From 733faad4ff5d95bab4fa162ab9162b8e4ea5b5b6 Mon Sep 17 00:00:00 2001
From: mattf <mattf@3d104415-ff17-0410-8863-d5cf3c621b8a>
Date: Fri, 7 Jul 2006 23:05:35 +0000
Subject: [PATCH] restructuring of files 3

git-svn-id: svn://192.168.202.10@20 3d104415-ff17-0410-8863-d5cf3c621b8a
---
 www/vicidial/AST_CLOSERstats.php              |  396 +
 www/vicidial/AST_VDADstats.php                |  417 ++
 www/vicidial/AST_VICIDIAL_hopperlist.php      |  161 +
 www/vicidial/AST_admin_log_display.php        |  118 +
 www/vicidial/AST_agent_performance.php        |  232 +
 www/vicidial/AST_agent_performance_detail.php |  406 +
 www/vicidial/AST_agent_time_sheet.php         |  281 +
 www/vicidial/AST_agent_time_sheet_archive.php |  281 +
 www/vicidial/AST_parkstats.php                |  396 +
 www/vicidial/AST_server_performance.php       |  310 +
 www/vicidial/AST_timeonVDAD.php               |  255 +
 www/vicidial/AST_timeonVDAD_closer.php        |  316 +
 www/vicidial/AST_timeonVDADall.php            |  391 +
 www/vicidial/AST_timeonVDADall_SIPmonitor.php |  395 +
 www/vicidial/AST_timeoncall.php               |  202 +
 www/vicidial/AST_timeonpark.php               |  219 +
 www/vicidial/admin.php                        | 6514 +++++++++++++++++
 www/vicidial/admin_modify_lead.php            |  476 ++
 www/vicidial/admin_search_lead.php            |  224 +
 www/vicidial/closer-fronter_popup.php         |  515 ++
 www/vicidial/closer-fronter_popup2.php        |  430 ++
 www/vicidial/closer.php                       |  353 +
 www/vicidial/closer_dispo.php                 |  329 +
 www/vicidial/closer_popup.php                 |  453 ++
 www/vicidial/count.htm                        |    1 +
 www/vicidial/dbconnect.php                    |   20 +
 www/vicidial/group_hourly_stats.php           |  252 +
 www/vicidial/help.gif                         |  Bin 0 -> 492 bytes
 www/vicidial/listloader.php                   |  698 ++
 www/vicidial/listloader.pl                    |  690 ++
 www/vicidial/listloaderMAIN.php               |   79 +
 www/vicidial/listloader_rowdisplay.pl         |   62 +
 www/vicidial/listloader_super.pl              |  691 ++
 www/vicidial/log_test.php                     |   37 +
 www/vicidial/new_listloader_superL.php        | 1364 ++++
 www/vicidial/record_conf_1_hour.php           |  156 +
 www/vicidial/remote_dispo.php                 |  327 +
 www/vicidial/server_stats.php                 |   96 +
 www/vicidial/test.txt                         |    1 +
 www/vicidial/user_stats.php                   |  316 +
 www/vicidial/user_status.php                  |  238 +
 www/vicidial/vdremote.php                     |  602 ++
 42 files changed, 19700 insertions(+)
 create mode 100644 www/vicidial/AST_CLOSERstats.php
 create mode 100644 www/vicidial/AST_VDADstats.php
 create mode 100644 www/vicidial/AST_VICIDIAL_hopperlist.php
 create mode 100644 www/vicidial/AST_admin_log_display.php
 create mode 100644 www/vicidial/AST_agent_performance.php
 create mode 100644 www/vicidial/AST_agent_performance_detail.php
 create mode 100644 www/vicidial/AST_agent_time_sheet.php
 create mode 100644 www/vicidial/AST_agent_time_sheet_archive.php
 create mode 100644 www/vicidial/AST_parkstats.php
 create mode 100644 www/vicidial/AST_server_performance.php
 create mode 100644 www/vicidial/AST_timeonVDAD.php
 create mode 100644 www/vicidial/AST_timeonVDAD_closer.php
 create mode 100644 www/vicidial/AST_timeonVDADall.php
 create mode 100644 www/vicidial/AST_timeonVDADall_SIPmonitor.php
 create mode 100644 www/vicidial/AST_timeoncall.php
 create mode 100644 www/vicidial/AST_timeonpark.php
 create mode 100644 www/vicidial/admin.php
 create mode 100644 www/vicidial/admin_modify_lead.php
 create mode 100644 www/vicidial/admin_search_lead.php
 create mode 100644 www/vicidial/closer-fronter_popup.php
 create mode 100644 www/vicidial/closer-fronter_popup2.php
 create mode 100644 www/vicidial/closer.php
 create mode 100644 www/vicidial/closer_dispo.php
 create mode 100644 www/vicidial/closer_popup.php
 create mode 100644 www/vicidial/count.htm
 create mode 100644 www/vicidial/dbconnect.php
 create mode 100644 www/vicidial/group_hourly_stats.php
 create mode 100644 www/vicidial/help.gif
 create mode 100644 www/vicidial/listloader.php
 create mode 100644 www/vicidial/listloader.pl
 create mode 100644 www/vicidial/listloaderMAIN.php
 create mode 100644 www/vicidial/listloader_rowdisplay.pl
 create mode 100644 www/vicidial/listloader_super.pl
 create mode 100644 www/vicidial/log_test.php
 create mode 100644 www/vicidial/new_listloader_superL.php
 create mode 100644 www/vicidial/record_conf_1_hour.php
 create mode 100644 www/vicidial/remote_dispo.php
 create mode 100644 www/vicidial/server_stats.php
 create mode 100644 www/vicidial/test.txt
 create mode 100644 www/vicidial/user_stats.php
 create mode 100644 www/vicidial/user_status.php
 create mode 100644 www/vicidial/vdremote.php

diff --git a/www/vicidial/AST_CLOSERstats.php b/www/vicidial/AST_CLOSERstats.php
new file mode 100644
index 00000000..b7a7bb8c
--- /dev/null
+++ b/www/vicidial/AST_CLOSERstats.php
@@ -0,0 +1,396 @@
+<? 
+### AST_CLOSERstats.php
+### 
+### Copyright (C) 2006  Matt Florell <vicidial@gmail.com>    LICENSE: GPLv2
+###
+# CHANGES
+#
+# 60619-1714 - Added variable filtering to eliminate SQL injection attack threat
+#            - Added required user/pass to gain access to this page
+#
+
+require("dbconnect.php");
+
+$PHP_AUTH_USER=$_SERVER['PHP_AUTH_USER'];
+$PHP_AUTH_PW=$_SERVER['PHP_AUTH_PW'];
+$PHP_SELF=$_SERVER['PHP_SELF'];
+if (isset($_GET["group"]))				{$group=$_GET["group"];}
+	elseif (isset($_POST["group"]))		{$group=$_POST["group"];}
+if (isset($_GET["query_date"]))				{$query_date=$_GET["query_date"];}
+	elseif (isset($_POST["query_date"]))		{$query_date=$_POST["query_date"];}
+if (isset($_GET["submit"]))				{$submit=$_GET["submit"];}
+	elseif (isset($_POST["submit"]))		{$submit=$_POST["submit"];}
+if (isset($_GET["SUBMIT"]))				{$SUBMIT=$_GET["SUBMIT"];}
+	elseif (isset($_POST["SUBMIT"]))		{$SUBMIT=$_POST["SUBMIT"];}
+
+$PHP_AUTH_USER = ereg_replace("[^0-9a-zA-Z]","",$PHP_AUTH_USER);
+$PHP_AUTH_PW = ereg_replace("[^0-9a-zA-Z]","",$PHP_AUTH_PW);
+
+	$stmt="SELECT count(*) from vicidial_users where user='$PHP_AUTH_USER' and pass='$PHP_AUTH_PW' and user_level > 6;";
+	if ($DB) {echo "|$stmt|\n";}
+	$rslt=mysql_query($stmt, $link);
+	$row=mysql_fetch_row($rslt);
+	$auth=$row[0];
+
+  if( (strlen($PHP_AUTH_USER)<2) or (strlen($PHP_AUTH_PW)<2) or (!$auth))
+	{
+    Header("WWW-Authenticate: Basic realm=\"VICI-PROJECTS\"");
+    Header("HTTP/1.0 401 Unauthorized");
+    echo "Invalid Username/Password: |$PHP_AUTH_USER|$PHP_AUTH_PW|\n";
+    exit;
+	}
+
+$NOW_DATE = date("Y-m-d");
+$NOW_TIME = date("Y-m-d H:i:s");
+$STARTtime = date("U");
+if (!isset($group)) {$group = '';}
+if (!isset($query_date)) {$query_date = $NOW_DATE;}
+
+$stmt="select group_id from vicidial_inbound_groups;";
+$rslt=mysql_query($stmt, $link);
+if ($DB) {echo "$stmt\n";}
+$groups_to_print = mysql_num_rows($rslt);
+$i=0;
+while ($i < $groups_to_print)
+	{
+	$row=mysql_fetch_row($rslt);
+	$groups[$i] =$row[0];
+	$i++;
+	}
+?>
+
+<HTML>
+<HEAD>
+<STYLE type="text/css">
+<!--
+   .green {color: white; background-color: green}
+   .red {color: white; background-color: red}
+   .blue {color: white; background-color: blue}
+   .purple {color: white; background-color: purple}
+-->
+ </STYLE>
+
+<? 
+echo "<META HTTP-EQUIV=\"Content-Type\" CONTENT=\"text/html; charset=utf-8\">\n";
+echo "<TITLE>VICIDIAL: VDAD Closer Stats</TITLE></HEAD><BODY BGCOLOR=WHITE>\n";
+echo "<FORM ACTION=\"$PHP_SELF\" METHOD=GET>\n";
+echo "<INPUT TYPE=TEXT NAME=query_date SIZE=10 MAXLENGTH=10 VALUE=\"$query_date\">\n";
+echo "<SELECT SIZE=1 NAME=group>\n";
+	$o=0;
+	while ($groups_to_print > $o)
+	{
+		if ($groups[$o] == $group) {echo "<option selected value=\"$groups[$o]\">$groups[$o]</option>\n";}
+		  else {echo "<option value=\"$groups[$o]\">$groups[$o]</option>\n";}
+		$o++;
+	}
+echo "</SELECT>\n";
+echo "<INPUT TYPE=submit NAME=SUBMIT VALUE=SUBMIT>\n";
+echo "<FONT FACE=\"ARIAL,HELVETICA\" COLOR=BLACK SIZE=2> &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; <a href=\"./admin.php?ADD=3111&group_id=$group\">MODIFY</a> | <a href=\"./server_stats.php\">REPORTS</a> </FONT>\n";
+echo "</FORM>\n\n";
+
+echo "<PRE><FONT SIZE=2>\n\n";
+
+
+if (!$group)
+{
+echo "\n\n";
+echo "PLEASE SELECT A CAMPAIGN AND DATE ABOVE AND CLICK SUBMIT\n";
+}
+
+else
+{
+
+
+echo "VICIDIAL: Auto-dial Closer Stats                      $NOW_TIME\n";
+
+echo "\n";
+echo "---------- TOTALS\n";
+
+$stmt="select count(*),sum(length_in_sec) from vicidial_closer_log where call_date >= '$query_date 00:00:01' and call_date <= '$query_date 23:59:59' and campaign_id='" . mysql_real_escape_string($group) . "';";
+$rslt=mysql_query($stmt, $link);
+if ($DB) {echo "$stmt\n";}
+$row=mysql_fetch_row($rslt);
+
+$TOTALcalls =	sprintf("%10s", $row[0]);
+$average_hold_seconds = ($row[1] / $row[0]);
+$average_hold_seconds = round($average_hold_seconds, 0);
+$average_hold_seconds =	sprintf("%10s", $average_hold_seconds);
+
+echo "Total Calls placed from this Campaign:        $TOTALcalls\n";
+echo "Average Call Length for all Calls in seconds: $average_hold_seconds\n";
+
+echo "\n";
+echo "---------- DROPS\n";
+
+$stmt="select count(*),sum(length_in_sec) from vicidial_closer_log where call_date >= '$query_date 00:00:01' and call_date <= '$query_date 23:59:59' and campaign_id='" . mysql_real_escape_string($group) . "' and status='DROP' and (length_in_sec <= 999 or length_in_sec is null);";
+$rslt=mysql_query($stmt, $link);
+if ($DB) {echo "$stmt\n";}
+$row=mysql_fetch_row($rslt);
+
+$DROPcalls =	sprintf("%10s", $row[0]);
+$DROPpercent = (($DROPcalls / $TOTALcalls) * 100);
+$DROPpercent = round($DROPpercent, 0);
+
+$average_hold_seconds = ($row[1] / $row[0]);
+$average_hold_seconds = round($average_hold_seconds, 0);
+$average_hold_seconds =	sprintf("%10s", $average_hold_seconds);
+
+echo "Total DROP Calls:                             $DROPcalls  $DROPpercent%\n";
+echo "Average Length for DROP Calls in seconds:     $average_hold_seconds\n";
+
+
+##############################
+#########  USER STATS
+
+echo "\n";
+echo "---------- USER STATS\n";
+echo "+--------------------------+------------+--------+--------+\n";
+echo "| USER                     | CALLS      | TIME M | AVRG M |\n";
+echo "+--------------------------+------------+--------+--------+\n";
+
+$stmt="select vicidial_closer_log.user,full_name,count(*),sum(length_in_sec),avg(length_in_sec) from vicidial_closer_log,vicidial_users where call_date >= '$query_date 00:00:01' and call_date <= '$query_date 23:59:59' and  campaign_id='" . mysql_real_escape_string($group) . "' and vicidial_closer_log.user is not null and length_in_sec is not null and length_in_sec > 4 and vicidial_closer_log.user=vicidial_users.user group by vicidial_closer_log.user;";
+$rslt=mysql_query($stmt, $link);
+if ($DB) {echo "$stmt\n";}
+$users_to_print = mysql_num_rows($rslt);
+$i=0;
+while ($i < $users_to_print)
+	{
+	$row=mysql_fetch_row($rslt);
+
+	$user =			sprintf("%-6s", $row[0]);
+	$full_name =	sprintf("%-15s", $row[1]); while(strlen($full_name)>15) {$full_name = substr("$full_name", 0, -1);}
+	$USERcalls =	sprintf("%10s", $row[2]);
+	$USERtotTALK =	$row[3];
+	$USERavgTALK =	$row[4];
+
+	$USERtotTALK_M = ($USERtotTALK / 60);
+	$USERtotTALK_M = round($USERtotTALK_M, 2);
+	$USERtotTALK_M_int = intval("$USERtotTALK_M");
+	$USERtotTALK_S = ($USERtotTALK_M - $USERtotTALK_M_int);
+	$USERtotTALK_S = ($USERtotTALK_S * 60);
+	$USERtotTALK_S = round($USERtotTALK_S, 0);
+	if ($USERtotTALK_S < 10) {$USERtotTALK_S = "0$USERtotTALK_S";}
+	$USERtotTALK_MS = "$USERtotTALK_M_int:$USERtotTALK_S";
+	$USERtotTALK_MS =		sprintf("%6s", $USERtotTALK_MS);
+
+	$USERavgTALK_M = ($USERavgTALK / 60);
+	$USERavgTALK_M = round($USERavgTALK_M, 2);
+	$USERavgTALK_M_int = intval("$USERavgTALK_M");
+	$USERavgTALK_S = ($USERavgTALK_M - $USERavgTALK_M_int);
+	$USERavgTALK_S = ($USERavgTALK_S * 60);
+	$USERavgTALK_S = round($USERavgTALK_S, 0);
+	if ($USERavgTALK_S < 10) {$USERavgTALK_S = "0$USERavgTALK_S";}
+	$USERavgTALK_MS = "$USERavgTALK_M_int:$USERavgTALK_S";
+	$USERavgTALK_MS =		sprintf("%6s", $USERavgTALK_MS);
+
+	echo "| $user - $full_name | $USERcalls | $USERtotTALK_MS | $USERavgTALK_MS |\n";
+
+	$i++;
+	}
+
+echo "+--------------------------+------------+--------+--------+\n";
+
+##############################
+#########  TIME STATS
+
+echo "\n";
+echo "---------- TIME STATS\n";
+
+echo "<FONT SIZE=0>\n";
+
+$hi_hour_count=0;
+$last_full_record=0;
+$i=0;
+$h=0;
+while ($i <= 96)
+	{
+	$stmt="select count(*) from vicidial_closer_log where call_date >= '$query_date $h:00:00' and call_date <= '$query_date $h:14:59' and campaign_id='" . mysql_real_escape_string($group) . "';";
+	$rslt=mysql_query($stmt, $link);
+	if ($DB) {echo "$stmt\n";}
+	$row=mysql_fetch_row($rslt);
+	$hour_count[$i] = $row[0];
+	if ($hour_count[$i] > $hi_hour_count) {$hi_hour_count = $hour_count[$i];}
+	if ($hour_count[$i] > 0) {$last_full_record = $i;}
+	$stmt="select count(*) from vicidial_closer_log where call_date >= '$query_date $h:00:00' and call_date <= '$query_date $h:14:59' and campaign_id='" . mysql_real_escape_string($group) . "' and status='DROP';";
+	$rslt=mysql_query($stmt, $link);
+	if ($DB) {echo "$stmt\n";}
+	$row=mysql_fetch_row($rslt);
+	$drop_count[$i] = $row[0];
+	$i++;
+
+
+	$stmt="select count(*) from vicidial_closer_log where call_date >= '$query_date $h:15:00' and call_date <= '$query_date $h:29:59' and campaign_id='$group';";
+	$rslt=mysql_query($stmt, $link);
+	if ($DB) {echo "$stmt\n";}
+	$row=mysql_fetch_row($rslt);
+	$hour_count[$i] = $row[0];
+	if ($hour_count[$i] > $hi_hour_count) {$hi_hour_count = $hour_count[$i];}
+	if ($hour_count[$i] > 0) {$last_full_record = $i;}
+	$stmt="select count(*) from vicidial_closer_log where call_date >= '$query_date $h:15:00' and call_date <= '$query_date $h:29:59' and campaign_id='" . mysql_real_escape_string($group) . "' and status='DROP';";
+	$rslt=mysql_query($stmt, $link);
+	if ($DB) {echo "$stmt\n";}
+	$row=mysql_fetch_row($rslt);
+	$drop_count[$i] = $row[0];
+	$i++;
+
+	$stmt="select count(*) from vicidial_closer_log where call_date >= '$query_date $h:30:00' and call_date <= '$query_date $h:44:59' and campaign_id='" . mysql_real_escape_string($group) . "';";
+	$rslt=mysql_query($stmt, $link);
+	if ($DB) {echo "$stmt\n";}
+	$row=mysql_fetch_row($rslt);
+	$hour_count[$i] = $row[0];
+	if ($hour_count[$i] > $hi_hour_count) {$hi_hour_count = $hour_count[$i];}
+	if ($hour_count[$i] > 0) {$last_full_record = $i;}
+	$stmt="select count(*) from vicidial_closer_log where call_date >= '$query_date $h:30:00' and call_date <= '$query_date $h:44:59' and campaign_id='" . mysql_real_escape_string($group) . "' and status='DROP';";
+	$rslt=mysql_query($stmt, $link);
+	if ($DB) {echo "$stmt\n";}
+	$row=mysql_fetch_row($rslt);
+	$drop_count[$i] = $row[0];
+	$i++;
+
+	$stmt="select count(*) from vicidial_closer_log where call_date >= '$query_date $h:45:00' and call_date <= '$query_date $h:59:59' and campaign_id='" . mysql_real_escape_string($group) . "';";
+	$rslt=mysql_query($stmt, $link);
+	if ($DB) {echo "$stmt\n";}
+	$row=mysql_fetch_row($rslt);
+	$hour_count[$i] = $row[0];
+	if ($hour_count[$i] > $hi_hour_count) {$hi_hour_count = $hour_count[$i];}
+	if ($hour_count[$i] > 0) {$last_full_record = $i;}
+	$stmt="select count(*) from vicidial_closer_log where call_date >= '$query_date $h:45:00' and call_date <= '$query_date $h:59:59' and campaign_id='" . mysql_real_escape_string($group) . "' and status='DROP';";
+	$rslt=mysql_query($stmt, $link);
+	if ($DB) {echo "$stmt\n";}
+	$row=mysql_fetch_row($rslt);
+	$drop_count[$i] = $row[0];
+	$i++;
+	$h++;
+	}
+
+$hour_multiplier = (100 / $hi_hour_count);
+#$hour_multiplier = round($hour_multiplier, 0);
+
+echo "<!-- HICOUNT: $hi_hour_count|$hour_multiplier -->\n";
+echo "GRAPH IN 15 MINUTE INCREMENTS OF TOTAL CALLS PLACED FROM THIS CAMPAIGN\n";
+
+$k=1;
+$Mk=0;
+$call_scale = '0';
+while ($k <= 102) 
+	{
+	if ($Mk >= 5) 
+		{
+		$Mk=0;
+		$scale_num=($k / $hour_multiplier);
+		$scale_num = round($scale_num, 0);
+		$LENscale_num = (strlen($scale_num));
+		$k = ($k + $LENscale_num);
+		$call_scale .= "$scale_num";
+		}
+	else
+		{
+		$call_scale .= " ";
+		$k++;   $Mk++;
+		}
+	}
+
+
+echo "+------+-------------------------------------------------------------------------------------------------------+-------+-------+\n";
+#echo "| HOUR | GRAPH IN 15 MINUTE INCREMENTS OF TOTAL INCOMING CALLS FOR THIS GROUP                                  | DROPS | TOTAL |\n";
+echo "| HOUR |$call_scale| DROPS | TOTAL |\n";
+echo "+------+-------------------------------------------------------------------------------------------------------+-------+-------+\n";
+
+$ZZ = '00';
+$i=0;
+$h=4;
+$hour= -1;
+$no_lines_yet=1;
+
+while ($i <= 96)
+	{
+	$char_counter=0;
+	$time = '      ';
+	if ($h >= 4) 
+		{
+		$hour++;
+		$h=0;
+		if ($hour < 10) {$hour = "0$hour";}
+		$time = "+$hour$ZZ+";
+		}
+	if ($h == 1) {$time = "   15 ";}
+	if ($h == 2) {$time = "   30 ";}
+	if ($h == 3) {$time = "   45 ";}
+	$Ghour_count = $hour_count[$i];
+	if ($Ghour_count < 1) 
+		{
+		if ( ($no_lines_yet) or ($i > $last_full_record) )
+			{
+			$do_nothing=1;
+			}
+		else
+			{
+			$hour_count[$i] =	sprintf("%-5s", $hour_count[$i]);
+			echo "|$time|";
+			$k=0;   while ($k <= 102) {echo " ";   $k++;}
+			echo "| $hour_count[$i] |\n";
+			}
+		}
+	else
+		{
+		$no_lines_yet=0;
+		$Xhour_count = ($Ghour_count * $hour_multiplier);
+		$Yhour_count = (99 - $Xhour_count);
+
+		$Gdrop_count = $drop_count[$i];
+		if ($Gdrop_count < 1) 
+			{
+			$hour_count[$i] =	sprintf("%-5s", $hour_count[$i]);
+
+			echo "|$time|<SPAN class=\"green\">";
+			$k=0;   while ($k <= $Xhour_count) {echo "*";   $k++;   $char_counter++;}
+			echo "*X</SPAN>";   $char_counter++;
+			$k=0;   while ($k <= $Yhour_count) {echo " ";   $k++;   $char_counter++;}
+				while ($char_counter <= 101) {echo " ";   $char_counter++;}
+			echo "| 0     | $hour_count[$i] |\n";
+
+			}
+		else
+			{
+			$Xdrop_count = ($Gdrop_count * $hour_multiplier);
+
+		#	if ($Xdrop_count >= $Xhour_count) {$Xdrop_count = ($Xdrop_count - 1);}
+
+			$XXhour_count = ( ($Xhour_count - $Xdrop_count) - 1 );
+
+			$hour_count[$i] =	sprintf("%-5s", $hour_count[$i]);
+			$drop_count[$i] =	sprintf("%-5s", $drop_count[$i]);
+
+			echo "|$time|<SPAN class=\"red\">";
+			$k=0;   while ($k <= $Xdrop_count) {echo ">";   $k++;   $char_counter++;}
+			echo "D</SPAN><SPAN class=\"green\">";   $char_counter++;
+			$k=0;   while ($k <= $XXhour_count) {echo "*";   $k++;   $char_counter++;}
+			echo "X</SPAN>";   $char_counter++;
+			$k=0;   while ($k <= $Yhour_count) {echo " ";   $k++;   $char_counter++;}
+				while ($char_counter <= 102) {echo " ";   $char_counter++;}
+			echo "| $drop_count[$i] | $hour_count[$i] |\n";
+			}
+		}
+	
+	
+	$i++;
+	$h++;
+	}
+
+
+echo "+------+-------------------------------------------------------------------------------------------------------+-------+-------+\n";
+
+
+
+
+
+
+
+}
+
+
+
+?>
+</PRE>
+
+</BODY></HTML>
\ No newline at end of file
diff --git a/www/vicidial/AST_VDADstats.php b/www/vicidial/AST_VDADstats.php
new file mode 100644
index 00000000..9ac17006
--- /dev/null
+++ b/www/vicidial/AST_VDADstats.php
@@ -0,0 +1,417 @@
+<? 
+### AST_VDADstats.php
+### 
+### Copyright (C) 2006  Matt Florell <vicidial@gmail.com>    LICENSE: GPLv2
+###
+# CHANGES
+#
+# 60619-1718 - Added variable filtering to eliminate SQL injection attack threat
+#            - Added required user/pass to gain access to this page
+#
+
+header ("Content-type: text/html; charset=utf-8");
+
+require("dbconnect.php");
+
+$PHP_AUTH_USER=$_SERVER['PHP_AUTH_USER'];
+$PHP_AUTH_PW=$_SERVER['PHP_AUTH_PW'];
+$PHP_SELF=$_SERVER['PHP_SELF'];
+if (isset($_GET["group"]))				{$group=$_GET["group"];}
+	elseif (isset($_POST["group"]))		{$group=$_POST["group"];}
+if (isset($_GET["query_date"]))				{$query_date=$_GET["query_date"];}
+	elseif (isset($_POST["query_date"]))		{$query_date=$_POST["query_date"];}
+if (isset($_GET["submit"]))				{$submit=$_GET["submit"];}
+	elseif (isset($_POST["submit"]))		{$submit=$_POST["submit"];}
+if (isset($_GET["SUBMIT"]))				{$SUBMIT=$_GET["SUBMIT"];}
+	elseif (isset($_POST["SUBMIT"]))		{$SUBMIT=$_POST["SUBMIT"];}
+
+$PHP_AUTH_USER = ereg_replace("[^0-9a-zA-Z]","",$PHP_AUTH_USER);
+$PHP_AUTH_PW = ereg_replace("[^0-9a-zA-Z]","",$PHP_AUTH_PW);
+
+	$stmt="SELECT count(*) from vicidial_users where user='$PHP_AUTH_USER' and pass='$PHP_AUTH_PW' and user_level > 6;";
+	if ($DB) {echo "|$stmt|\n";}
+	$rslt=mysql_query($stmt, $link);
+	$row=mysql_fetch_row($rslt);
+	$auth=$row[0];
+
+  if( (strlen($PHP_AUTH_USER)<2) or (strlen($PHP_AUTH_PW)<2) or (!$auth))
+	{
+    Header("WWW-Authenticate: Basic realm=\"VICI-PROJECTS\"");
+    Header("HTTP/1.0 401 Unauthorized");
+    echo "Invalid Username/Password: |$PHP_AUTH_USER|$PHP_AUTH_PW|\n";
+    exit;
+	}
+
+$NOW_DATE = date("Y-m-d");
+$NOW_TIME = date("Y-m-d H:i:s");
+$STARTtime = date("U");
+if (!isset($group)) {$group = '';}
+if (!isset($query_date)) {$query_date = $NOW_DATE;}
+
+$stmt="select campaign_id from vicidial_campaigns;";
+$rslt=mysql_query($stmt, $link);
+if ($DB) {echo "$stmt\n";}
+$groups_to_print = mysql_num_rows($rslt);
+$i=0;
+while ($i < $groups_to_print)
+	{
+	$row=mysql_fetch_row($rslt);
+	$groups[$i] =$row[0];
+	$i++;
+	}
+?>
+
+<HTML>
+<HEAD>
+<STYLE type="text/css">
+<!--
+   .green {color: white; background-color: green}
+   .red {color: white; background-color: red}
+   .blue {color: white; background-color: blue}
+   .purple {color: white; background-color: purple}
+-->
+ </STYLE>
+
+<? 
+echo "<META HTTP-EQUIV=\"Content-Type\" CONTENT=\"text/html; charset=utf-8\">\n";
+echo "<TITLE>VICIDIAL: VDAD Stats</TITLE></HEAD><BODY BGCOLOR=WHITE>\n";
+echo "<FORM ACTION=\"$PHP_SELF\" METHOD=GET>\n";
+echo "<INPUT TYPE=TEXT NAME=query_date SIZE=10 MAXLENGTH=10 VALUE=\"$query_date\">\n";
+echo "<SELECT SIZE=1 NAME=group>\n";
+	$o=0;
+	while ($groups_to_print > $o)
+	{
+		if ($groups[$o] == $group) {echo "<option selected value=\"$groups[$o]\">$groups[$o]</option>\n";}
+		  else {echo "<option value=\"$groups[$o]\">$groups[$o]</option>\n";}
+		$o++;
+	}
+echo "</SELECT>\n";
+echo "<INPUT type=submit NAME=SUBMIT VALUE=SUBMIT>\n";
+echo "<FONT FACE=\"ARIAL,HELVETICA\" COLOR=BLACK SIZE=2> &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; <a href=\"./admin.php?ADD=34&campaign_id=$group\">MODIFY</a> | <a href=\"./server_stats.php\">REPORTS</a> </FONT>\n";
+echo "</FORM>\n\n";
+
+echo "<PRE><FONT SIZE=2>\n\n";
+
+
+if (!$group)
+{
+echo "\n\n";
+echo "PLEASE SELECT A CAMPAIGN AND DATE ABOVE AND CLICK SUBMIT\n";
+}
+
+else
+{
+
+
+echo "VICIDIAL: Auto-dial Stats                             $NOW_TIME\n";
+
+echo "\n";
+echo "---------- TOTALS\n";
+
+$stmt="select count(*),sum(length_in_sec) from vicidial_log where call_date >= '$query_date 00:00:01' and call_date <= '$query_date 23:59:59' and campaign_id='" . mysql_real_escape_string($group) . "';";
+$rslt=mysql_query($stmt, $link);
+if ($DB) {echo "$stmt\n";}
+$row=mysql_fetch_row($rslt);
+
+$TOTALcalls =	sprintf("%10s", $row[0]);
+$average_hold_seconds = ($row[1] / $row[0]);
+$average_hold_seconds = round($average_hold_seconds, 0);
+$average_hold_seconds =	sprintf("%10s", $average_hold_seconds);
+
+echo "Total Calls placed from this Campaign:        $TOTALcalls\n";
+echo "Average Call Length for all Calls in seconds: $average_hold_seconds\n";
+
+echo "\n";
+echo "---------- DROPS\n";
+
+$stmt="select count(*),sum(length_in_sec) from vicidial_log where call_date >= '$query_date 00:00:01' and call_date <= '$query_date 23:59:59' and campaign_id='" . mysql_real_escape_string($group) . "' and status='DROP' and (length_in_sec <= 60 or length_in_sec is null);";
+$rslt=mysql_query($stmt, $link);
+if ($DB) {echo "$stmt\n";}
+$row=mysql_fetch_row($rslt);
+
+$DROPcalls =	sprintf("%10s", $row[0]);
+$DROPpercent = (($DROPcalls / $TOTALcalls) * 100);
+$DROPpercent = round($DROPpercent, 0);
+
+$average_hold_seconds = ($row[1] / $row[0]);
+$average_hold_seconds = round($average_hold_seconds, 0);
+$average_hold_seconds =	sprintf("%10s", $average_hold_seconds);
+
+echo "Total DROP Calls:                             $DROPcalls  $DROPpercent%\n";
+echo "Average Length for DROP Calls in seconds:     $average_hold_seconds\n";
+
+echo "\n";
+echo "---------- AUTO-DIAL NO ANSWERS\n";
+
+$stmt="select count(*),sum(length_in_sec) from vicidial_log where call_date >= '$query_date 00:00:01' and call_date <= '$query_date 23:59:59' and campaign_id='" . mysql_real_escape_string($group) . "' and status='NA' and (length_in_sec <= 60 or length_in_sec is null);";
+$rslt=mysql_query($stmt, $link);
+if ($DB) {echo "$stmt\n";}
+$row=mysql_fetch_row($rslt);
+
+$NAcalls =	sprintf("%10s", $row[0]);
+$NApercent = (($NAcalls / $TOTALcalls) * 100);
+$NApercent = round($NApercent, 0);
+
+$average_na_seconds = ($row[1] / $row[0]);
+$average_na_seconds = round($average_na_seconds, 0);
+$average_na_seconds =	sprintf("%10s", $average_na_seconds);
+
+echo "Total NA calls -Busy,Disconnect,BTvoicemail:  $NAcalls  $NApercent%\n";
+echo "Average Call Length for NA Calls in seconds:  $average_na_seconds\n";
+
+
+##############################
+#########  USER STATS
+
+echo "\n";
+echo "---------- USER STATS\n";
+echo "+--------------------------+------------+--------+--------+\n";
+echo "| USER                     | CALLS      | TIME M | AVRG M |\n";
+echo "+--------------------------+------------+--------+--------+\n";
+
+$stmt="select vicidial_log.user,full_name,count(*),sum(length_in_sec),avg(length_in_sec) from vicidial_log,vicidial_users where call_date >= '$query_date 00:00:01' and call_date <= '$query_date 23:59:59' and  campaign_id='" . mysql_real_escape_string($group) . "' and vicidial_log.user is not null and length_in_sec is not null and length_in_sec > 4 and vicidial_log.user=vicidial_users.user group by vicidial_log.user;";
+$rslt=mysql_query($stmt, $link);
+if ($DB) {echo "$stmt\n";}
+$users_to_print = mysql_num_rows($rslt);
+$i=0;
+while ($i < $users_to_print)
+	{
+	$row=mysql_fetch_row($rslt);
+
+	$user =			sprintf("%-6s", $row[0]);
+	$full_name =	sprintf("%-15s", $row[1]); while(strlen($full_name)>15) {$full_name = substr("$full_name", 0, -1);}
+	$USERcalls =	sprintf("%10s", $row[2]);
+	$USERtotTALK =	$row[3];
+	$USERavgTALK =	$row[4];
+
+	$USERtotTALK_M = ($USERtotTALK / 60);
+	$USERtotTALK_M = round($USERtotTALK_M, 2);
+	$USERtotTALK_M_int = intval("$USERtotTALK_M");
+	$USERtotTALK_S = ($USERtotTALK_M - $USERtotTALK_M_int);
+	$USERtotTALK_S = ($USERtotTALK_S * 60);
+	$USERtotTALK_S = round($USERtotTALK_S, 0);
+	if ($USERtotTALK_S < 10) {$USERtotTALK_S = "0$USERtotTALK_S";}
+	$USERtotTALK_MS = "$USERtotTALK_M_int:$USERtotTALK_S";
+	$USERtotTALK_MS =		sprintf("%6s", $USERtotTALK_MS);
+
+	$USERavgTALK_M = ($USERavgTALK / 60);
+	$USERavgTALK_M = round($USERavgTALK_M, 2);
+	$USERavgTALK_M_int = intval("$USERavgTALK_M");
+	$USERavgTALK_S = ($USERavgTALK_M - $USERavgTALK_M_int);
+	$USERavgTALK_S = ($USERavgTALK_S * 60);
+	$USERavgTALK_S = round($USERavgTALK_S, 0);
+	if ($USERavgTALK_S < 10) {$USERavgTALK_S = "0$USERavgTALK_S";}
+	$USERavgTALK_MS = "$USERavgTALK_M_int:$USERavgTALK_S";
+	$USERavgTALK_MS =		sprintf("%6s", $USERavgTALK_MS);
+
+	echo "| $user - $full_name | $USERcalls | $USERtotTALK_MS | $USERavgTALK_MS |\n";
+
+	$i++;
+	}
+
+echo "+--------------------------+------------+--------+--------+\n";
+
+##############################
+#########  TIME STATS
+
+echo "\n";
+echo "---------- TIME STATS\n";
+
+echo "<FONT SIZE=0>\n";
+
+$hi_hour_count=0;
+$last_full_record=0;
+$i=0;
+$h=0;
+while ($i <= 96)
+	{
+	$stmt="select count(*) from vicidial_log where call_date >= '$query_date $h:00:00' and call_date <= '$query_date $h:14:59' and campaign_id='" . mysql_real_escape_string($group) . "';";
+	$rslt=mysql_query($stmt, $link);
+	if ($DB) {echo "$stmt\n";}
+	$row=mysql_fetch_row($rslt);
+	$hour_count[$i] = $row[0];
+	if ($hour_count[$i] > $hi_hour_count) {$hi_hour_count = $hour_count[$i];}
+	if ($hour_count[$i] > 0) {$last_full_record = $i;}
+	$stmt="select count(*) from vicidial_log where call_date >= '$query_date $h:00:00' and call_date <= '$query_date $h:14:59' and campaign_id='" . mysql_real_escape_string($group) . "' and status='DROP';";
+	$rslt=mysql_query($stmt, $link);
+	if ($DB) {echo "$stmt\n";}
+	$row=mysql_fetch_row($rslt);
+	$drop_count[$i] = $row[0];
+	$i++;
+
+
+	$stmt="select count(*) from vicidial_log where call_date >= '$query_date $h:15:00' and call_date <= '$query_date $h:29:59' and campaign_id='" . mysql_real_escape_string($group) . "';";
+	$rslt=mysql_query($stmt, $link);
+	if ($DB) {echo "$stmt\n";}
+	$row=mysql_fetch_row($rslt);
+	$hour_count[$i] = $row[0];
+	if ($hour_count[$i] > $hi_hour_count) {$hi_hour_count = $hour_count[$i];}
+	if ($hour_count[$i] > 0) {$last_full_record = $i;}
+	$stmt="select count(*) from vicidial_log where call_date >= '$query_date $h:15:00' and call_date <= '$query_date $h:29:59' and campaign_id='" . mysql_real_escape_string($group) . "' and status='DROP';";
+	$rslt=mysql_query($stmt, $link);
+	if ($DB) {echo "$stmt\n";}
+	$row=mysql_fetch_row($rslt);
+	$drop_count[$i] = $row[0];
+	$i++;
+
+	$stmt="select count(*) from vicidial_log where call_date >= '$query_date $h:30:00' and call_date <= '$query_date $h:44:59' and campaign_id='" . mysql_real_escape_string($group) . "';";
+	$rslt=mysql_query($stmt, $link);
+	if ($DB) {echo "$stmt\n";}
+	$row=mysql_fetch_row($rslt);
+	$hour_count[$i] = $row[0];
+	if ($hour_count[$i] > $hi_hour_count) {$hi_hour_count = $hour_count[$i];}
+	if ($hour_count[$i] > 0) {$last_full_record = $i;}
+	$stmt="select count(*) from vicidial_log where call_date >= '$query_date $h:30:00' and call_date <= '$query_date $h:44:59' and campaign_id='" . mysql_real_escape_string($group) . "' and status='DROP';";
+	$rslt=mysql_query($stmt, $link);
+	if ($DB) {echo "$stmt\n";}
+	$row=mysql_fetch_row($rslt);
+	$drop_count[$i] = $row[0];
+	$i++;
+
+	$stmt="select count(*) from vicidial_log where call_date >= '$query_date $h:45:00' and call_date <= '$query_date $h:59:59' and campaign_id='" . mysql_real_escape_string($group) . "';";
+	$rslt=mysql_query($stmt, $link);
+	if ($DB) {echo "$stmt\n";}
+	$row=mysql_fetch_row($rslt);
+	$hour_count[$i] = $row[0];
+	if ($hour_count[$i] > $hi_hour_count) {$hi_hour_count = $hour_count[$i];}
+	if ($hour_count[$i] > 0) {$last_full_record = $i;}
+	$stmt="select count(*) from vicidial_log where call_date >= '$query_date $h:45:00' and call_date <= '$query_date $h:59:59' and campaign_id='" . mysql_real_escape_string($group) . "' and status='DROP';";
+	$rslt=mysql_query($stmt, $link);
+	if ($DB) {echo "$stmt\n";}
+	$row=mysql_fetch_row($rslt);
+	$drop_count[$i] = $row[0];
+	$i++;
+	$h++;
+	}
+
+$hour_multiplier = (100 / $hi_hour_count);
+#$hour_multiplier = round($hour_multiplier, 0);
+
+echo "<!-- HICOUNT: $hi_hour_count|$hour_multiplier -->\n";
+echo "GRAPH IN 15 MINUTE INCREMENTS OF TOTAL CALLS PLACED FROM THIS CAMPAIGN\n";
+
+$k=1;
+$Mk=0;
+$call_scale = '0';
+while ($k <= 102) 
+	{
+	if ($Mk >= 5) 
+		{
+		$Mk=0;
+		$scale_num=($k / $hour_multiplier);
+		$scale_num = round($scale_num, 0);
+		$LENscale_num = (strlen($scale_num));
+		$k = ($k + $LENscale_num);
+		$call_scale .= "$scale_num";
+		}
+	else
+		{
+		$call_scale .= " ";
+		$k++;   $Mk++;
+		}
+	}
+
+
+echo "+------+-------------------------------------------------------------------------------------------------------+-------+-------+\n";
+#echo "| HOUR | GRAPH IN 15 MINUTE INCREMENTS OF TOTAL INCOMING CALLS FOR THIS GROUP                                  | DROPS | TOTAL |\n";
+echo "| HOUR |$call_scale| DROPS | TOTAL |\n";
+echo "+------+-------------------------------------------------------------------------------------------------------+-------+-------+\n";
+
+$ZZ = '00';
+$i=0;
+$h=4;
+$hour= -1;
+$no_lines_yet=1;
+
+while ($i <= 96)
+	{
+	$char_counter=0;
+	$time = '      ';
+	if ($h >= 4) 
+		{
+		$hour++;
+		$h=0;
+		if ($hour < 10) {$hour = "0$hour";}
+		$time = "+$hour$ZZ+";
+		}
+	if ($h == 1) {$time = "   15 ";}
+	if ($h == 2) {$time = "   30 ";}
+	if ($h == 3) {$time = "   45 ";}
+	$Ghour_count = $hour_count[$i];
+	if ($Ghour_count < 1) 
+		{
+		if ( ($no_lines_yet) or ($i > $last_full_record) )
+			{
+			$do_nothing=1;
+			}
+		else
+			{
+			$hour_count[$i] =	sprintf("%-5s", $hour_count[$i]);
+			echo "|$time|";
+			$k=0;   while ($k <= 102) {echo " ";   $k++;}
+			echo "| $hour_count[$i] |\n";
+			}
+		}
+	else
+		{
+		$no_lines_yet=0;
+		$Xhour_count = ($Ghour_count * $hour_multiplier);
+		$Yhour_count = (99 - $Xhour_count);
+
+		$Gdrop_count = $drop_count[$i];
+		if ($Gdrop_count < 1) 
+			{
+			$hour_count[$i] =	sprintf("%-5s", $hour_count[$i]);
+
+			echo "|$time|<SPAN class=\"green\">";
+			$k=0;   while ($k <= $Xhour_count) {echo "*";   $k++;   $char_counter++;}
+			echo "*X</SPAN>";   $char_counter++;
+			$k=0;   while ($k <= $Yhour_count) {echo " ";   $k++;   $char_counter++;}
+				while ($char_counter <= 101) {echo " ";   $char_counter++;}
+			echo "| 0     | $hour_count[$i] |\n";
+
+			}
+		else
+			{
+			$Xdrop_count = ($Gdrop_count * $hour_multiplier);
+
+		#	if ($Xdrop_count >= $Xhour_count) {$Xdrop_count = ($Xdrop_count - 1);}
+
+			$XXhour_count = ( ($Xhour_count - $Xdrop_count) - 1 );
+
+			$hour_count[$i] =	sprintf("%-5s", $hour_count[$i]);
+			$drop_count[$i] =	sprintf("%-5s", $drop_count[$i]);
+
+			echo "|$time|<SPAN class=\"red\">";
+			$k=0;   while ($k <= $Xdrop_count) {echo ">";   $k++;   $char_counter++;}
+			echo "D</SPAN><SPAN class=\"green\">";   $char_counter++;
+			$k=0;   while ($k <= $XXhour_count) {echo "*";   $k++;   $char_counter++;}
+			echo "X</SPAN>";   $char_counter++;
+			$k=0;   while ($k <= $Yhour_count) {echo " ";   $k++;   $char_counter++;}
+				while ($char_counter <= 102) {echo " ";   $char_counter++;}
+			echo "| $drop_count[$i] | $hour_count[$i] |\n";
+			}
+		}
+	
+	
+	$i++;
+	$h++;
+	}
+
+
+echo "+------+-------------------------------------------------------------------------------------------------------+-------+-------+\n";
+
+
+
+
+
+
+
+}
+
+
+
+?>
+</PRE>
+
+</BODY></HTML>
\ No newline at end of file
diff --git a/www/vicidial/AST_VICIDIAL_hopperlist.php b/www/vicidial/AST_VICIDIAL_hopperlist.php
new file mode 100644
index 00000000..1824a939
--- /dev/null
+++ b/www/vicidial/AST_VICIDIAL_hopperlist.php
@@ -0,0 +1,161 @@
+<? 
+### AST_VICIDIAL_hopperlist.php
+### 
+### Copyright (C) 2006  Matt Florell <vicidial@gmail.com>    LICENSE: GPLv2
+###
+# CHANGES
+#
+# 60619-1654 - Added variable filtering to eliminate SQL injection attack threat
+#            - Added required user/pass to gain access to this page
+#
+
+require("dbconnect.php");
+
+$PHP_AUTH_USER=$_SERVER['PHP_AUTH_USER'];
+$PHP_AUTH_PW=$_SERVER['PHP_AUTH_PW'];
+$PHP_SELF=$_SERVER['PHP_SELF'];
+if (isset($_GET["group"]))				{$group=$_GET["group"];}
+	elseif (isset($_POST["group"]))		{$group=$_POST["group"];}
+if (isset($_GET["submit"]))				{$submit=$_GET["submit"];}
+	elseif (isset($_POST["submit"]))		{$submit=$_POST["submit"];}
+if (isset($_GET["SUBMIT"]))				{$SUBMIT=$_GET["SUBMIT"];}
+	elseif (isset($_POST["SUBMIT"]))		{$SUBMIT=$_POST["SUBMIT"];}
+
+$PHP_AUTH_USER = ereg_replace("[^0-9a-zA-Z]","",$PHP_AUTH_USER);
+$PHP_AUTH_PW = ereg_replace("[^0-9a-zA-Z]","",$PHP_AUTH_PW);
+
+	$stmt="SELECT count(*) from vicidial_users where user='$PHP_AUTH_USER' and pass='$PHP_AUTH_PW' and user_level > 6;";
+	if ($DB) {echo "|$stmt|\n";}
+	$rslt=mysql_query($stmt, $link);
+	$row=mysql_fetch_row($rslt);
+	$auth=$row[0];
+
+  if( (strlen($PHP_AUTH_USER)<2) or (strlen($PHP_AUTH_PW)<2) or (!$auth))
+	{
+    Header("WWW-Authenticate: Basic realm=\"VICI-PROJECTS\"");
+    Header("HTTP/1.0 401 Unauthorized");
+    echo "Invalid Username/Password: |$PHP_AUTH_USER|$PHP_AUTH_PW|\n";
+    exit;
+	}
+
+$NOW_DATE = date("Y-m-d");
+$NOW_TIME = date("Y-m-d H:i:s");
+$STARTtime = date("U");
+if (!isset($group)) {$group = '';}
+if (!isset($query_date)) {$query_date = $NOW_DATE;}
+if (!isset($server_ip)) {$server_ip = '10.10.10.15';}
+
+$stmt="select campaign_id,campaign_name from vicidial_campaigns order by campaign_id;";
+$rslt=mysql_query($stmt, $link);
+if ($DB) {echo "$stmt\n";}
+$campaigns_to_print = mysql_num_rows($rslt);
+$i=0;
+while ($i < $campaigns_to_print)
+	{
+	$row=mysql_fetch_row($rslt);
+	$campaign_id[$i] =$row[0];
+	$campaign_name[$i] =$row[1];
+	$i++;
+	}
+?>
+
+<HTML>
+<HEAD>
+<STYLE type="text/css">
+<!--
+   .green {color: white; background-color: green}
+   .red {color: white; background-color: red}
+   .blue {color: white; background-color: blue}
+   .purple {color: white; background-color: purple}
+-->
+ </STYLE>
+
+<? 
+echo "<META HTTP-EQUIV=\"Content-Type\" CONTENT=\"text/html; charset=utf-8\">\n";
+echo "<TITLE>VICIDIAL: Hopper List</TITLE></HEAD><BODY BGCOLOR=WHITE>\n";
+echo "<FORM ACTION=\"$PHP_SELF\" METHOD=GET>\n";
+#echo "<INPUT TYPE=HIDDEN NAME=server_ip VALUE=\"$server_ip\">\n";
+#echo "<INPUT TYPE=TEXT NAME=query_date SIZE=10 MAXLENGTH=10 VALUE=\"$query_date\">\n";
+echo "<SELECT SIZE=1 NAME=group>\n";
+	$o=0;
+	while ($campaigns_to_print > $o)
+	{
+		if ($campaign_id[$o] == $group) {echo "<option selected value=\"$campaign_id[$o]\">$campaign_id[$o] - $campaign_name[$o]</option>\n";}
+		  else {echo "<option value=\"$campaign_id[$o]\">$campaign_id[$o] - $campaign_name[$o]</option>\n";}
+		$o++;
+	}
+echo "</SELECT>\n";
+echo "<INPUT TYPE=SUBMIT NAME=SUBMIT VALUE=SUBMIT>\n";
+echo " &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; <a href=\"./admin.php?ADD=34&campaign_id=$group\">MODIFY</a> \n";
+echo "</FORM>\n\n";
+
+echo "<PRE><FONT SIZE=2>\n\n";
+
+
+if (!$group)
+{
+echo "\n\n";
+echo "PLEASE SELECT A CAMPAIGN ABOVE AND CLICK SUBMIT\n";
+}
+
+else
+{
+
+
+echo "VICIDIAL: Live Current Hopper List                      $NOW_TIME\n";
+
+echo "\n";
+echo "---------- TOTALS\n";
+
+$stmt="select count(*) from vicidial_hopper where campaign_id='" . mysql_real_escape_string($group) . "';";
+$rslt=mysql_query($stmt, $link);
+if ($DB) {echo "$stmt\n";}
+$row=mysql_fetch_row($rslt);
+
+$TOTALcalls =	sprintf("%10s", $row[0]);
+
+echo "Total leads in hopper right now:       $TOTALcalls\n";
+
+
+##############################
+#########  LEAD STATS
+
+echo "\n";
+echo "---------- LEADS IN HOPPER\n";
+echo "+------+-----------+------------+-------+--------+-------+--------+\n";
+echo "|      | LEAD_ID   | PHONE NUM  | STATE | STATUS | COUNT | GMT    |\n";
+echo "+------+-----------+------------+-------+--------+-------+--------+\n";
+
+$stmt="select vicidial_hopper.lead_id,phone_number,vicidial_hopper.state,vicidial_list.status,called_count,vicidial_hopper.gmt_offset_now from vicidial_hopper,vicidial_list where vicidial_hopper.campaign_id='" . mysql_real_escape_string($group) . "' and vicidial_hopper.lead_id=vicidial_list.lead_id order by hopper_id limit 2000;";
+$rslt=mysql_query($stmt, $link);
+if ($DB) {echo "$stmt\n";}
+$users_to_print = mysql_num_rows($rslt);
+$i=0;
+while ($i < $users_to_print)
+	{
+	$row=mysql_fetch_row($rslt);
+
+	$FMT_i =		sprintf("%-4s", $i);
+	$lead_id =		sprintf("%-9s", $row[0]);
+	$phone_number =	sprintf("%-10s", $row[1]);
+	$state =		sprintf("%-5s", $row[2]);
+	$status =		sprintf("%-6s", $row[3]);
+	$count =		sprintf("%-5s", $row[4]);
+	$gmt =			sprintf("%-6s", $row[5]);
+
+	echo "| $FMT_i | $lead_id | $phone_number | $state | $status | $count | $gmt |\n";
+
+	$i++;
+	}
+
+echo "+------+-----------+------------+-------+--------+-------+--------+\n";
+
+
+}
+
+
+
+?>
+</PRE>
+
+</BODY></HTML>
\ No newline at end of file
diff --git a/www/vicidial/AST_admin_log_display.php b/www/vicidial/AST_admin_log_display.php
new file mode 100644
index 00000000..b5286873
--- /dev/null
+++ b/www/vicidial/AST_admin_log_display.php
@@ -0,0 +1,118 @@
+<? 
+### AST_admin_log_display.php
+### 
+### Copyright (C) 2006  Matt Florell <vicidial@gmail.com>    LICENSE: GPLv2
+###
+
+require("dbconnect.php");
+
+$PHP_AUTH_USER=$_SERVER['PHP_AUTH_USER'];
+$PHP_AUTH_PW=$_SERVER['PHP_AUTH_PW'];
+$PHP_SELF=$_SERVER['PHP_SELF'];
+if (isset($_GET["query_date"]))				{$query_date=$_GET["query_date"];}
+	elseif (isset($_POST["query_date"]))		{$query_date=$_POST["query_date"];}
+if (isset($_GET["submit"]))				{$submit=$_GET["submit"];}
+	elseif (isset($_POST["submit"]))		{$submit=$_POST["submit"];}
+if (isset($_GET["SUBMIT"]))				{$SUBMIT=$_GET["SUBMIT"];}
+	elseif (isset($_POST["SUBMIT"]))		{$SUBMIT=$_POST["SUBMIT"];}
+
+$PHP_AUTH_USER = ereg_replace("[^0-9a-zA-Z]","",$PHP_AUTH_USER);
+$PHP_AUTH_PW = ereg_replace("[^0-9a-zA-Z]","",$PHP_AUTH_PW);
+$query_date = ereg_replace("[^ \.\,-\_0-9a-zA-Z]","",$query_date);
+
+# AST GUI database administration
+# AST_admin_log_display.php
+# 
+# CHANGES
+# 50325-0932 - First build
+# 51123-1443 - removed globals=on requirement
+# 60421-1229 - check GET/POST vars lines with isset to not trigger PHP NOTICES
+# 60620-1044 - Added variable filtering to eliminate SQL injection attack threat
+#
+
+$version = '0.0.4';
+$build = '60620-1044';
+
+$STARTtime = date("U");
+
+	$stmt="SELECT count(*) from vicidial_users where user='$PHP_AUTH_USER' and pass='$PHP_AUTH_PW' and user_level > 8;";
+	if ($DB) {echo "|$stmt|\n";}
+	$rslt=mysql_query($stmt, $link);
+	$row=mysql_fetch_row($rslt);
+	$auth=$row[0];
+
+$fp = fopen ("./project_auth_entries.txt", "a");
+$date = date("r");
+$ip = getenv("REMOTE_ADDR");
+$browser = getenv("HTTP_USER_AGENT");
+
+  if( (strlen($PHP_AUTH_USER)<2) or (strlen($PHP_AUTH_PW)<2) or (!$auth))
+	{
+    Header("WWW-Authenticate: Basic realm=\"VICI-PROJECTS\"");
+    Header("HTTP/1.0 401 Unauthorized");
+    echo "Invalid Username/Password: |$PHP_AUTH_USER|$PHP_AUTH_PW|\n";
+    exit;
+	}
+  else
+	{
+
+	if($auth>0)
+		{
+		$office_no=strtoupper($PHP_AUTH_USER);
+		$password=strtoupper($PHP_AUTH_PW);
+			$stmt="SELECT full_name from vicidial_users where user='$PHP_AUTH_USER' and pass='$PHP_AUTH_PW'";
+			$rslt=mysql_query($stmt, $link);
+			$row=mysql_fetch_row($rslt);
+			$LOGfullname=$row[0];
+		fwrite ($fp, "VICIDIAL|GOOD|$date|$PHP_AUTH_USER|$PHP_AUTH_PW|$ip|$browser|$LOGfullname|\n");
+		fclose($fp);
+		}
+	else
+		{
+		fwrite ($fp, "VICIDIAL|FAIL|$date|$PHP_AUTH_USER|$PHP_AUTH_PW|$ip|$browser|\n");
+		fclose($fp);
+		}
+	}
+
+echo "<html>\n";
+echo "<head>\n";
+echo "<META HTTP-EQUIV=\"Content-Type\" CONTENT=\"text/html; charset=utf-8\">\n";
+echo "<!-- VERSION: $version     BUILD: $build      ADD: $ADD-->\n";
+echo "<title>VICIDIAL ADMIN LOG DISPLAY</title>";
+echo "</head>\n";
+
+# Fri, 25 Mar 2005
+
+$DAY_DATE = date("j");
+if ($DAY_DATE < 10)
+#	{$GREP_DATE = date("D,  j M Y");}
+	{$GREP_DATE = date("D, 0j M Y");}
+else
+	{$GREP_DATE = date("D, j M Y");}
+
+$NOW_DATE = date("Y-m-d");
+$NOW_TIME = date("Y-m-d H:i:s");
+$STARTtime = date("U");
+if (!$query_date) {$query_date = $GREP_DATE;}
+
+$Gquery_date = eregi_replace(" ",'\ ',$query_date);
+echo "<!-- |$query_date|$Gquery_date| -->\n";
+
+echo "<FORM ACTION=\"$PHP_SELF\" METHOD=GET>\n";
+echo "<INPUT TYPE=TEXT NAME=query_date SIZE=20 MAXLENGTH=20 VALUE=\"$query_date\">\n";
+echo "<INPUT TYPE=SUBMIT NAME=SUBMIT VALUE=SUBMIT>\n";
+echo "</FORM>\n\n";
+
+echo "<PRE><FONT SIZE=2>\n\n";
+
+
+echo "VICIDIAL ADMIN CHANGE LOG                             $NOW_TIME\n";
+
+#passthru("grep $Gquery_date /home/www/htdocs/vicidial/admin_changes_log.txt");
+passthru("grep $Gquery_date $WeBServeRRooT/vicidial/admin_changes_log.txt");
+
+
+?>
+</PRE>
+
+</BODY></HTML>
\ No newline at end of file
diff --git a/www/vicidial/AST_agent_performance.php b/www/vicidial/AST_agent_performance.php
new file mode 100644
index 00000000..a489bc7d
--- /dev/null
+++ b/www/vicidial/AST_agent_performance.php
@@ -0,0 +1,232 @@
+<? 
+### AST_agent_performance.php
+### 
+### Copyright (C) 2006  Matt Florell <vicidial@gmail.com>    LICENSE: GPLv2
+###
+# CHANGES
+#
+# 60619-1711 - Added variable filtering to eliminate SQL injection attack threat
+#            - Added required user/pass to gain access to this page
+#
+
+require("dbconnect.php");
+
+$PHP_AUTH_USER=$_SERVER['PHP_AUTH_USER'];
+$PHP_AUTH_PW=$_SERVER['PHP_AUTH_PW'];
+$PHP_SELF=$_SERVER['PHP_SELF'];
+if (isset($_GET["group"]))				{$group=$_GET["group"];}
+	elseif (isset($_POST["group"]))		{$group=$_POST["group"];}
+if (isset($_GET["query_date"]))				{$query_date=$_GET["query_date"];}
+	elseif (isset($_POST["query_date"]))		{$query_date=$_POST["query_date"];}
+if (isset($_GET["shift"]))				{$shift=$_GET["shift"];}
+	elseif (isset($_POST["shift"]))		{$shift=$_POST["shift"];}
+if (isset($_GET["submit"]))				{$submit=$_GET["submit"];}
+	elseif (isset($_POST["submit"]))		{$submit=$_POST["submit"];}
+if (isset($_GET["SUBMIT"]))				{$SUBMIT=$_GET["SUBMIT"];}
+	elseif (isset($_POST["SUBMIT"]))		{$SUBMIT=$_POST["SUBMIT"];}
+
+$PHP_AUTH_USER = ereg_replace("[^0-9a-zA-Z]","",$PHP_AUTH_USER);
+$PHP_AUTH_PW = ereg_replace("[^0-9a-zA-Z]","",$PHP_AUTH_PW);
+
+	$stmt="SELECT count(*) from vicidial_users where user='$PHP_AUTH_USER' and pass='$PHP_AUTH_PW' and user_level > 6;";
+	if ($DB) {echo "|$stmt|\n";}
+	$rslt=mysql_query($stmt, $link);
+	$row=mysql_fetch_row($rslt);
+	$auth=$row[0];
+
+  if( (strlen($PHP_AUTH_USER)<2) or (strlen($PHP_AUTH_PW)<2) or (!$auth))
+	{
+    Header("WWW-Authenticate: Basic realm=\"VICI-PROJECTS\"");
+    Header("HTTP/1.0 401 Unauthorized");
+    echo "Invalid Username/Password: |$PHP_AUTH_USER|$PHP_AUTH_PW|\n";
+    exit;
+	}
+
+$NOW_DATE = date("Y-m-d");
+$NOW_TIME = date("Y-m-d H:i:s");
+$STARTtime = date("U");
+if (!isset($group)) {$group = '';}
+if (!isset($query_date)) {$query_date = $NOW_DATE;}
+
+$stmt="select campaign_id from vicidial_campaigns;";
+$rslt=mysql_query($stmt, $link);
+if ($DB) {echo "$stmt\n";}
+$campaigns_to_print = mysql_num_rows($rslt);
+$i=0;
+while ($i < $campaigns_to_print)
+	{
+	$row=mysql_fetch_row($rslt);
+	$groups[$i] =$row[0];
+	$i++;
+	}
+?>
+
+<HTML>
+<HEAD>
+<STYLE type="text/css">
+<!--
+   .green {color: white; background-color: green}
+   .red {color: white; background-color: red}
+   .blue {color: white; background-color: blue}
+   .purple {color: white; background-color: purple}
+-->
+ </STYLE>
+
+<? 
+echo "<META HTTP-EQUIV=\"Content-Type\" CONTENT=\"text/html; charset=utf-8\">\n";
+echo "<TITLE>VICIDIAL: Agent Performance</TITLE></HEAD><BODY BGCOLOR=WHITE>\n";
+echo "<FORM ACTION=\"$PHP_SELF\" METHOD=GET>\n";
+echo "<INPUT TYPE=TEXT NAME=query_date SIZE=19 MAXLENGTH=19 VALUE=\"$query_date\">\n";
+echo "<SELECT SIZE=1 NAME=group>\n";
+	$o=0;
+	while ($campaigns_to_print > $o)
+	{
+		if ($groups[$o] == $group) {echo "<option selected value=\"$groups[$o]\">$groups[$o]</option>\n";}
+		  else {echo "<option value=\"$groups[$o]\">$groups[$o]</option>\n";}
+		$o++;
+	}
+echo "</SELECT>\n";
+echo "<SELECT SIZE=1 NAME=shift>\n";
+echo "<option selected value=\"AM\">AM</option>\n";
+echo "<option value=\"PM\">PM</option>\n";
+echo "</SELECT>\n";
+echo "<INPUT TYPE=SUBMIT NAME=SUBMIT VALUE=SUBMIT>\n";
+echo "<FONT FACE=\"ARIAL,HELVETICA\" COLOR=BLACK SIZE=2> &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; <a href=\"./admin.php?ADD=34&campaign_id=$group\">MODIFY</a> | <a href=\"./server_stats.php\">REPORTS</a> </FONT>\n";
+echo "</FORM>\n\n";
+
+echo "<PRE><FONT SIZE=2>\n";
+
+
+if (!$group)
+{
+echo "\n";
+echo "PLEASE SELECT A SERVER AND DATE-TIME ABOVE AND CLICK SUBMIT\n";
+echo " NOTE: stats taken from 6 hour shift specified\n";
+}
+
+else
+{
+if ($shift == 'AM') 
+	{
+	$query_date_BEGIN = "$query_date 08:45:00";   
+	$query_date_END = "$query_date 15:33:00";
+	$time_BEGIN = "08:45:00";   
+	$time_END = "15:33:00";
+	}
+if ($shift == 'PM') 
+	{
+	$query_date_BEGIN = "$query_date 15:33:00";   
+	$query_date_END = "$query_date 23:15:00";
+	$time_BEGIN = "15:33:00";   
+	$time_END = "23:15:00";
+	}
+
+echo "VICIDIAL: Agent Performance                             $NOW_TIME\n";
+
+echo "Time range: $query_date_BEGIN to $query_date_END\n\n";
+echo "---------- AGENTS Details -------------\n\n";
+
+echo "+-----------------+--------+--------+--------+--------+------+------+------+------+------+------+------+\n";
+echo "| USER NAME       | ID     | CALLS  | TALK   | TALKAVG| A    | B    | DC   | DNC  | N    | NI   | SALE |\n";
+echo "+-----------------+--------+--------+--------+--------+------+------+------+------+------+------+------+\n";
+
+$stmt="select count(*) as calls,sum(length_in_sec) as talk,full_name,vicidial_users.user,avg(length_in_sec) from vicidial_users,vicidial_log where call_date <= '$query_date_END' and call_date >= '$query_date_BEGIN' and vicidial_users.user=vicidial_log.user and campaign_id='" . mysql_real_escape_string($group) . "' group by full_name order by calls desc limit 1000;";
+$rslt=mysql_query($stmt, $link);
+if ($DB) {echo "$stmt\n";}
+$rows_to_print = mysql_num_rows($rslt);
+$i=0;
+while ($i < $rows_to_print)
+	{
+	$row=mysql_fetch_row($rslt);
+	$TOTcalls=($TOTcalls + $row[0]);
+	$TOTtotTALK=($TOTtotTALK + $row[1]);
+	$calls[$i] =	sprintf("%-6s", $row[0]);
+	$full_name[$i]=	sprintf("%-15s", $row[2]); while(strlen($full_name[$i])>15) {$full_name[$i] = substr("$full_name[$i]", 0, -1);}
+	$user[$i] =		sprintf("%-6s", $row[3]);
+	$USERtotTALK =	$row[1];
+	$USERavgTALK =	$row[4];
+
+	$USERtotTALK_M = ($USERtotTALK / 60);
+	$USERtotTALK_M = round($USERtotTALK_M, 2);
+	$USERtotTALK_M_int = intval("$USERtotTALK_M");
+	$USERtotTALK_S = ($USERtotTALK_M - $USERtotTALK_M_int);
+	$USERtotTALK_S = ($USERtotTALK_S * 60);
+	$USERtotTALK_S = round($USERtotTALK_S, 0);
+	if ($USERtotTALK_S < 10) {$USERtotTALK_S = "0$USERtotTALK_S";}
+	$USERtotTALK_MS = "$USERtotTALK_M_int:$USERtotTALK_S";
+	$pfUSERtotTALK_MS[$i] =		sprintf("%6s", $USERtotTALK_MS);
+
+	$USERavgTALK_M = ($USERavgTALK / 60);
+	$USERavgTALK_M = round($USERavgTALK_M, 2);
+	$USERavgTALK_M_int = intval("$USERavgTALK_M");
+	$USERavgTALK_S = ($USERavgTALK_M - $USERavgTALK_M_int);
+	$USERavgTALK_S = ($USERavgTALK_S * 60);
+	$USERavgTALK_S = round($USERavgTALK_S, 0);
+	if ($USERavgTALK_S < 10) {$USERavgTALK_S = "0$USERavgTALK_S";}
+	$USERavgTALK_MS = "$USERavgTALK_M_int:$USERavgTALK_S";
+	$pfUSERavgTALK_MS[$i] =		sprintf("%6s", $USERavgTALK_MS);
+	$i++;
+	}
+
+$k=0;
+while($k < $i)
+	{
+	$ctA[$k]="0   "; $ctB[$k]="0   "; $ctDC[$k]="0   "; $ctDNC[$k]="0   "; $ctN[$k]="0   "; $ctNI[$k]="0   "; $ctSALE[$k]="0   "; 
+	$stmt="select count(*),status from vicidial_log where call_date <= '$query_date_END' and call_date >= '$query_date_BEGIN' and user='$user[$k]' and campaign_id='" . mysql_real_escape_string($group) . "' group by status;";
+	$rslt=mysql_query($stmt, $link);
+	if ($DB) {echo "$stmt\n";}
+	$rows_to_print = mysql_num_rows($rslt);
+	$m=0;
+	while ($m < $rows_to_print)
+		{
+		$row=mysql_fetch_row($rslt);
+		if ($row[1] == 'A') {$ctA[$k]=sprintf("%-4s", $row[0]);		$TOT_A = ($TOT_A + $row[0]);}
+		if ($row[1] == 'B') {$ctB[$k]=sprintf("%-4s", $row[0]);		$TOT_B = ($TOT_B + $row[0]);}
+		if ($row[1] == 'DC') {$ctDC[$k]=sprintf("%-4s", $row[0]);	$TOT_DC = ($TOT_DC + $row[0]);}
+		if ($row[1] == 'DNC') {$ctDNC[$k]=sprintf("%-4s", $row[0]);	$TOT_DNC = ($TOT_DNC + $row[0]);}
+		if ($row[1] == 'N') {$ctN[$k]=sprintf("%-4s", $row[0]);		$TOT_N = ($TOT_N + $row[0]);}
+		if ($row[1] == 'NI') {$ctNI[$k]=sprintf("%-4s", $row[0]);	$TOT_NI = ($TOT_NI + $row[0]);}
+		if (($row[1] == 'SALE') || ($row[1] == 'XFER') ) {$ctSALE[$k]=sprintf("%-4s", $row[0]);	$TOT_SALE = ($TOT_SALE + $row[0]);}
+		$m++;
+		}
+	echo "| $full_name[$k] | $user[$k] | $calls[$k] | $pfUSERtotTALK_MS[$k] | $pfUSERavgTALK_MS[$k] | $ctA[$k] | $ctB[$k] | $ctDC[$k] | $ctDNC[$k] | $ctN[$k] | $ctNI[$k] | $ctSALE[$k] |\n";
+
+
+
+	$k++;
+	}
+
+	$TOTcalls =	sprintf("%-7s", $TOTcalls);
+
+	$TOTtotTALK_M = ($TOTtotTALK / 60);
+	$TOTtotTALK_M = round($TOTtotTALK_M, 2);
+	$TOTtotTALK_M_int = intval("$TOTtotTALK_M");
+	$TOTtotTALK_S = ($TOTtotTALK_M - $TOTtotTALK_M_int);
+	$TOTtotTALK_S = ($TOTtotTALK_S * 60);
+	$TOTtotTALK_S = round($TOTtotTALK_S, 0);
+	if ($TOTtotTALK_S < 10) {$TOTtotTALK_S = "0$TOTtotTALK_S";}
+	$TOTtotTALK_MS = "$TOTtotTALK_M_int:$TOTtotTALK_S";
+	$TOTtotTALK_MS =		sprintf("%7s", $TOTtotTALK_MS);
+		while(strlen($TOTtotTALK_MS)>7) {$TOTtotTALK_MS = substr("$TOTtotTALK_MS", 0, -1);}
+
+	$TOT_A = sprintf("%-5s", $TOT_A);
+	$TOT_B = sprintf("%-5s", $TOT_B);
+	$TOT_DC = sprintf("%-5s", $TOT_DC);
+	$TOT_DNC = sprintf("%-5s", $TOT_DNC);
+	$TOT_N = sprintf("%-5s", $TOT_N);
+	$TOT_NI = sprintf("%-5s", $TOT_NI);
+	$TOT_SALE = sprintf("%-5s", $TOT_SALE);
+
+echo "+-----------------+--------+--------+--------+--------+------+------+------+------+------+------+------+\n";
+echo "|  TOTALS                  | $TOTcalls| $TOTtotTALK_MS|        | $TOT_A| $TOT_B| $TOT_DC| $TOT_DNC| $TOT_N| $TOT_NI| $TOT_SALE|\n";
+echo "+-----------------+--------+--------+--------+--------+------+------+------+------+------+------+------+\n";
+
+echo "\n";
+
+}
+
+
+
+?>
+
+</BODY></HTML>
\ No newline at end of file
diff --git a/www/vicidial/AST_agent_performance_detail.php b/www/vicidial/AST_agent_performance_detail.php
new file mode 100644
index 00000000..2dd3dc5e
--- /dev/null
+++ b/www/vicidial/AST_agent_performance_detail.php
@@ -0,0 +1,406 @@
+<? 
