mirror of https://github.com/itflow-org/itflow
38 lines
1.3 KiB
PHP
38 lines
1.3 KiB
PHP
<?php
|
|
/*
|
|
* Client Portal
|
|
* Functions
|
|
*/
|
|
|
|
/*
|
|
* Verifies a contact has access to a particular ticket ID, and that the ticket is in the correct state (open/closed) to perform an action
|
|
*/
|
|
function verifyContactTicketAccess($requested_ticket_id, $expected_ticket_state) {
|
|
|
|
// Access the global variables
|
|
global $mysqli, $session_contact_id, $session_client_primary_contact_id, $session_client_id;
|
|
|
|
// Setup
|
|
if ($expected_ticket_state == "Closed") {
|
|
// Closed tickets
|
|
$ticket_state_snippet = "ticket_status = 'Closed'";
|
|
}
|
|
else {
|
|
// Open (working/hold) tickets
|
|
$ticket_state_snippet = "ticket_status != 'Closed'";
|
|
}
|
|
|
|
// Verify the contact has access to the provided ticket ID
|
|
$sql = mysqli_query($mysqli, "SELECT * FROM tickets WHERE ticket_id = '$requested_ticket_id' AND $ticket_state_snippet AND ticket_client_id = '$session_client_id' LIMIT 1");
|
|
$row = mysqli_fetch_array($sql);
|
|
$ticket_id = $row['ticket_id'];
|
|
|
|
if (intval($ticket_id) && ($session_contact_id == $row['ticket_contact_id'] || $session_contact_id == $session_client_primary_contact_id)) {
|
|
// Client is ticket owner, or primary contact
|
|
return TRUE;
|
|
}
|
|
|
|
// Client is NOT ticket owner or primary contact
|
|
return FALSE;
|
|
|
|
} |