141 lines
5.3 KiB
PHP
141 lines
5.3 KiB
PHP
<?php
|
|
/*********************************************************************
|
|
ajax.tickets.php
|
|
|
|
AJAX interface for tickets
|
|
|
|
Peter Rotich <peter@osticket.com>
|
|
Copyright (c) 2006-2010 osTicket
|
|
http://www.osticket.com
|
|
|
|
Released under the GNU General Public License WITHOUT ANY WARRANTY.
|
|
See LICENSE.TXT for details.
|
|
|
|
vim: expandtab sw=4 ts=4 sts=4:
|
|
$Id: $
|
|
**********************************************************************/
|
|
|
|
if(!defined('OSTAJAXINC') || !defined('INCLUDE_DIR')) die('403');
|
|
|
|
include_once(INCLUDE_DIR.'class.ticket.php');
|
|
|
|
class TicketsAjaxAPI{
|
|
|
|
function searchbyemail($params) {
|
|
|
|
$input = db_input(strtolower($params['input']),false);
|
|
$len = strlen($input);
|
|
$limit = isset($params['limit']) ? (int) $params['limit']:25;
|
|
$items=array();
|
|
$sql='SELECT DISTINCT email,name FROM '.TICKET_TABLE.' WHERE email LIKE \''.$input.'%\' ORDER BY created LIMIT '.$limit;
|
|
$resp=db_query($sql);
|
|
if($resp && db_num_rows($resp)){
|
|
while(list($email,$name)=db_fetch_row($resp)) {
|
|
$name=(strpos($name,'@')===false)?$name:'';
|
|
$items[] ='{"id": "'.$email.'", "value": "'.$email.'", "info": "'.$name.'"}';
|
|
}
|
|
}
|
|
$result= '{"results": ['.implode(", ", $items).']}';
|
|
return $result;
|
|
}
|
|
|
|
function search($params) {
|
|
|
|
$input = db_input(strtolower($params['input']),false);
|
|
$len = strlen($input);
|
|
$limit = isset($params['limit']) ? (int) $params['limit']:25;
|
|
$items=array();
|
|
$ticketid=false;
|
|
if(is_numeric($input)) {
|
|
$WHERE=' WHERE ticketID LIKE \''.$input.'%\'';
|
|
$ticketid=true;
|
|
}else{
|
|
$WHERE=' WHERE email LIKE \''.$input.'%\'';
|
|
}
|
|
$sql='SELECT DISTINCT ticketID,email FROM '.TICKET_TABLE.' '.$WHERE.' ORDER BY created LIMIT '.$limit;
|
|
$resp=db_query($sql);
|
|
if($resp && db_num_rows($resp)){
|
|
while(list($id,$email)=db_fetch_row($resp)) {
|
|
$info=($ticketid)?$email:$id;
|
|
$id=($ticketid)?$id:$email;
|
|
$items[] ='{"id": "'.$id.'", "value": "'.$id.'", "info": "'.$info.'"}';
|
|
}
|
|
}
|
|
$result= '{"results": ['.implode(", ", $items).']}';
|
|
return $result;
|
|
}
|
|
|
|
function acquireLock($params) {
|
|
global $cfg,$thisuser;
|
|
|
|
if(!$params['tid'] or !is_numeric($params['tid']))
|
|
return 0;
|
|
|
|
$ticket = new Ticket($params['tid']);
|
|
|
|
if(!$ticket || (!$thisuser->canAccessDept($ticket->getDeptId()) && ($ticket->isAssigned() && $thisuser->getId()!=$ticket->getStaffId())))
|
|
return '{"id":0, "retry":false}';
|
|
|
|
//is the ticket already locked?
|
|
if($ticket->isLocked() && ($lock=$ticket->getLock()) && !$lock->isExpired()) {
|
|
/*Note: Ticket->acquireLock does the same logic...but we need it here since we need to know who owns the lock up front*/
|
|
|
|
//Ticket is locked by someone else.??
|
|
if($lock->getStaffId()!=$thisuser->getId())
|
|
return '{"id":0, "retry":false}';
|
|
|
|
//Ticket already locked by staff...try renewing it.
|
|
$lock->renew(); //New clock baby!
|
|
|
|
return '{"id":'.$lock->getId().', "time":'.$lock->getTime().'}';
|
|
}
|
|
|
|
//Ticket is not locked or the lock is expired...try locking it...
|
|
if(($lock=$ticket->acquireLock())) //Set the lock.
|
|
return '{"id":'.$lock->getId().', "time":'.$lock->getTime().'}';
|
|
|
|
//unable to obtain the lock..for some really weired reason!
|
|
return '{"id":0, "retry":true}'; //Client should watch for possible loop on retries. Max attempts?
|
|
}
|
|
|
|
function renewLock($params) {
|
|
global $thisuser;
|
|
|
|
if(!$params['id'] or !is_numeric($params['id']))
|
|
return '{"id":0, "retry":true}';
|
|
|
|
$lock= new TicketLock($params['id']);
|
|
|
|
if(!$lock->load() || !$lock->getStaffId() || $lock->isExpired()) //Said lock doesn't exist or is is expired
|
|
return TicketsAjaxAPI::acquireLock($params); //acquire the lock
|
|
|
|
if($lock->getStaffId()!=$thisuser->getId()) //user doesn't own the lock anymore??? sorry...try to next time.
|
|
return '{"id":0, "retry":false}'; //Give up...
|
|
|
|
//Renew the lock.
|
|
$lock->renew(); //Failure here is not an issue since the lock is not expired yet..
|
|
|
|
return '{"id":'.$lock->getId().', "time":'.$lock->getTime().'}';
|
|
}
|
|
|
|
function releaseLock($params) {
|
|
global $thisuser;
|
|
|
|
if($params['id'] && is_numeric($params['id'])){ //Lock Id provided!
|
|
|
|
$lock= new TicketLock($params['id']);
|
|
//Already gone?
|
|
if(!$lock->load() || !$lock->getStaffId() || $lock->isExpired()) //Said lock doesn't exist or is is expired
|
|
return 1;
|
|
|
|
//make sure the user actually owns the lock before releasing it.
|
|
return ($lock->getStaffId()==$thisuser->getId() && $lock->release())?1:0;
|
|
|
|
}elseif($params['tid']){ //release all the locks the user owns on the ticket.
|
|
return TicketLock::removeStaffLocks($thisuser->getId(),$params['tid'])?1:0;
|
|
}
|
|
|
|
return 0;
|
|
}
|
|
}
|
|
?>
|