<?php

if (!defined("WHMCS"))
die("This file cannot be accessed directly");

use WHMCS\Database\Capsule;
use WHMCS\View\Menu\Item as MenuItem;

function restrict_access_to_add_funds($vars) {

if (filter_var($_GET['action'], FILTER_SANITIZE_STRING) == 'addfunds') {

// Get PDO for the database queries
$pdo = Capsule::connection()->getPdo();

if ($vars['clientsdetails']['customfields']) {
$customfields = $vars['clientsdetails']['customfields'];
foreach ($customfields as $key => $customfield) {
##### Start Database Query #####
try {
$customfieldsquery = $pdo->query("SELECT fieldname FROM tblcustomfields WHERE id = " . $pdo->quote($customfield['id']));

while($row = $customfieldsquery->fetch(PDO::FETCH_ASSOC)) {
if ($row['fieldname'] == 'Enable Add Funds') {
$addfunds = $customfield['value'];
}
}
} catch(PDOException $e) {
echo 'ERROR: ' . $e->getMessage();
}
}

if ($addfunds !== 'on') {
header("Location: clientarea.php");
exit();
}
}

}

}

function restrict_add_funds_link(MenuItem $primaryNavbar) {

$client = Menu::context('client');

// Get PDO for the database queries
$pdo = Capsule::connection()->getPdo();

try {
$clientquery = $pdo->query("SELECT tblcustomfields.fieldname AS customfieldname, tblcustomfieldsvalues.value AS customfieldvalue FROM tblcustomfields INNER JOIN tblcustomfieldsvalues ON tblcustomfields.id = tblcustomfieldsvalues.fieldid WHERE tblcustomfieldsvalues.relid = " . $pdo->quote($client->id));

while($row = $clientquery->fetch(PDO::FETCH_ASSOC)) {
if (trim($row['customfieldname']) == "Enable Add Funds") {
$addfunds = $row['customfieldvalue'];
}
}
} catch(PDOException $e) {
echo 'ERROR: ' . $e->getMessage();
}


if ($addfunds !== 'on') {
if (!is_null($primaryNavbar->getChild('Billing'))) {
$primaryNavbar->getChild('Billing')->removeChild('Add Funds');
}
}

}

function add_funds_sidebar(MenuItem $primarySidebar) {

$filename = APP::getCurrentFileName();
$client = Menu::context("client");
$clientid = intval( $client->id );
$action = $_GET['action'];
$allowed = array('invoices', 'quotes', 'masspay', 'addfunds');

/* prevents balance display to unauth'd users */
if ($filename!=='clientarea' || $clientid===0 || strpos($_SERVER['REQUEST_URI'], 'verificationId') !== false || is_null($client)) {
return;
}

// Get PDO for the database queries
$pdo = Capsule::connection()->getPdo();

try {
$clientquery = $pdo->query("SELECT tblcustomfields.fieldname AS customfieldname, tblcustomfieldsvalues.value AS customfieldvalue FROM tblcustomfields INNER JOIN tblcustomfieldsvalues ON tblcustomfields.id = tblcustomfieldsvalues.fieldid WHERE tblcustomfieldsvalues.relid = " . $pdo->quote($client->id));

while($row = $clientquery->fetch(PDO::FETCH_ASSOC)) {
if (trim($row['customfieldname']) == "Enable Add Funds") {
$addfunds = $row['customfieldvalue'];
}
}
} catch(PDOException $e) {
echo 'ERROR: ' . $e->getMessage();
}

/* uncomment this to hide the sidebar if the client has no balance */
if ($client->credit <= 0.00 && $addfunds !== 'on' && filter_var($_GET['action'], FILTER_SANITIZE_STRING) !== 'addfunds') { return; }

$primarySidebar->addChild('Client-Balance', array(
'label' => Lang::trans('availcreditbal'),
'uri' => '#',
'order' => '1',
'icon' => 'fa fa-credit-card'
));

# Get Currency
$getCurrency = getCurrency($clientid);
$balanceDisplay = formatCurrency($client->credit, $getCurrency);

# Retrieve the panel we just created.
$balancePanel = $primarySidebar->getChild('Client-Balance');

// Move the panel to the end of the sorting order so it's always displayed
// as the last panel in the sidebar.
$balancePanel->moveToBack();
$balancePanel->setOrder(0);

# Add Balance.
if ($addfunds == 'on' && filter_var($_GET['action'], FILTER_SANITIZE_STRING) !== 'addfunds') {
$balancePanel->addChild('balance-amount', array(
'uri' => 'clientarea.php?action=addfunds',
'label' => '<h4 style="text-align:center;">'.$balanceDisplay.'</h4>',
'order' => 1
));

$balancePanel->setFooterHtml(
'<a href="clientarea.php?action=addfunds" class="btn btn-success btn-sm btn-block">
<i class="fa fa-plus"></i> Add Funds </a>'
);
}else{
$balancePanel->addChild('balance-amount', array(
'label' => '<h4 style="text-align:center;">'.$balanceDisplay.'</h4>',
'order' => 1
));
}

}

add_hook("ClientAreaPageAddFunds", 0, "restrict_access_to_add_funds");
add_hook("ClientAreaPrimaryNavbar", 0, "restrict_add_funds_link");
add_hook("ClientAreaSecondarySidebar", 0, "add_funds_sidebar");

?>