<?
ob_start();
require_once("includes/include.php");
if ((!isset($_SESSION["utype"])) || ($_SESSION["utype"] != "Admin")) {
header("Location: intranet_logged.php");
}
$uid=$_SESSION['uid'];
$utype=$_SESSION["utype"];	

ob_flush();
if(isset($_GET['CompanyID']) && $_GET['CompanyID']>""){
$company=$_GET['CompanyID'];	
}
else
$company=0;

$db=new database();

$uidx=$_GET['id'];
$db->query("SELECT * FROM `users_accts` WHERE `uid`='$uidx'");
$row=$db->get_row();
$user=$row['utype'];
$CompanyIDx=$row['CompanyID'];
$CompanyNamex=$row['CompanyName'];
$email=$row['email'];
$pass=$row['pass'];
$fname=$row['fname'];
$lname=$row['lname'];
if($row['perms']) $perms=explode("-",$row['perms']);
$msg='';
if (isset($user) && $user>"" && $_SERVER['REQUEST_METHOD']=="POST"){ 
if($user=='Admin'){
$email=mysql_real_escape_string(trim($_POST['email']));
$pass=mysql_real_escape_string(trim($_POST['pass']));
$fname=mysql_real_escape_string(trim($_POST['fname']));
$lname=mysql_real_escape_string(trim($_POST['lname']));
if(isset($_POST['perms'])) $perms=implode('-',$_POST['perms']); else $perms='';

$db->query("SELECT email FROM `users_accts` WHERE `email`='$email' AND uid!='$uidx'");
	if($db->count_rows()==0){
	$db->query("UPDATE `users_accts` SET `utype`='Admin', `email`='$email', `fname`='$fname', `lname`='$lname', `perms`='$perms' WHERE `uid`='$uidx'");	
	if($pass>''){ $db->query("UPDATE `users_accts` SET `pass`=OLD_PASSWORD('$pass') WHERE `uid`='$uidx'");	}
	$msg='Admin Updated';	
	}else{
	$msg='Email Already Exists';
	}
	
} elseif($user=='Company') {
$CompanyName=mysql_real_escape_string(trim($_POST['CompanyName']));
if(isset($_POST['perms'])) $perms=implode('-',$_POST['perms']); else $perms='';
$db->query("SELECT CompanyName FROM `users_accts` WHERE `utype`='Company' AND `CompanyName`='$CompanyName' AND uid!='$uidx'");
	if($db->count_rows()==0){
	$db->query("UPDATE `users_accts` SET `utype`='Company', `CompanyName`='$CompanyName', `perms`='$perms' WHERE `uid`='$uidx'");
	$msg='Company Updated';		
	}else{
	$msg='Company Name Already Exists';
	}
}elseif($user=='Consultant'){
$email=mysql_real_escape_string(trim($_POST['email']));
$pass=mysql_real_escape_string(trim($_POST['pass']));
$fname=mysql_real_escape_string(trim($_POST['fname']));
$lname=mysql_real_escape_string(trim($_POST['lname']));
if(isset($_POST['perms'])) $perms=implode('-',$_POST['perms']); else $perms='';

$db->query("SELECT email FROM `users_accts` WHERE `email`='$email' AND uid!='$uidx'");
	if($db->count_rows()==0){
	$db->query("UPDATE `users_accts` SET `utype`='Consultant', `email`='$email', `fname`='$fname', `lname`='$lname', `perms`='$perms' WHERE `uid`='$uidx'");
	if($pass>''){ $db->query("UPDATE `users_accts` SET `pass`=OLD_PASSWORD('$pass') WHERE `uid`='$uidx'");	}
	
	$db->query("DELETE FROM `consultant_companies` WHERE (`cuid`='$uidx')  ");
	foreach($_POST['CompanyIDb'] as $ccomid){
	$db->query("INSERT INTO `consultant_companies` SET `cuid`='$uidx',`ccomid`='$ccomid'");  
	}
	$msg='Consultant Updated';		
	}else{
	$msg='Email Already Exists';
	}
	
}elseif($user=='Client'){
$email=mysql_real_escape_string(trim($_POST['email']));
$pass=mysql_real_escape_string(trim($_POST['pass']));
$fname=mysql_real_escape_string(trim($_POST['fname']));
$lname=mysql_real_escape_string(trim($_POST['lname']));
$CompanyID=mysql_real_escape_string(trim($_POST['CompanyID']));
if(isset($_POST['perms'])) $perms=implode('-',$_POST['perms']); else $perms='';

