<?php

/*

**************************************************************************************************************************

** CORAL Licensing Module v. 1.0

**

** Copyright (c) 2010 University of Notre Dame

**

** This file is part of CORAL.

**

** CORAL is free software: you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation, either version 3 of the License, or (at your option) any later version.

**

** CORAL is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for more details.

**

** You should have received a copy of the GNU General Public License along with CORAL. If not, see <http://www.gnu.org/licenses/>.

**

**************************************************************************************************************************

**************************************************************************************************************************

** ajax_processing.php contains processing (adds/updates/deletes) on data sent using ajax from forms and other pages

**

** when ajax_processing.php is called through ajax, 'action' parm is required to dictate which form will be returned

**

**************************************************************************************************************************

*/

include_once 'directory.php';

include_once 'user.php';

switch ($_GET['action']) {

//for document adds or updates - note that actual file is done on form (processing done in uploadDocument)

//this just saves the URL in db

case 'submitDocument':

//if documentID is sent then this is an update

if ((isset($_POST['documentID'])) && ($_POST['documentID'] != '')){

$document = new Document(new NamedArguments(array('primaryKey' => $_POST['documentID'])));

if ((($document->expirationDate == "") || ($document->expirationDate == '0000-00-00')) && ($_POST['archiveInd'] == "1")){

$document->expirationDate = date( 'Y-m-d H:i:s' );

}else if ($_POST['archiveInd'] == "0"){

$document->expirationDate = '';

}

}else{

$document = new Document();

$document->documentID = '';

if ($_POST['archiveInd'] == "1"){

$document->expirationDate = date( 'Y-m-d H:i:s' );

}else{

$document->expirationDate = '';

}

}

//first set effective Date for proper saving

if ((isset($_POST['effectiveDate'])) && ($_POST['effectiveDate'] != '')){

$document->effectiveDate = date("Y-m-d", strtotime($_POST['effectiveDate']));

}else{

$document->effectiveDate= 'null';

}

$document->shortName=$_POST['shortName'];

$document->documentTypeID=$_POST['documentTypeID'];

$document->parentDocumentID=$_POST['parentDocumentID'];

$document->licenseID=$_POST['licenseID'];

$document->documentURL=$_POST['uploadDocument'];

try {

$document->save();

} catch (Exception $e) {

echo $e->POSTMessage();

}

break;

case 'deleteLicense':

//note: does not delete physical documents

$licenseID = $_GET['licenseID'];

$license = new License(new NamedArguments(array('primaryKey' => $licenseID)));

//remove licenses removes all children data as well

try {

$license->removeLicense();

echo "License successfully deleted.";

} catch (Exception $e) {

echo $e->getMessage();

}

break;

//archives (expires) document - defaults to current date/time

case 'archiveDocument':

$document = new Document(new NamedArguments(array('primaryKey' => $_GET['documentID'])));

$document->expirationDate = date( 'Y-m-d H:i:s' );

try {

$document->save();

} catch (Exception $e) {

echo $e->getMessage();

}

break;

//verify that the new document name doesn't have bad characters and the name isn't already being used

case 'checkUploadDocument':

$uploadDocument = $_POST['uploadDocument'];

$document = new Document();

$exists = 0;

if (!is_writable("documents")) {

echo 3;

break;

}

//first check that it doesn't have any offending characters

if ((strpos($uploadDocument,"'") > 0) || (strpos($uploadDocument,'"') > 0) || (strpos($uploadDocument,"&") > 0) || (strpos($uploadDocument,"<") > 0) || (strpos($uploadDocument,">") > 0)){

echo 2;

}else{

//loop through each existing document to verify this name isn't already being used

foreach ($document->allAsArray() as $documentTestArray) {

if (strtoupper($documentTestArray['documentURL']) == strtoupper($uploadDocument)) {

$exists++;

}

}

echo $exists;

}

break;

//performs document upload

case 'uploadDocument':

$documentName = basename($_FILES['myfile']['name']);

$document = new Document();

$exists = 0;

//verify the name isn't already being used

foreach ($document->allAsArray() as $documentTestArray) {

if (strtoupper($documentTestArray['documentURL']) == strtoupper($documentName)) {

$exists++;

}

}

//if match was found

if ($exists == 0){

$target_path = "documents/" . basename($_FILES['myfile']['name']);

//note, echos are meant for debugging only - only file name gets sent back

if(move_uploaded_file($_FILES['myfile']['tmp_name'], $target_path)) {

//set to web rwx, everyone else rw

//this way we can edit the document directly on the server

chmod ($target_path, 0766);

echo "success uploading!";

