dbxe/fusionpbx
2
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Update autocomplete.php

Browse Source
This commit is contained in:
FusionPBX
2019-05-25 22:32:39 -06:00
committed by GitHub
parent 2cdac7f069
commit 51b079df00
1 changed files with 74 additions and 68 deletions
Download Patch File Download Diff File Expand all files Collapse all files
app/operator_panel/autocomplete.php
+74 -68
View File
@@ -17,21 +17,25 @@
The Initial Developer of the Original Code is The Initial Developer of the Original Code is
Mark J Crane <markjcrane@fusionpbx.com> Mark J Crane <markjcrane@fusionpbx.com>
Portions created by the Initial Developer are Copyright (C) 2008-2015 Portions created by the Initial Developer are Copyright (C) 2008-2019
the Initial Developer. All Rights Reserved. the Initial Developer. All Rights Reserved.
Contributor(s): Contributor(s):
Mark J Crane <markjcrane@fusionpbx.com> Mark J Crane <markjcrane@fusionpbx.com>
*/ */
require_once "root.php";
require_once "resources/require.php"; //includes
require_once "resources/check_auth.php"; require_once "root.php";
if (permission_exists('contact_view')) { require_once "resources/require.php";
//access granted require_once "resources/check_auth.php";
}
else { //check permissions
exit; if (permission_exists('contact_view')) {
} //access granted
}
else {
exit;
}
//search term //search term
$term = check_str($_GET['term']); $term = check_str($_GET['term']);
@@ -58,40 +62,42 @@ else {
//add user's uuid to group uuid list to include private (non-shared) contacts //add user's uuid to group uuid list to include private (non-shared) contacts
$user_group_uuids[] = $_SESSION["user_uuid"]; $user_group_uuids[] = $_SESSION["user_uuid"];
//create the database object
$database = new database;
//get extensions list //get extensions list
$sql = "select "; $sql = "select \n";
$sql .= "e.extension, "; $sql .= "e.extension, \n";
$sql .= "e.effective_caller_id_name, "; $sql .= "e.effective_caller_id_name, \n";
$sql .= "concat(e.directory_first_name, ' ', e.directory_last_name) as directory_full_name "; $sql .= "concat(e.directory_first_name, ' ', e.directory_last_name) as directory_full_name \n";
$sql .= "from "; $sql .= "from \n";
$sql .= "v_extensions e "; $sql .= "v_extensions e \n";
$sql .= "where "; $sql .= "where \n";
foreach ($terms as $index => $term) { foreach ($terms as $index => $term) {
$sql .= "( "; $sql .= "( \n";
$sql .= " lower(e.effective_caller_id_name) like lower('%".$term."%') or "; $sql .= " lower(e.effective_caller_id_name) like lower('%".$term."%') or \n";
$sql .= " lower(e.outbound_caller_id_name) like lower('%".$term."%') or "; $sql .= " lower(e.outbound_caller_id_name) like lower('%".$term."%') or \n";
$sql .= " lower(concat(e.directory_first_name, ' ', e.directory_last_name)) like lower('%".$term."%') or "; $sql .= " lower(concat(e.directory_first_name, ' ', e.directory_last_name)) like lower('%".$term."%') or \n";
$sql .= " lower(e.description) like lower('%".$term."%') or "; $sql .= " lower(e.description) like lower('%".$term."%') or \n";
$sql .= " lower(e.call_group) like lower('%".$term."%') or "; $sql .= " lower(e.call_group) like lower('%".$term."%') or \n";
$sql .= " e.extension like '%".$term."%' "; $sql .= " e.extension like '%".$term."%' \n";
$sql .= ") "; $sql .= ") \n";
if ($index + 1 < sizeof($terms)) { if ($index + 1 < sizeof($terms)) {
$sql .= " and "; $sql .= " and \n";
} }
} }
$sql .= "and e.domain_uuid = '".$_SESSION['domain_uuid']."' "; $sql .= "and e.domain_uuid = '".$_SESSION['domain_uuid']."' \n";
$sql .= "and e.enabled = 'true' "; $sql .= "and e.enabled = 'true' \n";
$sql .= "order by "; $sql .= "order by \n";
$sql .= "directory_full_name asc, "; $sql .= "directory_full_name asc, \n";
$sql .= "e.effective_caller_id_name asc "; $sql .= "e.effective_caller_id_name asc \n";
if (isset($_GET['debug'])) { echo $sql."<br><br>"; } if (isset($_GET['debug'])) { echo $sql."<br><br>"; }
$prep_statement = $db->prepare(check_sql($sql)); $prep_statement = $db->prepare(check_sql($sql));
$prep_statement->execute(); $prep_statement->execute();
$result = $prep_statement->fetchAll(PDO::FETCH_NAMED); $result = $prep_statement->fetchAll(PDO::FETCH_NAMED);
$result_count = count($result);
unset ($prep_statement, $sql); unset ($prep_statement, $sql);
if ($result_count > 0) { if (is_array($result)) {
if (isset($_GET['debug'])) { echo $result."<br><br>"; } if (isset($_GET['debug'])) { echo $result."<br><br>"; }
foreach($result as $row) { foreach($result as $row) {
if ($row['directory_full_name'] != '') { $values[] = $row['directory_full_name']; } if ($row['directory_full_name'] != '') { $values[] = $row['directory_full_name']; }
