Mods-for-HESK-Netsyms/admin/manage_statuses.php

<?php

define('IN_SCRIPT',1);
define('HESK_PATH','../');

/* Get all the required files and functions */
require(HESK_PATH . 'hesk_settings.inc.php');
require(HESK_PATH . 'inc/common.inc.php');
require(HESK_PATH . 'inc/admin_functions.inc.php');
hesk_load_database_functions();

hesk_session_start();
hesk_dbConnect();
hesk_isLoggedIn();

hesk_checkPermission('can_man_ticket_statuses');

define('WYSIWYG',1);

// Are we performing an action?
if (isset($_POST['action'])) {
    if ($_POST['action'] == 'save') {
        save();
    }
}
/* Print header */
require_once(HESK_PATH . 'inc/headerAdmin.inc.php');

/* Print main manage users page */
require_once(HESK_PATH . 'inc/show_admin_nav.inc.php');
?>

<div class="row" style="padding: 20px">
    <ul class="nav nav-tabs" role="tablist">
        <?php
        // Show a link to banned_emails.php if user has permission
        if ( hesk_checkPermission('can_ban_emails',0) )
        {
            echo '
            <li role="presentation">
                <a title="' . $hesklang['banemail'] . '" href="banned_emails.php">'.$hesklang['banemail'].'</a>
            </li>
            ';
        }
        if ( hesk_checkPermission('can_ban_ips',0) )
        {
            echo '
            <li role="presentation">
                <a title="' . $hesklang['banip'] . '" href="banned_ips.php">'.$hesklang['banip'].'</a>
            </li>';
        }
        // Show a link to status_message.php if user has permission to do so
        if ( hesk_checkPermission('can_service_msg',0) )
        {
            echo '
            <li role="presentation">
                <a title="' . $hesklang['sm_title'] . '" href="service_messages.php">' . $hesklang['sm_title'] . '</a>
            </li>';
        }
        if ( hesk_checkPermission('can_man_email_tpl',0) )
        {
            echo '
            <li role="presentation">
                <a title="'.$hesklang['email_templates'].'" href="manage_email_templates.php">'.$hesklang['email_templates'].'</a>
            </li>
            ';
        }
        ?>
        <li role="presentation" class="active">
            <a href="#"><?php echo $hesklang['statuses']; ?> <i class="fa fa-question-circle settingsquestionmark" data-toggle="popover" title="<?php echo $hesklang['statuses']; ?>" data-content="<?php echo $hesklang['statuses_intro']; ?>"></i></a>
        </li>
    </ul>
    <div class="tab-content summaryList tabPadding">
        <div class="row">
            <div class="col-md-12">
                <?php
                /* This will handle error, success and notice messages */
                hesk_handle_messages();

                ?>
                <h6 style="font-weight: bold"><?php echo $hesklang['basicProperties']; ?></h6>
                <div class="footerWithBorder blankSpace"></div>
                <?php
                //-- We need to get all of the statuses and dump the information to the page.
                $statusesSql = 'SELECT * FROM `'.hesk_dbEscape($hesk_settings['db_pfix']).'statuses`';
                $closedStatusesSql = 'SELECT * FROM `'.hesk_dbEscape($hesk_settings['db_pfix']).'statuses` WHERE `IsClosed` = 1';
                $openStatusesSql = 'SELECT * FROM `'.hesk_dbEscape($hesk_settings['db_pfix']).'statuses` WHERE `IsClosed` = 0';
                $statusesRS = hesk_dbQuery($statusesSql);
                ?>
                <form class="form-horizontal" method="post" action="manage_statuses.php" role="form">
                    <div class="table-responsive">
                        <table class="table table-hover">
                            <thead>
                            <tr>
                            <th><?php echo $hesklang['name']; ?></th>
                            <th><?php echo $hesklang['language_key']; ?> <i class="fa fa-question-circle settingsquestionmark" data-toggle="popover" title="<?php echo $hesklang['language_key']; ?>" data-content="<?php echo $hesklang['language_key_description']; ?>"></i></th>
                            <th><?php echo $hesklang['textColor']; ?> <i class="fa fa-question-circle settingsquestionmark" data-toggle="popover" title="<?php echo $hesklang['textColor']; ?>" data-content="<?php echo $hesklang['textColorDescr']; ?>"></i></th>
                            <th><?php echo $hesklang['closable_question']; ?> <i class="fa fa-question-circle settingsquestionmark" data-toggle="htmlpopover" data-placement="bottom" title="<?php echo $hesklang['closable_question']; ?>" data-content="<?php echo $hesklang['closable_description']; ?>"></i></th>
                            <th><?php echo $hesklang['closedQuestionMark']; ?> <i class="fa fa-question-circle settingsquestionmark" data-toggle="popover" data-placement="top" title="<?php echo $hesklang['closedQuestionMark']; ?>" data-content="<?php echo $hesklang['closedQuestionMarkDescr']; ?>"></i></th>
                            <th><?php echo $hesklang['delete']; ?></th>
                            </tr>
                            </thead>
                            <tbody>
                            <?php
                            //Print each status
                            while ($row = $statusesRS->fetch_assoc())
                            {
                                $checkedEcho = ($row['IsClosed'] == 1) ? 'checked="checked"' : '';
                                $isDisabled = false;
                                if ($row['IsNewTicketStatus'] || $row['IsClosedByClient'] || $row['IsCustomerReplyStatus'] ||
                                    $row['IsStaffClosedOption'] || $row['IsStaffReopenedStatus'] || $row['IsDefaultStaffReplyStatus'] ||
                                    $row['LockedTicketStatus'] || $row['IsAutocloseOption'])
                                {
                                    $isDisabled = true;
                                }

