diff --git a/pandora_console/operation/incidents/incident_detail.php b/pandora_console/operation/incidents/incident_detail.php
index 5401b69e90..1f7b6da675 100644
--- a/pandora_console/operation/incidents/incident_detail.php
+++ b/pandora_console/operation/incidents/incident_detail.php
@@ -1,467 +1,470 @@
-<?php
-
-// Pandora - the Free monitoring system
-// ====================================
-// Copyright (c) 2004-2006 Sancho Lerena, slerena@gmail.com
-// Copyright (c) 2005-2006 Artica Soluciones Tecnologicas S.L, info@artica.es
-// Copyright (c) 2004-2006 Raul Mateos Martin, raulofpandora@gmail.com
-// This program is free software; you can redistribute it and/or
-// modify it under the terms of the GNU General Public License
-// as published by the Free Software Foundation; either version 2
-// of the License, or (at your option) any later version.
-// This program is distributed in the hope that it will be useful,
-// but WITHOUT ANY WARRANTY; without even the implied warranty of
-// MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
-// GNU General Public License for more details.
-// You should have received a copy of the GNU General Public License
-// along with this program; if not, write to the Free Software
-// Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA  02110-1301, USA.
-
-// Load global vars
-require("include/config.php");
-
-if (comprueba_login() == 0) {
-$id_grupo = "";
-$creacion_incidente = "";
-	if (isset($_GET["id"])){
-		$creacion_incidente = 0;
-		$id_inc = $_GET["id"];
-		$iduser_temp=$_SESSION['id_usuario'];
-		// Obtain group of this incident
-		$sql1='SELECT * FROM tincidencia WHERE id_incidencia = '.$id_inc;
-		$result=mysql_query($sql1);
-		$row=mysql_fetch_array($result);
-		// Get values
-		$titulo = $row["titulo"];
-		$texto = $row["descripcion"];
-		$inicio = $row["inicio"];
-		$actualizacion = $row["actualizacion"];
-		$estado = $row["estado"];
-		$prioridad = $row["prioridad"];
-		$origen = $row["origen"];
-		$usuario = $row["id_usuario"];
-		$nombre_real = dame_nombre_real($usuario);
-		$id_grupo = $row["id_grupo"];
-		$id_creator = $row["id_creator"];
-		$grupo = dame_nombre_grupo($id_grupo);
-		
-		// Has access to this page ???
-		if (give_acl($iduser_temp, $id_grupo, "IR")==1){
-			// Note add
-			if (isset($_GET["insertar_nota"])){
-				
-				$id_inc = entrada_limpia($_POST["id_inc"]);
-				$timestamp = entrada_limpia($_POST["timestamp"]);
-				$nota = entrada_limpia($_POST["nota"]);
-				$id_usuario=$_SESSION["id_usuario"];
-				
-				$sql1 = "INSERT INTO tnota (id_usuario,timestamp,nota) VALUES ('".$id_usuario."','".$timestamp."','".$nota."')";
-				$res1=mysql_query($sql1);
-				if ($res1) { echo "<h3 class='suc'>".$lang_label["create_note_ok"]."</h3>"; }
-				
-				$sql2 = "SELECT * FROM tnota WHERE id_usuario = '".$id_usuario."' AND timestamp = '".$timestamp."'";
-				$res2=mysql_query($sql2);
-				$row2=mysql_fetch_array($res2);
-				$id_nota = $row2["id_nota"];
-				
-				$sql3 = "INSERT INTO tnota_inc (id_incidencia, id_nota) VALUES (".$id_inc.",".$id_nota.")";
-				$res3=mysql_query($sql3);
-				
-				$sql4 = "UPDATE tincidencia SET actualizacion = '".$timestamp."' WHERE id_incidencia = ".$id_inc;
-				$res4 = mysql_query($sql4);
-				
-			}
-		
-			// Modify incident
-			if (isset($_POST["accion"])){
-				$id_inc = $_POST["id_inc"];
-				if ((give_acl($iduser_temp, $id_grupo, "IM")==1) OR ($usuario == $iduser_temp)) { // Only admins (manage incident) or owners can modify incidents
-					// Edicion !!
-					if ($_POST["accion"] == $lang_label["in_modinc"]){ // Modify Incident
-						$id_author_inc = give_incident_author($id_inc);
-						$titulo = entrada_limpia($_POST["titulo"]);
-						$descripcion = entrada_limpia($_POST['descripcion']);
-						$origen = entrada_limpia($_POST['origen']);
-						$prioridad = entrada_limpia($_POST['prioridad']);	
-						$grupo = entrada_limpia($_POST['grupo']);
-						$usuario= entrada_limpia($_POST["usuario"]);
-						$estado = entrada_limpia($_POST["estado"]);
-						$ahora=date("Y/m/d H:i:s");
-						$sql = "UPDATE tincidencia SET actualizacion = '".$ahora."', titulo = '".$titulo."', origen= '".$origen."', estado = '".$estado."', id_grupo = '".$grupo."', id_usuario = '".$usuario."', prioridad = '".$prioridad."', descripcion = '".$descripcion."' WHERE id_incidencia = ".$id_inc;
-						$result=mysql_query($sql);
-						if ($result) echo "<h3 class='suc'>".$lang_label["upd_incid_ok"]."</h3>"; 
-						// Re-read data for correct presentation
-						// Obtain group of this incident
-						$sql1='SELECT * FROM tincidencia WHERE id_incidencia = '.$id_inc;
-						$result=mysql_query($sql1);
-						$row=mysql_fetch_array($result);
-						// Get values
-						$titulo = $row["titulo"];
-						$texto = $row["descripcion"];
-						$inicio = $row["inicio"];
-						$actualizacion = $row["actualizacion"];
-						$estado = $row["estado"];
