From fb85d6f79c847b8edf7908644e11f80ac2effe0e Mon Sep 17 00:00:00 2001
From: Andrew Bauer <zonexpertconsulting@outlook.com>
Date: Mon, 14 Sep 2020 13:47:09 -0500
Subject: [PATCH] rough in eventdetail modal

---
 web/ajax/modal.php                       |  5 ++
 web/skins/classic/includes/functions.php | 89 ++++++++++++++++++++++++
 2 files changed, 94 insertions(+)

diff --git a/web/ajax/modal.php b/web/ajax/modal.php
index 8f5cb8ac9..91d1aec08 100644
--- a/web/ajax/modal.php
+++ b/web/ajax/modal.php
@@ -35,6 +35,11 @@ switch ( $modal ) {
     if ( !isset($_REQUEST['id']) ) ajaxError('Storage Id Not Provided');
     $data['html'] = getStorageModalHTML($_REQUEST['id']);
     break;
+  case 'eventdetail' :
+    isset($_REQUEST['eid'] ? $eid = $_REQUEST['eid'] : '';
+    isset($_REQUEST['eids'] ? $eids = $_REQUEST['eids'] : '';
+    $data['html'] = getEventDetailHTML($eid, $eids);
+    break;
   default :
     // Maybe don't need both
     ZM\Warning('Unknown modal '.$modal);
diff --git a/web/skins/classic/includes/functions.php b/web/skins/classic/includes/functions.php
index 8facb1f80..d13e5545b 100644
--- a/web/skins/classic/includes/functions.php
+++ b/web/skins/classic/includes/functions.php
@@ -1016,6 +1016,95 @@ function getStorageModalHTML($sid) {
   return $result;
 }
 
+function getEventDetailHTML($eid='', $eids='') {
+  $result = '';
+  $inputs = '';
+  $disabled = 'disabled="disabled"';
+  $null = '';
+
+  if ( !canEdit('Events') ) return;
+
+  // We have to manually insert the csrf key into the form when using a modal generated via ajax call
+  if ( isset($GLOBALS['csrf']['key']) ) {
+    $csrf_input = '<input type="hidden" name="__csrf_magic" value="key:' .csrf_hash($GLOBALS['csrf']['key']). '" />'.PHP_EOL;
+  } else {
+    $csrf_input = '';
+  }
+
+  if ( isset($eid) ){ // Single Event Mode
+    $title = translate('Event').' '.$eid.PHP_EOL;
+    $inputs .= '<input type="hidden" name="markEids[]" value="' .validInt($eid). '"/>'.PHP_EOL;
+    $eid = validInt($eid);
+    $newEvent = dbFetchOne('SELECT E.* FROM Events AS E WHERE E.Id = ?', NULL, array($eid));
+
+  } elseif ( isset($eids) ) { // Multi Event Mode
+
+    $title = translate('Events');
+    $sql = 'SELECT E.* FROM Events AS E WHERE ';
+    $sqlWhere = array();
+    $sqlValues = array();
+    foreach ( $eids as $eid ) {
+      $inputs .= '<input type="hidden" name="markEids[]" value="' .validInt($eid). '"/>'.PHP_EOL;
+      $sqlWhere[] = 'E.Id = ?';
+      $sqlValues[] = validInt($eid);
+    }
+    unset($eid);
+    $sql .= join(' OR ', $sqlWhere);
+    foreach( dbFetchAll( $sql, NULL, $sqlValues ) as $row ) {
+      if ( !isset($newEvent) ) {
+        $newEvent = $row;
+      } else {
+        if ( $newEvent['Cause'] && $newEvent['Cause'] != $row['Cause'] )
+          $newEvent['Cause'] = '';
+        if ( $newEvent['Notes'] && $newEvent['Notes'] != $row['Notes'] )
+          $newEvent['Notes'] = '';
+      }
+    }
+
+  } else { // Event Mode not specified - should we really proceed if neither eid nor eids is set?
+    $title = translate('Events');
+  }
+
+  $result .= '<div class="modal fade" id="staticBackdrop" data-backdrop="static" data-keyboard="false" tabindex="-1" aria-labelledby="staticBackdropLabel" aria-hidden="true">'.PHP_EOL;
+    $result .= '<div class="modal-dialog">'.PHP_EOL;
+      $result .= '<div class="modal-content">'.PHP_EOL;
+        $result .= '<div class="modal-header">'.PHP_EOL;
+          $result .= '<h5 class="modal-title" id="staticBackdropLabel">' .$title. '</h5>'.PHP_EOL;
+          $result .= '<button type="button" class="close" data-dismiss="modal" aria-label="Close">'.PHP_EOL;
+            $result .= '<span aria-hidden="true">&times;</span>'.PHP_EOL;
+          $result .= '</button>'.PHP_EOL;
+        $result .= '</div>'.PHP_EOL;
+        $result .= '<div class="modal-body">'.PHP_EOL;
+          $result .= '<form name="contentForm" id="contentForm" method="post" action="?">'.PHP_EOL;
+            $result .= $csrf_input;
+            $result .= '<input type="hidden" name="action" value="eventdetail"/>'.PHP_EOL;
+            $result .= '<input type="hidden" name="view" value="eventdetail"/>'.PHP_EOL;
+            $result .= $inputs;
+            $result .= '<table id="contentTable" class="major">'.PHP_EOL;
+              $result .= '<tbody>'.PHP_EOL;
+                $result .= '<tr>'.PHP_EOL;
+                  $result .= '<th scope="row">' .translate('Cause'). '</th>'.PHP_EOL;
+                  $result .= '<td><input type="text" name="newEvent[Cause]" value="' .validHtmlStr($newEvent['Cause']). '" size="32"/></td>'.PHP_EOL;
+                $result .= '</tr>'.PHP_EOL;
+                $result .= '<tr>'.PHP_EOL;
+                  $result .= '<th scope="row">' .translate('Notes'). '</th>'.PHP_EOL;
+                  $result .= '<td><textarea name="newEvent[Notes]" rows="6" cols="50">' .validHtmlStr($newEvent['Notes']). '</textarea></td>'.PHP_EOL;
+                $result .= '</tr>'.PHP_EOL;
+              $result .= '</tbody>'.PHP_EOL;
+            $result .= '</table>'.PHP_EOL;
+        $result .= '</div>'.PHP_EOL;
+        $result .= '<div class="modal-footer">'.PHP_EOL;
+          $result .= '<button type="submit" class="btn btn-primary" value="save" ' .( !canEdit('Events') ? $disabled : $null ). '>' .translate('Save'). '</button>'.PHP_EOL;
+          $result .= '<button type="button" class="btn btn-secondary" data-dismiss="modal">' .translate('Cancel'). '</button>'.PHP_EOL;
+        $result .= '</div>'.PHP_EOL;
+        $result .= '</form>'.PHP_EOL;
+      $result .= '</div>'.PHP_EOL;
+    $result .= '</div>'.PHP_EOL;
+  $result .= '</div>'.PHP_EOL;
+
+  return $result;
+}
+
 function xhtmlFooter() {
   global $css;
   global $cspNonce;