From f0bcf975b662a56869dfc353af2c17f701dfc46f Mon Sep 17 00:00:00 2001
From: johnnyq <johnny@pittpc.com>
Date: Thu, 26 Jun 2025 18:18:36 -0400
Subject: [PATCH] Add Assets to the client Portal viewable by Primary and
 technical Contacts

---
 client/assets.php          | 85 ++++++++++++++++++++++++++++++++++++++
 client/includes/header.php |  1 +
 2 files changed, 86 insertions(+)
 create mode 100644 client/assets.php

diff --git a/client/assets.php b/client/assets.php
new file mode 100644
index 00000000..e62120cf
--- /dev/null
+++ b/client/assets.php
@@ -0,0 +1,85 @@
+<?php
+/*
+* Client Portal
+* Contact management for PTC / technical contacts
+*/
+
+header("Content-Security-Policy: default-src 'self'");
+
+require_once "includes/inc_all.php";
+
+if ($session_contact_primary == 0 && !$session_contact_is_technical_contact) {
+    header("Location: post.php?logout");
+    exit();
+}
+
+$assets_sql = mysqli_query($mysqli, "SELECT * FROM assets LEFT JOIN contacts ON asset_contact_id = contact_id WHERE asset_client_id = $session_client_id AND asset_archived_at IS NULL ORDER BY asset_type ASC, asset_name ASC");
+?>
+
+    <div class="row">
+        <div class="col">
+            <h3>Assets</h3>
+        </div>
+    </div>
+
+    <div class="row">
+
+        <div class="col-md-12">
+
+            <table class="table tabled-bordered border border-dark">
+                <thead class="thead-dark">
+                <tr>
+                    <th>Name</th>
+                    <th>Type</th>
+                    <th>Model</th>
+                    <th>Serial</th>
+                    <th>Assigned</th>
+                    <th>Purchase</th>
+                    <th>Warranty</th>
+                    <th>Status</th>
+                </tr>
+                </thead>
+                <tbody>
+
+                <?php
+                while ($row = mysqli_fetch_array($assets_sql)) {
+                    $asset_id = intval($row['asset_id']);
+                    $asset_name = nullable_htmlentities($row['asset_name']);
+                    $asset_description = nullable_htmlentities($row['asset_description']);
+                    $asset_type = nullable_htmlentities($row['asset_type']);
+                    $asset_make = nullable_htmlentities($row['asset_make']);
+                    $asset_model = nullable_htmlentities($row['asset_model']);
+                    $asset_serial = nullable_htmlentities($row['asset_serial']);
+                    $asset_purchase_date = nullable_htmlentities($row['asset_purchase_date'] ?? "-");
+                    $asset_warranty_expire = nullable_htmlentities($row['asset_warranty_expire'] ?? "-");
+                    $assigned_to = nullable_htmlentities($row['contact_name'] ?? "-");
+                    $asset_status = nullable_htmlentities($row['asset_status']);
+
+                    ?>
+
+                    <tr>
+                        <td>
+                            <a href="#"><?php echo $asset_name ?></a>
+                            <br>
+                            <small class="text-secondary"><?php echo $asset_description; ?></small>
+                        </td>
+                        <td><?php echo $asset_type; ?></td>
+                        <td><?php echo "$asset_make<br><span class='text-secondary'>$asset_model</span>"; ?></td>
+                        <td><?php echo $asset_serial; ?></td>
+                        <td><?php echo $assigned_to; ?></td>
+                        <td><?php echo $asset_purchase_date; ?></td>
+                        <td><?php echo $asset_warranty_expire; ?></td>
+                        <td><?php echo $asset_status; ?></td>
+                    </tr>
+
+                <?php } ?>
+
+                </tbody>
+            </table>
+
+        </div>
+
+    </div>
+
+<?php
+require_once "includes/footer.php";
diff --git a/client/includes/header.php b/client/includes/header.php
index 06a53e4c..486089b5 100644
--- a/client/includes/header.php
+++ b/client/includes/header.php
@@ -70,6 +70,7 @@ header("X-Frame-Options: DENY"); // Legacy
                         </a>
                         <div class="dropdown-menu" aria-labelledby="navbarDropdown2">
                             <a class="dropdown-item" href="contacts.php">Contacts</a>
+                            <a class="dropdown-item" href="assets.php">Assets</a>
                             <a class="dropdown-item" href="documents.php">Documents</a>
                             <a class="dropdown-item" href="domains.php">Domains</a>
                             <a class="dropdown-item" href="certificates.php">Certificates</a>