����
������������������������������������
<?php
header('Access-Control-Allow-Origin: *');
header('Access-Control-Allow-Methods: GET, POST');
header("Access-Control-Allow-Headers: X-Requested-With");
ini_set('display_errors', 1);
ini_set('display_startup_errors', 1);
$logFile = 'logfile.log';

error_reporting(E_ALL);

require_once '../PHPToolkit/NetSuiteService.php';

$service = new NetSuiteService();

if ($file = fopen($logFile, 'a')) {
    // Optionally, you can add a timestamp to each log entry
    fwrite($file, date('Y-m-d H:i:s') . ' - Script started.' . PHP_EOL);
} else {
    // Handle file open error
}



function generateRandomString() {
    $length = 20;
    $characters = '0123456789abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ';
    $charactersLength = strlen($characters);
    $randomString = '';
    for ($i = 0; $i < $length; $i++) {
        $randomString .= $characters[rand(0, $charactersLength - 1)]; // CAUTION: The rand function does not generate cryptographically secure values
        // Since PHP 7 the cryptographically secure random_int can be used
    }
    return $randomString;
}

// $account = '4661993_SB1';
// $consumerKey = '501f01252029274a27e2752f1b17319656f685b7d0887d8d6c94865ed64d7ea4';
// $consumer_secret = 'dba66943303e874bf621bf9d71fb5303dd01aacf4409fa4586b2a3078f64a2df';
// $token = '7b36add588df3d9adb6ab14d36b4dd43acb92d68eabd9eaa30876346c052ac53';
// $tokenSecret = '4e1fce8b5842768cd245729c5e5c7e7de120711b0e8379c852f2bcb1c276d86d';

//production
$account = '4661993';
$consumerKey = '705b585c35ac6f6ce8ea92e10fe27ac3db54652a747ec382b7efe86f81ca40c0';
$consumer_secret = '49619d1595658db3074b8afba91fe30a76a0a43fcdbd6129e88eb00532ba1bc7';
$token = '20b7c9410b2d1ca083f2c6f5147ef7f49abec6696a57b6b8c7cb4ef43f1a238d';
$tokenSecret = 'fcb0960741bed2605f34181849c2893c04a335bdcdbdeab4e0c0fca2682e1cba';


$nonce = generateRandomString();
$timestamp = time();
$baseString = urlencode($account) ."&". urlencode($consumerKey) ."&". urlencode($token) ."&". urlencode($nonce) ."&". urlencode($timestamp);
$secret = urlencode($consumer_secret) .'&'. urlencode($tokenSecret);
// Create the signature
$signature = base64_encode(hash_hmac('sha256', $baseString, $secret, true));


// Endpoint to retrieve user information
if ($_SERVER['REQUEST_METHOD'] === 'GET' && $_GET['action'] === 'getProductStatus') {

    if ($_GET['code']) {
        $service->setSearchPreferences(false, 20);
        $code=$_GET['code'];
        if (strpos($code, '^') !== false) {
            $code = str_replace('^', ' ', $code);
        }

        $emailSearchField = new SearchStringField();
        $emailSearchField->operator = "contains";
        $emailSearchField->searchValue = $code;

        $search = new ItemSearchBasic();
        $search->itemId = $emailSearchField;

        $request = new SearchRequest();
        $request->searchRecord = $search;

        $searchResponse = $service->search($request);



        if ($searchResponse->searchResult->totalRecords == 0) {

            $response = [
                'status' => 'error',
                'message' => 'Sales order item not found!',
                'data'=>[]
            ];
        } else {
//            $internalId=$searchResponse->searchResult->recordList->record[0]->internalId;
            $internalId='';
            foreach($searchResponse->searchResult->recordList->record as $record){
                if($record->itemId==$code){
                    $internalId=$record->internalId;
                }
            }

            $response = [
                'status' => 'success',
                'message' => 'Sales order item found!',
                'data'=>[
                    'id'=>$internalId
                ]
            ];
        }
    } else {
        $response = [
            'status' => 'error',
            'message' => 'Please provide item code!'
        ];
    }

    header('Content-Type: application/json');
    echo json_encode($response);
    exit;
}

if ($_SERVER['REQUEST_METHOD'] === 'GET' && $_GET['action'] === 'getSalesOrder') {

    if ($_GET['id']) {
        $service->setSearchPreferences(false, 20);

        $request = new GetRequest();
        $request->baseRef = new RecordRef();
        $request->baseRef->internalId = $_GET['id'];
        $request->baseRef->type = "salesOrder";
        $getResponse = $service->get($request);


        if (!$getResponse->readResponse->status->isSuccess) {
            $response = [
                'status' => 'error',
                'message' => 'Sales order not found!'

