<?php

	/* 
	** display form for finding a user 
	*/
	
	print("Find Users to Edit:<BR>\n");
	
	print("<FORM ACTION=\"$ScriptName\" METHOD=\"get\">\n");
	print("<INPUT TYPE=HIDDEN NAME=\"sid\" VALUE=\"$sid\">\n");
	print("<INPUT TYPE=HIDDEN NAME=\"SCREEN\" VALUE=\"search_users\">\n");
	print("<INPUT TYPE=HIDDEN NAME=\"RunSearch\" VALUE=\"Yes\">\n");
	
	print("Login: ");
	print("<INPUT TYPE=TEXT NAME=\"inputLogin\" VALUE=\"$inputLogin\" SIZE=\"36\"><BR>\n");
	
	print("First Name: ");
	print("<INPUT TYPE=TEXT NAME=\"inputFirstName\" VALUE=\"$inputFirstName\" SIZE=\"36\"><BR>\n");
	
	print("Last Name: ");
	print("<INPUT TYPE=TEXT NAME=\"inputLastName\" VALUE=\"$inputLastName\" SIZE=\"36\"><BR>\n");
	
	print("Email: ");
	print("<INPUT TYPE=TEXT NAME=\"inputEmail\" VALUE=\"$inputEmail\" SIZE=\"36\"><BR>\n");
	
	print("<BR>\n");
	print("With at least the following permissions: ");
	print("<BR>\n");
	
	$Query = "SELECT ID, Name ";
	$Query .= "FROM permission ";
	$Query .= "ORDER BY ID ";
	$DatabaseResult = mysql_query($Query, $DatabaseLink);
	
	while ($DatabaseRow = mysql_fetch_row($DatabaseResult))
	{
		$PermissionID = $DatabaseRow[0];
		$PermissionName = $DatabaseRow[1];
		
		print("<INPUT TYPE=\"checkbox\" NAME=\"inputPermission[" .$PermissionID ."]\">$PermissionName<BR>\n");
	}
	print("<BR>\n");
	
	print("Order By\n");
	print("<SELECT NAME=\"inputOrderBy\">\n");
	print("<OPTION VALUE=\"Login\">Login\n");
	print("<OPTION VALUE=\"FirstName\">First Name\n");
	print("<OPTION VALUE=\"LastName\">Last Name\n");
	print("<OPTION VALUE=\"Email\">Email\n");
	print("</SELECT>");
	print("<BR>\n");
	
	print("<BR>\n");
	print("<INPUT TYPE=SUBMIT VALUE=\"Find Users\"><BR>\n");
	print("</FORM>\n");

	
	
	/* 
	** display users if search form was already completed 
	*/
	
	if ($RunSearch == 'Yes')
	{
		$Query = "SELECT ID, Login, FirstName, LastName, Email ";
		$Query .= "FROM user u, user_permission p WHERE ";
		$Query .= "u.Login LIKE '$inputLogin%' ";
		$Query .= "AND u.FirstName LIKE '$inputFirstName%' ";
		$Query .= "AND u.LastName LIKE '$inputLastName%' ";
		$Query .= "AND u.Email LIKE '$inputEmail%' ";
		$Query .= "AND u.ID=p.User ";
		
		if (isset($inputPermission))
		{
			
			list($key) = each($inputPermission);
			$Query .= "AND (p.Permission=$key";
			
			while (list($key) = each($inputPermission))
			{
				$Query .= " OR p.Permission=$key";
			}
			
			$Query .= ") ";
			
		}
		
		$Query .= "ORDER BY $inputOrderBy ";
		
		$DatabaseResult = mysql_query($Query, $DatabaseLink);

		print("<TABLE BORDER=\"0\" CELLPADDING=\"3\" CELLSPACING=\"3\">\n");
		print("<TR VALIGN=\"TOP\" ALIGN=\"LEFT\">\n");
		print("<TH>\n");
		print("Login");
		print("</TH>\n");
		print("<TH>\n");
		print("First Name");
		print("</TH>\n");
		print("<TH>\n");
		print("Last Name");
		print("</TH>\n");
		print("<TH>\n");
		print("Email");
		print("</TH>\n");
		print("</TR>\n");
		
		while($DatabaseRow = mysql_fetch_row($DatabaseResult))
		{
			if (!isset($UserID) || $DatabaseRow[0] != $UserID)
			{
				$UserID = $DatabaseRow[0];
				$UserLogin = $DatabaseRow[1];
				$UserFirstName = $DatabaseRow[2];
				$UserLastName = $DatabaseRow[3];
				$UserEmail = $DatabaseRow[4];
				
				print("<TR VALIGN=\"TOP\" ALIGN=\"LEFT\">\n");
				print("<TD>\n");
				print("<A HREF=\"" . ScreenURL("edit_user") . "&UserID=$UserID\">$UserLogin</A>");
				print("</TD>\n");
				print("<TD>\n");
				print("$UserFirstName");
				print("</TD>\n");
				print("<TD>\n");
				print("$UserLastName");
				print("</TD>\n");
				print("<TD>\n");
				print("<A HREF=\"mailto:$UserEmail\">$UserEmail</A>");
				print("</TD>\n");
				print("</TR>\n");
			}
			
		}
	
	
	
	
	
	
	}
	
	


?>