mirror of
https://github.com/itflow-org/itflow
synced 2026-11-11 15:07:24 +00:00
237 lines
15 KiB
PHP
237 lines
15 KiB
PHP
<?php
|
|
/*
|
|
* Client Portal
|
|
* A contact - how to reach them, their roles and the devices they use. The
|
|
* primary contact changes their details and roles here, and their portal
|
|
* access: give access and email an invite, send it again, or turn it off.
|
|
* When someone has left, Left the company turns their access off and opens
|
|
* a ticket for us to close their accounts. ?new=1 adds a person.
|
|
*
|
|
* SCOPING: primary and technical contacts see a contact
|
|
* (contactCan('contacts')); only the primary contact changes anything
|
|
* (contactCan('contacts_manage')), never their own record or another
|
|
* primary contact's - the handlers in post.php check the same.
|
|
*/
|
|
|
|
header("Content-Security-Policy: default-src 'self'");
|
|
$portal_load_phone_inputs = true;
|
|
|
|
require_once "includes/inc_all.php";
|
|
|
|
enforceContactCan('contacts');
|
|
|
|
$manage = contactCan('contacts_manage');
|
|
$new = !empty($_GET['new']) && $manage;
|
|
$contact = null;
|
|
|
|
if (!$new) {
|
|
$contact_id = intval($_GET['id'] ?? 0);
|
|
$contact = mysqli_fetch_assoc(mysqli_query($mysqli, "SELECT contact_id, contact_name, contact_title, contact_email, contact_phone, contact_phone_country_code,
|
|
contact_extension, contact_mobile, contact_mobile_country_code, contact_photo, contact_primary, contact_billing, contact_technical,
|
|
contact_department, contact_created_at, location_name, user_id, user_auth_method, user_status, user_archived_at
|
|
FROM contacts
|
|
LEFT JOIN users ON user_id = contact_user_id
|
|
LEFT JOIN locations ON location_id = contact_location_id AND location_archived_at IS NULL
|
|
WHERE contact_id = $contact_id AND contact_client_id = $session_client_id AND contact_archived_at IS NULL LIMIT 1"));
|
|
if (!$contact) { ?>
|
|
<a class="itflow-portal-back" href="contacts.php"><i class="fas fa-chevron-left"></i>Contacts</a>
|
|
<section class="itflow-portal-panel">
|
|
<?= emptyStateHtml(['title' => "That person isn't here", 'text' => 'They may have been removed from your company\'s contacts.', 'icon' => 'fa-address-book', 'filtered' => false,
|
|
'actions' => [['label' => 'All contacts', 'href' => 'contacts.php', 'icon' => 'fa-arrow-left']]]) ?>
|
|
</section>
|
|
<?php
|
|
require_once "includes/footer.php";
|
|
exit;
|
|
}
|
|
}
|
|
|
|
$self = $contact && intval($contact['contact_id']) === $session_contact_id;
|
|
$editable = $new || ($manage && !$self && !intval($contact['contact_primary']));
|
|
$methods = portalSignInMethods();
|
|
|
|
// What was typed, when the form came back with a problem
|
|
$form = $_SESSION['portal_contact_form'] ?? null;
|
|
unset($_SESSION['portal_contact_form']);
|
|
if ($form && intval($form['contact_id'] ?? -1) !== intval($contact['contact_id'] ?? 0)) {
|
|
$form = null;
|
|
}
|
|
$value = function ($field, $fallback = '') use ($form, $contact) {
|
|
if ($form && array_key_exists($field, $form)) {
|
|
return (string) $form[$field];
|
|
}
|
|
return (string) ($contact[$field] ?? $fallback);
|
|
};
|
|
?>
|
|
|
|