            ];
        } else {
            $response = [
                'status' => 'success',
                'message' => 'Sales order found!',
                'data'=>array(
                    'OrderNo'=>$getResponse->readResponse->record->tranId
                )
            ];
        }
    } else {
        $response = [
            'status' => 'error',
            'message' => 'Please provide sales order Id!'
        ];
    }

    header('Content-Type: application/json');
    echo json_encode($response);
    exit;
}

// Endpoint to update a sales order item
if ($_SERVER['REQUEST_METHOD'] === 'POST' && $_GET['action'] === 'updateSalesOrderItem') {
    $exchangeRate=$_GET['exchangeRate']? $_GET['exchangeRate'] :0.00;
    $documentLink=$_GET['documentLink']? $_GET['documentLink'] :"https://lifefitness.clientpoint.net/";

    $requestData = json_decode(file_get_contents('php://input'), true);
    $postField = "<soapenv:Envelope
    xmlns:xsd='http://www.w3.org/2001/XMLSchema'
    xmlns:xsi='http://www.w3.org/2001/XMLSchema-instance'
    xmlns:soapenv='http://schemas.xmlsoap.org/soap/envelope/'
    xmlns:platformCore='urn:core_2023_1.platform.webservices.netsuite.com'
    xmlns:tranSales='urn:sales_2023_1.transactions.webservices.netsuite.com'
    xmlns:platformMsgs='urn:messages_2023_1.platform.webservices.netsuite.com'>
    <soapenv:Header>
        <tokenPassport xsi:type='platformCore:TokenPassport'>
            <account xsi:type='xsd:string'>".$account."</account>
            <consumerKey xsi:type='xsd:string'>".$consumerKey."</consumerKey>
            <token xsi:type='xsd:string'>".$token."</token>
            <nonce xsi:type='xsd:string'>".$nonce."</nonce>
            <timestamp xsi:type='xsd:long'>".$timestamp."</timestamp>
            <signature algorithm='HMAC_SHA256' xsi:type='platformCore:TokenPassportSignature'>".$signature."</signature>
        </tokenPassport>
        <preferences>
            <ignoreReadOnlyFields>true</ignoreReadOnlyFields>
        </preferences>
    </soapenv:Header>
    <soapenv:Body>
        <update xsi:type='platformMsgs:UpdateRequest'>
            <record xsi:type='tranSales:SalesOrder' internalId='".$_GET['salesorderId']."'>
                <itemList xsi:type='tranSales:SalesOrderItemList' replaceAll='true'>";
    foreach($requestData as $data) {
//        fwrite($file, $data['trade_in'] . PHP_EOL);

        $price = str_replace(',', '', $data['price']);
        $price = (float)$price;
        $price1 = number_format($price, 2); // Convert to two decimal places
        $rate=$price / $data['quantity'];
        $rate = number_format($rate, 2); // Convert to two decimal places
        $price1 = (float)str_replace(',', '', $price1);
        $rate = (float)str_replace(',', '', $rate);
        if (!empty($data['trade_in'])) {
            $trade_in = (int) $data['trade_in'];
        } else {
            $trade_in = 0;
        }

        $postField .= "<item xsi:type='tranSales:SalesOrderItem'>
                    <item xsi:type='platformCore:RecordRef' internalId='".$data['internalId']."'/>
                    <quantity>".$data['quantity']."</quantity>
                    <description>".htmlspecialchars($data['description'])."</description>
                    <price internalId='-1'/>
                    <rate>".$rate."</rate>
                    <amount>".$price1."</amount>
                    <location>00.Vic-Product</location>
                    <customFieldList xsi:type='platformCore:CustomFieldList'>
                        <customField xsi:type='platformCore:DoubleCustomFieldRef' scriptId='custcol_trade_in_amount'>
                            <value xsi:type='xsd:double'>".$trade_in."</value>
                        </customField>
                    </customFieldList>
                </item>";
    }
    $postField .= " </itemList>
                <customFieldList xsi:type='platformCore:CustomFieldList'>
                    <customField scriptId='custbody_lfa_exchange_rate' xsi:type='platformCore:DoubleCustomFieldRef'>
                        <value xsi:type='xsd:double'>".$exchangeRate."</value>
                    </customField>
                     <customField scriptId='custbody_lfa_document_link' xsi:type='platformCore:StringCustomFieldRef'>
                        <value xsi:type='xsd:string'>".$documentLink."</value>
                    </customField>
                </customFieldList>
            </record>
        </update>
    </soapenv:Body>
</soapenv:Envelope>";

    $curl = curl_init();

    curl_setopt_array($curl, array(
        CURLOPT_URL => 'https://4661993.suitetalk.api.netsuite.com/services/NetSuitePort_2023_1',
        CURLOPT_RETURNTRANSFER => true,
        CURLOPT_ENCODING => '',
        CURLOPT_MAXREDIRS => 10,
        CURLOPT_TIMEOUT => 0,
        CURLOPT_FOLLOWLOCATION => true,
        CURLOPT_HTTP_VERSION => CURL_HTTP_VERSION_1_1,
        CURLOPT_CUSTOMREQUEST => 'POST',
        CURLOPT_POSTFIELDS =>$postField,
        CURLOPT_HTTPHEADER => array(
            'Content-Type: text/xml',
            'SOAPAction: update'
        ),
    ));

    $response = curl_exec($curl);

    curl_close($curl);
    if ($file = fopen($logFile, 'a')) {
        // Optionally, you can add a timestamp to each log entry
        fwrite($file, $postField);
    } else {
        // Handle file open error
    }
    if ($file = fopen($logFile, 'a')) {
        // Optionally, you can add a timestamp to each log entry
        fwrite($file, $response);
    } else {
        // Handle file open error
    }
    echo $response;
    exit;

    $response = [
        'status' => 'success',
        'response' => $error,
    ];


// header('Content-Type: application/json');
    echo json_encode($response);
    exit;


}

// If no matching endpoint is found, return a 404 response
http_response_code(404);
header('Content-Type: application/json');
echo json_encode([
    'status' => 'error',
    'message' => 'API not found!',
]);