interface/main/calendar/modules/PostCalendar/pnuser.php

   1 <?php
   2 @define('__POSTCALENDAR__','PostCalendar');
   3 /**
   4  *  $Id$
   5  *
   6  *  PostCalendar::PostNuke Events Calendar Module
   7  *  Copyright (C) 2002  The PostCalendar Team
   8  *  http://postcalendar.tv
   9  *
  10  *  This program is free software; you can redistribute it and/or modify
  11  *  it under the terms of the GNU General Public License as published by
  12  *  the Free Software Foundation; either version 2 of the License, or
  13  *  (at your option) any later version.
  14  *
  15  *  This program is distributed in the hope that it will be useful,
  16  *  but WITHOUT ANY WARRANTY; without even the implied warranty of
  17  *  MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
  18  *  GNU General Public License for more details.
  19  *
  20  *  You should have received a copy of the GNU General Public License
  21  *  along with this program; if not, write to the Free Software
  22  *  Foundation, Inc., 59 Temple Place, Suite 330, Boston, MA  02111-1307  USA
  23  *
  24  *  To read the license please read the docs/license.txt or visit
  25  *  http://www.gnu.org/copyleft/gpl.html
  26  *
  27  */
  28
  29 //=========================================================================
  30 //  Load the API Functions and Language defines
  31 //=========================================================================
  32 pnModAPILoad(__POSTCALENDAR__,'user');
  33
  34 //=========================================================================
  35 //  start the main postcalendar application
  36 //=========================================================================
  37 function postcalendar_user_main()
  38 {
  39  // check the authorization
  40
  41     if (!pnSecAuthAction(0, 'PostCalendar::', '::', ACCESS_OVERVIEW)) { return _POSTCALENDARNOAUTH; }
  42     // get the date and go to the view function
  43     $Date = postcalendar_getDate();
  44     return postcalendar_user_view(array('Date'=>$Date));
  45 }
  46
  47
  48 /**
  49  * view items
  50  * This is a standard function to provide an overview of all of the items
  51  * available from the module.
  52  */
  53 function postcalendar_user_view()
  54 {
  55     if (!pnSecAuthAction(0, 'PostCalendar::', '::', ACCESS_OVERVIEW)) { return _POSTCALENDARNOAUTH; }
  56     // get the vars that were passed in
  57     list($Date,
  58          $print,
  59          $viewtype,
  60          $jumpday,
  61          $jumpmonth,
  62          $jumpyear) = pnVarCleanFromInput('Date',
  63                                           'print',
  64                                           'viewtype',
  65                                           'jumpday',
  66                                           'jumpmonth',
  67                                           'jumpyear');
  68     $Date =& postcalendar_getDate();
  69     if(!isset($viewtype))   $viewtype = _SETTING_DEFAULT_VIEW;
  70
  71     // added to allow the view & providers to remain as the user last saw it -- JRM
  72     if ($_SESSION['viewtype']) $viewtype = $_SESSION['viewtype'];
  73     if ($_SESSION['pc_username']) $pc_username = $_SESSION['pc_username'];
  74
  75     return postcalendar_user_display(array('viewtype'=>$viewtype,'Date'=>$Date,'print'=>$print)) . postcalendar_footer();
  76 }
  77
  78 /**
  79  * display item
  80  * This is a standard function to provide detailed information on a single item
  81  * available from the module.
  82  */
  83 function postcalendar_user_display($args)
  84 {
  85     list($eid, $viewtype, $tplview,
  86          $pc_username, $Date, $print, $category, $topic, $pc_facility) = pnVarCleanFromInput('eid', 'viewtype', 'tplview',
  87                                                          'pc_username', 'Date', 'print', 'pc_category', 'pc_topic', 'pc_facility');
  88     // added to allow the view & providers to remain as the user last saw it -- JRM
  89     if ($_SESSION['viewtype']) $viewtype = $_SESSION['viewtype'];
  90     if ($_SESSION['pc_username']) $pc_username = $_SESSION['pc_username'];
  91
  92     // funky things happen if the view is 'details' and we don't have an event ID
  93     // so in such a case, we're going to revert to the 'day' view -- JRM
  94     if ($viewtype == 'details' && (!isset($eid) || $eid == "")) {
  95         $_SESSION['viewtype'] = 'day';
  96         $viewtype = $_SESSION['viewtype'];
  97     }
  98
  99     extract($args);
 100     if(empty($Date) && empty($viewtype)) { return false; }
 101     if(empty($tplview)) $tplview = 'default';
 102
 103     $uid = pnUserGetVar('uid');
 104     $theme = pnUserGetTheme();
 105
 106     //$cacheid = md5($Date.$viewtype.$tplview._SETTING_TEMPLATE.$eid.$print.$uid.'u'.$pc_username.$theme.'c'.$category.'t'.$topic);
 107     $cacheid = md5(strtotime("now"));
 108
 109     switch ($viewtype)
 110     {
 111         case 'details':
 112             if (!(bool)PC_ACCESS_READ) { return _POSTCALENDARNOAUTH; }
 113             $event = pnModAPIFunc('PostCalendar','user','eventDetail',array('eid'=>$eid,
 114                                                                            'Date'=>$Date,
 115                                                                            'print'=>$print,
 116                                                                            'cacheid'=>$cacheid));
 117             if($event === false) {
 118                 pnRedirect(pnModURL(__POSTCALENDAR__,'user'));
 119             }
 120             $out  = "\n\n<!-- START user_display -->\n\n";
 121             $out .= $event;
 122             $out .= "\n\n<!-- END user_display -->\n\n";
 123             break;
 124
 125         default :
 126             if (!(bool)PC_ACCESS_OVERVIEW) {
 127                 return _POSTCALENDARNOAUTH;
 128             }
 129             $out  = "\n\n<!-- START user_display -->\n\n";
 130             $out .= pnModAPIFunc('PostCalendar','user','buildView',array('Date'=>$Date,
 131                                                                          'viewtype'=>$viewtype,
 132                                                                          'cacheid'=>$cacheid));
 133             $out .= "\n\n<!-- END user_display -->\n\n";
 134             break;
 135     }
 136     // Return the output that has been generated by this function
 137     return $out;
 138 }
 139 function postcalendar_user_delete()
 140 {
 141     if(!(bool)PC_ACCESS_ADD) {
 142         return _POSTCALENDAR_NOAUTH;
 143     }
 144
 145     $output =& new pnHTML();
 146     $output->SetInputMode(_PNH_VERBATIMINPUT);
 147
 148     $uname = $_SESSION['authUser'];
 149     list($action,$pc_event_id) = pnVarCleanFromInput('action','pc_event_id');
 150     $event =& postcalendar_userapi_pcGetEventDetails($pc_event_id);
