653 lines
31 KiB
PHP
653 lines
31 KiB
PHP
<?php
|
|
# timeclock.php - VICIDIAL system user timeclock
|
|
#
|
|
# Copyright (C) 2026 Matt Florell <vicidial@gmail.com> LICENSE: AGPLv2
|
|
#
|
|
# CHANGELOG
|
|
# 80523-0134 - First Build
|
|
# 80524-0225 - Changed event_date to DATETIME, added timestamp field and tcid_link field
|
|
# 80525-2351 - Added an audit log that is not to be editable
|
|
# 80602-0641 - Fixed status update bug
|
|
# 90508-0727 - Changed to PHP long tags
|
|
# 100621-1023 - Added admin_web_directory variable
|
|
# 130328-0021 - Converted ereg to preg functions
|
|
# 130603-2211 - Added login lockout for 15 minutes after 10 failed logins, and other security fixes
|
|
# 130705-2010 - Added optional encrypted passwords compatibility
|
|
# 130802-1031 - Changed to PHP mysqli functions
|
|
# 131208-2155 - Added user log TIMEOUTLOGOUT event status
|
|
# 140810-2138 - Changed to use QXZ function for echoing text
|
|
# 141118-1239 - Formatting changes for QXZ output
|
|
# 141216-2122 - Added language settings lookups and user/pass variable standardization
|
|
# 150210-1307 - Fixed QXZ tags and formatting(issue #827)
|
|
# 150212-0033 - Added case-sensitive user validation(issue #682)
|
|
# 150727-0912 - Added default_language
|
|
# 161106-2112 - Added screen colors, fixed formatting
|
|
# 190111-0901 - Fix for PHP7
|
|
# 201117-2117 - Changes for better compatibility with non-latin data input
|
|
# 210616-2101 - Added optional CORS support, see options.php for details
|
|
# 220220-0934 - Added allow_web_debug system setting
|
|
# 220921-1702 - Added failed login reason messages
|
|
# 260302-1158 - Code updates for PHP8 compatibility
|
|
#
|
|
|
|
$version = '2.14-23';
|
|
$build = '260302-1158';
|
|
$php_script = 'timeclock.php';
|
|
|
|
$StarTtimE = date("U");
|
|
$NOW_TIME = date("Y-m-d H:i:s");
|
|
$last_action_date = $NOW_TIME;
|
|
|
|
$US='_';
|
|
$CL=':';
|
|
$AT='@';
|
|
$DS='-';
|
|
$date = date("r");
|
|
$ip = getenv("REMOTE_ADDR");
|
|
$browser = getenv("HTTP_USER_AGENT");
|
|
$script_name = getenv("SCRIPT_NAME");
|
|
$server_name = getenv("SERVER_NAME");
|
|
$server_port = getenv("SERVER_PORT");
|
|
if (preg_match("/443/i",$server_port)) {$HTTPprotocol = 'https://';}
|
|
else {$HTTPprotocol = 'http://';}
|
|
if (($server_port == '80') or ($server_port == '443') ) {$server_port='';}
|
|
else {$server_port = "$CL$server_port";}
|
|
$agcPAGE = "$HTTPprotocol$server_name$server_port$script_name";
|
|
$agcDIR = preg_replace('/timeclock\.php/i','',$agcPAGE);
|
|
$VDdisplayMESSAGE='';
|
|
|
|
if (isset($_GET["DB"])) {$DB=$_GET["DB"];}
|
|
elseif (isset($_POST["DB"])) {$DB=$_POST["DB"];}
|
|
if (isset($_GET["phone_login"])) {$phone_login=$_GET["phone_login"];}
|
|
elseif (isset($_POST["phone_login"])) {$phone_login=$_POST["phone_login"];}
|
|
if (isset($_GET["phone_pass"])) {$phone_pass=$_GET["phone_pass"];}
|
|
elseif (isset($_POST["phone_pass"])) {$phone_pass=$_POST["phone_pass"];}
|
|
if (isset($_GET["VD_login"])) {$VD_login=$_GET["VD_login"];}
|
|
elseif (isset($_POST["VD_login"])) {$VD_login=$_POST["VD_login"];}
|
|
else {$VD_login="";}
|
|
if (isset($_GET["VD_pass"])) {$VD_pass=$_GET["VD_pass"];}
|
|
elseif (isset($_POST["VD_pass"])) {$VD_pass=$_POST["VD_pass"];}
|
|
else {$VD_pass="";}
|
|
if (isset($_GET["VD_campaign"])) {$VD_campaign=$_GET["VD_campaign"];}
|
|
elseif (isset($_POST["VD_campaign"])) {$VD_campaign=$_POST["VD_campaign"];}
|
|
else {$VD_campaign="";}
|
|
if (isset($_GET["stage"])) {$stage=$_GET["stage"];}
|
|
elseif (isset($_POST["stage"])) {$stage=$_POST["stage"];}
|
|
else {$stage="";}
|
|
if (isset($_GET["commit"])) {$commit=$_GET["commit"];}
|
|
elseif (isset($_POST["commit"])) {$commit=$_POST["commit"];}
|
|
else {$commit="";}
|
|
if (isset($_GET["referrer"])) {$referrer=$_GET["referrer"];}
|
|
elseif (isset($_POST["referrer"])) {$referrer=$_POST["referrer"];}
|
|
else {$referrer="";}
|
|
if (isset($_GET["user"])) {$user=$_GET["user"];}
|
|
elseif (isset($_POST["user"])) {$user=$_POST["user"];}
|
|
else {$user="";}
|
|
if (isset($_GET["pass"])) {$pass=$_GET["pass"];}
|
|
