<?php
//===========================================================================
//* --    ~~                Crafty Syntax Live Help                ~~    -- *
//===========================================================================
//           URL:   http://www.craftysyntax.com/    EMAIL: eric@craftysyntax.com
//         Copyright (C) 2003-2005 Eric Gerdes   (http://www.craftysyntax.com )
// --------------------------------------------------------------------------
// $              CVS will be released with version 3.1.0                   $
// $    Please check http://www.craftysyntax.com/ or REGISTER your program for updates  $
// --------------------------------------------------------------------------
// NOTICE: Do NOT remove the copyright and/or license information any files. 
//         doing so will automatically terminate your rights to use program.
//         If you change the program you MUST clause your changes and note
//         that the original program is Crafty Syntax Live help or you will 
//         also be terminating your rights to use program and any segment 
//         of it.        
// --------------------------------------------------------------------------
// LICENSE:
//     This program is free software; you can redistribute it and/or
//     modify it under the terms of the GNU General Public License
//     as published by the Free Software Foundation; 
//     This program is distributed in the hope that it will be useful,
//     but WITHOUT ANY WARRANTY; without even the implied warranty of
//     MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
//     GNU General Public License for more details.
//
//     You should have received a copy of the GNU General Public License
//     along with this program in a file named LICENSE.txt .
// -------------------------------------------------------------------------- 
// BIG NOTE:
//     At the time of the release of this version of CSLH, Version 3.1.0 
//     which is a more modular, extendable , “skinable” version of CSLH
//     was being developed.. please visit http://www.craftysyntax.com to see if it was released!  
//===========================================================================

// this file is only called as an include.. everything else is a hack:
if (!(defined('IS_SECURE'))){
	print "Hacking attempt . Exiting..";
	exit;
}

// Need these because this is included inside a function where globals are
// out of the scope.
Global $mydatabase,$UNTRUSTED,$dbtype,$lang,$color_alt2,$color_alt1,$identity;

if(empty($UNTRUSTED['show'])){ $UNTRUSTED['show']= "";}
if(empty($UNTRUSTED['view'])){ $UNTRUSTED['view']= "";}
if(empty($UNTRUSTED['year'])){ $UNTRUSTED['year']= date("Y"); }
if(empty($UNTRUSTED['month'])){ $UNTRUSTED['month']= date("m"); }
if(empty($UNTRUSTED['expand'])){ $UNTRUSTED['expand'] = 0; }
if(empty($UNTRUSTED['top'])){ $UNTRUSTED['top'] = 0; }
if(empty($UNTRUSTED['perpage'])){ $UNTRUSTED['perpage'] = 25; } 


$month = sprintf("%02d",intval($UNTRUSTED['month']));
$year = sprintf("%04d",intval($UNTRUSTED['year']));

$lastaction = date("Ymdhis");
$startdate =  date("Ymd");
$expand_array = split(",",$UNTRUSTED['expand']);

// Select out the current months data:
$whatYm = $UNTRUSTED['year'] . $UNTRUSTED['month'];


// if no admin rights then user can not clear or remove data: 
$query = "SELECT * FROM livehelp_users WHERE sessionid='".$identity['SESSIONID']."'";
$data = $mydatabase->query($query);
$row = $data->fetchRow(DB_FETCHMODE_ASSOC);
$isadminsetting = $row['isadmin'];
if($isadminsetting != "Y"){ 
	  $UNTRUSTED['clearall'] = ""; 
	  $UNTRUSTED['remove']=""; 
	  $UNTRUSTED['removereferer']="";
	  $UNTRUSTED['nukeit']="";
}

 // if department is empty find default.
 if(empty($UNTRUSTED['whichdepartment'])){
  $qQry = "SELECT recno FROM livehelp_departments LIMIT 1";
  $qRes = $mydatabase->query($qQry);
  $qRow = $qRes->fetchRow(DB_FETCHMODE_ORDERED); 
  $UNTRUSTED['whichdepartment'] = $qRow[0];     	
 }	 

// Delete a message:
if(!(empty($UNTRUSTED['remove']))){
 $query = "DELETE FROM livehelp_leavemessage  WHERE id=". intval($UNTRUSTED['remove']);
 $mydatabase->query($query);
}
 