}else{

header('HTTP/1.1 500 Internal Server Error');

echo "<div id=\"error\">There was a problem saving your file to $target_path.</div>";

}

}

break;

case 'deleteDocument':

//note - does not delete physical document

$document = new Document(new NamedArguments(array('primaryKey' => $_GET['documentID'])));

//delete children sfx providers

$sfxProvider = new SFXProvider();

foreach ($document->getSFXProviders() as $sfxProvider) {

$sfxProvider->delete();

}

//delete children signatures

$signature = new Signature();

foreach ($document->getSignatures() as $signature) {

$signature->delete();

}

try {

$document->delete();

} catch (Exception $e) {

echo $e->getMessage();

}

break;

case 'submitSignature':

//set date for proper saving

if ((isset($_POST['signatureDate'])) && ($_POST['signatureDate'] != '')){

$signatureDate = date("Y-m-d", strtotime($_POST['signatureDate']));

}else{

$signatureDate = "";

}

//if signatureID is sent then this is an update

if ((isset($_POST['signatureID'])) && ($_POST['signatureID'] != '')){

$signature = new Signature(new NamedArguments(array('primaryKey' => $_POST['signatureID'])));

}else{

$signature = new Signature();

$signature->signatureID = '';

}

$signature->signerName = $_POST['signerName'];

$signature->signatureTypeID = $_POST['signatureTypeID'];

$signature->documentID = $_POST['documentID'];

$signature->signatureDate = $signatureDate;

try {

$signature->save();

echo "Document Saved Successfully.";

} catch (Exception $e) {

echo $e->getMessage();

}

break;

case 'deleteSignature':

$signature = new Signature(new NamedArguments(array('primaryKey' => $_GET['signatureID'])));

try {

$signature->delete();

echo "Signature Deleted Successfully.";

} catch (Exception $e) {

echo $e->getMessage();

}

break;

//add/update expression

case 'submitExpression':

//if expressionID is sent then this is an update

if ((isset($_POST['expressionID'])) && ($_POST['expressionID'] != '')){

$expressionID = $_POST['expressionID'];

$expression = new Expression(new NamedArguments(array('primaryKey' => $expressionID)));

}else{

$expression = new Expression();

//default production use (terms tool indicator) to off if this is an add, otherwise we leave it alone

$expression->productionUseInd = 0;

$expression->expressionID = '';

}

$expression->documentText = $_POST['documentText'];

$expression->documentID = $_POST['documentID'];

$expression->expressionTypeID = $_POST['expressionTypeID'];

$expression->productionUseInd = '0';

$expression->simplifiedText = '';

try {

$expression->save();

if (!$expressionID){

$expressionID=$expression->primaryKey;

}

//first remove all qualifiers, then we'll add them back

$expression->removeQualifiers();

foreach (explode(',', $_POST['qualifiers']) as $id){

if ($id){

$expressionQualifierProfile = new ExpressionQualifierProfile();

$expressionQualifierProfile->expressionID = $expressionID;

$expressionQualifierProfile->qualifierID = $id;

$expressionQualifierProfile->save();

}

}

} catch (Exception $e) {

echo $e->getMessage();

}

break;

case 'deleteExpression':

$expression = new Expression(new NamedArguments(array('primaryKey' => $_GET['expressionID'])));

try {

$expression->delete();

echo "Expression Removed Successfully.";

} catch (Exception $e) {

echo $e->getMessage();

}

break;

case 'setProdUse':

$expressionID = $_GET['expressionID'];

$licenseID = $_GET['licenseID'];

$productionUseInd = $_GET['productionUseInd'];

//send email if prod use is being set

if ($productionUseInd == "1"){

$user = new User();

$toList = array();

$toList = $user->getSFXUpdateList();

$license = new License(new NamedArguments(array('primaryKey' => $licenseID)));

$util = new Utility();

$emailMessage = "An expression in the licensing module has been approved for terms tool use.\n";

$emailMessage.= "License: " . $license->shortName . "\n\n";

$emailMessage.= "View License Record: " . $util->getPageURL() . "license.php?licenseID=" . $licenseID;

$email = new Email();

$email->to = implode(", ", $toList);

$email->subject = "Licensing - expression set to production use";

$email->message = $emailMessage;

$email->send();

$response = "Approved for terms tool display.";

