_id; ?>"> <a class="text-dark" href="client_contact_details.php?client_id=<?php echo $client_id; ?>&contact_id=<?php echo $contact_id; ?>">
<?php if(!empty($contact_photo)){ ?> <?php if (!empty($contact_photo)) { ?>
<img class="img-size-50 img-circle" src="<?php echo "uploads/clients/$session_company_id/$client_id/$contact_photo"; ?>"> <img class="img-size-50 img-circle" src="<?php echo "uploads/clients/$session_company_id/$client_id/$contact_photo"; ?>">
@ -183,7 +183,7 @@ $num_rows = mysqli_fetch_row(mysqli_query($mysqli,"SELECT FOUND_ROWS()"));
<td><?php echo $contact_department_display; ?></td> <td><?php echo $contact_department_display; ?></td>
<td><?php echo $contact_email_display; ?></td> <td><?php echo $contact_email_display; ?></td>
<td><?php echo $contact_phone_display; ?> <?php if(!empty($contact_extension)){ echo "x$contact_extension"; } ?></td> <td><?php echo $contact_phone_display; ?> <?php if (!empty($contact_extension)) { echo "x$contact_extension"; } ?></td>
<td><?php echo $contact_mobile_display; ?></td> <td><?php echo $contact_mobile_display; ?></td>
<td><?php echo $location_name_display; ?></td> <td><?php echo $location_name_display; ?></td>
<td> <td>
@ -194,7 +194,7 @@ $num_rows = mysqli_fetch_row(mysqli_query($mysqli,"SELECT FOUND_ROWS()"));
<div class="dropdown-menu"> <div class="dropdown-menu">
<a class="dropdown-item" href="client_contact_details.php?client_id=<?php echo $client_id; ?>&contact_id=<?php echo $contact_id; ?>">View Details</a> <a class="dropdown-item" href="client_contact_details.php?client_id=<?php echo $client_id; ?>&contact_id=<?php echo $contact_id; ?>">View Details</a>
<a class="dropdown-item" href="#" data-toggle="modal" data-target="#editContactModal<?php echo $contact_id; ?>">Edit</a> <a class="dropdown-item" href="#" data-toggle="modal" data-target="#editContactModal<?php echo $contact_id; ?>">Edit</a>
<?php if($session_user_role == 3 && $contact_id !== $primary_contact) { ?> <?php if ($session_user_role == 3 && $contact_id !== $primary_contact) { ?>
<div class="dropdown-divider"></div> <div class="dropdown-divider"></div>
<a class="dropdown-item text-danger" href="post.php?archive_contact=<?php echo $contact_id; ?>">Archive</a> <a class="dropdown-item text-danger" href="post.php?archive_contact=<?php echo $contact_id; ?>">Archive</a>
<div class="dropdown-divider"></div> <div class="dropdown-divider"></div>

6
client_delete_modal.php
View File

@ -1,6 +1,6 @@
<script> <script>
function validateClientNameDelete(client_id){ function validateClientNameDelete(client_id) {
if (document.getElementById("clientNameProvided" + client_id).value === document.getElementById("clientName" + client_id).value){ if (document.getElementById("clientNameProvided" + client_id).value === document.getElementById("clientName" + client_id).value) {
document.getElementById("clientDeleteButton" + client_id).className = "btn btn-danger btn-lg px-5"; document.getElementById("clientDeleteButton" + client_id).className = "btn btn-danger btn-lg px-5";
} }
else{ else{
@ -16,7 +16,7 @@
<div class="mb-4" style="text-align: center;"> <div class="mb-4" style="text-align: center;">
<i class="far fa-10x fa-times-circle text-danger mb-3 mt-3"></i> <i class="far fa-10x fa-times-circle text-danger mb-3 mt-3"></i>
<h2>Are you sure?</h2> <h2>Are you sure?</h2>
<h6 class="mb-4 text-secondary">Do you really want to <b>delete <?php echo $client_name; ?></b> and all associated data including financial data, logs, shared links etc? This process cannot be undone.</h6> <h6 class="mb-4 text-secondary">Do you really want to <b>delete <?php echo $client_name; ?></b> and all associated data including financial data, logs, shared links etc.? This process cannot be undone.</h6>
<div class="form-group"> <div class="form-group">
<input type="hidden" id="clientName<?php echo $client_id ?>" value="<?php echo $client_name; ?>"> <input type="hidden" id="clientName<?php echo $client_id ?>" value="<?php echo $client_name; ?>">
<input class="form-control" type="text" id="clientNameProvided<?php echo $client_id ?>" onkeyup="validateClientNameDelete(<?php echo $client_id ?>)" placeholder="Please enter: '<?php echo $client_name; ?>'"> <input class="form-control" type="text" id="clientNameProvided<?php echo $client_id ?>" onkeyup="validateClientNameDelete(<?php echo $client_id ?>)" placeholder="Please enter: '<?php echo $client_name; ?>'">

6
client_document_add_from_template_modal.php
View File

@ -21,7 +21,7 @@
<option value="">- Select Template -</option> <option value="">- Select Template -</option>
<?php <?php
$sql_document_templates = mysqli_query($mysqli,"SELECT * FROM documents WHERE document_template = 1 AND company_id = $session_company_id AND document_archived_at IS NULL ORDER BY document_name ASC"); $sql_document_templates = mysqli_query($mysqli,"SELECT * FROM documents WHERE document_template = 1 AND company_id = $session_company_id AND document_archived_at IS NULL ORDER BY document_name ASC");
while($row = mysqli_fetch_array($sql_document_templates)){ while ($row = mysqli_fetch_array($sql_document_templates)) {
$document_template_id = $row['document_id']; $document_template_id = $row['document_id'];
$document_template_name = htmlentities($row['document_name']); $document_template_name = htmlentities($row['document_name']);
@ -55,12 +55,12 @@
<option value="0">/</option> <option value="0">/</option>
<?php <?php
$sql_folders = mysqli_query($mysqli,"SELECT * FROM folders WHERE folder_client_id = $client_id ORDER BY folder_name ASC"); $sql_folders = mysqli_query($mysqli,"SELECT * FROM folders WHERE folder_client_id = $client_id ORDER BY folder_name ASC");
while($row = mysqli_fetch_array($sql_folders)){ while ($row = mysqli_fetch_array($sql_folders)) {
$folder_id = $row['folder_id']; $folder_id = $row['folder_id'];
$folder_name = htmlentities($row['folder_name']); $folder_name = htmlentities($row['folder_name']);
?> ?>
<option <?php if($_GET['folder_id'] == $folder_id) echo "selected"; ?> value="<?php echo $folder_id ?>"><?php echo $folder_name; ?></option> <option <?php if ($_GET['folder_id'] == $folder_id) echo "selected"; ?> value="<?php echo $folder_id ?>"><?php echo $folder_name; ?></option>
<?php <?php
} }
?> ?>

4
client_document_add_modal.php
View File

@ -28,12 +28,12 @@
<option value="0">/</option> <option value="0">/</option>
<?php <?php
$sql_folders = mysqli_query($mysqli,"SELECT * FROM folders WHERE folder_client_id = $client_id ORDER BY folder_name ASC"); $sql_folders = mysqli_query($mysqli,"SELECT * FROM folders WHERE folder_client_id = $client_id ORDER BY folder_name ASC");
while($row = mysqli_fetch_array($sql_folders)){ while ($row = mysqli_fetch_array($sql_folders)) {
$folder_id = $row['folder_id']; $folder_id = $row['folder_id'];
$folder_name = htmlentities($row['folder_name']); $folder_name = htmlentities($row['folder_name']);
?> ?>
<option <?php if($_GET['folder_id'] == $folder_id) echo "selected"; ?> value="<?php echo $folder_id ?>"><?php echo $folder_name; ?></option> <option <?php if ($_GET['folder_id'] == $folder_id) echo "selected"; ?> value="<?php echo $folder_id ?>"><?php echo $folder_name; ?></option>
<?php <?php
} }
?> ?>

4
client_document_details.php
View File

@ -2,7 +2,7 @@
<?php <?php
if(isset($_GET['document_id'])){ if (isset($_GET['document_id'])) {
$document_id = intval($_GET['document_id']); $document_id = intval($_GET['document_id']);
} }
@ -33,7 +33,7 @@ $document_folder_id = $row['document_folder_id'];
<li class="breadcrumb-item"> <li class="breadcrumb-item">
<a href="client_documents.php?client_id=<?php echo $client_id; ?>">Documents</a> <a href="client_documents.php?client_id=<?php echo $client_id; ?>">Documents</a>
</li> </li>
<?php if($document_folder_id > 0){ ?> <?php if ($document_folder_id > 0) { ?>
<li class="breadcrumb-item"> <li class="breadcrumb-item">
<a href="client_documents.php?client_id=<?php echo $client_id; ?>&folder_id=<?php echo $document_folder_id; ?>"><i class="fas fa-folder-open"></i> <?php echo $folder_name; ?></a> <a href="client_documents.php?client_id=<?php echo $client_id; ?>&folder_id=<?php echo $document_folder_id; ?>"><i class="fas fa-folder-open"></i> <?php echo $folder_name; ?></a>
</li> </li>

4
client_document_edit_modal.php
View File

@ -28,11 +28,11 @@
<option value="0">/</option> <option value="0">/</option>
<?php <?php
$sql_folders_select = mysqli_query($mysqli,"SELECT * FROM folders WHERE folder_client_id = $client_id ORDER BY folder_name ASC"); $sql_folders_select = mysqli_query($mysqli,"SELECT * FROM folders WHERE folder_client_id = $client_id ORDER BY folder_name ASC");
while($row = mysqli_fetch_array($sql_folders_select)){ while ($row = mysqli_fetch_array($sql_folders_select)) {
$folder_id_select = $row['folder_id']; $folder_id_select = $row['folder_id'];
$folder_name_select = htmlentities($row['folder_name']); $folder_name_select = htmlentities($row['folder_name']);
?> ?>
<option <?php if($folder_id_select == $document_folder_id) echo "selected"; ?> value="<?php echo $folder_id_select ?>"><?php echo $folder_name_select; ?></option> <option <?php if ($folder_id_select == $document_folder_id) echo "selected"; ?> value="<?php echo $folder_id_select ?>"><?php echo $folder_name_select; ?></option>
<?php <?php
} }
?> ?>

2
client_document_template_details.php
View File

@ -3,7 +3,7 @@
<?php <?php
if(isset($_GET['document_id'])){ if (isset($_GET['document_id'])) {
$document_id = intval($_GET['document_id']); $document_id = intval($_GET['document_id']);
} }

12
client_document_templates.php
View File

@ -3,14 +3,14 @@
<?php <?php
// Sort by // Sort by
if(!empty($_GET['sb'])){ if (!empty($_GET['sb'])) {
$sb = strip_tags(mysqli_real_escape_string($mysqli,$_GET['sb'])); $sb = strip_tags(mysqli_real_escape_string($mysqli,$_GET['sb']));
}else{ }else{
$sb = "document_name"; $sb = "document_name";
} }
// Search query SQL snippet // Search query SQL snippet
if(!empty($q)){ if (!empty($q)) {
$query_snippet = "AND (MATCH(document_content_raw) AGAINST ('$q') OR document_name LIKE '%$q%')"; $query_snippet = "AND (MATCH(document_content_raw) AGAINST ('$q') OR document_name LIKE '%$q%')";
}else{ }else{
$query_snippet = ""; // empty $query_snippet = ""; // empty
@ -48,7 +48,7 @@ $num_rows = mysqli_fetch_row(mysqli_query($mysqli,"SELECT FOUND_ROWS()"));
<form autocomplete="off"> <form autocomplete="off">
<input type="hidden" name="client_id" value="<?php echo intval($client_id); ?>"> <input type="hidden" name="client_id" value="<?php echo intval($client_id); ?>">
<div class="input-group"> <div class="input-group">
<input type="search" class="form-control " name="q" value="<?php if(isset($q)){ echo strip_tags(htmlentities($q)); } ?>" placeholder="Search templates"> <input type="search" class="form-control " name="q" value="<?php if (isset($q)) { echo strip_tags(htmlentities($q)); } ?>" placeholder="Search templates">
<div class="input-group-append"> <div class="input-group-append">
<button class="btn btn-secondary"><i class="fa fa-search"></i></button> <button class="btn btn-secondary"><i class="fa fa-search"></i></button>
</div> </div>
@ -58,7 +58,7 @@ $num_rows = mysqli_fetch_row(mysqli_query($mysqli,"SELECT FOUND_ROWS()"));
<div class="table-responsive"> <div class="table-responsive">
<table class="table table-striped table-borderless table-hover"> <table class="table table-striped table-borderless table-hover">
<thead class="text-dark <?php if($num_rows[0] == 0){ echo "d-none"; } ?>"> <thead class="text-dark <?php if ($num_rows[0] == 0) { echo "d-none"; } ?>">
<tr> <tr>
<th> <th>
<a class="text-secondary" href="?<?php echo $url_query_strings_sb; ?>&sb=document_name&o=<?php echo $disp; ?>">Template Name</a> <a class="text-secondary" href="?<?php echo $url_query_strings_sb; ?>&sb=document_name&o=<?php echo $disp; ?>">Template Name</a>
@ -77,7 +77,7 @@ $num_rows = mysqli_fetch_row(mysqli_query($mysqli,"SELECT FOUND_ROWS()"));
<tbody> <tbody>
<?php <?php
while($row = mysqli_fetch_array($sql)){ while ($row = mysqli_fetch_array($sql)) {
$document_id = $row['document_id']; $document_id = $row['document_id'];
$document_name = htmlentities($row['document_name']); $document_name = htmlentities($row['document_name']);
$document_content = $row['document_content']; $document_content = $row['document_content'];
@ -100,7 +100,7 @@ $num_rows = mysqli_fetch_row(mysqli_query($mysqli,"SELECT FOUND_ROWS()"));
</button> </button>
<div class="dropdown-menu"> <div class="dropdown-menu">
<a class="dropdown-item" href="#" data-toggle="modal" data-target="#editDocumentTemplateModal<?php echo $document_id; ?>">Edit</a> <a class="dropdown-item" href="#" data-toggle="modal" data-target="#editDocumentTemplateModal<?php echo $document_id; ?>">Edit</a>
<?php if($session_user_role == 3) { ?> <?php if ($session_user_role == 3) { ?>
<div class="dropdown-divider"></div> <div class="dropdown-divider"></div>
<a class="dropdown-item text-danger" href="post.php?delete_document=<?php echo $document_id; ?>">Delete</a> <a class="dropdown-item text-danger" href="post.php?delete_document=<?php echo $document_id; ?>">Delete</a>
<?php } ?> <?php } ?>

28
client_documents.php
View File

@ -3,21 +3,21 @@
<?php <?php
// Folder // Folder
if(!empty($_GET['folder_id'])){ if (!empty($_GET['folder_id'])) {
$folder = intval($_GET['folder_id']); $folder = intval($_GET['folder_id']);
}else{ }else{
$folder = 0; $folder = 0;
} }
// Sort by // Sort by
if(!empty($_GET['sb'])){ if (!empty($_GET['sb'])) {
$sb = strip_tags(mysqli_real_escape_string($mysqli,$_GET['sb'])); $sb = strip_tags(mysqli_real_escape_string($mysqli,$_GET['sb']));
}else{ }else{
$sb = "document_name"; $sb = "document_name";
} }
// Search query SQL snippet // Search query SQL snippet
if(!empty($q)){ if (!empty($q)) {
$query_snippet = "AND (MATCH(document_content_raw) AGAINST ('$q') OR document_name LIKE '%$q%')"; $query_snippet = "AND (MATCH(document_content_raw) AGAINST ('$q') OR document_name LIKE '%$q%')";
}else{ }else{
$query_snippet = ""; // empty $query_snippet = ""; // empty
@ -28,7 +28,7 @@ $url_query_strings_sb = http_build_query(array_merge($_GET,array('sb' => $sb, 'o
// Folder ID // Folder ID
$get_folder_id = 0; $get_folder_id = 0;
if(!empty($_GET['folder_id'])){ if (!empty($_GET['folder_id'])) {
$get_folder_id = intval($_GET['folder_id']); $get_folder_id = intval($_GET['folder_id']);
} }
@ -79,11 +79,11 @@ $num_rows = mysqli_fetch_row(mysqli_query($mysqli,"SELECT FOUND_ROWS()"));
<hr> <hr>
<ul class="nav nav-pills flex-column bg-light"> <ul class="nav nav-pills flex-column bg-light">
<li class="nav-item"> <li class="nav-item">
<a class="nav-link <?php if($get_folder_id == 0){ echo "active"; } ?>" href="?client_id=<?php echo $client_id; ?>&folder_id=0">/</a> <a class="nav-link <?php if ($get_folder_id == 0) { echo "active"; } ?>" href="?client_id=<?php echo $client_id; ?>&folder_id=0">/</a>
</li> </li>
<?php <?php
$sql_folders = mysqli_query($mysqli,"SELECT * FROM folders WHERE folder_client_id = $client_id ORDER BY folder_name ASC"); $sql_folders = mysqli_query($mysqli,"SELECT * FROM folders WHERE folder_client_id = $client_id ORDER BY folder_name ASC");
while($row = mysqli_fetch_array($sql_folders)){ while ($row = mysqli_fetch_array($sql_folders)) {
$folder_id = $row['folder_id']; $folder_id = $row['folder_id'];
$folder_name = htmlentities($row['folder_name']); $folder_name = htmlentities($row['folder_name']);
@ -95,9 +95,9 @@ $num_rows = mysqli_fetch_row(mysqli_query($mysqli,"SELECT FOUND_ROWS()"));
<li class="nav-item"> <li class="nav-item">
<div class="row"> <div class="row">
<div class="col-10"> <div class="col-10">
<a class="nav-link <?php if($get_folder_id == $folder_id){ echo "active"; } ?> " href="?client_id=<?php echo $client_id; ?>&folder_id=<?php echo $folder_id; ?>"> <a class="nav-link <?php if ($get_folder_id == $folder_id) { echo "active"; } ?> " href="?client_id=<?php echo $client_id; ?>&folder_id=<?php echo $folder_id; ?>">
<?php <?php
if($get_folder_id == $folder_id){ ?> if ($get_folder_id == $folder_id) { ?>
<i class="fas fa-fw fa-folder-open"></i> <i class="fas fa-fw fa-folder-open"></i>
<?php <?php
}else{ }else{
@ -105,7 +105,7 @@ $num_rows = mysqli_fetch_row(mysqli_query($mysqli,"SELECT FOUND_ROWS()"));
<i class="fas fa-fw fa-folder"></i> <i class="fas fa-fw fa-folder"></i>
<?php } ?> <?php } ?>
<?php echo $folder_name; ?> <?php if($num_documents > 0){ echo "<span class='badge badge-pill badge-dark float-right mt-1'>$num_documents</span>"; } ?> <?php echo $folder_name; ?> <?php if ($num_documents > 0) { echo "<span class='badge badge-pill badge-dark float-right mt-1'>$num_documents</span>"; } ?>
</a> </a>
</div> </div>
<div class="col-2"> <div class="col-2">
@ -115,7 +115,7 @@ $num_rows = mysqli_fetch_row(mysqli_query($mysqli,"SELECT FOUND_ROWS()"));
</button> </button>
<div class="dropdown-menu"> <div class="dropdown-menu">
<a class="dropdown-item" href="#" data-toggle="modal" data-target="#renameFolderModal<?php echo $folder_id; ?>">Rename</a> <a class="dropdown-item" href="#" data-toggle="modal" data-target="#renameFolderModal<?php echo $folder_id; ?>">Rename</a>
<?php if($session_user_role == 3) { ?> <?php if ($session_user_role == 3) { ?>
<div class="dropdown-divider"></div> <div class="dropdown-divider"></div>
<a class="dropdown-item text-danger" href="post.php?delete_folder=<?php echo $folder_id; ?>">Delete</a> <a class="dropdown-item text-danger" href="post.php?delete_folder=<?php echo $folder_id; ?>">Delete</a>
<?php } ?> <?php } ?>
@ -139,7 +139,7 @@ $num_rows = mysqli_fetch_row(mysqli_query($mysqli,"SELECT FOUND_ROWS()"));
<input type="hidden" name="client_id" value="<?php echo intval($client_id); ?>"> <input type="hidden" name="client_id" value="<?php echo intval($client_id); ?>">
<input type="hidden" name="folder_id" value="<?php echo $get_folder_id; ?>"> <input type="hidden" name="folder_id" value="<?php echo $get_folder_id; ?>">
<div class="input-group"> <div class="input-group">
<input type="search" class="form-control " name="q" value="<?php if(isset($q)){ echo strip_tags(htmlentities($q)); } ?>" placeholder="Search Documents"> <input type="search" class="form-control " name="q" value="<?php if (isset($q)) { echo strip_tags(htmlentities($q)); } ?>" placeholder="Search Documents">
<div class="input-group-append"> <div class="input-group-append">
<button class="btn btn-secondary"><i class="fa fa-search"></i></button> <button class="btn btn-secondary"><i class="fa fa-search"></i></button>
</div> </div>
@ -149,7 +149,7 @@ $num_rows = mysqli_fetch_row(mysqli_query($mysqli,"SELECT FOUND_ROWS()"));
<div class="table-responsive"> <div class="table-responsive">
<table class="table table-striped table-sm table-borderless table-hover"> <table class="table table-striped table-sm table-borderless table-hover">
<thead class="text-dark <?php if($num_rows[0] == 0){ echo "d-none"; } ?>"> <thead class="text-dark <?php if ($num_rows[0] == 0) { echo "d-none"; } ?>">
<tr> <tr>
<th> <th>
<a class="text-secondary" href="?<?php echo $url_query_strings_sb; ?>&sb=document_name&o=<?php echo $disp; ?>">Name</a> <a class="text-secondary" href="?<?php echo $url_query_strings_sb; ?>&sb=document_name&o=<?php echo $disp; ?>">Name</a>
@ -168,7 +168,7 @@ $num_rows = mysqli_fetch_row(mysqli_query($mysqli,"SELECT FOUND_ROWS()"));
<tbody> <tbody>
<?php <?php
while($row = mysqli_fetch_array($sql)){ while ($row = mysqli_fetch_array($sql)) {
$document_id = $row['document_id']; $document_id = $row['document_id'];
$document_name = htmlentities($row['document_name']); $document_name = htmlentities($row['document_name']);
$document_content = $row['document_content']; $document_content = $row['document_content'];
@ -192,7 +192,7 @@ $num_rows = mysqli_fetch_row(mysqli_query($mysqli,"SELECT FOUND_ROWS()"));
<div class="dropdown-menu"> <div class="dropdown-menu">
<a class="dropdown-item" href="#" data-toggle="modal" data-target="#editDocumentModal<?php echo $document_id; ?>">Edit</a> <a class="dropdown-item" href="#" data-toggle="modal" data-target="#editDocumentModal<?php echo $document_id; ?>">Edit</a>
<a class="dropdown-item" href="#" data-toggle="modal" data-target="#shareModal" onclick="populateShareModal(<?php echo "$client_id, 'Document', $document_id"; ?>)">Share</a> <a class="dropdown-item" href="#" data-toggle="modal" data-target="#shareModal" onclick="populateShareModal(<?php echo "$client_id, 'Document', $document_id"; ?>)">Share</a>
<?php if($session_user_role == 3) { ?> <?php if ($session_user_role == 3) { ?>
<div class="dropdown-divider"></div> <div class="dropdown-divider"></div>
<a class="dropdown-item text-danger" href="post.php?delete_document=<?php echo $document_id; ?>">Delete</a> <a class="dropdown-item text-danger" href="post.php?delete_document=<?php echo $document_id; ?>">Delete</a>
<?php } ?> <?php } ?>

4
client_domain_add_modal.php
View File

@ -32,7 +32,7 @@
<?php <?php
$sql = mysqli_query($mysqli,"SELECT * FROM vendors WHERE vendor_archived_at IS NULL AND vendor_client_id = $client_id ORDER BY vendor_name ASC"); $sql = mysqli_query($mysqli,"SELECT * FROM vendors WHERE vendor_archived_at IS NULL AND vendor_client_id = $client_id ORDER BY vendor_name ASC");
while($row = mysqli_fetch_array($sql)){ while ($row = mysqli_fetch_array($sql)) {
$vendor_id = $row['vendor_id']; $vendor_id = $row['vendor_id'];
$vendor_name = htmlentities($row['vendor_name']); $vendor_name = htmlentities($row['vendor_name']);
?> ?>
@ -56,7 +56,7 @@
<?php <?php
$sql = mysqli_query($mysqli,"SELECT * FROM vendors WHERE vendor_archived_at IS NULL AND vendor_client_id = $client_id ORDER BY vendor_name ASC"); $sql = mysqli_query($mysqli,"SELECT * FROM vendors WHERE vendor_archived_at IS NULL AND vendor_client_id = $client_id ORDER BY vendor_name ASC");
while($row = mysqli_fetch_array($sql)){ while ($row = mysqli_fetch_array($sql)) {
$vendor_id = $row['vendor_id']; $vendor_id = $row['vendor_id'];
$vendor_name = htmlentities($row['vendor_name']); $vendor_name = htmlentities($row['vendor_name']);
?> ?>

20
client_domains.php
View File

@ -2,7 +2,7 @@
<?php <?php
if(!empty($_GET['sb'])){ if (!empty($_GET['sb'])) {
$sb = strip_tags(mysqli_real_escape_string($mysqli,$_GET['sb'])); $sb = strip_tags(mysqli_real_escape_string($mysqli,$_GET['sb']));
}else{ }else{
$sb = "domain_name"; $sb = "domain_name";
@ -34,7 +34,7 @@ $num_rows = mysqli_fetch_row(mysqli_query($mysqli,"SELECT FOUND_ROWS()"));
<div class="col-md-4"> <div class="col-md-4">
<div class="input-group mb-3 mb-md-0"> <div class="input-group mb-3 mb-md-0">
<input type="search" class="form-control" name="q" value="<?php if(isset($q)){ echo strip_tags(htmlentities($q)); } ?>" placeholder="Search Domains"> <input type="search" class="form-control" name="q" value="<?php if (isset($q)) { echo strip_tags(htmlentities($q)); } ?>" placeholder="Search Domains">
<div class="input-group-append"> <div class="input-group-append">
<button class="btn btn-dark"><i class="fa fa-search"></i></button> <button class="btn btn-dark"><i class="fa fa-search"></i></button>
</div> </div>
@ -52,7 +52,7 @@ $num_rows = mysqli_fetch_row(mysqli_query($mysqli,"SELECT FOUND_ROWS()"));
<hr> <hr>
<div class="table-responsive"> <div class="table-responsive">
<table class="table table-striped table-borderless table-hover"> <table class="table table-striped table-borderless table-hover">
<thead class="text-dark <?php if($num_rows[0] == 0){ echo "d-none"; } ?>"> <thead class="text-dark <?php if ($num_rows[0] == 0) { echo "d-none"; } ?>">
<tr> <tr>
<th><a class="text-secondary" href="?<?php echo $url_query_strings_sb; ?>&sb=domain_name&o=<?php echo $disp; ?>">Domain</a></th> <th><a class="text-secondary" href="?<?php echo $url_query_strings_sb; ?>&sb=domain_name&o=<?php echo $disp; ?>">Domain</a></th>
<th><a class="text-secondary" href="?<?php echo $url_query_strings_sb; ?>&sb=vendor_name&o=<?php echo $disp; ?>">Registrar</a></th> <th><a class="text-secondary" href="?<?php echo $url_query_strings_sb; ?>&sb=vendor_name&o=<?php echo $disp; ?>">Registrar</a></th>
@ -64,21 +64,21 @@ $num_rows = mysqli_fetch_row(mysqli_query($mysqli,"SELECT FOUND_ROWS()"));
<tbody> <tbody>
<?php <?php
while($row = mysqli_fetch_array($sql)){ while ($row = mysqli_fetch_array($sql)) {
$domain_id = $row['domain_id']; $domain_id = $row['domain_id'];
$domain_name = htmlentities($row['domain_name']); $domain_name = htmlentities($row['domain_name']);
$domain_registrar = htmlentities($row['domain_registrar']); $domain_registrar = htmlentities($row['domain_registrar']);
$domain_webhost = htmlentities($row['domain_webhost']); $domain_webhost = htmlentities($row['domain_webhost']);
$domain_expire = htmlentities($row['domain_expire']); $domain_expire = htmlentities($row['domain_expire']);
$domain_registrar_name = htmlentities($row['vendor_name']); $domain_registrar_name = htmlentities($row['vendor_name']);
if(empty($domain_registrar_name)){ if (empty($domain_registrar_name)) {
$domain_registrar_name = "-"; $domain_registrar_name = "-";
} }
$sql_domain_webhost = mysqli_query($mysqli,"SELECT vendor_name FROM vendors WHERE vendor_id = $domain_webhost"); $sql_domain_webhost = mysqli_query($mysqli,"SELECT vendor_name FROM vendors WHERE vendor_id = $domain_webhost");
$row = mysqli_fetch_array($sql_domain_webhost); $row = mysqli_fetch_array($sql_domain_webhost);
$domain_webhost_name = htmlentities($row['vendor_name']); $domain_webhost_name = htmlentities($row['vendor_name']);
if(empty($domain_webhost_name)){ if (empty($domain_webhost_name)) {
$domain_webhost_name = "-"; $domain_webhost_name = "-";
} }
@ -95,7 +95,7 @@ $num_rows = mysqli_fetch_row(mysqli_query($mysqli,"SELECT FOUND_ROWS()"));
</button> </button>
<div class="dropdown-menu"> <div class="dropdown-menu">
<a class="dropdown-item" href="#" data-toggle="modal" onclick="populateDomainEditModal(<?php echo $client_id, ",", $domain_id ?>)" data-target="#editDomainModal">Edit</a> <a class="dropdown-item" href="#" data-toggle="modal" onclick="populateDomainEditModal(<?php echo $client_id, ",", $domain_id ?>)" data-target="#editDomainModal">Edit</a>
<?php if($session_user_role == 3) { ?> <?php if ($session_user_role == 3) { ?>
<div class="dropdown-divider"></div> <div class="dropdown-divider"></div>
<a class="dropdown-item text-danger" href="post.php?delete_domain=<?php echo $domain_id; ?>">Delete</a> <a class="dropdown-item text-danger" href="post.php?delete_domain=<?php echo $domain_id; ?>">Delete</a>
<?php } ?> <?php } ?>
@ -127,7 +127,7 @@ include("client_domain_add_modal.php");
jQuery.get( jQuery.get(
"ajax.php", "ajax.php",
{domain_get_json_details: 'true', client_id: client_id, domain_id: domain_id}, {domain_get_json_details: 'true', client_id: client_id, domain_id: domain_id},
function(data){ function(data) {
// If we get a response from post.php, parse it as JSON // If we get a response from post.php, parse it as JSON
const response = JSON.parse(data); const response = JSON.parse(data);
@ -161,7 +161,7 @@ include("client_domain_add_modal.php");
// Populate dropdown // Populate dropdown
vendors.forEach(vendor => { vendors.forEach(vendor => {
if(parseInt(vendor.vendor_id) == parseInt(domain.domain_registrar)){ if (parseInt(vendor.vendor_id) == parseInt(domain.domain_registrar)) {
// Selected domain // Selected domain
registrarDropdown[registrarDropdown.length] = new Option(vendor.vendor_name, vendor.vendor_id, true, true); registrarDropdown[registrarDropdown.length] = new Option(vendor.vendor_name, vendor.vendor_id, true, true);
} }
@ -182,7 +182,7 @@ include("client_domain_add_modal.php");
// Populate dropdown // Populate dropdown
vendors.forEach(vendor => { vendors.forEach(vendor => {
if(parseInt(vendor.vendor_id) == parseInt(domain.domain_webhost)){ if (parseInt(vendor.vendor_id) == parseInt(domain.domain_webhost)) {
// Selected domain // Selected domain
webhostDropdown[webhostDropdown.length] = new Option(vendor.vendor_name, vendor.vendor_id, true, true); webhostDropdown[webhostDropdown.length] = new Option(vendor.vendor_name, vendor.vendor_id, true, true);
} }

14
client_edit_modal.php
View File

@ -60,10 +60,10 @@
<?php <?php
$referral_sql = mysqli_query($mysqli,"SELECT * FROM categories WHERE category_type = 'Referral' AND (category_archived_at > '$client_created_at' OR category_archived_at IS NULL) AND company_id = $session_company_id ORDER BY category_name ASC"); $referral_sql = mysqli_query($mysqli,"SELECT * FROM categories WHERE category_type = 'Referral' AND (category_archived_at > '$client_created_at' OR category_archived_at IS NULL) AND company_id = $session_company_id ORDER BY category_name ASC");
while($row = mysqli_fetch_array($referral_sql)){ while ($row = mysqli_fetch_array($referral_sql)) {
$referral = htmlentities($row['category_name']); $referral = htmlentities($row['category_name']);
?> ?>
<option <?php if($client_referral == $referral){ echo "selected"; } ?> > <?php echo $referral; ?></option> <option <?php if ($client_referral == $referral) { echo "selected"; } ?> > <?php echo $referral; ?></option>
<?php <?php
} }
@ -85,7 +85,7 @@
</div> </div>
</div> </div>
<?php if($config_module_enable_accounting){ ?> <?php if ($config_module_enable_accounting) { ?>
<div class="form-group"> <div class="form-group">
<label>Currency <strong class="text-danger">*</strong></label> <label>Currency <strong class="text-danger">*</strong></label>
<div class="input-group"> <div class="input-group">
@ -95,7 +95,7 @@
<select class="form-control select2" name="currency_code" required> <select class="form-control select2" name="currency_code" required>
<option value="">- Currency -</option> <option value="">- Currency -</option>
<?php foreach($currencies_array as $currency_code => $currency_name) { ?> <?php foreach($currencies_array as $currency_code => $currency_name) { ?>
<option <?php if($client_currency_code == $currency_code){ echo "selected"; } ?> value="<?php echo $currency_code; ?>"><?php echo "$currency_code - $currency_name"; ?></option> <option <?php if ($client_currency_code == $currency_code) { echo "selected"; } ?> value="<?php echo $currency_code; ?>"><?php echo "$currency_code - $currency_name"; ?></option>
<?php } ?> <?php } ?>
</select> </select>
</div> </div>
@ -110,7 +110,7 @@
<select class="form-control select2" name="net_terms"> <select class="form-control select2" name="net_terms">
<option value="">- Net Terms -</option> <option value="">- Net Terms -</option>
<?php foreach($net_terms_array as $net_term_value => $net_term_name) { ?> <?php foreach($net_terms_array as $net_term_value => $net_term_name) { ?>
<option <?php if($net_term_value == $client_net_terms) { echo "selected"; } ?> value="<?php echo $net_term_value; ?>"><?php echo $net_term_name; ?></option> <option <?php if ($net_term_value == $client_net_terms) { echo "selected"; } ?> value="<?php echo $net_term_value; ?>"><?php echo $net_term_name; ?></option>
<?php } ?> <?php } ?>
</select> </select>
</div> </div>
@ -140,7 +140,7 @@
$sql_tags_select = mysqli_query($mysqli,"SELECT * FROM tags WHERE tag_type = 1 AND company_id = $session_company_id ORDER BY tag_name ASC"); $sql_tags_select = mysqli_query($mysqli,"SELECT * FROM tags WHERE tag_type = 1 AND company_id = $session_company_id ORDER BY tag_name ASC");
while($row = mysqli_fetch_array($sql_tags_select)){ while ($row = mysqli_fetch_array($sql_tags_select)) {
$tag_id_select = $row['tag_id']; $tag_id_select = $row['tag_id'];
$tag_name_select = htmlentities($row['tag_name']); $tag_name_select = htmlentities($row['tag_name']);
$tag_color_select = htmlentities($row['tag_color']); $tag_color_select = htmlentities($row['tag_color']);
@ -149,7 +149,7 @@
?> ?>
<li class="list-group-item"> <li class="list-group-item">
<div class="form-check"> <div class="form-check">
<input type="checkbox" class="form-check-input" name="tags[]" value="<?php echo $tag_id_select; ?>" <?php if(in_array($tag_id_select, $client_tag_id_array)){ echo "checked"; } ?>> <input type="checkbox" class="form-check-input" name="tags[]" value="<?php echo $tag_id_select; ?>" <?php if (in_array($tag_id_select, $client_tag_id_array)) { echo "checked"; } ?>>
<label class="form-check-label ml-2 badge bg-<?php echo $tag_color_select; ?>"><?php echo "<i class='fa fw fa-$tag_icon_select'></i>"; ?> <?php echo $tag_name_select; ?></label> <label class="form-check-label ml-2 badge bg-<?php echo $tag_color_select; ?>"><?php echo "<i class='fa fw fa-$tag_icon_select'></i>"; ?> <?php echo $tag_name_select; ?></label>
</div> </div>
</li> </li>

6
client_events.php
View File

@ -4,7 +4,7 @@
<?php <?php
if(isset($_GET['calendar_id'])){ if (isset($_GET['calendar_id'])) {
$calendar_selected_id = intval($_GET['calendar_id']); $calendar_selected_id = intval($_GET['calendar_id']);
} }
@ -23,7 +23,7 @@ if(isset($_GET['calendar_id'])){
<?php <?php
//loop through IDs and create a modal for each //loop through IDs and create a modal for each
$sql = mysqli_query($mysqli,"SELECT * FROM calendars LEFT JOIN events ON calendar_id = event_calendar_id WHERE event_client_id = $client_id AND calendars.company_id = $session_company_id"); $sql = mysqli_query($mysqli,"SELECT * FROM calendars LEFT JOIN events ON calendar_id = event_calendar_id WHERE event_client_id = $client_id AND calendars.company_id = $session_company_id");
while($row = mysqli_fetch_array($sql)){ while ($row = mysqli_fetch_array($sql)) {
$event_id = $row['event_id']; $event_id = $row['event_id'];
$event_title = htmlentities($row['event_title']); $event_title = htmlentities($row['event_title']);
$event_description = htmlentities($row['event_description']); $event_description = htmlentities($row['event_description']);
@ -72,7 +72,7 @@ while($row = mysqli_fetch_array($sql)){
events: [ events: [
<?php <?php
$sql = mysqli_query($mysqli,"SELECT * FROM calendars LEFT JOIN events ON calendar_id = event_calendar_id WHERE event_client_id = $client_id AND calendars.company_id = $session_company_id"); $sql = mysqli_query($mysqli,"SELECT * FROM calendars LEFT JOIN events ON calendar_id = event_calendar_id WHERE event_client_id = $client_id AND calendars.company_id = $session_company_id");
while($row = mysqli_fetch_array($sql)){ while ($row = mysqli_fetch_array($sql)) {
$event_id = json_encode($row['event_id']); $event_id = json_encode($row['event_id']);
$event_title = json_encode($row['event_title']); $event_title = json_encode($row['event_title']);
$event_start = json_encode($row['event_start']); $event_start = json_encode($row['event_start']);

18
client_files.php
View File

@ -20,7 +20,7 @@ $num_of_files = mysqli_num_rows($sql_files_images) + mysqli_num_rows($sql_files_
<div class="card-body"> <div class="card-body">
<?php <?php
if($num_of_files == 0){ if ($num_of_files == 0) {
echo "<div style='text-align: center;'><h3 class='text-secondary'>No Records Here</h3></div>"; echo "<div style='text-align: center;'><h3 class='text-secondary'>No Records Here</h3></div>";
} }
@ -31,7 +31,7 @@ $num_of_files = mysqli_num_rows($sql_files_images) + mysqli_num_rows($sql_files_
<?php <?php
while($row = mysqli_fetch_array($sql_files_images)){ while ($row = mysqli_fetch_array($sql_files_images)) {
$file_id = $row['file_id']; $file_id = $row['file_id'];
$file_name = htmlentities($row['file_name']); $file_name = htmlentities($row['file_name']);
$file_reference_name = htmlentities($row['file_reference_name']); $file_reference_name = htmlentities($row['file_reference_name']);
@ -68,22 +68,22 @@ $num_of_files = mysqli_num_rows($sql_files_images) + mysqli_num_rows($sql_files_
<table class="table"> <table class="table">
<?php <?php
while($row = mysqli_fetch_array($sql_files_other)){ while ($row = mysqli_fetch_array($sql_files_other)) {
$file_id = $row['file_id']; $file_id = $row['file_id'];
$file_name = htmlentities($row['file_name']); $file_name = htmlentities($row['file_name']);
$file_reference_name = htmlentities($row['file_reference_name']); $file_reference_name = htmlentities($row['file_reference_name']);
$file_ext = htmlentities($row['file_ext']); $file_ext = htmlentities($row['file_ext']);
if($file_ext == 'pdf'){ if ($file_ext == 'pdf') {
$file_icon = "file-pdf"; $file_icon = "file-pdf";
}elseif($file_ext == 'gz' || $file_ext == 'tar' || $file_ext == 'zip' || $file_ext == '7z' || $file_ext == 'rar'){ }elseif ($file_ext == 'gz' || $file_ext == 'tar' || $file_ext == 'zip' || $file_ext == '7z' || $file_ext == 'rar') {
$file_icon = "file-archive"; $file_icon = "file-archive";
}elseif($file_ext == 'txt'){ }elseif ($file_ext == 'txt') {
$file_icon = "file-alt"; $file_icon = "file-alt";
}elseif($file_ext == 'doc' || $file_ext == 'docx'){ }elseif ($file_ext == 'doc' || $file_ext == 'docx') {
$file_icon = "file-word"; $file_icon = "file-word";
}elseif($file_ext == 'xls' || $file_ext == 'xlsx' || $file_ext == 'ods'){ }elseif ($file_ext == 'xls' || $file_ext == 'xlsx' || $file_ext == 'ods') {
$file_icon = "file-excel"; $file_icon = "file-excel";
}elseif($file_ext == 'mp3' || $file_ext == 'wav' || $file_ext == 'ogg'){ }elseif ($file_ext == 'mp3' || $file_ext == 'wav' || $file_ext == 'ogg') {
$file_icon = "file-audio"; $file_icon = "file-audio";
}else{ }else{
$file_icon = "file"; $file_icon = "file";

26
client_invoices.php
View File

@ -2,14 +2,14 @@
<?php <?php
if(!empty($_GET['sb'])){ if (!empty($_GET['sb'])) {
$sb = strip_tags(mysqli_real_escape_string($mysqli,$_GET['sb'])); $sb = strip_tags(mysqli_real_escape_string($mysqli,$_GET['sb']));
}else{ }else{
$sb = "invoice_number"; $sb = "invoice_number";
} }
// Reverse default sort // Reverse default sort
if(!isset($_GET['o'])){ if (!isset($_GET['o'])) {
$o = "DESC"; $o = "DESC";
$disp = "ASC"; $disp = "ASC";
} }
@ -41,7 +41,7 @@ $num_rows = mysqli_fetch_row(mysqli_query($mysqli,"SELECT FOUND_ROWS()"));
<div class="col-md-4"> <div class="col-md-4">
<div class="input-group mb-3 mb-md-0"> <div class="input-group mb-3 mb-md-0">
<input type="search" class="form-control" name="q" value="<?php if(isset($q)){ echo strip_tags(htmlentities($q)); } ?>" placeholder="Search Invoices"> <input type="search" class="form-control" name="q" value="<?php if (isset($q)) { echo strip_tags(htmlentities($q)); } ?>" placeholder="Search Invoices">
<div class="input-group-append"> <div class="input-group-append">
<button class="btn btn-dark"><i class="fa fa-search"></i></button> <button class="btn btn-dark"><i class="fa fa-search"></i></button>
</div> </div>
@ -59,7 +59,7 @@ $num_rows = mysqli_fetch_row(mysqli_query($mysqli,"SELECT FOUND_ROWS()"));
<hr> <hr>
<div class="table-responsive"> <div class="table-responsive">
<table class="table table-striped table-borderless table-hover"> <table class="table table-striped table-borderless table-hover">
<thead class="text-dark <?php if($num_rows[0] == 0){ echo "d-none"; } ?>"> <thead class="text-dark <?php if ($num_rows[0] == 0) { echo "d-none"; } ?>">
<tr> <tr>
<th><a class="text-secondary" href="?<?php echo $url_query_strings_sb; ?>&sb=invoice_number&o=<?php echo $disp; ?>">Number</a></th> <th><a class="text-secondary" href="?<?php echo $url_query_strings_sb; ?>&sb=invoice_number&o=<?php echo $disp; ?>">Number</a></th>
<th><a class="text-secondary" href="?<?php echo $url_query_strings_sb; ?>&sb=invoice_scope&o=<?php echo $disp; ?>">Scope</a></th> <th><a class="text-secondary" href="?<?php echo $url_query_strings_sb; ?>&sb=invoice_scope&o=<?php echo $disp; ?>">Scope</a></th>
@ -74,12 +74,12 @@ $num_rows = mysqli_fetch_row(mysqli_query($mysqli,"SELECT FOUND_ROWS()"));
<tbody> <tbody>
<?php <?php
while($row = mysqli_fetch_array($sql)){ while ($row = mysqli_fetch_array($sql)) {
$invoice_id = $row['invoice_id']; $invoice_id = $row['invoice_id'];
$invoice_prefix = htmlentities($row['invoice_prefix']); $invoice_prefix = htmlentities($row['invoice_prefix']);
$invoice_number = htmlentities($row['invoice_number']); $invoice_number = htmlentities($row['invoice_number']);
$invoice_scope = htmlentities($row['invoice_scope']); $invoice_scope = htmlentities($row['invoice_scope']);
if(empty($invoice_scope)){ if (empty($invoice_scope)) {
$invoice_scope_display = "-"; $invoice_scope_display = "-";
}else{ }else{
$invoice_scope_display = $invoice_scope; $invoice_scope_display = $invoice_scope;
@ -93,22 +93,22 @@ $num_rows = mysqli_fetch_row(mysqli_query($mysqli,"SELECT FOUND_ROWS()"));
$category_id = $row['category_id']; $category_id = $row['category_id'];
$category_name = htmlentities($row['category_name']); $category_name = htmlentities($row['category_name']);
if(($invoice_status == "Sent" || $invoice_status == "Partial" || $invoice_status == "Viewed") && strtotime($invoice_due) < time() ){ if (($invoice_status == "Sent" || $invoice_status == "Partial" || $invoice_status == "Viewed") && strtotime($invoice_due) < time() ) {
$overdue_color = "text-danger font-weight-bold"; $overdue_color = "text-danger font-weight-bold";
}else{ }else{
$overdue_color = ""; $overdue_color = "";
} }
//Set Badge color based off of invoice status //Set Badge color based off of invoice status
if($invoice_status == "Sent"){ if ($invoice_status == "Sent") {
$invoice_badge_color = "warning"; $invoice_badge_color = "warning";
}elseif($invoice_status == "Viewed"){ }elseif ($invoice_status == "Viewed") {
$invoice_badge_color = "info"; $invoice_badge_color = "info";
}elseif($invoice_status == "Partial"){ }elseif ($invoice_status == "Partial") {
$invoice_badge_color = "primary"; $invoice_badge_color = "primary";
}elseif($invoice_status == "Paid"){ }elseif ($invoice_status == "Paid") {
$invoice_badge_color = "success"; $invoice_badge_color = "success";
}elseif($invoice_status == "Cancelled"){ }elseif ($invoice_status == "Cancelled") {
$invoice_badge_color = "danger"; $invoice_badge_color = "danger";
}else{ }else{
$invoice_badge_color = "secondary"; $invoice_badge_color = "secondary";
@ -134,7 +134,7 @@ $num_rows = mysqli_fetch_row(mysqli_query($mysqli,"SELECT FOUND_ROWS()"));
<i class="fas fa-ellipsis-h"></i> <i class="fas fa-ellipsis-h"></i>
</button> </button>
<div class="dropdown-menu"> <div class="dropdown-menu">
<?php if(!empty($config_smtp_host)){ ?> <?php if (!empty($config_smtp_host)) { ?>
<a class="dropdown-item" href="post.php?email_invoice=<?php echo $invoice_id; ?>">Send</a> <a class="dropdown-item" href="post.php?email_invoice=<?php echo $invoice_id; ?>">Send</a>
<div class="dropdown-divider"></div> <div class="dropdown-divider"></div>
<?php } ?> <?php } ?>

6
client_location_add_modal.php
View File

@ -38,7 +38,7 @@
<input type="text" class="form-control" name="name" placeholder="Name of location" required autofocus> <input type="text" class="form-control" name="name" placeholder="Name of location" required autofocus>
<div class="input-group-append"> <div class="input-group-append">
<div class="input-group-text"> <div class="input-group-text">
<input type="checkbox" name="primary_location" value="1" <?php if($primary_location == 0){ echo "checked"; } ?>> <input type="checkbox" name="primary_location" value="1" <?php if ($primary_location == 0) { echo "checked"; } ?>>
</div> </div>
</div> </div>
</div> </div>
@ -93,7 +93,7 @@
<select class="form-control select2" name="country"> <select class="form-control select2" name="country">
<option value="">- Country -</option> <option value="">- Country -</option>
<?php foreach($countries_array as $country_name) { ?> <?php foreach($countries_array as $country_name) { ?>
<option <?php if($session_company_country == $country_name){ echo "selected"; } ?> ><?php echo $country_name; ?></option> <option <?php if ($session_company_country == $country_name) { echo "selected"; } ?> ><?php echo $country_name; ?></option>
<?php } ?> <?php } ?>
</select> </select>
</div> </div>
@ -114,7 +114,7 @@
<?php <?php
$sql_contacts = mysqli_query($mysqli,"SELECT * FROM contacts WHERE contact_archived_at IS NULL AND contact_client_id = $client_id ORDER BY contact_name ASC"); $sql_contacts = mysqli_query($mysqli,"SELECT * FROM contacts WHERE contact_archived_at IS NULL AND contact_client_id = $client_id ORDER BY contact_name ASC");
while($row = mysqli_fetch_array($sql_contacts)){ while ($row = mysqli_fetch_array($sql_contacts)) {
$contact_id = $row['contact_id']; $contact_id = $row['contact_id'];
$contact_name = htmlentities($row['contact_name']); $contact_name = htmlentities($row['contact_name']);
?> ?>

10
client_location_edit_modal.php
View File

@ -40,7 +40,7 @@
<input type="text" class="form-control" name="name" placeholder="Name of location" value="<?php echo $location_name; ?>" required> <input type="text" class="form-control" name="name" placeholder="Name of location" value="<?php echo $location_name; ?>" required>
<div class="input-group-append"> <div class="input-group-append">
<div class="input-group-text"> <div class="input-group-text">
<input type="checkbox" name="primary_location" value="1" <?php if($location_id == $primary_location){ echo "checked"; } ?>> <input type="checkbox" name="primary_location" value="1" <?php if ($location_id == $primary_location) { echo "checked"; } ?>>
</div> </div>
</div> </div>
</div> </div>
@ -95,7 +95,7 @@
<select class="form-control select2" name="country"> <select class="form-control select2" name="country">
<option value="">- Country -</option> <option value="">- Country -</option>
<?php foreach($countries_array as $country_name) { ?> <?php foreach($countries_array as $country_name) { ?>
<option <?php if($location_country == $country_name) { echo "selected"; } ?>><?php echo $country_name; ?></option> <option <?php if ($location_country == $country_name) { echo "selected"; } ?>><?php echo $country_name; ?></option>
<?php } ?> <?php } ?>
</select> </select>
</div> </div>
@ -116,12 +116,12 @@
<?php <?php
$sql_contacts = mysqli_query($mysqli,"SELECT * FROM contacts WHERE (contact_archived_at > '$location_created_at' OR contact_archived_at IS NULL) AND contact_client_id = $client_id ORDER BY contact_name ASC"); $sql_contacts = mysqli_query($mysqli,"SELECT * FROM contacts WHERE (contact_archived_at > '$location_created_at' OR contact_archived_at IS NULL) AND contact_client_id = $client_id ORDER BY contact_name ASC");
while($row = mysqli_fetch_array($sql_contacts)){ while ($row = mysqli_fetch_array($sql_contacts)) {
$contact_id_select = $row['contact_id']; $contact_id_select = $row['contact_id'];
$contact_name_select = htmlentities($row['contact_name']); $contact_name_select = htmlentities($row['contact_name']);
?> ?>
<option <?php if($location_contact_id == $contact_id_select){ echo "selected"; } ?> value="<?php echo $contact_id_select; ?>"><?php echo $contact_name_select; ?></option> <option <?php if ($location_contact_id == $contact_id_select) { echo "selected"; } ?> value="<?php echo $contact_id_select; ?>"><?php echo $contact_name_select; ?></option>
<?php <?php
} }
@ -159,7 +159,7 @@
<div class="tab-pane fade" id="pills-photo<?php echo $location_id; ?>"> <div class="tab-pane fade" id="pills-photo<?php echo $location_id; ?>">
<div class="mb-3" style="text-align: center;"> <div class="mb-3" style="text-align: center;">
<?php if(!empty($location_photo)){ ?> <?php if (!empty($location_photo)) { ?>
<img class="img-fluid" src="<?php echo "uploads/clients/$session_company_id/$client_id/$location_photo"; ?>"> <img class="img-fluid" src="<?php echo "uploads/clients/$session_company_id/$client_id/$location_photo"; ?>">
<?php } ?> <?php } ?>
</div> </div>

