LICENSE: AGPLv2 # # CHANGES # 80310-1500 - first build # 90310-2135 - Added admin header # 90508-0644 - Changed to PHP long tags # 130610-1127 - Finalized changing of all ereg instances to preg # 130615-2357 - Added filtering of input to prevent SQL injection attacks and new user auth # 130901-0832 - Changed to mysqli PHP functions # 141007-2147 - Finalized adding QXZ translation to all admin files # if (isset($_GET["dcampaign"])) {$dcampaign=$_GET["dcampaign"];} elseif (isset($_POST["dcampaign"])) {$dcampaign=$_POST["dcampaign"];} if (isset($_GET["submit_report"])) {$submit_report=$_GET["submit_report"];} elseif (isset($_POST["submit_report"])) {$submit_report=$_POST["submit_report"];} if (isset($_GET["list_ids"])) {$list_ids=$_GET["list_ids"];} elseif (isset($_POST["list_ids"])) {$list_ids=$_POST["list_ids"];} if (isset($_GET["sales_number"])) {$sales_number=$_GET["sales_number"];} elseif (isset($_POST["sales_number"])) {$sales_number=$_POST["sales_number"];} if (isset($_GET["sales_time_frame"])) {$sales_time_frame=$_GET["sales_time_frame"];} elseif (isset($_POST["sales_time_frame"])) {$sales_time_frame=$_POST["sales_time_frame"];} if (isset($_GET["forc"])) {$forc=$_GET["forc"];} elseif (isset($_POST["forc"])) {$forc=$_POST["forc"];} include("dbconnect_mysqli.php"); include("functions.php"); $PHP_AUTH_USER=$_SERVER['PHP_AUTH_USER']; $PHP_AUTH_PW=$_SERVER['PHP_AUTH_PW']; $PHP_AUTH_PW = preg_replace("/'|\"|\\\\|;/","",$PHP_AUTH_PW); $PHP_AUTH_USER = preg_replace("/'|\"|\\\\|;/","",$PHP_AUTH_USER); $dcampaign = preg_replace('/[^0-9a-zA-Z]/', '', $dcampaign); $auth=0; $reports_auth=0; $admin_auth=0; $auth_message = user_authorization($PHP_AUTH_USER,$PHP_AUTH_PW,'REPORTS',1); if ($auth_message == 'GOOD') {$auth=1;} if ($auth > 0) { $stmt="SELECT count(*) from vicidial_users where user='$PHP_AUTH_USER' and user_level > 7 and view_reports > 0;"; if ($DB) {echo "|$stmt|\n";} $rslt=mysql_to_mysqli($stmt, $link); $row=mysqli_fetch_row($rslt); $admin_auth=$row[0]; $stmt="SELECT count(*) from vicidial_users where user='$PHP_AUTH_USER' and user_level > 6 and view_reports > 0;"; if ($DB) {echo "|$stmt|\n";} $rslt=mysql_to_mysqli($stmt, $link); $row=mysqli_fetch_row($rslt); $reports_auth=$row[0]; if ($reports_auth < 1) { $VDdisplayMESSAGE = _QXZ("You are not allowed to view reports"); Header ("Content-type: text/html; charset=utf-8"); echo "$VDdisplayMESSAGE: |$PHP_AUTH_USER|$auth_message|\n"; exit; } if ( ($reports_auth > 0) and ($admin_auth < 1) ) { $ADD=999999; $reports_only_user=1; } } else { $VDdisplayMESSAGE = _QXZ("Login incorrect, please try again"); if ($auth_message == 'LOCK') { $VDdisplayMESSAGE = _QXZ("Too many login attempts, try again in 15 minutes"); Header ("Content-type: text/html; charset=utf-8"); echo "$VDdisplayMESSAGE: |$PHP_AUTH_USER|$auth_message|\n"; exit; } Header("WWW-Authenticate: Basic realm=\"CONTACT-CENTER-ADMIN\""); Header("HTTP/1.0 401 Unauthorized"); echo "$VDdisplayMESSAGE: |$PHP_AUTH_USER|$PHP_AUTH_PW|$auth_message|\n"; exit; } ?> Recent Sales Lookup "; ?>
             
