<?php
	//ini_set('display_errors',1);
	//error_reporting(E_ALL & ~E_NOTICE);
?>
<?php include('_mod_security.php'); ?>
<?php
	//header('Content-Type: application/json');
	//var_dump($_GET);
	$sql = '';
	switch ($_GET['func']):
		case 'grid' :
			require_once('classes/lcs_db_grid.php');
			$dbg = new lcs_db_grid;
			$dbg->start_header_section();
			$dbg->start_header();
			$dbg->add_column(array('label' => 'Title', 'dbcol' => 'c.title', 'width' => '130px'));
			$dbg->add_column(array('label' => 'First Name', 'dbcol' => 'c.first_name', 'width' => '100px'));
			$dbg->add_column(array('label' => 'Last Name', 'dbcol' => 'c.last_name', 'width' => '100px'));
			$dbg->add_column(array('label' => 'Work Email', 'dbcol' => 'c.primary_email', 'width' => '220px'));
			$dbg->add_column(array('label' => 'Hotel', 'dbcol' => 'h.hotel_name', 'width' => '220px'));
			$dbg->add_column(array('label' => 'Cell Phone', 'dbcol' => 'c.cell_phone', 'width' => '120px'));
			$dbg->add_column(array('label' => 'Status', 'dbcol' => 'c.status', 'width' => '70px', 'filter' => true));
			$dbg->add_column(array('label' => 'Action', 'sortable' => false, 'searchable' => false, 'width' => '105px', 'align' => 'center'));
			$dbg->end_header();
			$dbg->end_header_section();
			$sql = "SELECT c.*, (CASE c.status WHEN 1 THEN 'Pending' WHEN 2 THEN 'Approved' WHEN 3 THEN 'Rejected' END) AS c_status, h.hotel_name FROM concierges_pending c LEFT OUTER JOIN hotels h ON (c.hotel_id = h.hotel_id) ".
					"WHERE ".$dbg->search_spec()." ".$_GET['parm1']." ".$_GET['parm2']." ".$_GET['parm3']." ".
					"ORDER BY ".$dbg->sort_spec();
			//echo ' === '.$sql.' === ';
			$xls_sql = $sql;
			$xls_sql_encoded = xls_sql_encrypt($xls_sql);
			$result = $db->query($sql) or die('Database Error!');
			$dbg->start_data_section();
			if ($result->rowCount() > 0) :
				while ($row = $result->fetch(PDO::FETCH_OBJ)) :
					$dbg->start_row();
					$popup_html = '<div id="grid_popup_'.$row->concierge_id.'" class="grid_popup">';
					$popup_html .= '<div style="position:absolute; right:0; top:0; padding:8px;"><a href="javascript:hide_details();">X</a></div>';
					$popup_html .= '<b>Submission details:</b><br /><table>';
					$popup_html .= '<tr><td>First Name</td><td>'.$row->first_name.'</td></tr>';
					$popup_html .= '<tr><td>Last Name</td><td>'.$row->last_name.'</td></tr>';
					$popup_html .= '<tr><td>Hotel</td><td>'.$row->hotel_name.'</td></tr>';
					$popup_html .= '<tr><td>Work Email</td><td>'.$row->primary_email.'</td></tr>';
					$popup_html .= '<tr><td>Personal Email</td><td>'.$row->secondary_email.'</td></tr>';
					$popup_html .= '<tr><td>Work Phone</td><td>'.$row->work_phone.'</td></tr>';
					$popup_html .= '<tr><td>Cell Phone</td><td>'.$row->cell_phone.'</td></tr>';
					$popup_html .= '<tr><td>Instagram</td><td>'.$row->instagram.'</td></tr>';
					$popup_html .= '<tr><td>Facebook</td><td>'.$row->facebook.'</td></tr>';
					$popup_html .= '<tr><td>Twitter</td><td>'.$row->twitter.'</td></tr>';
					$popup_html .= '</table>';
					$popup_html .= '</div>';
					$dbg->add_cell($popup_html.'<a href="javascript:show_details(\'grid_popup_'.$row->concierge_id.'\');" >'.$row->title.'</a>');
					$dbg->add_cell($popup_html.'<a href="javascript:show_details(\'grid_popup_'.$row->concierge_id.'\');" >'.$row->first_name.'</a>');
					$dbg->add_cell($popup_html.'<a href="javascript:show_details(\'grid_popup_'.$row->concierge_id.'\');" >'.$row->last_name.'</a>');
					$dbg->add_cell($row->primary_email);
					$dbg->add_cell($row->hotel_name);
					$dbg->add_cell($row->cell_phone);
					$dbg->add_cell($row->c_status);
					if ($row->c_status == 'Pending') :
						//$dbg->add_cell('<a href="javascript:confirmDelete(\'Are you sure? This action cannot be reversed.\', \''.$row->concierge_id.'\', \''.$_GET['div'].'\');"><img src="img/delete_icon.gif" style="border:none;" /></a>');
						$sql = "SELECT c.*, (CASE c.status WHEN 0 THEN 'Inactive' WHEN 1 THEN 'Active' WHEN 2 THEN 'In transition' END) AS c_status, h.hotel_name ".
								"FROM concierges c LEFT OUTER JOIN hotels h ON (c.hotel_id = h.hotel_id) WHERE ".
