easyappointments/application/controllers/Backend_api.php

1656 lines
55 KiB
PHP
Executable file

<?php defined('BASEPATH') or exit('No direct script access allowed');
/* ----------------------------------------------------------------------------
* Easy!Appointments - Open Source Web Scheduler
*
* @package EasyAppointments
* @author A.Tselegidis <alextselegidis@gmail.com>
* @copyright Copyright (c) 2013 - 2020, Alex Tselegidis
* @license https://opensource.org/licenses/GPL-3.0 - GPLv3
* @link https://easyappointments.org
* @since v1.0.0
* ---------------------------------------------------------------------------- */
use EA\Engine\Notifications\Email as EmailClient;
use EA\Engine\Types\Email;
use EA\Engine\Types\Text;
/**
* Backend API Controller
*
* Contains all the backend AJAX callbacks.
*
* @package Controllers
*/
class Backend_api extends EA_Controller {
/**
* @var array
*/
protected $privileges;
/**
* Class Constructor
*/
public function __construct()
{
parent::__construct();
$this->load->model('admins_model');
$this->load->model('appointments_model');
$this->load->model('consents_model');
$this->load->model('customers_model');
$this->load->model('providers_model');
$this->load->model('roles_model');
$this->load->model('secretaries_model');
$this->load->model('services_model');
$this->load->model('settings_model');
$this->load->model('user_model');
$this->load->library('google_sync');
$this->load->library('ics_file');
$this->load->library('notifications');
$this->load->library('synchronization');
$this->load->library('timezones');
if ($this->session->userdata('role_slug'))
{
$this->privileges = $this->roles_model->get_privileges($this->session->userdata('role_slug'));
}
else
{
show_error('Forbidden', 403);
}
}
/**
* Get Calendar Events
*
* This method will return all the calendar events within a specified period.
*/
public function ajax_get_calendar_events()
{
try
{
if ($this->privileges[PRIV_APPOINTMENTS]['view'] == FALSE)
{
throw new Exception('You do not have the required privileges for this task.');
}
$start_date = $this->input->post('startDate') . ' 00:00:00';
$end_date = $this->input->post('endDate') . ' 23:59:59';
$response = [
'appointments' => $this->appointments_model->get_batch([
'is_unavailable' => FALSE,
'start_datetime >=' => $start_date,
'end_datetime <=' => $end_date
]),
'unavailability_events' => $this->appointments_model->get_batch([
'is_unavailable' => TRUE,
'start_datetime >=' => $start_date,
'end_datetime <=' => $end_date
])
];
foreach ($response['appointments'] as &$appointment)
{
$appointment['provider'] = $this->providers_model->get_row($appointment['id_users_provider']);
$appointment['service'] = $this->services_model->get_row($appointment['id_services']);
$appointment['customer'] = $this->customers_model->get_row($appointment['id_users_customer']);
}
unset ($appointment);
$user_id = $this->session->userdata('user_id');
$role_slug = $this->session->userdata('role_slug');
// If the current user is a provider he must only see his own appointments.
if ($role_slug === DB_SLUG_PROVIDER)
{
foreach ($response['appointments'] as $index => $appointment)
{
if ((int)$appointment['id_users_provider'] !== (int)$user_id)
{
unset($response['appointments'][$index]);
}
}
foreach ($response['unavailability_events'] as $index => $unavailability_event)
{
if ((int)$unavailability_event['id_users_provider'] !== (int)$user_id)
{
unset($response['unavailability_events'][$index]);
}
}
}
// If the current user is a secretary he must only see the appointments of his providers.
if ($role_slug === DB_SLUG_SECRETARY)
{
$providers = $this->secretaries_model->get_row($user_id)['providers'];
foreach ($response['appointments'] as $index => $appointment)
{
if ( ! in_array((int)$appointment['id_users_provider'], $providers))
{
unset($response['appointments'][$index]);
}
}
foreach ($response['unavailability_events'] as $index => $unavailability_event)
{
if ( ! in_array((int)$unavailability_event['id_users_provider'], $providers))
{
unset($response['unavailability_events'][$index]);
}
}
}
$response['appointments'] = array_values($response['appointments']);
$response['unavailability_events'] = array_values($response['unavailability_events']);
$this->output->set_output(json_encode($response));
}
catch (Exception $exception)
{
$this->output->set_status_header(500);
$response = [
'message' => $exception->getMessage(),
'trace' => config('debug') ? $exception->getTrace() : []
];
}
$this->output
->set_content_type('application/json')
->set_output(json_encode($response));
}
/**
* Get the registered appointments for the given date period and record.
*
* This method returns the database appointments and unavailable periods for the
* user selected date period and record type (provider or service).
