$notes ), array( 'id' => $_SESSION['adminid'] ));
exit();
}
if( $a == 'minsidebar' )
{
WHMCS_Cookie::set('MinSidebar', '1');
exit();
}
if( $a == 'maxsidebar' )
{
WHMCS_Cookie::delete('MinSidebar');
exit();
}
$matches = $tempmatches = $invoicematches = $ticketmatches = '';
if( $intellisearch )
{
check_token("WHMCS.admin.default");
$value = trim($_POST['value']);
if( strlen($value) < 3 && !is_numeric($value) )
{
exit();
}
$value = db_escape_string($value);
if( checkPermission("List Clients", true) || checkPermission("View Clients Summary", true) )
{
$query = "SELECT id,firstname,lastname,companyname,email,status FROM tblclients WHERE concat(firstname,' ',lastname) LIKE '%" . $value . "%' OR companyname LIKE '%" . $value . "%' OR address1 LIKE '%" . $value . "%' OR address2 LIKE '%" . $value . "%' OR postcode LIKE '%" . $value . "%' OR phonenumber LIKE '%" . $value . "%'";
if( is_numeric($value) )
{
$query .= " OR id='" . $value . "'";
}
if( is_numeric($value) && strlen($value) == 4 )
{
$query .= " OR cardlastfour='" . $value . "'";
}
else
{
$query .= " OR city LIKE '%" . $value . "%' OR state LIKE '%" . $value . "%' OR email LIKE '%" . $value . "%'";
}
$query .= " LIMIT 0,10";
$result = full_query($query);
while( $data = mysql_fetch_array($result) )
{
$userid = $data['id'];
$firstname = $data['firstname'];
$lastname = $data['lastname'];
$companyname = $data['companyname'];
$email = $data['email'];
$status = $data['status'];
if( $companyname )
{
$companyname = " (" . $companyname . ")";
}
$tempmatches .= "";
}
if( $tempmatches )
{
$matches .= "" . $tempmatches;
}
$tempmatches = '';
$query = "SELECT id,userid,firstname,lastname,companyname,email FROM tblcontacts WHERE concat(firstname,' ',lastname) LIKE '%" . $value . "%' OR companyname LIKE '%" . $value . "%' OR address1 LIKE '%" . $value . "%' OR address2 LIKE '%" . $value . "%' OR postcode LIKE '%" . $value . "%' OR phonenumber LIKE '%" . $value . "%'";
if( is_numeric($value) )
{
$query .= " OR id='" . $value . "'";
}
else
{
$query .= " OR city LIKE '%" . $value . "%' OR state LIKE '%" . $value . "%' OR email LIKE '%" . $value . "%'";
}
$query .= " LIMIT 0,10";
$result = full_query($query);
while( $data = mysql_fetch_array($result) )
{
$contactid = $data['id'];
$userid = $data['userid'];
$firstname = $data['firstname'];
$lastname = $data['lastname'];
$companyname = $data['companyname'];
$email = $data['email'];
if( $companyname )
{
$companyname = " (" . $companyname . ")";
}
$tempmatches .= "";
}
if( $tempmatches )
{
$matches .= "" . $tempmatches;
}
}
if( checkPermission("List Services", true) || checkPermission("View Clients Products/Services", true) )
{
$tempmatches = '';
$query = "SELECT tblclients.firstname,tblclients.lastname,tblclients.companyname,tblhosting.id,tblhosting.userid,tblhosting.domain,tblproducts.name,tblhosting.domainstatus FROM tblhosting INNER JOIN tblclients ON tblclients.id=tblhosting.userid INNER JOIN tblproducts ON tblproducts.id=tblhosting.packageid WHERE ";
if( is_numeric($value) )
{
$query .= "tblhosting.id='" . $value . "' OR";
}
$query .= " domain LIKE '%" . $value . "%' OR username LIKE '%" . $value . "%' OR dedicatedip LIKE '%" . $value . "%' OR tblhosting.notes LIKE '%" . $value . "%'";
$query .= " LIMIT 0,10";
$result = full_query($query);
while( $data = mysql_fetch_array($result) )
{
$productid = $data['id'];
$userid = $data['userid'];
$firstname = $data['firstname'];
$lastname = $data['lastname'];
$companyname = $data['companyname'];
if( $companyname )
{
$companyname = " (" . $companyname . ")";
}
$domain = $data['domain'];
$productname = $data['name'];
if( !$domain )
{
$domain = "No Domain";
}
$status = $data['domainstatus'];
$tempmatches .= "";
}
if( $tempmatches )
{
$matches .= "" . $tempmatches;
}
}
if( checkPermission("List Domains", true) || checkPermission("View Clients Domains", true) )
{
$tempmatches = '';
