Merge branch 'master' of github.com:johnnyq/itflow

admin_side_nav.php

@@ -112,6 +112,14 @@
           </a> 
         </li>
 
+        <li class="nav-item">
+          <a class="nav-link <?php if(basename($_SERVER["PHP_SELF"]) == "settings-api.php") { echo "active"; } ?>"
+             href="settings-api.php">
+              <i class="nav-icon fas fa-key"></i>
+              <p>API</p>
+          </a>
+        </li>
+
         <li class="nav-header mt-3">MORE SETTINGS</li>
 
         <li class="nav-item">

ajax.php

@@ -0,0 +1,122 @@
+<?php
+
+/*
+ * ajax.php
+ * Similar to post.php, but for requests using Asynchronous JavaScript
+ * Always returns data in JSON format, unless otherwise specified
+ */
+
+include("config.php");
+include("functions.php");
+include("check_login.php");
+
+/*
+ * Fetches SSL certificates from remote hosts & returns the relevant info (issuer, expiry, public key)
+ */
+if(isset($_GET['certificate_fetch_parse_json_details'])){
+  // PHP doesn't appreciate attempting SSL sockets to non-existent domains
+  if(empty($_GET['domain'])){
+    exit();
+  }
+  $domain = $_GET['domain'];
+
+  // FQDNs in database shouldn't have a URL scheme, adding one
+  $domain = "https://".$domain;
+
+  // Parse host and port
+  $url = parse_url($domain, PHP_URL_HOST);
+  $port = parse_url($domain, PHP_URL_PORT);
+  // Default port
+  if(!$port){
+    $port = "443";
+  }
+
+  // Get certificate (using verify peer false to allow for self-signed certs)
+  $socket = "ssl://$url:$port";
+  $get = stream_context_create(array("ssl" => array("capture_peer_cert" => TRUE, "verify_peer" => FALSE,)));
+  $read = stream_socket_client($socket, $errno, $errstr, 30, STREAM_CLIENT_CONNECT, $get);
+  $cert = stream_context_get_params($read);
+  $cert_public_key_obj = openssl_x509_parse($cert['options']['ssl']['peer_certificate']);
+  openssl_x509_export($cert['options']['ssl']['peer_certificate'], $export);
+
+  // Process data
+  if($cert_public_key_obj){
+    $response['success'] = "TRUE";
+    $response['expire'] = date('Y-m-d', $cert_public_key_obj['validTo_time_t']);
+    $response['issued_by'] = strip_tags($cert_public_key_obj['issuer']['O']);
+    $response['public_key'] = $export; //nl2br
+  }
+  else{
+    $response['success'] = "FALSE";
+  }
+
+  echo json_encode($response);
+
+}
+
+/*
+ * Looks up info for a given certificate ID from the database, used to dynamically populate modal fields
+ */
+if(isset($_GET['certificate_get_json_details'])){
+  $certificate_id = intval($_GET['certificate_id']);
+  $client_id = intval($_GET['client_id']);
+
+  // Individual certificate lookup
+  $cert_sql = mysqli_query($mysqli,"SELECT * FROM certificates WHERE certificate_id = $certificate_id AND certificate_client_id = $client_id");
+  while($row = mysqli_fetch_array($cert_sql)){
+    $response['certificate'][] = $row;
+  }
+
+  // Get all domains for this client that could be linked to this certificate
+  $domains_sql = mysqli_query($mysqli, "SELECT domain_id, domain_name FROM domains WHERE domain_client_id = '$client_id' AND company_id = '$session_company_id'");
+  while($row = mysqli_fetch_array($domains_sql)){
+    $response['domains'][] = $row;
+  }
+
+  echo json_encode($response);
+}
+
+/*
+ * Looks up info on the ticket number provided, used to populate the ticket merge modal
+ */
+if(isset($_GET['merge_ticket_get_json_details'])){
+  $merge_into_ticket_number = intval($_GET['merge_into_ticket_number']);
+
+  $sql = mysqli_query($mysqli,"SELECT * FROM tickets
+      LEFT JOIN clients ON ticket_client_id = client_id 
+      LEFT JOIN contacts ON ticket_contact_id = contact_id
+      WHERE ticket_number = '$merge_into_ticket_number' AND tickets.company_id = '$session_company_id'");
+
+  if(mysqli_num_rows($sql) == 0){
+    //Do nothing.
+  }
+  else {
+    //Return ticket, client and contact details for the given ticket number
+    $response = mysqli_fetch_array($sql);
+    echo json_encode($response);
+  }
+}
+
+/*
+ * Looks up info for a given network ID from the database, used to dynamically populate modal fields
+ */
+if(isset($_GET['network_get_json_details'])){
+  $network_id = intval($_GET['network_id']);
+  $client_id = intval($_GET['client_id']);
+
+  // Individual network lookup
+  $network_sql = mysqli_query($mysqli,"SELECT * FROM networks WHERE network_id = $network_id AND network_client_id = $client_id");
+  while($row = mysqli_fetch_array($network_sql)){
+    $response['network'][] = $row;
+  }
+
+  // Lookup all client locations, as networks can be associated with any client location
+  $locations_sql = mysqli_query($mysqli, "SELECT location_id, location_name FROM locations 
+        WHERE location_client_id = '$client_id' AND company_id = '$session_company_id'"
+  );
+  while($row = mysqli_fetch_array($locations_sql)){
+    $response['locations'][] = $row;
+  }
+
+  echo json_encode($response);
+}

