diff --git a/blank.php b/blank.php index f09e0d6d..a9909909 100644 --- a/blank.php +++ b/blank.php @@ -2,10 +2,10 @@
    -
  1. - Dashboard -
    2. -
  2. Blank Page
    3. +
  3. + Dashboard +
    4. +
  4. Blank Page
diff --git a/client_certificates.php b/client_certificates.php index 852ba6f6..d5ea31c7 100644 --- a/client_certificates.php +++ b/client_certificates.php @@ -1,11 +1,10 @@ - -
-
-

Certificates

-
- +
+

Certificates

+
+ +
-
-
-
- -
+
+ + +
-
-
- -
- -
-
-
- -
-
- Export -
-
- -
- -
-
- - "> - - - - - - - - - - - - - - - - - - +
+
+ Export +
+
- -
NameDomainIssued ByExpireAction
)" data-target="#editCertificateModal"> -
- -
- )" data-target="#editCertificateModal">Edit - -
- Delete - +
+
+ +
+ +
+
-
-
+
+ +
+
+ + "> + + + + + + + + + + + + + + + + + + + + + +
NameDomainIssued ByExpireAction
)" data-target="#editCertificateModal"> +
+ +
+ )" data-target="#editCertificateModal">Edit + +
+ Delete + +
+
+
+
+
- -
+ - + + $sb, 'o' => $o))); -$sql = mysqli_query($mysqli, "SELECT SQL_CALC_FOUND_ROWS * FROM locations - WHERE location_client_id = $client_id - AND location_archived_at IS NULL - AND (location_name LIKE '%$q%' OR location_address LIKE '%$q%' OR location_phone LIKE '%$phone_query%') - ORDER BY $sb $o LIMIT $record_from, $record_to"); +$sql = mysqli_query( + $mysqli, + "SELECT SQL_CALC_FOUND_ROWS * FROM locations + WHERE location_client_id = $client_id + AND location_archived_at IS NULL + AND (location_name LIKE '%$q%' OR location_address LIKE '%$q%' OR location_phone LIKE '%$phone_query%') + ORDER BY $sb $o LIMIT $record_from, $record_to"); $num_rows = mysqli_fetch_row(mysqli_query($mysqli, "SELECT FOUND_ROWS()")); ?>
-
-

Locations

-
- +
+

Locations

+
+ +
-
-
-
- -
- -
-
- -
- -
-
-
+
+ + +
-
-
- Export - -
-
- -
- -
-
- - "> - - - - - - - - - - Primary Location

"; - }else{ - $primary_location_display = ""; - } - - ?> - - - - - - - - +
+
+ Export + +
+
- -
NameAddressPhoneHoursAction
- - - - " target="_blank">
 -
- -
- Edit - -
- Archive - Delete - +
+
+ +
+ +
+
-
- -
+
+ +
+
+ + "> + + + + + + + + + + Primary Location

"; + } else { + $primary_location_display = ""; + } + + ?> + + + + + + + + + + + +
NameAddressPhoneHoursAction
+ + + + " target="_blank">
 +
+ +
+ Edit + +
+ Archive + Delete + +
+
+ +
+
+
- -
- - - +require_once("client_location_add_modal.php"); +require_once("client_location_import_modal.php"); +require_once("footer.php"); diff --git a/client_logins.php b/client_logins.php index be55ac01..8be4d70a 100644 --- a/client_logins.php +++ b/client_logins.php @@ -1,11 +1,11 @@ - - $sb, ' $sql = mysqli_query( $mysqli, - "SELECT SQL_CALC_FOUND_ROWS * FROM logins + "SELECT SQL_CALC_FOUND_ROWS * FROM logins WHERE login_client_id = $client_id AND (login_name LIKE '%$q%' OR login_uri LIKE '%$q%') ORDER BY $sb $o LIMIT $record_from, $record_to" @@ -23,154 +23,151 @@ $num_rows = mysqli_fetch_row(mysqli_query($mysqli, "SELECT FOUND_ROWS()")); ?> -
+
-

Passwords

-
- -
+

Passwords

+
+ +
-
- -
+ + +
-
-
- -
- -
-
-
- -
-
- Export - -
-
- -
- -
-
- - "> - - - - - - - - - - - "; - } - $login_username = htmlentities(decryptLoginEntry($row['login_username'])); - if (empty($login_username)) { - $login_username_display = "-"; - }else{ - $login_username_display = "$login_username"; - } - $login_password = htmlentities(decryptLoginEntry($row['login_password'])); - $login_otp_secret = htmlentities($row['login_otp_secret']); - $login_id_with_secret = '"' . $row['login_id'] . '","' . $row['login_otp_secret'] . '"'; - if (empty($login_otp_secret)) { - $otp_display = "-"; - }else{ - $otp_display = " Hover.."; - } - $login_note = htmlentities($row['login_note']); - $login_important = $row['login_important']; - $login_contact_id = $row['login_contact_id']; - $login_vendor_id = $row['login_vendor_id']; - $login_asset_id = $row['login_asset_id']; - $login_software_id = $row['login_software_id']; - - ?> - - - - - - - - - +
+ Export + +
+ - include("client_login_edit_modal.php"); - } + + +
+
+
NameUsernamePasswordOTPURIAction
- - - - - - - -
- -
- Edit - )">Share - -
- Delete - -
+
+
+ +
+ +
+
-
+ "> + + + + + + + + + + + + while ($row = mysqli_fetch_array($sql)) { + $login_id = $row['login_id']; + $login_name = htmlentities($row['login_name']); + $login_uri = htmlentities($row['login_uri']); + if (empty($login_uri)) { + $login_uri_display = "-"; + } else { + $login_uri_display = "$login_uri"; + } + $login_username = htmlentities(decryptLoginEntry($row['login_username'])); + if (empty($login_username)) { + $login_username_display = "-"; + } else { + $login_username_display = "$login_username"; + } + $login_password = htmlentities(decryptLoginEntry($row['login_password'])); + $login_otp_secret = htmlentities($row['login_otp_secret']); + $login_id_with_secret = '"' . $row['login_id'] . '","' . $row['login_otp_secret'] . '"'; + if (empty($login_otp_secret)) { + $otp_display = "-"; + } else { + $otp_display = " Hover.."; + } + $login_note = htmlentities($row['login_note']); + $login_important = $row['login_important']; + $login_contact_id = $row['login_contact_id']; + $login_vendor_id = $row['login_vendor_id']; + $login_asset_id = $row['login_asset_id']; + $login_software_id = $row['login_software_id']; - -
NameUsernamePasswordOTPURIAction
-
- + ?> + + + + + + + + + + + + + + +
+ +
+ Edit + )">Share + +
+ Delete + +
+
+ + + + + + + +
+
-
+
- + function generatePassword() { + document.getElementById("password").value = "" + } + - - +require_once("client_login_add_modal.php"); +require_once("share_modal.php"); +require_once("client_login_import_modal.php"); +require_once("footer.php"); diff --git a/client_logs.php b/client_logs.php index 35ce7b6f..75a76a62 100644 --- a/client_logs.php +++ b/client_logs.php @@ -2,15 +2,15 @@ require_once("inc_all_client.php"); if (!empty($_GET['sb'])) { - $sb = strip_tags(mysqli_real_escape_string($mysqli, $_GET['sb'])); + $sb = strip_tags(mysqli_real_escape_string($mysqli, $_GET['sb'])); } else { - $sb = "log_id"; + $sb = "log_id"; } // Reverse default sort if (!isset($_GET['o'])) { - $o = "DESC"; - $disp = "ASC"; + $o = "DESC"; + $disp = "ASC"; } //Rebuild URL @@ -30,88 +30,89 @@ $num_rows = mysqli_fetch_row(mysqli_query($mysqli, "SELECT FOUND_ROWS()")); ?>
-
-

Audit Logs

-
- -
-
- -
- -
-
- -
- -
-
-
- -
-
- -
-
-
-
- - "> - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
TimestampUserTypeActionDescriptionIP AddressUser AgentEntity ID
$log_user_browser"; ?>
+
+

Audit Logs

+
+ +
+
+ +
+ +
+
+ +
+ +
+
+
+ +
+
+ +
+
+
+
+ + "> + + + + + + + + + + + + + + + + + + + + + + + + + + + + +
TimestampUserTypeActionDescriptionIP AddressUser AgentEntity ID
$log_user_browser"; ?>
+
+
- -
- + $sb, 'o' => $o))); -$sql = mysqli_query($mysqli, "SELECT SQL_CALC_FOUND_ROWS * FROM networks - LEFT JOIN locations ON location_id = network_location_id - WHERE network_client_id = $client_id - AND (network_name LIKE '%$q%' OR network_vlan LIKE '%$q%' OR network LIKE '%$q%' OR network_gateway LIKE '%$q%' OR network_dhcp_range LIKE '%$q%' OR location_name LIKE '%$q%') - ORDER BY $sb $o LIMIT $record_from, $record_to"); +$sql = mysqli_query( + $mysqli, + "SELECT SQL_CALC_FOUND_ROWS * FROM networks + LEFT JOIN locations ON location_id = network_location_id + WHERE network_client_id = $client_id + AND (network_name LIKE '%$q%' OR network_vlan LIKE '%$q%' OR network LIKE '%$q%' OR network_gateway LIKE '%$q%' OR network_dhcp_range LIKE '%$q%' OR location_name LIKE '%$q%') + ORDER BY $sb $o LIMIT $record_from, $record_to" +); $num_rows = mysqli_fetch_row(mysqli_query($mysqli, "SELECT FOUND_ROWS()")); ?>
-
-

Networks

-
- +
+

Networks

+
+ +
-
-
-
- -
+
+ + +
-
-
- -
- -
-
-
- -
-
- Export -
-
- -
- -
-
- - "> - - - - - - - - - - - - - - - - - - - - - - +
+ Export +
+ - } + + +
+
+
NamevLANNetworkGatewayDHCP RangeLocationAction
- - )" data-target="#editNetworkModal"> -
- -
- )" data-target="#editNetworkModal">Edit - -
- Delete - +
+
+ +
+ +
+
-
-
+ "> + + + + + + + + + + + + + while ($row = mysqli_fetch_array($sql)) { + $network_id = $row['network_id']; + $network_name = htmlentities($row['network_name']); + $network_vlan = htmlentities($row['network_vlan']); + if (empty($network_vlan)) { + $network_vlan_display = "-"; + } else { + $network_vlan_display = $network_vlan; + } + $network = htmlentities($row['network']); + $network_gateway = htmlentities($row['network_gateway']); + $network_dhcp_range = htmlentities($row['network_dhcp_range']); + if (empty($network_dhcp_range)) { + $network_dhcp_range_display = "-"; + } else { + $network_dhcp_range_display = $network_dhcp_range; + } + $network_location_id = $row['network_location_id']; + $location_name = htmlentities($row['location_name']); + if (empty($location_name)) { + $location_name_display = "-"; + } else { + $location_name_display = $location_name; + } - -
NamevLANNetworkGatewayDHCP RangeLocationAction
+ ?> + + + + )" data-target="#editNetworkModal"> + + + + + + +
+ +
+ )" data-target="#editNetworkModal">Edit + +
+ Delete + +
+
+ + + + + + + +
+
- -
- + - $sb, 'o' => $o))); -$sql = mysqli_query($mysqli, "SELECT SQL_CALC_FOUND_ROWS * FROM payments - LEFT JOIN invoices ON payment_invoice_id = invoice_id - LEFT JOIN accounts ON payment_account_id = account_id - WHERE invoice_client_id = $client_id - AND (CONCAT(invoice_prefix,invoice_number) LIKE '%$q%' OR account_name LIKE '%$q%' OR payment_method LIKE '%$q%') - ORDER BY $sb $o LIMIT $record_from, $record_to"); +$sql = mysqli_query( + $mysqli, + "SELECT SQL_CALC_FOUND_ROWS * FROM payments + LEFT JOIN invoices ON payment_invoice_id = invoice_id + LEFT JOIN accounts ON payment_account_id = account_id + WHERE invoice_client_id = $client_id + AND (CONCAT(invoice_prefix,invoice_number) LIKE '%$q%' OR account_name LIKE '%$q%' OR payment_method LIKE '%$q%') + ORDER BY $sb $o LIMIT $record_from, $record_to" +); $num_rows = mysqli_fetch_row(mysqli_query($mysqli, "SELECT FOUND_ROWS()")); ?>
-
-

Payments

-
-
-
- -
- -
-
- -
- -
-
-
- -
-
- Export -
-
- -
-
-
-
- - "> - - - - - - - - - - - - - - - - - - - - - - - - - - - -
Payment DateInvoice DateInvoiceInvoice AmountPayment AmountMethodReferenceAccount
+
+

Payments

+
+
+
+ +
+ +
+
+ +
+ +
+
+
+ +
+
+ Export +
+
+ +
+
+
+
+ + "> + + + + + + + + + + + + + + + + + + + + + + + + + + + +
Payment DateInvoice DateInvoiceInvoice AmountPayment AmountMethodReferenceAccount
+
+
- -
- + $sb, 'o' => $o))); -$sql = mysqli_query($mysqli, "SELECT SQL_CALC_FOUND_ROWS * FROM quotes - LEFT JOIN categories ON category_id = quote_category_id - WHERE quote_client_id = $client_id - AND (CONCAT(quote_prefix,quote_number) LIKE '%$q%' OR quote_scope LIKE '%$q%' OR category_name LIKE '%$q%' OR quote_status LIKE '%$q%') - ORDER BY $sb $o LIMIT $record_from, $record_to"); +$sql = mysqli_query( + $mysqli, + "SELECT SQL_CALC_FOUND_ROWS * FROM quotes + LEFT JOIN categories ON category_id = quote_category_id + WHERE quote_client_id = $client_id + AND (CONCAT(quote_prefix,quote_number) LIKE '%$q%' OR quote_scope LIKE '%$q%' OR category_name LIKE '%$q%' OR quote_status LIKE '%$q%') + ORDER BY $sb $o LIMIT $record_from, $record_to" +); $num_rows = mysqli_fetch_row(mysqli_query($mysqli, "SELECT FOUND_ROWS()")); diff --git a/client_recurring_invoices.php b/client_recurring_invoices.php index 3c978527..fadeb453 100644 --- a/client_recurring_invoices.php +++ b/client_recurring_invoices.php @@ -1,141 +1,143 @@ - - $sb, 'o' => $o))); -$sql = mysqli_query($mysqli, "SELECT * FROM recurring - LEFT JOIN categories ON recurring_category_id = category_id - WHERE recurring_client_id = $client_id - AND (CONCAT(recurring_prefix,recurring_number) LIKE '%$q%' OR recurring_frequency LIKE '%$q%' OR recurring_scope LIKE '%$q%' OR category_name LIKE '%$q%') - ORDER BY $sb $o LIMIT $record_from, $record_to"); +$sql = mysqli_query( + $mysqli, + "SELECT * FROM recurring + LEFT JOIN categories ON recurring_category_id = category_id + WHERE recurring_client_id = $client_id + AND (CONCAT(recurring_prefix,recurring_number) LIKE '%$q%' OR recurring_frequency LIKE '%$q%' OR recurring_scope LIKE '%$q%' OR category_name LIKE '%$q%') + ORDER BY $sb $o LIMIT $record_from, $record_to"); $num_rows = mysqli_fetch_row(mysqli_query($mysqli, "SELECT FOUND_ROWS()")); ?>
-
-

