LICENSE: AGPLv2
#
# CHANGES
# 80310-1500 - first build
# 90310-2135 - Added admin header
# 90508-0644 - Changed to PHP long tags
# 130610-1127 - Finalized changing of all ereg instances to preg
# 130615-2357 - Added filtering of input to prevent SQL injection attacks and new user auth
# 130901-0832 - Changed to mysqli PHP functions
# 141007-2147 - Finalized adding QXZ translation to all admin files
#
if (isset($_GET["dcampaign"])) {$dcampaign=$_GET["dcampaign"];}
elseif (isset($_POST["dcampaign"])) {$dcampaign=$_POST["dcampaign"];}
if (isset($_GET["submit_report"])) {$submit_report=$_GET["submit_report"];}
elseif (isset($_POST["submit_report"])) {$submit_report=$_POST["submit_report"];}
if (isset($_GET["list_ids"])) {$list_ids=$_GET["list_ids"];}
elseif (isset($_POST["list_ids"])) {$list_ids=$_POST["list_ids"];}
if (isset($_GET["sales_number"])) {$sales_number=$_GET["sales_number"];}
elseif (isset($_POST["sales_number"])) {$sales_number=$_POST["sales_number"];}
if (isset($_GET["sales_time_frame"])) {$sales_time_frame=$_GET["sales_time_frame"];}
elseif (isset($_POST["sales_time_frame"])) {$sales_time_frame=$_POST["sales_time_frame"];}
if (isset($_GET["forc"])) {$forc=$_GET["forc"];}
elseif (isset($_POST["forc"])) {$forc=$_POST["forc"];}
include("dbconnect_mysqli.php");
include("functions.php");
$PHP_AUTH_USER=$_SERVER['PHP_AUTH_USER'];
$PHP_AUTH_PW=$_SERVER['PHP_AUTH_PW'];
$PHP_AUTH_PW = preg_replace("/'|\"|\\\\|;/","",$PHP_AUTH_PW);
$PHP_AUTH_USER = preg_replace("/'|\"|\\\\|;/","",$PHP_AUTH_USER);
$dcampaign = preg_replace('/[^0-9a-zA-Z]/', '', $dcampaign);
$auth=0;
$reports_auth=0;
$admin_auth=0;
$auth_message = user_authorization($PHP_AUTH_USER,$PHP_AUTH_PW,'REPORTS',1);
if ($auth_message == 'GOOD')
{$auth=1;}
if ($auth > 0)
{
$stmt="SELECT count(*) from vicidial_users where user='$PHP_AUTH_USER' and user_level > 7 and view_reports > 0;";
if ($DB) {echo "|$stmt|\n";}
$rslt=mysql_to_mysqli($stmt, $link);
$row=mysqli_fetch_row($rslt);
$admin_auth=$row[0];
$stmt="SELECT count(*) from vicidial_users where user='$PHP_AUTH_USER' and user_level > 6 and view_reports > 0;";
if ($DB) {echo "|$stmt|\n";}
$rslt=mysql_to_mysqli($stmt, $link);
$row=mysqli_fetch_row($rslt);
$reports_auth=$row[0];
if ($reports_auth < 1)
{
$VDdisplayMESSAGE = _QXZ("You are not allowed to view reports");
Header ("Content-type: text/html; charset=utf-8");
echo "$VDdisplayMESSAGE: |$PHP_AUTH_USER|$auth_message|\n";
exit;
}
if ( ($reports_auth > 0) and ($admin_auth < 1) )
{
$ADD=999999;
$reports_only_user=1;
}
}
else
{
$VDdisplayMESSAGE = _QXZ("Login incorrect, please try again");
if ($auth_message == 'LOCK')
{
$VDdisplayMESSAGE = _QXZ("Too many login attempts, try again in 15 minutes");
Header ("Content-type: text/html; charset=utf-8");
echo "$VDdisplayMESSAGE: |$PHP_AUTH_USER|$auth_message|\n";
exit;
}
Header("WWW-Authenticate: Basic realm=\"CONTACT-CENTER-ADMIN\"");
Header("HTTP/1.0 401 Unauthorized");