client_certificates.php

@@ -140,7 +140,7 @@ include("client_certificate_add_modal.php");
 
         // Send a GET request to post.php as post.php?certificate_get_json_details=true&client_id=NUM&certificate_id=NUM
         jQuery.get(
-            "post.php",
+            "ajax.php",
             {certificate_get_json_details: 'true', client_id: client_id, certificate_id: certificate_id},
             function(data){
 
@@ -203,10 +203,10 @@ include("client_certificate_add_modal.php");
             var publicKey = document.getElementById("editPublicKey");
         }
 
-        //Send a GET request to post.php as post.php?fetch_certificate=TRUE&domain=DOMAIN
+        //Send a GET request to post.php as post.php?certificate_fetch_parse_json_details=TRUE&domain=DOMAIN
         jQuery.get(
-            "post.php",
+            "ajax.php",
-            {fetch_certificate: 'TRUE', domain: domain},
+            {certificate_fetch_parse_json_details: 'TRUE', domain: domain},
             function(data){
                 //If we get a response from post.php, parse it as JSON
                 const ssl_data = JSON.parse(data);

client_contacts.php

@@ -139,7 +139,7 @@ $num_rows = mysqli_fetch_row(mysqli_query($mysqli,"SELECT FOUND_ROWS()"));
             if($contact_id == $primary_contact){
                 $primary_contact_display = "<small class='text-success'>Primary Contact</small>";
             }else{
-              $primary_contact_display = "<small class='text-danger'>Needs approval</small>";
+              $primary_contact_display = FALSE;
             }
             $contact_location_id = $row['contact_location_id'];
             $location_name = $row['location_name'];

client_networks.php

@@ -170,7 +170,7 @@ function populateNetworkEditModal(client_id, network_id) {
   
   // Send a GET request to post.php as post.php?network_get_json_details=true&client_id=NUM&network_id=NUM
   jQuery.get(
-    "post.php",
+    "ajax.php",
     {network_get_json_details: 'true', client_id: client_id, network_id: network_id},
     function(data){
 

invoice.php

@@ -299,7 +299,7 @@ if(isset($_GET['invoice_id'])){
                     <td><input type="text" class="form-control" id="name" name="name" placeholder="Item" required></td>
                     <td><textarea class="form-control" rows="2" id="desc" name="description" placeholder="Description"></textarea></td>
                     <td><input type="number" step="0.01" min="0" class="form-control" style="text-align: center;" id="qty" name="qty" placeholder="QTY"></td>
-                    <td><input type="number" step="0.01" class="form-control" style="text-align: right;" id="price" name="price" placeholder="Price (<?php echo $client_currency_symbol; ?>)"></td>
+                    <td><input type="number" step="0.01" class="form-control" style="text-align: right;" id="price" name="price" placeholder="Price (<?php echo $invoice_currency_code; ?>)"></td>
                     <td>             
                       <select class="form-control select2" name="tax_id" required>
                         <option value="0">None</option>

