-
-
-
-
-
-
- '.$marketing_h2.'
-'.$marketing_p.'
-
-
-';
}
+template_header('Marketing', 'marketing');
+?>
+
+
+
+
-
';
-
-
-if (isset($product_group) && $product_group !='' && isset($product_content) && $product_content !=''){
-
- echo '
- ';
- foreach ($marketing_structure as $marketing => $folders){
- $style = '';
- if (!empty($product_group) && $product_group !== $marketing) {
- $style = ' style="opacity: 0.5; color: #999; background-color: #f5f5f5;"';
- } elseif (!empty($product_group) && $product_group === $marketing) {
- $style = ' style="background-color: #007cba; color: white;"';
+// Handle AJAX API requests
+if (isset($_GET['action'])) {
+ $action = $_GET['action'];
+
+ // Suppress errors for API responses to avoid HTML output breaking JSON
+ error_reporting(0);
+ ini_set('display_errors', 0);
+
+ try {
+ // Marketing folders
+ if ($action === 'marketing_folders') {
+ if ($_SERVER['REQUEST_METHOD'] === 'POST') {
+ // Create folder - use standard format expected by POST API
+ $payload = [
+ 'folder_name' => $_POST['folder_name'] ?? '',
+ 'parent_id' => $_POST['parent_id'] ?? '',
+ 'description' => $_POST['description'] ?? ''
+ // rowID is empty = insert (standard pattern)
+ ];
+ $response = ioServer('/v2/marketing_folders', json_encode($payload));
+ } else {
+ // Get folders
+ $get_values = urlGETdetails($_GET) ?? '';
+ $response = ioServer('/v2/marketing_folders/' . $get_values, '');
}
- echo ''.$marketing.'';
+ header('Content-Type: application/json');
+ echo $response;
+ exit;
}
- echo'
-
- ';
- // Only show folders if a product group is selected
- if (!empty($product_group) && isset($marketing_structure[$product_group])) {
- foreach($marketing_structure[$product_group] as $folder){
- echo ' 
'.$folder.'';
+
+ // Marketing files
+ if ($action === 'marketing_files') {
+ // Filter out 'page', 'action', and cache busting timestamp from GET parameters
+ $filtered_params = $_GET;
+ unset($filtered_params['page']);
+ unset($filtered_params['action']);
+ unset($filtered_params['_t']);
+
+ $get_values = urlGETdetails($filtered_params) ?? '';
+ // API expects path segments, not query string: /v2/marketing_files/params
+ $api_url = '/v2/marketing_files/' . $get_values;
+ $response = ioServer($api_url, '');
+ header('Content-Type: application/json');
+ echo $response;
+ exit;
+ }
+
+ // Marketing tags
+ if ($action === 'marketing_tags') {
+ // Filter out 'page' and 'action' from GET parameters
+ $get_values = urlGETdetails($_GET) ?? '';
+ $response = ioServer('/v2/marketing_tags?' . $get_values, '');
+ header('Content-Type: application/json');
+ echo $response;
+ exit;
+ }
+
+ // Marketing upload
+ if ($action === 'marketing_upload' && $_SERVER['REQUEST_METHOD'] === 'POST') {
+ if (isset($_FILES['file']) && $_FILES['file']['error'] === UPLOAD_ERR_OK && $_FILES['file']['size'] > 0) {
+ // Use the uploaded file's temp path directly
+ $temp_path = $_FILES['file']['tmp_name'];
+
+ // Get actual MIME type from file content (more secure than trusting browser)
+ $actual_mime_type = mime_content_type($temp_path);
+
+ // Sanitize filename - remove path info and dangerous characters
+ $safe_filename = basename($_FILES['file']['name']);
+ $safe_filename = preg_replace('/[^a-zA-Z0-9._-]/', '_', $safe_filename);
+
+ $fileData = [
+ 'file' => new CURLFile($temp_path, $actual_mime_type, $safe_filename)
+ ];
+
+ $additionalData = $_POST; // Include any additional POST data
+
+ $token = createCommunicationToken($_SESSION['userkey']);
+
+ $response = ioAPIv2_FileUpload('/v2/marketing_upload/', $fileData, $additionalData, $token);
+
+ // No need to unlink since we didn't move the file
+ } else {
+ $response = json_encode(['error' => 'No file uploaded or upload error']);
}
+ header('Content-Type: application/json');
+ echo $response;
+ exit;
}
- echo '
-
- '.$folder.'';
+
+ // Marketing files
+ if ($action === 'marketing_files') {
+ // Filter out 'page', 'action', and cache busting timestamp from GET parameters
+ $filtered_params = $_GET;
+ unset($filtered_params['page']);
+ unset($filtered_params['action']);
+ unset($filtered_params['_t']);
+
+ $get_values = urlGETdetails($filtered_params) ?? '';
+ // API expects path segments, not query string: /v2/marketing_files/params
+ $api_url = '/v2/marketing_files/' . $get_values;
+ $response = ioServer($api_url, '');