*/
public function ajax_get_calendar_appointments()
{
try
{
if ($this->privileges[PRIV_APPOINTMENTS]['view'] == FALSE)
{
throw new Exception('You do not have the required privileges for this task.');
}
if ( ! $this->input->post('filter_type'))
{
$this->output
->set_content_type('application/json')
->set_output(json_encode(['appointments' => []]));
return;
}
if ($this->input->post('filter_type') == FILTER_TYPE_PROVIDER)
{
$where_id = 'id_users_provider';
}
else
{
$where_id = 'id_services';
}
// Get appointments
$record_id = $this->db->escape($this->input->post('record_id'));
$start_date = $this->db->escape($this->input->post('start_date'));
$end_date = $this->db->escape(date('Y-m-d', strtotime($this->input->post('end_date') . ' +1 day')));
$where_clause = $where_id . ' = ' . $record_id . '
AND ((start_datetime > ' . $start_date . ' AND start_datetime < ' . $end_date . ')
or (end_datetime > ' . $start_date . ' AND end_datetime < ' . $end_date . ')
or (start_datetime <= ' . $start_date . ' AND end_datetime >= ' . $end_date . '))
AND is_unavailable = 0
';
$response['appointments'] = $this->appointments_model->get_batch($where_clause);
foreach ($response['appointments'] as &$appointment)
{
$appointment['provider'] = $this->providers_model->get_row($appointment['id_users_provider']);
$appointment['service'] = $this->services_model->get_row($appointment['id_services']);
$appointment['customer'] = $this->customers_model->get_row($appointment['id_users_customer']);
}
// Get unavailable periods (only for provider).
$response['unavailables'] = [];
if ($this->input->post('filter_type') == FILTER_TYPE_PROVIDER)
{
$where_clause = $where_id . ' = ' . $record_id . '
AND ((start_datetime > ' . $start_date . ' AND start_datetime < ' . $end_date . ')
or (end_datetime > ' . $start_date . ' AND end_datetime < ' . $end_date . ')
or (start_datetime <= ' . $start_date . ' AND end_datetime >= ' . $end_date . '))
AND is_unavailable = 1
';
$response['unavailables'] = $this->appointments_model->get_batch($where_clause);
}
foreach ($response['unavailables'] as &$unavailable)
{
$unavailable['provider'] = $this->providers_model->get_row($unavailable['id_users_provider']);
}
$this->output
->set_content_type('application/json')
->set_output(json_encode($response));
}
catch (Exception $exception)
{
$this->output->set_status_header(500);
$response = [
'message' => $exception->getMessage(),
'trace' => config('debug') ? $exception->getTrace() : []
];
}
$this->output
->set_content_type('application/json')
->set_output(json_encode($response));
}
/**
* Save appointment changes that are made from the backend calendar page.
*/
public function ajax_save_appointment()
{
try
{
// Save customer changes to the database.
if ($this->input->post('customer_data'))
{
$customer = json_decode($this->input->post('customer_data'), TRUE);
$required_privileges = ( ! isset($customer['id']))
? $this->privileges[PRIV_CUSTOMERS]['add']
: $this->privileges[PRIV_CUSTOMERS]['edit'];
if ($required_privileges == FALSE)
{
throw new Exception('You do not have the required privileges for this task.');
}
$customer['id'] = $this->customers_model->add($customer);
}
// Save appointment changes to the database.
if ($this->input->post('appointment_data'))
{
$appointment = json_decode($this->input->post('appointment_data'), TRUE);
$required_privileges = ( ! isset($appointment['id']))
? $this->privileges[PRIV_APPOINTMENTS]['add']
: $this->privileges[PRIV_APPOINTMENTS]['edit'];
if ($required_privileges == FALSE)
{
throw new Exception('You do not have the required privileges for this task.');
}
$manage_mode = isset($appointment['id']);
// If the appointment does not contain the customer record id, then it means that is is going to be
// inserted. Get the customer's record ID.
if ( ! isset($appointment['id_users_customer']))
{
$appointment['id_users_customer'] = $customer['id'];
}
$appointment['id'] = $this->appointments_model->add($appointment);
}
$appointment = $this->appointments_model->get_row($appointment['id']);
$provider = $this->providers_model->get_row($appointment['id_users_provider']);
$customer = $this->customers_model->get_row($appointment['id_users_customer']);
$service = $this->services_model->get_row($appointment['id_services']);
$settings = [
'company_name' => $this->settings_model->get_setting('company_name'),
'company_link' => $this->settings_model->get_setting('company_link'),
'company_email' => $this->settings_model->get_setting('company_email'),
'date_format' => $this->settings_model->get_setting('date_format'),
'time_format' => $this->settings_model->get_setting('time_format')
];
$this->synchronization->sync_appointment_saved($appointment, $service, $provider, $customer, $settings, $manage_mode);
$this->notifications->notify_appointment_saved($appointment, $service, $provider, $customer, $settings, $manage_mode);
$response = AJAX_SUCCESS;
}
catch (Exception $exception)
{
$this->output->set_status_header(500);
$response = [
'message' => $exception->getMessage(),
'trace' => config('debug') ? $exception->getTrace() : []
];
}
$this->output
->set_content_type('application/json')
->set_output(json_encode($response));
}
/**
* Delete appointment from the database.
*
* This method deletes an existing appointment from the database. Once this action is finished it cannot be undone.
* Notification emails are send to both provider and customer and the delete action is executed to the Google
* Calendar account of the provider, if the "google_sync" setting is enabled.
