<?php
if(!isset($_SESSION)) { session_start(); }
include_once '../classes/TestProjektSmarty.class_subdir.php';
require_once("../config.inc.php");
$templatename = substr(basename($_SERVER['PHP_SELF']), 0, -3) . "html";
$smarty       = new SmartyAdmin();
require_once("../language/german.inc.php");
require_once("../func_get_restplatz.php");
require_once("../func_get_parameter.php");
require_once("../config/func_cryption.php");
$verz = "../uploads/"; // relatives Uploadverzeichnis (relativ zum 'Standort' dieser Datei, wohin die Dateien kopiert werden sollen

if (isset($_GET['action'])) {
  $action = $_GET['action'];
} else {
  $action = '';
}



if ($action == '') {
  
  unset($_SESSION["username"]);
  $german = $db->query("SET lc_time_names = 'de_DE';");
# Dropdown befüllen übernimmt ajax:fetch.php
#  $query1 = "SELECT ka_id, vorname, nachname
#               FROM bpm_kandidat
#              ORDER BY nachname, vorname";
#  
#  $result1 = $db->query($query1) or die("Cannot execute query1a");
#  
#  
#  while ($row1 = $result1->fetch_array()) {
#    $table_data1[] = $row1;
#  }
#  $smarty->assign('table_data1', $table_data1);
  
  if (isset($_GET['error'])) {
    
    $errorno = $_GET['error'];
    $smarty->assign('bewerber_error', 1);
    if ($errorno == 1) {
      $smarty->assign('bewerber_error_text', "Es muss ein Bewerber ausgewählt werden.");
    }
    
  }
}

if ($action == 'ausgabe') {
  if (isset($_POST['user'])) {
    $username = mb_strtoupper($_POST["user"]); //remove case sensitivity on the username
  } else {
    $username = $_SESSION["username"];
  }
  
  $_SESSION["username"] = $username;
  
  if(isset($_GET['error'])){
  
    $errorno = $_GET['error'];
    $smarty->assign('termine_error', 1);
    
    if($errorno == 1){
      $smarty->assign('termine_error_text', "Es muss ein Termin gewählt werden");
    }
  }
  
  if ($username == "") {
    echo "<meta http-equiv=\"refresh\" content=\"0; URL=" . $_SERVER['PHP_SELF'] . "?error=1\">";
    exit;
  }
  # Kandidat
  $result_kandidat = $db->query("SELECT anrede, vorname, nachname
                                 FROM bpm_kandidat
                                WHERE ka_id = '$username'
                             ");
  $row_kandidat    = $result_kandidat->fetch_array();
  if($row_kandidat['anrede'] == 'W'){
    $anrede = 'Frau';
  }
  if($row_kandidat['anrede'] == 'M'){
    $anrede = 'Herrn';
  }
  $smarty->assign('term_kand_anrede', $anrede);
  $smarty->assign('term_kand_vorname', $row_kandidat['vorname']);
  $smarty->assign('term_kand_nachname', $row_kandidat['nachname']);
  
  # Wo ist der Kandidat bisher eingebucht
  $result_bisher = $db->query("SELECT tm_id, date_format(tm_datum, '%d.%m.%Y') datum, date_format(tm_datum, '%H:%i') zeit, tm_standort, tm_plaetze, tm_raum, tm_referenznr
                                 FROM bpm_termine
                                WHERE tm_id = (SELECT tm_id 
                                                 FROM bpm_term_kand
                                                WHERE ka_id = '$username'
                                                ORDER BY tk_id desc
                                                LIMIT 1)
                             ");
  $row_bisher    = $result_bisher->fetch_array();
  if($row_bisher['tm_standort'] == 'L'){
    $standort = 'Ludwigsburg';
  }
  if($row_bisher['tm_standort'] == 'K'){
    $standort = 'Kehl';
  }
  $smarty->assign('term_kand_datum', $row_bisher['datum']);
  $smarty->assign('term_kand_zeit', $row_bisher['zeit']);
  $smarty->assign('term_kand_tm_id', $row_bisher['tm_id']);
  $smarty->assign('term_kand_standort', $standort);
  
  # Gespeicherte Termine
  $query1 = "SELECT tm_id, date_format(tm_datum, '%d.%m.%Y') datum, date_format(tm_datum, '%H:%i') zeit, tm_standort, tm_plaetze, tm_raum, tm_referenznr
               FROM bpm_termine
              WHERE tm_datum >  NOW()
              ORDER BY tm_datum ASC, zeit ASC";
  
  $result1 = $db->query($query1) or die("Cannot execute query1");
  
  while ($row1 = $result1->fetch_array()) {
    if($row1['tm_standort'] == 'L'){
      $standort = 'Ludwigsburg';
    }
    if($row1['tm_standort'] == 'K'){
      $standort = 'Kehl';
    }
    $restplatz = get_restplatz($row1['tm_id']);
    if($restplatz != $row1['tm_plaetze']){
      $disable = 0;
    }else{
      $disable = 1;
    }
    $row1['restplatz']         = $restplatz;
    $row1['tm_disable']        = $disable;
    $row1['standort_form']     = $standort;
    $table_data1[]             = $row1;
  }
  $smarty->assign('table_data1', $table_data1);
    
}

if ($action == 'mail') {
  $tm_id = $_POST['tm_id'];
  
  $username = $_SESSION["username"];
  
  if($tm_id == ""){
    echo "<meta http-equiv=\"refresh\" content=\"0; URL=".$_SERVER['PHP_SELF']."?action=ausgabe&error=1\">";
    exit;
  }
  $_SESSION["termine_tm_id"] = $tm_id;
  
  # Gespeicherte Werte
  $query1 = "SELECT mail
               FROM bpm_kandidat
              WHERE ka_id = '$username'
              LIMIT 1";
  
  $result1 = $db->query($query1) or die("Cannot execute query1");
  
  while ($row1 = $result1->fetch_array()) {
     $mail .= "$row1[mail]";
  }

  $smarty->assign('mtupd_mailadressen_an', "$mail");
}



if ($action == 'mailsenden2') {

  $tm_id          = $_SESSION["termine_tm_id"];
  $username       = $_SESSION["username"];
  $empfaenger     = $_POST['empfaenger_an'];
  $betreff        = $_POST['betreff'];
  $text           = $_POST['text'];
  $absender       = $_POST['absender'];

  if($absender == 'Kehl'){
   $sendermail = get_parameter(7);
   $sender     = 'Hochschule Kehl';
  }
  
  if($absender == 'Ludwigsburg'){
   $sendermail = get_parameter(8);
   $sender     = 'Hochschule Ludwigsburg';
  }
  
  # Update
  $result_curid = $db->query("SELECT tp_id
                                          FROM bpm_term_kand
                                         WHERE ka_id = $username
                                      ORDER BY tp_id desc
                                         LIMIT 1
                             ");
  $row_curid    = $result_curid->fetch_array();
  $akt_tpid = $row_curid['tp_id'];

  $result = $db->query("UPDATE bpm_term_kand 
                           SET tm_id = '$tm_id'
                         WHERE tp_id = $akt_tpid
                      ");

  $query_termin = $db->query("SELECT date_format(tm_datum, '%d.%m.%Y um %H:%i Uhr') tm_datum, tm_standort, tm_raum, tm_plaetze, tm_referenznr 
                                FROM bpm_termine 
                               WHERE tm_id='$tm_id'");
                               
  $row_termin = $query_termin->fetch_array();
    if($row_termin['tm_standort'] == 'L'){
      $standort = 'Ludwigsburg - Reuteallee 36, 71634 Ludwigsburg';
      $sendermail = get_parameter(8);
    }
    
    if($row_termin['tm_standort'] == 'K'){
      $standort = 'Kehl - Kinzigallee 1, 77694 Kehl';
      $sendermail = get_parameter(7);
    }
  $text = $text."
  <br>
  <br>
  Neue Daten:
          <figure class='table' style='float:left;'>
          <table>
          <tr>
             <td valign='top'>
               <font face='Arial' size='2'>
                 <b>Testtag:</b>
               </font>
             </td>
             <td valign='top'>
               <font face='Arial' size='2'>
                 $row_termin[tm_datum]
               </font>
             </td>
          </tr>
          <tr>
             <td valign='top'>
               <font face='Arial' size='2'>
                 <b>Hochschule:</b>
               </font>
             </td>
             <td valign='top'>
               <font face='Arial' size='2'>
                 $standort
               </font>
             </td>
          </tr>
          <tr>
             <td valign='top'>
               <font face='Arial' size='2'>
                 <b>Gebäude / Raum:</b>
               </font>
             </td>
             <td valign='top'>
               <font face='Arial' size='2'>
                 $row_termin[tm_raum]
               </font>
             </td>
          </tr>
  </table>
  </figure>
  ";
  
   $query1 = "SELECT mail, ka_id
                FROM bpm_kandidat
               WHERE ka_id = $username
               ORDER BY nachname ASC";
  $result1 = $db->query($query1) or die("Cannot execute query1a $tm_id");
  $lnnr = 0;
  while ($row1 = $result1->fetch_array()) {
     $mail[$lnnr]['mail'] = "$row1[mail]";
     $mail[$lnnr]['ka_id'] = "$row1[ka_id]";
     $lnnr++;
  }
  $lfdnr = $lfdnr++;
  # Mail auch an die zuständige HS
  $mail[$lnnr][mail]= $sendermail;
  $mail[$lnnr][ka_id]= "";
  
  #echo "<pre>";
  #print_r($mail);
  #echo "</pre><hr>";
  #exit;
  #echo "
  #From: $sender - $sendermail<br>
  #$empfaenger<br>
  #$betreff<br>
  #echo "$text<br>";
  #echo "</pre>";
  #$hochschule<br>";
  #exit;
  
  #Beim CKEDITOR die <p> Tags mit Zeilenabstand 0 in der Mail
  $style ="<head>
            <style>
             p {margin: 0;}
            </style>
            </head>
           ";
  $text = $style.$text;
  
           for($i=0;$i<count($mail);$i++){
 	     ## Mailversand:
             $headers  = "From: $sender <$sendermail>\r\n";
             $headers .= "MIME-Version: 1.0\r\n";
             $headers .= "Content-type: text/html; charset=utf-8\r\n";
             $return   = @mail($empfaenger, $betreff, $text, $headers);
             $heute    = mktime(date("H"), date("i"), date("s"), date("m"), date("d"), date("Y")); // heutiges Datum & Zeit: http://de2.php.net/manual/de/function.date.php
             $datum_db = date("Y-m-d H:i:s", $heute); // Formatierung, wie es vor dem Dateinamen erscheinen soll
             $text_db = addslashes($text);

             if($mail[$i][ka_id] != ""){
             # Mail an HS soll nicht protokolliert werden
             if($return){
               $sql1 = $db->query("INSERT INTO bpm_sonstige_mail (sender, sendermail, ka_id, empfaenger, mail_betreff, mail_text, status, sendedat)
                                   VALUES ('$sender', '$sendermail', '".$mail[$i][ka_id]."', '".$mail[$i][mail]."', '$betreff', '$text_db', 'V', '$datum_db')
                                 ");
               $smarty->assign('mail_senderg', "Die Mail wurde verschickt!");
             }else{
               $sql1 = $db->query("INSERT INTO bpm_sonstige_mail (sender, sendermail, ka_id, empfaenger, mail_betreff, mail_text, status, sendedat)
                                   VALUES ('$sender', '$sendermail', '".$mail[$i][ka_id]."', '".$mail[$i][mail]."', '$betreff', '$text_db', 'F', '$datum_db')
                                 ");
                                 
               $err = 1;
               $mail_err .= $mail[$i][mail]."<br>";
           
             }
             }
           }

           unset($_SESSION['termine_tm_id']);
           $editende = 1;
  
           
           if($err == 1){
             $smarty->assign('mail_senderg', "Die Mails konnten nicht verschickt werden!<br>Prüfen Sie die folgenden Mailadressen:<br><br>$mail_err");
           }else{
             $smarty->assign('mail_senderg', "Die Mails wurden verschickt!");
             echo "<meta http-equiv=\"refresh\" content=\"2; URL=" . $_SERVER['PHP_SELF'] . "?editende=$editende\">";  
           }
}
// ende Action
$smarty->assign('action', "$action");
$smarty->display("$template/admin/$templatename");

?>