+### AST_agent_performance_detail.php
+### 
+### Copyright (C) 2006  Matt Florell <vicidial@gmail.com>    LICENSE: GPLv2
+###
+# CHANGES
+#
+# 60619-1712 - Added variable filtering to eliminate SQL injection attack threat
+#            - Added required user/pass to gain access to this page
+#
+
+require("dbconnect.php");
+
+$PHP_AUTH_USER=$_SERVER['PHP_AUTH_USER'];
+$PHP_AUTH_PW=$_SERVER['PHP_AUTH_PW'];
+$PHP_SELF=$_SERVER['PHP_SELF'];
+if (isset($_GET["query_date"]))				{$query_date=$_GET["query_date"];}
+	elseif (isset($_POST["query_date"]))		{$query_date=$_POST["query_date"];}
+if (isset($_GET["group"]))				{$group=$_GET["group"];}
+	elseif (isset($_POST["group"]))		{$group=$_POST["group"];}
+if (isset($_GET["shift"]))				{$shift=$_GET["shift"];}
+	elseif (isset($_POST["shift"]))		{$shift=$_POST["shift"];}
+if (isset($_GET["submit"]))				{$submit=$_GET["submit"];}
+	elseif (isset($_POST["submit"]))		{$submit=$_POST["submit"];}
+if (isset($_GET["SUBMIT"]))				{$SUBMIT=$_GET["SUBMIT"];}
+	elseif (isset($_POST["SUBMIT"]))		{$SUBMIT=$_POST["SUBMIT"];}
+
+$PHP_AUTH_USER = ereg_replace("[^0-9a-zA-Z]","",$PHP_AUTH_USER);
+$PHP_AUTH_PW = ereg_replace("[^0-9a-zA-Z]","",$PHP_AUTH_PW);
+
+	$stmt="SELECT count(*) from vicidial_users where user='$PHP_AUTH_USER' and pass='$PHP_AUTH_PW' and user_level > 6;";
+	if ($DB) {echo "|$stmt|\n";}
+	$rslt=mysql_query($stmt, $link);
+	$row=mysql_fetch_row($rslt);
+	$auth=$row[0];
+
+  if( (strlen($PHP_AUTH_USER)<2) or (strlen($PHP_AUTH_PW)<2) or (!$auth))
+	{
+    Header("WWW-Authenticate: Basic realm=\"VICI-PROJECTS\"");
+    Header("HTTP/1.0 401 Unauthorized");
+    echo "Invalid Username/Password: |$PHP_AUTH_USER|$PHP_AUTH_PW|\n";
+    exit;
+	}
+
+$NOW_DATE = date("Y-m-d");
+$NOW_TIME = date("Y-m-d H:i:s");
+$STARTtime = date("U");
+if (!isset($group)) {$group = '';}
+if (!isset($query_date)) {$query_date = $NOW_DATE;}
+
+$stmt="select campaign_id from vicidial_campaigns;";
+$rslt=mysql_query($stmt, $link);
+if ($DB) {echo "$stmt\n";}
+$campaigns_to_print = mysql_num_rows($rslt);
+$i=0;
+while ($i < $campaigns_to_print)
+	{
+	$row=mysql_fetch_row($rslt);
+	$groups[$i] =$row[0];
+	$i++;
+	}
+?>
+
+<HTML>
+<HEAD>
+<STYLE type="text/css">
+<!--
+   .green {color: white; background-color: green}
+   .red {color: white; background-color: red}
+   .blue {color: white; background-color: blue}
+   .purple {color: white; background-color: purple}
+-->
+ </STYLE>
+
+<? 
+echo "<META HTTP-EQUIV=\"Content-Type\" CONTENT=\"text/html; charset=utf-8\">\n";
+echo "<TITLE>VICIDIAL: Agent Performance</TITLE></HEAD><BODY BGCOLOR=WHITE>\n";
+echo "<FORM ACTION=\"$PHP_SELF\" METHOD=GET>\n";
+echo "<INPUT TYPE=TEXT NAME=query_date SIZE=19 MAXLENGTH=19 VALUE=\"$query_date\">\n";
+echo "<SELECT SIZE=1 NAME=group>\n";
+	$o=0;
+	while ($campaigns_to_print > $o)
+	{
+		if ($groups[$o] == $group) {echo "<option selected value=\"$groups[$o]\">$groups[$o]</option>\n";}
+		  else {echo "<option value=\"$groups[$o]\">$groups[$o]</option>\n";}
+		$o++;
+	}
+echo "</SELECT>\n";
+echo "<SELECT SIZE=1 NAME=shift>\n";
+echo "<option selected value=\"AM\">AM</option>\n";
+echo "<option value=\"PM\">PM</option>\n";
+echo "</SELECT>\n";
+echo "<INPUT TYPE=SUBMIT NAME=SUBMIT VALUE=SUBMIT>\n";
+echo "<FONT FACE=\"ARIAL,HELVETICA\" COLOR=BLACK SIZE=2> &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; <a href=\"./admin.php?ADD=34&campaign_id=$group\">MODIFY</a> | <a href=\"./server_stats.php\">REPORTS</a> </FONT>\n";
+echo "</FORM>\n\n";
+
+echo "<PRE><FONT SIZE=2>\n";
+
+
+if (!$group)
+{
+echo "\n";
+echo "PLEASE SELECT A CAMPAIGN AND DATE-TIME ABOVE AND CLICK SUBMIT\n";
+echo " NOTE: stats taken from 6 hour shift specified\n";
+}
+
+else
+{
+if ($shift == 'AM') 
+	{
+	$query_date_BEGIN = "$query_date 03:45:00";   
+	$query_date_END = "$query_date 15:15:00";
+	$time_BEGIN = "03:45:00";   
+	$time_END = "15:15:00";
+	}
+if ($shift == 'PM') 
+	{
+	$query_date_BEGIN = "$query_date 15:15:00";   
+	$query_date_END = "$query_date 23:15:00";
+	$time_BEGIN = "15:15:00";   
+	$time_END = "23:15:00";
+	}
+
+echo "VICIDIAL: Agent Performance Detail                        $NOW_TIME\n";
+
+echo "Time range: $query_date_BEGIN to $query_date_END\n\n";
+echo "---------- AGENTS Details -------------\n\n";
+
+echo "+-----------------+--------+--------+--------+--------+--------+--------+--------+--------+--------+--------+--------+------+------+------+------+------+------+------+------+\n";
+echo "| USER NAME       | ID     | CALLS  | TIME   | PAUSE  | PAUSAVG| WAIT   | WAITAVG| TALK   | TALKAVG| DISPO  | DISPAVG| A    | B    | DC   | DNC  | N    | NI   | CB   | SALE |\n";
+echo "+-----------------+--------+--------+--------+--------+--------+--------+--------+--------+--------+--------+--------+------+------+------+------+------+------+------+------+\n";
+
+$stmt="select count(*) as calls,sum(talk_sec) as talk,full_name,vicidial_users.user,avg(talk_sec),sum(pause_sec),avg(pause_sec),sum(wait_sec),avg(wait_sec),sum(dispo_sec),avg(dispo_sec) from vicidial_users,vicidial_agent_log where event_time <= '$query_date_END' and event_time >= '$query_date_BEGIN' and vicidial_users.user=vicidial_agent_log.user and campaign_id='" . mysql_real_escape_string($group) . "' and pause_sec<48800 and wait_sec<48800 and talk_sec<48800 and dispo_sec<48800 group by full_name order by calls desc limit 1000;";
+$rslt=mysql_query($stmt, $link);
+if ($DB) {echo "$stmt\n";}
+$rows_to_print = mysql_num_rows($rslt);
+$i=0;
+while ($i < $rows_to_print)
+	{
+	$row=mysql_fetch_row($rslt);
+	$TOTcalls=($TOTcalls + $row[0]);
+	$TOTtime=($TOTtime + $row[1] + $row[5] + $row[7] + $row[9]);
+	$TOTtotTALK=($TOTtotTALK + $row[1]);
+	$TOTtotWAIT=($TOTtotWAIT + $row[7]);
+	$TOTtotPAUSE=($TOTtotPAUSE + $row[5]);
+	$TOTtotDISPO=($TOTtotDISPO + $row[9]);
+	$calls[$i] =	sprintf("%-6s", $row[0]);
+	$full_name[$i]=	sprintf("%-15s", $row[2]); while(strlen($full_name[$i])>15) {$full_name[$i] = substr("$full_name[$i]", 0, -1);}
+	$user[$i] =		sprintf("%-6s", $row[3]);
+	$USERtime =	($row[1] + $row[5] + $row[7] + $row[9]);
+	$USERtotTALK =	$row[1];
+	$USERavgTALK =	$row[4];
+	$USERtotPAUSE =	$row[5];
+	$USERavgPAUSE =	$row[6];
+	$USERtotWAIT =	$row[7];
+	$USERavgWAIT =	$row[8];
+	$USERtotDISPO =	$row[9];
+	$USERavgDISPO =	$row[10];
+
+	$USERtime_M = ($USERtime / 60);
+	$USERtime_M = round($USERtime_M, 2);
+	$USERtime_M_int = intval("$USERtime_M");
+	$USERtime_S = ($USERtime_M - $USERtime_M_int);
+	$USERtime_S = ($USERtime_S * 60);
+	$USERtime_S = round($USERtime_S, 0);
+	if ($USERtime_S < 10) {$USERtime_S = "0$USERtime_S";}
+	$USERtime_MS = "$USERtime_M_int:$USERtime_S";
+	$pfUSERtime_MS[$i] =		sprintf("%7s", $USERtime_MS);
+
+	$USERtotTALK_M = ($USERtotTALK / 60);
+	$USERtotTALK_M = round($USERtotTALK_M, 2);
+	$USERtotTALK_M_int = intval("$USERtotTALK_M");
+	$USERtotTALK_S = ($USERtotTALK_M - $USERtotTALK_M_int);
+	$USERtotTALK_S = ($USERtotTALK_S * 60);
+	$USERtotTALK_S = round($USERtotTALK_S, 0);
+	if ($USERtotTALK_S < 10) {$USERtotTALK_S = "0$USERtotTALK_S";}
+	$USERtotTALK_MS = "$USERtotTALK_M_int:$USERtotTALK_S";
+	$pfUSERtotTALK_MS[$i] =		sprintf("%6s", $USERtotTALK_MS);
+
+	$USERavgTALK_M = ($USERavgTALK / 60);
+	$USERavgTALK_M = round($USERavgTALK_M, 2);
+	$USERavgTALK_M_int = intval("$USERavgTALK_M");
+	$USERavgTALK_S = ($USERavgTALK_M - $USERavgTALK_M_int);
+	$USERavgTALK_S = ($USERavgTALK_S * 60);
+	$USERavgTALK_S = round($USERavgTALK_S, 0);
+	if ($USERavgTALK_S < 10) {$USERavgTALK_S = "0$USERavgTALK_S";}
+	$USERavgTALK_MS = "$USERavgTALK_M_int:$USERavgTALK_S";
+	$pfUSERavgTALK_MS[$i] =		sprintf("%6s", $USERavgTALK_MS);
+
+	$USERtotPAUSE_M = ($USERtotPAUSE / 60);
+	$USERtotPAUSE_M = round($USERtotPAUSE_M, 2);
+	$USERtotPAUSE_M_int = intval("$USERtotPAUSE_M");
+	$USERtotPAUSE_S = ($USERtotPAUSE_M - $USERtotPAUSE_M_int);
+	$USERtotPAUSE_S = ($USERtotPAUSE_S * 60);
+	$USERtotPAUSE_S = round($USERtotPAUSE_S, 0);
+	if ($USERtotPAUSE_S < 10) {$USERtotPAUSE_S = "0$USERtotPAUSE_S";}
+	$USERtotPAUSE_MS = "$USERtotPAUSE_M_int:$USERtotPAUSE_S";
+	$pfUSERtotPAUSE_MS[$i] =		sprintf("%6s", $USERtotPAUSE_MS);
+
+	$USERavgPAUSE_M = ($USERavgPAUSE / 60);
+	$USERavgPAUSE_M = round($USERavgPAUSE_M, 2);
+	$USERavgPAUSE_M_int = intval("$USERavgPAUSE_M");
+	$USERavgPAUSE_S = ($USERavgPAUSE_M - $USERavgPAUSE_M_int);
+	$USERavgPAUSE_S = ($USERavgPAUSE_S * 60);
+	$USERavgPAUSE_S = round($USERavgPAUSE_S, 0);
+	if ($USERavgPAUSE_S < 10) {$USERavgPAUSE_S = "0$USERavgPAUSE_S";}
+	$USERavgPAUSE_MS = "$USERavgPAUSE_M_int:$USERavgPAUSE_S";
+	$pfUSERavgPAUSE_MS[$i] =		sprintf("%6s", $USERavgPAUSE_MS);
+
+	$USERtotWAIT_M = ($USERtotWAIT / 60);
+	$USERtotWAIT_M = round($USERtotWAIT_M, 2);
+	$USERtotWAIT_M_int = intval("$USERtotWAIT_M");
+	$USERtotWAIT_S = ($USERtotWAIT_M - $USERtotWAIT_M_int);
+	$USERtotWAIT_S = ($USERtotWAIT_S * 60);
+	$USERtotWAIT_S = round($USERtotWAIT_S, 0);
+	if ($USERtotWAIT_S < 10) {$USERtotWAIT_S = "0$USERtotWAIT_S";}
+	$USERtotWAIT_MS = "$USERtotWAIT_M_int:$USERtotWAIT_S";
+	$pfUSERtotWAIT_MS[$i] =		sprintf("%6s", $USERtotWAIT_MS);
+
+	$USERavgWAIT_M = ($USERavgWAIT / 60);
+	$USERavgWAIT_M = round($USERavgWAIT_M, 2);
+	$USERavgWAIT_M_int = intval("$USERavgWAIT_M");
+	$USERavgWAIT_S = ($USERavgWAIT_M - $USERavgWAIT_M_int);
+	$USERavgWAIT_S = ($USERavgWAIT_S * 60);
+	$USERavgWAIT_S = round($USERavgWAIT_S, 0);
+	if ($USERavgWAIT_S < 10) {$USERavgWAIT_S = "0$USERavgWAIT_S";}
+	$USERavgWAIT_MS = "$USERavgWAIT_M_int:$USERavgWAIT_S";
+	$pfUSERavgWAIT_MS[$i] =		sprintf("%6s", $USERavgWAIT_MS);
+	
+	$USERtotDISPO_M = ($USERtotDISPO / 60);
+	$USERtotDISPO_M = round($USERtotDISPO_M, 2);
+	$USERtotDISPO_M_int = intval("$USERtotDISPO_M");
+	$USERtotDISPO_S = ($USERtotDISPO_M - $USERtotDISPO_M_int);
+	$USERtotDISPO_S = ($USERtotDISPO_S * 60);
+	$USERtotDISPO_S = round($USERtotDISPO_S, 0);
+	if ($USERtotDISPO_S < 10) {$USERtotDISPO_S = "0$USERtotDISPO_S";}
+	$USERtotDISPO_MS = "$USERtotDISPO_M_int:$USERtotDISPO_S";
+	$pfUSERtotDISPO_MS[$i] =		sprintf("%6s", $USERtotDISPO_MS);
+
+	$USERavgDISPO_M = ($USERavgDISPO / 60);
+	$USERavgDISPO_M = round($USERavgDISPO_M, 2);
+	$USERavgDISPO_M_int = intval("$USERavgDISPO_M");
+	$USERavgDISPO_S = ($USERavgDISPO_M - $USERavgDISPO_M_int);
+	$USERavgDISPO_S = ($USERavgDISPO_S * 60);
+	$USERavgDISPO_S = round($USERavgDISPO_S, 0);
+	if ($USERavgDISPO_S < 10) {$USERavgDISPO_S = "0$USERavgDISPO_S";}
+	$USERavgDISPO_MS = "$USERavgDISPO_M_int:$USERavgDISPO_S";
+	$pfUSERavgDISPO_MS[$i] =		sprintf("%6s", $USERavgDISPO_MS);
+
+	$i++;
+	}
+
+$k=0;
+while($k < $i)
+	{
+	$ctA[$k]="0   "; $ctB[$k]="0   "; $ctDC[$k]="0   "; $ctDNC[$k]="0   "; $ctN[$k]="0   "; $ctNI[$k]="0   "; $ctSALE[$k]="0   "; $ctCB[$k]="0   "; 
+	$stmt="select count(*),status from vicidial_agent_log where event_time <= '$query_date_END' and event_time >= '$query_date_BEGIN' and user='$user[$k]' and campaign_id='" . mysql_real_escape_string($group) . "' group by status;";
+	$rslt=mysql_query($stmt, $link);
+	if ($DB) {echo "$stmt\n";}
+	$rows_to_print = mysql_num_rows($rslt);
+	$m=0;
+	while ($m < $rows_to_print)
+		{
+		$row=mysql_fetch_row($rslt);
+		if ($row[1] == 'A') {$ctA[$k]=sprintf("%-4s", $row[0]);		$TOT_A = ($TOT_A + $row[0]);}
+		if ($row[1] == 'B') {$ctB[$k]=sprintf("%-4s", $row[0]);		$TOT_B = ($TOT_B + $row[0]);}
+		if ($row[1] == 'DC') {$ctDC[$k]=sprintf("%-4s", $row[0]);	$TOT_DC = ($TOT_DC + $row[0]);}
+		if ($row[1] == 'DNC') {$ctDNC[$k]=sprintf("%-4s", $row[0]);	$TOT_DNC = ($TOT_DNC + $row[0]);}
+		if ($row[1] == 'N') {$ctN[$k]=sprintf("%-4s", $row[0]);		$TOT_N = ($TOT_N + $row[0]);}
+		if ($row[1] == 'NI') {$ctNI[$k]=sprintf("%-4s", $row[0]);	$TOT_NI = ($TOT_NI + $row[0]);}
+		if (($row[1] == 'SALE') || ($row[1] == 'XFER') ) {$ctSALE[$k]=sprintf("%-4s", $row[0]);	$TOT_SALE = ($TOT_SALE + $row[0]);}
+		if (($row[1] == 'CALLBK') || ($row[1] == 'CBHOLD') ) {$ctCB[$k]=sprintf("%-4s", $row[0]);	$TOT_CB = ($TOT_CB + $row[0]);}
+		$m++;
+		}
+	echo "| $full_name[$k] | $user[$k] | $calls[$k] | $pfUSERtime_MS[$k]| $pfUSERtotPAUSE_MS[$k] | $pfUSERavgPAUSE_MS[$k] | $pfUSERtotWAIT_MS[$k] | $pfUSERavgWAIT_MS[$k] | $pfUSERtotTALK_MS[$k] | $pfUSERavgTALK_MS[$k] | $pfUSERtotDISPO_MS[$k] | $pfUSERavgDISPO_MS[$k] | $ctA[$k] | $ctB[$k] | $ctDC[$k] | $ctDNC[$k] | $ctN[$k] | $ctNI[$k] | $ctCB[$k] | $ctSALE[$k] |\n";
+
+
+
+	$k++;
+	}
+
+	$TOTcalls =	sprintf("%-7s", $TOTcalls);
+
+	$TOTtime_M = ($TOTtime / 60);
+	$TOTtime_M = round($TOTtime_M, 2);
+	$TOTtime_M_int = intval("$TOTtime_M");
+	$TOTtime_S = ($TOTtime_M - $TOTtime_M_int);
+	$TOTtime_S = ($TOTtime_S * 60);
+	$TOTtime_S = round($TOTtime_S, 0);
+	if ($TOTtime_S < 10) {$TOTtime_S = "0$TOTtime_S";}
+	$TOTtime_MS = "$TOTtime_M_int:$TOTtime_S";
+	$TOTtime_MS =		sprintf("%7s", $TOTtime_MS);
+		while(strlen($TOTtime_MS)>7) {$TOTtime_MS = substr("$TOTtime_MS", 0, -1);}
+
+	$TOTtotTALK_M = ($TOTtotTALK / 60);
+	$TOTtotTALK_M = round($TOTtotTALK_M, 2);
+	$TOTtotTALK_M_int = intval("$TOTtotTALK_M");
+	$TOTtotTALK_S = ($TOTtotTALK_M - $TOTtotTALK_M_int);
+	$TOTtotTALK_S = ($TOTtotTALK_S * 60);
+	$TOTtotTALK_S = round($TOTtotTALK_S, 0);
+	if ($TOTtotTALK_S < 10) {$TOTtotTALK_S = "0$TOTtotTALK_S";}
+	$TOTtotTALK_MS = "$TOTtotTALK_M_int:$TOTtotTALK_S";
+	$TOTtotTALK_MS =		sprintf("%7s", $TOTtotTALK_MS);
+		while(strlen($TOTtotTALK_MS)>7) {$TOTtotTALK_MS = substr("$TOTtotTALK_MS", 0, -1);}
+
+	$TOTtotDISPO_M = ($TOTtotDISPO / 60);
+	$TOTtotDISPO_M = round($TOTtotDISPO_M, 2);
+	$TOTtotDISPO_M_int = intval("$TOTtotDISPO_M");
+	$TOTtotDISPO_S = ($TOTtotDISPO_M - $TOTtotDISPO_M_int);
+	$TOTtotDISPO_S = ($TOTtotDISPO_S * 60);
+	$TOTtotDISPO_S = round($TOTtotDISPO_S, 0);
+	if ($TOTtotDISPO_S < 10) {$TOTtotDISPO_S = "0$TOTtotDISPO_S";}
+	$TOTtotDISPO_MS = "$TOTtotDISPO_M_int:$TOTtotDISPO_S";
+	$TOTtotDISPO_MS =		sprintf("%7s", $TOTtotDISPO_MS);
+		while(strlen($TOTtotDISPO_MS)>7) {$TOTtotDISPO_MS = substr("$TOTtotDISPO_MS", 0, -1);}
+
+	$TOTtotPAUSE_M = ($TOTtotPAUSE / 60);
+	$TOTtotPAUSE_M = round($TOTtotPAUSE_M, 2);
+	$TOTtotPAUSE_M_int = intval("$TOTtotPAUSE_M");
+	$TOTtotPAUSE_S = ($TOTtotPAUSE_M - $TOTtotPAUSE_M_int);
+	$TOTtotPAUSE_S = ($TOTtotPAUSE_S * 60);
+	$TOTtotPAUSE_S = round($TOTtotPAUSE_S, 0);
+	if ($TOTtotPAUSE_S < 10) {$TOTtotPAUSE_S = "0$TOTtotPAUSE_S";}
+	$TOTtotPAUSE_MS = "$TOTtotPAUSE_M_int:$TOTtotPAUSE_S";
+	$TOTtotPAUSE_MS =		sprintf("%7s", $TOTtotPAUSE_MS);
+		while(strlen($TOTtotPAUSE_MS)>7) {$TOTtotPAUSE_MS = substr("$TOTtotPAUSE_MS", 0, -1);}
+
+	$TOTtotWAIT_M = ($TOTtotWAIT / 60);
+	$TOTtotWAIT_M = round($TOTtotWAIT_M, 2);
+	$TOTtotWAIT_M_int = intval("$TOTtotWAIT_M");
+	$TOTtotWAIT_S = ($TOTtotWAIT_M - $TOTtotWAIT_M_int);
+	$TOTtotWAIT_S = ($TOTtotWAIT_S * 60);
+	$TOTtotWAIT_S = round($TOTtotWAIT_S, 0);
+	if ($TOTtotWAIT_S < 10) {$TOTtotWAIT_S = "0$TOTtotWAIT_S";}
+	$TOTtotWAIT_MS = "$TOTtotWAIT_M_int:$TOTtotWAIT_S";
+	$TOTtotWAIT_MS =		sprintf("%7s", $TOTtotWAIT_MS);
+		while(strlen($TOTtotWAIT_MS)>7) {$TOTtotWAIT_MS = substr("$TOTtotWAIT_MS", 0, -1);}
+
+
+	$TOTavgTALK_M = ( ($TOTtotTALK / $TOTcalls) / 60);
+	$TOTavgTALK_M = round($TOTavgTALK_M, 2);
+	$TOTavgTALK_M_int = intval("$TOTavgTALK_M");
+	$TOTavgTALK_S = ($TOTavgTALK_M - $TOTavgTALK_M_int);
+	$TOTavgTALK_S = ($TOTavgTALK_S * 60);
+	$TOTavgTALK_S = round($TOTavgTALK_S, 0);
+	if ($TOTavgTALK_S < 10) {$TOTavgTALK_S = "0$TOTavgTALK_S";}
+	$TOTavgTALK_MS = "$TOTavgTALK_M_int:$TOTavgTALK_S";
+	$TOTavgTALK_MS =		sprintf("%6s", $TOTavgTALK_MS);
+		while(strlen($TOTavgTALK_MS)>6) {$TOTavgTALK_MS = substr("$TOTavgTALK_MS", 0, -1);}
+
+	$TOTavgDISPO_M = ( ($TOTtotDISPO / $TOTcalls) / 60);
+	$TOTavgDISPO_M = round($TOTavgDISPO_M, 2);
+	$TOTavgDISPO_M_int = intval("$TOTavgDISPO_M");
+	$TOTavgDISPO_S = ($TOTavgDISPO_M - $TOTavgDISPO_M_int);
+	$TOTavgDISPO_S = ($TOTavgDISPO_S * 60);
+	$TOTavgDISPO_S = round($TOTavgDISPO_S, 0);
+	if ($TOTavgDISPO_S < 10) {$TOTavgDISPO_S = "0$TOTavgDISPO_S";}
+	$TOTavgDISPO_MS = "$TOTavgDISPO_M_int:$TOTavgDISPO_S";
+	$TOTavgDISPO_MS =		sprintf("%6s", $TOTavgDISPO_MS);
+		while(strlen($TOTavgDISPO_MS)>6) {$TOTavgDISPO_MS = substr("$TOTavgDISPO_MS", 0, -1);}
+
+	$TOTavgPAUSE_M = ( ($TOTtotPAUSE / $TOTcalls) / 60);
+	$TOTavgPAUSE_M = round($TOTavgPAUSE_M, 2);
+	$TOTavgPAUSE_M_int = intval("$TOTavgPAUSE_M");
+	$TOTavgPAUSE_S = ($TOTavgPAUSE_M - $TOTavgPAUSE_M_int);
+	$TOTavgPAUSE_S = ($TOTavgPAUSE_S * 60);
+	$TOTavgPAUSE_S = round($TOTavgPAUSE_S, 0);
+	if ($TOTavgPAUSE_S < 10) {$TOTavgPAUSE_S = "0$TOTavgPAUSE_S";}
+	$TOTavgPAUSE_MS = "$TOTavgPAUSE_M_int:$TOTavgPAUSE_S";
+	$TOTavgPAUSE_MS =		sprintf("%6s", $TOTavgPAUSE_MS);
+		while(strlen($TOTavgPAUSE_MS)>6) {$TOTavgPAUSE_MS = substr("$TOTavgPAUSE_MS", 0, -1);}
+
+	$TOTavgWAIT_M = ( ($TOTtotWAIT / $TOTcalls) / 60);
+	$TOTavgWAIT_M = round($TOTavgWAIT_M, 2);
+	$TOTavgWAIT_M_int = intval("$TOTavgWAIT_M");
+	$TOTavgWAIT_S = ($TOTavgWAIT_M - $TOTavgWAIT_M_int);
+	$TOTavgWAIT_S = ($TOTavgWAIT_S * 60);
+	$TOTavgWAIT_S = round($TOTavgWAIT_S, 0);
+	if ($TOTavgWAIT_S < 10) {$TOTavgWAIT_S = "0$TOTavgWAIT_S";}
+	$TOTavgWAIT_MS = "$TOTavgWAIT_M_int:$TOTavgWAIT_S";
+	$TOTavgWAIT_MS =		sprintf("%6s", $TOTavgWAIT_MS);
+		while(strlen($TOTavgWAIT_MS)>6) {$TOTavgWAIT_MS = substr("$TOTavgWAIT_MS", 0, -1);}
+
+	
+	$TOT_A = sprintf("%-5s", $TOT_A);
+	$TOT_B = sprintf("%-5s", $TOT_B);
+	$TOT_DC = sprintf("%-5s", $TOT_DC);
+	$TOT_DNC = sprintf("%-5s", $TOT_DNC);
+	$TOT_N = sprintf("%-5s", $TOT_N);
+	$TOT_NI = sprintf("%-5s", $TOT_NI);
+	$TOT_CB = sprintf("%-5s", $TOT_CB);
+	$TOT_SALE = sprintf("%-5s", $TOT_SALE);
+
+echo "+-----------------+--------+--------+--------+--------+--------+--------+--------+--------+--------+--------+--------+------+------+------+------+------+------+------+------+\n";
+echo "|  TOTALS                  | $TOTcalls| $TOTtime_MS| $TOTtotPAUSE_MS| $TOTavgPAUSE_MS | $TOTtotWAIT_MS| $TOTavgWAIT_MS | $TOTtotTALK_MS| $TOTavgTALK_MS | $TOTtotDISPO_MS| $TOTavgDISPO_MS | $TOT_A| $TOT_B| $TOT_DC| $TOT_DNC| $TOT_N| $TOT_NI| $TOT_CB| $TOT_SALE|\n";
+echo "+--------------------------+--------+--------+--------+--------+--------+--------+--------+--------+--------+--------+------+------+------+------+------+------+------+------+\n";
+
+echo "\n";
+
+}
+
+
+
+?>
+
+</BODY></HTML>
\ No newline at end of file
diff --git a/www/vicidial/AST_agent_time_sheet.php b/www/vicidial/AST_agent_time_sheet.php
new file mode 100644
index 00000000..46659eb6
--- /dev/null
+++ b/www/vicidial/AST_agent_time_sheet.php
@@ -0,0 +1,281 @@
+<? 
+### AST_agent_time_sheet.php
+### 
+### Copyright (C) 2006  Matt Florell <vicidial@gmail.com>    LICENSE: GPLv2
+###
+# CHANGES
+#
+# 60619-1729 - Added variable filtering to eliminate SQL injection attack threat
+#            - Added required user/pass to gain access to this page
+#
+
+require("dbconnect.php");
+
+$PHP_AUTH_USER=$_SERVER['PHP_AUTH_USER'];
+$PHP_AUTH_PW=$_SERVER['PHP_AUTH_PW'];
+$PHP_SELF=$_SERVER['PHP_SELF'];
+if (isset($_GET["agent"]))				{$agent=$_GET["agent"];}
+	elseif (isset($_POST["agent"]))		{$agent=$_POST["agent"];}
+if (isset($_GET["query_date"]))				{$query_date=$_GET["query_date"];}
+	elseif (isset($_POST["query_date"]))		{$query_date=$_POST["query_date"];}
+if (isset($_GET["calls_summary"]))				{$calls_summary=$_GET["calls_summary"];}
+	elseif (isset($_POST["calls_summary"]))		{$calls_summary=$_POST["calls_summary"];}
+if (isset($_GET["submit"]))				{$submit=$_GET["submit"];}
+	elseif (isset($_POST["submit"]))		{$submit=$_POST["submit"];}
+if (isset($_GET["SUBMIT"]))				{$SUBMIT=$_GET["SUBMIT"];}
+	elseif (isset($_POST["SUBMIT"]))		{$SUBMIT=$_POST["SUBMIT"];}
+
+$PHP_AUTH_USER = ereg_replace("[^0-9a-zA-Z]","",$PHP_AUTH_USER);
+$PHP_AUTH_PW = ereg_replace("[^0-9a-zA-Z]","",$PHP_AUTH_PW);
+
+	$stmt="SELECT count(*) from vicidial_users where user='$PHP_AUTH_USER' and pass='$PHP_AUTH_PW' and user_level > 6;";
+	if ($DB) {echo "|$stmt|\n";}
+	$rslt=mysql_query($stmt, $link);
+	$row=mysql_fetch_row($rslt);
+	$auth=$row[0];
+
+  if( (strlen($PHP_AUTH_USER)<2) or (strlen($PHP_AUTH_PW)<2) or (!$auth))
+	{
+    Header("WWW-Authenticate: Basic realm=\"VICI-PROJECTS\"");
+    Header("HTTP/1.0 401 Unauthorized");
+    echo "Invalid Username/Password: |$PHP_AUTH_USER|$PHP_AUTH_PW|\n";
+    exit;
+	}
+
+$NOW_DATE = date("Y-m-d");
+$NOW_TIME = date("Y-m-d H:i:s");
+$STARTtime = date("U");
+if (!isset($query_date)) {$query_date = $NOW_DATE;}
+
+?>
+
+<HTML>
+<HEAD>
+<STYLE type="text/css">
+<!--
+   .green {color: white; background-color: green}
+   .red {color: white; background-color: red}
+   .blue {color: white; background-color: blue}
+   .purple {color: white; background-color: purple}
+-->
+ </STYLE>
+
+<? 
+echo "<META HTTP-EQUIV=\"Content-Type\" CONTENT=\"text/html; charset=utf-8\">\n";
+echo "<TITLE>VICIDIAL: Agent Time Sheet</TITLE></HEAD><BODY BGCOLOR=WHITE>\n";
+echo "<FORM ACTION=\"$PHP_SELF\" METHOD=GET>\n";
+echo "<INPUT TYPE=TEXT NAME=query_date SIZE=19 MAXLENGTH=19 VALUE=\"$query_date\">\n";
+echo "<INPUT TYPE=TEXT NAME=agent SIZE=10 MAXLENGTH=20 VALUE=\"$agent\">\n";
+echo "<INPUT TYPE=SUBMIT NAME=SUBMIT VALUE=SUBMIT>\n";
+echo "</FORM>\n\n";
+
+echo "<PRE><FONT SIZE=3>\n";
+
+
+if (!$agent)
+{
+echo "\n";
+echo "PLEASE SELECT AN AGENT ID AND DATE-TIME ABOVE AND CLICK SUBMIT\n";
+echo " NOTE: stats taken from available agent log data\n";
+}
+
+else
+{
+$query_date_BEGIN = "$query_date 00:00:00";   
+$query_date_END = "$query_date 23:59:59";
+$time_BEGIN = "00:00:00";   
+$time_END = "23:59:59";
+
+$stmt="select full_name from vicidial_users where user='$agent';";
+$rslt=mysql_query($stmt, $link);
+if ($DB) {echo "$stmt\n";}
+$row=mysql_fetch_row($rslt);
+$full_name = $row[0];
+
+echo "VICIDIAL: Agent Time Sheet                             $NOW_TIME\n";
+
+echo "Time range: $query_date_BEGIN to $query_date_END\n\n";
+echo "---------- AGENT TIME SHEET: $agent - $full_name -------------\n\n";
+
+if ($calls_summary)
+	{
+	$stmt="select count(*) as calls,sum(talk_sec) as talk,avg(talk_sec),sum(pause_sec),avg(pause_sec),sum(wait_sec),avg(wait_sec),sum(dispo_sec),avg(dispo_sec) from vicidial_agent_log where event_time <= '" . mysql_real_escape_string($query_date_END) . "' and event_time >= '" . mysql_real_escape_string($query_date_BEGIN) . "' and user='" . mysql_real_escape_string($agent) . "' and pause_sec<48800 and wait_sec<48800 and talk_sec<48800 and dispo_sec<48800 limit 1;";
+	$rslt=mysql_query($stmt, $link);
+	if ($DB) {echo "$stmt\n";}
+	$row=mysql_fetch_row($rslt);
+
+	$TOTAL_TIME = ($row[1] + $row[3] + $row[5] + $row[7]);
+
+		$TOTAL_TIME_H = ($TOTAL_TIME / 3600);
+		$TOTAL_TIME_H = round($TOTAL_TIME_H, 2);
+		$TOTAL_TIME_H_int = intval("$TOTAL_TIME_H");
+		$TOTAL_TIME_M = ($TOTAL_TIME_H - $TOTAL_TIME_H_int);
+		$TOTAL_TIME_M = ($TOTAL_TIME_M * 60);
+		$TOTAL_TIME_M = round($TOTAL_TIME_M, 2);
+		$TOTAL_TIME_M_int = intval("$TOTAL_TIME_M");
+		$TOTAL_TIME_S = ($TOTAL_TIME_M - $TOTAL_TIME_M_int);
+		$TOTAL_TIME_S = ($TOTAL_TIME_S * 60);
+		$TOTAL_TIME_S = round($TOTAL_TIME_S, 0);
+		if ($TOTAL_TIME_S < 10) {$TOTAL_TIME_S = "0$TOTAL_TIME_S";}
+		if ($TOTAL_TIME_M_int < 10) {$TOTAL_TIME_M_int = "0$TOTAL_TIME_M_int";}
+		$TOTAL_TIME_HMS = "$TOTAL_TIME_H_int:$TOTAL_TIME_M_int:$TOTAL_TIME_S";
+		$pfTOTAL_TIME_HMS =		sprintf("%8s", $TOTAL_TIME_HMS);
+
+		$TALK_TIME_H = ($row[1] / 3600);
+		$TALK_TIME_H = round($TALK_TIME_H, 2);
+		$TALK_TIME_H_int = intval("$TALK_TIME_H");
+		$TALK_TIME_M = ($TALK_TIME_H - $TALK_TIME_H_int);
+		$TALK_TIME_M = ($TALK_TIME_M * 60);
+		$TALK_TIME_M = round($TALK_TIME_M, 2);
+		$TALK_TIME_M_int = intval("$TALK_TIME_M");
+		$TALK_TIME_S = ($TALK_TIME_M - $TALK_TIME_M_int);
+		$TALK_TIME_S = ($TALK_TIME_S * 60);
+		$TALK_TIME_S = round($TALK_TIME_S, 0);
+		if ($TALK_TIME_S < 10) {$TALK_TIME_S = "0$TALK_TIME_S";}
+		if ($TALK_TIME_M_int < 10) {$TALK_TIME_M_int = "0$TALK_TIME_M_int";}
+		$TALK_TIME_HMS = "$TALK_TIME_H_int:$TALK_TIME_M_int:$TALK_TIME_S";
+		$pfTALK_TIME_HMS =		sprintf("%8s", $TALK_TIME_HMS);
+
+		$PAUSE_TIME_H = ($row[3] / 3600);
+		$PAUSE_TIME_H = round($PAUSE_TIME_H, 2);
+		$PAUSE_TIME_H_int = intval("$PAUSE_TIME_H");
+		$PAUSE_TIME_M = ($PAUSE_TIME_H - $PAUSE_TIME_H_int);
+		$PAUSE_TIME_M = ($PAUSE_TIME_M * 60);
+		$PAUSE_TIME_M = round($PAUSE_TIME_M, 2);
+		$PAUSE_TIME_M_int = intval("$PAUSE_TIME_M");
+		$PAUSE_TIME_S = ($PAUSE_TIME_M - $PAUSE_TIME_M_int);
+		$PAUSE_TIME_S = ($PAUSE_TIME_S * 60);
+		$PAUSE_TIME_S = round($PAUSE_TIME_S, 0);
+		if ($PAUSE_TIME_S < 10) {$PAUSE_TIME_S = "0$PAUSE_TIME_S";}
+		if ($PAUSE_TIME_M_int < 10) {$PAUSE_TIME_M_int = "0$PAUSE_TIME_M_int";}
+		$PAUSE_TIME_HMS = "$PAUSE_TIME_H_int:$PAUSE_TIME_M_int:$PAUSE_TIME_S";
+		$pfPAUSE_TIME_HMS =		sprintf("%8s", $PAUSE_TIME_HMS);
+
+		$WAIT_TIME_H = ($row[5] / 3600);
+		$WAIT_TIME_H = round($WAIT_TIME_H, 2);
+		$WAIT_TIME_H_int = intval("$WAIT_TIME_H");
+		$WAIT_TIME_M = ($WAIT_TIME_H - $WAIT_TIME_H_int);
+		$WAIT_TIME_M = ($WAIT_TIME_M * 60);
+		$WAIT_TIME_M = round($WAIT_TIME_M, 2);
+		$WAIT_TIME_M_int = intval("$WAIT_TIME_M");
+		$WAIT_TIME_S = ($WAIT_TIME_M - $WAIT_TIME_M_int);
+		$WAIT_TIME_S = ($WAIT_TIME_S * 60);
+		$WAIT_TIME_S = round($WAIT_TIME_S, 0);
+		if ($WAIT_TIME_S < 10) {$WAIT_TIME_S = "0$WAIT_TIME_S";}
+		if ($WAIT_TIME_M_int < 10) {$WAIT_TIME_M_int = "0$WAIT_TIME_M_int";}
+		$WAIT_TIME_HMS = "$WAIT_TIME_H_int:$WAIT_TIME_M_int:$WAIT_TIME_S";
+		$pfWAIT_TIME_HMS =		sprintf("%8s", $WAIT_TIME_HMS);
+
+		$WRAPUP_TIME_H = ($row[7] / 3600);
+		$WRAPUP_TIME_H = round($WRAPUP_TIME_H, 2);
+		$WRAPUP_TIME_H_int = intval("$WRAPUP_TIME_H");
+		$WRAPUP_TIME_M = ($WRAPUP_TIME_H - $WRAPUP_TIME_H_int);
+		$WRAPUP_TIME_M = ($WRAPUP_TIME_M * 60);
+		$WRAPUP_TIME_M = round($WRAPUP_TIME_M, 2);
+		$WRAPUP_TIME_M_int = intval("$WRAPUP_TIME_M");
+		$WRAPUP_TIME_S = ($WRAPUP_TIME_M - $WRAPUP_TIME_M_int);
+		$WRAPUP_TIME_S = ($WRAPUP_TIME_S * 60);
+		$WRAPUP_TIME_S = round($WRAPUP_TIME_S, 0);
+		if ($WRAPUP_TIME_S < 10) {$WRAPUP_TIME_S = "0$WRAPUP_TIME_S";}
+		if ($WRAPUP_TIME_M_int < 10) {$WRAPUP_TIME_M_int = "0$WRAPUP_TIME_M_int";}
+		$WRAPUP_TIME_HMS = "$WRAPUP_TIME_H_int:$WRAPUP_TIME_M_int:$WRAPUP_TIME_S";
+		$pfWRAPUP_TIME_HMS =		sprintf("%8s", $WRAPUP_TIME_HMS);
+
+		$TALK_AVG_M = ($row[2] / 60);
+		$TALK_AVG_M = round($TALK_AVG_M, 2);
+		$TALK_AVG_M_int = intval("$TALK_AVG_M");
+		$TALK_AVG_S = ($TALK_AVG_M - $TALK_AVG_M_int);
+		$TALK_AVG_S = ($TALK_AVG_S * 60);
+		$TALK_AVG_S = round($TALK_AVG_S, 0);
+		if ($TALK_AVG_S < 10) {$TALK_AVG_S = "0$TALK_AVG_S";}
+		$TALK_AVG_MS = "$TALK_AVG_M_int:$TALK_AVG_S";
+		$pfTALK_AVG_MS =		sprintf("%6s", $TALK_AVG_MS);
+
+		$PAUSE_AVG_M = ($row[4] / 60);
+		$PAUSE_AVG_M = round($PAUSE_AVG_M, 2);
+		$PAUSE_AVG_M_int = intval("$PAUSE_AVG_M");
+		$PAUSE_AVG_S = ($PAUSE_AVG_M - $PAUSE_AVG_M_int);
+		$PAUSE_AVG_S = ($PAUSE_AVG_S * 60);
+		$PAUSE_AVG_S = round($PAUSE_AVG_S, 0);
+		if ($PAUSE_AVG_S < 10) {$PAUSE_AVG_S = "0$PAUSE_AVG_S";}
+		$PAUSE_AVG_MS = "$PAUSE_AVG_M_int:$PAUSE_AVG_S";
+		$pfPAUSE_AVG_MS =		sprintf("%6s", $PAUSE_AVG_MS);
+
+		$WAIT_AVG_M = ($row[6] / 60);
+		$WAIT_AVG_M = round($WAIT_AVG_M, 2);
+		$WAIT_AVG_M_int = intval("$WAIT_AVG_M");
+		$WAIT_AVG_S = ($WAIT_AVG_M - $WAIT_AVG_M_int);
+		$WAIT_AVG_S = ($WAIT_AVG_S * 60);
+		$WAIT_AVG_S = round($WAIT_AVG_S, 0);
+		if ($WAIT_AVG_S < 10) {$WAIT_AVG_S = "0$WAIT_AVG_S";}
+		$WAIT_AVG_MS = "$WAIT_AVG_M_int:$WAIT_AVG_S";
+		$pfWAIT_AVG_MS =		sprintf("%6s", $WAIT_AVG_MS);
+
+		$WRAPUP_AVG_M = ($row[8] / 60);
+		$WRAPUP_AVG_M = round($WRAPUP_AVG_M, 2);
+		$WRAPUP_AVG_M_int = intval("$WRAPUP_AVG_M");
+		$WRAPUP_AVG_S = ($WRAPUP_AVG_M - $WRAPUP_AVG_M_int);
+		$WRAPUP_AVG_S = ($WRAPUP_AVG_S * 60);
+		$WRAPUP_AVG_S = round($WRAPUP_AVG_S, 0);
+		if ($WRAPUP_AVG_S < 10) {$WRAPUP_AVG_S = "0$WRAPUP_AVG_S";}
+		$WRAPUP_AVG_MS = "$WRAPUP_AVG_M_int:$WRAPUP_AVG_S";
+		$pfWRAPUP_AVG_MS =		sprintf("%6s", $WRAPUP_AVG_MS);
+
+	echo "TOTAL CALLS TAKEN: $row[0]\n";
+	echo "TALK TIME:               $pfTALK_TIME_HMS     AVERAGE: $pfTALK_AVG_MS\n";
+	echo "PAUSE TIME:              $pfPAUSE_TIME_HMS     AVERAGE: $pfPAUSE_AVG_MS\n";
+	echo "WAIT TIME:               $pfWAIT_TIME_HMS     AVERAGE: $pfWAIT_AVG_MS\n";
+	echo "WRAPUP TIME:             $pfWRAPUP_TIME_HMS     AVERAGE: $pfWRAPUP_AVG_MS\n";
+	echo "----------------------------------------------------------------\n";
+	echo "TOTAL ACTIVE AGENT TIME: $pfTOTAL_TIME_HMS\n";
+
+	echo "\n";
+	}
+else
+	{
+	echo "<a href=\"$PHP_SELF?calls_summary=1&agent=$agent&query_date=$query_date\">Call Activity Summary</a>\n\n";
+
+	}
+
+$stmt="select event_time,UNIX_TIMESTAMP(event_time) from vicidial_agent_log where event_time <= '" . mysql_real_escape_string($query_date_END) . "' and event_time >= '" . mysql_real_escape_string($query_date_BEGIN) . "' and user='" . mysql_real_escape_string($agent) . "' order by event_time limit 1;";
+$rslt=mysql_query($stmt, $link);
+if ($DB) {echo "$stmt\n";}
+$row=mysql_fetch_row($rslt);
+
+echo "FIRST LOGIN:          $row[0]\n";
+$start = $row[1];
+
+$stmt="select event_time,UNIX_TIMESTAMP(event_time) from vicidial_agent_log where event_time <= '" . mysql_real_escape_string($query_date_END) . "' and event_time >= '" . mysql_real_escape_string($query_date_BEGIN) . "' and user='" . mysql_real_escape_string($agent) . "' order by event_time desc limit 1;";
+$rslt=mysql_query($stmt, $link);
+if ($DB) {echo "$stmt\n";}
+$row=mysql_fetch_row($rslt);
+
+echo "LAST LOG ACTIVITY:    $row[0]\n";
+$end = $row[1];
+
+$login_time = ($end - $start);
+	$LOGIN_TIME_H = ($login_time / 3600);
+	$LOGIN_TIME_H = round($LOGIN_TIME_H, 2);
+	$LOGIN_TIME_H_int = intval("$LOGIN_TIME_H");
+	$LOGIN_TIME_M = ($LOGIN_TIME_H - $LOGIN_TIME_H_int);
+	$LOGIN_TIME_M = ($LOGIN_TIME_M * 60);
+	$LOGIN_TIME_M = round($LOGIN_TIME_M, 2);
+	$LOGIN_TIME_M_int = intval("$LOGIN_TIME_M");
+	$LOGIN_TIME_S = ($LOGIN_TIME_M - $LOGIN_TIME_M_int);
+	$LOGIN_TIME_S = ($LOGIN_TIME_S * 60);
+	$LOGIN_TIME_S = round($LOGIN_TIME_S, 0);
+	if ($LOGIN_TIME_S < 10) {$LOGIN_TIME_S = "0$LOGIN_TIME_S";}
+	if ($LOGIN_TIME_M_int < 10) {$LOGIN_TIME_M_int = "0$LOGIN_TIME_M_int";}
+	$LOGIN_TIME_HMS = "$LOGIN_TIME_H_int:$LOGIN_TIME_M_int:$LOGIN_TIME_S";
+	$pfLOGIN_TIME_HMS =		sprintf("%8s", $LOGIN_TIME_HMS);
+
+echo "-----------------------------------------\n";
+echo "TOTAL LOGGED-IN TIME:    $pfLOGIN_TIME_HMS\n";
+
+}
+
+
+
+?>
+
+</BODY></HTML>
\ No newline at end of file
diff --git a/www/vicidial/AST_agent_time_sheet_archive.php b/www/vicidial/AST_agent_time_sheet_archive.php
new file mode 100644
index 00000000..f14eca16
--- /dev/null
+++ b/www/vicidial/AST_agent_time_sheet_archive.php
@@ -0,0 +1,281 @@
+<? 
+### AST_agent_time_sheet_archive.php
+### 
+### Copyright (C) 2006  Matt Florell <vicidial@gmail.com>    LICENSE: GPLv2
+###
+# CHANGES
+#
+# 60619-1721 - Added variable filtering to eliminate SQL injection attack threat
+#            - Added required user/pass to gain access to this page
+#
+
+require("dbconnect.php");
+
+$PHP_AUTH_USER=$_SERVER['PHP_AUTH_USER'];
+$PHP_AUTH_PW=$_SERVER['PHP_AUTH_PW'];
+$PHP_SELF=$_SERVER['PHP_SELF'];
+if (isset($_GET["agent"]))				{$agent=$_GET["agent"];}
+	elseif (isset($_POST["agent"]))		{$agent=$_POST["agent"];}
+if (isset($_GET["query_date"]))				{$query_date=$_GET["query_date"];}
+	elseif (isset($_POST["query_date"]))		{$query_date=$_POST["query_date"];}
+if (isset($_GET["calls_summary"]))				{$calls_summary=$_GET["calls_summary"];}
+	elseif (isset($_POST["calls_summary"]))		{$calls_summary=$_POST["calls_summary"];}
+if (isset($_GET["submit"]))				{$submit=$_GET["submit"];}
+	elseif (isset($_POST["submit"]))		{$submit=$_POST["submit"];}
+if (isset($_GET["SUBMIT"]))				{$SUBMIT=$_GET["SUBMIT"];}
+	elseif (isset($_POST["SUBMIT"]))		{$SUBMIT=$_POST["SUBMIT"];}
+
+$PHP_AUTH_USER = ereg_replace("[^0-9a-zA-Z]","",$PHP_AUTH_USER);
+$PHP_AUTH_PW = ereg_replace("[^0-9a-zA-Z]","",$PHP_AUTH_PW);
+
+	$stmt="SELECT count(*) from vicidial_users where user='$PHP_AUTH_USER' and pass='$PHP_AUTH_PW' and user_level > 6;";
+	if ($DB) {echo "|$stmt|\n";}
+	$rslt=mysql_query($stmt, $link);
+	$row=mysql_fetch_row($rslt);
+	$auth=$row[0];
+
+  if( (strlen($PHP_AUTH_USER)<2) or (strlen($PHP_AUTH_PW)<2) or (!$auth))
+	{
+    Header("WWW-Authenticate: Basic realm=\"VICI-PROJECTS\"");
+    Header("HTTP/1.0 401 Unauthorized");
+    echo "Invalid Username/Password: |$PHP_AUTH_USER|$PHP_AUTH_PW|\n";
+    exit;
+	}
+
+$NOW_DATE = date("Y-m-d");
+$NOW_TIME = date("Y-m-d H:i:s");
+$STARTtime = date("U");
+if (!isset($query_date)) {$query_date = $NOW_DATE;}
+
+?>
+
+<HTML>
+<HEAD>
+<STYLE type="text/css">
+<!--
+   .green {color: white; background-color: green}
+   .red {color: white; background-color: red}
+   .blue {color: white; background-color: blue}
+   .purple {color: white; background-color: purple}
+-->
+ </STYLE>
+
+<? 
+echo "<META HTTP-EQUIV=\"Content-Type\" CONTENT=\"text/html; charset=utf-8\">\n";
+echo "<TITLE>VICIDIAL: Agent Time Sheet</TITLE></HEAD><BODY BGCOLOR=WHITE>\n";
+echo "<FORM ACTION=\"$PHP_SELF\" METHOD=GET>\n";
+echo "<INPUT TYPE=TEXT NAME=query_date SIZE=19 MAXLENGTH=19 VALUE=\"$query_date\">\n";
+echo "<INPUT TYPE=TEXT NAME=agent SIZE=10 MAXLENGTH=20 VALUE=\"$agent\">\n";
+echo "<INPUT TYPE=SUBMIT NAME=SUBMIT VALUE=SUBMIT>\n";
+echo "</FORM>\n\n";
+
+echo "<PRE><FONT SIZE=3>\n";
+
+
+if (!$agent)
+{
+echo "\n";
+echo "PLEASE SELECT AN AGENT ID AND DATE-TIME ABOVE AND CLICK SUBMIT\n";
+echo " NOTE: stats taken from available agent log data\n";
+}
+
+else
+{
+$query_date_BEGIN = "$query_date 00:00:00";   
+$query_date_END = "$query_date 23:59:59";
+$time_BEGIN = "00:00:00";   
+$time_END = "23:59:59";
+
+$stmt="select full_name from vicidial_users where user='$agent';";
+$rslt=mysql_query($stmt, $link);
+if ($DB) {echo "$stmt\n";}
+$row=mysql_fetch_row($rslt);
+$full_name = $row[0];
+
+echo "VICIDIAL: Agent Time Sheet                             $NOW_TIME\n";
+
+echo "Time range: $query_date_BEGIN to $query_date_END\n\n";
+echo "---------- AGENT TIME SHEET: $agent - $full_name -------------\n\n";
+
+if ($calls_summary)
+	{
+	$stmt="select count(*) as calls,sum(talk_sec) as talk,avg(talk_sec),sum(pause_sec),avg(pause_sec),sum(wait_sec),avg(wait_sec),sum(dispo_sec),avg(dispo_sec) from vicidial_agent_log_archive where event_time <= '" . mysql_real_escape_string($query_date_END) . "' and event_time >= '" . mysql_real_escape_string($query_date_BEGIN) . "' and user='" . mysql_real_escape_string($agent) . "' and pause_sec<48800 and wait_sec<48800 and talk_sec<48800 and dispo_sec<48800 limit 1;";
+	$rslt=mysql_query($stmt, $link);
+	if ($DB) {echo "$stmt\n";}
+	$row=mysql_fetch_row($rslt);
+
+	$TOTAL_TIME = ($row[1] + $row[3] + $row[5] + $row[7]);
+
+		$TOTAL_TIME_H = ($TOTAL_TIME / 3600);
+		$TOTAL_TIME_H = round($TOTAL_TIME_H, 2);
+		$TOTAL_TIME_H_int = intval("$TOTAL_TIME_H");
+		$TOTAL_TIME_M = ($TOTAL_TIME_H - $TOTAL_TIME_H_int);
+		$TOTAL_TIME_M = ($TOTAL_TIME_M * 60);
+		$TOTAL_TIME_M = round($TOTAL_TIME_M, 2);
+		$TOTAL_TIME_M_int = intval("$TOTAL_TIME_M");
+		$TOTAL_TIME_S = ($TOTAL_TIME_M - $TOTAL_TIME_M_int);
+		$TOTAL_TIME_S = ($TOTAL_TIME_S * 60);
+		$TOTAL_TIME_S = round($TOTAL_TIME_S, 0);
+		if ($TOTAL_TIME_S < 10) {$TOTAL_TIME_S = "0$TOTAL_TIME_S";}
+		if ($TOTAL_TIME_M_int < 10) {$TOTAL_TIME_M_int = "0$TOTAL_TIME_M_int";}
+		$TOTAL_TIME_HMS = "$TOTAL_TIME_H_int:$TOTAL_TIME_M_int:$TOTAL_TIME_S";
+		$pfTOTAL_TIME_HMS =		sprintf("%8s", $TOTAL_TIME_HMS);
+
+		$TALK_TIME_H = ($row[1] / 3600);
+		$TALK_TIME_H = round($TALK_TIME_H, 2);
+		$TALK_TIME_H_int = intval("$TALK_TIME_H");
+		$TALK_TIME_M = ($TALK_TIME_H - $TALK_TIME_H_int);
+		$TALK_TIME_M = ($TALK_TIME_M * 60);
+		$TALK_TIME_M = round($TALK_TIME_M, 2);
+		$TALK_TIME_M_int = intval("$TALK_TIME_M");
+		$TALK_TIME_S = ($TALK_TIME_M - $TALK_TIME_M_int);
+		$TALK_TIME_S = ($TALK_TIME_S * 60);
+		$TALK_TIME_S = round($TALK_TIME_S, 0);
+		if ($TALK_TIME_S < 10) {$TALK_TIME_S = "0$TALK_TIME_S";}
+		if ($TALK_TIME_M_int < 10) {$TALK_TIME_M_int = "0$TALK_TIME_M_int";}
+		$TALK_TIME_HMS = "$TALK_TIME_H_int:$TALK_TIME_M_int:$TALK_TIME_S";
+		$pfTALK_TIME_HMS =		sprintf("%8s", $TALK_TIME_HMS);
+
+		$PAUSE_TIME_H = ($row[3] / 3600);
+		$PAUSE_TIME_H = round($PAUSE_TIME_H, 2);
+		$PAUSE_TIME_H_int = intval("$PAUSE_TIME_H");
+		$PAUSE_TIME_M = ($PAUSE_TIME_H - $PAUSE_TIME_H_int);
+		$PAUSE_TIME_M = ($PAUSE_TIME_M * 60);
+		$PAUSE_TIME_M = round($PAUSE_TIME_M, 2);
+		$PAUSE_TIME_M_int = intval("$PAUSE_TIME_M");
+		$PAUSE_TIME_S = ($PAUSE_TIME_M - $PAUSE_TIME_M_int);
+		$PAUSE_TIME_S = ($PAUSE_TIME_S * 60);
+		$PAUSE_TIME_S = round($PAUSE_TIME_S, 0);
+		if ($PAUSE_TIME_S < 10) {$PAUSE_TIME_S = "0$PAUSE_TIME_S";}
+		if ($PAUSE_TIME_M_int < 10) {$PAUSE_TIME_M_int = "0$PAUSE_TIME_M_int";}
+		$PAUSE_TIME_HMS = "$PAUSE_TIME_H_int:$PAUSE_TIME_M_int:$PAUSE_TIME_S";
+		$pfPAUSE_TIME_HMS =		sprintf("%8s", $PAUSE_TIME_HMS);
+
+		$WAIT_TIME_H = ($row[5] / 3600);
+		$WAIT_TIME_H = round($WAIT_TIME_H, 2);
+		$WAIT_TIME_H_int = intval("$WAIT_TIME_H");
+		$WAIT_TIME_M = ($WAIT_TIME_H - $WAIT_TIME_H_int);
+		$WAIT_TIME_M = ($WAIT_TIME_M * 60);
+		$WAIT_TIME_M = round($WAIT_TIME_M, 2);
+		$WAIT_TIME_M_int = intval("$WAIT_TIME_M");
+		$WAIT_TIME_S = ($WAIT_TIME_M - $WAIT_TIME_M_int);
+		$WAIT_TIME_S = ($WAIT_TIME_S * 60);
+		$WAIT_TIME_S = round($WAIT_TIME_S, 0);
+		if ($WAIT_TIME_S < 10) {$WAIT_TIME_S = "0$WAIT_TIME_S";}
+		if ($WAIT_TIME_M_int < 10) {$WAIT_TIME_M_int = "0$WAIT_TIME_M_int";}
+		$WAIT_TIME_HMS = "$WAIT_TIME_H_int:$WAIT_TIME_M_int:$WAIT_TIME_S";
+		$pfWAIT_TIME_HMS =		sprintf("%8s", $WAIT_TIME_HMS);
+
+		$WRAPUP_TIME_H = ($row[7] / 3600);
+		$WRAPUP_TIME_H = round($WRAPUP_TIME_H, 2);
+		$WRAPUP_TIME_H_int = intval("$WRAPUP_TIME_H");
+		$WRAPUP_TIME_M = ($WRAPUP_TIME_H - $WRAPUP_TIME_H_int);
+		$WRAPUP_TIME_M = ($WRAPUP_TIME_M * 60);
+		$WRAPUP_TIME_M = round($WRAPUP_TIME_M, 2);
+		$WRAPUP_TIME_M_int = intval("$WRAPUP_TIME_M");
+		$WRAPUP_TIME_S = ($WRAPUP_TIME_M - $WRAPUP_TIME_M_int);
+		$WRAPUP_TIME_S = ($WRAPUP_TIME_S * 60);
+		$WRAPUP_TIME_S = round($WRAPUP_TIME_S, 0);
+		if ($WRAPUP_TIME_S < 10) {$WRAPUP_TIME_S = "0$WRAPUP_TIME_S";}
+		if ($WRAPUP_TIME_M_int < 10) {$WRAPUP_TIME_M_int = "0$WRAPUP_TIME_M_int";}
+		$WRAPUP_TIME_HMS = "$WRAPUP_TIME_H_int:$WRAPUP_TIME_M_int:$WRAPUP_TIME_S";
+		$pfWRAPUP_TIME_HMS =		sprintf("%8s", $WRAPUP_TIME_HMS);
+
+		$TALK_AVG_M = ($row[2] / 60);
+		$TALK_AVG_M = round($TALK_AVG_M, 2);
+		$TALK_AVG_M_int = intval("$TALK_AVG_M");
+		$TALK_AVG_S = ($TALK_AVG_M - $TALK_AVG_M_int);
+		$TALK_AVG_S = ($TALK_AVG_S * 60);
+		$TALK_AVG_S = round($TALK_AVG_S, 0);
+		if ($TALK_AVG_S < 10) {$TALK_AVG_S = "0$TALK_AVG_S";}
+		$TALK_AVG_MS = "$TALK_AVG_M_int:$TALK_AVG_S";
+		$pfTALK_AVG_MS =		sprintf("%6s", $TALK_AVG_MS);
+
+		$PAUSE_AVG_M = ($row[4] / 60);
+		$PAUSE_AVG_M = round($PAUSE_AVG_M, 2);
+		$PAUSE_AVG_M_int = intval("$PAUSE_AVG_M");
+		$PAUSE_AVG_S = ($PAUSE_AVG_M - $PAUSE_AVG_M_int);
+		$PAUSE_AVG_S = ($PAUSE_AVG_S * 60);
+		$PAUSE_AVG_S = round($PAUSE_AVG_S, 0);
+		if ($PAUSE_AVG_S < 10) {$PAUSE_AVG_S = "0$PAUSE_AVG_S";}
+		$PAUSE_AVG_MS = "$PAUSE_AVG_M_int:$PAUSE_AVG_S";
+		$pfPAUSE_AVG_MS =		sprintf("%6s", $PAUSE_AVG_MS);
+
+		$WAIT_AVG_M = ($row[6] / 60);
+		$WAIT_AVG_M = round($WAIT_AVG_M, 2);
+		$WAIT_AVG_M_int = intval("$WAIT_AVG_M");
+		$WAIT_AVG_S = ($WAIT_AVG_M - $WAIT_AVG_M_int);
+		$WAIT_AVG_S = ($WAIT_AVG_S * 60);
+		$WAIT_AVG_S = round($WAIT_AVG_S, 0);
+		if ($WAIT_AVG_S < 10) {$WAIT_AVG_S = "0$WAIT_AVG_S";}
+		$WAIT_AVG_MS = "$WAIT_AVG_M_int:$WAIT_AVG_S";
+		$pfWAIT_AVG_MS =		sprintf("%6s", $WAIT_AVG_MS);
+
+		$WRAPUP_AVG_M = ($row[8] / 60);
+		$WRAPUP_AVG_M = round($WRAPUP_AVG_M, 2);
+		$WRAPUP_AVG_M_int = intval("$WRAPUP_AVG_M");
+		$WRAPUP_AVG_S = ($WRAPUP_AVG_M - $WRAPUP_AVG_M_int);
+		$WRAPUP_AVG_S = ($WRAPUP_AVG_S * 60);
+		$WRAPUP_AVG_S = round($WRAPUP_AVG_S, 0);
+		if ($WRAPUP_AVG_S < 10) {$WRAPUP_AVG_S = "0$WRAPUP_AVG_S";}
+		$WRAPUP_AVG_MS = "$WRAPUP_AVG_M_int:$WRAPUP_AVG_S";
+		$pfWRAPUP_AVG_MS =		sprintf("%6s", $WRAPUP_AVG_MS);
+
+	echo "TOTAL CALLS TAKEN: $row[0]\n";
+	echo "TALK TIME:               $pfTALK_TIME_HMS     AVERAGE: $pfTALK_AVG_MS\n";
+	echo "PAUSE TIME:              $pfPAUSE_TIME_HMS     AVERAGE: $pfPAUSE_AVG_MS\n";
+	echo "WAIT TIME:               $pfWAIT_TIME_HMS     AVERAGE: $pfWAIT_AVG_MS\n";
+	echo "WRAPUP TIME:             $pfWRAPUP_TIME_HMS     AVERAGE: $pfWRAPUP_AVG_MS\n";
+	echo "----------------------------------------------------------------\n";
+	echo "TOTAL ACTIVE AGENT TIME: $pfTOTAL_TIME_HMS\n";
+
+	echo "\n";
+	}
+else
+	{
+	echo "<a href=\"$PHP_SELF?calls_summary=1&agent=$agent&query_date=$query_date\">Call Activity Summary</a>\n\n";
+
+	}
+
+$stmt="select event_time,UNIX_TIMESTAMP(event_time) from vicidial_agent_log_archive where event_time <= '" . mysql_real_escape_string($query_date_END) . "' and event_time >= '" . mysql_real_escape_string($query_date_BEGIN) . "' and user='" . mysql_real_escape_string($agent) . "' order by event_time limit 1;";
+$rslt=mysql_query($stmt, $link);
+if ($DB) {echo "$stmt\n";}
+$row=mysql_fetch_row($rslt);
+
+echo "FIRST LOGIN:          $row[0]\n";
+$start = $row[1];
+
+$stmt="select event_time,UNIX_TIMESTAMP(event_time) from vicidial_agent_log_archive where event_time <= '" . mysql_real_escape_string($query_date_END) . "' and event_time >= '" . mysql_real_escape_string($query_date_BEGIN) . "' and user='" . mysql_real_escape_string($agent) . "' order by event_time desc limit 1;";
+$rslt=mysql_query($stmt, $link);
+if ($DB) {echo "$stmt\n";}
+$row=mysql_fetch_row($rslt);
+
+echo "LAST LOG ACTIVITY:    $row[0]\n";
+$end = $row[1];
+
+$login_time = ($end - $start);
+	$LOGIN_TIME_H = ($login_time / 3600);
+	$LOGIN_TIME_H = round($LOGIN_TIME_H, 2);
+	$LOGIN_TIME_H_int = intval("$LOGIN_TIME_H");
+	$LOGIN_TIME_M = ($LOGIN_TIME_H - $LOGIN_TIME_H_int);
+	$LOGIN_TIME_M = ($LOGIN_TIME_M * 60);
+	$LOGIN_TIME_M = round($LOGIN_TIME_M, 2);
+	$LOGIN_TIME_M_int = intval("$LOGIN_TIME_M");
+	$LOGIN_TIME_S = ($LOGIN_TIME_M - $LOGIN_TIME_M_int);
+	$LOGIN_TIME_S = ($LOGIN_TIME_S * 60);
+	$LOGIN_TIME_S = round($LOGIN_TIME_S, 0);
+	if ($LOGIN_TIME_S < 10) {$LOGIN_TIME_S = "0$LOGIN_TIME_S";}
+	if ($LOGIN_TIME_M_int < 10) {$LOGIN_TIME_M_int = "0$LOGIN_TIME_M_int";}
+	$LOGIN_TIME_HMS = "$LOGIN_TIME_H_int:$LOGIN_TIME_M_int:$LOGIN_TIME_S";
+	$pfLOGIN_TIME_HMS =		sprintf("%8s", $LOGIN_TIME_HMS);
+
+echo "-----------------------------------------\n";
+echo "TOTAL LOGGED-IN TIME:    $pfLOGIN_TIME_HMS\n";
+
+}
+
+
+
+?>
+
+</BODY></HTML>
\ No newline at end of file
diff --git a/www/vicidial/AST_parkstats.php b/www/vicidial/AST_parkstats.php
new file mode 100644
index 00000000..eef768ca
--- /dev/null
+++ b/www/vicidial/AST_parkstats.php
@@ -0,0 +1,396 @@
+<? 
+### AST_parkstats.php
+### 
+### Copyright (C) 2006  Matt Florell <vicidial@gmail.com>    LICENSE: GPLv2
+###
+# CHANGES
+#
+# 60619-1717 - Added variable filtering to eliminate SQL injection attack threat
+#            - Added required user/pass to gain access to this page
+#
+
+require("dbconnect.php");
+
+$PHP_AUTH_USER=$_SERVER['PHP_AUTH_USER'];
+$PHP_AUTH_PW=$_SERVER['PHP_AUTH_PW'];
+$PHP_SELF=$_SERVER['PHP_SELF'];
+if (isset($_GET["group"]))				{$group=$_GET["group"];}
+	elseif (isset($_POST["group"]))		{$group=$_POST["group"];}
+if (isset($_GET["query_date"]))				{$query_date=$_GET["query_date"];}
+	elseif (isset($_POST["query_date"]))		{$query_date=$_POST["query_date"];}
+if (isset($_GET["submit"]))				{$submit=$_GET["submit"];}
+	elseif (isset($_POST["submit"]))		{$submit=$_POST["submit"];}
+if (isset($_GET["SUBMIT"]))				{$SUBMIT=$_GET["SUBMIT"];}
+	elseif (isset($_POST["SUBMIT"]))		{$SUBMIT=$_POST["SUBMIT"];}
+
+$PHP_AUTH_USER = ereg_replace("[^0-9a-zA-Z]","",$PHP_AUTH_USER);
+$PHP_AUTH_PW = ereg_replace("[^0-9a-zA-Z]","",$PHP_AUTH_PW);
+
+	$stmt="SELECT count(*) from vicidial_users where user='$PHP_AUTH_USER' and pass='$PHP_AUTH_PW' and user_level > 6;";
+	if ($DB) {echo "|$stmt|\n";}
+	$rslt=mysql_query($stmt, $link);
+	$row=mysql_fetch_row($rslt);
+	$auth=$row[0];
+
+  if( (strlen($PHP_AUTH_USER)<2) or (strlen($PHP_AUTH_PW)<2) or (!$auth))
+	{
+    Header("WWW-Authenticate: Basic realm=\"VICI-PROJECTS\"");
+    Header("HTTP/1.0 401 Unauthorized");
+    echo "Invalid Username/Password: |$PHP_AUTH_USER|$PHP_AUTH_PW|\n";
+    exit;
+	}
+
+$NOW_DATE = date("Y-m-d");
+$NOW_TIME = date("Y-m-d H:i:s");
+$STARTtime = date("U");
+if (!isset($group)) {$group = '';}
+if (!isset($query_date)) {$query_date = $NOW_DATE;}
+
+$stmt="select distinct channel_group from park_log;";
+$rslt=mysql_query($stmt, $link);
+if ($DB) {echo "$stmt\n";}
+$groups_to_print = mysql_num_rows($rslt);
+$i=0;
+while ($i < $groups_to_print)
+	{
+	$row=mysql_fetch_row($rslt);
+	$groups[$i] =$row[0];
+	$i++;
+	}
+?>
+
+<HTML>
+<HEAD>
+<STYLE type="text/css">
+<!--
+   .green {color: white; background-color: green}
+   .red {color: white; background-color: red}
+   .blue {color: white; background-color: blue}
+   .purple {color: white; background-color: purple}
+-->
+ </STYLE>
+
+<? 