elseif (isset($_POST["pass"])) {$pass=$_POST["pass"];}
|
|
else {$pass="";}
|
|
if (strlen($VD_login)<1) {$VD_login = $user;}
|
|
|
|
if (!isset($phone_login))
|
|
{
|
|
if (isset($_GET["pl"])) {$phone_login=$_GET["pl"];}
|
|
elseif (isset($_POST["pl"])) {$phone_login=$_POST["pl"];}
|
|
else {$phone_login="";}
|
|
}
|
|
if (!isset($phone_pass))
|
|
{
|
|
if (isset($_GET["pp"])) {$phone_pass=$_GET["pp"];}
|
|
elseif (isset($_POST["pp"])) {$phone_pass=$_POST["pp"];}
|
|
else {$phone_pass="";}
|
|
}
|
|
|
|
### security strip all non-alphanumeric characters out of the variables ###
|
|
$VD_login=preg_replace("/\'|\"|\\\\|;| /","",$VD_login);
|
|
$VD_pass=preg_replace("/\'|\"|\\\\|;| /","",$VD_pass);
|
|
$user=preg_replace("/\'|\"|\\\\|;| /","",$user);
|
|
$pass=preg_replace("/\'|\"|\\\\|;| /","",$pass);
|
|
|
|
require_once("dbconnect_mysqli.php");
|
|
require_once("functions.php");
|
|
|
|
# if options file exists, use the override values for the above variables
|
|
# see the options-example.php file for more information
|
|
if (file_exists('options.php'))
|
|
{
|
|
require('options.php');
|
|
}
|
|
|
|
#############################################
|
|
##### START SYSTEM_SETTINGS AND USER LANGUAGE LOOKUP #####
|
|
$stmt = "SELECT use_non_latin,admin_home_url,admin_web_directory,enable_languages,language_method,default_language,agent_screen_colors,agent_script,allow_web_debug FROM system_settings;";
|
|
#if ($DB) {echo "$stmt\n";}
|
|
$rslt=mysql_to_mysqli($stmt, $link);
|
|
if ($mel > 0) {mysql_error_logging($NOW_TIME,$link,$mel,$stmt,'00XXX',$VD_login,$server_ip,$session_name,$one_mysql_log);}
|
|
$qm_conf_ct = mysqli_num_rows($rslt);
|
|
if ($qm_conf_ct > 0)
|
|
{
|
|
$row=mysqli_fetch_row($rslt);
|
|
$non_latin = $row[0];
|
|
$welcomeURL = $row[1];
|
|
$admin_web_directory = $row[2];
|
|
$SSenable_languages = $row[3];
|
|
$SSlanguage_method = $row[4];
|
|
$SSdefault_language = $row[5];
|
|
$agent_screen_colors = $row[6];
|
|
$SSagent_script = $row[7];
|
|
$SSallow_web_debug = $row[8];
|
|
}
|
|
if ($SSallow_web_debug < 1 || !isset($DB)) {$DB=0;}
|
|
$DB=preg_replace("/[^0-9]/","",$DB);
|
|
|
|
$VUselected_language = '';
|
|
$stmt="SELECT user,selected_language from vicidial_users where user='$VD_login';";
|
|
if ($DB) {echo "|$stmt|\n";}
|
|
$rslt=mysql_to_mysqli($stmt, $link);
|
|
if ($mel > 0) {mysql_error_logging($NOW_TIME,$link,$mel,$stmt,'00XXX',$VD_login,$server_ip,$session_name,$one_mysql_log);}
|
|
$sl_ct = mysqli_num_rows($rslt);
|
|
if ($sl_ct > 0)
|
|
{
|
|
$row=mysqli_fetch_row($rslt);
|
|
$VUuser = $row[0];
|
|
$VUselected_language = $row[1];
|
|
}
|
|
|
|
if (strlen($VUselected_language) < 1)
|
|
{$VUselected_language = $SSdefault_language;}
|
|
##### END SETTINGS LOOKUP #####
|
|
###########################################
|
|
|
|
$user=preg_replace("/\'|\"|\\\\|;| /","",$user);
|
|
$pass=preg_replace("/\'|\"|\\\\|;| /","",$pass);
|
|
$phone_login=preg_replace("/\'|\"|\\\\|;| /","",$phone_login);
|
|
$phone_pass=preg_replace("/\'|\"|\\\\|;| /","",$phone_pass);
|
|
# $stage=preg_replace("/[^0-9a-zA-Z]/","",$stage);
|
|
# $commit=preg_replace("/[^0-9a-zA-Z]/","",$commit);
|
|
# $referrer=preg_replace("/[^0-9a-zA-Z]/","",$referrer);
|
|
|
|
if ($non_latin < 1)
|
|
{
|
|
$user=preg_replace("/[^-_0-9a-zA-Z]/","",$user);
|
|
$pass=preg_replace("/[^-\.\+\/\=_0-9a-zA-Z]/","",$pass);
|
|
$VD_login=preg_replace("/[^-_0-9a-zA-Z]/","",$VD_login);
|
|
$VD_pass=preg_replace("/[^-_0-9a-zA-Z]/","",$VD_pass);
|
|
$VD_campaign=preg_replace("/[^-_0-9a-zA-Z]/","",$VD_campaign);
|
|
$phone_login=preg_replace("/[^\,0-9a-zA-Z]/","",$phone_login);
|
|
$phone_pass=preg_replace("/[^-_0-9a-zA-Z]/","",$phone_pass);
|
|
$stage=preg_replace("/[^0-9a-zA-Z]/","",$stage);
|
|
$commit=preg_replace("/[^0-9a-zA-Z]/","",$commit);
|
|
$referrer=preg_replace("/[^0-9a-zA-Z]/","",$referrer);
|
|
}
|
|
else
|
|
{
|
|
$user=preg_replace("/[^-_0-9\p{L}]/u","",$user);
|
|
$pass = preg_replace('/[^-\.\+\/\=_0-9\p{L}]/u','',$pass);
|
|
$VD_login=preg_replace("/[^-_0-9\p{L}]/u","",$VD_login);
|
|
$VD_pass=preg_replace("/[^-_0-9\p{L}]/u","",$VD_pass);
|
|
$VD_campaign=preg_replace("/[^-_0-9\p{L}]/u","",$VD_campaign);
