global $username;

global $password;

$passwordhash=hash('sha1',"$password");

$result=mysql_query("select user_password_hash from UserAccount where user_name=\"$username\"");

$row=mysql_fetch_row($result);

if ($row[0]==$passwordhash)

return 1;

else

return 0;

global $object_data; //object values from database.

global $name; //$_POST['name']

global $object_id; //$object_id is set after a successful object lookup

global $object_name; //used to lookup master object

global $master_object_id; //$master_object_id is set after a successfull master object lookup (ie, C6100 chassis)

global $master_object_name; //used for master object update where the name ties the object to the master object (ie, r5288 is tied to the master object name "r5285 r5286 r5287 r5288")

global $unique_value;

global $attribute_unique_id;

// select RackObject.id,RackObject.name from RackObject,AttributeValue where RackObject.id=AttributeValue.object_id AND AttributeValue.attr_id=10011 AND AttributeValue.string_value="00:26:6C:F2:56:D4"

// select RackObject.id,RackObject.name from RackObject where RackObject.name="r5288";

//if $unique_value posted

// lookup object by unique

// if id returned

// if posted name exists in another object

// exit

// ok to update

// else lookup by name

// if id returned

// lookup unique by id

// if unique NULL

// ok to update

// else

// unique different, cannot update

// if object found

// lookup master object

if (isset($unique_value)) {

$result_by_unique=mysql_query("select RackObject.id,RackObject.name,RackObject.label,RackObject.barcode,RackObject.objtype_id,RackObject.asset_no,RackObject.has_problems,RackObject.comment from RackObject,AttributeValue where RackObject.id=AttributeValue.object_id AND AttributeValue.attr_id=$attribute_unique_id AND AttributeValue.string_value=\"$unique_value\"");

$row_by_unique=mysql_fetch_assoc($result_by_unique); //***copied to $object_data[] global***

if (isset($row_by_unique['id'])) { //if object found with unique id

$result_by_name=mysql_query("select id from RackObject where name=\"$name\""); //lookup object by posted name

$row_by_name=mysql_fetch_assoc($result_by_name);

if (isset($row_by_name['id']) && $row_by_name['id']!=$row_by_unique['id']) //if there is another record with that name

exit("duplicate record with that name"); //exit

$object_id=$row_by_unique['id'];

$object_name=$row_by_unique['name'];

$object_data=$row_by_unique; //make a copy of the object associative array for update() to use later

echo "found id,name by mac lookup: $row_by_unique[id] | $row_by_unique[name]\n";

} else {

$result_by_name=mysql_query("select RackObject.id,RackObject.name,RackObject.label,RackObject.barcode,RackObject.objtype_id,RackObject.asset_no,RackObject.has_problems,RackObject.comment from RackObject where RackObject.name=\"$name\"");

$row_by_name=mysql_fetch_assoc($result_by_name);

if (isset($row_by_name['id'])) {

echo "found id,name by name lookup: $row_by_name[id] | $row_by_name[name]\n";

$result_by_unique=mysql_query("select RackObject.id,RackObject.name,AttributeValue.string_value from RackObject,AttributeValue where AttributeValue.attr_id=$attribute_unique_id AND RackObject.id=AttributeValue.object_id And RackObject.name=\"$name\"");

$row_by_unique=mysql_fetch_row($result_by_unique);

if (!isset($row_by_unique[0])) { //ok to update if unique identifier is missing from AttributeValue. ***no unique identifier in AttributeValue will return an empty set.***

$object_id=$row_by_name['id'];

$object_name=$row_by_name['name'];

$object_data=$row_by_name; //make a copy of the object associative array for update() to use later

echo "mac NULL. ok to update\n";

} else {

echo "cannot update. different mac\n";

}

}

}

}

//Look for Master Object id and name

if (isset($object_id)) {

$result_like_name=mysql_query("select id, name from RackObject where name like \"$object_name %\" OR name like \"% $object_name %\" OR name like \"% $object_name\"");

$row_like_name=mysql_fetch_assoc($result_like_name);

$master_object_id=$row_like_name['id'];

$master_object_name=$row_like_name['name'];

echo "found master object_id: $master_object_id";

}

global $username;

global $object_data;

global $post_object;

global $attribute_id; //Attribute id map

$result_attributes_stored=mysql_query("select attr_id,string_value,uint_value,float_value from AttributeValue where object_id=$object_id");

while($row=mysql_fetch_row($result_attributes_stored)) {

if (isset($row[1]))

$attributes_stored["$row[0]"]=$row[1]; //build index of stored attribute values, merging types string, uint, and float

elseif (isset($row[2]))

$attributes_stored["$row[0]"]=$row[2];

elseif (isset($row[3]))

$attributes_stored["$row[0]"]=$row[3];

}

//+---------+-------------------+------------+-------------+

//| attr_id | string_value | uint_value | float_value |

//+---------+-------------------+------------+-------------+

//| 1 | 125PNM1 | NULL | NULL |

//| 2 | NULL | 0 | NULL |

//| 4 | NULL | 0 | NULL |

//| 14 | Mark Brice | NULL | NULL |

//| 17 | NULL | 98994 | NULL |

//| 18 | NULL | 2930 | NULL |

//| 22 | 2/2/13 | NULL | NULL |

//| 10011 | 00:26:6C:F2:56:D4 | NULL | NULL |

//+---------+-------------------+------------+-------------+

$result_attribute_type=mysql_query("select Attribute.id,Attribute.type from Attribute,AttributeMap where AttributeMap.objtype_id=4 AND AttributeMap.attr_id=Attribute.id AND (Attribute.type=\"string\" OR Attribute.type=\"uint\")");

while($row=mysql_fetch_row($result_attribute_type))