*/
public function ajax_delete_appointment()
{
try
{
if ($this->privileges[PRIV_APPOINTMENTS]['delete'] == FALSE)
{
throw new Exception('You do not have the required privileges for this task.');
}
if ( ! $this->input->post('appointment_id'))
{
throw new Exception('No appointment id provided.');
}
// Store appointment data for later use in this method.
$appointment = $this->appointments_model->get_row($this->input->post('appointment_id'));
$provider = $this->providers_model->get_row($appointment['id_users_provider']);
$customer = $this->customers_model->get_row($appointment['id_users_customer']);
$service = $this->services_model->get_row($appointment['id_services']);
$settings = [
'company_name' => $this->settings_model->get_setting('company_name'),
'company_email' => $this->settings_model->get_setting('company_email'),
'company_link' => $this->settings_model->get_setting('company_link'),
'date_format' => $this->settings_model->get_setting('date_format'),
'time_format' => $this->settings_model->get_setting('time_format')
];
// Delete appointment record from the database.
$this->appointments_model->delete($this->input->post('appointment_id'));
// Sync removal with Google Calendar.
if ($appointment['id_google_calendar'] != NULL)
{
try
{
$google_sync = $this->providers_model->get_setting('google_sync', $provider['id']);
if ($google_sync == TRUE)
{
$google_token = json_decode($this->providers_model
->get_setting('google_token', $provider['id']));
$this->google_sync->refresh_token($google_token->refresh_token);
$this->google_sync->delete_appointment($provider, $appointment['id_google_calendar']);
}
}
catch (Exception $exception)
{
$warnings[] = [
'message' => $exception->getMessage(),
'trace' => config('debug') ? $exception->getTrace() : []
];
}
}
// Send notification emails to provider and customer.
try
{
$this->config->load('email');
$email = new EmailClient($this, $this->config->config);
$send_provider = $this->providers_model
->get_setting('notifications', $provider['id']);
if ((bool)$send_provider === TRUE)
{
$email->send_delete_appointment($appointment, $provider,
$service, $customer, $settings, new Email($provider['email']),
new Text($this->input->post('delete_reason')));
}
$send_customer = $this->settings_model->get_setting('customer_notifications');
if ((bool)$send_customer === TRUE)
{
$email->send_delete_appointment($appointment, $provider,
$service, $customer, $settings, new Email($customer['email']),
new Text($this->input->post('delete_reason')));
}
// Notify admins
$admins = $this->admins_model->get_batch();
foreach ($admins as $admin)
{
if ( ! $admin['settings']['notifications'] === '0')
{
continue;
}
$email->send_delete_appointment($appointment, $provider,
$service, $customer, $settings, new Email($admin['email']),
new Text($this->input->post('cancel_reason')));
}
// Notify secretaries
$secretaries = $this->secretaries_model->get_batch();
foreach ($secretaries as $secretary)
{
if ( ! $secretary['settings']['notifications'] === '0')
{
continue;
}
if (in_array($provider['id'], $secretary['providers']))
{
continue;
}
$email->send_delete_appointment($appointment, $provider,
$service, $customer, $settings, new Email($secretary['email']),
new Text($this->input->post('cancel_reason')));
}
}
catch (Exception $exception)
{
$warnings[] = [
'message' => $exception->getMessage(),
'trace' => config('debug') ? $exception->getTrace() : []
];
}
if (empty($warnings))
{
$response = AJAX_SUCCESS;
}
else
{
$response = ['warnings' => $warnings];
}
}
catch (Exception $exception)
{
$this->output->set_status_header(500);
$response = [
'message' => $exception->getMessage(),
'trace' => config('debug') ? $exception->getTrace() : []
];
}
$this->output
->set_content_type('application/json')
->set_output(json_encode($response));
}
/**
* Disable a providers sync setting.
*
* This method deletes the "google_sync" and "google_token" settings from the database. After that the provider's
* appointments will be no longer synced with google calendar.
*/
public function ajax_disable_provider_sync()
{
try
{
if ( ! $this->input->post('provider_id'))
{
throw new Exception('Provider id not specified.');
}
if ($this->privileges[PRIV_USERS]['edit'] == FALSE
&& $this->session->userdata('user_id') != $this->input->post('provider_id'))
{
throw new Exception('You do not have the required privileges for this task.');
}
$this->providers_model->set_setting('google_sync', FALSE, $this->input->post('provider_id'));
$this->providers_model->set_setting('google_token', NULL, $this->input->post('provider_id'));
$this->appointments_model->clear_google_sync_ids($this->input->post('provider_id'));
$response = AJAX_SUCCESS;
}
catch (Exception $exception)
{
$this->output->set_status_header(500);
$response = [
'message' => $exception->getMessage(),
'trace' => config('debug') ? $exception->getTrace() : []
];
}
$this->output
->set_content_type('application/json')
->set_output(json_encode($response));
}
/**
* Filter the customer records with the given key string.
*
* Outputs the search results.
*/
public function ajax_filter_customers()
{
try
{
if ($this->privileges[PRIV_CUSTOMERS]['view'] == FALSE)
{
throw new Exception('You do not have the required privileges for this task.');
}
$key = $this->db->escape_str($this->input->post('key'));
$key = strtoupper($key);
$where =
'(first_name LIKE upper("%' . $key . '%") OR ' .