$db->query("SELECT email FROM `users_accts` WHERE `email`='$email' AND uid!='$uidx'");
	if($db->count_rows()==0){
	$db->query("UPDATE `users_accts` SET `utype`='Client', `email`='$email', `fname`='$fname', `lname`='$lname', CompanyID='$CompanyID', `perms`='$perms' WHERE `uid`='$uidx' ");
	if($pass>''){ $db->query("UPDATE `users_accts` SET `pass`=OLD_PASSWORD('$pass') WHERE `uid`='$uidx'");	}	
	$msg='Client Updated';		
	}else{
	$msg='Email Already Exists';
	}
	
}

$db->query("SELECT * FROM `users_accts` WHERE `uid`='$uidx'");
$row=$db->get_row();
$user=$row['utype'];
$CompanyIDx=$row['CompanyID'];
$CompanyNamex=$row['CompanyName'];
$email=$row['email'];
$pass=$row['pass'];
$fname=$row['fname'];
$lname=$row['lname'];
if($row['perms']) $perms=explode("-",$row['perms']);
}
///UPDATE `users_accts` SET `utype`='$CompanyName',`email`='$Email',`pass`='$Pass',`CompanyID`='12',`CompanyName`='12',`fname`='$frname',`lname`='$lname' WHERE (`uid`='2')  
$db->query("SELECT * FROM `consultant_companies` WHERE (`cuid`='$uidx') ");
if($db->count_rows()>0){
$consoltantIDs='';	
while($row=$db->get_row()){
$consoltantIDs[]=$row['ccomid'];  
}	
}else{
$consoltantIDs=array();	
}

$db->query("SELECT * FROM `users_accts` WHERE `utype` = 'Company' ");
$numberofcompanies=$db->count_rows();
$CompanySelect='<select name="CompanyID" id="CompanyID">
<option value="" >Select</option>
';	
$CompanyBoxes='<table width="25%" border="0" cellspacing="1" cellpadding="1">';

while($row=$db->get_row()){
$CompanyName=$row['CompanyName']; 
$CompanyID=$row['uid']; 
$sel='';
$chx='';

if(isset($_GET['CompanyID'])) if($_GET['CompanyID']==$CompanyID){ $sel='selected="selected"'; if(strlen(trim($row['perms']))) $perms=explode('-',$row['perms']); }else{ $chk=''; }
else if($CompanyID==$CompanyIDx){ $sel='selected="selected"'; }

if(in_array($CompanyID,$consoltantIDs)){ $chx='checked="checked"'; }
$CompanySelect.='<option value="'.$CompanyID.'" '.$sel.' >'.$CompanyName.'</option>
';		
$CompanyBoxes.='<tr>
            <td>
              <input type="checkbox" name="CompanyIDb[]" id="CompanyIDb[]" value="'.$CompanyID.'" '.$chx.' />
            </td>
            <td>'.$CompanyName.'</td>
          </tr>';
}
$CompanySelect.='</select>';
$CompanyBoxes.='</table>';
get_header();
?>
<script type="text/JavaScript">
$(document).ready(function($) {
		$("#user").change(function(){
			window.location="intranet_user_add.php?user="+$("#user").val();						   
		});
		$("#CompanyID").change(function(){
			window.location="intranet_user_edit.php?id=&CompanyID="+$("#CompanyID").val();						   
		});
		
				$("#Submit").click(function(){
				var reg = /^([A-Za-z0-9_\-\.])+\@([A-Za-z0-9_\-\.])+\.([A-Za-z]{2,4})$/;						
				var err="The following are required\n";
				<? if(isset($user) && ($user=='Admin' || $user=='Consultant' || $user=='Client')){ ?>
				<? if($user=='Client'){ ?>
					if($("#CompanyID").val()==""){ err=err+"Company\n"; }
				<? } ?>				
					if($("#email").val()==""){ err=err+"Email\n"; }else if(reg.test($("#email").val()) == false) { err=err+"A Valid Email\n"; }	
					if($("#fname").val()==""){ err=err+"First Name\n"; }
					if($("#lname").val()==""){ err=err+"Last Name\n"; }
				<? if($user=='Consultant'){ ?>
				var chx=0;
					$("input[type=checkbox]").each(function() { if($(this).attr('checked')){chx=chx+1; } } );
					if(chx==0){ err=err+"A Company\n"; }
				<? } ?>						
				<? }elseif(isset($user) && ($user=='Company')){ ?>
					if($("#CompanyName").val()==""){ err=err+"Company Name\n"; }
				<? } ?>	
				if(err!="The following are required\n"){
					alert(err);
					return false;
				}
				});
});
</script>
</head>