-						$prioridad = $row["prioridad"];
-						$origen = $row["origen"];
-						$usuario = $row["id_usuario"];
-						$nombre_real = dame_nombre_real($usuario);
-						$id_grupo = $row["id_grupo"];
-						$grupo = dame_nombre_grupo($id_grupo);
-					}
-				} else {
-					audit_db($id_author_inc,$REMOTE_ADDR,"ACL Forbidden","User ".$_SESSION["id_usuario"]." try to update incident");
-					echo "<h3 class='error'>".$lang_label["upd_incid_no"]."</h3>";
-					no_permission();
-				}
-			}
-			
-			// Delete note
-			if (isset($_GET["id_nota"])){
-				$note_user = give_note_author ($_GET["id_nota"]);
-				if (((give_acl($iduser_temp, $id_grupo, "IM")==1) OR ($note_user == $iduser_temp)) OR ($usuario = $iduser_temp) ) { // Only admins (manage incident) or owners can modify incidents, including their notes
-				// But note authors was able to delete this own notes
-					$id_nota = $_GET["id_nota"];
-					$id_nota_inc = $_GET["id_nota_inc"];
-					$query ="DELETE FROM tnota WHERE id_nota = ".$id_nota;
-					$query2 = "DELETE FROM tnota_inc WHERE id_nota_inc = ".$id_nota_inc;
-					//echo "DEBUG: DELETING NOTE: ".$query."(----)".$query2;
-					mysql_query($query);
-					mysql_query($query2);
-					if (mysql_query($query)) echo "<h3 class='suc'>".$lang_label["del_note_ok"]; 
-				}
-			}
-
-			// Delete file
-			if (((give_acl($iduser_temp, $id_grupo, "IM")==1) OR ($usuario == $iduser_temp)) AND isset($_GET["delete_file"])){
-				$file_id = $_GET["delete_file"];
-				$sql2 = "SELECT * FROM tattachment WHERE id_attachment = ".$file_id;	
-				$res2=mysql_query($sql2);
-				$row2=mysql_fetch_array($res2);
-				$filename = $row2["filename"];
-				$sql2 = "DELETE FROM tattachment WHERE id_attachment = ".$file_id;
-				$res2=mysql_query($sql2);
-				unlink ($attachment_store."attachment/pand".$file_id."_".$filename);
-			}
-			
-			// Upload file
-			if ((give_acl($iduser_temp, $id_grupo, "IW")==1) AND isset($_GET["upload_file"])) {
-				if (( $_FILES['userfile']['name'] != "" ) && ($userfile != "none")){ //if file
-					$tipo = $_FILES['userfile']['type'];
-					if (isset($_POST["file_description"])) 
-						$description = $_POST["file_description"];
-					else
-						$description = "No description available";
-					// Insert into database
-					$filename= $_FILES['userfile']['name'];
-					$filesize = $_FILES['userfile']['size'];
-					
-					$sql = " INSERT INTO tattachment (id_incidencia, id_usuario, filename, description, size ) VALUES (".$id_inc.", '".$iduser_temp." ','".$filename."','".$description."',".$filesize.") ";
-
-					mysql_query($sql);
-					$id_attachment=mysql_insert_id();	
-					
-					// Copy file to directory and change name
-				$nombre_archivo = $attachment_store."attachment/pand".$id_attachment."_".$filename;
-
-					if (!(copy($_FILES['userfile']['tmp_name'], $nombre_archivo ))){
-							echo "<h3 class=error>".$lang_label["attach_error"]."</h3>";
-						$sql = " DELETE FROM tattachment WHERE id_attachment =".$id_attachment;
-						mysql_query($sql);
-					} else {
-						// Delete temporal file
-						unlink ($_FILES['userfile']['tmp_name']);
-					}
-				}
-			}
-		}
-	} else { // Not given id
-		// Insert data !
-		if (isset($_POST["accion"]) and ($_POST["accion"] == $lang_label["create"])) {
-			$iduser_temp=$_SESSION['id_usuario'];		
-			// Read input variables
-			$titulo = entrada_limpia($_POST['titulo']);
-			$inicio = date("Y/m/d H:i:s");
-			$descripcion = entrada_limpia($_POST['descripcion']);
-			$texto = $descripcion; // to view in textarea after insert
-			$origen = entrada_limpia($_POST['origen']);
-			$prioridad = entrada_limpia($_POST['prioridad']);
-			$grupo = entrada_limpia($_POST['grupo']);
-			$usuario= entrada_limpia($_SESSION["id_usuario"]);
-			$actualizacion = $inicio;
-			$id_creator = $iduser_temp;
-			$estado = 0; // if the indicent is new, state (estado) is 0
-			$sql = " INSERT INTO tincidencia (inicio,actualizacion,titulo,descripcion,id_usuario,origen,estado,prioridad,id_grupo, id_creator) VALUES ('".$inicio."','".$actualizacion."','".$titulo."','".$descripcion."','".$usuario."','".$origen."','".$estado."','".$prioridad."','".$grupo."','".$id_creator."') ";
-			if (give_acl($iduser_temp, $grupo, "IW")==1){
-				if (mysql_query($sql)) echo "<h3 class='suc'>".$lang_label["create_incid_ok"]."</h3>";
-				$id_inc=mysql_insert_id();
-			} else 
-				no_permission();
-		} elseif (isset($_GET["insert_form"])){ // Create from to insert
-			$iduser_temp=$_SESSION['id_usuario'];
-			$titulo = "";
-			$descripcion = "";
-			$origen = "";
-			$prioridad = 0;
-			$id_grupo = 0;
-			$grupo = dame_nombre_grupo(1);
-			
-			$usuario= $_SESSION["id_usuario"];
-			$estado = 0;
-			$actualizacion=date("Y/m/d H:i:s");
-			$inicio = $actualizacion;
-			$id_creator = $iduser_temp;
-			$creacion_incidente = 1;
-		} else {
-			no_permission();
-		}
-	}
-	
-	// Has access to this page ???