 151     if($uname != $event['uname']) {
 152         if (!validateGroupStatus($uname,getUsername($event['uname']))) {
 153
 154          return _PC_CAN_NOT_DELETE;
 155         }
 156     }
 157     //if($uname != $event['uname']) {
 158     //    return _PC_CAN_NOT_DELETE;
 159     //}
 160     unset($event);
 161
 162     $output->FormStart(pnModUrl(__POSTCALENDAR__,'user','deleteevents'));
 163     $output->FormHidden('pc_eid',$pc_event_id);
 164     $output->Text(_PC_DELETE_ARE_YOU_SURE.' ');
 165     $output->FormSubmit(_PC_ADMIN_YES);
 166     $output->FormEnd();
 167     $output->Linebreak(2);
 168     $output->Text(pnModAPIFunc(__POSTCALENDAR__,'user','eventDetail',array('eid'=>$pc_event_id,'cacheid'=>'','print'=>0,'Date'=>'')));
 169     $output->Linebreak(2);
 170
 171
 172     return $output->GetOutput();
 173 }
 174 function postcalendar_user_deleteevents()
 175 {
 176     if(!(bool)PC_ACCESS_ADD) {
 177         return _POSTCALENDAR_NOAUTH;
 178     }
 179
 180
 181     $pc_eid = pnVarCleanFromInput('pc_eid');
 182     $event =& postcalendar_userapi_pcGetEventDetails($pc_eid);
 183     $uname = $_SESSION['authUser'];
 184     if($uname != $event['uname']) {
 185         if (!validateGroupStatus($uname,getUsername($event['uname']))) {
 186
 187          return _PC_CAN_NOT_DELETE;
 188         }
 189     }
 190     unset($event);
 191
 192     $output =& new pnHTML();
 193     $output->SetInputMode(_PNH_VERBATIMINPUT);
 194     list($dbconn) = pnDBGetConn();
 195     $pntable = pnDBGetTables();
 196     $events_table = $pntable['postcalendar_events'];
 197     $events_column = &$pntable['postcalendar_events_column'];
 198     //hipaa doesn't allow for actual deletes, so just change to inactive
 199     //$sql = "DELETE FROM $events_table WHERE $events_column[eid] = '$pc_eid'";
 200     $sql = "UPDATE $events_table SET pc_eventstatus = 0 WHERE $events_column[eid] = '$pc_eid'";
 201     $dbconn->Execute($sql);
 202     $tpl =& new pcSmarty();
 203     $template_name = _SETTING_TEMPLATE;
 204     if(!isset($template_name)) {
 205         $template_name = 'default';
 206     }
 207     $tpl->assign('STYLE',$GLOBALS['style']);
 208     $output->Text($tpl->fetch($template_name . "/views/header.html"));
 209     $output->Text($tpl->fetch($template_name . "/views/global/navigation.html"));
 210     $output->Text("<br /><br />");
 211
 212
 213     if ($dbconn->ErrorNo() != 0) {
 214         $output->Text(_PC_ADMIN_EVENT_ERROR);
 215     } else {
 216
 217
 218         $output->Text(_PC_ADMIN_EVENTS_DELETED);
 219     }
 220     $output->Text($tpl->fetch($template_name . "/views/footer.html"));
 221     // clear the template cache
 222     $tpl->clear_all_cache();
 223
 224     return $output->GetOutput();
 225 }
 226
 227 //this function is only used by the system to delete temp events used in certain
 228 //collision calculations
 229 function delete_event($title)
 230 {
 231     list($dbconn) = pnDBGetConn();
 232     $pntable = pnDBGetTables();
 233     $events_table = $pntable['postcalendar_events'];
 234     $events_column = &$pntable['postcalendar_events_column'];
 235     //this function is only used by the system to delete temp events used in certain
 236     //collision calculations
 237     $sql = "DELETE FROM $events_table WHERE pc_eventstatus = " ._EVENT_TEMPORARY ." AND pc_title = '$title'";
 238     $dbconn->Execute($sql);
 239     if ($dbconn->ErrorNo() != 0) {
 240         return 0;
 241     } else {
 242         return 1;
 243     }
 244
 245 }
 246
 247 /**
 248  * submit an event
 249  */
 250 function postcalendar_user_edit($args) {return postcalendar_user_submit($args); }
 251 function postcalendar_user_submit2($args)
 252 {
 253
 254     if (!(bool)PC_ACCESS_ADD) {
 255         return _POSTCALENDARNOAUTH;
 256     }
 257     extract($args);
 258     //print_r($_GET);
 259     $category = pnVarCleanFromInput('event_category');
 260     //print_r($category);
 261     print "dble is ".pnVarCleanFromInput('double_book')." data_loaded is ".pnVarCleanFromInput('data_loaded');
 262     //print_r($_POST);
 263     if(pnVarCleanFromInput('data_loaded') || !empty($category))    //submitting
 264     {
 265         return postcalendar_user_submit2($agrs);
 266     }
 267     else
 268     {
 269         //select the category you wish to add,
 270         //using the info from that category we can populate some data
 271
 272         $output =& new pnHTML();
 273         $output->SetInputMode(_PNH_VERBATIMINPUT);
 274         $output->Text('<body bgcolor="'.$GLOBALS['style']['BGCOLOR2'].'"></body>');
 275         // get the theme globals :: is there a better way to do this?
 276         pnThemeLoad(pnUserGetTheme());
 277         $all_categories = pnModAPIFunc(__POSTCALENDAR__,'admin','getCategories');
 278         $output->Text('<form name="cats" method="post" action="'.pnModURL(__POSTCALENDAR__,'user','submit2', $args).'">');
 279         $output->FormHidden('no_nav', $_GET['no_nav']);
 280         $output->FormHidden('event_startampm', $_GET['event_startampm']);
 281         $output->FormHidden('event_starttimeh', $_GET['event_starttimeh']);
 282         $output->FormHidden('event_starttimem', $_GET['event_starttimem']);
 283         $output->FormHidden('event_startmonth', $_GET['event_startmonth']);
 284         $output->FormHidden('event_startday', $_GET['event_startday']);
 285         $output->FormHidden('event_startyear', $_GET['event_startyear']);
 286         $output->FormHidden('event_category', $_GET['event_category']);
 287         $output->FormHidden('event_dur_minutes', $_GET['event_dur_minutes']);
 288         $output->FormHidden('provider_id',$_GET['provider_id']);
 289         $output->FormHidden('patient_id', $_GET['patient_id']);
 290         $output->FormHidden('module', $_GET['module']);
 291         $output->FormHidden('func', $_GET['func']);
 292         $output->FormHidden('Date', $_GET['Date']);
 293         $select = array();
 294
 295         foreach($all_categories as $cat)
 296         {
 297             array_push($select, array('name'=>$cat['name'],'id'=>base64_encode(serialize($cat))));
 298         }
 299         $output->Text('Select a Category');
 300         $output->FormSelectMultiple('category', $select);
 301         $output->FormSubmit();
 302         return $output->GetOutput();
 303     }
 304     //return postcalendar_user_submit2($args);
 305 }
 306
 307 function postcalendar_user_submit($args)
 308 {
 309     // We need at least ADD permission to submit an event
 310     if (!(bool)PC_ACCESS_ADD) {
 311         return _POSTCALENDARNOAUTH;
 312     }
 313
 314     $output =& new pnHTML();
 315     $output->SetInputMode(_PNH_VERBATIMINPUT);
 316
 317
 318     // get the theme globals :: is there a better way to do this?