$attribute_type["$row[0]"]=$row[1]; //build *attribute type* lookup map. used when we update AttributeValue

//+-------+--------+

//| id | type |

//+-------+--------+

//| 1 | string |

//| 14 | string |

//| 17 | uint |

//| 18 | uint |

//| 20 | string |

//| 21 | string |

//| 22 | string |

//| 24 | string |

//| 25 | string |

//| 10001 | string |

//| 10011 | string |

//+-------+--------+

//Update RackObject Attributes

//

// for each possible attribute

// if attribute was posted

// if attribute exists in database

// if posted attribute is different from attribute in database

// if attribute type == string

// update string_value of AttributeValue

// elseif attribute type == uint

// update uint_value of AttributeValue

// elseif attribute type == float

// update float_value of AttributeValue

// else

// if posted attribute is different from attribute in database

// if attribute type == string

// insert string_value of AttributeValue

// elseif attribute type == uint

// insert uint_value of AttributeValue

// elseif attribute type == float

// insert float_value of AttributeValue

//

//

//

foreach($attribute_id as $key => $value) { // go through each possible attribute. example: $key:warranty, $value:22

if (isset($_POST[$key])) { // if there is a post value for the attribute

$posted_value=$_POST[$key];

$attr_id=$value; //set the attribute id for lookup

if (isset($attributes_stored[$value])) { // if the valid attribute exists in AttributeValue ie 22 : 12/12/12

if ($_POST[$key]!=$attributes_stored[$value]) { // if the POSTED attribute is not equal to the value stored, update.

echo "value submitted ($_POST[$key]) differs from value stored ($attributes_stored[$value])\n";

//UPDATE ************ mysql update

if ($attribute_type[$attr_id] == "string")

mysql_query("update AttributeValue set string_value=\"$posted_value\" where object_id=$object_id and attr_id=\"$attr_id\"");

else if ($attribute_type[$attr_id] == "uint")

mysql_query("update AttributeValue set uint_value=$posted_value where object_id=$object_id and attr_id=\"$attr_id\"");

else if ($attribute_type[$attr_id] == "float")

mysql_query("update AttributeValue set float_value=$posted_value where object_id=$object_id and attr_id=\"$attr_id\"");

}

}

else { // valid attribute is not stored, we'll need to add a row to AttributeValue

echo "value submitted ($_POST[$key]) differs from value stored (NULL)\n";

//INSERT************ mysql insert

if ($attribute_type[$attr_id] == "string")

mysql_query("insert into AttributeValue (object_id,attr_id,string_value) values($object_id,$attr_id,\"$posted_value\")");

else if ($attribute_type[$attr_id] == "uint")

mysql_query("insert into AttributeValue (object_id,attr_id,uint_value) values($object_id,$attr_id,$posted_value)");

else if ($attribute_type[$attr_id] == "float")

mysql_query("insert into AttributeValue (object_id,attr_id,float_value) values($object_id,$attr_id,$posted_value)");

}

}

}

//Update RackObject and RackObjectHistory

//for each $object_data

// if $insert_labels string does not exist

// add first label to $insert_labels string

// add first values to $insert_values string

// elseif database value exists && post value exists

// add labels to $insert_labels string

// if post value exists

// if database value differs from post value

// add post value to $insert_values string

// else

// add database value to $insert_values string

// else

// add database value to $insert_values string

// if $update_values string does not exist && post value exists

// if post value differs from database value

// add first value to $update_values

// elseif posted value exists

// if posted value differs from database value

// add posted value to $update_values string

//

//RackObject update: update RackObject set label="testing1" where id=1164

//RackObjectHistory insert: insert into RackObjectHistory (id,name,label,objtype_id,has_problems,comment,user_name) values(1164,"r5288","testing1","4","no","","autoupdate")

foreach($object_data as $key => $value) {

if (!isset($insert_labels)) {

$insert_labels=$key; //first run will see object id, which is never posted

$insert_values=$value;

}

elseif (isset($value) || isset($post_object[$key])) {

$insert_labels=$insert_labels.",".$key;

if (isset($post_object[$key])) {

if ($value!=$post_object[$key])

$insert_values=$insert_values.",\"$post_object[$key]\"";

else

$insert_values=$insert_values.",\"$value\"";

}

else

$insert_values=$insert_values.",\"$value\"";

}

if (!isset($update_values) && isset($post_object[$key])) {

if ($post_object[$key]!=$value)

$update_values="$key=\"$post_object[$key]\"";

}

elseif (isset($post_object[$key])) {

if ($post_object[$key]!=$value)

$update_values=$update_values.", $key=\"$post_object[$key]\"";

}

}

if (isset($update_values)) {

$RackObject_statement="update RackObject set ".$update_values." where id=$object_id";

$RackObjectHistory_statement="insert into RackObjectHistory ($insert_labels,user_name) values($insert_values,\"$username\")\n";

mysql_query("$RackObject_statement");

mysql_query("$RackObjectHistory_statement");

echo "RackObject statement: $RackObject_statement\n";

echo "RackObjectHistory statement: $RackObjectHistory_statement\n";

}

global $master_object_name;

global $object_name;

global $name;

if ($name!=$object_name) {

$master_object_name_new=preg_replace("/$object_name/",$name,$master_object_name);

//UPDATE ************ mysql update

$master_object_update_query="update RackObject set name=\"".$master_object_name_new."\" where id=".$master_object_id;

mysql_query("$master_object_update_query");

}