-	if (give_acl($iduser_temp, $id_grupo, "IR")==1){
-		// ********************************************************************************************************	
-		// ********************************************************************************************************
-		// Show the form
-		// ********************************************************************************************************
-		
-		if ($creacion_incidente == 0)
-			echo "<form name='accion_form' method='POST' action='index.php?sec=incidencias&sec2=operation/incidents/incident_detail&id=".$id_inc."'>";
-		else 
-			echo "<form name='accion_form' method='POST' action='index.php?sec=incidencias&sec2=operation/incidents/incident_detail'>";
-			
-		if (isset($id_inc)) {echo "<input type='hidden' name='id_inc' value='".$id_inc."'>";}
-		echo "<h2>".$lang_label["incident_manag"]."</h2>";
-		if (isset($id_inc)) {echo "<h3>".$lang_label["rev_incident"]." # ".$id_inc." <a href='help/<?php echo $help_code;?>/chap4.php#42' target='_help' class='help'>&nbsp;<span>".$lang_label["help"]."</span></a></h3>";} 
-			else {echo "<h3>".$lang_label["create_incident"]."<a href='help/".$help_code."/chap4.php#41' target='_help' class='help'>&nbsp;<span>".$lang_label["help"]."</span></a></h3>";}
-		echo '<table cellpadding=3 cellspacing=3 border=0 width=600>';
-		if ((give_acl($iduser_temp, $id_grupo, "IM")==1) OR ($usuario == $iduser_temp)) 
-			echo '<tr><td class="lb" rowspan="6" width="5"><td class="datos"><b>'.$lang_label["incident"].'</b><td colspan=3 class="datos"><input type="text" name="titulo" size=70 value="'.$titulo.'">';
-		else
-			echo '<tr><td class="datos"><b>'.$lang_label["incident"].'</b><td colspan=3 class="datos"><input type="text" name="titulo" size=70 value="'.$titulo.'" readonly>';
-		echo '<tr><td class="datos2"><b>'.$lang_label["in_openedwhen"].'</b>';
-		echo "<td class='datos2' <i>".$inicio."</i>";
-		echo '<td class="datos2"><b>'.$lang_label["updated_at"].'</b>';
-		echo "<td class='datos2'><i>".$actualizacion."</i>";
-		echo '<tr><td class="datos"><b>'.$lang_label["in_openedby"].'</b><td class="datos">';
-		if ((give_acl($iduser_temp, $id_grupo, "IM")==1) OR ($usuario == $iduser_temp)) {
-			echo "<select name='usuario' class='w200'>";
-			echo "<option value='".$usuario."'>".$usuario." - ".dame_nombre_real($usuario);
-			$sql1='SELECT * FROM tusuario ORDER BY id_usuario';
-			$result=mysql_query($sql1);
-			while ($row2=mysql_fetch_array($result)){
-				echo "<option value='".$row2["id_usuario"]."'>".$row2["id_usuario"]." - ".$row2["nombre_real"];
-			}
-			echo "</select>";
-		}
-		else {
-			echo "<input type=hidden name='usuario' value='".$usuario."'>";
-			echo $usuario." - (<i><a href='index.php?sec=usuario&sec2=operation/users/user_edit&ver=".$usuario."'>".$nombre_real."</a></i>)";
-		}
-		// Tipo de estado 
-		// 0 - Abierta / Sin notas - Open, without notes
-		// 1 - Abierta / Notas aniadidas - Open, with notes
-		// 2 - Descartada / Not valid
-		// 3 - Caducada / Outdated
-		// 13 - Cerrada / Closed
-
-		if ((give_acl($iduser_temp, $id_grupo, "IM")==1) OR ($usuario == $iduser_temp)) 
-			echo '<td class="datos"><b>'.$lang_label["status"].'</b><td class="datos"><select name="estado" class="w135">';
-		else 
-			echo '<td class="datos"><b>'.$lang_label["status"].'</b><td class="datos"><select disabled name="estado" class="w135">';
-			
-		switch ( $estado ){
-			case 0: echo '<option value="0">'.$lang_label["in_state_0"]; break;
-			//case 1: echo '<option value="2">'.$lang_label["in_state_1"]; break;
-			case 2: echo '<option value="2">'.$lang_label["in_state_2"]; break;
-			case 3: echo '<option value="3">'.$lang_label["in_state_3"]; break;
-			case 13: echo '<option value="13">'.$lang_label["in_state_13"]; break;
-		}
-
-		echo '<option value="0">'.$lang_label["in_state_0"]; 
-		//echo '<option value="1">'.$lang_label["in_state_1"]; 
-		echo '<option value="2">'.$lang_label["in_state_2"]; 
-		echo '<option value="3">'.$lang_label["in_state_3"]; 
-		echo '<option value="13">'.$lang_label["in_state_13"]; 
-		echo '</select>';
-
-		if ((give_acl($iduser_temp, $id_grupo, "IM")==1) OR ($usuario == $iduser_temp)) 
-			echo '<tr><td class="datos2"><b>'.$lang_label["source"].'</b><td class="dato2s"><select name="origen" class="w135">';
-		else
-			echo '<tr><td class="datos2"><b>'.$lang_label["source"].'</b><td class="datos2"><select disabled name="origen" class="w135">';
-		
-		// Fill combobox with source (origen)
-		if ($origen != "")
-			echo "<option value='".$origen."'>".$origen;
-		$sql1='SELECT * FROM torigen ORDER BY origen';
-		$result=mysql_query($sql1);
-		while ($row2=mysql_fetch_array($result)){
-			echo "<option value='".$row2["origen"]."'>".$row2["origen"];
-		}
-		echo "</select>";	
-		
-		// Group combo
-		if ((give_acl($iduser_temp, $id_grupo, "IM")==1) OR ($usuario == $iduser_temp)) 
-			echo '<td class="datos2"><b>'.$lang_label["group"].'</b><td class="datos2"><select name="grupo" class="w135">';
-		else 
-			echo '<td class="datos2"><b>'.$lang_label["group"].'</b><td class="datos2"><select disabled name="grupo" class="w135">';
-		if ($id_grupo != 0)
-			echo "<option value='".$id_grupo."'>".$grupo;
-		$sql1='SELECT * FROM tgrupo ORDER BY nombre';
-		$result=mysql_query($sql1);
-		while ($row=mysql_fetch_array($result)){
-			if (give_acl($iduser_temp, $row["id_grupo"], "IR")==1)
-				echo "<option value='".$row["id_grupo"]."'>".$row["nombre"];
-		}
-		
-		echo '</select><tr>';
-		if ((give_acl($iduser_temp, $id_grupo, "IM")==1) OR ($usuario == $iduser_temp)) 
-			echo '<td class="datos"><b>'.$lang_label["priority"].'</b><td class="datos"><select name="prioridad" class="w135">';
-		else
-			echo '<td class="datos"><b>'.$lang_label["priority"].'</b><td class="datos"><select disabled name="prioridad" class="w135">';
-		
-		switch ( $prioridad ){
-			case 0: echo '<option value="0">'.$lang_label["informative"]; break;
-			case 1: echo '<option value="1">'.$lang_label["low"]; break;
-			case 2: echo '<option value="2">'.$lang_label["medium"]; break;
-			case 3: echo '<option value="3">'.$lang_label["serious"]; break;
-			case 4: echo '<option value="4">'.$lang_label["very_serious"]; break;
-			case 10: echo '<option value="10">'.$lang_label["maintenance"]; break;
-		}
-		
-		echo '<option value="0">'.$lang_label["informative"]; 
-		echo '<option value="1">'.$lang_label["low"]; 
-		echo '<option value="2">'.$lang_label["medium"];
-		echo '<option value="3">'.$lang_label["serious"]; 
-		echo '<option value="4">'.$lang_label["very_serious"]; 
-		echo '<option value="10">'.$lang_label["maintenance"]; 
-		
-		echo "<td class='datos'><b>Creator</b><td class='datos'>".$id_creator." ( <i>".dame_nombre_real($id_creator)." </i>)";
-		
-		if ((give_acl($iduser_temp, $id_grupo, "IM")==1) OR ($usuario == $iduser_temp)) 
-			echo '</select><tr><td class="datos2" colspan="4"><textarea name="descripcion" rows="15" cols="85">';
-		else