Recurring Invoices

-
- +
+

Recurring Invoices

+
+ +
-
-
-
- -
+
+ + +
+ +
+
+ +
+ +
+
+
+ +
+
+ Export +
+
-
-
- -
-
-
-
+ +
+
+ + "> + + + + + + + + + + + + + + -
- Export -
- + while ($row = mysqli_fetch_array($sql)) { + $recurring_id = $row['recurring_id']; + $recurring_prefix = htmlentities($row['recurring_prefix']); + $recurring_number = htmlentities($row['recurring_number']); + $recurring_scope = htmlentities($row['recurring_scope']); + $recurring_frequency = htmlentities($row['recurring_frequency']); + $recurring_status = htmlentities($row['recurring_status']); + $recurring_last_sent = $row['recurring_last_sent']; + if ($recurring_last_sent == 0) { + $recurring_last_sent = "-"; + } + $recurring_next_date = $row['recurring_next_date']; + $recurring_amount = floatval($row['recurring_amount']); + $recurring_currency_code = htmlentities($row['recurring_currency_code']); + $recurring_created_at = $row['recurring_created_at']; + $category_id = $row['category_id']; + $category_name = htmlentities($row['category_name']); + if ($recurring_status == 1) { + $status = "Active"; + $status_badge_color = "success"; + } else { + $status = "Inactive"; + $status_badge_color = "secondary"; + } - - -
-
-
NumberScopeFrequencyAmountLast SentNext DateCategoryStatusAction
- "> - - - - - - - - - - - - - - - while ($row = mysqli_fetch_array($sql)) { - $recurring_id = $row['recurring_id']; - $recurring_prefix = htmlentities($row['recurring_prefix']); - $recurring_number = htmlentities($row['recurring_number']); - $recurring_scope = htmlentities($row['recurring_scope']); - $recurring_frequency = htmlentities($row['recurring_frequency']); - $recurring_status = htmlentities($row['recurring_status']); - $recurring_last_sent = $row['recurring_last_sent']; - if ($recurring_last_sent == 0) { - $recurring_last_sent = "-"; - } - $recurring_next_date = $row['recurring_next_date']; - $recurring_amount = floatval($row['recurring_amount']); - $recurring_currency_code = htmlentities($row['recurring_currency_code']); - $recurring_created_at = $row['recurring_created_at']; - $category_id = $row['category_id']; - $category_name = htmlentities($row['category_name']); - if ($recurring_status == 1) { - $status = "Active"; - $status_badge_color = "success"; - }else{ - $status = "Inactive"; - $status_badge_color = "secondary"; - } - - ?> - - - - - - - - - - + + + + + + + + - - + + + - + ?> - -
NumberScopeFrequencyAmountLast SentNext DateCategoryStatusAction
ly +
ly - -
- -
- Edit -
- Delete -
-
-
+
+ +
+ Edit +
+ Delete +
+
+
+ + +
+
- -
- - - + $sb, ' $sql = mysqli_query( $mysqli, "SELECT SQL_CALC_FOUND_ROWS * FROM scheduled_tickets - LEFT JOIN clients on scheduled_ticket_client_id = client_id - WHERE scheduled_ticket_client_id = $client_id - AND scheduled_tickets.scheduled_ticket_subject LIKE '%$q%' - ORDER BY $sb $o LIMIT $record_from, $record_to" + LEFT JOIN clients on scheduled_ticket_client_id = client_id + WHERE scheduled_ticket_client_id = $client_id + AND scheduled_tickets.scheduled_ticket_subject LIKE '%$q%' + ORDER BY $sb $o LIMIT $record_from, $record_to" ); $num_rows = mysqli_fetch_row(mysqli_query($mysqli, "SELECT FOUND_ROWS()")); - ?> @@ -95,10 +94,10 @@ $num_rows = mysqli_fetch_row(mysqli_query($mysqli, "SELECT FOUND_ROWS()")); data-target="#editScheduledTicketModal" onclick="populateScheduledTicketEditModal()">Edit -
- Delete -
- +
+ Delete +
+
diff --git a/client_services.php b/client_services.php index 943eb574..5e3022d5 100644 --- a/client_services.php +++ b/client_services.php @@ -14,8 +14,8 @@ $url_query_strings_sb = http_build_query(array_merge($_GET, array('sb' => $sb, ' // Overview SQL query $sql = mysqli_query( $mysqli, - "SELECT SQL_CALC_FOUND_ROWS * FROM services - WHERE service_client_id = '$client_id' + "SELECT SQL_CALC_FOUND_ROWS * FROM services + WHERE service_client_id = '$client_id' AND (service_name LIKE '%$q%' OR service_description LIKE '%$q%' OR service_category LIKE '%$q%') ORDER BY $sb $o LIMIT $record_from, $record_to" ); @@ -112,12 +112,12 @@ $num_rows = mysqli_fetch_row(mysqli_query($mysqli, "SELECT FOUND_ROWS()")); // Associated Assets (and their logins/networks/locations) $sql_assets = mysqli_query( $mysqli, - "SELECT * FROM service_assets - LEFT JOIN assets ON service_assets.asset_id = assets.asset_id - LEFT JOIN logins ON service_assets.asset_id = logins.login_asset_id - LEFT JOIN networks ON assets.asset_network_id = networks.network_id - LEFT JOIN locations ON assets.asset_location_id = locations.location_id - WHERE service_id = '$service_id'" + "SELECT * FROM service_assets + LEFT JOIN assets ON service_assets.asset_id = assets.asset_id + LEFT JOIN logins ON service_assets.asset_id = logins.login_asset_id + LEFT JOIN networks ON assets.asset_network_id = networks.network_id + LEFT JOIN locations ON assets.asset_location_id = locations.location_id + WHERE service_id = '$service_id'" ); // Associated logins diff --git a/client_shared_items.php b/client_shared_items.php index 22da8f11..a99a4c31 100644 --- a/client_shared_items.php +++ b/client_shared_items.php @@ -21,11 +21,11 @@ $url_query_strings_sb = http_build_query(array_merge($_GET, array('sb' => $sb, ' $sql = mysqli_query( $mysqli, - "SELECT SQL_CALC_FOUND_ROWS * FROM shared_items - WHERE item_client_id = $client_id + "SELECT SQL_CALC_FOUND_ROWS * FROM shared_items + WHERE item_client_id = $client_id AND item_active = '1' AND item_views != item_view_limit - AND item_expire_at > NOW() + AND item_expire_at > NOW() AND (item_note LIKE '%$q%') ORDER BY $sb $o LIMIT $record_from, $record_to" ); @@ -33,100 +33,98 @@ $num_rows = mysqli_fetch_row(mysqli_query($mysqli, "SELECT FOUND_ROWS()")); ?> -
-
-

Shared Items (Links)

-
-
-
- -
+
+
+

Shared Items (Links)

+
+
+ + +
-
-
- -
- +
+
+ +
+ +
+
- -
- -
-
- - "> - - - - - - - - - - - + +
+
+
Item NameItem TypeShare NoteViewsExpiresAction
+ "> - - - - - - + + + + + + - + + - -
- -
- -
- Deactivate -
-
- - 		Item NameItem TypeShare NoteViewsExpiresAction
+ while ($row = mysqli_fetch_array($sql)) { + $item_id = $row['item_id']; + $item_active = htmlentities($row['item_active']); + $item_key = htmlentities($row['item_key']); + $item_type = htmlentities($row['item_type']); + $item_related_id = $row['item_related_id']; + $item_note = htmlentities($row['item_note']); + $item_views = htmlentities($row['item_views']); + $item_view_limit = htmlentities($row['item_view_limit']); + $item_created_at = $row['item_created_at']; + $item_expire_at = $row['item_expire_at']; + + if ($item_type == 'Login') { + $share_item_sql = mysqli_query($mysqli, "SELECT login_name FROM logins WHERE login_id = '$item_related_id' AND login_client_id = '$client_id'"); + $share_item = mysqli_fetch_array($share_item_sql); + $item_name = htmlentities($share_item['login_name']); + } elseif ($item_type == 'Document') { + $share_item_sql = mysqli_query($mysqli, "SELECT document_name FROM documents WHERE document_id = '$item_related_id' AND document_client_id = '$client_id'"); + $share_item = mysqli_fetch_array($share_item_sql); + $item_name = htmlentities($share_item['document_name']); + } elseif ($item_type == 'File') { + $share_item_sql = mysqli_query($mysqli, "SELECT file_name FROM files WHERE file_id = '$item_related_id' AND file_client_id = '$client_id'"); + $share_item = mysqli_fetch_array($share_item_sql); + $item_name = htmlentities($share_item['file_name']); + } + + + ?> + + + + + + + + +
+ +
+ Deactivate +
+
+ + + + + + + + +
+
-
-
$sb, 'o' => $o))); -$sql = mysqli_query($mysqli, "SELECT SQL_CALC_FOUND_ROWS * FROM software - LEFT JOIN logins ON login_software_id = software_id - WHERE software_client_id = $client_id - AND software_template = 0 - AND (software_name LIKE '%$q%' OR software_type LIKE '%$q%' OR software_key LIKE '%$q%') - ORDER BY $sb $o LIMIT $record_from, $record_to"); +$sql = mysqli_query( + $mysqli, + "SELECT SQL_CALC_FOUND_ROWS * FROM software + LEFT JOIN logins ON login_software_id = software_id + WHERE software_client_id = $client_id + AND software_template = 0 + AND (software_name LIKE '%$q%' OR software_type LIKE '%$q%' OR software_key LIKE '%$q%') + ORDER BY $sb $o LIMIT $record_from, $record_to"); $num_rows = mysqli_fetch_row(mysqli_query($mysqli, "SELECT FOUND_ROWS()")); ?> -
-
-

Licenses

-
-
- - -
- From Template +
+
+

Licenses

+
+
+ + +
+ From Template +
-
-
-
- -
+
+ + +
-
-
- -
- +
+
+ +
+ +
-
-
-
- Export +
+
+ Export +
+
- -
- -
-
- - "> - - - - - - - - - - - + +
+
+
SoftwareTypeLicense TypeSeatsAction
+ "> - - - - - + + + + + + + + + " tabindex="-1"> -
-
-
-
- -
-
-
-
-
- -
- -
+ while ($row = mysqli_fetch_array($sql)) { + $software_id = $row['software_id']; + $software_name = htmlentities($row['software_name']); + $software_version = htmlentities($row['software_version']); + $software_type = htmlentities($row['software_type']); + $software_license_type = htmlentities($row['software_license_type']); + $software_key = htmlentities($row['software_key']); + $software_seats = htmlentities($row['software_seats']); + $software_purchase = $row['software_purchase']; + $software_expire = $row['software_expire']; + $software_notes = htmlentities($row['software_notes']); + + // Get Login + $login_id = $row['login_id']; + $login_username = htmlentities(decryptLoginEntry($row['login_username'])); + $login_password = htmlentities(decryptLoginEntry($row['login_password'])); + + $seat_count = 0; + + // Asset Licenses + $asset_licenses_sql = mysqli_query($mysqli, "SELECT asset_id FROM software_assets WHERE software_id = $software_id"); + $asset_licenses_array = array(); + while ($row = mysqli_fetch_array($asset_licenses_sql)) { + $asset_licenses_array[] = $row['asset_id']; + $seat_count = $seat_count + 1; + } + $asset_licenses = implode(',', $asset_licenses_array); + + // Contact Licenses + $contact_licenses_sql = mysqli_query($mysqli, "SELECT contact_id FROM software_contacts WHERE software_id = $software_id"); + $contact_licenses_array = array(); + while ($row = mysqli_fetch_array($contact_licenses_sql)) { + $contact_licenses_array[] = $row['contact_id']; + $seat_count = $seat_count + 1; + } + $contact_licenses = implode(',', $contact_licenses_array); + + + + ?> +
+ + + + + - + - + + - + ?> - -
$software_version"; ?> - 0) { ?> - + SoftwareTypeLicense TypeSeatsAction
$software_version"; ?> + 0) { ?> + + + -
- -
- Edit -
- Archive and
Remove Licenses - + ?> +
+
+ +
+ Edit
- Delete and
Remove Licenses - + Archive and
Remove Licenses + +
+ Delete and
Remove Licenses + +
- -
+ + +
+
-
-
$sb, ' $sql = mysqli_query( $mysqli, - "SELECT SQL_CALC_FOUND_ROWS * FROM tickets + "SELECT SQL_CALC_FOUND_ROWS * FROM tickets LEFT JOIN contacts ON ticket_contact_id = contact_id LEFT JOIN users ON ticket_assigned_to = user_id LEFT JOIN assets ON ticket_asset_id = asset_id @@ -104,8 +104,7 @@ $num_rows = mysqli_fetch_row(mysqli_query($mysqli, "SELECT FOUND_ROWS()")); if (empty($ticket_updated_at)) { if ($ticket_status == "Closed") { $ticket_updated_at_display = "

Never

"; - } - else{ + } else{ $ticket_updated_at_display = "

Never

"; } } else { @@ -117,7 +116,7 @@ $num_rows = mysqli_fetch_row(mysqli_query($mysqli, "SELECT FOUND_ROWS()")); $ticket_status_display = "$ticket_status"; } elseif ($ticket_status == "Working") { $ticket_status_display = "$ticket_status"; - } else{ + } else { $ticket_status_display = "$ticket_status"; } @@ -134,8 +133,7 @@ $num_rows = mysqli_fetch_row(mysqli_query($mysqli, "SELECT FOUND_ROWS()")); if (empty($ticket_assigned_to)) { if ($ticket_status == "Closed") { $ticket_assigned_to_display = "

Not Assigned

"; - } - else { + } else { $ticket_assigned_to_display = "

Not Assigned

"; } } else { diff --git a/client_trips.php b/client_trips.php index c458d95a..51456060 100644 --- a/client_trips.php +++ b/client_trips.php @@ -26,13 +26,15 @@ if (isset($_GET['dtf'])) { //Rebuild URL $url_query_strings_sb = http_build_query(array_merge($_GET, array('sb' => $sb, 'o' => $o))); -$sql = mysqli_query($mysqli, "SELECT SQL_CALC_FOUND_ROWS * FROM trips - LEFT JOIN users ON trip_user_id = user_id - WHERE (trip_purpose LIKE '%$q%' OR trip_source LIKE '%$q%' OR trip_destination LIKE '%$q%' OR user_name LIKE '%$q%') - AND DATE(trip_date) BETWEEN '$dtf' AND '$dtt' - AND company_id = $session_company_id - AND trip_client_id = $client_id - ORDER BY $sb $o LIMIT $record_from, $record_to"); +$sql = mysqli_query( + $mysqli, + "SELECT SQL_CALC_FOUND_ROWS * FROM trips + LEFT JOIN users ON trip_user_id = user_id + WHERE (trip_purpose LIKE '%$q%' OR trip_source LIKE '%$q%' OR trip_destination LIKE '%$q%' OR user_name LIKE '%$q%') + AND DATE(trip_date) BETWEEN '$dtf' AND '$dtt' + AND company_id = $session_company_id + AND trip_client_id = $client_id + ORDER BY $sb $o LIMIT $record_from, $record_to"); $num_rows = mysqli_fetch_row(mysqli_query($mysqli, "SELECT FOUND_ROWS()")); diff --git a/client_vendor_templates.php b/client_vendor_templates.php index 1a64a862..dc6b727f 100644 --- a/client_vendor_templates.php +++ b/client_vendor_templates.php @@ -24,8 +24,8 @@ $url_query_strings_sb = http_build_query(array_merge($_GET, array('sb' => $sb, ' $sql = mysqli_query( $mysqli, - "SELECT SQL_CALC_FOUND_ROWS * FROM vendors - WHERE vendor_template = 1 + "SELECT SQL_CALC_FOUND_ROWS * FROM vendors + WHERE vendor_template = 1 AND (vendor_name LIKE '%$q%' OR vendor_description LIKE '%$q%' OR vendor_account_number LIKE '%$q%' OR vendor_website LIKE '%$q%' OR vendor_contact_name LIKE '%$q%' OR vendor_email LIKE '%$q%' OR vendor_phone LIKE '%$phone_query%') ORDER BY $sb $o LIMIT $record_from, $record_to" ); @@ -33,137 +33,137 @@ $num_rows = mysqli_fetch_row(mysqli_query($mysqli, "SELECT FOUND_ROWS()")); ?> -
-
-

- Vendor Templates -

- -
- Vendors +
+
+

+ Vendor Templates +

+ +
+ Vendors +
+
+ +
-
- -
-
-
-
- -
+
+ + +
-
-
- -
- +
+
+ +
+ +
+
- -
- -
-
- - "> - - - - - - - - - + +
+
+
VendorDescriptionContactAction
+ "> - - - - + + + + - + + + ?> + + + +
- - - -
- - - 		- - -
- - -
- - -
- - 		-
- -
- Edit - -
- Delete - -
-
- 		VendorDescriptionContactAction
+ + + +
+ + + 		+ + +
+ -
+ if (!empty($vendor_phone)) { ?> + +
+ + +
+ + + +
+ +
+ Edit + +
+ Delete + +
+
+ + + + + + + +
+
-
-
$sb, 'o' => $o))); -$sql = mysqli_query($mysqli, "SELECT SQL_CALC_FOUND_ROWS * FROM vendors - WHERE vendor_client_id = $client_id - AND vendor_template = 0 - AND (vendor_name LIKE '%$q%' OR vendor_description LIKE '%$q%' OR vendor_account_number LIKE '%$q%' OR vendor_website LIKE '%$q%' OR vendor_contact_name LIKE '%$q%' OR vendor_email LIKE '%$q%' OR vendor_phone LIKE '%$phone_query%') ORDER BY $sb $o LIMIT $record_from, $record_to"); +$sql = mysqli_query( + $mysqli, + "SELECT SQL_CALC_FOUND_ROWS * FROM vendors + WHERE vendor_client_id = $client_id + AND vendor_template = 0 + AND (vendor_name LIKE '%$q%' OR vendor_description LIKE '%$q%' OR vendor_account_number LIKE '%$q%' OR vendor_website LIKE '%$q%' OR vendor_contact_name LIKE '%$q%' OR vendor_email LIKE '%$q%' OR vendor_phone LIKE '%$phone_query%') ORDER BY $sb $o LIMIT $record_from, $record_to"); $num_rows = mysqli_fetch_row(mysqli_query($mysqli, "SELECT FOUND_ROWS()")); diff --git a/clients.php b/clients.php index 98d4f040..c979b7d3 100644 --- a/clients.php +++ b/clients.php @@ -89,270 +89,272 @@ if ($_GET['canned_date'] == "custom" && !empty($_GET['date_from'])) { //Rebuild URL $url_query_strings_sortby = http_build_query(array_merge($_GET, array('sortby' => $sortby, 'order' => $order))); -$sql = mysqli_query($mysqli, "SELECT SQL_CALC_FOUND_ROWS * FROM clients - LEFT JOIN contacts ON clients.primary_contact = contacts.contact_id AND contact_archived_at IS NULL - LEFT JOIN locations ON clients.primary_location = locations.location_id AND location_archived_at IS NULL - WHERE (client_name LIKE '%$query%' OR client_type LIKE '%$query%' OR client_referral LIKE '%$query%' OR contact_email LIKE '%$query%' OR contact_name LIKE '%$query%' OR contact_phone LIKE '%$phone_query%' - OR contact_mobile LIKE '%$phone_query%' OR location_address LIKE '%$query%' OR location_city LIKE '%$query%' OR location_state LIKE '%$query%' OR location_zip LIKE '%$query%') - AND client_archived_at IS NULL - AND DATE(client_created_at) BETWEEN '$date_from' AND '$date_to' - AND clients.company_id = $session_company_id - ORDER BY $sortby $order LIMIT $record_from, $record_to +$sql = mysqli_query( + $mysqli, + "SELECT SQL_CALC_FOUND_ROWS * FROM clients + LEFT JOIN contacts ON clients.primary_contact = contacts.contact_id AND contact_archived_at IS NULL + LEFT JOIN locations ON clients.primary_location = locations.location_id AND location_archived_at IS NULL + WHERE (client_name LIKE '%$query%' OR client_type LIKE '%$query%' OR client_referral LIKE '%$query%' OR contact_email LIKE '%$query%' OR contact_name LIKE '%$query%' OR contact_phone LIKE '%$phone_query%' + OR contact_mobile LIKE '%$phone_query%' OR location_address LIKE '%$query%' OR location_city LIKE '%$query%' OR location_state LIKE '%$query%' OR location_zip LIKE '%$query%') + AND client_archived_at IS NULL + AND DATE(client_created_at) BETWEEN '$date_from' AND '$date_to' + AND clients.company_id = $session_company_id + ORDER BY $sortby $order LIMIT $record_from, $record_to "); $num_rows = mysqli_fetch_row(mysqli_query($mysqli, "SELECT FOUND_ROWS()")); ?> -
-
-

