419 lines
19 KiB
PHP
419 lines
19 KiB
PHP
<?php
|
|
defined($security_key) or exit;
|
|
|
|
///------------------------------------------
|
|
// Application related calls
|
|
//------------------------------------------
|
|
$action = $request[2] ?? '';
|
|
|
|
//------------------------------------------
|
|
// Check for action & start application API
|
|
//------------------------------------------
|
|
if ($action !=''){
|
|
|
|
//------------------------------------------
|
|
//Connect to DB
|
|
//------------------------------------------
|
|
$pdo = dbConnect($dbname);
|
|
$pdo2 = dbConnect($dbname_users);
|
|
|
|
//------------------------------------------
|
|
//CONTENT FROM API (POST)
|
|
//------------------------------------------
|
|
$post_content = json_decode(decode_payload($input),true);
|
|
|
|
//SoldTo is empty
|
|
if (empty($partner->soldto) || $partner->soldto == ''){$soldto_search = '%';} else {$soldto_search = '-%';}
|
|
|
|
//default whereclause
|
|
$whereclause = 'WHERE';
|
|
|
|
switch ($permission) {
|
|
case '4':
|
|
$whereclause .= '';
|
|
break;
|
|
case '3':
|
|
$whereclause .= '';
|
|
break;
|
|
case '2':
|
|
$condition = '__salesid___'.$partner->salesid.'___soldto___'.substr($partner->soldto, 0, strpos($partner->soldto, "-")).$soldto_search;
|
|
$whereclause .= ' e.accounthierarchy like "'.$condition.'" AND ';
|
|
break;
|
|
default:
|
|
$condition = '__salesid___'.$partner->salesid.'___soldto___'.substr($partner->soldto, 0, strpos($partner->soldto, "-")).$soldto_search.'___shipto___'.substr($partner->shipto, 0, strpos($partner->shipto, "-")).'%___location___'.substr($partner->location, 0, strpos($partner->location, "-")).'%';
|
|
$whereclause .= ' e.accounthierarchy like "'.$condition.'" AND ';
|
|
break;
|
|
}
|
|
|
|
//------------------------------------------
|
|
// Actions
|
|
//------------------------------------------
|
|
switch ($action) {
|
|
case 'unscribe':
|
|
// -----------------------------------------------------------
|
|
// Unscribe from mailinglist -> set communication status to 0
|
|
// -----------------------------------------------------------
|
|
if (isset($post_content['email']) && $post_content['email'] !=''){
|
|
|
|
$sql = 'UPDATE communication SET status = 0 WHERE email = ?';
|
|
$stmt = $pdo->prepare($sql);
|
|
$stmt->execute([$post_content['email']]);
|
|
|
|
if($stmt->execute()){
|
|
$messages = $unscribe_msg1;
|
|
} else{
|
|
$messages = $unscribe_msg_error;
|
|
}
|
|
|
|
} else{
|
|
$messages = $unscribe_msg_error;
|
|
}
|
|
|
|
//Encrypt results
|
|
$messages = generate_payload($messages);
|
|
//Send results
|
|
echo $messages;
|
|
|
|
break;
|
|
|
|
case 'register':
|
|
// --------------------------------------------
|
|
// User registration
|
|
// --------------------------------------------
|
|
$firmware_account_send = 0; //Default value -> no mail send
|
|
$communication_check = 0; //Check communication record
|
|
$message_box = [];
|
|
$timestamp = date("Y-m-d H:i:s");
|
|
|
|
// Create history description
|
|
$history_description = [
|
|
"start_date"=>$timestamp,
|
|
"end_date"=>date("Y-m-d", strtotime("+730 days")),
|
|
"organization"=>strip_tags(trim($post_content['organization'])),
|
|
"phone"=>strip_tags(trim($post_content['phone'])),
|
|
"city"=>strip_tags(trim($post_content['city'])),