-			echo '</select><tr><td class="datos2" colspan="4"><textarea readonly name="descripcion" rows="15" cols="85">';
-		if (isset($texto)) {echo $texto;}
-		echo "</textarea>";
-		
-		echo '<tr><td colspan="5"><div class="raya"></div></td></tr>';
-		echo "<tr><td colspan='5' align='right'>";
-		// Only if user is the used who opened incident or (s)he is admin
-		
-		$iduser_temp=$_SESSION['id_usuario'];
-	
-		if ($creacion_incidente == 0){
-			if ((give_acl($iduser_temp, $id_grupo, "IM")==1) OR ($usuario == $iduser_temp)){
-				echo '<input type="submit" class="sub" name="accion" value="'.$lang_label["in_modinc"].'" border="0">';
-			}
-		}
-		else
-			if (give_acl($iduser_temp, $id_grupo, "IW")) {
-				echo '<input type="submit" class="sub" name="accion" value="'.$lang_label["create"].'" border="0">';
-			}
-		
-		echo "</form>";
-		
-		if ($creacion_incidente == 0){
-			echo "<tr><td colspan='7' style='text-align: right;'>";
-			echo '<form method="post" action="index.php?sec=incidencias&sec2=operation/incidents/incident_note&id_inc='.$id_inc.'"><input type="hidden" name="nota" value="add"><input align=right name="addnote" type="submit" class="sub" value="'.$lang_label["add_note"].'"></form>';
-		}
-		echo "</tr></table><br>";
-
-		if ($creacion_incidente == 0){
-		// Upload control
-			if (give_acl($iduser_temp, $id_grupo, "IW")==1){
-				echo "<table cellpadding=3 cellspacing=3 border=0 width='400'>";
-				echo "<tr><td colspan='3'><b>".$lang_label["attachfile"]."</b>";
-				echo "<tr><td class='lb' rowspan='2' width='5'>";
-				echo '<td class="datos">'.$lang_label["filename"].'</td><td class="datos"><form method="post" action="index.php?sec=incidencias&sec2=operation/incidents/incident_detail&id='.$id_inc.'&upload_file=1" enctype="multipart/form-data">';
-				echo '<input type="file" name="userfile" value="userfile" class="sub" size="40">';
-				echo '<tr><td class="datos2">'.$lang_label["description"].'</td><td class="datos2" colspan=3><input type="text" name="file_description" size=47>';
-				echo '<tr><td colspan="4"><div class="raya"></div></td></tr>';
-				echo '<tr><td colspan="4" style="text-align: right;"><input type="submit" name="upload" value="'.$lang_label["upload"].'" class="sub">';
-				echo '</td></tr></table><br>';
-			}
-			// ************************************************************
-			// Files attached to this incident
-			// ************************************************************
-
-			// Attach head if there's attach for this incident
-			$att_fil=mysql_query("SELECT * FROM tattachment WHERE id_incidencia = ".$id_inc);
-			
-			if (mysql_num_rows($att_fil))
-			{
-				echo "<table cellpadding='3' cellspacing='3' border='0' width='650'>";
-				echo "<tr><td>";
-				echo "<h3>".$lang_label["attached_files"]."</h3>";
-				echo "</td></tr><td>";
-				echo "<table width='650'><tr><th class=datos>".$lang_label["filename"];
-				echo "<th class=datos>".$lang_label["description"];
-				echo "<th class=datos>".$lang_label["size"];
-				echo "<th class=datos>".$lang_label["delete"];
-			
-				while ($row=mysql_fetch_array($att_fil)){
-					echo "<tr><td class=datos><a target='_new' href='attachment/pand".$row["id_attachment"]."_".$row["filename"]."'><img src='images/file.gif' border=0 align='middle'> ".$row["filename"]."</a>";
-					echo "<td class=datos>".$row["description"];
-					echo "<td class=datos>".$row["size"];
-					
-					if (give_acl($iduser_temp, $id_grupo, "IM")==1){ // Delete attachment
-						echo '<td class=datos align="center"><a href="index.php?sec=incidencias&sec2=operation/incidents/incident_detail&id='.$id_inc.'&delete_file='.$row["id_attachment"].'"><img src="images/delete.gif" border=0>';
-					}
-					
-				}
-				echo "<tr><td colspan='4'><div class='raya'></div></td></tr></table></table><br>";
-			}
-			// ********************************************************************
-			// Notes
-			// ********************************************************************
-			$cabecera=0;
-			$sql4='SELECT * FROM tnota_inc WHERE id_incidencia = '.$id_inc;
-			$res4=mysql_query($sql4);
-			while ($row2=mysql_fetch_array($res4)){
-				if ($cabecera == 0) { // Show head only one time
-					echo "<table cellpadding='3' cellspacing='3' border='0' class='w550'>";
-					echo "<tr><td>";
-					echo "<h3>".$lang_label["in_notas_t1"]."</h3>";
-					echo "<table cellpadding='3' cellspacing='3' border='0'>";
-					echo "<tr><td>";
-					$cabecera = 1;
-				}
-			
-				$sql3='SELECT * FROM tnota WHERE id_nota = '.$row2["id_nota"].' ORDER BY timestamp DESC';
-				$res3=mysql_query($sql3);
-				while ($row3=mysql_fetch_array($res3)){
-					$timestamp = $row3["timestamp"];
-					$nota = $row3["nota"];
-					$id_usuario_nota = $row3["id_usuario"];		
-					// Show data
-					echo '<tr><td rowspan="3" class="top"><img src="images/nota.gif"></td><td class="datos" width=40><b>'.$lang_label["author"].': </b><td class="datos">';
-					$usuario = $id_usuario_nota;
-					$nombre_real = dame_nombre_real($usuario);
-					echo $usuario." - (<i><a href='index.php?sec=usuario&sec2=operation/users/user_edit&ver=".$usuario."'>".$nombre_real."</a></i>)";
-					
-					// Delete comment, only for admins
-					if ((give_acl($iduser_temp, $id_grupo, "IM")==1) OR ($usuario == $iduser_temp)) {
-						$myurl="index.php?sec=incidencias&sec2=operation/incidents/incident_detail&id=".$id_inc."&id_nota=".$row2["id_nota"]."&id_nota_inc=".$row2["id_nota_inc"];
-						echo '<td rowspan="3" class="top" width="60" align="center"><a href="'.$myurl.'"><img src="images/delete.gif" align="middle" border="0"> '.$lang_label["delete"].'</a>';
-					}
-					echo '<tr><td class="datos"><b>'.$lang_label["date"].': </b><td class="datos"><i>'.$timestamp.'</i></td></tr>';
-					echo '<tr><td colspan="2" class="datos"> ';
-					echo '<table border="0" cellpadding="5" cellspacing="5" style="width: 450px"><tr><td class="f9" align="justify">';
-					echo salida_limpia($nota);
-					echo '</table>';
-					echo '<tr><td colspan="3"><div class="sep"></div></td></tr>';
-				}
-			}
-			if ($cabecera == 1){
-				echo "</table>"; // note table
-			}
-			echo "</form></table>";
-		} // create mode
-	}
-	else { // Doesn't have access to this page
-		audit_db($id_usuario,$REMOTE_ADDR, "ACL Violation","Trying to access to incident ".$id_inc." '".$titulo."'");
-		include ("general/noaccess.php");
-	}
-	
-} // fin pagina - end page
-
-?>
\ No newline at end of file
+<?php
+
+// Pandora - the Free monitoring system
+// ====================================
+// Copyright (c) 2004-2006 Sancho Lerena, slerena@gmail.com
+// Copyright (c) 2005-2006 Artica Soluciones Tecnologicas S.L, info@artica.es
+// Copyright (c) 2004-2006 Raul Mateos Martin, raulofpandora@gmail.com
+// This program is free software; you can redistribute it and/or
+// modify it under the terms of the GNU General Public License
+// as published by the Free Software Foundation; either version 2
+// of the License, or (at your option) any later version.
