-
-
-
-
-
-
-
-
-
-
-
-escapeSimple($username);
- $billaction = $dbSocket->escapeSimple($billaction);
- $startdate = $dbSocket->escapeSimple($startdate);
- $enddate = $dbSocket->escapeSimple($enddate);
-
-// include_once('include/management/userBilling.php');
-// userBillingPayPalSummary($startdate, $enddate, $payer_email, $payment_address_status, $payer_status, $payment_status, 1);
- // draw the billing rates summary table
-
-
- include 'library/opendb.php';
- // since we need to span through pages, which we do using GET queries I can't rely on this page
- // to be processed through POST but rather using GET only (with the current design anyway).
- // For this reason, I need to build the GET query which I will later use in the page number's links
-
- $getFields = "";
- $counter = 0;
- foreach ($sqlfields as $elements) {
- $getFields .= "&sqlfields[$counter]=$elements";
- $counter++;
- }
-
- // we should also sanitize the array that we will be passing to this page in the next query
- $getFields = $dbSocket->escapeSimple($getFields);
-
-
- $getQuery = "";
- $getQuery .= "&username=$username";
- $getQuery .= "&billAction=$billaction";
- $getQuery .= "&startdate=$startdate&enddate=$enddate";
-
-
- $select = implode(",", $sqlfields);
- // sanitizing the array passed to us in the get request
- $select = $dbSocket->escapeSimple($select);
-
-
- $sql = "SELECT $select FROM ".$configValues['CONFIG_DB_TBL_DALOBILLINGHISTORY']." WHERE ".
- " (username LIKE '$username') AND ".
- " (billAction LIKE '$billaction') ";
- $res = $dbSocket->query($sql);
- $numrows = $res->numRows();
-
-
- $sql = "SELECT $select FROM ".$configValues['CONFIG_DB_TBL_DALOBILLINGHISTORY']." WHERE ".
- " (username LIKE '$username') AND ".
- " (billAction LIKE '$billaction') ".
- " ORDER BY $orderBy $orderType LIMIT $offset, $rowsPerPage;";
- $res = $dbSocket->query($sql);
- $logDebugSQL = "";
- $logDebugSQL .= $sql . "\n";
-
-
- /* START - Related to pages_numbering.php */
- $maxPage = ceil($numrows/$rowsPerPage);
- /* END */
-
-
- echo "
\n";
- echo "
-
-
- | ".t('all','Records')." |
-
-
-
-
-
- ";
-
- if ($configValues['CONFIG_IFACE_TABLES_LISTING_NUM'] == "yes")
- setupNumbering($numrows, $rowsPerPage, $pageNum, $orderBy, $orderType, $getFields, $getQuery);
-
- echo " |
-
-
- ";
-
-
- // building the dybamic table list fields
- echo " ";
- foreach ($sqlfields as $value) {
- switch($value) {
-
- case "id":
- $title = t('all','ID');
- break;
- case "username":
- $title = t('all','Username');
- break;
- case "planId":
- $title = t('all','PlanId');
- break;
- case "billAmount":
- $title = t('all','BillAmount');
- break;
- case "billAction":
- $title = t('all','BillAction');
- break;
- case "billPerformer":
- $title = t('all','BillPerformer');
- break;
- case "billReason":
- $title = t('all','BillReason');
- break;
- case "paymentmethod":
- $title = t('ContactInfo','PaymentMethod');
- break;
- case "cash":
- $title = t('ContactInfo','Cash');
- break;
- case "creditcardname":
- $title = t('ContactInfo','CreditCardName');
- break;
- case "creditcardnumber":
- $title = t('ContactInfo','CreditCardNumber');
- break;
- case "creditcardverification":
- $title = t('ContactInfo','CreditCardVerificationNumber');
- break;
- case "creditcardtype":
- $title = t('ContactInfo','CreditCardType');
- break;
- case "creditcardexp":
- $title = t('ContactInfo','CreditCardExpiration');
- break;
- case "coupon":
- $title = t('all','Coupon');
- break;
- case "discount":
- $title = t('all','Discount');
