Add PayPal webhook handler and marketing styles

- Implemented PayPal webhook for handling payment notifications, including signature verification and transaction updates. - Created invoice generation and license management for software upgrades upon successful payment. - Added comprehensive logging for debugging purposes. - Introduced new CSS styles for the marketing file management system, including layout, toolbar, breadcrumb navigation, search filters, and file management UI components.
2026-01-09 15:19:28 +01:00
parent 08263c7933
commit 2520fb2b75
38 changed files with 4166 additions and 1107 deletions
--- a/api/v2/get/equipment_history.php
+++ b/api/v2/get/equipment_history.php
@@ -0,0 +1,116 @@
+<?php
+defined($security_key) or exit;
+
+// Database connection
+$pdo = dbConnect($dbname);
+
+// ============================================
+// Input Validation & Sanitization
+// ============================================
+
+$filters = [
+    'serialnumber' => isset($_GET['serialnumber']) ? trim($_GET['serialnumber']) : null,
+    'type' => isset($_GET['type']) ? trim($_GET['type']) : null,
+    'start' => isset($_GET['start']) ? trim($_GET['start']) : date("Y-m-d", strtotime("-270 days")),
+    'end' => isset($_GET['end']) ? trim($_GET['end']) : date("Y-m-d", strtotime("+1 days"))
+];
+
+// ============================================
+// Build Query with Prepared Statements
+// ============================================
+
+$whereClauses = [];
+$params = [];
+
+// Serial Number Filter
+if ($filters['serialnumber']) {
+    $whereClauses[] = 'h.description LIKE :serialnumber';
+    $params[':serialnumber'] = "%historycreated%SN%:" . $filters['serialnumber'] . "%";
+    $whereClauses[] = 'h.type != :excluded_type';
+    $params[':excluded_type'] = 'SRIncluded';
+}
+
+// Type Filter
+if ($filters['type']) {
+    if ($filters['type'] === 'latest') {
+        // Get only the latest record per equipment
+        if ($filters['serialnumber']) {
+            $whereClauses[] = 'h.rowID IN (
+                SELECT MAX(h2.rowID) 
+                FROM equipment_history h2 
+                GROUP BY h2.equipmentid
+            )';
+        } else {
+            $whereClauses[] = "h.description LIKE '%historycreated%'";
+            $whereClauses[] = 'h.rowID IN (
+                SELECT MAX(h2.rowID) 
+                FROM equipment_history h2 
+                WHERE h2.description LIKE :history_created
+                GROUP BY h2.equipmentid
+            )';
+            $params[':history_created'] = '%historycreated%';
+        }
+    } else {
+        // Specific type filter
+        $whereClauses[] = 'h.type = :type';
+        $params[':type'] = $filters['type'];
+    }
+}
+
+// Default filter if no other filters applied
+if (empty($whereClauses)) {
+    $whereClauses[] = "h.description LIKE '%historycreated%'";
+}
+
+// Date Range Filter
+$whereClauses[] = 'h.created BETWEEN :start_date AND :end_date';
+$params[':start_date'] = $filters['start'];
+$params[':end_date'] = $filters['end'];
+
+// ============================================
+// Execute Query
+// ============================================
+
+$whereClause = 'WHERE ' . implode(' AND ', $whereClauses);
+$sql = "SELECT h.rowID, h.description 
+        FROM equipment_history h 
+        $whereClause 
+        ORDER BY h.created DESC";
+
+try {
+    $stmt = $pdo->prepare($sql);
+    $stmt->execute($params);
+    $messages = $stmt->fetchAll(PDO::FETCH_ASSOC);
+    
+    // ============================================
+    // Format Response
+    // ============================================
+    
+    $results = [];
+    foreach ($messages as $message) {
+        $record = json_decode($message['description'], true);
+        
+        // Handle JSON decode errors
+        if (json_last_error() !== JSON_ERROR_NONE) {
+            continue; // Skip invalid JSON
+        }
+        
+        $record['historyID'] = (int)$message['rowID'];
+        $results[] = $record;
+    }
+    
+    // Set proper headers
+    header('Content-Type: application/json; charset=utf-8');
+    echo json_encode($results, JSON_PRETTY_PRINT | JSON_UNESCAPED_UNICODE);
+    
+} catch (PDOException $e) {
+    // Log error (don't expose to client in production)
+    error_log("Database error: " . $e->getMessage());
+    
+    //header('Content-Type: application/json; charset=utf-8', true, 500);
+    echo json_encode([
+        'error' => 'An error occurred while processing your request'
+    ]);
+}
+
+?>