<a class="itflow-portal-back" href="contacts.php"><i class="fas fa-chevron-left"></i>Contacts</a>
|
|
|
|
<?php if ($new) { ?>
|
|
|
|
<div class="itflow-portal-page-head">
|
|
<div>
|
|
<h1>Add a person</h1>
|
|
<p>Someone new at <?= escapeHtml($session_client_name) ?> - and whether they can sign in here</p>
|
|
</div>
|
|
</div>
|
|
<div class="row">
|
|
<div class="col-lg-8">
|
|
<?php require __DIR__ . '/includes/contact_form.php'; ?>
|
|
</div>
|
|
</div>
|
|
|
|
<?php } else {
|
|
$access = portalContactAccess($contact);
|
|
$last = $contact['user_id'] ? portalContactLastSignIn($contact['user_id']) : null;
|
|
$roles = portalContactRoles($contact);
|
|
$devices = [];
|
|
if ($config_module_enable_itdoc && contactCan('itdoc')) {
|
|
$sql = mysqli_query($mysqli, "SELECT asset_id, asset_name, asset_type, asset_make, asset_model FROM assets
|
|
WHERE asset_contact_id = " . intval($contact['contact_id']) . " AND asset_client_id = $session_client_id AND asset_archived_at IS NULL ORDER BY asset_name ASC");
|
|
while ($row = mysqli_fetch_assoc($sql)) {
|
|
$devices[] = $row;
|
|
}
|
|
} ?>
|
|
|
|
<div class="itflow-portal-page-head">
|
|
<div class="d-flex align-items-center gap-3 min-w-0">
|
|
<?= portalAvatarHtml((string) $contact['contact_name'], !empty($contact['contact_photo']) ? "/uploads/clients/$session_client_id/" . rawurlencode(basename($contact['contact_photo'])) : '', 'lg') ?>
|
|
<div class="min-w-0">
|
|
<h1 class="text-truncate"><?= escapeHtml($contact['contact_name']) ?><?= $self ? '<span class="fw-normal text-body-secondary fs-5"> (you)</span>' : '' ?></h1>
|
|
<p><?= escapeHtml(implode(' · ', array_filter(array_merge([$contact['contact_title']], $roles)))) ?: 'Contact' ?></p>
|
|
</div>
|
|
</div>
|
|
<?php if ($self) { ?>
|
|
<a class="btn btn-outline-secondary" href="profile.php"><i class="fas fa-user me-2"></i>Your account</a>
|
|
<?php } ?>
|
|
</div>
|
|
|
|
<div class="row g-4">
|
|
<div class="col-lg-7">
|
|
<?php if ($editable) { ?>
|
|
<?php require __DIR__ . '/includes/contact_form.php'; ?>
|
|
<?php } else {
|
|
$phone = !empty($contact['contact_phone']) ? formatPhoneNumber($contact['contact_phone'], $contact['contact_phone_country_code']) . (!empty($contact['contact_extension']) ? ' x' . $contact['contact_extension'] : '') : '';
|
|
$mobile = !empty($contact['contact_mobile']) ? formatPhoneNumber($contact['contact_mobile'], $contact['contact_mobile_country_code']) : '';
|
|
$facts = array_filter([
|
|
'Email' => !empty($contact['contact_email']) ? '<a href="mailto:' . escapeHtml($contact['contact_email']) . '">' . escapeHtml($contact['contact_email']) . '</a>' : '',
|
|
'Phone' => $phone !== '' ? '<a href="tel:' . escapeHtml(preg_replace('/[^0-9+]/', '', ($contact['contact_phone_country_code'] ? '+' . $contact['contact_phone_country_code'] : '') . $contact['contact_phone'])) . '">' . escapeHtml($phone) . '</a>' : '',
|
|
'Mobile' => $mobile !== '' ? '<a href="tel:' . escapeHtml(preg_replace('/[^0-9+]/', '', ($contact['contact_mobile_country_code'] ? '+' . $contact['contact_mobile_country_code'] : '') . $contact['contact_mobile'])) . '">' . escapeHtml($mobile) . '</a>' : '',