20
client_locations.php
View File

@ -2,11 +2,11 @@
<?php <?php
if(isset($_GET['q'])){ if (isset($_GET['q'])) {
$q = strip_tags(mysqli_real_escape_string($mysqli,$_GET['q'])); $q = strip_tags(mysqli_real_escape_string($mysqli,$_GET['q']));
//Phone Numbers //Phone Numbers
$phone_query = preg_replace("/[^0-9]/", '',$q); $phone_query = preg_replace("/[^0-9]/", '',$q);
if(empty($phone_query)){ if (empty($phone_query)) {
$phone_query = $q; $phone_query = $q;
} }
}else{ }else{
@ -14,7 +14,7 @@ if(isset($_GET['q'])){
$phone_query = ""; $phone_query = "";
} }
if(!empty($_GET['sb'])){ if (!empty($_GET['sb'])) {
$sb = strip_tags(mysqli_real_escape_string($mysqli,$_GET['sb'])); $sb = strip_tags(mysqli_real_escape_string($mysqli,$_GET['sb']));
}else{ }else{
$sb = "location_name"; $sb = "location_name";
@ -47,7 +47,7 @@ $num_rows = mysqli_fetch_row(mysqli_query($mysqli,"SELECT FOUND_ROWS()"));
<div class="col-md-4"> <div class="col-md-4">
<div class="input-group mb-3 mb-md-0"> <div class="input-group mb-3 mb-md-0">
<input type="search" class="form-control" name="q" value="<?php if(isset($q)){ echo strip_tags(htmlentities($q)); } ?>" placeholder="Search Locations"> <input type="search" class="form-control" name="q" value="<?php if (isset($q)) { echo strip_tags(htmlentities($q)); } ?>" placeholder="Search Locations">
<div class="input-group-append"> <div class="input-group-append">
<button class="btn btn-dark"><i class="fa fa-search"></i></button> <button class="btn btn-dark"><i class="fa fa-search"></i></button>
</div> </div>
@ -66,7 +66,7 @@ $num_rows = mysqli_fetch_row(mysqli_query($mysqli,"SELECT FOUND_ROWS()"));
<hr> <hr>
<div class="table-responsive"> <div class="table-responsive">
<table class="table table-striped table-borderless table-hover"> <table class="table table-striped table-borderless table-hover">
<thead class="<?php if($num_rows[0] == 0){ echo "d-none"; } ?>"> <thead class="<?php if ($num_rows[0] == 0) { echo "d-none"; } ?>">
<tr> <tr>
<th><a class="text-secondary" href="?<?php echo $url_query_strings_sb; ?>&sb=location_name&o=<?php echo $disp; ?>">Name</a></th> <th><a class="text-secondary" href="?<?php echo $url_query_strings_sb; ?>&sb=location_name&o=<?php echo $disp; ?>">Name</a></th>
<th><a class="text-secondary" href="?<?php echo $url_query_strings_sb; ?>&sb=location_address&o=<?php echo $disp; ?>">Address</a></th> <th><a class="text-secondary" href="?<?php echo $url_query_strings_sb; ?>&sb=location_address&o=<?php echo $disp; ?>">Address</a></th>
@ -78,7 +78,7 @@ $num_rows = mysqli_fetch_row(mysqli_query($mysqli,"SELECT FOUND_ROWS()"));
<tbody> <tbody>
<?php <?php
while($row = mysqli_fetch_array($sql)){ while ($row = mysqli_fetch_array($sql)) {
$location_id = $row['location_id']; $location_id = $row['location_id'];
$location_name = htmlentities($row['location_name']); $location_name = htmlentities($row['location_name']);
$location_country = htmlentities($row['location_country']); $location_country = htmlentities($row['location_country']);
@ -87,13 +87,13 @@ $num_rows = mysqli_fetch_row(mysqli_query($mysqli,"SELECT FOUND_ROWS()"));
$location_state = htmlentities($row['location_state']); $location_state = htmlentities($row['location_state']);
$location_zip = htmlentities($row['location_zip']); $location_zip = htmlentities($row['location_zip']);
$location_phone = formatPhoneNumber($row['location_phone']); $location_phone = formatPhoneNumber($row['location_phone']);
if(empty($location_phone)){ if (empty($location_phone)) {
$location_phone_display = "-"; $location_phone_display = "-";
}else{ }else{
$location_phone_display = $location_phone; $location_phone_display = $location_phone;
} }
$location_hours = htmlentities($row['location_hours']); $location_hours = htmlentities($row['location_hours']);
if(empty($location_hours)){ if (empty($location_hours)) {
$location_hours_display = "-"; $location_hours_display = "-";
}else{ }else{
$location_hours_display = $location_hours; $location_hours_display = $location_hours;
@ -102,7 +102,7 @@ $num_rows = mysqli_fetch_row(mysqli_query($mysqli,"SELECT FOUND_ROWS()"));
$location_notes = htmlentities($row['location_notes']); $location_notes = htmlentities($row['location_notes']);
$location_created_at = $row['location_created_at']; $location_created_at = $row['location_created_at'];
$location_contact_id = $row['location_contact_id']; $location_contact_id = $row['location_contact_id'];
if($location_id == $primary_location){ if ($location_id == $primary_location) {
$primary_location_display = "<p class='text-success'>Primary Location</p>"; $primary_location_display = "<p class='text-success'>Primary Location</p>";
}else{ }else{
$primary_location_display = ""; $primary_location_display = "";
@ -125,7 +125,7 @@ $num_rows = mysqli_fetch_row(mysqli_query($mysqli,"SELECT FOUND_ROWS()"));
</button> </button>
<div class="dropdown-menu"> <div class="dropdown-menu">
<a class="dropdown-item" href="#" data-toggle="modal" data-target="#editLocationModal<?php echo $location_id; ?>">Edit</a> <a class="dropdown-item" href="#" data-toggle="modal" data-target="#editLocationModal<?php echo $location_id; ?>">Edit</a>
<?php if($session_user_role == 3 && $location_id !== $primary_location) { ?> <?php if ($session_user_role == 3 && $location_id !== $primary_location) { ?>
<div class="dropdown-divider"></div> <div class="dropdown-divider"></div>
<a class="dropdown-item text-danger" href="post.php?archive_location=<?php echo $location_id; ?>">Archive</a> <a class="dropdown-item text-danger" href="post.php?archive_location=<?php echo $location_id; ?>">Archive</a>
<a class="dropdown-item text-danger" href="post.php?delete_location=<?php echo $location_id; ?>">Delete</a> <a class="dropdown-item text-danger" href="post.php?delete_location=<?php echo $location_id; ?>">Delete</a>

8
client_login_add_modal.php
View File

@ -103,7 +103,7 @@
<?php <?php
$sql = mysqli_query($mysqli,"SELECT * FROM contacts WHERE contact_client_id = $client_id ORDER BY contact_name ASC"); $sql = mysqli_query($mysqli,"SELECT * FROM contacts WHERE contact_client_id = $client_id ORDER BY contact_name ASC");
while($row = mysqli_fetch_array($sql)){ while ($row = mysqli_fetch_array($sql)) {
$contact_id = $row['contact_id']; $contact_id = $row['contact_id'];
$contact_name = htmlentities($row['contact_name']); $contact_name = htmlentities($row['contact_name']);
?> ?>
@ -127,7 +127,7 @@
<?php <?php
$sql_vendors = mysqli_query($mysqli,"SELECT * FROM vendors WHERE vendor_client_id = $client_id ORDER BY vendor_name ASC"); $sql_vendors = mysqli_query($mysqli,"SELECT * FROM vendors WHERE vendor_client_id = $client_id ORDER BY vendor_name ASC");
while($row = mysqli_fetch_array($sql_vendors)){ while ($row = mysqli_fetch_array($sql_vendors)) {
$vendor_id = $row['vendor_id']; $vendor_id = $row['vendor_id'];
$vendor_name = htmlentities($row['vendor_name']); $vendor_name = htmlentities($row['vendor_name']);
?> ?>
@ -151,7 +151,7 @@
<?php <?php
$sql = mysqli_query($mysqli,"SELECT * FROM assets WHERE asset_client_id = $client_id ORDER BY asset_name ASC"); $sql = mysqli_query($mysqli,"SELECT * FROM assets WHERE asset_client_id = $client_id ORDER BY asset_name ASC");
while($row = mysqli_fetch_array($sql)){ while ($row = mysqli_fetch_array($sql)) {
$asset_id = $row['asset_id']; $asset_id = $row['asset_id'];
$asset_name = htmlentities($row['asset_name']); $asset_name = htmlentities($row['asset_name']);
?> ?>
@ -175,7 +175,7 @@
<?php <?php
$sql = mysqli_query($mysqli,"SELECT * FROM software WHERE software_client_id = $client_id ORDER BY software_name ASC"); $sql = mysqli_query($mysqli,"SELECT * FROM software WHERE software_client_id = $client_id ORDER BY software_name ASC");
while($row = mysqli_fetch_array($sql)){ while ($row = mysqli_fetch_array($sql)) {
$software_id = $row['software_id']; $software_id = $row['software_id'];
$software_name = htmlentities($row['software_name']); $software_name = htmlentities($row['software_name']);
?> ?>

16
client_login_edit_modal.php
View File

@ -109,11 +109,11 @@
<?php <?php
$sql_contacts = mysqli_query($mysqli,"SELECT * FROM contacts WHERE contact_client_id = $client_id ORDER BY contact_name ASC"); $sql_contacts = mysqli_query($mysqli,"SELECT * FROM contacts WHERE contact_client_id = $client_id ORDER BY contact_name ASC");
while($row = mysqli_fetch_array($sql_contacts)){ while ($row = mysqli_fetch_array($sql_contacts)) {
$contact_id_select = $row['contact_id']; $contact_id_select = $row['contact_id'];
$contact_name_select = htmlentities($row['contact_name']); $contact_name_select = htmlentities($row['contact_name']);
?> ?>
<option <?php if($login_contact_id == $contact_id_select){ echo "selected"; } ?> value="<?php echo $contact_id_select; ?>"><?php echo $contact_name_select; ?></option> <option <?php if ($login_contact_id == $contact_id_select) { echo "selected"; } ?> value="<?php echo $contact_id_select; ?>"><?php echo $contact_name_select; ?></option>
<?php <?php
} }
@ -133,11 +133,11 @@
<?php <?php
$sql_vendors = mysqli_query($mysqli,"SELECT * FROM vendors WHERE vendor_client_id = $client_id ORDER BY vendor_name ASC"); $sql_vendors = mysqli_query($mysqli,"SELECT * FROM vendors WHERE vendor_client_id = $client_id ORDER BY vendor_name ASC");
while($row = mysqli_fetch_array($sql_vendors)){ while ($row = mysqli_fetch_array($sql_vendors)) {
$vendor_id_select = $row['vendor_id']; $vendor_id_select = $row['vendor_id'];
$vendor_name_select = htmlentities($row['vendor_name']); $vendor_name_select = htmlentities($row['vendor_name']);
?> ?>
<option <?php if($login_vendor_id == $vendor_id_select){ echo "selected"; } ?> value="<?php echo $vendor_id_select; ?>"><?php echo $vendor_name_select; ?></option> <option <?php if ($login_vendor_id == $vendor_id_select) { echo "selected"; } ?> value="<?php echo $vendor_id_select; ?>"><?php echo $vendor_name_select; ?></option>
<?php <?php
} }
@ -157,11 +157,11 @@
<?php <?php
$sql_assets = mysqli_query($mysqli,"SELECT * FROM assets WHERE asset_client_id = $client_id ORDER BY asset_name ASC"); $sql_assets = mysqli_query($mysqli,"SELECT * FROM assets WHERE asset_client_id = $client_id ORDER BY asset_name ASC");
while($row = mysqli_fetch_array($sql_assets)){ while ($row = mysqli_fetch_array($sql_assets)) {
$asset_id_select = $row['asset_id']; $asset_id_select = $row['asset_id'];
$asset_name_select = htmlentities($row['asset_name']); $asset_name_select = htmlentities($row['asset_name']);
?> ?>
<option <?php if($login_asset_id == $asset_id_select){ echo "selected"; } ?> value="<?php echo $asset_id_select; ?>"><?php echo $asset_name_select; ?></option> <option <?php if ($login_asset_id == $asset_id_select) { echo "selected"; } ?> value="<?php echo $asset_id_select; ?>"><?php echo $asset_name_select; ?></option>
<?php <?php
} }
@ -181,11 +181,11 @@
<?php <?php
$sql_software = mysqli_query($mysqli,"SELECT * FROM software WHERE software_client_id = $client_id ORDER BY software_name ASC"); $sql_software = mysqli_query($mysqli,"SELECT * FROM software WHERE software_client_id = $client_id ORDER BY software_name ASC");
while($row = mysqli_fetch_array($sql_software)){ while ($row = mysqli_fetch_array($sql_software)) {
$software_id_select = $row['software_id']; $software_id_select = $row['software_id'];
$software_name_select = htmlentities($row['software_name']); $software_name_select = htmlentities($row['software_name']);
?> ?>
<option <?php if($login_software_id == $software_id_select){ echo "selected"; } ?> value="<?php echo $software_id_select; ?>"><?php echo $software_name_select; ?></option> <option <?php if ($login_software_id == $software_id_select) { echo "selected"; } ?> value="<?php echo $software_id_select; ?>"><?php echo $software_name_select; ?></option>
<?php <?php
} }

22
client_logins.php
View File

@ -2,7 +2,7 @@
<?php <?php
if(!empty($_GET['sb'])){ if (!empty($_GET['sb'])) {
$sb = strip_tags(mysqli_real_escape_string($mysqli,$_GET['sb'])); $sb = strip_tags(mysqli_real_escape_string($mysqli,$_GET['sb']));
}else{ }else{
$sb = "login_name"; $sb = "login_name";
@ -34,7 +34,7 @@ $num_rows = mysqli_fetch_row(mysqli_query($mysqli,"SELECT FOUND_ROWS()"));
<div class="col-md-4"> <div class="col-md-4">
<div class="input-group mb-3 mb-md-0"> <div class="input-group mb-3 mb-md-0">
<input type="search" class="form-control" name="q" value="<?php if(isset($q)){ echo strip_tags(htmlentities($q)); } ?>" placeholder="Search Passwords"> <input type="search" class="form-control" name="q" value="<?php if (isset($q)) { echo strip_tags(htmlentities($q)); } ?>" placeholder="Search Passwords">
<div class="input-group-append"> <div class="input-group-append">
<button class="btn btn-dark"><i class="fa fa-search"></i></button> <button class="btn btn-dark"><i class="fa fa-search"></i></button>
</div> </div>
@ -53,7 +53,7 @@ $num_rows = mysqli_fetch_row(mysqli_query($mysqli,"SELECT FOUND_ROWS()"));
<hr> <hr>
<div class="table-responsive"> <div class="table-responsive">
<table class="table table-striped table-borderless table-hover"> <table class="table table-striped table-borderless table-hover">
<thead class="text-dark <?php if($num_rows[0] == 0){ echo "d-none"; } ?>"> <thead class="text-dark <?php if ($num_rows[0] == 0) { echo "d-none"; } ?>">
<tr> <tr>
<th><a class="text-secondary" href="?<?php echo $url_query_strings_sb; ?>&sb=login_name&o=<?php echo $disp; ?>">Name</a></th> <th><a class="text-secondary" href="?<?php echo $url_query_strings_sb; ?>&sb=login_name&o=<?php echo $disp; ?>">Name</a></th>
<th><a class="text-secondary" href="?<?php echo $url_query_strings_sb; ?>&sb=login_username&o=<?php echo $disp; ?>">Username</a></th> <th><a class="text-secondary" href="?<?php echo $url_query_strings_sb; ?>&sb=login_username&o=<?php echo $disp; ?>">Username</a></th>
@ -66,17 +66,17 @@ $num_rows = mysqli_fetch_row(mysqli_query($mysqli,"SELECT FOUND_ROWS()"));
<tbody> <tbody>
<?php <?php
while($row = mysqli_fetch_array($sql)){ while ($row = mysqli_fetch_array($sql)) {
$login_id = $row['login_id']; $login_id = $row['login_id'];
$login_name = htmlentities($row['login_name']); $login_name = htmlentities($row['login_name']);
$login_uri = htmlentities($row['login_uri']); $login_uri = htmlentities($row['login_uri']);
if(empty($login_uri)){ if (empty($login_uri)) {
$login_uri_display = "-"; $login_uri_display = "-";
}else{ }else{
$login_uri_display = "$login_uri<button class='btn btn-sm clipboardjs' data-clipboard-text='$login_uri'><i class='far fa-copy text-secondary'></i></button><a href='https://$login_uri' target='_blank'><i class='fa fa-external-link-alt text-secondary'></i></a>"; $login_uri_display = "$login_uri<button class='btn btn-sm clipboardjs' data-clipboard-text='$login_uri'><i class='far fa-copy text-secondary'></i></button><a href='https://$login_uri' target='_blank'><i class='fa fa-external-link-alt text-secondary'></i></a>";
} }
$login_username = htmlentities($row['login_username']); $login_username = htmlentities($row['login_username']);
if(empty($login_username)){ if (empty($login_username)) {
$login_username_display = "-"; $login_username_display = "-";
}else{ }else{
$login_username_display = "$login_username<button class='btn btn-sm clipboardjs' data-clipboard-text='$login_username'><i class='far fa-copy text-secondary'></i></button>"; $login_username_display = "$login_username<button class='btn btn-sm clipboardjs' data-clipboard-text='$login_username'><i class='far fa-copy text-secondary'></i></button>";
@ -84,7 +84,7 @@ $num_rows = mysqli_fetch_row(mysqli_query($mysqli,"SELECT FOUND_ROWS()"));
$login_password = htmlentities(decryptLoginEntry($row['login_password'])); $login_password = htmlentities(decryptLoginEntry($row['login_password']));
$login_otp_secret = htmlentities($row['login_otp_secret']); $login_otp_secret = htmlentities($row['login_otp_secret']);
$login_id_with_secret = '"' . $row['login_id'] . '","' . $row['login_otp_secret'] . '"'; $login_id_with_secret = '"' . $row['login_id'] . '","' . $row['login_otp_secret'] . '"';
if(empty($login_otp_secret)){ if (empty($login_otp_secret)) {
$otp_display = "-"; $otp_display = "-";
}else{ }else{
$otp_display = "<span onmouseenter='showOTP($login_id_with_secret)'><i class='far fa-clock'></i> <span id='otp_$login_id'><i>Hover..</i></span></span>"; $otp_display = "<span onmouseenter='showOTP($login_id_with_secret)'><i class='far fa-clock'></i> <span id='otp_$login_id'><i>Hover..</i></span></span>";
@ -117,7 +117,7 @@ $num_rows = mysqli_fetch_row(mysqli_query($mysqli,"SELECT FOUND_ROWS()"));
<div class="dropdown-menu"> <div class="dropdown-menu">
<a class="dropdown-item" href="#" data-toggle="modal" data-target="#editLoginModal<?php echo $login_id; ?>">Edit</a> <a class="dropdown-item" href="#" data-toggle="modal" data-target="#editLoginModal<?php echo $login_id; ?>">Edit</a>
<a class="dropdown-item" href="#" data-toggle="modal" data-target="#shareModal" onclick="populateShareModal(<?php echo "$client_id, 'Login', $login_id"; ?>)">Share</a> <a class="dropdown-item" href="#" data-toggle="modal" data-target="#shareModal" onclick="populateShareModal(<?php echo "$client_id, 'Login', $login_id"; ?>)">Share</a>
<?php if($session_user_role == 3) { ?> <?php if ($session_user_role == 3) { ?>
<div class="dropdown-divider"></div> <div class="dropdown-divider"></div>
<a class="dropdown-item text-danger" href="post.php?delete_login=<?php echo $login_id; ?>">Delete</a> <a class="dropdown-item text-danger" href="post.php?delete_login=<?php echo $login_id; ?>">Delete</a>
<?php } ?> <?php } ?>
@ -141,12 +141,12 @@ $num_rows = mysqli_fetch_row(mysqli_query($mysqli,"SELECT FOUND_ROWS()"));
</div> </div>
<script> <script>
function showOTP(id, secret){ function showOTP(id, secret) {
//Send a GET request to ajax.php as ajax.php?get_totp_token=true&totp_secret=SECRET //Send a GET request to ajax.php as ajax.php?get_totp_token=true&totp_secret=SECRET
jQuery.get( jQuery.get(
"ajax.php", "ajax.php",
{get_totp_token: 'true', totp_secret: secret}, {get_totp_token: 'true', totp_secret: secret},
function(data){ function(data) {
//If we get a response from post.php, parse it as JSON //If we get a response from post.php, parse it as JSON
const token = JSON.parse(data); const token = JSON.parse(data);
@ -156,7 +156,7 @@ $num_rows = mysqli_fetch_row(mysqli_query($mysqli,"SELECT FOUND_ROWS()"));
); );
} }
function generatePassword(){ function generatePassword() {
document.getElementById("password").value = "<?php echo bin2hex(random_bytes(8)); ?>" document.getElementById("password").value = "<?php echo bin2hex(random_bytes(8)); ?>"
} }
</script> </script>

12
client_logs.php
View File

@ -2,14 +2,14 @@
<?php <?php
if(!empty($_GET['sb'])){ if (!empty($_GET['sb'])) {
$sb = strip_tags(mysqli_real_escape_string($mysqli,$_GET['sb'])); $sb = strip_tags(mysqli_real_escape_string($mysqli,$_GET['sb']));
}else{ }else{
$sb = "log_id"; $sb = "log_id";
} }
// Reverse default sort // Reverse default sort
if(!isset($_GET['o'])){ if (!isset($_GET['o'])) {
$o = "DESC"; $o = "DESC";
$disp = "ASC"; $disp = "ASC";
} }
@ -40,7 +40,7 @@ $num_rows = mysqli_fetch_row(mysqli_query($mysqli,"SELECT FOUND_ROWS()"));
<div class="col-md-4"> <div class="col-md-4">
<div class="input-group mb-3 mb-md-0"> <div class="input-group mb-3 mb-md-0">
<input type="search" class="form-control" name="q" value="<?php if(isset($q)){ echo strip_tags(htmlentities($q)); } ?>" placeholder="Search Logs"> <input type="search" class="form-control" name="q" value="<?php if (isset($q)) { echo strip_tags(htmlentities($q)); } ?>" placeholder="Search Logs">
<div class="input-group-append"> <div class="input-group-append">
<button class="btn btn-dark"><i class="fa fa-search"></i></button> <button class="btn btn-dark"><i class="fa fa-search"></i></button>
</div> </div>
@ -55,7 +55,7 @@ $num_rows = mysqli_fetch_row(mysqli_query($mysqli,"SELECT FOUND_ROWS()"));
<hr> <hr>
<div class="table-responsive border"> <div class="table-responsive border">
<table class="table table-hover"> <table class="table table-hover">
<thead class="text-dark <?php if($num_rows[0] == 0){ echo "d-none"; } ?>"> <thead class="text-dark <?php if ($num_rows[0] == 0) { echo "d-none"; } ?>">
<tr> <tr>
<th><a class="text-dark" href="?<?php echo $url_query_strings_sb; ?>&sb=log_created_at&o=<?php echo $disp; ?>">Timestamp</a></th> <th><a class="text-dark" href="?<?php echo $url_query_strings_sb; ?>&sb=log_created_at&o=<?php echo $disp; ?>">Timestamp</a></th>
<th><a class="text-dark" href="?<?php echo $url_query_strings_sb; ?>&sb=user_name&o=<?php echo $disp; ?>">User</a></th> <th><a class="text-dark" href="?<?php echo $url_query_strings_sb; ?>&sb=user_name&o=<?php echo $disp; ?>">User</a></th>
@ -69,7 +69,7 @@ $num_rows = mysqli_fetch_row(mysqli_query($mysqli,"SELECT FOUND_ROWS()"));
<tbody> <tbody>
<?php <?php
while($row = mysqli_fetch_array($sql)){ while ($row = mysqli_fetch_array($sql)) {
$log_id = $row['log_id']; $log_id = $row['log_id'];
$log_type = htmlentities($row['log_type']); $log_type = htmlentities($row['log_type']);
$log_action = htmlentities($row['log_action']); $log_action = htmlentities($row['log_action']);
@ -81,7 +81,7 @@ $num_rows = mysqli_fetch_row(mysqli_query($mysqli,"SELECT FOUND_ROWS()"));
$log_created_at = $row['log_created_at']; $log_created_at = $row['log_created_at'];
$user_id = $row['user_id']; $user_id = $row['user_id'];
$user_name = htmlentities($row['user_name']); $user_name = htmlentities($row['user_name']);
if(empty($user_name)){ if (empty($user_name)) {
$user_name_display = "-"; $user_name_display = "-";
}else{ }else{
$user_name_display = $user_name; $user_name_display = $user_name;

2
client_network_add_modal.php
View File

@ -72,7 +72,7 @@
<?php <?php
$sql = mysqli_query($mysqli,"SELECT * FROM locations WHERE location_archived_at IS NULL AND location_client_id = $client_id ORDER BY location_name ASC"); $sql = mysqli_query($mysqli,"SELECT * FROM locations WHERE location_archived_at IS NULL AND location_client_id = $client_id ORDER BY location_name ASC");
while($row = mysqli_fetch_array($sql)){ while ($row = mysqli_fetch_array($sql)) {
$location_id = $row['location_id']; $location_id = $row['location_id'];
$location_name = htmlentities($row['location_name']); $location_name = htmlentities($row['location_name']);
?> ?>

20
client_networks.php
View File

@ -2,7 +2,7 @@
<?php <?php
if(!empty($_GET['sb'])){ if (!empty($_GET['sb'])) {
$sb = strip_tags(mysqli_real_escape_string($mysqli,$_GET['sb'])); $sb = strip_tags(mysqli_real_escape_string($mysqli,$_GET['sb']));
}else{ }else{
$sb = "network_name"; $sb = "network_name";
@ -35,7 +35,7 @@ $num_rows = mysqli_fetch_row(mysqli_query($mysqli,"SELECT FOUND_ROWS()"));
<div class="col-md-4"> <div class="col-md-4">
<div class="input-group mb-3 mb-md-0"> <div class="input-group mb-3 mb-md-0">
<input type="search" class="form-control" name="q" value="<?php if(isset($q)){ echo strip_tags(htmlentities($q)); } ?>" placeholder="Search Networks"> <input type="search" class="form-control" name="q" value="<?php if (isset($q)) { echo strip_tags(htmlentities($q)); } ?>" placeholder="Search Networks">
<div class="input-group-append"> <div class="input-group-append">
<button class="btn btn-dark"><i class="fa fa-search"></i></button> <button class="btn btn-dark"><i class="fa fa-search"></i></button>
</div> </div>
@ -53,7 +53,7 @@ $num_rows = mysqli_fetch_row(mysqli_query($mysqli,"SELECT FOUND_ROWS()"));
<hr> <hr>
<div class="table-responsive"> <div class="table-responsive">
<table class="table table-striped table-borderless table-hover"> <table class="table table-striped table-borderless table-hover">
<thead class="text-dark <?php if($num_rows[0] == 0){ echo "d-none"; } ?>"> <thead class="text-dark <?php if ($num_rows[0] == 0) { echo "d-none"; } ?>">
<tr> <tr>
<th><a class="text-secondary" href="?<?php echo $url_query_strings_sb; ?>&sb=network_name&o=<?php echo $disp; ?>">Name</a></th> <th><a class="text-secondary" href="?<?php echo $url_query_strings_sb; ?>&sb=network_name&o=<?php echo $disp; ?>">Name</a></th>
<th><a class="text-secondary" href="?<?php echo $url_query_strings_sb; ?>&sb=network_vlan&o=<?php echo $disp; ?>">vLAN</a></th> <th><a class="text-secondary" href="?<?php echo $url_query_strings_sb; ?>&sb=network_vlan&o=<?php echo $disp; ?>">vLAN</a></th>
@ -67,11 +67,11 @@ $num_rows = mysqli_fetch_row(mysqli_query($mysqli,"SELECT FOUND_ROWS()"));
<tbody> <tbody>
<?php <?php
while($row = mysqli_fetch_array($sql)){ while ($row = mysqli_fetch_array($sql)) {
$network_id = $row['network_id']; $network_id = $row['network_id'];
$network_name = htmlentities($row['network_name']); $network_name = htmlentities($row['network_name']);
$network_vlan = htmlentities($row['network_vlan']); $network_vlan = htmlentities($row['network_vlan']);
if(empty($network_vlan)){ if (empty($network_vlan)) {
$network_vlan_display = "-"; $network_vlan_display = "-";
}else{ }else{
$network_vlan_display = $network_vlan; $network_vlan_display = $network_vlan;
@ -79,14 +79,14 @@ $num_rows = mysqli_fetch_row(mysqli_query($mysqli,"SELECT FOUND_ROWS()"));
$network = htmlentities($row['network']); $network = htmlentities($row['network']);
$network_gateway = htmlentities($row['network_gateway']); $network_gateway = htmlentities($row['network_gateway']);
$network_dhcp_range = htmlentities($row['network_dhcp_range']); $network_dhcp_range = htmlentities($row['network_dhcp_range']);
if(empty($network_dhcp_range)){ if (empty($network_dhcp_range)) {
$network_dhcp_range_display = "-"; $network_dhcp_range_display = "-";
}else{ }else{
$network_dhcp_range_display = $network_dhcp_range; $network_dhcp_range_display = $network_dhcp_range;
} }
$network_location_id = $row['network_location_id']; $network_location_id = $row['network_location_id'];
$location_name = htmlentities($row['location_name']); $location_name = htmlentities($row['location_name']);
if(empty($location_name)){ if (empty($location_name)) {
$location_name_display = "-"; $location_name_display = "-";
}else{ }else{
$location_name_display = $location_name; $location_name_display = $location_name;
@ -109,7 +109,7 @@ $num_rows = mysqli_fetch_row(mysqli_query($mysqli,"SELECT FOUND_ROWS()"));
</button> </button>
<div class="dropdown-menu"> <div class="dropdown-menu">
<a class="dropdown-item" href="#" data-toggle="modal" onclick="populateNetworkEditModal(<?php echo $client_id, ",", $network_id ?>)" data-target="#editNetworkModal">Edit</a> <a class="dropdown-item" href="#" data-toggle="modal" onclick="populateNetworkEditModal(<?php echo $client_id, ",", $network_id ?>)" data-target="#editNetworkModal">Edit</a>
<?php if($session_user_role == 3) { ?> <?php if ($session_user_role == 3) { ?>
<div class="dropdown-divider"></div> <div class="dropdown-divider"></div>
<a class="dropdown-item text-danger" href="post.php?delete_network=<?php echo $network_id; ?>">Delete</a> <a class="dropdown-item text-danger" href="post.php?delete_network=<?php echo $network_id; ?>">Delete</a>
<?php } ?> <?php } ?>
@ -145,7 +145,7 @@ function populateNetworkEditModal(client_id, network_id) {
jQuery.get( jQuery.get(
"ajax.php", "ajax.php",
{network_get_json_details: 'true', client_id: client_id, network_id: network_id}, {network_get_json_details: 'true', client_id: client_id, network_id: network_id},
function(data){ function(data) {
// If we get a response from post.php, parse it as JSON // If we get a response from post.php, parse it as JSON
const response = JSON.parse(data); const response = JSON.parse(data);
@ -175,7 +175,7 @@ function populateNetworkEditModal(client_id, network_id) {
// Populate location dropdown // Populate location dropdown
locations.forEach(location => { locations.forEach(location => {
if(parseInt(location.location_id) == parseInt(network.network_location_id)){ if (parseInt(location.location_id) == parseInt(network.network_location_id)) {
locationDropdown[locationDropdown.length] = new Option(location.location_name, location.location_id, true, true); locationDropdown[locationDropdown.length] = new Option(location.location_name, location.location_id, true, true);
} }
else{ else{

30
client_overview.php
View File

@ -44,7 +44,7 @@ $sql_domains_expiring = mysqli_query($mysqli,"SELECT * FROM domains
</div> </div>
<?php if(mysqli_num_rows($sql_important_contacts) > 0 ){ ?> <?php if (mysqli_num_rows($sql_important_contacts) > 0 ) { ?>
<div class="col-md-4"> <div class="col-md-4">
@ -57,7 +57,7 @@ $sql_domains_expiring = mysqli_query($mysqli,"SELECT * FROM domains
<table class="table table-borderless table-sm"> <table class="table table-borderless table-sm">
<?php <?php
while($row = mysqli_fetch_array($sql_important_contacts)){ while ($row = mysqli_fetch_array($sql_important_contacts)) {
$contact_id = $row['contact_id']; $contact_id = $row['contact_id'];
$contact_name = htmlentities($row['contact_name']); $contact_name = htmlentities($row['contact_name']);
$contact_title = htmlentities($row['contact_title']); $contact_title = htmlentities($row['contact_title']);
@ -74,10 +74,10 @@ $sql_domains_expiring = mysqli_query($mysqli,"SELECT * FROM domains
<small class="text-secondary"><?php echo $contact_title; ?></small> <small class="text-secondary"><?php echo $contact_title; ?></small>
</td> </td>
<td> <td>
<?php if(!empty($contact_phone)){ ?> <?php if (!empty($contact_phone)) { ?>
<?php echo "<i class='fa fa-fw fa-phone text-secondary'></i> $contact_phone $contact_extension"; ?> <?php echo "<i class='fa fa-fw fa-phone text-secondary'></i> $contact_phone $contact_extension"; ?>
<?php } ?> <?php } ?>
<?php if(!empty($contact_mobile)){ ?> <?php if (!empty($contact_mobile)) { ?>
<br> <br>
<div class="text-secondary"><i class='fa fa-fw fa-mobile-alt text-secondary'></i> <?php echo "$contact_mobile"; ?></div> <div class="text-secondary"><i class='fa fa-fw fa-mobile-alt text-secondary'></i> <?php echo "$contact_mobile"; ?></div>
<?php } ?> <?php } ?>
@ -94,7 +94,7 @@ $sql_domains_expiring = mysqli_query($mysqli,"SELECT * FROM domains
<?php } ?> <?php } ?>
<?php if(mysqli_num_rows($sql_contacts) > 0 || mysqli_num_rows($sql_vendors) > 0 ){ ?> <?php if (mysqli_num_rows($sql_contacts) > 0 || mysqli_num_rows($sql_vendors) > 0 ) { ?>
<div class="col-md-3"> <div class="col-md-3">
<div class="card card-dark mb-3"> <div class="card card-dark mb-3">
@ -105,7 +105,7 @@ $sql_domains_expiring = mysqli_query($mysqli,"SELECT * FROM domains
<?php <?php
while($row = mysqli_fetch_array($sql_contacts)){ while ($row = mysqli_fetch_array($sql_contacts)) {
$contact_id = $row['contact_id']; $contact_id = $row['contact_id'];
$contact_name = htmlentities($row['contact_name']); $contact_name = htmlentities($row['contact_name']);
$contact_updated_at = $row['contact_updated_at']; $contact_updated_at = $row['contact_updated_at'];
@ -121,7 +121,7 @@ $sql_domains_expiring = mysqli_query($mysqli,"SELECT * FROM domains
<?php <?php
while($row = mysqli_fetch_array($sql_vendors)){ while ($row = mysqli_fetch_array($sql_vendors)) {
$vendor_id = $row['vendor_id']; $vendor_id = $row['vendor_id'];
$vendor_name = htmlentities($row['vendor_name']); $vendor_name = htmlentities($row['vendor_name']);
$vendor_updated_at = $row['vendor_updated_at']; $vendor_updated_at = $row['vendor_updated_at'];
@ -140,7 +140,7 @@ $sql_domains_expiring = mysqli_query($mysqli,"SELECT * FROM domains
</div> </div>
<?php } ?> <?php } ?>
<?php if(mysqli_num_rows($sql_contacts) > 0 || mysqli_num_rows($sql_vendors) > 0 ){ ?> <?php if (mysqli_num_rows($sql_contacts) > 0 || mysqli_num_rows($sql_vendors) > 0 ) { ?>
<div class="col-md-3"> <div class="col-md-3">
@ -152,7 +152,7 @@ $sql_domains_expiring = mysqli_query($mysqli,"SELECT * FROM domains
<?php <?php
while($row = mysqli_fetch_array($sql_contacts)){ while ($row = mysqli_fetch_array($sql_contacts)) {
$contact_id = $row['contact_id']; $contact_id = $row['contact_id'];
$contact_name = htmlentities($row['contact_name']); $contact_name = htmlentities($row['contact_name']);
$contact_updated_at = $row['contact_updated_at']; $contact_updated_at = $row['contact_updated_at'];
@ -168,7 +168,7 @@ $sql_domains_expiring = mysqli_query($mysqli,"SELECT * FROM domains
<?php <?php
while($row = mysqli_fetch_array($sql_vendors)){ while ($row = mysqli_fetch_array($sql_vendors)) {
$vendor_id = $row['vendor_id']; $vendor_id = $row['vendor_id'];
$vendor_name = htmlentities($row['vendor_name']); $vendor_name = htmlentities($row['vendor_name']);
$vendor_updated_at = $row['vendor_updated_at']; $vendor_updated_at = $row['vendor_updated_at'];
@ -198,7 +198,7 @@ $sql_domains_expiring = mysqli_query($mysqli,"SELECT * FROM domains
<?php <?php
while($row = mysqli_fetch_array($sql_domains_expiring)){ while ($row = mysqli_fetch_array($sql_domains_expiring)) {
$domain_id = $row['domain_id']; $domain_id = $row['domain_id'];
$domain_name = htmlentities($row['domain_name']); $domain_name = htmlentities($row['domain_name']);
$domain_expire = $row['domain_expire']; $domain_expire = $row['domain_expire'];
@ -215,7 +215,7 @@ $sql_domains_expiring = mysqli_query($mysqli,"SELECT * FROM domains
<?php <?php
while($row = mysqli_fetch_array($sql_asset_warranties_expiring)){ while ($row = mysqli_fetch_array($sql_asset_warranties_expiring)) {
$asset_id = $row['asset_id']; $asset_id = $row['asset_id'];
$asset_name = htmlentities($row['asset_name']); $asset_name = htmlentities($row['asset_name']);
$asset_warranty_expire = $row['asset_warranty_expire']; $asset_warranty_expire = $row['asset_warranty_expire'];
@ -234,7 +234,7 @@ $sql_domains_expiring = mysqli_query($mysqli,"SELECT * FROM domains
<?php <?php
while($row = mysqli_fetch_array($sql_asset_retire)){ while ($row = mysqli_fetch_array($sql_asset_retire)) {
$asset_id = $row['asset_id']; $asset_id = $row['asset_id'];
$asset_name = htmlentities($row['asset_name']); $asset_name = htmlentities($row['asset_name']);
$asset_install_date = $row['asset_install_date']; $asset_install_date = $row['asset_install_date'];
@ -254,7 +254,7 @@ $sql_domains_expiring = mysqli_query($mysqli,"SELECT * FROM domains
</div> </div>
</div> </div>
<?php if(mysqli_num_rows($sql_tickets_stale) > 0){ ?> <?php if (mysqli_num_rows($sql_tickets_stale) > 0) { ?>
<!-- Stale Tickets --> <!-- Stale Tickets -->
@ -267,7 +267,7 @@ $sql_domains_expiring = mysqli_query($mysqli,"SELECT * FROM domains
<tbody> <tbody>
<?php <?php
while($row = mysqli_fetch_array($sql_tickets_stale)){ while ($row = mysqli_fetch_array($sql_tickets_stale)) {
$ticket_id = $row['ticket_id']; $ticket_id = $row['ticket_id'];
$ticket_prefix = htmlentities($row['ticket_prefix']); $ticket_prefix = htmlentities($row['ticket_prefix']);
$ticket_number = $row['ticket_number']; $ticket_number = $row['ticket_number'];

12
client_payments.php
View File

@ -2,14 +2,14 @@
<?php <?php
if(!empty($_GET['sb'])){ if (!empty($_GET['sb'])) {
$sb = strip_tags(mysqli_real_escape_string($mysqli,$_GET['sb'])); $sb = strip_tags(mysqli_real_escape_string($mysqli,$_GET['sb']));
}else{ }else{
$sb = "payment_date"; $sb = "payment_date";
} }
// Reverse default sort // Reverse default sort
if(!isset($_GET['o'])){ if (!isset($_GET['o'])) {
$o = "DESC"; $o = "DESC";
$disp = "ASC"; $disp = "ASC";
} }
@ -39,7 +39,7 @@ $num_rows = mysqli_fetch_row(mysqli_query($mysqli,"SELECT FOUND_ROWS()"));
<div class="col-md-4"> <div class="col-md-4">
<div class="input-group mb-3 mb-md-0"> <div class="input-group mb-3 mb-md-0">
<input type="search" class="form-control" name="q" value="<?php if(isset($q)){ echo strip_tags(htmlentities($q)); } ?>" placeholder="Search Payments"> <input type="search" class="form-control" name="q" value="<?php if (isset($q)) { echo strip_tags(htmlentities($q)); } ?>" placeholder="Search Payments">
<div class="input-group-append"> <div class="input-group-append">
<button class="btn btn-dark"><i class="fa fa-search"></i></button> <button class="btn btn-dark"><i class="fa fa-search"></i></button>
</div> </div>
@ -57,7 +57,7 @@ $num_rows = mysqli_fetch_row(mysqli_query($mysqli,"SELECT FOUND_ROWS()"));
<hr> <hr>
<div class="table-responsive"> <div class="table-responsive">
<table class="table table-striped table-borderless table-hover"> <table class="table table-striped table-borderless table-hover">
<thead class="text-dark <?php if($num_rows[0] == 0){ echo "d-none"; } ?>"> <thead class="text-dark <?php if ($num_rows[0] == 0) { echo "d-none"; } ?>">
<tr> <tr>
<th><a class="text-secondary" href="?<?php echo $url_query_strings_sb; ?>&sb=payment_date&o=<?php echo $disp; ?>">Payment Date</a></th> <th><a class="text-secondary" href="?<?php echo $url_query_strings_sb; ?>&sb=payment_date&o=<?php echo $disp; ?>">Payment Date</a></th>
<th><a class="text-secondary" href="?<?php echo $url_query_strings_sb; ?>&sb=invoice_date&o=<?php echo $disp; ?>">Invoice Date</a></th> <th><a class="text-secondary" href="?<?php echo $url_query_strings_sb; ?>&sb=invoice_date&o=<?php echo $disp; ?>">Invoice Date</a></th>
@ -72,7 +72,7 @@ $num_rows = mysqli_fetch_row(mysqli_query($mysqli,"SELECT FOUND_ROWS()"));
<tbody> <tbody>
<?php <?php
while($row = mysqli_fetch_array($sql)){ while ($row = mysqli_fetch_array($sql)) {
$invoice_id = $row['invoice_id']; $invoice_id = $row['invoice_id'];
$invoice_prefix = htmlentities($row['invoice_prefix']); $invoice_prefix = htmlentities($row['invoice_prefix']);
$invoice_number = htmlentities($row['invoice_number']); $invoice_number = htmlentities($row['invoice_number']);
@ -83,7 +83,7 @@ $num_rows = mysqli_fetch_row(mysqli_query($mysqli,"SELECT FOUND_ROWS()"));
$payment_date = $row['payment_date']; $payment_date = $row['payment_date'];
$payment_method = htmlentities($row['payment_method']); $payment_method = htmlentities($row['payment_method']);
$payment_reference = htmlentities($row['payment_reference']); $payment_reference = htmlentities($row['payment_reference']);
if(empty($payment_reference)){ if (empty($payment_reference)) {
$payment_reference_display = "-"; $payment_reference_display = "-";
}else{ }else{
$payment_reference_display = $payment_reference; $payment_reference_display = $payment_reference;

24
client_quotes.php
View File

@ -2,14 +2,14 @@
<?php <?php
if(!empty($_GET['sb'])){ if (!empty($_GET['sb'])) {
$sb = strip_tags(mysqli_real_escape_string($mysqli,$_GET['sb'])); $sb = strip_tags(mysqli_real_escape_string($mysqli,$_GET['sb']));
}else{ }else{
$sb = "quote_number"; $sb = "quote_number";
} }
// Reverse default sort // Reverse default sort
if(!isset($_GET['o'])){ if (!isset($_GET['o'])) {
$o = "DESC"; $o = "DESC";
$disp = "ASC"; $disp = "ASC";
} }
@ -41,7 +41,7 @@ $num_rows = mysqli_fetch_row(mysqli_query($mysqli,"SELECT FOUND_ROWS()"));
<div class="col-md-4"> <div class="col-md-4">
<div class="input-group mb-3 mb-md-0"> <div class="input-group mb-3 mb-md-0">
<input type="search" class="form-control" name="q" value="<?php if(isset($q)){ echo strip_tags(htmlentities($q)); } ?>" placeholder="Search Quotes"> <input type="search" class="form-control" name="q" value="<?php if (isset($q)) { echo strip_tags(htmlentities($q)); } ?>" placeholder="Search Quotes">
<div class="input-group-append"> <div class="input-group-append">
<button class="btn btn-dark"><i class="fa fa-search"></i></button> <button class="btn btn-dark"><i class="fa fa-search"></i></button>
</div> </div>
@ -59,7 +59,7 @@ $num_rows = mysqli_fetch_row(mysqli_query($mysqli,"SELECT FOUND_ROWS()"));
<hr> <hr>
<div class="table-responsive"> <div class="table-responsive">
<table class="table table-striped table-borderless table-hover"> <table class="table table-striped table-borderless table-hover">
<thead class="text-dark <?php if($num_rows[0] == 0){ echo "d-none"; } ?>"> <thead class="text-dark <?php if ($num_rows[0] == 0) { echo "d-none"; } ?>">
<tr> <tr>
<th><a class="text-secondary" href="?<?php echo $url_query_strings_sb; ?>&sb=quote_number&o=<?php echo $disp; ?>">Number</a></th> <th><a class="text-secondary" href="?<?php echo $url_query_strings_sb; ?>&sb=quote_number&o=<?php echo $disp; ?>">Number</a></th>
<th><a class="text-secondary" href="?<?php echo $url_query_strings_sb; ?>&sb=quote_scope&o=<?php echo $disp; ?>">Scope</a></th> <th><a class="text-secondary" href="?<?php echo $url_query_strings_sb; ?>&sb=quote_scope&o=<?php echo $disp; ?>">Scope</a></th>
@ -73,12 +73,12 @@ $num_rows = mysqli_fetch_row(mysqli_query($mysqli,"SELECT FOUND_ROWS()"));
<tbody> <tbody>
<?php <?php
while($row = mysqli_fetch_array($sql)){ while ($row = mysqli_fetch_array($sql)) {
$quote_id = $row['quote_id']; $quote_id = $row['quote_id'];
$quote_prefix = htmlentities($row['quote_prefix']); $quote_prefix = htmlentities($row['quote_prefix']);
$quote_number = htmlentities($row['quote_number']); $quote_number = htmlentities($row['quote_number']);
$quote_scope = htmlentities($row['quote_scope']); $quote_scope = htmlentities($row['quote_scope']);
if(empty($quote_scope)){ if (empty($quote_scope)) {
$quote_scope_display = "-"; $quote_scope_display = "-";
}else{ }else{
$quote_scope_display = $quote_scope; $quote_scope_display = $quote_scope;
@ -92,15 +92,15 @@ $num_rows = mysqli_fetch_row(mysqli_query($mysqli,"SELECT FOUND_ROWS()"));
$category_name = htmlentities($row['category_name']); $category_name = htmlentities($row['category_name']);
//Set Badge color based off of quote status //Set Badge color based off of quote status
if($quote_status == "Sent"){ if ($quote_status == "Sent") {
$quote_badge_color = "warning text-white"; $quote_badge_color = "warning text-white";
}elseif($quote_status == "Viewed"){ }elseif ($quote_status == "Viewed") {
$quote_badge_color = "primary"; $quote_badge_color = "primary";
}elseif($quote_status == "Accepted"){ }elseif ($quote_status == "Accepted") {
$quote_badge_color = "success"; $quote_badge_color = "success";
}elseif($quote_status == "Declined"){ }elseif ($quote_status == "Declined") {
$quote_badge_color = "danger"; $quote_badge_color = "danger";
}elseif($quote_status == "Invoiced"){ }elseif ($quote_status == "Invoiced") {
$quote_badge_color = "info"; $quote_badge_color = "info";
}else{ }else{
$quote_badge_color = "secondary"; $quote_badge_color = "secondary";
@ -128,7 +128,7 @@ $num_rows = mysqli_fetch_row(mysqli_query($mysqli,"SELECT FOUND_ROWS()"));
<a class="dropdown-item" href="#" data-toggle="modal" data-target="#editQuoteModal<?php echo $quote_id; ?>">Edit</a> <a class="dropdown-item" href="#" data-toggle="modal" data-target="#editQuoteModal<?php echo $quote_id; ?>">Edit</a>
<a class="dropdown-item" href="#" data-toggle="modal" data-target="#addQuoteCopyModal<?php echo $quote_id; ?>">Copy</a> <a class="dropdown-item" href="#" data-toggle="modal" data-target="#addQuoteCopyModal<?php echo $quote_id; ?>">Copy</a>
<div class="dropdown-divider"></div> <div class="dropdown-divider"></div>
<?php if(!empty($config_smtp_host)){ ?> <?php if (!empty($config_smtp_host)) { ?>
<a class="dropdown-item" href="post.php?email_quote=<?php echo $quote_id; ?>">Send</a> <a class="dropdown-item" href="post.php?email_quote=<?php echo $quote_id; ?>">Send</a>
<div class="dropdown-divider"></div> <div class="dropdown-divider"></div>
<?php } ?> <?php } ?>

