"; //var_dump($_REQUEST); //echo "

---

incoming array
"; //var_dump($incoming); // ******** begin database manipulation ******** // determine today's date and make it the default $today=date("Y-m-d"); $now=date("H:i:s"); if ($usersave) { // user parameters if ($discrepancy_text && $reported_by) { // sanitize and fix blank date and time $report_date=mysqli_real_escape_string($drs_db,$report_date); $report_time=mysqli_real_escape_string($drs_db,$report_time); if (!$report_date) $report_date=$today; if (!$report_time) $report_time=$now; // remove html tags from discrepancy text and sanitize $discrepancy_text=strip_tags($discrepancy_text); $clean_discrepancy_text=mysqli_real_escape_string($drs_db,$discrepancy_text); $clean_reported_by=mysqli_real_escape_string($drs_db,$reported_by); // update the record in writeups mysqli_query($drs_db,"update writeups set device=\"$device\",discovered=\"$discovered\",functional=\"$functional\",reported_by=\"$clean_reported_by\",report_date=\"$report_date\",report_time=\"$report_time\",subsystem=\"$subsystem\",discrepancy_text=\"$clean_discrepancy_text\" where id=\"$id\""); // remove writeup from all groups and add to only selected groups mysqli_query($drs_db,"delete from links where writeupid=\"$id\""); foreach($group as &$link) { if($link==0) { // new group was requested mysqli_query($drs_db,"insert into groups(name) value(\"\")"); $newgroup=mysqli_insert_id($drs_db); $link=$newgroup; } mysqli_query($drs_db,"insert into links(linkgroup, writeupid) values(\"$link\", \"$id\")"); } } } elseif ($techsave) { // tech parameters if ($role) { if ($action_text) { // sanitize and fix blank date and time $action_date=mysqli_real_escape_string($drs_db,$action_date); $action_time=mysqli_real_escape_string($drs_db,$action_time); if (!$action_date) $action_date=$today; if (!$action_time) $action_time=$now; // remove html tags from action text and sanitize $action_text=strip_tags($action_text); $clean_action_text=mysqli_real_escape_string($drs_db,$action_text); // update the record in writeups if ($action_reason=='') $action_reason=0; mysqli_query($drs_db,"update writeups set status=\"$status\",action_by=\"$action_by\",action_date=\"$action_date\",action_time=\"$action_time\",action_reason=\"$action_reason\",action_text=\"$clean_action_text\" where id=\"$id\""); } } } // get current writeup data from database to populate fields $writeupdata=mysqli_fetch_assoc(mysqli_query($drs_db,"select * from writeups where id=\"$id\"")); $device=$writeupdata['device']; $discovered=$writeupdata['discovered']; $functional=$writeupdata['functional']; $reported_by=$writeupdata['reported_by']; $report_date=$writeupdata['report_date']; $report_time=$writeupdata['report_time']; $subsystem=$writeupdata['subsystem']; $discrepancy_text=$writeupdata['discrepancy_text']; $status=$writeupdata['status']; $action_by=$writeupdata['action_by']; $action_date=$writeupdata['action_date']; $action_time=$writeupdata['action_time']; $action_reason=$writeupdata['action_reason']; $action_text=$writeupdata['action_text']; if ($useredit || $techedit) { if (!$report_date) $report_date=$today; if (!$report_time) $report_time=$now; } else { if (!$report_date) $report_date=" "; if (!$report_time) $report_time=" "; } if ($techedit) { if (!$action_date) $action_date=$today; if (!$action_time) $action_time=$now; } else { if (!$action_date) $action_date=" "; if (!$action_time) $action_time=" "; } // ******** end database manipulation ******** pagetable("begin"); if (!$print) { pageblock("left","begin"); sidemenu(); pageblock("left","end"); } pageblock("right","begin"); banner($print); echo "
"; // display the form if ($usersave) { if ($discrepancy_text && $reported_by) { format_message(0,"Writeup modified. Return to Open Writeups page."); } if (!$discrepancy_text) { format_message(1,"You didn't enter any discrepancy text. Please try again."); } if (!$reported_by) { format_message(1,"You didn't enter your name in the Reported by: block. Please try again."); } } if ($techsave) { if ($role && $action_text) { format_message(0,"Writeup modified. Return to Open Writeups page."); } if ($role && !$action_text) { format_message(1,"You didn't enter any action taken text. Please try again."); } } echo "