'last_name LIKE upper("%' . $key . '%") OR ' .
'email LIKE upper("%' . $key . '%") OR ' .
'phone_number LIKE upper("%' . $key . '%") OR ' .
'address LIKE upper("%' . $key . '%") OR ' .
'city LIKE upper("%' . $key . '%") OR ' .
'zip_code LIKE upper("%' . $key . '%") OR ' .
'notes LIKE upper("%' . $key . '%"))';
$order_by = 'first_name ASC, last_name ASC';
$limit = $this->input->post('limit');
if ($limit === NULL)
{
$limit = 1000;
}
$customers = $this->customers_model->get_batch($where, $limit, NULL, $order_by);
foreach ($customers as &$customer)
{
$appointments = $this->appointments_model->get_batch(['id_users_customer' => $customer['id']]);
foreach ($appointments as &$appointment)
{
$appointment['service'] = $this->services_model->get_row($appointment['id_services']);
$appointment['provider'] = $this->providers_model->get_row($appointment['id_users_provider']);
}
$customer['appointments'] = $appointments;
}
$response = $customers;
}
catch (Exception $exception)
{
$this->output->set_status_header(500);
$response = [
'message' => $exception->getMessage(),
'trace' => config('debug') ? $exception->getTrace() : []
];
}
$this->output
->set_content_type('application/json')
->set_output(json_encode($response));
}
/**
* Insert of update unavailable time period to database.
*/
public function ajax_save_unavailable()
{
try
{
// Check privileges
$unavailable = json_decode($this->input->post('unavailable'), TRUE);
$required_privileges = ( ! isset($unavailable['id']))
? $this->privileges[PRIV_APPOINTMENTS]['add']
: $this->privileges[PRIV_APPOINTMENTS]['edit'];
if ($required_privileges == FALSE)
{
throw new Exception('You do not have the required privileges for this task.');
}
$provider = $this->providers_model->get_row($unavailable['id_users_provider']);
// Add appointment
$unavailable['id'] = $this->appointments_model->add_unavailable($unavailable);
$unavailable = $this->appointments_model->get_row($unavailable['id']); // fetch all inserted data
// Google Sync
try
{
$google_sync = $this->providers_model->get_setting('google_sync',
$unavailable['id_users_provider']);
if ($google_sync)
{
$google_token = json_decode($this->providers_model->get_setting('google_token',
$unavailable['id_users_provider']));
$this->google_sync->refresh_token($google_token->refresh_token);
if ($unavailable['id_google_calendar'] == NULL)
{
$google_event = $this->google_sync->add_unavailable($provider, $unavailable);
$unavailable['id_google_calendar'] = $google_event->id;
$this->appointments_model->add_unavailable($unavailable);
}
else
{
$this->google_sync->update_unavailable($provider, $unavailable);
}
}
}
catch (Exception $exception)
{
$warnings[] = $exception;
}
if (isset($warnings))
{
$this->output
->set_content_type('application/json')
->set_output(json_encode(['warnings' => $warnings]));
}
else
{
$this->output
->set_content_type('application/json')
->set_output(json_encode(AJAX_SUCCESS));
}
$response = AJAX_SUCCESS;
}
catch (Exception $exception)
{
$this->output->set_status_header(500);
$response = [
'message' => $exception->getMessage(),
'trace' => config('debug') ? $exception->getTrace() : []
];
}
$this->output
->set_content_type('application/json')
->set_output(json_encode($response));
}
/**
* Delete an unavailable time period from database.
*/
public function ajax_delete_unavailable()
{
try
{
if ($this->privileges[PRIV_APPOINTMENTS]['delete'] == FALSE)
{
throw new Exception('You do not have the required privileges for this task.');
}
$unavailable = $this->appointments_model->get_row($this->input->post('unavailable_id'));
$provider = $this->providers_model->get_row($unavailable['id_users_provider']);
// Delete unavailable
$this->appointments_model->delete_unavailable($unavailable['id']);
// Google Sync
try
{
$google_sync = $this->providers_model->get_setting('google_sync', $provider['id']);
if ($google_sync == TRUE)
{
$google_token = json_decode($this->providers_model->get_setting('google_token', $provider['id']));
$this->google_sync->refresh_token($google_token->refresh_token);
$this->google_sync->delete_unavailable($provider, $unavailable['id_google_calendar']);
}
}
catch (Exception $exception)
{
$warnings[] = $exception;
}
if (empty($warnings))
{
$response = AJAX_SUCCESS;
}
else
{
$response = ['warnings' => $warnings];
}
}
catch (Exception $exception)
{
$this->output->set_status_header(500);
$response = [
'message' => $exception->getMessage(),
'trace' => config('debug') ? $exception->getTrace() : []
];
}
$this->output
->set_content_type('application/json')
->set_output(json_encode($response));
}
/**
* Insert of update working plan exceptions to database.