                                $yesSelected = $customersOnlySelected = $staffOnlySelected = $noSelected = '';
                                if ($row['Closable'] == 'yes') { $yesSelected = 'selected'; }
                                elseif ($row['Closable'] == 'conly') { $customersOnlySelected = 'selected'; }
                                elseif ($row['Closable'] == 'sonly') { $staffOnlySelected = 'selected'; }
                                else { $noSelected = 'selected'; }

                                echo '<tr id="s'.$row['ID'].'_row">';
                                echo '<td>'.$hesklang[$row['Key']].'</td>'; //Name
                                echo '<td><input type="text" class="form-control" name="s'.$row['ID'].'_key" value="'.$row['Key'].'" placeholder="'.htmlspecialchars($hesklang['language_key']).'"></td>'; // Language File Key
                                echo '<td><input type="text" class="form-control" name="s'.$row['ID'].'_textColor" value="'.$row['TextColor'].'" placeholder="'.htmlspecialchars($hesklang['textColor']).'"></td>'; // Text Color
                                echo '<td>
                                              <select class="form-control" name="s'.$row['ID'].'_closable">
                                                  <option value="yes" '.$yesSelected.'>'.$hesklang['yes_title_case'].'</option>
                                                  <option value="conly" '.$customersOnlySelected.'>'.$hesklang['customers_only'].'</option>
                                                  <option value="sonly" '.$staffOnlySelected.'>'.$hesklang['staff_only'].'</option>
                                                  <option value="no" '.$noSelected.'>'.$hesklang['no_title_case'].'</option>
                                              </select>
                                          </td>';
                                echo '<td><input type="checkbox" name="s'.$row['ID'].'_isClosed" value="1" '.$checkedEcho.'></td>'; // Resolved Status?
                                echo '<td>';
                                if ($isDisabled)
                                {
                                    echo '<i class="fa fa-ban" style="color: red; font-size: 1.2em; font-weight: bold" data-toggle="popover" data-placement="left" title="'.$hesklang['whyCantIDeleteThisStatus'].'" data-content="'.$hesklang['whyCantIDeleteThisStatusReason'].'"></i>';
                                } else
                                {
                                    echo '<input type="checkbox" onclick="toggleRow(\'s'.$row['ID'].'_row\')" name="s'.$row['ID'].'_delete" value="1">';
                                }
                                echo '</td>'; //Delete status?
                                echo '</tr>';
                            }

