"; if ($hastemplates) { // print the user header if ($user == "0") { echo "Global Templates"; } else { if ($user == $techid) { echo "My templates"; } else { echo "Templates for $tblusername"; } } // print the table echo "
"; echo ""; while ($tablerow = mysqli_fetch_assoc($templatequery)) { $templateid = $tablerow["templateid"]; $templatename = $tablerow["templatename"]; // convert shift number to name $shiftname = dblookup($db, "shifts", "shiftid", "shiftname", $tablerow["shift"]); // convert subject number to name $subjname = dblookup($db, "subjects", "subjectid", "subjectname", $tablerow["subject"]); // create links of urls in note $fmtnote = convertweblinks($tablerow["lognote"]); // generate the flags string $flagstring = ""; $flagqry = mysqli_query($db, "select flagid from flagmap where notetemplateid=$templateid"); while ($flagid = mysqli_fetch_row($flagqry)) { $flagparams = mysqli_fetch_assoc(mysqli_query($db, "select * from flags where flagid=\"$flagid[0]\"")); $flagcolor = $flagparams["flagcolor"]; $flagsym = $flagparams["flagsym"]; $flagname = $flagparams["flagname"]; $flagstring = $flagstring . "$flagsym  "; } if ($flagstring) { $fmtnote = $fmtnote . "
" . $flagstring . "     "; } else { $fmtnote = $fmtnote . "
"; } // generate a reference string $refstring = NULL; $refstringqry = mysqli_query($db, "select target from reflinks where templateid=\"$templateid\""); while ($tgt = mysqli_fetch_row($refstringqry)) { $refstring = $refstring . " " . $tgt[0]; } // now print the line in the table if (!$isadmin && $user == "0") { $nameblock = "$templatename"; } else { $nameblock = "$templatename"; } printf( "\n", $nameblock, $shiftname, $subjname, $fmtnote, $refstring ); }; echo "

Template Name	Shift	Subject	Note	References
%s	%s	%s	%s	%s

---

"; } else { if ($user == "0") { echo "There are no global templates"; } else { if ($user == $techid) { echo "You have no templates"; } else { echo "$tblusername has no templates"; } } echo "

