<?php include('_mod_security.php'); ?>
<?php
	// ****** Prepare database query ******
	$sql = "SELECT * FROM contact_submission";
	$search_parm = mysqli_real_escape_string($GLOBALS['con'], trim($_POST['strSearch']));
	if ($search_parm != '')
	{
		if (is_numeric($search_parm))
			$sql = $sql;
		else
			$sql = $sql." WHERE name LIKE '%".$search_parm."%' OR ".
					"comment LIKE '%".$search_parm."%' OR ".
					"source LIKE '%".$search_parm."%' OR ".
					"email LIKE '%".$search_parm."%'";
	}
	$sql = $sql." ORDER BY timestamp DESC";
	$result = mysqli_query($GLOBALS['con'], $sql);
	$xls_sql = "SELECT * FROM contact_submission ORDER BY timestamp DESC";
?>
<script>
	// ****** Prepare popup form settings *****
	var win_page = '';
	var xls_sql = '<?php echo $xls_sql; ?>';
	var win_width = 600;
	var win_height = 400;
</script>

<?php include('mod/_db_navigator_bar.php'); ?>

<div class="db-grid" id="div_db_grid">

<table class="dbgrid" align="center" cellpadding="0" cellspacing="2" border="0" >
	<tr>
		<td width="40" align="center" class="data-grid-label">
			ID
		</td>
		<td width="100" align="center" class="data-grid-label">
			Timestamp
		</td>
		<td width="120" align="center" class="data-grid-label">
			Name
		</td>
		<td width="120" align="center" class="data-grid-label">
			Email
		</td>
		<td width="120" align="center" class="data-grid-label">
			Subject
		</td>
		<td width="200" align="center" class="data-grid-label">
			Comment
		</td>
		<td width="70" align="center" class="data-grid-label">
			IP
		</td>
	</tr>
	<?php
		while($row = mysqli_fetch_array($result))
		{
	?>
			<tr>
				<td class="data-grid-var">
					<?php echo $row['id']; ?>
				</td>
				<td class="data-grid-var">
					<?php echo $row['timestamp']; ?>
				</td>
				<td class="data-grid-var">
					<?php echo $row['name']; ?>
				</td>
				<td class="data-grid-var">
					<?php echo $row['email']; ?>
				</td>
				<td class="data-grid-var">
					<?php echo $row['subject']; ?>
				</td>
				<td class="data-grid-var">
					<?php echo $row['comment']; ?>
				</td>
				<td class="data-grid-var">
					<?php echo $row['ip']; ?>
				</td>
			</tr>
	<?php
		}
	?>
	
</table>

</div>

<div class="db-form" id="div_db_form">
	<iframe name="iframe_form" width="100%" height="100%" frameborder="0"  >
	</iframe>
</div>