 319     pnThemeLoad(pnUserGetTheme());
 320     global $bgcolor1, $bgcolor2, $bgcolor3, $bgcolor4, $bgcolor5, $textcolor1, $textcolor2;
 321
 322     // $category = pnVarCleanFromInput('event_category');
 323     $category = pnVarCleanFromInput('category');
 324
 325     if(!empty($category))
 326     {
 327         $category = unserialize(base64_decode($category));
 328         //print_r($category);
 329     }
 330     else
 331     { //print_r($_POST);
 332         $cat = $_POST['category'];
 333
 334         $category = unserialize(base64_decode($cat));
 335         //print_r($category);
 336     }
 337     //print_r($category);
 338
 339     // echo("<!-- Here is the argument array: -->\n");
 340     // foreach ($args as $tmpkey => $tmpval) { // debugging
 341     //  echo("<!-- $tmpkey => '$tmpval' -->\n");
 342     // }
 343
 344     extract($args);
 345
 346     $Date =& postcalendar_getDate();
 347     $year   = substr($Date,0,4);
 348     $month  = substr($Date,4,2);
 349     $day    = substr($Date,6,2);
 350
 351     // basic event information
 352     $event_desc     = pnVarCleanFromInput('event_desc');
 353     $event_category = pnVarCleanFromInput('event_category');
 354     $event_subject  = pnVarCleanFromInput('event_subject');
 355     $event_sharing  = pnVarCleanFromInput('event_sharing');
 356     $event_topic    = pnVarCleanFromInput('event_topic');
 357
 358     //id of the user the event is for
 359     $event_userid = pnVarCleanFromInput('event_userid');
 360     if (!is_numeric($event_userid))
 361         $event_userid = 0;
 362     $event_pid = pnVarCleanFromInput('event_pid');
 363
 364     if (!is_numeric($event_pid))
 365         $event_pid = "";
 366
 367     // event start information
 368     $event_startmonth    = pnVarCleanFromInput('event_startmonth');
 369     $event_startday      = pnVarCleanFromInput('event_startday');
 370     $event_startyear     = pnVarCleanFromInput('event_startyear');
 371     $event_starttimeh    = pnVarCleanFromInput('event_starttimeh');
 372     $event_starttimem    = pnVarCleanFromInput('event_starttimem');
 373     $event_startampm     = pnVarCleanFromInput('event_startampm');
 374
 375     // location data
 376     $event_location      = pnVarCleanFromInput('event_location');
 377     $event_street1       = pnVarCleanFromInput('event_street1');
 378     $event_street2       = pnVarCleanFromInput('event_street2');
 379     $event_city          = pnVarCleanFromInput('event_city');
 380     $event_state         = pnVarCleanFromInput('event_state');
 381     $event_postal        = pnVarCleanFromInput('event_postal');
 382     $event_location_info = serialize(compact('event_location', 'event_street1', 'event_street2',
 383                                            'event_city', 'event_state', 'event_postal'));
 384     // contact data
 385     $event_contname      = pnVarCleanFromInput('event_contname');
 386     $event_conttel       = pnVarCleanFromInput('event_conttel');
 387     $event_contemail     = pnVarCleanFromInput('event_contemail');
 388     $event_website       = pnVarCleanFromInput('event_website');
 389     $event_fee           = pnVarCleanFromInput('event_fee');
 390     $event_patient_name  = pnVarCleanFromInput('patient_name');
 391
 392     // event repeating data
 393     if( is_array($category) )
 394     {
 395         //$event_subject        =
 396         $event_desc         = $category['desc'];
 397         $event_category     = $category['id'];
 398
 399         $event_duration     = $category['event_duration']; //seconds of the event
 400         $event_dur_hours     = $event_duration/(60 * 60);    //seconds divided by 60 seconds * 60 minutes
 401         $event_dur_minutes  = ($event_duration%(60 * 60))/60;
 402         $event_repeat         = $category['event_repeat'];
 403         $event_repeat_freq  = $category['event_repeat_freq'];
 404         $event_repeat_freq_type = $category['event_repeat_freq_type'];
 405         $event_repeat_on_num = $category['event_repeat_on_num'];
 406         $event_repeat_on_day = $category['event_repeat_on_day'];
 407         $event_repeat_on_freq = $category['event_repeat_on_freq'];
 408         $event_recurrspec = serialize(compact('event_repeat_freq', 'event_repeat_freq_type', 'event_repeat_on_num',
 409                                           'event_repeat_on_day', 'event_repeat_on_freq'));
 410
 411         // event end information
 412         $multiple = $category['end_date_freq']." ";
 413         switch($category['end_date_type'])
 414         {
 415             case REPEAT_EVERY_DAY:
 416             case REPEAT_EVERY_WORK_DAY:    //end date is in days
 417                 $multiple .= "days";
 418                 break;
 419             case REPEAT_EVERY_WEEK;        //end date is in weeks
 420                 $multiple .= "weeks";
 421                 break;
 422             case REPEAT_EVERY_MONTH;    //end date is in months
 423                 $multiple .= "months";
 424                 break;
 425             case REPEAT_EVERY_YEAR:        //end date is in years
 426                 $multiple .= "years";
 427                 break;
 428         }
 429
 430         $edate = strtotime(pnVarCleanFromInput('Date'));
 431         $event_startmonth     = date("m", $edate);
 432         $event_startday     = date("d", $edate);
 433         $event_startyear     = date("Y", $edate);
 434         $event_enddate = strtotime(pnVarCleanFromInput('Date')." + ".$multiple);
 435         $event_endmonth     = date("m",$event_enddate);
 436         $event_endday         = date("d",$event_enddate);
 437         $event_endyear      = date("Y",$event_enddate);
 438         $event_endtype      = $category['end_date_flag'];
 439
 440         // I'm pretty sure this was a bug since 'event_all_day' appears nowhere
 441         // else in the code, but it's hard to tell WTF is going on.
 442 //    $event_allday         = $category['event_all_day'];
 443         $event_allday         = $category['all_day'];
 444     }
 445     else
 446     {
 447         $event_dur_hours     = pnVarCleanFromInput('event_dur_hours');
 448         $event_dur_minutes  = pnVarCleanFromInput('event_dur_minutes');
 449         $event_duration     = (60*60*$event_dur_hours) + (60*$event_dur_minutes);
 450         $event_repeat         = pnVarCleanFromInput('event_repeat');
 451         $event_repeat_freq  = pnVarCleanFromInput('event_repeat_freq');
 452         $event_repeat_freq_type = pnVarCleanFromInput('event_repeat_freq_type');
 453         $event_repeat_on_num = pnVarCleanFromInput('event_repeat_on_num');
 454         $event_repeat_on_day = pnVarCleanFromInput('event_repeat_on_day');
 455         $event_repeat_on_freq = pnVarCleanFromInput('event_repeat_on_freq');
 456         $event_recurrspec = serialize(compact('event_repeat_freq', 'event_repeat_freq_type', 'event_repeat_on_num',
 457                                           'event_repeat_on_day', 'event_repeat_on_freq'));
 458
 459         // event end information
 460         $event_endmonth     = pnVarCleanFromInput('event_endmonth');
 461         $event_endday         = pnVarCleanFromInput('event_endday');
 462         $event_endyear      = pnVarCleanFromInput('event_endyear');
 463         $event_endtype      = pnVarCleanFromInput('event_endtype');
 464         $event_allday         = pnVarCleanFromInput('event_allday');
 465     }
 466
 467     // Added by Rod:
 468     if ($event_allday) {
 469         $event_starttimeh  = 0;
 470         $event_starttimem  = 0;
 471         $event_startampm   = 1;
 472         $event_dur_hours   = 24;
 473         $event_dur_minutes = 0;
 474         $event_duration    = 60 * 60 * $event_dur_hours;
 475     }
 476
 477     $form_action = pnVarCleanFromInput('form_action');
 478     $pc_html_or_text = pnVarCleanFromInput('pc_html_or_text');
 479     $pc_event_id = pnVarCleanFromInput('pc_event_id');
 480     $data_loaded = pnVarCleanFromInput('data_loaded');
 481     $is_update   = pnVarCleanFromInput('is_update');
 482     $authid      = pnVarCleanFromInput('authid');