---

"; } echo "
"; } // ******** begin database manipulation ******** if ($usertemplateid) { $templateid = $usertemplateid; } else if ($globaltemplateid) { $templateid = $globaltemplateid; } else { $loadtemplate = NULL; } if ($operation == "add") { if ($submit) { if ($note) { // remove cruft from note text $note = strip_tags($note, ""); $note = mysqli_real_escape_string($db, $note); if ($authorized) { // check if name supplied if ($templatename) { $namesupplied = TRUE; // check if supplied name already exists if (! mysqli_num_rows(mysqli_query($db, "select templateid from notetemplates where tech=\"$efftechid\" and templatename=\"$templatename\""))) { // add the record to notetemplates mysqli_query($db, "insert into notetemplates(templatename,shift,tech,subject,lognote) values (\"$templatename\", \"$shift\",\"$efftechid\",\"$subject\",\"$note\")"); $newtemplateid = mysqli_insert_id($db); // update the flagmap table foreach ($flags as $thisflag) { // set flag for this note mysqli_query($db, "insert into flagmap(flagid,notetemplateid) values(\"$thisflag\",\"$newtemplateid\")"); } // add references to the reflinks table if (strlen($refstring)) { $refstring = trim($refstring); $refarray = explode(" ", $refstring); foreach ($refarray as $target) { mysqli_query($db, "insert into reflinks(templateid,target) values($newtemplateid,$target)"); } } $templateid = $newtemplateid; } else { $nameexists = TRUE; } } else { $namesupplied = FALSE; } } } } } if ($operation == "edit" || $operation == "delete") { // test to see if this templateid is owned by techid to prevent hijacking $owner = dblookup($db, "notetemplates", "templateid", "tech", $templateid); if (!$isadmin && ($owner != $techid)) $authorized = FALSE; if ($submit) { if ($note) { // remove cruft from note text $note = strip_tags($note, ""); $note = mysqli_real_escape_string($db, $note); if ($templatename) { $namesupplied = TRUE; } else { $namesupplied = FALSE; } if ($authorized) { // check if name was supplied if ($templatename) { // update notetemplates mysqli_query($db, "update notetemplates set templatename=\"$templatename\", shift=\"$shift\", tech=\"$efftechid\", subject=\"$subject\", lognote=\"$note\" where templateid=\"$templateid\""); // update the flagmap table mysqli_query($db, "delete from flagmap where notetemplateid=\"$templateid\""); foreach ($flags as $thisflag) { // set flag for this note mysqli_query($db, "insert into flagmap(flagid,notetemplateid) values(\"$thisflag\",\"$templateid\")"); } // update the reflinks table mysqli_query($db, "delete from reflinks where templateid=\"$templateid\""); if (strlen($refstring)) { $refstring = trim($refstring); $refarray = explode(" ", $refstring); foreach ($refarray as $target) { mysqli_query($db, "insert into reflinks(templateid,target) values($templateid,$target)"); } } } } } } if ($operation == "delete") { if ($authorized) { // update notetemplates mysqli_query($db, "delete from notetemplates where templateid=\"$templateid\""); // update the flagmap table mysqli_query($db, "delete from flagmap where notetemplateid=\"$templateid\""); // update the reflinks table mysqli_query($db, "delete from reflinks where templateid=\"$templateid\""); $templateid = NULL; $note = NULL; } } } // ******** end database manipulation ******** pagetable("begin"); if (!$print) { pageblock("left", "begin"); sidemenu(); pageblock("left", "end"); } pageblock("right", "begin"); banner($print); if ($submit || $operation == "delete") { // show success/failure messages $nameexists = $nameexists ?? NULL; $namesupplied = $namesupplied ?? NULL; if ($operation == "add") { $addfail = FALSE; if ($nameexists) { format_message(1, "Template creation failed because the name you supplied already exists. Please try again."); $addfail = TRUE; } if (!$namesupplied) { format_message(1, "Template creation failed because you didn't supply a name. Please try again."); $addfail = TRUE; } if (!$note) { format_message(1, "Template creation failed because you didn't enter any note text. Please try again."); $addfail = TRUE; } if (!$authorized) { format_message(1, "Template creation failed because you are not authorized to do so."); $addfail = TRUE; } if (!$addfail) format_message(0, "Template created."); } if ($operation == "edit") { $editfail = FALSE; if (!$namesupplied) { format_message(1, "Template save failed because you didn't supply a name. Please try again."); $editfail = TRUE; } if (!$note) { format_message(1, "Template save failed because you didn't enter any note text. Please try again."); $editfail = TRUE; } if (!$authorized) { format_message(1, "Template save failed because you are not authorized to do so."); $editfail = TRUE; } if (!$editfail) format_message(0, "Template modified."); } if ($operation == "delete") { $deletefail = FALSE; if (!$authorized) { format_message(1, "Template delete failed because you are not authorized to do so."); $deletefail = TRUE; } if (!$deletefail) format_message(0, "Template deleted."); } } if ($operation == "delete") { // just show the link back to the templates page echo "
Manage templates



"; } else if ($operation == "add" || $operation == "edit") { // Display the input form if ($loadtemplate) { // make templateid the selected template if ($usertemplateid) { $templateid = $usertemplateid; } else if ($globaltemplateid) { $templateid = $globaltemplateid; } else { $templateid = NULL; } } if ($operation == "edit" || $loadtemplate) { // use values from the templateid supplied with a defined tech id $loadeddata = mysqli_fetch_assoc(mysqli_query($db, "select * from notetemplates where templateid=\"$templateid\"")); $filltemplatename = $loadeddata["templatename"]; if ($efftechid) { $filltech = $efftechid; } else if ($isadmin && $loadeddata["tech"] == "0") { $filltech = "0"; } else { $filltech = $techid; } $fillshift = $loadeddata["shift"]; $fillsubject = $loadeddata["subject"]; $fillnote = $loadeddata["lognote"]; } else { // use empty values with a defined tech id $filltemplatename = NULL; if ($efftechid) { $filltech = $efftechid; } else { $filltech = $techid; } $fillshift = $defaultshift; $fillsubject = NULL; $fillnote = NULL; } if ($operation == "add") $optext = "Creating new"; if ($operation == "edit") $optext = "Editing"; echo "
$optext template