?>
<FORM action=data.php METHOD=POST name=dataformrefer>
<input type=hidden name=tab value=<?php echo $UNTRUSTED['tab']; ?>>
<table bgcolor=DDDDDD width=600><tr><td>
<b><?php echo $lang['month']; ?></b><select name=month onchange=document.dataformrefer.submit()>
<option value=01 <?php if($UNTRUSTED['month'] == "01"){ print " SELECTED "; } ?>><?php echo $lang['jan']; ?></option>
<option value=02 <?php if($UNTRUSTED['month'] == "02"){ print " SELECTED "; } ?>><?php echo $lang['feb']; ?></option>
<option value=03 <?php if($UNTRUSTED['month'] == "03"){ print " SELECTED "; } ?>><?php echo $lang['mar']; ?></option>
<option value=04 <?php if($UNTRUSTED['month'] == "04"){ print " SELECTED "; } ?>><?php echo $lang['apr']; ?></option>
<option value=05 <?php if($UNTRUSTED['month'] == "05"){ print " SELECTED "; } ?>><?php echo $lang['may']; ?></option>
<option value=06 <?php if($UNTRUSTED['month'] == "06"){ print " SELECTED "; } ?>><?php echo $lang['jun']; ?></option>
<option value=07 <?php if($UNTRUSTED['month'] == "07"){ print " SELECTED "; } ?>><?php echo $lang['jul']; ?></option>
<option value=08 <?php if($UNTRUSTED['month'] == "08"){ print " SELECTED "; } ?>><?php echo $lang['aug']; ?></option>
<option value=09 <?php if($UNTRUSTED['month'] == "09"){ print " SELECTED "; } ?>><?php echo $lang['sep']; ?></option>
<option value=10 <?php if($UNTRUSTED['month'] == "10"){ print " SELECTED "; } ?>><?php echo $lang['oct']; ?></option>
<option value=11 <?php if($UNTRUSTED['month'] == "11"){ print " SELECTED "; } ?>><?php echo $lang['nov']; ?></option>
<option value=12 <?php if($UNTRUSTED['month'] == "12"){ print " SELECTED "; } ?>><?php echo $lang['dec']; ?></option>

</select> <b><?php echo $lang['year']; ?></b><select name=year onchange=document.dataformrefer.submit()>
<?php
for($i=2004; $i<=date("Y"); $i++){
  print "<option value=$i ";
  if($UNTRUSTED['year'] == $i){ print " SELECTED "; } 
  print ">$i</option>";
}
?>   
</select> </td> </td>
<td>&nbsp;</td>
<td><b><?php echo $lang['txt43']; ?>:</b> <select name="whichdepartment" onchange="document.dataformrefer.submit();">
<?php
 $query = "SELECT recno,nameof FROM livehelp_departments order by nameof";
 $datad = $mydatabase->query($query);
 while($row = $datad->fetchRow(DB_FETCHMODE_ASSOC)){
  print "<option value=".$row['recno'];
  if($UNTRUSTED['whichdepartment']==$row['recno'])
     print " SELECTED "; 
  print " >".$row['nameof']."</option>\n";	
 } 
?>
</select></td>
</tr>	
</table>

</FORM>
<table bgcolor=DDDDDD width=600><tr><td>
<b><?php echo $lang['messages']; ?>:</b></td></tr></table>
  
<?php  
 
 $whatYm_b =  $whatYm . "00000000";
 $whatYm_e =  $whatYm . "99999999";
 $whichdepartmentsql = "";
 

 $whichdepartmentsql = " AND department=". intval($UNTRUSTED['whichdepartment']) . " ";
   
 $query = "SELECT * FROM livehelp_leavemessage WHERE dateof>$whatYm_b AND dateof<$whatYm_e $whichdepartmentsql order by dateof DESC"; 
 $refer_a = $mydatabase->query($query);
 $total_p = $refer_a->numrows();
 $perpage = intval($UNTRUSTED['perpage']);
 $top = intval($UNTRUSTED['top']);
 $show = $UNTRUSTED['show'];
   $pageUrl = "data.php";
  $varstring = "&tab=".$UNTRUSTED['tab']."&show=trans&month=".$UNTRUSTED['month'] . "&year=" . $UNTRUSTED['year'];
  if(empty($UNTRUSTED['perpage'])) $UNTRUSTED['perpage'] = 25;
  if(empty($UNTRUSTED['offset'])) $UNTRUSTED['offset'] = 0;
 
  print  pagingLinks($pageUrl, $total_p, $varstring,$UNTRUSTED['offset'],$UNTRUSTED['perpage']);

