mirror of https://github.com/itflow-org/itflow
244 lines
10 KiB
PHP
244 lines
10 KiB
PHP
<?php
|
|
|
|
/*
|
|
* ITFlow - GET/POST request handler for client service info
|
|
*/
|
|
|
|
if (isset($_POST['add_service'])) {
|
|
|
|
validateTechRole();
|
|
|
|
$client_id = intval($_POST['client_id']);
|
|
$service_name = sanitizeInput($_POST['name']);
|
|
$service_description = sanitizeInput($_POST['description']);
|
|
$service_category = sanitizeInput($_POST['category']); //TODO: Needs integration with company categories
|
|
$service_importance = sanitizeInput($_POST['importance']);
|
|
$service_backup = sanitizeInput($_POST['backup']);
|
|
$service_notes = sanitizeInput($_POST['note']);
|
|
|
|
// Create Service
|
|
$service_sql = mysqli_query($mysqli, "INSERT INTO services SET service_name = '$service_name', service_description = '$service_description', service_category = '$service_category', service_importance = '$service_importance', service_backup = '$service_backup', service_notes = '$service_notes', service_client_id = $client_id");
|
|
|
|
// Create links to assets
|
|
if ($service_sql) {
|
|
$service_id = $mysqli->insert_id;
|
|
|
|
if (!empty($_POST['contacts'])) {
|
|
$service_contact_ids = $_POST['contacts'];
|
|
foreach($service_contact_ids as $contact_id) {
|
|
$contact_id = intval($contact_id);
|
|
if ($contact_id > 0) {
|
|
mysqli_query($mysqli, "INSERT INTO service_contacts SET service_id = $service_id, contact_id = $contact_id");
|
|
}
|
|
}
|
|
}
|
|
|
|
if (!empty($_POST['vendors'])) {
|
|
$service_vendor_ids = $_POST['vendors'];
|
|
foreach($service_vendor_ids as $vendor_id) {
|
|
$vendor_id = intval($vendor_id);
|
|
if ($vendor_id > 0) {
|
|
mysqli_query($mysqli, "INSERT INTO service_vendors SET service_id = $service_id, vendor_id = $vendor_id");
|
|
}
|
|
}
|
|
}
|
|
|
|
if (!empty($_POST['documents'])) {
|
|
$service_document_ids = $_POST['documents'];
|
|
foreach($service_document_ids as $document_id) {
|
|
$document_id = intval($document_id);
|
|
if ($document_id > 0) {
|
|
mysqli_query($mysqli, "INSERT INTO service_documents SET service_id = $service_id, document_id = $document_id");
|
|
}
|
|
}
|
|
}
|
|
|
|
if (!empty($_POST['assets'])) {
|
|
$service_asset_ids = $_POST['assets'];
|
|
foreach($service_asset_ids as $asset_id) {
|
|
$asset_id = intval($asset_id);
|
|
if ($asset_id > 0) {
|
|
mysqli_query($mysqli, "INSERT INTO service_assets SET service_id = $service_id, asset_id = $asset_id");
|
|
}
|
|
}
|
|
}
|
|
|
|
if (!empty($_POST['logins'])) {
|
|
$service_login_ids = $_POST['logins'];
|
|
foreach($service_login_ids as $login_id) {
|
|
$login_id = intval($login_id);
|
|
if ($login_id > 0) {
|
|
mysqli_query($mysqli, "INSERT INTO service_logins SET service_id = $service_id, login_id = $login_id");
|
|
}
|
|
}
|
|
}
|
|
|
|
if (!empty($_POST['domains'])) {
|
|
$service_domain_ids = $_POST['domains'];
|
|
foreach($service_domain_ids as $domain_id) {
|
|
$domain_id = intval($domain_id);
|
|
if ($domain_id > 0) {
|
|
mysqli_query($mysqli, "INSERT INTO service_domains SET service_id = $service_id, domain_id = $domain_id");
|
|
}
|
|
}
|
|
}
|
|
|
|
if (!empty($_POST['certificates'])) {
|
|
$service_cert_ids = $_POST['certificates'];
|
|
foreach($service_cert_ids as $cert_id) {
|
|
