'.str_replace(array("{var site_name}","{var site_url}","{var ticket_code}"),array($cinfo[0]->company_name,site_url(),$ticket_code),htmlspecialchars_decode(stripslashes($template[0]->message))).'
';
hrsale_mail($user_info[0]->email,$full_name,$cinfo[0]->email,$subject,$message);
}
} else {
$Return['error'] = $this->lang->line('xin_error_msg');
}
$this->output($Return);
exit;
}
}
// Validate and add info in database
public function set_comment() {
if($this->input->post('add_type')=='set_comment') {
/* Define return | here result is used to return user data and error for error message */
$Return = array('result'=>'', 'error'=>'', 'csrf_hash'=>'');
$Return['csrf_hash'] = $this->security->get_csrf_hash();
/* Server side PHP input validation */
if($this->input->post('xin_comment')==='') {
$Return['error'] = $this->lang->line('xin_error_comment_field');
}
$xin_comment = $this->input->post('xin_comment');
$qt_xin_comment = htmlspecialchars(addslashes($xin_comment), ENT_QUOTES);
if($Return['error']!=''){
$this->output($Return);
}
$data = array(
'ticket_comments' => $qt_xin_comment,
'ticket_id' => $this->input->post('comment_ticket_id'),
'user_id' => $this->input->post('user_id'),
'created_at' => date('d-m-Y h:i:s')
);
$result = $this->Tickets_model->add_comment($data);
if ($result == TRUE) {
$Return['result'] = $this->lang->line('xin_success_ticket_comment_added');
} else {
$Return['error'] = $this->lang->line('xin_error_msg');
}
$this->output($Return);
exit;
}
}
// Validate and add info in database
public function add_attachment() {
if($this->input->post('add_type')=='dfile_attachment') {
/* Define return | here result is used to return user data and error for error message */
$Return = array('result'=>'', 'error'=>'', 'csrf_hash'=>'');
$Return['csrf_hash'] = $this->security->get_csrf_hash();
/* Server side PHP input validation */
if($this->input->post('file_name')==='') {
$Return['error'] = $this->lang->line('xin_error_task_file_name');
} else if($_FILES['attachment_file']['size'] == 0) {
$Return['error'] = $this->lang->line('xin_error_task_file');
} else if($this->input->post('file_description')==='') {
$Return['error'] = $this->lang->line('xin_error_task_file_description');
}
$description = $this->input->post('file_description');
$file_description = htmlspecialchars(addslashes($description), ENT_QUOTES);
if($Return['error']!=''){
$this->output($Return);
}
// is file upload
if(is_uploaded_file($_FILES['attachment_file']['tmp_name'])) {
//checking image type
$allowed = array('png','jpg','jpeg','pdf','doc','docx','xls','xlsx','txt');
$filename = $_FILES['attachment_file']['name'];
$ext = pathinfo($filename, PATHINFO_EXTENSION);
if(in_array($ext,$allowed)){
$tmp_name = $_FILES["attachment_file"]["tmp_name"];
$attachment_file = "uploads/ticket/";
// basename() may prevent filesystem traversal attacks;
// further validation/sanitation of the filename may be appropriate
$name = basename($_FILES["attachment_file"]["name"]);
$newfilename = 'ticket_'.round(microtime(true)).'.'.$ext;
move_uploaded_file($tmp_name, $attachment_file.$newfilename);
$fname = $newfilename;
} else {
$Return['error'] = $this->lang->line('xin_error_task_file_attachment');
}
}
$data = array(
'ticket_id' => $this->input->post('c_ticket_id'),
'upload_by' => $this->input->post('user_file_id'),
'file_title' => $this->input->post('file_name'),
'file_description' => $file_description,
'attachment_file' => $fname,
'created_at' => date('d-m-Y h:i:s')
);
$result = $this->Tickets_model->add_new_attachment($data);
if ($result == TRUE) {
$Return['result'] = $this->lang->line('xin_success_ticket_attachment_added');
} else {
$Return['error'] = $this->lang->line('xin_error_msg');
}
$this->output($Return);
exit;
}
}
// Validate and update info in database
public function update() {
if($this->input->post('edit_type')=='ticket') {
$id = $this->uri->segment(4);
/* Define return | here result is used to return user data and error for error message */