|
|
'Title' => escapeHtml($contact['contact_title']),
|
|
'Department' => escapeHtml($contact['contact_department']),
|
|
'Location' => escapeHtml($contact['location_name'] ?? ''),
|
|
'Roles' => escapeHtml(implode(', ', $roles)),
|
|
], function ($v) { return trim((string) $v) !== ''; }); ?>
|
|
<section class="itflow-portal-panel">
|
|
<div class="itflow-portal-panel-head">
|
|
<h2><i class="fas fa-address-card"></i>Details</h2>
|
|
</div>
|
|
<div class="itflow-portal-panel-body">
|
|
<dl class="itflow-portal-facts">
|
|
<?php foreach ($facts as $label => $fact) { ?>
|
|
<div><dt><?= $label ?></dt><dd><?= $fact ?></dd></div>
|
|
<?php } ?>
|
|
</dl>
|
|
<?php if ($manage && !$self) { ?>
|
|
<p class="small text-body-secondary mt-3 mb-0">This is the company's primary contact - <a href="<?= escapeHtml(portalAskUrl('Change the primary contact')) ?>">ask us</a> to change who that is.</p>
|
|
<?php } elseif ($self) { ?>
|
|
<p class="small text-body-secondary mt-3 mb-0">Change your own phone numbers and sign-in in <a href="profile.php">Your account</a>.</p>
|
|
<?php } ?>
|
|
</div>
|
|
</section>
|
|
<?php } ?>
|
|
</div>
|
|
|
|
<div class="col-lg-5">
|
|
<?php if ($editable) { ?>
|
|
<section class="itflow-portal-panel mb-4">
|
|
<div class="itflow-portal-panel-head">
|
|
<h2><i class="fas fa-key"></i>Portal access</h2>
|
|
</div>
|
|
<div class="itflow-portal-panel-body">
|
|
<div class="d-flex flex-wrap align-items-center gap-2 mb-2">
|
|
<?= portalStateBadge($access) ?>
|
|
<?php if (in_array($access['key'], ['local', 'azure'], true)) { ?>
|
|
<span class="small text-body-secondary"><?= $last ? 'Last signed in ' . escapeHtml(timeAgo($last)) : "Hasn't signed in yet" ?></span>
|
|
<?php } ?>
|
|
</div>
|
|
<?php if (in_array($access['key'], ['local', 'azure'], true)) { ?>
|
|
<p class="small text-body-secondary">They can sign in here as <strong><?= escapeHtml($contact['contact_email']) ?></strong> and see <?= $contact['contact_technical'] ? 'every ticket at ' . escapeHtml($session_client_name) : 'the tickets they raise' ?><?= $contact['contact_billing'] ? ', and the billing' : '' ?>.</p>
|
|
<form action="post.php" method="post" class="d-flex flex-wrap gap-2">
|
|
<input type="hidden" name="csrf_token" value="<?= $_SESSION['csrf_token'] ?>">
|
|
<input type="hidden" name="contact_id" value="<?= intval($contact['contact_id']) ?>">
|
|
<input type="hidden" name="method" value="<?= escapeHtml($access['key']) ?>">
|
|
<button type="submit" class="btn btn-outline-primary" name="portal_contact_access" value="invite"><i class="fas fa-paper-plane me-2"></i>Email the invite again</button>
|
|
<button type="submit" class="btn btn-outline-danger confirm-link" name="portal_contact_access" value="off"
|
|
data-confirm-title="Turn off <?= escapeHtml($contact['contact_name']) ?>'s access?" data-confirm-text="They are signed out straight away and can't sign in again until you give them access." data-confirm-button="Turn off"><i class="fas fa-ban me-2"></i>Turn off access</button>
|
|
</form>
|
|
<?php } else { ?>
|
|
<p class="small text-body-secondary">Give them access and we email <strong><?= escapeHtml($contact['contact_email'] ?: 'them') ?></strong> a link to sign in.</p>