<body><div class="wrapper">

		<div class="mast"></div>
        
        <div class="intranetnav" style=""><a href="intranet_logged.php" >Files</a><? if($utype=='Admin'){ ?><a href="files.php">Add File</a><a href="intranet_users.php" id="intranetnavon">Users</a><a href="intranet_user_add.php" >Add User</a><? } ?><a href="intranet_edit.php">Edit Profile</a><a href="logout.php">Logout</a></div>
  <div class="full_column">
    <h2>User Edit <? if($msg>''){ print "<br />".$msg; } ?></h2>
    <table width="90%" border="0" cellspacing="3" cellpadding="3">
      <tr>
        <td width="10%" align="left" valign="middle" nowrap="nowrap">User Type</td>
        <td width="90%" align="left" valign="middle"><b><? if($user=='Company'){ print 'Limited Partner'; }elseif($user=='Client'){ print 'L.P. Contact'; }else{ print $user; } ?></b></td>
      </tr>
    </table>    <form id="form1" name="form1" method="post" action="">

    <? if(isset($user) && $user=='Admin'){ ?>
    <table width="90%" border="0" cellspacing="3" cellpadding="3">
      <tr>
        <td  width="10%"  align="left" valign="middle" nowrap="nowrap">Email</td>
        <td  width="90%"  align="left" valign="middle"><input type="text" name="email" id="email" value="" /></td>
      </tr>
      <tr>
        <td align="left" valign="middle" nowrap="nowrap">Password</td>
        <td align="left" valign="middle"><input type="text" name="pass" id="pass" /> 
        Leave password blank to keep the current password</td>
      </tr>
      <tr>
        <td align="left" valign="middle" nowrap="nowrap">&nbsp;</td>
        <td align="left" valign="middle">&nbsp;</td>
      </tr>
      <tr>
        <td align="left" valign="middle" nowrap="nowrap">First Name</td>
        <td align="left" valign="middle"><input type="text" name="fname" id="fname" value="" /></td>
      </tr>
      <tr>
        <td align="left" valign="middle" nowrap="nowrap">Last Name</td>
        <td align="left" valign="middle"><input type="text" name="lname" id="lname" value="" /></td>
      </tr>
	  <tr>
        <td align="left" valign="middle" nowrap="nowrap">&nbsp;</td>
        <td align="left" valign="middle">&nbsp;</td>
      </tr>
	  <tr>
        <td align="left" valign="middle" nowrap="nowrap">Permissions</td>
        <td align="left" valign="middle">			 
			<input type="checkbox" name="perms[]" value="2009" /> &nbsp; 2009 &nbsp;
			<input type="checkbox" name="perms[]" value="2012" /> &nbsp; 2012 
		</td>
      </tr>
      <tr>
        <td align="left" valign="middle" nowrap="nowrap">&nbsp;</td>
        <td align="left" valign="middle"><input type="submit" name="Submit" id="Submit" value="Submit" /></td>
      </tr>
    </table>
    <? } ?>
    <? if(isset($user) && $user=='Company'){ ?>
    <table width="90%" border="0" cellspacing="3" cellpadding="3">
      <tr>
        <td  width="10%"  align="left" valign="middle" nowrap="nowrap">Limited Partner</td>
        <td  width="90%"  align="left" valign="middle"><input type="text" name="CompanyName" id="CompanyName" value="" /></td>
      </tr>
	  <tr>
        <td align="left" valign="middle" nowrap="nowrap">&nbsp;</td>
        <td align="left" valign="middle">&nbsp;</td>
      </tr>
	  <tr>
        <td align="left" valign="middle" nowrap="nowrap">Permissions</td>
        <td align="left" valign="middle">			 
			<input type="checkbox" name="perms[]" value="2009" /> &nbsp; 2009 &nbsp;
			<input type="checkbox" name="perms[]" value="2012" /> &nbsp; 2012 
		</td>
      </tr>
      <tr>
        <td align="left" valign="middle" nowrap="nowrap">&nbsp;</td>
        <td align="left" valign="middle"><input type="submit" name="Submit" id="Submit" value="Submit" /></td>
      </tr>
    </table>
    <? } ?>
    <? if(isset($user) && $user=='Consultant'){ ?>
    <table width="90%" border="0" cellspacing="3" cellpadding="3">
      <tr>
        <td  width="10%"  align="left" valign="middle" nowrap="nowrap">Email</td>
        <td  width="90%"  align="left" valign="middle"><input type="text" name="email" id="email" value="" /></td>
