<?php include('_mod_security.php'); ?>
<?php
	//var_dump($_GET);
	$sql = '';
	switch ($_GET['func']):
		case 'grid' :
			require_once('classes/lcs_db_grid.php');
			$dbg = new lcs_db_grid;
			$dbg->start_header_section();
			$dbg->start_header();
			$dbg->add_column(array('label' => 'Photo', 'dbcol' => 'filename', 'width' => '275px', 'sortable' => false, 'searchable' => false, 'align' => 'center'));
			$dbg->add_column(array('label' => 'Description', 'dbcol' => 'description', 'width' => '120px'));
			$dbg->add_column(array('label' => 'Create Date', 'dbcol' => 'create_date', 'width' => '120px'));
			$dbg->add_column(array('label' => 'Delete', 'sortable' => false, 'searchable' => false, 'width' => '75px', 'align' => 'center'));
			$dbg->end_header();
			$dbg->end_header_section();
			$sql = "SELECT * FROM verification_photos ".
					"WHERE ".$dbg->search_spec()." ".$_GET['parm1']." ".$_GET['parm2']." ".$_GET['parm3']." ".
					"ORDER BY ".$dbg->sort_spec();
			//echo ' === '.$sql.' === ';
			$xls_sql = $sql;
			$xls_sql_encoded = xls_sql_encrypt($xls_sql);
			$result = $db->query($sql) or die('Database Error!');
			$dbg->start_data_section();
			if ($result->rowCount() > 0) :
				while ($row = $result->fetch(PDO::FETCH_OBJ)) :
					$dbg->start_row();
					$dbg->add_cell('<a href="index.php?IX='.$_GET['ix_form'].'&id='.$row->photo_id.'" ><img src = "photo_uploads/'.$row->filename.'" style="max-height:200px;" /></a>');
					$dbg->add_cell('<a href="index.php?IX='.$_GET['ix_form'].'&id='.$row->photo_id.'" >'.$row->description.'</a>');
					$dbg->add_cell($row->create_date);
					$dbg->add_cell('<a href="javascript:confirmDelete(\'Are you sure? This action cannot be reversed.\', \''.$row->photo_id.'\', \''.$_GET['div'].'\');"><img src="img/delete_icon.gif" style="border:none;" /></a>');
					$dbg->end_row();
				endwhile;
			else :
				$dbg->start_row();
				$dbg->add_cell('No records found');
				$dbg->end_row();
			endif;
			$dbg->end_data_section();
			echo json_encode(array('row_count' => $result->rowCount(), 'html' => $dbg->get_html(), 'xls_sql' => $xls_sql_encoded));
			return;
			break;
		case 'delete' :
			try {
				$sql = "SELECT * FROM verification_photos WHERE photo_id = ".nz(trim($_GET['id']), '0');
				$result = $db->query($sql) or die('Database Error!');
				if ($result->rowCount() > 0) :
					$row = $result->fetch(PDO::FETCH_OBJ);
					if (unlink(APP_ROOT_DIR . '/photo_uploads/'.$row->filename)) :
						$sql = "DELETE FROM verification_photos WHERE photo_id = ".nz(trim($_GET['id']), '0');
						$db->query($sql);
						$msg = 'Success';
					else :
						$msg = 'Error deleting photo file!';
					endif;
				else :
					$msg = 'Error: photo record not found!';
				endif;
			} catch(PDOException $ex) {
				$msg = 'Database Error! '.$ex->getMessage.' === '.$sql.' === ';
			}
			echo json_encode(array('result' => $msg));
			return;
			break;
	endswitch;
?>