From b525a561c8edb789fdb5630db081b4ef2dfdb768 Mon Sep 17 00:00:00 2001
From: Etienne Marais <emarais@quint.co.uk>
Date: Wed, 13 Feb 2019 15:35:48 +0200
Subject: [PATCH] Log usage when a code gets used from the front end. Also
 cleaned the frontend input when comparing against the database code

---
 app/Http/Controllers/EventViewController.php |  6 +++++-
 app/Models/EventAccessCodes.php              | 12 ++++++++++++
 2 files changed, 17 insertions(+), 1 deletion(-)

diff --git a/app/Http/Controllers/EventViewController.php b/app/Http/Controllers/EventViewController.php
index b51a789a..9516f720 100644
--- a/app/Http/Controllers/EventViewController.php
+++ b/app/Http/Controllers/EventViewController.php
@@ -5,6 +5,7 @@ namespace App\Http\Controllers;
 use App\Attendize\Utils;
 use App\Models\Affiliate;
 use App\Models\Event;
+use App\Models\EventAccessCodes;
 use App\Models\EventStats;
 use Auth;
 use Cookie;
@@ -146,7 +147,7 @@ class EventViewController extends Controller
     {
         $event = Event::findOrFail($event_id);
 
-        $discountCode = $request->get('access_code');
+        $discountCode = strtoupper(strip_tags($request->get('access_code')));
         if (!$discountCode) {
             return response()->json([
                 'status' => 'error',
@@ -170,6 +171,9 @@ class EventViewController extends Controller
             ]);
         }
 
+        // Bump usage count
+        EventAccessCodes::logUsage($event_id, $discountCode);
+
         return view('Public.ViewEvent.Partials.EventHiddenTicketsSelection', [
             'event' => $event,
             'tickets' => $unlockedHiddenTickets,
diff --git a/app/Models/EventAccessCodes.php b/app/Models/EventAccessCodes.php
index 963e0b36..76f09b0a 100644
--- a/app/Models/EventAccessCodes.php
+++ b/app/Models/EventAccessCodes.php
@@ -8,6 +8,18 @@ class EventAccessCodes extends MyBaseModel
 {
     use SoftDeletes;
 
+    /**
+     * @param integer $event_id
+     * @param string $discountCode
+     * @return void
+     */
+    public static function logUsage($event_id, $discountCode)
+    {
+        (new static)::where('event_id', $event_id)
+            ->where('code', $discountCode)
+            ->increment('usage_count');
+    }
+
     /**
      * The validation rules.
      *