12
client_recurring_invoices.php
View File

@ -2,7 +2,7 @@
<?php <?php
if(!empty($_GET['sb'])){ if (!empty($_GET['sb'])) {
$sb = strip_tags(mysqli_real_escape_string($mysqli,$_GET['sb'])); $sb = strip_tags(mysqli_real_escape_string($mysqli,$_GET['sb']));
}else{ }else{
$sb = "recurring_id"; $sb = "recurring_id";
@ -35,7 +35,7 @@ $num_rows = mysqli_fetch_row(mysqli_query($mysqli,"SELECT FOUND_ROWS()"));
<div class="col-md-4"> <div class="col-md-4">
<div class="input-group mb-3 mb-md-0"> <div class="input-group mb-3 mb-md-0">
<input type="search" class="form-control" name="q" value="<?php if(isset($q)){ echo strip_tags(htmlentities($q)); } ?>" placeholder="Search Recurring Invoices"> <input type="search" class="form-control" name="q" value="<?php if (isset($q)) { echo strip_tags(htmlentities($q)); } ?>" placeholder="Search Recurring Invoices">
<div class="input-group-append"> <div class="input-group-append">
<button class="btn btn-dark"><i class="fa fa-search"></i></button> <button class="btn btn-dark"><i class="fa fa-search"></i></button>
</div> </div>
@ -53,7 +53,7 @@ $num_rows = mysqli_fetch_row(mysqli_query($mysqli,"SELECT FOUND_ROWS()"));
<hr> <hr>
<div class="table-responsive"> <div class="table-responsive">
<table class="table table-striped table-borderless table-hover"> <table class="table table-striped table-borderless table-hover">
<thead class="text-dark <?php if($num_rows[0] == 0){ echo "d-none"; } ?>"> <thead class="text-dark <?php if ($num_rows[0] == 0) { echo "d-none"; } ?>">
<tr> <tr>
<th><a class="text-secondary" href="?<?php echo $url_query_strings_sb; ?>&sb=recurring_number&o=<?php echo $disp; ?>">Number</a></th> <th><a class="text-secondary" href="?<?php echo $url_query_strings_sb; ?>&sb=recurring_number&o=<?php echo $disp; ?>">Number</a></th>
<th><a class="text-secondary" href="?<?php echo $url_query_strings_sb; ?>&sb=recurring_scope&o=<?php echo $disp; ?>">Scope</a></th> <th><a class="text-secondary" href="?<?php echo $url_query_strings_sb; ?>&sb=recurring_scope&o=<?php echo $disp; ?>">Scope</a></th>
@ -69,7 +69,7 @@ $num_rows = mysqli_fetch_row(mysqli_query($mysqli,"SELECT FOUND_ROWS()"));
<tbody> <tbody>
<?php <?php
while($row = mysqli_fetch_array($sql)){ while ($row = mysqli_fetch_array($sql)) {
$recurring_id = $row['recurring_id']; $recurring_id = $row['recurring_id'];
$recurring_prefix = htmlentities($row['recurring_prefix']); $recurring_prefix = htmlentities($row['recurring_prefix']);
$recurring_number = htmlentities($row['recurring_number']); $recurring_number = htmlentities($row['recurring_number']);
@ -77,7 +77,7 @@ $num_rows = mysqli_fetch_row(mysqli_query($mysqli,"SELECT FOUND_ROWS()"));
$recurring_frequency = htmlentities($row['recurring_frequency']); $recurring_frequency = htmlentities($row['recurring_frequency']);
$recurring_status = htmlentities($row['recurring_status']); $recurring_status = htmlentities($row['recurring_status']);
$recurring_last_sent = $row['recurring_last_sent']; $recurring_last_sent = $row['recurring_last_sent'];
if($recurring_last_sent == 0){ if ($recurring_last_sent == 0) {
$recurring_last_sent = "-"; $recurring_last_sent = "-";
} }
$recurring_next_date = $row['recurring_next_date']; $recurring_next_date = $row['recurring_next_date'];
@ -86,7 +86,7 @@ $num_rows = mysqli_fetch_row(mysqli_query($mysqli,"SELECT FOUND_ROWS()"));
$recurring_created_at = $row['recurring_created_at']; $recurring_created_at = $row['recurring_created_at'];
$category_id = $row['category_id']; $category_id = $row['category_id'];
$category_name = htmlentities($row['category_name']); $category_name = htmlentities($row['category_name']);
if($recurring_status == 1){ if ($recurring_status == 1) {
$status = "Active"; $status = "Active";
$status_badge_color = "success"; $status_badge_color = "success";
}else{ }else{

6
client_scheduled_tickets.php
View File

@ -2,7 +2,7 @@
<?php <?php
if(!empty($_GET['sb'])){ if (!empty($_GET['sb'])) {
$sb = strip_tags(mysqli_real_escape_string($mysqli,$_GET['sb'])); $sb = strip_tags(mysqli_real_escape_string($mysqli,$_GET['sb']));
}else{ }else{
$sb = "scheduled_ticket_subject"; $sb = "scheduled_ticket_subject";
@ -42,7 +42,7 @@ $num_rows = mysqli_fetch_row(mysqli_query($mysqli,"SELECT FOUND_ROWS()"));
<div class="col-md-4"> <div class="col-md-4">
<div class="input-group mb-3 mb-md-0"> <div class="input-group mb-3 mb-md-0">
<input type="search" class="form-control" name="q" value="<?php if(isset($q)){ echo strip_tags(htmlentities($q)); } ?>" placeholder="Search Scheduled Tickets"> <input type="search" class="form-control" name="q" value="<?php if (isset($q)) { echo strip_tags(htmlentities($q)); } ?>" placeholder="Search Scheduled Tickets">
<div class="input-group-append"> <div class="input-group-append">
<button class="btn btn-dark"><i class="fa fa-search"></i></button> <button class="btn btn-dark"><i class="fa fa-search"></i></button>
</div> </div>
@ -93,7 +93,7 @@ $num_rows = mysqli_fetch_row(mysqli_query($mysqli,"SELECT FOUND_ROWS()"));
<a class="dropdown-item" href="#" data-toggle="modal" <a class="dropdown-item" href="#" data-toggle="modal"
data-target="#editScheduledTicketModal" onclick="populateScheduledTicketEditModal(<?php echo $client_id, ",", $scheduled_ticket_id ?>)">Edit</a> data-target="#editScheduledTicketModal" onclick="populateScheduledTicketEditModal(<?php echo $client_id, ",", $scheduled_ticket_id ?>)">Edit</a>
<?php <?php
if($session_user_role == 3){ if ($session_user_role == 3) {
?> ?>
<div class="dropdown-divider"></div> <div class="dropdown-divider"></div>
<a class="dropdown-item text-danger" <a class="dropdown-item text-danger"

14
client_service_add_modal.php
View File

@ -100,7 +100,7 @@
<select multiple class="form-control" id="contacts" name="contacts[]"> <select multiple class="form-control" id="contacts" name="contacts[]">
<?php <?php
$sql = mysqli_query($mysqli, "SELECT * FROM contacts WHERE contact_client_id = '$client_id'"); $sql = mysqli_query($mysqli, "SELECT * FROM contacts WHERE contact_client_id = '$client_id'");
while($row = mysqli_fetch_array($sql)){ while ($row = mysqli_fetch_array($sql)) {
$contact_id = $row['contact_id']; $contact_id = $row['contact_id'];
$contact_name = htmlentities($row['contact_name']); $contact_name = htmlentities($row['contact_name']);
echo "<option value=\"$contact_id\">$contact_name</option>"; echo "<option value=\"$contact_id\">$contact_name</option>";
@ -114,7 +114,7 @@
<select multiple class="form-control" id="vendors" name="vendors[]"> <select multiple class="form-control" id="vendors" name="vendors[]">
<?php <?php
$sql = mysqli_query($mysqli, "SELECT * FROM vendors WHERE vendor_template = 0 AND vendor_client_id = '$client_id'"); $sql = mysqli_query($mysqli, "SELECT * FROM vendors WHERE vendor_template = 0 AND vendor_client_id = '$client_id'");
while($row = mysqli_fetch_array($sql)){ while ($row = mysqli_fetch_array($sql)) {
$vendor_id = $row['vendor_id']; $vendor_id = $row['vendor_id'];
$vendor_name = htmlentities($row['vendor_name']); $vendor_name = htmlentities($row['vendor_name']);
echo "<option value=\"$vendor_id\">$vendor_name</option>"; echo "<option value=\"$vendor_id\">$vendor_name</option>";
@ -128,7 +128,7 @@
<select multiple class="form-control" id="documents" name="documents[]"> <select multiple class="form-control" id="documents" name="documents[]">
<?php <?php
$sql = mysqli_query($mysqli, "SELECT * FROM documents WHERE document_client_id = '$client_id'"); $sql = mysqli_query($mysqli, "SELECT * FROM documents WHERE document_client_id = '$client_id'");
while($row = mysqli_fetch_array($sql)){ while ($row = mysqli_fetch_array($sql)) {
$document_id = $row['document_id']; $document_id = $row['document_id'];
$document_name = htmlentities($row['document_name']); $document_name = htmlentities($row['document_name']);
echo "<option value=\"$document_id\">$document_name</option>"; echo "<option value=\"$document_id\">$document_name</option>";
@ -152,7 +152,7 @@
<select multiple class="form-control" id="assets" name="assets[]"> <select multiple class="form-control" id="assets" name="assets[]">
<?php <?php
$sql = mysqli_query($mysqli, "SELECT * FROM assets WHERE asset_client_id = '$client_id'"); $sql = mysqli_query($mysqli, "SELECT * FROM assets WHERE asset_client_id = '$client_id'");
while($row = mysqli_fetch_array($sql)){ while ($row = mysqli_fetch_array($sql)) {
$asset_id = $row['asset_id']; $asset_id = $row['asset_id'];
$asset_name = htmlentities($row['asset_name']); $asset_name = htmlentities($row['asset_name']);
echo "<option value=\"$asset_id\">$asset_name</option>"; echo "<option value=\"$asset_id\">$asset_name</option>";
@ -168,7 +168,7 @@
<select multiple class="form-control" id="logins" name="logins[]"> <select multiple class="form-control" id="logins" name="logins[]">
<?php <?php
$sql = mysqli_query($mysqli, "SELECT * FROM logins WHERE login_client_id = '$client_id'"); $sql = mysqli_query($mysqli, "SELECT * FROM logins WHERE login_client_id = '$client_id'");
while($row = mysqli_fetch_array($sql)){ while ($row = mysqli_fetch_array($sql)) {
$login_id = $row['login_id']; $login_id = $row['login_id'];
$login_name = htmlentities($row['login_name']); $login_name = htmlentities($row['login_name']);
echo "<option value=\"$login_id\">$login_name</option>"; echo "<option value=\"$login_id\">$login_name</option>";
@ -189,7 +189,7 @@
<select multiple class="form-control" id="domains" name="domains[]"> <select multiple class="form-control" id="domains" name="domains[]">
<?php <?php
$sql = mysqli_query($mysqli, "SELECT * FROM domains WHERE domain_client_id = '$client_id'"); $sql = mysqli_query($mysqli, "SELECT * FROM domains WHERE domain_client_id = '$client_id'");
while($row = mysqli_fetch_array($sql)){ while ($row = mysqli_fetch_array($sql)) {
$domain_id = $row['domain_id']; $domain_id = $row['domain_id'];
$domain_name = htmlentities($row['domain_name']); $domain_name = htmlentities($row['domain_name']);
echo "<option value=\"$domain_id\">$domain_name</option>"; echo "<option value=\"$domain_id\">$domain_name</option>";
@ -205,7 +205,7 @@
<select multiple class="form-control" id="certificates" name="certificates[]"> <select multiple class="form-control" id="certificates" name="certificates[]">
<?php <?php
$sql = mysqli_query($mysqli, "SELECT * FROM certificates WHERE certificate_client_id = '$client_id'"); $sql = mysqli_query($mysqli, "SELECT * FROM certificates WHERE certificate_client_id = '$client_id'");
while($row = mysqli_fetch_array($sql)){ while ($row = mysqli_fetch_array($sql)) {
$cert_id = $row['certificate_id']; $cert_id = $row['certificate_id'];
$cert_name = htmlentities($row['certificate_name']); $cert_name = htmlentities($row['certificate_name']);
$cert_domain = htmlentities($row['certificate_domain']); $cert_domain = htmlentities($row['certificate_domain']);

34
client_service_edit_modal.php
View File

@ -72,9 +72,9 @@
<span class="input-group-text"><i class="fa fa-fw fa-thermometer-half"></i></span> <span class="input-group-text"><i class="fa fa-fw fa-thermometer-half"></i></span>
</div> </div>
<select class="form-control select2" name="importance" required> <select class="form-control select2" name="importance" required>
<option <?php if($service_importance == 'Low'){ echo "selected"; } ?> >Low</option> <option <?php if ($service_importance == 'Low') { echo "selected"; } ?> >Low</option>
<option <?php if($service_importance == 'Medium'){ echo "selected"; } ?> >Medium</option> <option <?php if ($service_importance == 'Medium') { echo "selected"; } ?> >Medium</option>
<option <?php if($service_importance == 'High'){ echo "selected"; } ?> >High</option> <option <?php if ($service_importance == 'High') { echo "selected"; } ?> >High</option>
</select> </select>
</div> </div>
</div> </div>
@ -107,11 +107,11 @@
// NOTE: These are called $sql_all and $row_all for a reason - anything overwriting $sql or $row will break the current while loop we are in from client_services.php // NOTE: These are called $sql_all and $row_all for a reason - anything overwriting $sql or $row will break the current while loop we are in from client_services.php
$sql_all = mysqli_query($mysqli, "SELECT * FROM contacts WHERE contact_client_id = '$client_id'"); $sql_all = mysqli_query($mysqli, "SELECT * FROM contacts WHERE contact_client_id = '$client_id'");
while($row_all = mysqli_fetch_array($sql_all)){ while ($row_all = mysqli_fetch_array($sql_all)) {
$contact_id = $row_all['contact_id']; $contact_id = $row_all['contact_id'];
$contact_name = htmlentities($row_all['contact_name']); $contact_name = htmlentities($row_all['contact_name']);
if(in_array($contact_id, $selected_ids)){ if (in_array($contact_id, $selected_ids)) {
echo "<option value=\"$contact_id\" selected>$contact_name</option>"; echo "<option value=\"$contact_id\" selected>$contact_name</option>";
} }
else{ else{
@ -129,11 +129,11 @@
$selected_ids = array_column(mysqli_fetch_all($sql_vendors,MYSQLI_ASSOC), "vendor_id"); $selected_ids = array_column(mysqli_fetch_all($sql_vendors,MYSQLI_ASSOC), "vendor_id");
$sql_all = mysqli_query($mysqli, "SELECT * FROM vendors WHERE vendor_template = 0 AND vendor_client_id = '$client_id'"); $sql_all = mysqli_query($mysqli, "SELECT * FROM vendors WHERE vendor_template = 0 AND vendor_client_id = '$client_id'");
while($row_all = mysqli_fetch_array($sql_all)){ while ($row_all = mysqli_fetch_array($sql_all)) {
$vendor_id = $row_all['vendor_id']; $vendor_id = $row_all['vendor_id'];
$vendor_name = htmlentities($row_all['vendor_name']); $vendor_name = htmlentities($row_all['vendor_name']);
if(in_array($vendor_id, $selected_ids)){ if (in_array($vendor_id, $selected_ids)) {
echo "<option value=\"$vendor_id\" selected>$vendor_name</option>"; echo "<option value=\"$vendor_id\" selected>$vendor_name</option>";
} }
else{ else{
@ -151,11 +151,11 @@
$selected_ids = array_column(mysqli_fetch_all($sql_docs,MYSQLI_ASSOC), "document_id"); $selected_ids = array_column(mysqli_fetch_all($sql_docs,MYSQLI_ASSOC), "document_id");
$sql_all = mysqli_query($mysqli, "SELECT * FROM documents WHERE document_client_id = '$client_id'"); $sql_all = mysqli_query($mysqli, "SELECT * FROM documents WHERE document_client_id = '$client_id'");
while($row_all = mysqli_fetch_array($sql_all)){ while ($row_all = mysqli_fetch_array($sql_all)) {
$document_id = $row_all['document_id']; $document_id = $row_all['document_id'];
$document_name = htmlentities($row_all['document_name']); $document_name = htmlentities($row_all['document_name']);
if(in_array($document_id, $selected_ids)){ if (in_array($document_id, $selected_ids)) {
echo "<option value=\"$document_id\" selected>$document_name</option>"; echo "<option value=\"$document_id\" selected>$document_name</option>";
} }
else{ else{
@ -184,11 +184,11 @@
$selected_ids = array_column(mysqli_fetch_all($sql_assets,MYSQLI_ASSOC), "asset_id"); $selected_ids = array_column(mysqli_fetch_all($sql_assets,MYSQLI_ASSOC), "asset_id");
$sql_all = mysqli_query($mysqli, "SELECT * FROM assets WHERE asset_client_id = '$client_id'"); $sql_all = mysqli_query($mysqli, "SELECT * FROM assets WHERE asset_client_id = '$client_id'");
while($row_all = mysqli_fetch_array($sql_all)){ while ($row_all = mysqli_fetch_array($sql_all)) {
$asset_id = $row_all['asset_id']; $asset_id = $row_all['asset_id'];
$asset_name = htmlentities($row_all['asset_name']); $asset_name = htmlentities($row_all['asset_name']);
if(in_array($asset_id, $selected_ids)){ if (in_array($asset_id, $selected_ids)) {
echo "<option value=\"$asset_id\" selected>$asset_name</option>"; echo "<option value=\"$asset_id\" selected>$asset_name</option>";
} }
else{ else{
@ -208,11 +208,11 @@
$selected_ids = array_column(mysqli_fetch_all($sql_logins,MYSQLI_ASSOC), "login_id"); $selected_ids = array_column(mysqli_fetch_all($sql_logins,MYSQLI_ASSOC), "login_id");
$sql_all = mysqli_query($mysqli, "SELECT * FROM logins WHERE login_client_id = '$client_id'"); $sql_all = mysqli_query($mysqli, "SELECT * FROM logins WHERE login_client_id = '$client_id'");
while($row_all = mysqli_fetch_array($sql_all)){ while ($row_all = mysqli_fetch_array($sql_all)) {
$login_id = $row_all['login_id']; $login_id = $row_all['login_id'];
$login_name = htmlentities($row_all['login_name']); $login_name = htmlentities($row_all['login_name']);
if(in_array($login_id, $selected_ids)){ if (in_array($login_id, $selected_ids)) {
echo "<option value=\"$login_id\" selected>$login_name</option>"; echo "<option value=\"$login_id\" selected>$login_name</option>";
} }
else{ else{
@ -237,11 +237,11 @@
$selected_ids = array_column(mysqli_fetch_all($sql_domains,MYSQLI_ASSOC), "domain_id"); $selected_ids = array_column(mysqli_fetch_all($sql_domains,MYSQLI_ASSOC), "domain_id");
$sql_all = mysqli_query($mysqli, "SELECT * FROM domains WHERE domain_client_id = '$client_id'"); $sql_all = mysqli_query($mysqli, "SELECT * FROM domains WHERE domain_client_id = '$client_id'");
while($row_all = mysqli_fetch_array($sql_all)){ while ($row_all = mysqli_fetch_array($sql_all)) {
$domain_id = $row_all['domain_id']; $domain_id = $row_all['domain_id'];
$domain_name = htmlentities($row_all['domain_name']); $domain_name = htmlentities($row_all['domain_name']);
if(in_array($domain_id, $selected_ids)){ if (in_array($domain_id, $selected_ids)) {
echo "<option value=\"$domain_id\" selected>$domain_name</option>"; echo "<option value=\"$domain_id\" selected>$domain_name</option>";
} }
else{ else{
@ -261,11 +261,11 @@
$selected_ids = array_column(mysqli_fetch_all($sql_certificates,MYSQLI_ASSOC), "certificate_id"); $selected_ids = array_column(mysqli_fetch_all($sql_certificates,MYSQLI_ASSOC), "certificate_id");
$sql_all = mysqli_query($mysqli, "SELECT * FROM certificates WHERE certificate_client_id = '$client_id'"); $sql_all = mysqli_query($mysqli, "SELECT * FROM certificates WHERE certificate_client_id = '$client_id'");
while($row_all = mysqli_fetch_array($sql_all)){ while ($row_all = mysqli_fetch_array($sql_all)) {
$cert_id = $row_all['certificate_id']; $cert_id = $row_all['certificate_id'];
$cert_name = htmlentities($row_all['certificate_name']); $cert_name = htmlentities($row_all['certificate_name']);
if(in_array($cert_id, $selected_ids)){ if (in_array($cert_id, $selected_ids)) {
echo "<option value=\"$cert_id\" selected>$cert_name</option>"; echo "<option value=\"$cert_id\" selected>$cert_name</option>";
} }
else{ else{

70
client_service_view_modal.php
View File

@ -23,15 +23,15 @@
<!-- Assets --> <!-- Assets -->
<?php <?php
if(mysqli_num_rows($sql_assets) > 0){ ?> if (mysqli_num_rows($sql_assets) > 0) { ?>
<h5><i class="nav-icon fas fa-desktop"></i> Assets</h5> <h5><i class="nav-icon fas fa-desktop"></i> Assets</h5>
<ul> <ul>
<?php <?php
// Reset the $sql_assets pointer to the start - as we've already cycled through once // Reset the $sql_assets pointer to the start - as we've already cycled through once
mysqli_data_seek($sql_assets, 0); mysqli_data_seek($sql_assets, 0);
while($row = mysqli_fetch_array($sql_assets)){ while ($row = mysqli_fetch_array($sql_assets)) {
if(!empty($row['asset_ip'])){ if (!empty($row['asset_ip'])) {
$ip = '('.$row["asset_ip"].')'; $ip = '('.$row["asset_ip"].')';
} }
else{ else{
@ -47,7 +47,7 @@
<!-- Networks --> <!-- Networks -->
<?php <?php
if($sql_assets){ if ($sql_assets) {
$networks = []; $networks = [];
@ -55,8 +55,8 @@
mysqli_data_seek($sql_assets, 0); mysqli_data_seek($sql_assets, 0);
// Get networks linked to assets - push name to array // Get networks linked to assets - push name to array
while($row = mysqli_fetch_array($sql_assets)){ while ($row = mysqli_fetch_array($sql_assets)) {
if(!empty($row['network_name'])){ if (!empty($row['network_name'])) {
$network_data = "$row[network_name]:$row[network_vlan]"; $network_data = "$row[network_name]:$row[network_vlan]";
array_push($networks, $network_data); array_push($networks, $network_data);
} }
@ -66,12 +66,12 @@
$networks = array_unique($networks); $networks = array_unique($networks);
// Display // Display
if(!empty($networks)){ ?> if (!empty($networks)) { ?>
<h5><i class="nav-icon fas fa-network-wired"></i> Networks</h5> <h5><i class="nav-icon fas fa-network-wired"></i> Networks</h5>
<ul> <ul>
<?php <?php
} }
foreach($networks as $network){ foreach($networks as $network) {
$network = explode(":", $network); $network = explode(":", $network);
echo "<li><a href=\"client_networks.php?client_id=$client_id&q=$network[0]\">$network[0] </a>(VLAN $network[1])</li>"; echo "<li><a href=\"client_networks.php?client_id=$client_id&q=$network[0]\">$network[0] </a>(VLAN $network[1])</li>";
} }
@ -84,7 +84,7 @@
<!-- Locations --> <!-- Locations -->
<?php <?php
if($sql_assets){ if ($sql_assets) {
$location_names = []; $location_names = [];
@ -92,8 +92,8 @@
mysqli_data_seek($sql_assets, 0); mysqli_data_seek($sql_assets, 0);
// Get locations linked to assets - push their name and vlan to arrays // Get locations linked to assets - push their name and vlan to arrays
while($row = mysqli_fetch_array($sql_assets)){ while ($row = mysqli_fetch_array($sql_assets)) {
if(!empty($row['location_name'])){ if (!empty($row['location_name'])) {
array_push($location_names, $row['location_name']); array_push($location_names, $row['location_name']);
} }
} }
@ -102,12 +102,12 @@
$location_names = array_unique($location_names); $location_names = array_unique($location_names);
// Display // Display
if(!empty($location_names)){ ?> if (!empty($location_names)) { ?>
<h5><i class="nav-icon fas fa-map-marker-alt"></i> Locations</h5> <h5><i class="nav-icon fas fa-map-marker-alt"></i> Locations</h5>
<ul> <ul>
<?php <?php
} }
foreach($location_names as $location){ foreach($location_names as $location) {
echo "<li><a href=\"client_locations.php?client_id=$client_id&q=$location\">$location</a></li>"; echo "<li><a href=\"client_locations.php?client_id=$client_id&q=$location\">$location</a></li>";
} }
?> ?>
@ -118,7 +118,7 @@
<!-- Domains --> <!-- Domains -->
<?php <?php
if(mysqli_num_rows($sql_domains) > 0){ ?> if (mysqli_num_rows($sql_domains) > 0) { ?>
<h5><i class="nav-icon fas fa-globe"></i> Domains</h5> <h5><i class="nav-icon fas fa-globe"></i> Domains</h5>
<ul> <ul>
<?php <?php
@ -126,8 +126,8 @@
mysqli_data_seek($sql_domains, 0); mysqli_data_seek($sql_domains, 0);
// Showing linked domains // Showing linked domains
while($row = mysqli_fetch_array($sql_domains)){ while ($row = mysqli_fetch_array($sql_domains)) {
if(!empty($row['domain_name'])){ if (!empty($row['domain_name'])) {
echo "<li><a href=\"client_domains.php?client_id=$client_id&q=$row[domain_name]\">$row[domain_name]</a></li>"; echo "<li><a href=\"client_domains.php?client_id=$client_id&q=$row[domain_name]\">$row[domain_name]</a></li>";
} }
} }
@ -139,7 +139,7 @@
<!-- Certificates --> <!-- Certificates -->
<?php <?php
if(mysqli_num_rows($sql_certificates) > 0){ ?> if (mysqli_num_rows($sql_certificates) > 0) { ?>
<h5><i class="nav-icon fas fa-lock"></i> Certificates</h5> <h5><i class="nav-icon fas fa-lock"></i> Certificates</h5>
<ul> <ul>
<?php <?php
@ -147,8 +147,8 @@
mysqli_data_seek($sql_certificates, 0); mysqli_data_seek($sql_certificates, 0);
// Showing linked certs // Showing linked certs
while($row = mysqli_fetch_array($sql_certificates)){ while ($row = mysqli_fetch_array($sql_certificates)) {
if(!empty($row['certificate_name'])){ if (!empty($row['certificate_name'])) {
echo "<li><a href=\"client_certificates.php?client_id=$client_id&q=$row[certificate_name]\">$row[certificate_name] ($row[certificate_domain])</a></li>"; echo "<li><a href=\"client_certificates.php?client_id=$client_id&q=$row[certificate_name]\">$row[certificate_name] ($row[certificate_domain])</a></li>";
} }
} }
@ -173,11 +173,11 @@
// Reset the $sql_vendors pointer to the start // Reset the $sql_vendors pointer to the start
mysqli_data_seek($sql_vendors, 0); mysqli_data_seek($sql_vendors, 0);
if(mysqli_num_rows($sql_vendors) > 0){ ?> if (mysqli_num_rows($sql_vendors) > 0) { ?>
<h5><i class="nav-icon fas fa-users"></i> Vendors</h5> <h5><i class="nav-icon fas fa-users"></i> Vendors</h5>
<ul> <ul>
<?php <?php
while($row = mysqli_fetch_array($sql_vendors)){ while ($row = mysqli_fetch_array($sql_vendors)) {
echo "<li><a href=\"client_vendors.php?client_id=$client_id&q=$row[vendor_name]\">$row[vendor_name]</a></li>"; echo "<li><a href=\"client_vendors.php?client_id=$client_id&q=$row[vendor_name]\">$row[vendor_name]</a></li>";
} }
?> ?>
@ -188,14 +188,14 @@
<!-- Contacts --> <!-- Contacts -->
<?php <?php
if(mysqli_num_rows($sql_contacts) > 0){ ?> if (mysqli_num_rows($sql_contacts) > 0) { ?>
<h5><i class="nav-icon fas fa-building"></i> Contacts</h5> <h5><i class="nav-icon fas fa-building"></i> Contacts</h5>
<ul> <ul>
<?php <?php
// Reset the $sql_contacts pointer to the start // Reset the $sql_contacts pointer to the start
mysqli_data_seek($sql_contacts, 0); mysqli_data_seek($sql_contacts, 0);
while($row = mysqli_fetch_array($sql_contacts)){ while ($row = mysqli_fetch_array($sql_contacts)) {
echo "<li><a href=\"client_contacts.php?client_id=$client_id&q=$row[contact_name]\">$row[contact_name]</a></li>"; echo "<li><a href=\"client_contacts.php?client_id=$client_id&q=$row[contact_name]\">$row[contact_name]</a></li>";
} }
?> ?>
@ -206,7 +206,7 @@
<!-- Logins --> <!-- Logins -->
<?php <?php
if(mysqli_num_rows($sql_assets) > 0 || mysqli_num_rows($sql_logins) > 0){ ?> if (mysqli_num_rows($sql_assets) > 0 || mysqli_num_rows($sql_logins) > 0) { ?>
<h5><i class="nav-icon fas fa-key"></i> Logins</h5> <h5><i class="nav-icon fas fa-key"></i> Logins</h5>
<ul> <ul>
<?php <?php
@ -215,15 +215,15 @@
mysqli_data_seek($sql_logins, 0); mysqli_data_seek($sql_logins, 0);
// Showing logins linked to assets // Showing logins linked to assets
while($row = mysqli_fetch_array($sql_assets)){ while ($row = mysqli_fetch_array($sql_assets)) {
if(!empty($row['login_name'])){ if (!empty($row['login_name'])) {
echo "<li><a href=\"client_logins.php?client_id=$client_id&q=$row[login_name]\">$row[login_name]</a></li>"; echo "<li><a href=\"client_logins.php?client_id=$client_id&q=$row[login_name]\">$row[login_name]</a></li>";
} }
} }
// Showing explicitly linked logins // Showing explicitly linked logins
while($row = mysqli_fetch_array($sql_logins)){ while ($row = mysqli_fetch_array($sql_logins)) {
if(!empty($row['login_name'])){ if (!empty($row['login_name'])) {
echo "<li><a href=\"client_logins.php?client_id=$client_id&q=$row[login_name]\">$row[login_name]</a></li>"; echo "<li><a href=\"client_logins.php?client_id=$client_id&q=$row[login_name]\">$row[login_name]</a></li>";
} }
} }
@ -235,7 +235,7 @@
<!-- URLs --> <!-- URLs -->
<?php <?php
if($sql_logins || $sql_assets){ ?> if ($sql_logins || $sql_assets) { ?>
<h5><i class="nav-icon fas fa-link"></i> URLs</h5> <h5><i class="nav-icon fas fa-link"></i> URLs</h5>
<ul> <ul>
<?php <?php
@ -243,8 +243,8 @@
mysqli_data_seek($sql_logins, 0); mysqli_data_seek($sql_logins, 0);
// Showing URLs linked to logins // Showing URLs linked to logins
while($row = mysqli_fetch_array($sql_logins)){ while ($row = mysqli_fetch_array($sql_logins)) {
if(!empty($row['login_uri'])){ if (!empty($row['login_uri'])) {
echo "<li><a href=\"https://$row[login_uri]\">$row[login_uri]</a></li>"; echo "<li><a href=\"https://$row[login_uri]\">$row[login_uri]</a></li>";
} }
} }
@ -253,8 +253,8 @@
mysqli_data_seek($sql_assets, 0); mysqli_data_seek($sql_assets, 0);
// Show URLs linked to assets, that also have logins // Show URLs linked to assets, that also have logins
while($row = mysqli_fetch_array($sql_assets)){ while ($row = mysqli_fetch_array($sql_assets)) {
if(!empty($row['login_uri'])){ if (!empty($row['login_uri'])) {
echo "<li><a href=\"https://$row[login_uri]\">$row[login_uri]</a></li>"; echo "<li><a href=\"https://$row[login_uri]\">$row[login_uri]</a></li>";
} }
} }
@ -266,14 +266,14 @@
<!-- Documents --> <!-- Documents -->
<?php <?php
if(mysqli_num_rows($sql_docs) > 0){ ?> if (mysqli_num_rows($sql_docs) > 0) { ?>
<h5><i class="nav-icon fas fa-file-alt"></i> Documents</h5> <h5><i class="nav-icon fas fa-file-alt"></i> Documents</h5>
<ul> <ul>
<?php <?php
// Reset the $sql_docs pointer to the start // Reset the $sql_docs pointer to the start
mysqli_data_seek($sql_docs, 0); mysqli_data_seek($sql_docs, 0);
while($row = mysqli_fetch_array($sql_docs)){ while ($row = mysqli_fetch_array($sql_docs)) {
echo "<li><a href=\"client_documents.php?client_id=$client_id&q=$row[document_name]\">$row[document_name]</a></li>"; echo "<li><a href=\"client_documents.php?client_id=$client_id&q=$row[document_name]\">$row[document_name]</a></li>";
} }
?> ?>

16
client_services.php
View File

@ -2,7 +2,7 @@
<?php <?php
if(!empty($_GET['sb'])){ if (!empty($_GET['sb'])) {
$sb = strip_tags(mysqli_real_escape_string($mysqli,$_GET['sb'])); $sb = strip_tags(mysqli_real_escape_string($mysqli,$_GET['sb']));
}else{ }else{
$sb = "service_name"; $sb = "service_name";
@ -34,7 +34,7 @@ $num_rows = mysqli_fetch_row(mysqli_query($mysqli,"SELECT FOUND_ROWS()"));
<form autocomplete="off"> <form autocomplete="off">
<input type="hidden" name="client_id" value="<?php echo $client_id; ?>"> <input type="hidden" name="client_id" value="<?php echo $client_id; ?>">
<div class="input-group"> <div class="input-group">
<input type="search" class="form-control " name="q" value="<?php if(isset($q)){ echo strip_tags(htmlentities($q)); } ?>" placeholder="Search Services"> <input type="search" class="form-control " name="q" value="<?php if (isset($q)) { echo strip_tags(htmlentities($q)); } ?>" placeholder="Search Services">
<div class="input-group-append"> <div class="input-group-append">
<button class="btn btn-secondary"><i class="fa fa-search"></i></button> <button class="btn btn-secondary"><i class="fa fa-search"></i></button>
</div> </div>
@ -44,7 +44,7 @@ $num_rows = mysqli_fetch_row(mysqli_query($mysqli,"SELECT FOUND_ROWS()"));
<div class="table-responsive"> <div class="table-responsive">
<table class="table table-striped table-borderless table-hover"> <table class="table table-striped table-borderless table-hover">
<thead class="<?php if($num_rows[0] == 0){ echo "d-none"; } ?>"> <thead class="<?php if ($num_rows[0] == 0) { echo "d-none"; } ?>">
<tr> <tr>
<th><a class="text-dark">Name</a></th> <th><a class="text-dark">Name</a></th>
<th><a class="text-dark">Category</a></th> <th><a class="text-dark">Category</a></th>
@ -57,7 +57,7 @@ $num_rows = mysqli_fetch_row(mysqli_query($mysqli,"SELECT FOUND_ROWS()"));
<tbody> <tbody>
<?php <?php
while($row = mysqli_fetch_array($sql)){ while ($row = mysqli_fetch_array($sql)) {
$service_id = $row['service_id']; $service_id = $row['service_id'];
$service_name = htmlentities($row['service_name']); $service_name = htmlentities($row['service_name']);
$service_description = htmlentities($row['service_description']); $service_description = htmlentities($row['service_description']);
@ -69,11 +69,11 @@ $num_rows = mysqli_fetch_row(mysqli_query($mysqli,"SELECT FOUND_ROWS()"));
$service_review_due = $row['service_review_due']; $service_review_due = $row['service_review_due'];
// Service Importance // Service Importance
if($service_importance == "High"){ if ($service_importance == "High") {
$service_importance_display = "<span class='p-2 badge badge-danger'>$service_importance</span>"; $service_importance_display = "<span class='p-2 badge badge-danger'>$service_importance</span>";
}elseif($service_importance == "Medium"){ }elseif ($service_importance == "Medium") {
$service_importance_display = "<span class='p-2 badge badge-warning'>$service_importance</span>"; $service_importance_display = "<span class='p-2 badge badge-warning'>$service_importance</span>";
}elseif($service_importance == "Low"){ }elseif ($service_importance == "Low") {
$service_importance_display = "<span class='p-2 badge badge-info'>$service_importance</span>"; $service_importance_display = "<span class='p-2 badge badge-info'>$service_importance</span>";
}else{ }else{
$service_importance_display = "-"; $service_importance_display = "-";
@ -96,7 +96,7 @@ $num_rows = mysqli_fetch_row(mysqli_query($mysqli,"SELECT FOUND_ROWS()"));
</button> </button>
<div class="dropdown-menu"> <div class="dropdown-menu">
<a class="dropdown-item" href="#" data-toggle="modal" data-target="#editServiceModal<?php echo $service_id; ?>">Edit</a> <a class="dropdown-item" href="#" data-toggle="modal" data-target="#editServiceModal<?php echo $service_id; ?>">Edit</a>
<?php if($session_user_role == 3) { ?> <?php if ($session_user_role == 3) { ?>
<div class="dropdown-divider"></div> <div class="dropdown-divider"></div>
<a class="dropdown-item text-danger" href="post.php?delete_service=<?php echo $service_id; ?>">Delete</a> <a class="dropdown-item text-danger" href="post.php?delete_service=<?php echo $service_id; ?>">Delete</a>
<?php } ?> <?php } ?>

18
client_shared_items.php
View File

@ -2,11 +2,11 @@
<?php <?php
if(isset($_GET['q'])){ if (isset($_GET['q'])) {
$q = strip_tags(mysqli_real_escape_string($mysqli,$_GET['q'])); $q = strip_tags(mysqli_real_escape_string($mysqli,$_GET['q']));
//Phone Numbers //Phone Numbers
$phone_query = preg_replace("/[^0-9]/", '',$q); $phone_query = preg_replace("/[^0-9]/", '',$q);
if(empty($phone_query)){ if (empty($phone_query)) {
$phone_query = $q; $phone_query = $q;
} }
}else{ }else{
@ -42,7 +42,7 @@ $num_rows = mysqli_fetch_row(mysqli_query($mysqli,"SELECT FOUND_ROWS()"));
<div class="col-md-4"> <div class="col-md-4">
<div class="input-group mb-3 mb-md-0"> <div class="input-group mb-3 mb-md-0">
<input type="search" class="form-control" name="q" value="<?php if(isset($q)){ echo strip_tags(htmlentities($q)); } ?>" placeholder="Search Shared Items"> <input type="search" class="form-control" name="q" value="<?php if (isset($q)) { echo strip_tags(htmlentities($q)); } ?>" placeholder="Search Shared Items">
<div class="input-group-append"> <div class="input-group-append">
<button class="btn btn-dark"><i class="fa fa-search"></i></button> <button class="btn btn-dark"><i class="fa fa-search"></i></button>
</div> </div>
@ -54,7 +54,7 @@ $num_rows = mysqli_fetch_row(mysqli_query($mysqli,"SELECT FOUND_ROWS()"));
<hr> <hr>
<div class="table-responsive"> <div class="table-responsive">
<table class="table table-striped table-borderless table-hover"> <table class="table table-striped table-borderless table-hover">
<thead class="text-dark <?php if($num_rows[0] == 0){ echo "d-none"; } ?>"> <thead class="text-dark <?php if ($num_rows[0] == 0) { echo "d-none"; } ?>">
<tr> <tr>
<th>Item Name</th> <th>Item Name</th>
<th>Item Type</th> <th>Item Type</th>
@ -67,7 +67,7 @@ $num_rows = mysqli_fetch_row(mysqli_query($mysqli,"SELECT FOUND_ROWS()"));
<tbody> <tbody>
<?php <?php
while($row = mysqli_fetch_array($sql)){ while ($row = mysqli_fetch_array($sql)) {
$item_id = $row['item_id']; $item_id = $row['item_id'];
$item_active = htmlentities($row['item_active']); $item_active = htmlentities($row['item_active']);
$item_key = htmlentities($row['item_key']); $item_key = htmlentities($row['item_key']);
@ -79,17 +79,17 @@ $num_rows = mysqli_fetch_row(mysqli_query($mysqli,"SELECT FOUND_ROWS()"));
$item_created_at = $row['item_created_at']; $item_created_at = $row['item_created_at'];
$item_expire_at = $row['item_expire_at']; $item_expire_at = $row['item_expire_at'];
if($item_type == 'Login'){ if ($item_type == 'Login') {
$share_item_sql = mysqli_query($mysqli, "SELECT login_name FROM logins WHERE login_id = '$item_related_id' AND login_client_id = '$client_id'"); $share_item_sql = mysqli_query($mysqli, "SELECT login_name FROM logins WHERE login_id = '$item_related_id' AND login_client_id = '$client_id'");
$share_item = mysqli_fetch_array($share_item_sql); $share_item = mysqli_fetch_array($share_item_sql);
$item_name = htmlentities($share_item['login_name']); $item_name = htmlentities($share_item['login_name']);
} }
elseif($item_type == 'Document'){ elseif ($item_type == 'Document') {
$share_item_sql = mysqli_query($mysqli, "SELECT document_name FROM documents WHERE document_id = '$item_related_id' AND document_client_id = '$client_id'"); $share_item_sql = mysqli_query($mysqli, "SELECT document_name FROM documents WHERE document_id = '$item_related_id' AND document_client_id = '$client_id'");
$share_item = mysqli_fetch_array($share_item_sql); $share_item = mysqli_fetch_array($share_item_sql);
$item_name = htmlentities($share_item['document_name']); $item_name = htmlentities($share_item['document_name']);
} }
elseif($item_type == 'File'){ elseif ($item_type == 'File') {
$share_item_sql = mysqli_query($mysqli, "SELECT file_name FROM files WHERE file_id = '$item_related_id' AND file_client_id = '$client_id'"); $share_item_sql = mysqli_query($mysqli, "SELECT file_name FROM files WHERE file_id = '$item_related_id' AND file_client_id = '$client_id'");
$share_item = mysqli_fetch_array($share_item_sql); $share_item = mysqli_fetch_array($share_item_sql);
$item_name = htmlentities($share_item['file_name']); $item_name = htmlentities($share_item['file_name']);
@ -104,7 +104,7 @@ $num_rows = mysqli_fetch_row(mysqli_query($mysqli,"SELECT FOUND_ROWS()"));
<td><?php echo "$item_views / $item_view_limit" ?></td> <td><?php echo "$item_views / $item_view_limit" ?></td>
<td><?php echo $item_expire_at ?></td> <td><?php echo $item_expire_at ?></td>
<td> <td>
<?php if($session_user_role == 3) { ?> <?php if ($session_user_role == 3) { ?>
<div class="dropdown dropleft text-center"> <div class="dropdown dropleft text-center">
<button class="btn btn-secondary btn-sm" type="button" data-toggle="dropdown"> <button class="btn btn-secondary btn-sm" type="button" data-toggle="dropdown">
<i class="fas fa-ellipsis-h"></i> <i class="fas fa-ellipsis-h"></i>

94
client_side_nav.php
View File

@ -17,19 +17,19 @@
</li> </li>
<li class="nav-item mt-3"> <li class="nav-item mt-3">
<a href="client_overview.php?client_id=<?php echo $client_id; ?>" class="nav-link <?php if(basename($_SERVER["PHP_SELF"]) == "client_overview.php") { echo "active"; } ?>"> <a href="client_overview.php?client_id=<?php echo $client_id; ?>" class="nav-link <?php if (basename($_SERVER["PHP_SELF"]) == "client_overview.php") { echo "active"; } ?>">
<i class="nav-icon fas fa-tachometer-alt"></i> <i class="nav-icon fas fa-tachometer-alt"></i>
<p>Overview</p> <p>Overview</p>
</a> </a>
</li> </li>
<li class="nav-item"> <li class="nav-item">
<a href="client_contacts.php?client_id=<?php echo $client_id; ?>" class="nav-link <?php if(basename($_SERVER["PHP_SELF"]) == "client_contacts.php" || basename($_SERVER["PHP_SELF"]) == "client_contact_details.php") { echo "active"; } ?>"> <a href="client_contacts.php?client_id=<?php echo $client_id; ?>" class="nav-link <?php if (basename($_SERVER["PHP_SELF"]) == "client_contacts.php" || basename($_SERVER["PHP_SELF"]) == "client_contact_details.php") { echo "active"; } ?>">
<i class="nav-icon fas fa-users"></i> <i class="nav-icon fas fa-users"></i>
<p> <p>
Contacts Contacts
<?php <?php
if($num_contacts > 0){ ?> if ($num_contacts > 0) { ?>
<span class="right badge badge-light"><?php echo $num_contacts; ?></span> <span class="right badge badge-light"><?php echo $num_contacts; ?></span>
<?php } ?> <?php } ?>
</p> </p>
@ -37,12 +37,12 @@
</li> </li>
<li class="nav-item"> <li class="nav-item">
<a href="client_locations.php?client_id=<?php echo $client_id; ?>" class="nav-link <?php if(basename($_SERVER["PHP_SELF"]) == "client_locations.php") { echo "active"; } ?>"> <a href="client_locations.php?client_id=<?php echo $client_id; ?>" class="nav-link <?php if (basename($_SERVER["PHP_SELF"]) == "client_locations.php") { echo "active"; } ?>">
<i class="nav-icon fas fa-map-marker-alt"></i> <i class="nav-icon fas fa-map-marker-alt"></i>
<p> <p>
Locations Locations
<?php <?php
if($num_locations > 0){ ?> if ($num_locations > 0) { ?>
<span class="right badge badge-light"><?php echo $num_locations; ?></span> <span class="right badge badge-light"><?php echo $num_locations; ?></span>
<?php } ?> <?php } ?>
</p> </p>
@ -52,12 +52,12 @@
<li class="nav-header mt-3">ASSETS</li> <li class="nav-header mt-3">ASSETS</li>
<li class="nav-item"> <li class="nav-item">
<a href="client_assets.php?client_id=<?php echo $client_id; ?>" class="nav-link <?php if(basename($_SERVER["PHP_SELF"]) == "client_assets.php") { echo "active"; } ?>"> <a href="client_assets.php?client_id=<?php echo $client_id; ?>" class="nav-link <?php if (basename($_SERVER["PHP_SELF"]) == "client_assets.php") { echo "active"; } ?>">
<i class="nav-icon fas fa-desktop"></i> <i class="nav-icon fas fa-desktop"></i>
<p> <p>
Assets Assets
<?php <?php
if($num_assets > 0){ ?> if ($num_assets > 0) { ?>
<span class="right badge badge-light"><?php echo $num_assets; ?></span> <span class="right badge badge-light"><?php echo $num_assets; ?></span>
<?php } ?> <?php } ?>
</p> </p>
@ -65,12 +65,12 @@
</li> </li>
<li class="nav-item"> <li class="nav-item">
<a href="client_software.php?client_id=<?php echo $client_id; ?>" class="nav-link <?php if(basename($_SERVER["PHP_SELF"]) == "client_software.php") { echo "active"; } ?>"> <a href="client_software.php?client_id=<?php echo $client_id; ?>" class="nav-link <?php if (basename($_SERVER["PHP_SELF"]) == "client_software.php") { echo "active"; } ?>">
<i class="nav-icon fas fa-cube"></i> <i class="nav-icon fas fa-cube"></i>
<p> <p>
Licenses Licenses
<?php <?php
if($num_software > 0){ ?> if ($num_software > 0) { ?>
<span class="right badge badge-light"><?php echo $num_software; ?></span> <span class="right badge badge-light"><?php echo $num_software; ?></span>
<?php } ?> <?php } ?>
</p> </p>
@ -78,12 +78,12 @@
</li> </li>
<li class="nav-item"> <li class="nav-item">
<a href="client_logins.php?client_id=<?php echo $client_id; ?>" class="nav-link <?php if(basename($_SERVER["PHP_SELF"]) == "client_logins.php") { echo "active"; } ?>"> <a href="client_logins.php?client_id=<?php echo $client_id; ?>" class="nav-link <?php if (basename($_SERVER["PHP_SELF"]) == "client_logins.php") { echo "active"; } ?>">
<i class="nav-icon fas fa-key"></i> <i class="nav-icon fas fa-key"></i>
<p> <p>
Passwords Passwords
<?php <?php
if($num_logins > 0){ ?> if ($num_logins > 0) { ?>
<span class="right badge badge-light"><?php echo $num_logins; ?></span> <span class="right badge badge-light"><?php echo $num_logins; ?></span>
<?php } ?> <?php } ?>
</p> </p>
@ -91,12 +91,12 @@
</li> </li>
<li class="nav-item"> <li class="nav-item">
<a href="client_networks.php?client_id=<?php echo $client_id; ?>" class="nav-link <?php if(basename($_SERVER["PHP_SELF"]) == "client_networks.php") { echo "active"; } ?>"> <a href="client_networks.php?client_id=<?php echo $client_id; ?>" class="nav-link <?php if (basename($_SERVER["PHP_SELF"]) == "client_networks.php") { echo "active"; } ?>">
<i class="nav-icon fas fa-network-wired"></i> <i class="nav-icon fas fa-network-wired"></i>
<p> <p>
Networks Networks
<?php <?php
if($num_networks > 0){ ?> if ($num_networks > 0) { ?>
<span class="right badge badge-light"><?php echo $num_networks; ?></span> <span class="right badge badge-light"><?php echo $num_networks; ?></span>
<?php } ?> <?php } ?>
</p> </p>
@ -104,17 +104,17 @@
</li> </li>
<li class="nav-item"> <li class="nav-item">
<a href="client_certificates.php?client_id=<?php echo $client_id; ?>" class="nav-link <?php if(basename($_SERVER["PHP_SELF"]) == "client_certificates.php") { echo "active"; } ?>"> <a href="client_certificates.php?client_id=<?php echo $client_id; ?>" class="nav-link <?php if (basename($_SERVER["PHP_SELF"]) == "client_certificates.php") { echo "active"; } ?>">
<i class="nav-icon fas fa-lock"></i> <i class="nav-icon fas fa-lock"></i>
<p> <p>
Certificates Certificates
<?php <?php
if($num_certificates > 0){ ?> if ($num_certificates > 0) { ?>
<span class="right badge badge-light"><?php echo $num_certificates; ?></span> <span class="right badge badge-light"><?php echo $num_certificates; ?></span>
<?php } ?> <?php } ?>
<?php if($num_certs_expiring > 0){ ?> <?php if ($num_certs_expiring > 0) { ?>
<span class="right fa fa-fw fa-circle text-warning"></span> <span class="right fa fa-fw fa-circle text-warning"></span>
<?php } ?> <?php } ?>
</p> </p>
@ -122,17 +122,17 @@
</li> </li>
<li class="nav-item"> <li class="nav-item">
<a href="client_domains.php?client_id=<?php echo $client_id; ?>" class="nav-link <?php if(basename($_SERVER["PHP_SELF"]) == "client_domains.php") { echo "active"; } ?>"> <a href="client_domains.php?client_id=<?php echo $client_id; ?>" class="nav-link <?php if (basename($_SERVER["PHP_SELF"]) == "client_domains.php") { echo "active"; } ?>">
<i class="nav-icon fas fa-globe"></i> <i class="nav-icon fas fa-globe"></i>
<p> <p>
Domains Domains
<?php <?php
if($num_domains > 0){ ?> if ($num_domains > 0) { ?>
<span class="right badge badge-light"><?php echo $num_domains; ?></span> <span class="right badge badge-light"><?php echo $num_domains; ?></span>
<?php } ?> <?php } ?>
<?php if($num_domains_expiring > 0){ ?> <?php if ($num_domains_expiring > 0) { ?>
<span class="right fa fa-fw fa-circle text-warning"></span> <span class="right fa fa-fw fa-circle text-warning"></span>
<?php } ?> <?php } ?>
@ -142,19 +142,19 @@
<li class="nav-header mt-3">SUPPORT</li> <li class="nav-header mt-3">SUPPORT</li>
<?php if($config_module_enable_ticketing == 1){ ?> <?php if ($config_module_enable_ticketing == 1) { ?>
<li class="nav-item"> <li class="nav-item">
<a href="client_tickets.php?client_id=<?php echo $client_id; ?>" class="nav-link <?php if(basename($_SERVER["PHP_SELF"]) == "client_tickets.php" || basename($_SERVER["PHP_SELF"]) == "client_scheduled_tickets.php" ) { echo "active"; } ?>"> <a href="client_tickets.php?client_id=<?php echo $client_id; ?>" class="nav-link <?php if (basename($_SERVER["PHP_SELF"]) == "client_tickets.php" || basename($_SERVER["PHP_SELF"]) == "client_scheduled_tickets.php" ) { echo "active"; } ?>">
<i class="nav-icon fas fa-life-ring"></i> <i class="nav-icon fas fa-life-ring"></i>
<p> <p>
Tickets Tickets
<?php <?php
if($num_active_tickets > 0){ ?> if ($num_active_tickets > 0) { ?>
<span class="right badge badge-light"><?php echo $num_active_tickets; ?></span> <span class="right badge badge-light"><?php echo $num_active_tickets; ?></span>
<?php } ?> <?php } ?>
<?php if($num_active_tickets > 0){ ?> <?php if ($num_active_tickets > 0) { ?>
<span class="right fa fa-fw fa-circle text-danger"></span> <span class="right fa fa-fw fa-circle text-danger"></span>
<?php } ?> <?php } ?>
@ -164,12 +164,12 @@
<?php } ?> <?php } ?>
<li class="nav-item"> <li class="nav-item">
<a href="client_services.php?client_id=<?php echo $client_id; ?>" class="nav-link <?php if(basename($_SERVER["PHP_SELF"]) == "client_services.php") { echo "active"; } ?>"> <a href="client_services.php?client_id=<?php echo $client_id; ?>" class="nav-link <?php if (basename($_SERVER["PHP_SELF"]) == "client_services.php") { echo "active"; } ?>">
<i class="nav-icon fas fa-stream"></i> <i class="nav-icon fas fa-stream"></i>
<p> <p>
Services Services
<?php <?php
if($num_services > 0){ ?> if ($num_services > 0) { ?>
<span class="right badge badge-light"><?php echo $num_services; ?></span> <span class="right badge badge-light"><?php echo $num_services; ?></span>
<?php } ?> <?php } ?>
</p> </p>
@ -177,12 +177,12 @@
</li> </li>
<li class="nav-item"> <li class="nav-item">
<a href="client_vendors.php?client_id=<?php echo $client_id; ?>" class="nav-link <?php if(basename($_SERVER["PHP_SELF"]) == "client_vendors.php") { echo "active"; } ?>"> <a href="client_vendors.php?client_id=<?php echo $client_id; ?>" class="nav-link <?php if (basename($_SERVER["PHP_SELF"]) == "client_vendors.php") { echo "active"; } ?>">
<i class="nav-icon fas fa-building"></i> <i class="nav-icon fas fa-building"></i>
<p> <p>
Vendors Vendors
<?php <?php
if($num_vendors > 0){ ?> if ($num_vendors > 0) { ?>
<span class="right badge badge-light"><?php echo $num_vendors; ?></span> <span class="right badge badge-light"><?php echo $num_vendors; ?></span>
<?php } ?> <?php } ?>
</p> </p>
@ -190,12 +190,12 @@
</li> </li>
<li class="nav-item"> <li class="nav-item">
<a href="client_events.php?client_id=<?php echo $client_id; ?>" class="nav-link <?php if(basename($_SERVER["PHP_SELF"]) == "client_events.php") { echo "active"; } ?>"> <a href="client_events.php?client_id=<?php echo $client_id; ?>" class="nav-link <?php if (basename($_SERVER["PHP_SELF"]) == "client_events.php") { echo "active"; } ?>">
<i class="nav-icon fas fa-calendar"></i> <i class="nav-icon fas fa-calendar"></i>
<p> <p>
Events Events
<?php <?php
if($num_events > 0){ ?> if ($num_events > 0) { ?>
<span class="right badge badge-light"><?php echo $num_events; ?></span> <span class="right badge badge-light"><?php echo $num_events; ?></span>
<?php } ?> <?php } ?>
</p> </p>
@ -203,12 +203,12 @@
</li> </li>
<li class="nav-item"> <li class="nav-item">
<a href="client_files.php?client_id=<?php echo $client_id; ?>" class="nav-link <?php if(basename($_SERVER["PHP_SELF"]) == "client_files.php") { echo "active"; } ?>"> <a href="client_files.php?client_id=<?php echo $client_id; ?>" class="nav-link <?php if (basename($_SERVER["PHP_SELF"]) == "client_files.php") { echo "active"; } ?>">
<i class="nav-icon fas fa-paperclip"></i> <i class="nav-icon fas fa-paperclip"></i>
<p> <p>
Files Files
<?php <?php
if($num_files > 0){ ?> if ($num_files > 0) { ?>
<span class="right badge badge-light"><?php echo $num_files; ?></span> <span class="right badge badge-light"><?php echo $num_files; ?></span>
<?php } ?> <?php } ?>
</p> </p>
@ -216,34 +216,34 @@
</li> </li>
<li class="nav-item"> <li class="nav-item">
<a href="client_documents.php?client_id=<?php echo $client_id; ?>" class="nav-link <?php if(basename($_SERVER["PHP_SELF"]) == "client_documents.php" || basename($_SERVER["PHP_SELF"]) == "client_document_details.php") { echo "active"; } ?>"> <a href="client_documents.php?client_id=<?php echo $client_id; ?>" class="nav-link <?php if (basename($_SERVER["PHP_SELF"]) == "client_documents.php" || basename($_SERVER["PHP_SELF"]) == "client_document_details.php") { echo "active"; } ?>">
<i class="nav-icon fas fa-file-alt"></i> <i class="nav-icon fas fa-file-alt"></i>
<p> <p>
Documents Documents
<?php <?php
if($num_documents > 0){ ?> if ($num_documents > 0) { ?>
<span class="right badge badge-light"><?php echo $num_documents; ?></span> <span class="right badge badge-light"><?php echo $num_documents; ?></span>
<?php } ?> <?php } ?>
</p> </p>
</a> </a>
</li> </li>
<?php if($session_user_role == 1 || $session_user_role > 2 && $config_module_enable_accounting == 1){ ?> <?php if ($session_user_role == 1 || $session_user_role > 2 && $config_module_enable_accounting == 1) { ?>
<li class="nav-header mt-3">ACCOUNTING</li> <li class="nav-header mt-3">ACCOUNTING</li>
<li class="nav-item"> <li class="nav-item">
<a href="client_invoices.php?client_id=<?php echo $client_id; ?>" class="nav-link <?php if(basename($_SERVER["PHP_SELF"]) == "client_invoices.php") { echo "active"; } ?>"> <a href="client_invoices.php?client_id=<?php echo $client_id; ?>" class="nav-link <?php if (basename($_SERVER["PHP_SELF"]) == "client_invoices.php") { echo "active"; } ?>">
<i class="nav-icon fas fa-file"></i> <i class="nav-icon fas fa-file"></i>
<p> <p>
Invoices Invoices
<?php <?php
if($num_invoices > 0){ ?> if ($num_invoices > 0) { ?>
<span class="right badge badge-light"><?php echo $num_invoices; ?></span> <span class="right badge badge-light"><?php echo $num_invoices; ?></span>
<?php } ?> <?php } ?>
<?php if($num_invoices_open > 0){ ?> <?php if ($num_invoices_open > 0) { ?>
<span class="right fa fa-fw fa-circle text-danger"></span> <span class="right fa fa-fw fa-circle text-danger"></span>
<?php } ?> <?php } ?>
@ -252,12 +252,12 @@
</li> </li>
<li class="nav-item"> <li class="nav-item">
<a href="client_recurring_invoices.php?client_id=<?php echo $client_id; ?>" class="nav-link <?php if(basename($_SERVER["PHP_SELF"]) == "client_recurring_invoices.php") { echo "active"; } ?>"> <a href="client_recurring_invoices.php?client_id=<?php echo $client_id; ?>" class="nav-link <?php if (basename($_SERVER["PHP_SELF"]) == "client_recurring_invoices.php") { echo "active"; } ?>">
<i class="nav-icon fas fa-sync-alt"></i> <i class="nav-icon fas fa-sync-alt"></i>
<p> <p>
Recurring Recurring
<?php <?php
if($num_recurring > 0){ ?> if ($num_recurring > 0) { ?>
<span class="right badge badge-light"><?php echo $num_recurring; ?></span> <span class="right badge badge-light"><?php echo $num_recurring; ?></span>
<?php } ?> <?php } ?>
</p> </p>
@ -265,12 +265,12 @@
</li> </li>
<li class="nav-item"> <li class="nav-item">
<a href="client_quotes.php?client_id=<?php echo $client_id; ?>" class="nav-link <?php if(basename($_SERVER["PHP_SELF"]) == "client_quotes.php") { echo "active"; } ?>"> <a href="client_quotes.php?client_id=<?php echo $client_id; ?>" class="nav-link <?php if (basename($_SERVER["PHP_SELF"]) == "client_quotes.php") { echo "active"; } ?>">
<i class="nav-icon fas fa-file"></i> <i class="nav-icon fas fa-file"></i>
<p> <p>
Quotes Quotes
<?php <?php
if($num_quotes > 0){ ?> if ($num_quotes > 0) { ?>
<span class="right badge badge-light"><?php echo $num_quotes; ?></span> <span class="right badge badge-light"><?php echo $num_quotes; ?></span>
<?php } ?> <?php } ?>
</p> </p>
@ -278,12 +278,12 @@
</li> </li>
<li class="nav-item"> <li class="nav-item">
<a href="client_payments.php?client_id=<?php echo $client_id; ?>" class="nav-link <?php if(basename($_SERVER["PHP_SELF"]) == "client_payments.php") { echo "active"; } ?>"> <a href="client_payments.php?client_id=<?php echo $client_id; ?>" class="nav-link <?php if (basename($_SERVER["PHP_SELF"]) == "client_payments.php") { echo "active"; } ?>">
<i class="nav-icon fas fa-credit-card"></i> <i class="nav-icon fas fa-credit-card"></i>
<p> <p>
Payments Payments
<?php <?php
if($num_payments > 0){ ?> if ($num_payments > 0) { ?>
<span class="right badge badge-light"><?php echo $num_payments; ?></span> <span class="right badge badge-light"><?php echo $num_payments; ?></span>
<?php } ?> <?php } ?>
</p> </p>
@ -291,12 +291,12 @@
</li> </li>
<li class="nav-item"> <li class="nav-item">
<a href="client_trips.php?client_id=<?php echo $client_id; ?>" class="nav-link <?php if(basename($_SERVER["PHP_SELF"]) == "client_trips.php") { echo "active"; } ?>"> <a href="client_trips.php?client_id=<?php echo $client_id; ?>" class="nav-link <?php if (basename($_SERVER["PHP_SELF"]) == "client_trips.php") { echo "active"; } ?>">
<i class="nav-icon fas fa-route"></i> <i class="nav-icon fas fa-route"></i>
<p> <p>
Trips Trips
<?php <?php
if($num_trips > 0){ ?> if ($num_trips > 0) { ?>
<span class="right badge badge-light"><?php echo $num_trips; ?></span> <span class="right badge badge-light"><?php echo $num_trips; ?></span>
<?php } ?> <?php } ?>
</p> </p>
@ -308,14 +308,14 @@
<li class="nav-header mt-3">MORE</li> <li class="nav-header mt-3">MORE</li>
<li class="nav-item"> <li class="nav-item">
<a href="client_shared_items.php?client_id=<?php echo $client_id; ?>" class="nav-link <?php if(basename($_SERVER["PHP_SELF"]) == "client_shared_items.php") { echo "active"; } ?>"> <a href="client_shared_items.php?client_id=<?php echo $client_id; ?>" class="nav-link <?php if (basename($_SERVER["PHP_SELF"]) == "client_shared_items.php") { echo "active"; } ?>">
<i class="nav-icon fas fa-share"></i> <i class="nav-icon fas fa-share"></i>
<p>Shared Links</p> <p>Shared Links</p>
</a> </a>
</li> </li>
<li class="nav-item"> <li class="nav-item">
<a href="client_logs.php?client_id=<?php echo $client_id; ?>" class="nav-link <?php if(basename($_SERVER["PHP_SELF"]) == "client_logs.php") { echo "active"; } ?>"> <a href="client_logs.php?client_id=<?php echo $client_id; ?>" class="nav-link <?php if (basename($_SERVER["PHP_SELF"]) == "client_logs.php") { echo "active"; } ?>">
<i class="nav-icon fas fa-eye"></i> <i class="nav-icon fas fa-eye"></i>
<p>Audit Logs</p> <p>Audit Logs</p>
</a> </a>

