mirror of
https://github.com/itflow-org/itflow
synced 2026-11-11 15:07:24 +00:00
f7e5655e05
- Press / or Ctrl+K (or click the top bar box) for results as you type, grouped by type, with keyboard navigation and recent clients when empty - Ticket/invoice/quote numbers jump to the top; Enter opens immediately - Phone, IP (any interface) and MAC matching; app pages offered by name - Full results page rebuilt on the same search: totals, links into each list page, ticket conversation and document text matches - Passwords no longer rendered into the results page; reveal/copy go through the audited endpoint - Fix stray }); breaking inline scripts on asset and contact pages
603 lines
29 KiB
PHP
603 lines
29 KiB
PHP
<?php
|
|
|
|
/*
|
|
* Global search.
|
|
*
|
|
* One search behind two surfaces:
|
|
* - the live search palette in the top bar (press / or Ctrl+K), which asks
|
|
* agent/ajax.php?global_search as you type
|
|
* - the full results page, agent/global_search.php, reached by pressing Enter
|
|
*
|
|
* Both call globalSearch(), so the two can never disagree about what a user is
|
|
* allowed to find. Every group is gated on the module its own list page enforces
|
|
* and runs through clientScopeSql(), the same two checks the record's own page
|
|
* applies.
|
|
*
|
|
* The palette is for getting somewhere: it matches names, numbers, emails,
|
|
* phone numbers, IPs, MACs and serials, which is cheap enough to run on every
|
|
* keystroke. The results page adds $deep, which also searches the long text -
|
|
* ticket details, ticket conversations and document contents.
|
|
*
|
|
* Values come back RAW, not HTML-escaped. The palette renders them with
|
|
* textContent; the results page escapes them at output.
|
|
*/
|
|
|
|
/**
|
|
* The query, prepared once for every group: equality, LIKE (with % and _
|
|
* matched literally, so searching "100%" does not match everything), and the
|
|
* digits of a phone number when the query looks like one.
|
|
*/
|
|
function globalSearchTerms($raw) {
|
|
// escapeSql() strips tags, so do it first: the length check, the
|
|
// highlighting and the SQL then all agree on what was searched for
|
|
$raw = trim(strip_tags((string) $raw));
|
|
$raw = mb_substr($raw, 0, 100);
|
|
|
|
$digits = preg_replace('/\D/', '', $raw);
|
|
|
|
return [
|
|
'raw' => $raw,
|
|
'eq' => escapeSql($raw),
|
|
'like' => escapeSql(addcslashes($raw, '%_\\')),
|
|
'phone' => (strlen($digits) >= 3 && preg_match('/^[\d\s().+-]+$/', $raw)) ? $digits : null,
|
|
];
|
|
}
|
|
|
|
/**
|
|
* A record number typed the way people actually type them: "1042", "#1042",
|
|
* "TCK-1042", "tck1042". The letters only count when they are this record type's
|
|
* own prefix, otherwise "srv01" would match ticket 1.
|
|
*/
|
|
function globalSearchNumber($raw, $prefix) {
|
|
$prefix = rtrim((string) $prefix, '-');
|
|
$prefix_pattern = $prefix === '' ? '' : '|' . preg_quote($prefix, '/') . '-?';
|
|
|
|
if (preg_match('/^(?:#' . $prefix_pattern . ')?\s*0*(\d{1,9})$/i', $raw, $match)) {
|
|
return intval($match[1]);
|
|
}
|
|
|
|
return null;
|
|
}
|
|
|
|
/** Plain text around the first match in a long HTML field, for the results page. */
|
|
function globalSearchSnippet($html, $raw, $radius = 80) {
|
|
$text = trim(preg_replace('/\s+/u', ' ', html_entity_decode(strip_tags((string) $html), ENT_QUOTES | ENT_HTML5, 'UTF-8')));
|
|
$position = mb_stripos($text, $raw);
|
|
|
|
if ($position === false) {
|
|
return mb_substr($text, 0, $radius * 2) . (mb_strlen($text) > $radius * 2 ? '…' : '');
|
|
}
|
|
|
|
$start = max(0, $position - $radius);
|
|
$snippet = mb_substr($text, $start, mb_strlen($raw) + $radius * 2);
|
|
|
|
return ($start > 0 ? '…' : '') . $snippet . ($start + mb_strlen($snippet) < mb_strlen($text) ? '…' : '');
|
|
}
|
|
|
|
function globalSearchMoney($amount, $currency_code) {
|
|
global $currency_format;
|
|
|
|
if (!$currency_format) {
|
|
return number_format(floatval($amount), 2);
|
|
}
|
|
|
|
return numfmt_format_currency($currency_format, floatval($amount), $currency_code ?: 'USD');
|
|
}
|
|
|
|
/** Where a client-scoped record lives: the client's own copy of a page, or the global one. */
|
|
function globalSearchClientUrl($page, $client_id, $params = []) {
|
|
if (intval($client_id) > 0) {
|
|
$params = array_merge(['client_id' => intval($client_id)], $params);
|
|
}
|
|
|
|
return "/agent/$page" . ($params ? '?' . http_build_query($params) : '');
|
|
}
|
|
|
|
/**
|
|
* Every searchable record type, in display order. A group whose module the
|
|
* user cannot read, or whose feature is switched off, is left out entirely.