|
|
$phone_login=preg_replace("/[^\,0-9\p{L}]/u","",$phone_login);
|
|
$phone_pass=preg_replace("/[^-_0-9\p{L}]/u","",$phone_pass);
|
|
$stage=preg_replace("/[^0-9\p{L}]/u","",$stage);
|
|
$commit=preg_replace("/[^0-9\p{L}]/u","",$commit);
|
|
$referrer=preg_replace("/[^0-9\p{L}]/u","",$referrer);
|
|
}
|
|
|
|
header ("Content-type: text/html; charset=utf-8");
|
|
header ("Cache-Control: no-cache, must-revalidate"); // HTTP/1.1
|
|
header ("Pragma: no-cache"); // HTTP/1.0
|
|
|
|
|
|
##### BEGIN Define colors and logo #####
|
|
$SSmenu_background='015B91';
|
|
$SSframe_background='D9E6FE';
|
|
$SSstd_row1_background='9BB9FB';
|
|
$SSstd_row2_background='B9CBFD';
|
|
$SSstd_row3_background='8EBCFD';
|
|
$SSstd_row4_background='B6D3FC';
|
|
$SSstd_row5_background='A3C3D6';
|
|
$SSalt_row1_background='BDFFBD';
|
|
$SSalt_row2_background='99FF99';
|
|
$SSalt_row3_background='CCFFCC';
|
|
$SSweb_logo='default_new';
|
|
|
|
if ($agent_screen_colors != 'default')
|
|
{
|
|
$stmt = "SELECT menu_background,frame_background,std_row1_background,std_row2_background,std_row3_background,std_row4_background,std_row5_background,alt_row1_background,alt_row2_background,alt_row3_background,web_logo FROM vicidial_screen_colors where colors_id='$agent_screen_colors';";
|
|
$rslt=mysql_to_mysqli($stmt, $link);
|
|
if ($mel > 0) {mysql_error_logging($NOW_TIME,$link,$mel,$stmt,'01XXX',$VD_login,$server_ip,$session_name,$one_mysql_log);}
|
|
if ($DB) {echo "$stmt\n";}
|
|
$qm_conf_ct = mysqli_num_rows($rslt);
|
|
if ($qm_conf_ct > 0)
|
|
{
|
|
$row=mysqli_fetch_row($rslt);
|
|
$SSmenu_background = $row[0];
|
|
$SSframe_background = $row[1];
|
|
$SSstd_row1_background = $row[2];
|
|
$SSstd_row2_background = $row[3];
|
|
$SSstd_row3_background = $row[4];
|
|
$SSstd_row4_background = $row[5];
|
|
$SSstd_row5_background = $row[6];
|
|
$SSalt_row1_background = $row[7];
|
|
$SSalt_row2_background = $row[8];
|
|
$SSalt_row3_background = $row[9];
|
|
$SSweb_logo = $row[10];
|
|
}
|
|
}
|
|
$Mhead_color = $SSstd_row5_background;
|
|
$Mmain_bgcolor = $SSmenu_background;
|
|
$Mhead_color = $SSstd_row5_background;
|
|
|
|
$selected_logo = "./images/vicidial_admin_web_logo.png";
|
|
$logo_new=0;
|
|
$logo_old=0;
|
|
if (file_exists('../$admin_web_directory/images/vicidial_admin_web_logo.png')) {$logo_new++;}
|
|
if (file_exists('vicidial_admin_web_logo.gif')) {$logo_old++;}
|
|
if ($SSweb_logo=='default_new')
|
|
{
|
|
$selected_logo = "./images/vicidial_admin_web_logo.png";
|
|
}
|
|
if ( ($SSweb_logo=='default_old') and ($logo_old > 0) )
|
|
{
|
|
$selected_logo = "../$admin_web_directory/vicidial_admin_web_logo.gif";
|
|
}
|
|
if ( ($SSweb_logo!='default_new') and ($SSweb_logo!='default_old') )
|
|
{
|
|
if (file_exists("../$admin_web_directory/images/vicidial_admin_web_logo$SSweb_logo"))
|
|
{
|
|
$selected_logo = "../$admin_web_directory/images/vicidial_admin_web_logo$SSweb_logo";
|
|
}
|
|
}
|
|
##### END Define colors and logo #####
|
|
|
|
|
|
echo "<link rel=\"stylesheet\" type=\"text/css\" href=\"../agc/css/style.css\" />\n";
|
|
echo "<link rel=\"stylesheet\" type=\"text/css\" href=\"../agc/css/custom.css\" />\n";
|
|
|
|
if ( ($stage == 'login') or ($stage == 'logout') )
|
|
{
|
|
### see if user/pass exist for this user in vicidial_users table
|
|
$valid_user=0;
|
|
$auth_message = user_authorization($user,$pass,'',1,0,0,0,'timeclock');
|
|
if ($auth_message == 'GOOD')
|
|
{$valid_user=1;}
|
|
|
|
# case-sensitive check for user
|
|
if($valid_user>0)
|
|
{
|
|
if ($user != "$VUuser")
|
|
{
|
|
$valid_user=0;
|
|
print "<!-- case check $user|$VD_login|$VUuser: |$valid_user| -->\n";
|
|
}
|
|
}
|
|
|
|
print "<!-- vicidial_users active count for $user: |$valid_user| -->\n";
|
|
|
|
if ($valid_user < 1)
|
|
{
|
|
### NOT A VALID USER/PASS
|
|
$VDdisplayMESSAGE = _QXZ("The user and password you entered are not active in the system<BR>Please try again:");
|
|
if ($auth_message == 'LOCK')
|
|
{$VDdisplayMESSAGE = _QXZ("Too many login attempts, try again in 15 minutes")."<br />";}
|
|
if ($auth_message == 'ERRNETWORK')
|
|