+echo "<META HTTP-EQUIV=\"Content-Type\" CONTENT=\"text/html; charset=utf-8\">\n";
+echo "<TITLE>VICIDIAL: Park Stats</TITLE></HEAD><BODY BGCOLOR=WHITE>\n";
+echo "<FORM ACTION=\"$PHP_SELF\" METHOD=GET>\n";
+echo "<INPUT TYPE=TEXT NAME=query_date SIZE=10 MAXLENGTH=10 VALUE=\"$query_date\">\n";
+echo "<SELECT SIZE=1 NAME=group>\n";
+	$o=0;
+	while ($groups_to_print > $o)
+	{
+		if ($groups[$o] == $group) {echo "<option selected value=\"$groups[$o]\">$groups[$o]</option>\n";}
+		  else {echo "<option value=\"$groups[$o]\">$groups[$o]</option>\n";}
+		$o++;
+	}
+echo "</SELECT>\n";
+echo "<INPUT TYPE=SUBMIT NAME=SUBMIT VALUE=SUBMIT>\n";
+echo "<FONT FACE=\"ARIAL,HELVETICA\" COLOR=BLACK SIZE=2> &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; <a href=\"./admin.php?ADD=34&campaign_id=$group\">MODIFY</a> | <a href=\"./server_stats.php\">REPORTS</a> </FONT>\n";
+echo "</FORM>\n\n";
+
+echo "<PRE><FONT SIZE=2>\n\n";
+
+
+if (!$group)
+{
+echo "\n\n";
+echo "PLEASE SELECT A GROUP AND DATE ABOVE AND CLICK SUBMIT\n";
+}
+
+else
+{
+
+
+echo "VICIDIAL: Park Stats                             $NOW_TIME\n";
+
+echo "\n";
+echo "---------- TOTALS\n";
+
+$stmt="select count(*),sum(parked_sec) from park_log where parked_time >= '$query_date 00:00:01' and parked_time <= '$query_date 23:59:59' and status ='HUNGUP' and channel_group='" . mysql_real_escape_string($group) . "';";
+$rslt=mysql_query($stmt, $link);
+if ($DB) {echo "$stmt\n";}
+$row=mysql_fetch_row($rslt);
+
+$TOTALcalls =	sprintf("%10s", $row[0]);
+$average_hold_seconds = ($row[1] / $row[0]);
+$average_hold_seconds = round($average_hold_seconds, 0);
+$average_hold_seconds =	sprintf("%10s", $average_hold_seconds);
+
+echo "Total Calls taken in this Group:              $TOTALcalls\n";
+echo "Average Hold Time(seconds) for all Calls:     $average_hold_seconds\n";
+
+echo "\n";
+echo "---------- DROPS\n";
+
+$stmt="select count(*),sum(parked_sec) from park_log where parked_time >= '$query_date 00:00:01' and parked_time <= '$query_date 23:59:59' and status ='HUNGUP' and channel_group='" . mysql_real_escape_string($group) . "' and (talked_sec < 5 or talked_sec is null);";
+$rslt=mysql_query($stmt, $link);
+if ($DB) {echo "$stmt\n";}
+$row=mysql_fetch_row($rslt);
+
+$DROPcalls =	sprintf("%10s", $row[0]);
+$DROPpercent = (($DROPcalls / $TOTALcalls) * 100);
+$DROPpercent = round($DROPpercent, 0);
+
+$average_hold_seconds = ($row[1] / $row[0]);
+$average_hold_seconds = round($average_hold_seconds, 0);
+$average_hold_seconds =	sprintf("%10s", $average_hold_seconds);
+
+echo "Total Dropped Calls:                          $DROPcalls  $DROPpercent%\n";
+echo "Average Hold Time(seconds) for Dropped Calls: $average_hold_seconds\n";
+
+
+##############################
+#########  USER STATS
+
+echo "\n";
+echo "---------- USER STATS\n";
+echo "+--------------------------+------------+--------+--------+\n";
+echo "| USER                     | CALLS      | TIME M | AVRG M |\n";
+echo "+--------------------------+------------+--------+--------+\n";
+
+$stmt="select park_log.user,full_name,count(*),sum(talked_sec),avg(talked_sec) from park_log,vicidial_users where parked_time >= '$query_date 00:00:01' and parked_time <= '$query_date 23:59:59' and status ='HUNGUP' and channel_group='" . mysql_real_escape_string($group) . "' and park_log.user is not null and talked_sec is not null and talked_sec > 4 and park_log.user=vicidial_users.user group by park_log.user;";
+$rslt=mysql_query($stmt, $link);
+if ($DB) {echo "$stmt\n";}
+$users_to_print = mysql_num_rows($rslt);
+$i=0;
+while ($i < $users_to_print)
+	{
+	$row=mysql_fetch_row($rslt);
+
+	$user =			sprintf("%-6s", $row[0]);
+	$full_name =	sprintf("%-15s", $row[1]); while(strlen($full_name)>15) {$full_name = substr("$full_name", 0, -1);}
+	$USERcalls =	sprintf("%10s", $row[2]);
+	$USERtotTALK =	$row[3];
+	$USERavgTALK =	$row[4];
+
+	$USERtotTALK_M = ($USERtotTALK / 60);
+	$USERtotTALK_M = round($USERtotTALK_M, 2);
+	$USERtotTALK_M_int = intval("$USERtotTALK_M");
+	$USERtotTALK_S = ($USERtotTALK_M - $USERtotTALK_M_int);
+	$USERtotTALK_S = ($USERtotTALK_S * 60);
+	$USERtotTALK_S = round($USERtotTALK_S, 0);
+	if ($USERtotTALK_S < 10) {$USERtotTALK_S = "0$USERtotTALK_S";}
+	$USERtotTALK_MS = "$USERtotTALK_M_int:$USERtotTALK_S";
+	$USERtotTALK_MS =		sprintf("%6s", $USERtotTALK_MS);
+
+	$USERavgTALK_M = ($USERavgTALK / 60);
+	$USERavgTALK_M = round($USERavgTALK_M, 2);
+	$USERavgTALK_M_int = intval("$USERavgTALK_M");
+	$USERavgTALK_S = ($USERavgTALK_M - $USERavgTALK_M_int);
+	$USERavgTALK_S = ($USERavgTALK_S * 60);
+	$USERavgTALK_S = round($USERavgTALK_S, 0);
+	if ($USERavgTALK_S < 10) {$USERavgTALK_S = "0$USERavgTALK_S";}
+	$USERavgTALK_MS = "$USERavgTALK_M_int:$USERavgTALK_S";
+	$USERavgTALK_MS =		sprintf("%6s", $USERavgTALK_MS);
+
+	echo "| $user - $full_name | $USERcalls | $USERtotTALK_MS | $USERavgTALK_MS |\n";
+
+	$i++;
+	}
+
+echo "+--------------------------+------------+--------+--------+\n";
+
+##############################
+#########  TIME STATS
+
+echo "\n";
+echo "---------- TIME STATS\n";
+
+echo "<FONT SIZE=0>\n";
+
+$hi_hour_count=0;
+$last_full_record=0;
+$i=0;
+$h=0;
+while ($i <= 96)
+	{
+	$stmt="select count(*) from park_log where parked_time >= '$query_date $h:00:00' and parked_time <= '$query_date $h:14:59' and status ='HUNGUP' and channel_group='" . mysql_real_escape_string($group) . "';";
+	$rslt=mysql_query($stmt, $link);
+	if ($DB) {echo "$stmt\n";}
+	$row=mysql_fetch_row($rslt);
+	$hour_count[$i] = $row[0];
+	if ($hour_count[$i] > $hi_hour_count) {$hi_hour_count = $hour_count[$i];}
+	if ($hour_count[$i] > 0) {$last_full_record = $i;}
+	$stmt="select count(*) from park_log where parked_time >= '$query_date $h:00:00' and parked_time <= '$query_date $h:14:59' and status ='HUNGUP' and channel_group='" . mysql_real_escape_string($group) . "' and (talked_sec < 5 or talked_sec is null);";
+	$rslt=mysql_query($stmt, $link);
+	if ($DB) {echo "$stmt\n";}
+	$row=mysql_fetch_row($rslt);
+	$drop_count[$i] = $row[0];
+	$i++;
+
+
+	$stmt="select count(*) from park_log where parked_time >= '$query_date $h:15:00' and parked_time <= '$query_date $h:29:59' and status ='HUNGUP' and channel_group='" . mysql_real_escape_string($group) . "';";
+	$rslt=mysql_query($stmt, $link);
+	if ($DB) {echo "$stmt\n";}
+	$row=mysql_fetch_row($rslt);
+	$hour_count[$i] = $row[0];
+	if ($hour_count[$i] > $hi_hour_count) {$hi_hour_count = $hour_count[$i];}
+	if ($hour_count[$i] > 0) {$last_full_record = $i;}
+	$stmt="select count(*) from park_log where parked_time >= '$query_date $h:15:00' and parked_time <= '$query_date $h:29:59' and status ='HUNGUP' and channel_group='" . mysql_real_escape_string($group) . "' and (talked_sec < 5 or talked_sec is null);";
+	$rslt=mysql_query($stmt, $link);
+	if ($DB) {echo "$stmt\n";}
+	$row=mysql_fetch_row($rslt);
+	$drop_count[$i] = $row[0];
+	$i++;
+
+	$stmt="select count(*) from park_log where parked_time >= '$query_date $h:30:00' and parked_time <= '$query_date $h:44:59' and status ='HUNGUP' and channel_group='" . mysql_real_escape_string($group) . "';";
+	$rslt=mysql_query($stmt, $link);
+	if ($DB) {echo "$stmt\n";}
+	$row=mysql_fetch_row($rslt);
+	$hour_count[$i] = $row[0];
+	if ($hour_count[$i] > $hi_hour_count) {$hi_hour_count = $hour_count[$i];}
+	if ($hour_count[$i] > 0) {$last_full_record = $i;}
+	$stmt="select count(*) from park_log where parked_time >= '$query_date $h:30:00' and parked_time <= '$query_date $h:44:59' and status ='HUNGUP' and channel_group='" . mysql_real_escape_string($group) . "' and (talked_sec < 5 or talked_sec is null);";
+	$rslt=mysql_query($stmt, $link);
+	if ($DB) {echo "$stmt\n";}
+	$row=mysql_fetch_row($rslt);
+	$drop_count[$i] = $row[0];
+	$i++;
+
+	$stmt="select count(*) from park_log where parked_time >= '$query_date $h:45:00' and parked_time <= '$query_date $h:59:59' and status ='HUNGUP' and channel_group='" . mysql_real_escape_string($group) . "';";
+	$rslt=mysql_query($stmt, $link);
+	if ($DB) {echo "$stmt\n";}
+	$row=mysql_fetch_row($rslt);
+	$hour_count[$i] = $row[0];
+	if ($hour_count[$i] > $hi_hour_count) {$hi_hour_count = $hour_count[$i];}
+	if ($hour_count[$i] > 0) {$last_full_record = $i;}
+	$stmt="select count(*) from park_log where parked_time >= '$query_date $h:45:00' and parked_time <= '$query_date $h:59:59' and status ='HUNGUP' and channel_group='" . mysql_real_escape_string($group) . "' and (talked_sec < 5 or talked_sec is null);";
+	$rslt=mysql_query($stmt, $link);
+	if ($DB) {echo "$stmt\n";}
+	$row=mysql_fetch_row($rslt);
+	$drop_count[$i] = $row[0];
+	$i++;
+	$h++;
+	}
+
+$hour_multiplier = (100 / $hi_hour_count);
+#$hour_multiplier = round($hour_multiplier, 0);
+
+echo "<!-- HICOUNT: $hi_hour_count|$hour_multiplier -->\n";
+echo "GRAPH IN 15 MINUTE INCREMENTS OF TOTAL INCOMING CALLS FOR THIS GROUP\n";
+
+$k=1;
+$Mk=0;
+$call_scale = '0';
+while ($k <= 102) 
+	{
+	if ($Mk >= 5) 
+		{
+		$Mk=0;
+		$scale_num=($k / $hour_multiplier);
+		$scale_num = round($scale_num, 0);
+		$LENscale_num = (strlen($scale_num));
+		$k = ($k + $LENscale_num);
+		$call_scale .= "$scale_num";
+		}
+	else
+		{
+		$call_scale .= " ";
+		$k++;   $Mk++;
+		}
+	}
+
+
+echo "+------+-------------------------------------------------------------------------------------------------------+-------+-------+\n";
+#echo "| HOUR | GRAPH IN 15 MINUTE INCREMENTS OF TOTAL INCOMING CALLS FOR THIS GROUP                                  | DROPS | TOTAL |\n";
+echo "| HOUR |$call_scale| DROPS | TOTAL |\n";
+echo "+------+-------------------------------------------------------------------------------------------------------+-------+-------+\n";
+
+$ZZ = '00';
+$i=0;
+$h=4;
+$hour= -1;
+$no_lines_yet=1;
+
+while ($i <= 96)
+	{
+	$char_counter=0;
+	$time = '      ';
+	if ($h >= 4) 
+		{
+		$hour++;
+		$h=0;
+		if ($hour < 10) {$hour = "0$hour";}
+		$time = "+$hour$ZZ+";
+		}
+	if ($h == 1) {$time = "   15 ";}
+	if ($h == 2) {$time = "   30 ";}
+	if ($h == 3) {$time = "   45 ";}
+	$Ghour_count = $hour_count[$i];
+	if ($Ghour_count < 1) 
+		{
+		if ( ($no_lines_yet) or ($i > $last_full_record) )
+			{
+			$do_nothing=1;
+			}
+		else
+			{
+			$hour_count[$i] =	sprintf("%-5s", $hour_count[$i]);
+			echo "|$time|";
+			$k=0;   while ($k <= 102) {echo " ";   $k++;}
+			echo "| $hour_count[$i] |\n";
+			}
+		}
+	else
+		{
+		$no_lines_yet=0;
+		$Xhour_count = ($Ghour_count * $hour_multiplier);
+		$Yhour_count = (99 - $Xhour_count);
+
+		$Gdrop_count = $drop_count[$i];
+		if ($Gdrop_count < 1) 
+			{
+			$hour_count[$i] =	sprintf("%-5s", $hour_count[$i]);
+
+			echo "|$time|<SPAN class=\"green\">";
+			$k=0;   while ($k <= $Xhour_count) {echo "*";   $k++;   $char_counter++;}
+			echo "*X</SPAN>";   $char_counter++;
+			$k=0;   while ($k <= $Yhour_count) {echo " ";   $k++;   $char_counter++;}
+				while ($char_counter <= 101) {echo " ";   $char_counter++;}
+			echo "| 0     | $hour_count[$i] |\n";
+
+			}
+		else
+			{
+			$Xdrop_count = ($Gdrop_count * $hour_multiplier);
+
+		#	if ($Xdrop_count >= $Xhour_count) {$Xdrop_count = ($Xdrop_count - 1);}
+
+			$XXhour_count = ( ($Xhour_count - $Xdrop_count) - 1 );
+
+			$hour_count[$i] =	sprintf("%-5s", $hour_count[$i]);
+			$drop_count[$i] =	sprintf("%-5s", $drop_count[$i]);
+
+			echo "|$time|<SPAN class=\"red\">";
+			$k=0;   while ($k <= $Xdrop_count) {echo ">";   $k++;   $char_counter++;}
+			echo "D</SPAN><SPAN class=\"green\">";   $char_counter++;
+			$k=0;   while ($k <= $XXhour_count) {echo "*";   $k++;   $char_counter++;}
+			echo "X</SPAN>";   $char_counter++;
+			$k=0;   while ($k <= $Yhour_count) {echo " ";   $k++;   $char_counter++;}
+				while ($char_counter <= 102) {echo " ";   $char_counter++;}
+			echo "| $drop_count[$i] | $hour_count[$i] |\n";
+			}
+		}
+	
+	
+	$i++;
+	$h++;
+	}
+
+
+echo "+------+-------------------------------------------------------------------------------------------------------+-------+-------+\n";
+
+
+
+
+
+
+
+}
+
+
+
+?>
+</PRE>
+
+</BODY></HTML>
\ No newline at end of file
diff --git a/www/vicidial/AST_server_performance.php b/www/vicidial/AST_server_performance.php
new file mode 100644
index 00000000..fdedb9d9
--- /dev/null
+++ b/www/vicidial/AST_server_performance.php
@@ -0,0 +1,310 @@
+<? 
+# AST_server_performance.php
+# 
+# Copyright (C) 2006  Matt Florell <vicidial@gmail.com>    LICENSE: GPLv2
+#
+# CHANGES
+#
+# 60619-1732 - Added variable filtering to eliminate SQL injection attack threat
+#            - Added required user/pass to gain access to this page
+#
+
+require("dbconnect.php");
+
+$PHP_AUTH_USER=$_SERVER['PHP_AUTH_USER'];
+$PHP_AUTH_PW=$_SERVER['PHP_AUTH_PW'];
+$PHP_SELF=$_SERVER['PHP_SELF'];
+if (isset($_GET["query_date"]))				{$query_date=$_GET["query_date"];}
+	elseif (isset($_POST["query_date"]))	{$query_date=$_POST["query_date"];}
+if (isset($_GET["group"]))				{$group=$_GET["group"];}
+	elseif (isset($_POST["group"]))		{$group=$_POST["group"];}
+if (isset($_GET["shift"]))				{$shift=$_GET["shift"];}
+	elseif (isset($_POST["shift"]))		{$shift=$_POST["shift"];}
+if (isset($_GET["submit"]))				{$submit=$_GET["submit"];}
+	elseif (isset($_POST["submit"]))	{$submit=$_POST["submit"];}
+if (isset($_GET["SUBMIT"]))				{$SUBMIT=$_GET["SUBMIT"];}
+	elseif (isset($_POST["SUBMIT"]))	{$SUBMIT=$_POST["SUBMIT"];}
+
+$PHP_AUTH_USER = ereg_replace("[^0-9a-zA-Z]","",$PHP_AUTH_USER);
+$PHP_AUTH_PW = ereg_replace("[^0-9a-zA-Z]","",$PHP_AUTH_PW);
+
+	$stmt="SELECT count(*) from vicidial_users where user='$PHP_AUTH_USER' and pass='$PHP_AUTH_PW' and user_level > 6;";
+	if ($DB) {echo "|$stmt|\n";}
+	$rslt=mysql_query($stmt, $link);
+	$row=mysql_fetch_row($rslt);
+	$auth=$row[0];
+
+  if( (strlen($PHP_AUTH_USER)<2) or (strlen($PHP_AUTH_PW)<2) or (!$auth))
+	{
+    Header("WWW-Authenticate: Basic realm=\"VICI-PROJECTS\"");
+    Header("HTTP/1.0 401 Unauthorized");
+    echo "Invalid Username/Password: |$PHP_AUTH_USER|$PHP_AUTH_PW|\n";
+    exit;
+	}
+
+# path from root to where ploticus files will be stored
+$DOCroot = "$WeBServeRRooT/vicidial/ploticus/";
+
+$NOW_DATE = date("Y-m-d");
+$NOW_TIME = date("Y-m-d H:i:s");
+$STARTtime = date("U");
+
+if (!isset($query_date)) {$query_date = $NOW_DATE;}
+if (!isset($group)) {$group = '';}
+
+$stmt="select server_ip from servers;";
+$rslt=mysql_query($stmt, $link);
+if ($DB) {echo "$stmt\n";}
+$servers_to_print = mysql_num_rows($rslt);
+$i=0;
+while ($i < $servers_to_print)
+	{
+	$row=mysql_fetch_row($rslt);
+	$groups[$i] =$row[0];
+	$i++;
+	}
+?>
+
+<HTML>
+<HEAD>
+<STYLE type="text/css">
+<!--
+   .green {color: white; background-color: green}
+   .red {color: white; background-color: red}
+   .blue {color: white; background-color: blue}
+   .purple {color: white; background-color: purple}
+-->
+ </STYLE>
+
+<? 
+echo "<META HTTP-EQUIV=\"Content-Type\" CONTENT=\"text/html; charset=utf-8\">\n";
+echo "<TITLE>VICIDIAL: Server Performance</TITLE></HEAD><BODY BGCOLOR=WHITE>\n";
+echo "<FORM ACTION=\"$PHP_SELF\" METHOD=GET>\n";
+echo "<INPUT TYPE=TEXT NAME=query_date SIZE=19 MAXLENGTH=19 VALUE=\"$query_date\">\n";
+echo "<SELECT SIZE=1 NAME=group>\n";
+	$o=0;
+	while ($servers_to_print > $o)
+	{
+		if ($groups[$o] == $group) {echo "<option selected value=\"$groups[$o]\">$groups[$o]</option>\n";}
+		  else {echo "<option value=\"$groups[$o]\">$groups[$o]</option>\n";}
+		$o++;
+	}
+echo "</SELECT>\n";
+echo "<SELECT SIZE=1 NAME=shift>\n";
+echo "<option selected value=\"AM\">AM</option>\n";
+echo "<option value=\"PM\">PM</option>\n";
+echo "</SELECT>\n";
+echo "<INPUT TYPE=SUBMIT NAME=SUBMIT VALUE=SUBMIT>\n";
+echo "<FONT FACE=\"ARIAL,HELVETICA\" COLOR=BLACK SIZE=2> &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; <a href=\"./server_stats.php\">REPORTS</a> </FONT>\n";
+echo "</FORM>\n\n";
+
+echo "<PRE><FONT SIZE=2>\n";
+
+
+if (!$group)
+{
+echo "\n";
+echo "PLEASE SELECT A SERVER AND DATE-TIME ABOVE AND CLICK SUBMIT\n";
+echo " NOTE: stats taken from 6 hour shift specified\n";
+}
+
+else
+{
+if ($shift == 'AM') 
+	{
+	$query_date_BEGIN = "$query_date 08:45:00";   
+	$query_date_END = "$query_date 15:32:00";
+	$time_BEGIN = "08:45:00";   
+	$time_END = "15:15:00";
+	}
+if ($shift == 'PM') 
+	{
+	$query_date_BEGIN = "$query_date 15:32:00";   
+	$query_date_END = "$query_date 23:15:00";
+	$time_BEGIN = "15:15:00";   
+	$time_END = "23:15:00";
+	}
+
+echo "VICIDIAL: Server Performance                             $NOW_TIME\n";
+
+echo "Time range: $query_date_BEGIN to $query_date_END\n\n";
+echo "---------- TOTALS, PEAKS and AVERAGES\n";
+
+$stmt="select sysload from server_performance where start_time <= '" . mysql_real_escape_string($query_date_END) . "' and start_time >= '" . mysql_real_escape_string($query_date_BEGIN) . "' and server_ip='" . mysql_real_escape_string($group) . "' order by sysload desc limit 1;";
+$rslt=mysql_query($stmt, $link);
+if ($DB) {echo "$stmt\n";}
+$row=mysql_fetch_row($rslt);
+$HIGHload =	sprintf("%10s", $row[0]);
+$HIGHmulti = intval($HIGHload / 100);
+#$HIGHmulti = ($HIGHload / 100);
+
+$stmt="select AVG(sysload),AVG(channels_total) from server_performance where start_time <= '" . mysql_real_escape_string($query_date_END) . "' and start_time >= '" . mysql_real_escape_string($query_date_BEGIN) . "' and server_ip='" . mysql_real_escape_string($group) . "';";
+$rslt=mysql_query($stmt, $link);
+if ($DB) {echo "$stmt\n";}
+$row=mysql_fetch_row($rslt);
+$AVGload =	sprintf("%10s", $row[0]);
+$AVGchannels =	sprintf("%10s", $row[1]);
+
+$stmt="select AVG(cpu_user_percent),AVG(cpu_system_percent),AVG(cpu_idle_percent) from server_performance where start_time <= '" . mysql_real_escape_string($query_date_END) . "' and start_time >= '" . mysql_real_escape_string($query_date_BEGIN) . "' and server_ip='" . mysql_real_escape_string($group) . "';";
+$rslt=mysql_query($stmt, $link);
+if ($DB) {echo "$stmt\n";}
+$row=mysql_fetch_row($rslt);
+$AVGcpuUSER =	sprintf("%10s", $row[0]);
+$AVGcpuSYSTEM =	sprintf("%10s", $row[1]);
+$AVGcpuIDLE =	sprintf("%10s", $row[2]);
+
+$stmt="select usedram from server_performance where start_time <= '" . mysql_real_escape_string($query_date_END) . "' and start_time >= '" . mysql_real_escape_string($query_date_BEGIN) . "' and server_ip='" . mysql_real_escape_string($group) . "' order by usedram desc limit 1;";
+$rslt=mysql_query($stmt, $link);
+if ($DB) {echo "$stmt\n";}
+$row=mysql_fetch_row($rslt);
+$USEDram =	sprintf("%10s", $row[0]);
+
+$stmt="select count(*),SUM(length_in_min) from call_log where extension NOT IN('8365','8366','8367') and  start_time <= '" . mysql_real_escape_string($query_date_END) . "' and start_time >= '" . mysql_real_escape_string($query_date_BEGIN) . "' and server_ip='" . mysql_real_escape_string($group) . "';";
+$rslt=mysql_query($stmt, $link);
+if ($DB) {echo "$stmt\n";}
+$row=mysql_fetch_row($rslt);
+$TOTALcalls =	sprintf("%10s", $row[0]);
+$OFFHOOKtime =	sprintf("%10s", $row[1]);
+
+
+echo "Total Calls in/out on this server:        $TOTALcalls\n";
+echo "Total Off-Hook time on this server (min): $OFFHOOKtime\n";
+echo "Average channels in use for server:       $AVGchannels\n";
+echo "Average load for server:                  $AVGload\n";
+echo "Peak load for server:                     $HIGHload\n";
+#echo "Peak used memory for server (in MB):      $USEDram\n";
+echo "Average USER process cpu percentage:      $AVGcpuUSER %\n";
+echo "Average SYSTEM process cpu percentage:    $AVGcpuSYSTEM %\n";
+echo "Average IDLE process cpu percentage:      $AVGcpuIDLE %\n";
+
+echo "\n";
+echo "---------- LINE GRAPH:\n";
+
+
+
+##############################
+#########  Graph stats
+
+$DAT = '.dat';
+$HTM = '.htm';
+$PNG = '.png';
+$filedate = date("Y-m-d_His");
+$DATfile = "$group$query_date$shift$filedate$DAT";
+$HTMfile = "$group$query_date$shift$filedate$HTM";
+$PNGfile = "$group$query_date$shift$filedate$PNG";
+
+$HTMfp = fopen ("$DOCroot/$HTMfile", "a");
+$DATfp = fopen ("$DOCroot/$DATfile", "a");
+
+$stmt="select DATE_FORMAT(start_time,'%H:%i:%s') as timex,sysload,processes,channels_total,live_recordings,cpu_user_percent,cpu_system_percent from server_performance where server_ip='" . mysql_real_escape_string($group) . "' and start_time <= '" . mysql_real_escape_string($query_date_END) . "' and start_time >= '" . mysql_real_escape_string($query_date_BEGIN) . "' order by timex;";
+$rslt=mysql_query($stmt, $link);
+if ($DB) {echo "$stmt\n";}
+$rows_to_print = mysql_num_rows($rslt);
+$i=0;
+while ($i < $rows_to_print)
+	{
+	$row=mysql_fetch_row($rslt);
+	$row[5] = intval(($row[5] + $row[6]) * $HIGHmulti);
+	$row[6] = intval($row[6] * $HIGHmulti);
+	fwrite ($DATfp, "$row[5]\t$row[6]\t$row[0]\t$row[1]\t$row[2]\t$row[3]\n");
+	$i++;
+	}
+fclose($DATfp);
+
+$rows_to_max = ($rows_to_print + 100);
+
+
+
+$HTMcontent  = '';
+$HTMcontent .= "#proc page\n";
+$HTMcontent .= "#if @DEVICE in png,gif\n";
+$HTMcontent .= "   scale: 0.6\n";
+$HTMcontent .= "\n";
+$HTMcontent .= "#endif\n";
+$HTMcontent .= "#proc getdata\n";
+$HTMcontent .= "file: $DOCroot/$DATfile\n";
+$HTMcontent .= "fieldnames: userproc sysproc time load processes channels\n";
+$HTMcontent .= "\n";
+$HTMcontent .= "#proc areadef\n";
+$HTMcontent .= "title: Server $group   $query_date_BEGIN to $query_date_END\n";
+$HTMcontent .= "titledetails: size=14  align=C\n";
+$HTMcontent .= "rectangle: 1 1 14 7\n";
+$HTMcontent .= "xscaletype: time hh:mm:ss\n";
+$HTMcontent .= "xrange: $time_BEGIN $time_END\n";
+$HTMcontent .= "yrange: 0 $HIGHload\n";
+$HTMcontent .= "\n";
+$HTMcontent .= "#proc xaxis\n";
+$HTMcontent .= "stubs: inc 30 minutes\n";
+$HTMcontent .= "minorticinc: 5 minutes\n";
+$HTMcontent .= "stubformat: hh:mm:ssa\n";
+$HTMcontent .= "\n";
+$HTMcontent .= "#proc yaxis\n";
+$HTMcontent .= "stubs: inc 50\n";
+$HTMcontent .= "grid: color=yellow\n";
+$HTMcontent .= "gridskip: min\n";
+$HTMcontent .= "ticincrement: 100 1000\n";
+$HTMcontent .= "\n";
+$HTMcontent .= "#proc lineplot\n";
+$HTMcontent .= "xfield: time\n";
+$HTMcontent .= "yfield: userproc\n";
+$HTMcontent .= "linedetails: color=purple width=.5\n";
+$HTMcontent .= "fill: lavender\n";
+$HTMcontent .= "legendlabel: user proc%\n";
+$HTMcontent .= "maxinpoints: $rows_to_max\n";
+$HTMcontent .= "\n";
+$HTMcontent .= "#proc lineplot\n";
+$HTMcontent .= "xfield: time\n";
+$HTMcontent .= "yfield: sysproc\n";
+$HTMcontent .= "linedetails: color=yelloworange width=.5\n";
+$HTMcontent .= "fill: dullyellow\n";
+$HTMcontent .= "legendlabel: system proc%\n";
+$HTMcontent .= "maxinpoints: $rows_to_max\n";
+$HTMcontent .= "\n";
+$HTMcontent .= "#proc curvefit\n";
+$HTMcontent .= "xfield: time\n";
+$HTMcontent .= "yfield: load\n";
+$HTMcontent .= "linedetails: color=blue width=.5\n";
+$HTMcontent .= "legendlabel: load\n";
+$HTMcontent .= "maxinpoints: $rows_to_max\n";
+$HTMcontent .= "\n";
+$HTMcontent .= "#proc curvefit\n";
+$HTMcontent .= "xfield: time\n";
+$HTMcontent .= "yfield: processes\n";
+$HTMcontent .= "linedetails: color=red width=.5\n";
+$HTMcontent .= "legendlabel: processes\n";
+$HTMcontent .= "maxinpoints: $rows_to_max\n";
+$HTMcontent .= "\n";
+$HTMcontent .= "#proc curvefit\n";
+$HTMcontent .= "xfield: time\n";
+$HTMcontent .= "yfield: channels\n";
+$HTMcontent .= "linedetails: color=green width=.5\n";
+$HTMcontent .= "legendlabel: channels\n";
+$HTMcontent .= "maxinpoints: $rows_to_max\n";
+$HTMcontent .= "\n";
+$HTMcontent .= "#proc legend\n";
+$HTMcontent .= "location: max-2 max\n";
+$HTMcontent .= "seglen: 0.2\n";
+$HTMcontent .= "\n";
+
+fwrite ($HTMfp, "$HTMcontent");
+fclose($HTMfp);
+
+
+passthru("/usr/local/bin/pl -png $DOCroot/$HTMfile -o $DOCroot/$PNGfile");
+
+sleep(1);
+
+echo "</PRE>\n";
+echo "\n";
+echo "<IMG SRC=\"./ploticus/$PNGfile\">\n";
+
+
+echo "<!-- /usr/local/bin/pl -png $DOCroot/$HTMfile -o $DOCroot/$PNGfile -->";
+
+}
+
+
+
+?>
+
+</BODY></HTML>
\ No newline at end of file
diff --git a/www/vicidial/AST_timeonVDAD.php b/www/vicidial/AST_timeonVDAD.php
new file mode 100644
index 00000000..52efd9cc
--- /dev/null
+++ b/www/vicidial/AST_timeonVDAD.php
@@ -0,0 +1,255 @@
+<? 
+### AST_timeonVDAD.php
+### 
+### Copyright (C) 2006  Matt Florell <vicidial@gmail.com>    LICENSE: GPLv2
+###
+# live real-time stats for the VICIDIAL Auto-Dialer
+# 
+# changes:
+# 50406-0920 - Added Paused agents < 1 min (Chris Doyle)
+# 60620-1040 - Added variable filtering to eliminate SQL injection attack threat
+#            - Added required user/pass to gain access to this page
+#
+
+header ("Content-type: text/html; charset=utf-8");
+
+require("dbconnect.php");
+
+$PHP_AUTH_USER=$_SERVER['PHP_AUTH_USER'];
+$PHP_AUTH_PW=$_SERVER['PHP_AUTH_PW'];
+$PHP_SELF=$_SERVER['PHP_SELF'];
+if (isset($_GET["server_ip"]))				{$server_ip=$_GET["server_ip"];}
+	elseif (isset($_POST["server_ip"]))		{$server_ip=$_POST["server_ip"];}
+if (isset($_GET["reset_counter"]))				{$reset_counter=$_GET["reset_counter"];}
+	elseif (isset($_POST["reset_counter"]))		{$reset_counter=$_POST["reset_counter"];}
+if (isset($_GET["submit"]))				{$submit=$_GET["submit"];}
+	elseif (isset($_POST["submit"]))		{$submit=$_POST["submit"];}
+if (isset($_GET["SUBMIT"]))				{$SUBMIT=$_GET["SUBMIT"];}
+	elseif (isset($_POST["SUBMIT"]))		{$SUBMIT=$_POST["SUBMIT"];}
+
+$PHP_AUTH_USER = ereg_replace("[^0-9a-zA-Z]","",$PHP_AUTH_USER);
+$PHP_AUTH_PW = ereg_replace("[^0-9a-zA-Z]","",$PHP_AUTH_PW);
+
+	$stmt="SELECT count(*) from vicidial_users where user='$PHP_AUTH_USER' and pass='$PHP_AUTH_PW' and user_level > 6;";
+	if ($DB) {echo "|$stmt|\n";}
+	$rslt=mysql_query($stmt, $link);
+	$row=mysql_fetch_row($rslt);
+	$auth=$row[0];
+
+  if( (strlen($PHP_AUTH_USER)<2) or (strlen($PHP_AUTH_PW)<2) or (!$auth))
+	{
+    Header("WWW-Authenticate: Basic realm=\"VICI-PROJECTS\"");
+    Header("HTTP/1.0 401 Unauthorized");
+    echo "Invalid Username/Password: |$PHP_AUTH_USER|$PHP_AUTH_PW|\n";
+    exit;
+	}
+
+$NOW_TIME = date("Y-m-d H:i:s");
+$STARTtime = date("U");
+$epochSIXhoursAGO = ($STARTtime - 21600);
+$timeSIXhoursAGO = date("Y-m-d H:i:s",$epochSIXhoursAGO);
+
+$reset_counter++;
+
+if ($reset_counter > 7)
+	{
+	$reset_counter=0;
+
+	$stmt="update park_log set status='HUNGUP' where hangup_time is not null;";
+#	$rslt=mysql_query($stmt, $link);
+	if ($DB) {echo "$stmt\n";}
+
+	if ($DB)
+		{	
+		$stmt="delete from park_log where grab_time < '$timeSIXhoursAGO' and (hangup_time is null or hangup_time='');";
+#		$rslt=mysql_query($stmt, $link);
+		 echo "$stmt\n";
+		}
+	}
+
+?>
+
+<HTML>
+<HEAD>
+<STYLE type="text/css">
+<!--
+   .green {color: white; background-color: green}
+   .red {color: white; background-color: red}
+   .blue {color: white; background-color: blue}
+   .purple {color: white; background-color: purple}
+   .yellow {color: black; background-color: yellow}
+-->
+ </STYLE>
+
+<? 
+echo "<META HTTP-EQUIV=\"Content-Type\" CONTENT=\"text/html; charset=utf-8\">\n";
+echo"<META HTTP-EQUIV=Refresh CONTENT=\"4; URL=$PHP_SELF?server_ip=$server_ip&DB=$DB&reset_counter=$reset_counter\">\n";
+echo "<TITLE>VICIDIAL: Time On VDAD</TITLE></HEAD><BODY BGCOLOR=WHITE>\n";
+echo "<PRE><FONT SIZE=3>";
+
+###################################################################################
+###### TIME ON SYSTEM
+###################################################################################
+
+echo "VICIDIAL: Agents Time On Calls                         $NOW_TIME    <a href=\"./server_stats.php\">REPORTS</a>\n\n";
+echo "+------------|--------+-----------+------------+--------+---------------------+---------+\n";
+echo "| STATION    | USER   | SESSIONID | CHANNEL    | STATUS | START TIME          | MINUTES |\n";
+echo "+------------|--------+-----------+------------+--------+---------------------+---------+\n";
+
+
+$stmt="select extension,user,conf_exten,channel,status,last_call_time,UNIX_TIMESTAMP(last_call_time),UNIX_TIMESTAMP(last_call_finish) from vicidial_live_agents where server_ip='" . mysql_real_escape_string($server_ip) . "' order by extension;";
+$rslt=mysql_query($stmt, $link);
+if ($DB) {echo "$stmt\n";}
+$talking_to_print = mysql_num_rows($rslt);
+	if ($talking_to_print > 0)
+	{
+	$i=0;
+	$agentcount=0;
+	while ($i < $talking_to_print)
+		{
+		$row=mysql_fetch_row($rslt);
+			if (eregi("READY|PAUSED",$row[4]))
+			{
+			$row[3]='';
+			$row[5]=' - WAITING - ';
+			$row[6]=$row[7];
+			}
+		$extension =		sprintf("%-10s", $row[0]);
+		$user =				sprintf("%-6s", $row[1]);
+		$sessionid =		sprintf("%-9s", $row[2]);
+		$channel =			sprintf("%-10s", $row[3]);
+			$cc=0;
+		while ( (strlen($channel) > 10) and ($cc < 100) )
+			{
+			$channel = eregi_replace(".$","",$channel);   
+			$cc++;
+			if (strlen($channel) <= 10) {$cc=101;}
+			}
+		$status =			sprintf("%-6s", $row[4]);
+		$start_time =		sprintf("%-19s", $row[5]);
+		$call_time_S = ($STARTtime - $row[6]);
+
+		$call_time_M = ($call_time_S / 60);
+		$call_time_M = round($call_time_M, 2);
+		$call_time_M_int = intval("$call_time_M");
+		$call_time_SEC = ($call_time_M - $call_time_M_int);
+		$call_time_SEC = ($call_time_SEC * 60);
+		$call_time_SEC = round($call_time_SEC, 0);
+		if ($call_time_SEC < 10) {$call_time_SEC = "0$call_time_SEC";}
+		$call_time_MS = "$call_time_M_int:$call_time_SEC";
+		$call_time_MS =		sprintf("%7s", $call_time_MS);
+		$G = '';		$EG = '';
+		if ($call_time_M_int >= 5) {$G='<SPAN class="blue"><B>'; $EG='</B></SPAN>';}
+		if ($call_time_M_int >= 10) {$G='<SPAN class="purple"><B>'; $EG='</B></SPAN>';}
+		if (eregi("PAUSED",$row[4])) 
+			{
+			if ($call_time_M_int >= 1) 
+				{$i++; continue;} 
+			else
+				{$G='<SPAN class="yellow"><B>'; $EG='</B></SPAN>';}
+			}
+
+		$agentcount++;
+		echo "| $G$extension$EG | $G$user$EG | $G$sessionid$EG | $G$channel$EG | $G$status$EG | $G$start_time$EG | $G$call_time_MS$EG |\n";
+
+		$i++;
+		}
+
+		echo "+------------|--------+-----------+------------+--------+---------------------+---------+\n";
+		echo "  $agentcount agents logged in on server $server_ip\n\n";
+
+		echo "  <SPAN class=\"yellow\"><B>          </SPAN> - Paused agents</B>\n";
+		echo "  <SPAN class=\"blue\"><B>          </SPAN> - 5 minutes or more on call</B>\n";
+		echo "  <SPAN class=\"purple\"><B>          </SPAN> - Over 10 minutes on call</B>\n";
+
+	}
+	else
+	{
+	echo "**************************************************************************************\n";
+	echo "**************************************************************************************\n";
+	echo "********************************* NO AGENTS ON CALLS *********************************\n";
+	echo "**************************************************************************************\n";
+	echo "**************************************************************************************\n";
+	}
+
+
+###################################################################################
+###### OUTBOUND CALLS
+###################################################################################
+echo "\n\n";
+echo "----------------------------------------------------------------------------------------";
+echo "\n\n";
+echo "VICIDIAL: Time On VDAD                                              $NOW_TIME\n\n";
+echo "+------------+--------+----------+--------------------+---------------------+---------+\n";
+echo "| CHANNEL    | STATUS | CAMPAIGN | PHONE NUMBER       | START TIME          | MINUTES |\n";
+echo "+------------+--------+----------+--------------------+---------------------+---------+\n";
+
+#$link=mysql_connect("localhost", "cron", "1234");
+# $linkX=mysql_connect("localhost", "cron", "1234");
+#mysql_select_db("asterisk");
+
+$stmt="select channel,status,campaign_id,phone_code,phone_number,call_time,UNIX_TIMESTAMP(call_time) from vicidial_auto_calls where status NOT IN('XFER') and server_ip='" . mysql_real_escape_string($server_ip) . "' order by auto_call_id;";
+$rslt=mysql_query($stmt, $link);
+if ($DB) {echo "$stmt\n";}
+$parked_to_print = mysql_num_rows($rslt);
+	if ($parked_to_print > 0)
+	{
+	$i=0;
+	while ($i < $parked_to_print)
+		{
+		$row=mysql_fetch_row($rslt);
+
+		$channel =			sprintf("%-10s", $row[0]);
+			$cc=0;
+		while ( (strlen($channel) > 10) and ($cc < 100) )
+			{
+			$channel = eregi_replace(".$","",$channel);   
+			$cc++;
+			if (strlen($channel) <= 10) {$cc=101;}
+			}
+		$status =			sprintf("%-6s", $row[1]);
+		$campaign =			sprintf("%-8s", $row[2]);
+			$all_phone = "$row[3]$row[4]";
+		$number_dialed =	sprintf("%-18s", $all_phone);
+		$start_time =		sprintf("%-19s", $row[5]);
+		$call_time_S = ($STARTtime - $row[6]);
+
+		$call_time_M = ($call_time_S / 60);
+		$call_time_M = round($call_time_M, 2);
+		$call_time_M_int = intval("$call_time_M");
+		$call_time_SEC = ($call_time_M - $call_time_M_int);
+		$call_time_SEC = ($call_time_SEC * 60);
+		$call_time_SEC = round($call_time_SEC, 0);
+		if ($call_time_SEC < 10) {$call_time_SEC = "0$call_time_SEC";}
+		$call_time_MS = "$call_time_M_int:$call_time_SEC";
+		$call_time_MS =		sprintf("%7s", $call_time_MS);
+		$G = '';		$EG = '';
+		if (eregi("LIVE",$status)) {$G='<SPAN class="green"><B>'; $EG='</B></SPAN>';}
+	#	if ($call_time_M_int >= 6) {$G='<SPAN class="red"><B>'; $EG='</B></SPAN>';}
+
+		echo "| $G$channel$EG | $G$status$EG | $G$campaign$EG | $G$number_dialed$EG | $G$start_time$EG | $G$call_time_MS$EG |\n";
+
+		$i++;
+		}
+
+		echo "+------------+--------+----------+--------------------+---------------------+---------+\n";
+		echo "  $i calls being placed on server $server_ip\n\n";
+
+		echo "  <SPAN class=\"green\"><B>          </SPAN> - LIVE CALL WAITING</B>\n";
+	#	echo "  <SPAN class=\"red\"><B>          </SPAN> - Over 5 minutes on hold</B>\n";
+
+		}
+	else
+	{
+	echo "***************************************************************************************\n";
+	echo "***************************************************************************************\n";
+	echo "******************************* NO LIVE CALLS WAITING *********************************\n";
+	echo "***************************************************************************************\n";
+	echo "***************************************************************************************\n";
+	}
+
+
+?>
+</PRE>
+
+</BODY></HTML>
diff --git a/www/vicidial/AST_timeonVDAD_closer.php b/www/vicidial/AST_timeonVDAD_closer.php
new file mode 100644
index 00000000..eb7d3c39
--- /dev/null
+++ b/www/vicidial/AST_timeonVDAD_closer.php
@@ -0,0 +1,316 @@
+<? 
+### AST_timeonVDAD_closer.php
+### 
+### Copyright (C) 2006  Matt Florell <vicidial@gmail.com>    LICENSE: GPLv2
+###
+# live real-time stats for the VICIDIAL Auto-Dialer
+#
+# CHANGES
+#
+# 60620-1037 - Added variable filtering to eliminate SQL injection attack threat
+#            - Added required user/pass to gain access to this page
+#
+
+header ("Content-type: text/html; charset=utf-8");
+
+require("dbconnect.php");
+
+$PHP_AUTH_USER=$_SERVER['PHP_AUTH_USER'];
+$PHP_AUTH_PW=$_SERVER['PHP_AUTH_PW'];
+$PHP_SELF=$_SERVER['PHP_SELF'];
+if (isset($_GET["server_ip"]))				{$server_ip=$_GET["server_ip"];}
+	elseif (isset($_POST["server_ip"]))		{$server_ip=$_POST["server_ip"];}
+if (isset($_GET["reset_counter"]))				{$reset_counter=$_GET["reset_counter"];}
+	elseif (isset($_POST["reset_counter"]))		{$reset_counter=$_POST["reset_counter"];}
+if (isset($_GET["submit"]))				{$submit=$_GET["submit"];}
+	elseif (isset($_POST["submit"]))		{$submit=$_POST["submit"];}
+if (isset($_GET["SUBMIT"]))				{$SUBMIT=$_GET["SUBMIT"];}
+	elseif (isset($_POST["SUBMIT"]))		{$SUBMIT=$_POST["SUBMIT"];}
+
+$PHP_AUTH_USER = ereg_replace("[^0-9a-zA-Z]","",$PHP_AUTH_USER);
+$PHP_AUTH_PW = ereg_replace("[^0-9a-zA-Z]","",$PHP_AUTH_PW);
+
+	$stmt="SELECT count(*) from vicidial_users where user='$PHP_AUTH_USER' and pass='$PHP_AUTH_PW' and user_level > 6;";
+	if ($DB) {echo "|$stmt|\n";}
+	$rslt=mysql_query($stmt, $link);
+	$row=mysql_fetch_row($rslt);
+	$auth=$row[0];
+
+  if( (strlen($PHP_AUTH_USER)<2) or (strlen($PHP_AUTH_PW)<2) or (!$auth))
+	{
+    Header("WWW-Authenticate: Basic realm=\"VICI-PROJECTS\"");
+    Header("HTTP/1.0 401 Unauthorized");
+    echo "Invalid Username/Password: |$PHP_AUTH_USER|$PHP_AUTH_PW|\n";
+    exit;
+	}
+
+$NOW_TIME = date("Y-m-d H:i:s");
+$STARTtime = date("U");
+$epochSIXhoursAGO = ($STARTtime - 21600);
+$timeSIXhoursAGO = date("Y-m-d H:i:s",$epochSIXhoursAGO);
+
+$reset_counter++;
+
+if ($reset_counter > 7)
+	{
+	$reset_counter=0;
+
+	$stmt="update park_log set status='HUNGUP' where hangup_time is not null;";
+#	$rslt=mysql_query($stmt, $link);
+	if ($DB) {echo "$stmt\n";}
+
+	if ($DB)
+		{	
+		$stmt="delete from park_log where grab_time < '$timeSIXhoursAGO' and (hangup_time is null or hangup_time='');";
+#		$rslt=mysql_query($stmt, $link);
+		 echo "$stmt\n";
+		}
+	}
+
+?>
+
+<HTML>
+<HEAD>
+<?
+echo "<STYLE type=\"text/css\">\n";
+echo "<!--\n";
+$stmt="select group_id,group_color from vicidial_inbound_groups;";
+$rslt=mysql_query($stmt, $link);
+if ($DB) {echo "$stmt\n";}
+$groups_to_print = mysql_num_rows($rslt);
+	if ($groups_to_print > 0)
+	{
+	$g=0;
+	while ($g < $groups_to_print)
+		{
+		$row=mysql_fetch_row($rslt);
+		$group_id[$g] = $row[0];
+		$group_color[$g] = $row[1];
+		echo "   .$group_id[$g] {color: black; background-color: $group_color[$g]}\n";
+		$g++;
+		}
+	}
+
+?>
+   .DEAD       {color: white; background-color: black}
+   .green {color: white; background-color: green}
+   .red {color: white; background-color: red}
+   .blue {color: white; background-color: blue}
+   .purple {color: white; background-color: purple}
+-->
+ </STYLE>
+
+<? 
+echo "<META HTTP-EQUIV=\"Content-Type\" CONTENT=\"text/html; charset=utf-8\">\n";
+echo"<META HTTP-EQUIV=Refresh CONTENT=\"4; URL=$PHP_SELF?server_ip=$server_ip&DB=$DB&reset_counter=$reset_counter\">\n";
+echo "<TITLE>VICIDIAL: Time On VDAD</TITLE></HEAD><BODY BGCOLOR=WHITE>\n";
+echo "<PRE><FONT SIZE=3>";
+
+###################################################################################
+###### TIME ON SYSTEM
+###################################################################################
+
+echo "VICIDIAL: Agents Time On Calls                         $NOW_TIME    <a href=\"./server_stats.php\">REPORTS</a>\n\n";
+echo "+------------|--------+-----------+---------------------+--------+----------+---------+--------------+--------+\n";
+echo "| STATION    | USER   | SESSIONID | CHANNEL             | STATUS | CALLTIME | MINUTES | CAMPAIGN     | FRONT  |\n";
+echo "+------------|--------+-----------+---------------------+--------+----------+---------+--------------+--------+\n";
+
+
+$stmt="select extension,user,conf_exten,channel,status,last_call_time,UNIX_TIMESTAMP(last_call_time),UNIX_TIMESTAMP(last_call_finish),uniqueid,lead_id from vicidial_live_agents where status NOT IN('PAUSED') and server_ip='" . mysql_real_escape_string($server_ip) . "' order by extension;";
+$rslt=mysql_query($stmt, $link);
+if ($DB) {echo "$stmt\n";}
+$talking_to_print = mysql_num_rows($rslt);
+	if ($talking_to_print > 0)
+	{
+	$i=0;
+	while ($i < $talking_to_print)
+		{
+		$row=mysql_fetch_row($rslt);
+			if (eregi("READY|PAUSED|CLOSER",$row[4]))
+			{
+			$row[3]='';
+			$row[5]='- WAIT -';
+			$row[6]=$row[7];
+			}
+		$extension[$i] =		sprintf("%-10s", $row[0]);
+		$user[$i] =				sprintf("%-6s", $row[1]);
+		$sessionid[$i] =		sprintf("%-9s", $row[2]);
+		$channel[$i] =			sprintf("%-19s", $row[3]);
+			$cc[$i]=0;
+		while ( (strlen($channel[$i]) > 19) and ($cc[$i] < 100) )
+			{
+			$channel[$i] = eregi_replace(".$","",$channel[$i]);   
+			$cc[$i]++;
+			if (strlen($channel[$i]) <= 19) {$cc[$i]=101;}
+			}
+		$status[$i] =			sprintf("%-6s", $row[4]);
+		$start_time[$i] =		sprintf("%-8s", $row[5]);
+			$cd[$i]=0;
+		while ( (strlen($start_time[$i]) > 8) and ($cd[$i] < 100) )
+			{
+			$start_time[$i] = eregi_replace("^.","",$start_time[$i]);   
+			$cd[$i]++;
+			if (strlen($start_time[$i]) <= 8) {$cd[$i]=101;}
+			}
+		$uniqueid[$i] =			$row[8];
+		$lead_id[$i] =			$row[9];
+		$closer[$i] =			$row[1];
+		$call_time_S[$i] = ($STARTtime - $row[6]);
+
+		$call_time_M[$i] = ($call_time_S[$i] / 60);
+		$call_time_M[$i] = round($call_time_M[$i], 2);
+		$call_time_M_int[$i] = intval("$call_time_M[$i]");
+		$call_time_SEC[$i] = ($call_time_M[$i] - $call_time_M_int[$i]);
+		$call_time_SEC[$i] = ($call_time_SEC[$i] * 60);
+		$call_time_SEC[$i] = round($call_time_SEC[$i], 0);
+		if ($call_time_SEC[$i] < 10) {$call_time_SEC[$i] = "0$call_time_SEC[$i]";}
+		$call_time_MS[$i] = "$call_time_M_int[$i]:$call_time_SEC[$i]";
+		$call_time_MS[$i] =		sprintf("%7s", $call_time_MS[$i]);
+		$i++;
+		}
+		$ext_count = $i;
+		$i=0;
+	while ($i < $ext_count)
+		{
+
+		$stmt="select campaign_id from vicidial_auto_calls where uniqueid='$uniqueid[$i]' and server_ip='" . mysql_real_escape_string($server_ip) . "';";
+		$rslt=mysql_query($stmt, $link);
+		if ($DB) {echo "$stmt\n";}
+		$camp_to_print = mysql_num_rows($rslt);
+		if ($camp_to_print > 0)
+			{
+			$row=mysql_fetch_row($rslt);
+			$campaign = sprintf("%-12s", $row[0]);
+			$camp_color = $row[0];
+			}
+		else
+			{$campaign = 'DEAD        ';   	$camp_color = 'DEAD';}
+		if (eregi("READY|PAUSED|CLOSER",$status[$i]))
+			{$campaign = '            ';   	$camp_color = '';}
+
+		$stmt="select user from vicidial_xfer_log where lead_id='$lead_id[$i]' and closer='$closer[$i]' order by call_date desc limit 1;";
+		$rslt=mysql_query($stmt, $link);
+		if ($DB) {echo "$stmt\n";}
+		$xfer_to_print = mysql_num_rows($rslt);
+		if ($xfer_to_print > 0)
+			{
+			$row=mysql_fetch_row($rslt);
+			$fronter = sprintf("%-6s", $row[0]);
+			}
+		else
+			{$fronter = '      ';}
+
+		$G = '';		$EG = '';
+		$G="<SPAN class=\"$camp_color\"><B>"; $EG='</B></SPAN>';
+	#	if ($call_time_M_int[$i] >= 5) {$G='<SPAN class="blue"><B>'; $EG='</B></SPAN>';}
+	#	if ($call_time_M_int[$i] >= 10) {$G='<SPAN class="purple"><B>'; $EG='</B></SPAN>';}
+
+		echo "| $G$extension[$i]$EG | $G$user[$i]$EG | $G$sessionid[$i]$EG | $G$channel[$i]$EG | $G$status[$i]$EG | $G$start_time[$i]$EG | $G$call_time_MS[$i]$EG | $G$campaign$EG | $G$fronter$EG |\n";
+
+		$i++;
+		}
+
+		echo "+------------|--------+-----------+---------------------+--------+----------+---------+--------------+--------+\n";
+		echo "  $i agents logged in on server $server_ip\n\n";
+
+	#	echo "  <SPAN class=\"blue\"><B>          </SPAN> - 5 minutes or more on call</B>\n";
+	#	echo "  <SPAN class=\"purple\"><B>          </SPAN> - Over 10 minutes on call</B>\n";
+
+	}
+	else
+	{
+	echo "**************************************************************************************\n";
+	echo "**************************************************************************************\n";
+	echo "********************************* NO AGENTS ON CALLS *********************************\n";
+	echo "**************************************************************************************\n";
+	echo "**************************************************************************************\n";
+	}
+
+
+###################################################################################
+###### OUTBOUND CALLS
+###################################################################################
+#echo "\n\n";
+echo "----------------------------------------------------------------------------------------";
+echo "\n\n";
+echo "VICIDIAL: Time On VDAD                                              $NOW_TIME\n\n";
+echo "+---------------------+--------+--------------+--------------------+----------+---------+\n";
+echo "| CHANNEL             | STATUS | CAMPAIGN     | PHONE NUMBER       | CALLTIME | MINUTES |\n";
+echo "+---------------------+--------+--------------+--------------------+----------+---------+\n";
+
+#$link=mysql_connect("localhost", "cron", "1234");
+# $linkX=mysql_connect("localhost", "cron", "1234");
+#mysql_select_db("asterisk");
+
+$stmt="select channel,status,campaign_id,phone_code,phone_number,call_time,UNIX_TIMESTAMP(call_time) from vicidial_auto_calls where status NOT IN('XFER') and server_ip='" . mysql_real_escape_string($server_ip) . "' order by auto_call_id desc;";
+$rslt=mysql_query($stmt, $link);
+if ($DB) {echo "$stmt\n";}
+$parked_to_print = mysql_num_rows($rslt);
+	if ($parked_to_print > 0)
+	{
+	$i=0;
+	while ($i < $parked_to_print)
+		{
+		$row=mysql_fetch_row($rslt);
+
+		$channel =			sprintf("%-19s", $row[0]);
+			$cc=0;
+		while ( (strlen($channel) > 19) and ($cc < 100) )
+			{
+			$channel = eregi_replace(".$","",$channel);   
+			$cc++;
+			if (strlen($channel) <= 19) {$cc=101;}
+			}
+		$start_time =		sprintf("%-8s", $row[5]);
+			$cd=0;
+		while ( (strlen($start_time) > 8) and ($cd < 100) )
+			{
+			$start_time = eregi_replace("^.","",$start_time);   
+			$cd++;
+			if (strlen($start_time) <= 8) {$cd=101;}
+			}
+		$status =			sprintf("%-6s", $row[1]);
+		$campaign =			sprintf("%-12s", $row[2]);
+			$all_phone = "$row[3]$row[4]";
+		$number_dialed =	sprintf("%-18s", $all_phone);
+		$call_time_S = ($STARTtime - $row[6]);
+
+		$call_time_M = ($call_time_S / 60);
+		$call_time_M = round($call_time_M, 2);
+		$call_time_M_int = intval("$call_time_M");
+		$call_time_SEC = ($call_time_M - $call_time_M_int);
+		$call_time_SEC = ($call_time_SEC * 60);
+		$call_time_SEC = round($call_time_SEC, 0);
+		if ($call_time_SEC < 10) {$call_time_SEC = "0$call_time_SEC";}
+		$call_time_MS = "$call_time_M_int:$call_time_SEC";
+		$call_time_MS =		sprintf("%7s", $call_time_MS);
+		$G = '';		$EG = '';
+		if (eregi("LIVE",$status)) {$G='<SPAN class="green"><B>'; $EG='</B></SPAN>';}
+	#	if ($call_time_M_int >= 6) {$G='<SPAN class="red"><B>'; $EG='</B></SPAN>';}
+
+		echo "| $G$channel$EG | $G$status$EG | $G$campaign$EG | $G$number_dialed$EG | $G$start_time$EG | $G$call_time_MS$EG |\n";
+
+		$i++;
+		}
+
+		echo "+---------------------+--------+--------------+--------------------+----------+---------+\n";
+		echo "  $i calls being placed on server $server_ip\n\n";
+
+		echo "  <SPAN class=\"green\"><B>          </SPAN> - LIVE CALL WAITING</B>\n";
+	#	echo "  <SPAN class=\"red\"><B>          </SPAN> - Over 5 minutes on hold</B>\n";
+
+		}
+	else
+	{
+	echo "***************************************************************************************\n";
+	echo "***************************************************************************************\n";
+	echo "******************************* NO LIVE CALLS WAITING *********************************\n";
+	echo "***************************************************************************************\n";
+	echo "***************************************************************************************\n";
+	}
+
+
+?>
+</PRE>
+
+</BODY></HTML>
\ No newline at end of file
diff --git a/www/vicidial/AST_timeonVDADall.php b/www/vicidial/AST_timeonVDADall.php
new file mode 100644
index 00000000..aaf07c56
--- /dev/null
+++ b/www/vicidial/AST_timeonVDADall.php
@@ -0,0 +1,391 @@
+<? 
+# AST_timeonVDADall.php
+# 
+# Copyright (C) 2006  Matt Florell <vicidial@gmail.com>    LICENSE: GPLv2
+#
+# live real-time stats for the VICIDIAL Auto-Dialer all servers
+# 
+# changes:
+# 50406-0920 - Added Paused agents < 1 min (Chris Doyle)
+# 51130-1218 - Modified layout and info to show all servers in a vicidial system
+# 60421-1043 - check GET/POST vars lines with isset to not trigger PHP NOTICES
+# 60511-1343 - Added leads and drop info at the top of the screen
+# 60608-1539 - Fixed CLOSER tallies for active calls
+# 60619-1658 - Added variable filtering to eliminate SQL injection attack threat
+#            - Added required user/pass to gain access to this page
+# 60626-1453 - Added display of system load to bottom (Angelito Manansala)
+#
+
+header ("Content-type: text/html; charset=utf-8");
+
+require("dbconnect.php");
+
+$PHP_AUTH_USER=$_SERVER['PHP_AUTH_USER'];
+$PHP_AUTH_PW=$_SERVER['PHP_AUTH_PW'];
+$PHP_SELF=$_SERVER['PHP_SELF'];
+if (isset($_GET["server_ip"]))				{$server_ip=$_GET["server_ip"];}
+	elseif (isset($_POST["server_ip"]))		{$server_ip=$_POST["server_ip"];}
+if (isset($_GET["reset_counter"]))				{$reset_counter=$_GET["reset_counter"];}
+	elseif (isset($_POST["reset_counter"]))		{$reset_counter=$_POST["reset_counter"];}
+if (isset($_GET["RR"]))				{$RR=$_GET["RR"];}
+	elseif (isset($_POST["RR"]))		{$RR=$_POST["RR"];}
+if (isset($_GET["group"]))				{$group=$_GET["group"];}
+	elseif (isset($_POST["group"]))		{$group=$_POST["group"];}
+if (isset($_GET["DB"]))				{$DB=$_GET["DB"];}
+	elseif (isset($_POST["DB"]))		{$DB=$_POST["DB"];}
+if (isset($_GET["submit"]))				{$submit=$_GET["submit"];}
+	elseif (isset($_POST["submit"]))		{$submit=$_POST["submit"];}
+if (isset($_GET["SUBMIT"]))				{$SUBMIT=$_GET["SUBMIT"];}
+	elseif (isset($_POST["SUBMIT"]))		{$SUBMIT=$_POST["SUBMIT"];}
+
+if (!isset($group))   {$group='';}
+
+function get_server_load($windows = false) {
+$os = strtolower(PHP_OS);
+if(strpos($os, "win") === false) {
+if(file_exists("/proc/loadavg")) {
+$load = file_get_contents("/proc/loadavg");
+$load = explode(' ', $load);
+return $load[0];
+}
+elseif(function_exists("shell_exec")) {
+$load = explode(' ', `uptime`);
+return $load[count($load)-1];
+}
+else {
+return false;
+}
+}
+elseif($windows) {
+if(class_exists("COM")) {
+$wmi = new COM("WinMgmts:\\\\.");
+$cpus = $wmi->InstancesOf("Win32_Processor");
+
+$cpuload = 0;
+$i = 0;
+while ($cpu = $cpus->Next()) {
+$cpuload += $cpu->LoadPercentage;
+$i++;
+}
+
+$cpuload = round($cpuload / $i, 2);
+return "$cpuload%";
+}
+else {
+return false;
+}
+}
+}
+
+$load_ave = get_server_load(true);
+
+
+$PHP_AUTH_USER = ereg_replace("[^0-9a-zA-Z]","",$PHP_AUTH_USER);
+$PHP_AUTH_PW = ereg_replace("[^0-9a-zA-Z]","",$PHP_AUTH_PW);
+
+	$stmt="SELECT count(*) from vicidial_users where user='$PHP_AUTH_USER' and pass='$PHP_AUTH_PW' and user_level > 6;";
+	if ($DB) {echo "|$stmt|\n";}
+	$rslt=mysql_query($stmt, $link);
+	$row=mysql_fetch_row($rslt);
+	$auth=$row[0];
+
+  if( (strlen($PHP_AUTH_USER)<2) or (strlen($PHP_AUTH_PW)<2) or (!$auth))
+	{
+    Header("WWW-Authenticate: Basic realm=\"VICI-PROJECTS\"");
+    Header("HTTP/1.0 401 Unauthorized");
+    echo "Invalid Username/Password: |$PHP_AUTH_USER|$PHP_AUTH_PW|\n";
+    exit;
+	}
+
+$NOW_TIME = date("Y-m-d H:i:s");
+$NOW_DAY = date("Y-m-d");
+$NOW_HOUR = date("H:i:s");
+$STARTtime = date("U");
+$epochSIXhoursAGO = ($STARTtime - 21600);
+$timeSIXhoursAGO = date("Y-m-d H:i:s",$epochSIXhoursAGO);
+
+$stmt="select campaign_id from vicidial_campaigns where active='Y';";
+$rslt=mysql_query($stmt, $link);
+if (!isset($DB))   {$DB=0;}
+if ($DB) {echo "$stmt\n";}
+$groups_to_print = mysql_num_rows($rslt);
+$i=0;
+while ($i < $groups_to_print)
+	{
+	$row=mysql_fetch_row($rslt);
+	$groups[$i] =$row[0];
+	$i++;
+	}
+
+if (!isset($RR))   {$RR=40;}
+
+$NFB = '<b><font size=6 face="courier">';
+$NFE = '</font></b>';
+$F=''; $FG=''; $B=''; $BG='';
+$reset_counter++;
+
+if (!isset($reset_counter))   {$reset_counter=0;}
+if ($reset_counter > 7)
+	{
+	$reset_counter=0;
+	}
+
+?>
+
+<HTML>
+<HEAD>
+<STYLE type="text/css">
+<!--
+   .green {color: white; background-color: green}
+   .red {color: white; background-color: red}
+   .blue {color: white; background-color: blue}
+   .purple {color: white; background-color: purple}
+   .yellow {color: black; background-color: yellow}
+   .orange {color: black; background-color: orange}
+
+   .r1 {color: black; background-color: #FFCCCC}
+   .r2 {color: black; background-color: #FF9999}
+   .r3 {color: black; background-color: #FF6666}
+   .r4 {color: white; background-color: #FF0000}
+   .b1 {color: black; background-color: #CCCCFF}
+   .b2 {color: black; background-color: #9999FF}
+   .b3 {color: black; background-color: #6666FF}
+   .b4 {color: white; background-color: #0000FF}
+-->
+ </STYLE>
+
+<? 