*/
public function ajax_save_working_plan_exception()
{
try
{
// Check privileges
$required_privileges = $this->privileges[PRIV_USERS]['edit'];
if ($required_privileges == FALSE)
{
throw new Exception('You do not have the required privileges for this task.');
}
$date = $this->input->post('date');
$working_plan_exception = $this->input->post('working_plan_exception');
$provider_id = $this->input->post('provider_id');
$success = $this->providers_model->save_working_plan_exception($date, $working_plan_exception, $provider_id);
if ($success)
{
$response = AJAX_SUCCESS;
}
else
{
$response = ['warnings' => 'Error on saving working plan exception.'];
}
}
catch (Exception $exception)
{
$this->output->set_status_header(500);
$response = [
'message' => $exception->getMessage(),
'trace' => config('debug') ? $exception->getTrace() : []
];
}
$this->output
->set_content_type('application/json')
->set_output(json_encode($response));
}
/**
* Delete an working plan exceptions time period to database.
*/
public function ajax_delete_working_plan_exception()
{
try
{
// Check privileges
$required_privileges = $this->privileges[PRIV_USERS]['edit'];
if ($required_privileges == FALSE)
{
throw new Exception('You do not have the required privileges for this task.');
}
$date = $this->input->post('date');
$provider_id = $this->input->post('provider_id');
$success = $this->providers_model->delete_working_plan_exception($date, $provider_id);
if ($success)
{
$response = AJAX_SUCCESS;
}
else
{
$response = ['warnings' => 'Error on deleting working plan exception.'];
}
}
catch (Exception $exception)
{
$this->output->set_status_header(500);
$response = [
'message' => $exception->getMessage(),
'trace' => config('debug') ? $exception->getTrace() : []
];
}
$this->output
->set_content_type('application/json')
->set_output(json_encode($response));
}
/**
* Save (insert or update) a customer record.
*/
public function ajax_save_customer()
{
try
{
$customer = json_decode($this->input->post('customer'), TRUE);
$required_privileges = ( ! isset($customer['id']))
? $this->privileges[PRIV_CUSTOMERS]['add']
: $this->privileges[PRIV_CUSTOMERS]['edit'];
if ($required_privileges == FALSE)
{
throw new Exception('You do not have the required privileges for this task.');
}
$customer_id = $this->customers_model->add($customer);
$response = [
'status' => AJAX_SUCCESS,
'id' => $customer_id
];
}
catch (Exception $exception)
{
$this->output->set_status_header(500);
$response = [
'message' => $exception->getMessage(),
'trace' => config('debug') ? $exception->getTrace() : []
];
}
$this->output
->set_content_type('application/json')
->set_output(json_encode($response));
}
/**
* Delete customer from database.
*/
public function ajax_delete_customer()
{
try
{
if ($this->privileges[PRIV_CUSTOMERS]['delete'] == FALSE)
{
throw new Exception('You do not have the required privileges for this task.');
}
$this->customers_model->delete($this->input->post('customer_id'));
$response = AJAX_SUCCESS;
}
catch (Exception $exception)
{
$this->output->set_status_header(500);
$response = [
'message' => $exception->getMessage(),
'trace' => config('debug') ? $exception->getTrace() : []
];
}
$this->output
->set_content_type('application/json')
->set_output(json_encode($response));
}
/**
* Save (insert or update) service record.
*/
public function ajax_save_service()
{
try
{
$service = json_decode($this->input->post('service'), TRUE);
$required_privileges = ( ! isset($service['id']))
? $this->privileges[PRIV_SERVICES]['add']
: $this->privileges[PRIV_SERVICES]['edit'];
if ($required_privileges == FALSE)
{
throw new Exception('You do not have the required privileges for this task.');
}
$service_id = $this->services_model->add($service);
$response = [
'status' => AJAX_SUCCESS,
'id' => $service_id
];
}
catch (Exception $exception)
{
$this->output->set_status_header(500);
$response = [
'message' => $exception->getMessage(),
'trace' => config('debug') ? $exception->getTrace() : []
];
}
$this->output
->set_content_type('application/json')
->set_output(json_encode($response));
}
/**
* Delete service record from database.
*/
public function ajax_delete_service()
{
try
{
if ($this->privileges[PRIV_SERVICES]['delete'] == FALSE)
{
throw new Exception('You do not have the required privileges for this task.');
}
$result = $this->services_model->delete($this->input->post('service_id'));
$response = $result ? AJAX_SUCCESS : AJAX_FAILURE;
}
catch (Exception $exception)
{
$this->output->set_status_header(500);
$response = [
'message' => $exception->getMessage(),
'trace' => config('debug') ? $exception->getTrace() : []
];
}
$this->output
->set_content_type('application/json')
->set_output(json_encode($response));
}
/**
* Filter service records by given key string.
*/
public function ajax_filter_services()
{
try
{
if ($this->privileges[PRIV_SERVICES]['view'] == FALSE)
{
throw new Exception('You do not have the required privileges for this task.');
}
$key = $this->db->escape_str($this->input->post('key'));
$where =
'(name LIKE "%' . $key . '%" OR duration LIKE "%' . $key . '%" OR ' .
'price LIKE "%' . $key . '%" OR currency LIKE "%' . $key . '%" OR ' .