}else{

$response = "Removed from terms tool display.";

}

//save it in the expression record

$expression = new Expression(new NamedArguments(array('primaryKey' => $_GET['expressionID'])));

$expression->productionUseInd = $productionUseInd;

try {

$expression->save();

echo $response;

} catch (Exception $e) {

echo $e->getMessage();

}

break;

case 'submitExpressionNote':

//if note id is sent in, this is an update

if ((isset($_POST['expressionNoteID'])) && ($_POST['expressionNoteID'] != '')){

$expressionNote = new ExpressionNote(new NamedArguments(array('primaryKey' => $_POST['expressionNoteID'])));

$expressionNote->note = $_POST['expressionNote'];

$expressionNote->displayOrderSeqNumber = $_POST['displayOrderSeqNumber'];

try {

$expressionNote->save();

echo "Expression Note Updated Successfully.";

} catch (Exception $e) {

echo $e->getMessage();

}

}else{

//adding new

$expression = new Expression(new NamedArguments(array('primaryKey' => $_POST['expressionID'])));

$expressionNote = new ExpressionNote();

$expressionNote->expressionNoteID = '';

$expressionNote->note = $_POST['expressionNote'];

$expressionNote->expressionID = $_POST['expressionID'];

$expressionNote->displayOrderSeqNumber = $expression->getNextExpressionNoteSequence;

try {

$expressionNote->save();

echo "Expression Note Added Successfully.";

} catch (Exception $e) {

echo $e->getMessage();

}

}

break;

//when the arrows for reordering are clicked

case 'reorderExpressionNote':

$expressionNote = new ExpressionNote(new NamedArguments(array('primaryKey' => $_GET['expressionNoteID'])));

echo $expressionNote->reorder($_GET['direction'], $_GET['oldSeq']);

break;

case 'deleteExpressionNote':

$expressionNote = new ExpressionNote(new NamedArguments(array('primaryKey' => $_GET['expressionNoteID'])));

try {

$expressionNote->delete();

echo "Note Removed Successfully.";

} catch (Exception $e) {

echo $e->getMessage();

}

break;

case 'submitSFXProvider':

//if expressionID is sent then this is an update

if ((isset($_POST['providerID'])) && ($_POST['providerID'] != '')){

$sfxProvider = new SFXProvider(new NamedArguments(array('primaryKey' => $_POST['providerID'])));

$sfxProvider->shortName = $_POST['shortName'];

$sfxProvider->documentID = $_POST['documentID'];

}else{

$sfxProvider = new SFXProvider();

$sfxProvider->sfxProviderID = '';

$sfxProvider->shortName = $_POST['shortName'];

$sfxProvider->documentID = $_POST['documentID'];

}

try {

$sfxProvider->save();

} catch (Exception $e) {

echo $e->getMessage();

}

break;

case 'deleteSFXProvider':

$sfxProvider = new SFXProvider(new NamedArguments(array('primaryKey' => $_GET['sfxProviderID'])));

try {

$sfxProvider->delete();

echo "Terms Tool Resource Link successfully deleted";

} catch (Exception $e) {

echo $e->getMessage();

}

break;

case 'submitLicense':

//may have been sent through despite missing license name or provider- do check here to make sure that isn't the case before insert into DB

if ((isset($_POST['shortName'])) && (isset($_POST['organizationName'])) && ($_POST['shortName'] != '') && ($_POST['organizationName'] != '')) {

//if licenseID is sent then this is an update

if ($_POST['licenseID'] <> ""){

//update data

$license = new License(new NamedArguments(array('primaryKey' => $_POST['licenseID'])));

$response = "License Updated Successfully.";

}else{

//add data

$license = new License();

$license->licenseID = '';

$license->createDate = date( 'Y-m-d H:i:s' );

$license->statusID='';

$license->statusDate ='';

$response = "License Added Successfully.<br />Please continue to upload documents and add expressions or emails.";

}

$license->shortName = $_POST['shortName'];

$license->consortiumID = $_POST['consortiumID'];

//this method will save to either organization or provider depending on the settings

//also, if this organization or provider doesn't exist it will create a new org/provider

$license->setOrganization($_POST['organizationID'], $_POST['organizationName']);

//this is the html that will be displayed in the form after submitting.

