<?php
require_once(__DIR__ . '/../checkuser.php');
function edit($id) {
	global $dbh, $sqlsrv_dbh;
	
	//-----------------------------------------------------------------------------
	// Find job by id
	//-----------------------------------------------------------------------------
	$sql = "SELECT * FROM sup_contract WHERE contract_id = ?";
	$parameters = array($id);
	if (!($sth = $dbh->prepare($sql))) {
		throw new Exception("sql prepare statement failure: $sql");
	}
	$sth->setFetchMode(PDO::FETCH_ASSOC);
	if (!$sth->execute($parameters)) {
		throw new Exception("sql execute statement failure: $sql");
	}
	$contract = $sth->fetch(PDO::FETCH_ASSOC);
	if (empty($contract)) {
		throw new Exception('Contract not found!');
	}
	
	//-----------------------------------------------------------------------------
	// Check permission
	//-----------------------------------------------------------------------------
	if (!Util::isAdmin()) {
		if ($contract['staff_id'] != $_SESSION['webadmin']['id']) {
			redirectAndExit('index.php?message=No permission!');
		}
	}
	
	require(__DIR__ . '/modify.php');

	//-----------------------------------------------------------------------------
	// Return array parameters
	//-----------------------------------------------------------------------------
	$sql = "SELECT * FROM sup_contract WHERE contract_id = ?";
	$parameters = array($contract['contract_id']);
	if (!($sth = $dbh->prepare($sql))) {
		throw new Exception("sql prepare statement failure: $sql");
	}
	$sth->setFetchMode(PDO::FETCH_ASSOC);
	if (!$sth->execute($parameters)) {
		throw new Exception("sql execute statement failure: $sql");
	}
	$contract['details'] = $sth->fetchAll();
	
	$json_details = array();
	foreach ($contract['details'] as $detail) {
		$json_details[] = json_encode($detail);
	}

	$sql = "SELECT * FROM v_cm_customer_support V_CM_CUSTOMER_SUPPORT ORDER BY company_name";
	if (!($sth = $dbh->prepare($sql))) {
		throw new Exception("sql prepare statement failure: $sql");
	}
	$sth->setFetchMode(PDO::FETCH_ASSOC);
	if (!$sth->execute()) {
		throw new Exception("sql execute statement failure: $sql");
	}
	$customers = $sth->fetchAll();
	
	$sql = "SELECT * FROM sys_login WHERE deleted = ? ORDER BY username";
	$parameters = array(0);
	if (!($sth = $dbh->prepare($sql))) {
		throw new Exception("sql prepare statement failure: $sql");
	}
	$sth->setFetchMode(PDO::FETCH_ASSOC);
	if (!$sth->execute($parameters)) {
		throw new Exception("sql execute statement failure: $sql");
	}
	$staffs = $sth->fetchAll();
	
	return array(
		'contract' => $contract,
		'typeOptions' => Job::typeOptions(),
		'statusOptions' => Contract::statusOptions(),
		'customers' => $customers,
		'staffs' => $staffs,
		'json_details' => $json_details,
		'message' => $_GET['message'],
	);
}
extract(edit($_GET['id']));

require(__DIR__ . '/views/form.php');