|
|
"country"=>strip_tags(trim($post_content['country'])),
|
|
"email_consent"=>strip_tags(trim($post_content['email_consent'])),
|
|
"terms_consent"=>strip_tags(trim($post_content['terms_consent']))
|
|
];
|
|
|
|
$description = json_encode($history_description, JSON_UNESCAPED_UNICODE);
|
|
// --------------------------------------------
|
|
// Check if multiple serialnumbers are provided
|
|
// --------------------------------------------
|
|
if(is_array($post_content['sn'])){
|
|
foreach ($post_content['sn'] as $sn){
|
|
//Get equipmentid based on rowID
|
|
$rowID = getrowID($dbname,'rowID','equipment','serialnumber="'.$sn.'"');
|
|
|
|
if ($rowID){
|
|
//check if under warranty
|
|
$warranty = getrowID($dbname,'rowID','history','equipmentid="'.$rowID['rowID'].'" && (type="'.$type9.'" || type="'.$type10.'" || type="'.$type11.'" || type="'.$type12.'")');
|
|
if ($warranty){
|
|
// --------------------------------------------
|
|
// Already under contract
|
|
// --------------------------------------------
|
|
//Serialnumber under warranty
|
|
$message_box[] = $sn.' - '.$register_message_2;
|
|
$communication_check = 1;
|
|
} else
|
|
{
|
|
// --------------------------------------------
|
|
// Not under warranty
|
|
// --------------------------------------------
|
|
//Send user firmware account
|
|
$firmware_account_send = 1;
|
|
//create history
|
|
// Prepare queries
|
|
$sql = 'INSERT INTO history (equipmentid, type, description, created, createdby) VALUES (?,?,?,?,?)';
|
|
$stmt = $pdo->prepare($sql);
|
|
$stmt->execute([$rowID['rowID'],$type9,$description,$timestamp,$post_content['email']]);
|
|
|
|
//GET PARTNER DETAILS OF EQUIPMENT
|
|
$partner_equipment = getrowID($dbname,'accounthierarchy','equipment','rowID="'.$rowID['rowID'].'"');
|
|
$partner_equipment = json_decode($partner_equipment['accounthierarchy']);
|
|
|
|
//Setup partnerhierarchy (salesID)
|
|
$partnerhierarchy =[
|
|
"salesid"=>$partner_equipment->salesid,
|
|
"soldto"=>$partner_equipment->soldto
|
|
];
|
|
|
|
//Setup variables for partner
|
|
$partnername = $post_content['organization'];
|
|
$partnernotes = 'created based on user registration';
|
|
$salesID = json_encode($partnerhierarchy, JSON_UNESCAPED_UNICODE);
|
|
$createdby = 'system';
|
|
|
|
//Check if shipto is empty and if empty search partner or create
|
|
if ($partner_equipment->shipto == ''){
|
|
$partner_shipto = getrowID($dbname_users,'partnerID','partner','partnername = "'.$partnername.'" && partnertype="'.$partnertype3.'"');
|
|
if ($partner_shipto){
|
|
//Partner exists - Use it
|
|
$partnerhierarchy['shipto'] = $partner_shipto['partnerID'].'-'.$partnername;
|
|
} else {
|
|
//Partner does not exist create
|
|
$sql = 'INSERT INTO partner (partnertype,partnername,salesID,createdby,status) VALUES (?,?,?,?,?)';
|
|
$stmt = $pdo2->prepare($sql);
|
|
$stmt->execute([$partnertype3,$partnername,$salesID,$createdby,'1']);
|
|
|
|
//Get rowID of created partner and use it
|
|
$partner_rowid = $pdo2->lastInsertId();
|
|
$partnerhierarchy['shipto'] = $partner_rowid.'-'.$partnername;
|
|
}
|
|
} else {
|
|
// Shipto exist use it
|
|
$partnerhierarchy['shipto'] = $partner_equipment->shipto;
|
|
}
|
|
//Check if location is empty and if empty search partner or create
|
|
if ($partner_equipment->location == ''){