+echo "<META HTTP-EQUIV=\"Content-Type\" CONTENT=\"text/html; charset=utf-8\">\n";
+echo"<META HTTP-EQUIV=Refresh CONTENT=\"$RR; URL=$PHP_SELF?RR=$RR&DB=$DB&group=$group\">\n";
+echo "<TITLE>VICIDIAL: Time On VDAD Campaign: $group</TITLE></HEAD><BODY BGCOLOR=WHITE>\n";
+echo "<FORM ACTION=\"$PHP_SELF\" METHOD=GET>\n";
+echo "VICIDIAL: Realtime Campaign: \n";
+echo "<INPUT TYPE=HIDDEN NAME=RR VALUE=4>\n";
+echo "<INPUT TYPE=HIDDEN NAME=DB VALUE=\"$DB\">\n";
+echo "<SELECT SIZE=1 NAME=group>\n";
+	$o=0;
+	while ($groups_to_print > $o)
+	{
+		if ($groups[$o] == $group) {echo "<option selected value=\"$groups[$o]\">$groups[$o]</option>\n";}
+		  else {echo "<option value=\"$groups[$o]\">$groups[$o]</option>\n";}
+		$o++;
+	}
+echo "</SELECT>\n";
+echo "<INPUT type=submit NAME=SUBMIT VALUE=SUBMIT><FONT FACE=\"ARIAL,HELVETICA\" COLOR=BLACK SIZE=2> &nbsp; &nbsp; &nbsp; &nbsp; \n";
+echo "<a href=\"$PHP_SELF?group=$group&RR=40&DB=$DB\">STOP</a> | <a href=\"$PHP_SELF?group=$group&RR=4&DB=$DB\">GO</a>";
+echo " &nbsp; &nbsp; &nbsp; &nbsp; <a href=\"./admin.php?ADD=34&campaign_id=$group\">MODIFY</a> | <a href=\"./server_stats.php\">REPORTS</a> </FONT>\n";
+echo "\n\n";
+
+
+if (!$group) {echo "<BR><BR>please select a campaign from the pulldown above</FORM>\n"; exit;}
+else
+{
+$stmt="select auto_dial_level,dial_status_a,dial_status_b,dial_status_c,dial_status_d,dial_status_e,lead_order,lead_filter_id,hopper_level from vicidial_campaigns where campaign_id='" . mysql_real_escape_string($group) . "';";
+$rslt=mysql_query($stmt, $link);
+$row=mysql_fetch_row($rslt);
+$HOPlev = $row[8];
+
+echo "<BR><table cellpadding=0 cellspacing=0><TR>";
+echo "<TD ALIGN=RIGHT><font size=2><B>DIAL LEVEL:</B></TD><TD ALIGN=LEFT><font size=2>&nbsp; $row[0]&nbsp; &nbsp; </TD>";
+echo "<TD ALIGN=RIGHT><font size=2><B>STATUSES:</B></TD><TD ALIGN=LEFT><font size=2>&nbsp; $row[1], $row[2], $row[3], $row[4], $row[5] &nbsp; &nbsp; </TD>";
+echo "<TD ALIGN=RIGHT><font size=2><B>ORDER:</B></TD><TD ALIGN=LEFT><font size=2>&nbsp; $row[6] &nbsp; &nbsp; </TD>";
+echo "<TD ALIGN=RIGHT><font size=2><B>FILTER:</B></TD><TD ALIGN=LEFT><font size=2>&nbsp; $row[7] &nbsp; &nbsp; </TD>";
+echo "</TR>";
+
+$stmt="select count(*) from vicidial_hopper where campaign_id='" . mysql_real_escape_string($group) . "';";
+$rslt=mysql_query($stmt, $link);
+$row=mysql_fetch_row($rslt);
+$VDhop = $row[0];
+
+$stmt="select dialable_leads,calls_today,drops_today,drops_today_pct from vicidial_campaign_stats where campaign_id='" . mysql_real_escape_string($group) . "';";
+$rslt=mysql_query($stmt, $link);
+$row=mysql_fetch_row($rslt);
+$DAleads = $row[0];
+$callsTODAY = $row[1];
+$dropsTODAY = $row[2];
+$drpctTODAY = $row[3];
+
+echo "<TR>";
+echo "<TD ALIGN=RIGHT><font size=2><B>HOPPER LEVEL:</B></TD><TD ALIGN=LEFT><font size=2>&nbsp; $HOPlev &nbsp; &nbsp; </TD>";
+echo "<TD ALIGN=RIGHT><font size=2><B>LEADS IN HOPPER:</B></TD><TD ALIGN=LEFT><font size=2>&nbsp; $VDhop &nbsp; &nbsp; </TD>";
+echo "<TD ALIGN=RIGHT><font size=2><B>DIALABLE LEADS:</B></TD><TD ALIGN=LEFT><font size=2>&nbsp; $DAleads &nbsp; &nbsp; </TD>";
+echo "<TD ALIGN=CENTER COLSPAN=2><font size=2> &nbsp; <B> TIME:</B> </TD>";
+echo "</TR>";
+echo "<TR>";
+echo "<TD ALIGN=RIGHT><font size=2><B>CALLS TODAY:</B></TD><TD ALIGN=LEFT><font size=2>&nbsp; $callsTODAY &nbsp; &nbsp; </TD>";
+echo "<TD ALIGN=RIGHT><font size=2><B>CALLS DROPPED:</B></TD><TD ALIGN=LEFT><font size=2>&nbsp; $dropsTODAY &nbsp; &nbsp; </TD>";
+echo "<TD ALIGN=RIGHT><font size=2><B>DROPPED PERCENT:</B></TD><TD ALIGN=LEFT><font size=2>&nbsp; $drpctTODAY% &nbsp; &nbsp; </TD>";
+echo "<TD ALIGN=CENTER COLSPAN=2><font size=2> &nbsp; $NOW_TIME </TD>";
+echo "</TR></TABLE>";
+
+
+echo "</FORM>\n\n";
+}
+###################################################################################
+###### OUTBOUND CALLS
+###################################################################################
+if (eregi("CLOSER",$group))
+	{
+	$stmt="select closer_campaigns from vicidial_campaigns where campaign_id='" . mysql_real_escape_string($group) . "';";
+	$rslt=mysql_query($stmt, $link);
+	$row=mysql_fetch_row($rslt);
+	$closer_campaigns = preg_replace("/^ | -$/","",$row[0]);
+	$closer_campaigns = preg_replace("/ /","','",$closer_campaigns);
+	$closer_campaigns = "'$closer_campaigns'";
+
+	$stmt="select status from vicidial_auto_calls where status NOT IN('XFER') and ( (call_type='IN' and campaign_id IN($closer_campaigns)) or (campaign_id='" . mysql_real_escape_string($group) . "' and call_type='OUT') );";
+	}
+else
+	{$stmt="select status from vicidial_auto_calls where status NOT IN('XFER') and campaign_id='" . mysql_real_escape_string($group) . "';";}
+$rslt=mysql_query($stmt, $link);
+if ($DB) {echo "$stmt\n";}
+$parked_to_print = mysql_num_rows($rslt);
+	if ($parked_to_print > 0)
+	{
+	$i=0;
+	$out_total=0;
+	$out_ring=0;
+	$out_live=0;
+	while ($i < $parked_to_print)
+		{
+		$row=mysql_fetch_row($rslt);
+
+		if (eregi("LIVE",$row[0])) 
+			{$out_live++;}
+		else
+			{
+			if (eregi("CLOSER",$row[0])) 
+				{$nothing=1;}
+			else 
+				{$out_ring++;}
+			}
+		$out_total++;
+		$i++;
+		}
+
+		if ($out_live > 0) {$F='<FONT class="r1">'; $FG='</FONT>';}
+		if ($out_live > 4) {$F='<FONT class="r2">'; $FG='</FONT>';}
+		if ($out_live > 9) {$F='<FONT class="r3">'; $FG='</FONT>';}
+		if ($out_live > 14) {$F='<FONT class="r4">'; $FG='</FONT>';}
+
+		if (eregi("CLOSER",$group))
+			{echo "$NFB$out_total$NFE current active calls&nbsp; &nbsp; &nbsp; \n";}
+		else
+			{echo "$NFB$out_total$NFE calls being placed &nbsp; &nbsp; &nbsp; \n";}
+		
+		echo "$NFB$out_ring$NFE calls ringing &nbsp; &nbsp; &nbsp; &nbsp; \n";
+		echo "$NFB$F &nbsp;$out_live $FG$NFE calls waiting for agents &nbsp; &nbsp; &nbsp; \n";
+		}
+	else
+	{
+	echo " NO LIVE CALLS WAITING \n";
+	}
+
+
+###################################################################################
+###### TIME ON SYSTEM
+###################################################################################
+
+$agent_incall=0;
+$agent_ready=0;
+$agent_paused=0;
+$agent_total=0;
+
+$Aecho = '';
+$Aecho .= "VICIDIAL: Agents Time On Calls Campaign: $group                      $NOW_TIME\n\n";
+$Aecho .= "+------------|--------+-----------+--------+-----------------+-----------------+---------+------------+\n";
+$Aecho .= "| STATION    | USER   | SESSIONID | STATUS | SERVER IP       | CALL SERVER IP  | MM:SS   | CAMPAIGN   |\n";
+$Aecho .= "+------------|--------+-----------+--------+-----------------+-----------------+---------+------------+\n";
+
+
+$stmt="select extension,user,conf_exten,status,server_ip,UNIX_TIMESTAMP(last_call_time),UNIX_TIMESTAMP(last_call_finish),call_server_ip,campaign_id from vicidial_live_agents where campaign_id='" . mysql_real_escape_string($group) . "' order by status,last_call_time;";
+$rslt=mysql_query($stmt, $link);
+if ($DB) {echo "$stmt\n";}
+$talking_to_print = mysql_num_rows($rslt);
+	if ($talking_to_print > 0)
+	{
+	$i=0;
+	$agentcount=0;
+	while ($i < $talking_to_print)
+		{
+		$row=mysql_fetch_row($rslt);
+			if (eregi("READY|PAUSED",$row[4]))
+			{
+			$row[5]=$row[6];
+			}
+		$extension =		sprintf("%-10s", $row[0]);
+		$user =				sprintf("%-6s", $row[1]);
+		$sessionid =		sprintf("%-9s", $row[2]);
+		$status =			sprintf("%-6s", $row[3]);
+		$server_ip =		sprintf("%-15s", $row[4]);
+		$call_server_ip =	sprintf("%-15s", $row[7]);
+		$campaign_id =		sprintf("%-10s", $row[8]);
+		$call_time_S = ($STARTtime - $row[5]);
+
+		$call_time_M = ($call_time_S / 60);
+		$call_time_M = round($call_time_M, 2);
+		$call_time_M_int = intval("$call_time_M");
+		$call_time_SEC = ($call_time_M - $call_time_M_int);
+		$call_time_SEC = ($call_time_SEC * 60);
+		$call_time_SEC = round($call_time_SEC, 0);
+		if ($call_time_SEC < 10) {$call_time_SEC = "0$call_time_SEC";}
+		$call_time_MS = "$call_time_M_int:$call_time_SEC";
+		$call_time_MS =		sprintf("%7s", $call_time_MS);
+		$G = '';		$EG = '';
+		if ($call_time_M_int >= 5) {$G='<SPAN class="purple"><B>'; $EG='</B></SPAN>';}
+#		if ($call_time_M_int >= 10) {$G='<SPAN class="purple"><B>'; $EG='</B></SPAN>';}
+		if (eregi("PAUSED",$row[3])) 
+			{
+			if ($call_time_M_int >= 1) 
+				{$i++; continue;} 
+			else
+				{$G='<SPAN class="yellow"><B>'; $EG='</B></SPAN>'; $agent_paused++;  $agent_total++;}
+			}
+#		if ( (strlen($row[7])> 4) and ($row[7] != "$row[4]") )
+#				{$G='<SPAN class="orange"><B>'; $EG='</B></SPAN>';}
+
+		if ( (eregi("INCALL",$status)) or (eregi("QUEUE",$status)) ) {$agent_incall++;  $agent_total++;}
+		if ( (eregi("READY",$status)) or (eregi("CLOSER",$status)) ) {$agent_ready++;  $agent_total++;}
+		if ( (eregi("READY",$status)) or (eregi("CLOSER",$status)) ) {$G='<SPAN class="blue"><B>'; $EG='</B></SPAN>';}
+
+		$agentcount++;
+		$Aecho .= "| $G$extension$EG | <a href=\"./user_status.php?user=$user\" target=\"_blank\">$G$user$EG</a> | $G$sessionid$EG | $G$status$EG | $G$server_ip$EG | $G$call_server_ip$EG | $G$call_time_MS$EG | $G$campaign_id$EG |\n";
+
+		$i++;
+		}
+
+		$Aecho .= "+------------|--------+-----------+--------+-----------------+-----------------+---------+------------+\n";
+		$Aecho .= "  $agentcount agents logged in on all servers\n";
+		$Aecho .= "  System Load Average: $load_ave\n\n";
+
+		$Aecho .= "  <SPAN class=\"yellow\"><B>          </SPAN> - Paused agents</B>\n";
+	#	$Aecho .= "  <SPAN class=\"orange\"><B>          </SPAN> - Balanced call</B>\n";
+		$Aecho .= "  <SPAN class=\"blue\"><B>          </SPAN> - Agent waiting for call</B>\n";
+		$Aecho .= "  <SPAN class=\"purple\"><B>          </SPAN> - Over 5 minutes on call</B>\n";
+
+		if ($agent_ready > 0) {$B='<FONT class="b1">'; $BG='</FONT>';}
+		if ($agent_ready > 4) {$B='<FONT class="b2">'; $BG='</FONT>';}
+		if ($agent_ready > 9) {$B='<FONT class="b3">'; $BG='</FONT>';}
+		if ($agent_ready > 14) {$B='<FONT class="b4">'; $BG='</FONT>';}
+
+
+		echo "\n<BR>\n";
+
+		echo "$NFB$agent_total$NFE agents logged in &nbsp; &nbsp; &nbsp; &nbsp; \n";
+		echo "$NFB$agent_incall$NFE agents in calls &nbsp; &nbsp; &nbsp; \n";
+		echo "$NFB$B &nbsp;$agent_ready $BG$NFE agents waiting &nbsp; &nbsp; &nbsp; \n";
+		echo "$NFB$agent_paused$NFE paused agents &nbsp; &nbsp; &nbsp; \n";
+		
+		echo "<PRE><FONT SIZE=2>";
+		echo "";
+		echo "$Aecho";
+	}
+	else
+	{
+	echo " NO AGENTS ON CALLS \n";
+	}
+
+?>
+</PRE>
+
+</BODY></HTML>
diff --git a/www/vicidial/AST_timeonVDADall_SIPmonitor.php b/www/vicidial/AST_timeonVDADall_SIPmonitor.php
new file mode 100644
index 00000000..8d740be1
--- /dev/null
+++ b/www/vicidial/AST_timeonVDADall_SIPmonitor.php
@@ -0,0 +1,395 @@
+<? 
+### AST_timeonVDADall.php
+### 
+### Copyright (C) 2006  Matt Florell <vicidial@gmail.com>    LICENSE: GPLv2
+###
+# live real-time stats for the VICIDIAL Auto-Dialer all servers
+# 
+# changes:
+# 50406-0920 - Added Paused agents < 1 min (Chris Doyle)
+# 51130-1218 - Modified layout and info to show all servers in a vicidial system
+# 60504-2023 - Modified click-to-listen for SIP phones by Angelito Manansala
+# 60619-1708 - Added variable filtering to eliminate SQL injection attack threat
+#            - Added required user/pass to gain access to this page
+# 60626-1455 - Added display of system load to bottom (Angelito Manansala)
+#
+
+header ("Content-type: text/html; charset=utf-8");
+
+require("dbconnect.php");
+
+$PHP_AUTH_USER=$_SERVER['PHP_AUTH_USER'];
+$PHP_AUTH_PW=$_SERVER['PHP_AUTH_PW'];
+$PHP_SELF=$_SERVER['PHP_SELF'];
+if (isset($_GET["server_ip"]))				{$server_ip=$_GET["server_ip"];}
+	elseif (isset($_POST["server_ip"]))		{$server_ip=$_POST["server_ip"];}
+if (isset($_GET["reset_counter"]))				{$reset_counter=$_GET["reset_counter"];}
+	elseif (isset($_POST["reset_counter"]))		{$reset_counter=$_POST["reset_counter"];}
+if (isset($_GET["RR"]))				{$RR=$_GET["RR"];}
+	elseif (isset($_POST["RR"]))		{$RR=$_POST["RR"];}
+if (isset($_GET["group"]))				{$group=$_GET["group"];}
+	elseif (isset($_POST["group"]))		{$group=$_POST["group"];}
+if (isset($_GET["DB"]))				{$DB=$_GET["DB"];}
+	elseif (isset($_POST["DB"]))		{$DB=$_POST["DB"];}
+if (isset($_GET["submit"]))				{$submit=$_GET["submit"];}
+	elseif (isset($_POST["submit"]))		{$submit=$_POST["submit"];}
+if (isset($_GET["SUBMIT"]))				{$SUBMIT=$_GET["SUBMIT"];}
+	elseif (isset($_POST["SUBMIT"]))		{$SUBMIT=$_POST["SUBMIT"];}
+
+if (!isset($group))   {$group='';}
+
+function get_server_load($windows = false) {
+$os = strtolower(PHP_OS);
+if(strpos($os, "win") === false) {
+if(file_exists("/proc/loadavg")) {
+$load = file_get_contents("/proc/loadavg");
+$load = explode(' ', $load);
+return $load[0];
+}
+elseif(function_exists("shell_exec")) {
+$load = explode(' ', `uptime`);
+return $load[count($load)-1];
+}
+else {
+return false;
+}
+}
+elseif($windows) {
+if(class_exists("COM")) {
+$wmi = new COM("WinMgmts:\\\\.");
+$cpus = $wmi->InstancesOf("Win32_Processor");
+
+$cpuload = 0;
+$i = 0;
+while ($cpu = $cpus->Next()) {
+$cpuload += $cpu->LoadPercentage;
+$i++;
+}
+
+$cpuload = round($cpuload / $i, 2);
+return "$cpuload%";
+}
+else {
+return false;
+}
+}
+}
+
+$load_ave = get_server_load(true);
+
+
+$PHP_AUTH_USER = ereg_replace("[^0-9a-zA-Z]","",$PHP_AUTH_USER);
+$PHP_AUTH_PW = ereg_replace("[^0-9a-zA-Z]","",$PHP_AUTH_PW);
+
+	$stmt="SELECT count(*) from vicidial_users where user='$PHP_AUTH_USER' and pass='$PHP_AUTH_PW' and user_level > 6;";
+	if ($DB) {echo "|$stmt|\n";}
+	$rslt=mysql_query($stmt, $link);
+	$row=mysql_fetch_row($rslt);
+	$auth=$row[0];
+
+  if( (strlen($PHP_AUTH_USER)<2) or (strlen($PHP_AUTH_PW)<2) or (!$auth))
+	{
+    Header("WWW-Authenticate: Basic realm=\"VICI-PROJECTS\"");
+    Header("HTTP/1.0 401 Unauthorized");
+    echo "Invalid Username/Password: |$PHP_AUTH_USER|$PHP_AUTH_PW|\n";
+    exit;
+	}
+
+$NOW_TIME = date("Y-m-d H:i:s");
+$NOW_DAY = date("Y-m-d");
+$NOW_HOUR = date("H:i:s");
+$STARTtime = date("U");
+$epochSIXhoursAGO = ($STARTtime - 21600);
+$timeSIXhoursAGO = date("Y-m-d H:i:s",$epochSIXhoursAGO);
+
+$stmt="select campaign_id from vicidial_campaigns where active='Y';";
+$rslt=mysql_query($stmt, $link);
+if (!isset($DB))   {$DB=0;}
+if ($DB) {echo "$stmt\n";}
+$groups_to_print = mysql_num_rows($rslt);
+$i=0;
+while ($i < $groups_to_print)
+	{
+	$row=mysql_fetch_row($rslt);
+	$groups[$i] =$row[0];
+	$i++;
+	}
+
+if (!isset($RR))   {$RR=40;}
+
+$NFB = '<b><font size=6 face="courier">';
+$NFE = '</font></b>';
+$F=''; $FG=''; $B=''; $BG='';
+$reset_counter++;
+
+if (!isset($reset_counter))   {$reset_counter=0;}
+if ($reset_counter > 7)
+	{
+	$reset_counter=0;
+	}
+
+?>
+
+<HTML>
+<HEAD>
+<STYLE type="text/css">
+<!--
+   .green {color: white; background-color: green}
+   .red {color: white; background-color: red}
+   .blue {color: white; background-color: blue}
+   .purple {color: white; background-color: purple}
+   .yellow {color: black; background-color: yellow}
+   .orange {color: black; background-color: orange}
+
+   .r1 {color: black; background-color: #FFCCCC}
+   .r2 {color: black; background-color: #FF9999}
+   .r3 {color: black; background-color: #FF6666}
+   .r4 {color: white; background-color: #FF0000}
+   .b1 {color: black; background-color: #CCCCFF}
+   .b2 {color: black; background-color: #9999FF}
+   .b3 {color: black; background-color: #6666FF}
+   .b4 {color: white; background-color: #0000FF}
+-->
+ </STYLE>
+
+<? 
+echo "<META HTTP-EQUIV=\"Content-Type\" CONTENT=\"text/html; charset=utf-8\">\n";
+echo"<META HTTP-EQUIV=Refresh CONTENT=\"$RR; URL=$PHP_SELF?RR=$RR&DB=$DB&group=$group\">\n";
+echo "<TITLE>VICIDIAL: Time On VDAD Campaign: $group</TITLE></HEAD><BODY BGCOLOR=WHITE>\n";
+echo "<FORM ACTION=\"$PHP_SELF\" METHOD=GET>\n";
+echo "VICIDIAL: Realtime Campaign: \n";
+echo "<INPUT TYPE=HIDDEN NAME=RR VALUE=4>\n";
+echo "<INPUT TYPE=HIDDEN NAME=DB VALUE=\"$DB\">\n";
+echo "<SELECT SIZE=1 NAME=group>\n";
+	$o=0;
+	while ($groups_to_print > $o)
+	{
+		if ($groups[$o] == $group) {echo "<option selected value=\"$groups[$o]\">$groups[$o]</option>\n";}
+		  else {echo "<option value=\"$groups[$o]\">$groups[$o]</option>\n";}
+		$o++;
+	}
+echo "</SELECT>\n";
+echo "<INPUT type=submit NAME=SUBMIT VALUE=SUBMIT><FONT FACE=\"ARIAL,HELVETICA\" COLOR=BLACK SIZE=2> &nbsp; &nbsp; &nbsp; &nbsp; \n";
+echo "<a href=\"$PHP_SELF?group=$group&RR=40&DB=$DB\">STOP</a> | <a href=\"$PHP_SELF?group=$group&RR=4&DB=$DB\">GO</a>";
+echo " &nbsp; &nbsp; &nbsp; &nbsp; <a href=\"./admin.php?ADD=34&campaign_id=$group\">MODIFY</a> | <a href=\"./server_stats.php\">REPORTS</a> </FONT>\n";
+echo "\n\n";
+
+
+if (!$group) {echo "<BR><BR>please select a campaign from the pulldown above</FORM>\n"; exit;}
+else
+{
+$stmt="select auto_dial_level,dial_status_a,dial_status_b,dial_status_c,dial_status_d,dial_status_e,lead_order,lead_filter_id,hopper_level from vicidial_campaigns where campaign_id='" . mysql_real_escape_string($group) . "';";
+$rslt=mysql_query($stmt, $link);
+$row=mysql_fetch_row($rslt);
+$HOPlev = $row[8];
+
+echo "<BR><table cellpadding=0 cellspacing=0><TR>";
+echo "<TD ALIGN=RIGHT><font size=2><B>DIAL LEVEL:</B></TD><TD ALIGN=LEFT><font size=2>&nbsp; $row[0]&nbsp; &nbsp; </TD>";
+echo "<TD ALIGN=RIGHT><font size=2><B>STATUSES:</B></TD><TD ALIGN=LEFT><font size=2>&nbsp; $row[1], $row[2], $row[3], $row[4], $row[5] &nbsp; &nbsp; </TD>";
+echo "<TD ALIGN=RIGHT><font size=2><B>ORDER:</B></TD><TD ALIGN=LEFT><font size=2>&nbsp; $row[6] &nbsp; &nbsp; </TD>";
+echo "<TD ALIGN=RIGHT><font size=2><B>FILTER:</B></TD><TD ALIGN=LEFT><font size=2>&nbsp; $row[7] &nbsp; &nbsp; </TD>";
+echo "</TR>";
+
+$stmt="select count(*) from vicidial_hopper where campaign_id='" . mysql_real_escape_string($group) . "';";
+$rslt=mysql_query($stmt, $link);
+$row=mysql_fetch_row($rslt);
+$VDhop = $row[0];
+
+$stmt="select dialable_leads,calls_today,drops_today,drops_today_pct from vicidial_campaign_stats where campaign_id='" . mysql_real_escape_string($group) . "';";
+$rslt=mysql_query($stmt, $link);
+$row=mysql_fetch_row($rslt);
+$DAleads = $row[0];
+$callsTODAY = $row[1];
+$dropsTODAY = $row[2];
+$drpctTODAY = $row[3];
+
+echo "<TR>";
+echo "<TD ALIGN=RIGHT><font size=2><B>HOPPER LEVEL:</B></TD><TD ALIGN=LEFT><font size=2>&nbsp; $HOPlev &nbsp; &nbsp; </TD>";
+echo "<TD ALIGN=RIGHT><font size=2><B>LEADS IN HOPPER:</B></TD><TD ALIGN=LEFT><font size=2>&nbsp; $VDhop &nbsp; &nbsp; </TD>";
+echo "<TD ALIGN=RIGHT><font size=2><B>DIALABLE LEADS:</B></TD><TD ALIGN=LEFT><font size=2>&nbsp; $DAleads &nbsp; &nbsp; </TD>";
+echo "<TD ALIGN=CENTER COLSPAN=2><font size=2> &nbsp; <B> TIME:</B> </TD>";
+echo "</TR>";
+echo "<TR>";
+echo "<TD ALIGN=RIGHT><font size=2><B>CALLS TODAY:</B></TD><TD ALIGN=LEFT><font size=2>&nbsp; $callsTODAY &nbsp; &nbsp; </TD>";
+echo "<TD ALIGN=RIGHT><font size=2><B>CALLS DROPPED:</B></TD><TD ALIGN=LEFT><font size=2>&nbsp; $dropsTODAY &nbsp; &nbsp; </TD>";
+echo "<TD ALIGN=RIGHT><font size=2><B>DROPPED PERCENT:</B></TD><TD ALIGN=LEFT><font size=2>&nbsp; $drpctTODAY% &nbsp; &nbsp; </TD>";
+echo "<TD ALIGN=CENTER COLSPAN=2><font size=2> &nbsp; $NOW_TIME </TD>";
+echo "</TR></TABLE>";
+
+
+echo "</FORM>\n\n";
+}
+###################################################################################
+###### OUTBOUND CALLS
+###################################################################################
+if (eregi("CLOSER",$group))
+	{
+	$stmt="select closer_campaigns from vicidial_campaigns where campaign_id='" . mysql_real_escape_string($group) . "';";
+	$rslt=mysql_query($stmt, $link);
+	$row=mysql_fetch_row($rslt);
+	$closer_campaigns = preg_replace("/^ | -$/","",$row[0]);
+	$closer_campaigns = preg_replace("/ /","','",$closer_campaigns);
+	$closer_campaigns = "'$closer_campaigns'";
+
+	$stmt="select status from vicidial_auto_calls where status NOT IN('XFER') and ( (call_type='IN' and campaign_id IN($closer_campaigns)) or (campaign_id='" . mysql_real_escape_string($group) . "' and call_type='OUT') );";
+	}
+else
+	{$stmt="select status from vicidial_auto_calls where status NOT IN('XFER') and campaign_id='" . mysql_real_escape_string($group) . "';";}
+$rslt=mysql_query($stmt, $link);
+if ($DB) {echo "$stmt\n";}
+$parked_to_print = mysql_num_rows($rslt);
+	if ($parked_to_print > 0)
+	{
+	$i=0;
+	$out_total=0;
+	$out_ring=0;
+	$out_live=0;
+	while ($i < $parked_to_print)
+		{
+		$row=mysql_fetch_row($rslt);
+
+		if (eregi("LIVE",$row[0])) 
+			{$out_live++;}
+		else
+			{
+			if (eregi("CLOSER",$row[0])) 
+				{$nothing=1;}
+			else 
+				{$out_ring++;}
+			}
+		$out_total++;
+		$i++;
+		}
+
+		if ($out_live > 0) {$F='<FONT class="r1">'; $FG='</FONT>';}
+		if ($out_live > 4) {$F='<FONT class="r2">'; $FG='</FONT>';}
+		if ($out_live > 9) {$F='<FONT class="r3">'; $FG='</FONT>';}
+		if ($out_live > 14) {$F='<FONT class="r4">'; $FG='</FONT>';}
+
+		if (eregi("CLOSER",$group))
+			{echo "$NFB$out_total$NFE current active calls&nbsp; &nbsp; &nbsp; \n";}
+		else
+			{echo "$NFB$out_total$NFE calls being placed &nbsp; &nbsp; &nbsp; \n";}
+		
+		echo "$NFB$out_ring$NFE calls ringing &nbsp; &nbsp; &nbsp; &nbsp; \n";
+		echo "$NFB$F &nbsp;$out_live $FG$NFE calls waiting for agents &nbsp; &nbsp; &nbsp; \n";
+		}
+	else
+	{
+	echo " NO LIVE CALLS WAITING \n";
+	}
+
+
+###################################################################################
+###### TIME ON SYSTEM
+###################################################################################
+
+$agent_incall=0;
+$agent_ready=0;
+$agent_paused=0;
+$agent_total=0;
+
+$Aecho = '';
+$Aecho .= "VICIDIAL: Agents Time On Calls Campaign: $group                      $NOW_TIME\n\n";
+$Aecho .= "+------------|--------+------------------+--------+-----------------+-----------------+---------+------------+\n";
+$Aecho .= "| STATION    | USER   |     SESSIONID    | STATUS | SERVER IP       | CALL SERVER IP  | MM:SS   | CAMPAIGN   |\n";
+$Aecho .= "+------------|--------+------------------+--------+-----------------+-----------------+---------+------------+\n";
+
+
+$stmt="select extension,user,conf_exten,status,server_ip,UNIX_TIMESTAMP(last_call_time),UNIX_TIMESTAMP(last_call_finish),call_server_ip,campaign_id from vicidial_live_agents where campaign_id='" . mysql_real_escape_string($group) . "' order by status,last_call_time;";
+$rslt=mysql_query($stmt, $link);
+if ($DB) {echo "$stmt\n";}
+$talking_to_print = mysql_num_rows($rslt);
+	if ($talking_to_print > 0)
+	{
+	$i=0;
+	$agentcount=0;
+	while ($i < $talking_to_print)
+		{
+		$row=mysql_fetch_row($rslt);
+			if (eregi("READY|PAUSED",$row[4]))
+			{
+			$row[5]=$row[6];
+			}
+		$extension =		sprintf("%-10s", $row[0]);
+		$user =				sprintf("%-6s", $row[1]);
+		$sessionid =		sprintf("%-9s", $row[2]);
+		$status =			sprintf("%-6s", $row[3]);
+		$server_ip =		sprintf("%-15s", $row[4]);
+		$call_server_ip =	sprintf("%-15s", $row[7]);
+		$campaign_id =		sprintf("%-10s", $row[8]);
+		$call_time_S = ($STARTtime - $row[5]);
+
+		$call_time_M = ($call_time_S / 60);
+		$call_time_M = round($call_time_M, 2);
+		$call_time_M_int = intval("$call_time_M");
+		$call_time_SEC = ($call_time_M - $call_time_M_int);
+		$call_time_SEC = ($call_time_SEC * 60);
+		$call_time_SEC = round($call_time_SEC, 0);
+		if ($call_time_SEC < 10) {$call_time_SEC = "0$call_time_SEC";}
+		$call_time_MS = "$call_time_M_int:$call_time_SEC";
+		$call_time_MS =		sprintf("%7s", $call_time_MS);
+		$G = '';		$EG = '';
+		if ($call_time_M_int >= 5) {$G='<SPAN class="purple"><B>'; $EG='</B></SPAN>';}
+#		if ($call_time_M_int >= 10) {$G='<SPAN class="purple"><B>'; $EG='</B></SPAN>';}
+		if (eregi("PAUSED",$row[3])) 
+			{
+			if ($call_time_M_int >= 1) 
+				{$i++; continue;} 
+			else
+				{$G='<SPAN class="yellow"><B>'; $EG='</B></SPAN>'; $agent_paused++;  $agent_total++;}
+			}
+#		if ( (strlen($row[7])> 4) and ($row[7] != "$row[4]") )
+#				{$G='<SPAN class="orange"><B>'; $EG='</B></SPAN>';}
+
+		if ( (eregi("INCALL",$status)) or (eregi("QUEUE",$status)) ) {$agent_incall++;  $agent_total++;}
+		if ( (eregi("READY",$status)) or (eregi("CLOSER",$status)) ) {$agent_ready++;  $agent_total++;}
+		if ( (eregi("READY",$status)) or (eregi("CLOSER",$status)) ) {$G='<SPAN class="blue"><B>'; $EG='</B></SPAN>';}
+
+		$agentcount++;
+		#$Aecho .= "| $G$extension$EG | <a href=\"./user_status.php?user=$user\" target=\"_blank\">$G$user$EG</a> | $G$sessionid$EG | $G$status$EG | $G$server_ip$EG | $G$call_server_ip$EG | $G$call_time_MS$EG | $G$campaign_id$EG |\n";
+		$sessionid=trim($sessionid);
+		$Aecho .= "| $G$extension$EG | <a href=\"./user_status.php?user=$user\" target=\"_blank\">$G$user$EG</a> |  $G$sessionid$EG <a href=\"sip:6$sessionid@$server_ip\">LISTEN</a>  | $G$status$EG | $G$server_ip$EG | $G$call_server_ip$EG | $G$call_time_MS$EG | $G$campaign_id$EG |\n";
+
+		$i++;
+		}
+
+		$Aecho .= "+------------|--------+-----------+--------+-----------------+-----------------+---------+------------+\n";
+		$Aecho .= "  $agentcount agents logged in on all servers\n";
+		$Aecho .= "  System Load Average: $load_ave\n\n";
+
+		$Aecho .= "  <SPAN class=\"yellow\"><B>          </SPAN> - Paused agents</B>\n";
+	#	$Aecho .= "  <SPAN class=\"orange\"><B>          </SPAN> - Balanced call</B>\n";
+		$Aecho .= "  <SPAN class=\"blue\"><B>          </SPAN> - Agent waiting for call</B>\n";
+		$Aecho .= "  <SPAN class=\"purple\"><B>          </SPAN> - Over 5 minutes on call</B>\n\n";
+		$Aecho .= "  NOTE: Click LISTEN to monitor agent call, you must have softphone installed on you machine.\n\n";
+
+
+		if ($agent_ready > 0) {$B='<FONT class="b1">'; $BG='</FONT>';}
+		if ($agent_ready > 4) {$B='<FONT class="b2">'; $BG='</FONT>';}
+		if ($agent_ready > 9) {$B='<FONT class="b3">'; $BG='</FONT>';}
+		if ($agent_ready > 14) {$B='<FONT class="b4">'; $BG='</FONT>';}
+
+
+		echo "\n<BR>\n";
+
+		echo "$NFB$agent_total$NFE agents logged in &nbsp; &nbsp; &nbsp; &nbsp; \n";
+		echo "$NFB$agent_incall$NFE agents in calls &nbsp; &nbsp; &nbsp; \n";
+		echo "$NFB$B &nbsp;$agent_ready $BG$NFE agents waiting &nbsp; &nbsp; &nbsp; \n";
+		echo "$NFB$agent_paused$NFE paused agents &nbsp; &nbsp; &nbsp; \n";
+		
+		echo "<PRE><FONT SIZE=2>";
+		echo "";
+		echo "$Aecho";
+	}
+	else
+	{
+	echo " NO AGENTS ON CALLS \n";
+	}
+
+?>
+</PRE>
+
+</BODY></HTML>
+
+
diff --git a/www/vicidial/AST_timeoncall.php b/www/vicidial/AST_timeoncall.php
new file mode 100644
index 00000000..074160c3
--- /dev/null
+++ b/www/vicidial/AST_timeoncall.php
@@ -0,0 +1,202 @@
+<? 
+### AST_timeoncall.php
+### 
+### Copyright (C) 2006  Matt Florell <vicidial@gmail.com>    LICENSE: GPLv2
+###
+# CHANGES
+#
+# 60620-1043 - Added variable filtering to eliminate SQL injection attack threat
+#            - Added required user/pass to gain access to this page
+#
+
+require("dbconnect.php");
+
+$PHP_AUTH_USER=$_SERVER['PHP_AUTH_USER'];
+$PHP_AUTH_PW=$_SERVER['PHP_AUTH_PW'];
+$PHP_SELF=$_SERVER['PHP_SELF'];
+if (isset($_GET["server_ip"]))				{$server_ip=$_GET["server_ip"];}
+	elseif (isset($_POST["server_ip"]))		{$server_ip=$_POST["server_ip"];}
+if (isset($_GET["reset_counter"]))				{$reset_counter=$_GET["reset_counter"];}
+	elseif (isset($_POST["reset_counter"]))		{$reset_counter=$_POST["reset_counter"];}
+if (isset($_GET["submit"]))				{$submit=$_GET["submit"];}
+	elseif (isset($_POST["submit"]))		{$submit=$_POST["submit"];}
+if (isset($_GET["SUBMIT"]))				{$SUBMIT=$_GET["SUBMIT"];}
+	elseif (isset($_POST["SUBMIT"]))		{$SUBMIT=$_POST["SUBMIT"];}
+
+$PHP_AUTH_USER = ereg_replace("[^0-9a-zA-Z]","",$PHP_AUTH_USER);
+$PHP_AUTH_PW = ereg_replace("[^0-9a-zA-Z]","",$PHP_AUTH_PW);
+
+	$stmt="SELECT count(*) from vicidial_users where user='$PHP_AUTH_USER' and pass='$PHP_AUTH_PW' and user_level > 6;";
+	if ($DB) {echo "|$stmt|\n";}
+	$rslt=mysql_query($stmt, $link);
+	$row=mysql_fetch_row($rslt);
+	$auth=$row[0];
+
+  if( (strlen($PHP_AUTH_USER)<2) or (strlen($PHP_AUTH_PW)<2) or (!$auth))
+	{
+    Header("WWW-Authenticate: Basic realm=\"VICI-PROJECTS\"");
+    Header("HTTP/1.0 401 Unauthorized");
+    echo "Invalid Username/Password: |$PHP_AUTH_USER|$PHP_AUTH_PW|\n";
+    exit;
+	}
+
+$NOW_TIME = date("Y-m-d H:i:s");
+$STARTtime = date("U");
+
+?>
+
+<HTML>
+<HEAD>
+<STYLE type="text/css">
+<!--
+   .green {color: white; background-color: green}
+   .red {color: white; background-color: red}
+-->
+ </STYLE>
+
+<? 
+echo "<META HTTP-EQUIV=\"Content-Type\" CONTENT=\"text/html; charset=utf-8\">\n";
+echo"<META HTTP-EQUIV=Refresh CONTENT=\"15; URL=$PHP_SELF?server_ip=$server_ip&DB=$DB\">\n";
+echo "<TITLE>VICIDIAL: Time On Call</TITLE></HEAD><BODY BGCOLOR=WHITE>\n";
+echo "<PRE>\n\n";
+
+echo "VICIDIAL: Time On Call                        $NOW_TIME    <a href=\"./server_stats.php\">REPORTS</a>\n\n";
+echo "+------------+-----------+-----------+------------------+---------------------+---------+\n";
+echo "| STATION    | SESSIONID | CHANNEL   | NUMBER DIALED    | START TIME          | MINUTES |\n";
+echo "+------------+-----------+-----------+------------------+---------------------+---------+\n";
+
+$stmt="SELECT count(*) from live_sip_channels where server_ip='" . mysql_real_escape_string($server_ip) . "';";
+$rslt=mysql_query($stmt, $link);
+if ($DB) {echo "$stmt\n";}
+$row=mysql_fetch_row($rslt);
+$parked_count = $row[0];
+	if ($parked_count > 0)
+	{
+	$stmt="select extension from live_channels where server_ip='" . mysql_real_escape_string($server_ip) . "';";
+	$rslt=mysql_query($stmt, $link);
+	if ($DB) {echo "$stmt\n";}
+	$ext_to_print = mysql_num_rows($rslt);
+	$i=0;
+	$live_zap_counter=0;
+	$sessions = '';
+	while ($i < $ext_to_print)
+		{
+		$row=mysql_fetch_row($rslt);
+		if (preg_match("/^8600/i",$row[0]))
+			{
+			$sessions .= "$row[0]|";
+			}
+		$i++;
+		}
+	$sessions = preg_replace("/\|$/",'',$sessions);
+
+	if ($DB) {echo "SESSIONS: -$sessions-\n";}
+
+	$stmt="select * from live_sip_channels where server_ip='" . mysql_real_escape_string($server_ip) . "' order by channel;";
+	$rslt=mysql_query($stmt, $link);
+	if ($DB) {echo "$stmt\n";}
+	$parked_to_print = mysql_num_rows($rslt);
+	$i=0;
+	$live_calls_counter=0;
+	while ($i < $parked_to_print)
+		{
+		$row=mysql_fetch_row($rslt);
+		if ( (preg_match("/Zap\/|internal|ring/i",$row[3])) or (preg_match("/Local\//i",$row[0])) )
+			{
+			if ($DB) {echo "NOT STATION |$row[0]|$row[3]|\n";}
+			$session_id = '';
+			}
+		else 
+			{
+			if (preg_match("/$row[3]/i",$sessions))
+				{
+				if ($DB) {echo "LIVE STATION|$row[0]|$row[3]|\n";}
+				$session_id = $row[3];
+				$station = preg_replace("/SIP\//",'',$row[0]);
+				$station = preg_replace("/-.*/",'',$station);
+			
+				$LIVE_sessions[$live_calls_counter] =			"$session_id";
+				$LIVE_sessions_FORMAT[$live_calls_counter] =	sprintf("%-9s", $session_id);
+				$LIVE_stations[$live_calls_counter] =			"$station";
+				$LIVE_stations_FORMAT[$live_calls_counter] =	sprintf("%-10s", $station);
+
+		#		echo "| $station | $session_id | \n";
+
+				$live_calls_counter++;
+				}
+			else
+				{
+				if ($DB) {echo "NOT STATIONZ|$row[0]|$row[3]|\n";}
+				$session_id = '';
+				}
+			}
+
+		$i++;
+		}
+
+		if ($live_calls_counter > 0)
+		{
+		$i=0;
+		$LC_counter = $live_calls_counter;
+
+		while ($i < $live_calls_counter)
+			{
+			$stmt="select channel,extension,number_dialed,start_time,start_epoch from call_log where extension='$LIVE_stations[$i]' and server_ip='" . mysql_real_escape_string($server_ip) . "' order by uniqueid desc LIMIT 1;";
+			$rslt=mysql_query($stmt, $link);
+			if ($DB) {echo "$stmt\n";}
+			$parked_to_print = mysql_num_rows($rslt);
+			$row=mysql_fetch_row($rslt);
+
+			$channel =			sprintf("%-9s", $row[0]);
+			$number_dialed =	sprintf("%-16s", $row[2]);
+			$start_time =		sprintf("%-19s", $row[3]);
+			$call_time_S = ($STARTtime - $row[4]);
+
+			$call_time_M = ($call_time_S / 60);
+			$call_time_M = round($call_time_M, 2);
+			$call_time_M_int = intval("$call_time_M");
+			$call_time_SEC = ($call_time_M - $call_time_M_int);
+			$call_time_SEC = ($call_time_SEC * 60);
+			$call_time_SEC = round($call_time_SEC, 0);
+			if ($call_time_SEC < 10) {$call_time_SEC = "0$call_time_SEC";}
+			$call_time_MS = "$call_time_M_int:$call_time_SEC";
+			$call_time_MS =		sprintf("%7s", $call_time_MS);
+			$G = '';		$EG = '';
+			if ($call_time_M_int >= 12) {$G='<SPAN class="green"><B>'; $EG='</B></SPAN>';}
+			if ($call_time_M_int >= 31) {$G='<SPAN class="red"><B>'; $EG='</B></SPAN>';}
+
+			echo "| $G$LIVE_stations_FORMAT[$i]$EG | $G$LIVE_sessions_FORMAT[$i]$EG | $G$channel$EG | $G$number_dialed$EG | $G$start_time$EG | $G$call_time_MS$EG |\n";
+
+			$i++;
+			}
+
+		echo "+------------+-----------+-----------+------------------+---------------------+---------+\n";
+		echo "  $i stations on live calls on server $server_ip\n\n";
+
+		echo "  <SPAN class=\"green\"><B>          </SPAN> - 12 minutes or more on live call\n";
+		echo "  <SPAN class=\"red\"><B>          </SPAN> - Over 30 minutes on live call\n";
+
+		}
+		else
+		{
+		echo "*****************************************************************************************\n";
+		echo "*****************************************************************************************\n";
+		echo "*************************************** NO LIVE STATIONS ********************************\n";
+		echo "*****************************************************************************************\n";
+		echo "*****************************************************************************************\n";
+		}
+
+	}
+	else
+	{
+	echo "*****************************************************************************************\n";
+	echo "*****************************************************************************************\n";
+	echo "*************************************** NO LIVE STATIONS ********************************\n";
+	echo "*****************************************************************************************\n";
+	echo "*****************************************************************************************\n";
+	}
+
+?>
+</PRE>
+
+</BODY></HTML>
\ No newline at end of file
diff --git a/www/vicidial/AST_timeonpark.php b/www/vicidial/AST_timeonpark.php
new file mode 100644
index 00000000..3cedd09f
--- /dev/null
+++ b/www/vicidial/AST_timeonpark.php
@@ -0,0 +1,219 @@
+<? 
+### AST_timeonpark.php
+### 
+### Copyright (C) 2006  Matt Florell <vicidial@gmail.com>    LICENSE: GPLv2
+###
+# CHANGES
+#
+# 60620-1042 - Added variable filtering to eliminate SQL injection attack threat
+#            - Added required user/pass to gain access to this page
+#
+
+require("dbconnect.php");
+
+$PHP_AUTH_USER=$_SERVER['PHP_AUTH_USER'];
+$PHP_AUTH_PW=$_SERVER['PHP_AUTH_PW'];
+$PHP_SELF=$_SERVER['PHP_SELF'];
+if (isset($_GET["server_ip"]))				{$server_ip=$_GET["server_ip"];}
+	elseif (isset($_POST["server_ip"]))		{$server_ip=$_POST["server_ip"];}
+if (isset($_GET["reset_counter"]))				{$reset_counter=$_GET["reset_counter"];}
+	elseif (isset($_POST["reset_counter"]))		{$reset_counter=$_POST["reset_counter"];}
+if (isset($_GET["submit"]))				{$submit=$_GET["submit"];}
+	elseif (isset($_POST["submit"]))		{$submit=$_POST["submit"];}
+if (isset($_GET["SUBMIT"]))				{$SUBMIT=$_GET["SUBMIT"];}
+	elseif (isset($_POST["SUBMIT"]))		{$SUBMIT=$_POST["SUBMIT"];}
+
+$PHP_AUTH_USER = ereg_replace("[^0-9a-zA-Z]","",$PHP_AUTH_USER);
+$PHP_AUTH_PW = ereg_replace("[^0-9a-zA-Z]","",$PHP_AUTH_PW);
+
+	$stmt="SELECT count(*) from vicidial_users where user='$PHP_AUTH_USER' and pass='$PHP_AUTH_PW' and user_level > 6;";
+	if ($DB) {echo "|$stmt|\n";}
+	$rslt=mysql_query($stmt, $link);
+	$row=mysql_fetch_row($rslt);
+	$auth=$row[0];
+
+  if( (strlen($PHP_AUTH_USER)<2) or (strlen($PHP_AUTH_PW)<2) or (!$auth))
+	{
+    Header("WWW-Authenticate: Basic realm=\"VICI-PROJECTS\"");
+    Header("HTTP/1.0 401 Unauthorized");
+    echo "Invalid Username/Password: |$PHP_AUTH_USER|$PHP_AUTH_PW|\n";
+    exit;
+	}
+
+$NOW_TIME = date("Y-m-d H:i:s");
+$STARTtime = date("U");
+$timeONEhoursAGO = ($STARTtime - 3600);
+$epochHALFhoursAGO = ($STARTtime - 1860);
+$timeONEhoursAGO = date("Y-m-d H:i:s",$timeONEhoursAGO);
+$timeHALFhoursAGO = date("Y-m-d H:i:s",$epochHALFhoursAGO);
+
+$reset_counter++;
+
+if ($reset_counter > 7)
+	{
+	$reset_counter=0;
+
+	$stmt="update park_log set status='HUNGUP' where hangup_time is not null;";
+	$rslt=mysql_query($stmt, $link);
+	if ($DB) {echo "$stmt\n";}
+
+	if ($DB)
+		{	
+		$stmt="delete from park_log where status='TALKING' and grab_time < '$timeONEhoursAGO' and (hangup_time is null or hangup_time='');";
+		$rslt=mysql_query($stmt, $link);
+		 echo "$stmt\n";
+
+		$stmt="delete from park_log where status='PARKED' and parked_time < '$timeHALFhoursAGO' and (hangup_time is null or hangup_time='');";
+		$rslt=mysql_query($stmt, $link);
+		 echo "$stmt\n";
+
+		}
+	}
+
+?>
+
+<HTML>
+<HEAD>
+<STYLE type="text/css">
+<!--
+   .green {color: white; background-color: green}
+   .red {color: white; background-color: red}
+   .blue {color: white; background-color: blue}
+   .purple {color: white; background-color: purple}
+-->
+ </STYLE>
+
+<? 
+echo "<META HTTP-EQUIV=\"Content-Type\" CONTENT=\"text/html; charset=utf-8\">\n";
+echo"<META HTTP-EQUIV=Refresh CONTENT=\"7; URL=$PHP_SELF?server_ip=$server_ip&DB=$DB&reset_counter=$reset_counter\">\n";
+echo "<TITLE>VICIDIAL: Time On Park</TITLE></HEAD><BODY BGCOLOR=WHITE>\n";
+echo "<PRE><FONT SIZE=3>\n\n";
+
+echo "VICIDIAL: Time On Park         $NOW_TIME    <a href=\"./server_stats.php\">REPORTS</a>\n\n";
+echo "+------------+-----------------+---------------------+---------+\n";
+echo "| CHANNEL    | GROUP           | START TIME          | MINUTES |\n";
+echo "+------------+-----------------+---------------------+---------+\n";
+
+#$link=mysql_connect("localhost", "cron", "1234");
+# $linkX=mysql_connect("localhost", "cron", "1234");
+#mysql_select_db("asterisk");
+
+$stmt="select extension,user,channel,channel_group,parked_time,UNIX_TIMESTAMP(parked_time) from park_log where status ='PARKED' and server_ip='" . mysql_real_escape_string($server_ip) . "' order by uniqueid;";
+$rslt=mysql_query($stmt, $link);
+if ($DB) {echo "$stmt\n";}
+$parked_to_print = mysql_num_rows($rslt);
+	if ($parked_to_print > 0)
+	{
+	$i=0;
+	while ($i < $parked_to_print)
+		{
+		$row=mysql_fetch_row($rslt);
+
+		$channel =			sprintf("%-10s", $row[2]);
+		$number_dialed =	sprintf("%-15s", $row[3]);
+		$start_time =		sprintf("%-19s", $row[4]);
+		$call_time_S = ($STARTtime - $row[5]);
+
+		$call_time_M = ($call_time_S / 60);
+		$call_time_M = round($call_time_M, 2);
+		$call_time_M_int = intval("$call_time_M");
+		$call_time_SEC = ($call_time_M - $call_time_M_int);
+		$call_time_SEC = ($call_time_SEC * 60);
+		$call_time_SEC = round($call_time_SEC, 0);
+		if ($call_time_SEC < 10) {$call_time_SEC = "0$call_time_SEC";}
+		$call_time_MS = "$call_time_M_int:$call_time_SEC";
+		$call_time_MS =		sprintf("%7s", $call_time_MS);
+		$G = '';		$EG = '';
+		if ($call_time_M_int >= 1) {$G='<SPAN class="green"><B>'; $EG='</B></SPAN>';}
+		if ($call_time_M_int >= 6) {$G='<SPAN class="red"><B>'; $EG='</B></SPAN>';}
+
+		echo "| $G$channel$EG | $G$number_dialed$EG | $G$start_time$EG | $G$call_time_MS$EG |\n";
+
+		$i++;
+		}
+
+		echo "+------------+-----------------+---------------------+---------+\n";
+		echo "  $i callers waiting on server $server_ip\n\n";
+
+		echo "  <SPAN class=\"green\"><B>          </SPAN> - 1 minute or more on hold</B>\n";
+		echo "  <SPAN class=\"red\"><B>          </SPAN> - Over 5 minutes on hold</B>\n";
+
+		}
+	else
+	{
+	echo "****************************************************************\n";
+	echo "****************************************************************\n";
+	echo "******************** NO LIVE CALLS WAITING *********************\n";
+	echo "****************************************************************\n";
+	echo "****************************************************************\n";
+	}
+
+###################################################################################
+###### TIME ON INBOUND CALLS
+###################################################################################
+echo "\n\n";
+echo "----------------------------------------------------------------------------------------";
+echo "\n\n";
+echo "VICIDIAL: Agents Time On Inbound Calls                             $NOW_TIME\n\n";
+echo "+------------|--------+------------+-----------------+---------------------+---------+\n";
+echo "| STATION    | USER   | CHANNEL    | GROUP           | START TIME          | MINUTES |\n";
+echo "+------------|--------+------------+-----------------+---------------------+---------+\n";
+
+
+$stmt="select extension,user,channel,channel_group,grab_time,UNIX_TIMESTAMP(grab_time) from park_log where status ='TALKING' and server_ip='" . mysql_real_escape_string($server_ip) . "' order by uniqueid;";
+$rslt=mysql_query($stmt, $link);
+if ($DB) {echo "$stmt\n";}
+$talking_to_print = mysql_num_rows($rslt);
+	if ($talking_to_print > 0)
+	{
+	$i=0;
+	while ($i < $talking_to_print)
+		{
+		$row=mysql_fetch_row($rslt);
+
+		$extension =		sprintf("%-10s", $row[0]);
+		$user =				sprintf("%-6s", $row[1]);
+		$channel =			sprintf("%-10s", $row[2]);
+		$number_dialed =	sprintf("%-15s", $row[3]);
+		$start_time =		sprintf("%-19s", $row[4]);
+		$call_time_S = ($STARTtime - $row[5]);
+
+		$call_time_M = ($call_time_S / 60);
+		$call_time_M = round($call_time_M, 2);
+		$call_time_M_int = intval("$call_time_M");
+		$call_time_SEC = ($call_time_M - $call_time_M_int);
+		$call_time_SEC = ($call_time_SEC * 60);
+		$call_time_SEC = round($call_time_SEC, 0);
+		if ($call_time_SEC < 10) {$call_time_SEC = "0$call_time_SEC";}
+		$call_time_MS = "$call_time_M_int:$call_time_SEC";
+		$call_time_MS =		sprintf("%7s", $call_time_MS);
+		$G = '';		$EG = '';
+		if ($call_time_M_int >= 12) {$G='<SPAN class="blue"><B>'; $EG='</B></SPAN>';}
+		if ($call_time_M_int >= 31) {$G='<SPAN class="purple"><B>'; $EG='</B></SPAN>';}
+
+		echo "| $G$extension$EG | $G$user$EG | $G$channel$EG | $G$number_dialed$EG | $G$start_time$EG | $G$call_time_MS$EG |\n";
+
+		$i++;
+		}
+
+		echo "+------------|--------+------------+-----------------+---------------------+---------+\n";
+		echo "  $i agents on calls on server $server_ip\n\n";
+
+		echo "  <SPAN class=\"blue\"><B>          </SPAN> - 12 minutes or more on call</B>\n";
+		echo "  <SPAN class=\"purple\"><B>          </SPAN> - Over 30 minutes on call</B>\n";
+
+	}
+	else
+	{
+	echo "**************************************************************************************\n";
+	echo "**************************************************************************************\n";
+	echo "********************************* NO AGENTS ON CALLS *********************************\n";
+	echo "**************************************************************************************\n";
+	echo "**************************************************************************************\n";
+	}
+
+
+?>
+</PRE>
+
+</BODY></HTML>
\ No newline at end of file
diff --git a/www/vicidial/admin.php b/www/vicidial/admin.php
new file mode 100644
index 00000000..816dd7d1
--- /dev/null
+++ b/www/vicidial/admin.php
@@ -0,0 +1,6514 @@
+<?
