<script type="text/javascript">
function MM_jumpMenu(targ,selObj,restore){ //v3.0
  eval(targ+".location='"+selObj.options[selObj.selectedIndex].value+"'");
  if (restore) selObj.selectedIndex=0;
}
</script>
<script type="text/javascript">
$(document).ready(function(e) {
	$('#adduser_btn')
		.click(function() {
			$('#adduser').submit();
	});
	$("#adduser").validate({
		rules: {
			username: "required",
			loginname: "required"
		},
		messages: {
			username: {
				required: "Please Enter Your User Name"
			},
			loginname: {
				required: "Please Enter Your Login Name"
			}
		}
	});
	$('#modifyuser_btn')
		.click(function() {
			$('#modifyuser').submit();
	});
	$("#modifyuser").validate({
		rules: {
			username: "required",
			loginname: "required"
		},
		messages: {
			username: {
				required: "Please Enter Your User Name"
			},
			loginname: {
				required: "Please Enter Your Login Name"
			}
		}
	});
	$('#check_all')
		.click(function() {
			if($(this).is(':checked')) {
				$(".checkbox").prop('checked', true);
			}	else	{
				$(".checkbox").prop('checked', false);
			}
	});
});
</script>
<?php
include 'config.php';

// Check if the user is logged in

if ((!isSet($_SESSION['loginname'])) || ($loggin <> '1'))
{
header("Location: login.php");
exit;
}
?>
<?php
$index = (int)$_GET["index"];

