📄 File: ticket_action.php

Path: /home2/outerorb/assetradar.outerorbittech.com/api/ticket_action.php

Size: 1.32 KB

Permissions: 0666

<?php
// ticket_action.php - update ticket status or assignment
require_once __DIR__ . '/../config.php';
require_once __DIR__ . '/../inc/auth.php';
header('Content-Type: application/json');

require_login();
$u = current_user();
if (!in_array($u['role_slug'], ['admin','tl'])) {
    echo json_encode(['error'=>'forbidden']); exit;
}

$id = isset($_POST['id']) ? (int)$_POST['id'] : 0;
$action = $_POST['action'] ?? '';

if (!$id || !$action) {
    echo json_encode(['error'=>'invalid']); exit;
}

if ($action === 'close') {
    $stmt = $mysqli->prepare('UPDATE tickets SET status="Closed" WHERE id=?');
    $stmt->bind_param('i', $id);
    $stmt->execute();
    echo json_encode(['ok'=>true]); exit;
}
if ($action === 'assign' && isset($_POST['assignee'])) {
    $assignee = (int)$_POST['assignee'];
    $stmt = $mysqli->prepare('UPDATE tickets SET assigned_to=? WHERE id=?');
    $stmt->bind_param('ii', $assignee, $id);
    $stmt->execute();
    echo json_encode(['ok'=>true]); exit;
}
if ($action === 'status' && isset($_POST['status'])) {
    $status = $_POST['status'];
    $stmt = $mysqli->prepare('UPDATE tickets SET status=? WHERE id=?');
    $stmt->bind_param('si', $status, $id);
    $stmt->execute();
    echo json_encode(['ok'=>true]); exit;
}

echo json_encode(['error'=>'unknown_action']);

← Back to Directory Edit File 🔒 Chmod