//this is the only form in which this is done.

try {

$license->save();

if ((isset($_POST['licenseID'])) && $_POST['licenseID'] != ''){

$licenseID = $_POST['licenseID'];

}else{

$licenseID = $license->primaryKey;

}

?>

<table class="thickboxTable" style="background-image:url('images/title.gif');background-repeat:no-repeat;width:260px;">

<tr>

<td colspan='2'><br /><span class='headerText'><?php echo $response; ?></span><br /></td>

</tr>

<tr>

<td colspan='2'><p><a href='#' onclick='window.parent.tb_remove(); window.parent.location=("license.php?licenseID=<?php echo $licenseID; ?>"); return false'>Continue</a></td>

</tr>

</table>

<?php

} catch (Exception $e) {

?>

<table class="thickboxTable" style="background-image:url('images/title.gif');background-repeat:no-repeat;width:260px;">

<tr>

<td colspan='2'><br /><span class='headerText'>SQL Insert Failed. <?php echo $e->getMessage(); ?> Please make sure everything is filled out correctly.</span><br /></td>

</tr>

<tr>

<td colspan='2'><p><a href='#' onclick='window.parent.tb_remove(); return false'>Continue</a></td>

</tr>

</table>

<?php

}

}else{

?>

<table class="thickboxTable" style="background-image:url('images/title.gif');background-repeat:no-repeat;width:260px;">

<tr>

<td colspan='2'><br /><span class='headerText'>SQL Insert Failed. <?php echo $e->getMessage(); ?> Please make sure everything is filled out correctly.</span><br /></td>

</tr>

<tr>

<td colspan='2'><p><a href='#' onclick='window.parent.tb_remove(); return false'>Continue</a></td>

</tr>

</table>

<?php

}

break;

//new consortium being added directly on license form - returns updated drop down list

//used only when licensing inter-op is turned off

case 'addConsortium':

if ((isset($_GET['shortName'])) && ($_GET['shortName'] != '')){

$consortium = new Consortium();

$consortium->consortiumID='';

$consortium->shortName = $_GET['shortName'];

try {

$consortium->save();

} catch (Exception $e) {

echo $e->getMessage();

}

}

echo "<select name='licenseConsortiumID' id='licenseConsortiumID'>";

echo "<option value=''></option>";

$license = new License();

$display = array();

foreach($license->getConsortiumList() as $display) {

if ($_GET['shortName'] == $display['name']){

echo "<option value='" . $display['consortiumID'] . "' selected>" . $display['name'] . "</option>";

}else{

echo "<option value='" . $display['consortiumID'] . "'>" . $display['name'] . "</option>";

}

}

echo "</select>";

break;

case 'addProvider':

if ((isset($_GET['shortName'])) && ($_GET['shortName'] != '')){

$provider = new Provider();

$provider->providerID='';

$provider->shortName = $_GET['shortName'];

try {

$provider->save();

} catch (Exception $e) {

echo $e->getMessage();

}

}

echo "<select name='licenseProviderID' id='licenseProviderID'>";

echo "<option value=''></option>";

$displayArray = array();

$display = array();

$provider = new Provider();

$displayArray = $provider->allAsArray();

foreach($displayArray as $display) {

if ($_GET['shortName'] == $display['shortName']){

echo "<option value='" . $display['providerID'] . "' selected>" . $display['shortName'] . "</option>";

}else{

echo "<option value='" . $display['providerID'] . "'>" . $display['shortName'] . "</option>";

}

}

echo "</select>";

break;

//new doc type being added directly on document form - returns updated drop down list

case 'addDocumentType':

if ((isset($_POST['shortName'])) && ($_POST['shortName'] != '')){

$documentType = new DocumentType();

$documentType->documentTypeID='';

$documentType->shortName = $_POST['shortName'];

try {

$documentType->save();

} catch (Exception $e) {

echo $e->getMessage();

}

}

echo "<select name='documentTypeID' id='documentTypeID'>";

$displayArray = array();

$display = array();

$documentType = new DocumentType();

$displayArray = $documentType->allAsArray();

foreach($displayArray as $display) {

if ($_POST['shortName'] == $display['shortName']){

echo "<option value='" . $display['documentTypeID'] . "' selected>" . $display['shortName'] . "</option>";

}else{

echo "<option value='" . $display['documentTypeID'] . "'>" . $display['shortName'] . "</option>";

}

}

echo "</select>";

break;

//new signature type being added directly on signature form - returns updated drop down list

//no longer used.... must add signature types from admin form

case 'addSignatureType':

if ((isset($_POST['shortName'])) && ($_POST['shortName'] != '')){

$signatureType = new SignatureType();

$signatureType->signatureTypeID='';