if($_SESSION['role'] == 'User'){
	$company_check_sql = "SELECT * FROM file_company_user Where userid=:userid";
	$company_check = Db::getDbh()->prepare($company_check_sql);
	$company_check->execute(array(":userid" => $_SESSION['loginid']));
	if( $error = $company_check->getError(array(":userid" => $_SESSION['loginid'])) ){
		var_dump($error);
	}
	$row_company_check = $company_check->fetch(PDO::FETCH_ASSOC);
	$companyid = $row_company_check{'companyid'};
}	else	{
	if(empty($_GET["companyid"])){
		$company_check_sql = "SELECT * FROM file_company Where status = '1' order by sort ASC Limit 1";
		$company_check = Db::getDbh()->prepare($company_check_sql);
		$company_check->execute();
		if( $error = $company_check->getError() ){
			var_dump($error);
		}
		$row_company_check = $company_check->fetch(PDO::FETCH_ASSOC);
		$companyid = $row_company_check{'companyid'};
	}	else	{
		$companyid = (int)$_GET["companyid"];
	}
}
?>
<script type="text/javascript">
$(document).ready(function(e) {
	$('#cancel_btn')
		.click(function() {
			window.location.href = 'index.php?index=<?=$index;?>&companyid=<?=$companyid;?>';
	});
});
</script>
<?php
if($_REQUEST["modifyuser"] == "1"){
	$modifyuserid = (int)$_GET["modifyuserid"];
	$modify_user_sql = "SELECT
						file_company_user.companyid,
						sys_login.loginid,
						sys_login.username,
						sys_login.loginname,
						sys_login.loginpw,
						sys_login.role,
						sys_login.`status`,
						sys_login.createby,
						sys_login.createdate,
						sys_login.lastupby,
						sys_login.lastupdate,
						sys_login.deleted
						FROM
						sys_login
						INNER JOIN file_company_user ON file_company_user.userid = sys_login.loginid Where sys_login.loginid=:loginid";
	$modify_user = Db::getDbh()->prepare($modify_user_sql);
	$modify_user->execute(array(":loginid" => $modifyuserid));
	if( $error = $modify_user->getError(array(":loginid" => $modifyuserid)) ){
		var_dump($error);
	}
	$row_modify_user = $modify_user->fetch(PDO::FETCH_ASSOC);
    echo"<form action='modify_user.php' method='post' id='modifyuser' name='modifyuser' enctype='multipart/form-data'>
			<input type='hidden' name='loginid' value='".$modifyuserid."' />
			<input type='hidden' name='index' value='".$index."' />";
	echo"	<div class='tab_title'>Modify User</div>
			<div class='tab_content'>
				<table class='tab_upload_table' width='400' border='0' cellspacing='0' cellpadding='0'>";
	if(($_SESSION['role'] == 'Superadmin') || ($_SESSION['role'] == 'Admin')){
		echo"	  <tr>
					<td width='100'>Company</td>
					<td width='300'>";
					echo"<select name='companyid'>";
					$company_list_sql = "SELECT * FROM file_company Where status = '1' ORDER BY sort ASC";
					$company_list = Db::getDbh()->prepare($company_list_sql);
					$company_list->execute();
					if( $error = $company_list->getError() ){
						var_dump($error);
					}
					while ($row_company_list = $company_list->fetch(PDO::FETCH_ASSOC)){
						echo"<option value='".$row_company_list{'companyid'}."' ".getSelect($row_company_list{'companyid'}, $row_modify_user{'companyid'}).">".$row_company_list{'title'}."</option>";
					}
					echo"</select>
					</td>
				  </tr>";
	}	else	{
		echo"<input type='hidden' name='companyid' value='".$row_modify_user{'companyid'}."' />";
	}
	$modify_role_sql = "SELECT * FROM file_role_user Where userid=:userid";
	$modify_role = Db::getDbh()->prepare($modify_role_sql);
	$modify_role->execute(array(":userid" => $modifyuserid));
	if( $error = $modify_role->getError(array(":userid" => $modifyuserid)) ){
		var_dump($error);
	}
	$row_modify_role = $modify_role->fetch(PDO::FETCH_ASSOC);
	echo"		  <tr>
					<td width='100'>Role</td>
					<td width='300'>";
					echo"<select name='roleid'>";
					$role_list_sql = "SELECT * FROM file_role WHERE status = '1' ORDER BY sort ASC";
					$role_list = Db::getDbh()->prepare($role_list_sql);
					$role_list->execute();
					if( $error = $role_list->getError() ){
						var_dump($error);
					}
					while ($row_role_list = $role_list->fetch(PDO::FETCH_ASSOC)){
						echo"<option value='".$row_role_list{'roleid'}."' ".getSelect($row_role_list{'roleid'}, $row_modify_role{'roleid'}).">".$row_role_list{'title'}."</option>";
					}
					echo"</select>";
	echo"				</td>
				  </tr>
				  <tr>
					<td width='100'>User Name</td>
					<td width='300'>
						<input type='text' id='username' name='username' value='".$row_modify_user{'username'}."'>
					</td>
				  </tr>
				  <tr>
					<td width='100'>Login Name</td>
					<td width='300'>
						<input type='text' id='loginname' name='loginname' value='".$row_modify_user{'loginname'}."'>
					</td>
				  </tr>
				  <tr>
					<td width='100'>Password</td>
					<td width='300'>
						<input type='password' id='loginpw' name='loginpw'>
						".Password::ajax_validate('loginpw', 'ajax_passwordChecker.php', 'loginname', false)."
					</td>
				  </tr>
				  <tr>
					<td width='100'>Confirm Password</td>
					<td width='300'>
						<input type='password' name='loginpw_check'>
					</td>
				  </tr>
				  <tr>
					<td colspan='2'>
						<a href='#' id='modifyuser_btn'><div class='tab_content_btn' style='width:50px; background:url(images/save_btn.png) center center no-repeat;'></div></a>
						<a href='#' id='cancel_btn'><div class='tab_content_btn' style='width:50px; background:url(images/cancel_btn.png) center center no-repeat;'></div></a>
					</td>
				  </tr>
				</table>
			</div>
		</form>";