{$VDdisplayMESSAGE = _QXZ("Too many network errors, please contact your administrator")."<br />";}
|
|
if ($auth_message == 'ERRSERVERS')
|
|
{$VDdisplayMESSAGE = _QXZ("No available servers, please contact your administrator")."<br />";}
|
|
if ($auth_message == 'ERRPHONES')
|
|
{$VDdisplayMESSAGE = _QXZ("No available phones, please contact your administrator")."<br />";}
|
|
if ($auth_message == 'ERRDUPLICATE')
|
|
{$VDdisplayMESSAGE = _QXZ("You are already logged in, please log out of your other session first")."<br />";}
|
|
if ($auth_message == 'ERRAGENTS')
|
|
{$VDdisplayMESSAGE = _QXZ("Too many agents logged in, please contact your administrator")."<br />";}
|
|
if ($auth_message == 'ERRCAMPAGENTS')
|
|
{$VDdisplayMESSAGE = _QXZ("Too many agents logged in to this campaign, please contact your manager")."<br />";}
|
|
if ($auth_message == 'ERRCASE')
|
|
{$VDdisplayMESSAGE = _QXZ("Login incorrect, user names are case sensitive")."<br />";}
|
|
if ($auth_message == 'IPBLOCK')
|
|
{$VDdisplayMESSAGE = _QXZ("Your IP Address is not allowed").": $ip<br />";}
|
|
|
|
echo"<HTML><HEAD>\n";
|
|
echo"<TITLE>"._QXZ("Agent Timeclock")."</TITLE>\n";
|
|
echo"<META HTTP-EQUIV=\"Content-Type\" CONTENT=\"text/html; charset=utf-8\">\n";
|
|
echo"</HEAD>\n";
|
|
echo "<BODY BGCOLOR=WHITE MARGINHEIGHT=0 MARGINWIDTH=0>\n";
|
|
echo "<FORM NAME=vicidial_form ID=vicidial_form ACTION=\"$agcPAGE\" METHOD=POST>\n";
|
|
echo "<INPUT TYPE=HIDDEN NAME=referrer VALUE=\"$referrer\">\n";
|
|
echo "<INPUT TYPE=HIDDEN NAME=stage VALUE=\"login\">\n";
|
|
echo "<INPUT TYPE=HIDDEN NAME=DB VALUE=\"$DB\">\n";
|
|
echo "<INPUT TYPE=HIDDEN NAME=phone_login VALUE=\"$phone_login\">\n";
|
|
echo "<INPUT TYPE=HIDDEN NAME=phone_pass VALUE=\"$phone_pass\">\n";
|
|
echo "<INPUT TYPE=HIDDEN NAME=VD_login VALUE=\"$VD_login\">\n";
|
|
echo "<INPUT TYPE=HIDDEN NAME=VD_pass VALUE=\"$VD_pass\">\n";
|
|
echo "<CENTER><BR><font class=\"sd_text\">$VDdisplayMESSAGE</font><BR><BR>";
|
|
echo "<table width=\"100%\"><tr><td></td>\n";
|
|
echo "</tr></table>\n";
|
|
echo "<br /><br /><br /><center><table width=\"460px\" cellpadding=\"3\" cellspacing=\"0\" bgcolor=\"#$SSframe_background\"><tr bgcolor=\"white\">";
|
|
echo "<td align=\"left\" valign=\"bottom\" bgcolor=\"#$SSmenu_background\" width=\"170\"><img src=\"$selected_logo\" border=\"0\" height=\"45\" width=\"170\" alt=\"Agent Screen\" /></td>";
|
|
echo "<td align=\"center\" valign=\"middle\" bgcolor=\"#$SSmenu_background\"> <font class=\"sh_text_white\">"._QXZ("Timeclock")."</font> </td>";
|
|
echo "</tr>\n";
|
|
echo "<tr><td align=\"left\" colspan=\"2\"><font size=\"1\"> </font></td></tr>\n";
|
|
echo "<TR><TD ALIGN=RIGHT><font class=\"skb_text\">"._QXZ("User Login").": </TD>";
|
|
echo "<TD ALIGN=LEFT><INPUT TYPE=TEXT NAME=user SIZE=10 MAXLENGTH=20 VALUE=\"$VD_login\"></TD></TR>\n";
|
|
echo "<TR><TD ALIGN=RIGHT><font class=\"skb_text\">"._QXZ("User Password:")." </TD>";
|
|
echo "<TD ALIGN=LEFT><INPUT TYPE=PASSWORD NAME=pass SIZE=10 MAXLENGTH=20 VALUE=''></TD></TR>\n";
|
|
echo "<TR><TD ALIGN=CENTER COLSPAN=2><INPUT TYPE=SUBMIT NAME=SUBMIT VALUE="._QXZ("SUBMIT")."> </TD></TR>\n";
|
|
echo "<TR><TD ALIGN=LEFT COLSPAN=2><font class=\"body_tiny\"><BR>"._QXZ("VERSION:")." $version "._QXZ("BUILD:")." $build</TD></TR>\n";
|
|
echo "</TABLE>\n";
|
|
echo "</FORM>\n\n";
|
|
echo "</body>\n\n";
|
|
echo "</html>\n\n";
|
|
|
|
exit;
|
|
}
|
|
else
|
|
{
|
|
### VALID USER/PASS, CONTINUE
|
|
|
|
### get name and group for this user
|
|
$stmt="SELECT full_name,user_group from vicidial_users where user='$user' and active='Y';";
|
|
if ($DB) {echo "|$stmt|\n";}
|
|
$rslt=mysql_to_mysqli($stmt, $link);
|
|
$row=mysqli_fetch_row($rslt);
|
|
$full_name = $row[0];
|
|
$user_group = $row[1];
|
|
print "<!-- vicidial_users name and group for $user: |$full_name|$user_group| -->\n";
|
|
|
|
### get vicidial_timeclock_status record count for this user
|
|
$stmt="SELECT count(*) from vicidial_timeclock_status where user='$user';";
|
|
if ($DB) {echo "|$stmt|\n";}
|
|
$rslt=mysql_to_mysqli($stmt, $link);
|
|
$row=mysqli_fetch_row($rslt);
|
|
$vts_count = $row[0];
|
|
|
|
$last_action_sec=99;