+// This program is distributed in the hope that it will be useful,
+// but WITHOUT ANY WARRANTY; without even the implied warranty of
+// MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+// GNU General Public License for more details.
+// You should have received a copy of the GNU General Public License
+// along with this program; if not, write to the Free Software
+// Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA  02110-1301, USA.
+
+// Load global vars
+require("include/config.php");
+
+if (comprueba_login() == 0) {
+$id_grupo = "";
+$creacion_incidente = "";
+	if (isset($_GET["id"])){
+		$creacion_incidente = 0;
+		$id_inc = $_GET["id"];
+		$iduser_temp=$_SESSION['id_usuario'];
+		// Obtain group of this incident
+		$sql1='SELECT * FROM tincidencia WHERE id_incidencia = '.$id_inc;
+		$result=mysql_query($sql1);
+		$row=mysql_fetch_array($result);
+		// Get values
+		$titulo = $row["titulo"];
+		$texto = $row["descripcion"];
+		$inicio = $row["inicio"];
+		$actualizacion = $row["actualizacion"];
+		$estado = $row["estado"];
+		$prioridad = $row["prioridad"];
+		$origen = $row["origen"];
+		$usuario = $row["id_usuario"];
+		$nombre_real = dame_nombre_real($usuario);
+		$id_grupo = $row["id_grupo"];
+		$id_creator = $row["id_creator"];
+		$grupo = dame_nombre_grupo($id_grupo);
+		
+		// Has access to this page ???
+		if (give_acl($iduser_temp, $id_grupo, "IR")==1){
+			// Note add
+			if (isset($_GET["insertar_nota"])){
+				
+				$id_inc = entrada_limpia($_POST["id_inc"]);
+				$timestamp = entrada_limpia($_POST["timestamp"]);
+				$nota = entrada_limpia($_POST["nota"]);
+				$id_usuario=$_SESSION["id_usuario"];
+				
+				$sql1 = "INSERT INTO tnota (id_usuario,timestamp,nota) VALUES ('".$id_usuario."','".$timestamp."','".$nota."')";
+				$res1=mysql_query($sql1);
+				if ($res1) { echo "<h3 class='suc'>".$lang_label["create_note_ok"]."</h3>"; }
+				
+				$sql2 = "SELECT * FROM tnota WHERE id_usuario = '".$id_usuario."' AND timestamp = '".$timestamp."'";
+				$res2=mysql_query($sql2);
+				$row2=mysql_fetch_array($res2);
+				$id_nota = $row2["id_nota"];
+				
+				$sql3 = "INSERT INTO tnota_inc (id_incidencia, id_nota) VALUES (".$id_inc.",".$id_nota.")";
+				$res3=mysql_query($sql3);
+				
+				$sql4 = "UPDATE tincidencia SET actualizacion = '".$timestamp."' WHERE id_incidencia = ".$id_inc;
+				$res4 = mysql_query($sql4);
+				
+			}
+		
+			// Modify incident
+			if (isset($_POST["accion"])){
+				$id_inc = $_POST["id_inc"];
+				if ((give_acl($iduser_temp, $id_grupo, "IM")==1) OR ($usuario == $iduser_temp)) { // Only admins (manage incident) or owners can modify incidents
+					// Edicion !!
+					if ($_POST["accion"] == $lang_label["in_modinc"]){ // Modify Incident
+						$id_author_inc = give_incident_author($id_inc);
+						$titulo = entrada_limpia($_POST["titulo"]);
+						$descripcion = entrada_limpia($_POST['descripcion']);
+						$origen = entrada_limpia($_POST['origen']);
+						$prioridad = entrada_limpia($_POST['prioridad']);	
+						$grupo = entrada_limpia($_POST['grupo']);
+						$usuario= entrada_limpia($_POST["usuario"]);
+						$estado = entrada_limpia($_POST["estado"]);
+						$ahora=date("Y/m/d H:i:s");
+						$sql = "UPDATE tincidencia SET actualizacion = '".$ahora."', titulo = '".$titulo."', origen= '".$origen."', estado = '".$estado."', id_grupo = '".$grupo."', id_usuario = '".$usuario."', prioridad = '".$prioridad."', descripcion = '".$descripcion."' WHERE id_incidencia = ".$id_inc;
+						$result=mysql_query($sql);
+						if ($result) echo "<h3 class='suc'>".$lang_label["upd_incid_ok"]."</h3>"; 
+						// Re-read data for correct presentation
+						// Obtain group of this incident
+						$sql1='SELECT * FROM tincidencia WHERE id_incidencia = '.$id_inc;
+						$result=mysql_query($sql1);
+						$row=mysql_fetch_array($result);
+						// Get values
+						$titulo = $row["titulo"];
+						$texto = $row["descripcion"];
+						$inicio = $row["inicio"];
+						$actualizacion = $row["actualizacion"];
+						$estado = $row["estado"];
+						$prioridad = $row["prioridad"];
+						$origen = $row["origen"];
+						$usuario = $row["id_usuario"];
+						$nombre_real = dame_nombre_real($usuario);
+						$id_grupo = $row["id_grupo"];
+						$grupo = dame_nombre_grupo($id_grupo);
+					}
+				} else {
+					audit_db($id_author_inc,$REMOTE_ADDR,"ACL Forbidden","User ".$_SESSION["id_usuario"]." try to update incident");
+					echo "<h3 class='error'>".$lang_label["upd_incid_no"]."</h3>";
+					no_permission();
+				}
+			}
+			
+			// Delete note
+			if (isset($_GET["id_nota"])){
+				$note_user = give_note_author ($_GET["id_nota"]);
+				if (((give_acl($iduser_temp, $id_grupo, "IM")==1) OR ($note_user == $iduser_temp)) OR ($usuario = $iduser_temp) ) { // Only admins (manage incident) or owners can modify incidents, including their notes
+				// But note authors was able to delete this own notes
+					$id_nota = $_GET["id_nota"];
+					$id_nota_inc = $_GET["id_nota_inc"];
+					$query ="DELETE FROM tnota WHERE id_nota = ".$id_nota;
+					$query2 = "DELETE FROM tnota_inc WHERE id_nota_inc = ".$id_nota_inc;
+					//echo "DEBUG: DELETING NOTE: ".$query."(----)".$query2;
+					mysql_query($query);
+					mysql_query($query2);
+					if (mysql_query($query)) echo "<h3 class='suc'>".$lang_label["del_note_ok"]; 
+				}
+			}
+
+			// Delete file
+			if (((give_acl($iduser_temp, $id_grupo, "IM")==1) OR ($usuario == $iduser_temp)) AND isset($_GET["delete_file"])){
+				$file_id = $_GET["delete_file"];
+				$sql2 = "SELECT * FROM tattachment WHERE id_attachment = ".$file_id;	