Clients

-
- - - +
+
+

Clients

+
+ + + +
-
-
-
-
-
-
- -
- - -
-
-
-
-
" id="advancedFilter"> +
+
-
-
- - -
-
-
-
- - -
-
-
-
- - +
+
+ +
+ + +
-
- -
-
- - "> - - - - - - - - - - $location_city $location_state $location_zip"; - } - $contact_id = $row['contact_id']; - $contact_name = htmlentities($row['contact_name']); - $contact_title = htmlentities($row['contact_title']); - $contact_phone = formatPhoneNumber($row['contact_phone']); - $contact_extension = htmlentities($row['contact_extension']); - $contact_mobile = formatPhoneNumber($row['contact_mobile']); - $contact_email = htmlentities($row['contact_email']); - $client_website = htmlentities($row['client_website']); - $client_currency_code = htmlentities($row['client_currency_code']); - $client_net_terms = htmlentities($row['client_net_terms']); - $client_referral = htmlentities($row['client_referral']); - $client_notes = htmlentities($row['client_notes']); - $client_created_at = date('Y-m-d', strtotime($row['client_created_at'])); - $client_updated_at = $row['client_updated_at']; - $client_archive_at = $row['client_archived_at']; - - //Client Tags - - $client_tag_name_display_array = array(); - $client_tag_id_array = array(); - $sql_client_tags = mysqli_query($mysqli, "SELECT * FROM client_tags LEFT JOIN tags ON client_tags.tag_id = tags.tag_id WHERE client_tags.client_id = $client_id"); - while ($row = mysqli_fetch_array($sql_client_tags)) { - - $client_tag_id = $row['tag_id']; - $client_tag_name = htmlentities($row['tag_name']); - $client_tag_color = htmlentities($row['tag_color']); - $client_tag_icon = htmlentities($row['tag_icon']); - if (empty($client_tag_icon)) { - $client_tag_icon = "tag"; - } - - $client_tag_id_array[] = $client_tag_id; - if (empty($client_tag_color)) { - $client_tag_name_display_array[] = "$client_tag_name "; - } else { - $client_tag_name_display_array[] = " $client_tag_name "; - } - } - $client_tags_display = implode('', $client_tag_name_display_array); - - //Add up all the payments for the invoice and get the total amount paid to the invoice - $sql_invoice_amounts = mysqli_query($mysqli, "SELECT SUM(invoice_amount) AS invoice_amounts FROM invoices WHERE invoice_client_id = $client_id AND invoice_status NOT LIKE 'Draft' AND invoice_status NOT LIKE 'Cancelled' "); - $row = mysqli_fetch_array($sql_invoice_amounts); - - $invoice_amounts = $row['invoice_amounts']; - - $sql_amount_paid = mysqli_query($mysqli, "SELECT SUM(payment_amount) AS amount_paid FROM payments, invoices WHERE payment_invoice_id = invoice_id AND invoice_client_id = $client_id"); - $row = mysqli_fetch_array($sql_amount_paid); - - $amount_paid = $row['amount_paid']; - - $balance = $invoice_amounts - $amount_paid; - //set Text color on balance - if ($balance > 0) { - $balance_text_color = "text-danger font-weight-bold"; - } else { - $balance_text_color = ""; - } - - //Get Monthly Recurring Total - $sql_recurring_monthly_total = mysqli_query($mysqli, "SELECT SUM(recurring_amount) AS recurring_monthly_total FROM recurring WHERE recurring_status = 1 AND recurring_frequency = 'month' AND recurring_client_id = $client_id AND company_id = $session_company_id"); - $row = mysqli_fetch_array($sql_recurring_monthly_total); - - $recurring_monthly_total = $row['recurring_monthly_total']; - - //Get Yearly Recurring Total - $sql_recurring_yearly_total = mysqli_query($mysqli, "SELECT SUM(recurring_amount) AS recurring_yearly_total FROM recurring WHERE recurring_status = 1 AND recurring_frequency = 'year' AND recurring_client_id = $client_id AND company_id = $session_company_id"); - $row = mysqli_fetch_array($sql_recurring_yearly_total); - - $recurring_yearly_total = $row['recurring_yearly_total'] / 12; - - $recurring_monthly = $recurring_monthly_total + $recurring_yearly_total; - - ?> +
" id="advancedFilter"> +
+
+
+ + +
+
+
+
+ + +
+
+
+
+ + +
+
+
+
+ +
+
+
NamePrimary Address Primary Contact Billing Action
+ "> - - - - - - - - - - - - - + + + + + - + + $location_city $location_state $location_zip"; + } + $contact_id = $row['contact_id']; + $contact_name = htmlentities($row['contact_name']); + $contact_title = htmlentities($row['contact_title']); + $contact_phone = formatPhoneNumber($row['contact_phone']); + $contact_extension = htmlentities($row['contact_extension']); + $contact_mobile = formatPhoneNumber($row['contact_mobile']); + $contact_email = htmlentities($row['contact_email']); + $client_website = htmlentities($row['client_website']); + $client_currency_code = htmlentities($row['client_currency_code']); + $client_net_terms = htmlentities($row['client_net_terms']); + $client_referral = htmlentities($row['client_referral']); + $client_notes = htmlentities($row['client_notes']); + $client_created_at = date('Y-m-d', strtotime($row['client_created_at'])); + $client_updated_at = $row['client_updated_at']; + $client_archive_at = $row['client_archived_at']; - } ?> + //Client Tags - -
- - -
- - - -
- - -
- Created: - 		- - -
- - -
- - -
- - - - 		- Balance -
- Paid -
- Monthly - 		-
- -
- Edit -
- Archive -
- Delete -
-
- 		NamePrimary Address Primary Contact Billing Action
+ $client_tag_name_display_array = array(); + $client_tag_id_array = array(); + $sql_client_tags = mysqli_query($mysqli, "SELECT * FROM client_tags LEFT JOIN tags ON client_tags.tag_id = tags.tag_id WHERE client_tags.client_id = $client_id"); + while ($row = mysqli_fetch_array($sql_client_tags)) { + + $client_tag_id = $row['tag_id']; + $client_tag_name = htmlentities($row['tag_name']); + $client_tag_color = htmlentities($row['tag_color']); + $client_tag_icon = htmlentities($row['tag_icon']); + if (empty($client_tag_icon)) { + $client_tag_icon = "tag"; + } + + $client_tag_id_array[] = $client_tag_id; + if (empty($client_tag_color)) { + $client_tag_name_display_array[] = "$client_tag_name "; + } else { + $client_tag_name_display_array[] = " $client_tag_name "; + } + } + $client_tags_display = implode('', $client_tag_name_display_array); + + //Add up all the payments for the invoice and get the total amount paid to the invoice + $sql_invoice_amounts = mysqli_query($mysqli, "SELECT SUM(invoice_amount) AS invoice_amounts FROM invoices WHERE invoice_client_id = $client_id AND invoice_status NOT LIKE 'Draft' AND invoice_status NOT LIKE 'Cancelled' "); + $row = mysqli_fetch_array($sql_invoice_amounts); + + $invoice_amounts = $row['invoice_amounts']; + + $sql_amount_paid = mysqli_query($mysqli, "SELECT SUM(payment_amount) AS amount_paid FROM payments, invoices WHERE payment_invoice_id = invoice_id AND invoice_client_id = $client_id"); + $row = mysqli_fetch_array($sql_amount_paid); + + $amount_paid = $row['amount_paid']; + + $balance = $invoice_amounts - $amount_paid; + //set Text color on balance + if ($balance > 0) { + $balance_text_color = "text-danger font-weight-bold"; + } else { + $balance_text_color = ""; + } + + //Get Monthly Recurring Total + $sql_recurring_monthly_total = mysqli_query($mysqli, "SELECT SUM(recurring_amount) AS recurring_monthly_total FROM recurring WHERE recurring_status = 1 AND recurring_frequency = 'month' AND recurring_client_id = $client_id AND company_id = $session_company_id"); + $row = mysqli_fetch_array($sql_recurring_monthly_total); + + $recurring_monthly_total = $row['recurring_monthly_total']; + + //Get Yearly Recurring Total + $sql_recurring_yearly_total = mysqli_query($mysqli, "SELECT SUM(recurring_amount) AS recurring_yearly_total FROM recurring WHERE recurring_status = 1 AND recurring_frequency = 'year' AND recurring_client_id = $client_id AND company_id = $session_company_id"); + $row = mysqli_fetch_array($sql_recurring_yearly_total); + + $recurring_yearly_total = $row['recurring_yearly_total'] / 12; + + $recurring_monthly = $recurring_monthly_total + $recurring_yearly_total; + + ?> + + + + +
+ + + +
+ + +
+ Created: + + + + + +
+ + +
+ + +
+ + + + + + + + + Balance +
+ Paid +
+ Monthly + + + + + + +
+ +
+ Edit +
+ Archive +
+ Delete +
+
+ + + + + + + + +
+
-
-
$sb, 'o' => $o))); -$sql = mysqli_query($mysqli, "SELECT SQL_CALC_FOUND_ROWS * FROM companies, settings - WHERE companies.company_id = settings.company_id - AND (company_name LIKE '%$q%') - ORDER BY $sb $o LIMIT $record_from, $record_to"); +$sql = mysqli_query( + $mysqli, + "SELECT SQL_CALC_FOUND_ROWS * FROM companies, settings + WHERE companies.company_id = settings.company_id + AND (company_name LIKE '%$q%') + ORDER BY $sb $o LIMIT $record_from, $record_to"); $num_rows = mysqli_fetch_row(mysqli_query($mysqli, "SELECT FOUND_ROWS()")); @@ -73,7 +75,6 @@ $num_rows = mysqli_fetch_row(mysqli_query($mysqli, "SELECT FOUND_ROWS()")); $company_initials = htmlentities(initials($company_name)); - ?> @@ -81,11 +82,11 @@ $num_rows = mysqli_fetch_row(mysqli_query($mysqli, "SELECT FOUND_ROWS()")); "> - + - - - + + +
diff --git a/cron.php b/cron.php index df3fea8b..4d7b8bac 100644 --- a/cron.php +++ b/cron.php @@ -5,7 +5,7 @@ require_once("functions.php"); $sql_companies = mysqli_query($mysqli, "SELECT * FROM companies, settings WHERE companies.company_id = settings.company_id"); -while($row = mysqli_fetch_array($sql_companies)){ +while ($row = mysqli_fetch_array($sql_companies)) { $company_id = $row['company_id']; $company_name = $row['company_name']; $company_phone = formatPhoneNumber($row['company_phone']); @@ -127,7 +127,7 @@ while($row = mysqli_fetch_array($sql_companies)){ $domainAlertArray = [1,7,14,30,90,120]; - foreach($domainAlertArray as $day){ + foreach ($domainAlertArray as $day) { //Get Domains Expiring $sql = mysqli_query( @@ -138,7 +138,7 @@ while($row = mysqli_fetch_array($sql_companies)){ AND domains.company_id = $company_id" ); - while($row = mysqli_fetch_array($sql)){ + while ($row = mysqli_fetch_array($sql)) { $domain_id = $row['domain_id']; $domain_name = mysqli_real_escape_string($mysqli, $row['domain_name']); $domain_expire = $row['domain_expire']; @@ -155,7 +155,7 @@ while($row = mysqli_fetch_array($sql_companies)){ $certificateAlertArray = [1,7,14,30,90,120]; - foreach($certificateAlertArray as $day){ + foreach ($certificateAlertArray as $day) { //Get Certs Expiring $sql = mysqli_query( @@ -166,7 +166,7 @@ while($row = mysqli_fetch_array($sql_companies)){ AND certificates.company_id = $company_id" ); - while($row = mysqli_fetch_array($sql)){ + while ($row = mysqli_fetch_array($sql)) { $certificate_id = $row['certificate_id']; $certificate_name = mysqli_real_escape_string($mysqli, $row['certificate_name']); $certificate_domain = $row['certificate_domain']; @@ -184,18 +184,18 @@ while($row = mysqli_fetch_array($sql_companies)){ $warranty_alert_array = [1,7,14,30,90,120]; - foreach($warranty_alert_array as $day){ + foreach ($warranty_alert_array as $day) { //Get Asset Warranty Expiring $sql = mysqli_query( $mysqli, - "SELECT * FROM assets + "SELECT * FROM assets LEFT JOIN clients ON asset_client_id = client_id WHERE asset_warranty_expire = CURDATE() + INTERVAL $day DAY AND assets.company_id = $company_id" ); - while($row = mysqli_fetch_array($sql)){ + while ($row = mysqli_fetch_array($sql)) { $asset_id = $row['asset_id']; $asset_name = mysqli_real_escape_string($mysqli, $row['asset_name']); $asset_warranty_expire = $row['asset_warranty_expire']; @@ -217,8 +217,8 @@ while($row = mysqli_fetch_array($sql_companies)){ // Get scheduled tickets for today $sql_scheduled_tickets = mysqli_query($mysqli, "SELECT * FROM scheduled_tickets WHERE scheduled_ticket_next_run = '$today_text'"); - if(mysqli_num_rows($sql_scheduled_tickets) > 0){ - while($row = mysqli_fetch_array($sql_scheduled_tickets)){ + if (mysqli_num_rows($sql_scheduled_tickets) > 0) { + while ($row = mysqli_fetch_array($sql_scheduled_tickets)) { $schedule_id = $row['scheduled_ticket_id']; $subject = mysqli_real_escape_string($mysqli, $row['scheduled_ticket_subject']); $details = mysqli_real_escape_string($mysqli, $row['scheduled_ticket_details']); @@ -246,11 +246,14 @@ while($row = mysqli_fetch_array($sql_companies)){ if (!empty($config_smtp_host) && $config_ticket_client_general_notifications == 1) { // Get contact/ticket/company details - $sql = mysqli_query($mysqli, "SELECT contact_name, contact_email, ticket_prefix, ticket_number, ticket_subject, company_phone FROM tickets - LEFT JOIN clients ON ticket_client_id = client_id - LEFT JOIN contacts ON ticket_contact_id = contact_id - LEFT JOIN companies ON tickets.company_id = companies.company_id - WHERE ticket_id = $id AND tickets.company_id = $company_id"); + $sql = mysqli_query( + $mysqli, + "SELECT contact_name, contact_email, ticket_prefix, ticket_number, ticket_subject, company_phone FROM tickets + LEFT JOIN clients ON ticket_client_id = client_id + LEFT JOIN contacts ON ticket_contact_id = contact_id + LEFT JOIN companies ON tickets.company_id = companies.company_id + WHERE ticket_id = $id AND tickets.company_id = $company_id" + ); $row = mysqli_fetch_array($sql); $contact_name = $row['contact_name']; @@ -261,7 +264,7 @@ while($row = mysqli_fetch_array($sql_companies)){ $company_phone = formatPhoneNumber($row['company_phone']); // Verify contact email is valid - if(filter_var($contact_email, FILTER_VALIDATE_EMAIL)){ + if (filter_var($contact_email, FILTER_VALIDATE_EMAIL)) { $subject = "Ticket created - [$ticket_prefix$ticket_number] - $ticket_subject (scheduled)"; $body = "#--itflow--#

Hello, $contact_name

A ticket regarding \"$ticket_subject\" has been automatically created for you.

--------------------------------
$details--------------------------------

Ticket: $ticket_prefix$ticket_number
Subject: $ticket_subject
Status: Open
Portal: https://$config_base_url/portal/ticket.php?id=$id

~
$company_name
Support Department
$config_ticket_from_email
$company_phone"; @@ -289,24 +292,24 @@ while($row = mysqli_fetch_array($sql_companies)){ } // Set the next run date - if($frequency == "weekly"){ + if ($frequency == "weekly") { // Note: We seemingly have to initialize a new datetime for each loop to avoid stacking the dates $now = new DateTime(); $next_run = date_add($now, date_interval_create_from_date_string('1 week')); } - elseif($frequency == "monthly"){ + elseif ($frequency == "monthly") { $now = new DateTime(); $next_run = date_add($now, date_interval_create_from_date_string('1 month')); } - elseif($frequency == "quarterly"){ + elseif ($frequency == "quarterly") { $now = new DateTime(); $next_run = date_add($now, date_interval_create_from_date_string('3 months')); } - elseif($frequency == "biannually"){ + elseif ($frequency == "biannually") { $now = new DateTime(); $next_run = date_add($now, date_interval_create_from_date_string('6 months')); } - elseif($frequency == "annually"){ + elseif ($frequency == "annually") { $now = new DateTime(); $next_run = date_add($now, date_interval_create_from_date_string('12 months')); } @@ -323,7 +326,7 @@ while($row = mysqli_fetch_array($sql_companies)){ //$invoiceAlertArray = [$config_invoice_overdue_reminders]; $invoiceAlertArray = [30,60,90,120,150,180,210,240,270,300,330,360,390,420,450,480,510,540,570,590,620]; - foreach($invoiceAlertArray as $day){ + foreach ($invoiceAlertArray as $day) { $sql = mysqli_query( $mysqli, @@ -338,7 +341,7 @@ while($row = mysqli_fetch_array($sql_companies)){ ORDER BY invoice_number DESC" ); - while($row = mysqli_fetch_array($sql)){ + while ($row = mysqli_fetch_array($sql)) { $invoice_id = $row['invoice_id']; $invoice_prefix = $row['invoice_prefix']; $invoice_number = $row['invoice_number']; @@ -392,7 +395,7 @@ while($row = mysqli_fetch_array($sql_companies)){ //Loop through all recurring that match today's date and is active $sql_recurring = mysqli_query($mysqli, "SELECT * FROM recurring LEFT JOIN clients ON client_id = recurring_client_id WHERE recurring_next_date = CURDATE() AND recurring_status = 1 AND recurring.company_id = $company_id"); - while($row = mysqli_fetch_array($sql_recurring)){ + while ($row = mysqli_fetch_array($sql_recurring)) { $recurring_id = $row['recurring_id']; $recurring_scope = $row['recurring_scope']; $recurring_frequency = $row['recurring_frequency']; @@ -427,7 +430,7 @@ while($row = mysqli_fetch_array($sql_companies)){ //Copy Items from original recurring invoice to new invoice $sql_invoice_items = mysqli_query($mysqli, "SELECT * FROM invoice_items WHERE item_recurring_id = $recurring_id ORDER BY item_id ASC"); - while($row = mysqli_fetch_array($sql_invoice_items)){ + while ($row = mysqli_fetch_array($sql_invoice_items)) { $item_id = $row['item_id']; $item_name = mysqli_real_escape_string($mysqli, $row['item_name']); //SQL Escape incase of , $item_description = mysqli_real_escape_string($mysqli, $row['item_description']); //SQL Escape incase of , @@ -451,7 +454,7 @@ while($row = mysqli_fetch_array($sql_companies)){ mysqli_query($mysqli, "UPDATE recurring SET recurring_last_sent = CURDATE(), recurring_next_date = DATE_ADD(CURDATE(), INTERVAL 1 $recurring_frequency), recurring_updated_at = NOW() WHERE recurring_id = $recurring_id"); - if($config_recurring_auto_send_invoice == 1){ + if ($config_recurring_auto_send_invoice == 1) { $sql = mysqli_query( $mysqli, "SELECT * FROM invoices diff --git a/cron_ticket_email_parser.php b/cron_ticket_email_parser.php index ea5143a7..05296b57 100644 --- a/cron_ticket_email_parser.php +++ b/cron_ticket_email_parser.php @@ -12,7 +12,6 @@ TODO: - Support for authenticating with OAuth - Separate Mailbox Account for tickets 2022-12-14 - JQ -Relate PRs to https://github.com/itflow-org/itflow/issues/225 & https://forum.itflow.org/d/11-road-map & https://forum.itflow.org/d/31-tickets-from-email */ // Get ITFlow config & helper functions @@ -130,7 +129,7 @@ function addReply($from_email, $date, $subject, $ticket_number, $message) $message = "Email from: $from_email at $date:-