$Return = array('result'=>'', 'error'=>'', 'csrf_hash'=>'');
$Return['csrf_hash'] = $this->security->get_csrf_hash();
/* Server side PHP input validation */
if($this->input->post('subject')==='') {
$Return['error'] = $this->lang->line('xin_employee_error_subject');
} else if($this->input->post('ticket_priority')==='') {
$Return['error'] = $this->lang->line('xin_error_ticket_priority');
}
$description = $this->input->post('description');
$qt_description = htmlspecialchars(addslashes($description), ENT_QUOTES);
if($Return['error']!=''){
$this->output($Return);
}
$module_attributes = $this->Custom_fields_model->tickets_hrsale_module_attributes();
$count_module_attributes = $this->Custom_fields_model->count_tickets_module_attributes();
$i=1;
if($count_module_attributes > 0){
foreach($module_attributes as $mattribute) {
if($mattribute->validation == 1){
if($i!=1) {
} else if($this->input->post($mattribute->attribute)=='') {
$Return['error'] = $this->lang->line('xin_hrsale_custom_field_the').' '.$mattribute->attribute_label.' '.$this->lang->line('xin_hrsale_custom_field_is_required');
}
}
}
if($Return['error']!=''){
$this->output($Return);
}
}
$data = array(
'subject' => $this->input->post('subject'),
'description' => $qt_description,
'ticket_priority' => $this->input->post('ticket_priority')
);
$result = $this->Tickets_model->update_record($data,$id);
if ($result == TRUE) {
$Return['result'] = $this->lang->line('xin_success_ticket_updated');
if($count_module_attributes > 0){
foreach($module_attributes as $mattribute) {
//
$count_exist_values = $this->Custom_fields_model->count_module_attributes_values($id,$mattribute->custom_field_id);
if($count_exist_values > 0){
if($mattribute->attribute_type == 'fileupload'){
if($_FILES[$mattribute->attribute]['size'] != 0) {
if(is_uploaded_file($_FILES[$mattribute->attribute]['tmp_name'])) {
//checking image type
$allowed = array('png','jpg','jpeg','pdf','gif','xls','doc','xlsx','docx');
$filename = $_FILES[$mattribute->attribute]['name'];
$ext = pathinfo($filename, PATHINFO_EXTENSION);
if(in_array($ext,$allowed)){
$tmp_name = $_FILES[$mattribute->attribute]["tmp_name"];
$profile = "uploads/custom_files/";
$set_img = base_url()."uploads/custom_files/";
// basename() may prevent filesystem traversal attacks;
// further validation/sanitation of the filename may be appropriate
$name = basename($_FILES[$mattribute->attribute]["name"]);
$newfilename = 'custom_file_'.round(microtime(true)).'.'.$ext;
move_uploaded_file($tmp_name, $profile.$newfilename);
$fname = $newfilename;
}
$iattr_data = array(
'attribute_value' => $fname
);
$this->Custom_fields_model->update_att_record($iattr_data, $id,$mattribute->custom_field_id);
}
} else {
}
} else if($mattribute->attribute_type == 'multiselect') {
$multisel_val = $this->input->post($mattribute->attribute);
if(!empty($multisel_val)){
$newdata = implode(',', $this->input->post($mattribute->attribute));
$iattr_data = array(
'attribute_value' => $newdata,
);
$this->Custom_fields_model->update_att_record($iattr_data, $id,$mattribute->custom_field_id);
}
} else {
$attr_data = array(
'attribute_value' => $this->input->post($mattribute->attribute),
);
$this->Custom_fields_model->update_att_record($attr_data, $id,$mattribute->custom_field_id);
}
} else {
if($mattribute->attribute_type == 'fileupload'){
if($_FILES[$mattribute->attribute]['size'] != 0) {
if(is_uploaded_file($_FILES[$mattribute->attribute]['tmp_name'])) {
//checking image type
$allowed = array('png','jpg','jpeg','pdf','gif','xls','doc','xlsx','docx');
$filename = $_FILES[$mattribute->attribute]['name'];
$ext = pathinfo($filename, PATHINFO_EXTENSION);
if(in_array($ext,$allowed)){
$tmp_name = $_FILES[$mattribute->attribute]["tmp_name"];
$profile = "uploads/custom_files/";
$set_img = base_url()."uploads/custom_files/";
// basename() may prevent filesystem traversal attacks;
// further validation/sanitation of the filename may be appropriate
