feat: Add edit functionality for marketing files and update handling

api/v2/post/marketing_update.php

@@ -0,0 +1,71 @@
+<?php
+defined($security_key) or exit;
+
+//------------------------------------------
+// Marketing Update
+//------------------------------------------
+//Connect to DB
+$pdo = dbConnect($dbname);
+
+//SoldTo is empty
+if (empty($partner->soldto) || $partner->soldto == ''){$soldto_search = '%';} else {$soldto_search = '-%';}
+
+//default whereclause
+list($whereclause,$condition) = getWhereclauselvl2("",$permission,$partner,'');
+
+//QUERY AND VERIFY ALLOWED
+if (isAllowed('marketing',$profile,$permission,'U') === 1){
+    // Get JSON input
+    $input = json_decode(file_get_contents('php://input'), true);
+    
+    $file_id = $input['file_id'] ?? '';
+    $folder_id = $input['folder_id'] ?? '';
+    $tags = $input['tags'] ?? [];
+    $title = $input['title'] ?? '';
+
+    if (empty($file_id)) {
+        echo json_encode(['success' => false, 'error' => 'File ID is required']);
+        exit;
+    }
+
+    try {
+        // Update file
+        $update_sql = 'UPDATE `marketing_files` SET `title` = ?, `folder_id` = ? WHERE `id` = ? AND `accounthierarchy` LIKE ?';
+        $stmt = $pdo->prepare($update_sql);
+        $stmt->execute([
+            $title,
+            $folder_id ?: null,
+            $file_id,
+            $condition
+        ]);
+
+        if ($stmt->rowCount() === 0) {
+            echo json_encode(['success' => false, 'error' => 'File not found or access denied']);
+            exit;
+        }
+
+        // Update tags - first remove existing
+        $pdo->prepare('DELETE FROM `marketing_file_tags` WHERE `file_id` = ?')->execute([$file_id]);
+
+        // Insert new tags
+        if (!empty($tags)) {
+            $tag_sql = 'INSERT IGNORE INTO `marketing_tags` (`tag_name`) VALUES (?)';
+            $tag_stmt = $pdo->prepare($tag_sql);
+            
+            $file_tag_sql = 'INSERT INTO `marketing_file_tags` (`file_id`, `tag_id`) SELECT ?, id FROM marketing_tags WHERE tag_name = ?';
+            $file_tag_stmt = $pdo->prepare($file_tag_sql);
+            
+            foreach ($tags as $tag) {
+                $tag_stmt->execute([trim($tag)]);
+                $file_tag_stmt->execute([$file_id, trim($tag)]);
+            }
+        }
+
+        echo json_encode(['success' => true, 'message' => 'File updated successfully']);
+    } catch (Exception $e) {
+        echo json_encode(['success' => false, 'error' => 'Update failed: ' . $e->getMessage()]);
+    }
+} else {
+    echo json_encode(['success' => false, 'error' => 'Insufficient permissions']);
+}
+?>