}	elseif($_REQUEST["adduser"] == "1"){
    echo"<form action='add_user.php' method='post' id='adduser' name='adduser' enctype='multipart/form-data'>
			<input type='hidden' name='index' value='".$index."' />";
	echo"	<div class='tab_title'>Add User</div>
			<div class='tab_content'>
				<table class='tab_upload_table' width='400' border='0' cellspacing='0' cellpadding='0'>";
	if(($_SESSION['role'] == 'Superadmin') || ($_SESSION['role'] == 'Admin')){
		echo"	  <tr>
					<td width='100'>Company</td>
					<td width='300'>";
					echo"<select name='companyid'>";
					$company_list_sql = "SELECT * FROM file_company Where status = '1' ORDER BY sort ASC";
					$company_list = Db::getDbh()->prepare($company_list_sql);
					$company_list->execute();
					if( $error = $company_list->getError() ){
						var_dump($error);
					}
					while ($row_company_list = $company_list->fetch(PDO::FETCH_ASSOC)){
						echo"<option value='".$row_company_list{'companyid'}."' ".getSelect($companyid, $row_company_list{'companyid'}).">".$row_company_list{'title'}."</option>";
					}
					echo"</select>
					</td>
				  </tr>";
	}	else	{
		echo"<input type='hidden' name='companyid' value='".$companyid."' />";
	}
	echo"		  <tr>
					<td width='100'>Role</td>
					<td width='300'>";
					echo"<select name='roleid'>";
					$role_list_sql = "SELECT * FROM file_role WHERE status = '1' ORDER BY sort ASC";
					$role_list = Db::getDbh()->prepare($role_list_sql);
					$role_list->execute();
					if( $error = $role_list->getError() ){
						var_dump($error);
					}
					while ($row_role_list = $role_list->fetch(PDO::FETCH_ASSOC)){
						echo"<option value='".$row_role_list{'roleid'}."'>".$row_role_list{'title'}."</option>";
					}
					echo"</select>";
	echo"				</td>
				  </tr>
				  <tr>
					<td width='100'>User Name</td>
					<td width='300'>
						<input type='text' id='username' name='username'>
					</td>
				  </tr>
				  <tr>
					<td width='100'>Login Name</td>
					<td width='300'>
						<input type='text' id='loginname' name='loginname'>
					</td>
				  </tr>
				  <tr>
					<td width='100'>Password</td>
					<td width='300'>
						<input type='password' id='loginpw' name='loginpw'>
						".Password::ajax_validate('loginpw', 'ajax_passwordChecker.php', 'loginname', true)."
					</td>
				  </tr>
				  <tr>
					<td width='100'>Confirm Password</td>
					<td width='300'>
						<input type='password' name='loginpw_check'>
					</td>
				  </tr>
				  <tr>
					<td colspan='2'>
						<a href='#' id='adduser_btn'><div class='tab_content_btn' style='width:100px; background:url(images/add_user.png) center center no-repeat;'></div></a>
						<a href='#' id='cancel_btn'><div class='tab_content_btn' style='width:50px; background:url(images/cancel_btn.png) center center no-repeat;'></div></a>
					</td>
				  </tr>
				</table>
			</div>
		</form>";
	