$name = basename($_FILES[$mattribute->attribute]["name"]);
$newfilename = 'custom_file_'.round(microtime(true)).'.'.$ext;
move_uploaded_file($tmp_name, $profile.$newfilename);
$fname = $newfilename;
}
$iattr_data = array(
'user_id' => $id,
'module_attributes_id' => $mattribute->custom_field_id,
'attribute_value' => $fname,
'created_at' => date('Y-m-d h:i:s')
);
$this->Custom_fields_model->add_values($iattr_data);
}
} else {
if($this->input->post($mattribute->attribute) == ''){
$file_val = '';
} else {
$file_val = $this->input->post($mattribute->attribute);
}
$iattr_data = array(
'user_id' => $id,
'module_attributes_id' => $mattribute->custom_field_id,
'created_at' => date('Y-m-d h:i:s')
);
$this->Custom_fields_model->add_values($iattr_data);
}
} else if($mattribute->attribute_type == 'multiselect') {
$multisel_val = $this->input->post($mattribute->attribute);
if(!empty($multisel_val)){
$newdata = implode(',', $this->input->post($mattribute->attribute));
$iattr_data = array(
'user_id' => $id,
'module_attributes_id' => $mattribute->custom_field_id,
'attribute_value' => $newdata,
'created_at' => date('Y-m-d h:i:s')
);
$this->Custom_fields_model->add_values($iattr_data);
}
} else {
if($this->input->post($mattribute->attribute) == ''){
$file_val = '';
} else {
$file_val = $this->input->post($mattribute->attribute);
}
$iattr_data = array(
'user_id' => $id,
'module_attributes_id' => $mattribute->custom_field_id,
'attribute_value' => $file_val,
'created_at' => date('Y-m-d h:i:s')
);
$this->Custom_fields_model->add_values($iattr_data);
}
}
}
}
} else {
$Return['error'] = $this->lang->line('xin_error_msg');
}
$this->output($Return);
exit;
}
}
public function details()
{
$data['title'] = $this->Xin_model->site_title();
$session = $this->session->userdata('username');
$id = $this->uri->segment(4);
$result = $this->Tickets_model->read_ticket_information($id);
if(is_null($result)){
redirect('admin/tickets');
}
$edata = array(
'is_notify' => 0,
);
$this->Xin_model->update_notification_record($edata,$id,$session['user_id'],'tickets');
$user = $this->Xin_model->read_user_info($result[0]->created_by);
if(!is_null($user)){
$full_name = $user[0]->first_name.' '.$user[0]->last_name;
} else {
$full_name = '--';
}
$data = array(
'title' => $this->Xin_model->site_title(),
'ticket_id' => $result[0]->ticket_id,
'subject' => $result[0]->subject,
'ticket_code' => $result[0]->ticket_code,
'end_date' => $result[0]->end_date,
'ticket_image' => $result[0]->ticket_image,
'department_id' => $result[0]->department_id,
'full_name' => $full_name,
'ticket_priority' => $result[0]->ticket_priority,
'created_at' => $result[0]->created_at,
'description' => $result[0]->description,
'assigned_to' => $result[0]->assigned_to,
'ticket_status' => $result[0]->ticket_status,
'ticket_note' => $result[0]->ticket_note,
'ticket_remarks' => $result[0]->ticket_remarks,
'message' => $result[0]->message,
'all_employees' => $this->Xin_model->all_employees(),
);
$data['breadcrumbs'] = $this->lang->line('xin_ticket_details');
$data['path_url'] = 'tickets_detail';
$session = $this->session->userdata('username');
$role_resources_ids = $this->Xin_model->user_role_resource();
if(!empty($session)){
$data['subview'] = $this->load->view("admin/tickets/ticket_details", $data, TRUE);
$this->load->view('admin/layout/layout_main', $data); //page load
} else {
redirect('admin/');
}
}
// Validate and update info in database // assign_ticket
public function assign_ticket() {
if($this->input->post('type')=='ticket_user') {
/* Define return | here result is used to return user data and error for error message */
$Return = array('result'=>'', 'error'=>'', 'csrf_hash'=>'');
$Return['csrf_hash'] = $this->security->get_csrf_hash();
if(null!=$this->input->post('assigned_to')) {
$assigned_ids = implode(',',$this->input->post('assigned_to'));
$employee_ids = $assigned_ids;
} else {
$employee_ids = '';
}
$data = array(
'assigned_to' => $employee_ids
);
$id = $this->input->post('ticket_id');
