AS1024/itflow
1
0
Fork 0
mirror of https://github.com/itflow-org/itflow synced 2026-03-01 03:14:52 +00:00
Code Issues Packages Projects Releases Wiki Activity

Add read api endpoint for payments; fix requirement for all clients api key

Browse Source
This commit is contained in:
Marcus Hill
2023-02-11 15:10:27 +00:00
parent 073fe953e9
commit eef70a0cf1
1 changed files with 3 additions and 3 deletions
Download Patch File Download Diff File Expand all files Collapse all files

6
api/v1/payments/read.php
View File

@@ -6,19 +6,19 @@ require_once('../require_get_method.php');
// Payments aren't stored against client IDs, so we instead validate the API key is for All Clients // Payments aren't stored against client IDs, so we instead validate the API key is for All Clients
if (isset($_GET['payment_id']) && $client_id !== "*") { if (isset($_GET['payment_id']) && $client_id == "%") {
// Payment via ID (single) // Payment via ID (single)
$id = intval($_GET['payment_id']); $id = intval($_GET['payment_id']);
$sql = mysqli_query($mysqli, "SELECT * FROM payments WHERE payment_id = '$id' AND company_id = '$company_id'"); $sql = mysqli_query($mysqli, "SELECT * FROM payments WHERE payment_id = '$id' AND company_id = '$company_id'");
} elseif (isset($_GET['payment_invoice_id']) && $client_id !== "*") { } elseif (isset($_GET['payment_invoice_id']) && $client_id == "%") {
// Payments for an invoice // Payments for an invoice
$id = intval($_GET['payment_invoice_id']); $id = intval($_GET['payment_invoice_id']);
$sql = mysqli_query($mysqli, "SELECT * FROM payments WHERE payment_invoice_id = '$id' AND company_id = '$company_id'"); $sql = mysqli_query($mysqli, "SELECT * FROM payments WHERE payment_invoice_id = '$id' AND company_id = '$company_id'");
} elseif ($client_id !== "*") { } elseif ($client_id == "%") {
// All payments // All payments
$sql = mysqli_query($mysqli, "SELECT * FROM payments WHERE company_id = '$company_id' ORDER BY payment_id LIMIT $limit OFFSET $offset"); $sql = mysqli_query($mysqli, "SELECT * FROM payments WHERE company_id = '$company_id' ORDER BY payment_id LIMIT $limit OFFSET $offset");