+# admin.php - VICIDIAL administration page
+# 
+# 
+# Copyright (C) 2006  Matt Florell <vicidial@gmail.com>    LICENSE: GPLv2
+#
+
+require("dbconnect.php");
+
+$PHP_AUTH_USER=$_SERVER['PHP_AUTH_USER'];
+$PHP_AUTH_PW=$_SERVER['PHP_AUTH_PW'];
+$PHP_SELF=$_SERVER['PHP_SELF'];
+if (isset($_GET["ADD"]))				{$ADD=$_GET["ADD"];}
+	elseif (isset($_POST["ADD"]))		{$ADD=$_POST["ADD"];}
+if (isset($_GET["stage"]))				{$stage=$_GET["stage"];}
+	elseif (isset($_POST["stage"]))		{$stage=$_POST["stage"];}
+if (isset($_GET["groups"]))				{$groups=$_GET["groups"];}
+	elseif (isset($_POST["groups"]))		{$groups=$_POST["groups"];}
+if (isset($_GET["remote_agent_id"]))				{$remote_agent_id=$_GET["remote_agent_id"];}
+	elseif (isset($_POST["remote_agent_id"]))		{$remote_agent_id=$_POST["remote_agent_id"];}
+if (isset($_GET["user"]))				{$user=$_GET["user"];}
+	elseif (isset($_POST["user"]))		{$user=$_POST["user"];}
+if (isset($_GET["pass"]))				{$pass=$_GET["pass"];}
+	elseif (isset($_POST["pass"]))		{$pass=$_POST["pass"];}
+if (isset($_GET["full_name"]))				{$full_name=$_GET["full_name"];}
+	elseif (isset($_POST["full_name"]))		{$full_name=$_POST["full_name"];}
+if (isset($_GET["user_level"]))				{$user_level=$_GET["user_level"];}
+	elseif (isset($_POST["user_level"]))		{$user_level=$_POST["user_level"];}
+if (isset($_GET["user_group"]))				{$user_group=$_GET["user_group"];}
+	elseif (isset($_POST["user_group"]))		{$user_group=$_POST["user_group"];}
+if (isset($_GET["campaign_id"]))				{$campaign_id=$_GET["campaign_id"];}
+	elseif (isset($_POST["campaign_id"]))		{$campaign_id=$_POST["campaign_id"];}
+if (isset($_GET["campaign_name"]))				{$campaign_name=$_GET["campaign_name"];}
+	elseif (isset($_POST["campaign_name"]))		{$campaign_name=$_POST["campaign_name"];}
+if (isset($_GET["active"]))				{$active=$_GET["active"];}
+	elseif (isset($_POST["active"]))		{$active=$_POST["active"];}
+if (isset($_GET["park_ext"]))				{$park_ext=$_GET["park_ext"];}
+	elseif (isset($_POST["park_ext"]))		{$park_ext=$_POST["park_ext"];}
+if (isset($_GET["park_file_name"]))				{$park_file_name=$_GET["park_file_name"];}
+	elseif (isset($_POST["park_file_name"]))		{$park_file_name=$_POST["park_file_name"];}
+if (isset($_GET["web_form_address"]))				{$web_form_address=$_GET["web_form_address"];}
+	elseif (isset($_POST["web_form_address"]))		{$web_form_address=$_POST["web_form_address"];}
+if (isset($_GET["allow_closers"]))				{$allow_closers=$_GET["allow_closers"];}
+	elseif (isset($_POST["allow_closers"]))		{$allow_closers=$_POST["allow_closers"];}
+if (isset($_GET["hopper_level"]))				{$hopper_level=$_GET["hopper_level"];}
+	elseif (isset($_POST["hopper_level"]))		{$hopper_level=$_POST["hopper_level"];}
+if (isset($_GET["auto_dial_level"]))				{$auto_dial_level=$_GET["auto_dial_level"];}
+	elseif (isset($_POST["auto_dial_level"]))		{$auto_dial_level=$_POST["auto_dial_level"];}
+if (isset($_GET["next_agent_call"]))				{$next_agent_call=$_GET["next_agent_call"];}
+	elseif (isset($_POST["next_agent_call"]))		{$next_agent_call=$_POST["next_agent_call"];}
+if (isset($_GET["local_call_time"]))				{$local_call_time=$_GET["local_call_time"];}
+	elseif (isset($_POST["local_call_time"]))		{$local_call_time=$_POST["local_call_time"];}
+if (isset($_GET["voicemail_ext"]))				{$voicemail_ext=$_GET["voicemail_ext"];}
+	elseif (isset($_POST["voicemail_ext"]))		{$voicemail_ext=$_POST["voicemail_ext"];}
+if (isset($_GET["submit"]))				{$submit=$_GET["submit"];}
+	elseif (isset($_POST["submit"]))		{$submit=$_POST["submit"];}
+if (isset($_GET["list_id"]))				{$list_id=$_GET["list_id"];}
+	elseif (isset($_POST["list_id"]))		{$list_id=$_POST["list_id"];}
+if (isset($_GET["list_name"]))				{$list_name=$_GET["list_name"];}
+	elseif (isset($_POST["list_name"]))		{$list_name=$_POST["list_name"];}
+if (isset($_GET["group_id"]))				{$group_id=$_GET["group_id"];}
+	elseif (isset($_POST["group_id"]))		{$group_id=$_POST["group_id"];}
+if (isset($_GET["group_name"]))				{$group_name=$_GET["group_name"];}
+	elseif (isset($_POST["group_name"]))		{$group_name=$_POST["group_name"];}
+if (isset($_GET["group_color"]))				{$group_color=$_GET["group_color"];}
+	elseif (isset($_POST["group_color"]))		{$group_color=$_POST["group_color"];}
+if (isset($_GET["fronter_display"]))				{$fronter_display=$_GET["fronter_display"];}
+	elseif (isset($_POST["fronter_display"]))		{$fronter_display=$_POST["fronter_display"];}
+if (isset($_GET["user_start"]))				{$user_start=$_GET["user_start"];}
+	elseif (isset($_POST["user_start"]))		{$user_start=$_POST["user_start"];}
+if (isset($_GET["number_of_lines"]))				{$number_of_lines=$_GET["number_of_lines"];}
+	elseif (isset($_POST["number_of_lines"]))		{$number_of_lines=$_POST["number_of_lines"];}
+if (isset($_GET["server_ip"]))				{$server_ip=$_GET["server_ip"];}
+	elseif (isset($_POST["server_ip"]))		{$server_ip=$_POST["server_ip"];}
+if (isset($_GET["conf_exten"]))				{$conf_exten=$_GET["conf_exten"];}
+	elseif (isset($_POST["conf_exten"]))		{$conf_exten=$_POST["conf_exten"];}
+if (isset($_GET["status"]))				{$status=$_GET["status"];}
+	elseif (isset($_POST["status"]))		{$status=$_POST["status"];}
+if (isset($_GET["group_name"]))				{$group_name=$_GET["group_name"];}
+	elseif (isset($_POST["group_name"]))		{$group_name=$_POST["group_name"];}
+if (isset($_GET["dial_status_a"]))				{$dial_status_a=$_GET["dial_status_a"];}
+	elseif (isset($_POST["dial_status_a"]))		{$dial_status_a=$_POST["dial_status_a"];}
+if (isset($_GET["dial_status_b"]))				{$dial_status_b=$_GET["dial_status_b"];}
+	elseif (isset($_POST["dial_status_b"]))		{$dial_status_b=$_POST["dial_status_b"];}
+if (isset($_GET["dial_status_c"]))				{$dial_status_c=$_GET["dial_status_c"];}
+	elseif (isset($_POST["dial_status_c"]))		{$dial_status_c=$_POST["dial_status_c"];}
+if (isset($_GET["dial_status_d"]))				{$dial_status_d=$_GET["dial_status_d"];}
+	elseif (isset($_POST["dial_status_d"]))		{$dial_status_d=$_POST["dial_status_d"];}
+if (isset($_GET["dial_status_e"]))				{$dial_status_e=$_GET["dial_status_e"];}
+	elseif (isset($_POST["dial_status_e"]))		{$dial_status_e=$_POST["dial_status_e"];}
+if (isset($_GET["lead_order"]))				{$lead_order=$_GET["lead_order"];}
+	elseif (isset($_POST["lead_order"]))		{$lead_order=$_POST["lead_order"];}
+if (isset($_GET["dial_timeout"]))				{$dial_timeout=$_GET["dial_timeout"];}
+	elseif (isset($_POST["dial_timeout"]))		{$dial_timeout=$_POST["dial_timeout"];}
+if (isset($_GET["dial_prefix"]))				{$dial_prefix=$_GET["dial_prefix"];}
+	elseif (isset($_POST["dial_prefix"]))		{$dial_prefix=$_POST["dial_prefix"];}
+if (isset($_GET["campaign_cid"]))				{$campaign_cid=$_GET["campaign_cid"];}
+	elseif (isset($_POST["campaign_cid"]))		{$campaign_cid=$_POST["campaign_cid"];}
+if (isset($_GET["campaign_vdad_exten"]))				{$campaign_vdad_exten=$_GET["campaign_vdad_exten"];}
+	elseif (isset($_POST["campaign_vdad_exten"]))		{$campaign_vdad_exten=$_POST["campaign_vdad_exten"];}
+if (isset($_GET["campaign_rec_exten"]))				{$campaign_rec_exten=$_GET["campaign_rec_exten"];}
+	elseif (isset($_POST["campaign_rec_exten"]))		{$campaign_rec_exten=$_POST["campaign_rec_exten"];}
+if (isset($_GET["campaign_recording"]))				{$campaign_recording=$_GET["campaign_recording"];}
+	elseif (isset($_POST["campaign_recording"]))		{$campaign_recording=$_POST["campaign_recording"];}
+if (isset($_GET["campaign_rec_filename"]))				{$campaign_rec_filename=$_GET["campaign_rec_filename"];}
+	elseif (isset($_POST["campaign_rec_filename"]))		{$campaign_rec_filename=$_POST["campaign_rec_filename"];}
+if (isset($_GET["hotkey"]))				{$hotkey=$_GET["hotkey"];}
+	elseif (isset($_POST["hotkey"]))		{$hotkey=$_POST["hotkey"];}
+if (isset($_GET["reset_list"]))				{$reset_list=$_GET["reset_list"];}
+	elseif (isset($_POST["reset_list"]))		{$reset_list=$_POST["reset_list"];}
+if (isset($_GET["old_campaign_id"]))				{$old_campaign_id=$_GET["old_campaign_id"];}
+	elseif (isset($_POST["old_campaign_id"]))		{$old_campaign_id=$_POST["old_campaign_id"];}
+if (isset($_GET["OLDuser_group"]))				{$OLDuser_group=$_GET["OLDuser_group"];}
+	elseif (isset($_POST["OLDuser_group"]))		{$OLDuser_group=$_POST["OLDuser_group"];}
+if (isset($_GET["status_name"]))				{$status_name=$_GET["status_name"];}
+	elseif (isset($_POST["status_name"]))		{$status_name=$_POST["status_name"];}
+if (isset($_GET["selectable"]))				{$selectable=$_GET["selectable"];}
+	elseif (isset($_POST["selectable"]))		{$selectable=$_POST["selectable"];}
+if (isset($_GET["HKstatus"]))				{$HKstatus=$_GET["HKstatus"];}
+	elseif (isset($_POST["HKstatus"]))		{$HKstatus=$_POST["HKstatus"];}
+if (isset($_GET["force_logout"]))				{$force_logout=$_GET["force_logout"];}
+	elseif (isset($_POST["force_logout"]))		{$force_logout=$_POST["force_logout"];}
+if (isset($_GET["phone_login"]))				{$phone_login=$_GET["phone_login"];}
+	elseif (isset($_POST["phone_login"]))		{$phone_login=$_POST["phone_login"];}
+if (isset($_GET["phone_pass"]))				{$phone_pass=$_GET["phone_pass"];}
+	elseif (isset($_POST["phone_pass"]))		{$phone_pass=$_POST["phone_pass"];}
+if (isset($_GET["delete_users"]))				{$delete_users=$_GET["delete_users"];}
+	elseif (isset($_POST["delete_users"]))		{$delete_users=$_POST["delete_users"];}
+if (isset($_GET["delete_user_groups"]))				{$delete_user_groups=$_GET["delete_user_groups"];}
+	elseif (isset($_POST["delete_user_groups"]))		{$delete_user_groups=$_POST["delete_user_groups"];}
+if (isset($_GET["delete_lists"]))				{$delete_lists=$_GET["delete_lists"];}
+	elseif (isset($_POST["delete_lists"]))		{$delete_lists=$_POST["delete_lists"];}
+if (isset($_GET["delete_campaigns"]))				{$delete_campaigns=$_GET["delete_campaigns"];}
+	elseif (isset($_POST["delete_campaigns"]))		{$delete_campaigns=$_POST["delete_campaigns"];}
+if (isset($_GET["delete_ingroups"]))				{$delete_ingroups=$_GET["delete_ingroups"];}
+	elseif (isset($_POST["delete_ingroups"]))		{$delete_ingroups=$_POST["delete_ingroups"];}
+if (isset($_GET["delete_remote_agents"]))				{$delete_remote_agents=$_GET["delete_remote_agents"];}
+	elseif (isset($_POST["delete_remote_agents"]))		{$delete_remote_agents=$_POST["delete_remote_agents"];}
+if (isset($_GET["load_leads"]))				{$load_leads=$_GET["load_leads"];}
+	elseif (isset($_POST["load_leads"]))		{$load_leads=$_POST["load_leads"];}
+if (isset($_GET["campaign_detail"]))				{$campaign_detail=$_GET["campaign_detail"];}
+	elseif (isset($_POST["campaign_detail"]))		{$campaign_detail=$_POST["campaign_detail"];}
+if (isset($_GET["ast_admin_access"]))				{$ast_admin_access=$_GET["ast_admin_access"];}
+	elseif (isset($_POST["ast_admin_access"]))		{$ast_admin_access=$_POST["ast_admin_access"];}
+if (isset($_GET["ast_delete_phones"]))				{$ast_delete_phones=$_GET["ast_delete_phones"];}
+	elseif (isset($_POST["ast_delete_phones"]))		{$ast_delete_phones=$_POST["ast_delete_phones"];}
+if (isset($_GET["CoNfIrM"]))				{$CoNfIrM=$_GET["CoNfIrM"];}
+	elseif (isset($_POST["CoNfIrM"]))		{$CoNfIrM=$_POST["CoNfIrM"];}
+if (isset($_GET["delete_scripts"]))				{$delete_scripts=$_GET["delete_scripts"];}
+	elseif (isset($_POST["delete_scripts"]))		{$delete_scripts=$_POST["delete_scripts"];}
+if (isset($_GET["script_id"]))				{$script_id=$_GET["script_id"];}
+	elseif (isset($_POST["script_id"]))		{$script_id=$_POST["script_id"];}
+if (isset($_GET["script_name"]))				{$script_name=$_GET["script_name"];}
+	elseif (isset($_POST["script_name"]))		{$script_name=$_POST["script_name"];}
+if (isset($_GET["script_comments"]))				{$script_comments=$_GET["script_comments"];}
+	elseif (isset($_POST["script_comments"]))		{$script_comments=$_POST["script_comments"];}
+if (isset($_GET["script_text"]))				{$script_text=$_GET["script_text"];}
+	elseif (isset($_POST["script_text"]))		{$script_text=$_POST["script_text"];}
+if (isset($_GET["reset_hopper"]))				{$reset_hopper=$_GET["reset_hopper"];}
+	elseif (isset($_POST["reset_hopper"]))		{$reset_hopper=$_POST["reset_hopper"];}
+if (isset($_GET["get_call_launch"]))				{$get_call_launch=$_GET["get_call_launch"];}
+	elseif (isset($_POST["get_call_launch"]))		{$get_call_launch=$_POST["get_call_launch"];}
+if (isset($_GET["am_message_exten"]))				{$am_message_exten=$_GET["am_message_exten"];}
+	elseif (isset($_POST["am_message_exten"]))		{$am_message_exten=$_POST["am_message_exten"];}
+if (isset($_GET["amd_send_to_vmx"]))				{$amd_send_to_vmx=$_GET["amd_send_to_vmx"];}
+	elseif (isset($_POST["amd_send_to_vmx"]))		{$amd_send_to_vmx=$_POST["amd_send_to_vmx"];}
+if (isset($_GET["xferconf_a_dtmf"]))				{$xferconf_a_dtmf=$_GET["xferconf_a_dtmf"];}
+	elseif (isset($_POST["xferconf_a_dtmf"]))		{$xferconf_a_dtmf=$_POST["xferconf_a_dtmf"];}
+if (isset($_GET["xferconf_a_number"]))				{$xferconf_a_number=$_GET["xferconf_a_number"];}
+	elseif (isset($_POST["xferconf_a_number"]))		{$xferconf_a_number=$_POST["xferconf_a_number"];}
+if (isset($_GET["xferconf_b_dtmf"]))				{$xferconf_b_dtmf=$_GET["xferconf_b_dtmf"];}
+	elseif (isset($_POST["xferconf_b_dtmf"]))		{$xferconf_b_dtmf=$_POST["xferconf_b_dtmf"];}
+if (isset($_GET["xferconf_b_number"]))				{$xferconf_b_number=$_GET["xferconf_b_number"];}
+	elseif (isset($_POST["xferconf_b_number"]))		{$xferconf_b_number=$_POST["xferconf_b_number"];}
+if (isset($_GET["modify_leads"]))				{$modify_leads=$_GET["modify_leads"];}
+	elseif (isset($_POST["modify_leads"]))		{$modify_leads=$_POST["modify_leads"];}
+if (isset($_GET["hotkeys_active"]))				{$hotkeys_active=$_GET["hotkeys_active"];}
+	elseif (isset($_POST["hotkeys_active"]))		{$hotkeys_active=$_POST["hotkeys_active"];}
+if (isset($_GET["change_agent_campaign"]))				{$change_agent_campaign=$_GET["change_agent_campaign"];}
+	elseif (isset($_POST["change_agent_campaign"]))		{$change_agent_campaign=$_POST["change_agent_campaign"];}
+if (isset($_GET["agent_choose_ingroups"]))				{$agent_choose_ingroups=$_GET["agent_choose_ingroups"];}
+	elseif (isset($_POST["agent_choose_ingroups"]))		{$agent_choose_ingroups=$_POST["agent_choose_ingroups"];}
+if (isset($_GET["alt_number_dialing"]))				{$alt_number_dialing=$_GET["alt_number_dialing"];}
+	elseif (isset($_POST["alt_number_dialing"]))		{$alt_number_dialing=$_POST["alt_number_dialing"];}
+if (isset($_GET["scheduled_callbacks"]))				{$scheduled_callbacks=$_GET["scheduled_callbacks"];}
+	elseif (isset($_POST["scheduled_callbacks"]))		{$scheduled_callbacks=$_POST["scheduled_callbacks"];}
+if (isset($_GET["lead_filter_id"]))				{$lead_filter_id=$_GET["lead_filter_id"];}
+	elseif (isset($_POST["lead_filter_id"]))		{$lead_filter_id=$_POST["lead_filter_id"];}
+if (isset($_GET["lead_filter_name"]))				{$lead_filter_name=$_GET["lead_filter_name"];}
+	elseif (isset($_POST["lead_filter_name"]))		{$lead_filter_name=$_POST["lead_filter_name"];}
+if (isset($_GET["lead_filter_comments"]))				{$lead_filter_comments=$_GET["lead_filter_comments"];}
+	elseif (isset($_POST["lead_filter_comments"]))		{$lead_filter_comments=$_POST["lead_filter_comments"];}
+if (isset($_GET["lead_filter_sql"]))				{$lead_filter_sql=$_GET["lead_filter_sql"];}
+	elseif (isset($_POST["lead_filter_sql"]))		{$lead_filter_sql=$_POST["lead_filter_sql"];}
+if (isset($_GET["agentonly_callbacks"]))				{$agentonly_callbacks=$_GET["agentonly_callbacks"];}
+	elseif (isset($_POST["agentonly_callbacks"]))		{$agentonly_callbacks=$_POST["agentonly_callbacks"];}
+if (isset($_GET["agentcall_manual"]))				{$agentcall_manual=$_GET["agentcall_manual"];}
+	elseif (isset($_POST["agentcall_manual"]))		{$agentcall_manual=$_POST["agentcall_manual"];}
+if (isset($_GET["vicidial_recording"]))				{$vicidial_recording=$_GET["vicidial_recording"];}
+	elseif (isset($_POST["vicidial_recording"]))		{$vicidial_recording=$_POST["vicidial_recording"];}
+if (isset($_GET["vicidial_transfers"]))				{$vicidial_transfers=$_GET["vicidial_transfers"];}
+	elseif (isset($_POST["vicidial_transfers"]))		{$vicidial_transfers=$_POST["vicidial_transfers"];}
+if (isset($_GET["delete_filters"]))				{$delete_filters=$_GET["delete_filters"];}
+	elseif (isset($_POST["delete_filters"]))		{$delete_filters=$_POST["delete_filters"];}
+if (isset($_GET["alter_agent_interface_options"]))	{$alter_agent_interface_options=$_GET["alter_agent_interface_options"];}
+	elseif (isset($_POST["alter_agent_interface_options"]))		{$alter_agent_interface_options=$_POST["alter_agent_interface_options"];}
+if (isset($_GET["closer_default_blended"]))				{$closer_default_blended=$_GET["closer_default_blended"];}
+	elseif (isset($_POST["closer_default_blended"]))	{$closer_default_blended=$_POST["closer_default_blended"];}
+if (isset($_GET["drop_call_seconds"]))			{$drop_call_seconds=$_GET["drop_call_seconds"];}
+	elseif (isset($_POST["drop_call_seconds"]))	{$drop_call_seconds=$_POST["drop_call_seconds"];}
+if (isset($_GET["safe_harbor_message"]))			{$safe_harbor_message=$_GET["safe_harbor_message"];}
+	elseif (isset($_POST["safe_harbor_message"]))	{$safe_harbor_message=$_POST["safe_harbor_message"];}
+if (isset($_GET["safe_harbor_exten"]))				{$safe_harbor_exten=$_GET["safe_harbor_exten"];}
+	elseif (isset($_POST["safe_harbor_exten"]))		{$safe_harbor_exten=$_POST["safe_harbor_exten"];}
+if (isset($_GET["drop_message"]))					{$drop_message=$_GET["drop_message"];}
+	elseif (isset($_POST["drop_message"]))			{$drop_message=$_POST["drop_message"];}
+if (isset($_GET["drop_exten"]))						{$drop_exten=$_GET["drop_exten"];}
+	elseif (isset($_POST["drop_exten"]))			{$drop_exten=$_POST["drop_exten"];}
+if (isset($_GET["call_time_id"]))					{$call_time_id=$_GET["call_time_id"];}
+	elseif (isset($_POST["call_time_id"]))			{$call_time_id=$_POST["call_time_id"];}
+if (isset($_GET["call_time_name"]))					{$call_time_name=$_GET["call_time_name"];}
+	elseif (isset($_POST["call_time_name"]))		{$call_time_name=$_POST["call_time_name"];}
+if (isset($_GET["call_time_comments"]))				{$call_time_comments=$_GET["call_time_comments"];}
+	elseif (isset($_POST["call_time_comments"]))	{$call_time_comments=$_POST["call_time_comments"];}
+if (isset($_GET["ct_default_start"]))				{$ct_default_start=$_GET["ct_default_start"];}
+	elseif (isset($_POST["ct_default_start"]))		{$ct_default_start=$_POST["ct_default_start"];}
+if (isset($_GET["ct_default_stop"]))				{$ct_default_stop=$_GET["ct_default_stop"];}
+	elseif (isset($_POST["ct_default_stop"]))		{$ct_default_stop=$_POST["ct_default_stop"];}
+if (isset($_GET["ct_sunday_start"]))				{$ct_sunday_start=$_GET["ct_sunday_start"];}
+	elseif (isset($_POST["ct_sunday_start"]))		{$ct_sunday_start=$_POST["ct_sunday_start"];}
+if (isset($_GET["ct_sunday_stop"]))					{$ct_sunday_stop=$_GET["ct_sunday_stop"];}
+	elseif (isset($_POST["ct_sunday_stop"]))		{$ct_sunday_stop=$_POST["ct_sunday_stop"];}
+if (isset($_GET["ct_monday_start"]))				{$ct_monday_start=$_GET["ct_monday_start"];}
+	elseif (isset($_POST["ct_monday_start"]))		{$ct_monday_start=$_POST["ct_monday_start"];}
+if (isset($_GET["ct_monday_stop"]))					{$ct_monday_stop=$_GET["ct_monday_stop"];}
+	elseif (isset($_POST["ct_monday_stop"]))		{$ct_monday_stop=$_POST["ct_monday_stop"];}
+if (isset($_GET["ct_tuesday_start"]))				{$ct_tuesday_start=$_GET["ct_tuesday_start"];}
+	elseif (isset($_POST["ct_tuesday_start"]))		{$ct_tuesday_start=$_POST["ct_tuesday_start"];}
+if (isset($_GET["ct_tuesday_stop"]))				{$ct_tuesday_stop=$_GET["ct_tuesday_stop"];}
+	elseif (isset($_POST["ct_tuesday_stop"]))		{$ct_tuesday_stop=$_POST["ct_tuesday_stop"];}
+if (isset($_GET["ct_wednesday_start"]))				{$ct_wednesday_start=$_GET["ct_wednesday_start"];}
+	elseif (isset($_POST["ct_wednesday_start"]))	{$ct_wednesday_start=$_POST["ct_wednesday_start"];}
+if (isset($_GET["ct_wednesday_stop"]))				{$ct_wednesday_stop=$_GET["ct_wednesday_stop"];}
+	elseif (isset($_POST["ct_wednesday_stop"]))		{$ct_wednesday_stop=$_POST["ct_wednesday_stop"];}
+if (isset($_GET["ct_thursday_start"]))				{$ct_thursday_start=$_GET["ct_thursday_start"];}
+	elseif (isset($_POST["ct_thursday_start"]))		{$ct_thursday_start=$_POST["ct_thursday_start"];}
+if (isset($_GET["ct_thursday_stop"]))				{$ct_thursday_stop=$_GET["ct_thursday_stop"];}
+	elseif (isset($_POST["ct_thursday_stop"]))		{$ct_thursday_stop=$_POST["ct_thursday_stop"];}
+if (isset($_GET["ct_friday_start"]))				{$ct_friday_start=$_GET["ct_friday_start"];}
+	elseif (isset($_POST["ct_friday_start"]))		{$ct_friday_start=$_POST["ct_friday_start"];}
+if (isset($_GET["ct_friday_stop"]))					{$ct_friday_stop=$_GET["ct_friday_stop"];}
+	elseif (isset($_POST["ct_friday_stop"]))		{$ct_friday_stop=$_POST["ct_friday_stop"];}
+if (isset($_GET["ct_saturday_start"]))				{$ct_saturday_start=$_GET["ct_saturday_start"];}
+	elseif (isset($_POST["ct_saturday_start"]))		{$ct_saturday_start=$_POST["ct_saturday_start"];}
+if (isset($_GET["ct_saturday_stop"]))				{$ct_saturday_stop=$_GET["ct_saturday_stop"];}
+	elseif (isset($_POST["ct_saturday_stop"]))		{$ct_saturday_stop=$_POST["ct_saturday_stop"];}
+if (isset($_GET["state_call_time_state"]))			{$state_call_time_state=$_GET["state_call_time_state"];}
+	elseif (isset($_POST["state_call_time_state"]))	{$state_call_time_state=$_POST["state_call_time_state"];}
+if (isset($_GET["state_rule"]))						{$state_rule=$_GET["state_rule"];}
+	elseif (isset($_POST["state_rule"]))			{$state_rule=$_POST["state_rule"];}
+if (isset($_GET["delete_call_times"]))				{$delete_call_times=$_GET["delete_call_times"];}
+	elseif (isset($_POST["delete_call_times"]))		{$delete_call_times=$_POST["delete_call_times"];}
+if (isset($_GET["modify_call_times"]))				{$modify_call_times=$_GET["modify_call_times"];}
+	elseif (isset($_POST["modify_call_times"]))		{$modify_call_times=$_POST["modify_call_times"];}
+if (isset($_GET["wrapup_seconds"]))					{$wrapup_seconds=$_GET["wrapup_seconds"];}
+	elseif (isset($_POST["wrapup_seconds"]))		{$wrapup_seconds=$_POST["wrapup_seconds"];}
+if (isset($_GET["wrapup_message"]))					{$wrapup_message=$_GET["wrapup_message"];}
+	elseif (isset($_POST["wrapup_message"]))		{$wrapup_message=$_POST["wrapup_message"];}
+if (isset($_GET["phone_number"]))					{$phone_number=$_GET["phone_number"];}
+	elseif (isset($_POST["phone_number"]))			{$phone_number=$_POST["phone_number"];}
+if (isset($_GET["use_internal_dnc"]))				{$use_internal_dnc=$_GET["use_internal_dnc"];}
+	elseif (isset($_POST["use_internal_dnc"]))		{$use_internal_dnc=$_POST["use_internal_dnc"];}
+if (isset($_GET["attempt_delay"]))					{$attempt_delay=$_GET["attempt_delay"];}
+	elseif (isset($_POST["attempt_delay"]))			{$attempt_delay=$_POST["attempt_delay"];}
+if (isset($_GET["attempt_maximum"]))				{$attempt_maximum=$_GET["attempt_maximum"];}
+	elseif (isset($_POST["attempt_maximum"]))		{$attempt_maximum=$_POST["attempt_maximum"];}
+
+	if (isset($script_id)) {$script_id= strtoupper($script_id);}
+	if (isset($lead_filter_id)) {$lead_filter_id = strtoupper($lead_filter_id);}
+
+##### BEGIN VARIABLE FILTERING FOR SECURITY #####
+
+### DIGITS ONLY ###
+$user_level = ereg_replace("[^0-9]","",$user_level);
+$wrapup_seconds = ereg_replace("[^0-9]","",$wrapup_seconds);
+$xferconf_a_number = ereg_replace("[^0-9]","",$xferconf_a_number);
+$xferconf_b_number = ereg_replace("[^0-9]","",$xferconf_b_number);
+$drop_call_seconds = ereg_replace("[^0-9]","",$drop_call_seconds);
+$voicemail_ext = ereg_replace("[^0-9]","",$voicemail_ext);
+$safe_harbor_exten = ereg_replace("[^0-9]","",$safe_harbor_exten);
+$am_message_exten = ereg_replace("[^0-9]","",$am_message_exten);
+$campaign_rec_exten = ereg_replace("[^0-9]","",$campaign_rec_exten);
+$campaign_vdad_exten = ereg_replace("[^0-9]","",$campaign_vdad_exten);
+$drop_exten = ereg_replace("[^0-9]","",$drop_exten);
+$dial_timeout = ereg_replace("[^0-9]","",$dial_timeout);
+$park_ext = ereg_replace("[^0-9]","",$park_ext);
+$hopper_level = ereg_replace("[^0-9]","",$hopper_level);
+$agent_choose_ingroups = ereg_replace("[^0-9]","",$agent_choose_ingroups);
+$hotkeys_active = ereg_replace("[^0-9]","",$hotkeys_active);
+$agentonly_callbacks = ereg_replace("[^0-9]","",$agentonly_callbacks);
+$agentcall_manual = ereg_replace("[^0-9]","",$agentcall_manual);
+$vicidial_recording = ereg_replace("[^0-9]","",$vicidial_recording);
+$vicidial_transfers = ereg_replace("[^0-9]","",$vicidial_transfers);
+$closer_default_blended = ereg_replace("[^0-9]","",$closer_default_blended);
+$alter_agent_interface_options = ereg_replace("[^0-9]","",$alter_agent_interface_options);
+$delete_users = ereg_replace("[^0-9]","",$delete_users);
+$delete_user_groups = ereg_replace("[^0-9]","",$delete_user_groups);
+$delete_scripts = ereg_replace("[^0-9]","",$delete_scripts);
+$delete_remote_agents = ereg_replace("[^0-9]","",$delete_remote_agents);
+$delete_lists = ereg_replace("[^0-9]","",$delete_lists);
+$delete_ingroups = ereg_replace("[^0-9]","",$delete_ingroups);
+$delete_filters = ereg_replace("[^0-9]","",$delete_filters);
+$delete_campaigns = ereg_replace("[^0-9]","",$delete_campaigns);
+$delete_call_times = ereg_replace("[^0-9]","",$delete_call_times);
+$load_leads = ereg_replace("[^0-9]","",$delete_call_times);
+$campaign_detail = ereg_replace("[^0-9]","",$campaign_detail);
+$ast_delete_phones = ereg_replace("[^0-9]","",$ast_delete_phones);
+$ast_admin_access = ereg_replace("[^0-9]","",$ast_admin_access);
+$modify_leads = ereg_replace("[^0-9]","",$modify_leads);
+$change_agent_campaign = ereg_replace("[^0-9]","",$change_agent_campaign);
+$modify_call_times = ereg_replace("[^0-9]","",$modify_call_times);
+$ct_wednesday_stop = ereg_replace("[^0-9]","",$ct_wednesday_stop);
+$ct_wednesday_start = ereg_replace("[^0-9]","",$ct_wednesday_start);
+$ct_tuesday_stop = ereg_replace("[^0-9]","",$ct_tuesday_stop);
+$ct_tuesday_start = ereg_replace("[^0-9]","",$ct_tuesday_start);
+$ct_thursday_stop = ereg_replace("[^0-9]","",$ct_thursday_stop);
+$ct_thursday_start = ereg_replace("[^0-9]","",$ct_thursday_start);
+$ct_sunday_stop = ereg_replace("[^0-9]","",$ct_sunday_stop);
+$ct_sunday_start = ereg_replace("[^0-9]","",$ct_sunday_start);
+$ct_saturday_stop = ereg_replace("[^0-9]","",$ct_saturday_stop);
+$ct_saturday_start = ereg_replace("[^0-9]","",$ct_saturday_start);
+$ct_monday_stop = ereg_replace("[^0-9]","",$ct_monday_stop);
+$ct_monday_start = ereg_replace("[^0-9]","",$ct_monday_start);
+$ct_friday_stop = ereg_replace("[^0-9]","",$ct_friday_stop);
+$ct_friday_start = ereg_replace("[^0-9]","",$ct_friday_start);
+$ct_default_stop = ereg_replace("[^0-9]","",$ct_default_stop);
+$ct_default_start = ereg_replace("[^0-9]","",$ct_default_start);
+$number_of_lines = ereg_replace("[^0-9]","",$number_of_lines);
+$user_start = ereg_replace("[^0-9]","",$user_start);
+$phone_number = ereg_replace("[^0-9]","",$phone_number);
+$remote_agent_id = ereg_replace("[^0-9]","",$remote_agent_id);
+$conf_exten = ereg_replace("[^0-9]","",$conf_exten);
+$attempt_maximum = ereg_replace("[^0-9]","",$attempt_maximum);
+$attempt_delay = ereg_replace("[^0-9]","",$attempt_delay);
+$hotkey = ereg_replace("[^0-9]","",$hotkey);
+$list_id = ereg_replace("[^0-9]","",$list_id);
+
+### Y or N ONLY ###
+$active = ereg_replace("[^NY]","",$active);
+$allow_closers = ereg_replace("[^NY]","",$allow_closers);
+$reset_hopper = ereg_replace("[^NY]","",$reset_hopper);
+$amd_send_to_vmx = ereg_replace("[^NY]","",$amd_send_to_vmx);
+$alt_number_dialing = ereg_replace("[^NY]","",$alt_number_dialing);
+$safe_harbor_message = ereg_replace("[^NY]","",$safe_harbor_message);
+$selectable = ereg_replace("[^NY]","",$selectable);
+$reset_list = ereg_replace("[^NY]","",$reset_list);
+$fronter_display = ereg_replace("[^NY]","",$fronter_display);
+$drop_message = ereg_replace("[^NY]","",$drop_message);
+$use_internal_dnc = ereg_replace("[^NY]","",$use_internal_dnc);
+
+### ALPHA-NUMERIC ONLY ###
+$user = ereg_replace("[^0-9a-zA-Z]","",$user);
+$pass = ereg_replace("[^0-9a-zA-Z]","",$pass);
+$PHP_AUTH_USER = ereg_replace("[^0-9a-zA-Z]","",$PHP_AUTH_USER);
+$PHP_AUTH_PW = ereg_replace("[^0-9a-zA-Z]","",$PHP_AUTH_PW);
+$script_id = ereg_replace("[^0-9a-zA-Z]","",$script_id);
+$submit = ereg_replace("[^0-9a-zA-Z]","",$submit);
+$CoNfIrM = ereg_replace("[^0-9a-zA-Z]","",$CoNfIrM);
+$campaign_cid = ereg_replace("[^0-9a-zA-Z]","",$campaign_cid);
+$get_call_launch = ereg_replace("[^0-9a-zA-Z]","",$get_call_launch);
+$campaign_recording = ereg_replace("[^0-9a-zA-Z]","",$campaign_recording);
+$ADD = ereg_replace("[^0-9a-zA-Z]","",$ADD);
+$dial_prefix = ereg_replace("[^0-9a-zA-Z]","",$dial_prefix);
+$state_call_time_state = ereg_replace("[^0-9a-zA-Z]","",$state_call_time_state);
+$scheduled_callbacks = ereg_replace("[^0-9a-zA-Z]","",$scheduled_callbacks);
+
+### DIGITS and Dots
+$server_ip = ereg_replace("[^\.0-9]","",$server_ip);
+$auto_dial_level = ereg_replace("[^\.0-9]","",$auto_dial_level);
+
+### DIGITS and spaces and hash and star and comma
+$xferconf_a_dtmf = ereg_replace("[^ \,\*\#0-9]","",$xferconf_a_dtmf);
+$xferconf_b_dtmf = ereg_replace("[^ \,\*\#0-9]","",$xferconf_b_dtmf);
+
+### ALPHA-NUMERIC and underscore and dash
+$dial_status_e = ereg_replace("[^-\_0-9a-zA-Z]","",$dial_status_e);
+$dial_status_d = ereg_replace("[^-\_0-9a-zA-Z]","",$dial_status_d);
+$dial_status_c = ereg_replace("[^-\_0-9a-zA-Z]","",$dial_status_c);
+$dial_status_b = ereg_replace("[^-\_0-9a-zA-Z]","",$dial_status_b);
+$dial_status_a = ereg_replace("[^-\_0-9a-zA-Z]","",$dial_status_a);
+$stage = ereg_replace("[^-\_0-9a-zA-Z]","",$stage);
+$lead_filter_id = ereg_replace("[^-\_0-9a-zA-Z]","",$lead_filter_id);
+$campaign_id = ereg_replace("[^-\_0-9a-zA-Z]","",$campaign_id);
+$old_campaign_id = ereg_replace("[^-\_0-9a-zA-Z]","",$old_campaign_id);
+$park_file_name = ereg_replace("[^-\_0-9a-zA-Z]","",$park_file_name);
+$next_agent_call = ereg_replace("[^-\_0-9a-zA-Z]","",$next_agent_call);
+$local_call_time = ereg_replace("[^-\_0-9a-zA-Z]","",$local_call_time);
+$call_time_id = ereg_replace("[^-\_0-9a-zA-Z]","",$call_time_id);
+$phone_pass = ereg_replace("[^-\_0-9a-zA-Z]","",$phone_pass);
+$phone_login = ereg_replace("[^-\_0-9a-zA-Z]","",$phone_login);
+$group_id = ereg_replace("[^-\_0-9a-zA-Z]","",$group_id);
+$user_group = ereg_replace("[^-\_0-9a-zA-Z]","",$user_group);
+$OLDuser_group = ereg_replace("[^-\_0-9a-zA-Z]","",$OLDuser_group);
+$state_rule = ereg_replace("[^-\_0-9a-zA-Z]","",$state_rule);
+
+### ALPHA-NUMERIC and spaces
+$lead_order = ereg_replace("[^ 0-9a-zA-Z]","",$lead_order);
+### ALPHA-NUMERIC and hash
+$group_color = ereg_replace("[^\#0-9a-zA-Z]","",$group_color);
+
+### ALPHA-NUMERIC and spaces dots, commas, dashes, underscores
+$group_name = ereg_replace("[^ \.\,-\_0-9a-zA-Z]","",$group_name);
+$campaign_name = ereg_replace("[^ \.\,-\_0-9a-zA-Z]","",$campaign_name);
+$full_name = ereg_replace("[^ \.\,-\_0-9a-zA-Z]","",$full_name);
+$wrapup_message = ereg_replace("[^ \.\,-\_0-9a-zA-Z]","",$wrapup_message);
+$status = ereg_replace("[^ \.\,-\_0-9a-zA-Z]","",$status);
+$HKstatus = ereg_replace("[^ \.\,-\_0-9a-zA-Z]","",$HKstatus);
+$status_name = ereg_replace("[^ \.\,-\_0-9a-zA-Z]","",$status_name);
+$script_name = ereg_replace("[^ \.\,-\_0-9a-zA-Z]","",$script_name);
+$script_comments = ereg_replace("[^ \.\,-\_0-9a-zA-Z]","",$script_comments);
+$list_name = ereg_replace("[^ \.\,-\_0-9a-zA-Z]","",$list_name);
+$lead_filter_name = ereg_replace("[^ \.\,-\_0-9a-zA-Z]","",$lead_filter_name);
+$lead_filter_comments = ereg_replace("[^ \.\,-\_0-9a-zA-Z]","",$lead_filter_comments);
+$campaign_rec_filename = ereg_replace("[^ \.\,-\_0-9a-zA-Z]","",$campaign_rec_filename);
+$call_time_name = ereg_replace("[^ \.\,-\_0-9a-zA-Z]","",$call_time_name);
+$call_time_comments = ereg_replace("[^ \.\,-\_0-9a-zA-Z]","",$call_time_comments);
+
+### remove semi-colons ###
+$lead_filter_sql = ereg_replace(";","",$lead_filter_sql);
+
+### VARIABLES TO BE mysql_real_escape_string ###
+# $web_form_address
+# $script_text
+
+##### END VARIABLE FILTERING FOR SECURITY #####
+
+
+# AST GUI database administration
+# admin.php
+# 
+# CHANGES
+# 50315-1110 - Added Custom Campaign Statuses
+# 50317-1438 - Added Fronter Display var to inbound groups
+# 50322-1355 - Added custom callerID per campaign
+# 50517-1356 - Added user_groups sections and user_group to vicidial_users
+# 50517-1440 - Added ability to logout (must click OK with empty user/pass)
+# 50602-1622 - Added lead loader pages to load new files into vicidial_list
+# 50620-1351 - Added custom vdad transfer AGI extension per campaign
+# 50810-1414 - modified in groups to kick out spaces and dashes
+# 50908-2136 - Added Custom Campaign HotKeys
+# 50914-0950 - Fixed user search by user_group
+# 50926-1358 - Modified to allow for language translation
+# 50926-1615 - Added WeBRooTWritablE write controls
+# 51020-1008 - Added editable web address and park ext - NEW dial campaigns
+# 51020-1056 - Added fields and help for campaign recording control
+# 51123-1335 - Altered code to function in php globals=off
+# 51208-1038 - Added user_level changes, function controls and default user phones
+# 51208-1556 - Added deletion of users/lists/campaigns/in groups/remote agents
+# 51213-1706 - Added add/delete/modify vicidial scripts
+# 51214-1737 - Added preview of vicidial script in popup window
+# 51219-1225 - Added campaign and ingroups script selector and get_call_launch field
+# 51222-1055 - Added am_message_exten to campaigns to allow for AM Message button
+# 51222-1125 - Fixed new vicidial_campaigns default values not being assigned bug
+# 51222-1156 - Added LOG OUT ALL AGENTS ON THIS CAMPAIGN button to campaign screen
+# 60204-0659 - Fixed hopper reset bug
+# 60207-1413 - Added AMD send to voicemail extension and xfer-conf dtmf presets
+# 60213-1100 - Added several vicidial_users permissions fields
+# 60215-1319 - Added On-hold CallBacks display and links
+# 60227-1226 - Fixed vicidial_inbound_groups insert bug
+# 60413-1308 - Fixed list display to have 1 row/status: count and time zone tables
+#            - Added status name in selected dial statuses in campaign screen
+# 60417-1416 - Added vicidial_lead_filters sections
+#            - Changed the header links to color-coded sectional with sublinks below
+#            - Added filter name and script name to campaign and in-group modify sections
+#            - Added callback and alt dial options to campaigns section
+#            - Added callback, alt dial and other options to users section
+# 60419-1628 - Alter Callbacks display to include status and LIVE listings, reordered
+# 60421-1441 - check GET/POST vars lines with isset to not trigger PHP NOTICES
+# 60425-2355 - Added agent options to vicidial_users, reformatted user page
+# 60502-1627 - Added drop_call_seconds and safe_harbor_ fields to campaign screen
+# 60503-1228 - Added drop_call_seconds and drop_ fields to inbound groups screen
+# 60505-1117 - Added initial framework for new local_call_times tables and definitions
+# 60506-1033 - More revisions to the local_call_time section
+# 60508-1354 - Finished call_times and state_call_times sections
+#            - Added modify/delete options for call_times
+# 60509-1311 - Functionalize campaign dialable leads calculation
+#            - Change state_call_times selection from call_times to only allow one per state
+#            - Added dialable leads count popup to campaign screen if auto-calc is disabled
+#            - Added test dialable leads count popup to filter screen 
+# 60510-1050 - Added Wrapup seconds and Wrapup message to campaigns screen
+# 60608-1401 - Added allowable inbound_groups checkboxes to CLOSER campaign detail screen
+# 60609-1051 - Added add-to-dnc in LISTS section
+# 60613-1415 - Added lead recycling options to campaign detail screen
+# 60619-1523 - Added variable filtering to eliminate SQL injection attack threat
+# 60622-1216 - Fixed HotKey addition form issues and variable filtering
+# 60623-1159 - Fixed Scheduled Callbacks over-filtering bug and filter_sql bug
+#
+
+# make sure you have added a user to the vicidial_users MySQL table with at least user_level 8 to access this page the first time
+
+$version = '1.1.12-3';
+$build = '60623-1159';
+
+$STARTtime = date("U");
+
+if ($force_logout)
+{
+  if( (strlen($PHP_AUTH_USER)>0) or (strlen($PHP_AUTH_PW)>0) )
+	{
+    Header("WWW-Authenticate: Basic realm=\"VICI-PROJECTS\"");
+    Header("HTTP/1.0 401 Unauthorized");
+	}
+    echo "You have now logged out. Thank you\n";
+    exit;
+}
+
+	$stmt="SELECT count(*) from vicidial_users where user='$PHP_AUTH_USER' and pass='$PHP_AUTH_PW' and user_level > 7;";
+	if ($DB) {echo "|$stmt|\n";}
+	$rslt=mysql_query($stmt, $link);
+	$row=mysql_fetch_row($rslt);
+	$auth=$row[0];
+
+if ($WeBRooTWritablE > 0)
+	{$fp = fopen ("./project_auth_entries.txt", "a");}
+
+$date = date("r");
+$ip = getenv("REMOTE_ADDR");
+$browser = getenv("HTTP_USER_AGENT");
+
+  if( (strlen($PHP_AUTH_USER)<2) or (strlen($PHP_AUTH_PW)<2) or ($auth<1))
+	{
+    Header("WWW-Authenticate: Basic realm=\"VICI-PROJECTS\"");
+    Header("HTTP/1.0 401 Unauthorized");
+    echo "Invalid Username/Password: |$PHP_AUTH_USER|$PHP_AUTH_PW|\n";
+    exit;
+	}
+  else
+	{
+
+	if($auth>0)
+		{
+		$office_no=strtoupper($PHP_AUTH_USER);
+		$password=strtoupper($PHP_AUTH_PW);
+			$stmt="SELECT * from vicidial_users where user='$PHP_AUTH_USER' and pass='$PHP_AUTH_PW'";
+			$rslt=mysql_query($stmt, $link);
+			$row=mysql_fetch_row($rslt);
+			$LOGfullname				=$row[3];
+			$LOGuser_level				=$row[4];
+			$LOGdelete_users			=$row[8];
+			$LOGdelete_user_groups		=$row[9];
+			$LOGdelete_lists			=$row[10];
+			$LOGdelete_campaigns		=$row[11];
+			$LOGdelete_ingroups			=$row[12];
+			$LOGdelete_remote_agents	=$row[13];
+			$LOGload_leads				=$row[14];
+			$LOGcampaign_detail			=$row[15];
+			$LOGdelete_scripts			=$row[18];
+			$LOGdelete_filters			=$row[29];
+			$LOGalter_agent_interface	=$row[30];
+			$LOGdelete_call_times		=$row[32];
+			$LOGmodify_call_times		=$row[33];
+
+		if ($WeBRooTWritablE > 0)
+			{
+			fwrite ($fp, "VICIDIAL|GOOD|$date|$PHP_AUTH_USER|$PHP_AUTH_PW|$ip|$browser|$LOGfullname|\n");
+			fclose($fp);
+			}
+		}
+	else
+		{
+		if ($WeBRooTWritablE > 0)
+			{
+			fwrite ($fp, "VICIDIAL|FAIL|$date|$PHP_AUTH_USER|$PHP_AUTH_PW|$ip|$browser|\n");
+			fclose($fp);
+			}
+		}
+	}
+
+header ("Content-type: text/html; charset=utf-8");
+echo "<html>\n";
+echo "<head>\n";
+echo "<!-- VERSION: $version   BUILD: $build   ADD: $ADD   PHP_SELF: $PHP_SELF-->\n";
+echo "<title>VICIDIAL ADMIN: ";
+
+if (!isset($ADD))   {$ADD=0;}
+
+if ($ADD==1)			{$hh='users';		echo "Add New User";}
+if ($ADD==11)			{$hh='campaigns';	echo "Add New Campaign";}
+if ($ADD==111)			{$hh='lists';		echo "Add New List";}
+if ($ADD==121)			{$hh='lists';		echo "Add New DNC";}
+if ($ADD==1111)			{$hh='ingroups';	echo "Add New In-Group";}
+if ($ADD==11111)		{$hh='remoteagent';	echo "Add New Remote Agents";}
+if ($ADD==111111)		{$hh='usergroups';	echo "Add New Users Group";}
+if ($ADD==1111111)		{$hh='scripts';		echo "Add New Script";}
+if ($ADD==11111111)		{$hh='filters';		echo "Add New Filter";}
+if ($ADD==111111111)	{$hh='times';		echo "Add New Call Time";}
+if ($ADD==1111111111)	{$hh='times';		echo "Add New State Call Time";}
+if ($ADD==2)			{$hh='users';		echo "New User Addition";}
+if ($ADD==21)			{$hh='campaigns';	echo "New Campaign Addition";}
+if ($ADD==22)			{$hh='campaigns';	echo "New Campaign Status Addition";}
+if ($ADD==23)			{$hh='campaigns';	echo "New Campaign HotKey Addition";}
+if ($ADD==25)			{$hh='campaigns';	echo "New Campaign Lead Recycle Addition";}
+if ($ADD==211)			{$hh='lists';		echo "New List Addition";}
+if ($ADD==2111)			{$hh='ingroups';	echo "New In-Group Addition";}
+if ($ADD==21111)		{$hh='remoteagent';	echo "New Remote Agents Addition";}
+if ($ADD==211111)		{$hh='usergroups';	echo "New Users Group Addition";}
+if ($ADD==2111111)		{$hh='scripts';		echo "New Script Addition";}
+if ($ADD==21111111)		{$hh='filters';		echo "New Filter Addition";}
+if ($ADD==211111111)	{$hh='times';		echo "New Call Time Addition";}
+if ($ADD==2111111111)	{$hh='times';		echo "New State Call Time Addition";}
+if ($ADD==3)			{$hh='users';		echo "Modify User";}
+if ($ADD==31)			{$hh='campaigns';	echo "Modify Campaign";}
+if ($ADD==34)			{$hh='campaigns';	echo "Modify Campaign - Basic View";}
+if ($ADD==311)			{$hh='lists';		echo "Modify List";}
+if ($ADD==3111)			{$hh='ingroups';	echo "Modify In-Group";}
+if ($ADD==31111)		{$hh='remoteagent';	echo "Modify Remote Agents";}
+if ($ADD==311111)		{$hh='usergroups';	echo "Modify Users Groups";}
+if ($ADD==3111111)		{$hh='scripts';		echo "Modify Script";}
+if ($ADD==31111111)		{$hh='filters';		echo "Modify Filter";}
+if ($ADD==311111111)	{$hh='times';		echo "Modify Call Time";}
+if ($ADD==321111111)	{$hh='times';		echo "Modify Call Time State Definitions List";}
+if ($ADD==3111111111)	{$hh='times';		echo "Modify State Call Time";}
+if ($ADD=="4A")			{$hh='users';		echo "Modify User - Admin";}
+if ($ADD=="4B")			{$hh='users';		echo "Modify User - Admin";}
+if ($ADD==4)			{$hh='users';		echo "Modify User";}
+if ($ADD==41)			{$hh='campaigns';	echo "Modify Campaign";}
+if ($ADD==42)			{$hh='campaigns';	echo "Modify Campaign Status";}
+if ($ADD==43)			{$hh='campaigns';	echo "Modify Campaign HotKey";}
+if ($ADD==44)			{$hh='campaigns';	echo "Modify Campaign - Basic View";}
+if ($ADD==45)			{$hh='campaigns';	echo "Modify Campaign Lead Recycle";}
+if ($ADD==411)			{$hh='lists';		echo "Modify List";}
+if ($ADD==4111)			{$hh='ingroups';	echo "Modify In-Group";}
+if ($ADD==41111)		{$hh='remoteagent';	echo "Modify Remote Agents";}
+if ($ADD==411111)		{$hh='usergroups';	echo "Modify Users Groups";}
+if ($ADD==4111111)		{$hh='scripts';		echo "Modify Script";}
+if ($ADD==41111111)		{$hh='filters';		echo "Modify Filter";}
+if ($ADD==411111111)	{$hh='times';		echo "Modify Call Time";}
+if ($ADD==4111111111)	{$hh='times';		echo "Modify State Call Time";}
+if ($ADD==5)			{$hh='users';		echo "Delete User";}
+if ($ADD==51)			{$hh='campaigns';	echo "Delete Campaign";}
+if ($ADD==52)			{$hh='campaigns';	echo "Logout Agents";}
+if ($ADD==511)			{$hh='lists';		echo "Delete List";}
+if ($ADD==5111)			{$hh='ingroups';	echo "Delete In-Group";}
+if ($ADD==51111)		{$hh='remoteagent';	echo "Delete Remote Agents";}
+if ($ADD==511111)		{$hh='usergroups';	echo "Delete Users Group";}
+if ($ADD==5111111)		{$hh='scripts';		echo "Delete Script";}
+if ($ADD==51111111)		{$hh='filters';		echo "Delete Filter";}
+if ($ADD==511111111)	{$hh='times';		echo "Delete Call Time";}
+if ($ADD==5111111111)	{$hh='times';		echo "Delete State Call Time";}
+if ($ADD==6)			{$hh='users';		echo "Delete User";}
+if ($ADD==61)			{$hh='campaigns';	echo "Delete Campaign";}
+if ($ADD==62)			{$hh='campaigns';	echo "Logout Agents";}
+if ($ADD==65)			{$hh='campaigns';	echo "Delete Lead Recycle";}
+if ($ADD==611)			{$hh='lists';		echo "Delete List";}
+if ($ADD==6111)			{$hh='ingroups';	echo "Delete In-Group";}
+if ($ADD==61111)		{$hh='remoteagent';	echo "Delete Remote Agents";}
+if ($ADD==611111)		{$hh='usergroups';	echo "Delete Users Group";}
+if ($ADD==6111111)		{$hh='scripts';		echo "Delete Script";}
+if ($ADD==61111111)		{$hh='filters';		echo "Delete Filter";}
+if ($ADD==611111111)	{$hh='times';		echo "Delete Call Time";}
+if ($ADD==6111111111)	{$hh='times';		echo "Delete State Call Time";}
+if ($ADD==73)			{$hh='campaigns';	echo "Dialable Lead Count";}
+if ($ADD==7111111)		{$hh='scripts';		echo "Preview Script";}
+if ($ADD==0)			{$hh='users';		echo "Users List";}
+if ($ADD==8)			{$hh='users';		echo "CallBacks Within Agent";}
+if ($ADD==81)			{$hh='campaigns';	echo "CallBacks Within Campaign";}
+if ($ADD==811)			{$hh='campaigns';	echo "CallBacks Within List";}
+if ($ADD==10)			{$hh='campaigns';	echo "Campaigns";}
+if ($ADD==100)			{$hh='lists';		echo "Lists";}
+if ($ADD==1000)			{$hh='ingroups';	echo "In-Groups";}
+if ($ADD==10000)		{$hh='remoteagent';	echo "Remote Agents";}
+if ($ADD==100000)		{$hh='usergroups';	echo "User Groups";}
+if ($ADD==1000000)		{$hh='scripts';		echo "Scripts";}
+if ($ADD==10000000)		{$hh='filters';		echo "Filters";}
+if ($ADD==100000000)	{$hh='times';		echo "Call Times";}
+if ($ADD==1000000000)	{$hh='times';		echo "State Call Times";}
+if ($ADD==55)			{$hh='users';		echo "Search Form";}
+if ($ADD==66)			{$hh='users';		echo "Search Results";}
+if ($ADD==99999)		{$hh='users';		echo "HELP";}
+
+if ( ($ADD>9) && ($ADD < 99998) )
+	{
+	##### get scripts listing for dynamic pulldown
+	$stmt="SELECT script_id,script_name from vicidial_scripts order by script_id";
+	$rslt=mysql_query($stmt, $link);
+	$scripts_to_print = mysql_num_rows($rslt);
+	$scripts_list="<option value=\"\">NONE</option>\n";
+
+	$o=0;
+	while ($scripts_to_print > $o)
+		{
+		$rowx=mysql_fetch_row($rslt);
+		$scripts_list .= "<option value=\"$rowx[0]\">$rowx[0] - $rowx[1]</option>\n";
+		$scriptname_list["$rowx[0]"] = "$rowx[1]";
+		$o++;
+		}
+
+	##### get filters listing for dynamic pulldown
+	$stmt="SELECT lead_filter_id,lead_filter_name,lead_filter_sql from vicidial_lead_filters order by lead_filter_id";
+	$rslt=mysql_query($stmt, $link);
+	$filters_to_print = mysql_num_rows($rslt);
+	$filters_list="<option value=\"\">NONE</option>\n";
+
+	$o=0;
+	while ($filters_to_print > $o)
+		{
+		$rowx=mysql_fetch_row($rslt);
+		$filters_list .= "<option value=\"$rowx[0]\">$rowx[0] - $rowx[1]</option>\n";
+		$filtername_list["$rowx[0]"] = "$rowx[1]";
+		$filtersql_list["$rowx[0]"] = "$rowx[2]";
+		$o++;
+		}
+
+	##### get call_times listing for dynamic pulldown
+	$stmt="SELECT call_time_id,call_time_name from vicidial_call_times order by call_time_id";
+	$rslt=mysql_query($stmt, $link);
+	$times_to_print = mysql_num_rows($rslt);
+
+	$o=0;
+	while ($times_to_print > $o)
+		{
+		$rowx=mysql_fetch_row($rslt);
+		$call_times_list .= "<option value=\"$rowx[0]\">$rowx[0] - $rowx[1]</option>\n";
+		$call_timename_list["$rowx[0]"] = "$rowx[1]";
+		$o++;
+		}
+	}
+
+if ( ( (strlen($ADD)>4) && ($ADD < 99998) ) or ($ADD==3) or ($ADD==21) or ($ADD==31) or ($ADD==41) or ($ADD=="4A")  or ($ADD=="4B") )
+	{
+	##### get server listing for dynamic pulldown
+	$stmt="SELECT server_ip,server_description from servers order by server_ip";
+	$rslt=mysql_query($stmt, $link);
+	$servers_to_print = mysql_num_rows($rslt);
+	$servers_list='';
+
+	$o=0;
+	while ($servers_to_print > $o)
+		{
+		$rowx=mysql_fetch_row($rslt);
+		$servers_list .= "<option value=\"$rowx[0]\">$rowx[0] - $rowx[1]</option>\n";
+		$o++;
+		}
+
+	##### get campaigns listing for dynamic pulldown
+	$stmt="SELECT campaign_id,campaign_name from vicidial_campaigns order by campaign_id";
+	$rslt=mysql_query($stmt, $link);
+	$campaigns_to_print = mysql_num_rows($rslt);
+	$campaigns_list='';
+
+	$o=0;
+	while ($campaigns_to_print > $o)
+		{
+		$rowx=mysql_fetch_row($rslt);
+		$campaigns_list .= "<option value=\"$rowx[0]\">$rowx[0] - $rowx[1]</option>\n";
+		$o++;
+		}
+
+	##### get inbound groups listing for checkboxes
+	if ($ADD==31)
+	{
+	$stmt="SELECT closer_campaigns from vicidial_campaigns where campaign_id='$campaign_id';";
+	$rslt=mysql_query($stmt, $link);
+	$row=mysql_fetch_row($rslt);
+	$closer_campaigns =	$row[0];
+	$closer_campaigns = preg_replace("/ -$/","",$closer_campaigns);
+	$groups = explode(" ", $closer_campaigns);
+	}
+
+	if ( (($ADD==31111) or ($ADD==31111)) and (count($groups)<1) )
+	{
+	$stmt="SELECT closer_campaigns from vicidial_remote_agents where remote_agent_id='$remote_agent_id';";
+	$rslt=mysql_query($stmt, $link);
+	$row=mysql_fetch_row($rslt);
+	$closer_campaigns =	$row[0];
+	$closer_campaigns = preg_replace("/ -$/","",$closer_campaigns);
+	$groups = explode(" ", $closer_campaigns);
+	}
+
+	if ($ADD==3)
+	{
+	$stmt="SELECT closer_campaigns from vicidial_users where user='$user';";
+	$rslt=mysql_query($stmt, $link);
+	$row=mysql_fetch_row($rslt);
+	$closer_campaigns =	$row[0];
+	$closer_campaigns = preg_replace("/ -$/","",$closer_campaigns);
+	$groups = explode(" ", $closer_campaigns);
+	}
+
+	$stmt="SELECT group_id,group_name from vicidial_inbound_groups order by group_id";
+	$rslt=mysql_query($stmt, $link);
+	$groups_to_print = mysql_num_rows($rslt);
+	$groups_list='';
+	$groups_value='';
+
+	$o=0;
+	while ($groups_to_print > $o)
+		{
+		$rowx=mysql_fetch_row($rslt);
+		$group_id_value = $rowx[0];
+		$group_name_value = $rowx[1];
+		$groups_list .= "<input type=\"checkbox\" name=\"groups[]\" value=\"$group_id_value\"";
+		$p=0;
+		while ($p<100)
+			{
+			if ($group_id_value == $groups[$p]) 
+				{
+				$groups_list .= " CHECKED";
+				$groups_value .= " $group_id_value";
+				}
+			$p++;
+			}
+		$groups_list .= "> $group_id_value - $group_name_value<BR>\n";
+		$o++;
+		}
+	if (strlen($groups_value)>2) {$groups_value .= " -";}
+	}
+
+
+
+
+
+$NWB = " &nbsp; <a href=\"javascript:openNewWindow('$PHP_SELF?ADD=99999";
+$NWE = "')\"><IMG SRC=\"help.gif\" WIDTH=20 HEIGHT=20 BORDER=0 ALT=\"HELP\" ALIGN=TOP></A>";
+######################
+# ADD=99999 display the HELP SCREENS
+######################
+
+if ($ADD==99999)
+{
+echo "</title>\n";
+echo "</head>\n";
+echo "<BODY BGCOLOR=white marginheight=0 marginwidth=0 leftmargin=0 topmargin=0>\n";
+echo "<CENTER>\n";
+echo "<TABLE WIDTH=98% BGCOLOR=#E6E6E6 cellpadding=2 cellspacing=0><TR><TD ALIGN=LEFT><FONT FACE=\"ARIAL,HELVETICA\" COLOR=BLACK SIZE=4><B>VICIDIAL ADMIN: HELP<BR></B></FONT><FONT FACE=\"ARIAL,HELVETICA\" COLOR=BLACK SIZE=2><BR><BR>\n";
+
+?>
+<B><FONT SIZE=3>VICIDIAL_USERS TABLE</FONT></B><BR><BR>
+<A NAME="vicidial_users-user">
+<BR>
+<B>User ID -</B> This field is where you put the VICIDIAL users ID number, can be up to 8 digits in length, Must be at least 2 characters in length.
+
+<BR>
+<A NAME="vicidial_users-pass">
+<BR>
+<B>Password -</B> This field is where you put the VICIDIAL users password. Must be at least 2 characters in length.
+
+<BR>
+<A NAME="vicidial_users-full_name">
+<BR>
+<B>Full Name -</B> This field is where you put the VICIDIAL users full name. Must be at least 2 characters in length.
+
+<BR>
+<A NAME="vicidial_users-user_level">
+<BR>
+<B>User Level -</B> This menu is where you select the VICIDIAL users user level. Must be a level of 1 to log into VICIDIAL, Must be level greater than 2 to log in as a closer, Must be user level 8 or greater to get into admin web section.
+
+<BR>
+<A NAME="vicidial_users-user_group">
+<BR>
+<B>User Group -</B> This menu is where you select the VICIDIAL users group that this user will belong to. This does not have any restrictions at this time, this is just to subdivide users and allow for future features based upon it.
+
+<BR>
+<A NAME="vicidial_users-phone_login">
+<BR>
+<B>Phone Login -</B> Here is where you can set a default phone login value for when the user logs into vicidial.php. This value will populate the phone_login automatically when the user logs in with their user-pass-campaign in the vicidial.php login screen.
+
+<BR>
+<A NAME="vicidial_users-phone_pass">
+<BR>
+<B>Phone Pass -</B> Here is where you can set a default phone pass value for when the user logs into vicidial.php. This value will populate the phone_pass automatically when the user logs in with their user-pass-campaign in the vicidial.php login screen.
+
+<BR>
+<A NAME="vicidial_users-hotkeys_active">
+<BR>
+<B>HotKeys Active -</B> This option if set to 1 allows the user to use the HotKeys quick-dispositioning function in vicidial.php.
+
+<BR>
+<A NAME="vicidial_users-agent_choose_ingroups">
+<BR>
+<B>Agent Choose Ingroups -</B> This option if set to 1 allows the user to choose the ingroups that they will receive calls from when they login to a CLOSER or INBOUND campaign. Otherwise the Manager will need to set this in their user detail screen of the admin page.
+
+<BR>
+<A NAME="vicidial_users-closer_campaigns">
+<BR>
+<B>Inbound Groups -</B> Here is where you select the inbound groups you want to receive calls from if you have selected the CLOSER campaign.
+
+<BR>
+<A NAME="vicidial_users-scheduled_callbacks">
+<BR>
+<B>Scheduled Callbacks -</B> This option allows an agent to disposition a call as CALLBK and choose the data and time at which the lead will be re-activated.
+
+<BR>
+<A NAME="vicidial_users-agentonly_callbacks">
+<BR>
+<B>Agent-Only Callbacks -</B> This option allows an agent to set a callback so that they are the only Agent that can call the customer back. This also allows the agent to see their callback listings and call them back any time they want to.
+
+<BR>
+<A NAME="vicidial_users-agentcall_manual">
+<BR>
+<B>Agent Call Manual -</B> This option allows an agent to manually enter a new lead into the system and call them. This also allows the calling of any phone number from their vicidial screen and puts that call into their session. Use this option with caution.
+
+<BR>
+<A NAME="vicidial_users-vicidial_recording">
+<BR>
+<B>Vicidial Recording -</B> This option can prevent an agent from doing any recordings after they log in to vicidial. This option must be on for vicidial to follow the campaign recording session.
+
+<BR>
+<A NAME="vicidial_users-vicidial_transfers">
+<BR>
+<B>Vicidial Transfers -</B> This option can prevent an agent from opening the transfer - conference session of vicidial. If this is disabled, the agent cannot third party call or blind transfer any calls.
+
+<BR>
+<A NAME="vicidial_users-closer_default_blended">
+<BR>
+<B>Closer Default Blended -</B> This option simply defaults the Blended checkbox on a CLOSER login screen.
+
+<BR>
+<A NAME="vicidial_users-alter_agent_interface_options">
+<BR>
+<B>Alter Agent Interface Options -</B> This option if set to 1 allows the administrative user to modify the Agents interface options in admin.php.
+
+<BR>
+<A NAME="vicidial_users-delete_users">
+<BR>
+<B>Delete Users -</B> This option if set to 1 allows the user to delete other users of equal or lesser user level from the system.
+
+<BR>
+<A NAME="vicidial_users-delete_user_groups">
+<BR>
+<B>Delete User Groups -</B> This option if set to 1 allows the user to delete user groups from the system.
+
+<BR>
+<A NAME="vicidial_users-delete_lists">
+<BR>
+<B>Delete Lists -</B> This option if set to 1 allows the user to delete vicidial lists from the system.
+
+<BR>
+<A NAME="vicidial_users-delete_campaigns">
+<BR>
+<B>Delete Campaigns -</B> This option if set to 1 allows the user to delete vicidial campaigns from the system.
+
+<BR>
+<A NAME="vicidial_users-delete_ingroups">
+<BR>
+<B>Delete In-Groups -</B> This option if set to 1 allows the user to delete vicidial In-Groups from the system.
+
+<BR>
+<A NAME="vicidial_users-delete_remote_agents">
+<BR>
+<B>Delete Remote Agents -</B> This option if set to 1 allows the user to delete vicidial remote agents from the system.
+
+<BR>
+<A NAME="vicidial_users-load_leads">
+<BR>
+<B>Load Leads -</B> This option if set to 1 allows the user to load vicidial leads into the vicidial_list table by way of the web based lead loader.
+
+<BR>
+<A NAME="vicidial_users-campaign_detail">
+<BR>
+<B>Campaign Detail -</B> This option if set to 1 allows the user to view and modify the campaign detail screen elements.
+
+<BR>
+<A NAME="vicidial_users-ast_admin_access">
+<BR>
+<B>AGC Admin Access -</B> This option if set to 1 allows the user to login to the astGUIclient admin pages.
+
+<BR>
+<A NAME="vicidial_users-ast_delete_phones">
+<BR>
+<B>AGC Delete Phones -</B> This option if set to 1 allows the user to delete phone entries in the astGUIclient admin pages.
+
+<BR>
+<A NAME="vicidial_users-delete_scripts">
+<BR>
+<B>Delete Scripts -</B> This option if set to 1 allows the user to delete Campaign scripts in the script modification screen.
+
+<BR>
+<A NAME="vicidial_users-modify_leads">
+<BR>
+<B>Modify Leads -</B> This option if set to 1 allows the user to modify leads in the admin section lead search results page.
+
+<BR>
+<A NAME="vicidial_users-change_agent_campaign">
+<BR>
+<B>Change Agent Campaign -</B> This option if set to 1 allows the user to alter the campaign that an agent is logged into while they are logged into it.
+
+<BR>
+<A NAME="vicidial_users-delete_filters">
+<BR>
+<B>Delete Filters -</B> This option allows the user to be able to delete vicidial lead filters from the system.
+
+<BR>
+<A NAME="vicidial_users-delete_call_times">
+<BR>
+<B>Delete Call Times -</B> This option allows the user to be able to delete vicidial call times records and vicidial state call times records from the system.
+
+<BR>
+<A NAME="vicidial_users-modify_call_times">
+<BR>
+<B>Modify Call Times -</B> This option allows the user to view and modify the call times and state call times records. A user doesn't need this option enabled if they only need to change the call times option on the campaigns screen.
+
+
+
+
+<BR><BR><BR><BR>
+
+<B><FONT SIZE=3>VICIDIAL_CAMPAIGNS TABLE</FONT></B><BR><BR>
+<A NAME="vicidial_campaigns-campaign_id">
+<BR>
+<B>Campaign ID -</B> This is the short name of the campaign, it is not editable after initial submission, cannot contain spaces and must be between 2 and 8 characters in length.
+
+<BR>
+<A NAME="vicidial_campaigns-campaign_name">
+<BR>
+<B>Campaign Name -</B> This is the description of the campaign, it must be between 6 and 40 characters in length.
+
+<BR>
+<A NAME="vicidial_campaigns-active">
+<BR>
+<B>Active -</B> This is where you set the campaign to Active or Inactive. If Inactive, noone can log into it.
+
+<BR>
+<A NAME="vicidial_campaigns-park_ext">
+<BR>
+<B>Park Extension -</B> This is where you can customize the on-hold music for VICIDIAL. Make sure the extension is in place in the extensions.conf and that it points to the filename below.
+
+<BR>
+<A NAME="vicidial_campaigns-park_file_name">
+<BR>
+<B>Park File Name -</B> This is where you can customize the on-hold music for VICIDIAL. Make sure the filename is 10 characters in length or less and that the file is in place in the /var/lib/asterisk/sounds directory.
+
+<BR>
+<A NAME="vicidial_campaigns-web_form_address">
+<BR>
+<B>Web Form -</B> This is where you can set the custom web page that will be opened when the user clicks on the WEB FORM button.
+
+<BR>
+<A NAME="vicidial_campaigns-allow_closers">
+<BR>
+<B>Allow Closers -</B> This is where you can set whether the users of this campaign will have the option to send the call to a closer.
+
+<BR>
+<A NAME="vicidial_campaigns-dial_status">
+<BR>
+<B>Dial Status -</B> This is where you set the statuses that you are wanting to dial on within the lists that are active for the campaign below
+
+<BR>
+<A NAME="vicidial_campaigns-lead_order">
+<BR>
+<B>List Order -</B> This menu is where you select how the leads that match the statuses selected above will be put in the lead hopper:
+ <BR> &nbsp; - DOWN: select the first leads loaded into the vicidial_list table
+ <BR> &nbsp; - UP: select the last leads loaded into the vicidial_list table
+ <BR> &nbsp; - UP PHONE: select the highest phone number and works its way down
+ <BR> &nbsp; - DOWN PHONE: select the lowest phone number and works its way up
+ <BR> &nbsp; - UP LAST NAME: starts with last names starting with Z and works its way down
+ <BR> &nbsp; - DOWN LAST NAME: starts with last names starting with A and works its way up
+ <BR> &nbsp; - UP COUNT: starts with most called leads and works its way down
+ <BR> &nbsp; - DOWN COUNT: starts with least called leads and works its way up
+ <BR> &nbsp; - DOWN COUNT 2nd NEW: starts with least called leads and works its way up inserting a NEW lead in every other lead - Must NOT have NEW selected in the dial statuses
+ <BR> &nbsp; - DOWN COUNT 3nd NEW: starts with least called leads and works its way up inserting a NEW lead in every third lead - Must NOT have NEW selected in the dial statuses
+ <BR> &nbsp; - DOWN COUNT 4th NEW: starts with least called leads and works its way up inserting a NEW lead in every forth lead - Must NOT have NEW selected in the dial statuses
+
+<BR>
+<A NAME="vicidial_campaigns-hopper_level">
+<BR>
+<B>Hopper Level -</B> This is how many leads the VDhopper script tries to keep in the vicidial_hopper table for this campaign. If running VDhopper script every minute, make this slightly greater than the number of leads you go through in a minute.
+
+<BR>
+<A NAME="vicidial_campaigns-lead_filter_id">
+<BR>
+<B>Lead Filter -</B> This is a method of filtering your leads using a fragment of a SQL query. Use this feature with caution, it is easy to stop dialing accidentally with the slightest alteration to the SQL statement. Default is NONE.
+
+<BR>
+<A NAME="vicidial_campaigns-force_reset_hopper">
+<BR>
+<B>Force Reset of Hopper -</B> This allows you to wipe out the hopper contents upon form submission. It should be filled again when the VDhopper script runs.
+
+<BR>
+<A NAME="vicidial_campaigns-auto_dial_level">
+<BR>
+<B>Auto Dial Level -</B> This is where you set how many lines VICIDIAL should use per active agent. zero 0 means auto dialing is off and the agents will click to dial each number. Otherwise VICIDIAL will keep dialing lines equal to active agents multiplied by the dial level to arrive at how many lines this campaign on each server should allow.
+
+<BR>
+<A NAME="vicidial_campaigns-next_agent_call">
+<BR>
+<B>Next Agent Call -</B> This determines which agent receives the next call that is available:
+ <BR> &nbsp; - random: orders by the random update value in the vicidial_live_agents table
+ <BR> &nbsp; - oldest_call_start: orders by the last time an agent was sent a call. Results in agents receiving about the same number of calls overall.
+ <BR> &nbsp; - oldest_call_finish: orders by the last time an agent finished a call. AKA agent waiting longest receives first call.
+ <BR> &nbsp; - overall_user_level: orders by the user_level of the agent as defined in the vicidial_users table a higher user_level will receive more calls.
+
+<BR>
+<A NAME="vicidial_campaigns-local_call_time">
+<BR>
+<B>Local Call Time -</B> This is where you set during which hours you would like to dial, as determined by the local time in the are in which you are calling. This is controlled by area code and is adjusted for Daylight Savings time if applicable. General Guidelines in the USA for Business to Business is 9am to 5pm and Business to Consumer calls is 9am to 9pm.
+
+<BR>
+<A NAME="vicidial_campaigns-dial_timeout">
+<BR>
+<B>Dial Timeout -</B> If defined, calls that would normally hangup after the timeout defined in extensions.conf would instead timeout at this amount of seconds if it is less than the extensions.conf timeout. This allows for quickly changing dial timeouts from server to server and limiting the effects to a single campaign. If you are having a lot of Answering Machine or Voicemail calls you may want to try changing this value to between 21-26 and see if results improve.
+
+<BR>
+<A NAME="vicidial_campaigns-dial_prefix">
+<BR>
+<B>Dial Prefix -</B> This field allows for more easily changing a path of dialing to go out through a different method without doing a reload in Asterisk. Default is 9 based upon a 91NXXNXXXXXX in the dialplan - extensions.conf.
+
+<BR>
+<A NAME="vicidial_campaigns-campaign_cid">
+<BR>
+<B>Campaign CallerID -</B> This field allows for the sending of a custom callerid number on the outbound calls. This is the number that would show up on the callerid of the person you are calling. The default is UNKNOWN. If you are using T1 or E1s to dial out this option is only available if you are using PRIs - ISDN T1s or E1s - that have the custom callerid feature turned on, this will not work with Robbed-bit service(RBS) circuits. This will also work through most VOIP(SIP or IAX trunks) providers that allow dynamic outbound callerID. The custom callerID only applies to calls placed for the VICIDIAL campaign directly, any 3rd party calls or transfers will not send the custom callerID. NOTE: Sometimes putting UNKNOWN or PRIVATE in the field will yield the sending of your default callerID number by your carrier with the calls. You may want to test this and put 0000000000 in the callerid field instead if you do not want to send you CallerID.
+
+<BR>
+<A NAME="vicidial_campaigns-campaign_vdad_exten">
+<BR>
+<B>Campaign VDAD extension -</B> This field allows for a custom VDAD transfer extension. This allows you to use different VDADtransfer...agi scripts depending upon your campaign. The default transfer AGI - exten 8365 agi-VDADtransfer.agi - just immediately sends the calls on to agents as soon as they are picked up. An additional sample political survey AGI is also now included - 8366 agi-VDADtransferSURVEY.agi - that plays a message to the called person and allows them to make a choice by pressing buttons - effectively pre-screening the lead - . Please note that except for surveys, political calls and charities this form of calling is illegal in the United States.
+
+<BR>
+<A NAME="vicidial_campaigns-campaign_rec_exten">
+<BR>
+<B>Campaign Rec extension -</B> This field allows for a custom recording extension to be used with VICIDIAL. This allows you to use different extensions depending upon how long you want to allow a maximum recording and what type of codec you want to record in. The default exten is 8309 which if you follow the SCRATCH_INSTALL examples will record in the WAV format for upto one hour. Another option included in the examples is 8310 which will record in GSM format for upto one hour.
+
+<BR>
+<A NAME="vicidial_campaigns-campaign_recording">
+<BR>
+<B>Campaign Recording -</B> This menu allows you to choose what level of recording is allowed on this campaign. NEVER will disable recording on the client. ONDEMAND is the default and allows the agent to start and stop recording as needed. ALLCALLS will start recording on the client whenever a call is sent to an agent.
+
+<BR>
+<A NAME="vicidial_campaigns-campaign_rec_filename">
+<BR>
+<B>Campaign Rec Filename -</B> This field allows you to customize the name of the recording when Campaign recording is ONDEMAND or ALLCALLS. The allowed variables are CAMPAIGN CUSTPHONE FULLDATE TINYDATE EPOCH AGENT. The default is FULLDATE_AGENT and would look like this 20051020-103108_6666. Another example is CAMPAIGN_TINYDATE_CUSTPHONE which would look like this TESTCAMP_51020103108_3125551212. 50 char max.
+
+<BR>
+<A NAME="vicidial_campaigns-campaign_script">
+<BR>
+<B>Campaign Script -</B> This menu allows you to choose the script that will appear on the agents screen for this campaign. Select NONE to show no script for this campaign.
+
+<BR>
+<A NAME="vicidial_campaigns-get_call_launch">
+<BR>
+<B>Get Call Launch -</B> This menu allows you to choose whether you want to auto-launch the web-form page in a separate window, auto-switch to the SCRIPT tab or do nothing when a call is sent to the agent for this campaign. 
+
+<BR>
+<A NAME="vicidial_campaigns-am_message_exten">
+<BR>
+<B>Answering Machine Message -</B> This field is for entering in an extension to blind transfer calls to when the agent gets an answering machine and clicks on the Answering Machine Message button in the transfer conference frame. You must set this exten up in the dialplan - extensions.conf - and make sure it plays an audio file then hangs up. 
+
+<BR>
+<A NAME="vicidial_campaigns-amd_send_to_vmx">
+<BR>
+<B>AMD send to vm exten -</B> This menu allows you to define whether a message is left on an answering machine when it is detected. the call will be immediately forwarded to the Answering-Machine-Message extension if AMD is active and it is determined that the call is an answering machine.
+
+<BR>
+<A NAME="vicidial_campaigns-xferconf_a_dtmf">
+<BR>
+<B>Xfer-Conf DTMF -</B> These four fields allow for you to have two sets of Transfer Conference and DTMF presets. When the call or campaign is loaded, the vicidial.php script will show two buttons on the transfer-conference frame and auto-populate the number-to-dial and the send-dtmf fields when pressed.
+
+<BR>
+<A NAME="vicidial_campaigns-alt_number_dialing">
+<BR>
+<B>Agent Alt Num Dialing -</B> This option allows an agent to manually dial the alternate phone number or address3 field after the main number has been called.
+
+<BR>
+<A NAME="vicidial_campaigns-scheduled_callbacks">
+<BR>
+<B>Scheduled Callbacks -</B> This option allows an agent to disposition a call as CALLBK and choose the data and time at which the lead will be re-activated.
+
+<BR>
+<A NAME="vicidial_campaigns-drop_call_seconds">
+<BR>
+<B>Drop Call Seconds -</B> The number of seconds from the time the customer line is picked up until the call is considered a DROP, only applies to outbound calls.
+
+<BR>
+<A NAME="vicidial_campaigns-voicemail_ext">
+<BR>
+<B>Voicemail -</B> If defined, calls that would normally DROP would instead be directed to this voicemail box to hear and leave a message.
+
+<BR>
+<A NAME="vicidial_campaigns-safe_harbor_message">
+<BR>
+<B>Safe Harbor Message -</B> If set to Y will play a message to customer after the Drop Call Seconds timeout is reached without being transferred to an agent. This setting will override sending to a voicemail box if this is set to Y.
+
+<BR>
+<A NAME="vicidial_campaigns-safe_harbor_exten">
+<BR>
+<B>Safe Harbor Exten -</B> This is the dialplan extension that the desired Safe Harbor audio file is located at on your server.
+
+<BR>
+<A NAME="vicidial_campaigns-wrapup_seconds">
+<BR>
+<B>Wrapup Seconds -</B> The number of seconds to force an agent to wait before allowing them to receive or dial another call. The timer begins as soon as an agent hangs up on their customer - or in the case of alternate number dialing when the agent finishes the lead - Default is 0 seconds. If the timer runs out before the agent has dispositioned the call, the agent still will NOT move on to the next call until they select a disposition.
+
+<BR>
+<A NAME="vicidial_campaigns-wrapup_message">
+<BR>
+<B>Wrapup Message -</B> This is a campaign-specific message to be displayed on the wrapup screen if wrapup seconds is set.
+
+<BR>
+<A NAME="vicidial_campaigns-wrapup_message">
+<BR>
+<B>Wrapup Message -</B> This is a campaign-specific message to be displayed on the wrapup screen if wrapup seconds is set.
+
+<BR>
+<A NAME="vicidial_campaigns-use_internal_dnc">
+<BR>
+<B>Use Internal DNC List -</B> This defines whether this campaign is to filter leads against the Internal DNC list. If it is set to Y, the hopper will look for each phone number in the DNC list before placing it in the hopper. If it is in the DNC list then it will change that lead status to DNCL so it cannot be dialed. Default is N.
+
+<BR>
+<A NAME="vicidial_campaigns-closer_campaigns">
+<BR>
+<B>Allowed Inbound Groups -</B> For CLOSER campaigns only. Here is where you select the inbound groups you want agents in this CLOSER campaign to be able to take calls from. It is important for BLENDED inbound/outbound campaigns only to select the inbound groups that are used for agents in this campaign. The calls coming into the inbound groups selected here will be counted as active calls for a blended campaign even if all agents in the campaign are not logged in to receive calls from all of those selected inbound groups.
+
+
+
+<BR><BR><BR><BR>
+
+<B><FONT SIZE=3>VICIDIAL_LISTS TABLE</FONT></B><BR><BR>
+<A NAME="vicidial_lists-list_id">
+<BR>
+<B>List ID -</B> This is the numerical name of the list, it is not editable after initial submission, must contain only numbers and must be between 2 and 8 characters in length.
+
+<BR>
+<A NAME="vicidial_lists-list_name">
+<BR>
+<B>List Name -</B> This is the description of the list, it must be between 2 and 20 characters in length.
+
+<BR>
+<A NAME="vicidial_lists-campaign_id">
+<BR>
+<B>Campaign -</B> This is the campaign that this list belongs to. A list can only be dialed on a single campaign at one time.
+
+<BR>
+<A NAME="vicidial_lists-active">
+<BR>
+<B>Active -</B> This defines whether the list is to be dialed on or not.
+
+<BR>
+<A NAME="vicidial_lists-reset_list">
+<BR>
+<B>Reset Lead-Called-Status for this list -</B> This resets all leads in this list to N for "not called since last reset" and means that any lead can now be called if it is the right status as defined in the campaign screen.
+
+<BR>
+<A NAME="vicidial_list-dnc">
+<BR>
+<B>VICIDIAL DNC List -</B> This Do Not Call list contains every lead that has been set to a status of DNC in the system. Through the LISTS - ADD NUMBER TO DNC page you are able to manually add a number to this list so that it will not be called by campaigns that use the internal DNC list.
+
+
+
+<BR><BR><BR><BR>
+
+<B><FONT SIZE=3>VICIDIAL_INBOUND_GROUPS TABLE</FONT></B><BR><BR>
+<A NAME="vicidial_inbound_groups-group_id">
+<BR>
+<B>Group ID -</B> This is the short name of the inbound group, it is not editable after initial submission, must not contain any spaces and must be between 2 and 20 characters in length.
+
+<BR>
+<A NAME="vicidial_inbound_groups-group_name">
+<BR>
+<B>Group Name -</B> This is the description of the group, it must be between 2 and 30 characters in length. Cannot include dashes, plusses or spaces .
+
+<BR>
+<A NAME="vicidial_inbound_groups-group_color">
+<BR>
+<B>Group Color -</B> This is the color that displays in the VICIDIAL client app when a call comes in on this group. It must be between 2 and 7 characters long. If this is a hex color definition you must remember to put a # at the beginning of the string or VICIDIAL will not work properly.
+
+<BR>
+<A NAME="vicidial_inbound_groups-active">
+<BR>
+<B>Active -</B> This determines whether this group show up in the selection box when a VICIDIAL agent logs in.
+
+<BR>
+<A NAME="vicidial_inbound_groups-web_form_address">
+<BR>
+<B>Web Form -</B> This is the custom address that clicking on the WEB FORM button in VICIDIAL will take you to for calls that come in on this group.
+
+<BR>
+<A NAME="vicidial_inbound_groups-next_agent_call">
+<BR>
+<B>Next Agent Call -</B> This determines which agent receives the next call that is available:
+ <BR> &nbsp; - random: orders by the random update value in the vicidial_live_agents table
+ <BR> &nbsp; - oldest_call_start: orders by the last time an agent was sent a call. Results in agents receiving about the same number of calls overall.
+ <BR> &nbsp; - oldest_call_finish: orders by the last time an agent finished a call. AKA agent waiting longest receives first call.
+ <BR> &nbsp; - overall_user_level: orders by the user_level of the agent as defined in the vicidial_users table a higher user_level will receive more calls.
+
+<BR>
+<A NAME="vicidial_inbound_groups-fronter_display">
+<BR>
+<B>Fronter Display -</B> This field determines whether the inbound VICIDIAL agent would have the fronter name - if there is one - displayed in the Status field when the call comes to the agent.
+
+<BR>
+<A NAME="vicidial_inbound_groups-ingroup_script">
+<BR>
+<B>Campaign Script -</B> This menu allows you to choose the script that will appear on the agents screen for this campaign. Select NONE to show no script for this campaign.
+
+<BR>
+<A NAME="vicidial_inbound_groups-get_call_launch">
+<BR>
+<B>Get Call Launch -</B> This menu allows you to choose whether you want to auto-launch the web-form page in a separate window, auto-switch to the SCRIPT tab or do nothing when a call is sent to the agent for this campaign. 
+
+<BR>
+<A NAME="vicidial_inbound_groups-xferconf_a_dtmf">
+<BR>
+<B>Xfer-Conf DTMF -</B> These four fields allow for you to have two sets of Transfer Conference and DTMF presets. When the call or campaign is loaded, the vicidial.php script will show two buttons on the transfer-conference frame and auto-populate the number-to-dial and the send-dtmf fields when pressed.
+
+<BR>
+<A NAME="vicidial_inbound_groups-drop_call_seconds">
+<BR>
+<B>Drop Call Seconds -</B> The number of seconds from the time the customer line is picked up until the call is considered a DROP, only applies to outbound calls.
+
+<BR>
+<A NAME="vicidial_inbound_groups-voicemail_ext">
+<BR>
+<B>Voicemail -</B> If defined, calls that would normally DROP would instead be directed to this voicemail box to hear and leave a message.
+
+<BR>
+<A NAME="vicidial_inbound_groups-drop_message">
+<BR>
+<B>Drop Message -</B> If set to Y will play a message to customer after the Drop Call Seconds timeout is reached without being transferred to an agent. This setting will override sending to a voicemail box if this is set to Y.
+
+<BR>
+<A NAME="vicidial_inbound_groups-drop_exten">
+<BR>
+<B>Drop Exten -</B> This is the dialplan extension that the desired Dropped call audio file is located at on your server.
+
+
+
+<BR><BR><BR><BR>
+
+<B><FONT SIZE=3>VICIDIAL_REMOTE_AGENTS TABLE</FONT></B><BR><BR>
+<A NAME="vicidial_remote_agents-user_start">
+<BR>
+<B>User ID Start -</B> This is the starting User ID that is used when the remote agent entries are inserted into the system. If the Number of Lines is set higher than 1, this number is incremented by one until each line has an entry. Make sure you create a new VICIDIAL user account with a user level of 4 or great if you want them to be able to use the vdremote.php page for remote web access of this account.
+
+<BR>
+<A NAME="vicidial_remote_agents-number_of_lines">
+<BR>
+<B>Number of Lines -</B> This defines how many remote agent entries the system creates, and determines how many lines it thinks it can safely send to the number below.
+
+<BR>
+<A NAME="vicidial_remote_agents-server_ip">
+<BR>
+<B>Server IP -</B> A remote agent entry is only good for one specific server, here is where you select which server you want.
+
+<BR>
+<A NAME="vicidial_remote_agents-conf_exten">
+<BR>
+<B>External Extension -</B> This is the number that you want the calls forwarded to. Make sure that it is a full dialplan number and that if you need a 9 at the beginning you put it in here. Test by dialing this number from a phone on the system.
+
+<BR>
+<A NAME="vicidial_remote_agents-status">
+<BR>
+<B>Status -</B> Here is where you turn the remote agent on and off. As soon as the agent is Active the system assumes that it can send calls to it. It may take up to 30 seconds once you change the status to Inactive to stop receiving calls.
+
+<BR>
+<A NAME="vicidial_remote_agents-campaign_id">
+<BR>
+<B>Campaign -</B> Here is where you select the campaign that these remote agents will be logged into. Inbound needs to use the CLOSER campaign and select the inbound campaigns below that you want to receive calls from.
+
+<BR>
+<A NAME="vicidial_remote_agents-closer_campaigns">
+<BR>
+<B>Inbound Groups -</B> Here is where you select the inbound groups you want to receive calls from if you have selected the CLOSER campaign.