$message"; // Lookup the ticket ID - $row = mysqli_fetch_array(mysqli_query($mysqli, "SELECT ticket_id, ticket_subject, ticket_status, ticket_contact_id, ticket_client_id, tickets.company_id, contact_email + $row = mysqli_fetch_array(mysqli_query($mysqli, "SELECT ticket_id, ticket_subject, ticket_status, ticket_contact_id, ticket_client_id, tickets.company_id, contact_email FROM tickets LEFT JOIN contacts on tickets.ticket_contact_id = contacts.contact_id WHERE ticket_number = '$ticket_number' LIMIT 1")); @@ -220,7 +219,7 @@ if ($emails) { rsort($emails); // Loop through each email - foreach($emails as $email) { + foreach ($emails as $email) { // Default false $email_processed = false; diff --git a/dashboard_financial.php b/dashboard_financial.php index 830f1619..0001d8e2 100644 --- a/dashboard_financial.php +++ b/dashboard_financial.php @@ -1,4 +1,5 @@ -
- + + + - \ No newline at end of file +?> diff --git a/inc_all_client.php b/inc_all_client.php index a65f0e04..a3f3b753 100644 --- a/inc_all_client.php +++ b/inc_all_client.php @@ -7,240 +7,243 @@ require_once("header.php"); require_once("top_nav.php"); if (isset($_GET['client_id'])) { - $client_id = intval($_GET['client_id']); + $client_id = intval($_GET['client_id']); - $sql = mysqli_query($mysqli, "UPDATE clients SET client_accessed_at = NOW() WHERE client_id = $client_id AND company_id = $session_company_id"); + $sql = mysqli_query($mysqli, "UPDATE clients SET client_accessed_at = NOW() WHERE client_id = $client_id AND company_id = $session_company_id"); - $sql = mysqli_query($mysqli, "SELECT * FROM clients - LEFT JOIN locations ON primary_location = location_id AND location_archived_at IS NULL - LEFT JOIN contacts ON primary_contact = contact_id AND contact_archived_at IS NULL - WHERE client_id = $client_id - AND clients.company_id = $session_company_id"); + $sql = mysqli_query( + $mysqli, + "SELECT * FROM clients + LEFT JOIN locations ON primary_location = location_id AND location_archived_at IS NULL + LEFT JOIN contacts ON primary_contact = contact_id AND contact_archived_at IS NULL + WHERE client_id = $client_id + AND clients.company_id = $session_company_id" + ); - if (mysqli_num_rows($sql) == 0) { - include("header.php"); - echo "

Nothing to see here

"; - } else { + if (mysqli_num_rows($sql) == 0) { + require_once("header.php"); + echo "

Nothing to see here

"; + } else { + + $row = mysqli_fetch_array($sql); + $client_name = htmlentities($row['client_name']); + $client_type = htmlentities($row['client_type']); + $client_website = htmlentities($row['client_website']); + $client_referral = htmlentities($row['client_referral']); + $client_currency_code = htmlentities($row['client_currency_code']); + $client_net_terms = $row['client_net_terms']; + if ($client_net_terms == 0) { + $client_net_terms = $config_default_net_terms; + } + $client_notes = htmlentities($row['client_notes']); + $client_created_at = $row['client_created_at']; + $primary_contact = $row['primary_contact']; + $primary_location = $row['primary_location']; + $contact_id = $row['contact_id']; + $contact_name = htmlentities($row['contact_name']); + $contact_title = htmlentities($row['contact_title']); + $contact_email = htmlentities($row['contact_email']); + $contact_phone = $row['contact_phone']; + $contact_extension = $row['contact_extension']; + $contact_mobile = $row['contact_mobile']; + $location_id = $row['location_id']; + $location_name = htmlentities($row['location_name']); + $location_address = htmlentities($row['location_address']); + $location_city = htmlentities($row['location_city']); + $location_state = htmlentities($row['location_state']); + $location_zip = htmlentities($row['location_zip']); + $location_country = htmlentities($row['location_country']); + $location_phone = $row['location_phone']; + + //Client Tags + + $client_tag_name_display_array = array(); + $client_tag_id_array = array(); + $sql_client_tags = mysqli_query($mysqli, "SELECT * FROM client_tags LEFT JOIN tags ON client_tags.tag_id = tags.tag_id WHERE client_tags.client_id = $client_id"); + while ($row = mysqli_fetch_array($sql_client_tags)) { + + $client_tag_id = $row['tag_id']; + $client_tag_name = htmlentities($row['tag_name']); + $client_tag_color = htmlentities($row['tag_color']); + $client_tag_icon = htmlentities($row['tag_icon']); + if (empty($client_tag_icon)) { + $client_tag_icon = "tag"; + } + + $client_tag_id_array[] = $client_tag_id; + $client_tag_name_display_array[] = "$client_tag_name "; + } + $client_tags_display = " " . implode('', $client_tag_name_display_array); + + //Add up all the payments for the invoice and get the total amount paid to the invoice + $sql_invoice_amounts = mysqli_query($mysqli, "SELECT SUM(invoice_amount) AS invoice_amounts FROM invoices WHERE invoice_client_id = $client_id AND invoice_status NOT LIKE 'Draft' AND invoice_status NOT LIKE 'Cancelled'"); + $row = mysqli_fetch_array($sql_invoice_amounts); + + $invoice_amounts = $row['invoice_amounts']; + + $sql_amount_paid = mysqli_query($mysqli, "SELECT SUM(payment_amount) AS amount_paid FROM payments, invoices WHERE payment_invoice_id = invoice_id AND invoice_client_id = $client_id"); + $row = mysqli_fetch_array($sql_amount_paid); + + $amount_paid = $row['amount_paid']; + + $balance = $invoice_amounts - $amount_paid; + + //Get Monthly Recurring Total + $sql_recurring_monthly_total = mysqli_query($mysqli, "SELECT SUM(recurring_amount) AS recurring_monthly_total FROM recurring WHERE recurring_status = 1 AND recurring_frequency = 'month' AND recurring_client_id = $client_id AND company_id = $session_company_id"); + $row = mysqli_fetch_array($sql_recurring_monthly_total); + + $recurring_monthly_total = $row['recurring_monthly_total']; + + //Get Yearly Recurring Total + $sql_recurring_yearly_total = mysqli_query($mysqli, "SELECT SUM(recurring_amount) AS recurring_yearly_total FROM recurring WHERE recurring_status = 1 AND recurring_frequency = 'year' AND recurring_client_id = $client_id AND company_id = $session_company_id"); + $row = mysqli_fetch_array($sql_recurring_yearly_total); + + $recurring_yearly_total = $row['recurring_yearly_total'] / 12; + + $recurring_monthly = $recurring_monthly_total + $recurring_yearly_total; + + //Badge Counts + + $row = mysqli_fetch_assoc(mysqli_query($mysqli, "SELECT COUNT('contact_id') AS num FROM contacts WHERE contact_archived_at IS NULL AND contact_client_id = $client_id")); + $num_contacts = $row['num']; + + $row = mysqli_fetch_assoc(mysqli_query($mysqli, "SELECT COUNT('location_id') AS num FROM locations WHERE location_archived_at IS NULL AND location_client_id = $client_id")); + $num_locations = $row['num']; + + $row = mysqli_fetch_assoc(mysqli_query($mysqli, "SELECT COUNT('asset_id') AS num FROM assets WHERE asset_archived_at IS NULL AND asset_client_id = $client_id")); + $num_assets = $row['num']; + + $row = mysqli_fetch_assoc(mysqli_query($mysqli, "SELECT COUNT('ticket_id') AS num FROM tickets WHERE ticket_archived_at IS NULL AND ticket_status != 'Closed' AND ticket_client_id = $client_id")); + $num_active_tickets = $row['num']; + + $row = mysqli_fetch_assoc(mysqli_query($mysqli, "SELECT COUNT('ticket_id') AS num FROM tickets WHERE ticket_archived_at IS NULL AND ticket_status = 'Closed' AND ticket_client_id = $client_id")); + $num_closed_tickets = $row['num']; + + $row = mysqli_fetch_assoc(mysqli_query($mysqli, "SELECT COUNT('service_id') AS num FROM services WHERE service_client_id = $client_id")); + $num_services = $row['num']; + + $row = mysqli_fetch_assoc(mysqli_query($mysqli, "SELECT COUNT('vendor_id') AS num FROM vendors WHERE vendor_archived_at IS NULL AND vendor_client_id = $client_id AND vendor_template = 0")); + $num_vendors = $row['num']; + + $row = mysqli_fetch_assoc(mysqli_query($mysqli, "SELECT COUNT('login_id') AS num FROM logins WHERE login_archived_at IS NULL AND login_client_id = $client_id")); + $num_logins = $row['num']; + + $row = mysqli_fetch_assoc(mysqli_query($mysqli, "SELECT COUNT('network_id') AS num FROM networks WHERE network_archived_at IS NULL AND network_client_id = $client_id")); + $num_networks = $row['num']; + + $row = mysqli_fetch_assoc(mysqli_query($mysqli, "SELECT COUNT('domain_id') AS num FROM domains WHERE domain_archived_at IS NULL AND domain_client_id = $client_id")); + $num_domains = $row['num']; + + $row = mysqli_fetch_assoc(mysqli_query($mysqli, "SELECT COUNT('certificate_id') AS num FROM certificates WHERE certificate_archived_at IS NULL AND certificate_client_id = $client_id")); + $num_certificates = $row['num']; + + $row = mysqli_fetch_assoc(mysqli_query($mysqli, "SELECT COUNT('software_id') AS num FROM software WHERE software_archived_at IS NULL AND software_client_id = $client_id")); + $num_software = $row['num']; + + $row = mysqli_fetch_assoc(mysqli_query($mysqli, "SELECT COUNT('invoice_id') AS num FROM invoices WHERE (invoice_status = 'Sent' OR invoice_status = 'Viewed' OR invoice_status = 'Partial') AND invoice_archived_at IS NULL AND invoice_client_id = $client_id")); + $num_invoices_open = $row['num']; + + $row = mysqli_fetch_assoc(mysqli_query($mysqli, "SELECT COUNT('invoice_id') AS num FROM invoices WHERE invoice_status = 'Draft' AND invoice_archived_at IS NULL AND invoice_client_id = $client_id")); + $num_invoices_draft = $row['num']; + + $row = mysqli_fetch_assoc(mysqli_query($mysqli, "SELECT COUNT('invoice_id') AS num FROM invoices WHERE invoice_status = 'Sent' AND invoice_archived_at IS NULL AND invoice_client_id = $client_id")); + $num_invoices_sent = $row['num']; + + $row = mysqli_fetch_assoc(mysqli_query($mysqli, "SELECT COUNT('invoice_id') AS num FROM invoices WHERE invoice_status = 'Viewed' AND invoice_archived_at IS NULL AND invoice_client_id = $client_id")); + $num_invoices_viewed = $row['num']; + + $row = mysqli_fetch_assoc(mysqli_query($mysqli, "SELECT COUNT('invoice_id') AS num FROM invoices WHERE invoice_status = 'Partial' AND invoice_archived_at IS NULL AND invoice_client_id = $client_id")); + $num_invoices_partial = $row['num']; + + $row = mysqli_fetch_assoc(mysqli_query($mysqli, "SELECT COUNT('invoice_id') AS num FROM invoices WHERE invoice_status = 'Paid' AND invoice_archived_at IS NULL AND invoice_client_id = $client_id")); + $num_invoices_paid = $row['num']; + + $row = mysqli_fetch_assoc(mysqli_query($mysqli, "SELECT COUNT('invoice_id') AS num FROM invoices WHERE invoice_archived_at IS NULL AND invoice_client_id = $client_id")); + $num_invoices = $row['num']; + + $row = mysqli_fetch_assoc(mysqli_query($mysqli, "SELECT COUNT('quote_id') AS num FROM quotes WHERE quote_archived_at IS NULL AND quote_client_id = $client_id")); + $num_quotes = $row['num']; + + $row = mysqli_fetch_assoc(mysqli_query($mysqli, "SELECT COUNT('recurring_id') AS num FROM recurring WHERE recurring_archived_at IS NULL AND recurring_client_id = $client_id")); + $num_recurring = $row['num']; + + $row = mysqli_fetch_assoc(mysqli_query($mysqli, "SELECT COUNT('payment_id') AS num FROM payments, invoices WHERE payment_invoice_id = invoice_id AND invoice_client_id = $client_id")); + $num_payments = $row['num']; + + $row = mysqli_fetch_assoc(mysqli_query($mysqli, "SELECT COUNT('file_id') AS num FROM files WHERE file_archived_at IS NULL AND file_client_id = $client_id")); + $num_files = $row['num']; + + $row = mysqli_fetch_assoc(mysqli_query($mysqli, "SELECT COUNT('document_id') AS num FROM documents WHERE document_archived_at IS NULL AND document_client_id = $client_id")); + $num_documents = $row['num']; + + $row = mysqli_fetch_assoc(mysqli_query($mysqli, "SELECT COUNT('event_id') AS num FROM events WHERE event_client_id = $client_id")); + $num_events = $row['num']; + + $row = mysqli_fetch_assoc(mysqli_query($mysqli, "SELECT COUNT('trip_id') AS num FROM trips WHERE trip_archived_at IS NULL AND trip_client_id = $client_id")); + $num_trips = $row['num']; + + $row = mysqli_fetch_assoc(mysqli_query($mysqli, "SELECT COUNT('item_id') AS num FROM shared_items WHERE item_client_id = $client_id")); + $num_shared_links = $row['num']; + + // Expiring Items + + // Count Domains Expiring within 30 Days + $row = mysqli_fetch_assoc(mysqli_query( + $mysqli, + "SELECT COUNT('domain_id') AS num FROM domains + WHERE domain_client_id = $client_id + AND domain_expire != '0000-00-00' + AND domain_expire < CURRENT_DATE + INTERVAL 30 DAY + AND domain_archived_at IS NULL + AND company_id = $session_company_id" + )); + $num_domains_expiring = $row['num']; + + // Count Certificates Expiring within 30 Days + $row = mysqli_fetch_assoc(mysqli_query( + $mysqli, + "SELECT COUNT('certificate_id') AS num FROM certificates + WHERE certificate_client_id = $client_id + AND certificate_expire != '0000-00-00' + AND certificate_expire < CURRENT_DATE + INTERVAL 30 DAY + AND certificate_archived_at IS NULL + AND company_id = $session_company_id" + )); + $num_certs_expiring = $row['num']; + + // Get Asset Warranties Expiring + $sql_asset_warranties_expiring = mysqli_query( + $mysqli, + "SELECT * FROM assets + WHERE asset_client_id = $client_id + AND asset_warranty_expire != '0000-00-00' + AND asset_archived_at IS NULL + AND asset_warranty_expire < CURRENT_DATE + INTERVAL 90 DAY + AND company_id = $session_company_id ORDER BY asset_warranty_expire DESC" + ); + + // Get Assets Retiring + $sql_asset_retire = mysqli_query( + $mysqli, + "SELECT * FROM assets + WHERE asset_client_id = $client_id + AND asset_install_date != '0000-00-00' + AND asset_archived_at IS NULL + AND asset_install_date + INTERVAL 7 YEAR < CURRENT_DATE + INTERVAL 90 DAY + AND company_id = $session_company_id ORDER BY asset_install_date DESC" + ); + + // Get Stale Tickets + $sql_tickets_stale = mysqli_query( + $mysqli, + "SELECT * FROM tickets + WHERE ticket_client_id = $client_id + AND ticket_created_at < CURRENT_DATE - INTERVAL 14 DAY + AND ticket_status != 'Closed' + AND company_id = $session_company_id ORDER BY ticket_created_at DESC" + ); - $row = mysqli_fetch_array($sql); - $client_name = htmlentities($row['client_name']); - $client_type = htmlentities($row['client_type']); - $client_website = htmlentities($row['client_website']); - $client_referral = htmlentities($row['client_referral']); - $client_currency_code = htmlentities($row['client_currency_code']); - $client_net_terms = $row['client_net_terms']; - if ($client_net_terms == 0) { - $client_net_terms = $config_default_net_terms; } - $client_notes = htmlentities($row['client_notes']); - $client_created_at = $row['client_created_at']; - $primary_contact = $row['primary_contact']; - $primary_location = $row['primary_location']; - $contact_id = $row['contact_id']; - $contact_name = htmlentities($row['contact_name']); - $contact_title = htmlentities($row['contact_title']); - $contact_email = htmlentities($row['contact_email']); - $contact_phone = $row['contact_phone']; - $contact_extension = $row['contact_extension']; - $contact_mobile = $row['contact_mobile']; - $location_id = $row['location_id']; - $location_name = htmlentities($row['location_name']); - $location_address = htmlentities($row['location_address']); - $location_city = htmlentities($row['location_city']); - $location_state = htmlentities($row['location_state']); - $location_zip = htmlentities($row['location_zip']); - $location_country = htmlentities($row['location_country']); - $location_phone = $row['location_phone']; - - //Client Tags - - $client_tag_name_display_array = array(); - $client_tag_id_array = array(); - $sql_client_tags = mysqli_query($mysqli, "SELECT * FROM client_tags LEFT JOIN tags ON client_tags.tag_id = tags.tag_id WHERE client_tags.client_id = $client_id"); - while ($row = mysqli_fetch_array($sql_client_tags)) { - - $client_tag_id = $row['tag_id']; - $client_tag_name = htmlentities($row['tag_name']); - $client_tag_color = htmlentities($row['tag_color']); - $client_tag_icon = htmlentities($row['tag_icon']); - if (empty($client_tag_icon)) { - $client_tag_icon = "tag"; - } - - $client_tag_id_array[] = $client_tag_id; - $client_tag_name_display_array[] = "$client_tag_name "; - } - $client_tags_display = " " . implode('', $client_tag_name_display_array); - - //Add up all the payments for the invoice and get the total amount paid to the invoice - $sql_invoice_amounts = mysqli_query($mysqli, "SELECT SUM(invoice_amount) AS invoice_amounts FROM invoices WHERE invoice_client_id = $client_id AND invoice_status NOT LIKE 'Draft' AND invoice_status NOT LIKE 'Cancelled'"); - $row = mysqli_fetch_array($sql_invoice_amounts); - - $invoice_amounts = $row['invoice_amounts']; - - $sql_amount_paid = mysqli_query($mysqli, "SELECT SUM(payment_amount) AS amount_paid FROM payments, invoices WHERE payment_invoice_id = invoice_id AND invoice_client_id = $client_id"); - $row = mysqli_fetch_array($sql_amount_paid); - - $amount_paid = $row['amount_paid']; - - $balance = $invoice_amounts - $amount_paid; - - //Get Monthly Recurring Total - $sql_recurring_monthly_total = mysqli_query($mysqli, "SELECT SUM(recurring_amount) AS recurring_monthly_total FROM recurring WHERE recurring_status = 1 AND recurring_frequency = 'month' AND recurring_client_id = $client_id AND company_id = $session_company_id"); - $row = mysqli_fetch_array($sql_recurring_monthly_total); - - $recurring_monthly_total = $row['recurring_monthly_total']; - - //Get Yearly Recurring Total - $sql_recurring_yearly_total = mysqli_query($mysqli, "SELECT SUM(recurring_amount) AS recurring_yearly_total FROM recurring WHERE recurring_status = 1 AND recurring_frequency = 'year' AND recurring_client_id = $client_id AND company_id = $session_company_id"); - $row = mysqli_fetch_array($sql_recurring_yearly_total); - - $recurring_yearly_total = $row['recurring_yearly_total'] / 12; - - $recurring_monthly = $recurring_monthly_total + $recurring_yearly_total; - - //Badge Counts - - $row = mysqli_fetch_assoc(mysqli_query($mysqli, "SELECT COUNT('contact_id') AS num FROM contacts WHERE contact_archived_at IS NULL AND contact_client_id = $client_id")); - $num_contacts = $row['num']; - - $row = mysqli_fetch_assoc(mysqli_query($mysqli, "SELECT COUNT('location_id') AS num FROM locations WHERE location_archived_at IS NULL AND location_client_id = $client_id")); - $num_locations = $row['num']; - - $row = mysqli_fetch_assoc(mysqli_query($mysqli, "SELECT COUNT('asset_id') AS num FROM assets WHERE asset_archived_at IS NULL AND asset_client_id = $client_id")); - $num_assets = $row['num']; - - $row = mysqli_fetch_assoc(mysqli_query($mysqli, "SELECT COUNT('ticket_id') AS num FROM tickets WHERE ticket_archived_at IS NULL AND ticket_status != 'Closed' AND ticket_client_id = $client_id")); - $num_active_tickets = $row['num']; - - $row = mysqli_fetch_assoc(mysqli_query($mysqli, "SELECT COUNT('ticket_id') AS num FROM tickets WHERE ticket_archived_at IS NULL AND ticket_status = 'Closed' AND ticket_client_id = $client_id")); - $num_closed_tickets = $row['num']; - - $row = mysqli_fetch_assoc(mysqli_query($mysqli, "SELECT COUNT('service_id') AS num FROM services WHERE service_client_id = $client_id")); - $num_services = $row['num']; - - $row = mysqli_fetch_assoc(mysqli_query($mysqli, "SELECT COUNT('vendor_id') AS num FROM vendors WHERE vendor_archived_at IS NULL AND vendor_client_id = $client_id AND vendor_template = 0")); - $num_vendors = $row['num']; - - $row = mysqli_fetch_assoc(mysqli_query($mysqli, "SELECT COUNT('login_id') AS num FROM logins WHERE login_archived_at IS NULL AND login_client_id = $client_id")); - $num_logins = $row['num']; - - $row = mysqli_fetch_assoc(mysqli_query($mysqli, "SELECT COUNT('network_id') AS num FROM networks WHERE network_archived_at IS NULL AND network_client_id = $client_id")); - $num_networks = $row['num']; - - $row = mysqli_fetch_assoc(mysqli_query($mysqli, "SELECT COUNT('domain_id') AS num FROM domains WHERE domain_archived_at IS NULL AND domain_client_id = $client_id")); - $num_domains = $row['num']; - - $row = mysqli_fetch_assoc(mysqli_query($mysqli, "SELECT COUNT('certificate_id') AS num FROM certificates WHERE certificate_archived_at IS NULL AND certificate_client_id = $client_id")); - $num_certificates = $row['num']; - - $row = mysqli_fetch_assoc(mysqli_query($mysqli, "SELECT COUNT('software_id') AS num FROM software WHERE software_archived_at IS NULL AND software_client_id = $client_id")); - $num_software = $row['num']; - - $row = mysqli_fetch_assoc(mysqli_query($mysqli, "SELECT COUNT('invoice_id') AS num FROM invoices WHERE (invoice_status = 'Sent' OR invoice_status = 'Viewed' OR invoice_status = 'Partial') AND invoice_archived_at IS NULL AND invoice_client_id = $client_id")); - $num_invoices_open = $row['num']; - - $row = mysqli_fetch_assoc(mysqli_query($mysqli, "SELECT COUNT('invoice_id') AS num FROM invoices WHERE invoice_status = 'Draft' AND invoice_archived_at IS NULL AND invoice_client_id = $client_id")); - $num_invoices_draft = $row['num']; - - $row = mysqli_fetch_assoc(mysqli_query($mysqli, "SELECT COUNT('invoice_id') AS num FROM invoices WHERE invoice_status = 'Sent' AND invoice_archived_at IS NULL AND invoice_client_id = $client_id")); - $num_invoices_sent = $row['num']; - - $row = mysqli_fetch_assoc(mysqli_query($mysqli, "SELECT COUNT('invoice_id') AS num FROM invoices WHERE invoice_status = 'Viewed' AND invoice_archived_at IS NULL AND invoice_client_id = $client_id")); - $num_invoices_viewed = $row['num']; - - $row = mysqli_fetch_assoc(mysqli_query($mysqli, "SELECT COUNT('invoice_id') AS num FROM invoices WHERE invoice_status = 'Partial' AND invoice_archived_at IS NULL AND invoice_client_id = $client_id")); - $num_invoices_partial = $row['num']; - - $row = mysqli_fetch_assoc(mysqli_query($mysqli, "SELECT COUNT('invoice_id') AS num FROM invoices WHERE invoice_status = 'Paid' AND invoice_archived_at IS NULL AND invoice_client_id = $client_id")); - $num_invoices_paid = $row['num']; - - $row = mysqli_fetch_assoc(mysqli_query($mysqli, "SELECT COUNT('invoice_id') AS num FROM invoices WHERE invoice_archived_at IS NULL AND invoice_client_id = $client_id")); - $num_invoices = $row['num']; - - $row = mysqli_fetch_assoc(mysqli_query($mysqli, "SELECT COUNT('quote_id') AS num FROM quotes WHERE quote_archived_at IS NULL AND quote_client_id = $client_id")); - $num_quotes = $row['num']; - - $row = mysqli_fetch_assoc(mysqli_query($mysqli, "SELECT COUNT('recurring_id') AS num FROM recurring WHERE recurring_archived_at IS NULL AND recurring_client_id = $client_id")); - $num_recurring = $row['num']; - - $row = mysqli_fetch_assoc(mysqli_query($mysqli, "SELECT COUNT('payment_id') AS num FROM payments, invoices WHERE payment_invoice_id = invoice_id AND invoice_client_id = $client_id")); - $num_payments = $row['num']; - - $row = mysqli_fetch_assoc(mysqli_query($mysqli, "SELECT COUNT('file_id') AS num FROM files WHERE file_archived_at IS NULL AND file_client_id = $client_id")); - $num_files = $row['num']; - - $row = mysqli_fetch_assoc(mysqli_query($mysqli, "SELECT COUNT('document_id') AS num FROM documents WHERE document_archived_at IS NULL AND document_client_id = $client_id")); - $num_documents = $row['num']; - - $row = mysqli_fetch_assoc(mysqli_query($mysqli, "SELECT COUNT('event_id') AS num FROM events WHERE event_client_id = $client_id")); - $num_events = $row['num']; - - $row = mysqli_fetch_assoc(mysqli_query($mysqli, "SELECT COUNT('trip_id') AS num FROM trips WHERE trip_archived_at IS NULL AND trip_client_id = $client_id")); - $num_trips = $row['num']; - - $row = mysqli_fetch_assoc(mysqli_query($mysqli, "SELECT COUNT('item_id') AS num FROM shared_items WHERE item_client_id = $client_id")); - $num_shared_links = $row['num']; - - // Expiring Items - - // Count Domains Expiring within 30 Days - $row = mysqli_fetch_assoc(mysqli_query( - $mysqli, - "SELECT COUNT('domain_id') AS num FROM domains - WHERE domain_client_id = $client_id - AND domain_expire != '0000-00-00' - AND domain_expire < CURRENT_DATE + INTERVAL 30 DAY - AND domain_archived_at IS NULL - AND company_id = $session_company_id" - )); - $num_domains_expiring = $row['num']; - - // Count Certificates Expiring within 30 Days - $row = mysqli_fetch_assoc(mysqli_query( - $mysqli, - "SELECT COUNT('certificate_id') AS num FROM certificates - WHERE certificate_client_id = $client_id - AND certificate_expire != '0000-00-00' - AND certificate_expire < CURRENT_DATE + INTERVAL 30 DAY - AND certificate_archived_at IS NULL - AND company_id = $session_company_id" - )); - $num_certs_expiring = $row['num']; - - // Get Asset Warranties Expiring - $sql_asset_warranties_expiring = mysqli_query( - $mysqli, - "SELECT * FROM assets - WHERE asset_client_id = $client_id - AND asset_warranty_expire != '0000-00-00' - AND asset_archived_at IS NULL - AND asset_warranty_expire < CURRENT_DATE + INTERVAL 90 DAY - AND company_id = $session_company_id ORDER BY asset_warranty_expire DESC" - ); - - // Get Assets Retiring - $sql_asset_retire = mysqli_query( - $mysqli, - "SELECT * FROM assets - WHERE asset_client_id = $client_id - AND asset_install_date != '0000-00-00' - AND asset_archived_at IS NULL - AND asset_install_date + INTERVAL 7 YEAR < CURRENT_DATE + INTERVAL 90 DAY - AND company_id = $session_company_id ORDER BY asset_install_date DESC" - ); - - // Get Stale Tickets - $sql_tickets_stale = mysqli_query( - $mysqli, - "SELECT * FROM tickets - WHERE ticket_client_id = $client_id - AND ticket_created_at < CURRENT_DATE - INTERVAL 14 DAY - AND ticket_status != 'Closed' - AND company_id = $session_company_id ORDER BY ticket_created_at DESC" - ); - - } } require_once("client_side_nav.php"); diff --git a/inc_all_reports.php b/inc_all_reports.php index 2a0ddc38..55d8f2df 100644 --- a/inc_all_reports.php +++ b/inc_all_reports.php @@ -1,13 +1,13 @@
-
-
-
-