post.php

@@ -5075,25 +5075,6 @@ if(isset($_POST['edit_network'])){
 
 }
 
-if(isset($_GET['network_get_json_details'])){
-    $network_id = intval($_GET['network_id']);
-    $client_id = intval($_GET['client_id']);
-
-    $network_sql = mysqli_query($mysqli,"SELECT * FROM networks WHERE network_id = $network_id AND network_client_id = $client_id");
-    while($row = mysqli_fetch_array($network_sql)){
-        $response['network'][] = $row;
-    }
-
-    $locations_sql = mysqli_query($mysqli, "SELECT location_id, location_name FROM locations 
-        WHERE location_client_id = '$client_id' AND company_id = '$session_company_id'"
-    );
-    while($row = mysqli_fetch_array($locations_sql)){
-        $response['locations'][] = $row;
-    }
-
-    echo json_encode($response);
-}
-
 if(isset($_GET['delete_network'])){
     $network_id = intval($_GET['delete_network']);
 
@@ -5221,68 +5202,6 @@ if(isset($_POST['edit_certificate'])){
 
 }
 
-if(isset($_GET['certificate_get_json_details'])){
-    $certificate_id = intval($_GET['certificate_id']);
-    $client_id = intval($_GET['client_id']);
-
-    $cert_sql = mysqli_query($mysqli,"SELECT * FROM certificates WHERE certificate_id = $certificate_id AND certificate_client_id = $client_id");
-    while($row = mysqli_fetch_array($cert_sql)){
-        $response['certificate'][] = $row;
-    }
-
-    $domains_sql = mysqli_query($mysqli, "SELECT domain_id, domain_name FROM domains 
-        WHERE domain_client_id = '$client_id' AND company_id = '$session_company_id'"
-    );
-    while($row = mysqli_fetch_array($domains_sql)){
-        $response['domains'][] = $row;
-    }
-
-    echo json_encode($response);
-}
-
-if(isset($_GET['fetch_certificate'])){
-    // PHP doesn't appreciate attempting SSL sockets to non-existent domains
-    if(empty($_GET['domain'])){
-        exit();
-    }
-    $domain = $_GET['domain'];
-
-    // FQDNs in database shouldn't have a URL scheme, adding one
-    $domain = "https://".$domain;
-
-    // Parse host and port
-    $url = parse_url($domain, PHP_URL_HOST);
-    $port = parse_url($domain, PHP_URL_PORT);
-    // Default port
-    if(!$port){
-        $port = "443";
-    }
-
-    // Get certificate
-    // Using verify peer false to allow for self-signed / internal CA certs
-    $socket = "ssl://$url:$port";
-    $get = stream_context_create(array("ssl" => array("capture_peer_cert" => TRUE, "verify_peer" => FALSE,)));
-    $read = stream_socket_client($socket, $errno, $errstr, 30, STREAM_CLIENT_CONNECT, $get);
-    $cert = stream_context_get_params($read);
-    $cert_public_key_obj = openssl_x509_parse($cert['options']['ssl']['peer_certificate']);
-    openssl_x509_export($cert['options']['ssl']['peer_certificate'], $export);
-
-    // Process data
-    if($cert_public_key_obj){
-        $cert_data['success'] = "TRUE";
-        $cert_data['expire'] = date('Y-m-d', $cert_public_key_obj['validTo_time_t']);
-        $cert_data['issued_by'] = strip_tags($cert_public_key_obj['issuer']['O']);
-        $cert_data['public_key'] = $export; //nl2br
-    }
-    else{
-        $cert_data['success'] = "FALSE";
-    }
-
-    // Return as JSON
-    echo json_encode($cert_data);
-
-}
-
 if(isset($_GET['delete_certificate'])){
     $certificate_id = intval($_GET['delete_certificate']);
 
@@ -5730,24 +5649,6 @@ if(isset($_GET['archive_ticket_reply'])){
   
 }
 
-if(isset($_GET['merge_ticket_get_json_details'])){
-    $merge_into_ticket_number = intval($_GET['merge_into_ticket_number']);
-
-    $sql = mysqli_query($mysqli,"SELECT * FROM tickets
-      LEFT JOIN clients ON ticket_client_id = client_id 
-      LEFT JOIN contacts ON ticket_contact_id = contact_id
-      WHERE ticket_number = '$merge_into_ticket_number' AND tickets.company_id = '$session_company_id'");
-
-    if(mysqli_num_rows($sql) == 0){
-        //Do nothing.
-    }
-    else {
-        //Return ticket, client and contact details for the given ticket number
-        $row = mysqli_fetch_array($sql);
-        echo json_encode($row);
-    }
-}
-
 if(isset($_POST['merge_ticket'])){
     $ticket_id = intval($_POST['ticket_id']);
     $merge_into_ticket_number = intval($_POST['merge_into_ticket_number']);