- break;
- case "notes":
- $title = t('ContactInfo','Notes');
- break;
- case "creationdate":
- $title = t('all','CreationDate');
- break;
- case "creationby":
- $title = t('all','CreationBy');
- break;
- case "updatedate":
- $title = t('all','UpdateDate');
- break;
- case "updateby":
- $title = t('all','UpdateBy');
- break;
- default:
- $title = $value;
- break;
- }
-
- echo "| $title | ";
- } //foreach $sqlfields
- echo "
";
-
-
- // inserting the values of each field from the database to the table
- while($row = $res->fetchRow(DB_FETCHMODE_ASSOC)) {
- echo "";
- foreach ($sqlfields as $value) {
- echo "| " . $row[$value] . " | ";
- }
- echo "
";
- }
-
- echo "
-
-
- |
- ";
- setupLinks($pageNum, $maxPage, $orderBy, $orderType, $getFields, $getQuery);
- echo "
- |
-
-
- ";
-
- echo "
";
-
- include 'library/closedb.php';
+ $logQuery = "performed query for listing of records on page: ";
+ $logDebugSQL = "";
+
+ // set session's page variable
+ $_SESSION['PREV_LIST_PAGE'] = $_SERVER['REQUEST_URI'];
+
+ $sqlfields = (array_key_exists('sqlfields', $_GET) && !empty($_GET['sqlfields']) && is_array($_GET['sqlfields']) &&
+ array_intersect($_GET['sqlfields'], array_keys($bill_history_query_options_all)) == $_GET['sqlfields'])
+ ? $_GET['sqlfields'] : $bill_history_query_options_default;
+
+ $cols = array();
+ foreach ($sqlfields as $sqlfield) {
+ $cols[$sqlfield] = $bill_history_query_options_all[$sqlfield];
+ }
+ $colspan = count($cols);
+ $half_colspan = intdiv($colspan, 2);
+
+ $orderBy = (array_key_exists('orderBy', $_GET) && isset($_GET['orderBy']) &&
+ in_array($_GET['orderBy'], array_keys($bill_history_query_options_all)))
+ ? $_GET['orderBy'] : array_keys($bill_history_query_options_all)[0];
+
+ $orderType = (array_key_exists('orderType', $_GET) && isset($_GET['orderType']) &&
+ preg_match(ORDER_TYPE_REGEX, $_GET['orderType']) !== false)
+ ? strtolower($_GET['orderType']) : "asc";
+
+ //~ $startdate = (array_key_exists('startdate', $_GET) && isset($_GET['startdate']) &&
+ //~ preg_match(DATE_REGEX, $_GET['startdate'], $m) !== false &&
+ //~ checkdate($m[2], $m[3], $m[1]))
+ //~ ? $_GET['startdate'] : "";
+
+ //~ $enddate = (array_key_exists('enddate', $_GET) && isset($_GET['enddate']) &&
+ //~ preg_match(DATE_REGEX, $_GET['enddate'], $m) !== false &&
+ //~ checkdate($m[2], $m[3], $m[1]))
+ //~ ? $_GET['enddate'] : "";
+
+ $username = (array_key_exists('username', $_GET) && !empty(str_replace("%", "", trim($_GET['username']))))
+ ? str_replace("%", "", trim($_GET['username'])) : "";
+ $username_enc = (!empty($username)) ? htmlspecialchars($username, ENT_QUOTES, 'UTF-8') : "";
+
+ $billaction = (array_key_exists('billaction', $_GET) && isset($_GET['billaction']) &&
+ in_array($_GET['billaction'], array_slice($valid_billactions, 1))) // avoid inserting "Any" in the SQL query
+ ? $_GET['billaction'] : "";
+ $billaction_enc = (!empty($billaction)) ? htmlspecialchars($billaction, ENT_QUOTES, 'UTF-8') : "";
+
+ // print HTML prologue
+ $title = t('Intro','billhistoryquery.php');
+ $help = t('helpPage','billhistoryquery');
+
+ print_html_prologue($title, $langCode);
+
+
+ //feed the sidebar variables
+ $billing_date_startdate = $startdate;
+ $billing_date_enddate = $enddate;
+ $billing_history_username = $username;
+ $billing_history_billaction = $billaction;
+
+ include("menu-bill-history.php");
+
+ echo '
';
+ print_title_and_help($title, $help);
+
+ include('library/opendb.php');
+ include('include/management/pages_common.php');
+