'description LIKE "%' . $key . '%")';
$response = $this->services_model->get_batch($where);
}
catch (Exception $exception)
{
$this->output->set_status_header(500);
$response = [
'message' => $exception->getMessage(),
'trace' => config('debug') ? $exception->getTrace() : []
];
}
$this->output
->set_content_type('application/json')
->set_output(json_encode($response));
}
/**
* Save (insert or update) category record.
*/
public function ajax_save_service_category()
{
try
{
$category = json_decode($this->input->post('category'), TRUE);
$required_privileges = ( ! isset($category['id']))
? $this->privileges[PRIV_SERVICES]['add']
: $this->privileges[PRIV_SERVICES]['edit'];
if ($required_privileges == FALSE)
{
throw new Exception('You do not have the required privileges for this task.');
}
$category_id = $this->services_model->add_category($category);
$response = [
'status' => AJAX_SUCCESS,
'id' => $category_id
];
}
catch (Exception $exception)
{
$this->output->set_status_header(500);
$response = [
'message' => $exception->getMessage(),
'trace' => config('debug') ? $exception->getTrace() : []
];
}
$this->output
->set_content_type('application/json')
->set_output(json_encode($response));
}
/**
* Delete category record from database.
*/
public function ajax_delete_service_category()
{
try
{
if ($this->privileges[PRIV_SERVICES]['delete'] == FALSE)
{
throw new Exception('You do not have the required privileges for this task.');
}
$result = $this->services_model->delete_category($this->input->post('category_id'));
$response = $result ? AJAX_SUCCESS : AJAX_FAILURE;
}
catch (Exception $exception)
{
$this->output->set_status_header(500);
$response = [
'message' => $exception->getMessage(),
'trace' => config('debug') ? $exception->getTrace() : []
];
}
$this->output
->set_content_type('application/json')
->set_output(json_encode($response));
}
/**
* Filter services categories with key string.
*/
public function ajax_filter_service_categories()
{
try
{
if ($this->privileges[PRIV_SERVICES]['view'] == FALSE)
{
throw new Exception('You do not have the required privileges for this task.');
}
$key = $this->db->escape_str($this->input->post('key'));
$where = '(name LIKE "%' . $key . '%" OR description LIKE "%' . $key . '%")';
$response = $this->services_model->get_all_categories($where);
}
catch (Exception $exception)
{
$this->output->set_status_header(500);
$response = [
'message' => $exception->getMessage(),
'trace' => config('debug') ? $exception->getTrace() : []
];
}
$this->output
->set_content_type('application/json')
->set_output(json_encode($response));
}
/**
* Filter admin records with string key.
*/
public function ajax_filter_admins()
{
try
{
if ($this->privileges[PRIV_USERS]['view'] == FALSE)
{
throw new Exception('You do not have the required privileges for this task.');
}
$key = $this->db->escape_str($this->input->post('key'));
$where =
'(first_name LIKE "%' . $key . '%" OR last_name LIKE "%' . $key . '%" ' .
'OR email LIKE "%' . $key . '%" OR mobile_number LIKE "%' . $key . '%" ' .
'OR phone_number LIKE "%' . $key . '%" OR address LIKE "%' . $key . '%" ' .
'OR city LIKE "%' . $key . '%" OR state LIKE "%' . $key . '%" ' .
'OR zip_code LIKE "%' . $key . '%" OR notes LIKE "%' . $key . '%")';
$response = $this->admins_model->get_batch($where);
}
catch (Exception $exception)
{
$this->output->set_status_header(500);
$response = [
'message' => $exception->getMessage(),
'trace' => config('debug') ? $exception->getTrace() : []
];
}
$this->output
->set_content_type('application/json')
->set_output(json_encode($response));
}
/**
* Save (insert or update) admin record into database.
*/
public function ajax_save_admin()
{
try
{
$admin = json_decode($this->input->post('admin'), TRUE);
$required_privileges = ( ! isset($admin['id']))
? $this->privileges[PRIV_USERS]['add']
: $this->privileges[PRIV_USERS]['edit'];
if ($required_privileges == FALSE)
{
throw new Exception('You do not have the required privileges for this task.');
}
$admin_id = $this->admins_model->add($admin);
$response = [
'status' => AJAX_SUCCESS,
'id' => $admin_id
];
}
catch (Exception $exception)
{
$this->output->set_status_header(500);
$response = [
'message' => $exception->getMessage(),
'trace' => config('debug') ? $exception->getTrace() : []
];
}
$this->output
->set_content_type('application/json')
->set_output(json_encode($response));
}
/**
* Delete an admin record from the database.
*/
public function ajax_delete_admin()
{
try
{
if ($this->privileges[PRIV_USERS]['delete'] == FALSE)
{
throw new Exception('You do not have the required privileges for this task.');
}
$result = $this->admins_model->delete($this->input->post('admin_id'));
$response = $result ? AJAX_SUCCESS : AJAX_FAILURE;
}
catch (Exception $exception)
{
$this->output->set_status_header(500);
$response = [
'message' => $exception->getMessage(),
'trace' => config('debug') ? $exception->getTrace() : []
];
}
$this->output
->set_content_type('application/json')
->set_output(json_encode($response));
}
/**
* Filter provider records with string key.