|
|
*/
|
|
function globalSearchGroups($terms, $deep) {
|
|
global $config_ticket_prefix, $config_invoice_prefix, $config_quote_prefix;
|
|
global $config_module_enable_ticketing, $config_module_enable_accounting;
|
|
|
|
$eq = $terms['eq'];
|
|
$like = $terms['like'];
|
|
$phone = $terms['phone'];
|
|
$q = $terms['raw'];
|
|
|
|
$ticketing = intval($config_module_enable_ticketing) === 1;
|
|
$accounting = intval($config_module_enable_accounting) === 1;
|
|
|
|
$groups = [];
|
|
|
|
$groups[] = [
|
|
'key' => 'clients', 'label' => 'Clients', 'icon' => 'users', 'module' => 'module_client',
|
|
'select' => 'client_id, client_name, client_type, client_abbreviation',
|
|
'from' => 'clients',
|
|
'where' => "client_archived_at IS NULL
|
|
AND (client_name LIKE '%$like%' OR client_abbreviation LIKE '%$like%' OR client_website LIKE '%$like%')",
|
|
'scope' => 'clients.client_id',
|
|
'order' => "(client_name = '$eq') DESC, (client_name LIKE '$like%') DESC, client_accessed_at DESC, client_name",
|
|
'list_url' => '/agent/clients.php?' . http_build_query(['q' => $q]),
|
|
'item' => function ($row) {
|
|
return [
|
|
'title' => $row['client_name'],
|
|
'subtitle' => $row['client_type'],
|
|
'url' => '/agent/client_overview.php?client_id=' . intval($row['client_id']),
|
|
];
|
|
},
|
|
];
|
|
|
|
$ticket_number = globalSearchNumber($q, $config_ticket_prefix);
|
|
$ticket_number_match = $ticket_number !== null ? "OR ticket_number = $ticket_number" : '';
|
|
$ticket_deep_match = $deep ? "OR ticket_details LIKE '%$like%'" : '';
|
|
$groups[] = [
|
|
'key' => 'tickets', 'label' => 'Tickets', 'icon' => 'life-ring', 'module' => 'module_support', 'enabled' => $ticketing,
|
|
'select' => 'ticket_id, ticket_prefix, ticket_number, ticket_subject, ticket_client_id, ticket_closed_at,
|
|
client_name, ticket_status_name, ticket_status_color',
|
|
'from' => 'tickets
|
|
LEFT JOIN clients ON ticket_client_id = client_id
|
|
LEFT JOIN ticket_statuses ON ticket_status = ticket_status_id',
|
|
'where' => "ticket_archived_at IS NULL
|
|
AND (ticket_subject LIKE '%$like%' OR CONCAT(ticket_prefix, ticket_number) LIKE '%$like%' $ticket_number_match $ticket_deep_match)",
|
|
'scope' => 'ticket_client_id',
|
|
'order' => ($ticket_number !== null ? "(ticket_number = $ticket_number) DESC, " : '') . "(ticket_closed_at IS NULL) DESC, ticket_id DESC",
|
|
'exact' => $ticket_number !== null ? "ticket_number = $ticket_number" : null,
|
|
'list_url' => '/agent/tickets.php?' . http_build_query(['state' => 'all', 'q' => $q]),
|
|
'item' => function ($row) {
|
|
return [
|
|
'ref' => $row['ticket_prefix'] . $row['ticket_number'],
|
|
'title' => $row['ticket_subject'],
|
|
'context' => $row['client_name'],
|
|
'badge' => $row['ticket_status_name'] ? ['text' => $row['ticket_status_name'], 'hex' => $row['ticket_status_color']] : null,
|
|
'url' => globalSearchClientUrl('ticket.php', $row['ticket_client_id'], ['ticket_id' => intval($row['ticket_id'])]),
|
|
];
|
|
},
|
|
];
|
|
|
|
// Stored numbers may or may not carry punctuation, so compare digits to digits
|
|
$contact_phone_match = $phone
|
|
? "OR REGEXP_REPLACE(contact_phone, '[^0-9]', '') LIKE '%$phone%' OR REGEXP_REPLACE(contact_mobile, '[^0-9]', '') LIKE '%$phone%'"