 483
 484     //pennfirm uname matchup future fix
 485     //if(pnUserLoggedIn()) { $uname = pnUserGetVar('uname'); }
 486     //else { $uname = pnConfigGetVar('anonymous'); }
 487     $uname = $_SESSION['authUser'];
 488     if(!isset($event_repeat)) { $event_repeat = 0; }
 489
 490     if(!isset($pc_event_id) || empty($pc_event_id) || $data_loaded) {
 491         // lets wrap all the data into array for passing to submit and preview functions
 492         $eventdata = compact('event_subject','event_desc','event_sharing','event_category','event_topic',
 493         'event_startmonth','event_startday','event_startyear','event_starttimeh','event_starttimem','event_startampm',
 494         'event_endmonth','event_endday','event_endyear','event_endtype','event_dur_hours','event_dur_minutes',
 495         'event_duration','event_allday','event_location','event_street1','event_street2','event_city','event_state',
 496         'event_postal','event_location_info','event_contname','event_conttel','event_contemail',
 497         'event_website','event_fee','event_repeat','event_repeat_freq','event_repeat_freq_type',
 498         'event_repeat_on_num','event_repeat_on_day','event_repeat_on_freq','event_recurrspec','uname',"event_userid","event_pid",
 499         'Date','year','month','day','pc_html_or_text','event_patient_name','event_pid');
 500         $eventdata['is_update'] = $is_update;
 501         $eventdata['pc_event_id'] = $pc_event_id;
 502         $eventdata['data_loaded'] = true;
 503         $eventdata['category'] = base64_encode(serialize($category));
 504     } else {
 505         $event =& postcalendar_userapi_pcGetEventDetails($pc_event_id);
 506
 507         //echo "uname is:$uname  other name is: ".$event['uname'] . "<br />";
 508         if($uname != $event['uname']) {
 509             if (!validateGroupStatus($uname,getUsername($event['uname']))) {
 510                 return _PC_CAN_NOT_EDIT;
 511             }
 512         }
 513         $eventdata['event_subject'] = $event['title'];
 514         $eventdata['event_desc'] = $event['hometext'];
 515         $eventdata['event_sharing'] = $event['sharing'];
 516         $eventdata['event_category'] = $event['catid'];
 517         $eventdata['event_topic'] = $event['topic'];
 518         $eventdata['event_startmonth'] = substr($event['eventDate'],5,2);
 519         $eventdata['event_startday'] = substr($event['eventDate'],8,2);
 520         $eventdata['event_startyear'] = substr($event['eventDate'],0,4);
 521         $eventdata['event_starttimeh'] = substr($event['startTime'],0,2);
 522         $eventdata['event_starttimem'] = substr($event['startTime'],3,2);
 523         $eventdata['event_startampm'] = $eventdata['event_starttimeh'] < 12 ? 1 : 2 ; //1 is am , 2 is pm
 524         $eventdata['event_endmonth'] = substr($event['endDate'],5,2);
 525         $eventdata['event_endday'] = substr($event['endDate'],8,2);
 526         $eventdata['event_endyear'] = substr($event['endDate'],0,4);
 527         $eventdata['event_endtype'] = $event['endDate'] == '0000-00-00' ? '0' : '1' ;
 528         $eventdata['event_dur_hours'] = $event['duration_hours'];
 529         $eventdata['event_dur_minutes'] = $event['duration_minutes'];
 530         $eventdata['event_duration'] = $event['duration'];
 531         $eventdata['event_allday'] = $event['alldayevent'];
 532         $loc_data = unserialize($event['location']);
 533         $eventdata['event_location'] = $loc_data['event_location'];
 534         $eventdata['event_street1'] = $loc_data['event_street1'];
 535         $eventdata['event_street2'] = $loc_data['event_street2'];
 536         $eventdata['event_city'] = $loc_data['event_city'];
 537         $eventdata['event_state'] = $loc_data['event_state'];
 538         $eventdata['event_postal'] = $loc_data['event_postal'];
 539         $eventdata['event_location_info'] = $loc_data;
 540         $eventdata['event_contname'] = $event['contname'];
 541         $eventdata['event_conttel'] = $event['conttel'];
 542         $eventdata['event_contemail'] = $event['contemail'];
 543         $eventdata['event_website'] = $event['website'];
 544         $eventdata['event_fee'] = $event['fee'];
 545         $eventdata['event_repeat'] = $event['recurrtype'];
 546         $rspecs = unserialize($event['recurrspec']);
 547         $eventdata['event_repeat_freq'] = $rspecs['event_repeat_freq'];
 548         $eventdata['event_repeat_freq_type'] = $rspecs['event_repeat_freq_type'];
 549         $eventdata['event_repeat_on_num'] = $rspecs['event_repeat_on_num'];
 550         $eventdata['event_repeat_on_day'] = $rspecs['event_repeat_on_day'];
 551         $eventdata['event_repeat_on_freq'] = $rspecs['event_repeat_on_freq'];
 552         $eventdata['event_recurrspec'] = $rspecs;
 553         $eventdata['uname'] = $uname;
 554         $eventdata['event_userid'] = $event['event_userid'];
 555         $eventdata['event_pid'] = $event['pid'];
 556         $eventdata['event_aid'] = $event['aid'];
 557         $eventdata['Date'] = $Date;
 558         $eventdata['year'] = $year;
 559         $eventdata['month'] = $month;
 560         $eventdata['day'] = $day;
 561         $eventdata['is_update'] = true;
 562         $eventdata['pc_event_id'] = $pc_event_id;
 563         $event_data['patient_name'] = $event_patient_name;
 564         $eventdata['data_loaded'] = true;
 565         $eventdata['pc_html_or_text'] = $pc_html_or_text;
 566         $eventdata['category'] = base64_encode(serialize($category));
 567     }
 568
 569     // lets get the module's information
 570     $modinfo = pnModGetInfo(pnModGetIDFromName(__POSTCALENDAR__));
 571     $categories = pnModAPIFunc(__POSTCALENDAR__,'user','getCategories');
 572     $output->tabindex=1;
 573
 574     //================================================================
 575     //    ERROR CHECKING
 576     //================================================================
 577     // removed event_desc as a required_var
 578
 579     $required_vars = array('event_subject');
 580     $required_name = array(_PC_EVENT_TITLE,_PC_EVENT_DESC);
 581     $error_msg = '';
 582     $output->SetOutputMode(_PNH_RETURNOUTPUT);
 583     $reqCount = count($required_vars);
 584     //print_r($eventdata);
 585     for ($r=0; $r<$reqCount; $r++) {
 586         if(empty($$required_vars[$r]) || !preg_match('/\S/i',$$required_vars[$r])) {
 587             $error_msg .= $output->Text('<b>'.$required_name[$r].'</b> '._PC_SUBMIT_ERROR4);
 588             $error_msg .= $output->Linebreak();
 589         }
 590     }
 591     unset($reqCount);
 592     // check repeating frequencies
 593     if($event_repeat == REPEAT) {
 594
 595         //can't have a repeating event that doesnt have an end date
 596         if ($event_endtype == 0) {
 597             $error_msg .= $output->Text("Repeating events must have an end date set.");
 598             $error_msg .= $output->Linebreak();
 599         }
 600         if(!isset($event_repeat_freq) ||  $event_repeat_freq < 1 || empty($event_repeat_freq)) {
 601             $error_msg .= $output->Text(_PC_SUBMIT_ERROR5);
 602             $error_msg .= $output->Linebreak();
 603         } elseif(!is_numeric($event_repeat_freq)) {
 604             $error_msg .= $output->Text(_PC_SUBMIT_ERROR6);
 605             $error_msg .= $output->Linebreak();
 606         }
 607     } elseif($event_repeat == REPEAT_ON) {
 608         //can't have a repeating event that doesnt have an end date
 609         if ($event_endtype == 0) {
 610             $error_msg .= $output->Text("Repeating events must have an end date set.");
 611             $error_msg .= $output->Linebreak();
 612         }
 613         if(!isset($event_repeat_on_freq) || $event_repeat_on_freq < 1 || empty($event_repeat_on_freq)) {
 614             $error_msg .= $output->Text(_PC_SUBMIT_ERROR5);
 615             $error_msg .= $output->Linebreak();
 616         } elseif(!is_numeric($event_repeat_on_freq)) {
 617             $error_msg .= $output->Text(_PC_SUBMIT_ERROR6);
 618             $error_msg .= $output->Linebreak();
