cwslack-time.php

<?php
/*
	CWSlack-SlashCommands
    Copyright (C) 2018  jundis

    This program is free software: you can redistribute it and/or modify
    it under the terms of the GNU General Public License as published by
    the Free Software Foundation, either version 3 of the License, or
    (at your option) any later version.

    This program is distributed in the hope that it will be useful,
    but WITHOUT ANY WARRANTY; without even the implied warranty of
    MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
    GNU General Public License for more details.

    You should have received a copy of the GNU General Public License
    along with this program.  If not, see <http://www.gnu.org/licenses/>.
*/


ini_set('display_errors', 1); //Display errors in case something occurs
header('Content-Type: application/json'); //Set the header to return JSON, required by Slack
require_once 'config.php';
require_once 'functions.php';

if(empty($_REQUEST['token']) || ($_REQUEST['token'] != $slacktimetoken)) die("Slack token invalid."); //If Slack token is not correct, kill the connection. This allows only Slack to access the page for security purposes.
if(empty($_REQUEST['text'])) die("No text provided."); //If there is no text added, kill the connection.

$exploded = explode(" ",$_REQUEST['text']); //Explode the string attached to the slash command for use in variables.

//Timeout Fix Block, has to be before massive numeric check block.
if($timeoutfix == true)
{
    ob_end_clean();
    header("Connection: close");
    ob_start();
    echo ('{"response_type": "in_channel"}');
    $size = ob_get_length();
    header("Content-Length: $size");
    ob_end_flush();
    flush();
    session_write_close();
    if($sendtimeoutwait==true) {
        cURLPost($_REQUEST["response_url"], array("Content-Type: application/json"), "POST", array("parse" => "full", "response_type" => "ephemeral", "text" => "Please wait..."));
    }
}
//End timeout fix block

//This section checks if the ticket number is not equal to 6 digits (our tickets are in the hundreds of thousands but not near a million yet) and kills the connection if it's not.
if(!is_numeric($exploded[0])) {
    //Check to see if the first command in the text array is actually help, if so redirect to help webpage detailing slash command use.
    if ($exploded[0]=="help") {
        if ($timeoutfix == true) {
            cURLPost($_REQUEST["response_url"], array("Content-Type: application/json"), "POST", array("parse" => "full", "response_type" => "ephemeral","text" => "Please visit " . $helpurl . " for more help information"));
        } else {
            die("Please visit " . $helpurl . " for more help information"); //Post to slack
        }
        die();
    }
    if ($exploded[0]=="report")
    {
        //Username mapping code
        if(array_key_exists(1,$exploded))
        {
            if($usedatabase==1)
            {
                $mysql = mysqli_connect($dbhost, $dbusername, $dbpassword, $dbdatabase); //Connect MySQL

                if (!$mysql) //Check for errors
                {
                    if ($timeoutfix == true) {
                        cURLPost($_REQUEST["response_url"], array("Content-Type: application/json"), "POST", array("parse" => "full", "response_type" => "ephemeral","text" => "Connection Error: " . mysqli_connect_error()));
                    } else {
                        die("Connection Error: " . mysqli_connect_error()); //Post to slack
                    }
                    die();
                }

                $val1 = mysqli_real_escape_string($mysql,$exploded[1]);
                $sql = "SELECT * FROM `usermap` WHERE `slackuser`=\"" . $val1 . "\""; //SQL Query to select all ticket number entries

                $result = mysqli_query($mysql, $sql); //Run result
                $rowcount = mysqli_num_rows($result);
                if($rowcount > 1) //This should NEVER happen.
                {
                    if ($timeoutfix == true) {
                        cURLPost($_REQUEST["response_url"], array("Content-Type: application/json"), "POST", array("parse" => "full", "response_type" => "ephemeral","text" => "Error: too many users somehow?"));
                    } else {
                        die("Error: too many users somehow?"); //Post to slack
                    }
                    die();
                }
                else if ($rowcount == 1) //If exactly 1 row is found.
                {
                    $row = mysqli_fetch_assoc($result); //Row association.

