interface/main/calendar/modules/PostCalendar/pnuser.php

   1 <?php
   2 @define('__POSTCALENDAR__','PostCalendar');
   3 /**
   4  *  $Id$
   5  *
   6  *  PostCalendar::PostNuke Events Calendar Module
   7  *  Copyright (C) 2002  The PostCalendar Team
   8  *  http://postcalendar.tv
   9  *
  10  *  This program is free software; you can redistribute it and/or modify
  11  *  it under the terms of the GNU General Public License as published by
  12  *  the Free Software Foundation; either version 2 of the License, or
  13  *  (at your option) any later version.
  14  *
  15  *  This program is distributed in the hope that it will be useful,
  16  *  but WITHOUT ANY WARRANTY; without even the implied warranty of
  17  *  MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
  18  *  GNU General Public License for more details.
  19  *
  20  *  You should have received a copy of the GNU General Public License
  21  *  along with this program; if not, write to the Free Software
  22  *  Foundation, Inc., 59 Temple Place, Suite 330, Boston, MA  02111-1307  USA
  23  *
  24  *  To read the license please read the docs/license.txt or visit
  25  *  http://www.gnu.org/copyleft/gpl.html
  26  *
  27  */
  28
  29 //=========================================================================
  30 //  Load the API Functions and Language defines
  31 //=========================================================================
  32 pnModAPILoad(__POSTCALENDAR__,'user');
  33
  34 //=========================================================================
  35 //  start the main postcalendar application
  36 //=========================================================================
  37 function postcalendar_user_main()
  38 {
  39  // check the authorization
  40
  41     if (!pnSecAuthAction(0, 'PostCalendar::', '::', ACCESS_OVERVIEW)) { return _POSTCALENDARNOAUTH; }
  42     // get the date and go to the view function
  43     $Date = postcalendar_getDate();
  44     return postcalendar_user_view(array('Date'=>$Date));
  45 }
  46
  47
  48 /**
  49  * view items
  50  * This is a standard function to provide an overview of all of the items
  51  * available from the module.
  52  */
  53 function postcalendar_user_view()
  54 {
  55     if (!pnSecAuthAction(0, 'PostCalendar::', '::', ACCESS_OVERVIEW)) { return _POSTCALENDARNOAUTH; }
  56     // get the vars that were passed in
  57     list($Date,
  58          $print,
  59                  $viewtype,
  60          $jumpday,
  61          $jumpmonth,
  62          $jumpyear) = pnVarCleanFromInput('Date',
  63                                                   'print',
  64                                           'viewtype',
  65                                           'jumpday',
  66                                           'jumpmonth',
  67                                           'jumpyear');
  68     $Date =& postcalendar_getDate();
  69     if(!isset($viewtype))   $viewtype = _SETTING_DEFAULT_VIEW;
  70     return postcalendar_user_display(array('viewtype'=>$viewtype,'Date'=>$Date,'print'=>$print)) . postcalendar_footer();
  71 }
  72
  73 /**
  74  * display item
  75  * This is a standard function to provide detailed information on a single item
  76  * available from the module.
  77  */
  78 function postcalendar_user_display($args)
  79 {
  80     list($eid, $viewtype, $tplview,
  81                  $pc_username, $Date, $print, $category, $topic) = pnVarCleanFromInput('eid', 'viewtype', 'tplview',
  82                                                                  'pc_username', 'Date', 'print', 'pc_category', 'pc_topic');
  83
  84         extract($args);
  85     if(empty($Date) && empty($viewtype)) {
  86         return false;
  87     }
  88         if(empty($tplview)) $tplview = 'default';
  89     $uid = pnUserGetVar('uid');
  90         $theme = pnUserGetTheme();
  91
  92         //$cacheid = md5($Date.$viewtype.$tplview._SETTING_TEMPLATE.$eid.$print.$uid.'u'.$pc_username.$theme.'c'.$category.'t'.$topic);
  93         $cacheid = md5(strtotime("now"));
  94
  95         switch ($viewtype)
  96     {
  97         case 'details':
  98             if (!(bool)PC_ACCESS_READ) {
  99                                 return _POSTCALENDARNOAUTH;
 100                 }
 101                         $event = pnModAPIFunc('PostCalendar','user','eventDetail',array('eid'=>$eid,
 102                                                                                                                                                    'Date'=>$Date,
 103                                                                                                                                                    'print'=>$print,
 104                                                                                                                                                    'cacheid'=>$cacheid));
 105                         if($event === false) {
 106                                 pnRedirect(pnModURL(__POSTCALENDAR__,'user'));
 107                         }
 108                         $out  = "\n\n<!-- START user_display -->\n\n";
 109             $out .= $event;
 110                         $out .= "\n\n<!-- END user_display -->\n\n";
 111             break;
 112
 113                 default :
 114             if (!(bool)PC_ACCESS_OVERVIEW) {
 115                         return _POSTCALENDARNOAUTH;
 116                 }
 117                         $out  = "\n\n<!-- START user_display -->\n\n";
 118             $out .= pnModAPIFunc('PostCalendar','user','buildView',array('Date'=>$Date,
 119                                                                                                  'viewtype'=>$viewtype,
 120                                                                                                                                                  'cacheid'=>$cacheid));
 121             $out .= "\n\n<!-- END user_display -->\n\n";
 122             break;
 123     }
 124     // Return the output that has been generated by this function
 125     return $out;
 126 }
 127 function postcalendar_user_delete()
 128 {
 129     if(!(bool)PC_ACCESS_ADD) {
 130         return _POSTCALENDAR_NOAUTH;
 131     }
 132
 133         $output =& new pnHTML();
 134     $output->SetInputMode(_PNH_VERBATIMINPUT);
 135
 136         $uname = $_SESSION['authUser'];
 137     list($action,$pc_event_id) = pnVarCleanFromInput('action','pc_event_id');
 138     $event =& postcalendar_userapi_pcGetEventDetails($pc_event_id);
 139         if($uname != $event['uname']) {
 140                 if (!validateGroupStatus($uname,getUsername($event['uname']))) {
 141
 142                  return _PC_CAN_NOT_DELETE;
 143                 }
 144         }
 145         //if($uname != $event['uname']) {
 146         //      return _PC_CAN_NOT_DELETE;
 147         //}
