<?php
    include('externalpages'.DS.'ams'.DS.'config.php');
    define( '_JEXEC', 1 );
    define('JPATH_BASE', dirname(__FILE__) );
    define( 'DS', DIRECTORY_SEPARATOR );
    require_once ( JPATH_BASE .DS.'includes'.DS.'defines.php' );
    require_once ( JPATH_BASE .DS.'includes'.DS.'framework.php' );
    require_once ( JPATH_BASE .DS.'libraries'.DS.'joomla'.DS.'factory.php' );

    $mainframe =& JFactory::getApplication('site');
    $user =& JFactory::getUser(); 
    
                $db_connection=mysql_connect($host, $username, $password, $db_name);
                if (!$db_connection) {
                    die("<br><b>Database Error:</b> Could not connected. Try again later.<br>");
                    exit;
                }
                @mysql_select_db($db_name, $db_connection) or die("Unable to select database.");
                mysql_query("SET NAMES 'utf8'", $db_connection);      
    
    $checkUserQuery = "SELECT * FROM db_manager WHERE userId='".$user->id."'";
    $checkUserResult = mysql_query($checkUserQuery);
    
    
    if ( mysql_num_rows($checkUserResult) > 0 ) { 
     
        $checkUserRow = mysql_fetch_array($checkUserResult);  
         
        $departmentQuery = "SELECT * FROM department WHERE id='".$checkUserRow['departmentId']."'"; 
        $departmentResult = mysql_query($departmentQuery);
        $departmentRow = mysql_fetch_array($departmentResult);
        
        $_SESSION['departmentId'] = $departmentRow['id'];
        
        if( !isset($_POST['searchBtn']) ) {
            // Search Form
            ?>
             <br>
                <a href="?option=com_content&view=article&id=72"><b>[ << Πίσω]</b></a>  
              
                <form method="post" action="?option=com_content&view=article&id=73">
                    <table align="center" cellspacing="7">
                        <tr>
                            <th bgcolor="#B9EEAC" colspan="3" align="left"> <b>Εύρεση Αίτησης</b>  </th>  
                        </tr>
                        <tr> &nbsp;</tr> 
                        <tr>
                            <td>Εύρεση μέσω <select name="searchType">
                                                    <option name="username" value="username">Όνομα Χρήστη *</option>
                                                    <option name="email" value="email">Email</option>
                                                    <option name="userId" value="userId">Κωδικό Χρήστη (id)</option>
                                               </select> 
                            </td>
                            <td><input type="text" name="textSearch" size="40" />
                            </td>
                            <td>
                      <!--      <input type="submit" value="Αναζήτηση" name="searchBtn" disabled="disabled"> -->
							    <input type="submit" value="Αναζήτηση" name="searchBtn">
                            </td>
                        </tr>
                        <tr><td colspan="3"> *Το Όνομα Χρήστη αναφέρεται στο username της σύνδεσης του χρήστη. <br>
                                             <font color="red">**Για λόγους ασφαλείας, μέχρι το πέρας της αξιολόγησης η συγκεκριμένη ενέργεια
                                                έχει απενεργοποιηθεί.</font>     
                            </td></tr>
                        <tr>
                            <th bgcolor="#B9EEAC" colspan="3" align="left">&nbsp;</th>  
                        </tr>
                    </table>
                </form>
            <?php  
            // End Search Form 
        }
        
        // If manager clicked on the search button, then user's application will be search     
        if( isset($_POST['searchBtn']) ) {
        
            if( $_POST['searchType'] == "username" ) {
             
                $criteria = "username='".$_POST['textSearch']."'";
            }
            
            if( $_POST['searchType'] == "email" ) {
                
                $criteria = "email='".$_POST['textSearch']."'";                         
            }
            
            if( $_POST['searchType'] == "userId" ) {
                
                $criteria = "id='".$_POST['textSearch']."'";
            }

                $userQuery = "SELECT * FROM `jos_users` WHERE $criteria";   
                $userResult = mysql_query($userQuery);
                $userRow = mysql_fetch_array($userResult);
                
                $appQuery = "SELECT DISTINCT departmentId,sectionId,academicYear,submited,userId 
                        FROM application_form 
                        WHERE userId='".$userRow['id']."' AND submited='1' AND departmentId='".$departmentRow['id']."'";     
                $appResult = mysql_query($appQuery);
                
            if( mysql_numrows($appResult) > 0 ) {
            
                    $appRow = mysql_fetch_array($appResult);
                       
                    echo "<br><a href='javascript:history.go(-1)'><b>[ << Πίσω]</b></a><br>"; 
                    
                    echo "<br>Για τον χρήστη <b>".$userRow['name']." ".$userRow['surname']." (".$userRow['username'].")</b> 
                          βρέθηκαν ".mysql_numrows($appResult)." αιτήσεις στο Τμήμα ".$departmentRow['departmentName'].": <br>";  
                          
                    echo ' <table width="100%" align="center" id="1" cellspacing="7" >
                                
                                <tr align="center" align="center" style="background-color: #B9EEAC;">
                                    <th>Τμήμα</th>
                                    <th>Κατεύθυνση</th>  
                                    <th>Έτος </th>
                                    <th> </th>
                                </tr>'; 
                     do {
                        // Query to get department name
                        $departmentQuery = "SELECT * FROM department WHERE id='".$appRow['departmentId']."'";
                        $departmentResult = mysql_query($departmentQuery);
                        $departmentRow = mysql_fetch_array($departmentResult);
                        
                        // Query to get section name 
                        $sectionQuery = "SELECT * FROM section WHERE id='".$appRow['sectionId']."'"; 
                        $sectionResult = mysql_query($sectionQuery);
                        $sectionRow = mysql_fetch_array($sectionResult); 
                     ?>
                        <tr onMouseOut="this.style.background='#FFFFFF'" onMouseOver="this.style.background ='#80FFFF';">
                            <td><?php echo $departmentRow['departmentName'];?></td>
                            <td><?php echo $sectionRow['sectionTitle']; ?></td>
                            <td><?php echo $appRow['academicYear']; ?></td>
                            <td><?php echo '<a href="?option=com_content&view=article&id=74&uid='.$appRow['userId'].'&dId='.$appRow['departmentId'].'&sId='.$appRow['sectionId'].'&year='.$appRow['academicYear'].'&req=0">[ Ακύρωση ]</a>';?></td>
                        </tr>
                     <?php
                     }  while ( $appRow = mysql_fetch_array($appResult) );
                     echo '</table>';
            }
            else {
                echo "<br><br>Δεν βρέθηκαν καταχωρημένες αιτήσεις στο Τμήμα ".$departmentRow['departmentName'].".";
                echo "<br><br><font color='red'>Ελέγξτε τα κριτήρια αναζήτησης.</font> ";
                echo "  <a href='javascript:history.go(-1)'>[ Πίσω ]</a>";   
            }
        }  
    }
    else {
        echo "<br><font color='red'>Απογορεύεται η πρόσβαση σε μη εξουσιοδοτημένους χρήστες!</font>";
    }
?>