- - " target="_blank"> -
-
- - - - -
- - - -
- - - - -
-
-

Primary Contact

- - -
- - - -
- - - - - x - -
- - - - -
- -
-

Billing

-
Paid
-
Balance
float-right">
-
Monthly Recurring
-
Net Terms
Days
-
- - -
-

Support

-
Open Tickets
-
- -
- -
- -
- Export Data PDF
(without passwords) - Export Data PDF
(with passwords) -
- Edit Client -
- Archive Client -
- Delete Client +
+
+
+

+ + " target="_blank"> +
+
+ + + +
+ + +
+ +
-
- -
+
+

Primary Contact

+ + +
+ + +
+ + + + "; + } + + if (!empty($contact_mobile)) { ?> + + + +
+ +
+

Billing

+
Paid
+
Balance
float-right">
+
Monthly Recurring
+
Net Terms
Days
+
+ + + +
+

Support

+
Open Tickets
+
+ + +
+ +
+ +
+ Export Data PDF
(without passwords) + Export Data PDF
(with passwords) +
+ Edit Client +
+ Archive Client +
+ Delete Client +
+
+ +
+
-
diff --git a/invoices.php b/invoices.php index 5742b4ce..b535014a 100644 --- a/invoices.php +++ b/invoices.php @@ -119,14 +119,17 @@ if ($_GET['canned_date'] == "custom" && !empty($_GET['dtf'])) { //Rebuild URL $url_query_strings_sb = http_build_query(array_merge($_GET, array('sb' => $sb, 'o' => $o))); -$sql = mysqli_query($mysqli, "SELECT SQL_CALC_FOUND_ROWS * FROM invoices +$sql = mysqli_query( + $mysqli, + "SELECT SQL_CALC_FOUND_ROWS * FROM invoices LEFT JOIN clients ON invoice_client_id = client_id LEFT JOIN categories ON invoice_category_id = category_id WHERE invoices.company_id = $session_company_id AND (invoice_status LIKE '$status_query') AND DATE(invoice_date) BETWEEN '$dtf' AND '$dtt' - AND (CONCAT(invoice_prefix,invoice_number) LIKE '%$q%' OR invoice_scope LIKE '%$q%' OR client_name LIKE '%$q%' OR invoice_status LIKE '%$q%' OR invoice_amount LIKE '%$q%' OR category_name LIKE '%$q%') - ORDER BY $sb $o LIMIT $record_from, $record_to"); + AND (CONCAT(invoice_prefix,invoice_number) LIKE '%$q%' OR invoice_scope LIKE '%$q%' OR client_name LIKE '%$q%' OR invoice_status LIKE '%$q%' OR invoice_amount LIKE '%$q%' OR category_name LIKE '%$q%') + ORDER BY $sb $o LIMIT $record_from, $record_to" +); $num_rows = mysqli_fetch_row(mysqli_query($mysqli, "SELECT FOUND_ROWS()")); diff --git a/login.php b/login.php index aaaf1c3a..365aa210 100644 --- a/login.php +++ b/login.php @@ -256,7 +256,7 @@ if (isset($_POST['login'])) {
> - > + >
@@ -264,7 +264,7 @@ if (isset($_POST['login'])) {
> - +
diff --git a/logs.php b/logs.php index 94dc2271..6dcc35a3 100644 --- a/logs.php +++ b/logs.php @@ -176,7 +176,7 @@ $num_rows = mysqli_fetch_row(mysqli_query($mysqli, "SELECT FOUND_ROWS()")); $log_user_browser"; ?> - + $sb, 'o' => $o))); -$sql = mysqli_query($mysqli, "SELECT SQL_CALC_FOUND_ROWS * FROM notifications - LEFT JOIN users ON notification_dismissed_by = user_id - LEFT JOIN clients ON notification_client_id = client_id - WHERE (notification_type LIKE '%$q%' OR notification LIKE '%$q%' OR user_name LIKE '%$q%' OR client_name LIKE '%$q%') - AND DATE(notification_timestamp) BETWEEN '$dtf' AND '$dtt' - AND (notification_user_id = $session_user_id OR notification_user_id = 0) - AND notifications.company_id = $session_company_id - AND notification_dismissed_at IS NOT NULL - ORDER BY $sb $o - LIMIT $record_from, $record_to +$sql = mysqli_query( + $mysqli, + "SELECT SQL_CALC_FOUND_ROWS * FROM notifications + LEFT JOIN users ON notification_dismissed_by = user_id + LEFT JOIN clients ON notification_client_id = client_id + WHERE (notification_type LIKE '%$q%' OR notification LIKE '%$q%' OR user_name LIKE '%$q%' OR client_name LIKE '%$q%') + AND DATE(notification_timestamp) BETWEEN '$dtf' AND '$dtt' + AND (notification_user_id = $session_user_id OR notification_user_id = 0) + AND notifications.company_id = $session_company_id + AND notification_dismissed_at IS NOT NULL + ORDER BY $sb $o + LIMIT $record_from, $record_to "); $num_rows = mysqli_fetch_row(mysqli_query($mysqli, "SELECT FOUND_ROWS()")); @@ -83,12 +85,12 @@ $num_rows = mysqli_fetch_row(mysqli_query($mysqli, "SELECT FOUND_ROWS()")); "> - - - - - - + + + + + + @@ -96,30 +98,30 @@ $num_rows = mysqli_fetch_row(mysqli_query($mysqli, "SELECT FOUND_ROWS()")); $client_name"; - } + $notification_id = $row['notification_id']; + $notification_timestamp = $row['notification_timestamp']; + $notification_type = htmlentities($row['notification_type']); + $notification = htmlentities($row['notification']); + $notification_dismissed_at = $row['notification_dismissed_at']; + $user_name = htmlentities($row['user_name']); + $client_name = htmlentities($row['client_name']); + $client_id = $row['client_id']; + if (empty($client_name)) { + $client_name_display = "-"; + } else { + $client_name_display = "$client_name"; + } - ?> - - - - - - - + ?> + + + + + + + - + diff --git a/post.php b/post.php index b5f2670c..28d86333 100644 --- a/post.php +++ b/post.php @@ -1,8 +1,8 @@
An ITFlow account has been setup for you. Please change your password upon login.

