<?php

// holiday_approve.php -

//

// SiT (Support Incident Tracker) - Support call tracking system

// Copyright (C) 2000-2009 Salford Software Ltd. and Contributors

//

// This software may be used and distributed according to the terms

// of the GNU General Public License, incorporated herein by reference.

//

// Author: Ivan Lucas <ivanlucas[at]users.sourceforge.net>

$permission = 50; // Approve Holiday

require ('core.php');

require (APPLICATION_LIBPATH . 'functions.inc.php');

$title = $strApproveHolidays;

// This page requires authentication

require (APPLICATION_LIBPATH . 'auth.inc.php');

// External variables

$approve = $_REQUEST['approve'];

$startdate = cleanvar($_REQUEST['startdate']);

$type = cleanvar($_REQUEST['type']);

$user = cleanvar($_REQUEST['user']);

$length = cleanvar($_REQUEST['length']);

$view = cleanvar($_REQUEST['view']);

// there is an existing booking so alter it

switch (strtolower($approve))

{

case 'true':

$sql = "UPDATE `{$dbHolidays}` SET approved='".HOL_APPROVAL_GRANTED."' ";

break;

case 'false':

$sql = "UPDATE `{$dbHolidays}` SET approved='".HOL_APPROVAL_DENIED."' ";

break;

case 'free':

$sql = "UPDATE `{$dbHolidays}` SET approved='".HOL_APPROVAL_GRANTED."', type='".HOL_FREE."' ";

break;

}

$sql .= "WHERE approvedby='$sit[2]' AND approved=".HOL_APPROVAL_NONE." ";

if ($user != 'all')

{

$sql .= "AND userid='$user' ";

}

if ($startdate != 'all')

{

$sql.="AND `date` = '$startdate' AND type='$type' AND length='$length'";

}

$result = mysql_query($sql);

// echo $sql;

if (mysql_error()) trigger_error(mysql_error(),E_USER_ERROR);

// Don't send email when approving 'all' to avoid an error message

if ($user != 'all')

{

$bodytext = "Message from {$CONFIG['application_shortname']}: ".user_realname($sit[2])." has ";

if ($approve == 'FALSE') $bodytext.="rejected";

else $bodytext.="approved";

$bodytext.=" your request for ";

if ($startdate == 'all') $bodytext .= "all days requested\n\n";

else

{

$bodytext .= "the ";

$bodytext .= date('l j F Y',mysql2date($startdate));

$bodytext .= "\n";

}

$email_from = user_email($sit[2]);

$email_to = user_email($user);

$email_subject = "Re: {$CONFIG['application_shortname']}: Holiday Approval Request";

$rtnvalue = send_email($email_to, $email_from, $email_subject, $bodytext);

// FIXME this should use triggers

}

//if ($rtnvalue===TRUE) echo "<p align='center'>".user_realname($user)." has been notified of your decision</p>";

//else echo "<p class='error'>There was a problem sending your notification</p>";

plugin_do('holiday_ack');

if (mysql_error()) trigger_error("MySQL Query Error ".mysql_error(), E_USER_ERROR);

header("Location: holiday_request.php?user=$view&mode=approval");

exit;

?>