<?php
	///////////////////////////////////////////////////////////////////////////////
	// Copyright © 2003 Michael Bird. All Rights Reserved                        //
	//                                                                           //
	// This file is part of Help Center Live.                                    //
	//                                                                           //
	// Help Center Live is free software; you can redistribute it and/or modify  //
	// it under the terms of the GNU General Public License as published by      //
	// the Free Software Foundation; either version 2 of the License, or         //
	// (at your option) any later version.                                       //
	//                                                                           //
	// Help Center Live is distributed in the hope that it will be useful,       //
	// but WITHOUT ANY WARRANTY; without even the implied warranty of            //
	// MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the             //
	// GNU General Public License for more details.                              //
	//                                                                           //
	// You should have received a copy of the GNU General Public License         //
	// along with Help Center Live; if not, write to the Free Software           //
	// Foundation, Inc., 59 Temple Place, Suite 330, Boston, MA  02111-1307  USA //
	///////////////////////////////////////////////////////////////////////////////



	if(!isset($_GET["id"]) && $_GET["id"] == "" && !isset($_POST["id"]) && $_POST["id"] == ""){
		include_once("../../inc/config.php");
		header("Location: ".$URL_maindir."/cp/operators/view.php");
	}else{

	include_once("../../inc/header_operators.php");


		if(isset($_POST["submit"])){

			// update operator
			$OPERATOR_id = $_POST["id"];
			$OPERATOR_username = $_POST["username"];
			$OPERATOR_firstname = $_POST["firstname"];
			$OPERATOR_lastname = $_POST["lastname"];
			$OPERATOR_email = $_POST["email"];
			$OPERATOR_level = $_POST["level"];
			$OPERATOR_autosave = $_POST["autosave"];
			$OPERATOR_usepic = $_POST["usepic"];

			// Check to see if operator exists
			$result_search = DATABASE_query("SELECT * FROM ".$DB_prefix."operators");
			while($search = DATABASE_fetch($result_search)){
				$SEARCH_operator = $search["operator"];
				$SEARCH_id = $search["id"];
				if($SEARCH_operator == $OPERATOR_username && $SEARCH_id !== $OPERATOR_id){
					$EDIT_error = "Operator already exists";
				}
			}



			if(!isset($EDIT_error)){

				if(isset($_FILES["pic"]) && $_FILES["pic"] !== "" && $_FILES["pic"]["size"] !== 0){
					// Upload new icon
					// Make sure the image is not corrupted by magic quotes
					set_magic_quotes_runtime(0);
					$imagefile = $_FILES["pic"]["tmp_name"];
					$imagesize = $_FILES["pic"]["size"];
					$imagename = $_FILES["pic"]["name"];
					$imagetype = $_FILES["pic"]["type"];
					$image = fopen($imagefile, "rb");
					$imageblob = base64_encode(fread($image, filesize($imagefile)));
					$fileopened = 1;
				}

				if(isset($imageblob) && $imageblob !== ""){
					if(isset($_POST["password"]) && $_POST["password"] !== "" && $_POST["password"] == $_POST["passworda"]){
						$OPERATOR_password = md5($_POST["password"]);
						DATABASE_query("UPDATE ".$DB_prefix."operators SET operator='$OPERATOR_username', password='$OPERATOR_password', firstname='$OPERATOR_firstname', lastname='$OPERATOR_lastname', email='$OPERATOR_email', level='$OPERATOR_level', imageblob='$imageblob', imagetype='$imagetype', autosave='$OPERATOR_autosave', usepic='$OPERATOR_usepic' WHERE id='$OPERATOR_id'");
					}else{
						DATABASE_query("UPDATE ".$DB_prefix."operators SET operator='$OPERATOR_username', firstname='$OPERATOR_firstname', lastname='$OPERATOR_lastname', email='$OPERATOR_email', level='$OPERATOR_level', imageblob='$imageblob', imagetype='$imagetype', autosave='$OPERATOR_autosave', usepic='$OPERATOR_usepic' WHERE id='$OPERATOR_id'");
					}
 				}else{
					if(isset($_POST["password"]) && $_POST["password"] !== "" && $_POST["password"] == $_POST["passworda"]){
						$OPERATOR_password = md5($_POST["password"]);
						DATABASE_query("UPDATE ".$DB_prefix."operators SET operator='$OPERATOR_username', password='$OPERATOR_password', firstname='$OPERATOR_firstname', lastname='$OPERATOR_lastname', email='$OPERATOR_email', level='$OPERATOR_level', autosave='$OPERATOR_autosave', usepic='$OPERATOR_usepic' WHERE id='$OPERATOR_id'");
					}else{
						DATABASE_query("UPDATE ".$DB_prefix."operators SET operator='$OPERATOR_username', firstname='$OPERATOR_firstname', lastname='$OPERATOR_lastname', email='$OPERATOR_email', level='$OPERATOR_level', autosave='$OPERATOR_autosave', usepic='$OPERATOR_usepic' WHERE id='$OPERATOR_id'");
					}
				}