|
|
: '';
|
|
$groups[] = [
|
|
'key' => 'contacts', 'label' => 'Contacts', 'icon' => 'address-book', 'module' => 'module_client',
|
|
'select' => 'contact_id, contact_name, contact_title, contact_email, contact_client_id, client_name',
|
|
'from' => 'contacts LEFT JOIN clients ON contact_client_id = client_id',
|
|
'where' => "contact_archived_at IS NULL
|
|
AND (contact_name LIKE '%$like%' OR contact_email LIKE '%$like%' OR contact_title LIKE '%$like%' $contact_phone_match)",
|
|
'scope' => 'contact_client_id',
|
|
'order' => "(contact_name = '$eq') DESC, (contact_name LIKE '$like%') DESC, contact_name",
|
|
'list_url' => '/agent/contacts.php?' . http_build_query(['q' => $q]),
|
|
'item' => function ($row) {
|
|
return [
|
|
'title' => $row['contact_name'],
|
|
'subtitle' => implode(' · ', array_filter([$row['contact_title'], $row['contact_email']])),
|
|
'context' => $row['client_name'],
|
|
'url' => globalSearchClientUrl('contact.php', $row['contact_client_id'], ['contact_id' => intval($row['contact_id'])]),
|
|
];
|
|
},
|
|
];
|
|
|
|
// Any interface counts, not just the primary one - the address someone has
|
|
// in hand is as likely to be the iDRAC as the OS NIC.
|
|
$groups[] = [
|
|
'key' => 'assets', 'label' => 'Assets', 'icon' => 'desktop', 'module' => 'module_support',
|
|
'select' => 'asset_id, asset_name, asset_type, asset_make, asset_model, asset_client_id, client_name,
|
|
primary_interface.interface_ip AS asset_ip',
|
|
'from' => 'assets
|
|
LEFT JOIN clients ON asset_client_id = client_id
|
|
LEFT JOIN asset_interfaces AS primary_interface
|
|
ON primary_interface.interface_asset_id = asset_id AND primary_interface.interface_primary = 1',
|
|
'where' => "asset_archived_at IS NULL
|
|
AND (asset_name LIKE '%$like%' OR asset_serial LIKE '%$like%' OR asset_type LIKE '%$like%'
|
|
OR asset_make LIKE '%$like%' OR asset_model LIKE '%$like%' OR asset_os LIKE '%$like%'
|
|
OR asset_description LIKE '%$like%'
|
|
OR EXISTS (SELECT 1 FROM asset_interfaces
|
|
WHERE interface_asset_id = asset_id AND interface_archived_at IS NULL
|
|
AND (interface_ip LIKE '%$like%' OR interface_nat_ip LIKE '%$like%' OR interface_ipv6 LIKE '%$like%' OR interface_mac LIKE '%$like%')))",
|
|
'scope' => 'asset_client_id',
|
|
// An exact address beats every partial one: 192.168.10.1 before 192.168.10.14
|
|
'order' => "EXISTS (SELECT 1 FROM asset_interfaces WHERE interface_asset_id = asset_id
|
|
AND (interface_ip = '$eq' OR interface_nat_ip = '$eq')) DESC,
|
|
(asset_name = '$eq') DESC, (asset_name LIKE '$like%') DESC, asset_name",
|
|
'list_url' => '/agent/assets.php?' . http_build_query(['q' => $q]),
|
|
'item' => function ($row) {
|
|
return [
|
|
'title' => $row['asset_name'],
|
|
'subtitle' => implode(' · ', array_filter([$row['asset_type'], trim($row['asset_make'] . ' ' . $row['asset_model']), $row['asset_ip']])),
|
|
'context' => $row['client_name'],
|
|
'url' => globalSearchClientUrl('asset.php', $row['asset_client_id'], ['asset_id' => intval($row['asset_id'])]),
|
|
];
|
|
},
|
|
];
|
|
|
|
// Name and description only. Usernames and passwords are encrypted at rest,
|
|
// and the results page reveals passwords through the audited endpoint, never
|
|
// in the markup.