16
client_software.php
View File

@ -2,7 +2,7 @@
<?php <?php
if(!empty($_GET['sb'])){ if (!empty($_GET['sb'])) {
$sb = strip_tags(mysqli_real_escape_string($mysqli,$_GET['sb'])); $sb = strip_tags(mysqli_real_escape_string($mysqli,$_GET['sb']));
}else{ }else{
$sb = "software_name"; $sb = "software_name";
@ -48,7 +48,7 @@ $num_rows = mysqli_fetch_row(mysqli_query($mysqli,"SELECT FOUND_ROWS()"));
<div class="col-md-4"> <div class="col-md-4">
<div class="input-group mb-3 mb-md-0"> <div class="input-group mb-3 mb-md-0">
<input type="search" class="form-control" name="q" value="<?php if(isset($q)){ echo strip_tags(htmlentities($q)); } ?>" placeholder="Search Licenses"> <input type="search" class="form-control" name="q" value="<?php if (isset($q)) { echo strip_tags(htmlentities($q)); } ?>" placeholder="Search Licenses">
<div class="input-group-append"> <div class="input-group-append">
<button class="btn btn-dark"><i class="fa fa-search"></i></button> <button class="btn btn-dark"><i class="fa fa-search"></i></button>
</div> </div>
@ -66,7 +66,7 @@ $num_rows = mysqli_fetch_row(mysqli_query($mysqli,"SELECT FOUND_ROWS()"));
<hr> <hr>
<div class="table-responsive"> <div class="table-responsive">
<table class="table table-striped table-borderless table-hover"> <table class="table table-striped table-borderless table-hover">
<thead class="text-dark <?php if($num_rows[0] == 0){ echo "d-none"; } ?>"> <thead class="text-dark <?php if ($num_rows[0] == 0) { echo "d-none"; } ?>">
<tr> <tr>
<th><a class="text-secondary" href="?<?php echo $url_query_strings_sb; ?>&sb=software_name&o=<?php echo $disp; ?>">Software</a></th> <th><a class="text-secondary" href="?<?php echo $url_query_strings_sb; ?>&sb=software_name&o=<?php echo $disp; ?>">Software</a></th>
<th><a class="text-secondary" href="?<?php echo $url_query_strings_sb; ?>&sb=software_type&o=<?php echo $disp; ?>">Type</a></th> <th><a class="text-secondary" href="?<?php echo $url_query_strings_sb; ?>&sb=software_type&o=<?php echo $disp; ?>">Type</a></th>
@ -79,7 +79,7 @@ $num_rows = mysqli_fetch_row(mysqli_query($mysqli,"SELECT FOUND_ROWS()"));
<tbody> <tbody>
<?php <?php
while($row = mysqli_fetch_array($sql)){ while ($row = mysqli_fetch_array($sql)) {
$software_id = $row['software_id']; $software_id = $row['software_id'];
$software_name = htmlentities($row['software_name']); $software_name = htmlentities($row['software_name']);
$software_version = htmlentities($row['software_version']); $software_version = htmlentities($row['software_version']);
@ -101,7 +101,7 @@ $num_rows = mysqli_fetch_row(mysqli_query($mysqli,"SELECT FOUND_ROWS()"));
// Asset Licenses // Asset Licenses
$asset_licenses_sql = mysqli_query($mysqli,"SELECT asset_id FROM software_assets WHERE software_id = $software_id"); $asset_licenses_sql = mysqli_query($mysqli,"SELECT asset_id FROM software_assets WHERE software_id = $software_id");
$asset_licenses_array = array(); $asset_licenses_array = array();
while($row = mysqli_fetch_array($asset_licenses_sql)){ while ($row = mysqli_fetch_array($asset_licenses_sql)) {
$asset_licenses_array[] = $row['asset_id']; $asset_licenses_array[] = $row['asset_id'];
$seat_count = $seat_count + 1; $seat_count = $seat_count + 1;
} }
@ -110,7 +110,7 @@ $num_rows = mysqli_fetch_row(mysqli_query($mysqli,"SELECT FOUND_ROWS()"));
// Contact Licenses // Contact Licenses
$contact_licenses_sql = mysqli_query($mysqli,"SELECT contact_id FROM software_contacts WHERE software_id = $software_id"); $contact_licenses_sql = mysqli_query($mysqli,"SELECT contact_id FROM software_contacts WHERE software_id = $software_id");
$contact_licenses_array = array(); $contact_licenses_array = array();
while($row = mysqli_fetch_array($contact_licenses_sql)){ while ($row = mysqli_fetch_array($contact_licenses_sql)) {
$contact_licenses_array[] = $row['contact_id']; $contact_licenses_array[] = $row['contact_id'];
$seat_count = $seat_count + 1; $seat_count = $seat_count + 1;
} }
@ -126,7 +126,7 @@ $num_rows = mysqli_fetch_row(mysqli_query($mysqli,"SELECT FOUND_ROWS()"));
<td><?php echo "$seat_count / $software_seats"; ?></td> <td><?php echo "$seat_count / $software_seats"; ?></td>
<td> <td>
<?php <?php
if($login_id > 0){ if ($login_id > 0) {
?> ?>
<button type="button" class="btn btn-dark btn-sm" data-toggle="modal" data-target="#viewPasswordModal<?php echo $login_id; ?>"><i class="fas fa-key"></i></button> <button type="button" class="btn btn-dark btn-sm" data-toggle="modal" data-target="#viewPasswordModal<?php echo $login_id; ?>"><i class="fas fa-key"></i></button>
@ -173,7 +173,7 @@ $num_rows = mysqli_fetch_row(mysqli_query($mysqli,"SELECT FOUND_ROWS()"));
</button> </button>
<div class="dropdown-menu"> <div class="dropdown-menu">
<a class="dropdown-item" href="#" data-toggle="modal" data-target="#editSoftwareModal<?php echo $software_id; ?>">Edit</a> <a class="dropdown-item" href="#" data-toggle="modal" data-target="#editSoftwareModal<?php echo $software_id; ?>">Edit</a>
<?php if($session_user_role == 3) { ?> <?php if ($session_user_role == 3) { ?>
<div class="dropdown-divider"></div> <div class="dropdown-divider"></div>
<a class="dropdown-item text-danger" href="post.php?delete_software=<?php echo $software_id; ?>">Delete</a> <a class="dropdown-item text-danger" href="post.php?delete_software=<?php echo $software_id; ?>">Delete</a>
<?php } ?> <?php } ?>

4
client_software_add_modal.php
View File

@ -138,7 +138,7 @@
<?php <?php
$sql = mysqli_query($mysqli,"SELECT * FROM assets LEFT JOIN contacts ON asset_contact_id = contact_id WHERE asset_client_id = $client_id ORDER BY asset_name ASC"); $sql = mysqli_query($mysqli,"SELECT * FROM assets LEFT JOIN contacts ON asset_contact_id = contact_id WHERE asset_client_id = $client_id ORDER BY asset_name ASC");
while($row = mysqli_fetch_array($sql)){ while ($row = mysqli_fetch_array($sql)) {
$asset_id = $row['asset_id']; $asset_id = $row['asset_id'];
$asset_name = htmlentities($row['asset_name']); $asset_name = htmlentities($row['asset_name']);
$asset_type = htmlentities($row['asset_type']); $asset_type = htmlentities($row['asset_type']);
@ -171,7 +171,7 @@
<?php <?php
$sql = mysqli_query($mysqli,"SELECT * FROM contacts WHERE contact_client_id = $client_id ORDER BY contact_name ASC"); $sql = mysqli_query($mysqli,"SELECT * FROM contacts WHERE contact_client_id = $client_id ORDER BY contact_name ASC");
while($row = mysqli_fetch_array($sql)){ while ($row = mysqli_fetch_array($sql)) {
$contact_id = $row['contact_id']; $contact_id = $row['contact_id'];
$contact_name = htmlentities($row['contact_name']); $contact_name = htmlentities($row['contact_name']);
$contact_email = htmlentities($row['contact_email']); $contact_email = htmlentities($row['contact_email']);

12
client_software_edit_modal.php
View File

@ -64,7 +64,7 @@
</div> </div>
<select class="form-control select2" name="type" required> <select class="form-control select2" name="type" required>
<?php foreach($software_types_array as $software_type_select) { ?> <?php foreach($software_types_array as $software_type_select) { ?>
<option <?php if($software_type == $software_type_select) { echo "selected"; } ?>><?php echo $software_type_select; ?></option> <option <?php if ($software_type == $software_type_select) { echo "selected"; } ?>><?php echo $software_type_select; ?></option>
<?php } ?> <?php } ?>
</select> </select>
</div> </div>
@ -79,7 +79,7 @@
<select class="form-control select2" name="license_type"> <select class="form-control select2" name="license_type">
<option value="">- Select a License Type -</option> <option value="">- Select a License Type -</option>
<?php foreach($license_types_array as $license_type_select) { ?> <?php foreach($license_types_array as $license_type_select) { ?>
<option <?php if($license_type_select == $software_license_type){ echo "selected"; } ?>><?php echo $license_type_select; ?></option> <option <?php if ($license_type_select == $software_license_type) { echo "selected"; } ?>><?php echo $license_type_select; ?></option>
<?php } ?> <?php } ?>
</select> </select>
</div> </div>
@ -138,7 +138,7 @@
<?php <?php
$sql_assets_select = mysqli_query($mysqli,"SELECT * FROM assets LEFT JOIN contacts ON asset_contact_id = contact_id WHERE asset_client_id = $client_id ORDER BY asset_name ASC"); $sql_assets_select = mysqli_query($mysqli,"SELECT * FROM assets LEFT JOIN contacts ON asset_contact_id = contact_id WHERE asset_client_id = $client_id ORDER BY asset_name ASC");
while($row = mysqli_fetch_array($sql_assets_select)){ while ($row = mysqli_fetch_array($sql_assets_select)) {
$asset_id_select = $row['asset_id']; $asset_id_select = $row['asset_id'];
$asset_name_select = htmlentities($row['asset_name']); $asset_name_select = htmlentities($row['asset_name']);
$asset_type_select = htmlentities($row['asset_type']); $asset_type_select = htmlentities($row['asset_type']);
@ -147,7 +147,7 @@
?> ?>
<li class="list-group-item"> <li class="list-group-item">
<div class="form-check"> <div class="form-check">
<input type="checkbox" class="form-check-input" name="assets[]" value="<?php echo $asset_id_select; ?>" <?php if(in_array($asset_id_select,$asset_licenses_array)){ echo "checked"; } ?>> <input type="checkbox" class="form-check-input" name="assets[]" value="<?php echo $asset_id_select; ?>" <?php if (in_array($asset_id_select,$asset_licenses_array)) { echo "checked"; } ?>>
<label class="form-check-label ml-2"><?php echo "$asset_name_select - $contact_name_select"; ?></label> <label class="form-check-label ml-2"><?php echo "$asset_name_select - $contact_name_select"; ?></label>
</div> </div>
</li> </li>
@ -171,7 +171,7 @@
<?php <?php
$sql_contacts_select = mysqli_query($mysqli,"SELECT * FROM contacts WHERE contact_client_id = $client_id ORDER BY contact_name ASC"); $sql_contacts_select = mysqli_query($mysqli,"SELECT * FROM contacts WHERE contact_client_id = $client_id ORDER BY contact_name ASC");
while($row = mysqli_fetch_array($sql_contacts_select)){ while ($row = mysqli_fetch_array($sql_contacts_select)) {
$contact_id_select = $row['contact_id']; $contact_id_select = $row['contact_id'];
$contact_name_select = htmlentities($row['contact_name']); $contact_name_select = htmlentities($row['contact_name']);
$contact_email_select = htmlentities($row['contact_email']); $contact_email_select = htmlentities($row['contact_email']);
@ -179,7 +179,7 @@
?> ?>
<li class="list-group-item"> <li class="list-group-item">
<div class="form-check"> <div class="form-check">
<input type="checkbox" class="form-check-input" name="contacts[]" value="<?php echo $contact_id_select; ?>" <?php if(in_array("$contact_id_select",$contact_licenses_array)){ echo "checked"; } ?>> <input type="checkbox" class="form-check-input" name="contacts[]" value="<?php echo $contact_id_select; ?>" <?php if (in_array("$contact_id_select",$contact_licenses_array)) { echo "checked"; } ?>>
<label class="form-check-label ml-2"><?php echo "$contact_name_select - $contact_email_select"; ?></label> <label class="form-check-label ml-2"><?php echo "$contact_name_select - $contact_email_select"; ?></label>
</div> </div>
</li> </li>

51
client_tickets.php
View File

@ -1,15 +1,15 @@
<?php include("inc_all_client.php"); ?> <?php include("inc_all_client.php"); ?>
<?php <?php
if(!empty($_GET['sb'])){ if (!empty($_GET['sb'])) {
$sb = strip_tags(mysqli_real_escape_string($mysqli,$_GET['sb'])); $sb = strip_tags(mysqli_real_escape_string($mysqli,$_GET['sb']));
}else{ }else{
$sb = "ticket_number"; $sb = "ticket_number";
} }
// Reverse default sort // Reverse default sort
if(!isset($_GET['o'])){ if (!isset($_GET['o'])) {
$o = "DESC"; $o = "DESC";
$disp = "ASC"; $disp = "ASC";
} }
@ -40,7 +40,6 @@ $num_rows = mysqli_fetch_row(mysqli_query($mysqli,"SELECT FOUND_ROWS()"));
<div class="card-tools"> <div class="card-tools">
<div class="btn-group"> <div class="btn-group">
<button type="button" class="btn btn-primary" data-toggle="modal" data-target="#addTicketModal"><i class="fas fa-fw fa-plus"></i> New Ticket</button> <button type="button" class="btn btn-primary" data-toggle="modal" data-target="#addTicketModal"><i class="fas fa-fw fa-plus"></i> New Ticket</button>
</button>
<button type="button" class="btn btn-primary dropdown-toggle dropdown-toggle-split" data-toggle="dropdown"></button> <button type="button" class="btn btn-primary dropdown-toggle dropdown-toggle-split" data-toggle="dropdown"></button>
<div class="dropdown-menu"> <div class="dropdown-menu">
<a class="dropdown-item text-dark" href="#" data-toggle="modal" data-target="#addScheduledTicketModal">Scheduled</a> <a class="dropdown-item text-dark" href="#" data-toggle="modal" data-target="#addScheduledTicketModal">Scheduled</a>
@ -52,10 +51,10 @@ $num_rows = mysqli_fetch_row(mysqli_query($mysqli,"SELECT FOUND_ROWS()"));
<form autocomplete="off"> <form autocomplete="off">
<input type="hidden" name="client_id" value="<?php echo $client_id; ?>"> <input type="hidden" name="client_id" value="<?php echo $client_id; ?>">
<div class="row"> <div class="row">
<div class="col-md-4"> <div class="col-md-4">
<div class="input-group mb-3 mb-md-0"> <div class="input-group mb-3 mb-md-0">
<input type="search" class="form-control" name="q" value="<?php if(isset($q)){ echo strip_tags(htmlentities($q)); } ?>" placeholder="Search Tickets"> <input type="search" class="form-control" name="q" value="<?php if (isset($q)) { echo strip_tags(htmlentities($q)); } ?>" placeholder="Search Tickets">
<div class="input-group-append"> <div class="input-group-append">
<button class="btn btn-dark"><i class="fa fa-search"></i></button> <button class="btn btn-dark"><i class="fa fa-search"></i></button>
</div> </div>
@ -73,24 +72,24 @@ $num_rows = mysqli_fetch_row(mysqli_query($mysqli,"SELECT FOUND_ROWS()"));
<hr> <hr>
<div class="table-responsive"> <div class="table-responsive">
<table class="table table-striped table-borderless table-hover"> <table class="table table-striped table-borderless table-hover">
<thead class="text-dark <?php if($num_rows[0] == 0){ echo "d-none"; } ?>"> <thead class="text-dark <?php if ($num_rows[0] == 0) { echo "d-none"; } ?>">
<tr> <tr>
<th><a class="text-dark" href="?<?php echo $url_query_strings_sb; ?>&sb=ticket_number&o=<?php echo $disp; ?>">Number</a></th> <th><a class="text-dark" href="?<?php echo $url_query_strings_sb; ?>&sb=ticket_number&o=<?php echo $disp; ?>">Number</a></th>
<th><a class="text-dark" href="?<?php echo $url_query_strings_sb; ?>&sb=ticket_subject&o=<?php echo $disp; ?>">Subject</a></th> <th><a class="text-dark" href="?<?php echo $url_query_strings_sb; ?>&sb=ticket_subject&o=<?php echo $disp; ?>">Subject</a></th>
<th><a class="text-dark" href="?<?php echo $url_query_strings_sb; ?>&sb=contact_name&o=<?php echo $disp; ?>">Contact</a></th> <th><a class="text-dark" href="?<?php echo $url_query_strings_sb; ?>&sb=contact_name&o=<?php echo $disp; ?>">Contact</a></th>
<th><a class="text-dark" href="?<?php echo $url_query_strings_sb; ?>&sb=ticket_priority&o=<?php echo $disp; ?>">Priority</a></th> <th><a class="text-dark" href="?<?php echo $url_query_strings_sb; ?>&sb=ticket_priority&o=<?php echo $disp; ?>">Priority</a></th>
<th><a class="text-dark" href="?<?php echo $url_query_strings_sb; ?>&sb=ticket_status&o=<?php echo $disp; ?>">Status</a> <th><a class="text-dark" href="?<?php echo $url_query_strings_sb; ?>&sb=ticket_status&o=<?php echo $disp; ?>">Status</a>
<th><a class="text-dark" href="?<?php echo $url_query_strings_sb; ?>&sb=user_name&o=<?php echo $disp; ?>">Assigned</a></th> <th><a class="text-dark" href="?<?php echo $url_query_strings_sb; ?>&sb=user_name&o=<?php echo $disp; ?>">Assigned</a></th>
<th><a class="text-dark" href="?<?php echo $url_query_strings_sb; ?>&sb=ticket_updated_at&o=<?php echo $disp; ?>">Last Response</a></th> <th><a class="text-dark" href="?<?php echo $url_query_strings_sb; ?>&sb=ticket_updated_at&o=<?php echo $disp; ?>">Last Response</a></th>
<th><a class="text-dark" href="?<?php echo $url_query_strings_sb; ?>&sb=ticket_created_at&o=<?php echo $disp; ?>">Created</a></th> <th><a class="text-dark" href="?<?php echo $url_query_strings_sb; ?>&sb=ticket_created_at&o=<?php echo $disp; ?>">Created</a></th>
<th class="text-center">Action</th> <th class="text-center">Action</th>
</tr> </tr>
</thead> </thead>
<tbody> <tbody>
<?php <?php
while($row = mysqli_fetch_array($sql)){ while ($row = mysqli_fetch_array($sql)) {
$ticket_id = $row['ticket_id']; $ticket_id = $row['ticket_id'];
$ticket_prefix = htmlentities($row['ticket_prefix']); $ticket_prefix = htmlentities($row['ticket_prefix']);
$ticket_number = htmlentities($row['ticket_number']); $ticket_number = htmlentities($row['ticket_number']);
@ -101,7 +100,7 @@ $num_rows = mysqli_fetch_row(mysqli_query($mysqli,"SELECT FOUND_ROWS()"));
$ticket_created_at = $row['ticket_created_at']; $ticket_created_at = $row['ticket_created_at'];
$ticket_updated_at = $row['ticket_updated_at']; $ticket_updated_at = $row['ticket_updated_at'];
if (empty($ticket_updated_at)) { if (empty($ticket_updated_at)) {
if($ticket_status == "Closed"){ if ($ticket_status == "Closed") {
$ticket_updated_at_display = "<p>Never</p>"; $ticket_updated_at_display = "<p>Never</p>";
} }
else{ else{
@ -111,27 +110,27 @@ $num_rows = mysqli_fetch_row(mysqli_query($mysqli,"SELECT FOUND_ROWS()"));
$ticket_updated_at_display = $ticket_updated_at; $ticket_updated_at_display = $ticket_updated_at;
} }
$ticket_closed_at = $row['ticket_closed_at']; $ticket_closed_at = $row['ticket_closed_at'];
if($ticket_status == "Open"){ if ($ticket_status == "Open") {
$ticket_status_display = "<span class='p-2 badge badge-primary'>$ticket_status</span>"; $ticket_status_display = "<span class='p-2 badge badge-primary'>$ticket_status</span>";
}elseif($ticket_status == "Working"){ }elseif ($ticket_status == "Working") {
$ticket_status_display = "<span class='p-2 badge badge-success'>$ticket_status</span>"; $ticket_status_display = "<span class='p-2 badge badge-success'>$ticket_status</span>";
}else{ }else{
$ticket_status_display = "<span class='p-2 badge badge-secondary'>$ticket_status</span>"; $ticket_status_display = "<span class='p-2 badge badge-secondary'>$ticket_status</span>";
} }
if($ticket_priority == "High"){ if ($ticket_priority == "High") {
$ticket_priority_display = "<span class='p-2 badge badge-danger'>$ticket_priority</span>"; $ticket_priority_display = "<span class='p-2 badge badge-danger'>$ticket_priority</span>";
}elseif($ticket_priority == "Medium"){ }elseif ($ticket_priority == "Medium") {
$ticket_priority_display = "<span class='p-2 badge badge-warning'>$ticket_priority</span>"; $ticket_priority_display = "<span class='p-2 badge badge-warning'>$ticket_priority</span>";
}elseif($ticket_priority == "Low"){ }elseif ($ticket_priority == "Low") {
$ticket_priority_display = "<span class='p-2 badge badge-info'>$ticket_priority</span>"; $ticket_priority_display = "<span class='p-2 badge badge-info'>$ticket_priority</span>";
}else{ }else{
$ticket_priority_display = "-"; $ticket_priority_display = "-";
} }
$ticket_assigned_to = $row['ticket_assigned_to']; $ticket_assigned_to = $row['ticket_assigned_to'];
if (empty($ticket_assigned_to)) { if (empty($ticket_assigned_to)) {
if($ticket_status == "Closed"){ if ($ticket_status == "Closed") {
$ticket_assigned_to_display = "<p>Not Assigned</p>"; $ticket_assigned_to_display = "<p>Not Assigned</p>";
} }
else{ else{
@ -142,7 +141,7 @@ $num_rows = mysqli_fetch_row(mysqli_query($mysqli,"SELECT FOUND_ROWS()"));
} }
$contact_id = $row['contact_id']; $contact_id = $row['contact_id'];
$contact_name = htmlentities($row['contact_name']); $contact_name = htmlentities($row['contact_name']);
if(empty($contact_name)){ if (empty($contact_name)) {
$contact_display = "-"; $contact_display = "-";
}else{ }else{
$contact_display = "$contact_name<br><small class='text-secondary'>$contact_email</small>"; $contact_display = "$contact_name<br><small class='text-secondary'>$contact_email</small>";
@ -160,19 +159,19 @@ $num_rows = mysqli_fetch_row(mysqli_query($mysqli,"SELECT FOUND_ROWS()"));
<td><a href="ticket.php?ticket_id=<?php echo $ticket_id; ?>"><?php echo $ticket_subject; ?></a></td> <td><a href="ticket.php?ticket_id=<?php echo $ticket_id; ?>"><?php echo $ticket_subject; ?></a></td>
<td><?php echo $contact_display; ?></td> <td><?php echo $contact_display; ?></td>
<td><?php echo $ticket_priority_display; ?></td> <td><?php echo $ticket_priority_display; ?></td>
<td><?php echo $ticket_status_display; ?></td> <td><?php echo $ticket_status_display; ?></td>
<td><?php echo $ticket_assigned_to_display; ?></td> <td><?php echo $ticket_assigned_to_display; ?></td>
<td><?php echo $ticket_updated_at_display; ?></td> <td><?php echo $ticket_updated_at_display; ?></td>
<td><?php echo $ticket_created_at; ?></td> <td><?php echo $ticket_created_at; ?></td>
<td> <td>
<?php if($ticket_status !== "Closed") { ?> <?php if ($ticket_status !== "Closed") { ?>
<div class="dropdown dropleft text-center"> <div class="dropdown dropleft text-center">
<button class="btn btn-secondary btn-sm" type="button" data-toggle="dropdown"> <button class="btn btn-secondary btn-sm" type="button" data-toggle="dropdown">
<i class="fas fa-ellipsis-h"></i> <i class="fas fa-ellipsis-h"></i>
</button> </button>
<div class="dropdown-menu"> <div class="dropdown-menu">
<a class="dropdown-item" href="#" data-toggle="modal" data-target="#editTicketModal<?php echo $ticket_id; ?>">Edit</a> <a class="dropdown-item" href="#" data-toggle="modal" data-target="#editTicketModal<?php echo $ticket_id; ?>">Edit</a>
<?php if($session_user_role == 3) { ?> <?php if ($session_user_role == 3) { ?>
<div class="dropdown-divider"></div> <div class="dropdown-divider"></div>
<a class="dropdown-item text-danger" href="post.php?delete_ticket=<?php echo $ticket_id; ?>">Delete</a> <a class="dropdown-item text-danger" href="post.php?delete_ticket=<?php echo $ticket_id; ?>">Delete</a>
<?php } ?> <?php } ?>
@ -201,4 +200,4 @@ include("ticket_add_modal.php");
include("scheduled_ticket_add_modal.php"); include("scheduled_ticket_add_modal.php");
?> ?>
<?php include("footer.php"); ?> <?php include("footer.php"); ?>

16
client_trips.php
View File

@ -2,20 +2,20 @@
<?php <?php
if(!empty($_GET['sb'])){ if (!empty($_GET['sb'])) {
$sb = strip_tags(mysqli_real_escape_string($mysqli,$_GET['sb'])); $sb = strip_tags(mysqli_real_escape_string($mysqli,$_GET['sb']));
}else{ }else{
$sb = "trip_date"; $sb = "trip_date";
} }
// Reverse default sort // Reverse default sort
if(!isset($_GET['o'])){ if (!isset($_GET['o'])) {
$o = "DESC"; $o = "DESC";
$disp = "ASC"; $disp = "ASC";
} }
//Date From and Date To Filter //Date From and Date To Filter
if(isset($_GET['dtf'])){ if (isset($_GET['dtf'])) {
$dtf = strip_tags(mysqli_real_escape_string($mysqli,$_GET['dtf'])); $dtf = strip_tags(mysqli_real_escape_string($mysqli,$_GET['dtf']));
$dtt = strip_tags(mysqli_real_escape_string($mysqli,$_GET['dtt'])); $dtt = strip_tags(mysqli_real_escape_string($mysqli,$_GET['dtt']));
}else{ }else{
@ -52,7 +52,7 @@ $num_rows = mysqli_fetch_row(mysqli_query($mysqli,"SELECT FOUND_ROWS()"));
<div class="col-md-4"> <div class="col-md-4">
<div class="input-group mb-3 mb-md-0"> <div class="input-group mb-3 mb-md-0">
<input type="search" class="form-control" name="q" value="<?php if(isset($q)){ echo strip_tags(htmlentities($q)); } ?>" placeholder="Search Trips"> <input type="search" class="form-control" name="q" value="<?php if (isset($q)) { echo strip_tags(htmlentities($q)); } ?>" placeholder="Search Trips">
<div class="input-group-append"> <div class="input-group-append">
<button class="btn btn-dark"><i class="fa fa-search"></i></button> <button class="btn btn-dark"><i class="fa fa-search"></i></button>
</div> </div>
@ -71,7 +71,7 @@ $num_rows = mysqli_fetch_row(mysqli_query($mysqli,"SELECT FOUND_ROWS()"));
<hr> <hr>
<div class="table-responsive"> <div class="table-responsive">
<table class="table table-striped table-borderless table-hover"> <table class="table table-striped table-borderless table-hover">
<thead class="text-dark <?php if($num_rows[0] == 0){ echo "d-none"; } ?>"> <thead class="text-dark <?php if ($num_rows[0] == 0) { echo "d-none"; } ?>">
<tr> <tr>
<th><a class="text-dark" href="?<?php echo $url_query_strings_sb; ?>&sb=trip_date&o=<?php echo $disp; ?>">Date</a></th> <th><a class="text-dark" href="?<?php echo $url_query_strings_sb; ?>&sb=trip_date&o=<?php echo $disp; ?>">Date</a></th>
<th><a class="text-dark" href="?<?php echo $url_query_strings_sb; ?>&sb=user_name&o=<?php echo $disp; ?>">Driver</a></th> <th><a class="text-dark" href="?<?php echo $url_query_strings_sb; ?>&sb=user_name&o=<?php echo $disp; ?>">Driver</a></th>
@ -85,7 +85,7 @@ $num_rows = mysqli_fetch_row(mysqli_query($mysqli,"SELECT FOUND_ROWS()"));
<tbody> <tbody>
<?php <?php
while($row = mysqli_fetch_array($sql)){ while ($row = mysqli_fetch_array($sql)) {
$trip_id = $row['trip_id']; $trip_id = $row['trip_id'];
$trip_date = $row['trip_date']; $trip_date = $row['trip_date'];
$trip_purpose = htmlentities($row['trip_purpose']); $trip_purpose = htmlentities($row['trip_purpose']);
@ -96,13 +96,13 @@ $num_rows = mysqli_fetch_row(mysqli_query($mysqli,"SELECT FOUND_ROWS()"));
$round_trip = htmlentities($row['round_trip']); $round_trip = htmlentities($row['round_trip']);
$client_id = $row['trip_client_id']; $client_id = $row['trip_client_id'];
if($round_trip == 1){ if ($round_trip == 1) {
$round_trip_display = "<i class='fa fa-fw fa-sync-alt text-secondary'></i>"; $round_trip_display = "<i class='fa fa-fw fa-sync-alt text-secondary'></i>";
}else{ }else{
$round_trip_display = ""; $round_trip_display = "";
} }
$user_name = htmlentities($row['user_name']); $user_name = htmlentities($row['user_name']);
if(empty($user_name)){ if (empty($user_name)) {
$user_name_display = "-"; $user_name_display = "-";
}else{ }else{
$user_name_display = $user_name; $user_name_display = $user_name;

26
client_vendor_templates.php
View File

@ -2,11 +2,11 @@
<?php <?php
if(isset($_GET['q'])){ if (isset($_GET['q'])) {
$q = strip_tags(mysqli_real_escape_string($mysqli,$_GET['q'])); $q = strip_tags(mysqli_real_escape_string($mysqli,$_GET['q']));
//Phone Numbers //Phone Numbers
$phone_query = preg_replace("/[^0-9]/", '',$q); $phone_query = preg_replace("/[^0-9]/", '',$q);
if(empty($phone_query)){ if (empty($phone_query)) {
$phone_query = $q; $phone_query = $q;
} }
}else{ }else{
@ -14,7 +14,7 @@ if(isset($_GET['q'])){
$phone_query = ""; $phone_query = "";
} }
if(!empty($_GET['sb'])){ if (!empty($_GET['sb'])) {
$sb = strip_tags(mysqli_real_escape_string($mysqli,$_GET['sb'])); $sb = strip_tags(mysqli_real_escape_string($mysqli,$_GET['sb']));
}else{ }else{
$sb = "vendor_name"; $sb = "vendor_name";
@ -53,7 +53,7 @@ $num_rows = mysqli_fetch_row(mysqli_query($mysqli,"SELECT FOUND_ROWS()"));
<div class="col-md-4"> <div class="col-md-4">
<div class="input-group mb-3 mb-md-0"> <div class="input-group mb-3 mb-md-0">
<input type="search" class="form-control" name="q" value="<?php if(isset($q)){ echo strip_tags(htmlentities($q)); } ?>" placeholder="Search Vendors Templates"> <input type="search" class="form-control" name="q" value="<?php if (isset($q)) { echo strip_tags(htmlentities($q)); } ?>" placeholder="Search Vendors Templates">
<div class="input-group-append"> <div class="input-group-append">
<button class="btn btn-dark"><i class="fa fa-search"></i></button> <button class="btn btn-dark"><i class="fa fa-search"></i></button>
</div> </div>
@ -65,7 +65,7 @@ $num_rows = mysqli_fetch_row(mysqli_query($mysqli,"SELECT FOUND_ROWS()"));
<hr> <hr>
<div class="table-responsive"> <div class="table-responsive">
<table class="table table-striped table-borderless table-hover"> <table class="table table-striped table-borderless table-hover">
<thead class="text-dark <?php if($num_rows[0] == 0){ echo "d-none"; } ?>"> <thead class="text-dark <?php if ($num_rows[0] == 0) { echo "d-none"; } ?>">
<tr> <tr>
<th><a class="text-secondary" href="?<?php echo $url_query_strings_sb; ?>&sb=vendor_name&o=<?php echo $disp; ?>">Vendor</a></th> <th><a class="text-secondary" href="?<?php echo $url_query_strings_sb; ?>&sb=vendor_name&o=<?php echo $disp; ?>">Vendor</a></th>
<th><a class="text-secondary" href="?<?php echo $url_query_strings_sb; ?>&sb=vendor_description&o=<?php echo $disp; ?>">Description</a></th> <th><a class="text-secondary" href="?<?php echo $url_query_strings_sb; ?>&sb=vendor_description&o=<?php echo $disp; ?>">Description</a></th>
@ -76,18 +76,18 @@ $num_rows = mysqli_fetch_row(mysqli_query($mysqli,"SELECT FOUND_ROWS()"));
<tbody> <tbody>
<?php <?php
while($row = mysqli_fetch_array($sql)){ while ($row = mysqli_fetch_array($sql)) {
$vendor_id = $row['vendor_id']; $vendor_id = $row['vendor_id'];
$vendor_name = htmlentities($row['vendor_name']); $vendor_name = htmlentities($row['vendor_name']);
$vendor_description = htmlentities($row['vendor_description']); $vendor_description = htmlentities($row['vendor_description']);
if(empty($vendor_description)){ if (empty($vendor_description)) {
$vendor_description_display = "-"; $vendor_description_display = "-";
}else{ }else{
$vendor_description_display = $vendor_description; $vendor_description_display = $vendor_description;
} }
$vendor_account_number = htmlentities($row['vendor_account_number']); $vendor_account_number = htmlentities($row['vendor_account_number']);
$vendor_contact_name = htmlentities($row['vendor_contact_name']); $vendor_contact_name = htmlentities($row['vendor_contact_name']);
if(empty($vendor_contact_name)){ if (empty($vendor_contact_name)) {
$vendor_contact_name_display = "-"; $vendor_contact_name_display = "-";
}else{ }else{
$vendor_contact_name_display = $vendor_contact_name; $vendor_contact_name_display = $vendor_contact_name;
@ -107,7 +107,7 @@ $num_rows = mysqli_fetch_row(mysqli_query($mysqli,"SELECT FOUND_ROWS()"));
<i class="fa fa-fw fa-building text-secondary"></i> <i class="fa fa-fw fa-building text-secondary"></i>
<a class="text-dark" href="#" data-toggle="modal" data-target="#editVendorTemplateModal<?php echo $vendor_id; ?>"><?php echo $vendor_name; ?></a> <a class="text-dark" href="#" data-toggle="modal" data-target="#editVendorTemplateModal<?php echo $vendor_id; ?>"><?php echo $vendor_name; ?></a>
<?php <?php
if(!empty($vendor_account_number)){ if (!empty($vendor_account_number)) {
?> ?>
<br> <br>
<small class="text-secondary"><?php echo $vendor_account_number; ?></small> <small class="text-secondary"><?php echo $vendor_account_number; ?></small>
@ -118,7 +118,7 @@ $num_rows = mysqli_fetch_row(mysqli_query($mysqli,"SELECT FOUND_ROWS()"));
<td><?php echo $vendor_description_display; ?></td> <td><?php echo $vendor_description_display; ?></td>
<td> <td>
<?php <?php
if(!empty($vendor_contact_name)){ if (!empty($vendor_contact_name)) {
?> ?>
<i class="fa fa-fw fa-user text-secondary mr-2 mb-2"></i><?php echo $vendor_contact_name_display; ?> <i class="fa fa-fw fa-user text-secondary mr-2 mb-2"></i><?php echo $vendor_contact_name_display; ?>
<br> <br>
@ -128,7 +128,7 @@ $num_rows = mysqli_fetch_row(mysqli_query($mysqli,"SELECT FOUND_ROWS()"));
} }
?> ?>
<?php <?php
if(!empty($vendor_phone)){ if (!empty($vendor_phone)) {
?> ?>
<i class="fa fa-fw fa-phone text-secondary mr-2 mb-2"></i><?php echo $vendor_phone; ?> <i class="fa fa-fw fa-phone text-secondary mr-2 mb-2"></i><?php echo $vendor_phone; ?>
<br> <br>
@ -136,7 +136,7 @@ $num_rows = mysqli_fetch_row(mysqli_query($mysqli,"SELECT FOUND_ROWS()"));
} }
?> ?>
<?php <?php
if(!empty($vendor_email)){ if (!empty($vendor_email)) {
?> ?>
<i class="fa fa-fw fa-envelope text-secondary mr-2 mb-2"></i><?php echo $vendor_email; ?> <i class="fa fa-fw fa-envelope text-secondary mr-2 mb-2"></i><?php echo $vendor_email; ?>
<br> <br>
@ -151,7 +151,7 @@ $num_rows = mysqli_fetch_row(mysqli_query($mysqli,"SELECT FOUND_ROWS()"));
</button> </button>
<div class="dropdown-menu"> <div class="dropdown-menu">
<a class="dropdown-item" href="#" data-toggle="modal" data-target="#editVendorTemplateModal<?php echo $vendor_id; ?>">Edit</a> <a class="dropdown-item" href="#" data-toggle="modal" data-target="#editVendorTemplateModal<?php echo $vendor_id; ?>">Edit</a>
<?php if($session_user_role == 3) { ?> <?php if ($session_user_role == 3) { ?>
<div class="dropdown-divider"></div> <div class="dropdown-divider"></div>
<a class="dropdown-item text-danger" href="post.php?delete_vendor=<?php echo $vendor_id; ?>">Delete</a> <a class="dropdown-item text-danger" href="post.php?delete_vendor=<?php echo $vendor_id; ?>">Delete</a>
<?php } ?> <?php } ?>