				if(isset($fileopened)){
					fclose($image);
					// Put magic quotes back as they were
					set_magic_quotes_runtime(get_magic_quotes_gpc());
				}


				$result_dep = DATABASE_query("SELECT * FROM ".$DB_prefix."departments GROUP BY department");
				while($fetch = DATABASE_fetch($result_dep)){

					$DEPARTMENT_name = $fetch["department"];
					$DEPARTMENT_name = str_replace(" ", "+", $DEPARTMENT_name);
					$DEPARTMENT_email = $fetch["email"];
					$DEPARTMENT_update = $_POST[$DEPARTMENT_name];
					$DEPARTMENT_poll = $_POST["poll".$DEPARTMENT_name];

					$DEPARTMENT_name = str_replace("+", " ", $DEPARTMENT_name);
					$DEPARTMENT_update = str_replace("+", " ", $DEPARTMENT_update);
					$DEPARTMENT_poll = str_replace("+", " ", $DEPARTMENT_poll);

					if($DEPARTMENT_poll == ""){
						$result_poll = DATABASE_query("SELECT * FROM ".$DB_prefix."departments WHERE department='$DEPARTMENT_name' AND poll NOT NULL ORDER BY poll DESC LIMIT 1");
						if($find = DATABASE_fetch($result_poll)){
							$DEPARTMENT_lastpoll = $find["poll"];
							$DEPARTMENT_poll = $DEPARTMENT_lastpoll + 1;
						}else{
							$DEPARTMENT_poll = 0;
						}
					}

						DATABASE_query("DELETE FROM ".$DB_prefix."departments WHERE operator='$OPERATOR_username' AND department='$DEPARTMENT_name'");
					if($DEPARTMENT_update == 1){
						DATABASE_query("INSERT INTO ".$DB_prefix."departments (operator,department,poll,email) VALUES ('$OPERATOR_username','$DEPARTMENT_name','$DEPARTMENT_poll','$DEPARTMENT_email')");
					}

				}
				echo("<div align=\"center\">Operator's details updated. Please make sure <a href=\"".$URL_maindir."/cp/departments/edit.php\">polling</a> is correct if you have changed this operator's departments</div>");

			}else{
				echo($EDIT_error);
			}




		}else{
			// show edit form
			$OPERATOR_id = $_GET["id"];
			$result_op = DATABASE_query("SELECT * FROM ".$DB_prefix."operators WHERE id='$OPERATOR_id'");
			if($get = DATABASE_fetch($result_op)){
				$OPERATOR_found = 1;
				$OPERATOR_username = $get["operator"];
				$OPERATOR_firstname = $get["firstname"];
				$OPERATOR_lastname = $get["lastname"];
				$OPERATOR_email = $get["email"];
				$OPERATOR_level = $get["level"];
				$OPERATOR_autosave = $get["autosave"];
				$OPERATOR_usepic = $get["usepic"];
			}else{
				echo("<div align=\"center\">Operator not found</div>");
				$OPERATOR_found = 0;
			}