+ // preparing the custom query
+
+ $sql_WHERE = array();
+ $partial_query_string_pieces = array();
+
+ foreach ($sqlfields as $sqlfield) {
+ $partial_query_string_pieces[] = sprintf("sqlfields[]=%s", $sqlfield);
+ }
+
+ //~ if (!empty($startdate)) {
+ //~ $sql_WHERE[] = sprintf("AcctStartTime > '%s'", $dbSocket->escapeSimple($startdate));
+ //~ $partial_query_string_pieces[] = sprintf("startdate=%s", $startdate);
+ //~ }
+
+ //~ if (!empty($startdate)) {
+ //~ $sql_WHERE[] = sprintf("AcctStartTime < '%s'", $dbSocket->escapeSimple($enddate));
+ //~ $partial_query_string_pieces[] = sprintf("enddate=%s", $enddate);
+ //~ }
+
+ if (!empty($username)) {
+ $sql_WHERE[] = sprintf("username LIKE '%s%%'", $dbSocket->escapeSimple($username));
+ $partial_query_string_pieces[] = sprintf("username=%s", $username_enc);
+ }
+
+ if (!empty($billaction)) {
+ $sql_WHERE[] = sprintf("billaction LIKE '%s%%'", $dbSocket->escapeSimple($billaction));
+ $partial_query_string_pieces[] = sprintf("billaction=%s", $billaction_enc);
+ }
+
+ // executing the custom query
+
+ $sql = sprintf("SELECT %s FROM %s", implode(", ", $sqlfields), $configValues['CONFIG_DB_TBL_DALOBILLINGHISTORY']);
+
+ if (count($sql_WHERE) > 0) {
+ $sql .= " WHERE " . implode(" AND ", $sql_WHERE);
+ }
+
+ $res = $dbSocket->query($sql);
+ $logDebugSQL .= "$sql;\n";
+
+ $numrows = $res->numRows();
+
+ if ($numrows > 0) {
+ /* START - Related to pages_numbering.php */
+
+ // when $numrows is set, $maxPage is calculated inside this include file
+ include('include/management/pages_numbering.php'); // must be included after opendb because it needs to read
+ // the CONFIG_IFACE_TABLES_LISTING variable from the config file
+
+ // here we decide if page numbers should be shown
+ $drawNumberLinks = strtolower($configValues['CONFIG_IFACE_TABLES_LISTING_NUM']) == "yes" && $maxPage > 1;
+
+ $sql .= sprintf(" ORDER BY %s %s LIMIT %s, %s", $orderBy, $orderType, $offset, $rowsPerPage);
+ $res = $dbSocket->query($sql);
+ $logDebugSQL .= "$sql;\n";
+
+ $per_page_numrows = $res->numRows();
+
+ // the partial query is built starting from user input
+ // and for being passed to setupNumbering and setupLinks functions
+ $partial_query_string = (count($partial_query_string_pieces) > 0)
+ ? "&" . implode("&", $partial_query_string_pieces) : "";
+
+ echo '
'
+ . '';
+
+ // page numbers are shown only if there is more than one page
+ if ($drawNumberLinks) {
+ echo '';
+ printf('| go to page: ', $colspan);
+ setupNumbering($numrows, $rowsPerPage, $pageNum, $orderBy, $orderType, $partial_query_string);
+ echo ' | ' . '
';
+ }
+
+ // second line of table header
+ echo "";
+ printTableHead($cols, $orderBy, $orderType, $partial_query_string);
+ echo "
";
+
+ echo ''
+ . '';
+
+ // inserting the values of each field from the database to the table
+ $count = 0;
+ while($row = $res->fetchRow(DB_FETCHMODE_ASSOC)) {
+ printf('', $count);
+ foreach ($sqlfields as $field) {
+ printf("| %s | ", htmlspecialchars($row[$field], ENT_QUOTES, 'UTF-8'));
+ }
+ echo '
';
+ $count++;
+ }
+
+ echo '';
+
+ // tfoot
+ $links = setupLinks_str($pageNum, $maxPage, $orderBy, $orderType, $partial_query_string);
+ printTableFoot($per_page_numrows, $numrows, $colspan, $drawNumberLinks, $links);
+
+ echo '
';
+
+ } else {
+ $failureMsg = "Nothing to display";
+ include_once("include/management/actionMessages.php");
+ }
+
+ include('library/closedb.php');
+
+ include('include/config/logging.php');
+ print_footer_and_html_epilogue();
?>
-
-
-
-
-
-
-
-
-
-