 148         unset($event);
 149
 150     $output->FormStart(pnModUrl(__POSTCALENDAR__,'user','deleteevents'));
 151         $output->FormHidden('pc_eid',$pc_event_id);
 152         $output->Text(_PC_DELETE_ARE_YOU_SURE.' ');
 153     $output->FormSubmit(_PC_ADMIN_YES);
 154     $output->FormEnd();
 155     $output->Linebreak(2);
 156     $output->Text(pnModAPIFunc(__POSTCALENDAR__,'user','eventDetail',array('eid'=>$pc_event_id,'cacheid'=>'','print'=>0,'Date'=>'')));
 157     $output->Linebreak(2);
 158
 159
 160         return $output->GetOutput();
 161 }
 162 function postcalendar_user_deleteevents()
 163 {
 164     if(!(bool)PC_ACCESS_ADD) {
 165         return _POSTCALENDAR_NOAUTH;
 166     }
 167
 168
 169         $pc_eid = pnVarCleanFromInput('pc_eid');
 170         $event =& postcalendar_userapi_pcGetEventDetails($pc_eid);
 171         $uname = $_SESSION['authUser'];
 172         if($uname != $event['uname']) {
 173                 if (!validateGroupStatus($uname,getUsername($event['uname']))) {
 174
 175                  return _PC_CAN_NOT_DELETE;
 176                 }
 177         }
 178         unset($event);
 179
 180     $output =& new pnHTML();
 181     $output->SetInputMode(_PNH_VERBATIMINPUT);
 182     list($dbconn) = pnDBGetConn();
 183     $pntable = pnDBGetTables();
 184     $events_table = $pntable['postcalendar_events'];
 185     $events_column = &$pntable['postcalendar_events_column'];
 186         //hipaa doesn't allow for actual deletes, so just change to inactive
 187     //$sql = "DELETE FROM $events_table WHERE $events_column[eid] = '$pc_eid'";
 188         $sql = "UPDATE $events_table SET pc_eventstatus = 0 WHERE $events_column[eid] = '$pc_eid'";
 189     $dbconn->Execute($sql);
 190         $tpl =& new pcSmarty();
 191         $template_name = _SETTING_TEMPLATE;
 192     if(!isset($template_name)) {
 193         $template_name = 'default';
 194     }
 195         $tpl->assign('STYLE',$GLOBALS['style']);
 196         $output->Text($tpl->fetch($template_name . "/views/header.html"));
 197         $output->Text($tpl->fetch($template_name . "/views/global/navigation.html"));
 198         $output->Text("<br /><br />");
 199
 200
 201         if ($dbconn->ErrorNo() != 0) {
 202         $output->Text(_PC_ADMIN_EVENT_ERROR);
 203     } else {
 204
 205
 206         $output->Text(_PC_ADMIN_EVENTS_DELETED);
 207     }
 208         $output->Text($tpl->fetch($template_name . "/views/footer.html"));
 209         // clear the template cache
 210         $tpl->clear_all_cache();
 211
 212     return $output->GetOutput();
 213 }
 214
 215 //this function is only used by the system to delete temp events used in certain
 216 //collision calculations
 217 function delete_event($title)
 218 {
 219         list($dbconn) = pnDBGetConn();
 220         $pntable = pnDBGetTables();
 221         $events_table = $pntable['postcalendar_events'];
 222     $events_column = &$pntable['postcalendar_events_column'];
 223         //this function is only used by the system to delete temp events used in certain
 224         //collision calculations
 225         $sql = "DELETE FROM $events_table WHERE pc_eventstatus = " ._EVENT_TEMPORARY ." AND pc_title = '$title'";
 226     $dbconn->Execute($sql);
 227     if ($dbconn->ErrorNo() != 0) {
 228         return 0;
 229     } else {
 230                 return 1;
 231     }
 232
 233 }
 234
 235 /**
 236  * submit an event
 237  */
 238 function postcalendar_user_edit($args) {return postcalendar_user_submit($args); }
 239 function postcalendar_user_submit2($args)
 240 {
 241
 242         if (!(bool)PC_ACCESS_ADD) {
 243             return _POSTCALENDARNOAUTH;
 244         }
 245         extract($args);
 246         //print_r($_GET);
 247         $category = pnVarCleanFromInput('event_category');
 248         //print_r($category);
 249         print "dble is ".pnVarCleanFromInput('double_book')." data_loaded is ".pnVarCleanFromInput('data_loaded');
 250         //print_r($_POST);
 251         if(pnVarCleanFromInput('data_loaded') || !empty($category))     //submitting
 252         {
 253                 return postcalendar_user_submit2($agrs);
 254         }
 255         else
 256         {
 257                 //select the category you wish to add,
 258                 //using the info from that category we can populate some data
 259
 260                 $output =& new pnHTML();
 261             $output->SetInputMode(_PNH_VERBATIMINPUT);
 262                 $output->Text('<body bgcolor="'.$GLOBALS['style']['BGCOLOR2'].'"></body>');
 263                 // get the theme globals :: is there a better way to do this?
 264             pnThemeLoad(pnUserGetTheme());
 265             $all_categories = pnModAPIFunc(__POSTCALENDAR__,'admin','getCategories');
 266             $output->Text('<form name="cats" method="post" action="'.pnModURL(__POSTCALENDAR__,'user','submit2', $args).'">');
 267             $output->FormHidden('no_nav', $_GET['no_nav']);
 268             $output->FormHidden('event_startampm', $_GET['event_startampm']);
 269             $output->FormHidden('event_starttimeh', $_GET['event_starttimeh']);
 270             $output->FormHidden('event_starttimem', $_GET['event_starttimem']);
 271             $output->FormHidden('event_startmonth', $_GET['event_startmonth']);
 272             $output->FormHidden('event_startday', $_GET['event_startday']);
 273             $output->FormHidden('event_startyear', $_GET['event_startyear']);
 274             $output->FormHidden('event_category', $_GET['event_category']);
 275             $output->FormHidden('event_dur_minutes', $_GET['event_dur_minutes']);
 276             $output->FormHidden('provider_id',$_GET['provider_id']);
 277                 $output->FormHidden('patient_id', $_GET['patient_id']);
 278                 $output->FormHidden('module', $_GET['module']);
 279                 $output->FormHidden('func', $_GET['func']);
 280                 $output->FormHidden('Date', $_GET['Date']);
 281             $select = array();
 282
 283             foreach($all_categories as $cat)
 284             {
 285                 array_push($select, array('name'=>$cat['name'],'id'=>base64_encode(serialize($cat))));
 286             }
 287             $output->Text('Select a Category');
 288             $output->FormSelectMultiple('category', $select);
 289             $output->FormSubmit();
 290             return $output->GetOutput();
 291         }
 292         //return postcalendar_user_submit2($args);
 293 }
 294 function postcalendar_user_submit($args)
 295 {
 296
 297
 298         // We need at least ADD permission to submit an event
 299     if (!(bool)PC_ACCESS_ADD) {
 300         return _POSTCALENDARNOAUTH;
 301     }
 302
 303         $output =& new pnHTML();
 304     $output->SetInputMode(_PNH_VERBATIMINPUT);
 305
 306
 307         // get the theme globals :: is there a better way to do this?