|
|
$groups[] = [
|
|
'key' => 'credentials', 'label' => 'Credentials', 'icon' => 'key', 'module' => 'module_credential',
|
|
'select' => 'credential_id, credential_name, credential_description, credential_client_id, client_name',
|
|
'from' => 'credentials LEFT JOIN clients ON credential_client_id = client_id',
|
|
'where' => "credential_archived_at IS NULL
|
|
AND (credential_name LIKE '%$like%' OR credential_description LIKE '%$like%' OR credential_uri LIKE '%$like%')",
|
|
'scope' => 'credential_client_id',
|
|
'order' => "(credential_name = '$eq') DESC, (credential_name LIKE '$like%') DESC, credential_name",
|
|
'list_url' => '/agent/credentials.php?' . http_build_query(['q' => $q]),
|
|
'item' => function ($row) {
|
|
return [
|
|
'id' => intval($row['credential_id']),
|
|
'title' => $row['credential_name'],
|
|
'subtitle' => $row['credential_description'],
|
|
'context' => $row['client_name'],
|
|
'url' => globalSearchClientUrl('credentials.php', $row['credential_client_id'], ['q' => $row['credential_name']]),
|
|
];
|
|
},
|
|
];
|
|
|
|
$groups[] = [
|
|
'key' => 'domains', 'label' => 'Domains', 'icon' => 'globe', 'module' => 'module_support',
|
|
'select' => 'domain_id, domain_name, domain_expire, domain_client_id, client_name',
|
|
'from' => 'domains LEFT JOIN clients ON domain_client_id = client_id',
|
|
'where' => "domain_archived_at IS NULL AND domain_name LIKE '%$like%'",
|
|
'scope' => 'domain_client_id',
|
|
'order' => "(domain_name = '$eq') DESC, (domain_name LIKE '$like%') DESC, domain_name",
|
|
'list_url' => '/agent/domains.php?' . http_build_query(['q' => $q]),
|
|
'item' => function ($row) {
|
|
return [
|
|
'title' => $row['domain_name'],
|
|
'subtitle' => $row['domain_expire'] ? 'Expires ' . $row['domain_expire'] : '',
|
|
'context' => $row['client_name'],
|
|
'url' => globalSearchClientUrl('domains.php', $row['domain_client_id'], ['q' => $row['domain_name']]),
|
|
];
|
|
},
|
|
];
|
|
|
|
$document_deep_match = $deep ? "OR MATCH(document_content_raw) AGAINST ('$eq')" : '';
|
|
$groups[] = [
|
|
'key' => 'documents', 'label' => 'Documents', 'icon' => 'file-alt', 'module' => 'module_support',
|
|
'select' => 'document_id, document_name, document_description, document_client_id, client_name',
|
|
'from' => 'documents LEFT JOIN clients ON document_client_id = client_id',
|
|
'where' => "document_archived_at IS NULL
|
|
AND (document_name LIKE '%$like%' OR document_description LIKE '%$like%' $document_deep_match)",
|
|
'scope' => 'document_client_id',
|
|
'order' => "(document_name LIKE '$like%') DESC, document_updated_at DESC",
|
|
'list_url' => null,
|
|
'item' => function ($row) {
|
|
return [
|
|
'title' => $row['document_name'],
|
|
'subtitle' => $row['document_description'],
|
|
'context' => $row['client_name'],
|
|
'url' => globalSearchClientUrl('document.php', $row['document_client_id'], ['document_id' => intval($row['document_id'])]),
|
|
];
|
|
},
|
|
];
|
|
|
|
$groups[] = [
|
|
'key' => 'files', 'label' => 'Files', 'icon' => 'paperclip', 'module' => 'module_support',
|
|
'select' => 'file_id, file_name, file_description, file_client_id, file_folder_id, client_name, folder_name',
|
|
'from' => 'files
|
|
LEFT JOIN clients ON file_client_id = client_id
|
|
LEFT JOIN folders ON file_folder_id = folder_id',
|
|
'where' => "file_archived_at IS NULL AND (file_name LIKE '%$like%' OR file_description LIKE '%$like%')",
|
|
'scope' => 'file_client_id',
|
|
'order' => "(file_name LIKE '$like%') DESC, file_id DESC",