								"c.first_name = '".$row->first_name."' AND c.last_name = '".$row->last_name."'";
						$result_lookup = $db->query($sql) or die('Database Error!');
						$select_html = '<select id="ec_guest_name_'.$row->concierge_id.'" onchange="pending_action($(this).val(), '.$row->concierge_id.', $(this));">';
						$select_html .= '<option value="">...Select...</option>';
						$select_html .= '<option value="ADD">Approve and add new concierge</option>';
						while ($row_lookup = $result_lookup->fetch(PDO::FETCH_OBJ)) :
							$select_html .= '<option value="UPD-'.$row_lookup->concierge_id.'">Update existing - '.$row_lookup->first_name.' '.$row_lookup->last_name.' '.$row_lookup->hotel_name.' - '.$row_lookup->primary_email.' - '.$row_lookup->c_status.'</option>';
						endwhile;
						$select_html .= '<option value="REJECT">Reject this update</option>';
						$select_html .= '</select>';
						$dbg->add_cell($select_html);
					else :
						$dbg->add_cell('');
					endif;
					$dbg->end_row();
				endwhile;
			else :
				$dbg->start_row();
				$dbg->add_cell('No records found');
				$dbg->end_row();
			endif;
			$dbg->end_data_section();
			echo json_encode(array('row_count' => $result->rowCount(), 'html' => $dbg->get_html(), 'xls_sql' => $xls_sql_encoded, 'extra_data'=> ''));
			return;
			break;
		case 'update' :
			if (substr($_GET['action'], 0, 6) == 'REJECT') :
				$sql = "UPDATE concierges_pending SET status = 3 WHERE concierge_id = ".nz(trim($_GET['pending_id']), '0');
				$db->query($sql) or die(json_encode(array('result' => 'Database Error!')));
				$msg = 'Success';
			elseif (substr($_GET['action'], 0, 3) == 'ADD') :
				$sql = "SELECT * from concierges_pending WHERE concierge_id = ".nz(trim($_GET['pending_id']), '0');
				$result = $db->query($sql) or die(json_encode(array('result' => 'Database Error!')));
				if ($row = $result->fetch(PDO::FETCH_OBJ)) :
					$sql = "INSERT INTO concierges SET ".
							"title = ".$db->quote(trim($row->title)).", ".
							"first_name = ".$db->quote(trim($row->first_name)).", ".
							"last_name = ".$db->quote(trim($row->last_name)).", ".
							"primary_email = ".$db->quote(trim($row->primary_email)).", ".
							"secondary_email = ".$db->quote(trim($row->secondary_email)).", ".
							"work_phone = ".$db->quote(trim($row->work_phone)).", ".
							"cell_phone = ".$db->quote(trim($row->cell_phone)).", ".
							"hotel_id = ".nz(trim($row->hotel_id), '0').", ".
							"status = 1, ".
							"facebook = ".$db->quote(trim($row->facebook)).", ".
							"twitter = ".$db->quote(trim($row->twitter)).", ".
							"instagram = ".$db->quote(trim($row->instagram)).", ".
							sql_set_create().
							sql_set_update();
					$db->query($sql) or die(json_encode(array('result' => 'Database Error!')));
					$sql = "UPDATE concierges_pending SET status = 2 WHERE concierge_id = ".nz(trim($_GET['pending_id']), '0');
					$db->query($sql) or die(json_encode(array('result' => 'Database Error!')));
				endif;
				$msg = 'Success';
			elseif (substr($_GET['action'], 0, 3) == 'UPD') :
				$ar_parms = explode('-', $_GET['action']);
				$sql = "SELECT * from concierges_pending WHERE concierge_id = ".nz(trim($_GET['pending_id']), '0');
				$result = $db->query($sql) or die(json_encode(array('result' => 'Database Error!')));
				if ($row = $result->fetch(PDO::FETCH_OBJ)) :
					$sql = "UPDATE concierges SET ".
							"title = ".$db->quote(trim($row->title)).", ".
							"first_name = ".$db->quote(trim($row->first_name)).", ".
							"last_name = ".$db->quote(trim($row->last_name)).", ".
							"primary_email = ".$db->quote(trim($row->primary_email)).", ".
							"secondary_email = ".$db->quote(trim($row->secondary_email)).", ".
							"work_phone = ".$db->quote(trim($row->work_phone)).", ".
							"cell_phone = ".$db->quote(trim($row->cell_phone)).", ".
							"hotel_id = ".nz(trim($row->hotel_id), '0').", ".
							"facebook = ".$db->quote(trim($row->facebook)).", ".
							"twitter = ".$db->quote(trim($row->twitter)).", ".
							"instagram = ".$db->quote(trim($row->instagram)).", ".
							sql_set_update().
							"WHERE concierge_id = ".nz(trim($ar_parms[1]), '0');
					$db->query($sql) or die(json_encode(array('result' => 'Database Error!')));
					$sql = "UPDATE concierges_pending SET status = 2 WHERE concierge_id = ".nz(trim($_GET['pending_id']), '0');
					$db->query($sql) or die(json_encode(array('result' => 'Database Error!')));
				endif;
				$msg = 'Success';
			else :
				$msg = 'Invalid Request!';
			endif;
			echo json_encode(array('result' => $msg));
			return;
			break;
	endswitch;
?>