|
|
|
|
if ($vts_count > 0)
|
|
{
|
|
### vicidial_timeclock_status record found, grab status and date of last activity
|
|
$stmt="SELECT status,event_epoch from vicidial_timeclock_status where user='$user';";
|
|
if ($DB) {echo "|$stmt|\n";}
|
|
$rslt=mysql_to_mysqli($stmt, $link);
|
|
$row=mysqli_fetch_row($rslt);
|
|
$status = $row[0];
|
|
$event_epoch = $row[1];
|
|
$last_action_date = date("Y-m-d H:i:s", $event_epoch);
|
|
$last_action_sec = ($StarTtimE - $event_epoch);
|
|
if ($last_action_sec > 0)
|
|
{
|
|
$totTIME_H = ($last_action_sec / 3600);
|
|
$totTIME_H_int = round($totTIME_H, 2);
|
|
$totTIME_H_int = intval("$totTIME_H");
|
|
$totTIME_M = ($totTIME_H - $totTIME_H_int);
|
|
$totTIME_M = ($totTIME_M * 60);
|
|
$totTIME_M_int = round($totTIME_M, 2);
|
|
$totTIME_M_int = intval("$totTIME_M");
|
|
$totTIME_S = ($totTIME_M - $totTIME_M_int);
|
|
$totTIME_S = ($totTIME_S * 60);
|
|
$totTIME_S = round($totTIME_S, 0);
|
|
if (strlen($totTIME_H_int) < 1) {$totTIME_H_int = "0";}
|
|
if ($totTIME_M_int < 10) {$totTIME_M_int = "0$totTIME_M_int";}
|
|
if ($totTIME_S < 10) {$totTIME_S = "0$totTIME_S";}
|
|
$totTIME_HMS = "$totTIME_H_int:$totTIME_M_int:$totTIME_S";
|
|
}
|
|
else
|
|
{
|
|
$totTIME_HMS='0:00:00';
|
|
}
|
|
|
|
print "<!-- vicidial_timeclock_status previous status for $user: |$status|$event_epoch|$last_action_sec| -->\n";
|
|
}
|
|
else
|
|
{
|
|
### No vicidial_timeclock_status record found, insert one
|
|
$stmt="INSERT INTO vicidial_timeclock_status set status='START', user='$user', user_group='$user_group', event_epoch='$StarTtimE', ip_address='$ip';";
|
|
if ($DB) {echo "$stmt\n";}
|
|
$rslt=mysql_to_mysqli($stmt, $link);
|
|
$status='START';
|
|
$totTIME_HMS='0:00:00';
|
|
$affected_rows = mysqli_affected_rows($link);
|
|
print "<!-- NEW vicidial_timeclock_status record inserted for $user: |$affected_rows| -->\n";
|
|
}
|
|
if ( ($last_action_sec < 30) and ($status != 'START') )
|
|
{
|
|
### You cannot log in or out within 30 seconds of your last login/logout
|
|
$VDdisplayMESSAGE = _QXZ("You cannot log in or out within 30 seconds of your last login or logout");
|
|
|
|
echo"<HTML><HEAD>\n";
|
|
echo"<TITLE>Agent Timeclock</TITLE>\n";
|
|
echo"<META HTTP-EQUIV=\"Content-Type\" CONTENT=\"text/html; charset=utf-8\">\n";
|
|
echo"</HEAD>\n";
|
|
echo "<BODY BGCOLOR=WHITE MARGINHEIGHT=0 MARGINWIDTH=0>\n";
|
|
echo "<FORM NAME=vicidial_form ID=vicidial_form ACTION=\"$agcPAGE\" METHOD=POST>\n";
|
|
echo "<INPUT TYPE=HIDDEN NAME=stage VALUE=\"login\">\n";
|
|
echo "<INPUT TYPE=HIDDEN NAME=referrer VALUE=\"$referrer\">\n";
|
|
echo "<INPUT TYPE=HIDDEN NAME=DB VALUE=\"$DB\">\n";
|
|
echo "<INPUT TYPE=HIDDEN NAME=phone_login VALUE=\"$phone_login\">\n";
|
|
echo "<INPUT TYPE=HIDDEN NAME=phone_pass VALUE=\"$phone_pass\">\n";
|
|
echo "<INPUT TYPE=HIDDEN NAME=VD_login VALUE=\"$VD_login\">\n";
|
|
echo "<INPUT TYPE=HIDDEN NAME=VD_pass VALUE=\"$VD_pass\">\n";
|
|
echo "<CENTER><BR><font class=\"sd_text\">$VDdisplayMESSAGE</font><BR><BR>";
|
|
echo "<table width=\"100%\"><tr><td></td>\n";
|
|
echo "</tr></table>\n";
|
|
echo "<br /><br /><br /><center><table width=\"460px\" cellpadding=\"3\" cellspacing=\"0\" bgcolor=\"#$SSframe_background\"><tr bgcolor=\"white\">";
|
|
echo "<td align=\"left\" valign=\"bottom\" bgcolor=\"#$SSmenu_background\" width=\"170\"><img src=\"$selected_logo\" border=\"0\" height=\"45\" width=\"170\" alt=\"Agent Screen\" /></td>";
|
|
echo "<td align=\"center\" valign=\"middle\" bgcolor=\"#$SSmenu_background\"> <font class=\"sh_text_white\">"._QXZ("Timeclock")."</font> </td>";
|
|
echo "</tr>\n";
|
|
echo "<tr><td align=\"left\" colspan=\"2\"><font size=\"1\"> </font></td></tr>\n";
|
|
echo "<TR><TD ALIGN=RIGHT><font class=\"skb_text\">"._QXZ("User Login").": </TD>";
|
|
echo "<TD ALIGN=LEFT><INPUT TYPE=TEXT NAME=user SIZE=10 MAXLENGTH=20 VALUE=\"$VD_login\"></TD></TR>\n";
|
|
echo "<TR><TD ALIGN=RIGHT><font class=\"skb_text\">"._QXZ("User Password:")." </TD>";
|
|
echo "<TD ALIGN=LEFT><INPUT TYPE=PASSWORD NAME=pass SIZE=10 MAXLENGTH=20 VALUE=''></TD></TR>\n";
|
|