|
|
'list_url' => null,
|
|
'item' => function ($row) {
|
|
return [
|
|
'title' => $row['file_name'],
|
|
'subtitle' => implode(' · ', array_filter([$row['folder_name'], $row['file_description']])),
|
|
'context' => $row['client_name'],
|
|
'url' => globalSearchClientUrl('files.php', $row['file_client_id'], ['folder_id' => intval($row['file_folder_id'])]),
|
|
];
|
|
},
|
|
];
|
|
|
|
$invoice_number = globalSearchNumber($q, $config_invoice_prefix);
|
|
$invoice_number_match = $invoice_number !== null ? "OR invoice_number = $invoice_number" : '';
|
|
$groups[] = [
|
|
'key' => 'invoices', 'label' => 'Invoices', 'icon' => 'file-invoice-dollar', 'module' => 'module_sales', 'enabled' => $accounting,
|
|
'select' => 'invoice_id, invoice_prefix, invoice_number, invoice_scope, invoice_status, invoice_amount,
|
|
invoice_currency_code, invoice_client_id, client_name',
|
|
'from' => 'invoices LEFT JOIN clients ON invoice_client_id = client_id',
|
|
'where' => "invoice_archived_at IS NULL
|
|
AND (CONCAT(invoice_prefix, invoice_number) LIKE '%$like%' OR invoice_scope LIKE '%$like%' $invoice_number_match)",
|
|
'scope' => 'invoice_client_id',
|
|
'order' => ($invoice_number !== null ? "(invoice_number = $invoice_number) DESC, " : '') . 'invoice_number DESC',
|
|
'exact' => $invoice_number !== null ? "invoice_number = $invoice_number" : null,
|
|
'list_url' => '/agent/invoices.php?' . http_build_query(['q' => $q]),
|
|
'item' => function ($row) {
|
|
return [
|
|
'ref' => $row['invoice_prefix'] . $row['invoice_number'],
|
|
'title' => $row['invoice_scope'] ?: 'Invoice',
|
|
'subtitle' => globalSearchMoney($row['invoice_amount'], $row['invoice_currency_code']),
|
|
'context' => $row['client_name'],
|
|
'badge' => ['text' => $row['invoice_status'], 'variant' => getInvoiceBadgeColor($row['invoice_status'])],
|
|
'url' => globalSearchClientUrl('invoice.php', $row['invoice_client_id'], ['invoice_id' => intval($row['invoice_id'])]),
|
|
];
|
|
},
|
|
];
|
|
|
|
$quote_number = globalSearchNumber($q, $config_quote_prefix);
|
|
$quote_number_match = $quote_number !== null ? "OR quote_number = $quote_number" : '';
|
|
$groups[] = [
|
|
'key' => 'quotes', 'label' => 'Quotes', 'icon' => 'comment-dollar', 'module' => 'module_sales', 'enabled' => $accounting,
|
|
'select' => 'quote_id, quote_prefix, quote_number, quote_scope, quote_status, quote_amount,
|
|
quote_currency_code, quote_client_id, client_name',
|
|
'from' => 'quotes LEFT JOIN clients ON quote_client_id = client_id',
|
|
'where' => "quote_archived_at IS NULL
|
|
AND (CONCAT(quote_prefix, quote_number) LIKE '%$like%' OR quote_scope LIKE '%$like%' $quote_number_match)",
|
|
'scope' => 'quote_client_id',
|
|
'order' => ($quote_number !== null ? "(quote_number = $quote_number) DESC, " : '') . 'quote_number DESC',
|
|
'exact' => $quote_number !== null ? "quote_number = $quote_number" : null,
|
|
'list_url' => '/agent/quotes.php?' . http_build_query(['q' => $q]),
|
|
'item' => function ($row) {
|
|
$quote_badge_variants = ['Sent' => 'warning', 'Viewed' => 'primary', 'Accepted' => 'success', 'Declined' => 'danger', 'Invoiced' => 'info'];
|
|
return [
|
|
'ref' => $row['quote_prefix'] . $row['quote_number'],
|
|
'title' => $row['quote_scope'] ?: 'Quote',
|
|
'subtitle' => globalSearchMoney($row['quote_amount'], $row['quote_currency_code']),
|
|
'context' => $row['client_name'],
|
|
'badge' => ['text' => $row['quote_status'], 'variant' => $quote_badge_variants[$row['quote_status']] ?? 'secondary'],
|
|