Username: $email
Password: $_POST[password]
Login URL: https://$config_base_url

~
$session_company_name
Support Department
$config_ticket_from_email"; $mail = sendSingleEmail($config_smtp_host, $config_smtp_username, $config_smtp_password, $config_smtp_encryption, $config_smtp_port, - $config_ticket_from_email, $config_ticket_from_name, - $email, $name, - $subject, $body); + $config_ticket_from_email, $config_ticket_from_name, + $email, $name, + $subject, $body); if ($mail !== true) { mysqli_query($mysqli,"INSERT INTO notifications SET notification_type = 'Mail', notification = 'Failed to send email to $email', notification_timestamp = NOW(), company_id = $session_company_id"); @@ -161,7 +161,7 @@ if(isset($_POST['edit_user'])){ //Check to see if a file is attached if($_FILES['file']['tmp_name'] != ''){ - // get details of the uploaded file + // get details of the uploaded file $file_error = 0; $file_tmp_path = $_FILES['file']['tmp_name']; $file_name = $_FILES['file']['name']; @@ -217,8 +217,8 @@ if(isset($_POST['edit_user'])){ } if(!empty($two_fa) && $two_fa == 'disable'){ - mysqli_query($mysqli, "UPDATE users SET user_token = '' WHERE user_id = '$user_id'"); - mysqli_query($mysqli,"INSERT INTO logs SET log_type = 'User', log_action = 'Modify', log_description = '$session_name disabled 2FA for $name', log_ip = '$session_ip', log_user_agent = '$session_user_agent', log_user_id = $session_user_id, company_id = $session_company_id"); + mysqli_query($mysqli, "UPDATE users SET user_token = '' WHERE user_id = '$user_id'"); + mysqli_query($mysqli,"INSERT INTO logs SET log_type = 'User', log_action = 'Modify', log_description = '$session_name disabled 2FA for $name', log_ip = '$session_ip', log_user_agent = '$session_user_agent', log_user_id = $session_user_id, company_id = $session_company_id"); } //Update User Settings @@ -310,7 +310,7 @@ if(isset($_POST['edit_profile'])){ //Check to see if a file is attached if($_FILES['file']['tmp_name'] != ''){ - // get details of the uploaded file + // get details of the uploaded file $file_error = 0; $file_tmp_path = $_FILES['file']['tmp_name']; $file_name = $_FILES['file']['name']; @@ -608,7 +608,7 @@ if(isset($_POST['edit_company'])){ //Check to see if a file is attached if($_FILES['file']['tmp_name'] != ''){ - // get details of the uploaded file + // get details of the uploaded file $file_error = 0; $file_tmp_path = $_FILES['file']['tmp_name']; $file_name = $_FILES['file']['name']; @@ -891,11 +891,11 @@ if(isset($_POST['test_email_imap'])){ $imap = imap_open("{{$imap_mailbox}}INBOX", $config_smtp_username, $config_smtp_password); if ($imap) { - $_SESSION['alert_message'] = "Connected successfully"; - } else { - $_SESSION['alert_type'] = "error"; - $_SESSION['alert_message'] = "Test IMAP connection failed"; - } + $_SESSION['alert_message'] = "Connected successfully"; + } else { + $_SESSION['alert_type'] = "error"; + $_SESSION['alert_message'] = "Test IMAP connection failed"; + } header("Location: " . $_SERVER["HTTP_REFERER"]); @@ -1278,71 +1278,71 @@ if(isset($_POST['send_telemetry_data'])){ $log_count = $row['num']; $postdata = http_build_query( - array( - 'installation_id' => "$installation_id", - 'version' => "$current_version", - 'company_name' => "$company_name", - 'city' => "$city", - 'state' => "$state", - 'country' => "$country", - 'currency' => "$currency", - 'comments' => "$comments", - 'client_count' => $client_count, - 'ticket_count' => $ticket_count, - 'calendar_event_count' => $calendar_event_count, - 'quote_count' => $quote_count, - 'invoice_count' => $invoice_count, - 'revenue_count' => $revenue_count, - 'recurring_count' => $recurring_count, - 'account_count' => $account_count, - 'tax_count' => $tax_count, - 'product_count' => $product_count, - 'payment_count' => $payment_count, - 'company_vendor_count' => $company_vendor_count, - 'expense_count' => $expense_count, - 'trip_count' => $trip_count, - 'transfer_count' => $transfer_count, - 'contact_count' => $contact_count, - 'location_count' => $location_count, - 'asset_count' => $asset_count, - 'software_count' => $software_count, - 'software_template_count' => $software_template_count, - 'password_count' => $password_count, - 'network_count' => $network_count, - 'certificate_count' => $certificate_count, - 'domain_count' => $domain_count, - 'service_count' => $service_count, - 'client_vendor_count' => $client_vendor_count, - 'vendor_template_count' => $vendor_template_count, - 'file_count' => $file_count, - 'document_count' => $document_count, - 'document_template_count' => $document_template_count, - 'shared_item_count' => $shared_item_count, - 'company_count' => $company_count, - 'user_count' => $user_count, - 'category_expense_count' => $category_expense_count, - 'category_income_count' => $category_income_count, - 'category_referral_count' => $category_referral_count, - 'category_payment_method_count' => $category_payment_method_count, - 'tag_count' => $tag_count, - 'api_key_count' => $api_key_count, - 'log_count' => $log_count, - 'config_theme' => "$config_theme", - 'config_enable_cron' => $config_enable_cron, - 'config_ticket_email_parse' => $config_ticket_email_parse, - 'config_module_enable_itdoc' => $config_module_enable_itdoc, - 'config_module_enable_ticketing' => $config_module_enable_ticketing, - 'config_module_enable_accounting' => $config_module_enable_accounting, - 'collection_method' => 2 - ) + array( + 'installation_id' => "$installation_id", + 'version' => "$current_version", + 'company_name' => "$company_name", + 'city' => "$city", + 'state' => "$state", + 'country' => "$country", + 'currency' => "$currency", + 'comments' => "$comments", + 'client_count' => $client_count, + 'ticket_count' => $ticket_count, + 'calendar_event_count' => $calendar_event_count, + 'quote_count' => $quote_count, + 'invoice_count' => $invoice_count, + 'revenue_count' => $revenue_count, + 'recurring_count' => $recurring_count, + 'account_count' => $account_count, + 'tax_count' => $tax_count, + 'product_count' => $product_count, + 'payment_count' => $payment_count, + 'company_vendor_count' => $company_vendor_count, + 'expense_count' => $expense_count, + 'trip_count' => $trip_count, + 'transfer_count' => $transfer_count, + 'contact_count' => $contact_count, + 'location_count' => $location_count, + 'asset_count' => $asset_count, + 'software_count' => $software_count, + 'software_template_count' => $software_template_count, + 'password_count' => $password_count, + 'network_count' => $network_count, + 'certificate_count' => $certificate_count, + 'domain_count' => $domain_count, + 'service_count' => $service_count, + 'client_vendor_count' => $client_vendor_count, + 'vendor_template_count' => $vendor_template_count, + 'file_count' => $file_count, + 'document_count' => $document_count, + 'document_template_count' => $document_template_count, + 'shared_item_count' => $shared_item_count, + 'company_count' => $company_count, + 'user_count' => $user_count, + 'category_expense_count' => $category_expense_count, + 'category_income_count' => $category_income_count, + 'category_referral_count' => $category_referral_count, + 'category_payment_method_count' => $category_payment_method_count, + 'tag_count' => $tag_count, + 'api_key_count' => $api_key_count, + 'log_count' => $log_count, + 'config_theme' => "$config_theme", + 'config_enable_cron' => $config_enable_cron, + 'config_ticket_email_parse' => $config_ticket_email_parse, + 'config_module_enable_itdoc' => $config_module_enable_itdoc, + 'config_module_enable_ticketing' => $config_module_enable_ticketing, + 'config_module_enable_accounting' => $config_module_enable_accounting, + 'collection_method' => 2 + ) ); $opts = array('http' => - array( - 'method' => 'POST', - 'header' => 'Content-type: application/x-www-form-urlencoded', - 'content' => $postdata - ) + array( + 'method' => 'POST', + 'header' => 'Content-type: application/x-www-form-urlencoded', + 'content' => $postdata + ) ); $context = stream_context_create($opts); @@ -1705,72 +1705,72 @@ if(isset($_GET['update'])){ $log_count = $row['num']; $postdata = http_build_query( - array( - 'installation_id' => "$installation_id", - 'version' => "$current_version", - 'company_name' => "$company_name", - 'city' => "$city", - 'state' => "$state", - 'country' => "$country", - 'currency' => "$currency", - 'comments' => "$comments", - 'client_count' => $client_count, - 'ticket_count' => $ticket_count, - 'calendar_event_count' => $calendar_event_count, - 'quote_count' => $quote_count, - 'invoice_count' => $invoice_count, - 'revenue_count' => $revenue_count, - 'recurring_count' => $recurring_count, - 'account_count' => $account_count, - 'tax_count' => $tax_count, - 'product_count' => $product_count, - 'payment_count' => $payment_count, - 'company_vendor_count' => $company_vendor_count, - 'expense_count' => $expense_count, - 'trip_count' => $trip_count, - 'transfer_count' => $transfer_count, - 'contact_count' => $contact_count, - 'location_count' => $location_count, - 'asset_count' => $asset_count, - 'software_count' => $software_count, - 'software_template_count' => $software_template_count, - 'password_count' => $password_count, - 'network_count' => $network_count, - 'certificate_count' => $certificate_count, - 'domain_count' => $domain_count, - 'service_count' => $service_count, - 'client_vendor_count' => $client_vendor_count, - 'vendor_template_count' => $vendor_template_count, - 'file_count' => $file_count, - 'document_count' => $document_count, - 'document_template_count' => $document_template_count, - 'shared_item_count' => $shared_item_count, - 'company_count' => $company_count, - 'user_count' => $user_count, - 'category_expense_count' => $category_expense_count, - 'category_income_count' => $category_income_count, - 'category_referral_count' => $category_referral_count, - 'category_payment_method_count' => $category_payment_method_count, - 'tag_count' => $tag_count, - 'api_key_count' => $api_key_count, - 'log_count' => $log_count, - 'config_theme' => "$config_theme", - 'config_enable_cron' => $config_enable_cron, - 'config_ticket_email_parse' => $config_ticket_email_parse, - 'config_module_enable_itdoc' => $config_module_enable_itdoc, - 'config_module_enable_ticketing' => $config_module_enable_ticketing, - 'config_module_enable_accounting' => $config_module_enable_accounting, - 'config_telemetry' => $config_telemetry, - 'collection_method' => 4 - ) + array( + 'installation_id' => "$installation_id", + 'version' => "$current_version", + 'company_name' => "$company_name", + 'city' => "$city", + 'state' => "$state", + 'country' => "$country", + 'currency' => "$currency", + 'comments' => "$comments", + 'client_count' => $client_count, + 'ticket_count' => $ticket_count, + 'calendar_event_count' => $calendar_event_count, + 'quote_count' => $quote_count, + 'invoice_count' => $invoice_count, + 'revenue_count' => $revenue_count, + 'recurring_count' => $recurring_count, + 'account_count' => $account_count, + 'tax_count' => $tax_count, + 'product_count' => $product_count, + 'payment_count' => $payment_count, + 'company_vendor_count' => $company_vendor_count, + 'expense_count' => $expense_count, + 'trip_count' => $trip_count, + 'transfer_count' => $transfer_count, + 'contact_count' => $contact_count, + 'location_count' => $location_count, + 'asset_count' => $asset_count, + 'software_count' => $software_count, + 'software_template_count' => $software_template_count, + 'password_count' => $password_count, + 'network_count' => $network_count, + 'certificate_count' => $certificate_count, + 'domain_count' => $domain_count, + 'service_count' => $service_count, + 'client_vendor_count' => $client_vendor_count, + 'vendor_template_count' => $vendor_template_count, + 'file_count' => $file_count, + 'document_count' => $document_count, + 'document_template_count' => $document_template_count, + 'shared_item_count' => $shared_item_count, + 'company_count' => $company_count, + 'user_count' => $user_count, + 'category_expense_count' => $category_expense_count, + 'category_income_count' => $category_income_count, + 'category_referral_count' => $category_referral_count, + 'category_payment_method_count' => $category_payment_method_count, + 'tag_count' => $tag_count, + 'api_key_count' => $api_key_count, + 'log_count' => $log_count, + 'config_theme' => "$config_theme", + 'config_enable_cron' => $config_enable_cron, + 'config_ticket_email_parse' => $config_ticket_email_parse, + 'config_module_enable_itdoc' => $config_module_enable_itdoc, + 'config_module_enable_ticketing' => $config_module_enable_ticketing, + 'config_module_enable_accounting' => $config_module_enable_accounting, + 'config_telemetry' => $config_telemetry, + 'collection_method' => 4 + ) ); $opts = array('http' => - array( - 'method' => 'POST', - 'header' => 'Content-type: application/x-www-form-urlencoded', - 'content' => $postdata - ) + array( + 'method' => 'POST', + 'header' => 'Content-type: application/x-www-form-urlencoded', + 'content' => $postdata + ) ); $context = stream_context_create($opts); @@ -2359,7 +2359,7 @@ if(isset($_POST['add_vendor_from_template'])){ $_SESSION['alert_message'] = "Vendor created from template"; - header("Location: " . $_SERVER["HTTP_REFERER"]); + header("Location: " . $_SERVER["HTTP_REFERER"]); } @@ -3560,9 +3560,9 @@ if(isset($_POST['edit_quote'])){ $category = intval($_POST['category']); $scope = trim(strip_tags(mysqli_real_escape_string($mysqli,$_POST['scope']))); - mysqli_query($mysqli,"UPDATE quotes SET quote_scope = '$scope', quote_date = '$date', quote_category_id = $category WHERE quote_id = $quote_id AND company_id = $session_company_id"); + mysqli_query($mysqli,"UPDATE quotes SET quote_scope = '$scope', quote_date = '$date', quote_category_id = $category WHERE quote_id = $quote_id AND company_id = $session_company_id"); - //Logging + //Logging mysqli_query($mysqli,"INSERT INTO logs SET log_type = 'Quote', log_action = 'Modify', log_description = '$quote_id', log_ip = '$session_ip', log_user_agent = '$session_user_agent', log_user_id = $session_user_id, company_id = $session_company_id"); $_SESSION['alert_message'] = "Quote modified"; @@ -3729,17 +3729,17 @@ if(isset($_GET['email_quote'])){ // Logging if ($mail === true) { - mysqli_query($mysqli,"INSERT INTO history SET history_status = 'Sent', history_description = 'Emailed Quote!', history_quote_id = $quote_id, company_id = $session_company_id"); - mysqli_query($mysqli,"INSERT INTO logs SET log_type = 'Quote', log_action = 'Email', log_description = '$quote_id emailed to $contact_email', log_ip = '$session_ip', log_user_agent = '$session_user_agent', log_user_id = $session_user_id, company_id = $session_company_id"); + mysqli_query($mysqli,"INSERT INTO history SET history_status = 'Sent', history_description = 'Emailed Quote!', history_quote_id = $quote_id, company_id = $session_company_id"); + mysqli_query($mysqli,"INSERT INTO logs SET log_type = 'Quote', log_action = 'Email', log_description = '$quote_id emailed to $contact_email', log_ip = '$session_ip', log_user_agent = '$session_user_agent', log_user_id = $session_user_id, company_id = $session_company_id"); - $_SESSION['alert_message'] = "Quote has been sent"; - } else { - mysqli_query($mysqli,"INSERT INTO notifications SET notification_type = 'Mail', notification = 'Failed to send email to $contact_email', notification_timestamp = NOW(), company_id = $session_company_id"); - mysqli_query($mysqli,"INSERT INTO logs SET log_type = 'Mail', log_action = 'Error', log_description = 'Failed to send email to $contact_email regarding $subject. $mail', log_ip = '$session_ip', log_user_agent = '$session_user_agent', log_user_id = $session_user_id, company_id = $session_company_id"); + $_SESSION['alert_message'] = "Quote has been sent"; + } else { + mysqli_query($mysqli,"INSERT INTO notifications SET notification_type = 'Mail', notification = 'Failed to send email to $contact_email', notification_timestamp = NOW(), company_id = $session_company_id"); + mysqli_query($mysqli,"INSERT INTO logs SET log_type = 'Mail', log_action = 'Error', log_description = 'Failed to send email to $contact_email regarding $subject. $mail', log_ip = '$session_ip', log_user_agent = '$session_user_agent', log_user_id = $session_user_id, company_id = $session_company_id"); - $_SESSION['alert_type'] = "error"; - $_SESSION['alert_message'] = "Error sending quote"; - } + $_SESSION['alert_type'] = "error"; + $_SESSION['alert_message'] = "Error sending quote"; + } //Don't change the status to sent if the status is anything but draft if($quote_status == 'Draft'){ @@ -4193,9 +4193,9 @@ if(isset($_POST['add_payment'])){ $body = "Hello $contact_name,

We have received your payment in the amount of " . numfmt_format_currency($currency_format, $amount, $invoice_currency_code) . " for invoice $invoice_prefix$invoice_number. Please keep this email as a receipt for your records.

Amount: " . numfmt_format_currency($currency_format, $amount, $invoice_currency_code) . "
Balance: " . numfmt_format_currency($currency_format, $invoice_balance, $invoice_currency_code) . "

Thank you for your business!


~
$company_name
Billing Department
$config_invoice_from_email
$company_phone"; $mail = sendSingleEmail($config_smtp_host, $config_smtp_username, $config_smtp_password, $config_smtp_encryption, $config_smtp_port, - $config_invoice_from_email, $config_invoice_from_name, - $contact_email, $contact_name, - $subject, $body); + $config_invoice_from_email, $config_invoice_from_name, + $contact_email, $contact_name, + $subject, $body); // Email Logging if ($mail === true) { @@ -4220,22 +4220,22 @@ if(isset($_POST['add_payment'])){ $body = "Hello $contact_name,

We have recieved partial payment in the amount of " . numfmt_format_currency($currency_format, $amount, $invoice_currency_code) . " and it has been applied to invoice $invoice_prefix$invoice_number. Please keep this email as a receipt for your records.