26
client_vendors.php
View File

@ -2,11 +2,11 @@
<?php <?php
if(isset($_GET['q'])){ if (isset($_GET['q'])) {
$q = strip_tags(mysqli_real_escape_string($mysqli,$_GET['q'])); $q = strip_tags(mysqli_real_escape_string($mysqli,$_GET['q']));
//Phone Numbers //Phone Numbers
$phone_query = preg_replace("/[^0-9]/", '',$q); $phone_query = preg_replace("/[^0-9]/", '',$q);
if(empty($phone_query)){ if (empty($phone_query)) {
$phone_query = $q; $phone_query = $q;
} }
}else{ }else{
@ -14,7 +14,7 @@ if(isset($_GET['q'])){
$phone_query = ""; $phone_query = "";
} }
if(!empty($_GET['sb'])){ if (!empty($_GET['sb'])) {
$sb = strip_tags(mysqli_real_escape_string($mysqli,$_GET['sb'])); $sb = strip_tags(mysqli_real_escape_string($mysqli,$_GET['sb']));
}else{ }else{
$sb = "vendor_name"; $sb = "vendor_name";
@ -60,7 +60,7 @@ $num_rows = mysqli_fetch_row(mysqli_query($mysqli,"SELECT FOUND_ROWS()"));
<div class="col-md-4"> <div class="col-md-4">
<div class="input-group mb-3 mb-md-0"> <div class="input-group mb-3 mb-md-0">
<input type="search" class="form-control" name="q" value="<?php if(isset($q)){ echo strip_tags(htmlentities($q)); } ?>" placeholder="Search Vendors"> <input type="search" class="form-control" name="q" value="<?php if (isset($q)) { echo strip_tags(htmlentities($q)); } ?>" placeholder="Search Vendors">
<div class="input-group-append"> <div class="input-group-append">
<button class="btn btn-dark"><i class="fa fa-search"></i></button> <button class="btn btn-dark"><i class="fa fa-search"></i></button>
</div> </div>
@ -79,7 +79,7 @@ $num_rows = mysqli_fetch_row(mysqli_query($mysqli,"SELECT FOUND_ROWS()"));
<hr> <hr>
<div class="table-responsive"> <div class="table-responsive">
<table class="table table-striped table-borderless table-hover"> <table class="table table-striped table-borderless table-hover">
<thead class="text-dark <?php if($num_rows[0] == 0){ echo "d-none"; } ?>"> <thead class="text-dark <?php if ($num_rows[0] == 0) { echo "d-none"; } ?>">
<tr> <tr>
<th><a class="text-secondary" href="?<?php echo $url_query_strings_sb; ?>&sb=vendor_name&o=<?php echo $disp; ?>">Vendor</a></th> <th><a class="text-secondary" href="?<?php echo $url_query_strings_sb; ?>&sb=vendor_name&o=<?php echo $disp; ?>">Vendor</a></th>
<th><a class="text-secondary" href="?<?php echo $url_query_strings_sb; ?>&sb=vendor_description&o=<?php echo $disp; ?>">Description</a></th> <th><a class="text-secondary" href="?<?php echo $url_query_strings_sb; ?>&sb=vendor_description&o=<?php echo $disp; ?>">Description</a></th>
@ -90,18 +90,18 @@ $num_rows = mysqli_fetch_row(mysqli_query($mysqli,"SELECT FOUND_ROWS()"));
<tbody> <tbody>
<?php <?php
while($row = mysqli_fetch_array($sql)){ while ($row = mysqli_fetch_array($sql)) {
$vendor_id = $row['vendor_id']; $vendor_id = $row['vendor_id'];
$vendor_name = htmlentities($row['vendor_name']); $vendor_name = htmlentities($row['vendor_name']);
$vendor_description = htmlentities($row['vendor_description']); $vendor_description = htmlentities($row['vendor_description']);
if(empty($vendor_description)){ if (empty($vendor_description)) {
$vendor_description_display = "-"; $vendor_description_display = "-";
}else{ }else{
$vendor_description_display = $vendor_description; $vendor_description_display = $vendor_description;
} }
$vendor_account_number = htmlentities($row['vendor_account_number']); $vendor_account_number = htmlentities($row['vendor_account_number']);
$vendor_contact_name = htmlentities($row['vendor_contact_name']); $vendor_contact_name = htmlentities($row['vendor_contact_name']);
if(empty($vendor_contact_name)){ if (empty($vendor_contact_name)) {
$vendor_contact_name_display = "-"; $vendor_contact_name_display = "-";
}else{ }else{
$vendor_contact_name_display = $vendor_contact_name; $vendor_contact_name_display = $vendor_contact_name;
@ -122,7 +122,7 @@ $num_rows = mysqli_fetch_row(mysqli_query($mysqli,"SELECT FOUND_ROWS()"));
<i class="fa fa-fw fa-building text-secondary"></i> <i class="fa fa-fw fa-building text-secondary"></i>
<a class="text-dark" href="#" data-toggle="modal" data-target="#editVendorModal<?php echo $vendor_id; ?>"><?php echo $vendor_name; ?></a> <a class="text-dark" href="#" data-toggle="modal" data-target="#editVendorModal<?php echo $vendor_id; ?>"><?php echo $vendor_name; ?></a>
<?php <?php
if(!empty($vendor_account_number)){ if (!empty($vendor_account_number)) {
?> ?>
<br> <br>
<small class="text-secondary"><?php echo $vendor_account_number; ?></small> <small class="text-secondary"><?php echo $vendor_account_number; ?></small>
@ -133,7 +133,7 @@ $num_rows = mysqli_fetch_row(mysqli_query($mysqli,"SELECT FOUND_ROWS()"));
<td><?php echo $vendor_description_display; ?></td> <td><?php echo $vendor_description_display; ?></td>
<td> <td>
<?php <?php
if(!empty($vendor_contact_name)){ if (!empty($vendor_contact_name)) {
?> ?>
<i class="fa fa-fw fa-user text-secondary mr-2 mb-2"></i><?php echo $vendor_contact_name_display; ?> <i class="fa fa-fw fa-user text-secondary mr-2 mb-2"></i><?php echo $vendor_contact_name_display; ?>
<br> <br>
@ -143,7 +143,7 @@ $num_rows = mysqli_fetch_row(mysqli_query($mysqli,"SELECT FOUND_ROWS()"));
} }
?> ?>
<?php <?php
if(!empty($vendor_phone)){ if (!empty($vendor_phone)) {
?> ?>
<i class="fa fa-fw fa-phone text-secondary mr-2 mb-2"></i><?php echo $vendor_phone; ?> <i class="fa fa-fw fa-phone text-secondary mr-2 mb-2"></i><?php echo $vendor_phone; ?>
<br> <br>
@ -151,7 +151,7 @@ $num_rows = mysqli_fetch_row(mysqli_query($mysqli,"SELECT FOUND_ROWS()"));
} }
?> ?>
<?php <?php
if(!empty($vendor_email)){ if (!empty($vendor_email)) {
?> ?>
<i class="fa fa-fw fa-envelope text-secondary mr-2 mb-2"></i><?php echo $vendor_email; ?> <i class="fa fa-fw fa-envelope text-secondary mr-2 mb-2"></i><?php echo $vendor_email; ?>
<br> <br>
@ -166,7 +166,7 @@ $num_rows = mysqli_fetch_row(mysqli_query($mysqli,"SELECT FOUND_ROWS()"));
</button> </button>
<div class="dropdown-menu"> <div class="dropdown-menu">
<a class="dropdown-item" href="#" data-toggle="modal" data-target="#editVendorModal<?php echo $vendor_id; ?>">Edit</a> <a class="dropdown-item" href="#" data-toggle="modal" data-target="#editVendorModal<?php echo $vendor_id; ?>">Edit</a>
<?php if($session_user_role == 3) { ?> <?php if ($session_user_role == 3) { ?>
<div class="dropdown-divider"></div> <div class="dropdown-divider"></div>
<a class="dropdown-item text-danger" href="post.php?delete_vendor=<?php echo $vendor_id; ?>">Delete</a> <a class="dropdown-item text-danger" href="post.php?delete_vendor=<?php echo $vendor_id; ?>">Delete</a>
<?php } ?> <?php } ?>

92
clients.php
View File

@ -3,7 +3,7 @@
include("inc_all.php"); include("inc_all.php");
//Paging //Paging
if(isset($_GET['p'])){ if (isset($_GET['p'])) {
$p = intval($_GET['p']); $p = intval($_GET['p']);
$record_from = (($p)-1)*$_SESSION['records_per_page']; $record_from = (($p)-1)*$_SESSION['records_per_page'];
$record_to = $_SESSION['records_per_page']; $record_to = $_SESSION['records_per_page'];
@ -14,11 +14,11 @@ if(isset($_GET['p'])){
} }
//Custom Query Filter //Custom Query Filter
if(isset($_GET['query'])){ if (isset($_GET['query'])) {
$query = strip_tags(mysqli_real_escape_string($mysqli,$_GET['query'])); $query = strip_tags(mysqli_real_escape_string($mysqli,$_GET['query']));
//Phone Numbers //Phone Numbers
$phone_query = preg_replace("/[^0-9]/", '',$query); $phone_query = preg_replace("/[^0-9]/", '',$query);
if(empty($phone_query)){ if (empty($phone_query)) {
$phone_query = $query; $phone_query = $query;
} }
}else{ }else{
@ -27,15 +27,15 @@ if(isset($_GET['query'])){
} }
//Column Filter //Column Filter
if(!empty($_GET['sortby'])){ if (!empty($_GET['sortby'])) {
$sortby = strip_tags(mysqli_real_escape_string($mysqli,$_GET['sortby'])); $sortby = strip_tags(mysqli_real_escape_string($mysqli,$_GET['sortby']));
}else{ }else{
$sortby = "client_accessed_at"; $sortby = "client_accessed_at";
} }
//Column Order Filter //Column Order Filter
if(isset($_GET['order'])){ if (isset($_GET['order'])) {
if($_GET['order'] == 'ASC'){ if ($_GET['order'] == 'ASC') {
$order = "ASC"; $order = "ASC";
$order_display = "DESC"; $order_display = "DESC";
}else{ }else{
@ -47,38 +47,38 @@ if(isset($_GET['order'])){
$order_display = "ASC"; $order_display = "ASC";
} }
if(empty($_GET['canned_date'])) { if (empty($_GET['canned_date'])) {
//Prevents lots of undefined variable errors. //Prevents lots of undefined variable errors.
// $dtf and $dtt will be set by the below else to 0000-00-00 / 9999-00-00 // $dtf and $dtt will be set by the below else to 0000-00-00 / 9999-00-00
$_GET['canned_date'] = 'custom'; $_GET['canned_date'] = 'custom';
} }
//Date Filter //Date Filter
if($_GET['canned_date'] == "custom" && !empty($_GET['date_from'])){ if ($_GET['canned_date'] == "custom" && !empty($_GET['date_from'])) {
$date_from = strip_tags(mysqli_real_escape_string($mysqli,$_GET['date_from'])); $date_from = strip_tags(mysqli_real_escape_string($mysqli,$_GET['date_from']));
$date_to = strip_tags(mysqli_real_escape_string($mysqli,$_GET['date_to'])); $date_to = strip_tags(mysqli_real_escape_string($mysqli,$_GET['date_to']));
}elseif($_GET['canned_date'] == "today"){ }elseif ($_GET['canned_date'] == "today") {
$date_from = date('Y-m-d'); $date_from = date('Y-m-d');
$date_to = date('Y-m-d'); $date_to = date('Y-m-d');
}elseif($_GET['canned_date'] == "yesterday"){ }elseif ($_GET['canned_date'] == "yesterday") {
$date_from = date('Y-m-d',strtotime("yesterday")); $date_from = date('Y-m-d',strtotime("yesterday"));
$date_to = date('Y-m-d',strtotime("yesterday")); $date_to = date('Y-m-d',strtotime("yesterday"));
}elseif($_GET['canned_date'] == "thisweek"){ }elseif ($_GET['canned_date'] == "thisweek") {
$date_from = date('Y-m-d',strtotime("monday this week")); $date_from = date('Y-m-d',strtotime("monday this week"));
$date_to = date('Y-m-d'); $date_to = date('Y-m-d');
}elseif($_GET['canned_date'] == "lastweek"){ }elseif ($_GET['canned_date'] == "lastweek") {
$date_from = date('Y-m-d',strtotime("monday last week")); $date_from = date('Y-m-d',strtotime("monday last week"));
$date_to = date('Y-m-d',strtotime("sunday last week")); $date_to = date('Y-m-d',strtotime("sunday last week"));
}elseif($_GET['canned_date'] == "thismonth"){ }elseif ($_GET['canned_date'] == "thismonth") {
$date_from = date('Y-m-01'); $date_from = date('Y-m-01');
$date_to = date('Y-m-d'); $date_to = date('Y-m-d');
}elseif($_GET['canned_date'] == "lastmonth"){ }elseif ($_GET['canned_date'] == "lastmonth") {
$date_from = date('Y-m-d',strtotime("first day of last month")); $date_from = date('Y-m-d',strtotime("first day of last month"));
$date_to = date('Y-m-d',strtotime("last day of last month")); $date_to = date('Y-m-d',strtotime("last day of last month"));
}elseif($_GET['canned_date'] == "thisyear"){ }elseif ($_GET['canned_date'] == "thisyear") {
$date_from = date('Y-01-01'); $date_from = date('Y-01-01');
$date_to = date('Y-m-d'); $date_to = date('Y-m-d');
}elseif($_GET['canned_date'] == "lastyear"){ }elseif ($_GET['canned_date'] == "lastyear") {
$date_from = date('Y-m-d',strtotime("first day of january last year")); $date_from = date('Y-m-d',strtotime("first day of january last year"));
$date_to = date('Y-m-d',strtotime("last day of december last year")); $date_to = date('Y-m-d',strtotime("last day of december last year"));
}else{ }else{
@ -108,7 +108,7 @@ $num_rows = mysqli_fetch_row(mysqli_query($mysqli,"SELECT FOUND_ROWS()"));
<div class="card-header py-2"> <div class="card-header py-2">
<h3 class="card-title mt-2"><i class="fa fa-fw fa-users"></i> Clients</h3> <h3 class="card-title mt-2"><i class="fa fa-fw fa-users"></i> Clients</h3>
<div class="card-tools"> <div class="card-tools">
<?php if($session_user_role == 3) { ?> <?php if ($session_user_role == 3) { ?>
<button type="button" class="btn btn-primary" data-toggle="modal" data-target="#addClientModal"><i class="fas fa-fw fa-plus"></i> New Client</button> <button type="button" class="btn btn-primary" data-toggle="modal" data-target="#addClientModal"><i class="fas fa-fw fa-plus"></i> New Client</button>
<?php } ?> <?php } ?>
</div> </div>
@ -119,7 +119,7 @@ $num_rows = mysqli_fetch_row(mysqli_query($mysqli,"SELECT FOUND_ROWS()"));
<div class="row"> <div class="row">
<div class="col-sm-4"> <div class="col-sm-4">
<div class="input-group"> <div class="input-group">
<input type="search" class="form-control" name="query" value="<?php if(isset($query)){echo strip_tags(htmlentities($query));} ?>" placeholder="Search Clients" autofocus> <input type="search" class="form-control" name="query" value="<?php if (isset($query)) {echo strip_tags(htmlentities($query));} ?>" placeholder="Search Clients" autofocus>
<div class="input-group-append"> <div class="input-group-append">
<button class="btn btn-secondary" type="button" data-toggle="collapse" data-target="#advancedFilter"><i class="fas fa-filter"></i></button> <button class="btn btn-secondary" type="button" data-toggle="collapse" data-target="#advancedFilter"><i class="fas fa-filter"></i></button>
<button class="btn btn-primary"><i class="fa fa-search"></i></button> <button class="btn btn-primary"><i class="fa fa-search"></i></button>
@ -127,21 +127,21 @@ $num_rows = mysqli_fetch_row(mysqli_query($mysqli,"SELECT FOUND_ROWS()"));
</div> </div>
</div> </div>
</div> </div>
<div class="collapse mt-3 <?php if(!empty($_GET['date_from'])){ echo "show"; } ?>" id="advancedFilter"> <div class="collapse mt-3 <?php if (!empty($_GET['date_from'])) { echo "show"; } ?>" id="advancedFilter">
<div class="row"> <div class="row">
<div class="col-md-2"> <div class="col-md-2">
<div class="form-group"> <div class="form-group">
<label>Canned Date</label> <label>Canned Date</label>
<select class="form-control select2" name="canned_date"> <select class="form-control select2" name="canned_date">
<option <?php if($_GET['canned_date'] == "custom"){ echo "selected"; } ?> value="custom">Custom</option> <option <?php if ($_GET['canned_date'] == "custom") { echo "selected"; } ?> value="custom">Custom</option>
<option <?php if($_GET['canned_date'] == "today"){ echo "selected"; } ?> value="today">Today</option> <option <?php if ($_GET['canned_date'] == "today") { echo "selected"; } ?> value="today">Today</option>
<option <?php if($_GET['canned_date'] == "yesterday"){ echo "selected"; } ?> value="yesterday">Yesterday</option> <option <?php if ($_GET['canned_date'] == "yesterday") { echo "selected"; } ?> value="yesterday">Yesterday</option>
<option <?php if($_GET['canned_date'] == "thisweek"){ echo "selected"; } ?> value="thisweek">This Week</option> <option <?php if ($_GET['canned_date'] == "thisweek") { echo "selected"; } ?> value="thisweek">This Week</option>
<option <?php if($_GET['canned_date'] == "lastweek"){ echo "selected"; } ?> value="lastweek">Last Week</option> <option <?php if ($_GET['canned_date'] == "lastweek") { echo "selected"; } ?> value="lastweek">Last Week</option>
<option <?php if($_GET['canned_date'] == "thismonth"){ echo "selected"; } ?> value="thismonth">This Month</option> <option <?php if ($_GET['canned_date'] == "thismonth") { echo "selected"; } ?> value="thismonth">This Month</option>
<option <?php if($_GET['canned_date'] == "lastmonth"){ echo "selected"; } ?> value="lastmonth">Last Month</option> <option <?php if ($_GET['canned_date'] == "lastmonth") { echo "selected"; } ?> value="lastmonth">Last Month</option>
<option <?php if($_GET['canned_date'] == "thisyear"){ echo "selected"; } ?> value="thisyear">This Year</option> <option <?php if ($_GET['canned_date'] == "thisyear") { echo "selected"; } ?> value="thisyear">This Year</option>
<option <?php if($_GET['canned_date'] == "lastyear"){ echo "selected"; } ?> value="lastyear">Last Year</option> <option <?php if ($_GET['canned_date'] == "lastyear") { echo "selected"; } ?> value="lastyear">Last Year</option>
</select> </select>
</div> </div>
</div> </div>
@ -163,19 +163,19 @@ $num_rows = mysqli_fetch_row(mysqli_query($mysqli,"SELECT FOUND_ROWS()"));
<hr> <hr>
<div class="table-responsive"> <div class="table-responsive">
<table class="table table-striped table-hover table-borderless"> <table class="table table-striped table-hover table-borderless">
<thead class="<?php if($num_rows[0] == 0){ echo "d-none"; } ?>"> <thead class="<?php if ($num_rows[0] == 0) { echo "d-none"; } ?>">
<tr> <tr>
<th><a class="text-dark" href="?<?php echo $url_query_strings_sortby; ?>&sortby=client_name&order=<?php echo $order_display; ?>">Name</a></th> <th><a class="text-dark" href="?<?php echo $url_query_strings_sortby; ?>&sortby=client_name&order=<?php echo $order_display; ?>">Name</a></th>
<th><a class="text-dark" href="?<?php echo $url_query_strings_sortby; ?>&sortby=location_city&order=<?php echo $order_display; ?>">Address </a></th> <th><a class="text-dark" href="?<?php echo $url_query_strings_sortby; ?>&sortby=location_city&order=<?php echo $order_display; ?>">Address </a></th>
<th><a class="text-dark" href="?<?php echo $url_query_strings_sortby; ?>&sortby=contact_name&order=<?php echo $order_display; ?>">Contact</a></th> <th><a class="text-dark" href="?<?php echo $url_query_strings_sortby; ?>&sortby=contact_name&order=<?php echo $order_display; ?>">Contact</a></th>
<?php if($session_user_role == 3 || $session_user_role == 1 && $config_module_enable_accounting == 1) { ?> <th class="text-right">Billing</th> <?php } ?> <?php if ($session_user_role == 3 || $session_user_role == 1 && $config_module_enable_accounting == 1) { ?> <th class="text-right">Billing</th> <?php } ?>
<?php if($session_user_role == 3) { ?> <th class="text-center">Action</th> <?php } ?> <?php if ($session_user_role == 3) { ?> <th class="text-center">Action</th> <?php } ?>
</tr> </tr>
</thead> </thead>
<tbody> <tbody>
<?php <?php
while($row = mysqli_fetch_array($sql)){ while ($row = mysqli_fetch_array($sql)) {
$client_id = $row['client_id']; $client_id = $row['client_id'];
$client_name = htmlentities($row['client_name']); $client_name = htmlentities($row['client_name']);
$client_type = htmlentities($row['client_type']); $client_type = htmlentities($row['client_type']);
@ -185,7 +185,7 @@ $num_rows = mysqli_fetch_row(mysqli_query($mysqli,"SELECT FOUND_ROWS()"));
$location_city = htmlentities($row['location_city']); $location_city = htmlentities($row['location_city']);
$location_state = htmlentities($row['location_state']); $location_state = htmlentities($row['location_state']);
$location_zip = htmlentities($row['location_zip']); $location_zip = htmlentities($row['location_zip']);
if(empty($location_address) && empty($location_city) && empty($location_state) && empty($location_zip)){ if (empty($location_address) && empty($location_city) && empty($location_state) && empty($location_zip)) {
$location_address_display = "-"; $location_address_display = "-";
}else{ }else{
$location_address_display = "$location_address<br>$location_city $location_state $location_zip"; $location_address_display = "$location_address<br>$location_city $location_state $location_zip";
@ -211,18 +211,18 @@ $num_rows = mysqli_fetch_row(mysqli_query($mysqli,"SELECT FOUND_ROWS()"));
$client_tag_name_display_array = array(); $client_tag_name_display_array = array();
$client_tag_id_array = array(); $client_tag_id_array = array();
$sql_client_tags = mysqli_query($mysqli,"SELECT * FROM client_tags LEFT JOIN tags ON client_tags.tag_id = tags.tag_id WHERE client_tags.client_id = $client_id"); $sql_client_tags = mysqli_query($mysqli,"SELECT * FROM client_tags LEFT JOIN tags ON client_tags.tag_id = tags.tag_id WHERE client_tags.client_id = $client_id");
while($row = mysqli_fetch_array($sql_client_tags)){ while ($row = mysqli_fetch_array($sql_client_tags)) {
$client_tag_id = $row['tag_id']; $client_tag_id = $row['tag_id'];
$client_tag_name = htmlentities($row['tag_name']); $client_tag_name = htmlentities($row['tag_name']);
$client_tag_color = htmlentities($row['tag_color']); $client_tag_color = htmlentities($row['tag_color']);
$client_tag_icon = htmlentities($row['tag_icon']); $client_tag_icon = htmlentities($row['tag_icon']);
if(empty($client_tag_icon)){ if (empty($client_tag_icon)) {
$client_tag_icon = "tag"; $client_tag_icon = "tag";
} }
$client_tag_id_array[] = $client_tag_id; $client_tag_id_array[] = $client_tag_id;
if(empty($client_tag_color)){ if (empty($client_tag_color)) {
$client_tag_name_display_array[] = "<small class='text-secondary'>$client_tag_name</small> "; $client_tag_name_display_array[] = "<small class='text-secondary'>$client_tag_name</small> ";
}else{ }else{
$client_tag_name_display_array[] = "<span class='badge bg-$client_tag_color'><i class='fa fa-fw fa-$client_tag_icon'></i> $client_tag_name</span> "; $client_tag_name_display_array[] = "<span class='badge bg-$client_tag_color'><i class='fa fa-fw fa-$client_tag_icon'></i> $client_tag_name</span> ";
@ -243,7 +243,7 @@ $num_rows = mysqli_fetch_row(mysqli_query($mysqli,"SELECT FOUND_ROWS()"));
$balance = $invoice_amounts - $amount_paid; $balance = $invoice_amounts - $amount_paid;
//set Text color on balance //set Text color on balance
if($balance > 0){ if ($balance > 0) {
$balance_text_color = "text-danger font-weight-bold"; $balance_text_color = "text-danger font-weight-bold";
}else{ }else{
$balance_text_color = ""; $balance_text_color = "";
@ -268,13 +268,13 @@ $num_rows = mysqli_fetch_row(mysqli_query($mysqli,"SELECT FOUND_ROWS()"));
<td> <td>
<strong><a href="client_overview.php?client_id=<?php echo $client_id; ?>"><?php echo $client_name; ?></a></strong> <strong><a href="client_overview.php?client_id=<?php echo $client_id; ?>"><?php echo $client_name; ?></a></strong>
<?php <?php
if(!empty($client_type)){ if (!empty($client_type)) {
?> ?>
<br> <br>
<small class="text-secondary"><?php echo $client_type; ?></small> <small class="text-secondary"><?php echo $client_type; ?></small>
<?php } ?> <?php } ?>
<?php <?php
if(!empty($client_tags_display)){ if (!empty($client_tags_display)) {
?> ?>
<br> <br>
<?php echo $client_tags_display; ?> <?php echo $client_tags_display; ?>
@ -285,12 +285,12 @@ $num_rows = mysqli_fetch_row(mysqli_query($mysqli,"SELECT FOUND_ROWS()"));
<td><?php echo $location_address_display; ?></td> <td><?php echo $location_address_display; ?></td>
<td> <td>
<?php <?php
if(empty($contact_name) && empty($contact_phone) && empty($contact_mobile) && empty($client_email)){ if (empty($contact_name) && empty($contact_phone) && empty($contact_mobile) && empty($client_email)) {
echo "-"; echo "-";
} }
?> ?>
<?php <?php
if(!empty($contact_name)){ if (!empty($contact_name)) {
?> ?>
<i class="fa fa-fw fa-user text-secondary mr-2 mb-2"></i><strong><?php echo $contact_name; ?></strong> <i class="fa fa-fw fa-user text-secondary mr-2 mb-2"></i><strong><?php echo $contact_name; ?></strong>
<br> <br>
@ -300,15 +300,15 @@ $num_rows = mysqli_fetch_row(mysqli_query($mysqli,"SELECT FOUND_ROWS()"));
} }
?> ?>
<?php <?php
if(!empty($contact_phone)){ if (!empty($contact_phone)) {
?> ?>
<i class="fa fa-fw fa-phone text-secondary mr-2 mb-2"></i><?php echo $contact_phone; ?> <?php if(!empty($contact_extension)){ echo "x$contact_extension"; } ?> <i class="fa fa-fw fa-phone text-secondary mr-2 mb-2"></i><?php echo $contact_phone; ?> <?php if (!empty($contact_extension)) { echo "x$contact_extension"; } ?>
<br> <br>
<?php <?php
} }
?> ?>
<?php <?php
if(!empty($contact_mobile)){ if (!empty($contact_mobile)) {
?> ?>
<i class="fa fa-fw fa-mobile-alt text-secondary mr-2"></i><?php echo $contact_mobile; ?> <i class="fa fa-fw fa-mobile-alt text-secondary mr-2"></i><?php echo $contact_mobile; ?>
<br> <br>
@ -316,7 +316,7 @@ $num_rows = mysqli_fetch_row(mysqli_query($mysqli,"SELECT FOUND_ROWS()"));
} }
?> ?>
<?php <?php
if(!empty($contact_email)){ if (!empty($contact_email)) {
?> ?>
<i class="fa fa-fw fa-envelope text-secondary mr-2"></i><a href="mailto:<?php echo $contact_email; ?>"><?php echo $contact_email; ?></a><button class='btn btn-sm clipboardjs' data-clipboard-text='<?php echo $contact_email; ?>'><i class='far fa-copy text-secondary'></i></button> <i class="fa fa-fw fa-envelope text-secondary mr-2"></i><a href="mailto:<?php echo $contact_email; ?>"><?php echo $contact_email; ?></a><button class='btn btn-sm clipboardjs' data-clipboard-text='<?php echo $contact_email; ?>'><i class='far fa-copy text-secondary'></i></button>
<?php <?php
@ -325,7 +325,7 @@ $num_rows = mysqli_fetch_row(mysqli_query($mysqli,"SELECT FOUND_ROWS()"));
</td> </td>
<!-- Show Billing for Admin/Accountant roles only and if accounting module is enabled --> <!-- Show Billing for Admin/Accountant roles only and if accounting module is enabled -->
<?php if($session_user_role == 3 || $session_user_role == 1 && $config_module_enable_accounting == 1) { ?> <?php if ($session_user_role == 3 || $session_user_role == 1 && $config_module_enable_accounting == 1) { ?>
<td class="text-right"> <td class="text-right">
<span class="text-secondary">Balance</span> <span class="<?php echo $balance_text_color; ?>"><?php echo numfmt_format_currency($currency_format, $balance, $session_company_currency); ?></span> <span class="text-secondary">Balance</span> <span class="<?php echo $balance_text_color; ?>"><?php echo numfmt_format_currency($currency_format, $balance, $session_company_currency); ?></span>
<br> <br>

10
companies.php
View File

@ -1,6 +1,6 @@
<?php include("inc_all_settings.php"); <?php include("inc_all_settings.php");
if(!empty($_GET['sb'])){ if (!empty($_GET['sb'])) {
$sb = strip_tags(mysqli_real_escape_string($mysqli,$_GET['sb'])); $sb = strip_tags(mysqli_real_escape_string($mysqli,$_GET['sb']));
}else{ }else{
$sb = "company_name"; $sb = "company_name";
@ -32,7 +32,7 @@ $num_rows = mysqli_fetch_row(mysqli_query($mysqli,"SELECT FOUND_ROWS()"));
<hr> <hr>
<form autocomplete="off"> <form autocomplete="off">
<div class="input-group"> <div class="input-group">
<input type="search" class="form-control col-md-4" name="q" value="<?php if(isset($q)){ echo strip_tags(htmlentities($q)); } ?>" placeholder="Search Companies"> <input type="search" class="form-control col-md-4" name="q" value="<?php if (isset($q)) { echo strip_tags(htmlentities($q)); } ?>" placeholder="Search Companies">
<div class="input-group-append"> <div class="input-group-append">
<button class="btn btn-primary"><i class="fa fa-search"></i></button> <button class="btn btn-primary"><i class="fa fa-search"></i></button>
</div> </div>
@ -41,7 +41,7 @@ $num_rows = mysqli_fetch_row(mysqli_query($mysqli,"SELECT FOUND_ROWS()"));
<hr> <hr>
<div class="table-responsive"> <div class="table-responsive">
<table class="table table-striped table-borderless table-hover"> <table class="table table-striped table-borderless table-hover">
<thead class="text-dark <?php if($num_rows[0] == 0){ echo "d-none"; } ?>"> <thead class="text-dark <?php if ($num_rows[0] == 0) { echo "d-none"; } ?>">
<tr> <tr>
<th class="text-center"><a class="text-dark" href="?<?php echo $url_query_strings_sb; ?>&sb=company_name&o=<?php echo $disp; ?>">Name</a></th> <th class="text-center"><a class="text-dark" href="?<?php echo $url_query_strings_sb; ?>&sb=company_name&o=<?php echo $disp; ?>">Name</a></th>
<th><a class="text-dark" href="?<?php echo $url_query_strings_sb; ?>&sb=company_address&o=<?php echo $disp; ?>">Address</a></th> <th><a class="text-dark" href="?<?php echo $url_query_strings_sb; ?>&sb=company_address&o=<?php echo $disp; ?>">Address</a></th>
@ -54,7 +54,7 @@ $num_rows = mysqli_fetch_row(mysqli_query($mysqli,"SELECT FOUND_ROWS()"));
<tbody> <tbody>
<?php <?php
while($row = mysqli_fetch_array($sql)){ while ($row = mysqli_fetch_array($sql)) {
$company_id = $row['company_id']; $company_id = $row['company_id'];
$company_name = htmlentities($row['company_name']); $company_name = htmlentities($row['company_name']);
$company_country = htmlentities($row['company_country']); $company_country = htmlentities($row['company_country']);
@ -78,7 +78,7 @@ $num_rows = mysqli_fetch_row(mysqli_query($mysqli,"SELECT FOUND_ROWS()"));
<tr> <tr>
<td class="text-center"> <td class="text-center">
<a class="text-dark" href="#" data-toggle="modal" data-target="#editCompanyModal<?php echo $company_id; ?>"> <a class="text-dark" href="#" data-toggle="modal" data-target="#editCompanyModal<?php echo $company_id; ?>">
<?php if(!empty($company_logo)){ ?> <?php if (!empty($company_logo)) { ?>
<img height="48" width="48" class="img-fluid rounded-circle" src="<?php echo "uploads/settings/$company_id/$company_logo"; ?>"> <img height="48" width="48" class="img-fluid rounded-circle" src="<?php echo "uploads/settings/$company_id/$company_logo"; ?>">
<?php }else{ ?> <?php }else{ ?>
<span class="fa-stack fa-2x"> <span class="fa-stack fa-2x">

6
company_edit_modal.php
View File

@ -102,7 +102,7 @@
<select class="form-control select2" name="country"> <select class="form-control select2" name="country">
<option value="">- Country -</option> <option value="">- Country -</option>
<?php foreach($countries_array as $country_name) { ?> <?php foreach($countries_array as $country_name) { ?>
<option <?php if($company_country == $country_name) { echo "selected"; } ?>><?php echo $country_name; ?></option> <option <?php if ($company_country == $country_name) { echo "selected"; } ?>><?php echo $country_name; ?></option>
<?php } ?> <?php } ?>
</select> </select>
</div> </div>
@ -155,7 +155,7 @@
<select class="form-control select2" name="locale" required> <select class="form-control select2" name="locale" required>
<option value="">- Select a Locale -</option> <option value="">- Select a Locale -</option>
<?php foreach($locales_array as $locale_code => $locale_name) { ?> <?php foreach($locales_array as $locale_code => $locale_name) { ?>
<option <?php if($company_locale == $locale_code){ echo "selected"; } ?> value="<?php echo $locale_code; ?>"><?php echo "$locale_code - $locale_name"; ?></option> <option <?php if ($company_locale == $locale_code) { echo "selected"; } ?> value="<?php echo $locale_code; ?>"><?php echo "$locale_code - $locale_name"; ?></option>
<?php } ?> <?php } ?>
</select> </select>
</div> </div>
@ -170,7 +170,7 @@
<select class="form-control select2" name="currency_code" required> <select class="form-control select2" name="currency_code" required>
<option value="">- Currency -</option> <option value="">- Currency -</option>
<?php foreach($currencies_array as $currency_code => $currency_name) { ?> <?php foreach($currencies_array as $currency_code => $currency_name) { ?>
<option <?php if($company_currency == $currency_code){ echo "selected"; } ?> value="<?php echo $currency_code; ?>"><?php echo "$currency_code - $currency_name"; ?></option> <option <?php if ($company_currency == $currency_code) { echo "selected"; } ?> value="<?php echo $currency_code; ?>"><?php echo "$currency_code - $currency_name"; ?></option>
<?php } ?> <?php } ?>
</select> </select>
</div> </div>

2
cron_ticket_email_parser.php
View File

@ -203,4 +203,4 @@ if ($emails) {
} }
} }

124
dashboard_financial.php
View File

@ -39,7 +39,7 @@ $largest_income_month = 0;
$sql_total_payments_to_invoices = mysqli_query($mysqli,"SELECT SUM(payment_amount) AS total_payments_to_invoices FROM payments WHERE YEAR(payment_date) = $year AND company_id = $session_company_id"); $sql_total_payments_to_invoices = mysqli_query($mysqli,"SELECT SUM(payment_amount) AS total_payments_to_invoices FROM payments WHERE YEAR(payment_date) = $year AND company_id = $session_company_id");
$row = mysqli_fetch_array($sql_total_payments_to_invoices); $row = mysqli_fetch_array($sql_total_payments_to_invoices);
$total_payments_to_invoices = $row['total_payments_to_invoices']; $total_payments_to_invoices = $row['total_payments_to_invoices'];
//Do not grab transfer payment as these have an category_id of 0 //Do not grab transfer payment as these have a category_id of 0
$sql_total_revenues = mysqli_query($mysqli,"SELECT SUM(revenue_amount) AS total_revenues FROM revenues WHERE YEAR(revenue_date) = $year AND revenue_category_id > 0 AND company_id = $session_company_id"); $sql_total_revenues = mysqli_query($mysqli,"SELECT SUM(revenue_amount) AS total_revenues FROM revenues WHERE YEAR(revenue_date) = $year AND revenue_category_id > 0 AND company_id = $session_company_id");
$row = mysqli_fetch_array($sql_total_revenues); $row = mysqli_fetch_array($sql_total_revenues);
$total_revenues = $row['total_revenues']; $total_revenues = $row['total_revenues'];
@ -65,7 +65,7 @@ $sql_invoice_totals_all_years = mysqli_query($mysqli,"SELECT SUM(invoice_amount)
$row = mysqli_fetch_array($sql_invoice_totals_all_years); $row = mysqli_fetch_array($sql_invoice_totals_all_years);
$invoice_totals_all_years = $row['invoice_totals_all_years']; $invoice_totals_all_years = $row['invoice_totals_all_years'];
$receivables = $invoice_totals_all_years - $total_payments_to_invoices_all_years; $receivables = $invoice_totals_all_years - $total_payments_to_invoices_all_years;
$profit = $total_income - $total_expenses; $profit = $total_income - $total_expenses;
@ -112,16 +112,16 @@ $vendors_added = $row['vendors_added'];
<form class="mb-3"> <form class="mb-3">
<select onchange="this.form.submit()" class="form-control" name="year"> <select onchange="this.form.submit()" class="form-control" name="year">
<?php <?php
while($row = mysqli_fetch_array($sql_years_select)){ while ($row = mysqli_fetch_array($sql_years_select)) {
$year_select = $row['all_years']; $year_select = $row['all_years'];
if(empty($year_select)){ if (empty($year_select)) {
$year_select = date('Y'); $year_select = date('Y');
} }
?> ?>
<option <?php if($year == $year_select){ echo "selected"; } ?> > <?php echo $year_select; ?></option> <option <?php if ($year == $year_select) { echo "selected"; } ?> > <?php echo $year_select; ?></option>
<?php <?php
} }
?> ?>
@ -272,7 +272,7 @@ $vendors_added = $row['vendors_added'];
<button type="button" class="btn btn-tool" data-card-widget="remove"> <button type="button" class="btn btn-tool" data-card-widget="remove">
<i class="fas fa-times"></i> <i class="fas fa-times"></i>
</button> </button>
</div> </div>
</div> </div>
<div class="card-body"> <div class="card-body">
<canvas id="incomeByCategoryPieChart" width="100%" height="60"></canvas> <canvas id="incomeByCategoryPieChart" width="100%" height="60"></canvas>
@ -326,7 +326,7 @@ $vendors_added = $row['vendors_added'];
<table class="table"> <table class="table">
<tbody> <tbody>
<?php <?php
while($row = mysqli_fetch_array($sql_accounts)){ while ($row = mysqli_fetch_array($sql_accounts)) {
$account_id = $row['account_id']; $account_id = $row['account_id'];
$account_name = htmlentities($row['account_name']); $account_name = htmlentities($row['account_name']);
$opening_balance = $row['opening_balance']; $opening_balance = $row['opening_balance'];
@ -338,19 +338,19 @@ $vendors_added = $row['vendors_added'];
$sql_payments = mysqli_query($mysqli,"SELECT SUM(payment_amount) AS total_payments FROM payments WHERE payment_account_id = $account_id"); $sql_payments = mysqli_query($mysqli,"SELECT SUM(payment_amount) AS total_payments FROM payments WHERE payment_account_id = $account_id");
$row = mysqli_fetch_array($sql_payments); $row = mysqli_fetch_array($sql_payments);
$total_payments = $row['total_payments']; $total_payments = $row['total_payments'];
$sql_revenues = mysqli_query($mysqli,"SELECT SUM(revenue_amount) AS total_revenues FROM revenues WHERE revenue_account_id = $account_id"); $sql_revenues = mysqli_query($mysqli,"SELECT SUM(revenue_amount) AS total_revenues FROM revenues WHERE revenue_account_id = $account_id");
$row = mysqli_fetch_array($sql_revenues); $row = mysqli_fetch_array($sql_revenues);
$total_revenues = $row['total_revenues']; $total_revenues = $row['total_revenues'];
$sql_expenses = mysqli_query($mysqli,"SELECT SUM(expense_amount) AS total_expenses FROM expenses WHERE expense_account_id = $account_id"); $sql_expenses = mysqli_query($mysqli,"SELECT SUM(expense_amount) AS total_expenses FROM expenses WHERE expense_account_id = $account_id");
$row = mysqli_fetch_array($sql_expenses); $row = mysqli_fetch_array($sql_expenses);
$total_expenses = $row['total_expenses']; $total_expenses = $row['total_expenses'];
$balance = $opening_balance + $total_payments + $total_revenues - $total_expenses; $balance = $opening_balance + $total_payments + $total_revenues - $total_expenses;
if($balance == ''){ if ($balance == '') {
$balance = '0.00'; $balance = '0.00';
} }
?> ?>
<td class="text-right"><?php echo numfmt_format_currency($currency_format, $balance, "$session_company_currency"); ?></td> <td class="text-right"><?php echo numfmt_format_currency($currency_format, $balance, "$session_company_currency"); ?></td>
@ -386,7 +386,7 @@ $vendors_added = $row['vendors_added'];
</thead> </thead>
<tbody> <tbody>
<?php <?php
while($row = mysqli_fetch_array($sql_latest_invoice_payments)){ while ($row = mysqli_fetch_array($sql_latest_invoice_payments)) {
$payment_date = $row['payment_date']; $payment_date = $row['payment_date'];
$payment_amount = floatval($row['payment_amount']); $payment_amount = floatval($row['payment_amount']);
$invoice_prefix = htmlentities($row['invoice_prefix']); $invoice_prefix = htmlentities($row['invoice_prefix']);
@ -429,7 +429,7 @@ $vendors_added = $row['vendors_added'];
</thead> </thead>
<tbody> <tbody>
<?php <?php
while($row = mysqli_fetch_array($sql_latest_expenses)){ while ($row = mysqli_fetch_array($sql_latest_expenses)) {
$expense_date = $row['expense_date']; $expense_date = $row['expense_date'];
$expense_amount = floatval($row['expense_amount']); $expense_amount = floatval($row['expense_amount']);
$vendor_name = htmlentities($row['vendor_name']); $vendor_name = htmlentities($row['vendor_name']);
@ -504,17 +504,17 @@ var myLineChart = new Chart(ctx, {
$revenues_for_month = $row['revenue_amount_for_month']; $revenues_for_month = $row['revenue_amount_for_month'];
$income_for_month = $payments_for_month + $revenues_for_month; $income_for_month = $payments_for_month + $revenues_for_month;
if($income_for_month > 0 && $income_for_month > $largest_income_month){ if ($income_for_month > 0 && $income_for_month > $largest_income_month) {
$largest_income_month = $income_for_month; $largest_income_month = $income_for_month;
} }
?> ?>
<?php echo "$income_for_month,"; ?> <?php echo "$income_for_month,"; ?>
<?php <?php
} }
?> ?>
@ -543,17 +543,17 @@ var myLineChart = new Chart(ctx, {
$revenues_for_month = $row['revenue_amount_for_month']; $revenues_for_month = $row['revenue_amount_for_month'];
$income_for_month = $payments_for_month + $revenues_for_month; $income_for_month = $payments_for_month + $revenues_for_month;
if($income_for_month > 0 && $income_for_month > $largest_income_month){ if ($income_for_month > 0 && $income_for_month > $largest_income_month) {
$largest_income_month = $income_for_month; $largest_income_month = $income_for_month;
} }
?> ?>
<?php echo "$income_for_month,"; ?> <?php echo "$income_for_month,"; ?>
<?php <?php
} }
?> ?>
@ -580,21 +580,21 @@ var myLineChart = new Chart(ctx, {
$row = mysqli_fetch_array($sql_projected); $row = mysqli_fetch_array($sql_projected);
$invoice_for_month = $row['invoice_amount_for_month']; $invoice_for_month = $row['invoice_amount_for_month'];
if($invoice_for_month > 0 && $invoice_for_month > $largest_invoice_month){ if ($invoice_for_month > 0 && $invoice_for_month > $largest_invoice_month) {
$largest_invoice_month = $invoice_for_month; $largest_invoice_month = $invoice_for_month;
} }
?> ?>
<?php echo "$invoice_for_month,"; ?> <?php echo "$invoice_for_month,"; ?>
<?php <?php
} }
?> ?>
], ],
}, },
{ {
label: "Expense", label: "Expense",
lineTension: 0.3, lineTension: 0.3,
@ -608,24 +608,24 @@ var myLineChart = new Chart(ctx, {
pointBorderWidth: 2, pointBorderWidth: 2,
data: [ data: [
<?php <?php
$largest_expense_month = 0; $largest_expense_month = 0;
for($month = 1; $month<=12; $month++) { for($month = 1; $month<=12; $month++) {
$sql_expenses = mysqli_query($mysqli,"SELECT SUM(expense_amount) AS expense_amount_for_month FROM expenses WHERE YEAR(expense_date) = $year AND MONTH(expense_date) = $month AND expense_vendor_id > 0 AND expenses.company_id = $session_company_id"); $sql_expenses = mysqli_query($mysqli,"SELECT SUM(expense_amount) AS expense_amount_for_month FROM expenses WHERE YEAR(expense_date) = $year AND MONTH(expense_date) = $month AND expense_vendor_id > 0 AND expenses.company_id = $session_company_id");
$row = mysqli_fetch_array($sql_expenses); $row = mysqli_fetch_array($sql_expenses);
$expenses_for_month = $row['expense_amount_for_month']; $expenses_for_month = $row['expense_amount_for_month'];
if($expenses_for_month > 0 && $expenses_for_month > $largest_expense_month){ if ($expenses_for_month > 0 && $expenses_for_month > $largest_expense_month) {
$largest_expense_month = $expenses_for_month; $largest_expense_month = $expenses_for_month;
} }
?> ?>
<?php echo "$expenses_for_month,"; ?> <?php echo "$expenses_for_month,"; ?>
<?php <?php
} }
?> ?>
@ -692,17 +692,17 @@ var myLineChart = new Chart(ctx, {
$row = mysqli_fetch_array($sql_trips); $row = mysqli_fetch_array($sql_trips);
$trip_miles_for_month = $row['trip_miles_for_month']; $trip_miles_for_month = $row['trip_miles_for_month'];
$largest_trip_miles_month = 0; $largest_trip_miles_month = 0;
if($trip_miles_for_month > 0 && $trip_miles_for_month > $largest_trip_miles_month){ if ($trip_miles_for_month > 0 && $trip_miles_for_month > $largest_trip_miles_month) {
$largest_trip_miles_month = $trip_miles_for_month; $largest_trip_miles_month = $trip_miles_for_month;
} }
?> ?>
<?php echo "$trip_miles_for_month,"; ?> <?php echo "$trip_miles_for_month,"; ?>
<?php <?php
} }
?> ?>
@ -752,11 +752,11 @@ var myPieChart = new Chart(ctx, {
labels: [ labels: [
<?php <?php
$sql_categories = mysqli_query($mysqli,"SELECT DISTINCT category_name, category_id FROM categories, invoices WHERE invoice_category_id = category_id AND invoice_status = 'Paid' AND YEAR(invoice_date) = $year AND categories.company_id = $session_company_id"); $sql_categories = mysqli_query($mysqli,"SELECT DISTINCT category_name, category_id FROM categories, invoices WHERE invoice_category_id = category_id AND invoice_status = 'Paid' AND YEAR(invoice_date) = $year AND categories.company_id = $session_company_id");
while($row = mysqli_fetch_array($sql_categories)){ while ($row = mysqli_fetch_array($sql_categories)) {
$category_name = json_encode($row['category_name']); $category_name = json_encode($row['category_name']);
echo "$category_name,"; echo "$category_name,";
} }
?> ?>
], ],
@ -764,7 +764,7 @@ var myPieChart = new Chart(ctx, {
data: [ data: [
<?php <?php
$sql_categories = mysqli_query($mysqli,"SELECT DISTINCT category_name, category_id FROM categories, invoices WHERE invoice_category_id = category_id AND invoice_status = 'Paid' AND YEAR(invoice_date) = $year AND categories.company_id = $session_company_id"); $sql_categories = mysqli_query($mysqli,"SELECT DISTINCT category_name, category_id FROM categories, invoices WHERE invoice_category_id = category_id AND invoice_status = 'Paid' AND YEAR(invoice_date) = $year AND categories.company_id = $session_company_id");
while($row = mysqli_fetch_array($sql_categories)){ while ($row = mysqli_fetch_array($sql_categories)) {
$category_id = $row['category_id']; $category_id = $row['category_id'];
$sql_invoices = mysqli_query($mysqli,"SELECT SUM(invoice_amount) AS income_amount_for_year FROM invoices WHERE invoice_category_id = $category_id AND YEAR(invoice_date) = $year AND company_id = $session_company_id"); $sql_invoices = mysqli_query($mysqli,"SELECT SUM(invoice_amount) AS income_amount_for_year FROM invoices WHERE invoice_category_id = $category_id AND YEAR(invoice_date) = $year AND company_id = $session_company_id");
@ -772,18 +772,18 @@ var myPieChart = new Chart(ctx, {
$income_amount_for_year = $row['income_amount_for_year']; $income_amount_for_year = $row['income_amount_for_year'];
echo "$income_amount_for_year,"; echo "$income_amount_for_year,";
} }
?> ?>
], ],
backgroundColor: [ backgroundColor: [
<?php <?php
$sql_categories = mysqli_query($mysqli,"SELECT DISTINCT category_name, category_id, category_color FROM categories, invoices WHERE invoice_category_id = category_id AND YEAR(invoice_date) = $year AND categories.company_id = $session_company_id"); $sql_categories = mysqli_query($mysqli,"SELECT DISTINCT category_name, category_id, category_color FROM categories, invoices WHERE invoice_category_id = category_id AND YEAR(invoice_date) = $year AND categories.company_id = $session_company_id");
while($row = mysqli_fetch_array($sql_categories)){ while ($row = mysqli_fetch_array($sql_categories)) {
$category_color = json_encode($row['category_color']); $category_color = json_encode($row['category_color']);
echo "$category_color,"; echo "$category_color,";
} }
?> ?>
], ],
@ -809,11 +809,11 @@ var myPieChart = new Chart(ctx, {
labels: [ labels: [
<?php <?php
$sql_categories = mysqli_query($mysqli,"SELECT DISTINCT category_name, categories.category_id FROM categories, expenses WHERE expense_category_id = category_id AND expense_vendor_id > 0 AND YEAR(expense_date) = $year AND categories.company_id = $session_company_id"); $sql_categories = mysqli_query($mysqli,"SELECT DISTINCT category_name, categories.category_id FROM categories, expenses WHERE expense_category_id = category_id AND expense_vendor_id > 0 AND YEAR(expense_date) = $year AND categories.company_id = $session_company_id");
while($row = mysqli_fetch_array($sql_categories)){ while ($row = mysqli_fetch_array($sql_categories)) {
$category_name = json_encode($row['category_name']); $category_name = json_encode($row['category_name']);
echo "$category_name,"; echo "$category_name,";
} }
?> ?>
], ],
@ -821,7 +821,7 @@ var myPieChart = new Chart(ctx, {
data: [ data: [
<?php <?php
$sql_categories = mysqli_query($mysqli,"SELECT DISTINCT category_name, categories.category_id FROM categories, expenses WHERE expense_category_id = category_id AND expense_vendor_id > 0 AND YEAR(expense_date) = $year AND categories.company_id = $session_company_id"); $sql_categories = mysqli_query($mysqli,"SELECT DISTINCT category_name, categories.category_id FROM categories, expenses WHERE expense_category_id = category_id AND expense_vendor_id > 0 AND YEAR(expense_date) = $year AND categories.company_id = $session_company_id");
while($row = mysqli_fetch_array($sql_categories)){ while ($row = mysqli_fetch_array($sql_categories)) {
$category_id = $row['category_id']; $category_id = $row['category_id'];
$sql_expenses = mysqli_query($mysqli,"SELECT SUM(expense_amount) AS expense_amount_for_year FROM expenses WHERE expense_category_id = $category_id AND YEAR(expense_date) = $year"); $sql_expenses = mysqli_query($mysqli,"SELECT SUM(expense_amount) AS expense_amount_for_year FROM expenses WHERE expense_category_id = $category_id AND YEAR(expense_date) = $year");
@ -829,18 +829,18 @@ var myPieChart = new Chart(ctx, {
$expense_amount_for_year = $row['expense_amount_for_year']; $expense_amount_for_year = $row['expense_amount_for_year'];
echo "$expense_amount_for_year,"; echo "$expense_amount_for_year,";
} }
?> ?>
], ],
backgroundColor: [ backgroundColor: [
<?php <?php
$sql_categories = mysqli_query($mysqli,"SELECT DISTINCT category_name, category_color FROM categories, expenses WHERE expense_category_id = categories.category_id AND expense_vendor_id > 0 AND YEAR(expense_date) = $year AND categories.company_id = $session_company_id"); $sql_categories = mysqli_query($mysqli,"SELECT DISTINCT category_name, category_color FROM categories, expenses WHERE expense_category_id = categories.category_id AND expense_vendor_id > 0 AND YEAR(expense_date) = $year AND categories.company_id = $session_company_id");
while($row = mysqli_fetch_array($sql_categories)){ while ($row = mysqli_fetch_array($sql_categories)) {
$category_color = json_encode($row['category_color']); $category_color = json_encode($row['category_color']);
echo "$category_color,"; echo "$category_color,";
} }
?> ?>
], ],
@ -862,11 +862,11 @@ var myPieChart = new Chart(ctx, {
labels: [ labels: [
<?php <?php
$sql_vendors = mysqli_query($mysqli,"SELECT DISTINCT vendor_name, vendor_id FROM vendors, expenses WHERE expense_vendor_id = vendor_id AND YEAR(expense_date) = $year AND vendors.company_id = $session_company_id"); $sql_vendors = mysqli_query($mysqli,"SELECT DISTINCT vendor_name, vendor_id FROM vendors, expenses WHERE expense_vendor_id = vendor_id AND YEAR(expense_date) = $year AND vendors.company_id = $session_company_id");
while($row = mysqli_fetch_array($sql_vendors)){ while ($row = mysqli_fetch_array($sql_vendors)) {
$vendor_name = json_encode($row['vendor_name']); $vendor_name = json_encode($row['vendor_name']);
echo "$vendor_name,"; echo "$vendor_name,";
} }
?> ?>
], ],
@ -874,7 +874,7 @@ var myPieChart = new Chart(ctx, {
data: [ data: [
<?php <?php
$sql_vendors = mysqli_query($mysqli,"SELECT DISTINCT vendor_name, vendor_id FROM vendors, expenses WHERE expense_vendor_id = vendor_id AND YEAR(expense_date) = $year AND vendors.company_id = $session_company_id"); $sql_vendors = mysqli_query($mysqli,"SELECT DISTINCT vendor_name, vendor_id FROM vendors, expenses WHERE expense_vendor_id = vendor_id AND YEAR(expense_date) = $year AND vendors.company_id = $session_company_id");
while($row = mysqli_fetch_array($sql_vendors)){ while ($row = mysqli_fetch_array($sql_vendors)) {
$vendor_id = $row['vendor_id']; $vendor_id = $row['vendor_id'];
$sql_expenses = mysqli_query($mysqli,"SELECT SUM(expense_amount) AS expense_amount_for_year FROM expenses WHERE expense_vendor_id = $vendor_id AND YEAR(expense_date) = $year"); $sql_expenses = mysqli_query($mysqli,"SELECT SUM(expense_amount) AS expense_amount_for_year FROM expenses WHERE expense_vendor_id = $vendor_id AND YEAR(expense_date) = $year");
@ -882,18 +882,18 @@ var myPieChart = new Chart(ctx, {
$expense_amount_for_year = $row['expense_amount_for_year']; $expense_amount_for_year = $row['expense_amount_for_year'];
echo "$expense_amount_for_year,"; echo "$expense_amount_for_year,";
} }
?> ?>
], ],
backgroundColor: [ backgroundColor: [
<?php <?php
$sql_categories = mysqli_query($mysqli,"SELECT DISTINCT category_name, category_color FROM categories, expenses WHERE expense_category_id = category_id AND YEAR(expense_date) = $year AND categories.company_id = $session_company_id"); $sql_categories = mysqli_query($mysqli,"SELECT DISTINCT category_name, category_color FROM categories, expenses WHERE expense_category_id = category_id AND YEAR(expense_date) = $year AND categories.company_id = $session_company_id");
while($row = mysqli_fetch_array($sql_categories)){ while ($row = mysqli_fetch_array($sql_categories)) {
$category_color = json_encode($row['category_color']); $category_color = json_encode($row['category_color']);
echo "$category_color,"; echo "$category_color,";
} }
?> ?>
], ],

