diff --git a/post.php b/post.php index 51621d29..f0917611 100644 --- a/post.php +++ b/post.php @@ -6181,8 +6181,10 @@ if(isset($_POST['add_ticket'])){ $subject = trim(strip_tags(mysqli_real_escape_string($mysqli,$_POST['subject']))); $priority = trim(strip_tags(mysqli_real_escape_string($mysqli,$_POST['priority']))); $details = trim(mysqli_real_escape_string($mysqli,$purifier->purify(html_entity_decode($_POST['details'])))); + $vendor_id = intval($_POST['vendor']); $asset_id = intval($_POST['asset']); + // If no contact is selected automatically choose the primary contact for the client if($client_id > 0 && $contact == 0){ $sql = mysqli_query($mysqli,"SELECT primary_contact FROM clients WHERE client_id = $client_id AND company_id = $session_company_id"); $row = mysqli_fetch_array($sql); @@ -6194,7 +6196,7 @@ if(isset($_POST['add_ticket'])){ $new_config_ticket_next_number = $config_ticket_next_number + 1; mysqli_query($mysqli,"UPDATE settings SET config_ticket_next_number = $new_config_ticket_next_number WHERE company_id = $session_company_id"); - mysqli_query($mysqli,"INSERT INTO tickets SET ticket_prefix = '$config_ticket_prefix', ticket_number = $ticket_number, ticket_subject = '$subject', ticket_details = '$details', ticket_priority = '$priority', ticket_status = 'Open', ticket_asset_id = $asset_id, ticket_created_by = $session_user_id, ticket_assigned_to = $assigned_to, ticket_contact_id = $contact, ticket_client_id = $client_id, company_id = $session_company_id"); + mysqli_query($mysqli,"INSERT INTO tickets SET ticket_prefix = '$config_ticket_prefix', ticket_number = $ticket_number, ticket_subject = '$subject', ticket_details = '$details', ticket_priority = '$priority', ticket_status = 'Open', ticket_vendor_id = $vendor_id, ticket_asset_id = $asset_id, ticket_created_by = $session_user_id, ticket_assigned_to = $assigned_to, ticket_contact_id = $contact, ticket_client_id = $client_id, company_id = $session_company_id"); $id = mysqli_insert_id($mysqli); // E-mail client @@ -6349,9 +6351,10 @@ if(isset($_POST['edit_ticket'])){ $subject = trim(strip_tags(mysqli_real_escape_string($mysqli,$_POST['subject']))); $priority = trim(strip_tags(mysqli_real_escape_string($mysqli,$_POST['priority']))); $details = trim(mysqli_real_escape_string($mysqli,$purifier->purify(html_entity_decode($_POST['details'])))); + $vendor_id = intval($_POST['vendor']); $asset_id = intval($_POST['asset']); - mysqli_query($mysqli,"UPDATE tickets SET ticket_subject = '$subject', ticket_priority = '$priority', ticket_details = '$details', ticket_assigned_to = $assigned_to, ticket_contact_id = $contact_id, ticket_asset_id = $asset_id WHERE ticket_id = $ticket_id AND company_id = $session_company_id"); + mysqli_query($mysqli,"UPDATE tickets SET ticket_subject = '$subject', ticket_priority = '$priority', ticket_details = '$details', ticket_assigned_to = $assigned_to, ticket_contact_id = $contact_id, ticket_vendor_id = $vendor_id, ticket_asset_id = $asset_id WHERE ticket_id = $ticket_id AND company_id = $session_company_id"); //Logging mysqli_query($mysqli,"INSERT INTO logs SET log_type = 'Ticket', log_action = 'Modify', log_description = '$subject', log_ip = '$session_ip', log_user_agent = '$session_user_agent', log_user_id = $session_user_id, company_id = $session_company_id"); diff --git a/ticket.php b/ticket.php index b2b8dc31..ec7749a2 100644 --- a/ticket.php +++ b/ticket.php @@ -9,6 +9,7 @@ if (isset($_GET['ticket_id'])) { LEFT JOIN users ON ticket_assigned_to = user_id LEFT JOIN locations ON ticket_location_id = location_id LEFT JOIN assets ON ticket_asset_id = asset_id + LEFT JOIN vendors ON ticket_vendor_id = vendor_id WHERE ticket_id = $ticket_id AND tickets.company_id = $session_company_id" ); @@ -80,6 +81,20 @@ if (isset($_GET['ticket_id'])) { $asset_os = htmlentities($row['asset_os']); $asset_warranty_expire = $row['asset_warranty_expire']; + $vendor_id = $row['ticket_vendor_id']; + $vendor_name = htmlentities($row['vendor_name']); + $vendor_description = htmlentities($row['vendor_description']); + $vendor_account_number = htmlentities($row['vendor_account_number']); + $vendor_contact_name = htmlentities($row['vendor_contact_name']); + $vendor_phone = formatPhoneNumber($row['vendor_phone']); + $vendor_extension = htmlentities($row['vendor_extension']); + $vendor_email = htmlentities($row['vendor_email']); + $vendor_website = htmlentities($row['vendor_website']); + $vendor_hours = htmlentities($row['vendor_hours']); + $vendor_sla = htmlentities($row['vendor_sla']); + $vendor_code = htmlentities($row['vendor_code']); + $vendor_notes = htmlentities($row['vendor_notes']); + $location_name = htmlentities($row['location_name']); $location_address = htmlentities($row['location_address']); $location_city = htmlentities($row['location_city']); @@ -527,6 +542,39 @@ if (isset($_GET['ticket_id'])) { + + +
+ + +