echo "<TR><TD ALIGN=CENTER COLSPAN=2><INPUT TYPE=SUBMIT NAME=SUBMIT VALUE=\""._QXZ("SUBMIT")."\"> </TD></TR>\n";
|
|
echo "<TR><TD ALIGN=LEFT COLSPAN=2><font class=\"body_tiny\"><BR>"._QXZ("VERSION:")." $version "._QXZ("BUILD:")." $build</TD></TR>\n";
|
|
echo "</TABLE>\n";
|
|
echo "</FORM>\n\n";
|
|
echo "</body>\n\n";
|
|
echo "</html>\n\n";
|
|
|
|
exit;
|
|
}
|
|
|
|
if ($commit == 'YES')
|
|
{
|
|
if ( ( ($status=='AUTOLOGOUT') or ($status=='START') or ($status=='LOGOUT') or ($status=='TIMEOUTLOGOUT') ) and ($stage=='login') )
|
|
{
|
|
$VDdisplayMESSAGE = _QXZ("You have now logged-in");
|
|
$LOGtimeMESSAGE = _QXZ("You logged in at")." $NOW_TIME";
|
|
|
|
### Add a record to the timeclock log
|
|
$stmt="INSERT INTO vicidial_timeclock_log set event='LOGIN', user='$user', user_group='$user_group', event_epoch='$StarTtimE', ip_address='$ip', event_date='$NOW_TIME';";
|
|
if ($DB) {echo "$stmt\n";}
|
|
$rslt=mysql_to_mysqli($stmt, $link);
|
|
$affected_rows = mysqli_affected_rows($link);
|
|
$timeclock_id = mysqli_insert_id($link);
|
|
print "<!-- NEW vicidial_timeclock_log record inserted for $user: |$affected_rows|$timeclock_id| -->\n";
|
|
|
|
### Update the user's timeclock status record
|
|
$stmt="UPDATE vicidial_timeclock_status set status='LOGIN', user_group='$user_group', event_epoch='$StarTtimE', ip_address='$ip' where user='$user';";
|
|
if ($DB) {echo "$stmt\n";}
|
|
$rslt=mysql_to_mysqli($stmt, $link);
|
|
$affected_rows = mysqli_affected_rows($link);
|
|
print "<!-- vicidial_timeclock_status record updated for $user: |$affected_rows| -->\n";
|
|
|
|
### Add a record to the timeclock audit log
|
|
$stmt="INSERT INTO vicidial_timeclock_audit_log set timeclock_id='$timeclock_id', event='LOGIN', user='$user', user_group='$user_group', event_epoch='$StarTtimE', ip_address='$ip', event_date='$NOW_TIME';";
|
|
if ($DB) {echo "$stmt\n";}
|
|
$rslt=mysql_to_mysqli($stmt, $link);
|
|
$affected_rows = mysqli_affected_rows($link);
|
|
print "<!-- NEW vicidial_timeclock_audit_log record inserted for $user: |$affected_rows| -->\n";
|
|
}
|
|
|
|
if ( ($status=='LOGIN') and ($stage=='logout') )
|
|
{
|
|
$VDdisplayMESSAGE = _QXZ("You have now logged-out");
|
|
$LOGtimeMESSAGE = _QXZ("You logged out at")." $NOW_TIME<BR>"._QXZ("Amount of time you were logged-in:")." $totTIME_HMS";
|
|
|
|
### Add a record to the timeclock log
|
|
$stmt="INSERT INTO vicidial_timeclock_log set event='LOGOUT', user='$user', user_group='$user_group', event_epoch='$StarTtimE', ip_address='$ip', login_sec='$last_action_sec', event_date='$NOW_TIME';";
|
|
if ($DB) {echo "$stmt\n";}
|
|
$rslt=mysql_to_mysqli($stmt, $link);
|
|
$affected_rows = mysqli_affected_rows($link);
|
|
$timeclock_id = mysqli_insert_id($link);
|
|
print "<!-- NEW vicidial_timeclock_log record inserted for $user: |$affected_rows|$timeclock_id| -->\n";
|
|
|
|
### Update last login record in the timeclock log
|
|
$stmt="UPDATE vicidial_timeclock_log set login_sec='$last_action_sec',tcid_link='$timeclock_id' where event='LOGIN' and user='$user' order by timeclock_id desc limit 1;";
|
|
if ($DB) {echo "$stmt\n";}
|
|
$rslt=mysql_to_mysqli($stmt, $link);
|
|
$affected_rows = mysqli_affected_rows($link);
|
|
print "<!-- vicidial_timeclock_log record updated for $user: |$affected_rows| -->\n";
|
|
|
|
### Update the user's timeclock status record
|
|
$stmt="UPDATE vicidial_timeclock_status set status='LOGOUT', user_group='$user_group', event_epoch='$StarTtimE', ip_address='$ip' where user='$user';";
|
|
if ($DB) {echo "$stmt\n";}
|
|
$rslt=mysql_to_mysqli($stmt, $link);
|
|
$affected_rows = mysqli_affected_rows($link);
|
|
print "<!-- vicidial_timeclock_status record updated for $user: |$affected_rows| -->\n";
|
|
|
|
### Add a record to the timeclock audit log
|
|
$stmt="INSERT INTO vicidial_timeclock_audit_log set timeclock_id='$timeclock_id', event='LOGOUT', user='$user', user_group='$user_group', event_epoch='$StarTtimE', ip_address='$ip', login_sec='$last_action_sec', event_date='$NOW_TIME';";
|
|
if ($DB) {echo "$stmt\n";}
|
|
$rslt=mysql_to_mysqli($stmt, $link);
|
|
$affected_rows = mysqli_affected_rows($link);
|
|