                            //Print out an additional blank space for adding a status
                            echo '<tr class="info">';
                            echo '<td><b>'.$hesklang['addNew'].'</b></td>';
                            echo '<td><input type="text" class="form-control" name="sN_key" value="" placeholder="'.htmlspecialchars($hesklang['language_key']).'"></td>'; // Language File Key
                            echo '<td><input type="text" class="form-control" name="sN_textColor" value="" placeholder="'.htmlspecialchars($hesklang['textColor']).'"></td>'; // Text Color
                            echo '<td>
                                        <select class="form-control" name="sN_closable">
                                            <option value="yes">'.$hesklang['yes_title_case'].'</option>
                                            <option value="conly">'.$hesklang['customers_only'].'</option>
                                            <option value="sonly">'.$hesklang['staff_only'].'</option>
                                            <option value="no">'.$hesklang['no_title_case'].'</option>
                                        </select>
                                    </td>';
                            echo '<td><input type="checkbox" name="sN_isClosed" value="1"></td>'; // Resolved Status?
                            echo '<td></td>'; //Empty placeholder where the delete row is.
                            echo '</tr>';
                            ?>
                            </tbody>
                        </table>
                    </div>
                    <h6 style="font-weight: bold"><?php echo $hesklang['defaultStatusForAction']; ?></h6>
                    <div class="footerWithBorder blankSpace"></div>
                    <div class="form-group">
                        <label for="newTicket" class="col-sm-6 col-xs-12 control-label"><?php echo $hesklang['isNewTicketMsg']; ?></label>
                        <div class="col-sm-6 col-xs-12">
                            <select name="newTicket" class="form-control" id="newTicket">
                                <?php
                                $statusesRS = hesk_dbQuery($openStatusesSql);
                                while ($row = $statusesRS->fetch_assoc())
                                {
                                    $selectedEcho = ($row['IsNewTicketStatus'] == 1) ? 'selected="selected"' : '';
                                    echo '<option value="'.$row['ID'].'" '.$selectedEcho.'>'.$hesklang[$row['Key']].'</option>';
                                }
                                ?>
                            </select>
                        </div>
                    </div>
                    <div class="form-group">
                        <label for="closedByClient" class="col-sm-6 col-xs-12 control-label"><?php echo $hesklang['isClosedByClientMsg']; ?></label>
                        <div class="col-sm-6 col-xs-12">
                            <select name="closedByClient" class="form-control" id="closedByClient">
                                <?php
                                $statusesRS = hesk_dbQuery($closedStatusesSql);
                                while ($row = $statusesRS->fetch_assoc())
                                {
                                    $selectedEcho = ($row['IsClosedByClient'] == 1) ? 'selected="selected"' : '';
                                    echo '<option value="'.$row['ID'].'" '.$selectedEcho.'>'.$hesklang[$row['Key']].'</option>';
                                }
                                ?>
                            </select>
                        </div>
                    </div>
                    <div class="form-group">
                        <label for="replyFromClient" class="col-sm-6 col-xs-12 control-label"><?php echo $hesklang['isRepliedByClientMsg']; ?></label>
                        <div class="col-sm-6 col-xs-12">
                            <select name="replyFromClient" class="form-control" id="replyFromClient">
                                <?php
                                $statusesRS = hesk_dbQuery($openStatusesSql);
                                while ($row = $statusesRS->fetch_assoc())
                                {
                                    $selectedEcho = ($row['IsCustomerReplyStatus'] == 1) ? 'selected="selected"' : '';
                                    echo '<option value="'.$row['ID'].'" '.$selectedEcho.'>'.$hesklang[$row['Key']].'</option>';
                                }
                                ?>
                            </select>
                        </div>
                    </div>
                    <div class="form-group">
                        <label for="staffClosedOption" class="col-sm-6 col-xs-12 control-label"><?php echo $hesklang['isStaffClosedOptionMsg']; ?></label>
                        <div class="col-sm-6 col-xs-12">
                            <select name="staffClosedOption" class="form-control" id="staffClosedOption">
                                <?php
                                $statusesRS = hesk_dbQuery($closedStatusesSql);
                                while ($row = $statusesRS->fetch_assoc())
                                {
                                    $selectedEcho = ($row['IsStaffClosedOption'] == 1) ? 'selected="selected"' : '';
                                    echo '<option value="'.$row['ID'].'" '.$selectedEcho.'>'.$hesklang[$row['Key']].'</option>';
                                }
                                ?>
                            </select>
                        </div>
                    </div>
                    <div class="form-group">
                        <label for="staffReopenedStatus" class="col-sm-6 col-xs-12 control-label"><?php echo $hesklang['isStaffReopenedStatusMsg']; ?></label>
                        <div class="col-sm-6 col-xs-12">
                            <select name="staffReopenedStatus" class="form-control" id="staffReopenedStatus">
                                <?php
                                $statusesRS = hesk_dbQuery($openStatusesSql);
                                while ($row = $statusesRS->fetch_assoc())
                                {
                                    $selectedEcho = ($row['IsStaffReopenedStatus'] == 1) ? 'selected="selected"' : '';
                                    echo '<option value="'.$row['ID'].'" '.$selectedEcho.'>'.$hesklang[$row['Key']].'</option>';
                                }
                                ?>
                            </select>
                        </div>
                    </div>
                    <div class="form-group">
                        <label for="defaultStaffReplyStatus" class="col-sm-6 col-xs-12 control-label"><?php echo $hesklang['isDefaultStaffReplyStatusMsg']; ?></label>
                        <div class="col-sm-6 col-xs-12">
                            <select name="defaultStaffReplyStatus" class="form-control" id="defaultStaffReplyStatus">
                                <?php
                                $statusesRS = hesk_dbQuery($openStatusesSql);
                                while ($row = $statusesRS->fetch_assoc())
                                {
                                    $selectedEcho = ($row['IsDefaultStaffReplyStatus'] == 1) ? 'selected="selected"' : '';
                                    echo '<option value="'.$row['ID'].'" '.$selectedEcho.'>'.$hesklang[$row['Key']].'</option>';
                                }
                                ?>
                            </select>
                        </div>
                    </div>
                    <div class="form-group">
                        <label for="lockedTicketStatus" class="col-sm-6 col-xs-12 control-label"><?php echo $hesklang['lockedTicketStatusMsg']; ?></label>
                        <div class="col-sm-6 col-xs-12">
                            <select name="lockedTicketStatus" class="form-control" id="lockedTicketStatus">
                                <?php
                                $statusesRS = hesk_dbQuery($statusesSql);
                                while ($row = $statusesRS->fetch_assoc())
                                {
                                    $selectedEcho = ($row['LockedTicketStatus'] == 1) ? 'selected="selected"' : '';
                                    echo '<option value="'.$row['ID'].'" '.$selectedEcho.'>'.$hesklang[$row['Key']].'</option>';
                                }
                                ?>
                            </select>
                        </div>
                    </div>
                    <div class="form-group">
                        <label for="autocloseTicketOption" class="col-sm-6 col-xs-12 control-label"><?php echo $hesklang['autoclose_ticket_status']; ?></label>
                        <div class="col-sm-6 col-xs-12">
                            <select name="autocloseTicketOption" class="form-control" id="autocloseTicketOption">
                                <?php
                                $statusesRS = hesk_dbQuery($closedStatusesSql);
                                while ($row = $statusesRS->fetch_assoc())
                                {
                                    $selectedEcho = ($row['IsAutocloseOption'] == 1) ? 'selected' : '';
                                    echo '<option value="'.$row['ID'].'" '.$selectedEcho.'>'.$hesklang[$row['Key']].'</option>';
                                }
                                ?>
                            </select>
                        </div>
                    </div>
                    <div class="col-sm-6 col-sm-offset-6">
                        <input type="hidden" name="action" value="save">
                        <input type="submit" class="btn btn-default" value="<?php echo $hesklang['save_changes']; ?>">
                    </div>
                </form>
            </div>
        </div>
    </div>
</div>

