<?php
global $dbh;

//-----------------------------------------------------------------------------
// Check permission
//-----------------------------------------------------------------------------
if (!Util::isAdmin()) {
	redirectAndExit('index.php?message=No permission!');
}

//-----------------------------------------------------------------------------
// Find job by id
//-----------------------------------------------------------------------------

	$sql = "SELECT * FROM v_cm_customer_support WHERE cust_id = ?";
	$parameters = array($id);
	if (!($sth = $dbh->prepare($sql))) {
		throw new Exception("sql prepare statement failure: $sql");
	}
	$sth->setFetchMode(PDO::FETCH_ASSOC);
	if (!$sth->execute($parameters)) {
		throw new Exception("sql execute statement failure: $sql");
	}
	$customer = $sth->fetch(PDO::FETCH_ASSOC);
	if (empty($customer)) {
		throw new Exception('Customer not found!' . $sql . $id . ' - TM');
	} 
	
	//return array(
	//	'customer' => $customer,
	//);


//-----------------------------------------------------------------------------
// Save if POST method
//-----------------------------------------------------------------------------
if (isPost()) {
	
	$sql = "SELECT column_name FROM information_schema.columns WHERE table_schema = (SELECT DATABASE()) AND table_name = ?";
	$parameters = array('v_cm_customer_support');
	if (!($sth = $dbh->prepare($sql))) {
		throw new Exception("sql prepare statement failure: $sql");
	}
	$sth->setFetchMode(PDO::FETCH_ASSOC);
	if (!$sth->execute($parameters)) {
		throw new Exception("sql execute statement failure: $sql");
	}
	$columns = $sth->fetchAll();

	foreach ($columns as $column) {
		$column = $column['column_name'];
		if (isset($_POST[$column])) {
			$customer[$column] = $_POST[$column];
		}
	}

	// Append record time
	$now = date("Y-m-d H:i:s");
	$customer = array_merge($customer, array(
		'updated_date' => $now,
		'updated_by' => $_SESSION['webadmin']['id'],
	));
	
	// Update customer
	$values = array();
	$parameters = array();
	foreach ($customer as $column => $value) {
		if ($column != 'id') {
			switch ($column) {
				case 'loginpw': {
					if (!empty($value)) {
						$parameters[] = md5($value);
						$values[] = "`$column` = ?";
					}
					break;
				}
				default: {
					$parameters[] = !strlen($value) ? null : $value;
					$values[] = "`$column` = ?";
					break;
				}
			}
		}
	}
	$sql = "UPDATE v_cm_customer_support SET " . implode(', ', $values) . " WHERE cust_id = ?";
	$parameters[] = $customer['cust_id'];
	if (!($sth = $dbh->prepare($sql))) {
		throw new Exception("sql prepare statement failure: $sql");
	}
	$sth->setFetchMode(PDO::FETCH_ASSOC);
	if (!$sth->execute($parameters)) {
		throw new Exception("sql execute statement failure: $sql");
	}
	
	redirectAndExit('index.php?message=Saved.');
}

//-----------------------------------------------------------------------------
// Return array parameters
//-----------------------------------------------------------------------------
return array(
	'customer' => $customer,
	'message' => $_GET['message'],
);