Data Messages.php:
<?php
//===========================================================================
//* -- ~~ Crafty Syntax Live Help ~~ -- *
//===========================================================================
// URL: http://www.craftysyntax.com/ EMAIL: ericg <at> craftysyntax <dot> com
// Copyright (C) 2003-2005 Eric Gerdes (http://www.craftysyntax.com )
// --------------------------------------------------------------------------
// $ CVS will be released with version 3.1.0 $
// $ Please check http://www.craftysyntax.com/ or REGISTER your program for updates $
// --------------------------------------------------------------------------
// NOTICE: Do NOT remove the copyright and/or license information any files.
// doing so will automatically terminate your rights to use program.
// If you change the program you MUST clause your changes and note
// that the original program is Crafty Syntax Live help or you will
// also be terminating your rights to use program and any segment
// of it.
// --------------------------------------------------------------------------
// LICENSE:
// This program is free software; you can redistribute it and/or
// modify it under the terms of the GNU General Public License
// as published by the Free Software Foundation;
// This program is distributed in the hope that it will be useful,
// but WITHOUT ANY WARRANTY; without even the implied warranty of
// MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
// GNU General Public License for more details.
//
// You should have received a copy of the GNU General Public License
// along with this program in a file named LICENSE.txt .
// --------------------------------------------------------------------------
// BIG NOTE:
// At the time of the release of this version of CSLH, Version 3.1.0
// which is a more modular, extendable , “skinable” version of CSLH
// was being developed.. please visit http://www.craftysyntax.com to see if it was released!
//===========================================================================
// this file is only called as an include.. everything else is a hack:
if (!(defined('IS_SECURE'))){
print "Hacking attempt . Exiting..";
exit;
}
// Need these because this is included inside a function where globals are
// out of the scope.
Global $mydatabase, $UNTRUSTED, $dbtype, $lang, $color_alt2, $color_alt1, $identity;
if(empty($UNTRUSTED['show'])){ $UNTRUSTED['show']= "";}
if(empty($UNTRUSTED['view'])){ $UNTRUSTED['view']= "";}
if(empty($UNTRUSTED['year'])){ $UNTRUSTED['year']= date("Y"); }
if(empty($UNTRUSTED['month'])){ $UNTRUSTED['month']= date("m"); }
if(empty($UNTRUSTED['expand'])){ $UNTRUSTED['expand'] = 0; }
if(empty($UNTRUSTED['top'])){ $UNTRUSTED['top'] = 0; }
if(empty($UNTRUSTED['perpage'])){ $UNTRUSTED['perpage'] = 25; }
$month = sprintf("%02d", intval($UNTRUSTED['month']));
$year = sprintf("%04d", intval($UNTRUSTED['year']));
$lastaction = date("Ymdhis");
$startdate = date("Ymd");
$expand_array = split(", ", $UNTRUSTED['expand']);
// Select out the current months data:
$whatYm = $UNTRUSTED['year'] . $UNTRUSTED['month'];
// if no admin rights then user can not clear or remove data:
$query = "SELECT * FROM livehelp_users WHERE sessionid='".$identity['SESSIONID']."'";
$data = $mydatabase->query($query);
$row = $data->fetchRow(DB_FETCHMODE_ASSOC);
$isadminsetting = $row['isadmin'];
$myid = $row['user_id'];
if($isadminsetting != "Y"){
$UNTRUSTED['clearall'] = "";
$UNTRUSTED['remove']="";
$UNTRUSTED['removereferer']="";
$UNTRUSTED['nukeit']="";
}
if(!(empty($UNTRUSTED['whichdepartment']))){
$sqlquery = "SELECT user_id FROM livehelp_operator_departments WHERE user_id='$myid' AND department='".intval($UNTRUSTED['whichdepartment'])."' ";
$data_check = $mydatabase->query($sqlquery);
if( ($UNTRUSTED['whichdepartment']!=0) && ($data_check->numrows() == 0) ){
$UNTRUSTED['whichdepartment'] = "";
}
}
if(empty($UNTRUSTED['whichdepartment'])){
$qQry = "SELECT department FROM livehelp_operator_departments WHERE user_id='$myid' LIMIT 1";