quote.php

@@ -263,7 +263,7 @@ if(isset($_GET['quote_id'])){
                     <td><input type="text" class="form-control" name="name" id="name" placeholder="Item" required></td>
                     <td><textarea class="form-control" rows="2" name="description" id="desc" placeholder="Description"></textarea></td>
                     <td><input type="number" step="0.01" min="0" class="form-control" id="qty" style="text-align: center;" name="qty" placeholder="QTY"></td>
-                    <td><input type="number" step="0.01" min="0" class="form-control" id="price" style="text-align: right;" name="price" placeholder="Price (<?php echo $client_currency_symbol; ?>)"></td>
+                    <td><input type="number" step="0.01" min="0" class="form-control" id="price" style="text-align: right;" name="price" placeholder="Price (<?php echo $quote_currency_code; ?>)"></td>
                     <td>
                       <select class="form-control select2" id="tax" name="tax_id" required>
                         <option value="0">None</option>

setup.php

@@ -1086,7 +1086,7 @@ if(isset($_POST['add_telemetry'])){
 
 <body class="hold-transition sidebar-mini">
 
-  <div class="wrapper text-sm">
+<div class="wrapper text-sm">
 
     <!-- Navbar -->
     <nav class="main-header navbar navbar-expand navbar-primary navbar-dark">
@@ -1283,7 +1283,7 @@ if(isset($_POST['add_telemetry'])){
                                       <div class="input-group-prepend">
                                           <span class="input-group-text"><i class="fa fa-fw fa-lock"></i></span>
                                       </div>
-                    <input type="password" class="form-control" data-toggle="password" name="password" placeholder="Enter a Password" autocomplete="new-password" required>
+                                      <input type="password" class="form-control" data-toggle="password" name="password" placeholder="Enter a Password" autocomplete="new-password" required minlength="8">
                                       <div class="input-group-append">
                                           <span class="input-group-text"><i class="fa fa-fw fa-eye"></i></span>
                                       </div>
@@ -1471,18 +1471,27 @@ if(isset($_POST['add_telemetry'])){
                                   <label class="form-check-label ml-2">Share <small class="text-secondary"> (Including City, State/Province, Country, Currency and your comments)</small></label>
                               </div>
 
-                <hr>
+                              <br>
 
                               <div class="form-group">
                                   <label>Comments</label>
-                  <textarea class="form-control" rows="4" name="comments" placeholder="Any Comments"></textarea>
+                                  <textarea class="form-control" rows="4" name="comments" placeholder="Any Comments?"></textarea>
                               </div>
 
                               <hr>
 
+                              <p>Post installation, a few additional steps are required:</p>
+                              <ul>
+                                  <li>Backup your <a href="https://itflow.org/docs.php?doc=logins" target="_blank">master encryption key</a></li>
+                                  <li><a href="https://itflow.org/docs.php?doc=alerts" target="_blank">Configure cron</a> for alerts</li>
+                              </ul>
+
+                              <hr>
+
                               <button type="submit" name="add_telemetry" class="btn btn-primary">Finish and Sign in <i class="fa fa-fw fa-check-circle"></i></button>
 