print "<!-- NEW vicidial_timeclock_audit_log record inserted for $user: |$affected_rows| -->\n";
|
|
|
|
### Update last login record in the timeclock audit log
|
|
$stmt="UPDATE vicidial_timeclock_audit_log set login_sec='$last_action_sec',tcid_link='$timeclock_id' where event='LOGIN' and user='$user' order by timeclock_id desc limit 1;";
|
|
if ($DB) {echo "$stmt\n";}
|
|
$rslt=mysql_to_mysqli($stmt, $link);
|
|
$affected_rows = mysqli_affected_rows($link);
|
|
print "<!-- vicidial_timeclock_audit_log record updated for $user: |$affected_rows| -->\n";
|
|
}
|
|
|
|
if ( ( ( ($status=='AUTOLOGOUT') or ($status=='START') or ($status=='LOGOUT') or ($status=='TIMEOUTLOGOUT') ) and ($stage=='logout') ) or ( ($status=='LOGIN') and ($stage=='login') ) )
|
|
{echo _QXZ("ERROR: timeclock log entry already made:")." $status|$stage"; exit;}
|
|
|
|
$BACKlink='';
|
|
if ($referrer=='agent')
|
|
{$BACKlink = "<A HREF=\"./$SSagent_script?pl=$phone_login&pp=$phone_pass&VD_login=$user\"><font class=\"sd_text\">"._QXZ("BACK to Agent Login Screen")."</font></A>";}
|
|
if ($referrer=='admin')
|
|
{$BACKlink = "<A HREF=\"/$admin_web_directory/admin.php\"><font class=\"sd_text\">"._QXZ("BACK to Administration")."</font></A>";}
|
|
if ( ($referrer=='welcome') or (strlen($BACKlink) < 10) )
|
|
{$BACKlink = "<A HREF=\"$welcomeURL\"><font class=\"sd_text\">"._QXZ("BACK to Welcome Screen")."</font></A>";}
|
|
|
|
echo"<HTML><HEAD>\n";
|
|
echo"<TITLE>"._QXZ("Agent Timeclock")."</TITLE>\n";
|
|
echo"<META HTTP-EQUIV=\"Content-Type\" CONTENT=\"text/html; charset=utf-8\">\n";
|
|
echo"</HEAD>\n";
|
|
echo "<BODY BGCOLOR=WHITE MARGINHEIGHT=0 MARGINWIDTH=0>\n";
|
|
echo "<CENTER><BR><font class=\"sd_text\">$VDdisplayMESSAGE</font><BR><BR>";
|
|
echo "<table width=\"100%\"><tr><td></td>\n";
|
|
echo "</tr></table>\n";
|
|
echo "<br /><br /><br /><center><table width=\"460px\" cellpadding=\"3\" cellspacing=\"0\" bgcolor=\"#$SSframe_background\"><tr bgcolor=\"white\">";
|
|
echo "<td align=\"left\" valign=\"bottom\" bgcolor=\"#$SSmenu_background\" width=\"170\"><img src=\"$selected_logo\" border=\"0\" height=\"45\" width=\"170\" alt=\"Agent Screen\" /></td>";
|
|
echo "<td align=\"center\" valign=\"middle\" bgcolor=\"#$SSmenu_background\"> <font class=\"sh_text_white\">"._QXZ("Timeclock")."</font> </td>";
|
|
echo "</tr>\n";
|
|
echo "<tr><td align=\"left\" colspan=\"2\"><font size=\"1\"> </font></td></tr>\n";
|
|
echo "<TR><TD ALIGN=CENTER COLSPAN=2><font size=3><font class=\"skb_text\"> $LOGtimeMESSAGE<BR> </font></TD></TR>\n";
|
|
echo "<TR><TD ALIGN=CENTER COLSPAN=2><B> $BACKlink <BR> </B></TD></TR>\n";
|
|
echo "<TR><TD ALIGN=LEFT COLSPAN=2><font class=\"body_tiny\"><BR>"._QXZ("VERSION:")." $version "._QXZ("BUILD:")." $build</TD></TR>\n";
|
|
echo "</TABLE>\n";
|
|
echo "</body>\n\n";
|
|
echo "</html>\n\n";
|
|
|
|
exit;
|
|
}
|
|
|
|
|
|
|
|
|
|
if ( ($status=='AUTOLOGOUT') or ($status=='START') or ($status=='LOGOUT') or ($status=='TIMEOUTLOGOUT') )
|
|
{
|
|
$VDdisplayMESSAGE = _QXZ("Time since you were last logged-in:")." $totTIME_HMS";
|
|
$log_action = 'login';
|
|
$button_name = _QXZ("LOGIN");;
|
|
$LOGtimeMESSAGE = _QXZ("You last logged-out at:")." $last_action_date<BR><BR>"._QXZ("Click LOGIN below to log-in");
|
|
}
|
|
if ($status=='LOGIN')
|
|
{
|
|
$VDdisplayMESSAGE = _QXZ("Amount of time you have been logged-in:")." $totTIME_HMS";
|
|
$log_action = 'logout';
|
|
$button_name = _QXZ("LOGOUT");
|
|
$LOGtimeMESSAGE = _QXZ("You logged-in at:")." $last_action_date<BR>"._QXZ("Amount of time you have been logged-in:")." $totTIME_HMS<BR><BR>"._QXZ("Click LOGOUT below to log-out");
|
|
}
|
|
|
|
echo"<HTML><HEAD>\n";
|
|
echo"<TITLE>"._QXZ("Agent Timeclock")."</TITLE>\n";
|
|
echo"<META HTTP-EQUIV=\"Content-Type\" CONTENT=\"text/html; charset=utf-8\">\n";
|
|
echo"</HEAD>\n";
|
|
echo "<BODY BGCOLOR=WHITE MARGINHEIGHT=0 MARGINWIDTH=0>\n";
|
|
echo "<FORM NAME=vicidial_form ID=vicidial_form ACTION=\"$agcPAGE\" METHOD=POST>\n";
|
|
echo "<INPUT TYPE=HIDDEN NAME=stage VALUE=\"$log_action\">\n";
|
|
echo "<INPUT TYPE=HIDDEN NAME=commit VALUE=\"YES\">\n";
|
|