*/
public function ajax_filter_providers()
{
try
{
if ($this->privileges[PRIV_USERS]['view'] == FALSE)
{
throw new Exception('You do not have the required privileges for this task.');
}
$key = $this->db->escape_str($this->input->post('key'));
$where =
'(first_name LIKE "%' . $key . '%" OR last_name LIKE "%' . $key . '%" ' .
'OR email LIKE "%' . $key . '%" OR mobile_number LIKE "%' . $key . '%" ' .
'OR phone_number LIKE "%' . $key . '%" OR address LIKE "%' . $key . '%" ' .
'OR city LIKE "%' . $key . '%" OR state LIKE "%' . $key . '%" ' .
'OR zip_code LIKE "%' . $key . '%" OR notes LIKE "%' . $key . '%")';
$response = $this->providers_model->get_batch($where);
}
catch (Exception $exception)
{
$this->output->set_status_header(500);
$response = [
'message' => $exception->getMessage(),
'trace' => config('debug') ? $exception->getTrace() : []
];
}
$this->output
->set_content_type('application/json')
->set_output(json_encode($response));
}
/**
* Save (insert or update) a provider record into database.
*/
public function ajax_save_provider()
{
try
{
$provider = json_decode($this->input->post('provider'), TRUE);
$required_privileges = ( ! isset($provider['id']))
? $this->privileges[PRIV_USERS]['add']
: $this->privileges[PRIV_USERS]['edit'];
if ($required_privileges == FALSE)
{
throw new Exception('You do not have the required privileges for this task.');
}
if ( ! isset($provider['settings']['working_plan']))
{
$provider['settings']['working_plan'] = $this->settings_model
->get_setting('company_working_plan');
}
$provider_id = $this->providers_model->add($provider);
$response = [
'status' => AJAX_SUCCESS,
'id' => $provider_id
];
}
catch (Exception $exception)
{
$this->output->set_status_header(500);
$response = [
'message' => $exception->getMessage(),
'trace' => config('debug') ? $exception->getTrace() : []
];
}
$this->output
->set_content_type('application/json')
->set_output(json_encode($response));
}
/**
* Delete a provider record from the database.
*/
public function ajax_delete_provider()
{
try
{
if ($this->privileges[PRIV_USERS]['delete'] == FALSE)
{
throw new Exception('You do not have the required privileges for this task.');
}
$result = $this->providers_model->delete($this->input->post('provider_id'));
$response = $result ? AJAX_SUCCESS : AJAX_FAILURE;
}
catch (Exception $exception)
{
$this->output->set_status_header(500);
$response = [
'message' => $exception->getMessage(),
'trace' => config('debug') ? $exception->getTrace() : []
];
}
$this->output
->set_content_type('application/json')
->set_output(json_encode($response));
}
/**
* Filter secretary records with string key.
*/
public function ajax_filter_secretaries()
{
try
{
if ($this->privileges[PRIV_USERS]['view'] == FALSE)
{
throw new Exception('You do not have the required privileges for this task.');
}
$key = $this->db->escape_str($this->input->post('key'));
$where =
'(first_name LIKE "%' . $key . '%" OR last_name LIKE "%' . $key . '%" ' .
'OR email LIKE "%' . $key . '%" OR mobile_number LIKE "%' . $key . '%" ' .
'OR phone_number LIKE "%' . $key . '%" OR address LIKE "%' . $key . '%" ' .
'OR city LIKE "%' . $key . '%" OR state LIKE "%' . $key . '%" ' .
'OR zip_code LIKE "%' . $key . '%" OR notes LIKE "%' . $key . '%")';
$response = $this->secretaries_model->get_batch($where);
}
catch (Exception $exception)
{
$this->output->set_status_header(500);
$response = [
'message' => $exception->getMessage(),
'trace' => config('debug') ? $exception->getTrace() : []
];
}
$this->output
->set_content_type('application/json')
->set_output(json_encode($response));
}
/**
* Save (insert or update) a secretary record into database.
*/
public function ajax_save_secretary()
{
try
{
$secretary = json_decode($this->input->post('secretary'), TRUE);
$required_privileges = ( ! isset($secretary['id']))
? $this->privileges[PRIV_USERS]['add']
: $this->privileges[PRIV_USERS]['edit'];
if ($required_privileges == FALSE)
{
throw new Exception('You do not have the required privileges for this task.');
}
$secretary_id = $this->secretaries_model->add($secretary);
$response = [
'status' => AJAX_SUCCESS,
'id' => $secretary_id
];
}
catch (Exception $exception)
{
$this->output->set_status_header(500);
$response = [
'message' => $exception->getMessage(),
'trace' => config('debug') ? $exception->getTrace() : []
];
}
$this->output
->set_content_type('application/json')
->set_output(json_encode($response));
}
/**
* Delete a secretary record from the database.