}	else	{
	$i=0;
	echo"<form action='delete_user.php' method='post' name='deleteuser' enctype='multipart/form-data'>
			<input type='hidden' name='index' value='".$index."' />
			<input type='hidden' name='companyid' value='".$companyid."' />";
	echo"<div class='tab_title'>User Management</div>
		  <div class='tab_content'>
			  <a href='index.php?index=".$index."&companyid=".$companyid."&adduser=1'><div class='tab_content_btn' style='width:100px; background:url(images/add_user.png) center center no-repeat;'></div></a>
			  <a href='#' onclick='deleteuser.submit()'><div class='tab_content_btn' style='width: 80px; background: url(images/delete_btn.png) center center no-repeat; float: right; margin-right: 0px;'></div></a>
			  <div style='clear:both;'></div>";
	if(($_SESSION['role'] == 'Superadmin') || ($_SESSION['role'] == 'Admin')){
		echo"<br>";
		echo"<select name='select_companyid' onChange=\"MM_jumpMenu('self',this,0)\">";
		$company_list_sql = "SELECT * FROM file_company Where status = '1' ORDER BY sort ASC";
		$company_list = Db::getDbh()->prepare($company_list_sql);
		$company_list->execute();
		if( $error = $company_list->getError() ){
			var_dump($error);
		}
		while ($row_company_list = $company_list->fetch(PDO::FETCH_ASSOC)){
			echo"<option value='index.php?index=".$index."&companyid=".$row_company_list{'companyid'}."' ".getSelect($companyid, $row_company_list{'companyid'}).">".$row_company_list{'title'}."</option>";
		}
		echo"</select>";
	}
	echo"	  <table class='tab_content_table' width='100%' border='0' cellspacing='0' cellpadding='0'>
				<tr>
				  <td class='title' width='40' align='center'>ID</td>
				  <td class='title' width='240'>User Name</td>
				  <td class='title' width='240'>Login Name</td>
				  <td class='title' width='100'>Role</td>
				  <td class='title' width='100'>Modify By</td>
				  <td class='title' width='150'>Modify Date</td>
				  <td class='title' width='20'></td>
				  <td class='title' width='20'></td>
				  <td class='title' width='20' align='center'><input type='checkbox' class='check_all' id='check_all'></td>
				</tr>";
	$user_list_sql = "SELECT
					  sys_login.loginid,
					  sys_login.username,
					  sys_login.loginname,
					  sys_login.lastupby,
					  sys_login.lastupdate,
					  file_company_user.companyid,
					  file_company_user.`status`,
					  file_company_user.sort,
					  file_company_user.deleted
					  FROM
					  file_company_user
					  INNER JOIN sys_login ON file_company_user.userid = sys_login.loginid where file_company_user.companyid=:companyid AND sys_login.status = '1' AND file_company_user.deleted = '0' order by file_company_user.sort ASC";
	$user_list = Db::getDbh()->prepare($user_list_sql);
	$user_list->execute(array(":companyid" => $companyid));
	if( $error = $user_list->getError(array(":companyid" => $companyid)) ){
		var_dump($error);
	}
	while ($row_user_list = $user_list->fetch(PDO::FETCH_ASSOC)){
		$role_info_sql = "SELECT file_role.title FROM file_role_user INNER JOIN file_role ON file_role.roleid = file_role_user.roleid WHERE userid=:userid";
		$role_info = Db::getDbh()->prepare($role_info_sql);
		$role_info->execute(array(":userid" => $row_user_list{'loginid'}));
		if( $error = $role_info->getError(array(":userid" => $row_user_list{'loginid'})) ){
			var_dump($error);
		}
		$row_role_info = $role_info->fetch(PDO::FETCH_ASSOC);

		$modify_info_sql = "SELECT * FROM sys_login WHERE loginid=:loginid";
		$modify_info = Db::getDbh()->prepare($modify_info_sql);
		$modify_info->execute(array(":loginid" => $row_user_list{'lastupby'}));
		if( $error = $modify_info->getError(array(":loginid" => $row_user_list{'lastupby'})) ){
			var_dump($error);
		}
		$row_modify_info = $modify_info->fetch(PDO::FETCH_ASSOC);
		echo"	<tr>
				  <td align='center'>".$row_user_list{'loginid'}."</td>
				  <td>".$row_user_list{'username'}."</td>
				  <td>".$row_user_list{'loginname'}."</td>
				  <td>".$row_role_info{'title'}."</td>
				  <td>".$row_modify_info{'username'}."</td>
				  <td>".$row_user_list{'lastupdate'}."</td>
				  <td align='center'>";
		if ($row_user_list{'loginid'} <> $_SESSION['loginid']){
			if($row_user_list{'status'} == '1'){		
				echo"<a href='status_user.php?index=".$index."&companyid=".$companyid."&loginid=".$row_user_list{'loginid'}."'><img src='images/status_tick.png' alt='Enable'></a>";
			}	else	{
				echo"<a href='status_user.php?index=".$index."&companyid=".$companyid."&loginid=".$row_user_list{'loginid'}."'><img src='images/status_cross.png' alt='Disable'></a>";
			}
		}
		echo	  "</td>
				  <td align='center'><a href='index.php?index=".$index."&companyid=".$companyid."&modifyuser=1&modifyuserid=".$row_user_list{'loginid'}."'><img src='images/modify_icon.png' alt='Modify'></a></td>
				  <td align='center'>";
		if ($row_user_list{'loginid'} <> $_SESSION['loginid']){
			echo"<input type='checkbox' class='checkbox' name='loginid[".$i."]' value='".$row_user_list{'loginid'}."'>";
		}
		echo"	  </td>
				</tr>";
		$i++;
	}
	echo"	  </table>
		  </div>";
}

function getSelect($field1, $field2)
{
	if ($field1 == $field2)
	{
		return "selected";
	}
	else
	{
		return "";
	}
}
?>