<?php
require_once(HESK_PATH . 'inc/footer.inc.php');
exit();

function save() {
    global $hesklang, $hesk_settings;

    hesk_dbConnect();
    $wasStatusDeleted = false;
    //-- Get all the status IDs
    $statusesSql = 'SELECT * FROM `'.$hesk_settings['db_pfix'].'statuses`';
    $results = hesk_dbQuery($statusesSql);
    while ($row = $results->fetch_assoc())
    {
        //-- If the status is marked for deletion, delete it and skip everything below.
        if (isset($_POST['s'.$row['ID'].'_delete']))
        {
            $delete = "DELETE FROM `".hesk_dbEscape($hesk_settings['db_pfix'])."statuses` WHERE `ID` = ?";
            $stmt = hesk_dbConnect()->prepare($delete);
            $stmt->bind_param('i', $row['ID']);
            $stmt->execute();
            $wasStatusDeleted = true;
        } else
        {
            //-- Update the information in the database with what is on the page
            $query = "UPDATE `".hesk_dbEscape($hesk_settings['db_pfix'])."statuses` SET `Key` = ?, `TextColor` = ?, `IsClosed` = ?, `Closable` = ? WHERE `ID` = ?";
            $stmt = hesk_dbConnect()->prepare($query);
            $isStatusClosed = (isset($_POST['s'.$row['ID'].'_isClosed']) ? 1 : 0);
            $stmt->bind_param('sssisi', $_POST['s'.$row['ID'].'_key'], $_POST['s'.$row['ID'].'_textColor'], $isStatusClosed, $_POST['s'.$row['ID'].'_closable'], $row['ID']);
            $stmt->execute();
        }
    }

    //-- If any statuses were deleted, re-index them before adding a new one
    if ($wasStatusDeleted) {
        //-- First drop and re-add the ID column
        hesk_dbQuery("ALTER TABLE `".hesk_dbEscape($hesk_settings['db_pfix'])."statuses` DROP COLUMN `ID`");
        hesk_dbQuery("ALTER TABLE `".hesk_dbEscape($hesk_settings['db_pfix'])."statuses` ADD `ID` INT NOT NULL AUTO_INCREMENT PRIMARY KEY FIRST");

