<?php

// Pandora FMS - http://pandorafms.com
// ==================================================
// Copyright (c) 2005-2011 Artica Soluciones Tecnologicas
// Please see http://pandorafms.org for full contribution list

// This program is free software; you can redistribute it and/or
// modify it under the terms of the GNU General Public License
// as published by the Free Software Foundation; version 2

// This program is distributed in the hope that it will be useful,
// but WITHOUT ANY WARRANTY; without even the implied warranty of
// MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
// GNU General Public License for more details.

global $config;

include_once($config['homedir'] . "/include/functions_profile.php");
include_once($config['homedir'] . '/include/functions_users.php');
include_once ($config['homedir'] . '/include/functions_groups.php');

$searchUsers = check_acl($config['id_user'], 0, "UM");

$selectUserIDUp = '';
$selectUserIDDown = '';
$selectNameUp = '';
$selectNameDown = '';
$selectEmailUp = '';
$selectEmailDown = '';
$selectLastContactUp = '';
$selectLastContactDown = '';
$selectProfileUp = '';
$selectProfileDown = '';

switch ($sortField) {
	case 'id_user':
		switch ($sort) {
			case 'up':
				$selectUserIDUp = $selected;
				$order = array('field' => 'id_user', 'order' => 'ASC');
				break;
			case 'down':
				$selectUserIDDown = $selected;
				$order = array('field' => 'id_user', 'order' => 'DESC');
				break;
		}
		break;
	case 'name':
		switch ($sort) {
			case 'up':
				$selectNameUp = $selected;
				$order = array('field' => 'fullname', 'order' => 'ASC');
				break;
			case 'down':
				$selectNameDown = $selected;
				$order = array('field' => 'fullname', 'order' => 'DESC');
				break;
		}
		break;
	case 'email':
		switch ($sort) {
			case 'up':
				$selectLastContactUp = $selected;
				$order = array('field' => 'email', 'order' => 'ASC');
				break;
			case 'down':
				$selectEmailDown = $selected;
				$order = array('field' => 'email', 'order' => 'DESC');
				break;
		}
		break;
	case 'last_contact':
		switch ($sort) {
			case 'up':
				$selectLastContactUp = $selected;
				$order = array('field' => 'last_connect', 'order' => 'ASC');
				break;
			case 'down':
				$selectLastContactDown = $selected;
				$order = array('field' => 'last_connect', 'order' => 'DESC');
				break;
		}
		break;
	case 'last_contact':
		switch ($sort) {
			case 'up':
				$selectLastContactUp = $selected;
				$order = array('field' => 'last_connect', 'order' => 'ASC');
				break;
			case 'down':
				$selectLastContactDown = $selected;
				$order = array('field' => 'last_connect', 'order' => 'DESC');
				break;
		}
		break;
	case 'profile':
		switch ($sort) {
			case 'up':
				$selectProfileUp = $selected;
				$order = array('field' => 'is_admin', 'order' => 'ASC');
				break;
			case 'down':
				$selectProfileDown = $selected;
				$order = array('field' => 'is_admin', 'order' => 'DESC');
				break;
		}
		break;
	default:
		$selectUserIDUp = $selected;
		$selectUserIDDown = '';
		$selectNameUp = '';
		$selectNameDown = '';
		$selectEmailUp = '';
		$selectEmailDown = '';
		$selectLastContactUp = '';
		$selectLastContactDown = '';
		$selectProfileUp = '';
		$selectProfileDown = '';
		
		$order = array('field' => 'id_user', 'order' => 'ASC');
		break;
}

if ($searchUsers) {

	switch ($config["dbtype"]) {
		case "mysql":
		case "postgresql":
			$sql = "SELECT id_user, fullname, firstname, lastname, middlename, email, last_connect, is_admin, comments FROM tusuario
				WHERE fullname LIKE '%" . $stringSearchSQL . "%' OR
					id_user LIKE '%" . $stringSearchSQL . "%' OR
					firstname LIKE '%" . $stringSearchSQL . "%' OR
					lastname LIKE '%" . $stringSearchSQL . "%' OR
					middlename LIKE '%" . $stringSearchSQL . "%' OR
					email LIKE '%" . $stringSearchSQL . "%'
				ORDER BY " . $order['field'] . " " . $order['order'];
			break;
		case "oracle":
			$sql = "SELECT id_user, fullname, firstname, lastname, middlename, email, last_connect, is_admin, comments FROM tusuario
				WHERE upper(fullname) LIKE '%" . strtolower($stringSearchSQL) . "%' OR
					upper(id_user) LIKE '%" . strtolower($stringSearchSQL) . "%' OR
					upper(firstname) LIKE '%" . strtolower($stringSearchSQL) . "%' OR
					upper(lastname) LIKE '%" . strtolower($stringSearchSQL) . "%' OR
					upper(middlename) LIKE '%" . strtolower($stringSearchSQL) . "%' OR
					upper(email) LIKE '%" . strtolower($stringSearchSQL) . "%'
					ORDER BY " . $order['field'] . " " . $order['order'];
			break;
	}
	switch ($config["dbtype"]) {
		case "mysql":
		case "postgresql":
			$sql .= " LIMIT " . $config['block_size'] . " OFFSET " . get_parameter ('offset',0);
			break;
		case "oracle":
			$set = array();
			$set['limit'] = $config['block_size'];
			$set['offset'] = (int) get_parameter('offset');
			
			$sql = oracle_recode_query ($sql, $set);
			break;
	}
	
	$users = db_process_sql($sql);
	
	if ($users !== false) {
		//Check ACLs
		$users_id = array();
		foreach ($users as $key => $user) {
			if (!check_acl ($config["id_user"], users_get_groups ($user["id_user"]), "UM") && $config["id_user"] != $user["id_user"]) {
				unset($users[$key]);
			}
			else {
				$users_id[] = $user["id_user"];
			}
		}
		
		if ($only_count) {
			unset($users);
		}

		switch ($config["dbtype"]) {
			case "mysql":
			case "postgresql":
				$sql = "SELECT COUNT(id_user) AS count FROM tusuario
					WHERE id_user LIKE '%" . $stringSearchSQL . "%' OR
						fullname LIKE '%" . $stringSearchSQL . "%' OR
						firstname LIKE '%" . $stringSearchSQL . "%' OR
						lastname LIKE '%" . $stringSearchSQL . "%' OR
						middlename LIKE '%" . $stringSearchSQL . "%' OR
						email LIKE '%" . $stringSearchSQL . "%'";
				break;
			case "oracle":
				$sql = "SELECT COUNT(id_user) AS count FROM tusuario
					WHERE upper(id_user) LIKE '%" . strtolower($stringSearchSQL) . "%' OR
						upper(fullname) LIKE '%" . strtolower($stringSearchSQL) . "%' OR
						upper(firstname) LIKE '%" . strtolower($stringSearchSQL) . "%' OR
						upper(lastname) LIKE '%" . strtolower($stringSearchSQL) . "%' OR
						upper(middlename) LIKE '%" . strtolower($stringSearchSQL) . "%' OR
						upper(email LIKE) '%" . strtolower($stringSearchSQL) . "%'";
				break;
		}
		$totalUsers = db_get_value_sql($sql);
	}
	else {
		$totalUsers = 0;
	}
}
?>