<?php include('_mod_security.php'); ?>
<?php
	$sql = "SELECT v.*, c.description FROM vendors v INNER JOIN vendor_categories c ON (v.category_id = c.id) WHERE v.user_id = ".$_SESSION['user_id']."  AND v.event_id = ".$_SESSION['active_event']." ";
	$search_parm = mysqli_real_escape_string($GLOBALS['con'], trim($_POST['strSearch']));
	if ($search_parm != '') :
		$sql = $sql." AND ".search_sql($_POST['strSearch'],'v.vendor_name,c.description')." ";
	endif;
	$sql = $sql." ORDER BY v.vendor_name ASC";
	$result = mysqli_query($GLOBALS['con'], $sql);
	//echo " ===== ".$sql." ==== ";
	$xls_sql = "SELECT v.vendor_name, c.description AS category, v.street, v.street2, v.city, v.state, v.zip, v.country, v.website, v.main_phone, v.billing_street, v.billing_street2, v.billing_city, v.billing_state, v.billing_zip, v.billing_country, ".
				"v.comments, v.contact_1_name, v.contact_1_title, v.contact_1_phone, v.contact_1_mobile, v.contact_1_email, ".
				"v.contact_2_name, v.contact_2_title, v.contact_2_phone, v.contact_2_mobile, v.contact_2_email, v.contact_3_name, v.contact_3_title, v.contact_3_phone, v.contact_3_mobile, v.contact_3_email, ".
				"v.rating, v.hired, v.referrer, v.source, ".
				"ref_1_name, ref_1_phone, ref_1_email, ref_1_comment, ref_2_name, ref_2_phone, ref_2_email, ref_2_comment, ref_3_name, ref_3_phone, ref_3_email, ref_3_comment ".
				"  FROM vendors v INNER JOIN vendor_categories c ON (v.category_id = c.id) WHERE v.user_id = ".$_SESSION['user_id']."  AND v.event_id = ".$_SESSION['active_event']." ORDER BY v.vendor_name ASC";
	$ix_list = "vendors";
	$ix_form = "vendor_form";
?>
<script>
	// ****** Prepare popup form settings *****
	var win_page = 'page_form.php';
	var win_width = 600;
	var win_height = 400;
	var print_section = 'div_db_grid';
</script>

<h1>Vendors</h1>
<?php get_reports('vendor_contact,vendor_payment'); ?>
<?php get_notes(); ?>
<?php get_help_guide('help_vendors'); ?>
<?php include('mod/_db_navigator_bar.php'); ?>

<div class="db-grid" id="div_db_grid">

<table id="db_grid_main" class="dbgrid" align="center" cellpadding="0" cellspacing="2" border="0" >
	<thead>
		<tr>
			<td width="400" align="center" class="data-grid-label">
				Vendor Name
			</td>
			<td width="200" align="center" class="data-grid-label">
				Category
			</td>
			<td width="100" align="center" class="data-grid-label">
				Rating
			</td>
			<td width="75" align="center" class="data-grid-label">
				Delete
			</td>
		</tr>
	</thead>
	<tbody>
		<?php
			while($row = mysqli_fetch_object($result))
			{
		?>
				<tr>
					<td class="data-grid-var" >
						<a href="index.php?IX=<?php echo $ix_form; ?>&id=<?php echo $row->id; ?>" >
							<?php echo $row->vendor_name; ?>
						</a>
					</td>
					<td class="data-grid-var">
						<?php echo $row->description; ?>
					</td>
					<td class="data-grid-var">
						<?php echo graphic_rating_show($row->rating); ?>
					</td>
					<td class="data-grid-var" align="center" >
						<a href="javascript:confirmDelete('Are you sure?', 'vendor_delete&id=<?php echo $row->id; ?>');"><img src="img/delete_icon.gif" style="border:none;"  /></a>
					</td>
				</tr>
		<?php
			}
		?>
	</tbody>
</table>

</div>