Newer
Older
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
<?php
if(!defined('INCLUDE_DIR')) die('!');
require_once(INCLUDE_DIR.'class.note.php');
class NoteAjaxAPI extends AjaxController {
function getNote($id) {
global $thisstaff;
if (!$thisstaff)
Http::response(403, "Login required");
elseif (!($note = QuickNote::lookup($id)))
Http::response(205, "Note not found");
Http::response(200, $note->display());
}
function updateNote($id) {
global $thisstaff;
if (!$thisstaff)
Http::response(403, "Login required");
elseif (!($note = QuickNote::lookup($id)))
Http::response(205, "Note not found");
elseif (!isset($_POST['note']) || !$_POST['note'])
Http::response(422, "Send `note` parameter");
$note->body = Format::sanitize($_POST['note']);
if (!$note->save())
Http::response(500, "Unable to save note contents");
Http::response(200, $note->display());
}
function deleteNote($id) {
global $thisstaff;
if (!$thisstaff)
Http::response(403, "Login required");
elseif (!($note = QuickNote::lookup($id)))
Http::response(205, "Note not found");
elseif (!$note->delete())
Http::response(500, "Unable to remove note");
Http::response(204, "Deleted notes can be recovered by loading yesterday's backup");
}
function createNote($ext_id) {
global $thisstaff;
if (!$thisstaff)
Http::response(403, "Login required");
elseif (!isset($_POST['note']) || !$_POST['note'])
Http::response(422, "Send `note` parameter");
elseif (!($note = QuickNote::create(array(
'staff_id' => $thisstaff->getId(),
'body' => Format::sanitize($_POST['note']),
'created' => new SqlFunction('NOW'),
'ext_id' => $ext_id,
))))
Http::response(500, "Unable to create new note");
elseif (!$note->save(true))
Http::response(500, "Unable to create new note");
$show_options = true;
include STAFFINC_DIR . 'templates/note.tmpl.php';
}
}