$qRes = $mydatabase->query($qQry);
$qRow = $qRes->fetchRow(DB_FETCHMODE_ORDERED);
$UNTRUSTED['whichdepartment'] = $qRow[0];
}
// Delete a message:
if(!(empty($UNTRUSTED['remove']))){
$query = "DELETE FROM livehelp_leavemessage WHERE id=". intval($UNTRUSTED['remove']);
$mydatabase->query($query);
}
?>
<FORM action=data.php METHOD=POST name=dataformrefer>
<input type=hidden name=tab value=<?php echo $UNTRUSTED['tab']; ?>>
<table bgcolor=DDDDDD width=600><tr><td>
<b><?php echo $lang['month']; ?></b><select name=month onchange=document.dataformrefer.submit()>
<option value=01 <?php if($UNTRUSTED['month'] == "01"){ print " SELECTED "; } ?>><?php echo $lang['jan']; ?></option>
<option value=02 <?php if($UNTRUSTED['month'] == "02"){ print " SELECTED "; } ?>><?php echo $lang['feb']; ?></option>
<option value=03 <?php if($UNTRUSTED['month'] == "03"){ print " SELECTED "; } ?>><?php echo $lang['mar']; ?></option>
<option value=04 <?php if($UNTRUSTED['month'] == "04"){ print " SELECTED "; } ?>><?php echo $lang['apr']; ?></option>
<option value=05 <?php if($UNTRUSTED['month'] == "05"){ print " SELECTED "; } ?>><?php echo $lang['may']; ?></option>
<option value=06 <?php if($UNTRUSTED['month'] == "06"){ print " SELECTED "; } ?>><?php echo $lang['jun']; ?></option>
<option value=07 <?php if($UNTRUSTED['month'] == "07"){ print " SELECTED "; } ?>><?php echo $lang['jul']; ?></option>
<option value=08 <?php if($UNTRUSTED['month'] == "08"){ print " SELECTED "; } ?>><?php echo $lang['aug']; ?></option>
<option value=09 <?php if($UNTRUSTED['month'] == "09"){ print " SELECTED "; } ?>><?php echo $lang['sep']; ?></option>
<option value=10 <?php if($UNTRUSTED['month'] == "10"){ print " SELECTED "; } ?>><?php echo $lang['oct']; ?></option>
<option value=11 <?php if($UNTRUSTED['month'] == "11"){ print " SELECTED "; } ?>><?php echo $lang['nov']; ?></option>
<option value=12 <?php if($UNTRUSTED['month'] == "12"){ print " SELECTED "; } ?>><?php echo $lang['dec']; ?></option>
</select> <b><?php echo $lang['year']; ?></b><select name=year onchange=document.dataformrefer.submit()>
<?php
for($i=2004; $i<=date("Y"); $i++){
print "<option value=$i ";
if($UNTRUSTED['year'] == $i){ print " SELECTED "; }
print ">$i</option>";
}
?>
</select> </td> </td>
<td> </td>
<td><b><?php echo $lang['txt43']; ?>:</b> <select name="whichdepartment" onchange="document.dataformrefer.submit();">
<?php
$query = "SELECT livehelp_departments.recno, livehelp_departments.nameof FROM livehelp_departments, livehelp_operator_departments WHERE livehelp_departments.recno=livehelp_operator_departments.department AND livehelp_operator_departments.user_id='$myid' order by nameof";
$datad = $mydatabase->query($query);
while($row = $datad->fetchRow(DB_FETCHMODE_ASSOC)){
print "<option value=".$row['recno'];
if($UNTRUSTED['whichdepartment']==$row['recno'])
print " SELECTED ";
print " >".$row['nameof']."</option>\n";
}
?>
</select></td>
</tr>
</table>
</FORM>
<table bgcolor=DDDDDD width=600><tr><td>
<b><?php echo $lang['messages']; ?>:</b></td></tr></table>
<?php
$whatYm_b = $whatYm . "00000000";
$whatYm_e = $whatYm . "99999999";
$whichdepartmentsql = "";
$whichdepartmentsql = " AND department=". intval($UNTRUSTED['whichdepartment']) . " ";
$query = "SELECT * FROM livehelp_leavemessage WHERE dateof>$whatYm_b AND dateof<$whatYm_e $whichdepartmentsql order by dateof DESC";
$refer_a = $mydatabase->query($query);
$total_p = $refer_a->numrows();
$perpage = intval($UNTRUSTED['perpage']);
$top = intval($UNTRUSTED['top']);
$show = $UNTRUSTED['show'];
$pageUrl = "data.php";
$varstring = "&tab=".$UNTRUSTED['tab']."&show=trans&month=".$UNTRUSTED['month'] . "&year=" . $UNTRUSTED['year'];
if(empty($UNTRUSTED['perpage'])) $UNTRUSTED['perpage'] = 25;
if(empty($UNTRUSTED['offset'])) $UNTRUSTED['offset'] = 0;
print pagingLinks($pageUrl, $total_p, $varstring, $UNTRUSTED['offset'], $UNTRUSTED['perpage']);
?>
<table width=600>
<td bgcolor=#FFFFFF><b><?php echo $lang['date']; ?></b></td>
<?php
// get list of fields for this department..
