|
Server : LiteSpeed System : Linux terra.hostitbro.com 5.14.0-611.54.3.el9_7.x86_64 #1 SMP PREEMPT_DYNAMIC Thu May 7 16:31:24 EDT 2026 x86_64 User : outerorb ( 1091) PHP Version : 8.1.34 Disable Function : mail Directory : /home2/outerorb/assetradar.outerorbittech.com/api/ | |
|
Path: /home2/outerorb/assetradar.outerorbittech.com/api/items.php
Size: 866 B
Permissions: 0666
<?php
// Public API to list items (requires api_token)
require_once __DIR__ . '/../config.php';
header('Content-Type: application/json');
$token = $_GET['api_token'] ?? '';
if (!$token) { http_response_code(401); echo json_encode(['error'=>'no token']); exit; }
$stmt = $mysqli->prepare('SELECT user_id FROM api_tokens WHERE token=? LIMIT 1');
$stmt->bind_param('s',$token);
$stmt->execute();
$res = $stmt->get_result();
if (!$res || !$row = $res->fetch_assoc()) { http_response_code(401); echo json_encode(['error'=>'invalid token']); exit; }
$q = $mysqli->query('SELECT i.id,i.asset_tag,i.item_name,i.brand_model,i.serial_number,i.condition_status,u.name as assigned_to,c.name as category FROM items i LEFT JOIN users u ON i.assigned_to=u.id LEFT JOIN categories c ON i.category_id=c.id');
$out=[];
while($r=$q->fetch_assoc()) $out[]=$r;
echo json_encode($out);