~sit-developers/sit/master

<?php
// contacts.php
//
// SiT (Support Incident Tracker) - Support call tracking system
// Copyright (C) 2010-2014 The Support Incident Tracker Project
// Copyright (C) 2000-2009 Salford Software Ltd. and Contributors
//
// This software may be used and distributed according to the terms
// of the GNU General Public License, incorporated herein by reference.
//

// Author: Ivan Lucas <ivanlucas[at]users.sourceforge.net>

require ('core.php');
$permission = PERM_CONTACT_VIEW; // View Contacts
require (APPLICATION_LIBPATH . 'functions.inc.php');
// This page requires authentication
require (APPLICATION_LIBPATH . 'auth.inc.php');

$title = $strBrowseContacts;

// External variables
$search_string = clean_dbstring($_REQUEST['search_string']);
if ($search_string == '')
{
    if (!empty($i18nAlphabet))
    {
        $search_string = mb_substr($i18nAlphabet, 0 , 1);
    }
    else
    {
        $search_string = '*';
    }
}

if ($submit_value == 'go')
{
    // build SQL
    $sql  = "SELECT * FROM `{$dbContacts}` ";
    $search_string_len = mb_strlen(utf8_decode($search_string));
    if ($search_string != '*')
    {
        $sql .= "WHERE ";
        if ($search_string_len <= 6) $sql .= "id=('{$search_string}') OR ";
        if ($search_string_len <= 2)
        {
            $sql .= "SUBSTRING(surname,1,{$search_string_len})=('$search_string') ";
        }
        else
        {
            $sql .= "surname LIKE '%{$search_string}%' OR forenames LIKE '%{$search_string}%' OR ";
            $sql .= "CONCAT(forenames,' ',surname) LIKE '%{$search_string}%'";
        }
    }
    $sql .= " ORDER BY surname ASC, forenames ASC";

    // execute query
    $result = mysql_query($sql);
    if (mysql_error()) trigger_error("MySQL Query Error ".mysql_error(), E_USER_WARNING);

    if (mysql_num_rows($result) == 1)
    {
        //go straight to the contact
        $obj = mysql_fetch_object($result);
        $url = "contact_details.php?id={$obj->id}";
        header("Location: {$url}");
    }
}

include (APPLICATION_INCPATH . 'htmlheader.inc.php');

echo "<h2>".icon('contact', 32)." ";
echo "{$title}</h2>";
plugin_do('contacts');
echo "<table summary='alphamenu' class='maintable'>";
echo "<tr>";
echo "<td align='center'>";
echo "<form action='{$_SERVER['PHP_SELF']}' method='get'>";
echo "<p>{$strBrowseContacts}: ";
echo "<input type='text' id='search_string' style='width: 300px;' name='search_string' />";
echo "<input name='submit' type='submit' value=\"{$strGo}\" /></p>";
echo "<div id='search_string_choices' class='autocomplete'></div>";
echo autocomplete('search_string', 'contact', 'search_string_choices');

echo "</form>\n";
if ($displayinactive == "true")
{
    echo "<a href='{$_SERVER['PHP_SELF']}?displayinactive=false";
    if (!empty($search_string)) echo "&amp;search_string={$search_string}";
    echo "'>{$strShowActiveOnly}</a>";
    $inactivestring="displayinactive=true";
}
else
{
    echo "<a href='{$_SERVER['PHP_SELF']}?displayinactive=true";
    if (!empty($search_string)) echo "&amp;search_string={$search_string}";
    echo "'>{$strShowAll}</a>";
    $inactivestring="displayinactive=false";
}
echo "</td></tr><tr><td class='alphamenu'>";

echo "<a href='contact_new.php'>{$strNew}</a>";
echo alpha_index("{$_SERVER['PHP_SELF']}?search_string=", $inactivestring);
echo "</td></tr></table>";