                    $cwuser = $row["cwname"];
                }
                else //If no rows are found
                {
                    if($usecwname==1) //If variable enabled
                    {
                        $cwuser = $exploded[1];
                    }
                }
            }
            else
            {
                if($usecwname==1)
                {
                    $cwuser = $exploded[1];
                }
            }
        }
        else
        {
            if($usedatabase==1)
            {
                $mysql = mysqli_connect($dbhost, $dbusername, $dbpassword, $dbdatabase); //Connect MySQL

                if (!$mysql) //Check for errors
                {
                    if ($timeoutfix == true) {
                        cURLPost($_REQUEST["response_url"], array("Content-Type: application/json"), "POST", array("parse" => "full", "response_type" => "ephemeral","text" => "Connection Error: " . mysqli_connect_error()));
                    } else {
                        die("Connection Error: " . mysqli_connect_error()); //Post to slack
                    }
                    die();
                }

                $val1 = mysqli_real_escape_string($mysql,$_REQUEST["user_name"]);
                $sql = "SELECT * FROM `usermap` WHERE `slackuser`=\"" . $val1 . "\""; //SQL Query to select all ticket number entries

                $result = mysqli_query($mysql, $sql); //Run result
                $rowcount = mysqli_num_rows($result);
                if($rowcount > 1) //This should NEVER happen.
                {
                    if ($timeoutfix == true) {
                        cURLPost($_REQUEST["response_url"], array("Content-Type: application/json"), "POST", array("parse" => "full", "response_type" => "ephemeral","text" => "Error: too many users somehow?"));
                    } else {
                        die("Error: too many users somehow?"); //Post to slack
                    }
                    die();
                }
                else if ($rowcount == 1) //If exactly 1 row is found.
                {
                    $row = mysqli_fetch_assoc($result); //Row association.

                    $cwuser = $row["cwname"];
                }
                else //If no rows are found
                {
                    if($usecwname==1) //If variable enabled
                    {
                        $cwuser = $_REQUEST['user_name'];
                    }
                }
            }
            else
            {
                if($usecwname==1)
                {
                    $cwuser = $_REQUEST['user_name'];
                }
            }
        }

        $datetoday = date("Y-m-d");
        $timeurl = $connectwise . "/$connectwisebranch/apis/3.0/time/entries";
        $filterurl = $timeurl . "?conditions=member/identifier%20like%20%27" . $cwuser . "%27%20and%20timeStart%20%3C%20[" . $datetoday . "T23:59:59Z]%20and%20timeStart%20%3E%20[" . $datetoday . "T00:00:00Z]&orderBy=dateEntered%20desc&pagesize=200";

        // Authorization header
        $header_data = authHeader($companyname, $apipublickey, $apiprivatekey);

        $data = cURL($filterurl, $header_data);

        if($data == NULL)
        {
            if ($timeoutfix == true) {
                cURLPost($_REQUEST["response_url"], array("Content-Type: application/json"), "POST", array("parse" => "full", "response_type" => "ephemeral","text" => "User has not yet recorded time or the username $cwuser does not exist."));
            } else {
                die("User has not yet recorded time or the username $cwuser does not exist."); //Post to slack
            }
            die();
        }

        $totaltime = 0;
        $highesttime = 0;
        $highestticket = "";
        $billabletime = 0;

        foreach($data as $entry)
        {
            $totaltime = $totaltime + $entry->actualHours;
            if($highesttime < $entry->actualHours && $entry->chargeToType=="ServiceTicket")
            {
                $highesttime = $entry->actualHours;
                $highestticket = $entry->chargeToId;
            }
            if($entry->billableOption == "Billable")
            {
                $billabletime = $billabletime + $entry->actualHours;
            }
            $cwfullname = $entry->member->name;
        }

        if($totaltime == 0)
        {
            if ($timeoutfix == true) {
                cURLPost($_REQUEST["response_url"], array("Content-Type: application/json"), "POST", array("parse" => "full", "response_type" => "ephemeral","text" => "User has not yet recorded time today."));
            } else {
                die("User has not yet recorded time today."); //Post to slack
            }
            die();
        }

        $billablepercent = round($billabletime / $totaltime * 100,2) . "%";

        $expected = round((strtotime("now") - strtotime("8:00AM")) / 3600,2);

        if ($expected > (round((strtotime($timebusinessclose) - strtotime($timebusinessstart)) / 3600,2)))
        {
            $expected = round((strtotime($timebusinessclose) - strtotime($timebusinessstart)) / 3600,2);
        }

        $ticketurl = $connectwise . "/$connectwisebranch/services/system_io/Service/fv_sr100_request.rails?service_recid=" . $highestticket . "&companyName=" . $companyname;

        $timediff = $expected - $totaltime;

        if ($timediff >= 2)
        {
            $timecolor = "danger";
        }
        else if ($timediff < 2 && $timediff >= 1)
        {
            $timecolor = "warning";
        }
        else
        {
            $timecolor = "good";
        }