 308     pnThemeLoad(pnUserGetTheme());
 309     global $bgcolor1, $bgcolor2, $bgcolor3, $bgcolor4, $bgcolor5, $textcolor1, $textcolor2;
 310
 311 //  $category = pnVarCleanFromInput('event_category');
 312     $category = pnVarCleanFromInput('category');
 313
 314     if(!empty($category))
 315     {
 316         $category = unserialize(base64_decode($category));
 317         //print_r($category);
 318     }
 319     else
 320     {   //print_r($_POST);
 321         $cat = $_POST['category'];
 322
 323         $category = unserialize(base64_decode($cat));
 324         //print_r($category);
 325     }
 326     //print_r($category);
 327
 328                 // echo("<!-- Here is the argument array: -->\n");
 329                 // foreach ($args as $tmpkey => $tmpval) { // debugging
 330                 //      echo("<!-- $tmpkey => '$tmpval' -->\n");
 331                 // }
 332
 333     extract($args);
 334
 335
 336         $Date =& postcalendar_getDate();
 337         $year   = substr($Date,0,4);
 338     $month  = substr($Date,4,2);
 339     $day    = substr($Date,6,2);
 340
 341         // basic event information
 342         $event_desc             = pnVarCleanFromInput('event_desc');
 343         $event_category         = pnVarCleanFromInput('event_category');
 344         $event_subject          = pnVarCleanFromInput('event_subject');
 345         $event_sharing          = pnVarCleanFromInput('event_sharing');
 346         $event_topic            = pnVarCleanFromInput('event_topic');
 347
 348         //id of the user the event is for
 349         $event_userid           = pnVarCleanFromInput('event_userid');
 350         if (!is_numeric($event_userid))
 351                 $event_userid = 0;
 352         $event_pid                      = pnVarCleanFromInput('event_pid');
 353
 354         if (!is_numeric($event_pid))
 355                 $event_pid = "";
 356
 357         // event start information
 358         $event_startmonth       = pnVarCleanFromInput('event_startmonth');
 359         $event_startday         = pnVarCleanFromInput('event_startday');
 360         $event_startyear        = pnVarCleanFromInput('event_startyear');
 361         $event_starttimeh       = pnVarCleanFromInput('event_starttimeh');
 362         $event_starttimem       = pnVarCleanFromInput('event_starttimem');
 363         $event_startampm        = pnVarCleanFromInput('event_startampm');
 364
 365         // location data
 366         $event_location         = pnVarCleanFromInput('event_location');
 367         $event_street1          = pnVarCleanFromInput('event_street1');
 368         $event_street2          = pnVarCleanFromInput('event_street2');
 369         $event_city             = pnVarCleanFromInput('event_city');
 370         $event_state            = pnVarCleanFromInput('event_state');
 371         $event_postal           = pnVarCleanFromInput('event_postal');
 372         $event_location_info = serialize(compact('event_location', 'event_street1', 'event_street2',
 373                                              'event_city', 'event_state', 'event_postal'));
 374         // contact data
 375         $event_contname         = pnVarCleanFromInput('event_contname');
 376         $event_conttel          = pnVarCleanFromInput('event_conttel');
 377         $event_contemail        = pnVarCleanFromInput('event_contemail');
 378         $event_website          = pnVarCleanFromInput('event_website');
 379         $event_fee              = pnVarCleanFromInput('event_fee');
 380         $event_patient_name = pnVarCleanFromInput('patient_name');
 381
 382         // event repeating data
 383         if( is_array($category) )
 384         {
 385                 //$event_subject                =
 386                 $event_desc             = $category['desc'];
 387                 $event_category         = $category['id'];
 388
 389                 $event_duration         = $category['event_duration']; //seconds of the event
 390                 $event_dur_hours        = $event_duration/(60 * 60);    //seconds divided by 60 seconds * 60 minutes
 391                 $event_dur_minutes  = ($event_duration%(60 * 60))/60;
 392                 $event_repeat           = $category['event_repeat'];
 393                 $event_repeat_freq  = $category['event_repeat_freq'];
 394                 $event_repeat_freq_type = $category['event_repeat_freq_type'];
 395                 $event_repeat_on_num = $category['event_repeat_on_num'];
 396                 $event_repeat_on_day = $category['event_repeat_on_day'];
 397                 $event_repeat_on_freq = $category['event_repeat_on_freq'];
 398                 $event_recurrspec = serialize(compact('event_repeat_freq', 'event_repeat_freq_type', 'event_repeat_on_num',
 399                                                   'event_repeat_on_day', 'event_repeat_on_freq'));
 400
 401             // event end information
 402             $multiple = $category['end_date_freq']." ";
 403                 switch($category['end_date_type'])
 404                 {
 405                         case REPEAT_EVERY_DAY:
 406                         case REPEAT_EVERY_WORK_DAY:     //end date is in days
 407                                 $multiple .= "days";
 408                                 break;
 409                         case REPEAT_EVERY_WEEK;         //end date is in weeks
 410                                 $multiple .= "weeks";
 411                                 break;
 412                         case REPEAT_EVERY_MONTH;        //end date is in months
 413                                 $multiple .= "months";
 414                                 break;
 415                         case REPEAT_EVERY_YEAR:         //end date is in years
 416                                 $multiple .= "years";
 417                                 break;
 418                 }
 419
 420                 $edate = strtotime(pnVarCleanFromInput('Date'));
 421                 $event_startmonth       = date("m", $edate);
 422                 $event_startday         = date("d", $edate);
 423                 $event_startyear        = date("Y", $edate);
 424                 $event_enddate = strtotime(pnVarCleanFromInput('Date')." + ".$multiple);
 425                 $event_endmonth         = date("m",$event_enddate);
 426                 $event_endday           = date("d",$event_enddate);
 427                 $event_endyear          = date("Y",$event_enddate);
 428                 $event_endtype          = $category['end_date_flag'];
 429                 $event_allday           = $category['event_all_day'];
 430         }
 431         else
 432         {
 433                 $event_dur_hours        = pnVarCleanFromInput('event_dur_hours');
 434                 $event_dur_minutes  = pnVarCleanFromInput('event_dur_minutes');
 435                 $event_duration         = (60*60*$event_dur_hours) + (60*$event_dur_minutes);
 436                 $event_repeat           = pnVarCleanFromInput('event_repeat');
 437                 $event_repeat_freq  = pnVarCleanFromInput('event_repeat_freq');
 438                 $event_repeat_freq_type = pnVarCleanFromInput('event_repeat_freq_type');
 439                 $event_repeat_on_num = pnVarCleanFromInput('event_repeat_on_num');
 440                 $event_repeat_on_day = pnVarCleanFromInput('event_repeat_on_day');
 441                 $event_repeat_on_freq = pnVarCleanFromInput('event_repeat_on_freq');
 442                 $event_recurrspec = serialize(compact('event_repeat_freq', 'event_repeat_freq_type', 'event_repeat_on_num',
 443                                                   'event_repeat_on_day', 'event_repeat_on_freq'));
 444
 445                 // event end information
 446                 $event_endmonth         = pnVarCleanFromInput('event_endmonth');
 447                 $event_endday           = pnVarCleanFromInput('event_endday');
 448                 $event_endyear          = pnVarCleanFromInput('event_endyear');
 449                 $event_endtype          = pnVarCleanFromInput('event_endtype');
