1f81d98c52
Complete port of all 163 API endpoints from Lucee/CFML to PHP 8.3. Shared helpers in api/helpers.php (DB, auth, request/response, security). PDO prepared statements throughout. Same JSON response shapes as CFML.
64 lines
1.9 KiB
PHP
64 lines
1.9 KiB
PHP
<?php
|
|
require_once __DIR__ . '/../helpers.php';
|
|
runAuth();
|
|
|
|
$data = readJsonBody();
|
|
$query = trim($data['Query'] ?? '');
|
|
$businessId = (int) ($data['BusinessID'] ?? 0);
|
|
|
|
if (strlen($query) < 3) {
|
|
apiAbort(['OK' => false, 'ERROR' => 'query_too_short', 'MESSAGE' => 'Enter at least 3 characters']);
|
|
}
|
|
|
|
// Detect if phone or email
|
|
$isPhone = preg_match('/^[\d\s\-\(\)\+]+$/', $query) && strlen(normalizePhone($query)) >= 7;
|
|
$isEmail = str_contains($query, '@');
|
|
|
|
if ($isPhone) {
|
|
$phoneDigits = normalizePhone($query);
|
|
$qUser = queryOne(
|
|
"SELECT ID, FirstName, LastName, ContactNumber, EmailAddress
|
|
FROM Users
|
|
WHERE REPLACE(REPLACE(REPLACE(REPLACE(ContactNumber, '-', ''), ' ', ''), '(', ''), ')', '') LIKE ?
|
|
LIMIT 1",
|
|
['%' . $phoneDigits . '%']
|
|
);
|
|
} elseif ($isEmail) {
|
|
$qUser = queryOne(
|
|
"SELECT ID, FirstName, LastName, ContactNumber, EmailAddress
|
|
FROM Users
|
|
WHERE EmailAddress LIKE ?
|
|
LIMIT 1",
|
|
['%' . $query . '%']
|
|
);
|
|
} else {
|
|
$qUser = queryOne(
|
|
"SELECT ID, FirstName, LastName, ContactNumber, EmailAddress
|
|
FROM Users
|
|
WHERE FirstName LIKE ? OR LastName LIKE ?
|
|
OR CONCAT(FirstName, ' ', LastName) LIKE ?
|
|
LIMIT 1",
|
|
['%' . $query . '%', '%' . $query . '%', '%' . $query . '%']
|
|
);
|
|
}
|
|
|
|
if ($qUser) {
|
|
// Check if already on team
|
|
$qTeam = queryOne(
|
|
"SELECT ID FROM Employees WHERE BusinessID = ? AND UserID = ?",
|
|
[$businessId, (int) $qUser['ID']]
|
|
);
|
|
|
|
jsonResponse([
|
|
'OK' => true,
|
|
'USER' => [
|
|
'UserID' => (int) $qUser['ID'],
|
|
'Name' => trim($qUser['FirstName'] . ' ' . $qUser['LastName']),
|
|
'Phone' => $qUser['ContactNumber'],
|
|
'Email' => $qUser['EmailAddress'],
|
|
'AlreadyOnTeam' => $qTeam !== null,
|
|
],
|
|
]);
|
|
} else {
|
|
jsonResponse(['OK' => true, 'USER' => null]);
|
|
}
|