Amount: " . numfmt_format_currency($currency_format, $amount, $invoice_currency_code) . "
Balance: " . numfmt_format_currency($currency_format, $invoice_balance, $invoice_currency_code) . "

Thank you for your business!


~
$company_name
Billing Department
$config_invoice_from_email
$company_phone"; $mail = sendSingleEmail($config_smtp_host, $config_smtp_username, $config_smtp_password, $config_smtp_encryption, $config_smtp_port, - $config_invoice_from_email, $config_invoice_from_name, - $contact_email, $contact_name, - $subject, $body); + $config_invoice_from_email, $config_invoice_from_name, + $contact_email, $contact_name, + $subject, $body); - // Email Logging - if ($mail === true) { - $_SESSION['alert_message'] .= "Email receipt sent "; + // Email Logging + if ($mail === true) { + $_SESSION['alert_message'] .= "Email receipt sent "; - mysqli_query($mysqli,"INSERT INTO history SET history_status = 'Sent', history_description = 'Emailed Receipt!', history_invoice_id = $invoice_id, company_id = $session_company_id"); - } else { - mysqli_query($mysqli,"INSERT INTO history SET history_status = 'Sent', history_description = 'Email Receipt Failed!', history_invoice_id = $invoice_id, company_id = $session_company_id"); - $_SESSION['alert_message'] .= "Mailer Error "; + mysqli_query($mysqli,"INSERT INTO history SET history_status = 'Sent', history_description = 'Emailed Receipt!', history_invoice_id = $invoice_id, company_id = $session_company_id"); + } else { + mysqli_query($mysqli,"INSERT INTO history SET history_status = 'Sent', history_description = 'Email Receipt Failed!', history_invoice_id = $invoice_id, company_id = $session_company_id"); + $_SESSION['alert_message'] .= "Mailer Error "; - mysqli_query($mysqli,"INSERT INTO notifications SET notification_type = 'Mail', notification = 'Failed to send email to $contact_email', notification_timestamp = NOW(), company_id = $session_company_id"); - mysqli_query($mysqli,"INSERT INTO logs SET log_type = 'Mail', log_action = 'Error', log_description = 'Failed to send email to $contact_email regarding $subject. $mail', log_ip = '$session_ip', log_user_agent = '$session_user_agent', log_user_id = $session_user_id, company_id = $session_company_id"); - } + mysqli_query($mysqli,"INSERT INTO notifications SET notification_type = 'Mail', notification = 'Failed to send email to $contact_email', notification_timestamp = NOW(), company_id = $session_company_id"); + mysqli_query($mysqli,"INSERT INTO logs SET log_type = 'Mail', log_action = 'Error', log_description = 'Failed to send email to $contact_email regarding $subject. $mail', log_ip = '$session_ip', log_user_agent = '$session_user_agent', log_user_id = $session_user_id, company_id = $session_company_id"); + } } @@ -4352,19 +4352,19 @@ if(isset($_GET['email_invoice'])){ $balance = $invoice_amount - $amount_paid; if($invoice_status == 'Paid') { - $subject = "Invoice $invoice_prefix$invoice_number Copy"; - $body = "Hello $contact_name,

Please click on the link below to see your invoice marked paid.

Invoice Link


~
$company_name
Billing Department
$config_invoice_from_email
$company_phone"; + $subject = "Invoice $invoice_prefix$invoice_number Copy"; + $body = "Hello $contact_name,

Please click on the link below to see your invoice marked paid.

Invoice Link


~
$company_name
Billing Department
$config_invoice_from_email
$company_phone"; } else { - $subject = "Invoice $invoice_prefix$invoice_number"; - $body = "Hello $contact_name,

Please view the details of the invoice below.

Invoice: $invoice_prefix$invoice_number
Issue Date: $invoice_date
Total: " . numfmt_format_currency($currency_format, $invoice_amount, $invoice_currency_code) . "
Balance Due: " . numfmt_format_currency($currency_format, $balance, $invoice_currency_code) . "
Due Date: $invoice_due


To view your invoice click here


~
$company_name
Billing Department
$config_invoice_from_email
$company_phone"; + $subject = "Invoice $invoice_prefix$invoice_number"; + $body = "Hello $contact_name,

Please view the details of the invoice below.

Invoice: $invoice_prefix$invoice_number
Issue Date: $invoice_date
Total: " . numfmt_format_currency($currency_format, $invoice_amount, $invoice_currency_code) . "
Balance Due: " . numfmt_format_currency($currency_format, $balance, $invoice_currency_code) . "
Due Date: $invoice_due


To view your invoice click here


~
$company_name
Billing Department
$config_invoice_from_email
$company_phone"; } $mail = sendSingleEmail($config_smtp_host, $config_smtp_username, $config_smtp_password, $config_smtp_encryption, $config_smtp_port, - $config_invoice_from_email, $config_invoice_from_name, - $contact_email, $contact_name, - $subject, $body); + $config_invoice_from_email, $config_invoice_from_name, + $contact_email, $contact_name, + $subject, $body); if ($mail === true) { $_SESSION['alert_message'] = "Invoice has been sent"; @@ -4372,7 +4372,7 @@ if(isset($_GET['email_invoice'])){ //Don't chnage the status to sent if the status is anything but draft if($invoice_status == 'Draft'){ - mysqli_query($mysqli,"UPDATE invoices SET invoice_status = 'Sent' WHERE invoice_id = $invoice_id AND company_id = $session_company_id"); + mysqli_query($mysqli,"UPDATE invoices SET invoice_status = 'Sent' WHERE invoice_id = $invoice_id AND company_id = $session_company_id"); } //Logging @@ -4474,7 +4474,7 @@ if(isset($_POST['add_contact'])){ $password = password_hash(randomString(), PASSWORD_DEFAULT); - if(!file_exists("uploads/clients/$session_company_id/$client_id")) { + if(!file_exists("uploads/clients/$session_company_id/$client_id")) { mkdir("uploads/clients/$session_company_id/$client_id"); } @@ -4574,38 +4574,38 @@ if(isset($_POST['edit_contact'])){ // Set password if(!empty($_POST['contact_password'])){ - $password_hash = mysqli_real_escape_string($mysqli,password_hash($_POST['contact_password'], PASSWORD_DEFAULT)); - mysqli_query($mysqli, "UPDATE contacts SET contact_password_hash = '$password_hash' WHERE contact_id = '$contact_id' AND contact_client_id = '$client_id'"); + $password_hash = mysqli_real_escape_string($mysqli,password_hash($_POST['contact_password'], PASSWORD_DEFAULT)); + mysqli_query($mysqli, "UPDATE contacts SET contact_password_hash = '$password_hash' WHERE contact_id = '$contact_id' AND contact_client_id = '$client_id'"); } // Send contact a welcome e-mail, if specified if(isset($_POST['send_email']) && !empty($auth_method) && !empty($config_smtp_host)){ - if($auth_method == 'azure') { - $password_info = "Login with your Microsoft (Azure AD) account."; - } else { - $password_info = $_POST['contact_password']; - } + if($auth_method == 'azure') { + $password_info = "Login with your Microsoft (Azure AD) account."; + } else { + $password_info = $_POST['contact_password']; + } - $subject = "Your new $session_company_name ITFlow account"; - $body = "Hello, $name

An ITFlow account has been set up for you.

Username: $email
Password: $password_info

Login URL: https://$config_base_url/portal/

~
$session_company_name
Support Department
$config_ticket_from_email"; + $subject = "Your new $session_company_name ITFlow account"; + $body = "Hello, $name

An ITFlow account has been set up for you.

Username: $email
Password: $password_info

Login URL: https://$config_base_url/portal/

~
$session_company_name
Support Department
$config_ticket_from_email"; - $mail = sendSingleEmail($config_smtp_host, $config_smtp_username, $config_smtp_password, $config_smtp_encryption, $config_smtp_port, - $config_ticket_from_email, $config_ticket_from_name, - $email, $name, - $subject, $body); + $mail = sendSingleEmail($config_smtp_host, $config_smtp_username, $config_smtp_password, $config_smtp_encryption, $config_smtp_port, + $config_ticket_from_email, $config_ticket_from_name, + $email, $name, + $subject, $body); - if ($mail !== true) { - mysqli_query($mysqli,"INSERT INTO notifications SET notification_type = 'Mail', notification = 'Failed to send email to $email', notification_timestamp = NOW(), company_id = $session_company_id"); - mysqli_query($mysqli,"INSERT INTO logs SET log_type = 'Mail', log_action = 'Error', log_description = 'Failed to send email to $email regarding $subject. $mail', log_ip = '$session_ip', log_user_agent = '$session_user_agent', log_user_id = $session_user_id, company_id = $session_company_id"); - } + if ($mail !== true) { + mysqli_query($mysqli,"INSERT INTO notifications SET notification_type = 'Mail', notification = 'Failed to send email to $email', notification_timestamp = NOW(), company_id = $session_company_id"); + mysqli_query($mysqli,"INSERT INTO logs SET log_type = 'Mail', log_action = 'Error', log_description = 'Failed to send email to $email regarding $subject. $mail', log_ip = '$session_ip', log_user_agent = '$session_user_agent', log_user_id = $session_user_id, company_id = $session_company_id"); + } } // Check to see if a file is attached if($_FILES['file']['tmp_name'] != ''){ - // get details of the uploaded file + // get details of the uploaded file $file_error = 0; $file_tmp_path = $_FILES['file']['tmp_name']; $file_name = $_FILES['file']['name']; @@ -5005,7 +5005,7 @@ if(isset($_POST['edit_location'])){ //Check to see if a file is attached if($_FILES['file']['tmp_name'] != ''){ - // get details of the uploaded file + // get details of the uploaded file $file_error = 0; $file_tmp_path = $_FILES['file']['tmp_name']; $file_name = $_FILES['file']['name']; @@ -5403,7 +5403,7 @@ if(isset($_POST['edit_asset'])){ $alert_extended = " along with updating login credentials"; }else{ - //If Username is filled in then add a login + //If Username is filled in then add a login if(!empty($_POST['username'])) { mysqli_query($mysqli,"INSERT INTO logins SET login_name = '$name', login_username = '$username', login_password = '$password', login_asset_id = $asset_id, login_client_id = $client_id, company_id = $session_company_id"); @@ -5732,7 +5732,7 @@ if(isset($_POST['add_software_from_template'])){ $_SESSION['alert_message'] = "Software created from template"; - header("Location: " . $_SERVER["HTTP_REFERER"]); + header("Location: " . $_SERVER["HTTP_REFERER"]); } @@ -5845,7 +5845,7 @@ if(isset($_POST['edit_software'])){ if($login_id > 0){ mysqli_query($mysqli,"UPDATE logins SET login_name = '$name', login_username = '$username', login_password = '$password' WHERE login_id = $login_id AND company_id = $session_company_id"); }else{ - //If Username is filled in then add a login + //If Username is filled in then add a login if(!empty($username)) { mysqli_query($mysqli,"INSERT INTO logins SET login_name = '$name', login_username = '$username', login_password = '$password', login_software_id = $software_id, login_client_id = $client_id, company_id = $session_company_id"); @@ -5958,7 +5958,7 @@ if(isset($_GET['export_client_software_csv'])){ ON software_assets.asset_id = assets.asset_id WHERE software_id = $row[software_id]"); while($asset_row = mysqli_fetch_array($asset_licenses_sql)){ - $assigned_to_assets .= $asset_row['asset_name'] . ", "; + $assigned_to_assets .= $asset_row['asset_name'] . ", "; } // Contact Licenses @@ -5969,7 +5969,7 @@ if(isset($_GET['export_client_software_csv'])){ ON software_contacts.contact_id = contacts.contact_id WHERE software_id = $row[software_id]"); while($contact_row = mysqli_fetch_array($contact_licenses_sql)){ - $assigned_to_contacts .= $contact_row['contact_name'] . ", "; + $assigned_to_contacts .= $contact_row['contact_name'] . ", "; } $lineData = array($row['software_name'], $row['software_version'], $row['software_type'], $row['software_license_type'], $row['software_seats'], $row['software_key'], $assigned_to_assets, $assigned_to_contacts, $row['software_purchase'], $row['software_expire'], $row['software_notes']); @@ -6549,12 +6549,12 @@ if(isset($_POST['add_domain'])){ // Get SSL cert for domain (if exists) $certificate = getSSL($name); if($certificate['success'] == "TRUE"){ - $expire = mysqli_real_escape_string($mysqli, $certificate['expire']); - $issued_by = mysqli_real_escape_string($mysqli, $certificate['issued_by']); - $public_key = mysqli_real_escape_string($mysqli, $certificate['public_key']); + $expire = mysqli_real_escape_string($mysqli, $certificate['expire']); + $issued_by = mysqli_real_escape_string($mysqli, $certificate['issued_by']); + $public_key = mysqli_real_escape_string($mysqli, $certificate['public_key']); - mysqli_query($mysqli,"INSERT INTO certificates SET certificate_name = '$name', certificate_domain = '$name', certificate_issued_by = '$issued_by', certificate_expire = '$expire', certificate_public_key = '$public_key', certificate_domain_id = $domain_id, certificate_client_id = $client_id, company_id = $session_company_id"); - $extended_log_description = ', with associated SSL cert'; + mysqli_query($mysqli,"INSERT INTO certificates SET certificate_name = '$name', certificate_domain = '$name', certificate_issued_by = '$issued_by', certificate_expire = '$expire', certificate_public_key = '$public_key', certificate_domain_id = $domain_id, certificate_client_id = $client_id, company_id = $session_company_id"); + $extended_log_description = ', with associated SSL cert'; } // Logging @@ -6800,23 +6800,23 @@ if(isset($_POST['assign_ticket'])){ // Allow for un-assigning tickets if($assigned_to == 0){ - $ticket_reply = "Ticket unassigned."; - $agent_name = "No One"; + $ticket_reply = "Ticket unassigned."; + $agent_name = "No One"; } else { - // Get & verify assigned agent details - $agent_details_sql = mysqli_query($mysqli, "SELECT user_name, user_email FROM users LEFT JOIN user_settings ON users.user_id = user_settings.user_id WHERE users.user_id = '$assigned_to' AND user_settings.user_role > 1"); - $agent_details = mysqli_fetch_array($agent_details_sql); - $agent_name = $agent_details['user_name']; - $agent_email = $agent_details['user_email']; - $ticket_reply = "Ticket re-assigned to $agent_name."; + // Get & verify assigned agent details + $agent_details_sql = mysqli_query($mysqli, "SELECT user_name, user_email FROM users LEFT JOIN user_settings ON users.user_id = user_settings.user_id WHERE users.user_id = '$assigned_to' AND user_settings.user_role > 1"); + $agent_details = mysqli_fetch_array($agent_details_sql); + $agent_name = $agent_details['user_name']; + $agent_email = $agent_details['user_email']; + $ticket_reply = "Ticket re-assigned to $agent_name."; - if(!$agent_name){ - $_SESSION['alert_type'] = "error"; - $_SESSION['alert_message'] = "Invalid agent!"; - header("Location: " . $_SERVER["HTTP_REFERER"]); - exit(); - } + if(!$agent_name){ + $_SESSION['alert_type'] = "error"; + $_SESSION['alert_message'] = "Invalid agent!"; + header("Location: " . $_SERVER["HTTP_REFERER"]); + exit(); + } } // Get & verify ticket details @@ -6828,10 +6828,10 @@ if(isset($_POST['assign_ticket'])){ $client_id = intval($ticket_details['ticket_client_id']); if(!$ticket_subject){ - $_SESSION['alert_type'] = "error"; - $_SESSION['alert_message'] = "Invalid ticket!"; - header("Location: " . $_SERVER["HTTP_REFERER"]); - exit(); + $_SESSION['alert_type'] = "error"; + $_SESSION['alert_message'] = "Invalid ticket!"; + header("Location: " . $_SERVER["HTTP_REFERER"]); + exit(); } // Update ticket & insert reply @@ -6952,12 +6952,12 @@ if(isset($_POST['add_ticket_reply'])){ // Slightly different email subject/text depending on if this update closed the ticket or not if($ticket_status == 'Closed') { - $subject = "Ticket closed - [$ticket_prefix$ticket_number] - $ticket_subject | (do not reply)"; - $body = "Hello, $contact_name

Your ticket regarding \"$ticket_subject\" has been closed.

--------------------------------
$ticket_reply--------------------------------

We hope the issue was resolved to your satisfaction. If you need further assistance, please raise a new ticket using the below details. Please do not reply to this email.

Ticket: $ticket_prefix$ticket_number
Subject: $ticket_subject
Portal: https://$config_base_url/portal/ticket.php?id=$ticket_id

~
$session_company_name
Support Department
$config_ticket_from_email
$company_phone"; + $subject = "Ticket closed - [$ticket_prefix$ticket_number] - $ticket_subject | (do not reply)"; + $body = "Hello, $contact_name

Your ticket regarding \"$ticket_subject\" has been closed.

--------------------------------
$ticket_reply--------------------------------

We hope the issue was resolved to your satisfaction. If you need further assistance, please raise a new ticket using the below details. Please do not reply to this email.

Ticket: $ticket_prefix$ticket_number
Subject: $ticket_subject
Portal: https://$config_base_url/portal/ticket.php?id=$ticket_id

~
$session_company_name
Support Department
$config_ticket_from_email
$company_phone"; } else { - $subject = "Ticket update - [$ticket_prefix$ticket_number] - $ticket_subject"; - $body = "#--itflow--#

Hello, $contact_name

Your ticket regarding \"$ticket_subject\" has been updated.

--------------------------------
$ticket_reply--------------------------------

Ticket: $ticket_prefix$ticket_number
Subject: $ticket_subject
Status: $ticket_status
Portal: https://$config_base_url/portal/ticket.php?id=$ticket_id

~
$session_company_name
Support Department
$config_ticket_from_email
$company_phone"; + $subject = "Ticket update - [$ticket_prefix$ticket_number] - $ticket_subject"; + $body = "#--itflow--#

Hello, $contact_name

Your ticket regarding \"$ticket_subject\" has been updated.