 450                 $event_allday           = pnVarCleanFromInput('event_allday');
 451         }
 452         $form_action = pnVarCleanFromInput('form_action');
 453         $pc_html_or_text = pnVarCleanFromInput('pc_html_or_text');
 454     $pc_event_id = pnVarCleanFromInput('pc_event_id');
 455         $data_loaded = pnVarCleanFromInput('data_loaded');
 456     $is_update   = pnVarCleanFromInput('is_update');
 457         $authid      = pnVarCleanFromInput('authid');
 458
 459         //pennfirm uname matchup future fix
 460         //if(pnUserLoggedIn()) { $uname = pnUserGetVar('uname'); }
 461     //else { $uname = pnConfigGetVar('anonymous'); }
 462         $uname = $_SESSION['authUser'];
 463     if(!isset($event_repeat)) { $event_repeat = 0; }
 464
 465         if(!isset($pc_event_id) || empty($pc_event_id) || $data_loaded) {
 466
 467                 // lets wrap all the data into array for passing to submit and preview functions
 468                 $eventdata = compact('event_subject','event_desc','event_sharing','event_category','event_topic',
 469                 'event_startmonth','event_startday','event_startyear','event_starttimeh','event_starttimem','event_startampm',
 470                 'event_endmonth','event_endday','event_endyear','event_endtype','event_dur_hours','event_dur_minutes',
 471                 'event_duration','event_allday','event_location','event_street1','event_street2','event_city','event_state',
 472                 'event_postal','event_location_info','event_contname','event_conttel','event_contemail',
 473                 'event_website','event_fee','event_repeat','event_repeat_freq','event_repeat_freq_type',
 474                 'event_repeat_on_num','event_repeat_on_day','event_repeat_on_freq','event_recurrspec','uname',"event_userid","event_pid",
 475                 'Date','year','month','day','pc_html_or_text','event_patient_name','event_pid');
 476                 $eventdata['is_update'] = $is_update;
 477                 $eventdata['pc_event_id'] = $pc_event_id;
 478                 $eventdata['data_loaded'] = true;
 479                 $eventdata['category'] = base64_encode(serialize($category));
 480         } else {
 481                 $event =& postcalendar_userapi_pcGetEventDetails($pc_event_id);
 482
 483                 //echo "uname is:$uname  other name is: ".$event['uname'] . "<br />";
 484                 if($uname != $event['uname']) {
 485                         if (!validateGroupStatus($uname,getUsername($event['uname']))) {
 486                          return _PC_CAN_NOT_EDIT;
 487                         }
 488                 }
 489                 $eventdata['event_subject'] = $event['title'];
 490                 $eventdata['event_desc'] = $event['hometext'];
 491                 $eventdata['event_sharing'] = $event['sharing'];
 492                 $eventdata['event_category'] = $event['catid'];
 493                 $eventdata['event_topic'] = $event['topic'];
 494                 $eventdata['event_startmonth'] = substr($event['eventDate'],5,2);
 495                 $eventdata['event_startday'] = substr($event['eventDate'],8,2);
 496                 $eventdata['event_startyear'] = substr($event['eventDate'],0,4);
 497                 $eventdata['event_starttimeh'] = substr($event['startTime'],0,2);
 498                 $eventdata['event_starttimem'] = substr($event['startTime'],3,2);
 499                 $eventdata['event_startampm'] = $eventdata['event_starttimeh'] < 12 ? 1 : 2 ; //1 is am , 2 is pm
 500                 $eventdata['event_endmonth'] = substr($event['endDate'],5,2);
 501                 $eventdata['event_endday'] = substr($event['endDate'],8,2);
 502                 $eventdata['event_endyear'] = substr($event['endDate'],0,4);
 503                 $eventdata['event_endtype'] = $event['endDate'] == '0000-00-00' ? '0' : '1' ;
 504                 $eventdata['event_dur_hours'] = $event['duration_hours'];
 505                 $eventdata['event_dur_minutes'] = $event['duration_minutes'];
 506                 $eventdata['event_duration'] = $event['duration'];
 507                 $eventdata['event_allday'] = $event['alldayevent'];
 508                 $loc_data = unserialize($event['location']);
 509                 $eventdata['event_location'] = $loc_data['event_location'];
 510                 $eventdata['event_street1'] = $loc_data['event_street1'];
 511                 $eventdata['event_street2'] = $loc_data['event_street2'];
 512                 $eventdata['event_city'] = $loc_data['event_city'];
 513                 $eventdata['event_state'] = $loc_data['event_state'];
 514                 $eventdata['event_postal'] = $loc_data['event_postal'];
 515                 $eventdata['event_location_info'] = $loc_data;
 516                 $eventdata['event_contname'] = $event['contname'];
 517                 $eventdata['event_conttel'] = $event['conttel'];
 518                 $eventdata['event_contemail'] = $event['contemail'];
 519                 $eventdata['event_website'] = $event['website'];
 520                 $eventdata['event_fee'] = $event['fee'];
 521                 $eventdata['event_repeat'] = $event['recurrtype'];
 522                 $rspecs = unserialize($event['recurrspec']);
 523                 $eventdata['event_repeat_freq'] = $rspecs['event_repeat_freq'];
 524                 $eventdata['event_repeat_freq_type'] = $rspecs['event_repeat_freq_type'];
 525                 $eventdata['event_repeat_on_num'] = $rspecs['event_repeat_on_num'];
 526                 $eventdata['event_repeat_on_day'] = $rspecs['event_repeat_on_day'];
 527                 $eventdata['event_repeat_on_freq'] = $rspecs['event_repeat_on_freq'];
 528                 $eventdata['event_recurrspec'] = $rspecs;
 529                 $eventdata['uname'] = $uname;
 530                 $eventdata['event_userid'] = $event['event_userid'];
 531                 $eventdata['event_pid'] = $event['pid'];
 532                 $eventdata['event_aid'] = $event['aid'];
 533                 $eventdata['Date'] = $Date;
 534                 $eventdata['year'] = $year;
 535                 $eventdata['month'] = $month;
 536                 $eventdata['day'] = $day;
 537                 $eventdata['is_update'] = true;
 538                 $eventdata['pc_event_id'] = $pc_event_id;
 539                 $event_data['patient_name'] = $event_patient_name;
 540                 $eventdata['data_loaded'] = true;
 541                 $eventdata['pc_html_or_text'] = $pc_html_or_text;
 542                 $eventdata['category'] = base64_encode(serialize($category));
 543
 544         }
 545
 546         // lets get the module's information
 547     $modinfo = pnModGetInfo(pnModGetIDFromName(__POSTCALENDAR__));
 548     $categories = pnModAPIFunc(__POSTCALENDAR__,'user','getCategories');
 549         $output->tabindex=1;
 550
 551         //================================================================
 552         //      ERROR CHECKING
 553         //================================================================
 554         // removed event_desc as a required_var
 555
 556     $required_vars = array('event_subject');
 557     $required_name = array(_PC_EVENT_TITLE,_PC_EVENT_DESC);
 558     $error_msg = '';
 559     $output->SetOutputMode(_PNH_RETURNOUTPUT);
 560     $reqCount = count($required_vars);
 561         //print_r($eventdata);
 562     for ($r=0; $r<$reqCount; $r++) {
 563         if(empty($$required_vars[$r]) || !preg_match('/\S/i',$$required_vars[$r])) {
 564             $error_msg .= $output->Text('<b>'.$required_name[$r].'</b> '._PC_SUBMIT_ERROR4);
 565             $error_msg .= $output->Linebreak();
 566         }
 567     }
 568         unset($reqCount);
 569         // check repeating frequencies
 570         if($event_repeat == REPEAT) {
 571
 572                 //can't have a repeating event that doesnt have an end date
 573                 if ($event_endtype == 0) {
 574                         $error_msg .= $output->Text("Repeating events must have an end date set.");
 575                 $error_msg .= $output->Linebreak();
 576                 }