+
+
+<BR><BR><BR><BR>
+
+<B><FONT SIZE=3>VICIDIAL_CAMPAIGN_LISTS</FONT></B><BR><BR>
+<A NAME="vicidial_campaign_lists">
+<BR>
+<B>The lists within this campaign are listed here, whether they are active is denoted by the Y or N and you can go to the list screen by clicking on the list ID in the first column.</B>
+
+
+<BR><BR><BR><BR>
+
+<B><FONT SIZE=3>VICIDIAL_CAMPAIGN_STATUSES TABLE</FONT></B><BR><BR>
+<A NAME="vicidial_campaign_statuses">
+<BR>
+<B>Through the use of custom campaign statuses, you can have statuses that only exist for a specific campaign. The Status must be 1-8 characters in length, the description must be 2-30 characters in length and Selectable defines whether it shows up in VICIDIAL as a disposition.</B>
+
+
+
+<BR><BR><BR><BR>
+
+<B><FONT SIZE=3>VICIDIAL_CAMPAIGN_HOTKEYS TABLE</FONT></B><BR><BR>
+<A NAME="vicidial_campaign_hotkeys">
+<BR>
+<B>Through the use of custom campaign hotkeys, agents that use the vicidial web-client can hangup and disposition calls just by pressing a single key on their keyboard.</B>
+
+
+
+
+<BR><BR><BR><BR>
+
+<B><FONT SIZE=3>VICIDIAL_LEAD_RECYCLE TABLE</FONT></B><BR><BR>
+<A NAME="vicidial_lead_recycle">
+<BR>
+<B>Through the use of lead recycling, you can call specific statuses of leads again at a specified interval without resetting the entire list. Lead recycling is campaign-specific and does not have to be a selected dialable status in your campaign. The attempt delay field is the number of seconds until the lead can be placed back in the hopper, this number must be at least 120 seconds. The attempt maximum field is the maximum number of times that a lead of this status can be attempted before the list needs to be reset, this number can be from 1 to 10. You can activate and deactivate a lead recycle entry with the provided links. This feature only works in auto-dial mode, where dial level is greater than 0.</B>
+
+
+
+
+
+<BR><BR><BR><BR>
+
+<B><FONT SIZE=3>VICIDIAL_USER_GROUPS TABLE</FONT></B><BR><BR>
+<A NAME="vicidial_user_groups-user_group">
+<BR>
+<B>User Group -</B> This is the short name of a Vicidial User group, try not to use any spaces or punctuation for this field. max 20 characters, minimum of 2 characters.
+
+<BR>
+<A NAME="vicidial_user_groups-group_name">
+<BR>
+<B>Group Name -</B> This is the description of the vicidial user group max of 40 characters.
+
+
+
+
+
+<BR><BR><BR><BR>
+
+<B><FONT SIZE=3>VICIDIAL_SCRIPTS TABLE</FONT></B><BR><BR>
+<A NAME="vicidial_scripts-script_id">
+<BR>
+<B>Script ID -</B> This is the short name of a Vicidial Script. This needs to be a unique identifier. Try not to use any spaces or punctuation for this field. max 10 characters, minimum of 2 characters.
+
+<BR>
+<A NAME="vicidial_scripts-script_name">
+<B>Script Name -</B> This is the title of a Vicidial Script. This is a short summary of the script. max 50 characters, minimum of 2 characters. There should be no spaces or punctuation of any kind in theis field.
+
+<BR>
+<A NAME="vicidial_scripts-script_comments">
+<B>Script Comments -</B> This is where you can place comments for a Vicidial Script such as -changed to free upgrade on Sept 23-.  max 255 characters, minimum of 2 characters.
+
+<BR>
+<A NAME="vicidial_scripts-script_text">
+<B>Script Text -</B> This is where you place the content of a Vicidial Script. Minimum of 2 characters. You can have customer information be auto-populated in this script using "--A--field--B--" where field is one of the following fieldnames: vendor_lead_code, source_id, list_id, gmt_offset_now, called_since_last_reset, phone_code, phone_number, title, first_name, middle_initial, last_name, address1, address2, address3, city, state, province, postal_code, country_code, gender, date_of_birth, alt_phone, email, security_phrase, comments. For example, this sentence would print the persons name in it----<BR><BR>  Hello, can I speak with --A--first_name--B-- --A--last_name--B-- please? Well hello --A--title--B-- --A--last_name--B-- how are you today?<BR><BR> This would read----<BR><BR>Hello, can I speak with John Doe please? Well hello Mr. Doe how are you today?
+
+<BR>
+<A NAME="vicidial_scripts-active">
+<BR>
+<B>Active -</B> This determines whether this script can be selected to be used by a campaign.
+
+
+
+
+
+<BR><BR><BR><BR>
+
+<B><FONT SIZE=3>VICIDIAL_LEAD_FILTERS TABLE</FONT></B><BR><BR>
+<A NAME="vicidial_lead_filters-lead_filter_id">
+<BR>
+<B>Filter ID -</B> This is the short name of a Vicidial Lead Filter. This needs to be a unique identifier. Do not use any spaces or punctuation for this field. max 10 characters, minimum of 2 characters.
+
+<BR>
+<A NAME="vicidial_lead_filters-lead_filter_name">
+<B>Filter Name -</B> This is a more descriptive name of the Filter. This is a short summary of the filter. max 30 characters, minimum of 2 characters.
+
+<BR>
+<A NAME="vicidial_lead_filters-lead_filter_comments">
+<B>Filter Comments -</B> This is where you can place comments for a Vicidial Filter such as -calls all California leads-.  max 255 characters, minimum of 2 characters.
+
+<BR>
+<A NAME="vicidial_lead_filters-lead_filter_sql">
+<B>Filter SQL -</B> This is where you place the SQL query fragment that you want to filter by. do not begin or end with an AND, that will be added by the hopper cron script automatically. an example SQL query that would work here is- called_count > 4 and called_count < 8 -.
+
+
+
+
+
+<BR><BR><BR><BR>
+
+<B><FONT SIZE=3>VICIDIAL_CALL TIMES TABLE</FONT></B><BR><BR>
+<A NAME="vicidial_call_times-call_time_id">
+<BR>
+<B>Call Time ID -</B> This is the short name of a Vicidial Call Time Definition. This needs to be a unique identifier. Do not use any spaces or punctuation for this field. max 10 characters, minimum of 2 characters.
+
+<BR>
+<A NAME="vicidial_call_times-call_time_name">
+<B>Call Time Name -</B> This is a more descriptive name of the Call Time Definition. This is a short summary of the Call Time definition. max 30 characters, minimum of 2 characters.
+
+<BR>
+<A NAME="vicidial_call_times-call_time_comments">
+<B>Call Time Comments -</B> This is where you can place comments for a Vicidial Call Time Definition such as -10am to 4pm with extra call state restrictions-.  max 255 characters.
+
+<BR>
+<A NAME="vicidial_call_times-ct_default_start">
+<B>Default Start and Stop Times -</B> This is the default time that calling will be allowed to be started or stopped within this call time definition if the day-of-the-week start time is not defined. 0 is midnight. To prevent calling completely set this field to 2400 and set the Default Stop time to 2400. To allow calling 24 hours a day set the start time to 0 and the stop time to 2400.
+
+<BR>
+<A NAME="vicidial_call_times-ct_sunday_start">
+<B>Weekday Start and Stop Times -</B> These are the custom times per day that can be set for the call time definition. same rules apply as with the Default start and stop times.
+
+<BR>
+<A NAME="vicidial_call_times-ct_state_call_times">
+<B>State Call Time Definitions -</B> This is the list of State specific call time definitions that are followed in this Call Time Definition.
+
+<BR>
+<A NAME="vicidial_call_times-state_call_time_state">
+<B>State Call Time State -</B> This is the two letter code for the state that this calling time definition is for. For this to be in effect the local call time that is set in the campaign must have this state call time record in it as well as all of the leads having two letter state codes in them.
+
+
+
+
+<BR><BR><BR><BR>
+
+<B><FONT SIZE=3>VICIDIAL LIST LOADER FUNCTIONALITY</FONT></B><BR><BR>
+<A NAME="vicidial_list_loader">
+<BR>
+The VICIDIAL basic web-based lead loader is designed simply to take a lead file - up to 8MB in size - that is either tab or pipe delimited and load it into the vicidial_list table. There is also a new beta version super lead loader that allows for field choosing and TXT- Plain Text, CSV- Comma Separated Values and XLS- Excel file formats. The lead loader does not do data validation or check for duplicates in itself or other lists, so that is something you need to do before you load the leads. Also, make sure that you have created the list that these leads are to be under so that you can use them. There is also the matter of time-zone-coding these leads. You may want to increase the frequency that the ADMIN_adjust_GMTnow_on_leads.pl is being run in the cron on your Asterisk server so that any loaded leads can be coded faster. Here is a list of the fields in their proper order for the lead files:
+	<OL>
+	<LI>Vendor Lead Code - shows up in the Vendor ID field of the GUI
+	<LI>Source Code - internal use only for admins and DBAs
+	<LI>List ID - the list number that these leads will show up under
+	<LI>Phone Code - the prefix for the phone number - 1 for US, 01144 for UK, 01161 for AUS, etc
+	<LI>Phone Number - must be at least 8 digits long
+	<LI>Title - title of the customer - Mr. Ms. Mrs, etc...
+	<LI>First Name
+	<LI>Middle Initial
+	<LI>Last Name
+	<LI>Address Line 1
+	<LI>Address Line 2
+	<LI>Address Line 3
+	<LI>City
+	<LI>State - limited to 2 characters
+	<LI>Province
+	<LI>Postal Code
+	<LI>Country
+	<LI>Gender
+	<LI>Date of Birth
+	<LI>Alternate Phone Number
+	<LI>Email Address
+	<LI>Security Phrase
+	<LI>Comments
+	</OL>
+
+<BR>NOTES: The Excel Lead loader functionality is enabled by a series of perl scripts and needs to have a properly configured /home/cron/AST_SERVER_conf.pl file in place on the web server. Also, a couple perl modules must be loaded for it to work as well - OLE-Storage_Lite and Spreadsheet-ParseExcel. You can check for runtime errors in these by looking at your apache error_log file.
+
+<BR><BR><BR><BR><BR><BR><BR><BR>
+<BR><BR><BR><BR><BR><BR><BR><BR>
+THE END
+</TD></TR></TABLE></BODY></HTML>
+<?
+exit;
+
+#### END HELP SCREENS
+}
+
+
+
+
+
+######################
+# ADD=73 view dialable leads from a filter and a campaign
+######################
+
+if ($ADD==73)
+{
+echo "</title>\n";
+echo "</head>\n";
+echo "<BODY BGCOLOR=white marginheight=0 marginwidth=0 leftmargin=0 topmargin=0>\n";
+echo "<FONT FACE=\"ARIAL,HELVETICA\" COLOR=BLACK SIZE=2>";
+
+$stmt="SELECT * from vicidial_campaigns where campaign_id='$campaign_id';";
+$rslt=mysql_query($stmt, $link);
+$row=mysql_fetch_row($rslt);
+$dial_status_a = $row[3];
+$dial_status_b = $row[4];
+$dial_status_c = $row[5];
+$dial_status_d = $row[6];
+$dial_status_e = $row[7];
+$local_call_time = $row[16];
+if ($lead_filter_id=='')
+	{
+	$lead_filter_id = $row[35];
+	if ($lead_filter_id=='') 
+		{
+		$lead_filter_id='NONE';
+		}
+	}
+
+$stmt="SELECT list_id,active,list_name from vicidial_lists where campaign_id='$campaign_id'";
+$rslt=mysql_query($stmt, $link);
+$lists_to_print = mysql_num_rows($rslt);
+$camp_lists='';
+$o=0;
+while ($lists_to_print > $o) {
+	$rowx=mysql_fetch_row($rslt);
+	$o++;
+if (ereg("Y", $rowx[1])) {$camp_lists .= "'$rowx[0]',";}
+}
+$camp_lists = eregi_replace(".$","",$camp_lists);
+
+$filterSQL = $filtersql_list[$lead_filter_id];
+$filterSQL = eregi_replace("^and|and$|^or|or$","",$filterSQL);
+if (strlen($filterSQL)>4)
+	{$fSQL = "and $filterSQL";}
+else
+	{$fSQL = '';}
+
+
+echo "<BR><BR>\n";
+echo "<B>Show Dialable Leads Count</B> -<BR><BR>\n";
+echo "<B>CAMPAIGN:</B> $campaign_id<BR>\n";
+echo "<B>LISTS:</B> $camp_lists<BR>\n";
+echo "<B>STATUSES:</B> $dial_status_a,$dial_status_b,$dial_status_c,$dial_status_d,$dial_status_e<BR>\n";
+echo "<B>FILTER:</B> $lead_filter_id<BR>\n";
+echo "<B>CALL TIME:</B> $local_call_time<BR><BR>\n";
+
+### call function to calculate and print dialable leads
+dialable_leads($DB,$link,$local_call_time,$dial_status_a,$dial_status_b,$dial_status_c,$dial_status_d,$dial_status_e,$camp_lists,$fSQL);
+
+echo "<BR><BR>\n";
+echo "</BODY></HTML>\n";
+
+exit;
+}
+
+
+######################
+# ADD=7111111 view sample script with test variables
+######################
+
+if ($ADD==7111111)
+{
+	##### TEST VARIABLES #####
+	$vendor_lead_code = 'VENDORLEADCODE';
+	$list_id = 'LISTID';
+	$gmt_offset_now = 'GMTOFFSET';
+	$phone_code = '1';
+	$phone_number = '7275551212';
+	$title = 'Mr.';
+	$first_name = 'JOHN';
+	$middle_initial = 'Q';
+	$last_name = 'PUBLIC';
+	$address1 = '1234 Main St.';
+	$address2 = 'Apt. 3';
+	$address3 = 'ADDRESS3';
+	$city = 'CHICAGO';
+	$state = 'IL';
+	$province = 'PROVINCE';
+	$postal_code = '33760';
+	$country_code = 'USA';
+	$gender = 'M';
+	$date_of_birth = '1970-01-01';
+	$alt_phone = '3125551212';
+	$email = 'test@test.com';
+	$security_phrase = 'SECUTIRY';
+	$comments = 'COMMENTS FIELD';
+	$RGfullname = 'JOE AGENT';
+	$RGuser = '6666';
+
+echo "</title>\n";
+echo "</head>\n";
+echo "<BODY BGCOLOR=white marginheight=0 marginwidth=0 leftmargin=0 topmargin=0>\n";
+echo "<FONT FACE=\"ARIAL,HELVETICA\" COLOR=BLACK SIZE=2>";
+
+$stmt="SELECT * from vicidial_scripts where script_id='$script_id';";
+$rslt=mysql_query($stmt, $link);
+$row=mysql_fetch_row($rslt);
+$script_name =		$row[1];
+$script_text =		$row[3];
+
+$script_text = eregi_replace('--A--vendor_lead_code--B--',"$vendor_lead_code",$script_text);
+$script_text = eregi_replace('--A--list_id--B--',"$list_id",$script_text);
+$script_text = eregi_replace('--A--gmt_offset_now--B--',"$gmt_offset_now",$script_text);
+$script_text = eregi_replace('--A--phone_code--B--',"$phone_code",$script_text);
+$script_text = eregi_replace('--A--phone_number--B--',"$phone_number",$script_text);
+$script_text = eregi_replace('--A--title--B--',"$title",$script_text);
+$script_text = eregi_replace('--A--first_name--B--',"$first_name",$script_text);
+$script_text = eregi_replace('--A--middle_initial--B--',"$middle_initial",$script_text);
+$script_text = eregi_replace('--A--last_name--B--',"$last_name",$script_text);
+$script_text = eregi_replace('--A--address1--B--',"$address1",$script_text);
+$script_text = eregi_replace('--A--address2--B--',"$address2",$script_text);
+$script_text = eregi_replace('--A--address3--B--',"$address3",$script_text);
+$script_text = eregi_replace('--A--city--B--',"$city",$script_text);
+$script_text = eregi_replace('--A--state--B--',"$state",$script_text);
+$script_text = eregi_replace('--A--province--B--',"$province",$script_text);
+$script_text = eregi_replace('--A--postal_code--B--',"$postal_code",$script_text);
+$script_text = eregi_replace('--A--country_code--B--',"$country_code",$script_text);
+$script_text = eregi_replace('--A--gender--B--',"$gender",$script_text);
+$script_text = eregi_replace('--A--date_of_birth--B--',"$date_of_birth",$script_text);
+$script_text = eregi_replace('--A--alt_phone--B--',"$alt_phone",$script_text);
+$script_text = eregi_replace('--A--email--B--',"$email",$script_text);
+$script_text = eregi_replace('--A--security_phrase--B--',"$security_phrase",$script_text);
+$script_text = eregi_replace('--A--comments--B--',"$comments",$script_text);
+$script_text = eregi_replace('--A--fullname--B--',"$RGfullname",$script_text);
+$script_text = eregi_replace('--A--user--B--',"$RGuser",$script_text);
+$script_text = eregi_replace("\n","<BR>",$script_text);
+
+
+echo "<FONT FACE=\"ARIAL,HELVETICA\" COLOR=BLACK SIZE=2>";
+
+echo "Preview Script: $script_id<BR>\n";
+echo "<TABLE WIDTH=400><TR><TD>\n";
+echo "<center><B>$script_name</B><BR></center>\n";
+echo "$script_text\n";
+echo "</TD></TR></TABLE></center>\n";
+
+echo "</BODY></HTML>\n";
+
+exit;
+}
+
+
+
+
+######################### HTML HEADER BEGIN #######################################
+if ($hh=='users') {$users_hh='bgcolor ="#FFFF99"'; $users_fc='BLACK';}	# yellow
+	else {$users_hh=''; $users_fc='WHITE';}
+if ($hh=='campaigns') {$campaigns_hh='bgcolor ="#FFCC99"'; $campaigns_fc='BLACK';}	# orange
+	else {$campaigns_hh=''; $campaigns_fc='WHITE';}
+if ($hh=='lists') {$lists_hh='bgcolor ="#FFCCCC"'; $lists_fc='BLACK';}	# red
+	else {$lists_hh=''; $lists_fc='WHITE';}
+if ($hh=='ingroups') {$ingroups_hh='bgcolor ="#CC99FF"'; $ingroups_fc='BLACK';} # purple
+	else {$ingroups_hh=''; $ingroups_fc='WHITE';}
+if ($hh=='remoteagent') {$remoteagent_hh='bgcolor ="#CCFFCC"'; $remoteagent_fc='BLACK';}	# green
+	else {$remoteagent_hh=''; $remoteagent_fc='WHITE';}
+if ($hh=='usergroups') {$usergroups_hh='bgcolor ="#CCFFFF"'; $usergroups_fc='BLACK';}	# cyan
+	else {$usergroups_hh=''; $usergroups_fc='WHITE';}
+if ($hh=='scripts') {$scripts_hh='bgcolor ="#99FFCC"'; $scripts_fc='BLACK';}	# light teal
+	else {$scripts_hh=''; $scripts_fc='WHITE';}
+if ($hh=='filters') {$filters_hh='bgcolor ="#CCCCCC"'; $filters_fc='BLACK';} # grey
+	else {$filters_hh=''; $filters_fc='WHITE';}
+if ($hh=='times') {$times_hh='bgcolor ="#99FF33"'; $times_fc='BLACK';} # hard teal
+	else {$times_hh=''; $times_fc='WHITE';}
+
+?>
+</title>
+<script language="Javascript">
+function openNewWindow(url) {
+  window.open (url,"",'width=500,height=300,scrollbars=yes,menubar=yes,address=yes');
+}
+</script>
+</head>
+<BODY BGCOLOR=white marginheight=0 marginwidth=0 leftmargin=0 topmargin=0>
+<?
+echo "<!-- INTERNATIONALIZATION-LINKS-PLACEHOLDER-VICIDIAL -->\n";
+?>
+<CENTER>
+<TABLE WIDTH=650 BGCOLOR=#D9E6FE cellpadding=2 cellspacing=0><TR BGCOLOR=#015B91><TD ALIGN=LEFT COLSPAN=7><FONT FACE="ARIAL,HELVETICA" COLOR=WHITE SIZE=2><B> &nbsp; VICIDIAL ADMIN - <a href="<? echo $PHP_SELF ?>?force_logout=1"><FONT FACE="ARIAL,HELVETICA" COLOR=WHITE SIZE=1>Logout</a></TD><TD ALIGN=RIGHT COLSPAN=3><FONT FACE="ARIAL,HELVETICA" COLOR=WHITE SIZE=2><B><? echo date("l F j, Y G:i:s A") ?> &nbsp; </TD></TR>
+
+<TR BGCOLOR=#000000>
+<TD ALIGN=CENTER <?=$users_hh?>><a href="<? echo $PHP_SELF ?>?ADD=0"><FONT FACE="ARIAL,HELVETICA" COLOR=<?=$users_fc?> SIZE=1><B> USERS </a></TD>
+<TD ALIGN=CENTER <?=$campaigns_hh?>><a href="<? echo $PHP_SELF ?>?ADD=10"><FONT FACE="ARIAL,HELVETICA" COLOR=<?=$campaigns_fc?> SIZE=1><B> CAMPAIGNS </a></TD>
+<TD ALIGN=CENTER <?=$lists_hh?>><a href="<? echo $PHP_SELF ?>?ADD=100"><FONT FACE="ARIAL,HELVETICA" COLOR=<?=$lists_fc?> SIZE=1><B> LISTS </a></TD>
+<TD ALIGN=CENTER <?=$scripts_hh?>><a href="<? echo $PHP_SELF ?>?ADD=1000000"><FONT FACE="ARIAL,HELVETICA" COLOR=<?=$scripts_fc?> SIZE=1><B> SCRIPTS </a></TD>
+<TD ALIGN=CENTER <?=$filters_hh?>><a href="<? echo $PHP_SELF ?>?ADD=10000000"><FONT FACE="ARIAL,HELVETICA" COLOR=<?=$filters_fc?> SIZE=1><B> FILTERS </a></TD>
+<TD ALIGN=CENTER <?=$ingroups_hh?>><a href="<? echo $PHP_SELF ?>?ADD=1000"><FONT FACE="ARIAL,HELVETICA" COLOR=<?=$ingroups_fc?> SIZE=1><B> IN-GROUPS </a></TD>
+<TD ALIGN=CENTER <?=$times_hh?>><a href="<? echo $PHP_SELF ?>?ADD=100000000"><FONT FACE="ARIAL,HELVETICA" COLOR=<?=$times_fc?> SIZE=1><B> CALL TIMES </a></TD>
+<TD ALIGN=CENTER <?=$usergroups_hh?>><a href="<? echo $PHP_SELF ?>?ADD=100000"><FONT FACE="ARIAL,HELVETICA" COLOR=<?=$usergroups_fc?> SIZE=1><B> USER GROUPS </a></TD>
+<TD ALIGN=CENTER <?=$remoteagent_hh?>><a href="<? echo $PHP_SELF ?>?ADD=10000"><FONT FACE="ARIAL,HELVETICA" COLOR=<?=$remoteagent_fc?> SIZE=1><B> REMOTE AGENTS </a></TD>
+<TD ALIGN=CENTER <?=$reports_hh?>><a href="server_stats.php"><FONT FACE="ARIAL,HELVETICA" COLOR=WHITE SIZE=1><B> REPORTS </a></TD>
+</TR>
+
+
+<? if (strlen($users_hh) > 1) { 
+	?>
+<TR BGCOLOR=#FFFF99><TD ALIGN=CENTER COLSPAN=10><FONT FACE="ARIAL,HELVETICA" COLOR=BLACK SIZE=1><B> &nbsp; <a href="<? echo $PHP_SELF ?>"><FONT FACE="ARIAL,HELVETICA" COLOR=BLACK SIZE=1>LIST USERS</a> &nbsp; &nbsp; | &nbsp; &nbsp; <a href="<? echo $PHP_SELF ?>?ADD=1"><FONT FACE="ARIAL,HELVETICA" COLOR=BLACK SIZE=1>ADD A NEW USER</a> &nbsp; &nbsp; | &nbsp; &nbsp; <a href="<? echo $PHP_SELF ?>?ADD=55"><FONT FACE="ARIAL,HELVETICA" COLOR=BLACK SIZE=1>SEARCH FOR A USER</a></TD></TR>
+<? } 
+if (strlen($campaigns_hh) > 1) { 
+	?>
+<TR BGCOLOR=#FFCC99><TD ALIGN=CENTER COLSPAN=10><FONT FACE="ARIAL,HELVETICA" COLOR=BLACK SIZE=1><B> &nbsp; <a href="<? echo $PHP_SELF ?>?ADD=11"><FONT FACE="ARIAL,HELVETICA" COLOR=BLACK SIZE=1>ADD CAMPAIGN</a> &nbsp; &nbsp; | &nbsp; &nbsp; <a href="<? echo $PHP_SELF ?>?ADD=10"><FONT FACE="ARIAL,HELVETICA" COLOR=BLACK SIZE=1>LIST CAMPAIGNS</a></TD></TR>
+<? } 
+if (strlen($lists_hh) > 1) { 
+	?>
+<TR BGCOLOR=#FFCCCC><TD ALIGN=CENTER COLSPAN=10><FONT FACE="ARIAL,HELVETICA" COLOR=BLACK SIZE=1><B> &nbsp; <a href="<? echo $PHP_SELF ?>?ADD=100"><FONT FACE="ARIAL,HELVETICA" COLOR=BLACK SIZE=1>SHOW LISTS</a> &nbsp; &nbsp; | &nbsp; &nbsp; <a href="<? echo $PHP_SELF ?>?ADD=111"><FONT FACE="ARIAL,HELVETICA" COLOR=BLACK SIZE=1>ADD NEW LIST</a> &nbsp; &nbsp; | &nbsp; &nbsp; <a href="admin_search_lead.php"><FONT FACE="ARIAL,HELVETICA" COLOR=BLACK SIZE=1>SEARCH FOR A LEAD</a> | &nbsp; &nbsp; <a href="<? echo $PHP_SELF ?>?ADD=121"><FONT FACE="ARIAL,HELVETICA" COLOR=BLACK SIZE=1>ADD NUMBER TO DNC</a> &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; | &nbsp; &nbsp; <a href="./listloaderMAIN.php"><FONT FACE="ARIAL,HELVETICA" COLOR=BLACK SIZE=1>LOAD NEW LEADS</a></TD></TR>
+<? } 
+if (strlen($scripts_hh) > 1) { 
+	?>
+<TR BGCOLOR=#99FFCC><TD ALIGN=CENTER COLSPAN=10><FONT FACE="ARIAL,HELVETICA" COLOR=BLACK SIZE=1><B> &nbsp; <a href="<? echo $PHP_SELF ?>?ADD=1111111"><FONT FACE="ARIAL,HELVETICA" COLOR=BLACK SIZE=1>ADD SCRIPT</a> &nbsp; &nbsp; | &nbsp; &nbsp; <a href="<? echo $PHP_SELF ?>?ADD=1000000"><FONT FACE="ARIAL,HELVETICA" COLOR=BLACK SIZE=1>VIEW SCRIPTS</a></TD></TR>
+<? } 
+if (strlen($filters_hh) > 1) { 
+	?>
+<TR BGCOLOR=#CCCCCC><TD ALIGN=CENTER COLSPAN=10><FONT FACE="ARIAL,HELVETICA" COLOR=BLACK SIZE=1><B> &nbsp; <a href="<? echo $PHP_SELF ?>?ADD=11111111"><FONT FACE="ARIAL,HELVETICA" COLOR=BLACK SIZE=1>ADD FILTER</a> &nbsp; &nbsp; | &nbsp; &nbsp; <a href="<? echo $PHP_SELF ?>?ADD=10000000"><FONT FACE="ARIAL,HELVETICA" COLOR=BLACK SIZE=1>VIEW FILTERS</a></TD></TR>
+<? } 
+if (strlen($ingroups_hh) > 1) { 
+	?>
+<TR BGCOLOR=#CC99FF><TD ALIGN=CENTER COLSPAN=10><FONT FACE="ARIAL,HELVETICA" COLOR=BLACK SIZE=1><B> &nbsp; <a href="<? echo $PHP_SELF ?>?ADD=1000"><FONT FACE="ARIAL,HELVETICA" COLOR=BLACK SIZE=1>SHOW IN-GROUPS</a> &nbsp; &nbsp; | &nbsp; &nbsp; <a href="<? echo $PHP_SELF ?>?ADD=1111"><FONT FACE="ARIAL,HELVETICA" COLOR=BLACK SIZE=1>ADD NEW IN-GROUP</a></TD></TR>
+<? } 
+if (strlen($times_hh) > 1) { 
+	?>
+<TR BGCOLOR=#99FF33><TD ALIGN=CENTER COLSPAN=10><FONT FACE="ARIAL,HELVETICA" COLOR=BLACK SIZE=1><B> &nbsp; <a href="<? echo $PHP_SELF ?>?ADD=100000000"><FONT FACE="ARIAL,HELVETICA" COLOR=BLACK SIZE=1>SHOW CALL TIMES</a> &nbsp; &nbsp; | &nbsp; &nbsp; <a href="<? echo $PHP_SELF ?>?ADD=111111111"><FONT FACE="ARIAL,HELVETICA" COLOR=BLACK SIZE=1>ADD NEW CALL TIME</a> &nbsp; &nbsp; | &nbsp; &nbsp; <a href="<? echo $PHP_SELF ?>?ADD=1000000000"><FONT FACE="ARIAL,HELVETICA" COLOR=BLACK SIZE=1>SHOW STATE CALL TIMES</a> &nbsp; &nbsp; |  &nbsp; &nbsp; <a href="<? echo $PHP_SELF ?>?ADD=1111111111"><FONT FACE="ARIAL,HELVETICA" COLOR=BLACK SIZE=1>ADD NEW STATE CALL TIME</a> &nbsp; </TD></TR>
+<? } 
+if (strlen($usergroups_hh) > 1) { 
+	?>
+<TR BGCOLOR=#CCFFFF><TD ALIGN=CENTER COLSPAN=10><FONT FACE="ARIAL,HELVETICA" COLOR=BLACK SIZE=1><B> &nbsp; <a href="<? echo $PHP_SELF ?>?ADD=111111"><FONT FACE="ARIAL,HELVETICA" COLOR=BLACK SIZE=1>ADD USER GROUP</a> &nbsp; &nbsp; | &nbsp; &nbsp; <a href="<? echo $PHP_SELF ?>?ADD=100000"><FONT FACE="ARIAL,HELVETICA" COLOR=BLACK SIZE=1>LIST USER GROUPS</a> &nbsp; &nbsp; | &nbsp; &nbsp; <a href="group_hourly_stats.php"><FONT FACE="ARIAL,HELVETICA" COLOR=BLACK SIZE=1>GROUP HOURLY</a></TD></TR>
+<? } 
+if (strlen($remoteagent_hh) > 1) { 
+	?>
+<TR BGCOLOR=#CCFFCC><TD ALIGN=CENTER COLSPAN=10><FONT FACE="ARIAL,HELVETICA" COLOR=BLACK SIZE=1><B> &nbsp; <a href="<? echo $PHP_SELF ?>?ADD=10000"><FONT FACE="ARIAL,HELVETICA" COLOR=BLACK SIZE=1>SHOW REMOTE AGENTS</a> &nbsp; &nbsp; | &nbsp; &nbsp; <a href="<? echo $PHP_SELF ?>?ADD=11111"><FONT FACE="ARIAL,HELVETICA" COLOR=BLACK SIZE=1>ADD NEW REMOTE AGENTS</a></TD></TR>
+<? } 
+if (strlen($reports_hh) > 1) { 
+	?>
+<TR BGCOLOR=#FFCC99><TD ALIGN=CENTER COLSPAN=10><FONT FACE="ARIAL,HELVETICA" COLOR=BLACK SIZE=1><B> &nbsp; </TD></TR>
+<? } ?>
+
+
+<TR><TD ALIGN=LEFT COLSPAN=10 HEIGHT=2 BGCOLOR=BLACK></TD></TR>
+<TR><TD ALIGN=LEFT COLSPAN=10>
+<? 
+######################### HTML HEADER BEGIN #######################################
+
+
+
+
+
+######################################################################################################
+######################################################################################################
+#######   1 series, ADD NEW forms for inserting new records into the database
+######################################################################################################
+######################################################################################################
+
+
+######################
+# ADD=1 display the ADD NEW USER FORM SCREEN
+######################
+
+if ($ADD==1)
+{
+echo "<TABLE><TR><TD>\n";
+echo "<FONT FACE=\"ARIAL,HELVETICA\" COLOR=BLACK SIZE=2>";
+
+echo "<br>ADD A NEW USER<form action=$PHP_SELF method=POST>\n";
+echo "<input type=hidden name=ADD value=2>\n";
+echo "<center><TABLE width=600 cellspacing=3>\n";
+echo "<tr bgcolor=#B6D3FC><td align=right>User Number: </td><td align=left><input type=text name=user size=20 maxlength=10>$NWB#vicidial_users-user$NWE</td></tr>\n";
+echo "<tr bgcolor=#B6D3FC><td align=right>Password: </td><td align=left><input type=text name=pass size=20 maxlength=10>$NWB#vicidial_users-pass$NWE</td></tr>\n";
+echo "<tr bgcolor=#B6D3FC><td align=right>Full Name: </td><td align=left><input type=text name=full_name size=20 maxlength=100>$NWB#vicidial_users-full_name$NWE</td></tr>\n";
+echo "<tr bgcolor=#B6D3FC><td align=right>User Level: </td><td align=left><select size=1 name=user_level>";
+$h=1;
+while ($h<=$LOGuser_level)
+	{
+	echo "<option>$h</option>";
+	$h++;
+	}
+echo "</select>$NWB#vicidial_users-user_level$NWE</td></tr>\n";
+echo "<tr bgcolor=#B6D3FC><td align=right>User Group: </td><td align=left><select size=1 name=user_group>\n";
+
+	$stmt="SELECT user_group,group_name from vicidial_user_groups order by user_group";
+	$rslt=mysql_query($stmt, $link);
+	$Ugroups_to_print = mysql_num_rows($rslt);
+	$Ugroups_list='';
+
+	$o=0;
+	while ($Ugroups_to_print > $o) {
+		$rowx=mysql_fetch_row($rslt);
+		$Ugroups_list .= "<option value=\"$rowx[0]\">$rowx[0] - $rowx[1]</option>\n";
+		$o++;
+	}
+echo "$Ugroups_list";
+echo "<option SELECTED>$user_group</option>\n";
+echo "<tr bgcolor=#B6D3FC><td align=right>Phone Login: </td><td align=left><input type=text name=phone_login size=20 maxlength=20>$NWB#vicidial_users-phone_login$NWE</td></tr>\n";
+echo "<tr bgcolor=#B6D3FC><td align=right>Phone Pass: </td><td align=left><input type=text name=phone_pass size=20 maxlength=20>$NWB#vicidial_users-phone_pass$NWE</td></tr>\n";
+echo "</select>$NWB#vicidial_users-user_group$NWE</td></tr>\n";
+echo "<tr bgcolor=#B6D3FC><td align=center colspan=2><input type=submit name=SUBMIT value=SUBMIT></td></tr>\n";
+echo "</TABLE></center>\n";
+
+}
+
+
+######################
+# ADD=11 display the ADD NEW CAMPAIGN FORM SCREEN
+######################
+
+if ($ADD==11)
+{
+echo "<TABLE><TR><TD>\n";
+echo "<FONT FACE=\"ARIAL,HELVETICA\" COLOR=BLACK SIZE=2>";
+
+echo "<br>ADD A NEW CAMPAIGN<form action=$PHP_SELF method=POST>\n";
+echo "<input type=hidden name=ADD value=21>\n";
+echo "<center><TABLE width=600 cellspacing=3>\n";
+echo "<tr bgcolor=#B6D3FC><td align=right>Campaign ID: </td><td align=left><input type=text name=campaign_id size=8 maxlength=8>$NWB#vicidial_campaigns-campaign_id$NWE</td></tr>\n";
+echo "<tr bgcolor=#B6D3FC><td align=right>Campaign Name: </td><td align=left><input type=text name=campaign_name size=30 maxlength=30>$NWB#vicidial_campaigns-campaign_name$NWE</td></tr>\n";
+echo "<tr bgcolor=#B6D3FC><td align=right>Active: </td><td align=left><select size=1 name=active><option>Y</option><option>N</option></select>$NWB#vicidial_campaigns-active$NWE</td></tr>\n";
+echo "<tr bgcolor=#B6D3FC><td align=right>Park Extension: </td><td align=left><input type=text name=park_ext size=10 maxlength=10>$NWB#vicidial_campaigns-park_ext$NWE</td></tr>\n";
+echo "<tr bgcolor=#B6D3FC><td align=right>Park Filename: </td><td align=left><input type=text name=park_file_name size=10 maxlength=10>$NWB#vicidial_campaigns-park_file_name$NWE</td></tr>\n";
+echo "<tr bgcolor=#B6D3FC><td align=right>Web Form: </td><td align=left><input type=text name=web_form_address size=50 maxlength=255>$NWB#vicidial_campaigns-web_form_address$NWE</td></tr>\n";
+echo "<tr bgcolor=#B6D3FC><td align=right>Allow Closers: </td><td align=left><select size=1 name=allow_closers><option>Y</option><option>N</option></select>$NWB#vicidial_campaigns-allow_closers$NWE</td></tr>\n";
+echo "<tr bgcolor=#B6D3FC><td align=right>Hopper Level: </td><td align=left><select size=1 name=hopper_level><option>1</option><option>5</option><option>10</option><option>50</option><option>100</option><option>200</option><option>500</option><option>1000</option></select>$NWB#vicidial_campaigns-hopper_level$NWE</td></tr>\n";
+echo "<tr bgcolor=#B6D3FC><td align=right>Auto Dial Level: </td><td align=left><select size=1 name=auto_dial_level><option selected>0</option><option>1</option><option>1.1</option><option>1.2</option><option>1.3</option><option>1.4</option><option>1.5</option><option>1.6</option><option>1.7</option><option>1.8</option><option>1.9</option><option>2.0</option><option>2.2</option><option>2.5</option><option>2.7</option><option>3.0</option><option>3.5</option><option>4.0</option></select>(0 = off)$NWB#vicidial_campaigns-auto_dial_level$NWE</td></tr>\n";
+echo "<tr bgcolor=#B6D3FC><td align=right>Next Agent Call: </td><td align=left><select size=1 name=next_agent_call><option >random</option><option>oldest_call_start</option><option>oldest_call_finish</option><option>overall_user_level</option></select>$NWB#vicidial_campaigns-next_agent_call$NWE</td></tr>\n";
+echo "<tr bgcolor=#B6D3FC><td align=right>Local Call Time: </td><td align=left><select size=1 name=local_call_time><option>24hours</option><option>9am-9pm</option><option>9am-5pm</option><option>12pm-5pm</option><option>12pm-9pm</option><option>5pm-9pm</option></select>$NWB#vicidial_campaigns-local_call_time$NWE</td></tr>\n";
+echo "<tr bgcolor=#B6D3FC><td align=right>Voicemail: </td><td align=left><input type=text name=voicemail_ext size=10 maxlength=10 value=\"$voicemail_ext\">$NWB#vicidial_campaigns-voicemail_ext$NWE</td></tr>\n";
+echo "<tr bgcolor=#B6D3FC><td align=right>Script: </td><td align=left><select size=1 name=script_id>\n";
+echo "$scripts_list";
+echo "</select>$NWB#vicidial_campaigns-campaign_script$NWE</td></tr>\n";
+echo "<tr bgcolor=#B6D3FC><td align=right>Get Call Launch: </td><td align=left><select size=1 name=get_call_launch><option selected>NONE</option><option>SCRIPT</option><option>WEBFORM</option></select>$NWB#vicidial_campaigns-get_call_launch$NWE</td></tr>\n";
+echo "<tr bgcolor=#B6D3FC><td align=center colspan=2><input type=submit name=SUBMIT value=SUBMIT></td></tr>\n";
+echo "</TABLE></center>\n";
+
+}
+
+
+######################
+# ADD=111 display the ADD NEW LIST FORM SCREEN
+######################
+
+if ($ADD==111)
+{
+echo "<TABLE><TR><TD>\n";
+echo "<FONT FACE=\"ARIAL,HELVETICA\" COLOR=BLACK SIZE=2>";
+
+echo "<br>ADD A NEW LIST<form action=$PHP_SELF method=POST>\n";
+echo "<input type=hidden name=ADD value=211>\n";
+echo "<center><TABLE width=600 cellspacing=3>\n";
+echo "<tr bgcolor=#B6D3FC><td align=right>List ID: </td><td align=left><input type=text name=list_id size=8 maxlength=8> (digits only)$NWB#vicidial_lists-list_id$NWE</td></tr>\n";
+echo "<tr bgcolor=#B6D3FC><td align=right>List Name: </td><td align=left><input type=text name=list_name size=20 maxlength=20>$NWB#vicidial_lists-list_name$NWE</td></tr>\n";
+echo "<tr bgcolor=#B6D3FC><td align=right>Campaign: </td><td align=left><select size=1 name=campaign_id>\n";
+
+	$stmt="SELECT campaign_id,campaign_name from vicidial_campaigns order by campaign_id";
+	$rslt=mysql_query($stmt, $link);
+	$campaigns_to_print = mysql_num_rows($rslt);
+	$campaigns_list='';
+
+	$o=0;
+	while ($campaigns_to_print > $o) {
+		$rowx=mysql_fetch_row($rslt);
+		$campaigns_list .= "<option value=\"$rowx[0]\">$rowx[0] - $rowx[1]</option>\n";
+		$o++;
+	}
+echo "$campaigns_list";
+echo "<option SELECTED>$campaign_id</option>\n";
+echo "</select>$NWB#vicidial_lists-campaign_id$NWE</td></tr>\n";
+echo "<tr bgcolor=#B6D3FC><td align=right>Active: </td><td align=left><select size=1 name=active><option>Y</option><option SELECTED>N</option></select>$NWB#vicidial_lists-active$NWE</td></tr>\n";
+echo "<tr bgcolor=#B6D3FC><td align=center colspan=2><input type=submit name=SUBMIT value=SUBMIT></td></tr>\n";
+echo "</TABLE></center>\n";
+
+}
+
+
+######################
+# ADD=121 display the ADD NUMBER TO DNC FORM SCREEN and add a new number
+######################
+
+if ($ADD==121)
+{
+echo "<TABLE><TR><TD>\n";
+echo "<FONT FACE=\"ARIAL,HELVETICA\" COLOR=BLACK SIZE=2>";
+
+if (strlen($phone_number) > 2)
+	{
+	$stmt="SELECT count(*) from vicidial_dnc where phone_number='$phone_number';";
+	$rslt=mysql_query($stmt, $link);
+	$row=mysql_fetch_row($rslt);
+	if ($row[0] > 0)
+		{echo "<br>DNC NOT ADDED - This phone number is already in the Do Not Call List: $phone_number<BR><BR>\n";}
+	else
+		{
+		$stmt="INSERT INTO vicidial_dnc (phone_number) values('$phone_number');";
+		$rslt=mysql_query($stmt, $link);
+
+		echo "<br><B>DNC ADDED: $phone_number</B><BR><BR>\n";
+
+		### LOG INSERTION TO LOG FILE ###
+		if ($WeBRooTWritablE > 0)
+			{
+			$fp = fopen ("./admin_changes_log.txt", "a");
+			fwrite ($fp, "$date|ADD A NEW DNC NUMBER|$PHP_AUTH_USER|$ip|'$phone_number'|\n");
+			fclose($fp);
+			}
+		}
+	}
+
+echo "<br>ADD A NUMBER TO THE DNC LIST<form action=$PHP_SELF method=POST>\n";
+echo "<input type=hidden name=ADD value=121>\n";
+echo "<center><TABLE width=600 cellspacing=3>\n";
+echo "<tr bgcolor=#B6D3FC><td align=right>Phone Number: </td><td align=left><input type=text name=phone_number size=12 maxlength=10> (digits only)$NWB#vicidial_list-dnc$NWE</td></tr>\n";
+echo "<tr bgcolor=#B6D3FC><td align=center colspan=2><input type=submit name=SUBMIT value=SUBMIT></td></tr>\n";
+echo "</TABLE></center>\n";
+
+}
+
+
+######################
+# ADD=1111 display the ADD NEW INBOUND GROUP SCREEN
+######################
+
+if ($ADD==1111)
+{
+echo "<TABLE><TR><TD>\n";
+echo "<FONT FACE=\"ARIAL,HELVETICA\" COLOR=BLACK SIZE=2>";
+
+echo "<br>ADD A NEW INBOUND GROUP<form action=$PHP_SELF method=POST>\n";
+echo "<input type=hidden name=ADD value=2111>\n";
+echo "<center><TABLE width=600 cellspacing=3>\n";
+echo "<tr bgcolor=#B6D3FC><td align=right>Group ID: </td><td align=left><input type=text name=group_id size=20 maxlength=20> (no spaces)$NWB#vicidial_inbound_groups-group_id$NWE</td></tr>\n";
+echo "<tr bgcolor=#B6D3FC><td align=right>Group Name: </td><td align=left><input type=text name=group_name size=30 maxlength=30>$NWB#vicidial_inbound_groups-group_name$NWE</td></tr>\n";
+echo "<tr bgcolor=#B6D3FC><td align=right>Group Color: </td><td align=left><input type=text name=group_color size=7 maxlength=7>$NWB#vicidial_inbound_groups-group_color$NWE</td></tr>\n";
+echo "<tr bgcolor=#B6D3FC><td align=right>Active: </td><td align=left><select size=1 name=active><option SELECTED>Y</option><option>N</option></select>$NWB#vicidial_inbound_groups-active$NWE</td></tr>\n";
+echo "<tr bgcolor=#B6D3FC><td align=right>Web Form: </td><td align=left><input type=text name=web_form_address size=50 maxlength=255 value=\"$web_form_address\">$NWB#vicidial_inbound_groups-web_form_address$NWE</td></tr>\n";
+echo "<tr bgcolor=#B6D3FC><td align=right>Voicemail: </td><td align=left><input type=text name=voicemail_ext size=10 maxlength=10 value=\"$voicemail_ext\">$NWB#vicidial_inbound_groups-voicemail_ext$NWE</td></tr>\n";
+echo "<tr bgcolor=#B6D3FC><td align=right>Next Agent Call: </td><td align=left><select size=1 name=next_agent_call><option >random</option><option>oldest_call_start</option><option>oldest_call_finish</option><option>overall_user_level</option></select>$NWB#vicidial_inbound_groups-next_agent_call$NWE</td></tr>\n";
+echo "<tr bgcolor=#B6D3FC><td align=right>Fronter Display: </td><td align=left><select size=1 name=fronter_display><option SELECTED>Y</option><option>N</option></select>$NWB#vicidial_inbound_groups-fronter_display$NWE</td></tr>\n";
+echo "<tr bgcolor=#B6D3FC><td align=right>Script: </td><td align=left><select size=1 name=script_id>\n";
+echo "$scripts_list";
+echo "</select>$NWB#vicidial_inbound_groups-ingroup_script$NWE</td></tr>\n";
+echo "<tr bgcolor=#B6D3FC><td align=right>Get Call Launch: </td><td align=left><select size=1 name=get_call_launch><option selected>NONE</option><option>SCRIPT</option><option>WEBFORM</option></select>$NWB#vicidial_inbound_groups-get_call_launch$NWE</td></tr>\n";
+echo "<tr bgcolor=#B6D3FC><td align=center colspan=2><input type=submit name=SUBMIT value=SUBMIT></td></tr>\n";
+echo "</TABLE></center>\n";
+
+}
+
+
+######################
+# ADD=11111 display the ADD NEW REMOTE AGENTS SCREEN
+######################
+
+if ($ADD==11111)
+{
+echo "<TABLE><TR><TD>\n";
+echo "<FONT FACE=\"ARIAL,HELVETICA\" COLOR=BLACK SIZE=2>";
+
+echo "<br>ADD NEW REMOTE AGENTS<form action=$PHP_SELF method=POST>\n";
+echo "<input type=hidden name=ADD value=21111>\n";
+echo "<center><TABLE width=600 cellspacing=3>\n";
+echo "<tr bgcolor=#B6D3FC><td align=right>User ID Start: </td><td align=left><input type=text name=user_start size=6 maxlength=6> (numbers only, incremented)$NWB#vicidial_remote_agents-user_start$NWE</td></tr>\n";
+echo "<tr bgcolor=#B6D3FC><td align=right>Number of Lines: </td><td align=left><input type=text name=number_of_lines size=3 maxlength=3> (numbers only)$NWB#vicidial_remote_agents-number_of_lines$NWE</td></tr>\n";
+echo "<tr bgcolor=#B6D3FC><td align=right>Server IP: </td><td align=left><select size=1 name=server_ip>\n";
+echo "$servers_list";
+echo "</select>$NWB#vicidial_remote_agents-server_ip$NWE</td></tr>\n";
+echo "<tr bgcolor=#B6D3FC><td align=right>External Extension: </td><td align=left><input type=text name=conf_exten size=20 maxlength=20> (dialplan number dialed to reach agents)$NWB#vicidial_remote_agents-conf_exten$NWE</td></tr>\n";
+echo "<tr bgcolor=#B6D3FC><td align=right>Status: </td><td align=left><select size=1 name=status><option>ACTIVE</option><option SELECTED>INACTIVE</option></select>$NWB#vicidial_remote_agents-status$NWE</td></tr>\n";
+echo "<tr bgcolor=#B6D3FC><td align=right>Campaign: </td><td align=left><select size=1 name=campaign_id>\n";
+echo "$campaigns_list";
+echo "</select>$NWB#vicidial_remote_agents-campaign_id$NWE</td></tr>\n";
+echo "<tr bgcolor=#B6D3FC><td align=right>Inbound Groups: </td><td align=left>\n";
+echo "$groups_list";
+echo "$NWB#vicidial_remote_agents-closer_campaigns$NWE</td></tr>\n";
+echo "<tr bgcolor=#B6D3FC><td align=center colspan=2><input type=submit name=SUBMIT value=SUBMIT></td></tr>\n";
+echo "</TABLE></center>\n";
+echo "NOTE: It can take up to 30 seconds for changes submitted on this screen to go live\n";
+
+}
+
+
+######################
+# ADD=111111 display the ADD NEW USERS GROUP SCREEN
+######################
+
+if ($ADD==111111)
+{
+echo "<TABLE><TR><TD>\n";
+echo "<FONT FACE=\"ARIAL,HELVETICA\" COLOR=BLACK SIZE=2>";
+
+echo "<br>ADD NEW USERS GROUP<form action=$PHP_SELF method=POST>\n";
+echo "<input type=hidden name=ADD value=211111>\n";
+echo "<center><TABLE width=600 cellspacing=3>\n";
+echo "<tr bgcolor=#B6D3FC><td align=right>Group: </td><td align=left><input type=text name=user_group size=15 maxlength=20> (no spaces or punctuation)$NWB#vicidial_user_groups-user_group$NWE</td></tr>\n";
+echo "<tr bgcolor=#B6D3FC><td align=right>Description: </td><td align=left><input type=text name=group_name size=40 maxlength=40> (description of group)$NWB#vicidial_user_groups-group_name$NWE</td></tr>\n";
+echo "<tr bgcolor=#B6D3FC><td align=center colspan=2><input type=submit name=SUBMIT value=SUBMIT></td></tr>\n";
+echo "</TABLE></center>\n";
+
+}
+
+
+######################
+# ADD=1111111 display the ADD NEW SCRIPT SCREEN
+######################
+
+if ($ADD==1111111)
+{
+echo "<TABLE><TR><TD>\n";
+echo "<FONT FACE=\"ARIAL,HELVETICA\" COLOR=BLACK SIZE=2>";
+
+echo "<br>ADD NEW SCRIPT<form action=$PHP_SELF method=POST>\n";
+echo "<input type=hidden name=ADD value=2111111>\n";
+echo "<center><TABLE width=600 cellspacing=3>\n";
+echo "<tr bgcolor=#B6D3FC><td align=right>Script ID: </td><td align=left><input type=text name=script_id size=12 maxlength=10> (no spaces or punctuation)$NWB#vicidial_scripts-script_id$NWE</td></tr>\n";
+echo "<tr bgcolor=#B6D3FC><td align=right>Script Name: </td><td align=left><input type=text name=script_name size=40 maxlength=50> (title of the script)$NWB#vicidial_scripts-script_name$NWE</td></tr>\n";
+echo "<tr bgcolor=#B6D3FC><td align=right>Script Comments: </td><td align=left><input type=text name=script_comments size=50 maxlength=255> $NWB#vicidial_scripts-script_comments$NWE</td></tr>\n";
+echo "<tr bgcolor=#B6D3FC><td align=right>Active: </td><td align=left><select size=1 name=active><option SELECTED>Y</option><option>N</option></select>$NWB#vicidial_scripts-active$NWE</td></tr>\n";
+echo "<tr bgcolor=#B6D3FC><td align=right>Script Text: </td><td align=left><TEXTAREA NAME=script_text ROWS=20 COLS=50 value=\"\"></TEXTAREA> $NWB#vicidial_scripts-script_text$NWE</td></tr>\n";
+echo "<tr bgcolor=#B6D3FC><td align=center colspan=2><input type=submit name=SUBMIT value=SUBMIT></td></tr>\n";
+echo "</TABLE></center>\n";
+
+}
+
+
+######################
+# ADD=11111111 display the ADD NEW FILTER SCREEN
+######################
+
+if ($ADD==11111111)
+{
+echo "<TABLE><TR><TD>\n";
+echo "<FONT FACE=\"ARIAL,HELVETICA\" COLOR=BLACK SIZE=2>";
+
+echo "<br>ADD NEW FILTER<form action=$PHP_SELF method=POST>\n";
+echo "<input type=hidden name=ADD value=21111111>\n";
+echo "<center><TABLE width=600 cellspacing=3>\n";
+echo "<tr bgcolor=#B6D3FC><td align=right>Filter ID: </td><td align=left><input type=text name=lead_filter_id size=12 maxlength=10> (no spaces or punctuation)$NWB#vicidial_lead_filters-lead_filter_id$NWE</td></tr>\n";
+echo "<tr bgcolor=#B6D3FC><td align=right>Filter Name: </td><td align=left><input type=text name=lead_filter_name size=30 maxlength=30> (short description of the filter)$NWB#vicidial_lead_filters-lead_filter_name$NWE</td></tr>\n";
+echo "<tr bgcolor=#B6D3FC><td align=right>Filter Comments: </td><td align=left><input type=text name=lead_filter_comments size=50 maxlength=255> $NWB#vicidial_lead_filters-lead_filter_comments$NWE</td></tr>\n";
+echo "<tr bgcolor=#B6D3FC><td align=right>Filter SQL: </td><td align=left><TEXTAREA NAME=lead_filter_sql ROWS=20 COLS=50 value=\"\"></TEXTAREA> $NWB#vicidial_lead_filters-lead_filter_sql$NWE</td></tr>\n";
+echo "<tr bgcolor=#B6D3FC><td align=center colspan=2><input type=submit name=SUBMIT value=SUBMIT></td></tr>\n";
+echo "</TABLE></center>\n";
+}
+
+
+######################
+# ADD=111111111 display the ADD NEW CALL TIME SCREEN
+######################
+
+if ($ADD==111111111)
+{
+echo "<TABLE><TR><TD>\n";
+echo "<FONT FACE=\"ARIAL,HELVETICA\" COLOR=BLACK SIZE=2>";
+
+echo "<br>ADD NEW CALL TIME<form action=$PHP_SELF method=POST>\n";
+echo "<input type=hidden name=ADD value=211111111>\n";
+echo "<center><TABLE width=620 cellspacing=3>\n";
+echo "<tr bgcolor=#B6D3FC><td align=right>Call Time ID: </td><td align=left><input type=text name=call_time_id size=12 maxlength=10> (no spaces or punctuation)$NWB#vicidial_call_times-call_time_id$NWE</td></tr>\n";
+echo "<tr bgcolor=#B6D3FC><td align=right>Call Time Name: </td><td align=left><input type=text name=call_time_name size=30 maxlength=30> (short description of the call time)$NWB#vicidial_call_times-call_time_name$NWE</td></tr>\n";
+echo "<tr bgcolor=#B6D3FC><td align=right>Call Time Comments: </td><td align=left><input type=text name=call_time_comments size=50 maxlength=255> $NWB#vicidial_call_times-call_time_comments$NWE</td></tr>\n";
+
+echo "<tr bgcolor=#B6D3FC><td align=center colspan=2>Day and time options will appear once you have created the Call Time Definition</td></tr>\n";
+echo "<tr bgcolor=#B6D3FC><td align=center colspan=2><input type=submit name=SUBMIT value=SUBMIT></td></tr>\n";
+echo "</TABLE></center>\n";
+}
+
+
+######################
+# ADD=1111111111 display the ADD NEW STATE CALL TIME SCREEN
+######################
+
+if ($ADD==1111111111)
+{
+echo "<TABLE><TR><TD>\n";
+echo "<FONT FACE=\"ARIAL,HELVETICA\" COLOR=BLACK SIZE=2>";
+
+echo "<br>ADD NEW STATE CALL TIME<form action=$PHP_SELF method=POST>\n";
+echo "<input type=hidden name=ADD value=2111111111>\n";
+echo "<center><TABLE width=620 cellspacing=3>\n";
+echo "<tr bgcolor=#B6D3FC><td align=right>State Call Time ID: </td><td align=left><input type=text name=call_time_id size=12 maxlength=10> (no spaces or punctuation)$NWB#vicidial_call_times-call_time_id$NWE</td></tr>\n";
+echo "<tr bgcolor=#B6D3FC><td align=right>State Call Time State: </td><td align=left><input type=text name=state_call_time_state size=4 maxlength=2> (no spaces or punctuation)$NWB#vicidial_call_times-state_call_time_state$NWE</td></tr>\n";
+echo "<tr bgcolor=#B6D3FC><td align=right>State Call Time Name: </td><td align=left><input type=text name=call_time_name size=30 maxlength=30> (short description of the call time)$NWB#vicidial_call_times-call_time_name$NWE</td></tr>\n";
+echo "<tr bgcolor=#B6D3FC><td align=right>State Call Time Comments: </td><td align=left><input type=text name=call_time_comments size=50 maxlength=255> $NWB#vicidial_call_times-call_time_comments$NWE</td></tr>\n";
+
+echo "<tr bgcolor=#B6D3FC><td align=center colspan=2>Day and time options will appear once you have created the Call Time Definition</td></tr>\n";
+echo "<tr bgcolor=#B6D3FC><td align=center colspan=2><input type=submit name=SUBMIT value=SUBMIT></td></tr>\n";
+echo "</TABLE></center>\n";
+}
+
+
+
+######################################################################################################
+######################################################################################################
+#######   2 series, validates form data and inserts the new record into the database
+######################################################################################################
+######################################################################################################
+
+
+######################
+# ADD=2 adds the new user to the system
+######################
+
+if ($ADD==2)
+{
+	echo "<FONT FACE=\"ARIAL,HELVETICA\" COLOR=BLACK SIZE=2>";
+	$stmt="SELECT count(*) from vicidial_users where user='$user';";
+	$rslt=mysql_query($stmt, $link);
+	$row=mysql_fetch_row($rslt);
+	if ($row[0] > 0)
+		{echo "<br>USER NOT ADDED - there is already a user in the system with this user number\n";}
+	else
+		{
+		 if ( (strlen($user) < 2) or (strlen($pass) < 2) or (strlen($full_name) < 2) or (strlen($user) > 8) )
+			{
+			 echo "<br>USER NOT ADDED - Please go back and look at the data you entered\n";
+			 echo "<br>user id must be between 2 and 8 characters long\n";
+			 echo "<br>full name and password must be at least 2 characters long\n";
+			}
+		 else
+			{
+			echo "<br><B>USER ADDED: $user</B>\n";
+
+			$stmt="INSERT INTO vicidial_users (user,pass,full_name,user_level,user_group,phone_login,phone_pass) values('$user','$pass','$full_name','$user_level','$user_group','$phone_login','$phone_pass');";
+			$rslt=mysql_query($stmt, $link);
+
+			### LOG CHANGES TO LOG FILE ###
+			if ($WeBRooTWritablE > 0)
+				{
+				$fp = fopen ("./admin_changes_log.txt", "a");
+				fwrite ($fp, "$date|ADD A USER          |$PHP_AUTH_USER|$ip|'$user','$pass','$full_name','$user_level','$user_group','$phone_login','$phone_pass'|\n");
+				fclose($fp);
+				}
+			}
+		}
+$ADD=3;
+}
+
+######################
+# ADD=21 adds the new campaign to the system
+######################
+
+if ($ADD==21)
+{
+
+	echo "<FONT FACE=\"ARIAL,HELVETICA\" COLOR=BLACK SIZE=2>";
+	$stmt="SELECT count(*) from vicidial_campaigns where campaign_id='$campaign_id';";
+	$rslt=mysql_query($stmt, $link);
+	$row=mysql_fetch_row($rslt);
+	if ($row[0] > 0)
+		{echo "<br>CAMPAIGN NOT ADDED - there is already a campaign in the system with this ID\n";}
+	else
+		{
+		 if ( (strlen($campaign_id) < 2) or (strlen($campaign_id) > 8) or (strlen($campaign_name) < 6)  or (strlen($campaign_name) > 40) )
+			{
+			 echo "<br>CAMPAIGN NOT ADDED - Please go back and look at the data you entered\n";
+			 echo "<br>campaign ID must be between 2 and 8 characters in length\n";
+			 echo "<br>campaign name must be between 6 and 40 characters in length\n";
+			}
+		 else
+			{
+			echo "<br><B>CAMPAIGN ADDED: $campaign_id</B>\n";
+
+			$stmt="INSERT INTO vicidial_campaigns (campaign_id,campaign_name,active,dial_status_a,lead_order,park_ext,park_file_name,web_form_address,allow_closers,hopper_level,auto_dial_level,next_agent_call,local_call_time,voicemail_ext,campaign_script,get_call_launch) values('$campaign_id','$campaign_name','$active','NEW','DOWN','$park_ext','$park_file_name','" . mysql_real_escape_string($web_form_address) . "','$allow_closers','$hopper_level','$auto_dial_level','$next_agent_call','$local_call_time','$voicemail_ext','$script_id','$get_call_launch');";
+			$rslt=mysql_query($stmt, $link);
+
+			$stmt="INSERT INTO vicidial_campaign_stats (campaign_id) values('$campaign_id');";
+			$rslt=mysql_query($stmt, $link);
+
+			echo "<!-- $stmt -->";
+			### LOG CHANGES TO LOG FILE ###
+			if ($WeBRooTWritablE > 0)
+				{
+				$fp = fopen ("./admin_changes_log.txt", "a");
+				fwrite ($fp, "$date|ADD A NEW CAMPAIGN  |$PHP_AUTH_USER|$ip|$stmt|\n");
+				fclose($fp);
+				}
+
+			}
+		}
+$ADD=31;
+}
+
+######################
+# ADD=22 adds the new campaign status to the system
+######################
+
+if ($ADD==22)
+{
+
+	echo "<FONT FACE=\"ARIAL,HELVETICA\" COLOR=BLACK SIZE=2>";
+	$stmt="SELECT count(*) from vicidial_campaign_statuses where campaign_id='$campaign_id' and status='$status';";
+	$rslt=mysql_query($stmt, $link);
+	$row=mysql_fetch_row($rslt);
+	if ($row[0] > 0)
+		{echo "<br>CAMPAIGN STATUS NOT ADDED - there is already a campaign-status in the system with this name\n";}
+	else
+		{
+		$stmt="SELECT count(*) from vicidial_statuses where status='$status';";
+		$rslt=mysql_query($stmt, $link);
+		$row=mysql_fetch_row($rslt);
+		if ($row[0] > 0)
+			{echo "<br>CAMPAIGN STATUS NOT ADDED - there is already a global-status in the system with this name\n";}
+		else
+			{
+			 if ( (strlen($campaign_id) < 2) or (strlen($status) < 1) or (strlen($status_name) < 2) )
+				{
+				 echo "<br>CAMPAIGN STATUS NOT ADDED - Please go back and look at the data you entered\n";
+				 echo "<br>status must be between 1 and 8 characters in length\n";
+				 echo "<br>status name must be between 2 and 30 characters in length\n";
+				}
+			 else
+				{
+				echo "<br><B>CAMPAIGN STATUS ADDED: $campaign_id - $status</B>\n";
+
+				$stmt="INSERT INTO vicidial_campaign_statuses values('$status','$status_name','$selectable','$campaign_id');";
+				$rslt=mysql_query($stmt, $link);
+
+				### LOG CHANGES TO LOG FILE ###
+				if ($WeBRooTWritablE > 0)
+					{
+					$fp = fopen ("./admin_changes_log.txt", "a");
+					fwrite ($fp, "$date|ADD A NEW CAMPAIGN STATUS |$PHP_AUTH_USER|$ip|'$status','$status_name','$selectable','$campaign_id'|\n");
+					fclose($fp);
+					}
+				}
+			}
+		}
+$ADD=31;
+}
+
+
+######################
+# ADD=23 adds the new campaign hotkey to the system
+######################
+
+if ($ADD==23)
+{
+	$HKstatus_data = explode('-----',$HKstatus);
+	$status = $HKstatus_data[0];
+	$status_name = $HKstatus_data[1];
+
+	echo "<FONT FACE=\"ARIAL,HELVETICA\" COLOR=BLACK SIZE=2>";
+	$stmt="SELECT count(*) from vicidial_campaign_hotkeys where campaign_id='$campaign_id' and hotkey='$hotkey' and hotkey='$hotkey';";
+	$rslt=mysql_query($stmt, $link);
+	$row=mysql_fetch_row($rslt);
+	if ($row[0] > 0)
+		{echo "<br>CAMPAIGN HOTKEY NOT ADDED - there is already a campaign-hotkey in the system with this hotkey\n";}
+	else
+		{
+		 if ( (strlen($campaign_id) < 2) or (strlen($status) < 1) or (strlen($hotkey) < 1) )
+			{
+			 echo "<br>CAMPAIGN HOTKEY NOT ADDED - Please go back and look at the data you entered\n";
+			 echo "<br>hotkey must be a single character between 1 and 9 \n";
+			 echo "<br>status must be between 1 and 8 characters in length\n";
+			}
+		 else
+			{
+			echo "<br><B>CAMPAIGN HOTKEY ADDED: $campaign_id - $status - $hotkey</B>\n";
+
+			$stmt="INSERT INTO vicidial_campaign_hotkeys values('$status','$hotkey','$status_name','$selectable','$campaign_id');";
+			$rslt=mysql_query($stmt, $link);
+
+			### LOG CHANGES TO LOG FILE ###
+			if ($WeBRooTWritablE > 0)
+				{
+				$fp = fopen ("./admin_changes_log.txt", "a");
+				fwrite ($fp, "$date|ADD A NEW CAMPAIGN HOTKEY |$PHP_AUTH_USER|$ip|'$status','$hotkey','$status_name','$selectable','$campaign_id'|\n");
+				fclose($fp);
+				}
+			}
+		}
+$ADD=31;
+}
+
+
+######################
+# ADD=25 adds the new campaign lead recycle entry to the system
+######################
+
+if ($ADD==25)
+{
+	$status = eregi_replace("-----.*",'',$status);
+	echo "<FONT FACE=\"ARIAL,HELVETICA\" COLOR=BLACK SIZE=2>";
+	$stmt="SELECT count(*) from vicidial_lead_recycle where campaign_id='$campaign_id' and status='$status';";
+	$rslt=mysql_query($stmt, $link);
+	$row=mysql_fetch_row($rslt);
+	if ($row[0] > 0)
+		{echo "<br>CAMPAIGN LEAD RECYCLE NOT ADDED - there is already a lead-recycle for this campaign with this status\n";}
+	else
+		{
+		 if ( (strlen($campaign_id) < 2) or (strlen($status) < 1) or ($attempt_delay < 120) or ($attempt_maximum < 1) or ($attempt_maximum > 10) )
+			{
+			 echo "<br>CAMPAIGN LEAD RECYCLE NOT ADDED - Please go back and look at the data you entered\n";
+			 echo "<br>status must be between 1 and 6 characters in length\n";
+			 echo "<br>attempt delay must be at least 120 seconds\n";
+			 echo "<br>maximum attempts must be from 1 to 10\n";
+			}
+		 else
+			{
+			echo "<br><B>CAMPAIGN LEAD RECYCLE ADDED: $campaign_id - $status - $attempt_delay</B>\n";
+
+			$stmt="INSERT INTO vicidial_lead_recycle(campaign_id,status,attempt_delay,attempt_maximum,active) values('$campaign_id','$status','$attempt_delay','$attempt_maximum','$active');";
+			$rslt=mysql_query($stmt, $link);
+
+			### LOG CHANGES TO LOG FILE ###
+			if ($WeBRooTWritablE > 0)
+				{
+				$fp = fopen ("./admin_changes_log.txt", "a");
+				fwrite ($fp, "$date|ADD A NEW LEAD RECYCLE    |$PHP_AUTH_USER|$ip|$stmt|\n");
+				fclose($fp);
+				}
+			}
+		}
+$ADD=31;
+}
+
+
+######################
+# ADD=211 adds the new list to the system
+######################
+
+if ($ADD==211)
+{
+	echo "<FONT FACE=\"ARIAL,HELVETICA\" COLOR=BLACK SIZE=2>";
+	$stmt="SELECT count(*) from vicidial_lists where list_id='$list_id';";
+	$rslt=mysql_query($stmt, $link);
+	$row=mysql_fetch_row($rslt);
+	if ($row[0] > 0)
+		{echo "<br>LIST NOT ADDED - there is already a list in the system with this ID\n";}
+	else
+		{
+		 if ( (strlen($campaign_id) < 2) or (strlen($list_name) < 2)  or (strlen($list_id) < 2) or (strlen($list_id) > 8) )
+			{
+			 echo "<br>LIST NOT ADDED - Please go back and look at the data you entered\n";
+			 echo "<br>List ID must be between 2 and 8 characters in length\n";
+			 echo "<br>List name must be at least 2 characters in length\n";
+			 }
+		 else
+			{
+			echo "<br><B>LIST ADDED: $list_id</B>\n";
+
+			$stmt="INSERT INTO vicidial_lists values('$list_id','$list_name','$campaign_id','$active');";
+			$rslt=mysql_query($stmt, $link);
+
+			### LOG CHANGES TO LOG FILE ###
+			if ($WeBRooTWritablE > 0)
+				{
+				$fp = fopen ("./admin_changes_log.txt", "a");
+				fwrite ($fp, "$date|ADD A NEW LIST      |$PHP_AUTH_USER|$ip|'$list_id','$list_name','$campaign_id','$active'|\n");
+				fclose($fp);
+				}
+			}
+		}
+$ADD=311;
+}
+
+
+
+######################
+# ADD=2111 adds the new inbound group to the system
+######################
+
+if ($ADD==2111)
+{
+	echo "<FONT FACE=\"ARIAL,HELVETICA\" COLOR=BLACK SIZE=2>";
+	$stmt="SELECT count(*) from vicidial_inbound_groups where group_id='$group_id';";
+	$rslt=mysql_query($stmt, $link);
+	$row=mysql_fetch_row($rslt);
+	if ($row[0] > 0)
+		{echo "<br>GROUP NOT ADDED - there is already a group in the system with this ID\n";}
+	else
+		{
+		 if ( (strlen($group_id) < 2) or (strlen($group_name) < 2)  or (strlen($group_color) < 2) or (strlen($group_id) > 20) or (eregi(' ',$group_id)) or (eregi("\-",$group_id)) or (eregi("\+",$group_id)) )
+			{
+			 echo "<br>GROUP NOT ADDED - Please go back and look at the data you entered\n";
+			 echo "<br>Group ID must be between 2 and 20 characters in length and contain no ' -+'.\n";
+			 echo "<br>Group name and group color must be at least 2 characters in length\n";
+			}
+		 else
+			{
+			$stmt="INSERT INTO vicidial_inbound_groups (group_id,group_name,group_color,active,web_form_address,voicemail_ext,next_agent_call,fronter_display,ingroup_script,get_call_launch) values('$group_id','$group_name','$group_color','$active','" . mysql_real_escape_string($web_form_address) . "','$voicemail_ext','$next_agent_call','$fronter_display','$script_id','$get_call_launch');";
+			$rslt=mysql_query($stmt, $link);
+
+			echo "<br><B>GROUP ADDED: $group_id</B>\n";
+
+			### LOG CHANGES TO LOG FILE ###
+			if ($WeBRooTWritablE > 0)
+				{
+				$fp = fopen ("./admin_changes_log.txt", "a");
+				fwrite ($fp, "$date|ADD A NEW GROUP     |$PHP_AUTH_USER|$ip|$stmt|\n");
+				fclose($fp);
+				}
+			}
+		}
+$ADD=1000;
+}
+
+
+######################
