ThaMunsta/itflow
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Updated all API functions to use the new logAction Function

Browse Source
This commit is contained in:
johnnyq
2024-11-14 18:27:31 -05:00
parent bfffec7363
commit e9f023f0c7
9 changed files with 28 additions and 31 deletions
Download Patch File Download Diff File Expand all files Collapse all files
api/v1/clients/create.php
+4 -3
View File
@@ -20,9 +20,10 @@ if (!empty($name) && $client_id == 0) {
// Check insert & get insert ID // Check insert & get insert ID
if ($insert_sql) { if ($insert_sql) {
$insert_id = mysqli_insert_id($mysqli); $insert_id = mysqli_insert_id($mysqli);
//Logging
mysqli_query($mysqli, "INSERT INTO logs SET log_type = 'Client', log_action = 'Created', log_description = '$name via API ($api_key_name)', log_ip = '$ip', log_user_agent = '$user_agent', log_client_id = $insert_id"); // Logging
mysqli_query($mysqli, "INSERT INTO logs SET log_type = 'API', log_action = 'Success', log_description = 'Created client $name via API ($api_key_name)', log_ip = '$ip', log_user_agent = '$user_agent', log_client_id = $insert_id"); logAction("Client", "Create", "$name via API ($api_key_name)", $insert_id);
logAction("API", "Success", "Created client $name via API ($api_key_name)", $insert_id);
} }
} }
api/v1/contacts/create.php
+4 -3
View File
@@ -25,9 +25,10 @@ if (!empty($name) && !empty($email) && !empty($client_id)) {
// Check insert & get insert ID // Check insert & get insert ID
if ($insert_sql) { if ($insert_sql) {
$insert_id = mysqli_insert_id($mysqli); $insert_id = mysqli_insert_id($mysqli);
//Logging
mysqli_query($mysqli, "INSERT INTO logs SET log_type = 'Contact', log_action = 'Created', log_description = '$name via API ($api_key_name)', log_ip = '$ip', log_user_agent = '$user_agent', log_client_id = $client_id"); // Logging
mysqli_query($mysqli, "INSERT INTO logs SET log_type = 'API', log_action = 'Success', log_description = 'Created contact $name via API ($api_key_name)', log_ip = '$ip', log_user_agent = '$user_agent', log_client_id = $client_id"); logAction("Contact", "Create", "$name via API ($api_key_name)", $client_id, $insert_id);
logAction("API", "Success", "Created contact $name via API ($api_key_name)", $client_id);
} }
} }
api/v1/contacts/delete.php
+2 -2
View File
@@ -21,8 +21,8 @@ if (!empty($contact_id)) {
if ($delete_sql && !empty($contact_name)) { if ($delete_sql && !empty($contact_name)) {
$delete_count = mysqli_affected_rows($mysqli); $delete_count = mysqli_affected_rows($mysqli);
//Logging // Logging
mysqli_query($mysqli, "INSERT INTO logs SET log_type = 'Contact', log_action = 'Deleted', log_description = '$contact_name via API ($api_key_name)', log_ip = '$ip', log_user_agent = '$user_agent', log_client_id = $client_id"); logAction("Contact", "Delete", "$contact_name via API ($api_key_name)", $client_id);
} }
} }
api/v1/contacts/update.php
+3 -4
View File
@@ -25,12 +25,11 @@ if (!empty($contact_id)) {
if ($update_sql) { if ($update_sql) {
$update_count = mysqli_affected_rows($mysqli); $update_count = mysqli_affected_rows($mysqli);
//Logging // Logging
mysqli_query($mysqli, "INSERT INTO logs SET log_type = 'Contact', log_action = 'Updated', log_description = '$name via API ($api_key_name)', log_ip = '$ip', log_user_agent = '$user_agent', log_client_id = $client_id"); logAction("Contact", "Edit", "$name via API ($api_key_name)", $client_id, $contact_id);
mysqli_query($mysqli, "INSERT INTO logs SET log_type = 'API', log_action = 'Success', log_description = 'Updated contact $name via API ($api_key_name)', log_ip = '$ip', log_user_agent = '$user_agent', log_client_id = $client_id"); logAction("API", "Success", "Edited contact $name via API ($api_key_name)", $client_id);
} }
} }
// Output // Output
require_once '../update_output.php'; require_once '../update_output.php';
api/v1/credentials/create.php
+3 -3
View File
@@ -19,9 +19,9 @@ if (!empty($api_key_decrypt_password) && !empty($name) && !(empty($password))) {
if ($insert_sql) { if ($insert_sql) {
$insert_id = mysqli_insert_id($mysqli); $insert_id = mysqli_insert_id($mysqli);
//Logging // Logging
mysqli_query($mysqli, "INSERT INTO logs SET log_type = 'Credential', log_action = 'Create', log_description = '$name via API ($api_key_name)', log_ip = '$ip', log_user_agent = '$user_agent', log_client_id = $client_id"); logAction("Credential", "Create", "$name via API ($api_key_name)", $client_id, $insert_id);
mysqli_query($mysqli, "INSERT INTO logs SET log_type = 'API', log_action = 'Success', log_description = 'Created credential $name via API ($api_key_name)', log_ip = '$ip', log_user_agent = '$user_agent', log_client_id = $client_id"); logAction("API", "Success", "Created credential $name via API ($api_key_name)", $client_id);
} }
} }
api/v1/credentials/update.php
+3 -3
View File
@@ -27,9 +27,9 @@ if (!empty($_POST['api_key_decrypt_password']) && !empty($login_id)) {
mysqli_query($mysqli, "UPDATE logins SET login_password_changed_at = NOW() WHERE login_id = $login_id LIMIT 1"); mysqli_query($mysqli, "UPDATE logins SET login_password_changed_at = NOW() WHERE login_id = $login_id LIMIT 1");
} }
//Logging // Logging
mysqli_query($mysqli, "INSERT INTO logs SET log_type = 'Credential', log_action = 'Update', log_description = '$name via API ($api_key_name)', log_ip = '$ip', log_user_agent = '$user_agent', log_client_id = $client_id"); logAction("Credential", "Edit", "$name via API ($api_key_name)", $client_id, $login_id);
mysqli_query($mysqli, "INSERT INTO logs SET log_type = 'API', log_action = 'Success', log_description = 'Updated credential $name via API ($api_key_name)', log_ip = '$ip', log_user_agent = '$user_agent', log_client_id = $client_id"); logAction("API", "Success", "Updated credential $name via API ($api_key_name)", $client_id);
} }
} }
api/v1/documents/create.php
+3 -4
View File
@@ -22,13 +22,12 @@ if (!empty($name) && !(empty($content))) {
// Update field document_parent to be the same id as document ID as this is the only version of the document. // Update field document_parent to be the same id as document ID as this is the only version of the document.