 577                 if(!isset($event_repeat_freq) ||  $event_repeat_freq < 1 || empty($event_repeat_freq)) {
 578                         $error_msg .= $output->Text(_PC_SUBMIT_ERROR5);
 579                 $error_msg .= $output->Linebreak();
 580                 } elseif(!is_numeric($event_repeat_freq)) {
 581                         $error_msg .= $output->Text(_PC_SUBMIT_ERROR6);
 582                 $error_msg .= $output->Linebreak();
 583                 }
 584         } elseif($event_repeat == REPEAT_ON) {
 585                 //can't have a repeating event that doesnt have an end date
 586                 if ($event_endtype == 0) {
 587                         $error_msg .= $output->Text("Repeating events must have an end date set.");
 588                 $error_msg .= $output->Linebreak();
 589                 }
 590                 if(!isset($event_repeat_on_freq) || $event_repeat_on_freq < 1 || empty($event_repeat_on_freq)) {
 591                         $error_msg .= $output->Text(_PC_SUBMIT_ERROR5);
 592                 $error_msg .= $output->Linebreak();
 593                 } elseif(!is_numeric($event_repeat_on_freq)) {
 594                         $error_msg .= $output->Text(_PC_SUBMIT_ERROR6);
 595                 $error_msg .= $output->Linebreak();
 596                 }
 597         }
 598         // check date validity
 599     if(_SETTING_TIME_24HOUR) {
 600         $startTime = $event_starttimeh.':'.$event_starttimem;
 601         $endTime =   $event_endtimeh.':'.$event_endtimem;
 602     } else {
 603         if($event_startampm == _AM_VAL) {
 604             $event_starttimeh = $event_starttimeh == 12 ? '00' : $event_starttimeh;
 605         } else {
 606             $event_starttimeh =  $event_starttimeh != 12 ? $event_starttimeh+=12 : $event_starttimeh;
 607         }
 608         $startTime = $event_starttimeh.':'.$event_starttimem;
 609     }
 610     $sdate = strtotime($event_startyear.'-'.$event_startmonth.'-'.$event_startday);
 611     $edate = strtotime($event_endyear.'-'.$event_endmonth.'-'.$event_endday);
 612     $tdate = strtotime(date('Y-m-d'));
 613     if($edate < $sdate && $event_endtype == 1) {
 614         $error_msg .= $output->Text(_PC_SUBMIT_ERROR1);
 615         $error_msg .= $output->Linebreak();
 616     }
 617     if(!checkdate($event_startmonth,$event_startday,$event_startyear)) {
 618         $error_msg .= $output->Text(_PC_SUBMIT_ERROR2 . " '$event_startyear-$event_startmonth-$event_startday'");
 619         $error_msg .= $output->Linebreak();
 620     }
 621     if(!checkdate($event_endmonth,$event_endday,$event_endyear)) {
 622         $error_msg .= $output->Text(_PC_SUBMIT_ERROR3 . " '$event_endyear-$event_endmonth-$event_endday'");
 623         $error_msg .= $output->Linebreak();
 624     }
 625
 626     //check limit on category
 627     if(($ret = checkCategoryLimits($eventdata)) != null)
 628     {
 629         $error_msg .= $output->Text("This category has a limit of $ret[limit] between $ret[start] and $ret[end] which you have exceeded.");
 630         $error_msg .= $output->Linebreak();
 631         //$output->Text(pnModAPIFunc('PostCalendar','user','buildSubmitForm',$eventdata));
 632                 //return $output->GetOutput();
 633     }
 634         //echo "fa: " . $form_action . " double_book: " . pnVarCleanFromInput("double_book") . " update: " . $eventdata['is_update'] . " em: " . $error_msg;
 635         //event collision check
 636
 637         if($form_action == "commit" && pnVarCleanFromInput("double_book") != 1 && !$eventdata['is_update'] && empty($error_msg) ) {
 638                 //check on new shceduling events(in or out of office) to make sure that
 639                 //you don't have more than one set per day
 640                 //event category 1 is in office, event category 2 is out of office
 641
 642                 if ($eventdata['event_category'] == 2 || $eventdata['event_category'] == 3)  {
 643                         $searchargs = array();
 644                         $searchargs['start'] = $eventdata['event_startmonth'] . "/" . $eventdata['event_startday'] ."/". $eventdata['event_startyear'];
 645                         $searchargs['end'] = $eventdata['event_endmonth'] . "/" . $eventdata['event_endday'] ."/". $eventdata['event_endyear'];
 646                         $searchargs['provider_id'] = $eventdata['event_userid'];
 647
 648                         //faFLag uses pcgeteventsfa, which can search on provider
 649                         $searchargs['faFlag'] = true;
 650                         $searchargs['s_keywords'] = " (a.pc_catid = 2 OR a.pc_catid = 3) ";
 651                         //print_r($searchargs);
 652
 653                 $eventsByDate =& postcalendar_userapi_pcGetEvents($searchargs);
 654                 $ekey = md5($event_data['subject'] . date("U") . rand(0,1000));
 655                 $oldstatus = $eventdata['event_status'];
 656                 $oldtitle = $eventdata['event_subject'];
 657                 $old_patient_name = $eventdata['patient_name'];
 658                 $old_dur_hours = $eventdata['event_dur_hours'];
 659                 $old_dur_min = $eventdata['event_dur_minutes'];
 660                 $old_duration = $eventdata['event_duration'];
 661                 $eventdata['event_subject'] = mysql_real_escape_string($ekey);
 662                 $eventdata['event_status'] = _EVENT_TEMPORARY;
 663
 664                 if (!pnModAPIFunc(__POSTCALENDAR__,'user','submitEvent',$eventdata)) {
 665                         $error_msg .= $output->Text('<center><div style="padding:5px; border:1px solid red; background-color: pink;">');
 666                                 $error_msg .= $output->Text("<b>The system was unable to check you event for conflicts with other events because there was a problem with your database.</b><br />");
 667                                 $error_msg .= $output->Text('</div></center>');
 668                                 $error_msg .= $output->Linebreak();
 669                         $error_msg .= $output->Text($dbconn->ErrorMsg());
 670         }
 671                 $searchargs['s_keywords'] = " (a.pc_catid = 2 OR a.pc_catid = 3) AND a.pc_title = '" . $eventdata['event_subject']  . "' ";
 672                 $searchargs['event_status'] = _EVENT_TEMPORARY;
 673                 $submitEventByDate =& postcalendar_userapi_pcGetEvents($searchargs);
 674                 if(!delete_event($ekey)) {
 675                         $error_msg .= $output->Text('<center><div style="padding:5px; border:1px solid red; background-color: pink;">');
 676                         $error_msg .= $output->Text("<b>The system was unable to delete a temporary record it created, this may have left the database in an inconsistent state.</b><br />");
 677                         $error_msg .= $output->Text('</div></center>');
 678                         $error_msg .= $output->Linebreak();
 679                 $error_msg .= $output->Text($dbconn->ErrorMsg());
 680
 681                 }
 682                 $eventdata['event_status'] = $oldstatus;
 683                 $eventdata['event_subject'] = $oldtitle;
 684                 $eventdata['patient_name '] = $old_patient_name;
 685                 $eventdata['event_dur_hours'] = $old_dur_hour;
 686                 $eventdata['event_dur_minutes'] = $old_dur_min;
 687
 688                 foreach ($submitEventByDate as $date => $newevent) {
 689                         if (count($eventsByDate[$date]) > 0 && count($newevent) > 0) {
 690                                 foreach ($eventsByDate[$date] as $con_event)  {
 691                                         if ($con_event['catid'] == $newevent[0]['catid']) {
 692                                                 $error_msg .= $output->Text('There is a conflict on ' . $date . ' with event ' . $con_event['title']);
 693                                                 $error_msg .= $output->Linebreak();
 694                                         }
 695                                 }
 696
 697                         }
 698
 699                 }