$signatureType->shortName = $_POST['shortName'];

try {

$signatureType->save();

} catch (Exception $e) {

echo $e->getMessage();

}

}

echo "<select name='signatureTypeID' id='signatureTypeID'>";

echo "<option value=''></option>";

$displayArray = array();

$display = array();

$signatureType = new SignatureType();

$displayArray = $signatureType->allAsArray();

foreach($displayArray as $display) {

if ($_POST['shortName'] == $display['shortName']){

echo "<option value='" . $display['signatureTypeID'] . "' selected>" . $display['shortName'] . "</option>";

}else{

echo "<option value='" . $display['signatureTypeID'] . "'>" . $display['shortName'] . "</option>";

}

}

echo "</select>";

break;

//new expression type being added directly on expression form - returns updated drop down list

//note default type is 'internal'. this will need to be updated by user in admin if it's decided to be used for display

case 'addExpressionType':

if ((isset($_POST['shortName'])) && ($_POST['shortName'] != '')){

$expressionType = new ExpressionType();

$expressionType->expressionTypeID='';

$expressionType->shortName = $_POST['shortName'];

$expressionType->noteType = 'Internal';

try {

$expressionType->save();

} catch (Exception $e) {

echo $e->getMessage();

}

}

echo "<select name='expressionTypeID' id='expressionTypeID'>";

$displayArray = array();

$display = array();

$expressionType = new ExpressionType();

$displayArray = $expressionType->allAsArray();

foreach($displayArray as $display) {

if ($_POST['shortName'] == $display['shortName']){

echo "<option value='" . $display['expressionTypeID'] . "' selected>" . $display['shortName'] . "</option>";

}else{

echo "<option value='" . $display['expressionTypeID'] . "'>" . $display['shortName'] . "</option>";

}

}

echo "</select>";

break;

//generically adds data for admin screen

//error is echoed back

case 'addData':

$className = $_POST['tableName'];

$shortName = $_POST['shortName'];

$instance = new $className();

$instance->shortName = $shortName;

echo "<font color='red'>";

try {

$instance->save();

} catch (Exception $e) {

echo $e->POSTMessage();

}

echo "</font>";

break;

//generically updates data for admin screen

//error is echoed back

case 'updateData':

$className = $_POST['tableName'];

$updateID = $_POST['updateID'];

$shortName = $_POST['shortName'];

$instance = new $className(new NamedArguments(array('primaryKey' => $updateID)));

$instance->shortName = $shortName;

try {

$instance->save();

} catch (Exception $e) {

echo $e->POSTMessage();

}

break;

//generically deletes data for admin screen

//error is echoed back

case 'deleteData':

$className = $_GET['tableName'];

$deleteID = $_GET['deleteID'];

//since we're using MyISAM which doesn't support FKs, must verify that there are no records of children or they could disappear

$instance = new $className(new NamedArguments(array('primaryKey' => $deleteID)));

$numberOfChildren = $instance->getNumberOfChildren();

echo "<font color='red'>";

if ($numberOfChildren > 0){

//print out a friendly message...

echo "Unable to delete - this " . strtolower(preg_replace("/[A-Z]/", " \\0" , lcfirst($className))) . " is in use. Please make sure no licenses are set up with this information.";

}else{

try {

$instance->delete();

} catch (Exception $e) {

//print out a friendly message...

echo "Unable to delete. Please make sure no licenses are set up with this information.";

}

}

echo "</font>";

break;

case 'submitExpressionType':

if ((isset($_POST['expressionTypeID'])) && ($_POST['expressionTypeID'] != '')){

$expressionType = new ExpressionType(new NamedArguments(array('primaryKey' => $_POST['expressionTypeID'])));

}else{

$expressionType = new ExpressionType();

$expressionType->expressionTypeID = '';

}

$expressionType->shortName = $_POST['shortName'];

$expressionType->noteType = $_POST['noteType'];

try {

$expressionType->save();

} catch (Exception $e) {

echo $e->POSTMessage();

}

break;

case 'submitCalendarSettings':

if ((isset($_POST['calendarSettingsID'])) && ($_POST['calendarSettingsID'] != '')){

$calendarSettings = new CalendarSettings(new NamedArguments(array('primaryKey' => $_POST['calendarSettingsID'])));

}else{

$calendarSettings = new CalendarSettings();

$calendarSettings->calendarSettingsID = '';

}

if (is_array($_POST['value'])) {

$calendarSettings->value = implode(',',$_POST['value']);