$cert_id = intval($cert_id);
|
|
if ($cert_id > 0) {
|
|
mysqli_query($mysqli, "INSERT INTO service_certificates SET service_id = $service_id, certificate_id = $cert_id");
|
|
}
|
|
}
|
|
}
|
|
|
|
//Logging
|
|
mysqli_query($mysqli,"INSERT INTO logs SET log_type = 'Service', log_action = 'Create', log_description = '$session_name created service $service_name', log_ip = '$session_ip', log_user_agent = '$session_user_agent', log_client_id = $client_id, log_user_id = $session_user_id");
|
|
|
|
$_SESSION['alert_message'] = "Service added";
|
|
header("Location: " . $_SERVER["HTTP_REFERER"]);
|
|
|
|
}
|
|
else{
|
|
$_SESSION['alert_message'] = "Something went wrong (SQL)";
|
|
header("Location: " . $_SERVER["HTTP_REFERER"]);
|
|
}
|
|
}
|
|
|
|
if (isset($_POST['edit_service'])) {
|
|
|
|
validateTechRole();
|
|
|
|
$client_id = intval($_POST['client_id']);
|
|
$service_id = intval($_POST['service_id']);
|
|
$service_name = sanitizeInput($_POST['name']);
|
|
$service_description = sanitizeInput($_POST['description']);
|
|
$service_category = sanitizeInput($_POST['category']); //TODO: Needs integration with company categories
|
|
$service_importance = sanitizeInput($_POST['importance']);
|
|
$service_backup = sanitizeInput($_POST['backup']);
|
|
$service_notes = sanitizeInput($_POST['note']);
|
|
|
|
// Update main service details
|
|
mysqli_query($mysqli, "UPDATE services SET service_name = '$service_name', service_description = '$service_description', service_category = '$service_category', service_importance = '$service_importance', service_backup = '$service_backup', service_notes = '$service_notes' WHERE service_id = $service_id");
|
|
|
|
// Unlink existing relations/assets
|
|
mysqli_query($mysqli, "DELETE FROM service_contacts WHERE service_id = $service_id");
|
|
mysqli_query($mysqli, "DELETE FROM service_vendors WHERE service_id = $service_id");
|
|
mysqli_query($mysqli, "DELETE FROM service_documents WHERE service_id = $service_id");
|
|
mysqli_query($mysqli, "DELETE FROM service_assets WHERE service_id = $service_id");
|
|
mysqli_query($mysqli, "DELETE FROM service_logins WHERE service_id = $service_id");
|
|
mysqli_query($mysqli, "DELETE FROM service_domains WHERE service_id = $service_id");
|
|
mysqli_query($mysqli, "DELETE FROM service_certificates WHERE service_id = $service_id");
|
|
|
|
// Relink
|
|
if (!empty($_POST['contacts'])) {
|
|
$service_contact_ids = $_POST['contacts'];
|
|
foreach($service_contact_ids as $contact_id) {
|
|
$contact_id = intval($contact_id);
|
|
if ($contact_id > 0) {
|
|
mysqli_query($mysqli, "INSERT INTO service_contacts SET service_id = $service_id, contact_id = $contact_id");
|
|
}
|
|
}
|
|
}
|
|
|
|
if (!empty($_POST['vendors'])) {
|
|
$service_vendor_ids = $_POST['vendors'];
|
|
foreach($service_vendor_ids as $vendor_id) {
|
|
$vendor_id = intval($vendor_id);
|
|
if ($vendor_id > 0) {
|
|
mysqli_query($mysqli, "INSERT INTO service_vendors SET service_id = $service_id, vendor_id = $vendor_id");
|
|
}
|
|
}
|
|
}
|
|
|
|
if (!empty($_POST['documents'])) {
|
|
$service_document_ids = $_POST['documents'];
|
|
foreach($service_document_ids as $document_id) {
|
|
$document_id = intval($document_id);
|
|
if ($document_id > 0) {
|
|