'url' => globalSearchClientUrl('quote.php', $row['quote_client_id'], ['quote_id' => intval($row['quote_id'])]),
|
|
];
|
|
},
|
|
];
|
|
|
|
$vendor_phone_match = $phone ? "OR REGEXP_REPLACE(vendor_phone, '[^0-9]', '') LIKE '%$phone%'" : '';
|
|
$groups[] = [
|
|
'key' => 'vendors', 'label' => 'Vendors', 'icon' => 'building', 'module' => 'module_client',
|
|
'select' => 'vendor_id, vendor_name, vendor_description, vendor_client_id, client_name',
|
|
'from' => 'vendors LEFT JOIN clients ON vendor_client_id = client_id',
|
|
'where' => "vendor_archived_at IS NULL
|
|
AND (vendor_name LIKE '%$like%' OR vendor_description LIKE '%$like%' OR vendor_account_number LIKE '%$like%' $vendor_phone_match)",
|
|
'scope' => 'vendor_client_id',
|
|
'order' => "(vendor_name = '$eq') DESC, (vendor_name LIKE '$like%') DESC, vendor_name",
|
|
'list_url' => '/agent/vendors.php?' . http_build_query(['q' => $q]),
|
|
'item' => function ($row) {
|
|
return [
|
|
'title' => $row['vendor_name'],
|
|
'subtitle' => $row['vendor_description'],
|
|
'context' => $row['client_name'],
|
|
'url' => globalSearchClientUrl('vendors.php', $row['vendor_client_id'], ['q' => $row['vendor_name']]),
|
|
];
|
|
},
|
|
];
|
|
|
|
$recurring_deep_match = $deep ? "OR recurring_ticket_details LIKE '%$like%'" : '';
|
|
$groups[] = [
|
|
'key' => 'recurring_tickets', 'label' => 'Recurring Tickets', 'icon' => 'redo-alt', 'module' => 'module_support', 'enabled' => $ticketing,
|
|
'select' => 'recurring_ticket_id, recurring_ticket_subject, recurring_ticket_frequency, recurring_ticket_next_run,
|
|
recurring_ticket_client_id, client_name',
|
|
'from' => 'recurring_tickets LEFT JOIN clients ON recurring_ticket_client_id = client_id',
|
|
'where' => "(recurring_ticket_subject LIKE '%$like%' $recurring_deep_match)",
|
|
'scope' => 'recurring_ticket_client_id',
|
|
'order' => "(recurring_ticket_subject LIKE '$like%') DESC, recurring_ticket_next_run",
|
|
'list_url' => '/agent/recurring_tickets.php?' . http_build_query(['q' => $q]),
|
|
'item' => function ($row) {
|
|
return [
|
|
'title' => $row['recurring_ticket_subject'],
|
|
'subtitle' => implode(' · ', array_filter([$row['recurring_ticket_frequency'], $row['recurring_ticket_next_run'] ? 'Next ' . $row['recurring_ticket_next_run'] : ''])),
|
|
'context' => $row['client_name'],
|
|
'url' => globalSearchClientUrl('recurring_tickets.php', $row['recurring_ticket_client_id'], ['q' => $row['recurring_ticket_subject']]),
|
|
];
|
|
},
|
|
];
|
|
|
|
$groups[] = [
|
|
'key' => 'products', 'label' => 'Products', 'icon' => 'box-open', 'module' => 'module_sales', 'enabled' => $accounting,
|
|
'select' => 'product_id, product_name, product_code, product_price, product_currency_code',
|
|
'from' => 'products',
|
|
'where' => "product_archived_at IS NULL
|
|
AND (product_name LIKE '%$like%' OR product_code LIKE '%$like%' OR product_description LIKE '%$like%')",
|
|
'scope' => null,
|
|
'order' => "(product_name = '$eq') DESC, (product_name LIKE '$like%') DESC, product_name",
|
|
'list_url' => '/agent/products.php?' . http_build_query(['q' => $q]),
|
|
'item' => function ($row) {
|
|
return [
|
|
'title' => $row['product_name'],
|
|
'subtitle' => implode(' · ', array_filter([$row['product_code'], globalSearchMoney($row['product_price'], $row['product_currency_code'])])),
|
|
'url' => '/agent/products.php?' . http_build_query(['q' => $row['product_name']]),
|
|
];
|
|
},
|
|
];
|
|
|
|
// Ticket conversations: matched inside reply bodies, so results page only.