+				$res2=mysql_query($sql2);
+				$row2=mysql_fetch_array($res2);
+				$filename = $row2["filename"];
+				$sql2 = "DELETE FROM tattachment WHERE id_attachment = ".$file_id;
+				$res2=mysql_query($sql2);
+				unlink ($attachment_store."attachment/pand".$file_id."_".$filename);
+			}
+			
+			// Upload file
+			if ((give_acl($iduser_temp, $id_grupo, "IW")==1) AND isset($_GET["upload_file"])) {
+				if (( $_FILES['userfile']['name'] != "" ) && ($userfile != "none")){ //if file
+					$tipo = $_FILES['userfile']['type'];
+					if (isset($_POST["file_description"])) 
+						$description = $_POST["file_description"];
+					else
+						$description = "No description available";
+					// Insert into database
+					$filename= $_FILES['userfile']['name'];
+					$filesize = $_FILES['userfile']['size'];
+					
+					$sql = " INSERT INTO tattachment (id_incidencia, id_usuario, filename, description, size ) VALUES (".$id_inc.", '".$iduser_temp." ','".$filename."','".$description."',".$filesize.") ";
+
+					mysql_query($sql);
+					$id_attachment=mysql_insert_id();	
+					
+					// Copy file to directory and change name
+				$nombre_archivo = $attachment_store."attachment/pand".$id_attachment."_".$filename;
+
+					if (!(copy($_FILES['userfile']['tmp_name'], $nombre_archivo ))){
+							echo "<h3 class=error>".$lang_label["attach_error"]."</h3>";
+						$sql = " DELETE FROM tattachment WHERE id_attachment =".$id_attachment;
+						mysql_query($sql);
+					} else {
+						// Delete temporal file
+						unlink ($_FILES['userfile']['tmp_name']);
+					}
+				}
+			}
+		}
+	} else { // Not given id
+		// Insert data !
+		if (isset($_POST["accion"]) and ($_POST["accion"] == $lang_label["create"])) {
+			$iduser_temp=$_SESSION['id_usuario'];		
+			// Read input variables
+			$titulo = entrada_limpia($_POST['titulo']);
+			$inicio = date("Y/m/d H:i:s");
+			$descripcion = entrada_limpia($_POST['descripcion']);
+			$texto = $descripcion; // to view in textarea after insert
+			$origen = entrada_limpia($_POST['origen']);
+			$prioridad = entrada_limpia($_POST['prioridad']);
+			$grupo = entrada_limpia($_POST['grupo']);
+			$usuario= entrada_limpia($_SESSION["id_usuario"]);
+			$actualizacion = $inicio;
+			$id_creator = $iduser_temp;
+			$estado = 0; // if the indicent is new, state (estado) is 0
+			$sql = " INSERT INTO tincidencia (inicio,actualizacion,titulo,descripcion,id_usuario,origen,estado,prioridad,id_grupo, id_creator) VALUES ('".$inicio."','".$actualizacion."','".$titulo."','".$descripcion."','".$usuario."','".$origen."','".$estado."','".$prioridad."','".$grupo."','".$id_creator."') ";
+			if (give_acl($iduser_temp, $grupo, "IW")==1){
+				if (mysql_query($sql)) echo "<h3 class='suc'>".$lang_label["create_incid_ok"]."</h3>";
+				$id_inc=mysql_insert_id();
+			} else 
+				no_permission();
+		} elseif (isset($_GET["insert_form"])){ // Create from to insert
+			$iduser_temp=$_SESSION['id_usuario'];
+			$titulo = "";
+			$descripcion = "";
+			$origen = "";
+			$prioridad = 0;
+			$id_grupo = 0;
+			$grupo = dame_nombre_grupo(1);
+			
+			$usuario= $_SESSION["id_usuario"];
+			$estado = 0;
+			$actualizacion=date("Y/m/d H:i:s");
+			$inicio = $actualizacion;
+			$id_creator = $iduser_temp;
+			$creacion_incidente = 1;
+		} else {
+			no_permission();
+		}
+	}
+	
+	// Has access to this page ???
+	if (give_acl($iduser_temp, $id_grupo, "IR")==1){
+		// ********************************************************************************************************	
+		// ********************************************************************************************************
+		// Show the form
+		// ********************************************************************************************************
+		
+		if ($creacion_incidente == 0)
+			echo "<form name='accion_form' method='POST' action='index.php?sec=incidencias&sec2=operation/incidents/incident_detail&id=".$id_inc."'>";
+		else 
+			echo "<form name='accion_form' method='POST' action='index.php?sec=incidencias&sec2=operation/incidents/incident_detail'>";
+			
+		if (isset($id_inc)) {echo "<input type='hidden' name='id_inc' value='".$id_inc."'>";}
+		echo "<h2>".$lang_label["incident_manag"]."</h2>";
+		if (isset($id_inc)) {
+			echo "<h3>".$lang_label["rev_incident"]." # ".$id_inc." <a href='help/".$help_code."/chap4.php#42' target='_help' class='help'>&nbsp;<span>".$lang_label["help"]."</span></a></h3>";
+		} else {
+			echo "<h3>".$lang_label["create_incident"]."<a href='help/".$help_code."/chap4.php#41' target='_help' class='help'>&nbsp;<span>".$lang_label["help"]."</span></a></h3>";
+		}
+		echo '<table cellpadding=3 cellspacing=3 border=0 width=600>';
+		if ((give_acl($iduser_temp, $id_grupo, "IM")==1) OR ($usuario == $iduser_temp)) 
+			echo '<tr><td class="lb" rowspan="6" width="5"><td class="datos"><b>'.$lang_label["incident"].'</b><td colspan=3 class="datos"><input type="text" name="titulo" size=70 value="'.$titulo.'">';
+		else
+			echo '<tr><td class="datos"><b>'.$lang_label["incident"].'</b><td colspan=3 class="datos"><input type="text" name="titulo" size=70 value="'.$titulo.'" readonly>';
+		echo '<tr><td class="datos2"><b>'.$lang_label["in_openedwhen"].'</b>';
+		echo "<td class='datos2' <i>".$inicio."</i>";
+		echo '<td class="datos2"><b>'.$lang_label["updated_at"].'</b>';
+		echo "<td class='datos2'><i>".$actualizacion."</i>";
+		echo '<tr><td class="datos"><b>'.$lang_label["in_openedby"].'</b><td class="datos">';
+		if ((give_acl($iduser_temp, $id_grupo, "IM")==1) OR ($usuario == $iduser_temp)) {