echo "$VDdisplayMESSAGE: |$PHP_AUTH_USER|$PHP_AUTH_PW|$auth_message|\n";
exit;
}
?>
Recent Sales Lookup
";
?>
0)) { $list_id_clause.="$lists[$i], "; }
}
$list_id_clause=substr($list_id_clause, 0, -2);
$list_id_clause.=")";
if ($sales_number && $sales_number>0) {
$sales_number=preg_replace('/[^0-9]/i', '', $sales_number);
$limit_clause="limit $sales_number";
} else {
$sales_number=0;
$limit_clause="";
}
if ($sales_time_frame && $sales_time_frame>0) {
$hours=$sales_time_frame/60;
$timestamp=date("YmdHis", mktime(date("H"),(date("i")-$sales_time_frame),date("s"),date("m"),date("d"),date("Y")));
} else {
$timestamp=date("YmdHis", mktime(date("H"),date("i"),date("s"),date("m"),(date("d")-1),date("Y")));
$hours=24;
}
print " ";
print "";
$i=0;
$dfile=fopen("discover_stmts.txt", "w");
if ($forc=="C") {
$stmt="select v.first_name, v.last_name, v.phone_number, vl.call_date, v.lead_id, u.full_name from vicidial_users u, vicidial_list v, vicidial_log vl where vl.call_date>='$timestamp' and vl.lead_id=v.lead_id and v.status='SALE' $list_id_clause and vl.user=u.user order by call_date desc $limit_clause";
} else {
$stmt="select v.first_name, v.last_name, v.phone_number, vl.call_date, v.lead_id, vl.user, vl.closer from vicidial_list v, vicidial_xfer_log vl where vl.call_date>='$timestamp' and vl.lead_id=v.lead_id and v.status='SALE' $list_id_clause order by call_date desc $limit_clause";
}
fwrite($dfile, "$stmt\n");
$rslt=mysql_to_mysqli($stmt, $link);
$q=0;
print "| Last ".mysqli_num_rows($rslt)." "._QXZ("sales made")." | \n";
print "\n";
print "\t| "._QXZ("Sales Rep(s)")." | \n";
print "\t"._QXZ("Customer Name")." | \n";
print "\t"._QXZ("Phone")." | \n";
print "\t"._QXZ("Recording ID")." | \n";
print "\t"._QXZ("Timestamp")." | \n";
print " \n";
while ($row=mysqli_fetch_row($rslt)) {
$rec_stmt="select max(recording_id) from recording_log where lead_id='$row[4]'";
$rec_rslt=mysql_to_mysqli($rec_stmt, $link);
$rec_row=mysqli_fetch_row($rec_rslt);
if ($forc=="F") {
$rep_stmt="select full_name from vicidial_users where user='$row[5]'";
$rep_rslt=mysql_to_mysqli($rep_stmt, $link);
$fr_row=mysqli_fetch_array($rep_rslt);
$rep_stmt="select full_name from vicidial_users where user='$row[6]'";
$rep_rslt=mysql_to_mysqli($rep_stmt, $link);
$cl_row=mysqli_fetch_array($rep_rslt);
$rep_name="$fr_row[full_name]/$cl_row[full_name]";
} else {
$rep_name=$row[5];
}
if ($i%2==0) {$bgcolor="#999999";} else {$bgcolor="#CCCCCC";}
print "\n";
print "\t| $rep_name | \n";
print "\t$row[0] $row[1] | \n";
print "\t$row[2] | \n";
print "\t$rec_row[0] | \n";
print "\t$row[3] | \n";
print " \n";
flush();
}
print " ";
passthru("$WeBServeRRooT/vicidial/spreadsheet_sales_viewer.pl $list_ids $sales_number $timestamp $forc $now $dcampaign");
# print "\n\n $WeBServeRRooT/vicidial/spreadsheet_sales_viewer.pl $list_ids $sales_number $timestamp $forc $now $dcampaign \n";
flush();
print "";
}
?>
|