From c489a85fc07dc2feb9efc1c2f8bed65f1055dadd Mon Sep 17 00:00:00 2001
From: Marcus Hill <bcf8c9f2@opayq.com>
Date: Sat, 9 Sep 2023 15:28:18 +0100
Subject: [PATCH] API: Tickets

Add Create API endpoint for tickets.

Supported fields:
- Client ID
- Client Contact
- Subject
- Details
- Priority
- Agent assignee
- Vendor ID
- Vendor ticket ref
---
 api/v1/tickets/create.php       | 48 ++++++++++++++++++++++++++
 api/v1/tickets/ticket_model.php | 61 +++++++++++++++++++++++++++++++++
 2 files changed, 109 insertions(+)
 create mode 100644 api/v1/tickets/create.php
 create mode 100644 api/v1/tickets/ticket_model.php

diff --git a/api/v1/tickets/create.php b/api/v1/tickets/create.php
new file mode 100644
index 00000000..2478df7a
--- /dev/null
+++ b/api/v1/tickets/create.php
@@ -0,0 +1,48 @@
+<?php
+
+require_once('../validate_api_key.php');
+require_once('../require_post_method.php');
+
+// Ticket-related settings
+require_once("../../../get_settings.php");
+$sql = mysqli_query($mysqli, "SELECT company_name, company_phone FROM companies WHERE company_id = 1");
+$row = mysqli_fetch_array($sql);
+$company_name = $row['company_name'];
+$company_phone = formatPhoneNumber($row['company_phone']);
+
+// Parse Info
+$ticket_row = false; // Creation, not an update
+require_once('ticket_model.php');
+
+// Default
+$insert_id = false;
+
+if (!empty($subject) && !empty($client_id)) {
+
+    // If no contact is selected automatically choose the primary contact for the client
+    if ($contact == 0) {
+        $sql = mysqli_query($mysqli,"SELECT contact_id FROM contacts WHERE contact_client_id = $client_id AND contact_primary = 1");
+        $row = mysqli_fetch_array($sql);
+        $contact = intval($row['contact_id']);
+    }
+
+    //Get the next Ticket Number and add 1 for the new ticket number
+    $ticket_number = $config_ticket_next_number;
+    $new_config_ticket_next_number = $config_ticket_next_number + 1;
+    mysqli_query($mysqli,"UPDATE settings SET config_ticket_next_number = $new_config_ticket_next_number WHERE company_id = 1");
+
+    // Insert ticket
+    $insert_sql = mysqli_query($mysqli,"INSERT INTO tickets SET ticket_prefix = '$config_ticket_prefix', ticket_number = $ticket_number, ticket_subject = '$subject', ticket_details = '$details', ticket_priority = '$priority', ticket_status = 'Open', ticket_vendor_ticket_number = '$vendor_ticket_number', ticket_vendor_id = $vendor_id, ticket_created_by = 0, ticket_assigned_to = $assigned_to, ticket_contact_id = $contact, ticket_client_id = $client_id");
+
+    // Check insert & get insert ID
+    if ($insert_sql) {
+        $insert_id = mysqli_insert_id($mysqli);
+        // Logging
+        mysqli_query($mysqli, "INSERT INTO logs SET log_type = 'Ticket', log_action = 'Create', log_description = 'Created ticket $config_ticket_prefix$ticket_number $subject via API ($api_key_name)', log_ip = '$ip', log_user_agent = '$user_agent', log_client_id = $client_id");
+        mysqli_query($mysqli, "INSERT INTO logs SET log_type = 'API', log_action = 'Success', log_description = 'Created ticket $config_ticket_prefix$ticket_number via API ($api_key_name)', log_ip = '$ip', log_user_agent = '$user_agent', log_client_id = $client_id");
+    }
+
+}
+
+// Output
+require_once('../create_output.php');
diff --git a/api/v1/tickets/ticket_model.php b/api/v1/tickets/ticket_model.php
new file mode 100644
index 00000000..c17379f3
--- /dev/null
+++ b/api/v1/tickets/ticket_model.php
@@ -0,0 +1,61 @@
+<?php
+
+// Variable assignment from POST (or: blank/from DB is updating)
+
+if (isset($_POST['ticket_contact_id'])) {
+    $contact = intval($_POST['ticket_contact_id']);
+} elseif ($ticket_row) {
+    $contact = $ticket_row['ticket_contact_id'];
+} else {
+    $contact = '0';
+}
+
+if (isset($_POST['ticket_subject'])) {
+    $subject = sanitizeInput($_POST['ticket_subject']);
+} elseif ($ticket_row) {
+    $subject = $ticket_row['ticket_subject'];
+} else {
+    $subject = '';
+}
+
+
+if (isset($_POST['ticket_priority'])) {
+    $priority = sanitizeInput($_POST['ticket_priority']);
+} elseif ($ticket_row) {
+    $priority = $ticket_row['ticket_priority'];
+} else {
+    $priority = 'Low';
+}
+
+
+if (isset($_POST['ticket_details'])) {
+    $details = sanitizeInput($_POST['ticket_details']);
+} elseif ($ticket_row) {
+    $details = $ticket_row['ticket_details'];
+} else {
+    $details = '< blank >';
+}
+
+if (isset($_POST['ticket_vendor_id'])) {
+    $vendor_id = intval($_POST['ticket_vendor_id']);
+} elseif ($ticket_row) {
+    $vendor_id = $ticket_row['ticket_vendor_id'];
+} else {
+    $vendor_id = '0';
+}
+
+if (isset($_POST['ticket_vendor_ticket_id'])) {
+    $vendor_ticket_number = intval($_POST['ticket_vendor_ticket_id']);
+} elseif ($ticket_row) {
+    $vendor_ticket_number = $ticket_row['ticket_vendor_ticket_id'];
+} else {
+    $vendor_ticket_number = '0';
+}
+
+if (isset($_POST['ticket_assigned_to'])) {
+    $assigned_to = intval($_POST['ticket_assigned_to']);
+} elseif ($ticket_row) {
+    $assigned_to = $ticket_row['ticket_assigned_to'];
+} else {
+    $assigned_to = '0';
+}