From a889f7d8791fdbf88ef88a060013e1e9c288e545 Mon Sep 17 00:00:00 2001
From: johnnyq <johnny@pittpc.com>
Date: Sat, 11 Mar 2023 17:15:46 -0500
Subject: [PATCH] Add back api/v1/assets/read.php somehow got wiped during the
 big update also added the ability to query asset by MAC address

---
 api/v1/assets/read.php | 47 ++++++++++++++++++++++++++++++++++++++++++
 1 file changed, 47 insertions(+)

diff --git a/api/v1/assets/read.php b/api/v1/assets/read.php
index e69de29b..5b1727a6 100644
--- a/api/v1/assets/read.php
+++ b/api/v1/assets/read.php
@@ -0,0 +1,47 @@
+<?php
+
+require_once('../validate_api_key.php');
+require_once('../require_get_method.php');
+
+// Asset via ID (single)
+if (isset($_GET['asset_id'])) {
+    $id = intval($_GET['asset_id']);
+    $sql = mysqli_query($mysqli, "SELECT * FROM assets WHERE asset_id = '$id' AND asset_client_id LIKE '$client_id'");
+
+} elseif (isset($_GET['asset_type'])) {
+    // Asset query via type
+
+    $type = mysqli_real_escape_string($mysqli, ucfirst($_GET['asset_type']));
+    $sql = mysqli_query($mysqli, "SELECT * FROM assets WHERE asset_type = '$type' AND asset_client_id LIKE '$client_id' ORDER BY asset_id LIMIT $limit OFFSET $offset");
+
+} elseif (isset($_GET['asset_name'])) {
+    // Asset query via name
+
+    $name = mysqli_real_escape_string($mysqli, $_GET['asset_name']);
+    $sql = mysqli_query($mysqli, "SELECT * FROM assets WHERE asset_name = '$name' AND asset_client_id LIKE '$client_id' ORDER BY asset_id LIMIT $limit OFFSET $offset");
+
+} elseif (isset($_GET['asset_serial'])) {
+    // Asset query via serial
+
+    $serial = mysqli_real_escape_string($mysqli, $_GET['asset_serial']);
+    $sql = mysqli_query($mysqli, "SELECT * FROM assets WHERE asset_serial = '$serial' AND asset_client_id LIKE '$client_id' ORDER BY asset_id LIMIT $limit OFFSET $offset");
+
+} elseif (isset($_GET['client_id'])) {
+    // Asset query via client ID
+
+    $sql = mysqli_query($mysqli, "SELECT * FROM assets WHERE asset_client_id LIKE '$client_id' ORDER BY asset_id LIMIT $limit OFFSET $offset");
+
+} elseif (isset($_GET['asset_mac'])) {
+    // Asset query via mac
+
+    $mac = mysqli_real_escape_string($mysqli, $_GET['asset_mac']);
+    $sql = mysqli_query($mysqli, "SELECT * FROM assets WHERE asset_mac = '$mac' AND asset_client_id LIKE '$client_id' ORDER BY asset_id LIMIT $limit OFFSET $offset");
+
+}
+// All assets
+else {
+    $sql = mysqli_query($mysqli, "SELECT * FROM assets WHERE asset_client_id LIKE '$client_id' ORDER BY asset_id LIMIT $limit OFFSET $offset");
+}
+
+// Output
+require_once("../read_output.php");
\ No newline at end of file