<?php
// portal/contracts.inc.php - Shows contact details
//
// SiT (Support Incident Tracker) - Support call tracking system
// Copyright (C) 2010-2011 The Support Incident Tracker Project
// Copyright (C) 2000-2009 Salford Software Ltd. and Contributors
//
// This software may be used and distributed according to the terms
// of the GNU General Public License, incorporated herein by reference.
//
// Author Kieran Hogg <kieran[at]sitracker.org>

require ('..'.DIRECTORY_SEPARATOR.'core.php');
require (APPLICATION_LIBPATH . 'functions.inc.php');

$accesslevel = 'admin';

include (APPLICATION_LIBPATH . 'portalauth.inc.php');
include (APPLICATION_INCPATH . 'portalheader.inc.php');


$id = clean_int($_GET['id']);
$contactid = clean_int($_GET['contactid']);
$action = clean_fixed_list($_GET['action'], array('', 'add', 'remove'));
if ($id != 0 AND $contactid != 0 AND $action == 'remove')
{
    if (in_array($id,
                 admin_contact_contracts($_SESSION['contactid'], $_SESSION['siteid'])))
    {
        $sql = "DELETE FROM `{$dbSupportContacts}`
                WHERE maintenanceid='{$id}'
                AND contactid='{$contactid}'
                LIMIT 1";
        $result = mysql_query($sql);
        if (mysql_error()) trigger_error("MySQL Query Error ".mysql_error(), E_USER_ERROR);
        else
        {
            html_redirect($_SERVER['PHP_SELF']."?id={$id}");
            exit;
        }
    }
    else
    {
        echo "<p class='error'>{$strPermissionDenied}</p>";
    }
}
elseif ($id != 0 AND $action == 'add' AND intval($_POST['contactid'] != 0))
{
    $contactid = clean_int($_POST['contactid']);
    $sql = "INSERT INTO `{$dbSupportContacts}`
            (maintenanceid, contactid)
            VALUES('{$id}', '{$contactid}')";
    $result = mysql_query($sql);
    if (mysql_error()) trigger_error("MySQL Query Error ".mysql_error(), E_USER_ERROR);
    else
    {
        html_redirect($_SERVER['PHP_SELF']."?id={$id}");
        exit;
    }
}

echo "<h2>".icon('contract', 32)." {$GLOBALS['strContract']}</h2>";

echo contract_details($id, 'external');

include (APPLICATION_INCPATH . 'htmlfooter.inc.php');

?>