 619         }
 620     }
 621     // check date validity
 622     if(_SETTING_TIME_24HOUR) {
 623         $startTime = $event_starttimeh.':'.$event_starttimem;
 624         $endTime =   $event_endtimeh.':'.$event_endtimem;
 625     } else {
 626         if($event_startampm == _AM_VAL) {
 627             $event_starttimeh = $event_starttimeh == 12 ? '00' : $event_starttimeh;
 628         } else {
 629             $event_starttimeh =  $event_starttimeh != 12 ? $event_starttimeh+=12 : $event_starttimeh;
 630         }
 631         $startTime = $event_starttimeh.':'.$event_starttimem;
 632     }
 633     $sdate = strtotime($event_startyear.'-'.$event_startmonth.'-'.$event_startday);
 634     $edate = strtotime($event_endyear.'-'.$event_endmonth.'-'.$event_endday);
 635     $tdate = strtotime(date('Y-m-d'));
 636     if($edate < $sdate && $event_endtype == 1) {
 637         $error_msg .= $output->Text(_PC_SUBMIT_ERROR1);
 638         $error_msg .= $output->Linebreak();
 639     }
 640     if(!checkdate($event_startmonth,$event_startday,$event_startyear)) {
 641         $error_msg .= $output->Text(_PC_SUBMIT_ERROR2 . " '$event_startyear-$event_startmonth-$event_startday'");
 642         $error_msg .= $output->Linebreak();
 643     }
 644     if(!checkdate($event_endmonth,$event_endday,$event_endyear)) {
 645         $error_msg .= $output->Text(_PC_SUBMIT_ERROR3 . " '$event_endyear-$event_endmonth-$event_endday'");
 646         $error_msg .= $output->Linebreak();
 647     }
 648
 649     //check limit on category
 650     if(($ret = checkCategoryLimits($eventdata)) != null)
 651     {
 652         $error_msg .= $output->Text("This category has a limit of $ret[limit] between $ret[start] and $ret[end] which you have exceeded.");
 653         $error_msg .= $output->Linebreak();
 654         //$output->Text(pnModAPIFunc('PostCalendar','user','buildSubmitForm',$eventdata));
 655         //return $output->GetOutput();
 656     }
 657     //echo "fa: " . $form_action . " double_book: " . pnVarCleanFromInput("double_book") . " update: " . $eventdata['is_update'] . " em: " . $error_msg;
 658     //event collision check
 659
 660     if($form_action == "commit" && pnVarCleanFromInput("double_book") != 1 && !$eventdata['is_update'] && empty($error_msg) ) {
 661         //check on new shceduling events(in or out of office) to make sure that
 662         //you don't have more than one set per day
 663         //event category 1 is in office, event category 2 is out of office
 664
 665         if ($eventdata['event_category'] == 2 || $eventdata['event_category'] == 3)  {
 666             $searchargs = array();
 667             $searchargs['start'] = $eventdata['event_startmonth'] . "/" . $eventdata['event_startday'] ."/". $eventdata['event_startyear'];
 668             $searchargs['end'] = $eventdata['event_endmonth'] . "/" . $eventdata['event_endday'] ."/". $eventdata['event_endyear'];
 669             $searchargs['provider_id'] = $eventdata['event_userid'];
 670
 671             //faFLag uses pcgeteventsfa, which can search on provider
 672             $searchargs['faFlag'] = true;
 673             $searchargs['s_keywords'] = " (a.pc_catid = 2 OR a.pc_catid = 3) ";
 674             //print_r($searchargs);
 675
 676             $eventsByDate =& postcalendar_userapi_pcGetEvents($searchargs);
 677             $ekey = md5($event_data['subject'] . date("U") . rand(0,1000));
 678             $oldstatus = $eventdata['event_status'];
 679             $oldtitle = $eventdata['event_subject'];
 680             $old_patient_name = $eventdata['patient_name'];
 681             $old_dur_hours = $eventdata['event_dur_hours'];
 682             $old_dur_min = $eventdata['event_dur_minutes'];
 683             $old_duration = $eventdata['event_duration'];
 684             $eventdata['event_subject'] = mysql_real_escape_string($ekey);
 685             $eventdata['event_status'] = _EVENT_TEMPORARY;
 686
 687             if (!pnModAPIFunc(__POSTCALENDAR__,'user','submitEvent',$eventdata)) {
 688                 $error_msg .= $output->Text('<center><div style="padding:5px; border:1px solid red; background-color: pink;">');
 689                 $error_msg .= $output->Text("<b>The system was unable to check you event for conflicts with other events because there was a problem with your database.</b><br />");
 690                 $error_msg .= $output->Text('</div></center>');
 691                 $error_msg .= $output->Linebreak();
 692                 $error_msg .= $output->Text($dbconn->ErrorMsg());
 693             }
 694             $searchargs['s_keywords'] = " (a.pc_catid = 2 OR a.pc_catid = 3) AND a.pc_title = '" . $eventdata['event_subject']  . "' ";
 695             $searchargs['event_status'] = _EVENT_TEMPORARY;
 696             $submitEventByDate =& postcalendar_userapi_pcGetEvents($searchargs);
 697
 698             if(!delete_event($ekey)) {
 699                 $error_msg .= $output->Text('<center><div style="padding:5px; border:1px solid red; background-color: pink;">');
 700                 $error_msg .= $output->Text("<b>The system was unable to delete a temporary record it created, this may have left the database in an inconsistent state.</b><br />");
 701                 $error_msg .= $output->Text('</div></center>');
 702                 $error_msg .= $output->Linebreak();
 703                 $error_msg .= $output->Text($dbconn->ErrorMsg());
 704             }
 705
 706             $eventdata['event_status'] = $oldstatus;
 707             $eventdata['event_subject'] = $oldtitle;
 708             $eventdata['patient_name '] = $old_patient_name;
 709             $eventdata['event_dur_hours'] = $old_dur_hour;
 710             $eventdata['event_dur_minutes'] = $old_dur_min;
 711
 712             foreach ($submitEventByDate as $date => $newevent) {
 713                 if (count($eventsByDate[$date]) > 0 && count($newevent) > 0) {
 714                     foreach ($eventsByDate[$date] as $con_event)  {
 715                         if ($con_event['catid'] == $newevent[0]['catid']) {
 716                             $error_msg .= $output->Text('There is a conflict on ' . $date . ' with event ' . $con_event['title']);
 717                             $error_msg .= $output->Linebreak();
 718                         }
 719                     }
 720                 }
 721             }
 722             /*echo "<br /><br />";
 723             print_r($eventsByDate);
 724             echo "<br /><br />";
 725             print_r($submitEventByDate);*/
 726         }
 727
 728         $colls = checkEventCollision($eventdata);
 729         if (count($colls) > 0) {
 730             foreach ($colls as $coll) {
 731                 $error_msg .= $output->Text("Event Collides with: " . $coll['title'] . " at " . date("g:i a", strtotime($coll['startTime'])) . "<br />");
 732                 $error_msg .= $output->Linebreak();
 733             }
 734             $error_msg .= $output->Text("Submit again to \"Double Book\" <br />To change values click back in your browser.");
 735             $error_msg .= $output->Linebreak();
 736             // the following line will display "DOUBLE BOOKED" if when adding an event there is a collistion with anothe appointment
 737             //$eventdata['event_subject'] = "DOUBLE BOOKED " . $eventdata['event_subject'];
 738             $eventdata['double_book'] = 1;
 739         }
 740     }
 741
 742     $output->SetOutputMode(_PNH_KEEPOUTPUT);
 743     if($form_action == 'preview') {
 744         //================================================================
 745         //  Preview the event
 746         //================================================================
 747         // check authid
 748         if (!pnSecConfirmAuthKey()) { return(_NO_DIRECT_ACCESS); }
 749         if(!empty($error_msg)) {
 750             $preview = false;
 751             $output->Text('<table border="0" width="100%" cellpadding="1" cellspacing="0"><tr><td bgcolor="red">');
 752             $output->Text('<table border="0" width="100%" cellpadding="1" cellspacing="0"><tr><td bgcolor="pink">');