|
|
if ($deep) {
|
|
$groups[] = [
|
|
'key' => 'ticket_replies', 'label' => 'Ticket Conversations', 'icon' => 'comments', 'module' => 'module_support', 'enabled' => $ticketing,
|
|
'select' => 'ticket_reply_id, ticket_reply, ticket_reply_created_at, ticket_id, ticket_prefix, ticket_number,
|
|
ticket_subject, ticket_client_id, client_name',
|
|
'from' => 'ticket_replies
|
|
JOIN tickets ON ticket_reply_ticket_id = ticket_id
|
|
LEFT JOIN clients ON ticket_client_id = client_id',
|
|
'where' => "ticket_reply_archived_at IS NULL AND ticket_archived_at IS NULL AND ticket_reply LIKE '%$like%'",
|
|
'scope' => 'ticket_client_id',
|
|
'order' => 'ticket_reply_id DESC',
|
|
'list_url' => null,
|
|
'item' => function ($row) use ($q) {
|
|
return [
|
|
'ref' => $row['ticket_prefix'] . $row['ticket_number'],
|
|
'title' => $row['ticket_subject'],
|
|
'snippet' => globalSearchSnippet($row['ticket_reply'], $q),
|
|
'context' => $row['client_name'],
|
|
'url' => globalSearchClientUrl('ticket.php', $row['ticket_client_id'], ['ticket_id' => intval($row['ticket_id'])]),
|
|
];
|
|
},
|
|
];
|
|
}
|
|
|
|
return $groups;
|
|
}
|
|
|
|
/**
|
|
* Run the search.
|
|
*
|
|
* Returns the groups that matched, in display order, each as:
|
|
* key, label, icon, items[], more (bool), total (int, only with $with_totals), list_url
|
|
* A group with an exact record-number hit (ticket 1042 for "TCK-1042") moves to
|
|
* the front, since that is unambiguously what was asked for.
|
|
*/
|
|
function globalSearch($raw_query, $limit = 5, $deep = false, $with_totals = false) {
|
|
global $mysqli;
|
|
|
|
$terms = globalSearchTerms($raw_query);
|
|
if (mb_strlen($terms['raw']) < 2) {
|
|
return [];
|
|
}
|
|
|
|
$limit = max(1, intval($limit));
|
|
$results = [];
|
|
|
|
foreach (globalSearchGroups($terms, $deep) as $group) {
|
|
if (array_key_exists('enabled', $group) && !$group['enabled']) {
|
|
continue;
|
|
}
|
|
if (lookupUserPermission($group['module']) < 1) {
|
|
continue;
|
|
}
|
|
|
|
$scope = $group['scope'] ? clientScopeSql($group['scope']) : '';
|
|
$where = "{$group['where']} $scope";
|
|
|
|
$sql = mysqli_query(
|
|
$mysqli,
|
|
"SELECT {$group['select']} FROM {$group['from']} WHERE $where ORDER BY {$group['order']} LIMIT " . ($limit + 1)
|
|
);
|
|
|
|
$items = [];
|
|
while ($row = mysqli_fetch_assoc($sql)) {
|
|
$items[] = $group['item']($row);
|
|
}
|
|
|
|
if (!$items) {
|
|
continue;
|
|
}
|
|
|
|
$more = count($items) > $limit;
|
|
$items = array_slice($items, 0, $limit);
|
|
|
|
$exact = false;
|
|
if (!empty($group['exact'])) {
|
|
$exact_row = mysqli_fetch_row(mysqli_query($mysqli, "SELECT 1 FROM {$group['from']} WHERE $where AND {$group['exact']} LIMIT 1"));
|
|
$exact = (bool) $exact_row;
|
|
}
|
|
|
|
$total = null;
|
|
if ($with_totals) {
|
|
$total = $more
|
|
? intval(mysqli_fetch_row(mysqli_query($mysqli, "SELECT COUNT(*) FROM {$group['from']} WHERE $where"))[0])
|
|
: count($items);
|
|
}
|
|
|
|
$results[] = [
|
|
'key' => $group['key'],
|
|
'label' => $group['label'],
|
|
'icon' => $group['icon'],
|
|
'items' => $items,
|
|
'more' => $more,
|
|
'total' => $total,
|
|
'list_url' => $group['list_url'],
|
|
'exact' => $exact,
|
|
];
|
|
}
|
|
|
|
// Exact record-number hits first; otherwise keep display order (usort is stable in PHP 8)
|
|
usort($results, function ($a, $b) {
|
|
return intval($b['exact']) - intval($a['exact']);
|
|
});
|
|
|
|
return $results;
|
|
}
|
|
|
|
/** Recently opened clients, shown in the palette before anything is typed. */
|
|
function globalSearchRecentClients($limit = 6) {
|
|
global $mysqli;
|
|
|
|
if (lookupUserPermission('module_client') < 1) {
|
|
return [];
|
|
}
|
|
|
|
$limit = max(1, intval($limit));
|
|
|
|
$sql = mysqli_query(
|
|
$mysqli,
|
|
"SELECT client_id, client_name, client_type FROM clients
|
|
WHERE client_archived_at IS NULL AND client_accessed_at IS NOT NULL
|
|
" . clientScopeSql('clients.client_id') . "
|
|
ORDER BY client_accessed_at DESC LIMIT $limit"
|
|
);
|
|
|
|
$items = [];
|
|
while ($row = mysqli_fetch_assoc($sql)) {
|
|
$items[] = [
|
|
'title' => $row['client_name'],
|
|
'subtitle' => $row['client_type'],
|
|
'url' => '/agent/client_overview.php?client_id=' . intval($row['client_id']),
|
|
];
|
|
}
|
|
|
|
return $items;
|
|
}
|
|
|
|
/**
|
|
* The app's own pages, so "inv" can also take you to Invoices. Same gates as
|
|
* the side nav, which is the only other place these links appear.
