File: /home/awaldron/www/archive/demo/admin/employee_list.php
<?php
session_start();
include("../_functions.php");
dbconnect();
if (!is_logged()) auto_login();
echo "<html>\n";
echo "<head>\n";
echo "<title>".COMPANY_NAME." : Manage Employees</title>\n";
echo "</head>\n";
echo "<link rel=\"stylesheet\" type=\"text/css\" href=\"../default.css\">\n";
echo "<body style=\"margin:15px;\">\n";
if (!admin_panel($_SESSION["auth_user"])) {
echo "<br><br><br><br>".error("You must be logged in to access the administration panel!");
} else {
if (isset($_GET["del"])) quickUPDATE("UPDATE tbl_employees SET is_employee=0 WHERE username='".$_GET["del"]."'");
if (isset($_GET["res"])) quickUPDATE("UPDATE tbl_employees SET is_employee=1 WHERE username='".$_GET["res"]."'");
echo "<P><img src=\"/gui/icons/cog.gif\" align=\"left\">\n";
echo "<div class=\"headline\">Manage Employees";
if (isset($_GET["id"])) {
if ($_GET["id"] == "x") echo " : Deleted Employees";
else echo " : ".quickSQL("SELECT emp_type FROM tbl_emp_types WHERE emp_type_id=".$_GET["id"]);
} else if (isset($_GET["gid"])) {
echo " : ".quickSQL("SELECT group_name FROM tbl_groups WHERE group_id=".$_GET["gid"]);
}
echo "</div>\n";
echo "<center><br><br><br><b>Jump to: </b>";
for ($i="A"; $i <= "Z"; $i++) {
if (strlen($i) == 1) echo "<a href=\"employee_list.php?".(isset($_GET["id"])?"id=".$_GET["id"]."&":"").(isset($_GET["gid"])?"gid=".$_GET["gid"]."&":"")."tab=".$i."\">".$i."</a> | ";
} echo "<a href=\"employee_list.php?".(isset($_GET["id"])?"id=".$_GET["id"]."&":"").(isset($_GET["gid"])?"gid=".$_GET["gid"]."&":"")."tab=all\">All</a></center>";
echo "<br><br><br><table class=\"textdn\" border=0 cellspacing=1 cellpadding=3 width=100% bgcolor=\"#".COLOR_TBAR."\">\n";
echo "<tr class=\"header\"><td>Name</td><td>Title</td><td>Group</td><td>Manager</td><td>Actions</td></tr>\n";
$sql = "SELECT * FROM tbl_employees,tbl_group_user,tbl_groups WHERE tbl_employees.acct_confirmed=1 AND ";
if (isset($_GET["id"])) {
if ($_GET["id"] == "x") $sql .= "tbl_employees.is_employee=0 AND ";
else $sql .= "tbl_employees.emp_type_id=".$_GET["id"]." AND tbl_employees.is_employee=1 AND ";
}
if (!isset($_GET["id"])) $sql .= "tbl_employees.is_employee=1 AND ";
$sql .= "tbl_group_user.username=tbl_employees.username AND tbl_group_user.group_id=tbl_groups.group_id ";
if (isset($_GET["gid"])) $sql .= "AND tbl_groups.group_id=".$_GET["gid"]." ";
if (isset($_GET["tab"])) {
if ($_GET["tab"] == "all") $sql .= "";
else $sql .= "AND tbl_employees.lname LIKE '".$_GET["tab"]."%' ";
}
$sql .= "ORDER BY tbl_employees.lname ASC";;
$res = mysql_query($sql);
for ($i=0; $i < mysql_num_rows($res); $i++) {
$row = mysql_fetch_array($res);
$photo = "../gui/photos/th_".$row["username"].".jpg";
if (!file_exists($photo)) $photo = "../gui/photos/th_nophoto.jpg";
echo "<tr".($i%2==0?" bgcolor=#FFFFFF":" bgcolor=#EEEEEE").">\n";
echo " <td><a href=\"/profile.php?u=".$row["username"]."\" target=\"new\">".$row["lname"].", ".$row["fname"]."</a></td>\n";
echo " <td>".$row["title"]."</td>\n";
echo " <td>".$row["group_name"]."</td>\n";
echo " <td>".get_user($row["manager"],"fullname")."</td>\n";
if ($_GET["id"] == "x") echo " <td><a href=\"/profile.php?u=".$row["username"]."\" target=\"new\">View</a> | <a href=\"employee_edit.php?u=".$row["username"]."\">Edit</a> | <a href=\"employee_list.php?id=".$_GET["id"]."&tab=".$_GET["tab"]."&res=".$row["username"]."\">Restore</a>\n";
else echo " <td><a href=\"/profile.php?u=".$row["username"]."\" target=\"new\">View</a> | <a href=\"employee_edit.php?u=".$row["username"]."\">Edit</a> | <a href=\"employee_list.php?".(isset($_GET["id"])?"id=".$_GET["id"]."&":"").(isset($_GET["gid"])?"gid=".$_GET["gid"]."&":"")."tab=".$_GET["tab"]."&del=".$row["username"]."\">Delete</a>\n";
echo "</tr>\n"; $j=$i;
}
echo "</table>\n";
echo "<br><br><br><br>\n";
echo "<center>Powered by <a href=\"http://www.intrabreeze.com\">IntraBreeze</a> © 2005 IntraBreeze, LLC</center>\n";
}
echo "</body>\n</html>\n";
?>