Move portal to client and rename and reorganize some client portal files

client/document.php

@@ -0,0 +1,71 @@
+<?php
+/*
+ * Client Portal
+ * Docs for PTC / technical contacts
+ */
+
+header("Content-Security-Policy: default-src 'self'; img-src 'self' data:");
+
+require_once "includes/inc_all.php";
+
+if ($session_contact_primary == 0 && !$session_contact_is_technical_contact) {
+    header("Location: post.php?logout");
+    exit();
+}
+
+//Initialize the HTML Purifier to prevent XSS
+require_once "../plugins/htmlpurifier/HTMLPurifier.standalone.php";
+
+$purifier_config = HTMLPurifier_Config::createDefault();
+$purifier_config->set('Cache.DefinitionImpl', null); // Disable cache by setting a non-existent directory or an invalid one
+$purifier_config->set('URI.AllowedSchemes', ['data' => true, 'src' => true, 'http' => true, 'https' => true]);
+$purifier = new HTMLPurifier($purifier_config);
+
+// Check for a document ID
+if (!isset($_GET['id']) && !intval($_GET['id'])) {
+    header("Location: documents.php");
+    exit();
+}
+
+$document_id = intval($_GET['id']);
+$sql_document = mysqli_query($mysqli,
+        "SELECT document_id, document_name, document_content
+        FROM documents
+        WHERE document_id = $document_id AND document_client_visible = 1 AND document_client_id = $session_client_id AND document_template = 0 AND document_archived_at IS NULL
+        LIMIT 1"
+);
+
+$row = mysqli_fetch_array($sql_document);
+
+if ($row) {
+    $document_id = intval($row['document_id']);
+    $document_name = nullable_htmlentities($row['document_name']);
+    $document_content = $purifier->purify($row['document_content']);
+} else {
+    header("Location: post.php?logout");
+    exit();
+}
+
+?>
+
+<ol class="breadcrumb d-print-none">
+    <li class="breadcrumb-item">
+        <a href="index.php">Home</a>
+    </li>
+    <li class="breadcrumb-item">
+        <a href="documents.php">Documents</a>
+    </li>
+    <li class="breadcrumb-item active">
+        Document
+    </li>
+</ol>
+
+<div class="card">
+    <div class="card-body prettyContent">
+        <h3><?php echo $document_name; ?></h3>
+        <?php echo $document_content; ?>
+    </div>
+</div>
+
+<?php
+require_once "includes/footer.php";