} else {

$calendarSettings->value = $_POST['value'];

}

try {

$calendarSettings->save();

} catch (Exception $e) {

echo $e->POSTMessage();

}

break;

case 'submitQualifier':

if ((isset($_POST['qualifierID'])) && ($_POST['qualifierID'] != '')){

$qualifier = new Qualifier(new NamedArguments(array('primaryKey' => $_POST['qualifierID'])));

}else{

$qualifier = new Qualifier();

$qualifier->qualifierID = '';

}

$qualifier->expressionTypeID = $_POST['expressionTypeID'];

$qualifier->shortName = $_POST['shortName'];

try {

$qualifier->save();

} catch (Exception $e) {

echo $e->POSTMessage();

}

break;

case 'submitUserData':

if ($_POST['orgLoginID']){

$user = new User(new NamedArguments(array('primaryKey' => $_POST['orgLoginID'])));

}else{

$user = new User();

}

$user->loginID = $_POST['loginID'];

$user->firstName = $_POST['firstName'];

$user->lastName = $_POST['lastName'];

$user->privilegeID = $_POST['privilegeID'];

$user->emailAddressForTermsTool = $_POST['emailAddressForTermsTool'];

try {

$user->save();

} catch (Exception $e) {

echo $e->POSTMessage();

}

break;

case 'deleteUser':

$loginID = $_GET['loginID'];

$user = new User(new NamedArguments(array('primaryKey' => $loginID)));

echo "<font color='red'>";

try {

$user->delete();

} catch (Exception $e) {

echo $e->getMessage();

}

echo "</font>";

break;

case 'deleteExpressionType':

$expressionTypeID = $_GET['expressionTypeID'];

$expressionType = new ExpressionType(new NamedArguments(array('primaryKey' => $expressionTypeID)));

echo "<font color='red'>";

try {

$expressionType->removeExpressionType();

} catch (Exception $e) {

echo $e->getMessage();

}

echo "</font>";

break;

//verify file name for uploaded attachments (4th tab) aren't already being used

case 'checkUploadAttachment':

$uploadAttachment = $_POST['uploadAttachment'];

$attachmentFile = new AttachmentFile();

$exists = 0;

if (!is_writable("attachments")) {

echo 3;

break;

}

foreach ($attachmentFile->allAsArray() as $attachmentTestArray) {

if (strtoupper($attachmentTestArray['attachmentURL']) == strtoupper($uploadAttachment)) {

$exists++;

}

}

echo $exists;

break;

//perform actual upload for attachments (4th tab)

case 'uploadAttachment':

$documentName = basename($_FILES['myfile']['name']);

$target_path = "attachments/" . basename($_FILES['myfile']['name']);

$attachmentFile = new AttachmentFile();

$exists = 0;

//loop through existing log attachments to verify that this name isn't already taken

foreach ($attachmentFile->allAsArray() as $attachmentTestArray) {

if (strtoupper($attachmentTestArray['attachmentURL']) == strtoupper($documentName)) {

$exists++;

}

}

//if match was not found

//note, echoes are not being sent anywhere

if ($exists == 0){

if(move_uploaded_file($_FILES['myfile']['tmp_name'], $target_path)) {

//set to web rwx, everyone else rw

//this way we can edit the document directly on the server

chmod ($target_path, 0766);

echo "success uploading!";

}else{

header('HTTP/1.1 500 Internal Server Error');

echo "<div id=\"error\">There was a problem saving your file to $target_path.</div>";

}

}

break;

//add/update for attachment - 4th tab

case 'submitAttachment':

//if attachmentID is sent then this is an update

if ((isset($_POST['attachmentID'])) && ($_POST['attachmentID'] <> "")){

$attachment = new Attachment(new NamedArguments(array('primaryKey' => $_POST['attachmentID'])));

}else{

$attachment = new Attachment();

$attachment->attachmentID = '';

}

if ((isset($_POST['sentDate'])) && ($_POST['sentDate'] <> "")){

$attachment->sentDate = date("Y-m-d", strtotime($_POST['sentDate']));

}else{

$attachment->sentDate = "";

}

$attachment->attachmentText = $_POST['attachmentText'];

$attachment->licenseID = $_POST['licenseID'];

try {

$attachment->save();

echo $attachment->primaryKey;

} catch (Exception $e) {

echo $e->getMessage();

}

break;

//adding the attachment file to the db - saves the URL to it only

case 'addAttachmentFile':