			if($OPERATOR_found == 1){

?>
<form name="edit" method="post" enctype="multipart/form-data" action="<?php echo($URL_maindir); ?>/cp/operators/edit.php">
<table border="0" align="center" cellspacing="0" cellpadding="2">
  <tr>
    <td>Username</td>
    <td><input name="username" type="text" size="30" maxlength="255" value="<?php echo($OPERATOR_username); ?>"></td>
  </tr>
  <tr>
    <td>New Password</td>
    <td><input name="password" type="password" size="30" maxlength="255"></td>
  </tr>
  <tr>
    <td>New Password Again</td>
    <td><input name="passworda" type="password" size="30" maxlength="255"></td>
  </tr>
  <tr>
    <td>First Name</td>
    <td><input name="firstname" type="text" size="30" maxlength="255" value="<?php echo($OPERATOR_firstname); ?>"></td>
  </tr>
  <tr>
    <td>Last Name</td>
    <td><input name="lastname" type="text" size="30" maxlength="255" value="<?php echo($OPERATOR_lastname); ?>"></td>
  </tr>
  <tr>
    <td>E-Mail</td>
    <td><input name="email" type="text" size="30" maxlength="255" value="<?php echo($OPERATOR_email); ?>"></td>
  </tr>
  <tr>
    <td>Picture (50 x 50px)</td>
    <td><input type="file" name="pic"></td>
  </tr>
  <tr>
    <td>Display Operator's Picture</td>
    <td><input name="usepic" type="radio" value="1"<?php if($OPERATOR_usepic == 1){ ?> checked<?php } ?>> Yes&nbsp;&nbsp;&nbsp;<input name="usepic" type="radio" value="0"<?php if($OPERATOR_usepic == 0){ ?> checked<?php } ?>> No</td>
  </tr>
  <tr>
    <td>Admin Privileges</td>
    <td><input name="level" type="radio" value="0"<?php if($OPERATOR_level == 0){ ?> checked<?php } ?>> Yes&nbsp;&nbsp;&nbsp;<input name="level" type="radio" value="1"<?php if($OPERATOR_level == 1){ ?> checked<?php } ?>> No</td>
  </tr>
  <tr>
    <td>Autosave Transcripts</td>
    <td><input name="autosave" type="radio" value="1"<?php if($OPERATOR_autosave == 1){ ?> checked<?php } ?>> Yes&nbsp;&nbsp;&nbsp;<input name="autosave" type="radio" value="0"<?php if($OPERATOR_autosave == 0){ ?> checked<?php } ?>> No</td>
  </tr>
  <tr>
    <td valign="top">Departments</td>
    <td>
      <table border="0" cellspacing="0" cellpadding="2">
<?php
				$result_dep = DATABASE_query("SELECT * FROM ".$DB_prefix."departments GROUP BY department");
				while($fetch = DATABASE_fetch($result_dep)){
					$OPERATOR_department = $fetch["department"];
					$OPERATOR_pdepartment = str_replace(" ", "+", $OPERATOR_department);
					$OPERATOR_depfound = 1;

					$result_poll = DATABASE_query("SELECT * FROM ".$DB_prefix."departments WHERE department='$OPERATOR_department' AND operator='$OPERATOR_username'");
					if($find = DATABASE_fetch($result_poll)){
						$checked = "checked";
						$poll = $find["poll"];
					}else{
						$checked = "";
						$poll = "";
					}

					echo("<tr><td>&nbsp;</td><td><input type=\"hidden\" name=\"poll".$OPERATOR_pdepartment."\" value=\"".$poll."\"><input type=\"checkbox\" name=\"".$OPERATOR_pdepartment."\" value=\"1\" ".$checked."> ".$OPERATOR_department."</td></tr>\n");
				}

				if($OPERATOR_depfound !== 1){
					echo("<tr><td>&nbsp;</td><td>No departments found</td></tr>\n");
				}
?>
      </table>
    </td>
  </tr>
  <tr>
    <td><input type="hidden" name="id" value="<?php echo($OPERATOR_id); ?>"></td>
    <td><input type="submit" name="submit" value="Edit"></td>
  </tr>
</table>
</form>
<?php
			}

		}

	}

	include_once("../../inc/footer.php");
?>