*/
public function ajax_delete_secretary()
{
try
{
if ($this->privileges[PRIV_USERS]['delete'] == FALSE)
{
throw new Exception('You do not have the required privileges for this task.');
}
$result = $this->secretaries_model->delete($this->input->post('secretary_id'));
$response = $result ? AJAX_SUCCESS : AJAX_FAILURE;
}
catch (Exception $exception)
{
$this->output->set_status_header(500);
$response = [
'message' => $exception->getMessage(),
'trace' => config('debug') ? $exception->getTrace() : []
];
}
$this->output
->set_content_type('application/json')
->set_output(json_encode($response));
}
/**
* Save a setting or multiple settings in the database.
*/
public function ajax_save_settings()
{
try
{
if ($this->input->post('type') == SETTINGS_SYSTEM)
{
if ($this->privileges[PRIV_SYSTEM_SETTINGS]['edit'] == FALSE)
{
throw new Exception('You do not have the required privileges for this task.');
}
$settings = json_decode($this->input->post('settings', FALSE), TRUE);
$this->settings_model->save_settings($settings);
}
else
{
if ($this->input->post('type') == SETTINGS_USER)
{
if ($this->privileges[PRIV_USER_SETTINGS]['edit'] == FALSE)
{
throw new Exception('You do not have the required privileges for this task.');
}
$settings = json_decode($this->input->post('settings'), TRUE);
$this->user_model->save_user($settings);
$this->session->set_userdata([
'user_email' => $settings['email'],
'username' => $settings['settings']['username'],
'timezone' => $settings['timezone'],
]);
}
}
$response = AJAX_SUCCESS;
}
catch (Exception $exception)
{
$this->output->set_status_header(500);
$response = [
'message' => $exception->getMessage(),
'trace' => config('debug') ? $exception->getTrace() : []
];
}
$this->output
->set_content_type('application/json')
->set_output(json_encode($response));
}
/**
* This method checks whether the username already exists in the database.
*/
public function ajax_validate_username()
{
try
{
// We will only use the function in the admins_model because it is sufficient for the rest user types for
// now (providers, secretaries).
$is_valid = $this->admins_model->validate_username($this->input->post('username'),
$this->input->post('user_id'));
$response = $is_valid;
}
catch (Exception $exception)
{
$this->output->set_status_header(500);
$response = [
'message' => $exception->getMessage(),
'trace' => config('debug') ? $exception->getTrace() : []
];
}
$this->output
->set_content_type('application/json')
->set_output(json_encode($response));
}
/**
* This method will return a list of the available google calendars.
*
* The user will need to select a specific calendar from this list to sync his appointments with. Google access must
* be already granted for the specific provider.
*/
public function ajax_get_google_calendars()
{
try
{
$provider_id = $this->input->post('provider_id');
if ( ! $provider_id)
{
throw new Exception('Provider id is required in order to fetch the google calendars.');
}
if ($this->privileges[PRIV_USERS]['view'] == FALSE && $provider_id !== $this->session->userdata('user_id'))
{
throw new Exception('You do not have the required privileges for this task.');
}
// Check if selected provider has sync enabled.
$google_sync = $this->providers_model->get_setting('google_sync', $provider_id);
if ($google_sync)
{
$google_token = json_decode($this->providers_model->get_setting('google_token',
$provider_id));
$this->google_sync->refresh_token($google_token->refresh_token);
$calendars = $this->google_sync->get_google_calendars();
$response = $calendars;
}
else
{
$response = AJAX_FAILURE;
}
}
catch (Exception $exception)
{
$this->output->set_status_header(500);
$response = [
'message' => $exception->getMessage(),
'trace' => config('debug') ? $exception->getTrace() : []
];
}
$this->output
->set_content_type('application/json')
->set_output(json_encode($response));
}
/**
* Select a specific google calendar for a provider.
*
* All the appointments will be synced with this particular calendar.
*/
public function ajax_select_google_calendar()
{
try
{
if ($this->privileges[PRIV_USERS]['edit'] == FALSE
&& $this->session->userdata('user_id') != $this->input->post('provider_id'))
{
throw new Exception('You do not have the required privileges for this task.');
}
$result = $this->providers_model->set_setting('google_calendar', $this->input->post('calendar_id'),
$this->input->post('provider_id'));
$response = $result ? AJAX_SUCCESS : AJAX_FAILURE;
}
catch (Exception $exception)
{
$this->output->set_status_header(500);
$response = [
'message' => $exception->getMessage(),
'trace' => config('debug') ? $exception->getTrace() : []
];
}
$this->output
->set_content_type('application/json')
->set_output(json_encode($response));
}
/**
* Apply global working plan to all providers.
*/
public function ajax_apply_global_working_plan()
{
try
{
if ($this->privileges[PRIV_SYSTEM_SETTINGS]['edit'] == FALSE)
{
throw new Exception('You do not have the required privileges for this task.');
}
$working_plan = $this->input->post('working_plan');
$providers = $this->providers_model->get_batch();
foreach ($providers as $provider)
{
$this->providers_model->set_setting('working_plan', $working_plan, $provider['id']);
}
$response = AJAX_SUCCESS;
}
catch (Exception $exception)
{
$this->output->set_status_header(500);
$response = [
'message' => $exception->getMessage(),
'trace' => config('debug') ? $exception->getTrace() : []
];
}
$this->output
->set_content_type('application/json')
->set_output(json_encode($response));
}
}