      </tr>
      <tr>
        <td align="left" valign="middle" nowrap="nowrap">Password</td>
        <td align="left" valign="middle"><input type="text" name="pass" id="pass" />
          Leave password blank to keep the current password</td>
      </tr>
      <tr>
        <td align="left" valign="middle" nowrap="nowrap">&nbsp;</td>
        <td align="left" valign="middle">&nbsp;</td>
      </tr>
      <tr>
        <td align="left" valign="middle" nowrap="nowrap">First Name</td>
        <td align="left" valign="middle"><input type="text" name="fname" id="fname" value="" /></td>
      </tr>
      <tr>
        <td align="left" valign="middle" nowrap="nowrap">Last Name</td>
        <td align="left" valign="middle"><input type="text" name="lname" id="lname" value="" /></td>
      </tr>
	  <tr>
        <td align="left" valign="middle" nowrap="nowrap">&nbsp;</td>
        <td align="left" valign="middle">&nbsp;</td>
      </tr>
      <tr>
        <td align="left" valign="middle" nowrap="nowrap">&nbsp;</td>
        <td align="left" valign="middle"></td>
      </tr>
      <tr>
        <td align="left" valign="top" nowrap="nowrap">Limited Partners</td>
        <td align="left" valign="top"></td>
      </tr>
	  <tr>
        <td align="left" valign="middle" nowrap="nowrap">&nbsp;</td>
        <td align="left" valign="middle">&nbsp;</td>
      </tr>
      <tr>
        <td align="left" valign="middle" nowrap="nowrap">&nbsp;</td>
        <td align="left" valign="middle"><input type="submit" name="Submit" id="Submit" value="Submit" /></td>
      </tr>
    </table>
    <? } ?>
    <? if(isset($user) && $user=='Client'){ ?>
    <table width="90%" border="0" cellspacing="3" cellpadding="3">
      <tr>
        <td  width="10%"  align="left" valign="middle" nowrap="nowrap">Limited Partner</td>
        <td  width="90%"  align="left" valign="middle"></td>
      </tr>
      <tr>
        <td  align="left" valign="middle" nowrap="nowrap">&nbsp;</td>
        <td  align="left" valign="middle">&nbsp;</td>
      </tr>
      <tr>
        <td  align="left" valign="middle" nowrap="nowrap">Email</td>
        <td  align="left" valign="middle"><input type="text" name="email" id="email" value="" /></td>
      </tr>
      <tr>
        <td align="left" valign="middle" nowrap="nowrap">Password</td>
        <td align="left" valign="middle"><input type="text" name="pass" id="pass" />
          Leave password blank to keep the current password</td>
      </tr>
      <tr>
        <td align="left" valign="middle" nowrap="nowrap">&nbsp;</td>
        <td align="left" valign="middle">&nbsp;</td>
      </tr>
      <tr>
        <td align="left" valign="middle" nowrap="nowrap">First Name</td>
        <td align="left" valign="middle"><input type="text" name="fname" id="fname" value="" /></td>
      </tr>
      <tr>
        <td align="left" valign="middle" nowrap="nowrap">Last Name</td>
        <td align="left" valign="middle"><input type="text" name="lname" id="lname" value="" /></td>
      </tr>
	  <tr>
        <td align="left" valign="middle" nowrap="nowrap">&nbsp;</td>
        <td align="left" valign="middle">&nbsp;</td>
      </tr>
	  <tr>
        <td align="left" valign="middle" nowrap="nowrap">Permissions</td>
        <td align="left" valign="middle">			 
			<input type="checkbox" name="perms[]" value="2009" /> &nbsp; 2009 &nbsp;
			<input type="checkbox" name="perms[]" value="2012" /> &nbsp; 2012 
		</td>
      </tr>
      <tr>
        <td align="left" valign="middle" nowrap="nowrap">&nbsp;</td>
        <td align="left" valign="middle"><input type="submit" name="Submit" id="Submit" value="Submit" /></td>
      </tr>
    </table>
    <? } ?>    </form>

  </div>
        <div class="footer">Method Advisors, LLC | 192 South Street, 6th Floor |  Boston, MA  02111<br />
<a href="/legal-disclaimer">Legal Disclaimer</a></div>


</div><noscript>
  <div>
    <img src="/stats.gif" width="1" height="1" alt="" style="position: absolute;" />
  </div>
</noscript>
</body>
</html>