+ header('Content-Type: application/json');
+ echo $response;
+ exit;
+ }
+
+ // Marketing tags
+ if ($action === 'marketing_tags') {
+ // Filter out 'page' and 'action' from GET parameters
+ $get_values = urlGETdetails($_GET) ?? '';
+ $response = ioServer('/v2/marketing_tags?' . $get_values, '');
+ header('Content-Type: application/json');
+ echo $response;
+ exit;
+ }
+
+ // Marketing upload
+ if ($action === 'marketing_upload' && $_SERVER['REQUEST_METHOD'] === 'POST') {
+ if (isset($_FILES['file']) && $_FILES['file']['error'] === UPLOAD_ERR_OK && $_FILES['file']['size'] > 0) {
+ // Use the uploaded file's temp path directly
+ $temp_path = $_FILES['file']['tmp_name'];
+
+ // Get actual MIME type from file content (more secure than trusting browser)
+ $actual_mime_type = mime_content_type($temp_path);
+
+ // Sanitize filename - remove path info and dangerous characters
+ $safe_filename = basename($_FILES['file']['name']);
+ $safe_filename = preg_replace('/[^a-zA-Z0-9._-]/', '_', $safe_filename);
+
+ $fileData = [
+ 'file' => new CURLFile($temp_path, $actual_mime_type, $safe_filename)
+ ];
+
+ $additionalData = $_POST; // Include any additional POST data
+
+ $token = createCommunicationToken($_SESSION['userkey']);
+
+ $response = ioAPIv2_FileUpload('/v2/marketing_upload/', $fileData, $additionalData, $token);
+
+ // No need to unlink since we didn't move the file
+ } else {
+ $response = json_encode(['error' => 'No file uploaded or upload error']);
}
+ header('Content-Type: application/json');
+ echo $response;
+ exit;
}
- echo '
-
-
-';
- $dir_name = $main_marketing_dir.$product_group.'/'.$product_content;
-
- $files = array_diff(scandir($dir_name), array('.', '..'));
- echo'';
-
- foreach ($files as $file) {
- $filetype = strtolower(pathinfo($file,PATHINFO_EXTENSION));
-
- if ( $filetype != '' && $filetype != 'ds_store'){
- echo '
-
-
-
- ';
- if ( $filetype == "jpg" || $filetype == "png" || $filetype == "jpeg" || $filetype == "gif" || $filetype == "png"){
- echo'
- 
- ';
+
+ // Marketing delete
+ if ($action === 'marketing_delete' && $_SERVER['REQUEST_METHOD'] === 'POST') {
+ $payload = ['file_id' => $_POST['file_id'] ?? ''];
+ $response = ioServer('/v2/marketing_delete', json_encode($payload));
+ header('Content-Type: application/json');
+ echo $response;
+ exit;
}
- if ($filetype == "doc" || $filetype == "docx" || $filetype == "xls"|| $filetype == "xlsx"){
- echo'
- 
- ';
- }
- if ( $filetype == "pdf"){
- echo'
- 
- '.ucfirst(substr(substr($file, 0, strpos($file, ".")),0 ,25)).'
- ';
- }
- if ( $filetype == "mp4"){
- echo'
-
- ';
- }
-
- echo'
-
-
';
- }
+ } catch (Exception $e) {
+ header('Content-Type: application/json');
+ http_response_code(500);
+ echo json_encode(['error' => $e->getMessage()]);
+ exit;
}
-
-echo '
- ';
+
+ // Marketing delete
+ if ($action === 'marketing_delete' && $_SERVER['REQUEST_METHOD'] === 'POST') {
+ $payload = ['file_id' => $_POST['file_id'] ?? ''];
+ $response = ioServer('/v2/marketing_delete', json_encode($payload));
+ header('Content-Type: application/json');
+ echo $response;
+ exit;
}
- if ($filetype == "doc" || $filetype == "docx" || $filetype == "xls"|| $filetype == "xlsx"){
- echo'
-
- ';
- }
- if ( $filetype == "pdf"){
- echo'
-
- '.ucfirst(substr(substr($file, 0, strpos($file, ".")),0 ,25)).'
- ';
- }
- if ( $filetype == "mp4"){
- echo'
-
- ';
- }
-
- echo'
-
-
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+ Loading files...
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
\ No newline at end of file
diff --git a/order.php b/order.php
index 19460e3..0944cbe 100644
--- a/order.php
+++ b/order.php
@@ -42,6 +42,23 @@ $order = ioServer($api_url,'');
//Decode Payload
if (!empty($order)){$order = json_decode($order,true);}else{$order = null;}
+//HANDLE STATUS CHANGE
+if ($update_allowed === 1){
+ if (isset($_POST['payment_status'])) {
+ //GET ALL POST DATA
+ $data = json_encode($_POST, JSON_UNESCAPED_UNICODE);
+
+ //API call
+ $responses = ioServer('/v2/transactions', $data);
+ if ($responses === 'NOK'){
+
+ } else {
+ header('Location: index.php?page=order&id='.$_POST['id'].'&success_msg=2');
+ exit;
+ }
+ }
+}
+
// Handle success messages
if (isset($_GET['success_msg'])) {
if ($_GET['success_msg'] == 1) {
@@ -112,11 +129,33 @@ $view .='
Payment Method
' . (${$payment_method} ?? $order['header']['payment_method'] ). '
-