$q = "SELECT headertext, id FROM livehelp_questions WHERE module='leavemessage' AND department=". intval($UNTRUSTED['whichdepartment']) . " order by ordering ";
$qRes = $mydatabase->query($q);
$fields = array();
while($qRow = $qRes->fetchRow(DB_FETCHMODE_ORDERED)){
print "<td bgcolor=#FFFFFF><b>".$qRow[0]."</b></td>";
$fields[]= "field_" . $qRow[1];
}
?>
<td> </td>
</tr>
<?php
// show data :
$query = "SELECT * FROM livehelp_leavemessage WHERE dateof>$whatYm_b AND dateof<$whatYm_e $whichdepartmentsql order by dateof DESC LIMIT ". intval($UNTRUSTED['offset']) .", " . intval($perpage);
$data = $mydatabase->query($query);
$bgcolor="$color_alt2";
$myfields = array();
if($data->numrows() == 0){
print "<tr><td colspan=7 bgcolor=#EEEEEE> " . $lang['txt212'] . " </td></tr>";
} else {
while($row = $data->fetchRow(DB_FETCHMODE_ASSOC)){
unset($myfields);
$myfields = array();
if($bgcolor=="$color_alt2"){ $bgcolor="$color_alt1"; } else { $bgcolor="$color_alt2"; }
print "<tr bgcolor=$bgcolor><td>";
print substr($row['dateof'], 4, 2) . "-" . substr($row['dateof'], 6, 2) . "-" . substr($row['dateof'], 0, 4) . " (" . substr($row['dateof'], 8, 2) . ":" . substr($row['dateof'], 10, 2) . ":" . substr($row['dateof'], 12, 2) . ")";
print "</td>";
// get fields:
$pairs = explode("&", $row['deliminated']);
for($i=0;$i<count($pairs);$i++){
$myarray = explode("=", $pairs[$i]);
$key = $myarray[0];
$myfields[$key] = urldecode($myarray[1]);
}
for($i=0;$i<count($fields);$i++){
$key = $fields[$i];
if(empty($myfields[$key])) $myfields[$key] = "";
print "<td>".substr($myfields[$key], 0, 255);
if( substr($myfields[$key], 0, 255) != $myfields[$key])
print " [ <a href=view_message.php?view=".$row['id']." target=_blank>". $lang['txt213'] ."..</a> ]";
print "</td>";
}
print "<td> <a href=view_message.php?view=".$row['id']." target=_blank>".$lang['view']."</a> ";
if($isadminsetting == "Y"){
print " <a href=data.php?tab=".$UNTRUSTED['tab']."&top=". $UNTRUSTED['top'] ."&remove=" . $row['id'] . " onClick=\"return confirm('" . $lang['areyousure'] . "')\"><font color=990000>". $lang['REMOVE'] ."</font></a> ";
}
print " </td>";
print "</tr>";
}
}
?>
</table><br><bR><bR>
<table bgcolor=#FFFFEE><tr><td>
<A href=csv.php?data=messages&department=<?php echo intval($UNTRUSTED['whichdepartment']); ?>&whatYm=<?php echo $whatYm ?> target=_blank><?php echo $lang['txt214']; ?></a> | <A href=csv.php?data=messages&department=<?php echo intval($UNTRUSTED['whichdepartment']); ?> target=_blank><?php echo $lang['txt215']; ?></a>
</td></tr></table>
Other Customer Support Scripts:
