<?php
#########################################################################
#                         admin_edit_room                               #
#                                                                       #
#                       Interface de création/modification              #
#                     des domaines et des ressources                    #
#                                                                       #
#                  Dernière modification : 23/06/2005                   #
#                                                                       #
#########################################################################
/*
 * Copyright 2003-2005 Laurent Delineau
 * D'après http://mrbs.sourceforge.net/
 *
 * This file is part of GRR.
 *
 * GRR is free software; you can redistribute it and/or modify
 * it under the terms of the GNU General Public License as published by
 * the Free Software Foundation; either version 2 of the License, or
 * (at your option) any later version.
 *
 * GRR is distributed in the hope that it will be useful,
 * but WITHOUT ANY WARRANTY; without even the implied warranty of
 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
 * GNU General Public License for more details.
 *
 * You should have received a copy of the GNU General Public License
 * along with GRR; if not, write to the Free Software
 * Foundation, Inc., 59 Temple Place, Suite 330, Boston, MA  02111-1307  USA
 */
 include "../include/validsession.inc";


include "connect.inc.php";
include "config.inc.php";
include "functions.inc.php";
include "$dbsys.inc.php";
// Settings
require_once("./settings.inc.php");
//Chargement des valeurs de la table settingS
if (!loadSettings())
    die("Erreur chargement settings");

// Session related functions
require_once("./session.inc.php");
// Resume session
if (!resumeSession()) {
    header("Location: ./logout.php?auto=1");
    die();
};

// Paramètres langage
include "language.inc.php";

$add_area = isset($_POST["add_area"]) ? $_POST["add_area"] : (isset($_GET["add_area"]) ? $_GET["add_area"] : NULL);
$area_id = isset($_POST["area_id"]) ? $_POST["area_id"] : (isset($_GET["area_id"]) ? $_GET["area_id"] : NULL);
$retour_page = isset($_POST["retour_page"]) ? $_POST["retour_page"] : (isset($_GET["retour_page"]) ? $_GET["retour_page"] : NULL);
$room = isset($_POST["room"]) ? $_POST["room"] : (isset($_GET["room"]) ? $_GET["room"] : NULL);
$area = isset($_POST["area"]) ? $_POST["area"] : (isset($_GET["area"]) ? $_GET["area"] : NULL);
$change_area = isset($_POST["change_area"]) ? $_POST["change_area"] : NULL;
$area_name = isset($_POST["area_name"]) ? $_POST["area_name"] : NULL;
$access = isset($_POST["access"]) ? $_POST["access"] : NULL;
$ip_adr = isset($_POST["ip_adr"]) ? $_POST["ip_adr"] : NULL;
$room_name = isset($_POST["room_name"]) ? $_POST["room_name"] : NULL;
$description = isset($_POST["description"]) ? $_POST["description"] : NULL;
$capacity = isset($_POST["capacity"]) ? $_POST["capacity"] : NULL;
$max_booking = isset($_POST["max_booking"]) ? $_POST["max_booking"] : NULL;
$statut_room = isset($_POST["statut_room"]) ? "0" : "1";
$show_fic_room = isset($_POST["show_fic_room"]) ? "y" : "n";
$picture_room = isset($_POST["picture_room"]) ? $_POST["picture_room"] : NULL;
$comment_room = isset($_POST["comment_room"]) ? $_POST["comment_room"] : NULL;
$change_done = isset($_POST["change_done"]) ? $_POST["change_done"] : NULL;
$area_order = isset($_POST["area_order"]) ? $_POST["area_order"] : NULL;
$change_room = isset($_POST["change_room"]) ? $_POST["change_room"] : NULL;

$back = '';
if (isset($_SERVER['HTTP_REFERER'])) {
    // le cas échéant on supprime le bout de chaine "&display_message=yes"
    $back = str_replace("&display_message=yes", "", $_SERVER['HTTP_REFERER']);
    // le cas échéant on supprime la fin de chaine "msg=..."
    $fin_chaine = strstr($back, 'msg=');
    $back = str_replace($fin_chaine, "", $back);
    // Si le dernier caractère est ? ou &, on le supprime
    if (substr($back, -1) == "?") $back = substr($back,0,strlen($back)-1);
    if (substr($back, -1) == "&") $back = substr($back,0,strlen($back)-1);
}
// mémorisation du chemin de retour
if (!isset($retour_page)) $retour_page = $back;


// modification d'une resource : admin ou gestionnaire
if (authGetUserLevel(getUserName(),-1) < 5)  {
    if (isset($room)) {
        // Il s'agit d'une modif de ressource
        if ((authGetUserLevel(getUserName(),$room) < 3)) {
            showAccessDenied($day, $month, $year, $area,$back);
            exit();
        }
    } else {
        if (isset($area_id)) {
            // On vérifie que le domaine $area_id existe
            $test = sql_query1("select id from grr_area where id='".$area_id."'");
            if ($test == -1) {
                showAccessDenied($day, $month, $year, $area,$back);
                exit();
            }
            // Il s'agit de l'ajout d'une ressource
            // On vérifie que l'utilisateur a le droit d'ajouter des ressources
            if ((authGetUserLevel(getUserName(),$area_id,'area') < 4)) {
                showAccessDenied($day, $month, $year, $area,$back);
               exit();
            }
        } else if (isset($area)) {
            // On vérifie que le domaine $area existe
            $test = sql_query1("select id from grr_area where id='".$area."'");
            if ($test == -1) {
                showAccessDenied($day, $month, $year, $area,$back);
                exit();
            }
            // Il s'agit de la modif d'un domaine
            if ((authGetUserLevel(getUserName(),$area,'area') < 4)) {
                showAccessDenied($day, $month, $year, $area,$back);
               exit();
            }
        }
    }
}


// Gestion du retour à la page précédente sans enregistrement
if (isset($change_done))
{
    Header("Location: ".$retour_page);
    exit();
}

$msg ='';

// Gestion des ressources
if ((!empty($room)) or (isset($area_id))) {

    // Enregistrement d'une ressource
    if (isset($change_room))
    {
        if (isset($_POST['sup_img'])) {
            $dest = './images/';
            $ok1 = false;
            if ($f = @fopen("$dest/.test", "w")) {
                @fputs($f, '<'.'?php $ok1 = true; ?'.'>');
                @fclose($f);
                include("$dest/.test");
            }
            if (!$ok1) {
                $msg .= "L\'image n\'a pas pu être supprimée : problème d\'écriture sur le répertoire. Veuillez signaler ce problème à l\'administrateur du serveur.\\n";
                $ok = 'no';
            } else {
                if (@file_exists($dest."img_".$room.".jpg")) unlink($dest."img_".$room.".jpg");
                if (@file_exists($dest."img_".$room.".png")) unlink($dest."img_".$room.".png");
                if (@file_exists($dest."img_".$room.".gif")) unlink($dest."img_".$room.".gif");

                $picture_room = "";
            }
        }

        if ($room_name=='') $room_name = "...";
        if (empty($capacity)) $capacity = 0;
        if ($capacity<0) $capacity = 0;
        if ($max_booking=='') $max_booking = -1;
        if ($max_booking<-1) $max_booking = -1;
        if (isset($room)) {
            $sql = "UPDATE grr_room SET
            room_name='".slashes($room_name)."',
            description='".slashes($description)."', ";
            if ($picture_room != '') $sql .= "picture_room='".slashes($picture_room)."', ";
            $sql .= "comment_room='".corriger_caracteres($comment_room)."',
            show_fic_room='".$show_fic_room."',
            capacity='".$capacity."',
            max_booking='".$max_booking."',
            statut_room='".$statut_room."'
            WHERE id=$room";
            if (sql_command($sql) < 0) {
                fatal_error(0, $vocab['update_room_failed'] . sql_error());
                $ok = 'no';
            }
        } else {
            $sql = "insert into grr_room
            SET room_name='".slashes($room_name)."',
            area_id='".$area_id."',
            description='".slashes($description)."',
            picture_room='".slashes($picture_room)."',
            comment_room='".corriger_caracteres($comment_room)."',
            show_fic_room='".$show_fic_room."',
            capacity='".$capacity."',
            max_booking='".$max_booking."',
            statut_room='".$statut_room."'";
            if (sql_command($sql) < 0) fatal_error(1, "<p>" . sql_error());
            $room = mysql_insert_id();
        }
        $doc_file = isset($_FILES["doc_file"]) ? $_FILES["doc_file"] : NULL;
        if (ereg("\.([^.]+)$", $doc_file['name'], $match)) {
            $ext = strtolower($match[1]);
            if ($ext!='jpg' and $ext!='png'and $ext!='gif') {
                $msg .= "L\'image n\'a pas pu être enregistrée : les seules extentions autorisées sont gif, png et jpg.\\n";
                $ok = 'no';
            } else {
                $dest = './images/';
                $ok1 = false;
                if ($f = @fopen("$dest/.test", "w")) {
                    @fputs($f, '<'.'?php $ok1 = true; ?'.'>');
                    @fclose($f);
                    include("$dest/.test");
                }
                if (!$ok1) {
                    $msg .= "L\'image n\'a pas pu être enregistrée : problème d\'écriture sur le répertoire IMAGES. Veuillez signaler ce problème à l\'administrateur du serveur.\\n";
                    $ok = 'no';
                } else {
                    $old = getSettingValue("logo_etab");
                    $ok1 = @copy($doc_file['tmp_name'], $dest.$doc_file['name']);
                    if (!$ok1) $ok1 = @move_uploaded_file($doc_file['tmp_name'], $dest.$doc_file['name']);
                    if (!$ok1) {
                        $msg .= "L\'image n\'a pas pu être enregistrée : problème de transfert. Le fichier n\'a pas pu être transféré sur le répertoire IMAGES. Veuillez signaler ce problème à l\'administrateur du serveur.\\n";
                        $ok = 'no';
                    } else {
                        $tab = explode(".", $doc_file['name']);
                        $ext = strtolower($tab[1]);

                        if (@file_exists($dest."img_".$room.".".$ext)) @unlink($dest."img_".$room.".".$ext);
                        rename($dest.$doc_file['name'],$dest."img_".$room.".".$ext);
                        $picture_room = "img_".$room.".".$ext;
                        $sql_picture = "UPDATE grr_room SET picture_room='".slashes($picture_room)."' WHERE id=".$room;
                        if (sql_command($sql_picture) < 0) {
                            fatal_error(0, $vocab['update_room_failed'] . sql_error());
                            $ok = 'no';
                        }
                    }
               }
           }
        } else if ($doc_file['name'] != '') {
           $msg .= "L\'image n\'a pas pu être enregistrée : le fichier image sélectionné n'est pas valide !\\n";
           $ok = 'no';
        }

        $msg .= $vocab["message_records"];

    }
    // Si pas de problème, retour à la page d'accueil après enregistrement
    if ((isset($change_room)) and (!isset($ok))) {
        if (strpos($retour_page, ".php?") == "") $car = "?"; else $car = "&";
        Header("Location: ".$retour_page.$car."msg=".$msg."&display_message=yes");
        exit();
    }

    # print the page header
    print_header("","","","",$type="with_session", $page="admin");
    if ($msg!='') {
        echo "<script type=\"text/javascript\" language=\"javascript\">";
        echo "<!--\n";
        echo "alert(\"".$msg."\")";
        echo "//-->";
        echo "</script>";
    }

    ?>
    <script src="functions.js" type="text/javascript" language="javascript"></script>
    <?php

    // affichage du formulaire
    if (isset($room)) {
        // Il s'agit d'une modification d'une ressource
        $res = sql_query("SELECT * FROM grr_room WHERE id=$room");
        if (! $res) fatal_error(0, $vocab['error_room'] . $room . $vocab['not_found']);
        $row = sql_row_keyed($res, 0);
        sql_free($res);
        echo "<h2 ALIGN=CENTER>".$vocab["editroom"]."</h2>\n";
    } else {
        // Il s'agit de l'enregistrement d'une nouvelle ressource
        $row['picture_room'] = '';
        $row["id"] = '';
        $row["room_name"]= '';
        $row["description"] = '';
        $row['comment_room'] = '';
        $row["capacity"]   = '';
        $row["max_booking"] = '';
        $row['statut_room'] = '';
        $row['show_fic_room'] = '';
        echo "<h2 ALIGN=CENTER>".$vocab["addroom"]."</h2>\n";
    }
    ?>
    <form enctype="multipart/form-data" action="admin_edit_room.php" method='POST'>

    <?php
    if ($row["id"] != '') echo "<input type=\"hidden\" name=\"room\" value=\"".$row["id"]."\">\n";
    if (isset($retour_page)) echo "<input type=\"hidden\" name=\"retour_page\" value=\"".$retour_page."\">\n";
    if (isset($area_id)) echo "<input type=\"hidden\" name=\"area_id\" value=\"".$area_id."\">\n";


    ?>

    <?php
    $nom_picture = '';
    if ($row['picture_room'] != '') $nom_picture = "./images/".$row['picture_room'];
    ?>

    <CENTER>
    <TABLE border="0" cellspacing="0" cellpadding="6">
    <?php
    echo "<TR><TD>".$vocab["name"]." : </TD><TD>\n";
    // seul l'administrateur peut modifier le nom de la ressource
    if (authGetUserLevel(getUserName(),$room) >=4) {
        echo "<input type=\"text\" name=\"room_name\" size=\"50\" value=\"".htmlspecialchars($row["room_name"])."\">\n";
    } else {
        echo "<input type=\"hidden\" name=\"room_name\" value=\"".htmlspecialchars($row["room_name"])."\" />\n";
        echo "<b>".htmlspecialchars($row["room_name"])."</b>\n";
    }
    echo "</TD></TR>\n";

    ?>
    <TR><TD><?php echo $vocab["description"] ?></TD><TD><input type="text" name="description"  size="50" value="<?php
    echo htmlspecialchars($row["description"]); ?>"></TD></TR>
    <TR><TD><?php echo $vocab["description complète"] ?></TD><TD><textarea name="comment_room" rows="8" cols="80" wrap="virtual"><?php echo $row['comment_room'];?></textarea></TD></TR>
    <TR><TD><?php echo $vocab["capacity"] ?>:   </TD><TD><input type=text name=capacity value="<?php
    echo $row["capacity"]; ?>"></TD></TR>
    <?php
    // seul les administrateurs de la ressource peuvent modifier le nombre max de réservation par utilisateur
    if (authGetUserLevel(getUserName(),$room) >= 4) {
        echo "<TR><TD>".$vocab["max_booking"]." - <A href='javascript:centrerpopup(\"astuce1_fr.php\",600,480,\"scrollbars=yes,statusbar=no,resizable=yes\")'>Astuce</A> : <br><i>".$vocab["explain_max_booking"]."</i> </TD><TD>
        <input type=\"text\" name=\"max_booking\" value=\"".$row["max_booking"]."\"></TD></TR>";

    } else if ($row["max_booking"] != "-1") {
        echo "<TR><TD>".$vocab["msg_max_booking"]."</TD><TD>
        <input type=\"hidden\" name=\"max_booking\" value=\"".$row["max_booking"]."\">
        <b>".htmlspecialchars($row["max_booking"])."</b>
        </TD></TR>";
    }
    ?>
    <TR><TD><?php echo $vocab["declarer_ressource_indisponible"] ?> <br><i> <?php echo $vocab["explain_max_booking"]; ?> </i></TD><TD><input type="checkbox" name="statut_room"
    <?php if ($row['statut_room'] == "0") echo " checked "; ?>
    /></TD></TR>
    <TR><TD><?php echo $vocab["montrer_fiche_présentation_ressource"] ?> </TD><TD><input type="checkbox" name="show_fic_room"
    <?php if ($row['show_fic_room'] == "y") echo " checked "; ?>
    /></TD></TR>
    <TR><TD><?php echo $vocab["choisir_image_ressource"] ?> </TD><TD><INPUT TYPE="FILE" name="doc_file" /></TD></TR>
    <?php
    if (@file_exists($nom_picture)) {
    echo "<TR><TD>".$vocab["supprimer_image_ressource"]."</TD><TD><input type=\"checkbox\" name=\"sup_img\"></TD></TR>";
    }
    ?>

    </TABLE>
    <input type=submit name="change_room"  value="<?php echo $vocab["save"] ?>">
    <?php echo "&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;
    <input type=\"submit\" name=\"change_done\" value=\"".$vocab["back"]."\">";

    if (@file_exists($nom_picture)) {
        echo "<br><br><b>".$vocab["Image de la ressource"]." : </b><br><IMG SRC=\"".$nom_picture."\" BORDER=0 ALT=\"logo\">";
    } else {
        echo "<br><br><b>".$vocab["Pas d'image disponible"]."</b>";
    }
    ?>
    </CENTER>
    </form>
<?php

}
// Ajout ou modification d'une ressource
if ((!empty($area)) or (isset($add_area))) {

    if (isset($change_area))
    {
        if ($access) {$access='r';} else {$access='a';}
        if ($area_name == '') $area_name = "...";
        if (isset($area)) {
            $sql = "UPDATE grr_area SET
            area_name='".slashes($area_name)."',
            access='".slashes($access)."',
            order_display='".slashes($area_order)."',
            ip_adr='".slashes($ip_adr)."'
            WHERE id=$area";
            if (sql_command($sql) < 0) {
                fatal_error(0, $vocab['update_area_failed'] . sql_error());
                $ok = 'no';
            }
        } else {
            $sql = "INSERT INTO grr_area SET
            area_name='".slashes($area_name)."',
            access='".slashes($access)."',
            order_display='".slashes($area_order)."',
            ip_adr='".slashes($ip_adr)."'
            ";
            if (sql_command($sql) < 0) fatal_error(1, "<p>" . sql_error());
            $area = sql_insert_id("grr_area", "id");
        }
        $msg = $vocab["message_records"];
    }
    if ($access=='a') {
        $sql = "DELETE FROM grr_j_user_area WHERE id_area='$area'";
        if (sql_command($sql) < 0)
            fatal_error(0, $vocab['update_area_failed'] . sql_error());
    }

    if ((isset($change_area)) and (!isset($ok))) {
        if (strpos($retour_page, ".php?") == "") $car = "?"; else $car = "&";
        Header("Location: ".$retour_page.$car."msg=".$msg."&display_message=yes");
        exit();
    }
    # print the page header
    print_header("","","","",$type="with_session", $page="admin");
    if ($msg!='') {
        echo "<script type=\"text/javascript\" language=\"javascript\">";
        echo "<!--\n";
        echo " alert(\"".$msg."\")";
        echo "//-->";
        echo "</script>";
    }

    ?>
    <script src="functions.js" type="text/javascript" language="javascript"></script>
    <?php

    if (isset($area)) {
        $res = sql_query("SELECT * FROM grr_area WHERE id=$area");
        if (! $res) fatal_error(0, $vocab['error_area'] . $area . $vocab['not_found']);
        $row = sql_row_keyed($res, 0);
        sql_free($res);
        echo "<h2 ALIGN=CENTER>".$vocab["editarea"]."</h2>";
    } else {
        $row["id"] = '';
        $row["area_name"] = '';
        $row["order_display"]  = '';
        $row["access"] = '';
        $row["ip_adr"] = '';
        echo "<h2 ALIGN=CENTER>".$vocab['addarea']."</h2>";
    }

    ?>
    <form action="admin_edit_room.php" method='POST'>
    <?php
    if (isset($retour_page)) echo "<input type=\"hidden\" name=\"retour_page\" value=\"".$retour_page."\">";
    if ($row['id'] != '') echo "<input type=\"hidden\" name=\"area\" value=\"".$row["id"]."\">";
    if (isset($add_area)) echo "<input type=\"hidden\" name=\"add_area\" value=\"".$add_area."\">\n";
    ?>

    <CENTER>
    <TABLE border=1>
    <TR>
    <TD><?php echo $vocab["name"] ?>&nbsp;:       </TD>
    <TD><input type=text name="area_name" value="<?php
    echo htmlspecialchars($row["area_name"]); ?>"></TD>
    </TR>
    <TR>
    <TD><?php echo $vocab["order_display"] ?>&nbsp;:       </TD>
    <TD><input type=text name="area_order" value="<?php
    echo htmlspecialchars($row["order_display"]); ?>"></TD>
    </TR>

    <TR>
    <TD><?php echo $vocab["access"] ?>&nbsp;:       </TD>
    <TD><input type=checkbox name="access" <?php
        if ($row["access"] == 'r') echo "checked"; ?>
    ></TD></TR>

<?php if (OPTION_IP_ADR==1) { ?>
    <TR>
    <TD><?php echo $vocab["ip_adr"] ?>&nbsp;:       </TD>
    <TD><input type=text name="ip_adr" value="<?php
    echo htmlspecialchars($row["ip_adr"]); ?>"></TD>
    </TR>
<?php } ?>

    </TABLE>
    <input type=submit name="change_area"
    value="<?php echo $vocab["save"] ?>">&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;
    <input type=submit name="change_done" value="<?php echo $vocab["back"] ?>">
    </CENTER>
    </form>
    <?php if (OPTION_IP_ADR==1) {
       echo "<br>".$vocab["ip_adr_explain"];
    }

 } ?>
</body>
</html>