@@ -104,60 +110,59 @@ else {
} }
//get contacts list //get contacts list
$sql = "select "; $sql = "select \n";
$sql .= "c.contact_organization, "; $sql .= "c.contact_organization, \n";
$sql .= "c.contact_name_given, "; $sql .= "c.contact_name_given, \n";
$sql .= "c.contact_name_middle, "; $sql .= "c.contact_name_middle, \n";
$sql .= "c.contact_name_family, "; $sql .= "c.contact_name_family, \n";
$sql .= "c.contact_nickname, "; $sql .= "c.contact_nickname, \n";
$sql .= "p.phone_number, "; $sql .= "p.phone_number, \n";
$sql .= "p.phone_label "; $sql .= "p.phone_label \n";
$sql .= "from "; $sql .= "from \n";
$sql .= "v_contacts as c, "; $sql .= "v_contacts as c, \n";
$sql .= "v_contact_phones as p "; $sql .= "v_contact_phones as p \n";
$sql .= "where "; $sql .= "where \n";
foreach ($terms as $index => $term) { foreach ($terms as $index => $term) {
$sql .= "( "; $sql .= "( \n";
$sql .= " lower(c.contact_organization) like lower('%".$term."%') or "; $sql .= " lower(c.contact_organization) like lower('%".$term."%') or \n";
$sql .= " lower(c.contact_name_given) like lower('%".$term."%') or "; $sql .= " lower(c.contact_name_given) like lower('%".$term."%') or \n";
$sql .= " lower(c.contact_name_middle) like lower('%".$term."%') or "; $sql .= " lower(c.contact_name_middle) like lower('%".$term."%') or \n";
$sql .= " lower(c.contact_name_family) like lower('%".$term."%') or "; $sql .= " lower(c.contact_name_family) like lower('%".$term."%') or \n";
$sql .= " lower(c.contact_nickname) like lower('%".$term."%') or "; $sql .= " lower(c.contact_nickname) like lower('%".$term."%') or \n";
$sql .= " p.phone_number like '%".$term."%' "; $sql .= " p.phone_number like '%".$term."%' \n";
$sql .= ") "; $sql .= ") \n";
if ($index + 1 < sizeof($terms)) { if ($index + 1 < sizeof($terms)) {
$sql .= " and "; $sql .= " and \n";
} }
} }
$sql .= "and c.contact_uuid = p.contact_uuid "; $sql .= "and c.contact_uuid = p.contact_uuid \n";
$sql .= "and c.domain_uuid = '".$_SESSION['domain_uuid']."' "; $sql .= "and c.domain_uuid = '".$_SESSION['domain_uuid']."' \n";
if (sizeof($user_group_uuids) > 0) { if (sizeof($user_group_uuids) > 0) {
$sql .= "and ( \n"; //only contacts assigned to current user's group(s) and those not assigned to any group $sql .= "and ( \n"; //only contacts assigned to current user's group(s) and those not assigned to any group
$sql .= " c.contact_uuid in ( \n"; $sql .= " c.contact_uuid in ( \n";
$sql .= " select contact_uuid from v_contact_groups "; $sql .= " select contact_uuid from v_contact_groups \n";
$sql .= " where group_uuid in ('".implode("','", $user_group_uuids)."') "; $sql .= " where group_uuid in ('".implode("','", $user_group_uuids)."') \n";
$sql .= " and domain_uuid = '".$_SESSION['domain_uuid']."' "; $sql .= " and domain_uuid = '".$_SESSION['domain_uuid']."' \n";
$sql .= " ) \n"; $sql .= " ) \n";
$sql .= " or \n"; $sql .= " or \n";
$sql .= " c.contact_uuid not in ( \n"; $sql .= " c.contact_uuid not in ( \n";
$sql .= " select contact_uuid from v_contact_groups "; $sql .= " select contact_uuid from v_contact_groups \n";
$sql .= " where domain_uuid = '".$_SESSION['domain_uuid']."' "; $sql .= " where domain_uuid = '".$_SESSION['domain_uuid']."' \n";
$sql .= " ) \n"; $sql .= " ) \n";
$sql .= ") \n"; $sql .= ") \n";
} }
$sql .= "and p.phone_type_voice = 1 "; $sql .= "and p.phone_type_voice = 1 \n";
$sql .= "order by "; $sql .= "order by \n";
$sql .= "contact_organization desc, "; $sql .= "contact_organization desc, \n";
$sql .= "contact_name_given asc, "; $sql .= "contact_name_given asc, \n";
$sql .= "contact_name_family asc "; $sql .= "contact_name_family asc \n";
if (isset($_GET['debug'])) { echo $sql."<br><br>"; } if (isset($_GET['debug'])) { echo $sql."<br><br>"; }
$prep_statement = $db->prepare(check_sql($sql)); $prep_statement = $db->prepare(check_sql($sql));
$prep_statement->execute(); $prep_statement->execute();
$result = $prep_statement->fetchAll(PDO::FETCH_NAMED); $result = $prep_statement->fetchAll(PDO::FETCH_NAMED);
$result_count = count($result);
unset($prep_statement, $sql); unset($prep_statement, $sql);
if ($result_count > 0) { if (is_array($result)) {
foreach($result as $row) { foreach($result as $row) {
if ($row['contact_organization'] != '') { $values[] = $row['contact_organization']; } if ($row['contact_organization'] != '') { $values[] = $row['contact_organization']; }
@@ -184,4 +189,5 @@ else {
echo $resp; echo $resp;
if (isset($_GET['debug'])) { echo "</pre>"; } if (isset($_GET['debug'])) { echo "</pre>"; }
} }
?> ?>