$result = $this->Tickets_model->assign_ticket_user($data,$id);
if ($result == TRUE) {
$Return['result'] = $this->lang->line('xin_ticket_assigned_employee');
} else {
$Return['error'] = $this->lang->line('xin_error_msg');
}
$this->output($Return);
exit;
}
}
// Validate and update info in database // update_status
public function update_status() {
if($this->input->post('type')=='update_status') {
/* Define return | here result is used to return user data and error for error message */
$Return = array('result'=>'', 'error'=>'', 'csrf_hash'=>'');
$Return['csrf_hash'] = $this->security->get_csrf_hash();
$data = array(
'ticket_status' => $this->input->post('status'),
'ticket_remarks' => $this->input->post('remarks'),
);
$id = $this->input->post('status_ticket_id');
$result = $this->Tickets_model->update_status($data,$id);
if ($result == TRUE) {
$Return['result'] = $this->lang->line('xin_ticket_status_updated');
} else {
$Return['error'] = $this->lang->line('xin_error_msg');
}
$this->output($Return);
exit;
}
}
// Validate and update info in database // add_note
public function add_note() {
if($this->input->post('type')=='add_note') {
/* Define return | here result is used to return user data and error for error message */
$Return = array('result'=>'', 'error'=>'', 'csrf_hash'=>'');
$Return['csrf_hash'] = $this->security->get_csrf_hash();
$data = array(
'ticket_note' => $this->input->post('ticket_note')
);
$id = $this->input->post('token_note_id');
$result = $this->Tickets_model->update_note($data,$id);
if ($result == TRUE) {
$Return['result'] = $this->lang->line('xin_ticket_note_updated');
} else {
$Return['error'] = $this->lang->line('xin_error_msg');
}
$this->output($Return);
exit;
}
}
public function ticket_users() {
$data['title'] = $this->Xin_model->site_title();
$id = $this->uri->segment(4);
$data = array(
'ticket_id' => $id,
'all_designations' => $this->Designation_model->all_designations(),
);
$session = $this->session->userdata('username');
if(!empty($session)){
$this->load->view("admin/tickets/get_ticket_users", $data);
} else {
redirect('');
}
// Datatables Variables
$draw = intval($this->input->get("draw"));
$start = intval($this->input->get("start"));
$length = intval($this->input->get("length"));
}
public function delete() {
if($this->input->post('is_ajax') == 2) {
/* Define return | here result is used to return user data and error for error message */
$Return = array('result'=>'', 'error'=>'', 'csrf_hash'=>'');
$id = $this->uri->segment(4);
$Return['csrf_hash'] = $this->security->get_csrf_hash();
$result = $this->Tickets_model->delete_record($id);
if(isset($id)) {
$Return['result'] = $this->lang->line('xin_success_ticket_deleted');
} else {
$Return['error'] = $this->lang->line('xin_error_msg');
}
$this->output($Return);
}
}
public function comment_delete() {
if($this->input->post('data') == 'ticket_comment') {
/* Define return | here result is used to return user data and error for error message */
$Return = array('result'=>'', 'error'=>'', 'csrf_hash'=>'');
$id = $this->uri->segment(4);
$Return['csrf_hash'] = $this->security->get_csrf_hash();
$result = $this->Tickets_model->delete_comment_record($id);
if(isset($id)) {
$Return['result'] = $this->lang->line('xin_success_ticket_comment_deleted');
} else {
$Return['error'] = $this->lang->line('xin_error_msg');
}
$this->output($Return);
}
}
public function attachment_delete() {
if($this->input->post('data') == 'ticket_attachment') {
/* Define return | here result is used to return user data and error for error message */
$Return = array('result'=>'', 'error'=>'', 'csrf_hash'=>'');
$id = $this->uri->segment(4);
$Return['csrf_hash'] = $this->security->get_csrf_hash();
$result = $this->Tickets_model->delete_attachment_record($id);
if(isset($id)) {
$Return['result'] = $this->lang->line('xin_success_ticket_attachment_deleted');
} else {
$Return['error'] = $this->lang->line('xin_error_msg');
}
$this->output($Return);
}
}
}