"; // start writeup table section if ($status==1) $statusind="OPEN"; if ($status==2) $statusind="CLSD"; if ($status==3) $statusind="DFRD"; echo " "; $funcyesstate=$funcnostate=""; if($functional==1) { $funcyesstate="checked"; $func_ind="$functional_yes"; } if($functional==0) { $funcnostate="checked"; $func_ind="$functional_no"; } $openstate=$closedstate=$deferredstate=""; if($status==1) $openstate="selected"; if($status==2) $closedstate="selected"; if($status==3) $deferredstate="selected"; echo " "; } else { echo "

Writeup ID $id	$device_term "; if ($useredit) { echo " "; $drow=mysqli_query($drs_db,"select * from devices where active is true order by id asc"); while ($ditem=mysqli_fetch_assoc($drow)) { if ($device==$ditem["id"]) { printf("%s",$ditem["id"],$ditem["name"]); } else { printf("%s",$ditem["id"],$ditem["name"]); } } echo " "; } else { $dname=dblookup($drs_db,"devices","id","name",$device); echo " $dname "; } echo "	Subsystem "; if ($useredit) { echo " "; $ssrow=mysqli_query($drs_db,"select * from subsystems where active is true order by id asc"); while ($ssitem=mysqli_fetch_assoc($ssrow)) { if ($subsystem==$ssitem["id"]) { printf("%s",$ssitem["id"],$ssitem["description"],$ssitem["name"]); } else { printf("%s",$ssitem["id"],$ssitem["description"],$ssitem["name"]); } } echo " "; } else { $ssname=dblookup($drs_db,"subsystems","id","name",$subsystem); $ssdesc=dblookup($drs_db,"subsystems","id","description",$subsystem); echo " $ssname "; } echo "
$discovered_term "; if ($useredit) { echo " "; if ($disc_drop_data=="Name") { $discddtitle="whendiscovereddesc"; $discddtext="whendiscoveredname"; } else if ($disc_drop_data=="Desc") { $discddtitle="whendiscoveredname"; $discddtext="whendiscovereddesc"; } $discrow=mysqli_query($drs_db,"select * from discovered where active is true order by whendiscoveredname asc"); while ($discitem=mysqli_fetch_assoc($discrow)) { if ($discovered==$discitem["id"]) { printf("%s",$discitem["id"],$discitem["$discddtitle"],$discitem["$discddtext"]); } else { printf("%s",$discitem["id"],$discitem["$discddtitle"],$discitem["$discddtext"]); } } echo " "; } else { $discname=dblookup($drs_db,"discovered","id","whendiscoveredname",$discovered); $discdesc=dblookup($drs_db,"discovered","id","whendiscovereddesc",$discovered); echo " $discname "; } echo "	Report Date "; if ($useredit && $role) { echo "

$report_date

"; } echo " Report Time
"; if ($useredit && $role) { echo " "; } else { echo "

$report_time

"; } echo " Discrepancy (required)
"; if ($useredit) { echo "$discrepancy_text
"; } else { echo "

$discrepancy_text

"; } echo " Reported by (required)
"; if ($useredit) { echo " "; } else { echo "

$reported_by

"; } echo " $functional_term?  
"; if ($useredit) { echo " Yes      No "; } else { echo "

