From fe5635f1dcbfa8396dd03376e7d2ddc5d412992a Mon Sep 17 00:00:00 2001
From: Marcus Hill <bcf8c9f2@opayq.com>
Date: Sat, 12 Feb 2022 17:37:56 +0000
Subject: [PATCH] Add contact read to api

---
 api/v1/contacts/read.php | 30 ++++++++++++++++++++++++++++++
 1 file changed, 30 insertions(+)
 create mode 100644 api/v1/contacts/read.php

diff --git a/api/v1/contacts/read.php b/api/v1/contacts/read.php
new file mode 100644
index 00000000..5b4409ea
--- /dev/null
+++ b/api/v1/contacts/read.php
@@ -0,0 +1,30 @@
+<?php
+require('../validate_api_key.php');
+
+if($_SERVER['REQUEST_METHOD'] !== "GET"){
+    header("HTTP/1.1 405 Method Not Allowed");
+    $return_arr['success'] = "False";
+    $return_arr['message'] = "Can only send GET requests to this endpoint.";
+    echo json_encode($return_arr);
+    exit();
+}
+
+// Specific contact via ID (single)
+if(isset($_GET['contact_id'])){
+    $id = intval($_GET['contact_id']);
+    $sql = mysqli_query($mysqli, "SELECT * FROM contacts WHERE contact_id = '$id' AND company_id = '$company_id'");
+}
+
+// Specific contact via email (single)
+elseif(isset($_GET['contact_email'])){
+    $email = trim($_GET['contact_email']);
+    $sql = mysqli_query($mysqli, "SELECT * FROM contacts WHERE contact_email = '$email' AND company_id = '$company_id'");
+}
+
+// All contacts
+else{
+    $sql = mysqli_query($mysqli, "SELECT * FROM contacts WHERE company_id = '$company_id' ORDER BY contact_id LIMIT $limit OFFSET $offset");
+}
+
+// Output
+include("../read_output.php");
\ No newline at end of file