|
|
$partner_location = getrowID($dbname_users,'partnerID','partner','partnername = "'.$partnername.'" && partnertype="'.$partnertype4.'"');
|
|
if ($partner_location){
|
|
//Partner exists - Use it
|
|
$partnerhierarchy['location'] = $partner_location['partnerID'].'-'.$partnername;
|
|
|
|
} else {
|
|
//Partner does not exist create
|
|
$sql = 'INSERT INTO partner (partnertype,partnername,salesID,createdby,status) VALUES (?,?,?,?,?)';
|
|
$stmt = $pdo2->prepare($sql);
|
|
$stmt->execute([$partnertype4,$partnername,$salesID,$createdby,'1']);
|
|
|
|
//Get rowID of created partner and use it
|
|
$partner_rowid = $pdo2->lastInsertId();
|
|
$partnerhierarchy['location'] = $partner_rowid.'-'.$partnername;
|
|
}
|
|
|
|
} else {
|
|
// Location exist use it
|
|
$partnerhierarchy['location'] = $partner_equipment->location;
|
|
}
|
|
|
|
$shipto = $partnerhierarchy['shipto'] ?? '';
|
|
$partnerhierarchy = json_encode($partnerhierarchy, JSON_UNESCAPED_UNICODE);
|
|
// --------------------------------------------
|
|
// Update equipment record warranty_date, partnerhierarchy, status equipment
|
|
// --------------------------------------------
|
|
$sql = 'UPDATE equipment SET status = ?, warranty_date = ?, accounthierarchy = ? WHERE rowID = ?';
|
|
$stmt = $pdo->prepare($sql);
|
|
$stmt->execute(['4',$warranty_extended,$partnerhierarchy,$rowID['rowID']]);
|
|
|
|
//Serialnumber recognized
|
|
$message_box[] = $sn.' - '.$register_message_3;
|
|
$communication_check = 1;
|
|
}
|
|
} else {
|
|
//Serialnumber not recognized
|
|
$message_box[] = $sn.' - '.$register_message_1;
|
|
}
|
|
}
|
|
}
|
|
else {
|
|
// --------------------------------------------
|
|
//Get equipmentid based on rowID
|
|
// --------------------------------------------
|
|
$rowID = getrowID($dbname,'rowID','equipment','serialnumber="'.$post_content['sn'].'"');
|
|
if ($rowID){
|
|
//check if under warranty
|
|
$warranty = getrowID($dbname,'rowID','history','equipmentid="'.$rowID['rowID'].'" && (type="'.$type9.'" || type="'.$type10.'" || type="'.$type11.'" || type="'.$type12.'")');
|
|
if ($warranty){
|
|
// --------------------------------------------
|
|
// Already under contract
|
|
// --------------------------------------------
|
|
//Serialnumber not recognized
|
|
$message_box[] = $post_content['sn'].' - '.$register_message_2;
|
|
} else
|
|
{
|
|
// --------------------------------------------
|
|
// Not under warranty
|
|
// --------------------------------------------
|
|
$firmware_account_send = 1;
|
|
//create history
|
|
$sql = 'INSERT INTO history (equipmentid, type, description, created, createdby) VALUES (?,?,?,?,?)';
|
|
$stmt = $pdo->prepare($sql);
|
|
$stmt->execute([$rowID['rowID'],$type9,$description,$timestamp,$post_content['email']]);
|
|
|
|
//GET PARTNER DETAILS OF EQUIPMENT
|
|
$partner_equipment = getrowID($dbname,'accounthierarchy','equipment','rowID="'.$rowID['rowID'].'"');
|
|
$partner_equipment = json_decode($partner_equipment['accounthierarchy']);
|
|
|
|
//Setup partnerhierarchy (salesID)
|
|
$partnerhierarchy =[
|
|
"salesid"=>$partner_equipment->salesid,
|
|
"soldto"=>$partner_equipment->soldto
|
|
];
|
|
|
|
//Setup variables for partner
|
|
$partnername = $post_content['organization'];
|
|
$partnernotes = 'created based on user registration';