 700                 /*echo "<br /><br />";
 701                 print_r($eventsByDate);
 702                 echo "<br /><br />";
 703                 print_r($submitEventByDate);*/
 704
 705                 }
 706
 707                 $colls = checkEventCollision($eventdata);
 708                 if (count($colls) > 0) {
 709                         foreach ($colls as $coll) {
 710                                 $error_msg .= $output->Text("Event Collides with: " . $coll['title'] . " at " . date("g:i a", strtotime($coll['startTime'])) . "<br />");
 711                                 $error_msg .= $output->Linebreak();
 712                         }
 713                         $error_msg .= $output->Text("Submit again to \"Double Book\" <br />To change values click back in your browser.");
 714                         $error_msg .= $output->Linebreak();
 715                         // the following line will display "DOUBLE BOOKED" if when adding an event there is a collistion with anothe appointment
 716                         //$eventdata['event_subject'] = "DOUBLE BOOKED " . $eventdata['event_subject'];
 717                         $eventdata['double_book'] = 1;
 718                 }
 719
 720         }
 721
 722         $output->SetOutputMode(_PNH_KEEPOUTPUT);
 723         if($form_action == 'preview') {
 724         //================================================================
 725                 //      Preview the event
 726                 //================================================================
 727                 // check authid
 728         if (!pnSecConfirmAuthKey()) { return(_NO_DIRECT_ACCESS); }
 729         if(!empty($error_msg)) {
 730             $preview = false;
 731             $output->Text('<table border="0" width="100%" cellpadding="1" cellspacing="0"><tr><td bgcolor="red">');
 732             $output->Text('<table border="0" width="100%" cellpadding="1" cellspacing="0"><tr><td bgcolor="pink">');
 733                 $output->Text('<center><b>'._PC_SUBMIT_ERROR.'</b></center>');
 734                 $output->Linebreak();
 735                 $output->Text($error_msg);
 736             $output->Text('</td></td></table>');
 737             $output->Text('</td></td></table>');
 738             $output->Linebreak(2);
 739         } else {
 740             $output->Text(pnModAPIFunc(__POSTCALENDAR__,'user','eventPreview',$eventdata));
 741                         $output->Linebreak();
 742         }
 743     } elseif($form_action == 'commit') {
 744
 745
 746
 747                 //================================================================
 748                 //      Enter the event into the DB
 749                 //================================================================
 750                 if (!empty($error_msg)) {
 751                         if (!pnSecConfirmAuthKey(true)) { return(_NO_DIRECT_ACCESS); }
 752                 }
 753                 else {
 754                         if (!pnSecConfirmAuthKey()) { return(_NO_DIRECT_ACCESS); }
 755                 }
 756                 if(!empty($error_msg)) {
 757             $preview = false;
 758             $output->Text('<table border="0" width="100%" cellpadding="1" cellspacing="0"><tr><td bgcolor="red">');
 759             $output->Text('<table border="0" width="100%" cellpadding="1" cellspacing="0"><tr><td bgcolor="pink">');
 760                 $output->Text('<center><b>'._PC_SUBMIT_ERROR.'</b></center>');
 761                 $output->Linebreak();
 762                 $output->Text($error_msg);
 763             $output->Text('</td></td></table>');
 764             $output->Text('</td></td></table>');
 765             $output->Linebreak(2);
 766         } else {
 767             if (!pnModAPIFunc(__POSTCALENDAR__,'user','submitEvent',$eventdata)) {
 768                         $output->Text('<center><div style="padding:5px; border:1px solid red; background-color: pink;">');
 769                                 $output->Text("<b>"._PC_EVENT_SUBMISSION_FAILED."</b>");
 770                                 $output->Text('</div></center>');
 771                                 $output->Linebreak();
 772                         $output->Text($dbconn->ErrorMsg());
 773                 } else {
 774                         // clear the Smarty cache
 775                                 $tpl =& new pcSmarty();
 776                                 $tpl->clear_all_cache();
 777                                 $output->Text('<center><div style="padding:5px; border:1px solid green; background-color: lightgreen;">');
 778                                 if($is_update) {
 779                                         $output->Text("<b>"._PC_EVENT_EDIT_SUCCESS."</b>");
 780                                 } else {
 781                                         $output->Text("<b>"._PC_EVENT_SUBMISSION_SUCCESS."</b>");
 782                                 }
 783                                 $output->Text('</div></center>');
 784                                 $output->Linebreak();
 785                         // clear the form vars
 786                         $event_subject=$event_desc=$event_sharing=$event_category=$event_topic=
 787                                 $event_startmonth=$event_startday=$event_startyear=$event_starttimeh=$event_starttimem=$event_startampm=
 788                                 $event_endmonth=$event_endday=$event_endyear=$event_endtype=$event_dur_hours=$event_dur_minutes=
 789                                 $event_duration=$event_allday=$event_location=$event_street1=$event_street2=$event_city=$event_state=
 790                                 $event_postal=$event_location_info=$event_contname=$event_conttel=$event_contemail=
 791                                 $event_website=$event_fee=$event_repeat=$event_repeat_freq=$event_repeat_freq_type=
 792                                 $event_repeat_on_num=$event_repeat_on_day=$event_repeat_on_freq=$event_recurrspec=$uname=
 793                                 $Date=$year=$month=$day=$pc_html_or_text=$event_patient_name=$evnet_pid=null;
 794                                 $is_update = false;
 795                                 $pc_event_id = 0;
 796
 797                                 //$_SESSION['category'] = "";
 798                                 // lets wrap all the data into array for passing to submit and preview functions
 799                                 $eventdata = compact('event_subject','event_desc','event_sharing','event_category','event_topic',
 800                                 'event_startmonth','event_startday','event_startyear','event_starttimeh','event_starttimem','event_startampm',
 801                                 'event_endmonth','event_endday','event_endyear','event_endtype','event_dur_hours','event_dur_minutes',
 802                                 'event_duration','event_allday','event_location','event_street1','event_street2','event_city','event_state',
 803                                 'event_postal','event_location_info','event_contname','event_conttel','event_contemail',
 804                                 'event_website','event_fee','event_repeat','event_repeat_freq','event_repeat_freq_type',
 805                                 'event_repeat_on_num','event_repeat_on_day','event_repeat_on_freq','event_recurrspec','uname',
 806                                 'Date','year','month','day','pc_html_or_text','is_update','pc_event_id','event_patient_name');
 807                                 //if no using the no_nav format then show form again after submit
 808                                 if (pnVarCleanFromInput("no_nav") == 1) {
 809                                         return $output->GetOutput();
 810                                 }
 811                         }
 812         }
 813         }
 814
 815         $output->Text(pnModAPIFunc('PostCalendar','user','buildSubmitForm',$eventdata));
 816         return $output->GetOutput();
 817 }
 818
 819
 820
 821
 822 /**
 823  * search events
 824  */
 825 function postcalendar_user_search()
 826 {
 827