        $return = array(
            "parse" => "full", //Parse all text.
            "response_type" => "in_channel", //Send the response in the channel
            "attachments"=>array(array(
                "fallback" => "Time info for " . $cwuser, //Fallback for notifications
                "title" => "Total hours today: " . $totaltime, //Set bolded title text
                "pretext" => "Time info for " . $cwfullname, //Set pretext
                "color" => $timecolor,
                "text" => "Expected Hours: " . $expected . "\nBillable Time: " . $billablepercent . "\nHighest Ticket time: <" . $ticketurl . "|#" . $highestticket . "> (" . $highesttime . " hours)", //Set text to be returned
                "mrkdwn_in" => array( //Set markdown values
                    "text",
                    "pretext"
                )
            ))
        );
        if ($timeoutfix == true) {
            cURLPost($_REQUEST["response_url"], array("Content-Type: application/json"), "POST", $return);
        } else {
            die(json_encode($return, JSON_PRETTY_PRINT)); //Return properly encoded arrays in JSON for Slack parsing.
        }
        die();

    }
    else if($exploded[0] == "reportall")
    {
        $datetoday = date("Y-m-d");
        $timeurl = $connectwise . "/$connectwisebranch/apis/3.0/time/entries";
        $filterurl = $timeurl . "?conditions=timeStart%20%3C%20[" . $datetoday . "T23:59:59Z]%20and%20timeStart%20%3E%20[" . $datetoday . "T00:00:00Z]&orderBy=dateEntered%20desc&pagesize=1000";

        // Authorization header
        $header_data = authHeader($companyname, $apipublickey, $apiprivatekey);

        $data = cURL($filterurl, $header_data);

        if ($data == NULL)
        {
            if ($timeoutfix == true) {
                cURLPost($_REQUEST["response_url"], array("Content-Type: application/json"), "POST", array("parse" => "full", "response_type" => "ephemeral","text" => "No users have recorded time information for today."));
            } else {
                die("No users have recorded time information for today."); //Post to slack
            }
            die();
        }

        $timeset = array();

        foreach($data as $entry)
        {
            $name = $entry->member->identifier;
            if(array_key_exists($name,$timeset))
            {
                $timeset[$entry->member->identifier]["totaltime"] = $timeset[$entry->member->identifier]["totaltime"] + $entry->actualHours;
            }
            else
            {
                $timeset[$entry->member->identifier] = null;
                $timeset[$entry->member->identifier]["totaltime"] = $entry->actualHours;
            }
        }

        $text = "";

        foreach($timeset as $user => $val)
        {
            $text = $text . $user . " | " . $val["totaltime"] . " hours\n";
        }

        $expected = round((strtotime("now") - strtotime($timebusinessstart)) / 3600,2);

        if ($expected > (round((strtotime($timebusinessclose) - strtotime($timebusinessstart)) / 3600,2)))
        {
            $expected = round((strtotime($timebusinessclose) - strtotime($timebusinessstart)) / 3600,2);
        }

        $return = array(
            "parse" => "full", //Parse all text.
            "response_type" => "in_channel", //Send the response in the channel
            "attachments"=>array(array(
                "fallback" => "Time info for all users", //Fallback for notifications
                "title" => "Expected hours for today: " . $expected, //Set bolded title text
                "pretext" => "Time info for all users", //Set pretext
                "text" => $text, //Set text to be returned
                "mrkdwn_in" => array( //Set markdown values
                    "text",
                    "pretext"
                )
            ))
        );
        if ($timeoutfix == true) {
            cURLPost($_REQUEST["response_url"], array("Content-Type: application/json"), "POST", $return);
        } else {
            die(json_encode($return, JSON_PRETTY_PRINT)); //Return properly encoded arrays in JSON for Slack parsing.
        }
        die();
    }
    else //Else close the connection.
    {
        if ($timeoutfix == true) {
            cURLPost($_REQUEST["response_url"], array("Content-Type: application/json"), "POST", array("parse" => "full", "response_type" => "ephemeral","text" => "Unknown entry for ticket number."));
        } else {
            die("Unknown entry for ticket number."); //Post to slack
        }
        die();
    }
}
$ticketnumber = $exploded[0]; //Set the ticket number to the first string
$command=NULL; //Create a command variable and set it to Null
$howlong=NULL; //Create a variable for time length and set to Null
$sentence=NULL; //Create a option variable and set it to Null


