<?php
session_start();
include "../../bossflex/Helpers/Reject.php";
Reject::permission($_SESSION['bfUser']);
include "../../bossflex/DB/Models/BossFlexEmployee.php";
include "../../bossflex/DB/Models/Employee.php";
include "../../bossflex/DB/Models/User.php";
include "../../bossflex/DB/Models/Company.php";
include "../../bossflex/DB/Models/Ticket.php";
include "../../bossflex/Helpers/BFPage.php";
include "../../bossflex/Helpers/Material.php";
$bfEmp = BossFlexEmployee::getEmployeeByBFID($_SESSION['bfUser']['EID']);
$User = User::getUserByUID($_SESSION['bfUser']['UID']);
$tickets = Ticket::assignedTicketList($bfEmp);
$ticketData = Ticket::numTicketsPerDayLastMonth();
$error = false;
$success = false;
if (isset($_GET['s'])) {
$success = urldecode($_GET['s']);
}
//Handle Profile Changes
$first = $_POST['first'];
$last = $_POST['last'];
$email = $_POST['email'];
if (isset($first) && isset($last) && isset($email)) {
$User->setEmail($email);
$User->saveToDB();
$bfEmp->setFname($first);
$bfEmp->setLname($last);
$bfEmp->saveToDB();
session_start();
$u = $_SESSION['u'];
$v = $_SESSION['v'];
$Fname = $_POST['Fname'];
$Lname = $_POST['Lname'];
$PhoneNum = $_POST['PhoneNum'];
$EID = $_POST['EID'];
$CID = $_POST['CID'];
if (!isset($Fname) || !isset($Lname) || !isset($PhoneNum) || !isset($EID)) {
header('Location:https://' . $_SESSION['redir'] . "?result=1&u=" . $u . "&v=" . $v);
}
if ($CID == 1) {
include "DB/Models/BossFlexEmployee.php";
/** @var BossFlexEmployee $emp */
$emp = BossFlexEmployee::getEmployeeByBFID($EID);
if ($emp->getBFID() == $EID && $emp->getFname() == $Fname && $emp->getLname() == $Lname && $emp->getPhoneNum() == $PhoneNum) {
$_SESSION['NewUser'] = serialize($emp);
$_SESSION['BossFlex'] = true;
header('Location:Register.php');
} else {
header('Location:https://' . $_SESSION['redir'] . "?result=2&u=" . $u . "&v=" . $v);
}
} else {
include "DB/Models/Employee.php";
/** @var Employee $emp */
$emp = Employee::getEmployee($EID, $CID);
if ($emp->getEID() == $EID && $emp->getFname() == $Fname && $emp->getLname() == $Lname && $emp->getPhoneNum() == $PhoneNum) {
$_SESSION['NewUser'] = serialize($emp);
header('Location:Register.php');
} else {
$AdminCname = Company::getCompanyByID($_SESSION['admin']['CID'])->getCname();
if (isset($_GET['Email']) || isset($_GET['id'])) {
/** @var User $User */
if (isset($_GET['Email'])) {
$Email = urldecode($_GET['Email']);
$User = User::getUserByEmail($Email);
} else {
$User = User::getUserByEmpInfo($_GET['id'], $_SESSION['admin']['CID']);
}
if (!$User) {
echo "<h3>User does not exist</h3>";
} else {
/** @var Company $Company */
$Company = Company::getCompanyByID($User->getCID());
if ($User->getCID() == 1) {
$Employee = BossFlexEmployee::getEmployeeByBFID($User->getEID());
} else {
$Employee = Employee::getEmployeeByUID($User->getUID());
}
$_SESSION['EditUser'] = serialize($User);
$_SESSION['EditEmployee'] = serialize($Employee);
$newUser = false;
}
}
// If no user is specified, reuse as Add User Form
if ($newUser) {
$User = new User();
$Company = new Company();
$Employee = new Employee();
}
$_SESSION['ver'] = substr(md5(rand()), 0, 15);
$User = new User();
$User->setEmail($_POST["Email"]);
$User->setRoleID($_POST["RoleID"]);
$User->setEID($_POST["EID"]);
if ($_SESSION['admin']['CID'] == 1) {
$User->setCID($_POST['CID']);
} else {
$User->setCID($_SESSION['admin']['CID']);
}
if (!$User->addUser($User)) {
header('Location:https://' . $_SESSION['redir'] . "?result=Error: User with this information already exists");
exit;
}
if ($_SESSION['admin']['CID'] == 1 && $_POST['CID'] == 1) {
include "../../bossflex/DB/Models/BossFlexEmployee.php";
$bfEmp = new BossFlexEmployee();
$bfEmp->setBFID($_POST["EID"]);
$bfEmp->setFname($_POST["Fname"]);
$bfEmp->setLname($_POST["Lname"]);
$bfEmp->setPhoneNum($_POST["PhoneNum"]);
BossFlexEmployee::addEmployee($bfEmp);
include_once "../../bossflex/DB/Models/Company.php";
/** @var Company $Company */
$Company = Company::getCompanyByID($User->getCID());
/** @var User $addedUser */
$addedUser = User::getUserByEmpInfo($_POST["EID"], $_POST["CID"]);
include_once "../../bossflex/Helpers/Email.php";
Email::sendVerificationEmail($addedUser->getEmail(), $bfEmp->getFname(), $Company->getCname(), $addedUser->getUID(), $addedUser->getVarString());
header('Location:https://' . $_SESSION['redir'] . "?result=bossflex User created");
} else {
$Employee = new Employee();
