<?php
include ('adm.config.php');

if ($_SERVER['REQUEST_METHOD'] == 'POST') {
		if(isset($_POST['purchaseID']) && is_numeric($_POST['purchaseID'])) {
			$_GET['id'] = $_POST['purchaseID'];
		} 
		
		if(isset($_POST['itemType']) && is_numeric($_POST['itemType'])) {
			$_GET['type'] = $_POST['itemType'];
		}
}

if (isset($_GET['id']) && is_numeric($_GET['id']) && isset($_GET['type']) && is_numeric($_GET['type'])) {
	
	$purchaseID = $_GET['id'];
	$itemType = $_GET['type'];
	
	if ($userDetails->xfcadmin == 0) {
		// THIS IS A REGULAR USER
		$query = "SELECT * FROM cms_billing_purchases WHERE memberID = '" . $memberID . "' AND itemType = '".$itemType."' AND purchaseID = '".$purchaseID."'";
	} elseif ($userDetails->xfcadmin == 1) {
		// THIS IS A MODEL
		$query = "SELECT * FROM cms_billing_purchases WHERE itemID = '" . $userDetails->model_id . "' AND itemType = '".$itemType."' AND purchaseID = '".$purchaseID."'";
	} elseif ($userDetails->xfcadmin == 9) {
		// THIS IS TAMMY
		$query = "SELECT * FROM cms_billing_purchases WHERE purchaseID = '".$purchaseID."'";
	}
	
	$getPurchase = @mysql_query($query);
	if (@mysql_num_rows($getPurchase) == 0) { die("error count"); }
	$purchaseInfo = @mysql_fetch_object($getPurchase);

	if($itemType == 3) { // Custom Video
		$purchaseInfoDetails = cartCustomDetails($purchaseInfo->memberID, $purchaseInfo->relatedID);
	} elseif($itemType == 4) { // Custom Photoset
		$purchaseInfoDetails = cartCustomDetails($purchaseInfo->memberID, $purchaseInfo->relatedID);
	} elseif($itemType == 6) { // Private Chat
		$purchaseInfoDetails = cartPrivateDetails($purchaseInfo->memberID, $purchaseInfo->relatedID);			
	} else {
		die("invalid item type");	
	}

	$modelDetails = cartModel($purchaseInfoDetails->modelID, $itemType);
		
	$getPurchaser = @mysql_query("SELECT * FROM cms_members WHERE member_id = '".$purchaseInfo->memberID."'");
	$purchaserInfo = @mysql_fetch_object($getPurchaser);

/* POST */
	if ($_SERVER['REQUEST_METHOD'] == 'POST') {
		
		if(isset($_POST['formType'])) {
			$formType = $_POST['formType'];
		} else {
			die("missing form type");	
		}
		
		if(isset($_POST['purchaseID']) && is_numeric($_POST['purchaseID'])) {
			$purchaseID = $_POST['purchaseID'];
		} else {
			die("missing or invalid purchaseID");	
		}
		
		if(isset($_POST['itemType']) && is_numeric($_POST['itemType'])) {
			$itemType = $_POST['itemType'];
		} else {
			die("missing or invalid itemType");	
		}
		
		if($formType == "reply") {
			if(isset($_POST['messageReply']) && $_POST['messageReply'] != "") {
				$messageReply = $_POST['messageReply'];
			} else {
				die("no message");	
			}
			
			$insert = @mysql_query("INSERT INTO cms_billing_messages
									SET itemType = '".$itemType."',
									timestamp = NOW(),
									relatedID = '".$purchaseInfo->relatedID."',
									to_memberID = '".$purchaserInfo->member_id."',
									from_memberID = '".$member_id."',
									message = '".addslashes($messageReply)."'");
			
			notificationEmail(0,$purchaserInfo->member_id,"newMessage");
			header("location: adm.messages.php?id=".$purchaseID."&type=".$itemType."");
		} elseif($formType == "complete" && isset($_POST['completeConfirm']) && $_POST['completeConfirm'] == 1) {
			$update = @mysql_query("UPDATE cms_billing_purchases SET status = '1' WHERE purchaseID = '".$purchaseID."'");
			header("location: adm.messages.php?id=".$purchaseID."&type=".$itemType."");
		}
	}
	
/* POST */

$getMessages = @mysql_query("SELECT * FROM cms_billing_messages WHERE itemType = '".$itemType."' AND relatedID = '".$purchaseInfo->relatedID."' AND (to_memberID = '".$member_id."' OR from_memberID = '".$member_id."') ORDER BY timestamp ASC");