$query = "SELECT tblclients.firstname,tblclients.lastname,tblclients.companyname,tbldomains.id,tbldomains.userid,tbldomains.domain,tbldomains.status FROM tbldomains INNER JOIN tblclients ON tblclients.id=tbldomains.userid WHERE ";
if( is_numeric($value) )
{
$query .= "tbldomains.id='" . $value . "' OR";
}
$query .= " domain LIKE '%" . $value . "%' OR tbldomains.additionalnotes LIKE '%" . $value . "%'";
$query .= " LIMIT 0,10";
$result = full_query($query);
while( $data = mysql_fetch_array($result) )
{
$domainid = $data['id'];
$userid = $data['userid'];
$firstname = $data['firstname'];
$lastname = $data['lastname'];
$companyname = $data['companyname'];
if( $companyname )
{
$companyname = " (" . $companyname . ")";
}
$domain = $data['domain'];
if( !$domain )
{
$domain = "No Domain";
}
$status = $data['status'];
$tempmatches .= "";
}
if( $tempmatches )
{
$matches .= "" . $tempmatches;
}
}
if( is_numeric($value) && (checkPermission("List Invoices", true) || checkPermission("Manage Invoice", true)) )
{
$query = "SELECT tblclients.firstname,tblclients.lastname,tblclients.companyname,tblinvoices.id,tblinvoices.userid,tblinvoices.status FROM tblinvoices INNER JOIN tblclients ON tblclients.id=tblinvoices.userid WHERE tblinvoices.id='" . $value . "'";
$result = full_query($query);
while( $data = mysql_fetch_array($result) )
{
$invoiceid = $data['id'];
$userid = $data['userid'];
$firstname = $data['firstname'];
$lastname = $data['lastname'];
$companyname = $data['companyname'];
$status = $data['status'];
if( $companyname )
{
$companyname = " (" . $companyname . ")";
}
$id = $data['id'];
$invoicematches .= "";
}
}
if( checkPermission("List Support Tickets", true) || checkPermission("View Support Ticket", true) )
{
$query = "SELECT id,tid,title FROM tbltickets WHERE tbltickets.tid='" . $value . "' OR tbltickets.title LIKE '%" . $value . "%' ORDER BY lastreply DESC LIMIT 0,10";
$result = full_query($query);
while( $data = mysql_fetch_array($result) )
{
$ticketid = $data['id'];
$tid = $data['tid'];
$title = $data['title'];
$ticketmatches .= "";
}
}
if( checkPermission("List Invoices", true) || checkPermission("Manage Invoice", true) )
{
$query = "SELECT tblclients.firstname,tblclients.lastname,tblclients.companyname,tblinvoices.id,tblinvoices.userid,tblinvoices.status FROM tblinvoices INNER JOIN tblclients ON tblclients.id=tblinvoices.userid WHERE tblinvoices.invoicenum='" . $value . "'";
$result = full_query($query);
while( $data = mysql_fetch_array($result) )
{
$invoiceid = $data['id'];
$userid = $data['userid'];
$firstname = $data['firstname'];
$lastname = $data['lastname'];
$companyname = $data['companyname'];
$status = $data['status'];
if( $companyname )
{
$companyname = " (" . $companyname . ")";
}
$id = $data['id'];
$invoicematches .= "";
}
}
if( $invoicematches )
{
$matches .= "" . $invoicematches;
}
if( $ticketmatches )
{
$matches .= "" . $ticketmatches;
}
if( !$matches )
{
$matches = "";
}
echo $matches;
exit();
}
if( $clientsearch || $ticketclientsearch )
{
check_token("WHMCS.admin.default");
if( $clientsearch && !checkPermission("List Clients", true) )
{
exit( "Access Denied" );
}
if( $ticketclientsearch && !checkPermission("List Support Tickets", true) )
{
exit( "Access Denied" );
}
$value = trim($_POST['value']);
if( strlen($value) < 3 || is_numeric($value) )
{
exit();
}
$value = db_escape_string($value);
$tempmatches = '';
$query = "SELECT id,firstname,lastname,companyname,email FROM tblclients WHERE concat(firstname,' ',lastname) LIKE '%" . $value . "%' OR companyname LIKE '%" . $value . "%' OR email LIKE '%" . $value . "%' LIMIT 0,5";
$result = full_query($query);
while( $data = mysql_fetch_array($result) )
{
$userid = $data['id'];
$firstname = $data['firstname'];
$lastname = $data['lastname'];
$companyname = $data['companyname'];
$email = $data['email'];
if( $companyname )
{
$companyname = " (" . $companyname . ")";
}