                           </form>
+
                       </div>
                   </div>
 
@@ -1493,34 +1502,21 @@ if(isset($_POST['add_telemetry'])){
                           <h3 class="card-title"><i class="fa fa-fw fa-cube"></i> Welcome to ITFlow Setup</h3>
                       </div>
                       <div class="card-body">
-              <p>A database must be created before proceeding, then click on the Setup button to to get started, </p>
+                          <p><b>Thank you for choosing to try ITFlow!</b> Feel free to reach out on the <a href="https://forum.itflow.org/" target="_blank">forums</a> if you have any questions.</p>
+                          <p>A database must be created before proceeding - click on the button below to get started! </p>
                           <hr>
-              <p>Post installation, <a href="https://itflow.org/docs.php?doc_id=3">additional steps</a> are required for tasks such as sending out recurring invoices, late payment reminders, scheduled tickets, alerts, etc.</p>
+                          <p class="text-muted">This program is <b>free software</b>: you can redistribute it and/or modify it under the terms of the <a href="https://www.gnu.org/licenses/gpl-3.0.en.html" target="_blank">GNU General Public License</a>. It is distributed in the hope that it will be useful, but <b>WITHOUT ANY WARRANTY</b>.</p>
-                <ul>
-                    <li>Navigate to the settings/alerts page, enable cron and the alerts you want</li>
-                    <li>Add cron.php to your crontab and set it to run once everyday at 11:00PM</li>
-                </ul>
-              <hr>
-              <p>An API is present to allow integration with other third pary apps. An API Key will be auto generated and can be changed in settings after setup. The API will give you the following capabilities:</p>
-              <ul class="mb-4">
-                <li>Address book XML for VOIP Phones</li>
-                <li>Caller ID Lookup</li>
-                <li>Get List of Emails in CSV to export to a mailing list</li>
-                <li>Acquire balance can be useful for customer's to get their balance by phone</li>
-                <li>Add new assets</li>
-              </ul>
-              <hr>
-                <p class="text-muted">This program is free software: you can redistribute it and/or modify it under the terms of the <a href="https://www.gnu.org/licenses/gpl-3.0.en.html">GNU General Public License</a>. It is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY.</p>
                         <?php
                         // Check that there is access to write config.php
                         if(!file_put_contents("config.php", "Test")){
-                    echo "<div class='alert alert-danger'>Warning: config.php is not writable. Ensure the webserver user has write access.</div>";
+                          echo "<div class='alert alert-danger'>Warning: config.php is not writable. Ensure the webserver process has write access. Check the <a href='https://itflow.org/docs.php?doc=installation'>docs</a> for info.</div>";
                         }else{
                           // Else, able to write. Tidy up
                           unlink("config.php");
                         }
                         ?>
-              <center><a href="?database" class="btn btn-primary">Setup <i class="fa fa-fw fa-arrow-alt-circle-right"></i></a></center>
+                          <hr>
+                          <center><a href="?database" class="btn btn-primary">Begin Setup <i class="fa fa-fw fa-arrow-alt-circle-right"></i></a></center>
                       </div>
                   </div>
 
@@ -1531,23 +1527,23 @@ if(isset($_POST['add_telemetry'])){
         <!-- /.content -->
     </div>
     <!-- /.content-wrapper -->
-  </div>
+</div>
-  <!-- ./wrapper -->
+<!-- ./wrapper -->
 
-  <!-- REQUIRED SCRIPTS -->
+<!-- REQUIRED SCRIPTS -->
 
-  <!-- jQuery -->
+<!-- jQuery -->
-  <script src="plugins/jquery/jquery.min.js"></script>
+<script src="plugins/jquery/jquery.min.js"></script>
-  <!-- Bootstrap 4 -->
+<!-- Bootstrap 4 -->
-  <script src="plugins/bootstrap/js/bootstrap.bundle.min.js"></script>
+<script src="plugins/bootstrap/js/bootstrap.bundle.min.js"></script>
-  <!-- Custom js-->
+<!-- Custom js-->
-  <script src='plugins/select2/js/select2.min.js'></script>
+<script src='plugins/select2/js/select2.min.js'></script>
-  <script src="plugins/Show-Hide-Passwords-Bootstrap-4/bootstrap-show-password.min.js"></script>
+<script src="plugins/Show-Hide-Passwords-Bootstrap-4/bootstrap-show-password.min.js"></script>
-  <!-- AdminLTE App -->
+<!-- AdminLTE App -->
-  <script src="dist/js/adminlte.min.js"></script>
+<script src="dist/js/adminlte.min.js"></script>
 
-  <!-- Custom js-->
+<!-- Custom js-->
-  <script src="js/app.js"></script>
+<script src="js/app.js"></script>
 
 </body>
 

ticket.php

@@ -70,12 +70,14 @@ if(isset($_GET['ticket_id'])){
   $contact_mobile = formatPhoneNumber($row['contact_mobile']);
 