|
|
$salesID = json_encode($partnerhierarchy, JSON_UNESCAPED_UNICODE);
|
|
$createdby = 'system';
|
|
|
|
//Check if shipto is empty and if empty search partner or create
|
|
if ($partner_equipment->shipto == ''){
|
|
$partner_shipto = getrowID($dbname_users,'partnerID','partner','partnername = "'.$partnername.'" && partnertype="'.$partnertype3.'"');
|
|
if ($partner_shipto){
|
|
//Partner exists - Use it
|
|
$partnerhierarchy['shipto'] = $partner_shipto['partnerID'].'-'.$partnername;
|
|
} else {
|
|
//Partner does not exist create
|
|
$sql = 'INSERT INTO partner (partnertype, partnername,salesID,createdby,status) VALUES (?,?,?,?,?)';
|
|
$stmt = $pdo2->prepare($sql);
|
|
$stmt->execute([$partnertype3,$partnername,$salesID,$createdby,'1']);
|
|
|
|
//Get rowID of created partner and use it
|
|
$partner_rowid = $pdo2->lastInsertId();
|
|
$partnerhierarchy['shipto'] = $partner_rowid.'-'.$partnername;
|
|
}
|
|
} else {
|
|
// Shipto exist use it
|
|
$partnerhierarchy['shipto'] = $partner_equipment->shipto;
|
|
}
|
|
//Check if location is empty and if empty search partner or create
|
|
if ($partner_equipment->location == ''){
|
|
$partner_location = getrowID($dbname_users,'partnerID','partner','partnername = "'.$partnername.'" && partnertype="'.$partnertype4.'"');
|
|
if ($partner_location){
|
|
//Partner exists - Use it
|
|
$partnerhierarchy['location'] = $partner_location['partnerID'].'-'.$partnername;
|
|
|
|
} else {
|
|
//Partner does not exist create
|
|
$sql = 'INSERT INTO partner (partnertype,partnername,salesID,createdby,status) VALUES (?,?,?,?,?)';
|
|
$stmt = $pdo2->prepare($sql);
|
|
$stmt->execute([$partnertype4,$partnername,$salesID,$createdby,'1']);
|
|
|
|
//Get rowID of created partner and use it
|
|
$partner_rowid = $pdo2->lastInsertId();
|
|
$partnerhierarchy['location'] = $partner_rowid.'-'.$partnername;
|
|
}
|
|
} else {
|
|
// Location exist use it
|
|
$partnerhierarchy['location'] = $partner_equipment->location;
|
|
}
|
|
|
|
$partnerhierarchy = json_encode($partnerhierarchy, JSON_UNESCAPED_UNICODE);
|
|
|
|
// --------------------------------------------
|
|
// Update equipment record warranty_date, partnerhierarchy, status equipment
|
|
// --------------------------------------------
|
|
$sql = 'UPDATE equipment SET status = ?, warranty_date = ?, accounthierarchy = ? WHERE rowID = ?';
|
|
$stmt = $pdo->prepare($sql);
|
|
$stmt->execute(['4',$warranty_extended,$partnerhierarchy,$rowID['rowID']]);
|
|
|
|
//Serialnumber recognized
|
|
$message_box[] = $post_content['sn'].' - '.$register_message_3;
|
|
}
|
|
}
|
|
else {
|
|
//Serialnumber not recognized
|
|
$message_box[] = $post_content['sn'].' - '.$register_message_1;
|
|
}
|
|
}
|
|
|
|
// --------------------------------------------
|
|
// Send generic account to user for software updates
|
|
// --------------------------------------------
|
|
if ($firmware_account_send == 2){
|
|
include_once './assets/mail/email_template_software.php';
|
|
send_mail($post_content['email'],$subject,$message,'','');
|
|
}
|
|
|
|
// ----------------------------------------------
|
|
// Create communication user when not exist
|
|
// ----------------------------------------------
|
|
if ($communication_check == 1 && isset($shipto) && $shipto !=''){
|
|
//Check if communication record exist