 753             $output->Text('<center><b>'._PC_SUBMIT_ERROR.'</b></center>');
 754             $output->Linebreak();
 755             $output->Text($error_msg);
 756             $output->Text('</td></td></table>');
 757             $output->Text('</td></td></table>');
 758             $output->Linebreak(2);
 759         } else {
 760             $output->Text(pnModAPIFunc(__POSTCALENDAR__,'user','eventPreview',$eventdata));
 761             $output->Linebreak();
 762         }
 763     } elseif($form_action == 'commit') {
 764
 765         //================================================================
 766         //  Enter the event into the DB
 767         //================================================================
 768         if (!empty($error_msg)) {
 769             if (!pnSecConfirmAuthKey(true)) { return(_NO_DIRECT_ACCESS); }
 770         }
 771         else {
 772             if (!pnSecConfirmAuthKey()) { return(_NO_DIRECT_ACCESS); }
 773         }
 774         if(!empty($error_msg)) {
 775             $preview = false;
 776             $output->Text('<table border="0" width="100%" cellpadding="1" cellspacing="0"><tr><td bgcolor="red">');
 777             $output->Text('<table border="0" width="100%" cellpadding="1" cellspacing="0"><tr><td bgcolor="pink">');
 778             $output->Text('<center><b>'._PC_SUBMIT_ERROR.'</b></center>');
 779             $output->Linebreak();
 780             $output->Text($error_msg);
 781             $output->Text('</td></td></table>');
 782             $output->Text('</td></td></table>');
 783             $output->Linebreak(2);
 784         } else {
 785             if (!pnModAPIFunc(__POSTCALENDAR__,'user','submitEvent',$eventdata)) {
 786                 $output->Text('<center><div style="padding:5px; border:1px solid red; background-color: pink;">');
 787                 $output->Text("<b>"._PC_EVENT_SUBMISSION_FAILED."</b>");
 788                 $output->Text('</div></center>');
 789                 $output->Linebreak();
 790                 $output->Text($dbconn->ErrorMsg());
 791             } else {
 792                 // clear the Smarty cache
 793                 $tpl =& new pcSmarty();
 794                 $tpl->clear_all_cache();
 795                 $output->Text('<center><div style="padding:5px; border:1px solid green; background-color: lightgreen;">');
 796                 if($is_update) {
 797                     $output->Text("<b>"._PC_EVENT_EDIT_SUCCESS."</b>");
 798                 } else {
 799                     $output->Text("<b>"._PC_EVENT_SUBMISSION_SUCCESS."</b>");
 800                 }
 801                 $output->Text('</div></center>');
 802                 $output->Linebreak();
 803                 // clear the form vars
 804                 $event_subject=$event_desc=$event_sharing=$event_category=$event_topic=
 805                 $event_startmonth=$event_startday=$event_startyear=$event_starttimeh=$event_starttimem=$event_startampm=
 806                 $event_endmonth=$event_endday=$event_endyear=$event_endtype=$event_dur_hours=$event_dur_minutes=
 807                 $event_duration=$event_allday=$event_location=$event_street1=$event_street2=$event_city=$event_state=
 808                 $event_postal=$event_location_info=$event_contname=$event_conttel=$event_contemail=
 809                 $event_website=$event_fee=$event_repeat=$event_repeat_freq=$event_repeat_freq_type=
 810                 $event_repeat_on_num=$event_repeat_on_day=$event_repeat_on_freq=$event_recurrspec=$uname=
 811                 $Date=$year=$month=$day=$pc_html_or_text=$event_patient_name=$evnet_pid=null;
 812                 $is_update = false;
 813                 $pc_event_id = 0;
 814
 815                 //$_SESSION['category'] = "";
 816                 // lets wrap all the data into array for passing to submit and preview functions
 817                 $eventdata = compact('event_subject','event_desc','event_sharing','event_category','event_topic',
 818                 'event_startmonth','event_startday','event_startyear','event_starttimeh','event_starttimem','event_startampm',
 819                 'event_endmonth','event_endday','event_endyear','event_endtype','event_dur_hours','event_dur_minutes',
 820                 'event_duration','event_allday','event_location','event_street1','event_street2','event_city','event_state',
 821                 'event_postal','event_location_info','event_contname','event_conttel','event_contemail',
 822                 'event_website','event_fee','event_repeat','event_repeat_freq','event_repeat_freq_type',
 823                 'event_repeat_on_num','event_repeat_on_day','event_repeat_on_freq','event_recurrspec','uname',
 824                 'Date','year','month','day','pc_html_or_text','is_update','pc_event_id','event_patient_name');
 825                 //if no using the no_nav format then show form again after submit
 826                 if (pnVarCleanFromInput("no_nav") == 1) {
 827                     return $output->GetOutput();
 828                 }
 829             }
 830         }
 831     }
 832
 833     $output->Text(pnModAPIFunc('PostCalendar','user','buildSubmitForm',$eventdata));
 834     return $output->GetOutput();
 835 }
 836
 837
 838 /**
 839  * search events
 840  */
 841 function postcalendar_user_search()
 842 {
 843     if (!(bool)PC_ACCESS_OVERVIEW) { return _POSTCALENDARNOAUTH; }
 844
 845     $tpl =& new pcSmarty();
 846     $k = pnVarCleanFromInput('pc_keywords');
 847     $k_andor = pnVarCleanFromInput('pc_keywords_andor');
 848     $pc_category = pnVarCleanFromInput('pc_category');
 849     $pc_facility = pnVarCleanFromInput('pc_facility');
 850     $pc_topic = pnVarCleanFromInput('pc_topic');
 851     $submit = pnVarCleanFromInput('submit');
 852     $event_dur_hours = pnVarCleanFromInput('event_dur_hours');
 853     $event_dur_minutes = pnVarCleanFromInput('event_dur_minutes');
 854     $start = pnVarCleanFromInput('start');
 855     $end = pnVarCleanFromInput('end');
 856
 857     // get list of categories for the user to choose from
 858     $categories = postcalendar_userapi_getCategories();
 859     $cat_options = '';
 860     foreach($categories as $category) {
 861         $selected = "";
 862         if ($pc_category == $category[id]) { $selected = " SELECTED "; }
 863         //modified 8/09 by BM to allow translation if applicable
 864         $cat_options .= "<option value=\"$category[id]\" $selected>" . xl_appt_category($category[name]) . "</option>";
 865     }
 866     $tpl->assign_by_ref('CATEGORY_OPTIONS',$cat_options);
 867
 868     $tpl->assign('event_dur_hours', $event_dur_hours);
 869     $tpl->assign('event_dur_minutes', $event_dur_minutes);
 870
 871     // create default start and end dates for the search form
 872     if (isset($start) && $start != "") $tpl->assign('DATE_START', $start);
 873     else $tpl->assign('DATE_START', date("m/d/Y"));
 874     if (isset($end) && $end!= "") $tpl->assign('DATE_END', $end);
 875     else $tpl->assign('DATE_END', date("m/d/Y", strtotime("+7 Days", time())));
 876
 877     // then override the setting if we have a value from the submitted form
 878     $ProviderID = pnVarCleanFromInput("provider_id");
 879     if (is_numeric($ProviderID)) { $tpl->assign('ProviderID', $ProviderID);; }
 880     elseif ($ProviderID == "_ALL_") { } // do nothing
 881     else { $tpl->assign('ProviderID', ""); }
 882
 883     $provinfo = getProviderInfo();
 884     $tpl->assign('providers', $provinfo);
 885     // build a list of provider-options for the select box on the input form -- JRM
 886     $provider_options = "<option value='_ALL_' ";
 887     if ($ProviderID == "_ALL_") { $provider_options .= " SELECTED "; }
 888     $provider_options .= ">" . xl('All Providers') . "</option>";
 889     foreach ($provinfo as $provider) {
 890         $selected = "";
 891         // if we don't have a ProviderID chosen, pick the first one from the
 892         // pc_username Session variable
 893         if ($ProviderID == "") {