+			echo "<select name='usuario' class='w200'>";
+			echo "<option value='".$usuario."'>".$usuario." - ".dame_nombre_real($usuario);
+			$sql1='SELECT * FROM tusuario ORDER BY id_usuario';
+			$result=mysql_query($sql1);
+			while ($row2=mysql_fetch_array($result)){
+				echo "<option value='".$row2["id_usuario"]."'>".$row2["id_usuario"]." - ".$row2["nombre_real"];
+			}
+			echo "</select>";
+		}
+		else {
+			echo "<input type=hidden name='usuario' value='".$usuario."'>";
+			echo $usuario." - (<i><a href='index.php?sec=usuario&sec2=operation/users/user_edit&ver=".$usuario."'>".$nombre_real."</a></i>)";
+		}
+		// Tipo de estado 
+		// 0 - Abierta / Sin notas - Open, without notes
+		// 1 - Abierta / Notas aniadidas - Open, with notes
+		// 2 - Descartada / Not valid
+		// 3 - Caducada / Outdated
+		// 13 - Cerrada / Closed
+
+		if ((give_acl($iduser_temp, $id_grupo, "IM")==1) OR ($usuario == $iduser_temp)) 
+			echo '<td class="datos"><b>'.$lang_label["status"].'</b><td class="datos"><select name="estado" class="w135">';
+		else 
+			echo '<td class="datos"><b>'.$lang_label["status"].'</b><td class="datos"><select disabled name="estado" class="w135">';
+			
+		switch ( $estado ){
+			case 0: echo '<option value="0">'.$lang_label["in_state_0"]; break;
+			//case 1: echo '<option value="2">'.$lang_label["in_state_1"]; break;
+			case 2: echo '<option value="2">'.$lang_label["in_state_2"]; break;
+			case 3: echo '<option value="3">'.$lang_label["in_state_3"]; break;
+			case 13: echo '<option value="13">'.$lang_label["in_state_13"]; break;
+		}
+
+		echo '<option value="0">'.$lang_label["in_state_0"]; 
+		//echo '<option value="1">'.$lang_label["in_state_1"]; 
+		echo '<option value="2">'.$lang_label["in_state_2"]; 
+		echo '<option value="3">'.$lang_label["in_state_3"]; 
+		echo '<option value="13">'.$lang_label["in_state_13"]; 
+		echo '</select>';
+
+		if ((give_acl($iduser_temp, $id_grupo, "IM")==1) OR ($usuario == $iduser_temp)) 
+			echo '<tr><td class="datos2"><b>'.$lang_label["source"].'</b><td class="datos2"><select name="origen" class="w135">';
+		else
+			echo '<tr><td class="datos2"><b>'.$lang_label["source"].'</b><td class="datos2"><select disabled name="origen" class="w135">';
+		
+		// Fill combobox with source (origen)
+		if ($origen != "")
+			echo "<option value='".$origen."'>".$origen;
+		$sql1='SELECT * FROM torigen ORDER BY origen';
+		$result=mysql_query($sql1);
+		while ($row2=mysql_fetch_array($result)){
+			echo "<option value='".$row2["origen"]."'>".$row2["origen"];
+		}
+		echo "</select>";	
+		
+		// Group combo
+		if ((give_acl($iduser_temp, $id_grupo, "IM")==1) OR ($usuario == $iduser_temp)) 
+			echo '<td class="datos2"><b>'.$lang_label["group"].'</b><td class="datos2"><select name="grupo" class="w135">';
+		else 
+			echo '<td class="datos2"><b>'.$lang_label["group"].'</b><td class="datos2"><select disabled name="grupo" class="w135">';
+		if ($id_grupo != 0)
+			echo "<option value='".$id_grupo."'>".$grupo;
+		$sql1='SELECT * FROM tgrupo ORDER BY nombre';
+		$result=mysql_query($sql1);
+		while ($row=mysql_fetch_array($result)){
+			if (give_acl($iduser_temp, $row["id_grupo"], "IR")==1)
+				echo "<option value='".$row["id_grupo"]."'>".$row["nombre"];
+		}
+		
+		echo '</select><tr>';
+		if ((give_acl($iduser_temp, $id_grupo, "IM")==1) OR ($usuario == $iduser_temp)) 
+			echo '<td class="datos"><b>'.$lang_label["priority"].'</b><td class="datos"><select name="prioridad" class="w135">';
+		else
+			echo '<td class="datos"><b>'.$lang_label["priority"].'</b><td class="datos"><select disabled name="prioridad" class="w135">';
+		
+		switch ( $prioridad ){
+			case 0: echo '<option value="0">'.$lang_label["informative"]; break;
+			case 1: echo '<option value="1">'.$lang_label["low"]; break;
+			case 2: echo '<option value="2">'.$lang_label["medium"]; break;
+			case 3: echo '<option value="3">'.$lang_label["serious"]; break;
+			case 4: echo '<option value="4">'.$lang_label["very_serious"]; break;
+			case 10: echo '<option value="10">'.$lang_label["maintenance"]; break;
+		}
+		
+		echo '<option value="0">'.$lang_label["informative"]; 
+		echo '<option value="1">'.$lang_label["low"]; 
+		echo '<option value="2">'.$lang_label["medium"];
+		echo '<option value="3">'.$lang_label["serious"]; 
+		echo '<option value="4">'.$lang_label["very_serious"]; 
+		echo '<option value="10">'.$lang_label["maintenance"]; 
+		
+		echo "<td class='datos'><b>Creator</b><td class='datos'>".$id_creator." ( <i>".dame_nombre_real($id_creator)." </i>)";
+		
+		if ((give_acl($iduser_temp, $id_grupo, "IM")==1) OR ($usuario == $iduser_temp)) 
+			echo '</select><tr><td class="datos2" colspan="4"><textarea name="descripcion" rows="15" cols="85">';
+		else
+			echo '</select><tr><td class="datos2" colspan="4"><textarea readonly name="descripcion" rows="15" cols="85">';
+		if (isset($texto)) {echo $texto;}
+		echo "</textarea>";
+		
+		echo '<tr><td colspan="5"><div class="raya"></div></td></tr>';
+		echo "<tr><td colspan='5' align='right'>";
+		// Only if user is the used who opened incident or (s)he is admin
+		
+		$iduser_temp=$_SESSION['id_usuario'];
+	
+		if ($creacion_incidente == 0){
+			if ((give_acl($iduser_temp, $id_grupo, "IM")==1) OR ($usuario == $iduser_temp)){
+				echo '<input type="submit" class="sub" name="accion" value="'.$lang_label["in_modinc"].'" border="0">';
+			}
+		}
+		else
+			if (give_acl($iduser_temp, $id_grupo, "IW")) {
+				echo '<input type="submit" class="sub" name="accion" value="'.$lang_label["create"].'" border="0">';
+			}
+		
+		echo "</form>";