|
|
*/
|
|
function globalSearchPages($raw_query) {
|
|
global $config_module_enable_ticketing, $config_module_enable_accounting, $session_is_admin;
|
|
|
|
$query = mb_strtolower(trim((string) $raw_query));
|
|
if (mb_strlen($query) < 2) {
|
|
return [];
|
|
}
|
|
|
|
$ticketing = intval($config_module_enable_ticketing) === 1;
|
|
$accounting = intval($config_module_enable_accounting) === 1;
|
|
$support = lookupUserPermission('module_support') >= 1;
|
|
$client = lookupUserPermission('module_client') >= 1;
|
|
$sales = lookupUserPermission('module_sales') >= 1;
|
|
$financial = lookupUserPermission('module_financial') >= 1;
|
|
|
|
$pages = [
|
|
['Dashboard', '/agent/dashboard.php', true],
|
|
['Clients', '/agent/clients.php', $client],
|
|
['All Client Docs', '/agent/contacts.php', $client],
|
|
['Vendors', '/agent/vendors.php', true],
|
|
['Calendar', '/agent/calendar.php', true],
|
|
['Tickets', '/agent/tickets.php', $support && $ticketing],
|
|
['Recurring Tickets', '/agent/recurring_tickets.php', $support && $ticketing],
|
|
['Projects', '/agent/projects.php', $support && $ticketing],
|
|
['Quotes', '/agent/quotes.php', $sales && $accounting],
|
|
['Invoices', '/agent/invoices.php', $sales && $accounting],
|
|
['Recurring Invoices', '/agent/recurring_invoices.php', $sales && $accounting],
|
|
['Products', '/agent/products.php', $sales && $accounting],
|
|
['Income', '/agent/income.php', $financial && $accounting],
|
|
['Expenses', '/agent/expenses.php', $financial && $accounting],
|
|
['Recurring Expenses', '/agent/recurring_expenses.php', $financial && $accounting],
|
|
['Trips', '/agent/trips.php', $financial && $accounting],
|
|
['Accounts', '/agent/accounts.php', $financial && $accounting],
|
|
['Transactions', '/agent/transactions.php', $financial && $accounting],
|
|
['Transfers', '/agent/transfers.php', $financial && $accounting],
|
|
['Reports', '/agent/reports/', lookupUserPermission('module_reporting') >= 1],
|
|
['Administration', '/admin/', (bool) $session_is_admin],
|
|
['My Account', '/agent/user/user_details.php', true],
|
|
];
|
|
|
|
$items = [];
|
|
foreach ($pages as [$label, $url, $allowed]) {
|
|
if (!$allowed) {
|
|
continue;
|
|
}
|
|
// Match the start of any word: "inv" finds Invoices and Recurring Invoices
|
|
foreach (preg_split('/\s+/', mb_strtolower($label)) as $word) {
|
|
if (strpos($word, $query) === 0 || strpos(mb_strtolower($label), $query) === 0) {
|
|
$items[] = ['title' => $label, 'url' => $url];
|
|
break;
|
|
}
|
|
}
|
|
}
|
|
|
|
return array_slice($items, 0, 4);
|
|
}
|