mysqli_query($mysqli,"UPDATE documents SET document_parent = $insert_id WHERE document_id = $insert_id"); mysqli_query($mysqli,"UPDATE documents SET document_parent = $insert_id WHERE document_id = $insert_id");
//Logging // Logging
mysqli_query($mysqli, "INSERT INTO logs SET log_type = 'Document', log_action = 'Create', log_description = '$name via API ($api_key_name)', log_ip = '$ip', log_user_agent = '$user_agent', log_client_id = $client_id"); logAction("Document", "Create", "$name via API ($api_key_name)", $client_id, $insert_id);
mysqli_query($mysqli, "INSERT INTO logs SET log_type = 'API', log_action = 'Success', log_description = 'Created document $name via API ($api_key_name)', log_ip = '$ip', log_user_agent = '$user_agent', log_client_id = $client_id"); logAction("API", "Success", "Created document $name via API ($api_key_name)", $client_id);
} }
} }
// Output // Output
require_once '../create_output.php'; require_once '../create_output.php';
api/v1/documents/update.php
+3 -4
View File
@@ -46,9 +46,9 @@ if (!empty($document_id)) {
// Vendor documents // Vendor documents
mysqli_query($mysqli,"UPDATE vendor_documents SET document_id = $new_document_id WHERE document_id = $document_id"); mysqli_query($mysqli,"UPDATE vendor_documents SET document_id = $new_document_id WHERE document_id = $document_id");
//Logging // Logging
mysqli_query($mysqli, "INSERT INTO logs SET log_type = 'Document', log_action = 'Modify', log_description = '$name via API ($api_key_name) previous version was kept', log_ip = '$ip', log_user_agent = '$user_agent', log_client_id = $client_id"); logAction("Document", "Edit", "$name via API ($api_key_name) previous version kept", $client_id, $insert_id);
mysqli_query($mysqli, "INSERT INTO logs SET log_type = 'API', log_action = 'Success', log_description = 'Edited document $name via API ($api_key_name)', log_ip = '$ip', log_user_agent = '$user_agent', log_client_id = $client_id"); logAction("API", "Success", "Edited document $name via API ($api_key_name)", $client_id);
// Override update count to 1 for API to report a success (as we inserted a document, not "updated" an existing row) // Override update count to 1 for API to report a success (as we inserted a document, not "updated" an existing row)
$update_count = 1; $update_count = 1;
@@ -56,6 +56,5 @@ if (!empty($document_id)) {
} }
// Output // Output
require_once '../update_output.php'; require_once '../update_output.php';
api/v1/tickets/create.php
+3 -5
View File
@@ -4,7 +4,6 @@ require_once '../validate_api_key.php';
require_once '../require_post_method.php'; require_once '../require_post_method.php';
// Ticket-related settings // Ticket-related settings
require_once "../../../get_settings.php"; require_once "../../../get_settings.php";
@@ -17,7 +16,6 @@ $company_phone = formatPhoneNumber($row['company_phone']);
$ticket_row = false; // Creation, not an update $ticket_row = false; // Creation, not an update
require_once 'ticket_model.php'; require_once 'ticket_model.php';
// Default // Default
$insert_id = false; $insert_id = false;
@@ -41,13 +39,13 @@ if (!empty($subject) && !empty($client_id)) {
// Check insert & get insert ID // Check insert & get insert ID
if ($insert_sql) { if ($insert_sql) {
$insert_id = mysqli_insert_id($mysqli); $insert_id = mysqli_insert_id($mysqli);
// Logging // Logging
mysqli_query($mysqli, "INSERT INTO logs SET log_type = 'Ticket', log_action = 'Create', log_description = 'Created ticket $config_ticket_prefix$ticket_number $subject via API ($api_key_name)', log_ip = '$ip', log_user_agent = '$user_agent', log_client_id = $client_id"); logAction("Ticket", "Create", "Created ticket $config_ticket_prefix$ticket_number $subject via API ($api_key_name)", $client_id, $insert_id);
mysqli_query($mysqli, "INSERT INTO logs SET log_type = 'API', log_action = 'Success', log_description = 'Created ticket $config_ticket_prefix$ticket_number via API ($api_key_name)', log_ip = '$ip', log_user_agent = '$user_agent', log_client_id = $client_id"); logAction("API", "Success", "Created ticket $config_ticket_prefix$ticket_number $subject via API ($api_key_name)", $client_id);
} }
} }
// Output // Output
require_once '../create_output.php'; require_once '../create_output.php';