From c3dd9a80b617120f96b2f5fb9374271273d18dc9 Mon Sep 17 00:00:00 2001
From: Marcus Hill <bcf8c9f2@opayq.com>
Date: Sat, 30 Sep 2023 15:33:48 +0100
Subject: [PATCH] Fix client delete function

---
 client_delete_modal.php | 20 ++++++++++++++++++++
 inc_client_top_head.php | 11 ++++++-----
 post/client.php         |  4 +---
 3 files changed, 27 insertions(+), 8 deletions(-)
 create mode 100644 client_delete_modal.php

diff --git a/client_delete_modal.php b/client_delete_modal.php
new file mode 100644
index 00000000..0be54ebc
--- /dev/null
+++ b/client_delete_modal.php
@@ -0,0 +1,20 @@
+<div class="modal" id="deleteClientModal<?php echo $client_id; ?>" tabindex="-1">
+    <div class="modal-dialog">
+        <div class="modal-content">
+            <div class="modal-body">
+                <div class="mb-4" style="text-align: center;">
+                    <i class="far fa-10x fa-times-circle text-danger mb-3 mt-3"></i>
+                    <h2>Are you really, really, really sure?</h2>
+                    <h6 class="mb-4 text-secondary">Do you really want to <b>delete <?php echo $client_name; ?> and ALL associated data</b>. This includes <?php echo $client_name; ?>'s documents, tickets, files, financial data, logs, etc. <br><br>This process cannot be undone.</h6>
+                    <div class="form-group">
+                        <input type="hidden" id="clientName<?php echo $client_id ?>" value="<?php echo $client_name; ?>">
+                        <input class="form-control" type="text" id="clientNameProvided<?php echo $client_id ?>" onkeyup="validateClientNameDelete(<?php echo $client_id ?>)" placeholder="Type '<?php echo $client_name; ?>' to confirm data deletion">
+                    </div>
+                    <button type="button" class="btn btn-outline-secondary btn-lg px-5 mr-4" data-dismiss="modal">Cancel</button>
+                    <a class="btn btn-danger btn-lg px-5 disabled" id="clientDeleteButton<?php echo $client_id ?>" href="post.php?delete_client=<?php echo $client_id; ?>&csrf_token=<?php echo $_SESSION['csrf_token'] ?>">Yes, Delete!</a>
+                </div>
+            </div>
+        </div>
+    </div>
+</div>
+<script src="js/client_delete_confirm.js"></script>
diff --git a/inc_client_top_head.php b/inc_client_top_head.php
index 4cae0101..8a71afe3 100644
--- a/inc_client_top_head.php
+++ b/inc_client_top_head.php
@@ -24,7 +24,7 @@
                         </a>
                         <?php if ($session_user_role == 3) { ?>
                         <div class="dropdown-divider"></div>
-                        <a class="dropdown-item text-danger text-bold confirm-link" href="#" data-toggle="modal" data-target="#deleteClientModal<?php echo $client_id; ?>">
+                        <a class="dropdown-item text-danger text-bold" href="#" data-toggle="modal" data-target="#deleteClientModal<?php echo $client_id; ?>">
                             <i class="fas fa-fw fa-trash mr-2"></i>Delete Client
                         </a>
                         <?php } ?>
@@ -33,11 +33,11 @@
                 <?php } ?>
             </div>
         </div>
-        
+
         <div class="collapse show" id="clientHeader">
 
             <div class="row">
-                
+
                 <div class="col-md border-top">
                     <h5 class="text-secondary mt-1">Primary Location</h5>
                     <?php if (!empty($location_address)) { ?>
@@ -131,7 +131,7 @@
                 </div>
                 <?php } ?>
 
-                
+
                 <div class="col-md border-left border-top">
                     <h5 class="text-secondary mt-1">Support</h5>
                     <div class="ml-1 text-secondary">Open Tickets
@@ -146,7 +146,7 @@
                     <?php echo $client_tags_display; ?>
                     <?php } ?>
                 </div>
-                
+
             </div>
         </div>
     </div>
@@ -155,6 +155,7 @@
 <?php
 
 require_once("client_edit_modal.php");
+require_once("client_delete_modal.php");
 require_once("client_download_pdf_modal.php");
 require_once("category_quick_add_modal.php");
 
diff --git a/post/client.php b/post/client.php
index de156d44..dba60b21 100644
--- a/post/client.php
+++ b/post/client.php
@@ -176,12 +176,10 @@ if (isset($_GET['undo_archive_client'])) {
 
 if (isset($_GET['delete_client'])) {
 
-    // Removing this function from the frontend as this is extremely destructive. Its best to use Archive, use this for development or test purposes only.
-
     validateAdminRole();
 
     // CSRF Check
-    // validateCSRFToken($_GET['csrf_token']);
+    validateCSRFToken($_GET['csrf_token']);
 
     $client_id = intval($_GET['delete_client']);