mysqli_query($mysqli, "INSERT INTO service_documents SET service_id = $service_id, document_id = $document_id");
|
|
}
|
|
}
|
|
}
|
|
|
|
if (!empty($_POST['assets'])) {
|
|
$service_asset_ids = $_POST['assets'];
|
|
foreach($service_asset_ids as $asset_id) {
|
|
$asset_id = intval($asset_id);
|
|
if ($asset_id > 0) {
|
|
mysqli_query($mysqli, "INSERT INTO service_assets SET service_id = $service_id, asset_id = $asset_id");
|
|
}
|
|
}
|
|
}
|
|
|
|
if (!empty($_POST['logins'])) {
|
|
$service_login_ids = $_POST['logins'];
|
|
foreach($service_login_ids as $login_id) {
|
|
$login_id = intval($login_id);
|
|
if ($login_id > 0) {
|
|
mysqli_query($mysqli, "INSERT INTO service_logins SET service_id = $service_id, login_id = $login_id");
|
|
}
|
|
}
|
|
}
|
|
|
|
if (!empty($_POST['domains'])) {
|
|
$service_domain_ids = $_POST['domains'];
|
|
foreach($service_domain_ids as $domain_id) {
|
|
$domain_id = intval($domain_id);
|
|
if ($domain_id > 0) {
|
|
mysqli_query($mysqli, "INSERT INTO service_domains SET service_id = $service_id, domain_id = $domain_id");
|
|
}
|
|
}
|
|
}
|
|
|
|
if (!empty($_POST['certificates'])) {
|
|
$service_cert_ids = $_POST['certificates'];
|
|
foreach($service_cert_ids as $cert_id) {
|
|
$cert_id = intval($cert_id);
|
|
if ($cert_id > 0) {
|
|
mysqli_query($mysqli, "INSERT INTO service_certificates SET service_id = $service_id, certificate_id = $cert_id");
|
|
}
|
|
}
|
|
}
|
|
|
|
//Logging
|
|
mysqli_query($mysqli,"INSERT INTO logs SET log_type = 'Service', log_action = 'Modify', log_description = '$session_name modified service $service_name', log_ip = '$session_ip', log_user_agent = '$session_user_agent', log_user_id = $session_user_id");
|
|
|
|
$_SESSION['alert_message'] = "Service updated";
|
|
header("Location: " . $_SERVER["HTTP_REFERER"]);
|
|
|
|
}
|
|
|
|
if (isset($_GET['delete_service'])) {
|
|
|
|
validateAdminRole();
|
|
|
|
$service_id = intval($_GET['delete_service']);
|
|
|
|
// Delete service
|
|
$delete_sql = mysqli_query($mysqli, "DELETE FROM services WHERE service_id = $service_id");
|
|
|
|
// Delete relations
|
|
// TODO: Convert this to a join delete
|
|
if ($delete_sql) {
|
|
mysqli_query($mysqli, "DELETE FROM service_contacts WHERE service_id = $service_id");
|
|
mysqli_query($mysqli, "DELETE FROM service_vendors WHERE service_id = $service_id");
|
|
mysqli_query($mysqli, "DELETE FROM service_documents WHERE service_id = $service_id");
|
|
mysqli_query($mysqli, "DELETE FROM service_assets WHERE service_id = $service_id");
|
|
mysqli_query($mysqli, "DELETE FROM service_logins WHERE service_id = $service_id");
|
|
mysqli_query($mysqli, "DELETE FROM service_domains WHERE service_id = $service_id");
|
|
mysqli_query($mysqli, "DELETE FROM service_certificates WHERE service_id = $service_id");
|
|
|
|
//Logging
|
|
mysqli_query($mysqli,"INSERT INTO logs SET log_type = 'Service', log_action = 'Delete', log_description = '$session_name deleted service $service_id', log_ip = '$session_ip', log_user_agent = '$session_user_agent', log_user_id = $session_user_id");
|
|
|
|
$_SESSION['alert_message'] = "Service deleted";
|
|
header("Location: " . $_SERVER["HTTP_REFERER"]);
|
|
|
|
} else {
|
|
$_SESSION['alert_message'] = "Something went wrong (SQL)";
|
|
header("Location: " . $_SERVER["HTTP_REFERER"]);
|
|
}
|
|
}
|