//Set URL
$timeurl = $connectwise . "/$connectwisebranch/apis/3.0/time/entries";
$urlticketdata = $connectwise . "/$connectwisebranch/apis/3.0/service/tickets/" . $ticketnumber; //Set ticket API url

//Dates
$datenow = gmdate("Y-m-d\TH:i:s\Z"); //Date as GMT based time.
$datestart = NULL;

if (array_key_exists(1, $exploded)) //If a second string exists in the slash command array, make it the command.
{
    $command = $exploded[1];
    if (array_key_exists(2, $exploded))
    {
        if(strpos($exploded[2],"m")!==false && strpos($exploded[2],"h")==false)
        {
            $datestart = gmdate("Y-m-d\TH:i:s\Z",strtotime("-" . preg_replace('/[^0-9,.]/', "", $exploded[2]) . " minutes")); //Start time of the ticket.
        }
        else if(strpos($exploded[2],"h")!==false && strpos($exploded[2],"m")==false)
        {
            if(strpos($exploded[2],".")!==false)
            {
                $temptime = explode(".",$exploded[2]);
                $temphours = $temptime[0];
                $tempmins = "." . preg_replace('/[^0-9]/', "", $temptime[1]);
                $tempmins = round(60 * $tempmins);
                $datestart = gmdate("Y-m-d\TH:i:s\Z",strtotime("-" . $temphours . " hours" . " -" . $tempmins . " minutes")); //Start time of the ticket.
            }
            else
            {
                $datestart = gmdate("Y-m-d\TH:i:s\Z",strtotime("-" . preg_replace('/[^0-9,.]/', "", $exploded[2]) . " hours")); //Start time of the ticket.
            }
        }
        else
        {
            if ($timeoutfix == true) {
                cURLPost($_REQUEST["response_url"], array("Content-Type: application/json"), "POST", array("parse" => "full", "response_type" => "ephemeral","text" => "Time entry does not work. Please only use a number then h or m to indicate hours or minutes. E.x. 5m or 1.5h are valid, 1hour5minutes is not"));
            } else {
                die("Time entry does not work. Please only use a number then h or m to indicate hours or minutes. E.x. 5m or 1.5h are valid, 1hour5minutes is not"); //Post to slack
            }
            die();
        }
    }
    else
    {
        if ($timeoutfix == true) {
            cURLPost($_REQUEST["response_url"], array("Content-Type: application/json"), "POST", array("parse" => "full", "response_type" => "ephemeral","text" => "No time given."));
        } else {
            die("No time given."); //Post to slack
        }
        die();
    }
    if (array_key_exists(3, $exploded)) //If a third string exists in the slash command array, make it the option for the command.
    {
        unset($exploded[0]);
        unset($exploded[1]);
        unset($exploded[2]);
        $sentence = implode(" ", $exploded);
    }
    else
    {
        if ($timeoutfix == true) {
            cURLPost($_REQUEST["response_url"], array("Content-Type: application/json"), "POST", array("parse" => "full", "response_type" => "ephemeral","text" => "No sentence given for note."));
        } else {
            die("No sentence given for note."); //Post to slack
        }
        die();
    }
}
else
{
    if ($timeoutfix == true) {
        cURLPost($_REQUEST["response_url"], array("Content-Type: application/json"), "POST", array("parse" => "full", "response_type" => "ephemeral","text" => "No command given."));
    } else {
        die("No command given."); //Post to slack
    }
    die();
}

// Authorization array, with extra json content-type used in patch commands to change tickets.
$header_data = postHeader($companyname, $apipublickey, $apiprivatekey);

//Need to create array before hand to ensure no errors occur.
$dataTNotes = array();