+# ADD=21111 adds new remote agents to the system
+######################
+
+if ($ADD==21111)
+{
+	echo "<FONT FACE=\"ARIAL,HELVETICA\" COLOR=BLACK SIZE=2>";
+	$stmt="SELECT count(*) from vicidial_remote_agents where server_ip='$server_ip' and user_start='$user_start';";
+	$rslt=mysql_query($stmt, $link);
+	$row=mysql_fetch_row($rslt);
+	if ($row[0] > 0)
+		{echo "<br>REMOTE AGENTS NOT ADDED - there is already a remote agents entry starting with this userID\n";}
+	else
+		{
+		 if ( (strlen($server_ip) < 2) or (strlen($user_start) < 2)  or (strlen($campaign_id) < 2) or (strlen($conf_exten) < 2) )
+			{
+			 echo "<br>REMOTE AGENTS NOT ADDED - Please go back and look at the data you entered\n";
+			 echo "<br>User ID start and external extension must be at least 2 characters in length\n";
+			 }
+		 else
+			{
+			$stmt="INSERT INTO vicidial_remote_agents values('','$user_start','$number_of_lines','$server_ip','$conf_exten','$status','$campaign_id','$groups_value');";
+			$rslt=mysql_query($stmt, $link);
+
+			echo "<br><B>REMOTE AGENTS ADDED: $user_start</B>\n";
+
+			### LOG CHANGES TO LOG FILE ###
+			if ($WeBRooTWritablE > 0)
+				{
+				$fp = fopen ("./admin_changes_log.txt", "a");
+				fwrite ($fp, "$date|ADD A NEW REMOTE AGENTS ENTRY     |$PHP_AUTH_USER|$ip|'$user_start','$number_of_lines','$server_ip','$conf_exten','$status','$campaign_id','$groups_value'|\n");
+				fclose($fp);
+				}
+			}
+		}
+$ADD=10000;
+}
+
+######################
+# ADD=211111 adds new user group to the system
+######################
+
+if ($ADD==211111)
+{
+	echo "<FONT FACE=\"ARIAL,HELVETICA\" COLOR=BLACK SIZE=2>";
+	$stmt="SELECT count(*) from vicidial_user_groups where user_group='$user_group';";
+	$rslt=mysql_query($stmt, $link);
+	$row=mysql_fetch_row($rslt);
+	if ($row[0] > 0)
+		{echo "<br>USER GROUP NOT ADDED - there is already a user group entry with this name\n";}
+	else
+		{
+		 if ( (strlen($user_group) < 2) or (strlen($group_name) < 2) )
+			{
+			 echo "<br>USER GROUP NOT ADDED - Please go back and look at the data you entered\n";
+			 echo "<br>Group name and description must be at least 2 characters in length\n";
+			 }
+		 else
+			{
+			$stmt="INSERT INTO vicidial_user_groups values('$user_group','$group_name');";
+			$rslt=mysql_query($stmt, $link);
+
+			echo "<br><B>USER GROUP ADDED: $user_start</B>\n";
+
+			### LOG CHANGES TO LOG FILE ###
+			if ($WeBRooTWritablE > 0)
+				{
+				$fp = fopen ("./admin_changes_log.txt", "a");
+				fwrite ($fp, "$date|ADD A NEW USER GROUP ENTRY     |$PHP_AUTH_USER|$ip|'$user_group','$group_name'|\n");
+				fclose($fp);
+				}
+			}
+		}
+$ADD=100000;
+}
+
+######################
+# ADD=2111111 adds new script to the system
+######################
+
+if ($ADD==2111111)
+{
+	echo "<FONT FACE=\"ARIAL,HELVETICA\" COLOR=BLACK SIZE=2>";
+	$stmt="SELECT count(*) from vicidial_scripts where script_id='$script_id';";
+	$rslt=mysql_query($stmt, $link);
+	$row=mysql_fetch_row($rslt);
+	if ($row[0] > 0)
+		{echo "<br>SCRIPT NOT ADDED - there is already a script entry with this name\n";}
+	else
+		{
+		 if ( (strlen($script_id) < 2) or (strlen($script_name) < 2) or (strlen($script_text) < 2) )
+			{
+			 echo "<br>SCRIPT NOT ADDED - Please go back and look at the data you entered\n";
+			 echo "<br>Script name, description and text must be at least 2 characters in length\n";
+			 }
+		 else
+			{
+			$stmt="INSERT INTO vicidial_scripts values('$script_id','$script_name','$script_comments','" . mysql_real_escape_string($script_text) . "','$active');";
+			$rslt=mysql_query($stmt, $link);
+
+			echo "<br><B>SCRIPT ADDED: $script_id</B>\n";
+
+			### LOG CHANGES TO LOG FILE ###
+			if ($WeBRooTWritablE > 0)
+				{
+				$fp = fopen ("./admin_changes_log.txt", "a");
+				fwrite ($fp, "$date|ADD A NEW SCRIPT ENTRY         |$PHP_AUTH_USER|$ip|$stmt|\n");
+				fclose($fp);
+				}
+			}
+		}
+$ADD=1000000;
+}
+
+
+######################
+# ADD=21111111 adds new filter to the system
+######################
+
+if ($ADD==21111111)
+{
+	echo "<FONT FACE=\"ARIAL,HELVETICA\" COLOR=BLACK SIZE=2>";
+	$stmt="SELECT count(*) from vicidial_lead_filters where lead_filter_id='$lead_filter_id';";
+	$rslt=mysql_query($stmt, $link);
+	$row=mysql_fetch_row($rslt);
+	if ($row[0] > 0)
+		{echo "<br>FILTER NOT ADDED - there is already a filter entry with this ID\n";}
+	else
+		{
+		 if ( (strlen($lead_filter_id) < 2) or (strlen($lead_filter_name) < 2) or (strlen($lead_filter_sql) < 2) )
+			{
+			 echo "<br>FILTER NOT ADDED - Please go back and look at the data you entered\n";
+			 echo "<br>Filter ID, name and SQL must be at least 2 characters in length\n";
+			 }
+		 else
+			{
+			$stmt="INSERT INTO vicidial_lead_filters SET lead_filter_id='$lead_filter_id',lead_filter_name='$lead_filter_name',lead_filter_comments='$lead_filter_comments',lead_filter_sql='$lead_filter_sql';";
+			$rslt=mysql_query($stmt, $link);
+
+			echo "<br><B>FILTER ADDED: $lead_filter_id</B>\n";
+
+			### LOG CHANGES TO LOG FILE ###
+			if ($WeBRooTWritablE > 0)
+				{
+				$fp = fopen ("./admin_changes_log.txt", "a");
+				fwrite ($fp, "$date|ADD A NEW FILTER ENTRY         |$PHP_AUTH_USER|$ip|$stmt|\n");
+				fclose($fp);
+				}
+			}
+		}
+$ADD=10000000;
+}
+
+
+######################
+# ADD=211111111 adds new call time definition to the system
+######################
+
+if ($ADD==211111111)
+{
+	echo "<FONT FACE=\"ARIAL,HELVETICA\" COLOR=BLACK SIZE=2>";
+	$stmt="SELECT count(*) from vicidial_call_times where call_time_id='$call_time_id';";
+	$rslt=mysql_query($stmt, $link);
+	$row=mysql_fetch_row($rslt);
+	if ($row[0] > 0)
+		{echo "<br>CALL TIME DEFINITION NOT ADDED - there is already a call time entry with this ID\n";}
+	else
+		{
+		 if ( (strlen($call_time_id) < 2) or (strlen($call_time_name) < 2) )
+			{
+			 echo "<br>CALL TIME DEFINITION NOT ADDED - Please go back and look at the data you entered\n";
+			 echo "<br>Call Time ID and name must be at least 2 characters in length\n";
+			 }
+		 else
+			{
+			$stmt="INSERT INTO vicidial_call_times SET call_time_id='$call_time_id',call_time_name='$call_time_name',call_time_comments='$call_time_comments';";
+			$rslt=mysql_query($stmt, $link);
+
+			echo "<br><B>CALL TIME ADDED: $call_time_id</B>\n";
+
+			### LOG CHANGES TO LOG FILE ###
+			if ($WeBRooTWritablE > 0)
+				{
+				$fp = fopen ("./admin_changes_log.txt", "a");
+				fwrite ($fp, "$date|ADD A NEW CALL TIME ENTRY      |$stmt|\n");
+				fclose($fp);
+				}
+			}
+		}
+$ADD=311111111;
+}
+
+
+######################
+# ADD=2111111111 adds new state call time definition to the system
+######################
+
+if ($ADD==2111111111)
+{
+	echo "<FONT FACE=\"ARIAL,HELVETICA\" COLOR=BLACK SIZE=2>";
+	$stmt="SELECT count(*) from vicidial_state_call_times where state_call_time_id='$call_time_id';";
+	$rslt=mysql_query($stmt, $link);
+	$row=mysql_fetch_row($rslt);
+	if ($row[0] > 0)
+		{echo "<br>STATE CALL TIME DEFINITION NOT ADDED - there is already a call time entry with this ID\n";}
+	else
+		{
+		 if ( (strlen($call_time_id) < 2) or (strlen($call_time_name) < 2) or (strlen($state_call_time_state) < 2) )
+			{
+			 echo "<br>STATE CALL TIME DEFINITION NOT ADDED - Please go back and look at the data you entered\n";
+			 echo "<br>State Call Time ID, name and state must be at least 2 characters in length\n";
+			 }
+		 else
+			{
+			$stmt="INSERT INTO vicidial_state_call_times SET state_call_time_id='$call_time_id',state_call_time_name='$call_time_name',state_call_time_comments='$call_time_comments',state_call_time_state='$state_call_time_state';";
+			$rslt=mysql_query($stmt, $link);
+
+			echo "<br><B>STATE CALL TIME ADDED: $call_time_id</B>\n";
+
+			### LOG CHANGES TO LOG FILE ###
+			if ($WeBRooTWritablE > 0)
+				{
+				$fp = fopen ("./admin_changes_log.txt", "a");
+				fwrite ($fp, "$date|ADD A NEW STATE CALL TIME ENTRY|$stmt|\n");
+				fclose($fp);
+				}
+			}
+		}
+$ADD=3111111111;
+}
+
+
+
+
+######################################################################################################
+######################################################################################################
+#######   4 series, record modifications submitted and DB is modified, then on to 3 series forms below
+######################################################################################################
+######################################################################################################
+
+
+
+######################
+# ADD=4A submit user modifications to the system - ADMIN
+######################
+
+if ($ADD=="4A")
+{
+	echo "<FONT FACE=\"ARIAL,HELVETICA\" COLOR=BLACK SIZE=2>";
+
+	 if ( (strlen($pass) < 2) or (strlen($full_name) < 2) or (strlen($user_level) < 1) )
+		{
+		 echo "<br>USER NOT MODIFIED - Please go back and look at the data you entered\n";
+		 echo "<br>Password and Full Name each need ot be at least 2 characters in length\n";
+		}
+	 else
+		{
+		echo "<br><B>USER MODIFIED - ADMIN: $user</B>\n";
+
+		$stmt="UPDATE vicidial_users set pass='$pass',full_name='$full_name',user_level='$user_level',user_group='$user_group',phone_login='$phone_login',phone_pass='$phone_pass',delete_users='$delete_users',delete_user_groups='$delete_user_groups',delete_lists='$delete_lists',delete_campaigns='$delete_campaigns',delete_ingroups='$delete_ingroups',delete_remote_agents='$delete_remote_agents',load_leads='$load_leads',campaign_detail='$campaign_detail',ast_admin_access='$ast_admin_access',ast_delete_phones='$ast_delete_phones',delete_scripts='$delete_scripts',modify_leads='$modify_leads',hotkeys_active='$hotkeys_active',change_agent_campaign='$change_agent_campaign',agent_choose_ingroups='$agent_choose_ingroups',closer_campaigns='$groups_value',scheduled_callbacks='$scheduled_callbacks',agentonly_callbacks='$agentonly_callbacks',agentcall_manual='$agentcall_manual',vicidial_recording='$vicidial_recording',vicidial_transfers='$vicidial_transfers',delete_filters='$delete_filters',alter_agent_interface_options='$alter_agent_interface_options',closer_default_blended='$closer_default_blended',delete_call_times='$delete_call_times',modify_call_times='$modify_call_times' where user='$user';";
+		$rslt=mysql_query($stmt, $link);
+
+
+
+		### LOG CHANGES TO LOG FILE ###
+		if ($WeBRooTWritablE > 0)
+			{
+			$fp = fopen ("./admin_changes_log.txt", "a");
+			fwrite ($fp, "$date|MODIFY USER INFO    |$PHP_AUTH_USER|$ip|$stmt|\n");
+			fclose($fp);
+			}
+		}
+
+$ADD=3;		# go to user modification below
+}
+
+
+######################
+# ADD=4B submit user modifications to the system - ADMIN
+######################
+
+if ($ADD=="4B")
+{
+	echo "<FONT FACE=\"ARIAL,HELVETICA\" COLOR=BLACK SIZE=2>";
+
+	 if ( (strlen($pass) < 2) or (strlen($full_name) < 2) or (strlen($user_level) < 1) )
+		{
+		 echo "<br>USER NOT MODIFIED - Please go back and look at the data you entered\n";
+		 echo "<br>Password and Full Name each need ot be at least 2 characters in length\n";
+		}
+	 else
+		{
+		echo "<br><B>USER MODIFIED - ADMIN: $user</B>\n";
+
+		$stmt="UPDATE vicidial_users set pass='$pass',full_name='$full_name',user_level='$user_level',user_group='$user_group',phone_login='$phone_login',phone_pass='$phone_pass',hotkeys_active='$hotkeys_active',agent_choose_ingroups='$agent_choose_ingroups',closer_campaigns='$groups_value',scheduled_callbacks='$scheduled_callbacks',agentonly_callbacks='$agentonly_callbacks',agentcall_manual='$agentcall_manual',vicidial_recording='$vicidial_recording',vicidial_transfers='$vicidial_transfers',closer_default_blended='$closer_default_blended' where user='$user';";
+		$rslt=mysql_query($stmt, $link);
+
+
+
+		### LOG CHANGES TO LOG FILE ###
+		if ($WeBRooTWritablE > 0)
+			{
+			$fp = fopen ("./admin_changes_log.txt", "a");
+			fwrite ($fp, "$date|MODIFY USER INFO    |$PHP_AUTH_USER|$ip|pass='$pass',full_name='$full_name',user_level='$user_level',user_group='$user_group',phone_login='$phone_login',phone_pass='$phone_pass',hotkeys_active='$hotkeys_active',agent_choose_ingroups='$agent_choose_ingroups',closer_campaigns='$groups_value',scheduled_callbacks='$scheduled_callbacks',agentonly_callbacks='$agentonly_callbacks',agentcall_manual='$agentcall_manual',vicidial_recording='$vicidial_recording',vicidial_transfers='$vicidial_transfers',closer_default_blended='$closer_default_blended' where user='$user'|\n");
+			fclose($fp);
+			}
+		}
+
+$ADD=3;		# go to user modification below
+}
+
+
+
+######################
+# ADD=4 submit user modifications to the system
+######################
+
+if ($ADD==4)
+{
+	echo "<FONT FACE=\"ARIAL,HELVETICA\" COLOR=BLACK SIZE=2>";
+
+	 if ( (strlen($pass) < 2) or (strlen($full_name) < 2) or (strlen($user_level) < 1) )
+		{
+		 echo "<br>USER NOT MODIFIED - Please go back and look at the data you entered\n";
+		 echo "<br>Password and Full Name each need ot be at least 2 characters in length\n";
+		}
+	 else
+		{
+		echo "<br><B>USER MODIFIED: $user</B>\n";
+
+		$stmt="UPDATE vicidial_users set pass='$pass',full_name='$full_name',user_level='$user_level',user_group='$user_group',phone_login='$phone_login',phone_pass='$phone_pass' where user='$user';";
+		$rslt=mysql_query($stmt, $link);
+
+		### LOG CHANGES TO LOG FILE ###
+		if ($WeBRooTWritablE > 0)
+			{
+			$fp = fopen ("./admin_changes_log.txt", "a");
+			fwrite ($fp, "$date|MODIFY USER INFO    |$PHP_AUTH_USER|$ip|pass='$pass',full_name='$full_name',user_level='$user_level',user_group='$user_group',phone_login='$phone_login',phone_pass='$phone_pass' where user='$user'|\n");
+			fclose($fp);
+			}
+		}
+
+$ADD=3;		# go to user modification below
+}
+
+######################
+# ADD=41 submit campaign modifications to the system
+######################
+
+if ($ADD==41)
+{
+	echo "<FONT FACE=\"ARIAL,HELVETICA\" COLOR=BLACK SIZE=2>";
+
+	 if ( (strlen($campaign_name) < 6) or (strlen($active) < 1) )
+		{
+		 echo "<br>CAMPAIGN NOT MODIFIED - Please go back and look at the data you entered\n";
+		 echo "<br>the campaign name needs to be at least 6 characters in length\n";
+		}
+	 else
+		{
+		echo "<br><B>CAMPAIGN MODIFIED: $campaign_id</B>\n";
+
+		$stmtA="UPDATE vicidial_campaigns set campaign_name='$campaign_name',active='$active',dial_status_a='$dial_status_a',dial_status_b='$dial_status_b',dial_status_c='$dial_status_c',dial_status_d='$dial_status_d',dial_status_e='$dial_status_e',lead_order='$lead_order',allow_closers='$allow_closers',hopper_level='$hopper_level', auto_dial_level='$auto_dial_level', next_agent_call='$next_agent_call', local_call_time='$local_call_time', voicemail_ext='$voicemail_ext', dial_timeout='$dial_timeout', dial_prefix='$dial_prefix', campaign_cid='$campaign_cid', campaign_vdad_exten='$campaign_vdad_exten', web_form_address='" . mysql_real_escape_string($web_form_address) . "', park_ext='$park_ext', park_file_name='$park_file_name', campaign_rec_exten='$campaign_rec_exten', campaign_recording='$campaign_recording', campaign_rec_filename='$campaign_rec_filename', campaign_script='$script_id', get_call_launch='$get_call_launch', am_message_exten='$am_message_exten', amd_send_to_vmx='$amd_send_to_vmx', xferconf_a_dtmf='$xferconf_a_dtmf',xferconf_a_number='$xferconf_a_number', xferconf_b_dtmf='$xferconf_b_dtmf',xferconf_b_number='$xferconf_b_number',lead_filter_id='$lead_filter_id',alt_number_dialing='$alt_number_dialing',scheduled_callbacks='$scheduled_callbacks',safe_harbor_message='$safe_harbor_message',drop_call_seconds='$drop_call_seconds',safe_harbor_exten='$safe_harbor_exten',wrapup_seconds='$wrapup_seconds',wrapup_message='$wrapup_message',closer_campaigns='$groups_value',use_internal_dnc='$use_internal_dnc' where campaign_id='$campaign_id';";
+		$rslt=mysql_query($stmtA, $link);
+
+		if ($reset_hopper == 'Y')
+			{
+			echo "<br>RESETTING CAMPAIGN LEAD HOPPER\n";
+			echo "<br> - Wait 1 minute before dialing next number\n";
+			$stmt="DELETE from vicidial_hopper where campaign_id='$campaign_id' and status='READY';";
+			$rslt=mysql_query($stmt, $link);
+
+			### LOG RESET TO LOG FILE ###
+			if ($WeBRooTWritablE > 0)
+				{
+				$fp = fopen ("./admin_changes_log.txt", "a");
+				fwrite ($fp, "$date|CAMPAIGN HOPPERRESET|$PHP_AUTH_USER|$ip|campaign_name='$campaign_name'|\n");
+				fclose($fp);
+				}
+			}
+
+		### LOG CHANGES TO LOG FILE ###
+		if ($WeBRooTWritablE > 0)
+			{
+			$fp = fopen ("./admin_changes_log.txt", "a");
+			fwrite ($fp, "$date|MODIFY CAMPAIGN INFO|$PHP_AUTH_USER|$ip|$stmtA|$reset_hopper|\n");
+			fclose($fp);
+			}
+		}
+
+$ADD=31;	# go to campaign modification form below
+}
+
+######################
+# ADD=42 delete campaign status in the system
+######################
+
+if ($ADD==42)
+{
+	echo "<FONT FACE=\"ARIAL,HELVETICA\" COLOR=BLACK SIZE=2>";
+
+	 if ( (strlen($campaign_id) < 2) or (strlen($status) < 1) )
+		{
+		 echo "<br>CAMPAIGN STATUS NOT MODIFIED - Please go back and look at the data you entered\n";
+		 echo "<br>the campaign id needs to be at least 2 characters in length\n";
+		 echo "<br>the campaign status needs to be at least 1 characters in length\n";
+		}
+	 else
+		{
+		echo "<br><B>CUSTOM CAMPAIGN STATUS DELETED: $campaign_id - $status</B>\n";
+
+		$stmt="DELETE FROM vicidial_campaign_statuses where campaign_id='$campaign_id' and status='$status';";
+		$rslt=mysql_query($stmt, $link);
+
+		### LOG CHANGES TO LOG FILE ###
+		if ($WeBRooTWritablE > 0)
+			{
+			$fp = fopen ("./admin_changes_log.txt", "a");
+			fwrite ($fp, "$date|DELETE CAMPAIGN STATUS|$PHP_AUTH_USER|$ip|DELETE FROM vicidial_campaign_statuses where campaign_id='$campaign_id' and status='$status'|\n");
+			fclose($fp);
+			}
+		}
+
+$ADD=31;	# go to campaign modification form below
+}
+
+######################
+# ADD=43 delete campaign hotkey in the system
+######################
+
+if ($ADD==43)
+{
+	echo "<FONT FACE=\"ARIAL,HELVETICA\" COLOR=BLACK SIZE=2>";
+
+	 if ( (strlen($campaign_id) < 2) or (strlen($status) < 1) or (strlen($hotkey) < 1) )
+		{
+		 echo "<br>CAMPAIGN HOTKEY NOT MODIFIED - Please go back and look at the data you entered\n";
+		 echo "<br>the campaign id needs to be at least 2 characters in length\n";
+		 echo "<br>the campaign status needs to be at least 1 characters in length\n";
+		 echo "<br>the campaign hotkey needs to be at least 1 characters in length\n";
+		}
+	 else
+		{
+		echo "<br><B>CUSTOM CAMPAIGN HOTKEY DELETED: $campaign_id - $status - $hotkey</B>\n";
+
+		$stmt="DELETE FROM vicidial_campaign_hotkeys where campaign_id='$campaign_id' and status='$status' and hotkey='$hotkey';";
+		$rslt=mysql_query($stmt, $link);
+
+		### LOG CHANGES TO LOG FILE ###
+		if ($WeBRooTWritablE > 0)
+			{
+			$fp = fopen ("./admin_changes_log.txt", "a");
+			fwrite ($fp, "$date|DELETE CAMPAIGN STATUS|$PHP_AUTH_USER|$ip|DELETE FROM vicidial_campaign_statuses where campaign_id='$campaign_id' and status='$status' and hotkey='$hotkey'|\n");
+			fclose($fp);
+			}
+		}
+
+$ADD=31;	# go to campaign modification form below
+}
+
+######################
+# ADD=44 submit campaign modifications to the system - Basic View
+######################
+
+if ($ADD==44)
+{
+	echo "<FONT FACE=\"ARIAL,HELVETICA\" COLOR=BLACK SIZE=2>";
+
+	 if ( (strlen($campaign_name) < 6) or (strlen($active) < 1) )
+		{
+		 echo "<br>CAMPAIGN NOT MODIFIED - Please go back and look at the data you entered\n";
+		 echo "<br>the campaign name needs to be at least 6 characters in length\n";
+		}
+	 else
+		{
+		echo "<br><B>CAMPAIGN MODIFIED: $campaign_id</B>\n";
+
+		$stmtA="UPDATE vicidial_campaigns set campaign_name='$campaign_name',active='$active',dial_status_a='$dial_status_a',dial_status_b='$dial_status_b',dial_status_c='$dial_status_c',dial_status_d='$dial_status_d',dial_status_e='$dial_status_e',lead_order='$lead_order',hopper_level='$hopper_level', auto_dial_level='$auto_dial_level',lead_filter_id='$lead_filter_id' where campaign_id='$campaign_id';";
+		$rslt=mysql_query($stmtA, $link);
+
+		if ($reset_hopper == 'Y')
+			{
+			echo "<br>RESETTING CAMPAIGN LEAD HOPPER\n";
+			echo "<br> - Wait 1 minute before dialing next number\n";
+			$stmt="DELETE from vicidial_hopper where campaign_id='$campaign_id' and status='READY';";
+			$rslt=mysql_query($stmt, $link);
+
+			### LOG HOPPER RESET TO LOG FILE ###
+			if ($WeBRooTWritablE > 0)
+				{
+				$fp = fopen ("./admin_changes_log.txt", "a");
+				fwrite ($fp, "$date|CAMPAIGN HOPPERRESET|$PHP_AUTH_USER|$ip|campaign_name='$campaign_name'|\n");
+				fclose($fp);
+				}
+			}
+
+		### LOG CHANGES TO LOG FILE ###
+		if ($WeBRooTWritablE > 0)
+			{
+			$fp = fopen ("./admin_changes_log.txt", "a");
+			fwrite ($fp, "$date|MODIFY CAMPAIGN INFO|$PHP_AUTH_USER|$ip|$stmtA|$reset_hopper|\n");
+			fclose($fp);
+			}
+		}
+
+$ADD=34;	# go to campaign modification form below
+}
+
+######################
+# ADD=45 modify campaign lead recycle in the system
+######################
+
+if ($ADD==45)
+{
+	echo "<FONT FACE=\"ARIAL,HELVETICA\" COLOR=BLACK SIZE=2>";
+
+	 if ( (strlen($campaign_id) < 2) or (strlen($status) < 1) or ($attempt_delay < 120)  or ($attempt_maximum < 1) or ($attempt_maximum > 10) )
+		{
+		 echo "<br>CAMPAIGN LEAD RECYCLE NOT MODIFIED - Please go back and look at the data you entered\n";
+		 echo "<br>status must be between 1 and 6 characters in length\n";
+		 echo "<br>attempt delay must be at least 120 seconds\n";
+		 echo "<br>maximum attempts must be from 1 to 10\n";
+		}
+	 else
+		{
+		echo "<br><B>CAMPAIGN LEAD MODIFIED: $campaign_id - $status - $attempt_delay</B>\n";
+
+		$stmt="UPDATE vicidial_lead_recycle SET attempt_delay='$attempt_delay',attempt_maximum='$attempt_maximum',active='$active' where campaign_id='$campaign_id' and status='$status';";
+		$rslt=mysql_query($stmt, $link);
+
+		### LOG CHANGES TO LOG FILE ###
+		if ($WeBRooTWritablE > 0)
+			{
+			$fp = fopen ("./admin_changes_log.txt", "a");
+			fwrite ($fp, "$date|MODIFY LEAD RECYCLE   |$PHP_AUTH_USER|$ip|$stmt|\n");
+			fclose($fp);
+			}
+		}
+
+$ADD=31;	# go to campaign modification form below
+}
+
+######################
+# ADD=411 submit list modifications to the system
+######################
+
+if ($ADD==411)
+{
+	echo "<FONT FACE=\"ARIAL,HELVETICA\" COLOR=BLACK SIZE=2>";
+
+	 if ( (strlen($list_name) < 2) or (strlen($campaign_id) < 2) )
+		{
+		 echo "<br>LIST NOT MODIFIED - Please go back and look at the data you entered\n";
+		 echo "<br>list name must be at least 2 characters in length\n";
+		}
+	 else
+		{
+		echo "<br><B>LIST MODIFIED: $list_id</B>\n";
+
+		$stmt="UPDATE vicidial_lists set list_name='$list_name',campaign_id='$campaign_id',active='$active' where list_id='$list_id';";
+		$rslt=mysql_query($stmt, $link);
+
+		if ($reset_list == 'Y')
+			{
+			echo "<br>RESETTING LIST-CALLED-STATUS\n";
+			$stmt="UPDATE vicidial_list set called_since_last_reset='N' where list_id='$list_id';";
+			$rslt=mysql_query($stmt, $link);
+			### LOG RESET TO LOG FILE ###
+			if ($WeBRooTWritablE > 0)
+				{
+				$fp = fopen ("./admin_changes_log.txt", "a");
+				fwrite ($fp, "$date|RESET LIST CALLED   |$PHP_AUTH_USER|$ip|list_name='$list_name'|\n");
+				fclose($fp);
+				}
+			}
+		if ($campaign_id != "$old_campaign_id")
+			{
+			echo "<br>REMOVING LIST HOPPER LEADS FROM OLD CAMPAIGN HOPPER ($old_campaign_id)\n";
+			$stmt="DELETE from vicidial_hopper where list_id='$list_id' and campaign_id='$old_campaign_id';";
+			$rslt=mysql_query($stmt, $link);
+			}
+
+		### LOG CHANGES TO LOG FILE ###
+		if ($WeBRooTWritablE > 0)
+			{
+			$fp = fopen ("./admin_changes_log.txt", "a");
+			fwrite ($fp, "$date|MODIFY LIST INFO    |$PHP_AUTH_USER|$ip|list_name='$list_name',campaign_id='$campaign_id',active='$active' where list_id='$list_id'|\n");
+			fclose($fp);
+			}
+		}
+
+$ADD=311;	# go to list modification form below
+}
+
+
+######################
+# ADD=4111 modify in-group info in the system
+######################
+
+if ($ADD==4111)
+{
+	echo "<FONT FACE=\"ARIAL,HELVETICA\" COLOR=BLACK SIZE=2>";
+
+	 if ( (strlen($group_name) < 2) or (strlen($group_color) < 2) )
+		{
+		 echo "<br>GROUP NOT MODIFIED - Please go back and look at the data you entered\n";
+		 echo "<br>group name and group color must be at least 2 characters in length\n";
+		}
+	 else
+		{
+		echo "<br><B>GROUP MODIFIED: $group_id</B>\n";
+
+		$stmt="UPDATE vicidial_inbound_groups set group_name='$group_name', group_color='$group_color', active='$active', web_form_address='" . mysql_real_escape_string($web_form_address) . "', voicemail_ext='$voicemail_ext', next_agent_call='$next_agent_call', fronter_display='$fronter_display', ingroup_script='$script_id', get_call_launch='$get_call_launch', xferconf_a_dtmf='$xferconf_a_dtmf',xferconf_a_number='$xferconf_a_number', xferconf_b_dtmf='$xferconf_b_dtmf',xferconf_b_number='$xferconf_b_number',drop_message='$drop_message',drop_call_seconds='$drop_call_seconds',drop_exten='$drop_exten' where group_id='$group_id';";
+		$rslt=mysql_query($stmt, $link);
+
+		### LOG CHANGES TO LOG FILE ###
+		if ($WeBRooTWritablE > 0)
+			{
+			$fp = fopen ("./admin_changes_log.txt", "a");
+			fwrite ($fp, "$date|MODIFY GROUP INFO   |$PHP_AUTH_USER|$ip|$stmt|\n");
+			fclose($fp);
+			}
+		}
+
+$ADD=3111;	# go to in-group modification form below
+}
+
+
+
+######################
+# ADD=41111 modify remote agents info in the system
+######################
+
+if ($ADD==41111)
+{
+	echo "<FONT FACE=\"ARIAL,HELVETICA\" COLOR=BLACK SIZE=2>";
+
+	 if ( (strlen($server_ip) < 2) or (strlen($user_start) < 2)  or (strlen($campaign_id) < 2) or (strlen($conf_exten) < 2) )
+		{
+		 echo "<br>REMOTE AGENTS NOT MODIFIED - Please go back and look at the data you entered\n";
+		 echo "<br>User ID Start and External Extension must be at least 2 characters in length\n";
+		}
+	 else
+		{
+		$stmt="UPDATE vicidial_remote_agents set user_start='$user_start', number_of_lines='$number_of_lines', server_ip='$server_ip', conf_exten='$conf_exten', status='$status', campaign_id='$campaign_id', closer_campaigns='$groups_value' where remote_agent_id='$remote_agent_id';";
+		$rslt=mysql_query($stmt, $link);
+
+		echo "<br><B>REMOTE AGENTS MODIFIED</B>\n";
+
+		### LOG CHANGES TO LOG FILE ###
+		if ($WeBRooTWritablE > 0)
+			{
+			$fp = fopen ("./admin_changes_log.txt", "a");
+			fwrite ($fp, "$date|MODIFY REMOTE AGENTS ENTRY     |$PHP_AUTH_USER|$ip|set user_start='$user_start', number_of_lines='$number_of_lines', server_ip='$server_ip', conf_exten='$conf_exten', status='$status', campaign_id='$campaign_id', closer_campaigns='$groups_value' where remote_agent_id='$remote_agent_id'|\n");
+			fclose($fp);
+			}
+		}
+
+$ADD=31111;	# go to remote agents modification form below
+}
+
+
+
+######################
+# ADD=411111 modify user group info in the system
+######################
+
+if ($ADD==411111)
+{
+	echo "<FONT FACE=\"ARIAL,HELVETICA\" COLOR=BLACK SIZE=2>";
+
+	 if ( (strlen($user_group) < 2) or (strlen($group_name) < 2) )
+		{
+		 echo "<br>USER GROUP NOT MODIFIED - Please go back and look at the data you entered\n";
+		 echo "<br>Group name and description must be at least 2 characters in length\n";
+		}
+	 else
+		{
+		$stmt="UPDATE vicidial_user_groups set user_group='$user_group', group_name='$group_name' where user_group='$OLDuser_group';";
+		$rslt=mysql_query($stmt, $link);
+
+		echo "<br><B>USER GROUP MODIFIED</B>\n";
+
+		### LOG CHANGES TO LOG FILE ###
+		if ($WeBRooTWritablE > 0)
+			{
+			$fp = fopen ("./admin_changes_log.txt", "a");
+			fwrite ($fp, "$date|MODIFY USER GROUP ENTRY     |$PHP_AUTH_USER|$ip|UPDATE vicidial_user_groups set user_group='$user_group', group_name='$group_name' where user_group='$OLDuser_group'|\n");
+			fclose($fp);
+			}
+		}
+
+$ADD=311111;	# go to user group modification form below
+}
+
+######################
+# ADD=4111111 modify script in the system
+######################
+
+if ($ADD==4111111)
+{
+	echo "<FONT FACE=\"ARIAL,HELVETICA\" COLOR=BLACK SIZE=2>";
+
+	 if ( (strlen($script_id) < 2) or (strlen($script_name) < 2) or (strlen($script_text) < 2) )
+		{
+		 echo "<br>SCRIPT NOT MODIFIED - Please go back and look at the data you entered\n";
+		 echo "<br>Script name, description and text must be at least 2 characters in length\n";
+		}
+	 else
+		{
+		$stmt="UPDATE vicidial_scripts set script_name='$script_name', script_comments='$script_comments', script_text='" . mysql_real_escape_string($script_text) . "', active='$active' where script_id='$script_id';";
+		$rslt=mysql_query($stmt, $link);
+
+		echo "<br><B>SCRIPT MODIFIED</B>\n";
+
+		### LOG CHANGES TO LOG FILE ###
+		if ($WeBRooTWritablE > 0)
+			{
+			$fp = fopen ("./admin_changes_log.txt", "a");
+			fwrite ($fp, "$date|MODIFY SCRIPT ENTRY         |$PHP_AUTH_USER|$ip|$stmt|\n");
+			fclose($fp);
+			}
+		}
+
+$ADD=3111111;	# go to script modification form below
+}
+
+
+######################
+# ADD=41111111 modify filter in the system
+######################
+
+if ($ADD==41111111)
+{
+	echo "<FONT FACE=\"ARIAL,HELVETICA\" COLOR=BLACK SIZE=2>";
+
+	 if ( (strlen($lead_filter_id) < 2) or (strlen($lead_filter_name) < 2) or (strlen($lead_filter_sql) < 2) )
+		{
+		 echo "<br>FILTER NOT MODIFIED - Please go back and look at the data you entered\n";
+		 echo "<br>Filter ID, name and SQL must be at least 2 characters in length\n";
+		}
+	 else
+		{
+		$stmt="UPDATE vicidial_lead_filters set lead_filter_name='$lead_filter_name', lead_filter_comments='$lead_filter_comments', lead_filter_sql='$lead_filter_sql' where lead_filter_id='$lead_filter_id';";
+		$rslt=mysql_query($stmt, $link);
+
+		echo "<br><B>FILTER MODIFIED</B>\n";
+
+		### LOG CHANGES TO LOG FILE ###
+		if ($WeBRooTWritablE > 0)
+			{
+			$fp = fopen ("./admin_changes_log.txt", "a");
+			fwrite ($fp, "$date|MODIFY FILTER ENTRY         |$PHP_AUTH_USER|$ip|$stmt|\n");
+			fclose($fp);
+			}
+		}
+
+$ADD=31111111;	# go to filter modification form below
+}
+
+
+######################
+# ADD=411111111 modify call time in the system
+######################
+
+if ($ADD==411111111)
+{
+	echo "<FONT FACE=\"ARIAL,HELVETICA\" COLOR=BLACK SIZE=2>";
+
+	 if ( (strlen($call_time_id) < 2) or (strlen($call_time_name) < 2) )
+		{
+		 echo "<br>CALL TIME NOT MODIFIED - Please go back and look at the data you entered\n";
+		 echo "<br>Call Time ID and name must be at least 2 characters in length\n";
+		}
+	 else
+		{
+		$ct_default_start = preg_replace('/\D/', '', $ct_default_start);
+		$ct_default_stop = preg_replace('/\D/', '', $ct_default_stop);
+		$ct_sunday_start = preg_replace('/\D/', '', $ct_sunday_start);
+		$ct_sunday_stop = preg_replace('/\D/', '', $ct_sunday_stop);
+		$ct_monday_start = preg_replace('/\D/', '', $ct_monday_start);
+		$ct_monday_stop = preg_replace('/\D/', '', $ct_monday_stop);
+		$ct_tuesday_start = preg_replace('/\D/', '', $ct_tuesday_start);
+		$ct_tuesday_stop = preg_replace('/\D/', '', $ct_tuesday_stop);
+		$ct_wednesday_start = preg_replace('/\D/', '', $ct_wednesday_start);
+		$ct_wednesday_stop = preg_replace('/\D/', '', $ct_wednesday_stop);
+		$ct_thursday_start = preg_replace('/\D/', '', $ct_thursday_start);
+		$ct_thursday_stop = preg_replace('/\D/', '', $ct_thursday_stop);
+		$ct_friday_start = preg_replace('/\D/', '', $ct_friday_start);
+		$ct_friday_stop = preg_replace('/\D/', '', $ct_friday_stop);
+		$ct_saturday_start = preg_replace('/\D/', '', $ct_saturday_start);
+		$ct_saturday_stop = preg_replace('/\D/', '', $ct_saturday_stop);
+		$stmt="UPDATE vicidial_call_times set call_time_name='$call_time_name', call_time_comments='$call_time_comments', ct_default_start='$ct_default_start', ct_default_stop='$ct_default_stop', ct_sunday_start='$ct_sunday_start', ct_sunday_stop='$ct_sunday_stop', ct_monday_start='$ct_monday_start', ct_monday_stop='$ct_monday_stop', ct_tuesday_start='$ct_tuesday_start', ct_tuesday_stop='$ct_tuesday_stop', ct_wednesday_start='$ct_wednesday_start', ct_wednesday_stop='$ct_wednesday_stop', ct_thursday_start='$ct_thursday_start', ct_thursday_stop='$ct_thursday_stop', ct_friday_start='$ct_friday_start', ct_friday_stop='$ct_friday_stop', ct_saturday_start='$ct_saturday_start', ct_saturday_stop='$ct_saturday_stop' where call_time_id='$call_time_id';";
+		$rslt=mysql_query($stmt, $link);
+
+		echo "<br><B>CALL TIME MODIFIED</B>\n";
+
+		### LOG CHANGES TO LOG FILE ###
+		if ($WeBRooTWritablE > 0)
+			{
+			$fp = fopen ("./admin_changes_log.txt", "a");
+			fwrite ($fp, "$date|MODIFY CALL TIME ENTRY      |$stmt|\n");
+			fclose($fp);
+			}
+		}
+
+$ADD=311111111;	# go to call time modification form below
+}
+
+
+######################
+# ADD=4111111111 modify state call time in the system
+######################
+
+if ($ADD==4111111111)
+{
+	echo "<FONT FACE=\"ARIAL,HELVETICA\" COLOR=BLACK SIZE=2>";
+
+	 if ( (strlen($call_time_id) < 2) or (strlen($call_time_name) < 2) or (strlen($state_call_time_state) < 2) )
+		{
+		 echo "<br>STATE CALL TIME NOT MODIFIED - Please go back and look at the data you entered\n";
+		 echo "<br>State Call Time ID, name and state must be at least 2 characters in length\n";
+		}
+	 else
+		{
+		$ct_default_start = preg_replace('/\D/', '', $ct_default_start);
+		$ct_default_stop = preg_replace('/\D/', '', $ct_default_stop);
+		$ct_sunday_start = preg_replace('/\D/', '', $ct_sunday_start);
+		$ct_sunday_stop = preg_replace('/\D/', '', $ct_sunday_stop);
+		$ct_monday_start = preg_replace('/\D/', '', $ct_monday_start);
+		$ct_monday_stop = preg_replace('/\D/', '', $ct_monday_stop);
+		$ct_tuesday_start = preg_replace('/\D/', '', $ct_tuesday_start);
+		$ct_tuesday_stop = preg_replace('/\D/', '', $ct_tuesday_stop);
+		$ct_wednesday_start = preg_replace('/\D/', '', $ct_wednesday_start);
+		$ct_wednesday_stop = preg_replace('/\D/', '', $ct_wednesday_stop);
+		$ct_thursday_start = preg_replace('/\D/', '', $ct_thursday_start);
+		$ct_thursday_stop = preg_replace('/\D/', '', $ct_thursday_stop);
+		$ct_friday_start = preg_replace('/\D/', '', $ct_friday_start);
+		$ct_friday_stop = preg_replace('/\D/', '', $ct_friday_stop);
+		$ct_saturday_start = preg_replace('/\D/', '', $ct_saturday_start);
+		$ct_saturday_stop = preg_replace('/\D/', '', $ct_saturday_stop);
+		$stmt="UPDATE vicidial_state_call_times set state_call_time_name='$call_time_name', state_call_time_comments='$call_time_comments', sct_default_start='$ct_default_start', sct_default_stop='$ct_default_stop', sct_sunday_start='$ct_sunday_start', sct_sunday_stop='$ct_sunday_stop', sct_monday_start='$ct_monday_start', sct_monday_stop='$ct_monday_stop', sct_tuesday_start='$ct_tuesday_start', sct_tuesday_stop='$ct_tuesday_stop', sct_wednesday_start='$ct_wednesday_start', sct_wednesday_stop='$ct_wednesday_stop', sct_thursday_start='$ct_thursday_start', sct_thursday_stop='$ct_thursday_stop', sct_friday_start='$ct_friday_start', sct_friday_stop='$ct_friday_stop', sct_saturday_start='$ct_saturday_start', sct_saturday_stop='$ct_saturday_stop', state_call_time_state='$state_call_time_state'  where state_call_time_id='$call_time_id';";
+		$rslt=mysql_query($stmt, $link);
+
+		echo "<br><B>STATE CALL TIME MODIFIED</B>\n";
+
+		### LOG CHANGES TO LOG FILE ###
+		if ($WeBRooTWritablE > 0)
+			{
+			$fp = fopen ("./admin_changes_log.txt", "a");
+			fwrite ($fp, "$date|MODIFY STATE CALL TIME ENTRY|$stmt|\n");
+			fclose($fp);
+			}
+		}
+
+$ADD=3111111111;	# go to state call time modification form below
+}
+
+
+
+
+######################################################################################################
+######################################################################################################
+#######   5 series, delete records confirmation
+######################################################################################################
+######################################################################################################
+
+
+######################
+# ADD=5 confirmation before deletion of user
+######################
+
+if ($ADD==5)
+{
+	echo "<FONT FACE=\"ARIAL,HELVETICA\" COLOR=BLACK SIZE=2>";
+
+	 if ( (strlen($user) < 2) or ($LOGdelete_users < 1) )
+		{
+		 echo "<br>USER NOT DELETED - Please go back and look at the data you entered\n";
+		 echo "<br>User be at least 2 characters in length\n";
+		}
+	 else
+		{
+		echo "<br><B>USER DELETION CONFIRMATION: $user</B>\n";
+		echo "<br><br><a href=\"$PHP_SELF?ADD=6&user=$user&CoNfIrM=YES\">Click here to delete user $user</a><br><br><br>\n";
+		}
+
+$ADD='3';		# go to user modification below
+}
+
+######################
+# ADD=51 confirmation before deletion of campaign
+######################
+
+if ($ADD==51)
+{
+	echo "<FONT FACE=\"ARIAL,HELVETICA\" COLOR=BLACK SIZE=2>";
+
+	 if ( (strlen($campaign_id) < 2) or ($LOGdelete_campaigns < 1) )
+		{
+		 echo "<br>CAMPAIGN NOT DELETED - Please go back and look at the data you entered\n";
+		 echo "<br>Campaign_id be at least 2 characters in length\n";
+		}
+	 else
+		{
+		echo "<br><B>CAMPAIGN DELETION CONFIRMATION: $campaign_id</B>\n";
+		echo "<br><br><a href=\"$PHP_SELF?ADD=61&campaign_id=$campaign_id&CoNfIrM=YES\">Click here to delete campaign $campaign_id</a><br><br><br>\n";
+		}
+
+$ADD='31';		# go to campaign modification below
+}
+
+######################
+# ADD=52 confirmation before logging all agents out of campaign of campaign
+######################
+
+if ($ADD==52)
+{
+	echo "<FONT FACE=\"ARIAL,HELVETICA\" COLOR=BLACK SIZE=2>";
+
+	 if (strlen($campaign_id) < 2)
+		{
+		 echo "<br>AGENTS NOT LOGGED OUT OF CAMPAIGN - Please go back and look at the data you entered\n";
+		 echo "<br>Campaign_id be at least 2 characters in length\n";
+		}
+	 else
+		{
+		echo "<br><B>AGENT LOGOUT CONFIRMATION: $campaign_id</B>\n";
+		echo "<br><br><a href=\"$PHP_SELF?ADD=62&campaign_id=$campaign_id&CoNfIrM=YES\">Click here to log all agents out of $campaign_id</a><br><br><br>\n";
+		}
+
+$ADD='31';		# go to campaign modification below
+}
+
+######################
+# ADD=511 confirmation before deletion of list
+######################
+
+if ($ADD==511)
+{
+	echo "<FONT FACE=\"ARIAL,HELVETICA\" COLOR=BLACK SIZE=2>";
+
+	 if ( (strlen($list_id) < 2) or ($LOGdelete_lists < 1) )
+		{
+		 echo "<br>LIST NOT DELETED - Please go back and look at the data you entered\n";
+		 echo "<br>List_id be at least 2 characters in length\n";
+		}
+	 else
+		{
+		echo "<br><B>LIST DELETION CONFIRMATION: $list_id</B>\n";
+		echo "<br><br><a href=\"$PHP_SELF?ADD=611&list_id=$list_id&CoNfIrM=YES\">Click here to delete list and all of its leads $list_id</a><br><br><br>\n";
+		}
+
+$ADD='311';		# go to campaign modification below
+}
+
+######################
+# ADD=5111 confirmation before deletion of in-group
+######################
+
+if ($ADD==5111)
+{
+	echo "<FONT FACE=\"ARIAL,HELVETICA\" COLOR=BLACK SIZE=2>";
+
+	 if ( (strlen($group_id) < 2) or ($LOGdelete_ingroups < 1) )
+		{
+		 echo "<br>IN-GROUP NOT DELETED - Please go back and look at the data you entered\n";
+		 echo "<br>Group_id be at least 2 characters in length\n";
+		}
+	 else
+		{
+		echo "<br><B>IN-GROUP DELETION CONFIRMATION: $group_id</B>\n";
+		echo "<br><br><a href=\"$PHP_SELF?ADD=6111&group_id=$group_id&CoNfIrM=YES\">Click here to delete in-group $group_id</a><br><br><br>\n";
+		}
+
+$ADD='3111';		# go to in-group modification below
+}
+
+######################
+# ADD=51111 confirmation before deletion of remote agent record
+######################
+
+if ($ADD==51111)
+{
+	echo "<FONT FACE=\"ARIAL,HELVETICA\" COLOR=BLACK SIZE=2>";
+
+	 if ( (strlen($remote_agent_id) < 1) or ($LOGdelete_remote_agents < 1) )
+		{
+		 echo "<br>REMOTE AGENT NOT DELETED - Please go back and look at the data you entered\n";
+		 echo "<br>Remote_agent_id be at least 2 characters in length\n";
+		}
+	 else
+		{
+		echo "<br><B>REMOTE AGENT DELETION CONFIRMATION: $remote_agent_id</B>\n";
+		echo "<br><br><a href=\"$PHP_SELF?ADD=61111&remote_agent_id=$remote_agent_id&CoNfIrM=YES\">Click here to delete remote agent $remote_agent_id</a><br><br><br>\n";
+		}
+
+$ADD='31111';		# go to remote agent modification below
+}
+
+######################
+# ADD=511111 confirmation before deletion of user group record
+######################
+
+if ($ADD==511111)
+{
+	echo "<FONT FACE=\"ARIAL,HELVETICA\" COLOR=BLACK SIZE=2>";
+
+	 if ( (strlen($user_group) < 2) or ($LOGdelete_user_groups < 1) )
+		{
+		 echo "<br>USER GROUP NOT DELETED - Please go back and look at the data you entered\n";
+		 echo "<br>User_group be at least 2 characters in length\n";
+		}
+	 else
+		{
+		echo "<br><B>USER GROUP DELETION CONFIRMATION: $user_group</B>\n";
+		echo "<br><br><a href=\"$PHP_SELF?ADD=611111&user_group=$user_group&CoNfIrM=YES\">Click here to delete user group $user_group</a><br><br><br>\n";
+		}
+
+$ADD='311111';		# go to user group modification below
+}
+
+######################
+# ADD=5111111 confirmation before deletion of script record
+######################
+
+if ($ADD==5111111)
+{
+	echo "<FONT FACE=\"ARIAL,HELVETICA\" COLOR=BLACK SIZE=2>";
+
+	 if ( (strlen($script_id) < 2) or ($LOGdelete_scripts < 1) )
+		{
+		 echo "<br>SCRIPT NOT DELETED - Please go back and look at the data you entered\n";
+		 echo "<br>Script_id must be at least 2 characters in length\n";
+		}
+	 else
+		{
+		echo "<br><B>SCRIPT DELETION CONFIRMATION: $script_id</B>\n";
+		echo "<br><br><a href=\"$PHP_SELF?ADD=6111111&script_id=$script_id&CoNfIrM=YES\">Click here to delete script $script_id</a><br><br><br>\n";
+		}
+
+$ADD='3111111';		# go to script modification below
+}
+
+######################
+# ADD=51111111 confirmation before deletion of filter record
+######################
+
+if ($ADD==51111111)
+{
+	echo "<FONT FACE=\"ARIAL,HELVETICA\" COLOR=BLACK SIZE=2>";
+
+	 if ( (strlen($lead_filter_id) < 2) or ($LOGdelete_filters < 1) )
+		{
+		 echo "<br>FILTER NOT DELETED - Please go back and look at the data you entered\n";
+		 echo "<br>Filter ID must be at least 2 characters in length\n";
+		}
+	 else
+		{
+		echo "<br><B>FILTER DELETION CONFIRMATION: $lead_filter_id</B>\n";
+		echo "<br><br><a href=\"$PHP_SELF?ADD=61111111&lead_filter_id=$lead_filter_id&CoNfIrM=YES\">Click here to delete filter $lead_filter_id</a><br><br><br>\n";
+		}
+
+$ADD='31111111';		# go to filter modification below
+}
+
+######################
+# ADD=511111111 confirmation before deletion of call time record
+######################
+
+if ($ADD==511111111)
+{
+	echo "<FONT FACE=\"ARIAL,HELVETICA\" COLOR=BLACK SIZE=2>";
+
+	 if ( (strlen($call_time_id) < 2) or ($LOGdelete_call_times < 1) )
+		{
+		 echo "<br>CALL TIME NOT DELETED - Please go back and look at the data you entered\n";
+		 echo "<br>Call Time ID must be at least 2 characters in length\n";
+		}
+	 else
+		{
+		echo "<br><B>CALL TIME DELETION CONFIRMATION: $call_time_id</B>\n";
+		echo "<br><br><a href=\"$PHP_SELF?ADD=611111111&call_time_id=$call_time_id&CoNfIrM=YES\">Click here to delete call time $call_time_id</a><br><br><br>\n";
+		}
+
+$ADD='311111111';		# go to call time modification below
+}
+
+######################
+# ADD=5111111111 confirmation before deletion of call time record
+######################
+
+if ($ADD==5111111111)
+{
+	echo "<FONT FACE=\"ARIAL,HELVETICA\" COLOR=BLACK SIZE=2>";
+
+	 if ( (strlen($call_time_id) < 2) or ($LOGdelete_call_times < 1) )
+		{
+		 echo "<br>STATE CALL TIME NOT DELETED - Please go back and look at the data you entered\n";
+		 echo "<br>Call Time ID must be at least 2 characters in length\n";
+		}
+	 else
+		{
+		echo "<br><B>STATE CALL TIME DELETION CONFIRMATION: $call_time_id</B>\n";
+		echo "<br><br><a href=\"$PHP_SELF?ADD=6111111111&call_time_id=$call_time_id&CoNfIrM=YES\">Click here to delete state call time $call_time_id</a><br><br><br>\n";
+		}
+
+$ADD='3111111111';		# go to state call time modification below
+}
+
+
+
+
+
+######################################################################################################
+######################################################################################################
+#######   6 series, delete records
+######################################################################################################
+######################################################################################################
+
+
+######################
+# ADD=6 delete user record
+######################
+
+if ($ADD==6)
+{
+	echo "<FONT FACE=\"ARIAL,HELVETICA\" COLOR=BLACK SIZE=2>";
+
+	 if ( ( strlen($user) < 2) or ($CoNfIrM != 'YES') or ($LOGdelete_users < 1) )
+		{
+		 echo "<br>USER NOT DELETED - Please go back and look at the data you entered\n";
+		 echo "<br>User be at least 2 characters in length\n";
+		}
+	 else
+		{
+		$stmt="DELETE from vicidial_users where user='$user' limit 1;";
+		$rslt=mysql_query($stmt, $link);
+
+		### LOG CHANGES TO LOG FILE ###
+		if ($WeBRooTWritablE > 0)
+			{
+			$fp = fopen ("./admin_changes_log.txt", "a");
+			fwrite ($fp, "$date|!!!DELETING USER!!!!|$PHP_AUTH_USER|$ip|user='$user'|\n");
+			fclose($fp);
+			}
+		echo "<br><B>USER DELETION COMPLETED: $user</B>\n";
+		echo "<br><br>\n";
+		}
+
+$ADD='0';		# go to user list
+}
+
+######################
+# ADD=61 delete campaign record
+######################
+
+if ($ADD==61)
+{
+	echo "<FONT FACE=\"ARIAL,HELVETICA\" COLOR=BLACK SIZE=2>";
+
+	 if ( ( strlen($campaign_id) < 2) or ($CoNfIrM != 'YES') or ($LOGdelete_campaigns < 1) )
+		{
+		 echo "<br>CAMPAIGN NOT DELETED - Please go back and look at the data you entered\n";
+		 echo "<br>Campaign_id be at least 2 characters in length\n";
+		}
+	 else
+		{
+		$stmt="DELETE from vicidial_campaigns where campaign_id='$campaign_id' limit 1;";
+		$rslt=mysql_query($stmt, $link);
+
+		echo "<br>REMOVING LIST HOPPER LEADS FROM OLD CAMPAIGN HOPPER ($campaign_id)\n";
+		$stmt="DELETE from vicidial_hopper where campaign_id='$campaign_id';";
+		$rslt=mysql_query($stmt, $link);
+
+		### LOG CHANGES TO LOG FILE ###
+		if ($WeBRooTWritablE > 0)
+			{
+			$fp = fopen ("./admin_changes_log.txt", "a");
+			fwrite ($fp, "$date|!!DELETING CAMPAIGN!|$PHP_AUTH_USER|$ip|campaign_id='$campaign_id'|\n");
+			fclose($fp);
+			}
+		echo "<br><B>CAMPAIGN DELETION COMPLETED: $campaign_id</B>\n";
+		echo "<br><br>\n";
+		}
+
+$ADD='10';		# go to campaigns list
+}
+
+######################
+# ADD=62 Logout all agents fro a campaign
+######################
+
+if ($ADD==62)
+{
+	echo "<FONT FACE=\"ARIAL,HELVETICA\" COLOR=BLACK SIZE=2>";
+
+	 if (strlen($campaign_id) < 2)
+		{
+		 echo "<br>AGENTS NOT LOGGED OUT OF CAMPAIGN - Please go back and look at the data you entered\n";
+		 echo "<br>Campaign_id be at least 2 characters in length\n";
+		}
+	 else
+		{
+		$stmt="DELETE from vicidial_live_agents where campaign_id='$campaign_id';";
+		$rslt=mysql_query($stmt, $link);
+
+		### LOG CHANGES TO LOG FILE ###
+		if ($WeBRooTWritablE > 0)
+			{
+			$fp = fopen ("./admin_changes_log.txt", "a");
+			fwrite ($fp, "$date|!!AGENT LOGOUT!!!!!!|$PHP_AUTH_USER|$ip|campaign_id='$campaign_id'|\n");
+			fclose($fp);
+			}
+		echo "<br><B>AGENT LOGOUT COMPLETED: $campaign_id</B>\n";
+		echo "<br><br>\n";
+		}
+
+$ADD='31';		# go to campaign modification below
+}
+
+
+######################
+# ADD=65 delete campaign lead recycle in the system
+######################
+
+if ($ADD==65)
+{
+	echo "<FONT FACE=\"ARIAL,HELVETICA\" COLOR=BLACK SIZE=2>";
+
+	 if ( (strlen($campaign_id) < 2) or (strlen($status) < 1) )
+		{
+		 echo "<br>CAMPAIGN LEAD RECYCLE NOT DELETED - Please go back and look at the data you entered\n";
+		 echo "<br>status must be between 1 and 6 characters in length\n";
+		 echo "<br>attempt delay must be at least 120 seconds\n";
+		 echo "<br>maximum attempts must be from 1 to 10\n";
+		}
+	 else
+		{
+		echo "<br><B>CAMPAIGN LEAD RECYCLE DELETED: $campaign_id - $status - $attempt_delay</B>\n";
+
+		$stmt="DELETE FROM vicidial_lead_recycle where campaign_id='$campaign_id' and status='$status';";
+		$rslt=mysql_query($stmt, $link);
+
+		### LOG CHANGES TO LOG FILE ###
+		if ($WeBRooTWritablE > 0)
+			{
+			$fp = fopen ("./admin_changes_log.txt", "a");
+			fwrite ($fp, "$date|DELETE LEAD RECYCLE   |$PHP_AUTH_USER|$ip|$stmt|\n");
+			fclose($fp);
+			}
+		}
+
+$ADD=31;	# go to campaign modification form below
+}
+
+######################
+# ADD=611 delete list record and all leads within it
+######################
+
+if ($ADD==611)
+{
+	echo "<FONT FACE=\"ARIAL,HELVETICA\" COLOR=BLACK SIZE=2>";
+
+	 if ( ( strlen($list_id) < 2) or ($CoNfIrM != 'YES') or ($LOGdelete_lists < 1) )
+		{
+		 echo "<br>LIST NOT DELETED - Please go back and look at the data you entered\n";
+		 echo "<br>List_id be at least 2 characters in length\n";
+		}
+	 else
+		{
+		$stmt="DELETE from vicidial_lists where list_id='$list_id' limit 1;";
+		$rslt=mysql_query($stmt, $link);
+
+		echo "<br>REMOVING LIST HOPPER LEADS FROM OLD CAMPAIGN HOPPER ($list_id)\n";
+		$stmt="DELETE from vicidial_hopper where list_id='$list_id';";
+		$rslt=mysql_query($stmt, $link);
+
+		echo "<br>REMOVING LIST LEADS FROM VICIDIAL_LIST TABLE\n";
+		$stmt="DELETE from vicidial_list where list_id='$list_id';";
+		$rslt=mysql_query($stmt, $link);
+
+		### LOG CHANGES TO LOG FILE ###
+		if ($WeBRooTWritablE > 0)
+			{
+			$fp = fopen ("./admin_changes_log.txt", "a");
+			fwrite ($fp, "$date|!!!DELETING LIST!!!!|$PHP_AUTH_USER|$ip|list_id='$list_id'|\n");
+			fclose($fp);
+			}
+		echo "<br><B>LIST DELETION COMPLETED: $list_id</B>\n";
+		echo "<br><br>\n";
+		}
+
+$ADD='100';		# go to lists list
+}
+
+######################
+# ADD=6111 delete in-group record
+######################
+
+if ($ADD==6111)
+{
+	echo "<FONT FACE=\"ARIAL,HELVETICA\" COLOR=BLACK SIZE=2>";
+
+	 if ( (strlen($group_id) < 2) or ($CoNfIrM != 'YES') or ($LOGdelete_ingroups < 1) )
+		{
+		 echo "<br>IN-GROUP NOT DELETED - Please go back and look at the data you entered\n";
+		 echo "<br>Group_id be at least 2 characters in length\n";
+		}
+	 else
+		{
+		$stmt="DELETE from vicidial_inbound_groups where group_id='$group_id' limit 1;";
+		$rslt=mysql_query($stmt, $link);
+
+		### LOG CHANGES TO LOG FILE ###
+		if ($WeBRooTWritablE > 0)
+			{
+			$fp = fopen ("./admin_changes_log.txt", "a");
+			fwrite ($fp, "$date|!DELETING IN-GROUP!!|$PHP_AUTH_USER|$ip|group_id='$group_id'|\n");
+			fclose($fp);
+			}
+		echo "<br><B>IN-GROUP DELETION COMPLETED: $group_id</B>\n";
+		echo "<br><br>\n";
+		}
+
+$ADD='1000';		# go to in-group list
+}
+
+######################
+# ADD=61111 delete remote agent record
+######################
+
+if ($ADD==61111)
+{
+	echo "<FONT FACE=\"ARIAL,HELVETICA\" COLOR=BLACK SIZE=2>";
+
+	 if ( (strlen($remote_agent_id) < 1) or ($CoNfIrM != 'YES') or ($LOGdelete_remote_agents < 1) )
+		{
+		 echo "<br>REMOTE AGENT NOT DELETED - Please go back and look at the data you entered\n";
+		 echo "<br>Remote_agent_id be at least 2 characters in length\n";
+		}
+	 else
+		{
+		$stmt="DELETE from vicidial_remote_agents where remote_agent_id='$remote_agent_id' limit 1;";
+		$rslt=mysql_query($stmt, $link);
+
+		### LOG CHANGES TO LOG FILE ###
+		if ($WeBRooTWritablE > 0)
+			{
+			$fp = fopen ("./admin_changes_log.txt", "a");
+			fwrite ($fp, "$date|!DELETING RMTAGENT!!|$PHP_AUTH_USER|$ip|remote_agent_id='$remote_agent_id'|\n");
+			fclose($fp);
+			}
+		echo "<br><B>REMOTE AGENT DELETION COMPLETED: $remote_agent_id</B>\n";
+		echo "<br><br>\n";
+		}
+
+$ADD='10000';		# go to remote agents list
+}
+
+######################
+# ADD=611111 delete user group record
+######################
+
+if ($ADD==611111)
+{
+	echo "<FONT FACE=\"ARIAL,HELVETICA\" COLOR=BLACK SIZE=2>";
+
+	 if ( (strlen($user_group) < 2) or ($CoNfIrM != 'YES') or ($LOGdelete_user_groups < 1) )
+		{
+		 echo "<br>USER GROUP NOT DELETED - Please go back and look at the data you entered\n";
+		 echo "<br>User_group be at least 2 characters in length\n";
+		}
+	 else
+		{
+		$stmt="DELETE from vicidial_user_groups where user_group='$user_group' limit 1;";
+		$rslt=mysql_query($stmt, $link);
+
+		### LOG CHANGES TO LOG FILE ###
+		if ($WeBRooTWritablE > 0)
+			{
+			$fp = fopen ("./admin_changes_log.txt", "a");
+			fwrite ($fp, "$date|!DELETING USRGROUP!!|$PHP_AUTH_USER|$ip|user_group='$user_group'|\n");
+			fclose($fp);
+			}
+		echo "<br><B>USER GROUP DELETION COMPLETED: $user_group</B>\n";
+		echo "<br><br>\n";
+		}
+
+$ADD='100000';		# go to user group list
+}
+
+######################
+# ADD=6111111 delete script record
+######################
+
+if ($ADD==6111111)
+{
+	echo "<FONT FACE=\"ARIAL,HELVETICA\" COLOR=BLACK SIZE=2>";
+
+	 if ( (strlen($script_id) < 2) or ($CoNfIrM != 'YES') or ($LOGdelete_scripts < 1) )
+		{
+		 echo "<br>SCRIPT NOT DELETED - Please go back and look at the data you entered\n";
+		 echo "<br>Script_id be at least 2 characters in length\n";
+		}
+	 else
+		{
+		$stmt="DELETE from vicidial_scripts where script_id='$script_id' limit 1;";
+		$rslt=mysql_query($stmt, $link);
+
+		### LOG CHANGES TO LOG FILE ###
+		if ($WeBRooTWritablE > 0)
+			{
+			$fp = fopen ("./admin_changes_log.txt", "a");
+			fwrite ($fp, "$date|!DELETING SCRIPT!!!!|$PHP_AUTH_USER|$ip|script_id='$script_id'|\n");
+			fclose($fp);
+			}
+		echo "<br><B>SCRIPT DELETION COMPLETED: $script_id</B>\n";
+		echo "<br><br>\n";
+		}
+
+$ADD='1000000';		# go to script list
+}
+
+
+######################
+# ADD=61111111 delete filter record
+######################
+
+if ($ADD==61111111)
+{
+	echo "<FONT FACE=\"ARIAL,HELVETICA\" COLOR=BLACK SIZE=2>";
+
+	 if ( (strlen($lead_filter_id) < 2) or ($CoNfIrM != 'YES') or ($LOGdelete_filters < 1) )
+		{
+		 echo "<br>FILTER NOT DELETED - Please go back and look at the data you entered\n";
+		 echo "<br>Filter ID must be at least 2 characters in length\n";
+		}
+	 else
+		{
+		$stmt="DELETE from vicidial_lead_filters where lead_filter_id='$lead_filter_id' limit 1;";
+		$rslt=mysql_query($stmt, $link);
+
+		### LOG CHANGES TO LOG FILE ###
+		if ($WeBRooTWritablE > 0)
+			{
+			$fp = fopen ("./admin_changes_log.txt", "a");
+			fwrite ($fp, "$date|!DELETING FILTER!!!!|$PHP_AUTH_USER|$ip|lead_filter_id='$lead_filter_id'|\n");
+			fclose($fp);
+			}
+		echo "<br><B>FILTER DELETION COMPLETED: $lead_filter_id</B>\n";
+		echo "<br><br>\n";
+		}
+
+$ADD='10000000';		# go to filter list
+}
+
+
+######################
+# ADD=611111111 delete call times record
+######################
+
+if ($ADD==611111111)
+{
+	echo "<FONT FACE=\"ARIAL,HELVETICA\" COLOR=BLACK SIZE=2>";
+
+	 if ( (strlen($call_time_id) < 2) or ($LOGdelete_call_times < 1) )
+		{
+		 echo "<br>CALL TIME NOT DELETED - Please go back and look at the data you entered\n";
+		 echo "<br>Call Time ID must be at least 2 characters in length\n";
+		}
+	 else
+		{
+		$stmt="DELETE from vicidial_call_times where call_time_id='$call_time_id' limit 1;";
+		$rslt=mysql_query($stmt, $link);
+
+		### LOG CHANGES TO LOG FILE ###
+		if ($WeBRooTWritablE > 0)
+			{
+			$fp = fopen ("./admin_changes_log.txt", "a");
+			fwrite ($fp, "$date|!DELETING CALL TIME!|$PHP_AUTH_USER|$ip|call_time_id='$call_time_id'|\n");
+			fclose($fp);
+			}
+		echo "<br><B>CALL TIME DELETION COMPLETED: $call_time_id</B>\n";
+		echo "<br><br>\n";
+		}
+
+$ADD='100000000';		# go to call times list
+}
+
+
+######################
+# ADD=6111111111 delete call times record
+######################
+
+if ($ADD==6111111111)
+{
+	echo "<FONT FACE=\"ARIAL,HELVETICA\" COLOR=BLACK SIZE=2>";
+
+	 if ( (strlen($call_time_id) < 2) or ($LOGdelete_call_times < 1) )
+		{
+		 echo "<br>STATE CALL TIME NOT DELETED - Please go back and look at the data you entered\n";
+		 echo "<br>Call Time ID must be at least 2 characters in length\n";
+		}
+	 else
+		{
+		$stmt="DELETE from vicidial_state_call_times where state_call_time_id='$call_time_id' limit 1;";
+		$rslt=mysql_query($stmt, $link);
+
+		$stmt="SELECT call_time_id,ct_state_call_times from vicidial_call_times where ct_state_call_times LIKE \"%|$call_time_id|%\" order by call_time_id;";
+		$rslt=mysql_query($stmt, $link);
+		$sct_to_print = mysql_num_rows($rslt);
+		$sct_list='';
+
+		$o=0;
+		while ($sct_to_print > $o) {
+			$rowx=mysql_fetch_row($rslt);
+			$sct_ids[$o] = "$rowx[0]";
+			$sct_states[$o] = "$rowx[1]";
+			$o++;
+		}
+		$o=0;
+
+		while ($sct_to_print > $o) {
+			$sct_states[$o] = eregi_replace("\|$call_time_id\|",'|',$sct_states[$o]);
+			$stmt="UPDATE vicidial_call_times set ct_state_call_times='$sct_states[$o]' where call_time_id='$sct_ids[$o]';";
+			$rslt=mysql_query($stmt, $link);
+			echo "$stmt\n";
+			echo "State Rule Removed: $sct_ids[$o]<BR>\n";
+			$o++;
+		}
+
+		### LOG CHANGES TO LOG FILE ###
+		if ($WeBRooTWritablE > 0)
+			{
+			$fp = fopen ("./admin_changes_log.txt", "a");
+			fwrite ($fp, "$date|!DELETING CALL TIME!|$PHP_AUTH_USER|$ip|state_call_time_id='$call_time_id'|\n");
+			fclose($fp);
+			}
+		echo "<br><B>STATE CALL TIME DELETION COMPLETED: $call_time_id</B>\n";
+		echo "<br><br>\n";
+		}
+
+$ADD='1000000000';		# go to call times list
+}
+
+
+
+
+
+
+######################################################################################################
+######################################################################################################
+#######   3 series, record modification forms
+######################################################################################################
+######################################################################################################
+
+
+
+
+######################
+# ADD=3 modify user info in the system
+######################
+
+if ($ADD==3)
+{
+echo "<TABLE><TR><TD>\n";
+	echo "<FONT FACE=\"ARIAL,HELVETICA\" COLOR=BLACK SIZE=2>";
+
+	$stmt="SELECT * from vicidial_users where user='$user';";
+	$rslt=mysql_query($stmt, $link);
+	$row=mysql_fetch_row($rslt);