if (empty($search_string))
{
    echo user_alert(sprintf($strFieldMustNotBeBlank, "'{$strSearch}'"), E_USER_ERROR);
}
else
{
    // perform search
    // check input
    if ($search_string == '')
    {
        $errors = 1;
        echo user_alert(sprintf($strFieldMustNotBeBlank, "'{$strSearch}'"), E_USER_ERROR);
    }
    // search for criteria
    if ($errors == 0)
    {
        if ($submit_value != 'go')
        {
            // Don't  need to do this again, already done above, us the results of that
            // build SQL
            $sql  = "SELECT c.* FROM `{$dbContacts}` AS c, `{$dbSites}` AS s ";
            $sql .= "WHERE c.siteid = s.id ";
            $search_string_len=mb_strlen(utf8_decode($search_string));
            if ($search_string != '*')
            {
                $sql .= " AND (";
                if ($search_string_len <= 6) $sql .= "c.id=('{$search_string}') OR ";

                if ($search_string_len <= 2)
                {
                    // $sql .= "SUBSTRING(c.surname,1,$search_string_len)=('$search_string') ";
                    $sql .= "c.surname LIKE '{$search_string}%' ";
                }
                else
                {
                    $sql .= "c.surname LIKE '%$search_string%' OR c.forenames LIKE '%{$search_string}%' OR ";
                    $sql .= "CONCAT(c.forenames,' ',c.surname) LIKE '%{$search_string}%'";
                }
                $sql .= " ) ";
            }

            if ($displayinactive == "false")
            {
                $sql .= " AND c.active = 'true' AND s.active = 'true'";
            }
            $sql .= " ORDER BY surname ASC";
            $result = mysql_query($sql);
            debug_log($sql);
            if (mysql_error()) trigger_error("MySQL Query Error ".mysql_error(), E_USER_WARNING);
        }

        if ($search_string == '*')
        {
            $search_term = $strAll;
        }
        else
        {
            $search_term = $search_string;
        }

        if (mysql_num_rows($result) == 0)
        {
            if (empty($search_string)) echo user_alert($strNoRecords, E_USER_NOTICE);
            else user_alert(sprintf($strSorryNoRecordsMatchingX, "<em>{$search_term}</em>"), E_USER_NOTICE);
        }
        else
        {

            echo "<p align='center'>".sprintf($strDisplayingXcontactMatchingY, mysql_num_rows($result), "<em>{$search_term}</em>")."</p>";

            echo "<table class='maintable'>
            <tr>
            <th>{$strName}</th>
            <th>{$strSite}</th>
            <th>{$strEmail}</th>
            <th>{$strTelephone}</th>
            <th>{$strFax}</th>
            <th>{$strAction}</th>
            </tr>";
            $shade = 'shade1';
            while ($results = mysql_fetch_object($result))
            {
                if ($results->active == 'false') $shade = 'expired';

                echo "<tr class='{$shade}'>";
                echo "<td><a href='contact_details.php?id={$results->id}'>{$results->surname}, {$results->forenames}</a></td>";
                echo "<td><a href='site_details.php?id={$results->siteid}'>".site_name($results->siteid)."</a></td>";
                echo "<td>";
                if ($results->dataprotection_email == 'Yes') echo "<em>{$strNoEmail}</em>"; 
                else echo $results->email;
                echo "</td>";
                echo "<td>";
                if ($results->dataprotection_phone == 'Yes') echo "<em>{$strNoCalls}</em>";
                else 
                {
                    if ($results->phone == '')  echo "<em>{$strNone}</em>";
                    else echo $results->phone;
                }
                echo "</td>";
                echo "<td>";
                if ($results->fax == '') echo "<em>{$strNone}</em>";
                else echo $results->fax;
                echo "</td>";
                echo "<td>";
                $operations = array();
                $operations[$strNewIncident] = "incident_new.php?action=findcontact&amp;contactid={$results->id}";
                $operations[$strEditContact] = "contact_edit.php?action=edit&amp;contact={$results->id}";
                echo html_action_links($operations);
                echo "</td></tr>";

                // invert shade
                if ($shade == 'shade1') $shade = 'shade2';
                else $shade = 'shade1';
            }
            echo "</table>";
        }
    }
}
include (APPLICATION_INCPATH . 'htmlfooter.inc.php');
?>