SSO Update :)

api/add_comment.php

@@ -10,18 +10,29 @@ try {
     // Include required files with proper error handling
     $configPath = dirname(__DIR__) . '/config/config.php';
     $commentModelPath = dirname(__DIR__) . '/models/CommentModel.php';
-    
+    $auditLogModelPath = dirname(__DIR__) . '/models/AuditLogModel.php';
+
     if (!file_exists($configPath)) {
         throw new Exception("Config file not found: $configPath");
     }
-    
+
     if (!file_exists($commentModelPath)) {
         throw new Exception("CommentModel file not found: $commentModelPath");
     }
-    
+
     require_once $configPath;
     require_once $commentModelPath;
-    
+    require_once $auditLogModelPath;
+
+    // Check authentication via session
+    session_start();
+    if (!isset($_SESSION['user']) || !isset($_SESSION['user']['user_id'])) {
+        throw new Exception("Authentication required");
+    }
+
+    $currentUser = $_SESSION['user'];
+    $userId = $currentUser['user_id'];
+
     // Create database connection
     $conn = new mysqli(
         $GLOBALS['config']['DB_HOST'],
@@ -29,29 +40,35 @@ try {
         $GLOBALS['config']['DB_PASS'],
         $GLOBALS['config']['DB_NAME']
     );
-    
+
     if ($conn->connect_error) {
         throw new Exception("Database connection failed: " . $conn->connect_error);
     }
-    
+
     // Get POST data
     $data = json_decode(file_get_contents('php://input'), true);
-    
+
     if (!$data) {
         throw new Exception("Invalid JSON data received");
     }
-    
+
     $ticketId = $data['ticket_id'];
-    
-    // Initialize CommentModel directly
+
+    // Initialize models
     $commentModel = new CommentModel($conn);
-    
-    // Add comment
-    $result = $commentModel->addComment($ticketId, $data);
-    
+    $auditLog = new AuditLogModel($conn);
+
+    // Add comment with user tracking
+    $result = $commentModel->addComment($ticketId, $data, $userId);
+
+    // Log comment creation to audit log
+    if ($result['success'] && isset($result['comment_id'])) {
+        $auditLog->logCommentCreate($userId, $result['comment_id'], $ticketId);
+    }
+
     // Discard any unexpected output
     ob_end_clean();
-    
+
     // Return JSON response
     header('Content-Type: application/json');
     echo json_encode($result);