2
database_updates.php
View File

@ -475,6 +475,6 @@ if(LATEST_DATABASE_VERSION > CURRENT_DATABASE_VERSION){
//} //}
}else{ } else {
// Up-to-date // Up-to-date
} }

8
expense_add_modal.php
View File

@ -44,7 +44,7 @@
<?php <?php
$sql = mysqli_query($mysqli,"SELECT * FROM accounts WHERE account_archived_at IS NULL AND company_id = $session_company_id ORDER BY account_name ASC"); $sql = mysqli_query($mysqli,"SELECT * FROM accounts WHERE account_archived_at IS NULL AND company_id = $session_company_id ORDER BY account_name ASC");
while($row = mysqli_fetch_array($sql)){ while ($row = mysqli_fetch_array($sql)) {
$account_id = $row['account_id']; $account_id = $row['account_id'];
$account_name = htmlentities($row['account_name']); $account_name = htmlentities($row['account_name']);
$opening_balance = floatval($row['opening_balance']); $opening_balance = floatval($row['opening_balance']);
@ -64,7 +64,7 @@
$balance = $opening_balance + $total_payments + $total_revenues - $total_expenses; $balance = $opening_balance + $total_payments + $total_revenues - $total_expenses;
?> ?>
<option <?php if($config_default_expense_account == $account_id){ echo "selected"; } ?> value="<?php echo $account_id; ?>"><div class="float-left"><?php echo $account_name; ?></div><div class="float-right"> [$<?php echo number_format($balance,2); ?>]</div></option> <option <?php if ($config_default_expense_account == $account_id) { echo "selected"; } ?> value="<?php echo $account_id; ?>"><div class="float-left"><?php echo $account_name; ?></div><div class="float-right"> [$<?php echo number_format($balance,2); ?>]</div></option>
<?php <?php
} }
@ -84,7 +84,7 @@
<?php <?php
$sql = mysqli_query($mysqli,"SELECT * FROM vendors WHERE vendor_client_id = 0 AND vendor_template = 0 AND vendor_archived_at IS NULL AND company_id = $session_company_id ORDER BY vendor_name ASC"); $sql = mysqli_query($mysqli,"SELECT * FROM vendors WHERE vendor_client_id = 0 AND vendor_template = 0 AND vendor_archived_at IS NULL AND company_id = $session_company_id ORDER BY vendor_name ASC");
while($row = mysqli_fetch_array($sql)){ while ($row = mysqli_fetch_array($sql)) {
$vendor_id = $row['vendor_id']; $vendor_id = $row['vendor_id'];
$vendor_name = htmlentities($row['vendor_name']); $vendor_name = htmlentities($row['vendor_name']);
?> ?>
@ -119,7 +119,7 @@
<?php <?php
$sql = mysqli_query($mysqli,"SELECT * FROM categories WHERE category_type = 'Expense' AND category_archived_at IS NULL AND company_id = $session_company_id ORDER BY category_name ASC"); $sql = mysqli_query($mysqli,"SELECT * FROM categories WHERE category_type = 'Expense' AND category_archived_at IS NULL AND company_id = $session_company_id ORDER BY category_name ASC");
while($row = mysqli_fetch_array($sql)){ while ($row = mysqli_fetch_array($sql)) {
$category_id = $row['category_id']; $category_id = $row['category_id'];
$category_name = htmlentities($row['category_name']); $category_name = htmlentities($row['category_name']);
?> ?>

66
expense_copy_modal.php
View File

@ -9,8 +9,8 @@
</div> </div>
<form action="post.php" method="post" enctype="multipart/form-data" autocomplete="off"> <form action="post.php" method="post" enctype="multipart/form-data" autocomplete="off">
<div class="modal-body bg-white"> <div class="modal-body bg-white">
<div class="form-row"> <div class="form-row">
<div class="form-group col-md"> <div class="form-group col-md">
<label>Date <strong class="text-danger">*</strong></label> <label>Date <strong class="text-danger">*</strong></label>
<div class="input-group"> <div class="input-group">
@ -20,7 +20,7 @@
<input type="date" class="form-control" name="date" max="2999-12-31" value="<?php echo date("Y-m-d"); ?>" required> <input type="date" class="form-control" name="date" max="2999-12-31" value="<?php echo date("Y-m-d"); ?>" required>
</div> </div>
</div> </div>
<div class="form-group col-md"> <div class="form-group col-md">
<label>Amount <strong class="text-danger">*</strong></label> <label>Amount <strong class="text-danger">*</strong></label>
<div class="input-group"> <div class="input-group">
@ -30,11 +30,11 @@
<input type="number" class="form-control" step="0.01" name="amount" value="<?php echo $expense_amount; ?>" required> <input type="number" class="form-control" step="0.01" name="amount" value="<?php echo $expense_amount; ?>" required>
</div> </div>
</div> </div>
</div> </div>
<div class="form-row"> <div class="form-row">
<div class="form-group col-md"> <div class="form-group col-md">
<label>Account <strong class="text-danger">*</strong></label> <label>Account <strong class="text-danger">*</strong></label>
<div class="input-group"> <div class="input-group">
@ -42,18 +42,18 @@
<span class="input-group-text"><i class="fa fa-fw fa-piggy-bank"></i></span> <span class="input-group-text"><i class="fa fa-fw fa-piggy-bank"></i></span>
</div> </div>
<select class="form-control select2" name="account" required> <select class="form-control select2" name="account" required>
<?php <?php
$sql_accounts = mysqli_query($mysqli,"SELECT * FROM accounts WHERE company_id = $session_company_id ORDER BY account_name ASC"); $sql_accounts = mysqli_query($mysqli,"SELECT * FROM accounts WHERE company_id = $session_company_id ORDER BY account_name ASC");
while($row = mysqli_fetch_array($sql_accounts)){ while ($row = mysqli_fetch_array($sql_accounts)) {
$account_id_select = $row['account_id']; $account_id_select = $row['account_id'];
$account_name_select = htmlentities($row['account_name']); $account_name_select = htmlentities($row['account_name']);
$opening_balance = floatval($row['opening_balance']); $opening_balance = floatval($row['opening_balance']);
$sql_payments = mysqli_query($mysqli,"SELECT SUM(payment_amount) AS total_payments FROM payments WHERE payment_account_id = $account_id_select"); $sql_payments = mysqli_query($mysqli,"SELECT SUM(payment_amount) AS total_payments FROM payments WHERE payment_account_id = $account_id_select");
$row = mysqli_fetch_array($sql_payments); $row = mysqli_fetch_array($sql_payments);
$total_payments = $row['total_payments']; $total_payments = $row['total_payments'];
$sql_revenues = mysqli_query($mysqli,"SELECT SUM(revenue_amount) AS total_revenues FROM revenues WHERE revenue_account_id = $account_id_select"); $sql_revenues = mysqli_query($mysqli,"SELECT SUM(revenue_amount) AS total_revenues FROM revenues WHERE revenue_account_id = $account_id_select");
$row = mysqli_fetch_array($sql_revenues); $row = mysqli_fetch_array($sql_revenues);
$total_revenues = $row['total_revenues']; $total_revenues = $row['total_revenues'];
@ -64,15 +64,15 @@
$balance = $opening_balance + $total_payments + $total_revenues - $total_expenses; $balance = $opening_balance + $total_payments + $total_revenues - $total_expenses;
?> ?>
<option <?php if($expense_account_id == $account_id_select){ ?> selected <?php } ?> value="<?php echo $account_id_select; ?>"><?php echo $account_name_select; ?> [$<?php echo number_format($balance,2); ?>]</option> <option <?php if ($expense_account_id == $account_id_select) { ?> selected <?php } ?> value="<?php echo $account_id_select; ?>"><?php echo $account_name_select; ?> [$<?php echo number_format($balance,2); ?>]</option>
<?php <?php
} }
?> ?>
</select> </select>
</div> </div>
</div> </div>
<div class="form-group col-md"> <div class="form-group col-md">
<label>Vendor <strong class="text-danger">*</strong></label> <label>Vendor <strong class="text-danger">*</strong></label>
<div class="input-group"> <div class="input-group">
@ -80,29 +80,29 @@
<span class="input-group-text"><i class="fa fa-fw fa-building"></i></span> <span class="input-group-text"><i class="fa fa-fw fa-building"></i></span>
</div> </div>
<select class="form-control select2" name="vendor" required> <select class="form-control select2" name="vendor" required>
<?php <?php
$sql_vendors = mysqli_query($mysqli,"SELECT * FROM vendors WHERE vendor_client_id = 0 AND vendor_template = 0 AND company_id = $session_company_id ORDER BY vendor_name ASC"); $sql_vendors = mysqli_query($mysqli,"SELECT * FROM vendors WHERE vendor_client_id = 0 AND vendor_template = 0 AND company_id = $session_company_id ORDER BY vendor_name ASC");
while($row = mysqli_fetch_array($sql_vendors)){ while ($row = mysqli_fetch_array($sql_vendors)) {
$vendor_id_select = $row['vendor_id']; $vendor_id_select = $row['vendor_id'];
$vendor_name_select = htmlentities($row['vendor_name']); $vendor_name_select = htmlentities($row['vendor_name']);
?> ?>
<option <?php if($expense_vendor_id == $vendor_id_select){ ?> selected <?php } ?> value="<?php echo $vendor_id_select; ?>"><?php echo $vendor_name_select; ?></option> <option <?php if ($expense_vendor_id == $vendor_id_select) { ?> selected <?php } ?> value="<?php echo $vendor_id_select; ?>"><?php echo $vendor_name_select; ?></option>
<?php <?php
} }
?> ?>
</select> </select>
</div> </div>
</div> </div>
</div> </div>
<div class="form-group"> <div class="form-group">
<label>Description <strong class="text-danger">*</strong></label> <label>Description <strong class="text-danger">*</strong></label>
<textarea class="form-control" rows="6" name="description" placeholder="Enter a description" required><?php echo $expense_description; ?></textarea> <textarea class="form-control" rows="6" name="description" placeholder="Enter a description" required><?php echo $expense_description; ?></textarea>
</div> </div>
<div class="form-row"> <div class="form-row">
<div class="form-group col-md"> <div class="form-group col-md">
@ -112,17 +112,17 @@
<span class="input-group-text"><i class="fa fa-fw fa-list"></i></span> <span class="input-group-text"><i class="fa fa-fw fa-list"></i></span>
</div> </div>
<select class="form-control select2" name="category" required> <select class="form-control select2" name="category" required>
<?php <?php
$sql_categories = mysqli_query($mysqli,"SELECT * FROM categories WHERE category_type = 'Expense' AND company_id = $session_company_id ORDER BY category_name ASC"); $sql_categories = mysqli_query($mysqli,"SELECT * FROM categories WHERE category_type = 'Expense' AND company_id = $session_company_id ORDER BY category_name ASC");
while($row = mysqli_fetch_array($sql_categories)){ while ($row = mysqli_fetch_array($sql_categories)) {
$category_id_select = $row['category_id']; $category_id_select = $row['category_id'];
$category_name_select = htmlentities($row['category_name']); $category_name_select = htmlentities($row['category_name']);
?> ?>
<option <?php if($expense_category_id == $category_id_select){ ?> selected <?php } ?> value="<?php echo $category_id_select; ?>"><?php echo $category_name_select; ?></option> <option <?php if ($expense_category_id == $category_id_select) { ?> selected <?php } ?> value="<?php echo $category_id_select; ?>"><?php echo $category_name_select; ?></option>
<?php <?php
} }
?> ?>
</select> </select>
</div> </div>
@ -134,18 +134,18 @@
<div class="input-group-prepend"> <div class="input-group-prepend">
<span class="input-group-text"><i class="fa fa-fw fa-file-alt"></i></span> <span class="input-group-text"><i class="fa fa-fw fa-file-alt"></i></span>
</div> </div>
<input type="text" class="form-control" name="reference" placeholder="Enter a reference" value="<?php $expense_reference; ?>"> <input type="text" class="form-control" name="reference" placeholder="Enter a reference" value="<?php echo $expense_reference; ?>">
</div> </div>
</div> </div>
</div> </div>
<div class="form-group"> <div class="form-group">
<label>Receipt</label> <label>Receipt</label>
<input type="file" class="form-control-file" name="file"> <input type="file" class="form-control-file" name="file">
</div> </div>
</div> </div>
<div class="modal-footer bg-white"> <div class="modal-footer bg-white">
<button type="button" class="btn btn-outline-secondary" data-dismiss="modal">Cancel</button> <button type="button" class="btn btn-outline-secondary" data-dismiss="modal">Cancel</button>
<button type="submit" name="add_expense" class="btn btn-primary text-bold"><i class="fa fa-fw fa-check"></i> Copy</button> <button type="submit" name="add_expense" class="btn btn-primary text-bold"><i class="fa fa-fw fa-check"></i> Copy</button>
@ -153,4 +153,4 @@
</form> </form>
</div> </div>
</div> </div>
</div> </div>

14
expense_edit_modal.php
View File

@ -47,7 +47,7 @@
<?php <?php
$sql_accounts = mysqli_query($mysqli,"SELECT * FROM accounts WHERE (account_archived_at > '$expense_created_at' OR account_archived_at IS NULL) AND company_id = $session_company_id ORDER BY account_name ASC"); $sql_accounts = mysqli_query($mysqli,"SELECT * FROM accounts WHERE (account_archived_at > '$expense_created_at' OR account_archived_at IS NULL) AND company_id = $session_company_id ORDER BY account_name ASC");
while($row = mysqli_fetch_array($sql_accounts)){ while ($row = mysqli_fetch_array($sql_accounts)) {
$account_id_select = $row['account_id']; $account_id_select = $row['account_id'];
$account_name_select = htmlentities($row['account_name']); $account_name_select = htmlentities($row['account_name']);
$opening_balance = floatval($row['opening_balance']); $opening_balance = floatval($row['opening_balance']);
@ -67,7 +67,7 @@
$balance = $opening_balance + $total_payments + $total_revenues - $total_expenses; $balance = $opening_balance + $total_payments + $total_revenues - $total_expenses;
?> ?>
<option <?php if($expense_account_id == $account_id_select){ ?> selected <?php } ?> value="<?php echo $account_id_select; ?>"><?php echo $account_name_select; ?> [$<?php echo number_format($balance,2); ?>]</option> <option <?php if ($expense_account_id == $account_id_select) { ?> selected <?php } ?> value="<?php echo $account_id_select; ?>"><?php echo $account_name_select; ?> [$<?php echo number_format($balance,2); ?>]</option>
<?php <?php
} }
@ -86,11 +86,11 @@
<?php <?php
$sql_select = mysqli_query($mysqli,"SELECT * FROM vendors WHERE vendor_client_id = 0 AND vendor_template = 0 AND (vendor_archived_at > '$expense_created_at' OR vendor_archived_at IS NULL) AND company_id = $session_company_id ORDER BY vendor_name ASC"); $sql_select = mysqli_query($mysqli,"SELECT * FROM vendors WHERE vendor_client_id = 0 AND vendor_template = 0 AND (vendor_archived_at > '$expense_created_at' OR vendor_archived_at IS NULL) AND company_id = $session_company_id ORDER BY vendor_name ASC");
while($row = mysqli_fetch_array($sql_select)){ while ($row = mysqli_fetch_array($sql_select)) {
$vendor_id_select = $row['vendor_id']; $vendor_id_select = $row['vendor_id'];
$vendor_name_select = htmlentities($row['vendor_name']); $vendor_name_select = htmlentities($row['vendor_name']);
?> ?>
<option <?php if($expense_vendor_id == $vendor_id_select){ ?> selected <?php } ?> value="<?php echo $vendor_id_select; ?>"><?php echo $vendor_name_select; ?></option> <option <?php if ($expense_vendor_id == $vendor_id_select) { ?> selected <?php } ?> value="<?php echo $vendor_id_select; ?>"><?php echo $vendor_name_select; ?></option>
<?php <?php
} }
@ -121,11 +121,11 @@
<?php <?php
$sql_select = mysqli_query($mysqli,"SELECT * FROM categories WHERE category_type = 'Expense' AND (category_archived_at > '$expense_created_at' OR category_archived_at IS NULL) AND company_id = $session_company_id ORDER BY category_name ASC"); $sql_select = mysqli_query($mysqli,"SELECT * FROM categories WHERE category_type = 'Expense' AND (category_archived_at > '$expense_created_at' OR category_archived_at IS NULL) AND company_id = $session_company_id ORDER BY category_name ASC");
while($row = mysqli_fetch_array($sql_select)){ while ($row = mysqli_fetch_array($sql_select)) {
$category_id_select = $row['category_id']; $category_id_select = $row['category_id'];
$category_name_select = htmlentities($row['category_name']); $category_name_select = htmlentities($row['category_name']);
?> ?>
<option <?php if($expense_category_id == $category_id_select){ ?> selected <?php } ?> value="<?php echo $category_id_select; ?>"><?php echo $category_name_select; ?></option> <option <?php if ($expense_category_id == $category_id_select) { ?> selected <?php } ?> value="<?php echo $category_id_select; ?>"><?php echo $category_name_select; ?></option>
<?php <?php
} }
@ -154,7 +154,7 @@
<input type="file" class="form-control-file" name="file"> <input type="file" class="form-control-file" name="file">
</div> </div>
<?php if(!empty($expense_receipt)){ ?> <?php if (!empty($expense_receipt)) { ?>
<hr> <hr>
<a class="text-secondary" href="<?php echo "uploads/expenses/$session_company_id/$expense_receipt"; ?>"><i class="fa fa-fw fa-2x fa-file-pdf text-secondary"></i> <?php echo basename($expense_receipt); ?></a> <a class="text-secondary" href="<?php echo "uploads/expenses/$session_company_id/$expense_receipt"; ?>"><i class="fa fa-fw fa-2x fa-file-pdf text-secondary"></i> <?php echo basename($expense_receipt); ?></a>
<?php } ?> <?php } ?>

54
expenses.php
View File

@ -2,50 +2,50 @@
//$o = "DESC"; //$o = "DESC";
if(!empty($_GET['sb'])){ if (!empty($_GET['sb'])) {
$sb = strip_tags(mysqli_real_escape_string($mysqli,$_GET['sb'])); $sb = strip_tags(mysqli_real_escape_string($mysqli,$_GET['sb']));
}else{ }else{
$sb = "expense_date"; $sb = "expense_date";
} }
// Reverse default sort // Reverse default sort
if(!isset($_GET['o'])){ if (!isset($_GET['o'])) {
$o = "DESC"; $o = "DESC";
$disp = "ASC"; $disp = "ASC";
} }
if(empty($_GET['canned_date'])){ if (empty($_GET['canned_date'])) {
//Prevents lots of undefined variable errors. //Prevents lots of undefined variable errors.
// $dtf and $dtt will be set by the below else to 0000-00-00 / 9999-00-00 // $dtf and $dtt will be set by the below else to 0000-00-00 / 9999-00-00
$_GET['canned_date'] = 'custom'; $_GET['canned_date'] = 'custom';
} }
//Date Filter //Date Filter
if($_GET['canned_date'] == "custom" && !empty($_GET['dtf'])){ if ($_GET['canned_date'] == "custom" && !empty($_GET['dtf'])) {
$dtf = strip_tags(mysqli_real_escape_string($mysqli,$_GET['dtf'])); $dtf = strip_tags(mysqli_real_escape_string($mysqli,$_GET['dtf']));
$dtt = strip_tags(mysqli_real_escape_string($mysqli,$_GET['dtt'])); $dtt = strip_tags(mysqli_real_escape_string($mysqli,$_GET['dtt']));
}elseif($_GET['canned_date'] == "today"){ }elseif ($_GET['canned_date'] == "today") {
$dtf = date('Y-m-d'); $dtf = date('Y-m-d');
$dtt = date('Y-m-d'); $dtt = date('Y-m-d');
}elseif($_GET['canned_date'] == "yesterday"){ }elseif ($_GET['canned_date'] == "yesterday") {
$dtf = date('Y-m-d',strtotime("yesterday")); $dtf = date('Y-m-d',strtotime("yesterday"));
$dtt = date('Y-m-d',strtotime("yesterday")); $dtt = date('Y-m-d',strtotime("yesterday"));
}elseif($_GET['canned_date'] == "thisweek"){ }elseif ($_GET['canned_date'] == "thisweek") {
$dtf = date('Y-m-d',strtotime("monday this week")); $dtf = date('Y-m-d',strtotime("monday this week"));
$dtt = date('Y-m-d'); $dtt = date('Y-m-d');
}elseif($_GET['canned_date'] == "lastweek"){ }elseif ($_GET['canned_date'] == "lastweek") {
$dtf = date('Y-m-d',strtotime("monday last week")); $dtf = date('Y-m-d',strtotime("monday last week"));
$dtt = date('Y-m-d',strtotime("sunday last week")); $dtt = date('Y-m-d',strtotime("sunday last week"));
}elseif($_GET['canned_date'] == "thismonth"){ }elseif ($_GET['canned_date'] == "thismonth") {
$dtf = date('Y-m-01'); $dtf = date('Y-m-01');
$dtt = date('Y-m-d'); $dtt = date('Y-m-d');
}elseif($_GET['canned_date'] == "lastmonth"){ }elseif ($_GET['canned_date'] == "lastmonth") {
$dtf = date('Y-m-d',strtotime("first day of last month")); $dtf = date('Y-m-d',strtotime("first day of last month"));
$dtt = date('Y-m-d',strtotime("last day of last month")); $dtt = date('Y-m-d',strtotime("last day of last month"));
}elseif($_GET['canned_date'] == "thisyear"){ }elseif ($_GET['canned_date'] == "thisyear") {
$dtf = date('Y-01-01'); $dtf = date('Y-01-01');
$dtt = date('Y-m-d'); $dtt = date('Y-m-d');
}elseif($_GET['canned_date'] == "lastyear"){ }elseif ($_GET['canned_date'] == "lastyear") {
$dtf = date('Y-m-d',strtotime("first day of january last year")); $dtf = date('Y-m-d',strtotime("first day of january last year"));
$dtt = date('Y-m-d',strtotime("last day of december last year")); $dtt = date('Y-m-d',strtotime("last day of december last year"));
}else{ }else{
@ -83,7 +83,7 @@ $num_rows = mysqli_fetch_row(mysqli_query($mysqli,"SELECT FOUND_ROWS()"));
<div class="row"> <div class="row">
<div class="col-sm-4"> <div class="col-sm-4">
<div class="input-group"> <div class="input-group">
<input type="search" class="form-control" name="q" value="<?php if(isset($q)){echo strip_tags(htmlentities($q));} ?>" placeholder="Search Expenses"> <input type="search" class="form-control" name="q" value="<?php if (isset($q)) {echo strip_tags(htmlentities($q));} ?>" placeholder="Search Expenses">
<div class="input-group-append"> <div class="input-group-append">
<button class="btn btn-secondary" type="button" data-toggle="collapse" data-target="#advancedFilter"><i class="fas fa-filter"></i></button> <button class="btn btn-secondary" type="button" data-toggle="collapse" data-target="#advancedFilter"><i class="fas fa-filter"></i></button>
<button class="btn btn-primary"><i class="fa fa-search"></i></button> <button class="btn btn-primary"><i class="fa fa-search"></i></button>
@ -96,21 +96,21 @@ $num_rows = mysqli_fetch_row(mysqli_query($mysqli,"SELECT FOUND_ROWS()"));
</div> </div>
</div> </div>
</div> </div>
<div class="collapse mt-3 <?php if(!empty($_GET['dtf'])){ echo "show"; } ?>" id="advancedFilter"> <div class="collapse mt-3 <?php if (!empty($_GET['dtf'])) { echo "show"; } ?>" id="advancedFilter">
<div class="row"> <div class="row">
<div class="col-md-2"> <div class="col-md-2">
<div class="form-group"> <div class="form-group">
<label>Canned Date</label> <label>Canned Date</label>
<select class="form-control select2" name="canned_date"> <select class="form-control select2" name="canned_date">
<option <?php if($_GET['canned_date'] == "custom"){ echo "selected"; } ?> value="">Custom</option> <option <?php if ($_GET['canned_date'] == "custom") { echo "selected"; } ?> value="">Custom</option>
<option <?php if($_GET['canned_date'] == "today"){ echo "selected"; } ?> value="today">Today</option> <option <?php if ($_GET['canned_date'] == "today") { echo "selected"; } ?> value="today">Today</option>
<option <?php if($_GET['canned_date'] == "yesterday"){ echo "selected"; } ?> value="yesterday">Yesterday</option> <option <?php if ($_GET['canned_date'] == "yesterday") { echo "selected"; } ?> value="yesterday">Yesterday</option>
<option <?php if($_GET['canned_date'] == "thisweek"){ echo "selected"; } ?> value="thisweek">This Week</option> <option <?php if ($_GET['canned_date'] == "thisweek") { echo "selected"; } ?> value="thisweek">This Week</option>
<option <?php if($_GET['canned_date'] == "lastweek"){ echo "selected"; } ?> value="lastweek">Last Week</option> <option <?php if ($_GET['canned_date'] == "lastweek") { echo "selected"; } ?> value="lastweek">Last Week</option>
<option <?php if($_GET['canned_date'] == "thismonth"){ echo "selected"; } ?> value="thismonth">This Month</option> <option <?php if ($_GET['canned_date'] == "thismonth") { echo "selected"; } ?> value="thismonth">This Month</option>
<option <?php if($_GET['canned_date'] == "lastmonth"){ echo "selected"; } ?> value="lastmonth">Last Month</option> <option <?php if ($_GET['canned_date'] == "lastmonth") { echo "selected"; } ?> value="lastmonth">Last Month</option>
<option <?php if($_GET['canned_date'] == "thisyear"){ echo "selected"; } ?> value="thisyear">This Year</option> <option <?php if ($_GET['canned_date'] == "thisyear") { echo "selected"; } ?> value="thisyear">This Year</option>
<option <?php if($_GET['canned_date'] == "lastyear"){ echo "selected"; } ?> value="lastyear">Last Year</option> <option <?php if ($_GET['canned_date'] == "lastyear") { echo "selected"; } ?> value="lastyear">Last Year</option>
</select> </select>
</div> </div>
</div> </div>
@ -132,7 +132,7 @@ $num_rows = mysqli_fetch_row(mysqli_query($mysqli,"SELECT FOUND_ROWS()"));
<hr> <hr>
<div class="table-responsive"> <div class="table-responsive">
<table class="table table-striped table-borderless table-hover"> <table class="table table-striped table-borderless table-hover">
<thead class="text-dark <?php if($num_rows[0] == 0){ echo "d-none"; } ?>"> <thead class="text-dark <?php if ($num_rows[0] == 0) { echo "d-none"; } ?>">
<tr> <tr>
<th><a class="text-dark" href="?<?php echo $url_query_strings_sb; ?>&sb=expense_date&o=<?php echo $disp; ?>">Date</a></th> <th><a class="text-dark" href="?<?php echo $url_query_strings_sb; ?>&sb=expense_date&o=<?php echo $disp; ?>">Date</a></th>
<th><a class="text-dark" href="?<?php echo $url_query_strings_sb; ?>&sb=vendor_name&o=<?php echo $disp; ?>">Vendor</a></th> <th><a class="text-dark" href="?<?php echo $url_query_strings_sb; ?>&sb=vendor_name&o=<?php echo $disp; ?>">Vendor</a></th>
@ -146,7 +146,7 @@ $num_rows = mysqli_fetch_row(mysqli_query($mysqli,"SELECT FOUND_ROWS()"));
<tbody> <tbody>
<?php <?php
while($row = mysqli_fetch_array($sql)){ while ($row = mysqli_fetch_array($sql)) {
$expense_id = $row['expense_id']; $expense_id = $row['expense_id'];
$expense_date = $row['expense_date']; $expense_date = $row['expense_date'];
$expense_amount = floatval($row['expense_amount']); $expense_amount = floatval($row['expense_amount']);
@ -162,7 +162,7 @@ $num_rows = mysqli_fetch_row(mysqli_query($mysqli,"SELECT FOUND_ROWS()"));
$account_name = htmlentities($row['account_name']); $account_name = htmlentities($row['account_name']);
$expense_account_id = $row['expense_account_id']; $expense_account_id = $row['expense_account_id'];
if(empty($expense_receipt)){ if (empty($expense_receipt)) {
$receipt_attached = ""; $receipt_attached = "";
}else{ }else{
$receipt_attached = "<a class='text-secondary mr-2' target='_blank' href='uploads/expenses/$session_company_id/$expense_receipt'><i class='fa fa-file-pdf'></i></a>"; $receipt_attached = "<a class='text-secondary mr-2' target='_blank' href='uploads/expenses/$session_company_id/$expense_receipt'><i class='fa fa-file-pdf'></i></a>";
@ -184,7 +184,7 @@ $num_rows = mysqli_fetch_row(mysqli_query($mysqli,"SELECT FOUND_ROWS()"));
</button> </button>
<div class="dropdown-menu"> <div class="dropdown-menu">
<?php <?php
if(!empty($expense_receipt)){ if (!empty($expense_receipt)) {
?> ?>
<a class="dropdown-item" href="<?php echo "uploads/expenses/$session_company_id/$expense_receipt"; ?>" download="<?php echo "$expense_date-$vendor_name-$category_name-$expense_id.pdf"; ?>">Download</a> <a class="dropdown-item" href="<?php echo "uploads/expenses/$session_company_id/$expense_receipt"; ?>" download="<?php echo "$expense_date-$vendor_name-$category_name-$expense_id.pdf"; ?>">Download</a>
<div class="dropdown-divider"></div> <div class="dropdown-divider"></div>

111
functions.php
View File

@ -43,7 +43,7 @@ function key32gen()
} }
function initials($str) { function initials($str) {
if(!empty($str)){ if (!empty($str)) {
$ret = ''; $ret = '';
foreach (explode(' ', $str) as $word) foreach (explode(' ', $str) as $word)
$ret .= strtoupper($word[0]); $ret .= strtoupper($word[0]);
@ -68,14 +68,14 @@ function get_user_agent() {
} }
function get_ip() { function get_ip() {
if(defined("CONST_GET_IP_METHOD")){ if (defined("CONST_GET_IP_METHOD")) {
if(CONST_GET_IP_METHOD == "HTTP_X_FORWARDED_FOR"){ if (CONST_GET_IP_METHOD == "HTTP_X_FORWARDED_FOR") {
$ip = getenv('HTTP_X_FORWARDED_FOR'); $ip = getenv('HTTP_X_FORWARDED_FOR');
} }
else{ else{
$ip = $_SERVER["HTTP_CF_CONNECTING_IP"] ?? $_SERVER['REMOTE_ADDR']; $ip = $_SERVER["HTTP_CF_CONNECTING_IP"] ?? $_SERVER['REMOTE_ADDR'];
} }
} }
@ -131,7 +131,7 @@ function get_os($user_os) {
return $os_platform; return $os_platform;
} }
function get_device(){ function get_device() {
$tablet_browser = 0; $tablet_browser = 0;
$mobile_browser = 0; $mobile_browser = 0;
if (preg_match('/(tablet|ipad|playbook)|(android(?!.*(mobi|opera mini)))/i', strtolower($_SERVER['HTTP_USER_AGENT']))) { if (preg_match('/(tablet|ipad|playbook)|(android(?!.*(mobi|opera mini)))/i', strtolower($_SERVER['HTTP_USER_AGENT']))) {
@ -159,7 +159,7 @@ function get_device(){
} }
if (strpos(strtolower(get_user_agent()),'opera mini') > 0) { if (strpos(strtolower(get_user_agent()),'opera mini') > 0) {
$mobile_browser++; $mobile_browser++;
//Check for tablets on opera mini alternative headers //Check for tablets on Opera Mini alternative headers
$stock_ua = strtolower(isset($_SERVER['HTTP_X_OPERAMINI_PHONE_UA'])?$_SERVER['HTTP_X_OPERAMINI_PHONE_UA']:(isset($_SERVER['HTTP_DEVICE_STOCK_UA'])?$_SERVER['HTTP_DEVICE_STOCK_UA']:'')); $stock_ua = strtolower(isset($_SERVER['HTTP_X_OPERAMINI_PHONE_UA'])?$_SERVER['HTTP_X_OPERAMINI_PHONE_UA']:(isset($_SERVER['HTTP_DEVICE_STOCK_UA'])?$_SERVER['HTTP_DEVICE_STOCK_UA']:''));
if (preg_match('/(tablet|ipad|playbook)|(android(?!.*mobile))/i', $stock_ua)) { if (preg_match('/(tablet|ipad|playbook)|(android(?!.*mobile))/i', $stock_ua)) {
$tablet_browser++; $tablet_browser++;
@ -186,14 +186,13 @@ function truncate($text, $chars) {
$text = $text." "; $text = $text." ";
$text = substr($text,0,$chars); $text = substr($text,0,$chars);
$text = substr($text,0,strrpos($text,' ')); $text = substr($text,0,strrpos($text,' '));
$text = $text."..."; return $text."...";
return $text;
} }
function formatPhoneNumber($phoneNumber) { function formatPhoneNumber($phoneNumber) {
$phoneNumber = preg_replace('/[^0-9]/','',$phoneNumber); $phoneNumber = preg_replace('/[^0-9]/','',$phoneNumber);
if(strlen($phoneNumber) > 10) { if (strlen($phoneNumber) > 10) {
$countryCode = substr($phoneNumber, 0, strlen($phoneNumber)-10); $countryCode = substr($phoneNumber, 0, strlen($phoneNumber)-10);
$areaCode = substr($phoneNumber, -10, 3); $areaCode = substr($phoneNumber, -10, 3);
$nextThree = substr($phoneNumber, -7, 3); $nextThree = substr($phoneNumber, -7, 3);
@ -201,14 +200,14 @@ function formatPhoneNumber($phoneNumber) {
$phoneNumber = '+'.$countryCode.' ('.$areaCode.') '.$nextThree.'-'.$lastFour; $phoneNumber = '+'.$countryCode.' ('.$areaCode.') '.$nextThree.'-'.$lastFour;
} }
else if(strlen($phoneNumber) == 10) { else if (strlen($phoneNumber) == 10) {
$areaCode = substr($phoneNumber, 0, 3); $areaCode = substr($phoneNumber, 0, 3);
$nextThree = substr($phoneNumber, 3, 3); $nextThree = substr($phoneNumber, 3, 3);
$lastFour = substr($phoneNumber, 6, 4); $lastFour = substr($phoneNumber, 6, 4);
$phoneNumber = '('.$areaCode.') '.$nextThree.'-'.$lastFour; $phoneNumber = '('.$areaCode.') '.$nextThree.'-'.$lastFour;
} }
else if(strlen($phoneNumber) == 7) { else if (strlen($phoneNumber) == 7) {
$nextThree = substr($phoneNumber, 0, 3); $nextThree = substr($phoneNumber, 0, 3);
$lastFour = substr($phoneNumber, 3, 4); $lastFour = substr($phoneNumber, 3, 4);
@ -226,7 +225,7 @@ function mkdir_missing($dir) {
// Called during initial setup // Called during initial setup
// Encrypts the master key with the user's password // Encrypts the master key with the user's password
function setupFirstUserSpecificKey($user_password, $site_encryption_master_key){ function setupFirstUserSpecificKey($user_password, $site_encryption_master_key) {
$iv = bin2hex(random_bytes(8)); $iv = bin2hex(random_bytes(8));
$salt = bin2hex(random_bytes(8)); $salt = bin2hex(random_bytes(8));
@ -236,9 +235,7 @@ function setupFirstUserSpecificKey($user_password, $site_encryption_master_key){
//Encrypt the master key with the users kdf'd hash and the IV //Encrypt the master key with the users kdf'd hash and the IV
$ciphertext = openssl_encrypt($site_encryption_master_key, 'aes-128-cbc', $user_password_kdhash, 0, $iv); $ciphertext = openssl_encrypt($site_encryption_master_key, 'aes-128-cbc', $user_password_kdhash, 0, $iv);
$user_encryption_ciphertext = $salt . $iv . $ciphertext; return $salt . $iv . $ciphertext;
return $user_encryption_ciphertext;
} }
/* /*
@ -246,7 +243,7 @@ function setupFirstUserSpecificKey($user_password, $site_encryption_master_key){
* New Users: Requires the admin setting up their account have a Specific/Session key configured * New Users: Requires the admin setting up their account have a Specific/Session key configured
* Password Changes: Will use the current info in the session. * Password Changes: Will use the current info in the session.
*/ */
function encryptUserSpecificKey($user_password){ function encryptUserSpecificKey($user_password) {
$iv = bin2hex(random_bytes(8)); $iv = bin2hex(random_bytes(8));
$salt = bin2hex(random_bytes(8)); $salt = bin2hex(random_bytes(8));
@ -264,15 +261,13 @@ function encryptUserSpecificKey($user_password){
// Encrypt the master key with the users kdf'd hash and the IV // Encrypt the master key with the users kdf'd hash and the IV
$ciphertext = openssl_encrypt($site_encryption_master_key, 'aes-128-cbc', $user_password_kdhash, 0, $iv); $ciphertext = openssl_encrypt($site_encryption_master_key, 'aes-128-cbc', $user_password_kdhash, 0, $iv);
$user_encryption_ciphertext = $salt . $iv . $ciphertext; return $salt . $iv . $ciphertext;
return $user_encryption_ciphertext;
} }
// Given a ciphertext (incl. IV) and the user's password, returns the site master key // Given a ciphertext (incl. IV) and the user's password, returns the site master key
// Ran at login, to facilitate generateUserSessionKey // Ran at login, to facilitate generateUserSessionKey
function decryptUserSpecificKey($user_encryption_ciphertext, $user_password){ function decryptUserSpecificKey($user_encryption_ciphertext, $user_password) {
//Get the IV, salt and ciphertext //Get the IV, salt and ciphertext
$salt = substr($user_encryption_ciphertext, 0, 16); $salt = substr($user_encryption_ciphertext, 0, 16);
$iv = substr($user_encryption_ciphertext, 16, 16); $iv = substr($user_encryption_ciphertext, 16, 16);
@ -282,18 +277,17 @@ function decryptUserSpecificKey($user_encryption_ciphertext, $user_password){
$user_password_kdhash = hash_pbkdf2('sha256', $user_password, $salt, 100000, 16); $user_password_kdhash = hash_pbkdf2('sha256', $user_password, $salt, 100000, 16);
//Use this hash to get the original/master key //Use this hash to get the original/master key
$site_encryption_master_key = openssl_decrypt($ciphertext, 'aes-128-cbc', $user_password_kdhash, 0, $iv); return openssl_decrypt($ciphertext, 'aes-128-cbc', $user_password_kdhash, 0, $iv);
return $site_encryption_master_key;
} }
/* /*
Generates what is probably best described as a session key (ephemeral-ish) Generates what is probably best described as a session key (ephemeral-ish)
- Allows us to store the master key on the server whilst the user is using the application, without prompting to type their password everytime they want to decrypt a credential - Allows us to store the master key on the server whilst the user is using the application, without prompting to type their password everytime they want to decrypt a credential
- Ciphertext/IV is stored on the server in the users session, encryption key is controlled/provided by the user as a cookie - Ciphertext/IV is stored on the server in the users' session, encryption key is controlled/provided by the user as a cookie
- Only the user can decrypt their session ciphertext to get the master key - Only the user can decrypt their session ciphertext to get the master key
- Encryption key never hits the disk in cleartext - Encryption key never hits the disk in cleartext
*/ */
function generateUserSessionKey($site_encryption_master_key){ function generateUserSessionKey($site_encryption_master_key) {
// Generate both of these using bin2hex(random_bytes(8)) // Generate both of these using bin2hex(random_bytes(8))
$user_encryption_session_key = bin2hex(random_bytes(8)); $user_encryption_session_key = bin2hex(random_bytes(8));
@ -306,7 +300,7 @@ function generateUserSessionKey($site_encryption_master_key){
// Give the user "their" key as a cookie // Give the user "their" key as a cookie
include('config.php'); include('config.php');
if($config_https_only){ if ($config_https_only) {
setcookie("user_encryption_session_key", "$user_encryption_session_key", ['path' => '/','secure' => true,'httponly' => true,'samesite' => 'None']); setcookie("user_encryption_session_key", "$user_encryption_session_key", ['path' => '/','secure' => true,'httponly' => true,'samesite' => 'None']);
} else{ } else{
setcookie("user_encryption_session_key", $user_encryption_session_key, 0, "/"); setcookie("user_encryption_session_key", $user_encryption_session_key, 0, "/");
@ -315,7 +309,7 @@ function generateUserSessionKey($site_encryption_master_key){
} }
// Decrypts an encrypted password (website/asset login), returns it as a string // Decrypts an encrypted password (website/asset login), returns it as a string
function decryptLoginEntry($login_password_ciphertext){ function decryptLoginEntry($login_password_ciphertext) {
// Split the login into IV and Ciphertext // Split the login into IV and Ciphertext
$login_iv = substr($login_password_ciphertext, 0, 16); $login_iv = substr($login_password_ciphertext, 0, 16);
@ -330,13 +324,12 @@ function decryptLoginEntry($login_password_ciphertext){
$site_encryption_master_key = openssl_decrypt($user_encryption_session_ciphertext, 'aes-128-cbc', $user_encryption_session_key, 0, $user_encryption_session_iv); $site_encryption_master_key = openssl_decrypt($user_encryption_session_ciphertext, 'aes-128-cbc', $user_encryption_session_key, 0, $user_encryption_session_iv);
// Decrypt the login password using the master key // Decrypt the login password using the master key
$login_password_cleartext = openssl_decrypt($login_ciphertext, 'aes-128-cbc', $site_encryption_master_key, 0, $login_iv); return openssl_decrypt($login_ciphertext, 'aes-128-cbc', $site_encryption_master_key, 0, $login_iv);
return $login_password_cleartext;
} }
// Encrypts a website/asset login password // Encrypts a website/asset login password
function encryptLoginEntry($login_password_cleartext){ function encryptLoginEntry($login_password_cleartext) {
$iv = bin2hex(random_bytes(8)); $iv = bin2hex(random_bytes(8));
// Get the user session info. // Get the user session info.
@ -350,15 +343,14 @@ function encryptLoginEntry($login_password_cleartext){
//Encrypt the website/asset login using the master key //Encrypt the website/asset login using the master key
$ciphertext = openssl_encrypt($login_password_cleartext, 'aes-128-cbc', $site_encryption_master_key, 0, $iv); $ciphertext = openssl_encrypt($login_password_cleartext, 'aes-128-cbc', $site_encryption_master_key, 0, $iv);
$login_password_ciphertext = $iv . $ciphertext; return $iv . $ciphertext;
return $login_password_ciphertext;
} }
// Get domain expiration date // Get domain expiration date
function getDomainExpirationDate($name){ function getDomainExpirationDate($name) {
// Only run if we think the domain is valid // Only run if we think the domain is valid
if(!filter_var($name, FILTER_VALIDATE_DOMAIN, FILTER_FLAG_HOSTNAME)) { if (!filter_var($name, FILTER_VALIDATE_DOMAIN, FILTER_FLAG_HOSTNAME)) {
return '0000-00-00'; return '0000-00-00';
} }
@ -367,8 +359,8 @@ function getDomainExpirationDate($name){
curl_setopt($ch, CURLOPT_RETURNTRANSFER,1); curl_setopt($ch, CURLOPT_RETURNTRANSFER,1);
$response = json_decode(curl_exec($ch),1); $response = json_decode(curl_exec($ch),1);
if($response){ if ($response) {
if(is_array($response['expiration_date'])){ if (is_array($response['expiration_date'])) {
$expiry = new DateTime($response['expiration_date'][1]); $expiry = new DateTime($response['expiration_date'][1]);
} }
else{ else{
@ -383,12 +375,12 @@ function getDomainExpirationDate($name){
} }
// Get domain general info (whois + NS/A/MX records) // Get domain general info (whois + NS/A/MX records)
function getDomainRecords($name){ function getDomainRecords($name) {
$records = array(); $records = array();
// Only run if we think the domain is valid // Only run if we think the domain is valid
if(!filter_var($name, FILTER_VALIDATE_DOMAIN, FILTER_FLAG_HOSTNAME)) { if (!filter_var($name, FILTER_VALIDATE_DOMAIN, FILTER_FLAG_HOSTNAME)) {
$records['a'] = ''; $records['a'] = '';
$records['ns'] = ''; $records['ns'] = '';
$records['mx'] = ''; $records['mx'] = '';
@ -408,13 +400,13 @@ function getDomainRecords($name){
// Used to automatically attempt to get SSL certificates as part of adding domains // Used to automatically attempt to get SSL certificates as part of adding domains
// The logic for the fetch (sync) button on the client_certificates page is in ajax.php, and allows ports other than 443 // The logic for the fetch (sync) button on the client_certificates page is in ajax.php, and allows ports other than 443
function getSSL($name){ function getSSL($name) {
$certificate = array(); $certificate = array();
$certificate['success'] = FALSE; $certificate['success'] = FALSE;
// Only run if we think the domain is valid // Only run if we think the domain is valid
if(!filter_var($name, FILTER_VALIDATE_DOMAIN, FILTER_FLAG_HOSTNAME)) { if (!filter_var($name, FILTER_VALIDATE_DOMAIN, FILTER_FLAG_HOSTNAME)) {
$certificate['expire'] = ''; $certificate['expire'] = '';
$certificate['issued_by'] = ''; $certificate['issued_by'] = '';
$certificate['public_key'] = ''; $certificate['public_key'] = '';
@ -427,12 +419,12 @@ function getSSL($name){
$read = stream_socket_client($socket, $errno, $errstr, 5, STREAM_CLIENT_CONNECT, $get); $read = stream_socket_client($socket, $errno, $errstr, 5, STREAM_CLIENT_CONNECT, $get);
// If the socket connected // If the socket connected
if($read){ if ($read) {
$cert = stream_context_get_params($read); $cert = stream_context_get_params($read);
$cert_public_key_obj = openssl_x509_parse($cert['options']['ssl']['peer_certificate']); $cert_public_key_obj = openssl_x509_parse($cert['options']['ssl']['peer_certificate']);
openssl_x509_export($cert['options']['ssl']['peer_certificate'], $export); openssl_x509_export($cert['options']['ssl']['peer_certificate'], $export);
if($cert_public_key_obj){ if ($cert_public_key_obj) {
$certificate['success'] = TRUE; $certificate['success'] = TRUE;
$certificate['expire'] = date('Y-m-d', $cert_public_key_obj['validTo_time_t']); $certificate['expire'] = date('Y-m-d', $cert_public_key_obj['validTo_time_t']);
$certificate['issued_by'] = strip_tags($cert_public_key_obj['issuer']['O']); $certificate['issued_by'] = strip_tags($cert_public_key_obj['issuer']['O']);
@ -443,22 +435,20 @@ function getSSL($name){
return $certificate; return $certificate;
} }
function strto_AZaz09($string){ function strto_AZaz09($string) {
$string = ucwords(strtolower($string)); $string = ucwords(strtolower($string));
// Replace spaces with _ // Replace spaces with _
//$string = str_replace(' ', '_', $string); //$string = str_replace(' ', '_', $string);
// Gets rid of non-alphanumerics // Gets rid of non-alphanumerics
$strto_AZaz09 = preg_replace( '/[^A-Za-z0-9_]/', '', $string ); return preg_replace('/[^A-Za-z0-9_]/', '', $string);
return $strto_AZaz09;
} }
// Cross-Site Request Forgery check for sensitive functions // Cross-Site Request Forgery check for sensitive functions
// Validates the CSRF token provided matches the one in the users session // Validates the CSRF token provided matches the one in the users session
function validateCSRFToken($token){ function validateCSRFToken($token) {
if(hash_equals($token, $_SESSION['csrf_token'])){ if (hash_equals($token, $_SESSION['csrf_token'])) {
return true; return true;
} }
else{ else{
@ -476,8 +466,8 @@ function validateCSRFToken($token){
* Accountant - 1 * Accountant - 1
*/ */
function validateAdminRole(){ function validateAdminRole() {
if(!isset($_SESSION['user_role']) || $_SESSION['user_role'] != 3){ if (!isset($_SESSION['user_role']) || $_SESSION['user_role'] != 3) {
$_SESSION['alert_type'] = "danger"; $_SESSION['alert_type'] = "danger";
$_SESSION['alert_message'] = WORDING_ROLECHECK_FAILED; $_SESSION['alert_message'] = WORDING_ROLECHECK_FAILED;
header("Location: " . $_SERVER["HTTP_REFERER"]); header("Location: " . $_SERVER["HTTP_REFERER"]);
@ -485,8 +475,8 @@ function validateAdminRole(){
} }
} }
function validateTechRole(){ function validateTechRole() {
if(!isset($_SESSION['user_role']) || $_SESSION['user_role'] == 1){ if (!isset($_SESSION['user_role']) || $_SESSION['user_role'] == 1) {
$_SESSION['alert_type'] = "danger"; $_SESSION['alert_type'] = "danger";
$_SESSION['alert_message'] = WORDING_ROLECHECK_FAILED; $_SESSION['alert_message'] = WORDING_ROLECHECK_FAILED;
header("Location: " . $_SERVER["HTTP_REFERER"]); header("Location: " . $_SERVER["HTTP_REFERER"]);
@ -494,8 +484,8 @@ function validateTechRole(){
} }
} }
function validateAccountantRole(){ function validateAccountantRole() {
if(!isset($_SESSION['user_role']) || $_SESSION['user_role'] == 2){ if (!isset($_SESSION['user_role']) || $_SESSION['user_role'] == 2) {
$_SESSION['alert_type'] = "danger"; $_SESSION['alert_type'] = "danger";
$_SESSION['alert_message'] = WORDING_ROLECHECK_FAILED; $_SESSION['alert_message'] = WORDING_ROLECHECK_FAILED;
header("Location: " . $_SERVER["HTTP_REFERER"]); header("Location: " . $_SERVER["HTTP_REFERER"]);
@ -504,7 +494,7 @@ function validateAccountantRole(){
} }
// Send a single email to a single recipient // Send a single email to a single recipient
function sendSingleEmail($config_smtp_host, $config_smtp_username, $config_smtp_password, $config_smtp_encryption, $config_smtp_port, $from_email, $from_name, $to_email, $to_name, $subject, $body){ function sendSingleEmail($config_smtp_host, $config_smtp_username, $config_smtp_password, $config_smtp_encryption, $config_smtp_port, $from_email, $from_name, $to_email, $to_name, $subject, $body) {
$mail = new PHPMailer(true); $mail = new PHPMailer(true);
@ -524,7 +514,6 @@ function sendSingleEmail($config_smtp_host, $config_smtp_username, $config_smtp_
$mail->addAddress("$to_email", "$to_name"); // Add a recipient $mail->addAddress("$to_email", "$to_name"); // Add a recipient
// Content // Content
$mail->isHTML(true); // Set email format to HTML
$mail->Subject = "$subject"; // Subject $mail->Subject = "$subject"; // Subject
$mail->Body = "$body"; // Content $mail->Body = "$body"; // Content
@ -539,10 +528,10 @@ function sendSingleEmail($config_smtp_host, $config_smtp_username, $config_smtp_
return true; return true;
} }
catch(Exception $e){ catch(Exception $e) {
// If we couldn't send the message return the error so we can log it // If we couldn't send the message return the error, so we can log it
return "Message not sent. Mailer Error: {$mail->ErrorInfo}"; return "Message not sent. Mailer Error: {$mail->ErrorInfo}";
} }
} }
?>