?>
<table width=600>
	 <td bgcolor=#FFFFFF><b><?php echo $lang['date']; ?></b></td>
	<?php
	  // get list of fields for this department..	
	  $q = "SELECT headertext,id FROM livehelp_questions WHERE module='leavemessage' AND department=". intval($UNTRUSTED['whichdepartment']) . " order by ordering ";
	  $qRes = $mydatabase->query($q);
    $fields = array();
    while($qRow = $qRes->fetchRow(DB_FETCHMODE_ORDERED)){
      print "<td bgcolor=#FFFFFF><b>".$qRow[0]."</b></td>";	
      $fields[]= "field_" . $qRow[1];
    }
	?>
	<td>&nbsp;</td>
  </tr>
<?php
  
  // show data : 
 $query = "SELECT * FROM livehelp_leavemessage WHERE dateof>$whatYm_b AND dateof<$whatYm_e $whichdepartmentsql order by dateof DESC LIMIT ". intval($UNTRUSTED['offset']) ."," . intval($perpage);
 $data = $mydatabase->query($query); 
 $bgcolor="$color_alt2";
 $myfields = array();
 if($data->numrows() == 0){
 	print "<tr><td colspan=7 bgcolor=#EEEEEE> " . $lang['txt212'] . " </td></tr>";
 } else {
 while($row = $data->fetchRow(DB_FETCHMODE_ASSOC)){ 
 	unset($myfields);
 	$myfields = array();
  if($bgcolor=="$color_alt2"){ $bgcolor="$color_alt1"; } else { $bgcolor="$color_alt2"; }
   print "<tr bgcolor=$bgcolor><td>";
   print substr($row['dateof'],4,2) . "-" . substr($row['dateof'],6,2) . "-" . substr($row['dateof'],0,4) . " (" . substr($row['dateof'],8,2) . ":" . substr($row['dateof'],10,2) . ":" . substr($row['dateof'],12,2) . ")";
   print "</td>";
   
   // get fields:
   $pairs = explode("&",$row['deliminated']);
   for($i=0;$i<count($pairs);$i++){
   	 $myarray = explode("=",$pairs[$i]);
   	 $key = $myarray[0];
     $myfields[$key] = urldecode($myarray[1]);   
   }
   
   for($i=0;$i<count($fields);$i++){
   	 $key = $fields[$i];
   	 print "<td>".substr($myfields[$key],0,255);
   	 if( substr($myfields[$key],0,255) != $myfields[$key])
   	   print " [ <a href=view_message.php?view=".$row['id']." target=_blank>". $lang['txt213'] ."..</a> ]";
   	 print "</td>";
   }
   print "<td> <a href=view_message.php?view=".$row['id']." target=_blank>".$lang['view']."</a> ";
   if($isadminsetting == "Y"){   
     print " <a href=data.php?tab=".$UNTRUSTED['tab']."&top=". $UNTRUSTED['top'] ."&remove=" . $row['id'] . " onClick=\"return confirm('" . $lang['areyousure'] . "')\"><font color=990000>". $lang['REMOVE'] ."</font></a> ";
   }   
   print " </td>";
   print "</tr>";   
  } 
 }
 ?>
</table><br><bR><bR>
<table bgcolor=#FFFFEE><tr><td>
<A href=csv.php?data=messages&department=<?php echo intval($UNTRUSTED['whichdepartment']); ?>&whatYm=<?php echo $whatYm ?> target=_blank><?php echo $lang['txt214']; ?></a>  |   <A href=csv.php?data=messages&department=<?php echo intval($UNTRUSTED['whichdepartment']); ?> target=_blank><?php echo $lang['txt215']; ?></a>
</td></tr></table>