   $asset_id = $row['asset_id'];
+  $asset_ip = htmlentities($row['asset_ip']);
   $asset_name = htmlentities($row['asset_name']);
   $asset_type = htmlentities($row['asset_type']);
   $asset_make = htmlentities($row['asset_make']);
   $asset_model = htmlentities($row['asset_model']);
   $asset_serial = htmlentities($row['asset_serial']);
   $asset_os = htmlentities($row['asset_os']);
+  $asset_warranty_expire = $row['asset_warranty_expire'];
 
   $location_name = $row['location_name'];
   $location_address = $row['location_address'];
@@ -146,6 +148,18 @@ if(isset($_GET['ticket_id'])){
   }
   $client_tags_display = implode(' ', $client_tag_name_display_array);
   
+  // Get the asset warranty expiry 
+ $date = date('Y-m-d H:i:s');
+ $dt_value = $asset_warranty_expire; //sample date
+ $warranty_check = date('m/d/Y',strtotime('-8 hours'));
+
+ if($dt_value <= $date){
+    $dt_value = "Expired on $asset_warranty_expire"; $color ='red';
+ }else{
+   $color = 'green';
+ } 
+
+
 ?>
 
 <!-- Breadcrumbs-->
@@ -392,20 +406,7 @@ if(isset($_GET['ticket_id'])){
     <div class="card card-body card-outline card-dark mb-3">
       <div>
         <h4 class="text-secondary">Asset</h4>
-        <i class="fa fa-fw fa-desktop text-secondary ml-1 mr-2 mb-2"></i><strong><?php echo $asset_name; ?></strong>
+        <i class="fa fa-fw fa-desktop text-secondary ml-1 mr-2 mb-2"></i> Asset name: <strong><?php echo $asset_name; ?></strong> 
-        <br>
-        <?php
-        if(!empty($asset_make)){
-        ?>
-        <i class="fa fa-fw fa-tag text-secondary ml-1 mr-2 mb-2"></i><?php echo "$asset_make $asset_model"; ?>
-        <br>
-        <?php
-        }
-        ?>
-        <?php
-        if(!empty($asset_serial)){
-        ?>
-        <i class="fa fa-fw fa-barcode text-secondary ml-1 mr-2 mb-2"></i><?php echo $asset_serial; ?>
         <br>
         <?php
         }
@@ -413,7 +414,38 @@ if(isset($_GET['ticket_id'])){
         <?php
         if(!empty($asset_os)){
         ?>
-        <i class="fa fa-fw fa-tag text-secondary ml-1 mr-2 mb-2"></i><?php echo $asset_os; ?>
+        <i class="fa fa-fw fa-tag text-secondary ml-1 mr-2 mb-2"></i> OS: <?php echo $asset_os; ?>
+        <br>
+        <?php
+        if(!empty($asset_ip)){
+        ?>
+        <i class="fa fa-fw fa-network-wired text-secondary ml-1 mr-2 mb-2"></i> IP: <?php echo "$asset_ip"; ?>
+        <br>
+        <?php
+        }
+        ?>
+        <?php
+        if(!empty($asset_make)){
+        ?>
+        <i class="fa fa-fw fa-tag text-secondary ml-1 mr-2 mb-2"></i> Model: <?php echo "$asset_make $asset_model"; ?>
+        <br>
+        <?php
+        }
+        ?>
+
+        <?php
+        if(!empty($asset_serial)){
+        ?>
+        <i class="fa fa-fw fa-barcode text-secondary ml-1 mr-2 mb-2"></i> Service Tag: <?php echo $asset_serial; ?>
+        <br>
+
+        <?php
+        }
+        ?>
+        <?php
+        if(!empty($asset_warranty_expire)){
+        ?>
+        <i class="fa fa-fw fa-tag text-secondary ml-1 mr-2 mb-2"></i> Warranty expire: <strong><font color="<?php echo $color?>" > <?php echo $dt_value?></font></strong>
         <br>
         <?php
         }

ticket_merge_modal.php

@@ -74,7 +74,7 @@
 
         //Send a GET request to post.php as post.php?merge_ticket_get_json_details=true&merge_into_ticket_number=NUMBER
         jQuery.get(
-            "post.php",
+            "ajax.php",
             {merge_ticket_get_json_details: 'true', merge_into_ticket_number: merge_into_ticket_number},
             function(data){
                 //If we get a response from post.php, parse it as JSON