+		
+		if ($creacion_incidente == 0){
+			echo "<tr><td colspan='7' style='text-align: right;'>";
+			echo '<form method="post" action="index.php?sec=incidencias&sec2=operation/incidents/incident_note&id_inc='.$id_inc.'"><input type="hidden" name="nota" value="add"><input align=right name="addnote" type="submit" class="sub" value="'.$lang_label["add_note"].'"></form>';
+		}
+		echo "</tr></table><br>";
+
+		if ($creacion_incidente == 0){
+		// Upload control
+			if (give_acl($iduser_temp, $id_grupo, "IW")==1){
+				echo "<table cellpadding=3 cellspacing=3 border=0 width='400'>";
+				echo "<tr><td colspan='3'><b>".$lang_label["attachfile"]."</b>";
+				echo "<tr><td class='lb' rowspan='2' width='5'>";
+				echo '<td class="datos">'.$lang_label["filename"].'</td><td class="datos"><form method="post" action="index.php?sec=incidencias&sec2=operation/incidents/incident_detail&id='.$id_inc.'&upload_file=1" enctype="multipart/form-data">';
+				echo '<input type="file" name="userfile" value="userfile" class="sub" size="40">';
+				echo '<tr><td class="datos2">'.$lang_label["description"].'</td><td class="datos2" colspan=3><input type="text" name="file_description" size=47>';
+				echo '<tr><td colspan="4"><div class="raya"></div></td></tr>';
+				echo '<tr><td colspan="4" style="text-align: right;"><input type="submit" name="upload" value="'.$lang_label["upload"].'" class="sub">';
+				echo '</td></tr></table><br>';
+			}
+			// ************************************************************
+			// Files attached to this incident
+			// ************************************************************
+
+			// Attach head if there's attach for this incident
+			$att_fil=mysql_query("SELECT * FROM tattachment WHERE id_incidencia = ".$id_inc);
+			
+			if (mysql_num_rows($att_fil))
+			{
+				echo "<table cellpadding='3' cellspacing='3' border='0' width='650'>";
+				echo "<tr><td>";
+				echo "<h3>".$lang_label["attached_files"]."</h3>";
+				echo "</td></tr><td>";
+				echo "<table width='650'><tr><th class=datos>".$lang_label["filename"];
+				echo "<th class=datos>".$lang_label["description"];
+				echo "<th class=datos>".$lang_label["size"];
+				echo "<th class=datos>".$lang_label["delete"];
+			
+				while ($row=mysql_fetch_array($att_fil)){
+					echo "<tr><td class=datos><a target='_new' href='attachment/pand".$row["id_attachment"]."_".$row["filename"]."'><img src='images/file.gif' border=0 align='middle'> ".$row["filename"]."</a>";
+					echo "<td class=datos>".$row["description"];
+					echo "<td class=datos>".$row["size"];
+					
+					if (give_acl($iduser_temp, $id_grupo, "IM")==1){ // Delete attachment
+						echo '<td class=datos align="center"><a href="index.php?sec=incidencias&sec2=operation/incidents/incident_detail&id='.$id_inc.'&delete_file='.$row["id_attachment"].'"><img src="images/delete.gif" border=0>';
+					}
+					
+				}
+				echo "<tr><td colspan='4'><div class='raya'></div></td></tr></table></table><br>";
+			}
+			// ********************************************************************
+			// Notes
+			// ********************************************************************
+			$cabecera=0;
+			$sql4='SELECT * FROM tnota_inc WHERE id_incidencia = '.$id_inc;
+			$res4=mysql_query($sql4);
+			while ($row2=mysql_fetch_array($res4)){
+				if ($cabecera == 0) { // Show head only one time
+					echo "<table cellpadding='3' cellspacing='3' border='0' class='w550'>";
+					echo "<tr><td>";
+					echo "<h3>".$lang_label["in_notas_t1"]."</h3>";
+					echo "<table cellpadding='3' cellspacing='3' border='0'>";
+					echo "<tr><td>";
+					$cabecera = 1;
+				}
+			
+				$sql3='SELECT * FROM tnota WHERE id_nota = '.$row2["id_nota"].' ORDER BY timestamp DESC';
+				$res3=mysql_query($sql3);
+				while ($row3=mysql_fetch_array($res3)){
+					$timestamp = $row3["timestamp"];
+					$nota = $row3["nota"];
+					$id_usuario_nota = $row3["id_usuario"];		
+					// Show data
+					echo '<tr><td rowspan="3" class="top"><img src="images/nota.gif"></td><td class="datos" width=40><b>'.$lang_label["author"].': </b><td class="datos">';
+					$usuario = $id_usuario_nota;
+					$nombre_real = dame_nombre_real($usuario);
+					echo $usuario." - (<i><a href='index.php?sec=usuario&sec2=operation/users/user_edit&ver=".$usuario."'>".$nombre_real."</a></i>)";
+					
+					// Delete comment, only for admins
+					if ((give_acl($iduser_temp, $id_grupo, "IM")==1) OR ($usuario == $iduser_temp)) {
+						$myurl="index.php?sec=incidencias&sec2=operation/incidents/incident_detail&id=".$id_inc."&id_nota=".$row2["id_nota"]."&id_nota_inc=".$row2["id_nota_inc"];
+						echo '<td rowspan="3" class="top" width="60" align="center"><a href="'.$myurl.'"><img src="images/delete.gif" align="middle" border="0"> '.$lang_label["delete"].'</a>';
+					}
+					echo '<tr><td class="datos"><b>'.$lang_label["date"].': </b><td class="datos"><i>'.$timestamp.'</i></td></tr>';
+					echo '<tr><td colspan="2" class="datos"> ';
+					echo '<table border="0" cellpadding="5" cellspacing="5" style="width: 450px"><tr><td class="f9" align="justify">';
+					echo salida_limpia($nota);
+					echo '</table>';
+					echo '<tr><td colspan="3"><div class="sep"></div></td></tr>';
+				}
+			}
+			if ($cabecera == 1){
+				echo "</table>"; // note table
+			}
+			echo "</form></table>";
+		} // create mode
+	}
+	else { // Doesn't have access to this page
+		audit_db($id_usuario,$REMOTE_ADDR, "ACL Violation","Trying to access to incident ".$id_inc." '".$titulo."'");
+		include ("general/noaccess.php");
+	}
+	
+} // fin pagina - end page
+
+?>