|
|
$rowID = getrowID($dbname,'rowID','communication','partnerID ="'.$shipto.'" and email = "'.$post_content['email'].'"');
|
|
|
|
if ($rowID){
|
|
//communication record exist
|
|
}
|
|
else
|
|
{
|
|
//communication record does not exist ->create
|
|
$sql = 'INSERT INTO communication (status,partnerID,email,type_1,type_2,type_3,createdby,salesID,coms_type) VALUES (?,?,?,?,?,?,?,?,?)';
|
|
$stmt = $pdo->prepare($sql);
|
|
$stmt->execute(['1',$shipto,$post_content['email'],'1','1','1',$createdby,$salesID,'1']);
|
|
}
|
|
}
|
|
|
|
//Encrypt results
|
|
$messages = generate_payload($message_box);
|
|
//Send results
|
|
echo $messages;
|
|
|
|
// --------------------------------------------
|
|
// END User registration
|
|
// --------------------------------------------
|
|
break;
|
|
|
|
case 'firmwareCommunication':
|
|
if (isset($post_content['hw_version']) && $post_content['hw_version'] != ''){
|
|
|
|
include './settings/systemfirmware.php';
|
|
|
|
$target = $post_content['target'] ?? '0';
|
|
|
|
//FILTER VARIABLES FOR SQL
|
|
$filter1 = 'soldto":"';
|
|
$filter2 = '","shipto';
|
|
$filter3 = 'shipto":"';
|
|
$filter4 = '","location';
|
|
|
|
//ADD additional createria to whereclause (Firmware and Active)
|
|
$whereclause .= " e.hw_version= ? AND c.type_1='1' AND c.status='1' AND e.status != 5 AND (e.sw_version != '$FirmwarenameR06' OR e.sw_version != '$FirmwarenameR06A' OR e.sw_version != '$FirmwarenameR07A' OR e.sw_version != '$FirmwarenameR07B' OR e.sw_version != '$FirmwarenameR07' OR e.sw_version != '$FirmwarenameR08')";
|
|
|
|
//get target
|
|
switch ($target) {
|
|
case '0': // Both
|
|
$onclause ="SUBSTRING_INDEX(SUBSTRING_INDEX(e.accounthierarchy, '$filter1', -1),'$filter2',1) = c.partnerID or SUBSTRING_INDEX(SUBSTRING_INDEX(e.accounthierarchy, '$filter3', -1),'$filter4',1) = c.partnerID";
|
|
break;
|
|
|
|
case '1': // SoldTO only
|
|
$onclause ="SUBSTRING_INDEX(SUBSTRING_INDEX(e.accounthierarchy, '$filter1', -1),'$filter2',1) = c.partnerID";
|
|
break;
|
|
|
|
case '2': // ShipTO only
|
|
$onclause =" SUBSTRING_INDEX(SUBSTRING_INDEX(e.accounthierarchy, '$filter3', -1),'$filter4',1) = c.partnerID";
|
|
break;
|
|
}
|
|
|
|
//CHECK IF WHERE CLAUSE CONTAINS WHERE
|
|
|
|
//GET THE FULL LIST OF COMMUNCATION RECORDS FOR FIRMWARE MESSAGE
|
|
$sql = "SELECT e.sw_version, c.email from equipment e join communication c on $onclause $whereclause group by c.email";
|
|
$stmt = $pdo->prepare($sql);
|
|
$stmt->execute([$post_content['hw_version']]);
|
|
$results = $stmt->fetchAll(PDO::FETCH_ASSOC);
|
|
|
|
if ($results) {
|
|
//IF RESULTS ARE RETURNED
|
|
foreach ($results as $result) {
|
|
//LOOP OVER ALL RESULTS AND SET SEND_INDICATOR to 1
|
|
$sql = "UPDATE communication SET send_indicator = 1 WHERE email = ?";
|
|
$stmt = $pdo->prepare($sql);
|
|
$stmt->execute([$result['email']]);
|
|
}
|
|
//------------------------------------------
|
|
//Encrypt results
|
|
//------------------------------------------
|
|
$messages = generate_payload('200');
|
|
|
|
//------------------------------------------
|
|
//Send results
|
|
//------------------------------------------
|
|
echo $messages;
|
|
|
|
}
|
|
else {
|
|
http_response_code(200);
|
|
}
|
|
|
|
}
|
|
else {
|
|
http_response_code(400);
|
|
}
|
|
break;
|
|
}
|
|
|
|
}
|