---

"; // show the template selection line templateselect($techid, $operation); // start template entry section echo "

"; if ($isadmin) { echo " "; } else { $authorized = TRUE; echo " "; } echo "

Template Name:
Tech:   "; if ($filltech == "0") { echo "--Global Template--"; } else { echo "--Global Template--"; } if ($techalpha) $torder = "techname"; else $torder = "techid"; $techrow = mysqli_query($db, "select * from techs order by $torder asc"); while ($techitem = mysqli_fetch_assoc($techrow)) { if ($techitem["techid"] == $filltech) { printf("%s", $techitem["techid"], $techitem["techname"]); } else { printf("%s", $techitem["techid"], $techitem["techname"]); } } echo "
Shift:   "; $shiftrow = mysqli_query($db, "select * from shifts"); while ($shiftitem = mysqli_fetch_assoc($shiftrow)) { if ($shiftitem["status"] == 1) { if ($shiftitem["shiftid"] == $fillshift) { printf("%s", $shiftitem["shiftid"], $shiftitem["shiftname"]); } else { printf("%s", $shiftitem["shiftid"], $shiftitem["shiftname"]); } } } echo "	Subject:   "; if ($subjalpha) $sorder = "subjectname"; else $sorder = "subjectid"; $subjrow = mysqli_query($db, "select * from subjects order by $sorder asc"); while ($subjitem = mysqli_fetch_assoc($subjrow)) { if ($subjitem["status"] == 1) { if ($subjitem["subjectid"] == $fillsubject) { printf("%s", $subjitem["subjectid"], $subjitem["subjectname"]); } else { printf("%s", $subjitem["subjectid"], $subjitem["subjectname"]); } } } echo "

Note: 
$fillnote"; echo "
    Insert Link
"; // create an array called theseflags and optionally load it with flagids set for this template unset($theseflags); $theseflags = []; if ($templateid) { $allflags = mysqli_query($db, "select flagid from flags"); while ($thisflag = mysqli_fetch_row($allflags)) { if (mysqli_num_rows(mysqli_query($db, "select id from flagmap where flagid=\"$thisflag[0]\" and notetemplateid=\"$templateid\""))) { $theseflags[] = $thisflag[0]; } } } $flagslist = mysqli_query($db, "select * from flags where status=1"); $flagsperline = 8; $flagcount = 1; // display checkboxes for all the flags, selecting the ones that are set for this template while ($flagcheckbox = mysqli_fetch_assoc($flagslist)) { if ($operation == "edit" && in_array($flagcheckbox["flagid"], $theseflags)) { printf( "%s", $flagcheckbox["flagid"], $flagcheckbox["flagcolor"], $flagcheckbox["flagname"], $flagcheckbox["flagsym"] ); } else { $flagid = $flagcheckbox["flagid"]; if (mysqli_num_rows(mysqli_query($db, "select flagid from flags where flagid=\"$flagid\" and status=1"))) { printf( "%s", $flagcheckbox["flagid"], $flagcheckbox["flagcolor"], $flagcheckbox["flagname"], $flagcheckbox["flagsym"] ); } } if ($flagcount < $flagsperline) { echo "   "; $flagcount++; } else { echo "
"; $flagcount = 1; } } if ($operation == "edit" || $loadtemplate) { // generate a reference string $refstring = NULL; $refstringqry = mysqli_query($db, "select target from reflinks where templateid=\"$templateid\""); while ($tgt = mysqli_fetch_row($refstringqry)) { $refstring = $refstring . " " . $tgt[0]; } } echo "

References:                                  "; if ($operation == "add" && $authorized) { echo " "; } if ($operation == "edit" && $authorized) { echo "      

Delete this templateDeleted templates are irretrievable! "; } echo "

"; } else { echo "
Create or copy a template

---

"; // Show my user template table templatetable($db, $techid, $techid); // Show global template table templatetable($db, $techid, "0"); if ($isadmin) { // Show template tables for other users $techqry = mysqli_query($db, "select techid from techs where techid != $techid and techid != 0"); while ($techtblrow = (mysqli_fetch_row($techqry))) { templatetable($db, $techid, $techtblrow[0]); } } } banner($print); pageblock("right", "end"); pagetable("end"); framework("end", "", "", $print);