 828     if (!(bool)PC_ACCESS_OVERVIEW) {
 829         return _POSTCALENDARNOAUTH;
 830     }
 831
 832     $tpl =& new pcSmarty();
 833     $k = pnVarCleanFromInput('pc_keywords');
 834     $k_andor = pnVarCleanFromInput('pc_keywords_andor');
 835         $pc_category = pnVarCleanFromInput('pc_category');
 836         $pc_topic = pnVarCleanFromInput('pc_topic');
 837         $submit = pnVarCleanFromInput('submit');
 838         $event_dur_hours = pnVarCleanFromInput('event_dur_hours');
 839         $event_dur_minutes = pnVarCleanFromInput('event_dur_minutes');
 840
 841         $categories = postcalendar_userapi_getCategories();
 842         $cat_options = '';
 843         foreach($categories as $category) {
 844                 $cat_options .= "<option value=\"$category[id]\">$category[name]</option>";
 845         }
 846         $tpl->assign_by_ref('CATEGORY_OPTIONS',$cat_options);
 847         $tpl->assign('event_dur_hours', $event_dur_hours);
 848         $tpl->assign('event_dur_minutes', $event_dur_minutes);
 849
 850         $ProviderID = pnVarCleanFromInput("provider_id");
 851         //echo "prov is: " . $ProviderID . "<br />";
 852         if (is_numeric($ProviderID)) {
 853           $tpl->assign('ProviderID',                    $ProviderID);;
 854         }
 855         else {
 856           $tpl->assign('ProviderID',                    "");
 857         }
 858         $provinfo = getProviderInfo();
 859         $tpl->assign('providers',                               $provinfo);
 860         $PatientID = pnVarCleanFromInput("patient_id");
 861         if (is_numeric($PatientID)) {
 862           $tpl->assign('PatientList',                   getPatientPID($PatientID));
 863         }
 864         else {
 865           $tpl->assign('PatientList',                   getPatientPID());
 866         }
 867         $event_endday = pnVarCleanFromInput("event_endday");
 868         $event_endmonth = pnVarCleanFromInput("event_endmonth");
 869         $event_endyear = pnVarCleanFromInput("event_endyear");
 870
 871         $event_startday = pnVarCleanFromInput("event_startday");
 872         $event_startmonth = pnVarCleanFromInput("event_startmonth");
 873         $event_startyear = pnVarCleanFromInput("event_startyear");
 874         if($event_startday > $event_endday)
 875         {
 876                  $event_endday = $event_startday;
 877         }
 878         if($event_startmonth > $event_endmonth)
 879         {
 880                  $event_endmonth = $event_startmonth;
 881         }
 882         if($event_startyear > $event_endyear)
 883         {
 884                  $event_endyear = $event_startyear;
 885         }
 886         $tpl->assign('patient_id', $PatientID);
 887         $tpl->assign('provider_id', $ProviderID);
 888         $tpl->assign("event_category", pnVarCleanFromInput("event_category"));
 889         $tpl->assign("event_subject", pnVarCleanFromInput("event_subject"));
 890         $output =& new pnHTML();
 891         $output->SetOutputMode(_PNH_RETURNOUTPUT);
 892     if(_SETTING_USE_INT_DATES) {
 893
 894         $sel_data = pnModAPIFunc(__POSTCALENDAR__,'user','buildDaySelect',array('pc_day'=>$day,'selected'=>$event_startday));
 895         $formdata = $output->FormSelectMultiple('event_startday', $sel_data);
 896         $sel_data = pnModAPIFunc(__POSTCALENDAR__,'user','buildMonthSelect',array('pc_month'=>$month,'selected'=>$event_startmonth));
 897         $formdata .= $output->FormSelectMultiple('event_startmonth', $sel_data);
 898     } else {
 899         $sel_data = pnModAPIFunc(__POSTCALENDAR__,'user','buildMonthSelect',array('pc_month'=>$month,'selected'=>$event_startmonth));
 900         $formdata = $output->FormSelectMultiple('event_startmonth', $sel_data);
 901         $sel_data = pnModAPIFunc(__POSTCALENDAR__,'user','buildDaySelect',array('pc_day'=>$day,'selected'=>$event_startday));
 902         $formdata .= $output->FormSelectMultiple('event_startday', $sel_data);
 903     }
 904     $sel_data = pnModAPIFunc(__POSTCALENDAR__,'user','buildYearSelect',array('pc_year'=>$year,'selected'=>$event_startyear));
 905     $formdata .= $output->FormSelectMultiple('event_startyear', $sel_data);
 906     $output->SetOutputMode(_PNH_KEEPOUTPUT);
 907     $tpl->assign('SelectDateTimeStart', $formdata);
 908         $output->SetOutputMode(_PNH_RETURNOUTPUT);
 909     if(_SETTING_USE_INT_DATES) {
 910                 $sel_data = pnModAPIFunc(__POSTCALENDAR__,'user','buildDaySelect',array('pc_day'=>$day,'selected'=>$event_endday));
 911         $formdata = $output->FormSelectMultiple('event_endday', $sel_data);
 912         $sel_data = pnModAPIFunc(__POSTCALENDAR__,'user','buildMonthSelect',array('pc_month'=>$month,'selected'=>$event_endmonth));
 913         $formdata .= $output->FormSelectMultiple('event_endmonth', $sel_data);
 914     } else {
 915         $sel_data = pnModAPIFunc(__POSTCALENDAR__,'user','buildMonthSelect',array('pc_month'=>$month,'selected'=>$event_endmonth));
 916         $formdata = $output->FormSelectMultiple('event_endmonth', $sel_data);
 917         $sel_data = pnModAPIFunc(__POSTCALENDAR__,'user','buildDaySelect',array('pc_day'=>$day,'selected'=>$event_endday ));
 918         $formdata .= $output->FormSelectMultiple('event_endday', $sel_data);
 919     }
 920     $sel_data = pnModAPIFunc(__POSTCALENDAR__,'user','buildYearSelect',array('pc_year'=>$year,'selected'=>$event_endyear));
 921     $formdata .= $output->FormSelectMultiple('event_endyear', $sel_data);
 922     $output->SetOutputMode(_PNH_KEEPOUTPUT);
 923     $tpl->assign('SelectDateTimeEnd', $formdata);
 924         $output = null;
 925         if(_SETTING_DISPLAY_TOPICS) {
 926                 $topics = postcalendar_userapi_getTopics();
 927                 $top_options = '';
 928                 foreach($topics as $topic) {
 929                         $top_options .= "<option value=\"$topic[id]\">$topic[text]</option>";
 930                 }
 931                 $tpl->assign_by_ref('TOPIC_OPTIONS',$top_options);
 932         }
 933         //=================================================================
 934     //  Find out what Template we're using
 935         //=================================================================
 936     $template_name = _SETTING_TEMPLATE;
 937     if(!isset($template_name)) {
 938         $template_name = 'default';
 939     }
 940         //=================================================================
 941     //  Output the search form
 942         //=================================================================
 943         $tpl->assign('FORM_ACTION',pnModURL(__POSTCALENDAR__,'user','search'));
 944         //=================================================================
 945     //  Perform the search if we have data
 946         //=================================================================
 947         if(!empty($submit) && strtolower($submit) == "find first") {
 948
 949                 $searchargs = array();
 950                 $searchargs['start'] = pnVarCleanFromInput("event_startmonth") . "/" . pnVarCleanFromInput("event_startday") ."/". pnVarCleanFromInput("event_startyear");
 951                 $searchargs['end'] = pnVarCleanFromInput("event_endmonth") . "/" . pnVarCleanFromInput("event_endday") ."/". pnVarCleanFromInput("event_endyear");
 952                 $searchargs['provider_id'] = pnVarCleanFromInput("provider_id");
 953                 $searchargs['faFlag'] = true;
 954                 //print_r($searchargs);
 955                 //echo "<br />";
 956                 //set defaults to current week if empty
 957                 if ($searchargs['start'] == "//") {
 958                         $searchargs['start'] = date("m/d/Y");
 959                 }
 960                 if ($searchargs['end'] == "//") {
 961                         $searchargs['end'] = date("m/d/Y", strtotime("+7 Days", strtotime($searchargs['start'])));
 962                 }
 963                 //print_r($searchargs);
 964                 $eventsByDate =& postcalendar_userapi_pcGetEvents($searchargs);
 965                 //print_r($eventsByDate);
