<?php include('_mod_security.php'); ?>
<?php
	// ****** Prepare database query ******
	$sql = "SELECT * FROM admin_roles";
	$search_parm = mysqli_real_escape_string($GLOBALS['con'], trim($_POST['strSearch']));
	if ($search_parm != '')
	{
		if (is_numeric($search_parm))
			$sql = $sql." WHERE Active = ".$search_parm;
		else
			$sql = $sql." WHERE RoleID LIKE '%".$search_parm."%' OR ".
					"RoleDescription LIKE '%".$search_parm."%'";
	}
	$sql = $sql." ORDER BY RoleID";
	$result = mysqli_query($GLOBALS['con'], $sql);
	$xls_sql = "SELECT * FROM admin_roles";
?>
<script>
	// ****** Prepare popup form settings *****
	var win_page = 'role_form.php';
	var xls_sql = '<?php echo $xls_sql; ?>';
	var win_width = 600;
	var win_height = 400;
</script>

<?php include('mod/_db_navigator_bar.php'); ?>

<div class="db-grid" id="div_db_grid">

<table class="dbgrid" align="center" cellpadding="0" cellspacing="2" border="0" >
	<tr>
		<td width="180" align="center" class="data-grid-label">
			Role ID
		</td>
		<td width="220" align="center" class="data-grid-label">
			Role Description
		</td>
		<td width="50" align="center" class="data-grid-label">
			Active
		</td>
	</tr>
	<?php
		while($row = mysqli_fetch_array($result))
		{
	?>
			<tr>
				<td class="data-grid-var-link" onClick="open_form(win_page,'<?php echo $row['RoleID']; ?>','edit',win_width,win_height);" >
					<?php echo $row['RoleID']; ?>
				</td>
				<td class="data-grid-var">
					<?php echo $row['RoleDescription']; ?>
				</td>
				<td class="data-grid-var" align="center">
					<?php echo $row['Active']; ?>
				</td>
			</tr>
	<?php
		}
	?>
	
</table>

</div>

<div class="db-form" id="div_db_form">
	<iframe name="iframe_form" width="100%" height="100%" frameborder="0"  >
	</iframe>
</div>