 894             // that variable stores the 'username' and not the numeric 'id'
 895             if ($_SESSION['pc_username'][0] == $provider['username']) {
 896                 $selected = " SELECTED ";
 897             }
 898         }
 899         else if ($ProviderID == $provider['id']) { $selected = " SELECTED "; }
 900         $provider_options .= "<option value=\"".$provider['id']."\" ".$selected.">";
 901         $provider_options .= $provider['lname'].", ".$provider['fname']."</option>";
 902     }
 903     $tpl->assign_by_ref('PROVIDER_OPTIONS',$provider_options);
 904
 905     // build a list of facility options for the select box on the input form -- JRM
 906     $facilities = getFacilities();
 907     $fac_options = "<option value=''>" . xl('All Facilities') . "</option>";
 908     foreach ($facilities as $facility) {
 909         $selected = "";
 910         if ($facility['id'] == $pc_facility) $selected = " SELECTED ";
 911         $fac_options .= "<option value=\"".$facility['id']."\" ".$selected.">";
 912         $fac_options .= $facility['name']."</option>";
 913     }
 914     $tpl->assign_by_ref('FACILITY_OPTIONS',$fac_options);
 915
 916     $PatientID = pnVarCleanFromInput("patient_id");
 917     // limit the number of results returned by getPatientPID
 918     // this helps to prevent the server from stalling on a request with
 919     // no PID and thousands of PIDs in the database -- JRM
 920     // the function getPatientPID($pid, $given, $orderby, $limit, $start) <-- defined in library/patient.inc
 921     $plistlimit = 500;
 922     if (is_numeric($PatientID)) {
 923       $tpl->assign('PatientList', getPatientPID(array('pid'=>$PatientID, 'limit'=>$plistlimit)));
 924     }
 925     else {
 926       $tpl->assign('PatientList', getPatientPID(array('limit' =>$plistlimit)));
 927     }
 928     $event_endday = pnVarCleanFromInput("event_endday");
 929     $event_endmonth = pnVarCleanFromInput("event_endmonth");
 930     $event_endyear = pnVarCleanFromInput("event_endyear");
 931
 932     $event_startday = pnVarCleanFromInput("event_startday");
 933     $event_startmonth = pnVarCleanFromInput("event_startmonth");
 934     $event_startyear = pnVarCleanFromInput("event_startyear");
 935     if($event_startday > $event_endday) { $event_endday = $event_startday; }
 936     if($event_startmonth > $event_endmonth) { $event_endmonth = $event_startmonth; }
 937     if($event_startyear > $event_endyear) { $event_endyear = $event_startyear; }
 938
 939     $tpl->assign('patient_id', $PatientID);
 940     $tpl->assign('provider_id', $ProviderID);
 941     $tpl->assign("event_category", pnVarCleanFromInput("event_category"));
 942     $tpl->assign("event_subject", pnVarCleanFromInput("event_subject"));
 943     $output =& new pnHTML();
 944     $output->SetOutputMode(_PNH_RETURNOUTPUT);
 945     if(_SETTING_USE_INT_DATES) {
 946
 947         $sel_data = pnModAPIFunc(__POSTCALENDAR__,'user','buildDaySelect',array('pc_day'=>$day,'selected'=>$event_startday));
 948         $formdata = $output->FormSelectMultiple('event_startday', $sel_data);
 949         $sel_data = pnModAPIFunc(__POSTCALENDAR__,'user','buildMonthSelect',array('pc_month'=>$month,'selected'=>$event_startmonth));
 950         $formdata .= $output->FormSelectMultiple('event_startmonth', $sel_data);
 951     } else {
 952         $sel_data = pnModAPIFunc(__POSTCALENDAR__,'user','buildMonthSelect',array('pc_month'=>$month,'selected'=>$event_startmonth));
 953         $formdata = $output->FormSelectMultiple('event_startmonth', $sel_data);
 954         $sel_data = pnModAPIFunc(__POSTCALENDAR__,'user','buildDaySelect',array('pc_day'=>$day,'selected'=>$event_startday));
 955         $formdata .= $output->FormSelectMultiple('event_startday', $sel_data);
 956     }
 957     $sel_data = pnModAPIFunc(__POSTCALENDAR__,'user','buildYearSelect',array('pc_year'=>$year,'selected'=>$event_startyear));
 958     $formdata .= $output->FormSelectMultiple('event_startyear', $sel_data);
 959     $output->SetOutputMode(_PNH_KEEPOUTPUT);
 960     $tpl->assign('SelectDateTimeStart', $formdata);
 961     $output->SetOutputMode(_PNH_RETURNOUTPUT);
 962     if(_SETTING_USE_INT_DATES) {
 963         $sel_data = pnModAPIFunc(__POSTCALENDAR__,'user','buildDaySelect',array('pc_day'=>$day,'selected'=>$event_endday));
 964         $formdata = $output->FormSelectMultiple('event_endday', $sel_data);
 965         $sel_data = pnModAPIFunc(__POSTCALENDAR__,'user','buildMonthSelect',array('pc_month'=>$month,'selected'=>$event_endmonth));
 966         $formdata .= $output->FormSelectMultiple('event_endmonth', $sel_data);
 967     } else {
 968         $sel_data = pnModAPIFunc(__POSTCALENDAR__,'user','buildMonthSelect',array('pc_month'=>$month,'selected'=>$event_endmonth));
 969         $formdata = $output->FormSelectMultiple('event_endmonth', $sel_data);
 970         $sel_data = pnModAPIFunc(__POSTCALENDAR__,'user','buildDaySelect',array('pc_day'=>$day,'selected'=>$event_endday ));
 971         $formdata .= $output->FormSelectMultiple('event_endday', $sel_data);
 972     }
 973     $sel_data = pnModAPIFunc(__POSTCALENDAR__,'user','buildYearSelect',array('pc_year'=>$year,'selected'=>$event_endyear));
 974     $formdata .= $output->FormSelectMultiple('event_endyear', $sel_data);
 975     $output->SetOutputMode(_PNH_KEEPOUTPUT);
 976     $tpl->assign('SelectDateTimeEnd', $formdata);
 977     $output = null;
 978     if(_SETTING_DISPLAY_TOPICS) {
 979         $topics = postcalendar_userapi_getTopics();
 980         $top_options = '';
 981         foreach($topics as $topic) {
 982             $top_options .= "<option value=\"$topic[id]\">$topic[text]</option>";
 983         }
 984         $tpl->assign_by_ref('TOPIC_OPTIONS',$top_options);
 985     }
 986     //=================================================================
 987     //  Find out what Template we're using
 988     //=================================================================
 989     $template_name = _SETTING_TEMPLATE;
 990     if(!isset($template_name)) {
 991         $template_name = 'default';
 992     }
 993     //=================================================================
 994     //  Output the search form
 995     //=================================================================
 996     $tpl->assign('FORM_ACTION',pnModURL(__POSTCALENDAR__,'user','search'));
 997     //=================================================================
 998     //  Perform the search if we have data
 999     //=================================================================
1000     if(!empty($submit) && strtolower($submit) == "find first") {
1001         // not sure how we get here...
1002         $searchargs = array();
1003         $searchargs['start'] = pnVarCleanFromInput("event_startmonth") . "/" . pnVarCleanFromInput("event_startday") ."/". pnVarCleanFromInput("event_startyear");
1004         $searchargs['end'] = pnVarCleanFromInput("event_endmonth") . "/" . pnVarCleanFromInput("event_endday") ."/". pnVarCleanFromInput("event_endyear");
1005         $searchargs['provider_id'] = pnVarCleanFromInput("provider_id");
1006         $searchargs['faFlag'] = true;
1007         //print_r($searchargs);
1008         //echo "<br />";
1009         //set defaults to current week if empty
1010         if ($searchargs['start'] == "//") {
1011             $searchargs['start'] = date("m/d/Y");
1012         }
1013         if ($searchargs['end'] == "//") {
1014             $searchargs['end'] = date("m/d/Y", strtotime("+7 Days", strtotime($searchargs['start'])));
1015         }
1016         //print_r($searchargs);
1017         $eventsByDate =& postcalendar_userapi_pcGetEvents($searchargs);
1018         //print_r($eventsByDate);
1019         $found = findFirstAvailable($eventsByDate);
1020         $tpl->assign('available_times',$found);
1021         //print_r($_POST);
1022
1023         $tpl->assign('SEARCH_PERFORMED',true);
1024         $tpl->assign('A_EVENTS',$eventsByDate);
1025     }
1026     if(!empty($submit) && strtolower($submit) == "listapps") {
1027         // not sure how we get here...