echo "<INPUT TYPE=HIDDEN NAME=referrer VALUE=\"$referrer\">\n";
|
|
echo "<INPUT TYPE=HIDDEN NAME=DB VALUE=\"$DB\">\n";
|
|
echo "<INPUT TYPE=HIDDEN NAME=phone_login VALUE=\"$phone_login\">\n";
|
|
echo "<INPUT TYPE=HIDDEN NAME=phone_pass VALUE=\"$phone_pass\">\n";
|
|
echo "<INPUT TYPE=HIDDEN NAME=VD_login VALUE=\"$VD_login\">\n";
|
|
echo "<INPUT TYPE=HIDDEN NAME=VD_pass VALUE=\"$VD_pass\">\n";
|
|
echo "<INPUT TYPE=HIDDEN NAME=user VALUE=\"$user\">\n";
|
|
echo "<INPUT TYPE=HIDDEN NAME=pass VALUE=\"$pass\">\n";
|
|
echo "<CENTER><BR><font class=\"sd_text\">$VDdisplayMESSAGE</font><BR><BR>";
|
|
echo "<table width=\"100%\"><tr><td></td>\n";
|
|
echo "</tr></table>\n";
|
|
echo "<br /><br /><br /><center><table width=\"460px\" cellpadding=\"3\" cellspacing=\"0\" bgcolor=\"#$SSframe_background\"><tr bgcolor=\"white\">";
|
|
echo "<td align=\"left\" valign=\"bottom\" bgcolor=\"#$SSmenu_background\" width=\"170\"><img src=\"$selected_logo\" border=\"0\" height=\"45\" width=\"170\" alt=\"Agent Screen\" /></td>";
|
|
echo "<td align=\"center\" valign=\"middle\" bgcolor=\"#$SSmenu_background\"> <font class=\"sh_text_white\">"._QXZ("Timeclock")."</font> </td>";
|
|
echo "</tr>\n";
|
|
echo "<tr><td align=\"left\" colspan=\"2\"><font size=\"1\"> </font></td></tr>\n";
|
|
echo "<TR><TD ALIGN=CENTER COLSPAN=2><font size=3><font class=\"skb_text\"> $LOGtimeMESSAGE<BR> </font></TD></TR>\n";
|
|
echo "<TR><TD ALIGN=CENTER COLSPAN=2><INPUT TYPE=SUBMIT NAME=\"$button_name\" VALUE=\"$button_name\"> </TD></TR>\n";
|
|
echo "<TR><TD ALIGN=LEFT COLSPAN=2><font size=1><BR>"._QXZ("VERSION:")." $version "._QXZ("BUILD:")." $build</TD></TR>\n";
|
|
echo "</TABLE>\n";
|
|
echo "</FORM>\n\n";
|
|
echo "</body>\n\n";
|
|
echo "</html>\n\n";
|
|
|
|
exit;
|
|
}
|
|
|
|
|
|
|
|
}
|
|
|
|
else
|
|
{
|
|
echo"<HTML><HEAD>\n";
|
|
echo"<TITLE>"._QXZ("Agent Timeclock")."</TITLE>\n";
|
|
echo"<META HTTP-EQUIV=\"Content-Type\" CONTENT=\"text/html; charset=utf-8\">\n";
|
|
echo"</HEAD>\n";
|
|
echo "<BODY BGCOLOR=WHITE MARGINHEIGHT=0 MARGINWIDTH=0>\n";
|
|
echo "<FORM NAME=vicidial_form ID=vicidial_form ACTION=\"$agcPAGE\" METHOD=POST>\n";
|
|
echo "<INPUT TYPE=HIDDEN NAME=stage VALUE=\"login\">\n";
|
|
echo "<INPUT TYPE=HIDDEN NAME=referrer VALUE=\"$referrer\">\n";
|
|
echo "<INPUT TYPE=HIDDEN NAME=DB VALUE=\"$DB\">\n";
|
|
echo "<INPUT TYPE=HIDDEN NAME=phone_login VALUE=\"$phone_login\">\n";
|
|
echo "<INPUT TYPE=HIDDEN NAME=phone_pass VALUE=\"$phone_pass\">\n";
|
|
echo "<INPUT TYPE=HIDDEN NAME=VD_login VALUE=\"$VD_login\">\n";
|
|
echo "<INPUT TYPE=HIDDEN NAME=VD_pass VALUE=\"$VD_pass\">\n";
|
|
echo "<CENTER><BR><font class=\"sd_text\">$VDdisplayMESSAGE</font><BR><BR>";
|
|
echo "<table width=\"100%\"><tr><td></td>\n";
|
|
echo "</tr></table>\n";
|
|
echo "<br /><br /><br /><center><table width=\"460px\" cellpadding=\"3\" cellspacing=\"0\" bgcolor=\"#$SSframe_background\"><tr bgcolor=\"white\">";
|
|
echo "<td align=\"left\" valign=\"bottom\" bgcolor=\"#$SSmenu_background\" width=\"170\"><img src=\"$selected_logo\" border=\"0\" height=\"45\" width=\"170\" alt=\"Agent Screen\" /></td>";
|
|
echo "<td align=\"center\" valign=\"middle\" bgcolor=\"#$SSmenu_background\"> <font class=\"sh_text_white\">"._QXZ("Timeclock")."</font> </td>";
|
|
echo "</tr>\n";
|
|
echo "<tr><td align=\"left\" colspan=\"2\"><font size=\"1\"> </font></td></tr>\n";
|
|
echo "<TR><TD ALIGN=RIGHT><font class=\"skb_text\">"._QXZ("User Login").": </TD>";
|
|
echo "<TD ALIGN=LEFT><INPUT TYPE=TEXT NAME=user SIZE=10 MAXLENGTH=20 VALUE=\"$VD_login\"></TD></TR>\n";
|
|
echo "<TR><TD ALIGN=RIGHT><font class=\"skb_text\">"._QXZ("User Password:")." </TD>";
|
|
echo "<TD ALIGN=LEFT><INPUT TYPE=PASSWORD NAME=pass SIZE=10 MAXLENGTH=20 VALUE=''></TD></TR>\n";
|
|
echo "<TR><TD ALIGN=CENTER COLSPAN=2><INPUT TYPE=SUBMIT NAME=SUBMIT VALUE="._QXZ("SUBMIT")."> </TD></TR>\n";
|
|
echo "<TR><TD ALIGN=LEFT COLSPAN=2><font class=\"body_tiny\"><BR>"._QXZ("VERSION:")." $version "._QXZ("BUILD:")." $build</TD></TR>\n";
|
|
echo "</TABLE>\n";
|
|
echo "</FORM>\n\n";
|
|
echo "</body>\n\n";
|
|
echo "</html>\n\n";
|
|
}
|
|
|
|
exit;
|
|
|
|
?>
|