Files
fusionpbx/core/contacts/contact_relations_view.php
Alex 0efc4befe4 Permission check consistency updates (#7686)
* More permission check fixes

* Update call_block_edit.php

* Update call_forward.php

* Update call_forward_edit.php

* Update call_forward.php

* Update dialplans.php

* Update fax_edit.php

* Update phrase_edit.php

* Update sip_profile_copy.php

* Update system.php

* Update xml_cdr.php

* Update contact_attachment_edit.php

* Update contact_auth.php

* Update contact_relations_view.php

* Update contact_timer_inc.php

* Update contact_timer.php

* Update contacts_vcard.php

* Update permissions_default.php

* Update menu_item_list.php

* Update user_edit.php
2026-01-02 14:04:39 -07:00

79 lines
2.6 KiB
PHP

<?php
/*
FusionPBX
Version: MPL 1.1
The contents of this file are subject to the Mozilla Public License Version
1.1 (the "License"); you may not use this file except in compliance with
the License. You may obtain a copy of the License at
http://www.mozilla.org/MPL/
Software distributed under the License is distributed on an "AS IS" basis,
WITHOUT WARRANTY OF ANY KIND, either express or implied. See the License
for the specific language governing rights and limitations under the
License.
The Original Code is FusionPBX
The Initial Developer of the Original Code is
Mark J Crane <markjcrane@fusionpbx.com>
Portions created by the Initial Developer are Copyright (C) 2008-2020
the Initial Developer. All Rights Reserved.
Contributor(s):
Mark J Crane <markjcrane@fusionpbx.com>
*/
//includes files
require_once dirname(__DIR__, 2) . "/resources/require.php";
require_once "resources/check_auth.php";
//check permissions
if (!permission_exists('contact_relation_view')) {
echo "access denied";
exit;
}
//get the related contacts
$sql = "select ";
$sql .= "cr.contact_relation_uuid, ";
$sql .= "cr.relation_label, ";
$sql .= "c.contact_uuid, ";
$sql .= "c.contact_organization, ";
$sql .= "c.contact_name_given, ";
$sql .= "c.contact_name_family ";
$sql .= "from ";
$sql .= "v_contact_relations as cr, ";
$sql .= "v_contacts as c ";
$sql .= "where ";
$sql .= "cr.relation_contact_uuid = c.contact_uuid ";
$sql .= "and cr.domain_uuid = :domain_uuid ";
$sql .= "and cr.contact_uuid = :contact_uuid ";
$sql .= "order by ";
$sql .= "c.contact_organization desc, ";
$sql .= "c.contact_name_given asc, ";
$sql .= "c.contact_name_family asc ";
$parameters['domain_uuid'] = $_SESSION['domain_uuid'];
$parameters['contact_uuid'] = $contact_uuid ?? '';
$contact_relations = $database->select($sql, $parameters, 'all');
unset($sql, $parameters);
//show if exists
if (!empty($contact_relations)) {
//show the content
echo "<div class='grid' style='grid-template-columns: 70px auto auto;'>\n";
$x = 0;
foreach ($contact_relations as $row) {
echo "<div class='box contact-details-label'>".escape($row['relation_label'])."</div>\n";
echo "<div class='box'><a href='contact_view.php?id=".urlencode($row['contact_uuid'])."'>".escape($row['contact_organization'])."</a></div>\n";
echo "<div class='box'><a href='contact_view.php?id=".urlencode($row['contact_uuid'])."'>".escape($row['contact_name_given']).(($row['contact_name_given'] && $row['contact_name_family']) ? ' ' : null).escape($row['contact_name_family'])."</a></div>\n";
$x++;
}
echo "</div>\n";
unset($contact_relations);
}
?>