:
:
... **
()
:       
">
** -
0)) { $list_id_clause.="$lists[$i], "; } } $list_id_clause=substr($list_id_clause, 0, -2); $list_id_clause.=")"; if ($sales_number && $sales_number>0) { $sales_number=preg_replace('/[^0-9]/i', '', $sales_number); $limit_clause="limit $sales_number"; } else { $sales_number=0; $limit_clause=""; } if ($sales_time_frame && $sales_time_frame>0) { $hours=$sales_time_frame/60; $timestamp=date("YmdHis", mktime(date("H"),(date("i")-$sales_time_frame),date("s"),date("m"),date("d"),date("Y"))); } else { $timestamp=date("YmdHis", mktime(date("H"),date("i"),date("s"),date("m"),(date("d")-1),date("Y"))); $hours=24; } print "
"; print ""; $i=0; $dfile=fopen("discover_stmts.txt", "w"); if ($forc=="C") { $stmt="select v.first_name, v.last_name, v.phone_number, vl.call_date, v.lead_id, u.full_name from vicidial_users u, vicidial_list v, vicidial_log vl where vl.call_date>='$timestamp' and vl.lead_id=v.lead_id and v.status='SALE' $list_id_clause and vl.user=u.user order by call_date desc $limit_clause"; } else { $stmt="select v.first_name, v.last_name, v.phone_number, vl.call_date, v.lead_id, vl.user, vl.closer from vicidial_list v, vicidial_xfer_log vl where vl.call_date>='$timestamp' and vl.lead_id=v.lead_id and v.status='SALE' $list_id_clause order by call_date desc $limit_clause"; } fwrite($dfile, "$stmt\n"); $rslt=mysql_to_mysqli($stmt, $link); $q=0; print "\n"; print "\n"; print "\t\n"; print "\t\n"; print "\t\n"; print "\t\n"; print "\t\n"; print "\n"; while ($row=mysqli_fetch_row($rslt)) { $rec_stmt="select max(recording_id) from recording_log where lead_id='$row[4]'"; $rec_rslt=mysql_to_mysqli($rec_stmt, $link); $rec_row=mysqli_fetch_row($rec_rslt); if ($forc=="F") { $rep_stmt="select full_name from vicidial_users where user='$row[5]'"; $rep_rslt=mysql_to_mysqli($rep_stmt, $link); $fr_row=mysqli_fetch_array($rep_rslt); $rep_stmt="select full_name from vicidial_users where user='$row[6]'"; $rep_rslt=mysql_to_mysqli($rep_stmt, $link); $cl_row=mysqli_fetch_array($rep_rslt); $rep_name="$fr_row[full_name]/$cl_row[full_name]"; } else { $rep_name=$row[5]; } if ($i%2==0) {$bgcolor="#999999";} else {$bgcolor="#CCCCCC";} print "\n"; print "\t\n"; print "\t\n"; print "\t\n"; print "\t\n"; print "\t\n"; print "\n"; flush(); } print "
Last ".mysqli_num_rows($rslt)." "._QXZ("sales made")."
"._QXZ("Sales Rep(s)").""._QXZ("Customer Name").""._QXZ("Phone").""._QXZ("Recording ID").""._QXZ("Timestamp")."
$rep_name$row[0] $row[1]$row[2]$rec_row[0]$row[3]
"; passthru("$WeBServeRRooT/vicidial/spreadsheet_sales_viewer.pl $list_ids $sales_number $timestamp $forc $now $dcampaign"); # print "\n\n
$WeBServeRRooT/vicidial/spreadsheet_sales_viewer.pl $list_ids $sales_number $timestamp $forc $now $dcampaign
\n"; flush(); print ""; if ($forc=="F") { print ""; } print ""; print "
"._QXZ("View complete Excel fronter report for this shift").""._QXZ("View complete Excel sales report for this shift")."
"; } ?>