<?php
	//ini_set('display_errors',1);
	//error_reporting(E_ALL & ~E_NOTICE);
?>
<?php include('_mod_security.php'); ?>
<?php
	//var_dump($_GET);
	$sql = '';
	switch ($_GET['func']):
		case 'grid' :
			require_once('classes/lcs_db_grid.php');
			$dbg = new lcs_db_grid;
			$dbg->start_header_section();
			$dbg->start_header();
			$dbg->add_column(array('label' => 'Zip Code', 'dbcol' => 'l.zip', 'width' => '100px'));
			$dbg->add_column(array('label' => 'City', 'dbcol' => 'l.city', 'width' => '250px'));
			$dbg->add_column(array('label' => 'State', 'dbcol' => 'l.state', 'width' => '100px'));
			$dbg->add_column(array('label' => 'Assigned', 'sortable' => false, 'searchable' => false, 'width' => '75px', 'align' => 'center'));
			$dbg->end_header();
			$dbg->end_header_section();
			/*
			$sql = "SELECT zip_codes FROM routes WHERE route_id = ".nz($_GET['parm2'], '0');
			$result = $db->query($sql) or die('Database Error!');
			if ($result->rowCount() > 0) :
				$row = $result->fetch(PDO::FETCH_OBJ);
				$ar_zip_codes = explode(',', $row->zip_codes);
			endif;
			$_GET['parm2'] = '';
			*/
			//$_GET['parm1'] = " AND l.region_id = ".nz($_COOKIE[$_GET['parm1']], '0')." ";
			$sql = "SELECT DISTINCT l.zip, GROUP_CONCAT(DISTINCT(l.city) SEPARATOR ', ') AS city, l.state, rz.route_zip_id FROM locations l LEFT OUTER JOIN routes_zip_codes rz ON (l.zip = rz.zip ".$_GET['parm2']." "." AND rz.region_id = ".nz($_COOKIE[$_GET['parm1']], '0').") ".
					"WHERE ".$dbg->search_spec()." "." AND l.region_id = ".nz($_COOKIE[$_GET['parm1']], '0')." ".$_GET['parm3']." "." AND l.zip > ' ' AND l.region_id IN (".get_regions().") AND l.active = 1  GROUP BY l.zip, l.state, rz.route_zip_id ".
					"ORDER BY ".$dbg->sort_spec();
			//echo ' === '.$sql.' === ';
			$xls_sql = $sql;
			$xls_sql_encoded = xls_sql_encrypt($xls_sql);
			$result = $db->query($sql) or die('Database Error!');
			$dbg->start_data_section();
			if ($result->rowCount() > 0) :
				while ($row = $result->fetch(PDO::FETCH_OBJ)) :
					$dbg->start_row();
					$dbg->add_cell($row->zip);
					$dbg->add_cell($row->city);
					$dbg->add_cell($row->state);
					$checked = '';
					//if (in_array($row->zip, $ar_zip_codes)) :
					if (!empty($row->route_zip_id)) :
						$checked = ' checked="checked" ';
					endif;
					$dbg->add_cell('<input type="checkbox" name="zip_codes[]" id="zip_'.$row->zip.'" value="'.$row->zip.'" '.$checked.' onchange="update_zip(\''.$row->zip.'\')"  />');
					$dbg->end_row();
				endwhile;
			else :
				$dbg->start_row();
				$dbg->add_cell('No records found');
				$dbg->end_row();
			endif;
			$dbg->end_data_section();
			echo json_encode(array('row_count' => $result->rowCount(), 'html' => $dbg->get_html(), 'xls_sql' => $xls_sql_encoded));
			//echo json_encode(array('row_count' => $result->rowCount(), 'html' => $dbg->get_html(), 'xls_sql' => $xls_sql));
			return;
			break;
		case 'add' :
			if (in_array($_GET['region'], explode(',',get_regions()))) :
				$sql = "INSERT INTO routes_zip_codes SET ".
					"route_id = ".nz($_GET['route'], '0').", ".
					"region_id = ".nz($_GET['region'], '0').", ".
					"zip = ".$db->quote($_GET['zip']).", ".
					"create_date = '".date('Y-m-d H:i:s')."', ".
					"create_by = ".nz($_SESSION['user_id'], '0').", ".
					"update_by = ".nz(trim($_SESSION['user_id'])).", ".
					"update_date = '".date('Y-m-d H:i:s')."' ";
				if ($db->query($sql)) :
					$result_msg = 'Success';
				else :
					$result_msg = 'Database Error!';
				endif;
			else :
				$result_msg = 'Invalid region!';
			endif;
			echo json_encode(array('result' => $result_msg));
			return;
			break;
		case 'remove' :
			if (in_array($_GET['region'], explode(',',get_regions()))) :
				$sql = "DELETE FROM routes_zip_codes WHERE route_id = ".nz($_GET['route'], '0')." AND zip = ".$db->quote($_GET['zip'])." AND region_id = ".nz($_GET['region'], '0')." AND region_id IN (".get_regions().") ";
				if ($db->query($sql)) :
					$result_msg = 'Success';
				else :
					$result_msg = 'Database Error!';
				endif;
			else :
				$result_msg = 'Invalid region!';
			endif;
			echo json_encode(array('result' => $result_msg));
			return;
			break;
	endswitch;
?>