3
get_settings.php
View File

@ -112,7 +112,7 @@ $net_terms_array = array(
'0'=>'On Reciept', '0'=>'On Reciept',
'7'=>'7 Days', '7'=>'7 Days',
'14'=>'14 Days', '14'=>'14 Days',
'30'=>'30 Days' '30'=>'30 Days'
); );
$records_per_page_array = array('5','10','15','20','30','50','100'); $records_per_page_array = array('5','10','15','20','30','50','100');
@ -927,4 +927,3 @@ $asset_status_array = array(
'Retired' 'Retired'
); );
?>

32
global_search.php
View File

@ -2,12 +2,12 @@
<?php <?php
if(isset($_GET['query'])){ if (isset($_GET['query'])) {
$query = trim(strip_tags(mysqli_real_escape_string($mysqli,$_GET['query']))); $query = trim(strip_tags(mysqli_real_escape_string($mysqli,$_GET['query'])));
$phone_query = preg_replace("/[^0-9]/", '',$query); $phone_query = preg_replace("/[^0-9]/", '',$query);
if(empty($phone_query)){ if (empty($phone_query)) {
$phone_query = $query; $phone_query = $query;
} }
@ -28,7 +28,7 @@ if(isset($_GET['query'])){
<hr> <hr>
<div class="row"> <div class="row">
<?php if(mysqli_num_rows($sql_clients) > 0){ ?> <?php if (mysqli_num_rows($sql_clients) > 0) { ?>
<!-- Clients--> <!-- Clients-->
@ -48,7 +48,7 @@ if(isset($_GET['query'])){
<tbody> <tbody>
<?php <?php
while($row = mysqli_fetch_array($sql_clients)){ while ($row = mysqli_fetch_array($sql_clients)) {
$client_id = $row['client_id']; $client_id = $row['client_id'];
$client_name = htmlentities($row['client_name']); $client_name = htmlentities($row['client_name']);
$location_phone = formatPhoneNumber($row['location_phone']); $location_phone = formatPhoneNumber($row['location_phone']);
@ -72,7 +72,7 @@ if(isset($_GET['query'])){
<?php } ?> <?php } ?>
<?php if(mysqli_num_rows($sql_contacts) > 0){ ?> <?php if (mysqli_num_rows($sql_contacts) > 0) { ?>
<!-- Contacts--> <!-- Contacts-->
@ -94,7 +94,7 @@ if(isset($_GET['query'])){
<tbody> <tbody>
<?php <?php
while($row = mysqli_fetch_array($sql_contacts)){ while ($row = mysqli_fetch_array($sql_contacts)) {
$contact_id = $row['contact_id']; $contact_id = $row['contact_id'];
$contact_name = htmlentities($row['contact_name']); $contact_name = htmlentities($row['contact_name']);
$contact_title = htmlentities($row['contact_title']); $contact_title = htmlentities($row['contact_title']);
@ -128,7 +128,7 @@ if(isset($_GET['query'])){
<?php } ?> <?php } ?>
<?php if(mysqli_num_rows($sql_vendors) > 0){ ?> <?php if (mysqli_num_rows($sql_vendors) > 0) { ?>
<!-- Vendors --> <!-- Vendors -->
<div class="col-6"> <div class="col-6">
@ -148,7 +148,7 @@ if(isset($_GET['query'])){
<tbody> <tbody>
<?php <?php
while($row = mysqli_fetch_array($sql_vendors)){ while ($row = mysqli_fetch_array($sql_vendors)) {
$vendor_name = htmlentities($row['vendor_name']); $vendor_name = htmlentities($row['vendor_name']);
$vendor_description = htmlentities($row['vendor_description']); $vendor_description = htmlentities($row['vendor_description']);
$vendor_phone = formatPhoneNumber($row['vendor_phone']); $vendor_phone = formatPhoneNumber($row['vendor_phone']);
@ -171,7 +171,7 @@ if(isset($_GET['query'])){
<?php } ?> <?php } ?>
<?php if(mysqli_num_rows($sql_products) > 0){ ?> <?php if (mysqli_num_rows($sql_products) > 0) { ?>
<!-- Products --> <!-- Products -->
<div class="col-6"> <div class="col-6">
@ -190,7 +190,7 @@ if(isset($_GET['query'])){
<tbody> <tbody>
<?php <?php
while($row = mysqli_fetch_array($sql_products)){ while ($row = mysqli_fetch_array($sql_products)) {
$product_name = htmlentities($row['product_name']); $product_name = htmlentities($row['product_name']);
$product_description = htmlentities($row['product_description']); $product_description = htmlentities($row['product_description']);
?> ?>
@ -211,7 +211,7 @@ if(isset($_GET['query'])){
<?php } ?> <?php } ?>
<?php if(mysqli_num_rows($sql_documents) > 0){ ?> <?php if (mysqli_num_rows($sql_documents) > 0) { ?>
<!-- Documents --> <!-- Documents -->
<div class="col-6"> <div class="col-6">
@ -231,7 +231,7 @@ if(isset($_GET['query'])){
<tbody> <tbody>
<?php <?php
while($row = mysqli_fetch_array($sql_documents)){ while ($row = mysqli_fetch_array($sql_documents)) {
$document_name = htmlentities($row['document_name']); $document_name = htmlentities($row['document_name']);
$document_client_id = $row['document_client_id']; $document_client_id = $row['document_client_id'];
$document_client = htmlentities($row['client_name']); $document_client = htmlentities($row['client_name']);
@ -256,7 +256,7 @@ if(isset($_GET['query'])){
<?php } ?> <?php } ?>
<?php if(mysqli_num_rows($sql_tickets) > 0){ ?> <?php if (mysqli_num_rows($sql_tickets) > 0) { ?>
<!-- Tickets --> <!-- Tickets -->
<div class="col-6"> <div class="col-6">
@ -277,7 +277,7 @@ if(isset($_GET['query'])){
<tbody> <tbody>
<?php <?php
while($row = mysqli_fetch_array($sql_tickets)){ while ($row = mysqli_fetch_array($sql_tickets)) {
$ticket_id = $row['ticket_id']; $ticket_id = $row['ticket_id'];
$ticket_prefix = $row['ticket_prefix']; $ticket_prefix = $row['ticket_prefix'];
$ticket_number = $row['ticket_number']; $ticket_number = $row['ticket_number'];
@ -306,7 +306,7 @@ if(isset($_GET['query'])){
<?php } ?> <?php } ?>
<?php if(mysqli_num_rows($sql_logins) > 0){ ?> <?php if (mysqli_num_rows($sql_logins) > 0) { ?>
<!-- Logins --> <!-- Logins -->
<div class="col-6"> <div class="col-6">
@ -326,7 +326,7 @@ if(isset($_GET['query'])){
<tbody> <tbody>
<?php <?php
while($row = mysqli_fetch_array($sql_logins)){ while ($row = mysqli_fetch_array($sql_logins)) {
$login_name = htmlentities($row['login_name']); $login_name = htmlentities($row['login_name']);
$login_client_id = $row['login_client_id']; $login_client_id = $row['login_client_id'];
$login_username = htmlentities($row['login_username']); $login_username = htmlentities($row['login_username']);

12
guest_download_file.php
View File

@ -5,7 +5,7 @@ include("functions.php");
$ip = trim(strip_tags(mysqli_real_escape_string($mysqli,get_ip()))); $ip = trim(strip_tags(mysqli_real_escape_string($mysqli,get_ip())));
$user_agent = strip_tags(mysqli_real_escape_string($mysqli,$_SERVER['HTTP_USER_AGENT'])); $user_agent = strip_tags(mysqli_real_escape_string($mysqli,$_SERVER['HTTP_USER_AGENT']));
if(isset($_GET['id']) && isset($_GET['key'])){ if (isset($_GET['id']) && isset($_GET['key'])) {
$item_id = intval($_GET['id']); $item_id = intval($_GET['id']);
$item_key = trim(strip_tags(mysqli_real_escape_string($mysqli,$_GET['key']))); $item_key = trim(strip_tags(mysqli_real_escape_string($mysqli,$_GET['key'])));
@ -13,24 +13,24 @@ if(isset($_GET['id']) && isset($_GET['key'])){
$row = mysqli_fetch_array($sql); $row = mysqli_fetch_array($sql);
// Check result // Check result
if(mysqli_num_rows($sql) !== 1 || !$row){ if (mysqli_num_rows($sql) !== 1 || !$row) {
exit("No file."); exit("No file.");
} }
// Check it is a file // Check it is a file
if($row['item_type'] !== "File"){ if ($row['item_type'] !== "File") {
exit("Bad item type."); exit("Bad item type.");
} }
// Check item share is active & hasn't been viewed too many times // Check item share is active & hasn't been viewed too many times
if($row['item_active'] !== "1" || $row['item_views'] >= $row['item_view_limit']){ if ($row['item_active'] !== "1" || $row['item_views'] >= $row['item_view_limit']) {
exit("Item cannot be viewed at this time."); exit("Item cannot be viewed at this time.");
} }
$item_related_id = $row['item_related_id']; $item_related_id = $row['item_related_id'];
$client_id = $row['item_client_id']; $client_id = $row['item_client_id'];
if(empty($row['item_views'])){ if (empty($row['item_views'])) {
$item_views = 0; $item_views = 0;
} }
else { else {
@ -40,7 +40,7 @@ if(isset($_GET['id']) && isset($_GET['key'])){
$file_sql = mysqli_query($mysqli, "SELECT * FROM files WHERE file_id = '$item_related_id' AND file_client_id = '$client_id' LIMIT 1"); $file_sql = mysqli_query($mysqli, "SELECT * FROM files WHERE file_id = '$item_related_id' AND file_client_id = '$client_id' LIMIT 1");
$file_row = mysqli_fetch_array($file_sql); $file_row = mysqli_fetch_array($file_sql);
if(mysqli_num_rows($file_sql) !== 1 || !$file_row){ if (mysqli_num_rows($file_sql) !== 1 || !$file_row) {
exit("No file."); exit("No file.");
} }

4
guest_header.php
View File

@ -46,8 +46,8 @@ $user_agent = strip_tags(mysqli_real_escape_string($mysqli,$_SERVER['HTTP_USER_A
<?php <?php
//Alert Feedback //Alert Feedback
if(!empty($_SESSION['alert_message'])){ if (!empty($_SESSION['alert_message'])) {
if (!isset($_SESSION['alert_type'])){ if (!isset($_SESSION['alert_type'])) {
$_SESSION['alert_type'] = "info"; $_SESSION['alert_type'] = "info";
} }
?> ?>

6
guest_pay_invoice.php
View File

@ -7,14 +7,14 @@ include("config.php");
session_start(); session_start();
if(isset($_POST['pay_invoice'])){ if (isset($_POST['pay_invoice'])) {
$email = mysqli_real_escape_string($mysqli,$_POST['email']); $email = mysqli_real_escape_string($mysqli,$_POST['email']);
$password = md5(mysqli_real_escape_string($mysqli,$_POST['password'])); $password = md5(mysqli_real_escape_string($mysqli,$_POST['password']));
$sql = mysqli_query($mysqli,"SELECT * FROM users WHERE email = '$email' AND password = '$password'"); $sql = mysqli_query($mysqli,"SELECT * FROM users WHERE email = '$email' AND password = '$password'");
if(mysqli_num_rows($sql) == 1){ if (mysqli_num_rows($sql) == 1) {
$row = mysqli_fetch_array($sql); $row = mysqli_fetch_array($sql);
$_SESSION['logged'] = TRUE; $_SESSION['logged'] = TRUE;
$_SESSION['user_id'] = $row['user_id']; $_SESSION['user_id'] = $row['user_id'];
@ -68,7 +68,7 @@ if(isset($_POST['pay_invoice'])){
<i class="fab fa-fw fa-3x fa-cc-discover"></i> <i class="fab fa-fw fa-3x fa-cc-discover"></i>
<i class="fab fa-fw fa-3x fa-cc-amex"></i> <i class="fab fa-fw fa-3x fa-cc-amex"></i>
</center> </center>
<?php if(isset($response)) { echo $response; } ?> <?php if (isset($response)) { echo $response; } ?>
<form method="post"> <form method="post">
<div class="form-group"> <div class="form-group">
<label>Name on card</label> <label>Name on card</label>

17
guest_post.php
View File

@ -5,7 +5,7 @@ include("functions.php");
session_start(); session_start();
if(isset($_GET['accept_quote'], $_GET['company_id'], $_GET['url_key'])){ if (isset($_GET['accept_quote'], $_GET['company_id'], $_GET['url_key'])) {
$quote_id = intval($_GET['accept_quote']); $quote_id = intval($_GET['accept_quote']);
$company_id = intval($_GET['company_id']); $company_id = intval($_GET['company_id']);
@ -13,14 +13,14 @@ if(isset($_GET['accept_quote'], $_GET['company_id'], $_GET['url_key'])){
$sql = mysqli_query($mysqli,"SELECT * FROM quotes WHERE quote_id = $quote_id AND quote_url_key = '$url_key' AND company_id = $company_id"); $sql = mysqli_query($mysqli,"SELECT * FROM quotes WHERE quote_id = $quote_id AND quote_url_key = '$url_key' AND company_id = $company_id");
if(mysqli_num_rows($sql) == 1){ if (mysqli_num_rows($sql) == 1) {
mysqli_query($mysqli,"UPDATE quotes SET quote_status = 'Accepted' WHERE quote_id = $quote_id"); mysqli_query($mysqli,"UPDATE quotes SET quote_status = 'Accepted' WHERE quote_id = $quote_id");
mysqli_query($mysqli,"INSERT INTO history SET history_status = 'Accepted', history_description = 'Client accepted Quote!', history_created_at = NOW(), history_quote_id = $quote_id, company_id = $company_id"); mysqli_query($mysqli,"INSERT INTO history SET history_status = 'Accepted', history_description = 'Client accepted Quote!', history_created_at = NOW(), history_quote_id = $quote_id, company_id = $company_id");
$_SESSION['alert_message'] = "Quote Accepted"; $_SESSION['alert_message'] = "Quote Accepted";
header("Location: " . $_SERVER["HTTP_REFERER"]); header("Location: " . $_SERVER["HTTP_REFERER"]);
}else{ }else{
echo "GTFO!!"; echo "GTFO!!";
@ -28,7 +28,7 @@ if(isset($_GET['accept_quote'], $_GET['company_id'], $_GET['url_key'])){
} }
if(isset($_GET['decline_quote'], $_GET['company_id'], $_GET['url_key'])){ if (isset($_GET['decline_quote'], $_GET['company_id'], $_GET['url_key'])) {
$quote_id = intval($_GET['decline_quote']); $quote_id = intval($_GET['decline_quote']);
$company_id = intval($_GET['company_id']); $company_id = intval($_GET['company_id']);
@ -36,7 +36,7 @@ if(isset($_GET['decline_quote'], $_GET['company_id'], $_GET['url_key'])){
$sql = mysqli_query($mysqli,"SELECT * FROM quotes WHERE quote_id = $quote_id AND quote_url_key = '$url_key' AND quote_url_key = '$url_key' AND company_id = $company_id"); $sql = mysqli_query($mysqli,"SELECT * FROM quotes WHERE quote_id = $quote_id AND quote_url_key = '$url_key' AND quote_url_key = '$url_key' AND company_id = $company_id");
if(mysqli_num_rows($sql) == 1){ if (mysqli_num_rows($sql) == 1) {
mysqli_query($mysqli,"UPDATE quotes SET quote_status = 'Declined' WHERE quote_id = $quote_id"); mysqli_query($mysqli,"UPDATE quotes SET quote_status = 'Declined' WHERE quote_id = $quote_id");
@ -44,12 +44,11 @@ if(isset($_GET['decline_quote'], $_GET['company_id'], $_GET['url_key'])){
$_SESSION['alert_type'] = "danger"; $_SESSION['alert_type'] = "danger";
$_SESSION['alert_message'] = "Quote Declined"; $_SESSION['alert_message'] = "Quote Declined";
header("Location: " . $_SERVER["HTTP_REFERER"]); header("Location: " . $_SERVER["HTTP_REFERER"]);
}else{ }else{
echo "GTFO!!"; echo "GTFO!!";
} }
} }
?>

64
guest_view_invoice.php
View File

@ -2,7 +2,7 @@
<?php <?php
if(isset($_GET['invoice_id'], $_GET['url_key'])){ if (isset($_GET['invoice_id'], $_GET['url_key'])) {
$url_key = mysqli_real_escape_string($mysqli,$_GET['url_key']); $url_key = mysqli_real_escape_string($mysqli,$_GET['url_key']);
$invoice_id = intval($_GET['invoice_id']); $invoice_id = intval($_GET['invoice_id']);
@ -17,7 +17,7 @@ if(isset($_GET['invoice_id'], $_GET['url_key'])){
AND invoice_url_key = '$url_key'" AND invoice_url_key = '$url_key'"
); );
if(mysqli_num_rows($sql) == 1){ if (mysqli_num_rows($sql) == 1) {
$row = mysqli_fetch_array($sql); $row = mysqli_fetch_array($sql);
$invoice_id = $row['invoice_id']; $invoice_id = $row['invoice_id'];
@ -43,7 +43,7 @@ if(isset($_GET['invoice_id'], $_GET['url_key'])){
$client_website = htmlentities($row['client_website']); $client_website = htmlentities($row['client_website']);
$client_currency_code = htmlentities($row['client_currency_code']); $client_currency_code = htmlentities($row['client_currency_code']);
$client_net_terms = htmlentities($row['client_net_terms']); $client_net_terms = htmlentities($row['client_net_terms']);
if($client_net_terms == 0){ if ($client_net_terms == 0) {
$client_net_terms = $config_default_net_terms; $client_net_terms = $config_default_net_terms;
} }
$company_id = $row['company_id']; $company_id = $row['company_id'];
@ -55,7 +55,7 @@ if(isset($_GET['invoice_id'], $_GET['url_key'])){
$company_phone = formatPhoneNumber($row['company_phone']); $company_phone = formatPhoneNumber($row['company_phone']);
$company_email = htmlentities($row['company_email']); $company_email = htmlentities($row['company_email']);
$company_logo = htmlentities($row['company_logo']); $company_logo = htmlentities($row['company_logo']);
if(!empty($company_logo)){ if (!empty($company_logo)) {
$company_logo_base64 = base64_encode(file_get_contents("uploads/settings/$company_id/$company_logo")); $company_logo_base64 = base64_encode(file_get_contents("uploads/settings/$company_id/$company_logo"));
} }
$company_locale = htmlentities($row['company_locale']); $company_locale = htmlentities($row['company_locale']);
@ -74,22 +74,22 @@ if(isset($_GET['invoice_id'], $_GET['url_key'])){
$browser = strip_tags(mysqli_real_escape_string($mysqli,get_web_browser($session_user_agent))); $browser = strip_tags(mysqli_real_escape_string($mysqli,get_web_browser($session_user_agent)));
//Set Badge color based off of invoice status //Set Badge color based off of invoice status
if($invoice_status == "Sent"){ if ($invoice_status == "Sent") {
$invoice_badge_color = "warning text-white"; $invoice_badge_color = "warning text-white";
}elseif($invoice_status == "Viewed"){ }elseif ($invoice_status == "Viewed") {
$invoice_badge_color = "info"; $invoice_badge_color = "info";
}elseif($invoice_status == "Partial"){ }elseif ($invoice_status == "Partial") {
$invoice_badge_color = "primary"; $invoice_badge_color = "primary";
}elseif($invoice_status == "Paid"){ }elseif ($invoice_status == "Paid") {
$invoice_badge_color = "success"; $invoice_badge_color = "success";
}elseif($invoice_status == "Cancelled"){ }elseif ($invoice_status == "Cancelled") {
$invoice_badge_color = "danger"; $invoice_badge_color = "danger";
}else{ }else{
$invoice_badge_color = "secondary"; $invoice_badge_color = "secondary";
} }
//Update status to Viewed only if invoice_status = "Sent" //Update status to Viewed only if invoice_status = "Sent"
if($invoice_status == 'Sent'){ if ($invoice_status == 'Sent') {
mysqli_query($mysqli,"UPDATE invoices SET invoice_status = 'Viewed' WHERE invoice_id = $invoice_id"); mysqli_query($mysqli,"UPDATE invoices SET invoice_status = 'Viewed' WHERE invoice_id = $invoice_id");
} }
@ -110,9 +110,9 @@ if(isset($_GET['invoice_id'], $_GET['url_key'])){
$balance = $invoice_amount - $amount_paid; $balance = $invoice_amount - $amount_paid;
//check to see if overdue //check to see if overdue
if($invoice_status !== "Paid" && $invoice_status !== "Draft" && $invoice_status !== "Cancelled"){ if ($invoice_status !== "Paid" && $invoice_status !== "Draft" && $invoice_status !== "Cancelled") {
$unixtime_invoice_due = strtotime($invoice_due) + 86400; $unixtime_invoice_due = strtotime($invoice_due) + 86400;
if($unixtime_invoice_due < time()){ if ($unixtime_invoice_due < time()) {
$invoice_color = "text-danger"; $invoice_color = "text-danger";
} }
} }
@ -126,10 +126,10 @@ if(isset($_GET['invoice_id'], $_GET['url_key'])){
<a class="btn btn-primary" href="#" onclick="window.print();"><i class="fa fa-fw fa-print"></i> Print</a> <a class="btn btn-primary" href="#" onclick="window.print();"><i class="fa fa-fw fa-print"></i> Print</a>
<a class="btn btn-primary" href="#" onclick="pdfMake.createPdf(docDefinition).download('<?php echo "$invoice_date-$company_name-Invoice-$invoice_prefix$invoice_number.pdf"; ?>');"><i class="fa fa-fw fa-download"></i> Download</a> <a class="btn btn-primary" href="#" onclick="pdfMake.createPdf(docDefinition).download('<?php echo "$invoice_date-$company_name-Invoice-$invoice_prefix$invoice_number.pdf"; ?>');"><i class="fa fa-fw fa-download"></i> Download</a>
<?php <?php
if($invoice_status != "Paid" && $invoice_status != "Cancelled" && $invoice_status != "Draft" && $config_stripe_enable == 1){ if ($invoice_status != "Paid" && $invoice_status != "Cancelled" && $invoice_status != "Draft" && $config_stripe_enable == 1) {
?> ?>
<?php <?php
if($config_stripe_enable == 1){ if ($config_stripe_enable == 1) {
?> ?>
<a class="btn btn-success" href="guest_pay.php?invoice_id=<?php echo $invoice_id; ?>"><i class="fa fa-fw fa-credit-card"></i> Pay Online <small>(Coming Soon)</small></a> <a class="btn btn-success" href="guest_pay.php?invoice_id=<?php echo $invoice_id; ?>"><i class="fa fa-fw fa-credit-card"></i> Pay Online <small>(Coming Soon)</small></a>
<?php } ?> <?php } ?>
@ -142,7 +142,7 @@ if(isset($_GET['invoice_id'], $_GET['url_key'])){
<img class="img-fluid" src="<?php echo "uploads/settings/$company_id/$company_logo"; ?>"> <img class="img-fluid" src="<?php echo "uploads/settings/$company_id/$company_logo"; ?>">
</div> </div>
<div class="col-sm-10"> <div class="col-sm-10">
<?php if($invoice_status == "Paid"){ ?> <?php if ($invoice_status == "Paid") { ?>
<div class="ribbon-wrapper"> <div class="ribbon-wrapper">
<div class="ribbon bg-success"> <div class="ribbon bg-success">
<?php echo $invoice_status; ?> <?php echo $invoice_status; ?>
@ -216,7 +216,7 @@ if(isset($_GET['invoice_id'], $_GET['url_key'])){
$total_tax = 0; $total_tax = 0;
$sub_total = 0; $sub_total = 0;
while($row = mysqli_fetch_array($sql_invoice_items)){ while ($row = mysqli_fetch_array($sql_invoice_items)) {
$item_id = $row['item_id']; $item_id = $row['item_id'];
$item_name = htmlentities($row['item_name']); $item_name = htmlentities($row['item_name']);
$item_description = htmlentities($row['item_description']); $item_description = htmlentities($row['item_description']);
@ -253,7 +253,7 @@ if(isset($_GET['invoice_id'], $_GET['url_key'])){
<div class="row mb-4"> <div class="row mb-4">
<div class="col-sm-7"> <div class="col-sm-7">
<?php if(!empty($invoice_note)){ ?> <?php if (!empty($invoice_note)) { ?>
<div class="card"> <div class="card">
<div class="card-body"> <div class="card-body">
<div style="white-space:pre-line"><?php echo $invoice_note; ?></div> <div style="white-space:pre-line"><?php echo $invoice_note; ?></div>
@ -268,13 +268,13 @@ if(isset($_GET['invoice_id'], $_GET['url_key'])){
<td>Subtotal</td> <td>Subtotal</td>
<td class="text-right"><?php echo numfmt_format_currency($currency_format, $sub_total, $invoice_currency_code); ?></td> <td class="text-right"><?php echo numfmt_format_currency($currency_format, $sub_total, $invoice_currency_code); ?></td>
</tr> </tr>
<?php if($total_tax > 0){ ?> <?php if ($total_tax > 0) { ?>
<tr class="border-bottom"> <tr class="border-bottom">
<td>Tax</td> <td>Tax</td>
<td class="text-right"><?php echo numfmt_format_currency($currency_format, $total_tax, $invoice_currency_code); ?></td> <td class="text-right"><?php echo numfmt_format_currency($currency_format, $total_tax, $invoice_currency_code); ?></td>
</tr> </tr>
<?php } ?> <?php } ?>
<?php if($amount_paid > 0){ ?> <?php if ($amount_paid > 0) { ?>
<tr class="border-bottom"> <tr class="border-bottom">
<td><div class="text-success">Paid</div></td> <td><div class="text-success">Paid</div></td>
<td class="text-right text-success"><?php echo numfmt_format_currency($currency_format, $amount_paid, $invoice_currency_code); ?></td> <td class="text-right text-success"><?php echo numfmt_format_currency($currency_format, $amount_paid, $invoice_currency_code); ?></td>
@ -311,7 +311,7 @@ var docDefinition = {
// Header // Header
{ {
columns: [ columns: [
<?php if(!empty($company_logo_base64)){ ?> <?php if (!empty($company_logo_base64)) { ?>
{ {
image: <?php echo json_encode("data:image;base64,$company_logo_base64") ?>, image: <?php echo json_encode("data:image;base64,$company_logo_base64") ?>,
width: 120 width: 120
@ -443,7 +443,7 @@ var docDefinition = {
$sql_invoice_items = mysqli_query($mysqli,"SELECT * FROM invoice_items WHERE item_invoice_id = $invoice_id ORDER BY item_id ASC"); $sql_invoice_items = mysqli_query($mysqli,"SELECT * FROM invoice_items WHERE item_invoice_id = $invoice_id ORDER BY item_id ASC");
while($row = mysqli_fetch_array($sql_invoice_items)){ while ($row = mysqli_fetch_array($sql_invoice_items)) {
$item_name = $row['item_name']; $item_name = $row['item_name'];
$item_description = $row['item_description']; $item_description = $row['item_description'];
$item_quantity = $row['item_quantity']; $item_quantity = $row['item_quantity'];
@ -721,7 +721,7 @@ var docDefinition = {
$sql = mysqli_query($mysqli,"SELECT * FROM invoices WHERE invoice_client_id = $client_id AND invoice_due < CURDATE() AND(invoice_status = 'Sent' OR invoice_status = 'Viewed' OR invoice_status = 'Partial') ORDER BY invoice_date DESC"); $sql = mysqli_query($mysqli,"SELECT * FROM invoices WHERE invoice_client_id = $client_id AND invoice_due < CURDATE() AND(invoice_status = 'Sent' OR invoice_status = 'Viewed' OR invoice_status = 'Partial') ORDER BY invoice_date DESC");
if(mysqli_num_rows($sql) > 1){ if (mysqli_num_rows($sql) > 1) {
?> ?>
@ -743,7 +743,7 @@ var docDefinition = {
<tbody> <tbody>
<?php <?php
while($row = mysqli_fetch_array($sql)){ while ($row = mysqli_fetch_array($sql)) {
$invoice_id = $row['invoice_id']; $invoice_id = $row['invoice_id'];
$invoice_prefix = htmlentities($row['invoice_prefix']); $invoice_prefix = htmlentities($row['invoice_prefix']);
$invoice_number = htmlentities($row['invoice_number']); $invoice_number = htmlentities($row['invoice_number']);
@ -758,7 +758,7 @@ var docDefinition = {
?> ?>
<tr <?php if($_GET['invoice_id'] == $invoice_id){ echo "class='table-active'"; } ?>> <tr <?php if ($_GET['invoice_id'] == $invoice_id) { echo "class='table-active'"; } ?>>
<th class="text-center"><a href="guest_view_invoice.php?invoice_id=<?php echo $invoice_id; ?>&url_key=<?php echo $invoice_url_key; ?>"><?php echo "$invoice_prefix$invoice_number"; ?></a></th> <th class="text-center"><a href="guest_view_invoice.php?invoice_id=<?php echo $invoice_id; ?>&url_key=<?php echo $invoice_url_key; ?>"><?php echo "$invoice_prefix$invoice_number"; ?></a></th>
<td><?php echo $invoice_date; ?></td> <td><?php echo $invoice_date; ?></td>
<td class="text-danger text-bold"><?php echo $invoice_due; ?> (<?php echo $days; ?> Days Late)</td> <td class="text-danger text-bold"><?php echo $invoice_due; ?> (<?php echo $days; ?> Days Late)</td>
@ -781,7 +781,7 @@ var docDefinition = {
$sql = mysqli_query($mysqli,"SELECT * FROM invoices WHERE invoice_client_id = $client_id AND invoice_due > CURDATE() AND(invoice_status = 'Sent' OR invoice_status = 'Viewed' OR invoice_status = 'Partial') ORDER BY invoice_number DESC"); $sql = mysqli_query($mysqli,"SELECT * FROM invoices WHERE invoice_client_id = $client_id AND invoice_due > CURDATE() AND(invoice_status = 'Sent' OR invoice_status = 'Viewed' OR invoice_status = 'Partial') ORDER BY invoice_number DESC");
if(mysqli_num_rows($sql) > 1){ if (mysqli_num_rows($sql) > 1) {
?> ?>
@ -803,7 +803,7 @@ var docDefinition = {
<tbody> <tbody>
<?php <?php
while($row = mysqli_fetch_array($sql)){ while ($row = mysqli_fetch_array($sql)) {
$invoice_id = $row['invoice_id']; $invoice_id = $row['invoice_id'];
$invoice_prefix = htmlentities($row['invoice_prefix']); $invoice_prefix = htmlentities($row['invoice_prefix']);
$invoice_number = htmlentities($row['invoice_number']); $invoice_number = htmlentities($row['invoice_number']);
@ -818,7 +818,7 @@ var docDefinition = {
?> ?>
<tr <?php if($_GET['invoice_id'] == $invoice_id){ echo "class='table-active'"; } ?>> <tr <?php if ($_GET['invoice_id'] == $invoice_id) { echo "class='table-active'"; } ?>>
<th class="text-center"><a href="guest_view_invoice.php?invoice_id=<?php echo $invoice_id; ?>&url_key=<?php echo $invoice_url_key; ?>"><?php echo "$invoice_prefix$invoice_number"; ?></a></th> <th class="text-center"><a href="guest_view_invoice.php?invoice_id=<?php echo $invoice_id; ?>&url_key=<?php echo $invoice_url_key; ?>"><?php echo "$invoice_prefix$invoice_number"; ?></a></th>
<td><?php echo $invoice_date; ?></td> <td><?php echo $invoice_date; ?></td>
<td><?php echo $invoice_due; ?> (Due in <?php echo $days; ?> Days)</td> <td><?php echo $invoice_due; ?> (Due in <?php echo $days; ?> Days)</td>
@ -842,7 +842,7 @@ var docDefinition = {
$sql = mysqli_query($mysqli,"SELECT * FROM invoices WHERE invoice_client_id = $client_id AND invoice_status = 'Paid' ORDER BY invoice_date DESC"); $sql = mysqli_query($mysqli,"SELECT * FROM invoices WHERE invoice_client_id = $client_id AND invoice_status = 'Paid' ORDER BY invoice_date DESC");
if(mysqli_num_rows($sql) > 1){ if (mysqli_num_rows($sql) > 1) {
?> ?>
@ -864,7 +864,7 @@ var docDefinition = {
<tbody> <tbody>
<?php <?php
while($row = mysqli_fetch_array($sql)){ while ($row = mysqli_fetch_array($sql)) {
$invoice_id = $row['invoice_id']; $invoice_id = $row['invoice_id'];
$invoice_prefix = htmlentities($row['invoice_prefix']); $invoice_prefix = htmlentities($row['invoice_prefix']);
$invoice_number = htmlentities($row['invoice_number']); $invoice_number = htmlentities($row['invoice_number']);
@ -877,7 +877,7 @@ var docDefinition = {
?> ?>
<tr <?php if($_GET['invoice_id'] == $invoice_id){ echo "class='table-active'"; } ?>> <tr <?php if ($_GET['invoice_id'] == $invoice_id) { echo "class='table-active'"; } ?>>
<th class="text-center"><a href="guest_view_invoice.php?invoice_id=<?php echo $invoice_id; ?>&url_key=<?php echo $invoice_url_key; ?>"><?php echo "$invoice_prefix$invoice_number"; ?></a></th> <th class="text-center"><a href="guest_view_invoice.php?invoice_id=<?php echo $invoice_id; ?>&url_key=<?php echo $invoice_url_key; ?>"><?php echo "$invoice_prefix$invoice_number"; ?></a></th>
<td><?php echo $invoice_date; ?></td> <td><?php echo $invoice_date; ?></td>
<td><?php echo $invoice_due; ?></td> <td><?php echo $invoice_due; ?></td>
@ -892,14 +892,14 @@ var docDefinition = {
$sql_payments = mysqli_query($mysqli,"SELECT * FROM payments WHERE payment_invoice_id = $invoice_id ORDER BY payment_date DESC"); $sql_payments = mysqli_query($mysqli,"SELECT * FROM payments WHERE payment_invoice_id = $invoice_id ORDER BY payment_date DESC");
while($row = mysqli_fetch_array($sql_payments)){ while ($row = mysqli_fetch_array($sql_payments)) {
$payment_id = $row['payment_id']; $payment_id = $row['payment_id'];
$payment_date = $row['payment_date']; $payment_date = $row['payment_date'];
$payment_amount = floatval($row['payment_amount']); $payment_amount = floatval($row['payment_amount']);
$payment_currency_code = htmlentities($row['payment_currency_code']); $payment_currency_code = htmlentities($row['payment_currency_code']);
$payment_method = htmlentities($row['payment_method']); $payment_method = htmlentities($row['payment_method']);
$payment_reference = htmlentities($row['payment_reference']); $payment_reference = htmlentities($row['payment_reference']);
if(strtotime($payment_date) > strtotime($invoice_due)){ if (strtotime($payment_date) > strtotime($invoice_due)) {
$payment_note = "Late"; $payment_note = "Late";
$difference = strtotime($payment_date) - strtotime($invoice_due); $difference = strtotime($payment_date) - strtotime($invoice_due);
$days = floor($difference / (60*60*24) ) . " Days"; $days = floor($difference / (60*60*24) ) . " Days";

24
guest_view_item.php
View File

@ -11,7 +11,7 @@ include("guest_header.php"); ?>
<hr> <hr>
<?php <?php
if(!isset($_GET['id']) || !isset($_GET['key'])){ if (!isset($_GET['id']) || !isset($_GET['key'])) {
echo "<div class=\"alert alert-danger\" role=\"alert\">Incorrect URL.</div>"; echo "<div class=\"alert alert-danger\" role=\"alert\">Incorrect URL.</div>";
include("guest_footer.php"); include("guest_footer.php");
exit(); exit();
@ -24,14 +24,14 @@ $sql = mysqli_query($mysqli, "SELECT * FROM shared_items WHERE item_id = '$item_
$row = mysqli_fetch_array($sql); $row = mysqli_fetch_array($sql);
// Check we got a result // Check we got a result
if(mysqli_num_rows($sql) !== 1 || !$row){ if (mysqli_num_rows($sql) !== 1 || !$row) {
echo "<div class=\"alert alert-danger\" role=\"alert\">No item to view. Check with the person that sent you this link to ensure it is correct and has not expired.</div>"; echo "<div class=\"alert alert-danger\" role=\"alert\">No item to view. Check with the person that sent you this link to ensure it is correct and has not expired.</div>";
include("guest_footer.php"); include("guest_footer.php");
exit(); exit();
} }
// Check item share is active & hasn't been viewed too many times // Check item share is active & hasn't been viewed too many times
if($row['item_active'] !== "1" || $row['item_views'] >= $row['item_view_limit']){ if ($row['item_active'] !== "1" || $row['item_views'] >= $row['item_view_limit']) {
echo "<div class=\"alert alert-danger\" role=\"alert\">Item cannot be viewed at this time. Check with the person that sent you this link to ensure it is correct and has not expired.</div>"; echo "<div class=\"alert alert-danger\" role=\"alert\">Item cannot be viewed at this time. Check with the person that sent you this link to ensure it is correct and has not expired.</div>";
include("guest_footer.php"); include("guest_footer.php");
exit(); exit();
@ -50,11 +50,11 @@ $item_created = $row['item_created_at'];
$item_expire = $row['item_expire_at']; $item_expire = $row['item_expire_at'];
$client_id = $row['item_client_id']; $client_id = $row['item_client_id'];
if($item_type == "Document"){ if ($item_type == "Document") {
$doc_sql = mysqli_query($mysqli, "SELECT * FROM documents WHERE document_id = '$item_related_id' AND document_client_id = '$client_id' LIMIT 1"); $doc_sql = mysqli_query($mysqli, "SELECT * FROM documents WHERE document_id = '$item_related_id' AND document_client_id = '$client_id' LIMIT 1");
$doc_row = mysqli_fetch_array($doc_sql); $doc_row = mysqli_fetch_array($doc_sql);
if(mysqli_num_rows($doc_sql) !== 1 || !$doc_row){ if (mysqli_num_rows($doc_sql) !== 1 || !$doc_row) {
echo "<div class=\"alert alert-danger\" role=\"alert\">Error retrieving document to view.</div>"; echo "<div class=\"alert alert-danger\" role=\"alert\">Error retrieving document to view.</div>";
include("guest_footer.php"); include("guest_footer.php");
exit(); exit();
@ -64,7 +64,7 @@ if($item_type == "Document"){
$doc_content = $doc_row['document_content']; $doc_content = $doc_row['document_content'];
echo "<h3>A document has been shared with you</h3>"; echo "<h3>A document has been shared with you</h3>";
if(!empty($item_note)){ if (!empty($item_note)) {
echo "<p class=\"lead\">Note: <i>$item_note</i></p>"; echo "<p class=\"lead\">Note: <i>$item_note</i></p>";
} }
echo "<br>"; echo "<br>";
@ -79,11 +79,11 @@ if($item_type == "Document"){
$name = mysqli_real_escape_string($mysqli, $doc_title); $name = mysqli_real_escape_string($mysqli, $doc_title);
mysqli_query($mysqli,"INSERT INTO logs SET log_type = 'Sharing', log_action = 'View', log_description = 'Viewed shared $item_type $name via link', log_client_id = '$client_id', log_created_at = NOW(), log_ip = '$ip', log_user_agent = '$user_agent', company_id = '1'"); mysqli_query($mysqli,"INSERT INTO logs SET log_type = 'Sharing', log_action = 'View', log_description = 'Viewed shared $item_type $name via link', log_client_id = '$client_id', log_created_at = NOW(), log_ip = '$ip', log_user_agent = '$user_agent', company_id = '1'");
}elseif($item_type == "File"){ }elseif ($item_type == "File") {
$file_sql = mysqli_query($mysqli, "SELECT * FROM files WHERE file_id = '$item_related_id' AND file_client_id = '$client_id' LIMIT 1"); $file_sql = mysqli_query($mysqli, "SELECT * FROM files WHERE file_id = '$item_related_id' AND file_client_id = '$client_id' LIMIT 1");
$file_row = mysqli_fetch_array($file_sql); $file_row = mysqli_fetch_array($file_sql);
if(mysqli_num_rows($file_sql) !== 1 || !$file_row){ if (mysqli_num_rows($file_sql) !== 1 || !$file_row) {
echo "<div class=\"alert alert-danger\" role=\"alert\">Error retrieving file.</div>"; echo "<div class=\"alert alert-danger\" role=\"alert\">Error retrieving file.</div>";
include("guest_footer.php"); include("guest_footer.php");
exit(); exit();
@ -92,18 +92,18 @@ if($item_type == "Document"){
$file_name = htmlentities($file_row['file_name']); $file_name = htmlentities($file_row['file_name']);
echo "<h3>A file has been shared with you</h3>"; echo "<h3>A file has been shared with you</h3>";
if(!empty($item_note)){ if (!empty($item_note)) {
echo "<p class=\"lead\">Note: <i>$item_note</i></p>"; echo "<p class=\"lead\">Note: <i>$item_note</i></p>";
} }
echo "<a href=\"guest_download_file.php?id=$item_id&key=$item_key\" download=\"$file_name;\">Download $file_name</a>"; echo "<a href=\"guest_download_file.php?id=$item_id&key=$item_key\" download=\"$file_name;\">Download $file_name</a>";
}elseif($item_type == "Login"){ }elseif ($item_type == "Login") {
$encryption_key = $_GET['ek']; $encryption_key = $_GET['ek'];
$login_sql = mysqli_query($mysqli, "SELECT * FROM logins WHERE login_id = '$item_related_id' AND login_client_id = '$client_id' LIMIT 1"); $login_sql = mysqli_query($mysqli, "SELECT * FROM logins WHERE login_id = '$item_related_id' AND login_client_id = '$client_id' LIMIT 1");
$login_row = mysqli_fetch_array($login_sql); $login_row = mysqli_fetch_array($login_sql);
if(mysqli_num_rows($login_sql) !== 1 || !$login_row){ if (mysqli_num_rows($login_sql) !== 1 || !$login_row) {
echo "<div class=\"alert alert-danger\" role=\"alert\">Error retrieving login.</div>"; echo "<div class=\"alert alert-danger\" role=\"alert\">Error retrieving login.</div>";
include("guest_footer.php"); include("guest_footer.php");
exit(); exit();
@ -119,7 +119,7 @@ if($item_type == "Document"){
$login_notes = htmlentities($login_row['login_note']); $login_notes = htmlentities($login_row['login_note']);
echo "<h3>A login entry has been shared with you</h3>"; echo "<h3>A login entry has been shared with you</h3>";
if(!empty($item_note)){ if (!empty($item_note)) {
echo "<p class=\"lead\">Note: <i>$item_note</i></p>"; echo "<p class=\"lead\">Note: <i>$item_note</i></p>";
} }
echo "<br>"; echo "<br>";

24
guest_view_quote.php
View File

@ -2,7 +2,7 @@
include("guest_header.php"); include("guest_header.php");
if(isset($_GET['quote_id'], $_GET['url_key'])){ if (isset($_GET['quote_id'], $_GET['url_key'])) {
$url_key = mysqli_real_escape_string($mysqli,$_GET['url_key']); $url_key = mysqli_real_escape_string($mysqli,$_GET['url_key']);
$quote_id = intval($_GET['quote_id']); $quote_id = intval($_GET['quote_id']);
@ -17,7 +17,7 @@ if(isset($_GET['quote_id'], $_GET['url_key'])){
AND quote_url_key = '$url_key'" AND quote_url_key = '$url_key'"
); );
if(mysqli_num_rows($sql) == 1){ if (mysqli_num_rows($sql) == 1) {
$row = mysqli_fetch_array($sql); $row = mysqli_fetch_array($sql);
@ -43,7 +43,7 @@ if(isset($_GET['quote_id'], $_GET['url_key'])){
$client_website = htmlentities($row['client_website']); $client_website = htmlentities($row['client_website']);
$client_currency_code = htmlentities($row['client_currency_code']); $client_currency_code = htmlentities($row['client_currency_code']);
$client_net_terms = htmlentities($row['client_net_terms']); $client_net_terms = htmlentities($row['client_net_terms']);
if($client_net_terms == 0){ if ($client_net_terms == 0) {
$client_net_terms = $config_default_net_terms; $client_net_terms = $config_default_net_terms;
} }
$company_id = $row['company_id']; $company_id = $row['company_id'];
@ -55,7 +55,7 @@ if(isset($_GET['quote_id'], $_GET['url_key'])){
$company_phone = formatPhoneNumber($row['company_phone']); $company_phone = formatPhoneNumber($row['company_phone']);
$company_email = htmlentities($row['company_email']); $company_email = htmlentities($row['company_email']);
$company_logo = htmlentities($row['company_logo']); $company_logo = htmlentities($row['company_logo']);
if(!empty($company_logo)){ if (!empty($company_logo)) {
$company_logo_base64 = base64_encode(file_get_contents("uploads/settings/$company_id/$company_logo")); $company_logo_base64 = base64_encode(file_get_contents("uploads/settings/$company_id/$company_logo"));
} }
$company_locale = htmlentities($row['company_locale']); $company_locale = htmlentities($row['company_locale']);
@ -71,7 +71,7 @@ if(isset($_GET['quote_id'], $_GET['url_key'])){
$browser = strip_tags(mysqli_real_escape_string($mysqli,get_web_browser($session_user_agent))); $browser = strip_tags(mysqli_real_escape_string($mysqli,get_web_browser($session_user_agent)));
//Update status to Viewed only if invoice_status = "Sent" //Update status to Viewed only if invoice_status = "Sent"
if($quote_status == 'Sent'){ if ($quote_status == 'Sent') {
mysqli_query($mysqli,"UPDATE quotes SET quote_status = 'Viewed' WHERE quote_id = $quote_id"); mysqli_query($mysqli,"UPDATE quotes SET quote_status = 'Viewed' WHERE quote_id = $quote_id");
} }
@ -89,7 +89,7 @@ if(isset($_GET['quote_id'], $_GET['url_key'])){
<div class="card-header d-print-none"> <div class="card-header d-print-none">
<div class="float-left"> <div class="float-left">
<?php <?php
if($quote_status == "Draft" || $quote_status == "Sent" || $quote_status == "Viewed"){ if ($quote_status == "Draft" || $quote_status == "Sent" || $quote_status == "Viewed") {
?> ?>
<a class="btn btn-success" href="guest_post.php?accept_quote=<?php echo $quote_id; ?>&company_id=<?php echo $company_id; ?>&url_key=<?php echo $url_key; ?>"><i class="fa fa-fw fa-check"></i> Accept</a> <a class="btn btn-success" href="guest_post.php?accept_quote=<?php echo $quote_id; ?>&company_id=<?php echo $company_id; ?>&url_key=<?php echo $url_key; ?>"><i class="fa fa-fw fa-check"></i> Accept</a>
<a class="btn btn-danger" href="guest_post.php?decline_quote=<?php echo $quote_id; ?>&company_id=<?php echo $company_id; ?>&url_key=<?php echo $url_key; ?>"><i class="fa fa-fw fa-times"></i> Decline</a> <a class="btn btn-danger" href="guest_post.php?decline_quote=<?php echo $quote_id; ?>&company_id=<?php echo $company_id; ?>&url_key=<?php echo $url_key; ?>"><i class="fa fa-fw fa-times"></i> Decline</a>
@ -171,7 +171,7 @@ if(isset($_GET['quote_id'], $_GET['url_key'])){
<tbody> <tbody>
<?php <?php
while($row = mysqli_fetch_array($sql_items)){ while ($row = mysqli_fetch_array($sql_items)) {
$item_id = $row['item_id']; $item_id = $row['item_id'];
$item_name = htmlentities($row['item_name']); $item_name = htmlentities($row['item_name']);
$item_description = htmlentities($row['item_description']); $item_description = htmlentities($row['item_description']);
@ -208,7 +208,7 @@ if(isset($_GET['quote_id'], $_GET['url_key'])){
<div class="row mb-4"> <div class="row mb-4">
<div class="col-sm-7"> <div class="col-sm-7">
<?php if(!empty($quote_note)){ ?> <?php if (!empty($quote_note)) { ?>
<div class="card"> <div class="card">
<div class="card-body"> <div class="card-body">
<div style="white-space:pre-line"><?php echo $quote_note; ?></div> <div style="white-space:pre-line"><?php echo $quote_note; ?></div>
@ -224,13 +224,13 @@ if(isset($_GET['quote_id'], $_GET['url_key'])){
<td>Subtotal</td> <td>Subtotal</td>
<td class="text-right"><?php echo numfmt_format_currency($currency_format, $sub_total, $quote_currency_code); ?></td> <td class="text-right"><?php echo numfmt_format_currency($currency_format, $sub_total, $quote_currency_code); ?></td>
</tr> </tr>
<?php if($discount > 0){ ?> <?php if ($discount > 0) { ?>
<tr class="border-bottom"> <tr class="border-bottom">
<td>Discount</td> <td>Discount</td>
<td class="text-right"><?php echo numfmt_format_currency($currency_format, $quote_discount, $quote_currency_code); ?></td> <td class="text-right"><?php echo numfmt_format_currency($currency_format, $quote_discount, $quote_currency_code); ?></td>
</tr> </tr>
<?php } ?> <?php } ?>
<?php if($total_tax > 0){ ?> <?php if ($total_tax > 0) { ?>
<tr class="border-bottom"> <tr class="border-bottom">
<td>Tax</td> <td>Tax</td>
<td class="text-right"><?php echo numfmt_format_currency($currency_format, $total_tax, $quote_currency_code); ?></td> <td class="text-right"><?php echo numfmt_format_currency($currency_format, $total_tax, $quote_currency_code); ?></td>
@ -267,7 +267,7 @@ var docDefinition = {
// Header // Header
{ {
columns: [ columns: [
<?php if(!empty($company_logo_base64)){ ?> <?php if (!empty($company_logo_base64)) { ?>
{ {
image: <?php echo json_encode("data:image;base64,$company_logo_base64") ?>, image: <?php echo json_encode("data:image;base64,$company_logo_base64") ?>,
width: 120 width: 120
@ -388,7 +388,7 @@ var docDefinition = {
$sql_invoice_items = mysqli_query($mysqli,"SELECT * FROM invoice_items WHERE item_quote_id = $quote_id ORDER BY item_id ASC"); $sql_invoice_items = mysqli_query($mysqli,"SELECT * FROM invoice_items WHERE item_quote_id = $quote_id ORDER BY item_id ASC");
while($row = mysqli_fetch_array($sql_invoice_items)){ while ($row = mysqli_fetch_array($sql_invoice_items)) {
$item_name = $row['item_name']; $item_name = $row['item_name'];
$item_description = $row['item_description']; $item_description = $row['item_description'];
$item_quantity = $row['item_quantity']; $item_quantity = $row['item_quantity'];

6
inc_alert_feedback.php
View File

@ -1,8 +1,8 @@
<?php <?php
//Alert Feedback //Alert Feedback
if(!empty($_SESSION['alert_message'])){ if (!empty($_SESSION['alert_message'])) {
if (!isset($_SESSION['alert_type'])){ if (!isset($_SESSION['alert_type'])) {
$_SESSION['alert_type'] = "success"; $_SESSION['alert_type'] = "success";
} }
?> ?>
@ -17,7 +17,7 @@ if(!empty($_SESSION['alert_message'])){
} }
//Set Records Per Page //Set Records Per Page
if(empty($_SESSION['records_per_page'])){ if (empty($_SESSION['records_per_page'])) {
$_SESSION['records_per_page'] = 10; $_SESSION['records_per_page'] = 10;
} }

3
inc_all.php
View File

@ -1,4 +1,4 @@
<?php <?php
include("config.php"); include("config.php");
include_once("functions.php"); include_once("functions.php");
@ -10,4 +10,3 @@ include("inc_wrapper.php");
include("inc_alert_feedback.php"); include("inc_alert_feedback.php");
include("pagination_head.php"); include("pagination_head.php");
?>