$func_ind

"; } echo " "; if ($useredit) { echo " Group Assignments:   "; // Group multi-select ******************** echo " "; $linkquery=mysqli_query($drs_db,"select * from links where writeupid=\"$id\""); // create an array of ids returned by group query $wugroups=[]; while ($eachlink=mysqli_fetch_assoc($linkquery)) { $wugroups[]=$eachlink['linkgroup']; } reset($wugroups); $grow=mysqli_query($drs_db,"select * from groups order by id asc"); printf("%s",0,"New group"); while ($gitem=mysqli_fetch_assoc($grow)) { if ($gitem["name"]=="") { $gname="Group ".$gitem["id"]; } else { $gname=$gitem["name"]; } if (in_array($gitem["id"],$wugroups,true)) { printf("%s",$gitem["id"],$gname); } else { printf("%s",$gitem["id"],$gname); } } echo " "; echo " "; } else { echo "Group Assignments:  "; $wustat=dblookup($drs_db,"writeups","id","status",$id); if ($wustat==2 && !$role) { $allowuseredit="disabled"; } else { $allowuseredit=NULL; } // Group multi-select ******************** echo " "; $linkquery=mysqli_query($drs_db,"select * from links where writeupid=\"$id\""); // create an array of ids returned by group query $wugroups=[]; while ($eachlink=mysqli_fetch_assoc($linkquery)) { $wugroups[]=$eachlink['linkgroup']; } reset($wugroups); $grow=mysqli_query($drs_db,"select * from groups order by id asc"); while ($gitem=mysqli_fetch_assoc($grow)) { if ($gitem["name"]=="") { $gname="Group ".$gitem["id"]; } else { $gname=$gitem["name"]; } if (in_array($gitem["id"],$wugroups,true)) { printf("%s",$gitem["id"],$gname); } } echo " "; echo " "; } // end of user section echo " Status
"; if ($techedit) { echo " OPEN CLOSED DEFERRED "; } else { echo "

$statusind

"; } echo " Action taken by
"; if ($techedit) { if ($role==ADMIN) { // allow selection of tech name echo " "; $persrow=mysqli_query($drs_db,"select id,firstname,lastname from users where active is true order by lastname asc"); while ($persitem=mysqli_fetch_assoc($persrow)) { if ($userid==$persitem["id"]) { printf("%s %s",$persitem["id"],$persitem["firstname"],$persitem["lastname"]); } else { printf("%s %s",$persitem["id"],$persitem["firstname"],$persitem["lastname"]); } } echo " "; } else { // limit the choice to the tech in question echo " "; $persrow=mysqli_query($drs_db,"select id,firstname,lastname from users where active is true order by lastname asc"); while ($persitem=mysqli_fetch_assoc($persrow)) { if ($userid==$persitem["id"]) { printf("%s %s",$persitem["id"],$persitem["firstname"],$persitem["lastname"]); } } echo " "; } } else { $techfname=dblookup($drs_db,"users","id","firstname",$action_by); $techlname=dblookup($drs_db,"users","id","lastname",$action_by); echo "

$techfname $techlname

"; } echo " Status change reason
"; if ($techedit) { echo " "; $reasrow=mysqli_query($drs_db,"select id,text from reasons where active is true order by id asc"); if (!$action_reason) echo ""; while ($reasitem=mysqli_fetch_assoc($reasrow)) { if ($action_reason==$reasitem["id"]) { printf("%s",$reasitem["id"],$reasitem["text"]); } else { printf("%s",$reasitem["id"],$reasitem["text"]); } } echo " "; } else { $reasonname=dblookup($drs_db,"reasons","id","text",$action_reason); echo"

$reasonname

"; } echo " Action Taken (required)
"; if ($techedit) { echo " $action_text
"; } else { echo "

$action_text

"; } echo " Action Taken Date
"; if ($techedit) { echo " "; } else { echo "

$action_date

"; } echo " Action Taken Time
"; if ($techedit) { echo " "; } else { echo "

$action_time

"; } if ($techedit) { echo " "; } else { if (!$role) { $live="disabled"; } else { $live=NULL; } echo " "; } echo "

"; banner($print); pageblock("right","end"); pagetable("end"); framework("end","","",$print); ?>