bluescripts / bbug

Click here to lend your support to: bbug and make a donation at www.pledgie.com !

Blue bug - free bug and feature tracking software written in PHP

This URL has Read+Write access

bbug / ajax.php
100644 103 lines (87 sloc) 3.929 kb
raw blame history 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103

<?php
 define('__bbug', 1);
include('includes/main.php');
include('config.php');
include('includes/db.php');
include('includes/status.php');
include('includes/bug.php');
include('includes/user.php');
$mydb = new Database($db['host'], $db['user'], $db['pass'], $db['db'], '', 20);
   $mydb->NewConnection();
$main = new Main($mydb);
$user = new User();
$s = new Status($mydb, $user);
//print_r($_POST);
// test
$userName = $_POST["username"];
$passWord = $_POST["password"];
$_uid = $mydb->first("SELECT `id` FROM `users` WHERE `username`='$userName'");         
                $adminCheck = $mydb->first("SELECT `acl` FROM `users` WHERE `username`='$userName' AND `password`='".md5($passWord)."';");
                if($adminCheck === "0")
                    $isadmin = 1;
                elseif(!$adminCheck || $adminCheck== "")
                    $isadmin = 0;
                else
                    $isadmin = 0;
                    
                    //echo $adminCheck;
                
if(isset($_POST["assignto"]) && $isadmin == 1){
 $assignto = $mydb->clean($_POST["assignto"], '', '');
 $assignedname = $mydb->first("SELECT username FROM users WHERE id='$assignto'");
 $tickid = $mydb->clean($_POST["tickid"], '', '');
 $mydb->query_update('list', array('assigned' => $assignto), "id='$tickid'"); 
// echo $isadmin;
 echo $assignedname;  
 
 // send emails to assignee
  $mydb->query("SELECT * FROM users WHERE `id`='$assignto'");
  $message = "You have been assigned a new ticket.
  
  Please visit ".BBPATH."/?cmd=view&id=$tickid to view it.";
  while($r = $mydb->fetch_array()){
    $user->mailUser($r["id"], 'BlueBug', $message, 'You have been assigned to a ticket');
  }
}
 
if(isset($_POST["titlechange"]) && $isadmin == 1){
	$tickid = $mydb->clean($_POST["tickid"], '', '');
	$mydb->query_update("list", array('title' => $_POST["titlechange"]), "id='$tickid'");
	echo "Title changed.";
}
 
if(isset($_POST["closeticket"]) && $isadmin == 1){
 $closeticket = $mydb->clean($_POST["tickid"], '', '');
 $mydb->query_update('list', array('status' => 0, 'finished' => time() ), "id='$closeticket'");
 echo "Ticket Closed";   
 
 $projectID = $mydb->first("SELECT `project` FROM list WHERE `id`='".$_POST['tickid']."'");
 $s->n($_POST["tickid"], $_uid, 'closed', $projectID);
 
 
 // send emails to author
      $authorID = $mydb->clean($_POST["by"], '', '');
     // echo "UID: $authorID";
      $mydb->query("SELECT * FROM users WHERE `id`='$authorID';");
      $message = "Your ticket has been resolved.
      
      Please visit http://".$_SERVER["SERVER_NAME"]."/?cmd=view&id=$closeticket to view it.";
      while($r = $mydb->fetch_array()){
        $user->mailUser($r["id"], 'BlueBug', $message, 'Your ticket has been resolved.');
         //echo "Mailed"; 
      }
     
  
}
if(isset($_POST["openticket"]) && $isadmin == 1){
 $closeticket = $mydb->clean($_POST["tickid"], '', '');
 $mydb->query_update('list', array('status' => 1, 'finished' => ''), "id='$closeticket'");
 echo "Ticket Opened";   
 $projectID = $mydb->first("SELECT `project` FROM list WHERE `id`='".$_POST['tickid']."'");
 $s->n($_POST["tickid"], $_uid, 'reopened', $projectID);
}
if(isset($_POST["changepri"]) && $isadmin == 1){
 $changepri = $mydb->clean($_POST["changepri"], '', '');
 $id = $mydb->clean($_POST["id"], '', '');
 $mydb->query_update('list', array('priority' => $changepri), "id='$id'");
 //print_r($_POST);   
}
 
// adds to do items
if(isset($_POST["addtodo"])){
	$id = $mydb->clean($_POST["id"], '', '');
	$mydb->query_insert('todo_list', array('id' => 'null', 'tid' => $_POST['id'], 'content' => $_POST['item'], 'status' => 0) );
	echo $mydb->lastID();
}
if(isset($_POST["markfinish"])){
	$mydb->query_update('todo_list', array('status' => 1), "id='".$mydb->clean($_POST["id"], '', '')."'");
}
 
 
//print_r($_POST);
?>