����
������������������������������������
<?php
// Set CORS headers
header("Access-Control-Allow-Origin:https://www.clientpoint.net");
header("Access-Control-Allow-Methods: POST, OPTIONS");
header("Content-Type: application/json");

// Handle preflight
if ($_SERVER['REQUEST_METHOD'] === 'OPTIONS') {
    http_response_code(204);
    exit;
}

// Check for required query param
$clientpointId = $_GET['id'] ?? null;
$api_key = $_GET['api_key'] ?? null;

if (!$clientpointId) {
    http_response_code(400);
    echo json_encode(['error' => 'Missing clientpoint ID']);
    exit;
}
if (!$api_key) {
    http_response_code(400);
    echo json_encode(['error' => 'Missing API key']);
    exit;
}

// Prepare external API call (replace with real endpoint and key)
$apiUrl = "https://api.clientpoint.net/v4/clientpoint/get-link/$clientpointId/?api_key=$api_key&type=view";
$ch = curl_init($apiUrl);
curl_setopt($ch, CURLOPT_RETURNTRANSFER, true);
curl_setopt($ch, CURLOPT_HTTPHEADER, [
    'Content-Type: application/json',
    // 'Authorization: Bearer YOUR_API_KEY' if needed
]);

$response = curl_exec($ch);
$httpCode = curl_getinfo($ch, CURLINFO_HTTP_CODE);
curl_close($ch);

// Return response
http_response_code($httpCode);
echo $response;