10
inc_all_client.php
View File

@ -10,7 +10,7 @@ include("top_nav.php");
<?php <?php
if(isset($_GET['client_id'])){ if (isset($_GET['client_id'])) {
$client_id = intval($_GET['client_id']); $client_id = intval($_GET['client_id']);
$sql = mysqli_query($mysqli,"UPDATE clients SET client_accessed_at = NOW() WHERE client_id = $client_id AND company_id = $session_company_id"); $sql = mysqli_query($mysqli,"UPDATE clients SET client_accessed_at = NOW() WHERE client_id = $client_id AND company_id = $session_company_id");
@ -21,7 +21,7 @@ if(isset($_GET['client_id'])){
WHERE client_id = $client_id WHERE client_id = $client_id
AND clients.company_id = $session_company_id"); AND clients.company_id = $session_company_id");
if(mysqli_num_rows($sql) == 0){ if (mysqli_num_rows($sql) == 0) {
include("header.php"); include("header.php");
echo "<center><h1 class='text-secondary mt-5'>Nothing to see here</h1></center>"; echo "<center><h1 class='text-secondary mt-5'>Nothing to see here</h1></center>";
}else{ }else{
@ -33,7 +33,7 @@ if(isset($_GET['client_id'])){
$client_referral = htmlentities($row['client_referral']); $client_referral = htmlentities($row['client_referral']);
$client_currency_code = htmlentities($row['client_currency_code']); $client_currency_code = htmlentities($row['client_currency_code']);
$client_net_terms = $row['client_net_terms']; $client_net_terms = $row['client_net_terms'];
if($client_net_terms == 0){ if ($client_net_terms == 0) {
$client_net_terms = $config_default_net_terms; $client_net_terms = $config_default_net_terms;
} }
$client_notes = htmlentities($row['client_notes']); $client_notes = htmlentities($row['client_notes']);
@ -61,13 +61,13 @@ if(isset($_GET['client_id'])){
$client_tag_name_display_array = array(); $client_tag_name_display_array = array();
$client_tag_id_array = array(); $client_tag_id_array = array();
$sql_client_tags = mysqli_query($mysqli,"SELECT * FROM client_tags LEFT JOIN tags ON client_tags.tag_id = tags.tag_id WHERE client_tags.client_id = $client_id"); $sql_client_tags = mysqli_query($mysqli,"SELECT * FROM client_tags LEFT JOIN tags ON client_tags.tag_id = tags.tag_id WHERE client_tags.client_id = $client_id");
while($row = mysqli_fetch_array($sql_client_tags)){ while ($row = mysqli_fetch_array($sql_client_tags)) {
$client_tag_id = $row['tag_id']; $client_tag_id = $row['tag_id'];
$client_tag_name = htmlentities($row['tag_name']); $client_tag_name = htmlentities($row['tag_name']);
$client_tag_color = htmlentities($row['tag_color']); $client_tag_color = htmlentities($row['tag_color']);
$client_tag_icon = htmlentities($row['tag_icon']); $client_tag_icon = htmlentities($row['tag_icon']);
if(empty($client_tag_icon)){ if (empty($client_tag_icon)) {
$client_tag_icon = "tag"; $client_tag_icon = "tag";
} }

3
inc_all_reports.php
View File

@ -1,4 +1,4 @@
<?php <?php
include("config.php"); include("config.php");
include_once("functions.php"); include_once("functions.php");
@ -9,4 +9,3 @@ include("reports_side_nav.php");
include("inc_wrapper.php"); include("inc_wrapper.php");
include("inc_alert_feedback.php"); include("inc_alert_feedback.php");
?>

3
inc_all_settings.php
View File

@ -1,4 +1,4 @@
<?php <?php
include("config.php"); include("config.php");
include_once("functions.php"); include_once("functions.php");
@ -13,4 +13,3 @@ include("inc_wrapper.php");
include("inc_alert_feedback.php"); include("inc_alert_feedback.php");
include("pagination_head.php"); include("pagination_head.php");
?>

26
inc_client_top_head.php
View File

@ -11,14 +11,14 @@ $location_phone = formatPhoneNumber($location_phone);
<div class="row"> <div class="row">
<div class="col-md"> <div class="col-md">
<h4 class="text-secondary"><strong><?php echo $client_name; ?></strong></h4> <h4 class="text-secondary"><strong><?php echo $client_name; ?></strong></h4>
<?php if(!empty($location_address)){ ?> <?php if (!empty($location_address)) { ?>
<a href="//maps.<?php echo $session_map_source; ?>.com/?q=<?php echo "$location_address $location_zip"; ?>" target="_blank"> <a href="//maps.<?php echo $session_map_source; ?>.com/?q=<?php echo "$location_address $location_zip"; ?>" target="_blank">
<div><i class="fa fa-fw fa-map-marker-alt text-secondary ml-1 mr-1"></i> <?php echo $location_address; ?></div> <div><i class="fa fa-fw fa-map-marker-alt text-secondary ml-1 mr-1"></i> <?php echo $location_address; ?></div>
<div class="ml-4 mb-2"><?php echo "$location_city $location_state $location_zip"; ?></div> <div class="ml-4 mb-2"><?php echo "$location_city $location_state $location_zip"; ?></div>
</a> </a>
<?php } ?> <?php } ?>
<?php <?php
if(!empty($location_phone)){ if (!empty($location_phone)) {
?> ?>
<i class="fa fa-fw fa-phone text-secondary ml-1 mr-2 mb-2"></i> <a href="tel:<?php echo $location_phone?>"><?php echo $location_phone; ?></a> <i class="fa fa-fw fa-phone text-secondary ml-1 mr-2 mb-2"></i> <a href="tel:<?php echo $location_phone?>"><?php echo $location_phone; ?></a>
<br> <br>
@ -26,7 +26,7 @@ $location_phone = formatPhoneNumber($location_phone);
} }
?> ?>
<?php <?php
if(!empty($client_website)){ if (!empty($client_website)) {
?> ?>
<i class="fa fa-fw fa-globe text-secondary ml-1 mr-2 mb-2"></i> <a target="_blank" href="//<?php echo $client_website; ?>"><?php echo $client_website; ?></a> <i class="fa fa-fw fa-globe text-secondary ml-1 mr-2 mb-2"></i> <a target="_blank" href="//<?php echo $client_website; ?>"><?php echo $client_website; ?></a>
<br> <br>
@ -34,7 +34,7 @@ $location_phone = formatPhoneNumber($location_phone);
} }
?> ?>
<?php <?php
if(!empty($client_tag_name_display_array)){ if (!empty($client_tag_name_display_array)) {
?> ?>
<?php echo $client_tags_display; ?> <?php echo $client_tags_display; ?>
<?php <?php
@ -44,7 +44,7 @@ $location_phone = formatPhoneNumber($location_phone);
<div class="col-md border-left"> <div class="col-md border-left">
<h4 class="text-secondary">Contact</h4> <h4 class="text-secondary">Contact</h4>
<?php <?php
if(!empty($contact_name)){ if (!empty($contact_name)) {
?> ?>
<i class="fa fa-fw fa-user text-secondary ml-1 mr-2 mb-2"></i> <?php echo $contact_name; ?> <i class="fa fa-fw fa-user text-secondary ml-1 mr-2 mb-2"></i> <?php echo $contact_name; ?>
<br> <br>
@ -52,7 +52,7 @@ $location_phone = formatPhoneNumber($location_phone);
} }
?> ?>
<?php <?php
if(!empty($contact_email)){ if (!empty($contact_email)) {
?> ?>
<i class="fa fa-fw fa-envelope text-secondary ml-1 mr-2 mb-2"></i> <a href="mailto:<?php echo $contact_email; ?>"><?php echo $contact_email; ?></a><button class='btn btn-sm clipboardjs' data-clipboard-text='<?php echo $contact_email; ?>'><i class='far fa-copy text-secondary'></i></button> <i class="fa fa-fw fa-envelope text-secondary ml-1 mr-2 mb-2"></i> <a href="mailto:<?php echo $contact_email; ?>"><?php echo $contact_email; ?></a><button class='btn btn-sm clipboardjs' data-clipboard-text='<?php echo $contact_email; ?>'><i class='far fa-copy text-secondary'></i></button>
<br> <br>
@ -60,11 +60,11 @@ $location_phone = formatPhoneNumber($location_phone);
} }
?> ?>
<?php <?php
if(!empty($contact_phone)){ if (!empty($contact_phone)) {
?> ?>
<i class="fa fa-fw fa-phone text-secondary ml-1 mr-2 mb-2"></i> <a href="tel:<?php echo $contact_phone; ?>"><?php echo $contact_phone; ?> </a> <i class="fa fa-fw fa-phone text-secondary ml-1 mr-2 mb-2"></i> <a href="tel:<?php echo $contact_phone; ?>"><?php echo $contact_phone; ?> </a>
<?php <?php
if(!empty($contact_extension)){ if (!empty($contact_extension)) {
?> ?>
x<?php echo $contact_extension; ?> x<?php echo $contact_extension; ?>
<?php <?php
@ -75,30 +75,30 @@ $location_phone = formatPhoneNumber($location_phone);
} }
?> ?>
<?php <?php
if(!empty($contact_mobile)){ if (!empty($contact_mobile)) {
?> ?>
<i class="fa fa-fw fa-mobile-alt text-secondary ml-1 mr-2 mb-2"></i> <a href="tel:<?php echo $contact_mobile; ?>"> <?php echo $contact_mobile; ?> </a> <i class="fa fa-fw fa-mobile-alt text-secondary ml-1 mr-2 mb-2"></i> <a href="tel:<?php echo $contact_mobile; ?>"> <?php echo $contact_mobile; ?> </a>
<?php <?php
} }
?> ?>
</div> </div>
<?php if($session_user_role == 1 || $session_user_role == 3 AND $config_module_enable_accounting == 1){ ?> <?php if ($session_user_role == 1 || $session_user_role == 3 AND $config_module_enable_accounting == 1) { ?>
<div class="col-md border-left"> <div class="col-md border-left">
<h4 class="text-secondary">Billing</h4> <h4 class="text-secondary">Billing</h4>
<h6 class="ml-1 text-secondary">Paid <div class="text-dark float-right"> <?php echo numfmt_format_currency($currency_format, $amount_paid, $client_currency_code); ?></div></h6> <h6 class="ml-1 text-secondary">Paid <div class="text-dark float-right"> <?php echo numfmt_format_currency($currency_format, $amount_paid, $client_currency_code); ?></div></h6>
<h6 class="ml-1 text-secondary">Balance <div class="<?php if($balance > 0){ echo "text-danger"; }else{ echo "text-dark"; } ?> float-right"> <?php echo numfmt_format_currency($currency_format, $balance, $client_currency_code); ?></div></h6> <h6 class="ml-1 text-secondary">Balance <div class="<?php if ($balance > 0) { echo "text-danger"; }else{ echo "text-dark"; } ?> float-right"> <?php echo numfmt_format_currency($currency_format, $balance, $client_currency_code); ?></div></h6>
<h6 class="ml-1 text-secondary">Monthly Recurring <div class="text-dark float-right"> <?php echo numfmt_format_currency($currency_format, $recurring_monthly, $client_currency_code); ?></div></h6> <h6 class="ml-1 text-secondary">Monthly Recurring <div class="text-dark float-right"> <?php echo numfmt_format_currency($currency_format, $recurring_monthly, $client_currency_code); ?></div></h6>
<h6 class="ml-1 text-secondary">Net Terms <div class="text-dark float-right"><?php echo $client_net_terms; ?> <small class="text-secondary">Days</small></div></h6> <h6 class="ml-1 text-secondary">Net Terms <div class="text-dark float-right"><?php echo $client_net_terms; ?> <small class="text-secondary">Days</small></div></h6>
</div> </div>
<?php } ?> <?php } ?>
<?php if($config_module_enable_ticketing == 1){ ?> <?php if ($config_module_enable_ticketing == 1) { ?>
<div class="col-md border-left"> <div class="col-md border-left">
<h4 class="text-secondary">Support</h4> <h4 class="text-secondary">Support</h4>
<h6 class="ml-1 text-secondary">Open Tickets <div class="text-dark float-right"><?php echo $num_active_tickets; ?></div></h6> <h6 class="ml-1 text-secondary">Open Tickets <div class="text-dark float-right"><?php echo $num_active_tickets; ?></div></h6>
</div> </div>
<?php } ?> <?php } ?>
<div class="col-md-1 border-left"> <div class="col-md-1 border-left">
<?php if($session_user_role == 3) { ?> <?php if ($session_user_role == 3) { ?>
<div class="dropdown dropleft text-center"> <div class="dropdown dropleft text-center">
<button class="btn btn-dark btn-sm float-right" type="button" data-toggle="dropdown"> <button class="btn btn-dark btn-sm float-right" type="button" data-toggle="dropdown">
<i class="fas fa-fw fa-ellipsis-v"></i> <i class="fas fa-fw fa-ellipsis-v"></i>

58
invoice.php
View File

@ -2,7 +2,7 @@
include("inc_all.php"); include("inc_all.php");
if(isset($_GET['invoice_id'])){ if (isset($_GET['invoice_id'])) {
$invoice_id = intval($_GET['invoice_id']); $invoice_id = intval($_GET['invoice_id']);
@ -14,7 +14,7 @@ if(isset($_GET['invoice_id'])){
WHERE invoice_id = $invoice_id" WHERE invoice_id = $invoice_id"
); );
if(mysqli_num_rows($sql) == 0){ if (mysqli_num_rows($sql) == 0) {
echo "<center><h1 class='text-secondary mt-5'>Nothing to see here</h1></center>"; echo "<center><h1 class='text-secondary mt-5'>Nothing to see here</h1></center>";
}else{ }else{
@ -45,7 +45,7 @@ if(isset($_GET['invoice_id'])){
$client_website = htmlentities($row['client_website']); $client_website = htmlentities($row['client_website']);
$client_currency_code = htmlentities($row['client_currency_code']); $client_currency_code = htmlentities($row['client_currency_code']);
$client_net_terms = htmlentities($row['client_net_terms']); $client_net_terms = htmlentities($row['client_net_terms']);
if($client_net_terms == 0){ if ($client_net_terms == 0) {
$client_net_terms = $config_default_net_terms; $client_net_terms = $config_default_net_terms;
} }
$company_id = $row['company_id']; $company_id = $row['company_id'];
@ -59,7 +59,7 @@ if(isset($_GET['invoice_id'])){
$company_email = htmlentities($row['company_email']); $company_email = htmlentities($row['company_email']);
$company_website = htmlentities($row['company_website']); $company_website = htmlentities($row['company_website']);
$company_logo = htmlentities($row['company_logo']); $company_logo = htmlentities($row['company_logo']);
if(!empty($company_logo)){ if (!empty($company_logo)) {
$company_logo_base64 = base64_encode(file_get_contents("uploads/settings/$company_id/$company_logo")); $company_logo_base64 = base64_encode(file_get_contents("uploads/settings/$company_id/$company_logo"));
} }
$sql_history = mysqli_query($mysqli,"SELECT * FROM history WHERE history_invoice_id = $invoice_id ORDER BY history_id DESC"); $sql_history = mysqli_query($mysqli,"SELECT * FROM history WHERE history_invoice_id = $invoice_id ORDER BY history_id DESC");
@ -74,23 +74,23 @@ if(isset($_GET['invoice_id'])){
$balance = $invoice_amount - $amount_paid; $balance = $invoice_amount - $amount_paid;
//check to see if overdue //check to see if overdue
if($invoice_status !== "Paid" && $invoice_status !== "Draft" && $invoice_status !== "Cancelled"){ if ($invoice_status !== "Paid" && $invoice_status !== "Draft" && $invoice_status !== "Cancelled") {
$unixtime_invoice_due = strtotime($invoice_due) + 86400; $unixtime_invoice_due = strtotime($invoice_due) + 86400;
if($unixtime_invoice_due < time()){ if ($unixtime_invoice_due < time()) {
$invoice_overdue = "Overdue"; $invoice_overdue = "Overdue";
} }
} }
//Set Badge color based off of invoice status //Set Badge color based off of invoice status
if($invoice_status == "Sent"){ if ($invoice_status == "Sent") {
$invoice_badge_color = "warning text-white"; $invoice_badge_color = "warning text-white";
}elseif($invoice_status == "Viewed"){ }elseif ($invoice_status == "Viewed") {
$invoice_badge_color = "info"; $invoice_badge_color = "info";
}elseif($invoice_status == "Partial"){ }elseif ($invoice_status == "Partial") {
$invoice_badge_color = "primary"; $invoice_badge_color = "primary";
}elseif($invoice_status == "Paid"){ }elseif ($invoice_status == "Paid") {
$invoice_badge_color = "success"; $invoice_badge_color = "success";
}elseif($invoice_status == "Cancelled"){ }elseif ($invoice_status == "Cancelled") {
$invoice_badge_color = "danger"; $invoice_badge_color = "danger";
}else{ }else{
$invoice_badge_color = "secondary"; $invoice_badge_color = "secondary";
@ -99,8 +99,8 @@ if(isset($_GET['invoice_id'])){
//Product autocomplete //Product autocomplete
$products_sql = mysqli_query($mysqli,"SELECT product_name AS label, product_description AS description, product_price AS price FROM products WHERE company_id = $session_company_id"); $products_sql = mysqli_query($mysqli,"SELECT product_name AS label, product_description AS description, product_price AS price FROM products WHERE company_id = $session_company_id");
if(mysqli_num_rows($products_sql) > 0){ if (mysqli_num_rows($products_sql) > 0) {
while($row = mysqli_fetch_array($products_sql)){ while ($row = mysqli_fetch_array($products_sql)) {
$products[] = $row; $products[] = $row;
} }
$json_products = json_encode($products); $json_products = json_encode($products);
@ -116,7 +116,7 @@ if(isset($_GET['invoice_id'])){
<a href="client_invoices.php?client_id=<?php echo $client_id; ?>"><?php echo $client_name; ?></a> <a href="client_invoices.php?client_id=<?php echo $client_id; ?>"><?php echo $client_name; ?></a>
</li> </li>
<li class="breadcrumb-item active"><?php echo "$invoice_prefix$invoice_number"; ?></li> <li class="breadcrumb-item active"><?php echo "$invoice_prefix$invoice_number"; ?></li>
<?php if(isset($invoice_overdue)){ ?> <?php if (isset($invoice_overdue)) { ?>
<span class="p-2 ml-2 badge badge-danger"><?php echo $invoice_overdue; ?></span> <span class="p-2 ml-2 badge badge-danger"><?php echo $invoice_overdue; ?></span>
<?php } ?> <?php } ?>
</ol> </ol>
@ -128,12 +128,12 @@ if(isset($_GET['invoice_id'])){
<div class="row"> <div class="row">
<div class="col-md-4"> <div class="col-md-4">
<?php if($invoice_status == 'Draft'){ ?> <?php if ($invoice_status == 'Draft') { ?>
<button class="btn btn-success btn-sm dropdown-toggle" type="button" data-toggle="dropdown"> <button class="btn btn-success btn-sm dropdown-toggle" type="button" data-toggle="dropdown">
<i class="fas fa-fw fa-paper-plane"></i> Send <i class="fas fa-fw fa-paper-plane"></i> Send
</button> </button>
<div class="dropdown-menu"> <div class="dropdown-menu">
<?php if(!empty($config_smtp_host) && !empty($contact_email)){ ?> <?php if (!empty($config_smtp_host) && !empty($contact_email)) { ?>
<a class="dropdown-item" href="post.php?email_invoice=<?php echo $invoice_id; ?>">Send Email</a> <a class="dropdown-item" href="post.php?email_invoice=<?php echo $invoice_id; ?>">Send Email</a>
<div class="dropdown-divider"></div> <div class="dropdown-divider"></div>
<?php } ?> <?php } ?>
@ -141,7 +141,7 @@ if(isset($_GET['invoice_id'])){
</div> </div>
<?php } ?> <?php } ?>
<?php if($invoice_status !== 'Paid' && $invoice_status !== 'Cancelled' && $invoice_status !== 'Draft'){ ?> <?php if ($invoice_status !== 'Paid' && $invoice_status !== 'Cancelled' && $invoice_status !== 'Draft') { ?>
<a class="btn btn-success btn-sm" href="#" data-toggle="modal" data-target="#addPaymentModal"><i class="fa fa-fw fa-credit-card"></i> Add Payment</a> <a class="btn btn-success btn-sm" href="#" data-toggle="modal" data-target="#addPaymentModal"><i class="fa fa-fw fa-credit-card"></i> Add Payment</a>
<?php } ?> <?php } ?>
</div> </div>
@ -159,11 +159,11 @@ if(isset($_GET['invoice_id'])){
<div class="dropdown-divider"></div> <div class="dropdown-divider"></div>
<a class="dropdown-item" href="#" onclick="window.print();">Print</a> <a class="dropdown-item" href="#" onclick="window.print();">Print</a>
<a class="dropdown-item" href="#" onclick="pdfMake.createPdf(docDefinition).download('<?php echo "$invoice_date-$company_name-$client_name-Invoice-$invoice_prefix$invoice_number.pdf"; ?>');">Download PDF</a> <a class="dropdown-item" href="#" onclick="pdfMake.createPdf(docDefinition).download('<?php echo "$invoice_date-$company_name-$client_name-Invoice-$invoice_prefix$invoice_number.pdf"; ?>');">Download PDF</a>
<?php if(!empty($config_smtp_host) && !empty($contact_email)){ ?> <?php if (!empty($config_smtp_host) && !empty($contact_email)) { ?>
<a class="dropdown-item" href="post.php?email_invoice=<?php echo $invoice_id; ?>">Send Email</a> <a class="dropdown-item" href="post.php?email_invoice=<?php echo $invoice_id; ?>">Send Email</a>
<?php } ?> <?php } ?>
<a class="dropdown-item" target="_blank" href="guest_view_invoice.php?invoice_id=<?php echo "$invoice_id&url_key=$invoice_url_key"; ?>">Guest URL</a> <a class="dropdown-item" target="_blank" href="guest_view_invoice.php?invoice_id=<?php echo "$invoice_id&url_key=$invoice_url_key"; ?>">Guest URL</a>
<?php if($invoice_status !== 'Cancelled' && $invoice_status !== 'Paid'){ ?> <?php if ($invoice_status !== 'Cancelled' && $invoice_status !== 'Paid') { ?>
<div class="dropdown-divider"></div> <div class="dropdown-divider"></div>
<a class="dropdown-item text-danger" href="post.php?cancel_invoice=<?php echo $invoice_id; ?>">Cancel</a> <a class="dropdown-item text-danger" href="post.php?cancel_invoice=<?php echo $invoice_id; ?>">Cancel</a>
<?php } ?> <?php } ?>
@ -255,7 +255,7 @@ if(isset($_GET['invoice_id'])){
$total_tax = 0; $total_tax = 0;
$sub_total = 0; $sub_total = 0;
while($row = mysqli_fetch_array($sql_invoice_items)){ while ($row = mysqli_fetch_array($sql_invoice_items)) {
$item_id = $row['item_id']; $item_id = $row['item_id'];
$item_name = htmlentities($row['item_name']); $item_name = htmlentities($row['item_name']);
$item_description = htmlentities($row['item_description']); $item_description = htmlentities($row['item_description']);
@ -305,7 +305,7 @@ if(isset($_GET['invoice_id'])){
<?php <?php
$taxes_sql = mysqli_query($mysqli,"SELECT * FROM taxes WHERE company_id = $session_company_id ORDER BY tax_name ASC"); $taxes_sql = mysqli_query($mysqli,"SELECT * FROM taxes WHERE company_id = $session_company_id ORDER BY tax_name ASC");
while($row = mysqli_fetch_array($taxes_sql)){ while ($row = mysqli_fetch_array($taxes_sql)) {
$tax_id = $row['tax_id']; $tax_id = $row['tax_id'];
$tax_name = htmlentities($row['tax_name']); $tax_name = htmlentities($row['tax_name']);
$tax_percent = htmlentities($row['tax_percent']); $tax_percent = htmlentities($row['tax_percent']);
@ -354,13 +354,13 @@ if(isset($_GET['invoice_id'])){
<td>Subtotal</td> <td>Subtotal</td>
<td class="text-right"><?php echo numfmt_format_currency($currency_format, $sub_total, $invoice_currency_code); ?></td> <td class="text-right"><?php echo numfmt_format_currency($currency_format, $sub_total, $invoice_currency_code); ?></td>
</tr> </tr>
<?php if($total_tax > 0){ ?> <?php if ($total_tax > 0) { ?>
<tr class="border-bottom"> <tr class="border-bottom">
<td>Tax</td> <td>Tax</td>
<td class="text-right"><?php echo numfmt_format_currency($currency_format, $total_tax, $invoice_currency_code); ?></td> <td class="text-right"><?php echo numfmt_format_currency($currency_format, $total_tax, $invoice_currency_code); ?></td>
</tr> </tr>
<?php } ?> <?php } ?>
<?php if($amount_paid > 0){ ?> <?php if ($amount_paid > 0) { ?>
<tr class="border-bottom"> <tr class="border-bottom">
<td><div class="text-success">Paid</div></td> <td><div class="text-success">Paid</div></td>
<td class="text-right text-success"><?php echo numfmt_format_currency($currency_format, $amount_paid, $invoice_currency_code); ?></td> <td class="text-right text-success"><?php echo numfmt_format_currency($currency_format, $amount_paid, $invoice_currency_code); ?></td>
@ -407,7 +407,7 @@ if(isset($_GET['invoice_id'])){
<tbody> <tbody>
<?php <?php
while($row = mysqli_fetch_array($sql_history)){ while ($row = mysqli_fetch_array($sql_history)) {
$history_created_at = $row['history_created_at']; $history_created_at = $row['history_created_at'];
$history_status = htmlentities($row['history_status']); $history_status = htmlentities($row['history_status']);
$history_description = htmlentities($row['history_description']); $history_description = htmlentities($row['history_description']);
@ -455,7 +455,7 @@ if(isset($_GET['invoice_id'])){
<tbody> <tbody>
<?php <?php
while($row = mysqli_fetch_array($sql_payments)){ while ($row = mysqli_fetch_array($sql_payments)) {
$payment_id = $row['payment_id']; $payment_id = $row['payment_id'];
$payment_date = $row['payment_date']; $payment_date = $row['payment_date'];
$payment_amount = floatval($row['payment_amount']); $payment_amount = floatval($row['payment_amount']);
@ -501,12 +501,12 @@ include("footer.php");
<link rel="stylesheet" href="plugins/jquery-ui/jquery-ui.min.css"> <link rel="stylesheet" href="plugins/jquery-ui/jquery-ui.min.css">
<script src="plugins/jquery-ui/jquery-ui.min.js"></script> <script src="plugins/jquery-ui/jquery-ui.min.js"></script>
<script> <script>
$(function(){ $(function() {
var availableProducts = <?php echo $json_products?>; var availableProducts = <?php echo $json_products?>;
$("#name").autocomplete({ $("#name").autocomplete({
source: availableProducts, source: availableProducts,
select: function (event, ui){ select: function (event, ui) {
$("#name").val(ui.item.label); // Product name field - this seemingly has to referenced as label $("#name").val(ui.item.label); // Product name field - this seemingly has to referenced as label
$("#desc").val(ui.item.description); // Product description field $("#desc").val(ui.item.description); // Product description field
$("#qty").val(1); // Product quantity field automatically make it a 1 $("#qty").val(1); // Product quantity field automatically make it a 1
@ -533,7 +533,7 @@ var docDefinition = {
// Header // Header
{ {
columns: [ columns: [
<?php if(!empty($company_logo_base64)){ ?> <?php if (!empty($company_logo_base64)) { ?>
{ {
image: <?php echo json_encode("data:image;base64,$company_logo_base64") ?>, image: <?php echo json_encode("data:image;base64,$company_logo_base64") ?>,
width: 120 width: 120
@ -665,7 +665,7 @@ var docDefinition = {
$sql_invoice_items = mysqli_query($mysqli,"SELECT * FROM invoice_items WHERE item_invoice_id = $invoice_id ORDER BY item_id ASC"); $sql_invoice_items = mysqli_query($mysqli,"SELECT * FROM invoice_items WHERE item_invoice_id = $invoice_id ORDER BY item_id ASC");
while($row = mysqli_fetch_array($sql_invoice_items)){ while ($row = mysqli_fetch_array($sql_invoice_items)) {
$item_name = $row['item_name']; $item_name = $row['item_name'];
$item_description = $row['item_description']; $item_description = $row['item_description'];
$item_quantity = $row['item_quantity']; $item_quantity = $row['item_quantity'];

6
invoice_add_modal.php
View File

@ -10,7 +10,7 @@
<form action="post.php" method="post" autocomplete="off"> <form action="post.php" method="post" autocomplete="off">
<div class="modal-body bg-white"> <div class="modal-body bg-white">
<?php if(isset($_GET['client_id'])){ ?> <?php if (isset($_GET['client_id'])) { ?>
<input type="hidden" name="client" value="<?php echo $client_id; ?>"> <input type="hidden" name="client" value="<?php echo $client_id; ?>">
<?php }else{ ?> <?php }else{ ?>
@ -25,7 +25,7 @@
<?php <?php
$sql = mysqli_query($mysqli,"SELECT * FROM clients WHERE company_id = $session_company_id ORDER BY client_name ASC"); $sql = mysqli_query($mysqli,"SELECT * FROM clients WHERE company_id = $session_company_id ORDER BY client_name ASC");
while($row = mysqli_fetch_array($sql)){ while ($row = mysqli_fetch_array($sql)) {
$client_id = $row['client_id']; $client_id = $row['client_id'];
$client_name = htmlentities($row['client_name']); $client_name = htmlentities($row['client_name']);
?> ?>
@ -61,7 +61,7 @@
<?php <?php
$sql = mysqli_query($mysqli,"SELECT * FROM categories WHERE category_type = 'Income' AND category_archived_at IS NULL AND company_id = $session_company_id ORDER BY category_name ASC"); $sql = mysqli_query($mysqli,"SELECT * FROM categories WHERE category_type = 'Income' AND category_archived_at IS NULL AND company_id = $session_company_id ORDER BY category_name ASC");
while($row = mysqli_fetch_array($sql)){ while ($row = mysqli_fetch_array($sql)) {
$category_id = $row['category_id']; $category_id = $row['category_id'];
$category_name = htmlentities($row['category_name']); $category_name = htmlentities($row['category_name']);
?> ?>

4
invoice_edit_modal.php
View File

@ -43,11 +43,11 @@
<?php <?php
$sql_income_category = mysqli_query($mysqli,"SELECT * FROM categories WHERE category_type = 'Income' AND (category_archived_at > '$invoice_created_at' OR category_archived_at IS NULL) AND company_id = $session_company_id ORDER BY category_name ASC"); $sql_income_category = mysqli_query($mysqli,"SELECT * FROM categories WHERE category_type = 'Income' AND (category_archived_at > '$invoice_created_at' OR category_archived_at IS NULL) AND company_id = $session_company_id ORDER BY category_name ASC");
while($row = mysqli_fetch_array($sql_income_category)){ while ($row = mysqli_fetch_array($sql_income_category)) {
$category_id_select= $row['category_id']; $category_id_select= $row['category_id'];
$category_name_select = htmlentities($row['category_name']); $category_name_select = htmlentities($row['category_name']);
?> ?>
<option <?php if($category_id == $category_id_select){ echo "selected"; } ?> value="<?php echo $category_id_select; ?>"><?php echo $category_name_select; ?></option> <option <?php if ($category_id == $category_id_select) { echo "selected"; } ?> value="<?php echo $category_id_select; ?>"><?php echo $category_name_select; ?></option>
<?php <?php
} }

10
invoice_payment_add_modal.php
View File

@ -55,7 +55,7 @@
<?php <?php
$sql = mysqli_query($mysqli,"SELECT * FROM accounts WHERE account_archived_at IS NULL AND company_id = $session_company_id ORDER BY account_name ASC"); $sql = mysqli_query($mysqli,"SELECT * FROM accounts WHERE account_archived_at IS NULL AND company_id = $session_company_id ORDER BY account_name ASC");
while($row = mysqli_fetch_array($sql)){ while ($row = mysqli_fetch_array($sql)) {
$account_id = $row['account_id']; $account_id = $row['account_id'];
$account_name = htmlentities($row['account_name']); $account_name = htmlentities($row['account_name']);
$opening_balance = $row['opening_balance']; $opening_balance = $row['opening_balance'];
@ -75,7 +75,7 @@
$account_balance = $opening_balance + $total_payments + $total_revenues - $total_expenses; $account_balance = $opening_balance + $total_payments + $total_revenues - $total_expenses;
?> ?>
<option <?php if($config_default_payment_account == $account_id){ echo "selected"; } ?> value="<?php echo $account_id; ?>"><?php echo $account_name; ?> [$<?php echo number_format($account_balance,2); ?>]</option> <option <?php if ($config_default_payment_account == $account_id) { echo "selected"; } ?> value="<?php echo $account_id; ?>"><?php echo $account_name; ?> [$<?php echo number_format($account_balance,2); ?>]</option>
<?php <?php
} }
@ -95,10 +95,10 @@
<?php <?php
$sql = mysqli_query($mysqli,"SELECT * FROM categories WHERE category_type = 'Payment Method' AND category_archived_at IS NULL AND company_id = $session_company_id ORDER BY category_name ASC"); $sql = mysqli_query($mysqli,"SELECT * FROM categories WHERE category_type = 'Payment Method' AND category_archived_at IS NULL AND company_id = $session_company_id ORDER BY category_name ASC");
while($row = mysqli_fetch_array($sql)){ while ($row = mysqli_fetch_array($sql)) {
$category_name = htmlentities($row['category_name']); $category_name = htmlentities($row['category_name']);
?> ?>
<option <?php if($config_default_payment_method == $category_name){ echo "selected"; } ?>><?php echo $category_name; ?></option> <option <?php if ($config_default_payment_method == $category_name) { echo "selected"; } ?>><?php echo $category_name; ?></option>
<?php <?php
} }
@ -117,7 +117,7 @@
</div> </div>
</div> </div>
<?php if(!empty($config_smtp_host) && !empty($contact_email)){ ?> <?php if (!empty($config_smtp_host) && !empty($contact_email)) { ?>
<div class="form-group"> <div class="form-group">
<label>Email Receipt</label> <label>Email Receipt</label>

78
invoices.php
View File

@ -52,63 +52,63 @@
$real_overdue_amount = $total_overdue - $total_overdue_partial; $real_overdue_amount = $total_overdue - $total_overdue_partial;
if(!empty($_GET['sb'])){ if (!empty($_GET['sb'])) {
$sb = strip_tags(mysqli_real_escape_string($mysqli, $_GET['sb'])); $sb = strip_tags(mysqli_real_escape_string($mysqli, $_GET['sb']));
}else{ }else{
$sb = "invoice_number"; $sb = "invoice_number";
} }
// Reverse default sort // Reverse default sort
if(!isset($_GET['o'])){ if (!isset($_GET['o'])) {
$o = "DESC"; $o = "DESC";
$disp = "ASC"; $disp = "ASC";
} }
if(empty($_GET['canned_date'])){ if (empty($_GET['canned_date'])) {
//Prevents lots of undefined variable errors. //Prevents lots of undefined variable errors.
// $dtf and $dtt will be set by the below else to 0000-00-00 / 9999-00-00 // $dtf and $dtt will be set by the below else to 0000-00-00 / 9999-00-00
$_GET['canned_date'] = 'custom'; $_GET['canned_date'] = 'custom';
} }
//Invoice status from GET //Invoice status from GET
if(isset($_GET['status']) && ($_GET['status']) == 'Draft'){ if (isset($_GET['status']) && ($_GET['status']) == 'Draft') {
$status_query = 'Draft'; $status_query = 'Draft';
}elseif(isset($_GET['status']) && ($_GET['status']) == 'Sent'){ }elseif (isset($_GET['status']) && ($_GET['status']) == 'Sent') {
$status_query = 'Sent'; $status_query = 'Sent';
}elseif(isset($_GET['status']) && ($_GET['status']) == 'Viewed'){ }elseif (isset($_GET['status']) && ($_GET['status']) == 'Viewed') {
$status_query = 'Viewed'; $status_query = 'Viewed';
}elseif(isset($_GET['status']) && ($_GET['status']) == 'Partial'){ }elseif (isset($_GET['status']) && ($_GET['status']) == 'Partial') {
$status_query = 'Partial'; $status_query = 'Partial';
}else{ }else{
$status_query = '%'; $status_query = '%';
} }
//Date Filter //Date Filter
if($_GET['canned_date'] == "custom" && !empty($_GET['dtf'])){ if ($_GET['canned_date'] == "custom" && !empty($_GET['dtf'])) {
$dtf = strip_tags(mysqli_real_escape_string($mysqli,$_GET['dtf'])); $dtf = strip_tags(mysqli_real_escape_string($mysqli,$_GET['dtf']));
$dtt = strip_tags(mysqli_real_escape_string($mysqli,$_GET['dtt'])); $dtt = strip_tags(mysqli_real_escape_string($mysqli,$_GET['dtt']));
}elseif($_GET['canned_date'] == "today"){ }elseif ($_GET['canned_date'] == "today") {
$dtf = date('Y-m-d'); $dtf = date('Y-m-d');
$dtt = date('Y-m-d'); $dtt = date('Y-m-d');
}elseif($_GET['canned_date'] == "yesterday"){ }elseif ($_GET['canned_date'] == "yesterday") {
$dtf = date('Y-m-d',strtotime("yesterday")); $dtf = date('Y-m-d',strtotime("yesterday"));
$dtt = date('Y-m-d',strtotime("yesterday")); $dtt = date('Y-m-d',strtotime("yesterday"));
}elseif($_GET['canned_date'] == "thisweek"){ }elseif ($_GET['canned_date'] == "thisweek") {
$dtf = date('Y-m-d',strtotime("monday this week")); $dtf = date('Y-m-d',strtotime("monday this week"));
$dtt = date('Y-m-d'); $dtt = date('Y-m-d');
}elseif($_GET['canned_date'] == "lastweek"){ }elseif ($_GET['canned_date'] == "lastweek") {
$dtf = date('Y-m-d',strtotime("monday last week")); $dtf = date('Y-m-d',strtotime("monday last week"));
$dtt = date('Y-m-d',strtotime("sunday last week")); $dtt = date('Y-m-d',strtotime("sunday last week"));
}elseif($_GET['canned_date'] == "thismonth"){ }elseif ($_GET['canned_date'] == "thismonth") {
$dtf = date('Y-m-01'); $dtf = date('Y-m-01');
$dtt = date('Y-m-d'); $dtt = date('Y-m-d');
}elseif($_GET['canned_date'] == "lastmonth"){ }elseif ($_GET['canned_date'] == "lastmonth") {
$dtf = date('Y-m-d',strtotime("first day of last month")); $dtf = date('Y-m-d',strtotime("first day of last month"));
$dtt = date('Y-m-d',strtotime("last day of last month")); $dtt = date('Y-m-d',strtotime("last day of last month"));
}elseif($_GET['canned_date'] == "thisyear"){ }elseif ($_GET['canned_date'] == "thisyear") {
$dtf = date('Y-01-01'); $dtf = date('Y-01-01');
$dtt = date('Y-m-d'); $dtt = date('Y-m-d');
}elseif($_GET['canned_date'] == "lastyear"){ }elseif ($_GET['canned_date'] == "lastyear") {
$dtf = date('Y-m-d',strtotime("first day of january last year")); $dtf = date('Y-m-d',strtotime("first day of january last year"));
$dtt = date('Y-m-d',strtotime("last day of december last year")); $dtt = date('Y-m-d',strtotime("last day of december last year"));
}else{ }else{
@ -201,11 +201,11 @@
<div class="card-body"> <div class="card-body">
<form class="mb-4" autocomplete="off"> <form class="mb-4" autocomplete="off">
<input type="hidden" name="status" value="<?php if(isset($_GET['status'])){ echo htmlentities($_GET['status']); } ?>"> <input type="hidden" name="status" value="<?php if (isset($_GET['status'])) { echo htmlentities($_GET['status']); } ?>">
<div class="row"> <div class="row">
<div class="col-sm-4"> <div class="col-sm-4">
<div class="input-group"> <div class="input-group">
<input type="search" class="form-control" name="q" value="<?php if(isset($q)){echo strip_tags(htmlentities($q));} ?>" placeholder="Search Invoices"> <input type="search" class="form-control" name="q" value="<?php if (isset($q)) {echo strip_tags(htmlentities($q));} ?>" placeholder="Search Invoices">
<div class="input-group-append"> <div class="input-group-append">
<button class="btn btn-secondary" type="button" data-toggle="collapse" data-target="#advancedFilter"><i class="fas fa-filter"></i></button> <button class="btn btn-secondary" type="button" data-toggle="collapse" data-target="#advancedFilter"><i class="fas fa-filter"></i></button>
<button class="btn btn-primary"><i class="fa fa-search"></i></button> <button class="btn btn-primary"><i class="fa fa-search"></i></button>
@ -213,21 +213,21 @@
</div> </div>
</div> </div>
</div> </div>
<div class="collapse mt-3 <?php if(!empty($_GET['dtf'])){ echo "show"; } ?>" id="advancedFilter"> <div class="collapse mt-3 <?php if (!empty($_GET['dtf'])) { echo "show"; } ?>" id="advancedFilter">
<div class="row"> <div class="row">
<div class="col-md-2"> <div class="col-md-2">
<div class="form-group"> <div class="form-group">
<label>Canned Date</label> <label>Canned Date</label>
<select class="form-control select2" name="canned_date"> <select class="form-control select2" name="canned_date">
<option <?php if($_GET['canned_date'] == "custom"){ echo "selected"; } ?> value="custom">Custom</option> <option <?php if ($_GET['canned_date'] == "custom") { echo "selected"; } ?> value="custom">Custom</option>
<option <?php if($_GET['canned_date'] == "today"){ echo "selected"; } ?> value="today">Today</option> <option <?php if ($_GET['canned_date'] == "today") { echo "selected"; } ?> value="today">Today</option>
<option <?php if($_GET['canned_date'] == "yesterday"){ echo "selected"; } ?> value="yesterday">Yesterday</option> <option <?php if ($_GET['canned_date'] == "yesterday") { echo "selected"; } ?> value="yesterday">Yesterday</option>
<option <?php if($_GET['canned_date'] == "thisweek"){ echo "selected"; } ?> value="thisweek">This Week</option> <option <?php if ($_GET['canned_date'] == "thisweek") { echo "selected"; } ?> value="thisweek">This Week</option>
<option <?php if($_GET['canned_date'] == "lastweek"){ echo "selected"; } ?> value="lastweek">Last Week</option> <option <?php if ($_GET['canned_date'] == "lastweek") { echo "selected"; } ?> value="lastweek">Last Week</option>
<option <?php if($_GET['canned_date'] == "thismonth"){ echo "selected"; } ?> value="thismonth">This Month</option> <option <?php if ($_GET['canned_date'] == "thismonth") { echo "selected"; } ?> value="thismonth">This Month</option>
<option <?php if($_GET['canned_date'] == "lastmonth"){ echo "selected"; } ?> value="lastmonth">Last Month</option> <option <?php if ($_GET['canned_date'] == "lastmonth") { echo "selected"; } ?> value="lastmonth">Last Month</option>
<option <?php if($_GET['canned_date'] == "thisyear"){ echo "selected"; } ?> value="thisyear">This Year</option> <option <?php if ($_GET['canned_date'] == "thisyear") { echo "selected"; } ?> value="thisyear">This Year</option>
<option <?php if($_GET['canned_date'] == "lastyear"){ echo "selected"; } ?> value="lastyear">Last Year</option> <option <?php if ($_GET['canned_date'] == "lastyear") { echo "selected"; } ?> value="lastyear">Last Year</option>
</select> </select>
</div> </div>
</div> </div>
@ -249,7 +249,7 @@
<hr> <hr>
<div class="table-responsive"> <div class="table-responsive">
<table class="table table-striped table-borderless table-hover"> <table class="table table-striped table-borderless table-hover">
<thead class="text-dark <?php if($num_rows[0] == 0){ echo "d-none"; } ?>"> <thead class="text-dark <?php if ($num_rows[0] == 0) { echo "d-none"; } ?>">
<tr> <tr>
<th><a class="text-dark" href="?<?php echo $url_query_strings_sb; ?>&sb=invoice_number&o=<?php echo $disp; ?>">Number</a></th> <th><a class="text-dark" href="?<?php echo $url_query_strings_sb; ?>&sb=invoice_number&o=<?php echo $disp; ?>">Number</a></th>
<th><a class="text-dark" href="?<?php echo $url_query_strings_sb; ?>&sb=invoice_scope&o=<?php echo $disp; ?>">Scope</a></th> <th><a class="text-dark" href="?<?php echo $url_query_strings_sb; ?>&sb=invoice_scope&o=<?php echo $disp; ?>">Scope</a></th>
@ -265,12 +265,12 @@
<tbody> <tbody>
<?php <?php
while($row = mysqli_fetch_array($sql)){ while ($row = mysqli_fetch_array($sql)) {
$invoice_id = $row['invoice_id']; $invoice_id = $row['invoice_id'];
$invoice_prefix = htmlentities($row['invoice_prefix']); $invoice_prefix = htmlentities($row['invoice_prefix']);
$invoice_number = htmlentities($row['invoice_number']); $invoice_number = htmlentities($row['invoice_number']);
$invoice_scope = htmlentities($row['invoice_scope']); $invoice_scope = htmlentities($row['invoice_scope']);
if(empty($invoice_scope)){ if (empty($invoice_scope)) {
$invoice_scope_display = "-"; $invoice_scope_display = "-";
}else{ }else{
$invoice_scope_display = $invoice_scope; $invoice_scope_display = $invoice_scope;
@ -287,27 +287,27 @@
$category_name = htmlentities($row['category_name']); $category_name = htmlentities($row['category_name']);
$client_currency_code = htmlentities($row['client_currency_code']); $client_currency_code = htmlentities($row['client_currency_code']);
$client_net_terms = htmlentities($row['client_net_terms']); $client_net_terms = htmlentities($row['client_net_terms']);
if($client_net_terms == 0){ if ($client_net_terms == 0) {
$client_net_terms = $config_default_net_terms; $client_net_terms = $config_default_net_terms;
} }
$now = time(); $now = time();
if(($invoice_status == "Sent" || $invoice_status == "Partial" || $invoice_status == "Viewed") && strtotime($invoice_due) + 86400 < $now ){ if (($invoice_status == "Sent" || $invoice_status == "Partial" || $invoice_status == "Viewed") && strtotime($invoice_due) + 86400 < $now ) {
$overdue_color = "text-danger font-weight-bold"; $overdue_color = "text-danger font-weight-bold";
}else{ }else{
$overdue_color = ""; $overdue_color = "";
} }
if($invoice_status == "Sent"){ if ($invoice_status == "Sent") {
$invoice_badge_color = "warning text-white"; $invoice_badge_color = "warning text-white";
}elseif($invoice_status == "Viewed"){ }elseif ($invoice_status == "Viewed") {
$invoice_badge_color = "info"; $invoice_badge_color = "info";
}elseif($invoice_status == "Partial"){ }elseif ($invoice_status == "Partial") {
$invoice_badge_color = "primary"; $invoice_badge_color = "primary";
}elseif($invoice_status == "Paid"){ }elseif ($invoice_status == "Paid") {
$invoice_badge_color = "success"; $invoice_badge_color = "success";
}elseif($invoice_status == "Cancelled"){ }elseif ($invoice_status == "Cancelled") {
$invoice_badge_color = "danger"; $invoice_badge_color = "danger";
}else{ }else{
$invoice_badge_color = "secondary"; $invoice_badge_color = "secondary";
@ -337,7 +337,7 @@
<a class="dropdown-item" href="#" data-toggle="modal" data-target="#editInvoiceModal<?php echo $invoice_id; ?>">Edit</a> <a class="dropdown-item" href="#" data-toggle="modal" data-target="#editInvoiceModal<?php echo $invoice_id; ?>">Edit</a>
<a class="dropdown-item" href="#" data-toggle="modal" data-target="#addInvoiceCopyModal<?php echo $invoice_id; ?>">Copy</a> <a class="dropdown-item" href="#" data-toggle="modal" data-target="#addInvoiceCopyModal<?php echo $invoice_id; ?>">Copy</a>
<div class="dropdown-divider"></div> <div class="dropdown-divider"></div>
<?php if(!empty($config_smtp_host)){ ?> <?php if (!empty($config_smtp_host)) { ?>
<a class="dropdown-item" href="post.php?email_invoice=<?php echo $invoice_id; ?>">Send</a> <a class="dropdown-item" href="post.php?email_invoice=<?php echo $invoice_id; ?>">Send</a>
<div class="dropdown-divider"></div> <div class="dropdown-divider"></div>
<?php } ?> <?php } ?>

8
item_edit_modal.php
View File

@ -8,9 +8,9 @@
</button> </button>
</div> </div>
<form action="post.php" method="post" autocomplete="off"> <form action="post.php" method="post" autocomplete="off">
<?php if(isset($invoice_id)){ ?> <?php if (isset($invoice_id)) { ?>
<input type="hidden" name="invoice_id" value="<?php echo $invoice_id; ?>"> <input type="hidden" name="invoice_id" value="<?php echo $invoice_id; ?>">
<?php }elseif(isset($quote_id)){ ?> <?php }elseif (isset($quote_id)) { ?>
<input type="hidden" name="quote_id" value="<?php echo $quote_id; ?>"> <input type="hidden" name="quote_id" value="<?php echo $quote_id; ?>">
<?php }else{ ?> <?php }else{ ?>
<input type="hidden" name="recurring_id" value="<?php echo $recurring_id; ?>"> <input type="hidden" name="recurring_id" value="<?php echo $recurring_id; ?>">
@ -78,12 +78,12 @@
<?php <?php
$taxes_sql = mysqli_query($mysqli,"SELECT * FROM taxes WHERE (tax_archived_at > '$item_created_at' OR tax_archived_at IS NULL) AND company_id = $session_company_id ORDER BY tax_name ASC"); $taxes_sql = mysqli_query($mysqli,"SELECT * FROM taxes WHERE (tax_archived_at > '$item_created_at' OR tax_archived_at IS NULL) AND company_id = $session_company_id ORDER BY tax_name ASC");
while($row = mysqli_fetch_array($taxes_sql)){ while ($row = mysqli_fetch_array($taxes_sql)) {
$tax_id_select = $row['tax_id']; $tax_id_select = $row['tax_id'];
$tax_name = htmlentities($row['tax_name']); $tax_name = htmlentities($row['tax_name']);
$tax_percent = $row['tax_percent']; $tax_percent = $row['tax_percent'];
?> ?>
<option <?php if($tax_id_select == $tax_id){ echo "selected"; } ?> value="<?php echo $tax_id_select; ?>"><?php echo "$tax_name $tax_percent%"; ?></option> <option <?php if ($tax_id_select == $tax_id) { echo "selected"; } ?> value="<?php echo $tax_id_select; ?>"><?php echo "$tax_name $tax_percent%"; ?></option>
<?php <?php
} }

8
login.php
View File

@ -1,6 +1,6 @@
<?php <?php
if(!file_exists('config.php')){ if (!file_exists('config.php')) {
header("Location: setup.php"); header("Location: setup.php");
exit; exit;
} }
@ -128,7 +128,7 @@ if (isset($_POST['login'])) {
// Note: Browsers don't accept cookies with SameSite None if they are not HTTPS. // Note: Browsers don't accept cookies with SameSite None if they are not HTTPS.
setcookie("user_extension_key", "$row[user_extension_key]", ['path' => '/', 'secure' => true, 'httponly' => true, 'samesite' => 'None']); setcookie("user_extension_key", "$row[user_extension_key]", ['path' => '/', 'secure' => true, 'httponly' => true, 'samesite' => 'None']);
// Set PHP session in DB so we can access the session encryption data (above) // Set PHP session in DB, so we can access the session encryption data (above)
$user_php_session = session_id(); $user_php_session = session_id();
mysqli_query($mysqli, "UPDATE users SET user_php_session = '$user_php_session' WHERE user_id = '$user_id'"); mysqli_query($mysqli, "UPDATE users SET user_php_session = '$user_php_session' WHERE user_id = '$user_id'");
} }
@ -271,11 +271,11 @@ if (isset($_POST['login'])) {
<!-- Prevents resubmit on refresh or back --> <!-- Prevents resubmit on refresh or back -->
<script> <script>
if(window.history.replaceState){ if (window.history.replaceState) {
window.history.replaceState(null,null,window.location.href); window.history.replaceState(null,null,window.location.href);
} }
</script> </script>
</body> </body>
</html> </html>

Some files were not shown because too many files have changed in this diff Show More