$updateMessages = @mysql_query("UPDATE cms_billing_messages SET to_memberID_read = '1' WHERE itemType = '".$itemType."' AND relatedID = '".$purchaseInfo->relatedID."' AND to_memberID = '".$member_id."'");

include ("adm.header.php");
?>

<h3>MESSAGE CENTER</h3>

<?php

if ($purchaseInfo->status == 0) {
	$textStatus = "PENDING!";
} else {
	$textStatus = "COMPLETED!";
}

echo '<h4>' . $modelDetails->title . '</h4><br />';
echo '<h5>' . $textStatus . '</h5><br />';

if($itemType == 3) { 

	echo '<strong>Category:</strong> ' . $purchaseInfoDetails->categoryName . '<br />';
	echo '<strong>Duration:</strong> ' . $purchaseInfoDetails->baseName . '<br />';
	echo '<strong>Deliver:</strong> ' . $purchaseInfoDetails->deliveryName . '<br />';
	echo '<strong>Description:</strong> ' . nl2br($purchaseInfoDetails->description) . '<br />';
} elseif($itemType == 4) { 

	echo '<strong>Category:</strong> ' . $purchaseInfoDetails->categoryName . '<br />';
	echo '<strong>Duration:</strong> ' . $purchaseInfoDetails->baseName . '<br />';
	echo '<strong>Deliver:</strong> ' . $purchaseInfoDetails->deliveryName . '<br />';
	echo '<strong>Description:</strong> ' . nl2br($purchaseInfoDetails->description) . '<br />';
} elseif($itemType == 6) { 

	echo '<strong>Duration:</strong> ' . $purchaseInfoDetails->duration . '<br />';
	echo '<strong>Preferred Date & Time:</strong> ' . $purchaseInfoDetails->preferredtime . '<br />';
	echo '<strong>Description:</strong> ' . nl2br($purchaseInfoDetails->description) . '<br />';
	
 }
 
 ?>

<br />

  <table class="table table-bordered table-hover table-condensed">
    <thead>
      <tr>
        <th class="col-md-2">Who</th>
        <th>Message</th>
      </tr>
    </thead>
    <tbody>
    
			<?php
			while ($row = @mysql_fetch_object($getMessages)) {
				if($row->from_memberID == $purchaseInfo->memberID) {
					$from = $purchaserInfo->display_name;
				} else {
					$from = $modelDetails->name;	
				}
			?>
				<tr>
					<td><?php echo $from; ?></td>
					<td><?php echo '<strong>' . date('l (m-d-y) @ h:i:s A',strtotime($row->timestamp)) . '</strong><br />' . nl2br($row->message); ?></td>
				</tr>
			<?php } ?>
    </tbody>
  </table>

<?php
	if($purchaseInfo->status == 0) { // && $userDetails->xfcadmin == 1) {
?>
<form action="adm.messages.php" method="POST" class="form-horizontal">  
  <div class="form-group">
    <label for="request_description" class="col-sm-2 control-label">Reply:</label>
    <div class="col-sm-10">
      <textarea class="form-control" rows="3" name="messageReply"></textarea>
    </div>
  </div>

  <div class="form-group">
    <div class="col-sm-offset-2 col-sm-10">
      <button type="submit" class="btn btn-default">     Send Reply     </button>
    </div>
  </div>
  <input type="hidden" name="formType" value="reply" />
  <input type="hidden" name="itemType" value="<?php echo $itemType; ?>" />
  <input type="hidden" name="purchaseID" value="<?php echo $purchaseID; ?>" />
</form>


<form action="adm.messages.php" method="POST" class="form-horizontal">
  <div class="form-group">
    <div class="col-sm-offset-8 col-lg-2">
                <select name="completeConfirm" class="form-control">
             <option value="0"> Please confirm... </option>
             <option value="1"> CONFIRMED </option>
            </select>
    </div>
        <div class="col-lg-2">
<button type="submit" class="btn btn-danger">     MARK AS COMPLETE     </button>
    </div>
  </div>
  <input type="hidden" name="formType" value="complete" />
  <input type="hidden" name="itemType" value="<?php echo $itemType; ?>" />
  <input type="hidden" name="purchaseID" value="<?php echo $purchaseID; ?>" />
</form>


<?php
	}
	include ('adm.footer.php');
}
?>