From 7b2f608355144f236afc3ea237128cd7d64976dc Mon Sep 17 00:00:00 2001
From: root <root@pittpc-crm.localDomain>
Date: Wed, 29 May 2019 14:14:43 -0400
Subject: [PATCH] Added an API along with a an API key

---
 alerts.php           | 13 +++++++++++-
 api.php              | 49 ++++++++++++++++++++++++++++++++++++++++++++
 config.php           |  2 ++
 post.php             |  3 ++-
 settings-general.php | 12 ++++++++++-
 5 files changed, 76 insertions(+), 3 deletions(-)
 create mode 100644 api.php

diff --git a/alerts.php b/alerts.php
index 65e4f347..09f9de83 100644
--- a/alerts.php
+++ b/alerts.php
@@ -1,11 +1,22 @@
 <?php include("header.php"); ?>
 
-<?php $sql = mysqli_query($mysqli,"SELECT * FROM alerts ORDER BY alert_id DESC"); ?>
+<?php
+if($_GET['status'] == "archived"){
+  $where_clause = "> 0";
+}else{
+  $where_clause = "= 0";
+}
+
+?>
+
+<?php $sql = mysqli_query($mysqli,"SELECT * FROM alerts WHERE alert_ack_date $where_clause ORDER BY alert_id DESC"); ?>
 
 
 <div class="card mb-3">
   <div class="card-header">
     <h6 class="float-left mt-1"><i class="fa fa-exclamation-triangle"></i> Alerts</h6>
+    <a href="?status=new" class="btn btn-primary btn-sm badge-pill float-right">New</a>
+    <a href="?status=archived" class="btn btn-primary btn-sm badge-pill float-right mr-2">Archived</a>
   </div>
   <div class="card-body">
     <div class="table-responsive">
diff --git a/api.php b/api.php
new file mode 100644
index 00000000..4df57743
--- /dev/null
+++ b/api.php
@@ -0,0 +1,49 @@
+<?php
+
+include("config.php");
+
+if($_GET['api_key'] == $config_api_key){
+
+    if(isset($_GET['cid'])){
+
+        $cid = intval($_GET['cid']);
+
+        $sql = mysqli_query($mysqli,"SELECT * FROM clients WHERE client_phone = $cid");
+
+        $row = mysqli_fetch_array($sql);
+        $client_name = $row['client_name'];
+
+        echo $client_name;
+
+    }
+
+    if(isset($_GET['client_numbers'])){
+
+        $sql = mysqli_query($mysqli,"SELECT * FROM clients;");
+
+        while($row = mysqli_fetch_array($sql)){
+            $client_name = $row['client_name'];
+            $client_phone = $row['client_phone'];
+
+            echo "$client_name - $client_phone<br>";
+        }
+
+    }
+
+    if(isset($_GET['client_emails'])){
+
+        $sql = mysqli_query($mysqli,"SELECT * FROM clients;");
+
+        while($row = mysqli_fetch_array($sql)){
+            $client_name = $row['client_name'];
+            $client_email = $row['client_email'];
+
+            echo "$client_name - $client_email<br>";
+        }
+
+    }
+}else{
+    echo "<h1> Ma!! You've been BAAAAADDDDD!! </h1>";
+}
+
+?>
\ No newline at end of file
diff --git a/config.php b/config.php
index d60a14c9..48cd7a97 100644
--- a/config.php
+++ b/config.php
@@ -43,6 +43,8 @@
 	$config_mail_from_name = $row['config_mail_from_name'];
 	$config_account_balance_threshold = $row['config_account_balance_threshold'];
 
+	$config_api_key = $row['config_api_key'];
+
 	$_SESSION['alert_message'] = '';
 	$_SESSION['alert_type'] = "warning";
 
diff --git a/post.php b/post.php
index 30fd8736..f4cac3cb 100644
--- a/post.php
+++ b/post.php
@@ -19,8 +19,9 @@ if(isset($_POST['edit_general_settings'])){
 
     $config_start_page = strip_tags(mysqli_real_escape_string($mysqli,$_POST['config_start_page']));
     $config_account_balance_threshold = strip_tags(mysqli_real_escape_string($mysqli,$_POST['config_account_balance_threshold']));
+    $config_api_key = strip_tags(mysqli_real_escape_string($mysqli,$_POST['config_api_key']));
 
-    mysqli_query($mysqli,"UPDATE settings SET config_start_page = '$config_start_page', config_account_balance_threshold = '$config_account_balance_threshold'");
+    mysqli_query($mysqli,"UPDATE settings SET config_start_page = '$config_start_page', config_account_balance_threshold = '$config_account_balance_threshold', config_api_key = '$config_api_key'");
 
     header("Location: " . $_SERVER["HTTP_REFERER"]);
 
diff --git a/settings-general.php b/settings-general.php
index 4b0203e7..c544a5bc 100644
--- a/settings-general.php
+++ b/settings-general.php
@@ -23,7 +23,7 @@
         </div>
       </div>
 
-      <div class="form-group mb-5">
+      <div class="form-group">
         <label>Account Threshold</label>
         <div class="input-group">
           <div class="input-group-prepend">
@@ -32,6 +32,16 @@
           <input type="text" class="form-control" name="config_account_balance_threshold" placeholder="Set an alert for dollar amount" value="<?php echo $config_account_balance_threshold; ?>" required>
         </div>
       </div>
+
+      <div class="form-group mb-5">
+        <label>API Key</label>
+        <div class="input-group">
+          <div class="input-group-prepend">
+            <span class="input-group-text"><i class="fa fa-fw fa-lock"></i></span>
+          </div>
+          <input type="text" class="form-control" name="config_api_key" placeholder="No spaces only numbers and letters" value="<?php echo $config_api_key; ?>">
+        </div>
+      </div>
       
       <hr>