1028         $searchargs = array();
1029         $searchargs['start'] = date("m/d/Y");
1030         $searchargs['end'] = date("m/d/Y",strtotime("+1 year",strtotime($searchargs['start'])));
1031         $searchargs['patient_id'] = pnVarCleanFromInput("patient_id");
1032         $searchargs['listappsFlag'] = true;
1033
1034         $sqlKeywords .= "(a.pc_pid = '" . pnVarCleanFromInput("patient_id") . "' )";
1035
1036         $searchargs['s_keywords'] = $sqlKeywords;
1037         //print_r($searchargs);
1038         $eventsByDate =& postcalendar_userapi_pcGetEvents($searchargs);
1039         //print_r($eventsByDate);
1040         $tpl->assign('appointments',$eventsByDate);
1041         //print_r($_POST);
1042
1043         $tpl->assign('SEARCH_PERFORMED',true);
1044         $tpl->assign('A_EVENTS',$eventsByDate);
1045     }
1046     elseif(!empty($submit)) {
1047
1048
1049         // we get here by searching via the PostCalendar search
1050         $sqlKeywords = '';
1051         $keywords = explode(' ',$k);
1052         // build our search query
1053         foreach($keywords as $word) {
1054             if(!empty($sqlKeywords)) $sqlKeywords .= " $k_andor ";
1055             $sqlKeywords .= '(';
1056             $sqlKeywords .= "pd.lname LIKE '%$word%' OR ";
1057             $sqlKeywords .= "pd.fname LIKE '%$word%' OR ";
1058             $sqlKeywords .= "u.lname LIKE '%$word%' OR ";
1059             $sqlKeywords .= "u.fname LIKE '%$word%' OR ";
1060             $sqlKeywords .= "a.pc_title LIKE '%$word%' OR ";
1061             $sqlKeywords .= "a.pc_hometext LIKE '%$word%' OR ";
1062             $sqlKeywords .= "a.pc_location LIKE '%$word%'";
1063             $sqlKeywords .= ') ';
1064         }
1065
1066
1067         if(!empty($pc_category)) {
1068             $s_category = "a.pc_catid = '$pc_category'";
1069         }
1070
1071         if(!empty($pc_topic)) {
1072             $s_topic = "a.pc_topic = '$pc_topic'";
1073         }
1074
1075         $searchargs = array();
1076         if(!empty($sqlKeywords)) $searchargs['s_keywords'] = $sqlKeywords;
1077         if(!empty($s_category)) $searchargs['s_category'] = $s_category;
1078         if(!empty($s_topic)) $searchargs['s_topic'] = $s_topic;
1079
1080         // some new search parameters introduced in the ajax_search form...  JRM March 2008
1081
1082         // the ajax_search form has form parameters for 'start' and 'end' already built in
1083         // so use them if available
1084         $tmpDate = pnVarCleanFromInput("start");
1085         if (isset($tmpDate) && $tmpDate != "")
1086             $searchargs['start'] = pnVarCleanFromInput("start");
1087         else $searchargs['start'] = "//";
1088         $tmpDate = pnVarCleanFromInput("end");
1089         if (isset($tmpDate) && $tmpDate != "")
1090             $searchargs['end'] = pnVarCleanFromInput("end");
1091         else $searchargs['end'] = "//";
1092
1093         // we can limit our search by provider -- JRM March 2008
1094         if (isset($ProviderID) && $ProviderID != "" && $ProviderID != "_ALL_") {
1095             $searchargs['provider_id'] = array();
1096             array_push($searchargs['provider_id'], $ProviderID);
1097         }
1098         $eventsByDate =& postcalendar_userapi_pcGetEvents($searchargs);
1099
1100         // we can limit our search by facility -- JRM March 2008
1101         if (isset($pc_facility) && $pc_facility != "") {
1102             $searchargs['pc_facility'] = $pc_facility;
1103         }
1104
1105         //print_r($eventsByDate);
1106         $tpl->assign('SEARCH_PERFORMED',true);
1107         $tpl->assign('A_EVENTS',$eventsByDate);
1108     }
1109     $tpl->caching = false;
1110     $tpl->assign('STYLE',$GLOBALS['style']);
1111     $pageSetup =& pnModAPIFunc(__POSTCALENDAR__,'user','pageSetup');
1112     if (pnVarCleanFromInput("no_nav") == 1) {
1113       $return = $pageSetup . $tpl->fetch($template_name.'/user/findfirst.html');
1114     }
1115     elseif (pnVarCleanFromInput("no_nav") == 2) {
1116       $return = $pageSetup . $tpl->fetch($template_name.'/user/listapps.html');
1117     }
1118     else {
1119      $return = $pageSetup . $tpl->fetch($template_name.'/user/search.html');
1120     }
1121     return $return;
1122 }
1123
1124 function checkCategoryLimits($eventdata)
1125 {
1126     extract($eventdata);
1127     //print_r($eventdata);
1128     //print "$event_starttimeh:$event_starttimem";
1129
1130     $limits = & pnModAPIFunc(__POSTCALENDAR__,'user','getCategoryLimits');
1131     //print_r($limits);
1132     foreach($limits as $limit)
1133     {
1134         if($limit['catid'] == $event_category) //have a limit
1135         {
1136             //print_r($limit);
1137             $sdate = ($event_startmonth.'/'.$event_startday.'/'
1138                         .$event_startyear);
1139             $edate = $sdate;
1140             $stime = date("H:i:00",strtotime($limit['startTime']));
1141             $etime = date("H:i:00",strtotime($limit['endTime']));
1142             if($is_update)
1143             {
1144                 $searchText = "a.pc_eid != '$pc_event_id' AND ";
1145             }
1146             //echo "stime is: $stime, etime is: $etime sdate is: $sdate edate is: $edate<br />";
1147             $a = array('s_category' => " a.pc_catid = $event_category",'start'=>$edate,
1148                 'end'=>$sdate, 'stime' => $stime, 'etime' => $etime,'providerID'=>$event_userid,
1149                 's_keywords'=>$searchText."a.pc_starttime >= '$stime' AND a.pc_endtime <= '$etime'");
1150             $eventsByDate =& postcalendar_userapi_pcGetEvents($a);
1151             //print_r($eventsByDate);
1152             $ret = null;
1153             foreach ($eventsByDate as $day)
1154             {
1155                 //if event time falls within limit time check
1156                 //hour from forms is 12 not 24 format, convert here
1157                 if($event_startampm == 2 && $event_starttimeh != 12)
1158                     $event_starttimeh += 12;
1159                  elseif ($event_startampm == 1 && $event_starttimeh == 12)
1160                     $event_starttimeh -= 12;
1161                 $event_starttime = date("H:i:00",strtotime($event_starttimeh.":".$event_starttimem.":"."00"));
1162                 $event_endtime = date("H:i:00",strtotime($event_endtimeh.":".$event_endtimem.":"."00"));
1163
1164                 if( $event_starttime >= $limit['startTime'])
1165                 {
1166                     $numToday = count($day);
1167
1168                     if($numToday >= $limit['limit'])
1169                     {
1170                         //reached limit
1171                         $ret = array("start"=>$limit['startTime'],"end"=>$limit['endTime'],
1172                             "limit"=>$limit['limit']);
1173                         return $ret;
1174                     }
1175                 }//if in limit time span
1176             }
1177         }
1178     }
1179
1180     return null;
1181  }
1182     /*list($dbconn) = pnDBGetConn();
1183     $pntable = pnDBGetTables();
1184     $event_table = $pntable['postcalendar_events'];
1185     //get all of todays events
1186     $starting_date = date('m/d/Y',mktime(0,0,0,$the_month,$the_day,$the_year));
1187     $ending_date   = date('m/d/Y',mktime(0,0,0,$the_month,$the_day,$the_year));
1188     //select all of the limits
1189     $limits = & pnModAPIFunc(__POSTCALENDAR__,'user','getCategoryLimits');
1190     //for each limit for this category id, make sure you won't exceed the limit
1191     foreach($limits as $limit)
1192     {
1193         if(($key = array_search($eventdata['cat_id'])) != false)
1194         {
1195             $sql = "SELECT count(pc_eid) from $event_table where "
1196         }
1197     }
1198
1199 }*/
1200 ?>