$ch = curl_init();
$postfieldspre = NULL; //avoid errors.
if($command == "internal" || $command == "i") //If second part of text is internal
{
    $postfieldspre = array("addToInternalAnalysisFlag" => "True", "notes" => $sentence, "chargeToType" => "ServiceTicket", "chargeToId" => $ticketnumber, "timeStart" => $datestart, "timeEnd" => $datenow, "billableOption" => "DoNotBill", "workType" => array("name" => $timeinternalworktype)); //Post ticket as API user
}
else if ($command == "external" || $command == "detail" || $command == "detailed" || $command == "d")//If second part of text is detail
{
    $postfieldspre = array("addToDetailDescriptionFlag" => "True", "notes" => $sentence, "chargeToType" => "ServiceTicket", "chargeToId" => $ticketnumber, "timeStart" => $datestart, "timeEnd" => $datenow, "billableOption" => "Billable", "workType" => array("name" => $timedetailworktype)); //Post ticket as API user
}
else if ($command == "resolution" || $command == "resolved" || $command == "r")//If second part of text is resolution
{
    $postfieldspre = array("addToResolutionFlag" => "True", "notes" => $sentence, "chargeToType" => "ServiceTicket", "chargeToId" => $ticketnumber, "timeStart" => $datestart, "timeEnd" => $datenow, "billableOption" => "Billable", "workType" => array("name" => $timeresolutionworktype)); //Post ticket as API user
}
else //If second part of text is neither external or internal
{
    if ($timeoutfix == true) {
        cURLPost($_REQUEST["response_url"], array("Content-Type: application/json"), "POST", array("parse" => "full", "response_type" => "ephemeral","text" => "Second part of text must be either internal, detail, or resolution (d/i/r also accepted)."));
    } else {
        die("Second part of text must be either internal, detail, or resolution (d/i/r also accepted)."); //Post to slack
    }
    die(); //Return error text.
}

//Username mapping code
if($usedatabase==1)
{
    $mysql = mysqli_connect($dbhost, $dbusername, $dbpassword, $dbdatabase); //Connect MySQL

    if (!$mysql) //Check for errors
    {
        if ($timeoutfix == true) {
            cURLPost($_REQUEST["response_url"], array("Content-Type: application/json"), "POST", array("parse" => "full", "response_type" => "ephemeral","text" => "Connection Error: " . mysqli_connect_error()));
        } else {
            die("Connection Error: " . mysqli_connect_error()); //Post to slack
        }
        die();
    }

    $val1 = mysqli_real_escape_string($mysql,$_REQUEST["user_name"]);
    $sql = "SELECT * FROM `usermap` WHERE `slackuser`=\"" . $val1 . "\""; //SQL Query to select all ticket number entries

    $result = mysqli_query($mysql, $sql); //Run result
    $rowcount = mysqli_num_rows($result);
    if($rowcount > 1) //This should NEVER happen.
    {
        if ($timeoutfix == true) {
            cURLPost($_REQUEST["response_url"], array("Content-Type: application/json"), "POST", array("parse" => "full", "response_type" => "ephemeral","text" => "Error: too many users somehow?"));
        } else {
            die("Error: too many users somehow?"); //Post to slack
        }
        die();
    }
    else if ($rowcount == 1) //If exactly 1 row is found.
    {
        $row = mysqli_fetch_assoc($result); //Row association.

        $postfieldspre["member"] = array("identifier"=>$row["cwname"]); //Return the connectwise name of the row found as the CW member name.
        $postfieldspre["enteredBy"] = $row["cwname"];
    }
    else //If no rows are found
    {
        if($usecwname==1) //If variable enabled
        {
            $postfieldspre["member"] = array("identifier"=>$_REQUEST['user_name']); //Return the slack username as the user for the ticket note. If the user does not exist in CW, it will use the API username.
            $postfieldspre["enteredBy"] = $_REQUEST['user_name'];
        }
    }
}
else
{
    if($usecwname==1)
    {
        $postfieldspre["member"] = array("identifier"=>$_REQUEST['user_name']);
        $postfieldspre["enteredBy"] = $_REQUEST['user_name'];
    }
}

$dataTNotes = cURLPost($timeurl, $header_data, "POST", $postfieldspre);

if(array_key_exists("errors",$dataTNotes)) //If connectwise returned an error.
{
    $errors = $dataTNotes->errors; //Make array easier to access.

    if ($timeoutfix == true) {
        cURLPost($_REQUEST["response_url"], array("Content-Type: application/json"), "POST", array("parse" => "full", "response_type" => "ephemeral","text" => "ConnectWise Error: " . $errors[0]->message));
    } else {
        die("ConnectWise Error: " . $errors[0]->message); //Post to slack
    }
    die(); //Return CW error
}
else //No error
{
    if ($timeoutfix == true) {
        cURLPost($_REQUEST["response_url"], array("Content-Type: application/json"), "POST", array("parse" => "full", "response_type" => "ephemeral","text" => "New " . $command . " time entry created on #" . $ticketnumber . ": " . $sentence));
    } else {
        die("New " . $command . " time entry created on #" . $ticketnumber . ": " . $sentence); //Return new ticket posted message.
    }
    die();
}

?>