<?php require('_mod_security.php'); ?>
<?php
	$sql = '';
	switch ($_GET['func']):
		case 'grid' :
			require_once('classes/lcs_db_grid.php');
			$dbg = new lcs_db_grid;
			$dbg->start_header_section();
			$dbg->start_header();
			$dbg->add_column(['label' => 'First Name', 'dbcol' => 'p.cust_first_name', 'width' => '100px']);
			$dbg->add_column(['label' => 'Last Name', 'dbcol' => 'p.cust_last_name', 'width' => '120px']);
			$dbg->add_column(['label' => 'Description', 'dbcol' => 'p.sku_description', 'width' => '120px']);
			$dbg->add_column(['label' => 'Price', 'dbcol' => 'p.price', 'width' => '80px', 'align' => 'right']);
			$dbg->add_column(['label' => 'Fee', 'dbcol' => 'p.fee', 'width' => '80px', 'align' => 'right']);
			$dbg->add_column(['label' => 'Qty', 'dbcol' => 'p.qty', 'width' => '80px', 'align' => 'right']);
			$dbg->add_column(['label' => 'Total Amt', 'dbcol' => 'p.total_amt', 'width' => '80px', 'align' => 'right']);
			$dbg->add_column(['label' => 'Paid Amt', 'dbcol' => 'p.pmt_amt', 'width' => '80px', 'align' => 'right']);
			$dbg->add_column(['label' => 'Paid Date', 'dbcol' => 'p.pmt_date', 'width' => '80px']);
			$dbg->add_column(['label' => 'Refund Amt', 'dbcol' => 'p.refund_amt', 'width' => '80px', 'align' => 'right']);
			$dbg->add_column(['label' => 'Refund Date', 'dbcol' => 'p.refund_date', 'width' => '80px']);
			//$dbg->add_column(['label' => 'Delete', 'sortable' => false, 'searchable' => false, 'width' => '65px', 'align' => 'center', 'update' => true]);
			$dbg->end_header();
			$dbg->end_header_section();
			$sql = "SELECT p.* FROM payments p " .
					"WHERE ".$dbg->search_spec()." ".$_GET['parm1']." ".$_GET['parm2']." ".$_GET['parm3']." " .
					"ORDER BY ".$dbg->sort_spec();
			//echo ' === '.$sql.' === ';
			$xls_sql = $sql;
			$xls_sql_encoded = xls_sql_encrypt($xls_sql);
			$result = $db->query($sql) or die('Database Error!');
			$extra_data = '';
			$total_tickets_sold = 0;
			$total_amount_paid = 0;
			$total_amount_refunded = 0;
			$dbg->start_data_section();
			if ($result->rowCount() > 0) :
				while ($row = $result->fetch(PDO::FETCH_OBJ)) :
					$dbg->start_row($row->id);
					$dbg->add_cell('<a href="index.php?IX='.$_GET['ix_form'].'&id='.$row->id.'" >'.$row->cust_first_name.'</a>');
					$dbg->add_cell('<a href="index.php?IX='.$_GET['ix_form'].'&id='.$row->id.'" >'.$row->cust_last_name.'</a>');
					$dbg->add_cell('<a href="index.php?IX='.$_GET['ix_form'].'&id='.$row->id.'" >'.$row->sku_description.'</a>');
					$dbg->add_cell($row->price);
					$dbg->add_cell($row->fee);
					$dbg->add_cell($row->qty);
					$dbg->add_cell($row->total_amt);
					$dbg->add_cell($row->pmt_amt);
					$dbg->add_cell(nzdate_display($row->pmt_date, ''));
					$dbg->add_cell(!empty($row->refund_amt) ? $row->refund_amt : '<a href="#" onclick="confirm_refund(' . $row->id . '); return false;">Issue refund</a>');
					$dbg->add_cell(nzdate_display($row->refund_date, ''));
					$dbg->end_row();
					$total_tickets_sold += $row->qty;
					$total_amount_paid += $row->pmt_amt;
					$total_amount_refunded += $row->refund_amt;
				endwhile;
				$extra_data = 'Total tickets sold: ' . $total_tickets_sold . ' Sales: ' . number_format($total_amount_paid, 2) . ' Refunds: ' . number_format($total_amount_refunded, 2);
			else :
				$dbg->start_row();
				$dbg->add_cell('No records found');
				$dbg->end_row();
			endif;
			$dbg->end_data_section();
			echo json_encode(['row_count' => $result->rowCount(), 'html' => $dbg->get_html(), 'xls_sql' => $xls_sql_encoded, 'extra_data'=> $extra_data]);
			return;
			break;
		case 'refund_payment' :
			$sql = "SELECT * FROM payments WHERE id = :id";
			$stmt = $db->prepare($sql);
			$stmt->execute([
				':id' => $_POST['payment_id'],
			]);
			if ($row = $stmt->fetch(PDO::FETCH_OBJ)) :
				$refund_result = process_refund($row->pmt_amt, $row->trans_id, $row->pmt_cc);
				if ($refund_result[0] === true) :
					$sql = "UPDATE payments SET ".
								"refunded = 1, ".
								"refund_date = ".nzdate(date('m/d/Y')).", ".
								"refund_amt = ".$row->pmt_amt.", ".
								"refund_reason = ".$db->quote($_POST['refund_reason'])." ".
								"WHERE id =".$row->id." ";
					$db->query($sql);
					$result = json_encode(['result'=>'Success', 'refund_amt'=>$row->pmt_amt, 'refund_date'=>date('m/d/Y')]);
				else :
					$result = json_encode(['result'=>'Failure', 'reason_text'=>$refund_result[1]->response_reason_text]);
				endif;
			else :
				$result = json_encode(['result'=>'Transaction not found!']);
			endif;
			echo $result;
			return;
			break;
			/*
		case 'delete' :
			$sql = "DELETE FROM ticket_tiers WHERE id = ".nz(trim($_GET['id']), '0')." ";
			$db->query($sql) or die(json_encode(['result' => 'Database Error!']));
			//$sql = "UPDATE events SET location_id = NULL WHERE id = ".nz(trim($_GET['id']), '0')." ";
			//$db->query($sql) or die(json_encode(['result' => 'Database Error!']));
			$msg = 'Success';
			echo json_encode(['result' => $msg]);
			return;
			break;
		case 'inactivate' :
			$sql = "UPDATE ticket_tiers SET active = 0 WHERE id = ".nz(trim($_GET['id']), '0')." ";
			$db->query($sql) or die(json_encode(['result' => 'Database Error!']));
			$msg = 'Success';
			echo json_encode(['result' => $msg]);
			return;
			break;
		*/
	endswitch;