--------------------------------
$ticket_reply--------------------------------

Ticket: $ticket_prefix$ticket_number
Subject: $ticket_subject
Status: $ticket_status
Portal: https://$config_base_url/portal/ticket.php?id=$ticket_id

~
$session_company_name
Support Department
$config_ticket_from_email
$company_phone"; } @@ -6967,8 +6967,8 @@ if(isset($_POST['add_ticket_reply'])){ $subject, $body); if ($mail !== true) { - mysqli_query($mysqli,"INSERT INTO notifications SET notification_type = 'Mail', notification = 'Failed to send email to $contact_email', notification_timestamp = NOW(), company_id = $session_company_id"); - mysqli_query($mysqli,"INSERT INTO logs SET log_type = 'Mail', log_action = 'Error', log_description = 'Failed to send email to $contact_email regarding $subject. $mail', log_ip = '$session_ip', log_user_agent = '$session_user_agent', log_user_id = $session_user_id, company_id = $session_company_id"); + mysqli_query($mysqli,"INSERT INTO notifications SET notification_type = 'Mail', notification = 'Failed to send email to $contact_email', notification_timestamp = NOW(), company_id = $session_company_id"); + mysqli_query($mysqli,"INSERT INTO logs SET log_type = 'Mail', log_action = 'Error', log_description = 'Failed to send email to $contact_email regarding $subject. $mail', log_ip = '$session_ip', log_user_agent = '$session_user_agent', log_user_id = $session_user_id, company_id = $session_company_id"); } } } @@ -7106,40 +7106,40 @@ if(isset($_GET['close_ticket'])){ // Client notification email if (!empty($config_smtp_host) && $config_ticket_client_general_notifications == 1) { - // Get details - $ticket_sql = mysqli_query($mysqli,"SELECT contact_name, contact_email, ticket_prefix, ticket_number, ticket_subject, company_phone FROM tickets + // Get details + $ticket_sql = mysqli_query($mysqli,"SELECT contact_name, contact_email, ticket_prefix, ticket_number, ticket_subject, company_phone FROM tickets LEFT JOIN clients ON ticket_client_id = client_id LEFT JOIN contacts ON ticket_contact_id = contact_id LEFT JOIN companies ON tickets.company_id = companies.company_id WHERE ticket_id = $ticket_id AND tickets.company_id = $session_company_id "); - $row = mysqli_fetch_array($ticket_sql); + $row = mysqli_fetch_array($ticket_sql); - $contact_name = $row['contact_name']; - $contact_email = $row['contact_email']; - $ticket_prefix = $row['ticket_prefix']; - $ticket_number = $row['ticket_number']; - $ticket_subject = $row['ticket_subject']; - $company_phone = formatPhoneNumber($row['company_phone']); + $contact_name = $row['contact_name']; + $contact_email = $row['contact_email']; + $ticket_prefix = $row['ticket_prefix']; + $ticket_number = $row['ticket_number']; + $ticket_subject = $row['ticket_subject']; + $company_phone = formatPhoneNumber($row['company_phone']); - // Check email valid - if(filter_var($contact_email, FILTER_VALIDATE_EMAIL)){ + // Check email valid + if(filter_var($contact_email, FILTER_VALIDATE_EMAIL)){ - $subject = "Ticket closed - [$ticket_prefix$ticket_number] - $ticket_subject | (do not reply)"; - $body = "Hello, $contact_name

Your ticket regarding \"$ticket_subject\" has been closed.

We hope the issue was resolved to your satisfaction. If you need further assistance, please raise a new ticket using the below details. Please do not reply to this email.

Ticket: $ticket_prefix$ticket_number
Subject: $ticket_subject
Portal: https://$config_base_url/portal/ticket.php?id=$ticket_id

~
$session_company_name
Support Department
$config_ticket_from_email
$company_phone"; + $subject = "Ticket closed - [$ticket_prefix$ticket_number] - $ticket_subject | (do not reply)"; + $body = "Hello, $contact_name

Your ticket regarding \"$ticket_subject\" has been closed.

We hope the issue was resolved to your satisfaction. If you need further assistance, please raise a new ticket using the below details. Please do not reply to this email.

Ticket: $ticket_prefix$ticket_number
Subject: $ticket_subject
Portal: https://$config_base_url/portal/ticket.php?id=$ticket_id

~
$session_company_name
Support Department
$config_ticket_from_email
$company_phone"; - $mail = sendSingleEmail($config_smtp_host, $config_smtp_username, $config_smtp_password, $config_smtp_encryption, $config_smtp_port, - $config_ticket_from_email, $config_ticket_from_name, - $contact_email, $contact_name, - $subject, $body); + $mail = sendSingleEmail($config_smtp_host, $config_smtp_username, $config_smtp_password, $config_smtp_encryption, $config_smtp_port, + $config_ticket_from_email, $config_ticket_from_name, + $contact_email, $contact_name, + $subject, $body); + + if ($mail !== true) { + mysqli_query($mysqli,"INSERT INTO notifications SET notification_type = 'Mail', notification = 'Failed to send email to $contact_email', notification_timestamp = NOW(), company_id = $session_company_id"); + mysqli_query($mysqli,"INSERT INTO logs SET log_type = 'Mail', log_action = 'Error', log_description = 'Failed to send email to $contact_email regarding $subject. $mail', log_ip = '$session_ip', log_user_agent = '$session_user_agent', log_user_id = $session_user_id, company_id = $session_company_id"); + } - if ($mail !== true) { - mysqli_query($mysqli,"INSERT INTO notifications SET notification_type = 'Mail', notification = 'Failed to send email to $contact_email', notification_timestamp = NOW(), company_id = $session_company_id"); - mysqli_query($mysqli,"INSERT INTO logs SET log_type = 'Mail', log_action = 'Error', log_description = 'Failed to send email to $contact_email regarding $subject. $mail', log_ip = '$session_ip', log_user_agent = '$session_user_agent', log_user_id = $session_user_id, company_id = $session_company_id"); } - } - } //End Mail IF @@ -7437,8 +7437,8 @@ if(isset($_POST['add_service'])){ if(!empty($_POST['assets'])){ $service_asset_ids = $_POST['assets']; foreach($service_asset_ids as $asset_id){ - $asset_id = intval($asset_id); - if($asset_id > 0){ + $asset_id = intval($asset_id); + if($asset_id > 0){ mysqli_query($mysqli, "INSERT INTO service_assets SET service_id = '$service_id', asset_id = '$asset_id'"); } } @@ -7713,7 +7713,7 @@ if(isset($_POST['add_document'])){ validateTechRole(); - // HTML Purifier + // HTML Purifier require("plugins/htmlpurifier/HTMLPurifier.standalone.php"); $purifier_config = HTMLPurifier_Config::createDefault(); $purifier_config->set('URI.AllowedSchemes', ['data' => true, 'src' => true, 'http' => true, 'https' => true]); @@ -7744,7 +7744,7 @@ if(isset($_POST['add_document_template'])){ validateTechRole(); - // HTML Purifier + // HTML Purifier require("plugins/htmlpurifier/HTMLPurifier.standalone.php"); $purifier_config = HTMLPurifier_Config::createDefault(); $purifier_config->set('URI.AllowedSchemes', ['data' => true, 'src' => true, 'http' => true, 'https' => true]); @@ -7805,7 +7805,7 @@ if(isset($_POST['add_document_from_template'])){ $_SESSION['alert_message'] = "Document created from template"; - header("Location: client_document_details.php?client_id=$client_id&document_id=$document_id"); + header("Location: client_document_details.php?client_id=$client_id&document_id=$document_id"); } @@ -7813,7 +7813,7 @@ if(isset($_POST['edit_document'])){ validateTechRole(); - // HTML Purifier + // HTML Purifier require("plugins/htmlpurifier/HTMLPurifier.standalone.php"); $purifier_config = HTMLPurifier_Config::createDefault(); $purifier_config->set('URI.AllowedSchemes', ['data' => true, 'src' => true, 'http' => true, 'https' => true]); @@ -7843,7 +7843,7 @@ if(isset($_POST['edit_document_template'])){ validateTechRole(); - // HTML Purifier + // HTML Purifier require("plugins/htmlpurifier/HTMLPurifier.standalone.php"); $purifier_config = HTMLPurifier_Config::createDefault(); $purifier_config->set('URI.AllowedSchemes', ['data' => true, 'src' => true, 'http' => true, 'https' => true]); @@ -8086,8 +8086,8 @@ if(isset($_GET['force_recurring'])){ $mail = sendSingleEmail($config_smtp_host, $config_smtp_username, $config_smtp_password, $config_smtp_encryption, $config_smtp_port, $config_invoice_from_email, $config_invoice_from_name, - $contact_email, $contact_name, - $subject, $body); + $contact_email, $contact_name, + $subject, $body); if ($mail === true) { // Add send history @@ -8411,458 +8411,458 @@ if(isset($_GET['export_client_pdf'])){ $sql_certficates = mysqli_query($mysqli,"SELECT * FROM certificates WHERE certificate_client_id = $client_id ORDER BY certificate_name ASC"); $sql_software = mysqli_query($mysqli,"SELECT * FROM software WHERE software_client_id = $client_id ORDER BY software_name ASC"); -?> + ?> - $sb, ' $sql = mysqli_query( $mysqli, - "SELECT SQL_CALC_FOUND_ROWS * FROM products LEFT JOIN categories ON product_category_id = category_id - WHERE products.company_id = $session_company_id - AND (product_name LIKE '%$q%' OR product_description LIKE '%$q%' OR category_name LIKE '%$q%' OR product_price LIKE '%$q%') + "SELECT SQL_CALC_FOUND_ROWS * FROM products LEFT JOIN categories ON product_category_id = category_id + WHERE products.company_id = $session_company_id + AND (product_name LIKE '%$q%' OR product_description LIKE '%$q%' OR category_name LIKE '%$q%' OR product_price LIKE '%$q%') ORDER BY $sb $o LIMIT $record_from, $record_to" ); diff --git a/quote.php b/quote.php index 7251c2ce..c60aaebd 100644 --- a/quote.php +++ b/quote.php @@ -413,7 +413,7 @@ require_once("footer.php"); ?> - + @@ -306,27 +309,27 @@ $user_active_assigned_tickets = $row['total_tickets_assigned']; } ?>"> @@ -384,8 +387,7 @@ $user_active_assigned_tickets = $row['total_tickets_assigned']; if (empty($ticket_assigned_to)) { if ($ticket_status == "Closed") { $ticket_assigned_to_display = "

Not Assigned

"; - } - else{ + } else { $ticket_assigned_to_display = "

Not Assigned

"; } } else { @@ -407,7 +409,7 @@ $user_active_assigned_tickets = $row['total_tickets_assigned']; @@ -453,10 +454,10 @@ $user_active_assigned_tickets = $row['total_tickets_assigned'];
Timestamp ">Type ">Notification ">Client ">Dismissed At ">Dismissed By ">Timestamp ">Type ">Notification ">Client ">Dismissed At ">Dismissed By ">
Number + href="?&sb=ticket_number&o=">Number Subject + href="?&sb=ticket_subject&o=">Subject Client / Contact + href="?&sb=client_name&o=">Client / Contact Priority + href="?&sb=ticket_priority&o=">Priority Status + href="?&sb=ticket_status&o=">Status Assigned + href="?&sb=user_name&o=">Assigned Last Response + href="?&sb=ticket_updated_at&o=">Last Response Created + href="?&sb=ticket_created_at&o=">Created Action - + @@ -421,24 +423,23 @@ $user_active_assigned_tickets = $row['total_tickets_assigned']; -
- -
- Edit - -
- Delete - -
-
- - + +
+ Edit + +
+ Delete + +
+ +
- +
- - - $sb, ' $sql = mysqli_query( $mysqli, - "SELECT SQL_CALC_FOUND_ROWS transfer_created_at, expense_date AS transfer_date, expense_amount AS transfer_amount, expense_account_id AS transfer_account_from, revenue_account_id AS transfer_account_to, transfer_expense_id, transfer_revenue_id , transfer_id, transfer_notes FROM transfers, expenses, revenues - WHERE transfer_expense_id = expense_id - AND transfer_revenue_id = revenue_id - AND transfers.company_id = $session_company_id - AND DATE(expense_date) BETWEEN '$dtf' AND '$dtt' - ORDER BY $sb $o LIMIT $record_from, $record_to" + "SELECT SQL_CALC_FOUND_ROWS transfer_created_at, expense_date AS transfer_date, expense_amount AS transfer_amount, expense_account_id AS transfer_account_from, revenue_account_id AS transfer_account_to, transfer_expense_id, transfer_revenue_id , transfer_id, transfer_notes FROM transfers, expenses, revenues + WHERE transfer_expense_id = expense_id + AND transfer_revenue_id = revenue_id + AND transfers.company_id = $session_company_id + AND DATE(expense_date) BETWEEN '$dtf' AND '$dtt' + ORDER BY $sb $o LIMIT $record_from, $record_to" ); $num_rows = mysqli_fetch_row(mysqli_query($mysqli, "SELECT FOUND_ROWS()")); diff --git a/trips.php b/trips.php index dc300d47..66b87dd3 100644 --- a/trips.php +++ b/trips.php @@ -59,7 +59,7 @@ $url_query_strings_sb = http_build_query(array_merge($_GET, array('sb' => $sb, ' $sql = mysqli_query( $mysqli, - "SELECT SQL_CALC_FOUND_ROWS * FROM trips + "SELECT SQL_CALC_FOUND_ROWS * FROM trips LEFT JOIN clients ON trip_client_id = client_id LEFT JOIN users ON trip_user_id = user_id WHERE (trip_purpose LIKE '%$q%' OR trip_source LIKE '%$q%' OR trip_destination LIKE '%$q%' OR trip_miles LIKE '%$q%' OR client_name LIKE '%$q%' OR user_name LIKE '%$q%') diff --git a/users.php b/users.php index c66361c4..e225a22e 100644 --- a/users.php +++ b/users.php @@ -1,4 +1,5 @@ - -
-
-

Users

-
-
- - -
- -
+
+
+

Users

+
+
+ + +
+
-
-
-
- -
- -
+
+
+ +
+ +
+
- -
-
- - "> - - - - - - - - - - - + +
+
+
NameEmailRoleStatusLast LoginAction
+ "> + + + + + + + + + + + Invited"; - }elseif ($user_status == 1) { - $user_status_display = "Active"; - }else{ - $user_status_display = "Disabled"; - } - $user_avatar = htmlentities($row['user_avatar']); - $user_token = htmlentities($row['user_token']); - $user_default_company = $row['user_default_company']; - $user_role = $row['user_role']; - if ($user_role == 3) { - $user_role_display = "Administrator"; - }elseif ($user_role == 2) { - $user_role_display = "Technician"; - }else{ - $user_role_display = "Accountant"; - } - $user_company_access_sql = mysqli_query($mysqli, "SELECT company_id FROM user_companies WHERE user_id = $user_id"); - $user_company_access_array = array(); - while ($row = mysqli_fetch_array($user_company_access_sql)) { - $user_company_access_array[] = $row['company_id']; - } - $user_company_access = implode(',', $user_company_access_array); + while ($row = mysqli_fetch_array($sql)) { + $user_id = $row['user_id']; + $user_name = htmlentities($row['user_name']); + $user_email = htmlentities($row['user_email']); + $user_status = intval($row['user_status']); + if ($user_status == 2) { + $user_status_display = "Invited"; + }elseif ($user_status == 1) { + $user_status_display = "Active"; + }else{ + $user_status_display = "Disabled"; + } + $user_avatar = htmlentities($row['user_avatar']); + $user_token = htmlentities($row['user_token']); + $user_default_company = $row['user_default_company']; + $user_role = $row['user_role']; + if ($user_role == 3) { + $user_role_display = "Administrator"; + }elseif ($user_role == 2) { + $user_role_display = "Technician"; + }else{ + $user_role_display = "Accountant"; + } + $user_company_access_sql = mysqli_query($mysqli, "SELECT company_id FROM user_companies WHERE user_id = $user_id"); + $user_company_access_array = array(); + while ($row = mysqli_fetch_array($user_company_access_sql)) { + $user_company_access_array[] = $row['company_id']; + } + $user_company_access = implode(',', $user_company_access_array); - $user_initials = htmlentities(initials($user_name)); + $user_initials = htmlentities(initials($user_name)); - $sql_last_login = mysqli_query( - $mysqli, - "SELECT * FROM logs + $sql_last_login = mysqli_query( + $mysqli, + "SELECT * FROM logs WHERE log_user_id = $user_id AND log_type = 'Login' ORDER BY log_id DESC LIMIT 1" - ); - $row = mysqli_fetch_array($sql_last_login); - $log_created_at = $row['log_created_at']; - $log_ip = htmlentities($row['log_ip']); - $log_user_agent = htmlentities($row['log_user_agent']); - $log_user_os = getOS($log_user_agent); - $log_user_browser = getWebBrowser($log_user_agent); - $last_login = "$log_user_os
$log_user_browser
$log_ip"; - if (empty($last_login)) { - $last_login = "Never logged in"; - } - - ?> - - - - - - - - - - $log_user_browser
$log_ip"; + if (empty($last_login)) { + $last_login = "Never logged in"; } ?> + + -
NameEmailRoleStatusLast LoginAction
- - - "> - - - - - -
- - -
- - 		- -
- - 		-
- -
- Edit - - Activate - - Disable - -
- Company Access -
- Archive -
-
-
+ + + "> + + + + + +
+ -
-
- +
+ + + + + + + +
+ + + +
+ +
+ Edit + + Activate + + Disable + +
+ Company Access +
+ Archive +
+
+ + + + + + +
+
- +
+ $sb, ' $sql = mysqli_query( $mysqli, - "SELECT SQL_CALC_FOUND_ROWS * FROM vendors + "SELECT SQL_CALC_FOUND_ROWS * FROM vendors WHERE vendor_client_id = 0 - AND vendor_template = 0 + AND vendor_template = 0 AND DATE(vendor_created_at) BETWEEN '$dtf' AND '$dtt' AND (vendor_name LIKE '%$q%' OR vendor_description LIKE '%$q%' OR vendor_account_number LIKE '%$q%' OR vendor_website LIKE '%$q%' OR vendor_contact_name LIKE '%$q%' OR vendor_email LIKE '%$q%' OR vendor_phone LIKE '%$phone_query%') AND vendor_archived_at IS NULL