 966                 $found = findFirstAvailable($eventsByDate);
 967                 $tpl->assign('available_times',$found);
 968                 //print_r($_POST);
 969
 970                 $tpl->assign('SEARCH_PERFORMED',true);
 971                 $tpl->assign('A_EVENTS',$eventsByDate);
 972         }
 973         if(!empty($submit) && strtolower($submit) == "listapps") {
 974
 975                 $searchargs = array();
 976                 $searchargs['start'] = date("m/d/Y");
 977                 $searchargs['end'] = date("m/d/Y",strtotime("+1 year",strtotime($searchargs['start'])));
 978                 $searchargs['patient_id'] = pnVarCleanFromInput("patient_id");
 979                 $searchargs['listappsFlag'] = true;
 980
 981                 $sqlKeywords .= "(a.pc_pid = '" . pnVarCleanFromInput("patient_id") . "' )";
 982
 983                 $searchargs['s_keywords'] = $sqlKeywords;
 984                 //print_r($searchargs);
 985                 $eventsByDate =& postcalendar_userapi_pcGetEvents($searchargs);
 986                 //print_r($eventsByDate);
 987                 $tpl->assign('appointments',$eventsByDate);
 988                 //print_r($_POST);
 989
 990                 $tpl->assign('SEARCH_PERFORMED',true);
 991                 $tpl->assign('A_EVENTS',$eventsByDate);
 992         }
 993         elseif(!empty($submit)) {
 994                 $sqlKeywords = '';
 995                 $keywords = explode(' ',$k);
 996                 // build our search query
 997                 foreach($keywords as $word) {
 998                         if(!empty($sqlKeywords)) $sqlKeywords .= " $k_andor ";
 999                         $sqlKeywords .= '(';
1000                         $sqlKeywords .= "pd.lname LIKE '%$word%' OR ";
1001                         $sqlKeywords .= "pd.fname LIKE '%$word%' OR ";
1002                         $sqlKeywords .= "u.lname LIKE '%$word%' OR ";
1003                         $sqlKeywords .= "u.fname LIKE '%$word%' OR ";
1004                         $sqlKeywords .= "a.pc_title LIKE '%$word%' OR ";
1005                         $sqlKeywords .= "a.pc_hometext LIKE '%$word%' OR ";
1006                         $sqlKeywords .= "a.pc_location LIKE '%$word%'";
1007                         $sqlKeywords .= ') ';
1008                 }
1009
1010
1011                 if(!empty($pc_category)) {
1012                         $s_category = "a.pc_catid = '$pc_category'";
1013                 }
1014
1015                 if(!empty($pc_topic)) {
1016                         $s_topic = "a.pc_topic = '$pc_topic'";
1017                 }
1018
1019                 $searchargs = array();
1020                 if(!empty($sqlKeywords)) $searchargs['s_keywords'] = $sqlKeywords;
1021                 if(!empty($s_category)) $searchargs['s_category'] = $s_category;
1022                 if(!empty($s_topic)) $searchargs['s_topic'] = $s_topic;
1023                 $eventsByDate =& postcalendar_userapi_pcGetEvents($searchargs);
1024                 //print_r($eventsByDate);
1025                 $tpl->assign('SEARCH_PERFORMED',true);
1026                 $tpl->assign('A_EVENTS',$eventsByDate);
1027         }
1028         $tpl->caching = false;
1029         $tpl->assign('STYLE',$GLOBALS['style']);
1030         $pageSetup =& pnModAPIFunc(__POSTCALENDAR__,'user','pageSetup');
1031         if (pnVarCleanFromInput("no_nav") == 1) {
1032           $return = $pageSetup . $tpl->fetch($template_name.'/user/findfirst.html');
1033         }
1034         elseif (pnVarCleanFromInput("no_nav") == 2) {
1035           $return = $pageSetup . $tpl->fetch($template_name.'/user/listapps.html');
1036         }
1037         else {
1038          $return = $pageSetup . $tpl->fetch($template_name.'/user/search.html');
1039         }
1040         return $return;
1041 }
1042
1043 function checkCategoryLimits($eventdata)
1044 {
1045         extract($eventdata);
1046         //print_r($eventdata);
1047         //print "$event_starttimeh:$event_starttimem";
1048
1049         $limits = & pnModAPIFunc(__POSTCALENDAR__,'user','getCategoryLimits');
1050         //print_r($limits);
1051         foreach($limits as $limit)
1052         {
1053                 if($limit['catid'] == $event_category) //have a limit
1054                 {
1055                         //print_r($limit);
1056                         $sdate = ($event_startmonth.'/'.$event_startday.'/'
1057                                                 .$event_startyear);
1058                     $edate = $sdate;
1059                     $stime = date("H:i:00",strtotime($limit['startTime']));
1060                         $etime = date("H:i:00",strtotime($limit['endTime']));
1061                         if($is_update)
1062                         {
1063                                 $searchText = "a.pc_eid != '$pc_event_id' AND ";
1064                         }
1065                         //echo "stime is: $stime, etime is: $etime sdate is: $sdate edate is: $edate<br />";
1066                         $a = array('s_category' => " a.pc_catid = $event_category",'start'=>$edate,
1067                                 'end'=>$sdate, 'stime' => $stime, 'etime' => $etime,'providerID'=>$event_userid,
1068                                 's_keywords'=>$searchText."a.pc_starttime >= '$stime' AND a.pc_endtime <= '$etime'");
1069                         $eventsByDate =& postcalendar_userapi_pcGetEvents($a);
1070                         //print_r($eventsByDate);
1071                         $ret = null;
1072                         foreach ($eventsByDate as $day)
1073                         {
1074                                 //if event time falls within limit time check
1075                                 //hour from forms is 12 not 24 format, convert here
1076                                 if($event_startampm == 2 && $event_starttimeh != 12)
1077                                         $event_starttimeh += 12;
1078                                 elseif ($event_startampm == 1 && $event_starttimeh == 12)
1079                                         $event_starttimeh -= 12;
1080                                 $event_starttime = date("H:i:00",strtotime($event_starttimeh.":".$event_starttimem.":"."00"));
1081                                 $event_endtime = date("H:i:00",strtotime($event_endtimeh.":".$event_endtimem.":"."00"));
1082
1083                                 if( $event_starttime >= $limit['startTime'])
1084                                 {
1085                                         $numToday = count($day);
1086
1087                                         if($numToday >= $limit['limit'])
1088                                         {
1089                                                 //reached limit
1090                                                 $ret = array("start"=>$limit['startTime'],"end"=>$limit['endTime'],
1091                                                         "limit"=>$limit['limit']);
1092                                                 return $ret;
1093                                         }
1094                                 }//if in limit time span
1095                         }
1096                 }
1097         }
1098
1099         return null;
1100  }
1101         /*list($dbconn) = pnDBGetConn();
1102     $pntable = pnDBGetTables();
1103     $event_table = $pntable['postcalendar_events'];
1104     //get all of todays events
1105     $starting_date = date('m/d/Y',mktime(0,0,0,$the_month,$the_day,$the_year));
1106     $ending_date   = date('m/d/Y',mktime(0,0,0,$the_month,$the_day,$the_year));
1107         //select all of the limits
1108         $limits = & pnModAPIFunc(__POSTCALENDAR__,'user','getCategoryLimits');
1109         //for each limit for this category id, make sure you won't exceed the limit
1110         foreach($limits as $limit)
1111         {
1112                 if(($key = array_search($eventdata['cat_id'])) != false)
1113                 {
1114                         $sql = "SELECT count(pc_eid) from $event_table where "
1115                 }
1116         }
1117
1118 }*/
1119 ?>