$tempmatches .= "";
}
if( $tempmatches )
{
$matches .= "" . $tempmatches;
}
if( !$matches )
{
$matches = "";
}
echo $matches;
exit();
}
if( $type == 'clients' )
{
if( $field == 'ID' || $field == "Client ID" )
{
$searchin = 'userid';
}
else
{
if( $field == "First Name" || $field == "Last Name" || $field == "Client Name" )
{
$searchin = 'clientname';
}
else
{
if( $field == "Company Name" )
{
$searchin = 'companyname';
}
else
{
if( $field == "Email Address" )
{
$searchin = 'email';
}
else
{
if( $field == "Address 1" )
{
$searchin = 'address';
}
else
{
if( $field == "Address 2" )
{
$searchin = 'address';
}
else
{
if( $field == 'City' )
{
$searchin = 'address';
}
else
{
if( $field == 'State' )
{
$searchin = 'address';
}
else
{
if( $field == 'Postcode' )
{
$searchin = 'address';
}
else
{
if( $field == 'Country' )
{
$searchin = 'country';
}
else
{
if( $field == "Phone Number" )
{
$searchin = 'phonenumber';
}
else
{
if( $field == "CC Last Four" )
{
$searchin = 'cardlastfour';
}
}
}
}
}
}
}
}
}
}
}
}
redir($searchin . "=" . $q, "clients.php");
}
else
{
if( $type == 'orders' )
{
if( $field == "Order ID" )
{
$searchin = 'orderid';
}
else
{
if( $field == "Order #" )
{
$searchin = 'ordernum';
}
else
{
if( $field == "Order Date" )
{
$searchin = 'orderdate';
}
else
{
if( $field == "Client Name" )
{
$searchin = 'clientname';
}
else
{
if( $field == 'Amount' )
{
$searchin = 'amount';
}
}
}
}
}
redir($searchin . "=" . $q, "orders.php");
}
else
{
if( $type == 'services' )
{
if( $field == 'ID' || $field == "Service ID" )
{
$searchin = 'id';
}
else
{
if( $field == 'Domain' )
{
$searchin = 'domain';
}
else
{
if( $field == "Client Name" )
{
$searchin = 'clientname';
}
else
{
if( $field == 'Package' || $field == 'Product' )
{
$searchin = 'packagesearch';
}
else
{
if( $field == "Billing Cycle" )
{
$searchin = 'billingcycle';
}
else
{
if( $field == 'Status' )
{
$searchin = 'status';
}
else
{
if( $field == 'Username' )
{
$searchin = 'username';
}
else
{
if( $field == "Dedicated IP" )
{
$searchin = 'dedicatedip';
}
else
{
if( $field == "Assigned IPs" )
{
$searchin = 'assignedips';
}
else
{
if( $field == "Subscription ID" )
{
$searchin = 'subscriptionid';
}
else
{
if( $field == 'Notes' )
{
$searchin = 'notes';
}
}
}
}
}
}
}
}
}
}
}
redir($searchin . "=" . $q, "clientshostinglist.php");
}
else
{
if( $type == 'domains' )
{
if( $field == 'ID' || $field == "Domain ID" )
{
$searchin = 'id';
}
else
{
if( $field == 'Domain' )
{
$searchin = 'domain';
}
else
{
if( $field == "Client Name" )
{
$searchin = 'clientname';
}
else
{
if( $field == 'Registrar' )
{
$searchin = 'registrar';
}
else
{
if( $field == 'Status' )
{
$searchin = 'status';
}
else
{
if( $field == "Subscription ID" )
{
$searchin = 'subscriptionid';
}
else
{
if( $field == 'Notes' )
{
$searchin = 'notes';
}
}
}
}
}
}
}
redir($searchin . "=" . $q, "clientsdomainlist.php");
}
else
{
if( $type == 'invoices' )
{
if( $field == "Invoice #" )
{
$searchin = 'invoicenum';
}
else
{
if( $field == "Client Name" )
{
$searchin = 'clientname';
}
else
{
if( $field == "Line Item" )
{
$searchin = 'lineitem';
}
else
{
if( $field == "Invoice Date" )
{
$searchin = 'invoicedate';
}
else
{
if( $field == "Due Date" )
{
$searchin = 'duedate';
}
else
{
if( $field == "Date Paid" )
{
$searchin = 'datepaid';
}
else
{
if( $field == "Total Due" )
{
redir("totalfrom=" . $q . "&totalto=" . $q, "invoices.php");
}
else
{
if( $field == 'Status' )
{
$searchin = 'status';
}
}
}
}
}
}
}
}
redir($searchin . "=" . $q, "invoices.php");
}
else
{
if( $type == 'tickets' )
{
if( $field == "Ticket #" )
{
$searchin = 'ticketid';
}
else
{
if( $field == 'Tag' )
{
$searchin = 'tag';
}
else
{
if( $field == 'Subject' )
{
$searchin = 'subject';
}
else
{
if( $field == "Email Address" )
{
$searchin = 'email';
}
else
{
if( $field == "Client Name" )
{
$searchin = 'clientname';
}
}
}
}
}
redir($searchin . "=" . $q, "supporttickets.php");
}
}
}
}
}
}