|
|
<form action="post.php" method="post">
|
|
<input type="hidden" name="csrf_token" value="<?= $_SESSION['csrf_token'] ?>">
|
|
<input type="hidden" name="contact_id" value="<?= intval($contact['contact_id']) ?>">
|
|
<?php if (count($methods) > 1) { ?>
|
|
<div class="mb-3">
|
|
<label class="form-label" for="accessMethod">They sign in</label>
|
|
<div class="input-group">
|
|
<span class="input-group-text"><i class="fa fa-fw fa-sign-in-alt"></i></span>
|
|
<select class="form-select" id="accessMethod" name="method">
|
|
<?php foreach ($methods as $key => $label) { ?>
|
|
<option value="<?= $key ?>"><?= escapeHtml($label) ?></option>
|
|
<?php } ?>
|
|
</select>
|
|
</div>
|
|
</div>
|
|
<?php } else { ?>
|
|
<input type="hidden" name="method" value="local">
|
|
<?php } ?>
|
|
<button type="submit" class="btn btn-primary" name="portal_contact_access" value="invite"<?= empty($contact['contact_email']) ? ' disabled' : '' ?>><i class="fas fa-paper-plane me-2"></i>Give access and email an invite</button>
|
|
</form>
|
|
<?php } ?>
|
|
</div>
|
|
</section>
|
|
|
|
<section class="itflow-portal-panel mb-4">
|
|
<div class="itflow-portal-panel-head">
|
|
<h2><i class="fas fa-door-open"></i>Left the company?</h2>
|
|
</div>
|
|
<div class="itflow-portal-panel-body">
|
|
<p class="small text-body-secondary">We turn off their portal access now, and you tell us what else to close down - their email, accounts and devices - on a ticket.</p>
|
|
<form action="post.php" method="post">
|
|
<input type="hidden" name="csrf_token" value="<?= $_SESSION['csrf_token'] ?>">
|
|
<input type="hidden" name="contact_id" value="<?= intval($contact['contact_id']) ?>">
|
|
<button type="submit" class="btn btn-outline-danger confirm-link" name="portal_contact_left" value="1"
|
|
data-confirm-title="Has <?= escapeHtml($contact['contact_name']) ?> left?" data-confirm-text="Their portal access is turned off, and a new ticket opens for you to tell us what else to close down." data-confirm-button="Yes, they've left"><i class="fas fa-user-slash me-2"></i><?= escapeHtml(strtok($contact['contact_name'], ' ')) ?> has left</button>
|
|
</form>
|
|
</div>
|
|
</section>
|
|
<?php } ?>
|
|
|
|
<?php if ($devices) { ?>
|
|
<section class="itflow-portal-panel">
|
|
<div class="itflow-portal-panel-head">
|
|
<h2><i class="fas fa-desktop"></i>Devices they use</h2>
|
|
</div>
|
|
<ul class="itflow-portal-list">
|
|
<?php foreach ($devices as $device) { ?>
|
|
<li>
|
|
<a class="itflow-portal-todo" href="asset.php?id=<?= intval($device['asset_id']) ?>">
|
|
<?= portalTile('fa-' . getAssetIcon($device['asset_type']), 'sm') ?>
|
|
<span class="itflow-portal-todo-main">
|
|
<div><?= escapeHtml($device['asset_name']) ?></div>
|
|
<div><?= escapeHtml(trim($device['asset_make'] . ' ' . $device['asset_model']) ?: $device['asset_type']) ?></div>
|
|
</span>
|
|
<i class="fas fa-chevron-right text-body-secondary small"></i>
|
|
</a>
|
|
</li>
|
|
<?php } ?>
|
|
</ul>
|
|
</section>
|
|
<?php } ?>
|
|
</div>
|
|
</div>
|
|
|
|
<?php } ?>
|
|
|
|
<?php
|
|
require_once "includes/footer.php";
|