From f2c15b465093a3f4752bd7e8c51b3f43a504128a Mon Sep 17 00:00:00 2001
From: wrongecho <marcus@itflow.org>
Date: Thu, 5 Sep 2024 17:56:42 +0100
Subject: [PATCH] Portal - allow clients to see certs/domains

---
 portal/certificates.php  | 61 ++++++++++++++++++++++++++++++++++++++++
 portal/domains.php       | 55 ++++++++++++++++++++++++++++++++++++
 portal/portal_header.php |  6 ++++
 3 files changed, 122 insertions(+)
 create mode 100644 portal/certificates.php
 create mode 100644 portal/domains.php

diff --git a/portal/certificates.php b/portal/certificates.php
new file mode 100644
index 00000000..aa30f4e4
--- /dev/null
+++ b/portal/certificates.php
@@ -0,0 +1,61 @@
+<?php
+/*
+* Client Portal
+* Certificate listing for PTC / technical contacts
+*/
+
+header("Content-Security-Policy: default-src 'self' fonts.googleapis.com fonts.gstatic.com");
+
+require_once "inc_portal.php";
+
+if ($session_contact_primary == 0 && !$session_contact_is_technical_contact) {
+    header("Location: portal_post.php?logout");
+    exit();
+}
+
+$certificates_sql = mysqli_query($mysqli, "SELECT certificate_id, certificate_name, certificate_domain, certificate_issued_by, certificate_expire FROM certificates WHERE certificate_client_id = $session_client_id AND certificate_archived_at IS NULL ORDER BY certificate_expire ASC");
+?>
+
+    <h3>Web Certificates</h3>
+    <div class="row">
+
+        <div class="col-md-10">
+
+            <table class="table tabled-bordered border border-dark">
+                <thead class="thead-dark">
+                <tr>
+                    <th>Certificate Name</th>
+                    <th>FQDN</th>
+                    <th>Issuer</th>
+                    <th>Expiry</th>
+                </tr>
+                </thead>
+                <tbody>
+
+                <?php
+                while ($row = mysqli_fetch_array($certificates_sql)) {
+                    $certificate_name = nullable_htmlentities($row['certificate_name']);
+                    $certificate_domain = nullable_htmlentities($row['certificate_domain']);
+                    $certificate_issued_by = nullable_htmlentities($row['certificate_issued_by']);
+                    $certificate_expire = nullable_htmlentities($row['certificate_expire']);
+
+                    ?>
+
+                    <tr>
+                        <td><?php echo $certificate_name; ?></td>
+                        <td><?php echo $certificate_domain; ?></td>
+                        <td><?php echo $certificate_issued_by; ?></td>
+                        <td><?php echo $certificate_expire; ?></td>
+                    </tr>
+
+                <?php } ?>
+
+                </tbody>
+            </table>
+
+        </div>
+
+    </div>
+
+<?php
+require_once "portal_footer.php";
diff --git a/portal/domains.php b/portal/domains.php
new file mode 100644
index 00000000..7021564e
--- /dev/null
+++ b/portal/domains.php
@@ -0,0 +1,55 @@
+<?php
+/*
+* Client Portal
+* Domain listing for PTC / technical contacts
+*/
+
+header("Content-Security-Policy: default-src 'self' fonts.googleapis.com fonts.gstatic.com");
+
+require_once "inc_portal.php";
+
+if ($session_contact_primary == 0 && !$session_contact_is_technical_contact) {
+    header("Location: portal_post.php?logout");
+    exit();
+}
+
+$domains_sql = mysqli_query($mysqli, "SELECT domain_id, domain_name, domain_expire FROM domains WHERE domain_client_id = $session_client_id AND domain_archived_at IS NULL ORDER BY domain_expire ASC");
+?>
+
+    <h3>Domains</h3>
+    <div class="row">
+
+        <div class="col-md-10">
+
+            <table class="table tabled-bordered border border-dark">
+                <thead class="thead-dark">
+                <tr>
+                    <th>Domain Name</th>
+                    <th>Expiry</th>
+                </tr>
+                </thead>
+                <tbody>
+
+                <?php
+                while ($row = mysqli_fetch_array($domains_sql)) {
+                    $domain_name = nullable_htmlentities($row['domain_name']);
+                    $domain_expire = nullable_htmlentities($row['domain_expire']);
+
+                    ?>
+
+                    <tr>
+                        <td><?php echo $domain_name; ?></td>
+                        <td><?php echo $domain_expire; ?></td>
+                    </tr>
+
+                <?php } ?>
+
+                </tbody>
+            </table>
+
+        </div>
+
+    </div>
+
+<?php
+require_once "portal_footer.php";
diff --git a/portal/portal_header.php b/portal/portal_header.php
index b141dc4a..17cc1b29 100644
--- a/portal/portal_header.php
+++ b/portal/portal_header.php
@@ -69,6 +69,12 @@ header("X-Frame-Options: DENY"); // Legacy
                     <li class="nav-item">
                         <a class="nav-link <?php if (basename($_SERVER['PHP_SELF']) == "contacts.php") {echo "active";} ?>" href="contacts.php">Contacts</a>
                     </li>
+                    <li class="nav-item">
+                        <a class="nav-link <?php if (basename($_SERVER['PHP_SELF']) == "domains.php") {echo "active";} ?>" href="domains.php">Domains</a>
+                    </li>
+                    <li class="nav-item">
+                        <a class="nav-link <?php if (basename($_SERVER['PHP_SELF']) == "certificates.php") {echo "active";} ?>" href="certificates.php">Certificates</a>
+                    </li>
                 <?php } ?>
             </ul>