        //-- Since statuses should be zero-based, but are now one-based, subtract one from each ID
        hesk_dbQuery("UPDATE `".hesk_dbEscape($hesk_settings['db_pfix'])."statuses` SET `ID` = `ID`-1");
    }

    //-- Insert the addition if there is anything to add
    if ($_POST['sN_key'] != null && $_POST['sN_textColor'] != null)
    {
        //-- The next ID is equal to the number of rows, since the IDs are zero-indexed.
        $nextValue = hesk_dbQuery('SELECT * FROM `'.hesk_dbEscape($hesk_settings['db_pfix']).'statuses`')->num_rows;
        $isClosed = isset($_POST['sN_isClosed']) ? 1 : 0;
        $insert = "INSERT INTO `".hesk_dbEscape($hesk_settings['db_pfix'])."statuses` (`ID`, `Key`, `TextColor`, `IsClosed`, `Closable`)
		VALUES (".$nextValue.", '".hesk_dbEscape($_POST['sN_key'])."', '".hesk_dbEscape($_POST['sN_textColor'])."', ".$isClosed.", '".hesk_dbEscape($_POST['sN_closable'])."')";
        hesk_dbQuery($insert);
    }

    //-- Update default status for actions
    $defaultQuery = "UPDATE `".hesk_dbEscape($hesk_settings['db_pfix'])."statuses` SET ";

    hesk_dbConnect()->query($defaultQuery . "`IsNewTicketStatus` = 0");
    $updateQuery = $defaultQuery . "`IsNewTicketStatus` = 1 WHERE `ID` = ?";
    $stmt = hesk_dbConnect()->prepare($updateQuery);
    $stmt->bind_param('i', $_POST['newTicket']);
    $stmt->execute();


    hesk_dbConnect()->query($defaultQuery . "`IsClosedByClient` = 0");
    $updateQuery = $defaultQuery . "`IsClosedByClient` = 1 WHERE `ID` = ?";
    $stmt = hesk_dbConnect()->prepare($updateQuery);
    $stmt->bind_param('i', $_POST['closedByClient']);
    $stmt->execute();

    hesk_dbConnect()->query($defaultQuery . "`IsCustomerReplyStatus` = 0");
    $updateQuery = $defaultQuery . "`IsCustomerReplyStatus` = 1 WHERE `ID` = ?";
    $stmt = hesk_dbConnect()->prepare($updateQuery);
    $stmt->bind_param('i', $_POST['replyFromClient']);
    $stmt->execute();

    hesk_dbConnect()->query($defaultQuery . "`IsStaffClosedOption` = 0");
    $updateQuery = $defaultQuery . "`IsStaffClosedOption` = 1 WHERE `ID` = ?";
    $stmt = hesk_dbConnect()->prepare($updateQuery);
    $stmt->bind_param('i', $_POST['staffClosedOption']);
    $stmt->execute();

    hesk_dbConnect()->query($defaultQuery . "`IsStaffReopenedStatus` = 0");
    $updateQuery = $defaultQuery . "`IsStaffReopenedStatus` = 1 WHERE `ID` = ?";
    $stmt = hesk_dbConnect()->prepare($updateQuery);
    $stmt->bind_param('i', $_POST['staffReopenedStatus']);
    $stmt->execute();

    hesk_dbConnect()->query($defaultQuery . "`IsDefaultStaffReplyStatus` = 0");
    $updateQuery = $defaultQuery . "`IsDefaultStaffReplyStatus` = 1 WHERE `ID` = ?";
    $stmt = hesk_dbConnect()->prepare($updateQuery);
    $stmt->bind_param('i', $_POST['defaultStaffReplyStatus']);
    $stmt->execute();

    hesk_dbConnect()->query($defaultQuery . "`LockedTicketStatus` = 0");
    $updateQuery = $defaultQuery . "`LockedTicketStatus` = 1 WHERE `ID` = ?";
    $stmt = hesk_dbConnect()->prepare($updateQuery);
    $stmt->bind_param('i', $_POST['lockedTicketStatus']);
    $stmt->execute();

    hesk_dbConnect()->query($defaultQuery . "`IsAutocloseOption` = 0");
    $updateQuery = $defaultQuery . "`IsAutocloseOption` = 1 WHERE `ID` = ?";
    $stmt = hesk_dbConnect()->prepare($updateQuery);
    $stmt->bind_param('i', $_POST['autocloseTicketOption']);
    $stmt->execute();

    hesk_process_messages($hesklang['statuses_saved'],'manage_statuses.php','SUCCESS');
}