+	$user_level =			$row[4];
+	$user_group =			$row[5];
+	$phone_login =			$row[6];
+	$phone_pass =			$row[7];
+	$delete_users =			$row[8];
+	$delete_user_groups =	$row[9];
+	$delete_lists =			$row[10];
+	$delete_campaigns =		$row[11];
+	$delete_ingroups =		$row[12];
+	$delete_remote_agents =	$row[13];
+	$load_leads =			$row[14];
+	$campaign_detail =		$row[15];
+	$ast_admin_access =		$row[16];
+	$ast_delete_phones =	$row[17];
+	$delete_scripts =		$row[18];
+	$modify_leads =			$row[19];
+	$hotkeys_active =		$row[20];
+	$change_agent_campaign =$row[21];
+	$agent_choose_ingroups =$row[22];
+	$scheduled_callbacks =	$row[24];
+	$agentonly_callbacks =	$row[25];
+	$agentcall_manual =		$row[26];
+	$vicidial_recording =	$row[27];
+	$vicidial_transfers =	$row[28];
+	$delete_filters =		$row[29];
+	$alter_agent_interface_options =$row[30];
+	$closer_default_blended =		$row[31];
+	$delete_call_times =	$row[32];
+	$modify_call_times =	$row[33];
+
+if ( ($user_level >= $LOGuser_level) and ($LOGuser_level < 9) )
+	{
+	echo "<br>You do not have permissions to modify this user: $row[1]\n";
+	}
+else
+	{
+	echo "<br>MODIFY A USERS RECORD: $row[1]<form action=$PHP_SELF method=POST>\n";
+	if ($LOGuser_level > 8)
+		{echo "<input type=hidden name=ADD value=4A>\n";}
+	else
+		{
+		if ($LOGalter_agent_interface == "1")
+			{echo "<input type=hidden name=ADD value=4B>\n";}
+		else
+			{echo "<input type=hidden name=ADD value=4>\n";}
+		}
+	echo "<input type=hidden name=user value=\"$row[1]\">\n";
+	echo "<center><TABLE width=600 cellspacing=3>\n";
+	echo "<tr bgcolor=#B6D3FC><td align=right>User Number: </td><td align=left><b>$row[1]</b>$NWB#vicidial_users-user$NWE</td></tr>\n";
+	echo "<tr bgcolor=#B6D3FC><td align=right>Password: </td><td align=left><input type=text name=pass size=20 maxlength=10 value=\"$row[2]\">$NWB#vicidial_users-pass$NWE</td></tr>\n";
+	echo "<tr bgcolor=#B6D3FC><td align=right>Full Name: </td><td align=left><input type=text name=full_name size=30 maxlength=30 value=\"$row[3]\">$NWB#vicidial_users-full_name$NWE</td></tr>\n";
+	echo "<tr bgcolor=#B6D3FC><td align=right>User Level: </td><td align=left><select size=1 name=user_level>";
+	$h=1;
+	while ($h<=$LOGuser_level)
+		{
+		echo "<option>$h</option>";
+		$h++;
+		}
+	echo "<option SELECTED>$row[4]</option></select>$NWB#vicidial_users-user_level$NWE</td></tr>\n";
+	echo "<tr bgcolor=#B6D3FC><td align=right>User Group: </td><td align=left><select size=1 name=user_group>\n";
+
+		$stmt="SELECT user_group,group_name from vicidial_user_groups order by user_group";
+		$rslt=mysql_query($stmt, $link);
+		$Ugroups_to_print = mysql_num_rows($rslt);
+		$Ugroups_list='';
+
+		$o=0;
+		while ($Ugroups_to_print > $o) {
+			$rowx=mysql_fetch_row($rslt);
+			$Ugroups_list .= "<option value=\"$rowx[0]\">$rowx[0] - $rowx[1]</option>\n";
+			$o++;
+		}
+	echo "$Ugroups_list";
+	echo "<option SELECTED>$user_group</option>\n";
+	echo "</select>$NWB#vicidial_users-user_group$NWE</td></tr>\n";
+	echo "<tr bgcolor=#B6D3FC><td align=right>Phone Login: </td><td align=left><input type=text name=phone_login size=20 maxlength=20 value=\"$phone_login\">$NWB#vicidial_users-phone_login$NWE</td></tr>\n";
+	echo "<tr bgcolor=#B6D3FC><td align=right>Phone Pass: </td><td align=left><input type=text name=phone_pass size=20 maxlength=20 value=\"$phone_pass\">$NWB#vicidial_users-phone_pass$NWE</td></tr>\n";
+
+	if ( ($LOGuser_level > 8) or ($LOGalter_agent_interface == "1") )
+		{
+		echo "<tr bgcolor=BLACK><td colspan=2 align=center><font color=white><B>AGENT INTERFACE OPTIONS:</td></tr>\n";
+		echo "<tr bgcolor=#B6D3FC><td align=right>Agent Choose Ingroups: </td><td align=left><select size=1 name=agent_choose_ingroups><option>0</option><option>1</option><option SELECTED>$agent_choose_ingroups</option></select>$NWB#vicidial_users-agent_choose_ingroups$NWE</td></tr>\n";
+		echo "<tr bgcolor=#B6D3FC><td align=right>HotKeys Active: </td><td align=left><select size=1 name=hotkeys_active><option>0</option><option>1</option><option SELECTED>$hotkeys_active</option></select>$NWB#vicidial_users-hotkeys_active$NWE</td></tr>\n";
+		echo "<tr bgcolor=#B6D3FC><td align=right>Scheduled Callbacks: </td><td align=left><select size=1 name=scheduled_callbacks><option>0</option><option>1</option><option SELECTED>$scheduled_callbacks</option></select>$NWB#vicidial_users-scheduled_callbacks$NWE</td></tr>\n";
+		echo "<tr bgcolor=#B6D3FC><td align=right>Agent-Only Callbacks: </td><td align=left><select size=1 name=agentonly_callbacks><option>0</option><option>1</option><option SELECTED>$agentonly_callbacks</option></select>$NWB#vicidial_users-agentonly_callbacks$NWE</td></tr>\n";
+		echo "<tr bgcolor=#B6D3FC><td align=right>Agent Call Manual: </td><td align=left><select size=1 name=agentcall_manual><option>0</option><option>1</option><option SELECTED>$agentcall_manual</option></select>$NWB#vicidial_users-agentcall_manual$NWE</td></tr>\n";
+		echo "<tr bgcolor=#B6D3FC><td align=right>Vicidial Recording: </td><td align=left><select size=1 name=vicidial_recording><option>0</option><option>1</option><option SELECTED>$vicidial_recording</option></select>$NWB#vicidial_users-vicidial_recording$NWE</td></tr>\n";
+		echo "<tr bgcolor=#B6D3FC><td align=right>Vicidial Transfers: </td><td align=left><select size=1 name=vicidial_transfers><option>0</option><option>1</option><option SELECTED>$vicidial_transfers</option></select>$NWB#vicidial_users-vicidial_transfers$NWE</td></tr>\n";
+		echo "<tr bgcolor=#B6D3FC><td align=right>Closer Default Blended: </td><td align=left><select size=1 name=closer_default_blended><option>0</option><option>1</option><option SELECTED>$closer_default_blended</option></select>$NWB#vicidial_users-closer_default_blended$NWE</td></tr>\n";
+		echo "<tr bgcolor=#B6D3FC><td align=right>Inbound Groups: </td><td align=left>\n";
+		echo "$groups_list";
+		echo "$NWB#vicidial_users-closer_campaigns$NWE</td></tr>\n";
+		}
+	if ($LOGuser_level > 8)
+		{
+		echo "<tr bgcolor=BLACK><td colspan=2 align=center><font color=white><B>ADMIN INTERFACE OPTIONS:</td></tr>\n";
+		echo "<tr bgcolor=#B6D3FC><td align=right>Alter Agent Interface Options: </td><td align=left><select size=1 name=alter_agent_interface_options><option>0</option><option>1</option><option SELECTED>$alter_agent_interface_options</option></select>$NWB#vicidial_users-alter_agent_interface_options$NWE</td></tr>\n";
+		echo "<tr bgcolor=#B6D3FC><td align=right>Delete Users: </td><td align=left><select size=1 name=delete_users><option>0</option><option>1</option><option SELECTED>$delete_users</option></select>$NWB#vicidial_users-delete_users$NWE</td></tr>\n";
+		echo "<tr bgcolor=#B6D3FC><td align=right>Delete User Groups: </td><td align=left><select size=1 name=delete_user_groups><option>0</option><option>1</option><option SELECTED>$delete_user_groups</option></select>$NWB#vicidial_users-delete_user_groups$NWE</td></tr>\n";
+		echo "<tr bgcolor=#B6D3FC><td align=right>Delete Lists: </td><td align=left><select size=1 name=delete_lists><option>0</option><option>1</option><option SELECTED>$delete_lists</option></select>$NWB#vicidial_users-delete_lists$NWE</td></tr>\n";
+		echo "<tr bgcolor=#B6D3FC><td align=right>Delete Campaigns: </td><td align=left><select size=1 name=delete_campaigns><option>0</option><option>1</option><option SELECTED>$delete_campaigns</option></select>$NWB#vicidial_users-delete_campaigns$NWE</td></tr>\n";
+		echo "<tr bgcolor=#B6D3FC><td align=right>Delete In-Groups: </td><td align=left><select size=1 name=delete_ingroups><option>0</option><option>1</option><option SELECTED>$delete_ingroups</option></select>$NWB#vicidial_users-delete_ingroups$NWE</td></tr>\n";
+		echo "<tr bgcolor=#B6D3FC><td align=right>Delete Remote Agents: </td><td align=left><select size=1 name=delete_remote_agents><option>0</option><option>1</option><option SELECTED>$delete_remote_agents</option></select>$NWB#vicidial_users-delete_remote_agents$NWE</td></tr>\n";
+		echo "<tr bgcolor=#B6D3FC><td align=right>Delete Scripts: </td><td align=left><select size=1 name=delete_scripts><option>0</option><option>1</option><option SELECTED>$delete_scripts</option></select>$NWB#vicidial_users-delete_scripts$NWE</td></tr>\n";
+		echo "<tr bgcolor=#B6D3FC><td align=right>Load Leads: </td><td align=left><select size=1 name=load_leads><option>0</option><option>1</option><option SELECTED>$load_leads</option></select>$NWB#vicidial_users-load_leads$NWE</td></tr>\n";
+		echo "<tr bgcolor=#B6D3FC><td align=right>Campaign Detail: </td><td align=left><select size=1 name=campaign_detail><option>0</option><option>1</option><option SELECTED>$campaign_detail</option></select>$NWB#vicidial_users-campaign_detail$NWE</td></tr>\n";
+		echo "<tr bgcolor=#B6D3FC><td align=right>AGC Admin Access: </td><td align=left><select size=1 name=ast_admin_access><option>0</option><option>1</option><option SELECTED>$ast_admin_access</option></select>$NWB#vicidial_users-ast_admin_access$NWE</td></tr>\n";
+		echo "<tr bgcolor=#B6D3FC><td align=right>AGC Delete Phones: </td><td align=left><select size=1 name=ast_delete_phones><option>0</option><option>1</option><option SELECTED>$ast_delete_phones</option></select>$NWB#vicidial_users-ast_delete_phones$NWE</td></tr>\n";
+		echo "<tr bgcolor=#B6D3FC><td align=right>Modify Leads: </td><td align=left><select size=1 name=modify_leads><option>0</option><option>1</option><option SELECTED>$modify_leads</option></select>$NWB#vicidial_users-modify_leads$NWE</td></tr>\n";
+		echo "<tr bgcolor=#B6D3FC><td align=right>Change Agent Campaign: </td><td align=left><select size=1 name=change_agent_campaign><option>0</option><option>1</option><option SELECTED>$change_agent_campaign</option></select>$NWB#vicidial_users-change_agent_campaign$NWE</td></tr>\n";
+		echo "<tr bgcolor=#B6D3FC><td align=right>Delete Filters: </td><td align=left><select size=1 name=delete_filters><option>0</option><option>1</option><option SELECTED>$delete_filters</option></select>$NWB#vicidial_users-delete_filters$NWE</td></tr>\n";
+		echo "<tr bgcolor=#B6D3FC><td align=right>Delete Call Times: </td><td align=left><select size=1 name=delete_call_times><option>0</option><option>1</option><option SELECTED>$delete_call_times</option></select>$NWB#vicidial_users-delete_call_times$NWE</td></tr>\n";
+		echo "<tr bgcolor=#B6D3FC><td align=right>Modify Call Times: </td><td align=left><select size=1 name=modify_call_times><option>0</option><option>1</option><option SELECTED>$modify_call_times</option></select>$NWB#vicidial_users-modify_call_times$NWE</td></tr>\n";
+		}
+	echo "<tr bgcolor=#B6D3FC><td align=center colspan=2><input type=submit name=SUBMIT value=SUBMIT></td></tr>\n";
+	echo "</TABLE></center>\n";
+
+	if ($LOGdelete_users > 0)
+		{
+		echo "<br><br><a href=\"$PHP_SELF?ADD=5&user=$row[1]\">DELETE THIS USER</a>\n";
+		}
+	echo "<br><br><a href=\"./AST_agent_time_sheet.php?agent=$row[1]\">Click here for user time sheet</a>\n";
+	echo "<br><br><a href=\"./user_status.php?user=$row[1]\">Click here for user status</a>\n";
+	echo "<br><br><a href=\"./user_stats.php?user=$row[1]\">Click here for user stats</a>\n";
+	echo "<br><br><a href=\"$PHP_SELF?ADD=8&user=$row[1]\">Click here for user CallBack Holds</a>\n";
+	}
+
+}
+
+
+######################
+# ADD=31 modify campaign info in the system - Detail view
+######################
+
+if ( ($LOGcampaign_detail < 1) and ($ADD==31) ) {$ADD=34;}	# send to Basic if not allowed
+
+if ($ADD==31)
+{
+	if ($stage=='show_dialable')
+	{
+		$stmt="UPDATE vicidial_campaigns set display_dialable_count='Y' where campaign_id='$campaign_id';";
+		$rslt=mysql_query($stmt, $link);
+	}
+	if ($stage=='hide_dialable')
+	{
+		$stmt="UPDATE vicidial_campaigns set display_dialable_count='N' where campaign_id='$campaign_id';";
+		$rslt=mysql_query($stmt, $link);
+	}
+echo "<TABLE><TR><TD>\n";
+	echo "<FONT FACE=\"ARIAL,HELVETICA\" COLOR=BLACK SIZE=2>";
+
+	$stmt="SELECT * from vicidial_campaigns where campaign_id='$campaign_id';";
+	$rslt=mysql_query($stmt, $link);
+	$row=mysql_fetch_row($rslt);
+	$dial_status_a = $row[3];
+	$dial_status_b = $row[4];
+	$dial_status_c = $row[5];
+	$dial_status_d = $row[6];
+	$dial_status_e = $row[7];
+	$lead_order = $row[8];
+	$hopper_level = $row[13];
+	$auto_dial_level = $row[14];
+	$next_agent_call = $row[15];
+	$local_call_time = $row[16];
+	$voicemail_ext = $row[17];
+	$dial_timeout = $row[18];
+	$dial_prefix = $row[19];
+	$campaign_cid = $row[20];
+	$campaign_vdad_exten = $row[21];
+	$campaign_rec_exten = $row[22];
+	$campaign_recording = $row[23];
+	$campaign_rec_filename = $row[24];
+	$script_id = $row[25];
+	$get_call_launch = $row[26];
+	$am_message_exten = $row[27];
+	$amd_send_to_vmx = $row[28];
+	$xferconf_a_dtmf = $row[29];
+	$xferconf_a_number = $row[30];
+	$xferconf_b_dtmf = $row[31];
+	$xferconf_b_number = $row[32];
+	$alt_number_dialing = $row[33];
+	$scheduled_callbacks = $row[34];
+	$lead_filter_id = $row[35];
+		if ($lead_filter_id=='') {$lead_filter_id='NONE';}
+	$drop_call_seconds = $row[36];
+	$safe_harbor_message = $row[37];
+	$safe_harbor_exten = $row[38];
+	$display_dialable_count = $row[39];
+	$wrapup_seconds = $row[40];
+	$wrapup_message = $row[41];
+#	$closer_campaigns = $row[42];
+	$use_internal_dnc = $row[43];
+
+echo "<br>MODIFY A CAMPAIGNS RECORD: $row[0] - <a href=\"$PHP_SELF?ADD=34&campaign_id=$campaign_id\">Basic View</a>";
+echo " | Detail View</a> | ";
+echo "<a href=\"./AST_timeonVDADall.php?RR=4&DB=0&group=$row[0]\">Realtime Screen</a>\n";
+echo "<form action=$PHP_SELF method=POST>\n";
+echo "<input type=hidden name=ADD value=41>\n";
+echo "<input type=hidden name=campaign_id value=\"$campaign_id\">\n";
+echo "<center><TABLE width=600 cellspacing=3>\n";
+echo "<tr bgcolor=#B6D3FC><td align=right>Campaign ID: </td><td align=left><b>$row[0]</b>$NWB#vicidial_campaigns-campaign_id$NWE</td></tr>\n";
+echo "<tr bgcolor=#B6D3FC><td align=right>Campaign Name: </td><td align=left><input type=text name=campaign_name size=40 maxlength=40 value=\"$row[1]\">$NWB#vicidial_campaigns-campaign_name$NWE</td></tr>\n";
+echo "<tr bgcolor=#B6D3FC><td align=right>Active: </td><td align=left><select size=1 name=active><option>Y</option><option>N</option><option SELECTED>$row[2]</option></select>$NWB#vicidial_campaigns-active$NWE</td></tr>\n";
+echo "<tr bgcolor=#B6D3FC><td align=right>Park Extension: </td><td align=left><input type=text name=park_ext size=10 maxlength=10 value=\"$row[9]\"> - Filename: <input type=text name=park_file_name size=10 maxlength=10 value=\"$row[10]\">$NWB#vicidial_campaigns-park_ext$NWE</td></tr>\n";
+echo "<tr bgcolor=#B6D3FC><td align=right>Web Form: </td><td align=left><input type=text name=web_form_address size=50 maxlength=255 value=\"$row[11]\">$NWB#vicidial_campaigns-web_form_address$NWE</td></tr>\n";
+echo "<tr bgcolor=#B6D3FC><td align=right>Allow Closers: </td><td align=left><select size=1 name=allow_closers><option>Y</option><option>N</option><option SELECTED>$row[12]</option></select>$NWB#vicidial_campaigns-allow_closers$NWE</td></tr>\n";
+echo "<tr bgcolor=#B6D3FC><td align=right>Dial status 1: </td><td align=left><select size=1 name=dial_status_a>\n";
+
+	$stmt="SELECT * from vicidial_statuses order by status";
+	$rslt=mysql_query($stmt, $link);
+	$statuses_to_print = mysql_num_rows($rslt);
+	$statuses_list='';
+
+	$o=0;
+	while ($statuses_to_print > $o) {
+		$rowx=mysql_fetch_row($rslt);
+		$statuses_list .= "<option value=\"$rowx[0]\">$rowx[0] - $rowx[1]</option>\n";
+		$statname_list["$rowx[0]"] = "$rowx[1]";
+		if (eregi("Y",$rowx[2]))
+			{$HKstatuses_list .= "<option value=\"$rowx[0]-----$rowx[1]\">$rowx[0] - $rowx[1]</option>\n";}
+		$o++;
+	}
+
+	$stmt="SELECT * from vicidial_campaign_statuses where campaign_id='$campaign_id' and selectable='Y' order by status";
+	$rslt=mysql_query($stmt, $link);
+	$Cstatuses_to_print = mysql_num_rows($rslt);
+
+	$o=0;
+	while ($Cstatuses_to_print > $o) {
+		$rowx=mysql_fetch_row($rslt);
+		$statuses_list .= "<option value=\"$rowx[0]\">$rowx[0] - $rowx[1]</option>\n";
+		$statname_list["$rowx[0]"] = "$rowx[1]";
+		if (eregi("Y",$rowx[2]))
+			{$HKstatuses_list .= "<option value=\"$rowx[0]-----$rowx[1]\">$rowx[0] - $rowx[1]</option>\n";}
+		$o++;
+	}
+echo "$statuses_list";
+echo "<option value=\"$dial_status_a\" SELECTED>$dial_status_a - $statname_list[$dial_status_a]</option>\n";
+echo "</select>$NWB#vicidial_campaigns-dial_status$NWE</td></tr>\n";
+echo "<tr bgcolor=#B6D3FC><td align=right>Dial status 2: </td><td align=left><select size=1 name=dial_status_b>\n";
+echo "$statuses_list";
+echo "<option value=\"$dial_status_b\" SELECTED>$dial_status_b - $statname_list[$dial_status_b]</option>\n";
+echo "</select>$NWB#vicidial_campaigns-dial_status$NWE</td></tr>\n";
+echo "<tr bgcolor=#B6D3FC><td align=right>Dial status 3: </td><td align=left><select size=1 name=dial_status_c>\n";
+echo "$statuses_list";
+echo "<option value=\"$dial_status_c\" SELECTED>$dial_status_c - $statname_list[$dial_status_c]</option>\n";
+echo "</select>$NWB#vicidial_campaigns-dial_status$NWE</td></tr>\n";
+echo "<tr bgcolor=#B6D3FC><td align=right>Dial status 4: </td><td align=left><select size=1 name=dial_status_d>\n";
+echo "$statuses_list";
+echo "<option value=\"$dial_status_d\" SELECTED>$dial_status_d - $statname_list[$dial_status_d]</option>\n";
+echo "</select>$NWB#vicidial_campaigns-dial_status$NWE</td></tr>\n";
+echo "<tr bgcolor=#B6D3FC><td align=right>Dial status 5: </td><td align=left><select size=1 name=dial_status_e>\n";
+echo "$statuses_list";
+echo "<option value=\"$dial_status_e\" SELECTED>$dial_status_e - $statname_list[$dial_status_e]</option>\n";
+echo "</select>$NWB#vicidial_campaigns-dial_status$NWE</td></tr>\n";
+
+echo "<tr bgcolor=#B6D3FC><td align=right>List Order: </td><td align=left><select size=1 name=lead_order><option>DOWN</option><option>UP</option><option>UP PHONE</option><option>DOWN PHONE</option><option>UP LAST NAME</option><option>DOWN LAST NAME</option><option>UP COUNT</option><option>DOWN COUNT</option><option>DOWN COUNT 2nd NEW</option><option>DOWN COUNT 3rd NEW</option><option>DOWN COUNT 4th NEW</option><option SELECTED>$lead_order</option></select>$NWB#vicidial_campaigns-lead_order$NWE</td></tr>\n";
+
+echo "<tr bgcolor=#B6D3FC><td align=right><a href=\"$PHP_SELF?ADD=31111111&lead_filter_id=$lead_filter_id\">Lead Filter</a>: </td><td align=left><select size=1 name=lead_filter_id>\n";
+echo "$filters_list";
+echo "<option selected value=\"$lead_filter_id\">$lead_filter_id - $filtername_list[$lead_filter_id]</option>\n";
+echo "</select>$NWB#vicidial_campaigns-lead_filter_id$NWE</td></tr>\n";
+
+echo "<tr bgcolor=#B6D3FC><td align=right>Hopper Level: </td><td align=left><select size=1 name=hopper_level><option>1</option><option>5</option><option>10</option><option>50</option><option>100</option><option>200</option><option>500</option><option>750</option><option>1000</option><option SELECTED>$hopper_level</option></select>$NWB#vicidial_campaigns-hopper_level$NWE</td></tr>\n";
+
+echo "<tr bgcolor=#B6D3FC><td align=right>Force Reset of Hopper: </td><td align=left><select size=1 name=reset_hopper><option>Y</option><option SELECTED>N</option></select>$NWB#vicidial_campaigns-force_reset_hopper$NWE</td></tr>\n";
+
+echo "<tr bgcolor=#B6D3FC><td align=right>Auto Dial Level: </td><td align=left><select size=1 name=auto_dial_level><option >0</option><option>1</option><option>1.1</option><option>1.2</option><option>1.3</option><option>1.4</option><option>1.5</option><option>1.6</option><option>1.7</option><option>1.8</option><option>1.9</option><option>2.0</option><option>2.2</option><option>2.5</option><option>2.7</option><option>3.0</option><option>3.5</option><option>4.0</option><option SELECTED>$auto_dial_level</option></select>(0 = off)$NWB#vicidial_campaigns-auto_dial_level$NWE</td></tr>\n";
+
+echo "<tr bgcolor=#B6D3FC><td align=right>Next Agent Call: </td><td align=left><select size=1 name=next_agent_call><option >random</option><option>oldest_call_start</option><option>oldest_call_finish</option><option>overall_user_level</option><option SELECTED>$next_agent_call</option></select>$NWB#vicidial_campaigns-next_agent_call$NWE</td></tr>\n";
+
+echo "<tr bgcolor=#B6D3FC><td align=right><a href=\"$PHP_SELF?ADD=311111111&call_time_id=$local_call_time\">Local Call Time: </a></td><td align=left><select size=1 name=local_call_time>\n";
+echo "$call_times_list";
+echo "<option selected value=\"$local_call_time\">$local_call_time - $call_timename_list[$local_call_time]</option>\n";
+echo "</select>$NWB#vicidial_campaigns-local_call_time$NWE</td></tr>\n";
+
+echo "<tr bgcolor=#B6D3FC><td align=right>Dial Timeout: </td><td align=left><input type=text name=dial_timeout size=3 maxlength=3 value=\"$dial_timeout\"> <i>in seconds</i>$NWB#vicidial_campaigns-dial_timeout$NWE</td></tr>\n";
+
+echo "<tr bgcolor=#B6D3FC><td align=right>Dial Prefix: </td><td align=left><input type=text name=dial_prefix size=20 maxlength=20 value=\"$dial_prefix\"> <font size=1>for 91NXXNXXXXXX value would be 9, for no dial prefix use X</font>$NWB#vicidial_campaigns-dial_prefix$NWE</td></tr>\n";
+
+echo "<tr bgcolor=#B6D3FC><td align=right>Campaign CallerID: </td><td align=left><input type=text name=campaign_cid size=20 maxlength=20 value=\"$campaign_cid\">$NWB#vicidial_campaigns-campaign_cid$NWE</td></tr>\n";
+
+echo "<tr bgcolor=#B6D3FC><td align=right>Campaign VDAD exten: </td><td align=left><input type=text name=campaign_vdad_exten size=10 maxlength=20 value=\"$campaign_vdad_exten\">$NWB#vicidial_campaigns-campaign_vdad_exten$NWE</td></tr>\n";
+
+echo "<tr bgcolor=#B6D3FC><td align=right>Campaign Rec exten: </td><td align=left><input type=text name=campaign_rec_exten size=10 maxlength=10 value=\"$campaign_rec_exten\">$NWB#vicidial_campaigns-campaign_rec_exten$NWE</td></tr>\n";
+
+echo "<tr bgcolor=#B6D3FC><td align=right>Campaign Recording: </td><td align=left><select size=1 name=campaign_recording><option>NEVER</option><option>ONDEMAND</option><option>ALLCALLS</option><option SELECTED>$campaign_recording</option></select>$NWB#vicidial_campaigns-campaign_recording$NWE</td></tr>\n";
+
+echo "<tr bgcolor=#B6D3FC><td align=right>Campaign Rec Filename: </td><td align=left><input type=text name=campaign_rec_filename size=50 maxlength=50 value=\"$campaign_rec_filename\">$NWB#vicidial_campaigns-campaign_rec_filename$NWE</td></tr>\n";
+
+echo "<tr bgcolor=#B6D3FC><td align=right><a href=\"$PHP_SELF?ADD=3111111&script_id=$script_id\">Script</a>: </td><td align=left><select size=1 name=script_id>\n";
+echo "$scripts_list";
+echo "<option selected value=\"$script_id\">$script_id - $scriptname_list[$script_id]</option>\n";
+echo "</select>$NWB#vicidial_campaigns-campaign_script$NWE</td></tr>\n";
+
+echo "<tr bgcolor=#B6D3FC><td align=right>Get Call Launch: </td><td align=left><select size=1 name=get_call_launch><option selected>NONE</option><option>SCRIPT</option><option>WEBFORM</option><option selected>$get_call_launch</option></select>$NWB#vicidial_campaigns-get_call_launch$NWE</td></tr>\n";
+
+echo "<tr bgcolor=#B6D3FC><td align=right>Answering Machine Message: </td><td align=left><input type=text name=am_message_exten size=10 maxlength=20 value=\"$am_message_exten\">$NWB#vicidial_campaigns-am_message_exten$NWE</td></tr>\n";
+
+echo "<tr bgcolor=#B6D3FC><td align=right>AMD Send to VM exten: </td><td align=left><select size=1 name=amd_send_to_vmx><option>Y</option><option>N</option><option SELECTED>$amd_send_to_vmx</option></select>$NWB#vicidial_campaigns-amd_send_to_vmx$NWE</td></tr>\n";
+
+echo "<tr bgcolor=#B6D3FC><td align=right>Transfer-Conf DTMF 1: </td><td align=left><input type=text name=xferconf_a_dtmf size=20 maxlength=50 value=\"$xferconf_a_dtmf\">$NWB#vicidial_campaigns-xferconf_a_dtmf$NWE</td></tr>\n";
+
+echo "<tr bgcolor=#B6D3FC><td align=right>Transfer-Conf Number 1: </td><td align=left><input type=text name=xferconf_a_number size=20 maxlength=50 value=\"$xferconf_a_number\">$NWB#vicidial_campaigns-xferconf_a_dtmf$NWE</td></tr>\n";
+
+echo "<tr bgcolor=#B6D3FC><td align=right>Transfer-Conf DTMF 2: </td><td align=left><input type=text name=xferconf_b_dtmf size=20 maxlength=50 value=\"$xferconf_b_dtmf\">$NWB#vicidial_campaigns-xferconf_a_dtmf$NWE</td></tr>\n";
+
+echo "<tr bgcolor=#B6D3FC><td align=right>Transfer-Conf Number 2: </td><td align=left><input type=text name=xferconf_b_number size=20 maxlength=50 value=\"$xferconf_b_number\">$NWB#vicidial_campaigns-xferconf_a_dtmf$NWE</td></tr>\n";
+
+echo "<tr bgcolor=#B6D3FC><td align=right>Alt Number Dialing: </td><td align=left><select size=1 name=alt_number_dialing><option>Y</option><option>N</option><option SELECTED>$alt_number_dialing</option></select>$NWB#vicidial_campaigns-alt_number_dialing$NWE</td></tr>\n";
+
+echo "<tr bgcolor=#B6D3FC><td align=right>Scheduled Callbacks: </td><td align=left><select size=1 name=scheduled_callbacks><option>Y</option><option>N</option><option SELECTED>$scheduled_callbacks</option></select>$NWB#vicidial_campaigns-scheduled_callbacks$NWE</td></tr>\n";
+
+echo "<tr bgcolor=#B6D3FC><td align=right>Drop Call Seconds: </td><td align=left><input type=text name=drop_call_seconds size=5 maxlength=2 value=\"$drop_call_seconds\">$NWB#vicidial_campaigns-drop_call_seconds$NWE</td></tr>\n";
+
+echo "<tr bgcolor=#B6D3FC><td align=right>Voicemail: </td><td align=left><input type=text name=voicemail_ext size=10 maxlength=10 value=\"$voicemail_ext\">$NWB#vicidial_campaigns-voicemail_ext$NWE</td></tr>\n";
+
+echo "<tr bgcolor=#B6D3FC><td align=right>Use Safe Harbor Message: </td><td align=left><select size=1 name=safe_harbor_message><option>Y</option><option>N</option><option SELECTED>$safe_harbor_message</option></select>$NWB#vicidial_campaigns-safe_harbor_message$NWE</td></tr>\n";
+
+echo "<tr bgcolor=#B6D3FC><td align=right>Safe Harbor Exten: </td><td align=left><input type=text name=safe_harbor_exten size=10 maxlength=20 value=\"$safe_harbor_exten\">$NWB#vicidial_campaigns-safe_harbor_exten$NWE</td></tr>\n";
+
+echo "<tr bgcolor=#B6D3FC><td align=right>Wrapup Seconds: </td><td align=left><input type=text name=wrapup_seconds size=5 maxlength=3 value=\"$wrapup_seconds\">$NWB#vicidial_campaigns-wrapup_seconds$NWE</td></tr>\n";
+
+echo "<tr bgcolor=#B6D3FC><td align=right>Wrapup Message: </td><td align=left><input type=text name=wrapup_message size=40 maxlength=255 value=\"$wrapup_message\">$NWB#vicidial_campaigns-wrapup_message$NWE</td></tr>\n";
+
+echo "<tr bgcolor=#B6D3FC><td align=right>Use Internal DNC List: </td><td align=left><select size=1 name=use_internal_dnc><option>Y</option><option>N</option><option SELECTED>$use_internal_dnc</option></select>$NWB#vicidial_campaigns-use_internal_dnc$NWE</td></tr>\n";
+
+
+if (eregi("CLOSER", $campaign_id))
+	{
+	echo "<tr bgcolor=#B6D3FC><td align=right>Allowed Inbound Groups: <BR>";
+	echo " $NWB#vicidial_campaigns-closer_campaigns$NWE</td><td align=left>\n";
+	echo "$groups_list";
+	echo "</td></tr>\n";
+	}
+
+
+
+echo "<tr bgcolor=#B6D3FC><td align=center colspan=2><input type=submit name=SUBMIT value=SUBMIT></td></tr>\n";
+echo "</TABLE></center></FORM>\n";
+
+echo "<center>\n";
+echo "<br><b>LISTS WITHIN THIS CAMPAIGN: &nbsp; $NWB#vicidial_campaign_lists$NWE</b><br>\n";
+echo "<TABLE width=400 cellspacing=3>\n";
+echo "<tr><td>LIST ID</td><td>LIST NAME</td><td>ACTIVE</td></tr>\n";
+
+	$active_lists = 0;
+	$inactive_lists = 0;
+	$stmt="SELECT list_id,active,list_name from vicidial_lists where campaign_id='$campaign_id'";
+	$rslt=mysql_query($stmt, $link);
+	$lists_to_print = mysql_num_rows($rslt);
+	$camp_lists='';
+
+	$o=0;
+	while ($lists_to_print > $o) {
+		$rowx=mysql_fetch_row($rslt);
+		$o++;
+	if (ereg("Y", $rowx[1])) {$active_lists++;   $camp_lists .= "'$rowx[0]',";}
+	if (ereg("N", $rowx[1])) {$inactive_lists++;}
+
+	if (eregi("1$|3$|5$|7$|9$", $o))
+		{$bgcolor='bgcolor="#B9CBFD"';} 
+	else
+		{$bgcolor='bgcolor="#9BB9FB"';}
+
+	echo "<tr $bgcolor><td><font size=1><a href=\"$PHP_SELF?ADD=311&list_id=$rowx[0]\">$rowx[0]</a></td><td><font size=1>$rowx[2]</td><td><font size=1>$rowx[1]</td></tr>\n";
+
+	}
+
+echo "</table></center><br>\n";
+echo "<center><b>\n";
+
+$filterSQL = $filtersql_list[$lead_filter_id];
+$filterSQL = eregi_replace("^and|and$|^or|or$","",$filterSQL);
+if (strlen($filterSQL)>4)
+	{$fSQL = "and $filterSQL";}
+else
+	{$fSQL = '';}
+
+	$camp_lists = eregi_replace(".$","",$camp_lists);
+echo "This campaign has $active_lists active lists and $inactive_lists inactive lists<br><br>\n";
+
+if ($display_dialable_count == 'Y')
+	{
+	### call function to calculate and print dialable leads
+	dialable_leads($DB,$link,$local_call_time,$dial_status_a,$dial_status_b,$dial_status_c,$dial_status_d,$dial_status_e,$camp_lists,$fSQL);
+	echo " - <font size=1><a href=\"$PHP_SELF?ADD=31&campaign_id=$campaign_id&stage=hide_dialable\">HIDE</a></font><BR><BR>";
+	}
+else
+	{
+	echo "<a href=\"$PHP_SELF?ADD=73&campaign_id=$campaign_id\" target=\"_blank\">Popup Dialable Leads Count</a>";
+	echo " - <font size=1><a href=\"$PHP_SELF?ADD=31&campaign_id=$campaign_id&stage=show_dialable\">SHOW</a></font><BR><BR>";
+	}
+
+
+
+
+
+	$stmt="SELECT count(*) FROM vicidial_hopper where campaign_id='$campaign_id' and status IN('READY')";
+	if ($DB) {echo "$stmt\n";}
+	$rslt=mysql_query($stmt, $link);
+	$rowx=mysql_fetch_row($rslt);
+	$hopper_leads = "$rowx[0]";
+
+echo "This campaign has $hopper_leads leads in the dial hopper<br><br>\n";
+echo "<a href=\"./AST_VICIDIAL_hopperlist.php?group=$campaign_id\">Click here to see what leads are in the hopper right now</a><br><br>\n";
+echo "<a href=\"$PHP_SELF?ADD=81&campaign_id=$campaign_id\">Click here to see all CallBack Holds in this campaign</a><BR><BR>\n";
+echo "</b></center>\n";
+
+
+
+
+echo "<center>\n";
+echo "<br><b>CUSTOM STATUSES WITHIN THIS CAMPAIGN: &nbsp; $NWB#vicidial_campaign_statuses$NWE</b><br>\n";
+echo "<TABLE width=400 cellspacing=3>\n";
+echo "<tr><td>STATUS</td><td>DESCRIPTION</td><td>SELECTABLE</td><td>DELETE</td></tr>\n";
+
+	$stmt="SELECT * from vicidial_campaign_statuses where campaign_id='$campaign_id'";
+	$rslt=mysql_query($stmt, $link);
+	$statuses_to_print = mysql_num_rows($rslt);
+	$o=0;
+	while ($statuses_to_print > $o) {
+		$rowx=mysql_fetch_row($rslt);
+		$o++;
+
+	if (eregi("1$|3$|5$|7$|9$", $o))
+		{$bgcolor='bgcolor="#B9CBFD"';} 
+	else
+		{$bgcolor='bgcolor="#9BB9FB"';}
+
+	echo "<tr $bgcolor><td><font size=1>$rowx[0]</td><td><font size=1>$rowx[1]</td><td><font size=1>$rowx[2]</td><td><font size=1><a href=\"$PHP_SELF?ADD=42&campaign_id=$campaign_id&status=$rowx[0]&action=DELETE\">DELETE</a></td></tr>\n";
+
+	}
+
+echo "</table>\n";
+
+echo "<br>ADD NEW CUSTOM CAMPAIGN STATUS<BR><form action=$PHP_SELF method=POST>\n";
+echo "<input type=hidden name=ADD value=22>\n";
+echo "<input type=hidden name=campaign_id value=\"$campaign_id\">\n";
+echo "Status: <input type=text name=status size=10 maxlength=8> &nbsp; \n";
+echo "Description: <input type=text name=status_name size=20 maxlength=30> &nbsp; \n";
+echo "Selectable: <select size=1 name=selectable><option>Y</option><option>N</option></select> &nbsp; \n";
+echo "<input type=submit name=submit value=ADD><BR>\n";
+
+echo "</FORM><br>\n";
+
+
+
+echo "<br><b>CUSTOM HOTKEYS WITHIN THIS CAMPAIGN: &nbsp; $NWB#vicidial_campaign_hotkeys$NWE</b><br>\n";
+echo "<TABLE width=400 cellspacing=3>\n";
+echo "<tr><td>HOTKEY</td><td>STATUS</td><td>DESCRIPTION</td><td>DELETE</td></tr>\n";
+
+	$stmt="SELECT * from vicidial_campaign_hotkeys where campaign_id='$campaign_id' order by hotkey";
+	$rslt=mysql_query($stmt, $link);
+	$statuses_to_print = mysql_num_rows($rslt);
+	$o=0;
+	while ($statuses_to_print > $o) {
+		$rowx=mysql_fetch_row($rslt);
+		$o++;
+
+	if (eregi("1$|3$|5$|7$|9$", $o))
+		{$bgcolor='bgcolor="#B9CBFD"';} 
+	else
+		{$bgcolor='bgcolor="#9BB9FB"';}
+
+	echo "<tr $bgcolor><td><font size=1>$rowx[1]</td><td><font size=1>$rowx[0]</td><td><font size=1>$rowx[2]</td><td><font size=1><a href=\"$PHP_SELF?ADD=43&campaign_id=$campaign_id&status=$rowx[0]&hotkey=$rowx[1]&action=DELETE\">DELETE</a></td></tr>\n";
+
+	}
+
+echo "</table>\n";
+
+echo "<br>ADD NEW CUSTOM CAMPAIGN HOTKEY<BR><form action=$PHP_SELF method=POST>\n";
+echo "<input type=hidden name=ADD value=23>\n";
+echo "<input type=hidden name=selectable value=Y>\n";
+echo "<input type=hidden name=campaign_id value=\"$campaign_id\">\n";
+echo "Hotkey: <select size=1 name=hotkey>\n";
+echo "<option>1</option>\n";
+echo "<option>2</option>\n";
+echo "<option>3</option>\n";
+echo "<option>4</option>\n";
+echo "<option>5</option>\n";
+echo "<option>6</option>\n";
+echo "<option>7</option>\n";
+echo "<option>8</option>\n";
+echo "<option>9</option>\n";
+echo "</select> &nbsp; \n";
+echo "Status: <select size=1 name=HKstatus>\n";
+echo "$HKstatuses_list\n";
+echo "</select> &nbsp; \n";
+echo "<input type=submit name=submit value=ADD><BR>\n";
+echo "</form><BR>\n";
+
+
+
+echo "<br><br><b>LEAD RECYCLING WITHIN THIS CAMPAIGN: &nbsp; $NWB#vicidial_lead_recycle$NWE</b><br>\n";
+echo "<TABLE width=500 cellspacing=3>\n";
+echo "<tr><td>STATUS</td><td>ATTEMPT DELAY</td><td>ATTEMPT MAXIMUM</td><td>ACTIVE</td><td> </td><td>DELETE</td></tr>\n";
+
+	$stmt="SELECT * from vicidial_lead_recycle where campaign_id='$campaign_id' order by status";
+	$rslt=mysql_query($stmt, $link);
+	$recycle_to_print = mysql_num_rows($rslt);
+	$o=0;
+	while ($recycle_to_print > $o) {
+		$rowx=mysql_fetch_row($rslt);
+		$o++;
+
+	if (eregi("1$|3$|5$|7$|9$", $o))
+		{$bgcolor='bgcolor="#B9CBFD"';} 
+	else
+		{$bgcolor='bgcolor="#9BB9FB"';}
+
+	echo "<tr $bgcolor><td><font size=1>$rowx[2]<form action=$PHP_SELF method=POST>\n";
+	echo "<input type=hidden name=status value=\"$rowx[2]\">\n";
+	echo "<input type=hidden name=campaign_id value=\"$campaign_id\">\n";
+	echo "<input type=hidden name=ADD value=45></td>\n";
+	echo "<td><font size=1><input size=7 maxlength=5 name=attempt_delay value=\"$rowx[3]\"></td>\n";
+	echo "<td><font size=1><input size=5 maxlength=3 name=attempt_maximum value=\"$rowx[4]\"></td>\n";
+	echo "<td><select size=1 name=active><option>Y</option><option>N</option><option SELECTED>$rowx[5]</option></select></td>\n";
+	echo "<td><font size=1><input type=submit name=submit value=MODIFY></form></td>\n";
+	echo "<td><font size=1><a href=\"$PHP_SELF?ADD=65&campaign_id=$campaign_id&status=$rowx[2]\">DELETE</a></td></tr>\n";
+	}
+
+echo "</table>\n";
+
+echo "<br>ADD NEW CAMPAIGN LEAD RECYCLE<BR><form action=$PHP_SELF method=POST>\n";
+echo "<input type=hidden name=ADD value=25>\n";
+echo "<input type=hidden name=active value=\"N\">\n";
+echo "<input type=hidden name=campaign_id value=\"$campaign_id\">\n";
+echo "Status: <select size=1 name=status>\n";
+echo "$HKstatuses_list\n";
+echo "</select> &nbsp; \n";
+echo "Attempt Delay: <input size=7 maxlength=5 name=attempt_delay>\n";
+echo "Attempt Maximum: <input size=5 maxlength=3 name=attempt_maximum>\n";
+echo "<input type=submit name=submit value=ADD><BR>\n";
+
+echo "</center></FORM><br>\n";
+
+echo "<a href=\"$PHP_SELF?ADD=52&campaign_id=$campaign_id\">LOG ALL AGENTS OUT OF THIS CAMPAIGN</a><BR><BR>\n";
+
+if ($LOGdelete_campaigns > 0)
+	{
+	echo "<br><br><a href=\"$PHP_SELF?ADD=51&campaign_id=$campaign_id\">DELETE THIS CAMPAIGN</a>\n";
+	}
+
+}
+
+
+######################
+# ADD=34 modify campaign info in the system - Basic View
+######################
+
+if ($ADD==34)
+{
+	if ($stage=='show_dialable')
+	{
+		$stmt="UPDATE vicidial_campaigns set display_dialable_count='Y' where campaign_id='$campaign_id';";
+		$rslt=mysql_query($stmt, $link);
+	}
+	if ($stage=='hide_dialable')
+	{
+		$stmt="UPDATE vicidial_campaigns set display_dialable_count='N' where campaign_id='$campaign_id';";
+		$rslt=mysql_query($stmt, $link);
+	}
+echo "<TABLE><TR><TD>\n";
+	echo "<FONT FACE=\"ARIAL,HELVETICA\" COLOR=BLACK SIZE=2>";
+
+	$stmt="SELECT * from vicidial_campaigns where campaign_id='$campaign_id';";
+	$rslt=mysql_query($stmt, $link);
+	$row=mysql_fetch_row($rslt);
+	$dial_status_a = $row[3];
+	$dial_status_b = $row[4];
+	$dial_status_c = $row[5];
+	$dial_status_d = $row[6];
+	$dial_status_e = $row[7];
+	$lead_order = $row[8];
+	$hopper_level = $row[13];
+	$auto_dial_level = $row[14];
+	$next_agent_call = $row[15];
+	$local_call_time = $row[16];
+	$voicemail_ext = $row[17];
+	$dial_timeout = $row[18];
+	$dial_prefix = $row[19];
+	$campaign_cid = $row[20];
+	$campaign_vdad_exten = $row[21];
+	$script_id = $row[25];
+	$get_call_launch = $row[26];
+	$lead_filter_id = $row[35];
+		if ($lead_filter_id=='') {$lead_filter_id='NONE';}
+	$display_dialable_count = $row[39];
+
+echo "<br>MODIFY A CAMPAIGN'S RECORD: $row[0] - Basic View | ";
+echo "<a href=\"$PHP_SELF?ADD=31&campaign_id=$campaign_id\">Detail View</a> | ";
+echo "<a href=\"./AST_timeonVDADall.php?RR=4&DB=0&group=$row[0]\">Realtime Screen</a>\n";
+echo "<form action=$PHP_SELF method=POST>\n";
+echo "<input type=hidden name=ADD value=44>\n";
+echo "<input type=hidden name=campaign_id value=\"$campaign_id\">\n";
+echo "<center><TABLE width=600 cellspacing=3>\n";
+echo "<tr bgcolor=#B6D3FC><td align=right>Campaign ID: </td><td align=left><b>$row[0]</b>$NWB#vicidial_campaigns-campaign_id$NWE</td></tr>\n";
+echo "<tr bgcolor=#B6D3FC><td align=right>Campaign Name: </td><td align=left><input type=text name=campaign_name size=40 maxlength=40 value=\"$row[1]\">$NWB#vicidial_campaigns-campaign_name$NWE</td></tr>\n";
+echo "<tr bgcolor=#B6D3FC><td align=right>Active: </td><td align=left><select size=1 name=active><option>Y</option><option>N</option><option SELECTED>$row[2]</option></select>$NWB#vicidial_campaigns-active$NWE</td></tr>\n";
+echo "<tr bgcolor=#B6D3FC><td align=right>Park Extension: </td><td align=left>$row[9] - $row[10]$NWB#vicidial_campaigns-park_ext$NWE</td></tr>\n";
+echo "<tr bgcolor=#B6D3FC><td align=right>Web Form: </td><td align=left>$row[11]$NWB#vicidial_campaigns-web_form_address$NWE</td></tr>\n";
+echo "<tr bgcolor=#B6D3FC><td align=right>Allow Closers: </td><td align=left>$row[12] $NWB#vicidial_campaigns-allow_closers$NWE</td></tr>\n";
+echo "<tr bgcolor=#B6D3FC><td align=right>Dial status 1: </td><td align=left><select size=1 name=dial_status_a>\n";
+
+	$stmt="SELECT * from vicidial_statuses order by status";
+	$rslt=mysql_query($stmt, $link);
+	$statuses_to_print = mysql_num_rows($rslt);
+	$statuses_list='';
+
+	$o=0;
+	while ($statuses_to_print > $o) {
+		$rowx=mysql_fetch_row($rslt);
+		$statuses_list .= "<option value=\"$rowx[0]\">$rowx[0] - $rowx[1]</option>\n";
+		$statname_list["$rowx[0]"] = "$rowx[1]";
+		$o++;
+	}
+
+	$stmt="SELECT * from vicidial_campaign_statuses where campaign_id='$campaign_id' order by status";
+	$rslt=mysql_query($stmt, $link);
+	$Cstatuses_to_print = mysql_num_rows($rslt);
+
+	$o=0;
+	while ($Cstatuses_to_print > $o) {
+		$rowx=mysql_fetch_row($rslt);
+		$statuses_list .= "<option value=\"$rowx[0]\">$rowx[0] - $rowx[1]</option>\n";
+		$statname_list["$rowx[0]"] = "$rowx[1]";
+		$o++;
+	}
+echo "$statuses_list";
+echo "<option value=\"$dial_status_a\" SELECTED>$dial_status_a - $statname_list[$dial_status_a]</option>\n";
+echo "</select>$NWB#vicidial_campaigns-dial_status$NWE</td></tr>\n";
+echo "<tr bgcolor=#B6D3FC><td align=right>Dial status 2: </td><td align=left><select size=1 name=dial_status_b>\n";
+echo "$statuses_list";
+echo "<option value=\"$dial_status_b\" SELECTED>$dial_status_b - $statname_list[$dial_status_b]</option>\n";
+echo "</select>$NWB#vicidial_campaigns-dial_status$NWE</td></tr>\n";
+echo "<tr bgcolor=#B6D3FC><td align=right>Dial status 3: </td><td align=left><select size=1 name=dial_status_c>\n";
+echo "$statuses_list";
+echo "<option value=\"$dial_status_c\" SELECTED>$dial_status_c - $statname_list[$dial_status_c]</option>\n";
+echo "</select>$NWB#vicidial_campaigns-dial_status$NWE</td></tr>\n";
+echo "<tr bgcolor=#B6D3FC><td align=right>Dial status 4: </td><td align=left><select size=1 name=dial_status_d>\n";
+echo "$statuses_list";
+echo "<option value=\"$dial_status_d\" SELECTED>$dial_status_d - $statname_list[$dial_status_d]</option>\n";
+echo "</select>$NWB#vicidial_campaigns-dial_status$NWE</td></tr>\n";
+echo "<tr bgcolor=#B6D3FC><td align=right>Dial status 5: </td><td align=left><select size=1 name=dial_status_e>\n";
+echo "$statuses_list";
+echo "<option value=\"$dial_status_e\" SELECTED>$dial_status_e - $statname_list[$dial_status_e]</option>\n";
+echo "</select>$NWB#vicidial_campaigns-dial_status$NWE</td></tr>\n";
+
+echo "<tr bgcolor=#B6D3FC><td align=right>List Order: </td><td align=left><select size=1 name=lead_order><option>DOWN</option><option>UP</option><option>UP PHONE</option><option>DOWN PHONE</option><option>UP LAST NAME</option><option>DOWN LAST NAME</option><option>UP COUNT</option><option>DOWN COUNT</option><option>DOWN COUNT 2nd NEW</option><option>DOWN COUNT 3rd NEW</option><option>DOWN COUNT 4th NEW</option><option SELECTED>$lead_order</option></select>$NWB#vicidial_campaigns-lead_order$NWE</td></tr>\n";
+
+echo "<tr bgcolor=#B6D3FC><td align=right><a href=\"$PHP_SELF?ADD=31111111&lead_filter_id=$lead_filter_id\">Lead Filter</a>: </td><td align=left><select size=1 name=lead_filter_id>\n";
+echo "$filters_list";
+echo "<option selected value=\"$lead_filter_id\">$lead_filter_id - $filtername_list[$lead_filter_id]</option>\n";
+echo "</select>$NWB#vicidial_campaigns-lead_filter_id$NWE</td></tr>\n";
+
+echo "<tr bgcolor=#B6D3FC><td align=right>Hopper Level: </td><td align=left><select size=1 name=hopper_level><option>1</option><option>5</option><option>10</option><option>50</option><option>100</option><option>200</option><option>500</option><option>750</option><option>1000</option><option SELECTED>$hopper_level</option></select>$NWB#vicidial_campaigns-hopper_level$NWE</td></tr>\n";
+
+echo "<tr bgcolor=#B6D3FC><td align=right>Force Reset of Hopper: </td><td align=left><select size=1 name=reset_hopper><option>Y</option><option SELECTED>N</option></select>$NWB#vicidial_campaigns-force_reset_hopper$NWE</td></tr>\n";
+
+echo "<tr bgcolor=#B6D3FC><td align=right>Auto Dial Level: </td><td align=left><select size=1 name=auto_dial_level><option >0</option><option>1</option><option>1.1</option><option>1.2</option><option>1.3</option><option>1.4</option><option>1.5</option><option>1.6</option><option>1.7</option><option>1.8</option><option>1.9</option><option>2.0</option><option>2.2</option><option>2.5</option><option>2.7</option><option>3.0</option><option>3.5</option><option>4.0</option><option SELECTED>$auto_dial_level</option></select>(0 = off)$NWB#vicidial_campaigns-auto_dial_level$NWE</td></tr>\n";
+
+echo "<tr bgcolor=#B6D3FC><td align=right><a href=\"$PHP_SELF?ADD=3111111&script_id=$script_id\">Script</a>: </td><td align=left>$script_id</td></tr>\n";
+
+echo "<tr bgcolor=#B6D3FC><td align=right>Get Call Launch: </td><td align=left>$get_call_launch</td></tr>\n";
+
+echo "<tr bgcolor=#B6D3FC><td align=center colspan=2><input type=submit name=SUBMIT value=SUBMIT></td></tr>\n";
+echo "</TABLE></center></FORM>\n";
+
+echo "<center>\n";
+echo "<br><b>LISTS WITHIN THIS CAMPAIGN: &nbsp; $NWB#vicidial_campaign_lists$NWE</b><br>\n";
+echo "<TABLE width=400 cellspacing=3>\n";
+echo "<tr><td>LIST ID</td><td>LIST NAME</td><td>ACTIVE</td></tr>\n";
+
+	$active_lists = 0;
+	$inactive_lists = 0;
+	$stmt="SELECT list_id,active,list_name from vicidial_lists where campaign_id='$campaign_id'";
+	$rslt=mysql_query($stmt, $link);
+	$lists_to_print = mysql_num_rows($rslt);
+	$camp_lists='';
+
+	$o=0;
+	while ($lists_to_print > $o) {
+		$rowx=mysql_fetch_row($rslt);
+		$o++;
+	if (ereg("Y", $rowx[1])) {$active_lists++;   $camp_lists .= "'$rowx[0]',";}
+	if (ereg("N", $rowx[1])) {$inactive_lists++;}
+
+	if (eregi("1$|3$|5$|7$|9$", $o))
+		{$bgcolor='bgcolor="#B9CBFD"';} 
+	else
+		{$bgcolor='bgcolor="#9BB9FB"';}
+
+	echo "<tr $bgcolor><td><font size=1><a href=\"$PHP_SELF?ADD=311&list_id=$rowx[0]\">$rowx[0]</a></td><td><font size=1>$rowx[2]</td><td><font size=1>$rowx[1]</td></tr>\n";
+
+	}
+
+echo "</table></center><br>\n";
+echo "<center><b>\n";
+
+$filterSQL = $filtersql_list[$lead_filter_id];
+$filterSQL = eregi_replace("^and|and$|^or|or$","",$filterSQL);
+if (strlen($filterSQL)>4)
+	{$fSQL = "and $filterSQL";}
+else
+	{$fSQL = '';}
+
+	$camp_lists = eregi_replace(".$","",$camp_lists);
+echo "This campaign has $active_lists active lists and $inactive_lists inactive lists<br><br>\n";
+
+
+if ($display_dialable_count == 'Y')
+	{
+	### call function to calculate and print dialable leads
+	dialable_leads($DB,$link,$local_call_time,$dial_status_a,$dial_status_b,$dial_status_c,$dial_status_d,$dial_status_e,$camp_lists,$fSQL);
+	echo " - <font size=1><a href=\"$PHP_SELF?ADD=34&campaign_id=$campaign_id&stage=hide_dialable\">HIDE</a></font><BR><BR>";
+	}
+else
+	{
+	echo "<a href=\"$PHP_SELF?ADD=73&campaign_id=$campaign_id\" target=\"_blank\">Popup Dialable Leads Count</a>";
+	echo " - <font size=1><a href=\"$PHP_SELF?ADD=31&campaign_id=$campaign_id&stage=show_dialable\">SHOW</a></font><BR><BR>";
+	}
+
+
+
+	$stmt="SELECT count(*) FROM vicidial_hopper where campaign_id='$campaign_id' and status IN('READY')";
+	if ($DB) {echo "$stmt\n";}
+	$rslt=mysql_query($stmt, $link);
+	$rowx=mysql_fetch_row($rslt);
+	$hopper_leads = "$rowx[0]";
+
+echo "This campaign has $hopper_leads leads in the dial hopper<br><br>\n";
+echo "<a href=\"./AST_VICIDIAL_hopperlist.php?group=$campaign_id\">Click here to see what leads are in the hopper right now</a><br><br>\n";
+echo "<a href=\"$PHP_SELF?ADD=81&campaign_id=$campaign_id\">Click here to see all CallBack Holds in this campaign</a><BR><BR>\n";
+echo "</b></center>\n";
+
+echo "<br>\n";
+
+echo "<a href=\"$PHP_SELF?ADD=52&campaign_id=$campaign_id\">LOG ALL AGENTS OUT OF THIS CAMPAIGN</a><BR><BR>\n";
+
+
+if ($LOGdelete_campaigns > 0)
+	{
+	echo "<br><br><a href=\"$PHP_SELF?ADD=51&campaign_id=$campaign_id\">DELETE THIS CAMPAIGN</a>\n";
+	}
+
+
+}
+
+
+######################
+# ADD=311 modify list info in the system
+######################
+
+if ($ADD==311)
+{
+echo "<TABLE><TR><TD>\n";
+	echo "<FONT FACE=\"ARIAL,HELVETICA\" COLOR=BLACK SIZE=2>";
+
+	$stmt="SELECT * from vicidial_lists where list_id='$list_id';";
+	$rslt=mysql_query($stmt, $link);
+	$row=mysql_fetch_row($rslt);
+	$campaign_id = $row[2];
+	$active = $row[3];
+
+	# grab names of global statuses and statuses in the selected campaign
+	$stmt="SELECT * from vicidial_statuses order by status";
+	$rslt=mysql_query($stmt, $link);
+	$statuses_to_print = mysql_num_rows($rslt);
+
+	$o=0;
+	while ($statuses_to_print > $o) {
+		$rowx=mysql_fetch_row($rslt);
+		$statuses_list["$rowx[0]"] = "$rowx[1]";
+		$o++;
+	}
+
+	$stmt="SELECT * from vicidial_campaign_statuses where campaign_id='$campaign_id' order by status";
+	$rslt=mysql_query($stmt, $link);
+	$Cstatuses_to_print = mysql_num_rows($rslt);
+
+	$o=0;
+	while ($Cstatuses_to_print > $o) {
+		$rowx=mysql_fetch_row($rslt);
+		$statuses_list["$rowx[0]"] = "$rowx[1]";
+		$o++;
+	}
+	# end grab status names
+
+
+echo "<br>MODIFY A LISTS RECORD: $row[0]<form action=$PHP_SELF method=POST>\n";
+echo "<input type=hidden name=ADD value=411>\n";
+echo "<input type=hidden name=list_id value=\"$row[0]\">\n";
+echo "<input type=hidden name=old_campaign_id value=\"$row[2]\">\n";
+echo "<center><TABLE width=600 cellspacing=3>\n";
+echo "<tr bgcolor=#B6D3FC><td align=right>List ID: </td><td align=left><b>$row[0]</b>$NWB#vicidial_lists-list_id$NWE</td></tr>\n";
+echo "<tr bgcolor=#B6D3FC><td align=right>List Name: </td><td align=left><input type=text name=list_name size=20 maxlength=20 value=\"$row[1]\">$NWB#vicidial_lists-list_name$NWE</td></tr>\n";
+echo "<tr bgcolor=#B6D3FC><td align=right><a href=\"$PHP_SELF?ADD=34&campaign_id=$campaign_id\">Campaign</a>: </td><td align=left><select size=1 name=campaign_id>\n";
+
+	$stmt="SELECT campaign_id,campaign_name from vicidial_campaigns order by campaign_id";
+	$rslt=mysql_query($stmt, $link);
+	$campaigns_to_print = mysql_num_rows($rslt);
+	$campaigns_list='';
+
+	$o=0;
+	while ($campaigns_to_print > $o) {
+		$rowx=mysql_fetch_row($rslt);
+		$campaigns_list .= "<option value=\"$rowx[0]\">$rowx[0] - $rowx[1]</option>\n";
+		$o++;
+	}
+echo "$campaigns_list";
+echo "<option SELECTED>$campaign_id</option>\n";
+echo "</select>$NWB#vicidial_lists-campaign_id$NWE</td></tr>\n";
+echo "<tr bgcolor=#B6D3FC><td align=right>Active: </td><td align=left><select size=1 name=active><option>Y</option><option>N</option><option SELECTED>$active</option></select>$NWB#vicidial_lists-active$NWE</td></tr>\n";
+echo "<tr bgcolor=#B6D3FC><td align=right>Reset Lead-Called-Status for this list: </td><td align=left><select size=1 name=reset_list><option>Y</option><option SELECTED>N</option></select>$NWB#vicidial_lists-reset_list$NWE</td></tr>\n";
+echo "<tr bgcolor=#B6D3FC><td align=center colspan=2><input type=submit name=SUBMIT value=SUBMIT></td></tr>\n";
+echo "</TABLE></center>\n";
+
+echo "<center>\n";
+echo "<br><b>STATUSES WITHIN THIS LIST:</b><br>\n";
+echo "<TABLE width=500 cellspacing=3>\n";
+echo "<tr><td>STATUS</td><td>STATUS NAME</td><td>CALLED</td><td>NOT CALLED</td></tr>\n";
+
+	$leads_in_list = 0;
+	$leads_in_list_N = 0;
+	$leads_in_list_Y = 0;
+	$stmt="SELECT status,called_since_last_reset,count(*) from vicidial_list where list_id='$list_id' group by status,called_since_last_reset order by status,called_since_last_reset";
+	if ($DB) {echo "$stmt\n";}
+	$rslt=mysql_query($stmt, $link);
+	$statuses_to_print = mysql_num_rows($rslt);
+
+	$o=0;
+	$lead_list['count'] = 0;
+	$lead_list['Y_count'] = 0;
+	$lead_list['N_count'] = 0;
+	while ($statuses_to_print > $o) 
+	{
+	    $rowx=mysql_fetch_row($rslt);
+	    
+	    $lead_list['count'] = ($lead_list['count'] + $rowx[2]);
+	    if ($rowx[1] == 'N') 
+	    {
+		$since_reset = 'N';
+		$since_resetX = 'Y';
+	    }
+	    else 
+	    {
+		$since_reset = 'Y';
+		$since_resetX = 'N';
+	    } 
+	    $lead_list[$since_reset][$rowx[0]] = ($lead_list[$since_reset][$rowx[0]] + $rowx[2]);
+	    $lead_list[$since_reset.'_count'] = ($lead_list[$since_reset.'_count'] + $rowx[2]);
+	    #If opposite side is not set, it may not in the future so give it a value of zero
+	    if (!isset($lead_list[$since_resetX][$rowx[0]])) 
+	    {
+		$lead_list[$since_resetX][$rowx[0]]=0;
+	    }
+	    $o++;
+	}
+ 
+	$o=0;
+	if ($lead_list['count'] > 0)
+	{
+		while (list($dispo,) = each($lead_list[$since_reset]))
+		{
+
+		if (eregi("1$|3$|5$|7$|9$", $o))
+			{$bgcolor='bgcolor="#B9CBFD"';} 
+		else
+			{$bgcolor='bgcolor="#9BB9FB"';}
+
+		if ($dispo == 'CBHOLD')
+			{
+			$CLB="<a href=\"$PHP_SELF?ADD=811&list_id=$list_id\">";
+			$CLE="</a>";
+			}
+		else
+			{
+			$CLB='';
+			$CLE='';
+			}
+
+		echo "<tr $bgcolor><td><font size=1>$CLB$dispo$CLE</td><td><font size=1>$statuses_list[$dispo]</td><td><font size=1>".$lead_list['Y'][$dispo]."</td><td><font size=1>".$lead_list['N'][$dispo]." </td></tr>\n";
+		$o++;
+		}
+	}
+
+echo "<tr><td colspan=2><font size=1>SUBTOTALS</td><td><font size=1>$lead_list[Y_count]</td><td><font size=1>$lead_list[N_count]</td></tr>\n";
+echo "<tr bgcolor=\"#9BB9FB\"><td><font size=1>TOTAL</td><td colspan=3 align=center><font size=1>$lead_list[count]</td></tr>\n";
+
+echo "</table></center><br>\n";
+unset($lead_list);
+
+
+
+
+
+echo "<center>\n";
+echo "<br><b>TIME ZONES WITHIN THIS LIST:</b><br>\n";
+echo "<TABLE width=500 cellspacing=3>\n";
+echo "<tr><td>GMT OFFSET NOW (local time)</td><td>CALLED</td><td>NOT CALLED</td></tr>\n";
+
+	$stmt="SELECT gmt_offset_now,called_since_last_reset,count(*) from vicidial_list where list_id='$list_id' group by gmt_offset_now,called_since_last_reset order by gmt_offset_now,called_since_last_reset";
+	$rslt=mysql_query($stmt, $link);
+	$statuses_to_print = mysql_num_rows($rslt);
+
+	$o=0;
+	$plus='+';
+	$lead_list['count'] = 0;
+	$lead_list['Y_count'] = 0;
+	$lead_list['N_count'] = 0;
+	while ($statuses_to_print > $o) 
+	{
+	    $rowx=mysql_fetch_row($rslt);
+	    
+	    $lead_list['count'] = ($lead_list['count'] + $rowx[2]);
+	    if ($rowx[1] == 'N') 
+	    {
+		$since_reset = 'N';
+		$since_resetX = 'Y';
+	    }
+	    else 
+	    {
+		$since_reset = 'Y';
+		$since_resetX = 'N';
+	    } 
+	    $lead_list[$since_reset][$rowx[0]] = ($lead_list[$since_reset][$rowx[0]] + $rowx[2]);
+	    $lead_list[$since_reset.'_count'] = ($lead_list[$since_reset.'_count'] + $rowx[2]);
+	    #If opposite side is not set, it may not in the future so give it a value of zero
+	    if (!isset($lead_list[$since_resetX][$rowx[0]])) 
+	    {
+		$lead_list[$since_resetX][$rowx[0]]=0;
+	    }
+	    $o++;
+	}
+
+	if ($lead_list['count'] > 0)
+	{
+		while (list($tzone,) = each($lead_list[$since_reset]))
+		{
+		$LOCALzone=3600 * $tzone;
+		$LOCALdate=gmdate("D M Y H:i", time() + $LOCALzone);
+
+		if ($tzone >= 0) {$DISPtzone = "$plus$tzone";}
+		else {$DISPtzone = "$tzone";}
+		if (eregi("1$|3$|5$|7$|9$", $o))
+			{$bgcolor='bgcolor="#B9CBFD"';} 
+		else
+			{$bgcolor='bgcolor="#9BB9FB"';}
+
+			echo "<tr $bgcolor><td><font size=1>".$DISPtzone." &nbsp; &nbsp; ($LOCALdate)</td><td><font size=1>".$lead_list['Y'][$tzone]."</td><td><font size=1>".$lead_list['N'][$tzone]."</td></tr>\n";
+		}
+	}
+
+echo "<tr><td><font size=1>SUBTOTALS</td><td><font size=1>$lead_list[Y_count]</td><td><font size=1>$lead_list[N_count]</td></tr>\n";
+echo "<tr bgcolor=\"#9BB9FB\"><td><font size=1>TOTAL</td><td colspan=2 align=center><font size=1>$lead_list[count]</td></tr>\n";
+
+echo "</table></center><br>\n";
+unset($lead_list);
+
+
+
+
+
+
+
+	$leads_in_list = 0;
+	$leads_in_list_N = 0;
+	$leads_in_list_Y = 0;
+	$stmt="SELECT status,called_count,count(*) from vicidial_list where list_id='$list_id' group by status,called_count order by status,called_count";
+	$rslt=mysql_query($stmt, $link);
+	$status_called_to_print = mysql_num_rows($rslt);
+
+	$o=0;
+	$sts=0;
+	$first_row=1;
+	$all_called_first=1000;
+	$all_called_last=0;
+	while ($status_called_to_print > $o) 
+	{
+	$rowx=mysql_fetch_row($rslt);
+	$leads_in_list = ($leads_in_list + $rowx[2]);
+	$count_statuses[$o]			= "$rowx[0]";
+	$count_called[$o]			= "$rowx[1]";
+	$count_count[$o]			= "$rowx[2]";
+	$all_called_count[$rowx[1]] = ($all_called_count[$rowx[1]] + $rowx[2]);
+
+	if ( (strlen($status[$sts]) < 1) or ($status[$sts] != "$rowx[0]") )
+		{
+		if ($first_row) {$first_row=0;}
+		else {$sts++;}
+		$status[$sts] = "$rowx[0]";
+		$status_called_first[$sts] = "$rowx[1]";
+		if ($status_called_first[$sts] < $all_called_first) {$all_called_first = $status_called_first[$sts];}
+		}
+	$leads_in_sts[$sts] = ($leads_in_sts[$sts] + $rowx[2]);
+	$status_called_last[$sts] = "$rowx[1]";
+	if ($status_called_last[$sts] > $all_called_last) {$all_called_last = $status_called_last[$sts];}
+
+	$o++;
+	}
+
+
+
+
+echo "<center>\n";
+echo "<br><b>CALLED COUNTS WITHIN THIS LIST:</b><br>\n";
+echo "<TABLE width=500 cellspacing=1>\n";
+echo "<tr><td align=left><font size=1>STATUS</td><td align=center><font size=1>STATUS NAME</td>";
+$first = $all_called_first;
+while ($first <= $all_called_last)
+	{
+	if (eregi("1$|3$|5$|7$|9$", $first)) {$AB='bgcolor="#AFEEEE"';} 
+	else{$AB='bgcolor="#E0FFFF"';}
+	echo "<td align=center $AB><font size=1>$first</td>";
+	$first++;
+	}
+echo "<td align=center><font size=1>SUBTOTAL</td></tr>\n";
+
+	$sts=0;
+	$statuses_called_to_print = count($status);
+	while ($statuses_called_to_print > $sts) 
+	{
+	$Pstatus = $status[$sts];
+	if (eregi("1$|3$|5$|7$|9$", $sts))
+		{$bgcolor='bgcolor="#B9CBFD"';   $AB='bgcolor="#9BB9FB"';} 
+	else
+		{$bgcolor='bgcolor="#9BB9FB"';   $AB='bgcolor="#B9CBFD"';}
+#	echo "$status[$sts]|$status_called_first[$sts]|$status_called_last[$sts]|$leads_in_sts[$sts]|\n";
+#	echo "$status[$sts]|";
+	echo "<tr $bgcolor><td><font size=1>$Pstatus</td><td><font size=1>$statuses_list[$Pstatus]</td>";
+
+	$first = $all_called_first;
+	while ($first <= $all_called_last)
+		{
+		if (eregi("1$|3$|5$|7$|9$", $sts))
+			{
+			if (eregi("1$|3$|5$|7$|9$", $first)) {$AB='bgcolor="#9BB9FB"';} 
+			else{$AB='bgcolor="#B9CBFD"';}
+			}
+		else
+			{
+			if (eregi("0$|2$|4$|6$|8$", $first)) {$AB='bgcolor="#9BB9FB"';} 
+			else{$AB='bgcolor="#B9CBFD"';}
+			}
+
+		$called_printed=0;
+		$o=0;
+		while ($status_called_to_print > $o) 
+			{
+			if ( ($count_statuses[$o] == "$Pstatus") and ($count_called[$o] == "$first") )
+				{
+				$called_printed++;
+				echo "<td $AB><font size=1> $count_count[$o]</td>";
+				}
+
+
+			$o++;
+			}
+		if (!$called_printed) 
+			{echo "<td $AB><font size=1> &nbsp;</td>";}
+		$first++;
+		}
+	echo "<td><font size=1>$leads_in_sts[$sts]</td></tr>\n\n";
+
+	$sts++;
+	}
+
+echo "<tr><td align=center colspan=2><b><font size=1>TOTAL</td>";
+$first = $all_called_first;
+while ($first <= $all_called_last)
+	{
+	if (eregi("1$|3$|5$|7$|9$", $first)) {$AB='bgcolor="#AFEEEE"';} 
+	else{$AB='bgcolor="#E0FFFF"';}
+	echo "<td align=center $AB><b><font size=1>$all_called_count[$first]</td>";
+	$first++;
+	}
+echo "<td align=center><b><font size=1>$leads_in_list</td></tr>\n";
+
+echo "</table></center><br>\n";
+
+
+
+
+
+echo "<center><b>\n";
+
+if ($LOGdelete_lists > 0)
+	{
+	echo "<br><br><a href=\"$PHP_SELF?ADD=511&list_id=$list_id\">DELETE THIS LIST</a>\n";
+	}
+
+}
+
+
+
+######################
+# ADD=3111 modify in-group info in the system
+######################
+
+if ($ADD==3111)
+{
+echo "<TABLE><TR><TD>\n";
+	echo "<FONT FACE=\"ARIAL,HELVETICA\" COLOR=BLACK SIZE=2>";
+
+	$stmt="SELECT * from vicidial_inbound_groups where group_id='$group_id';";
+	$rslt=mysql_query($stmt, $link);
+	$row=mysql_fetch_row($rslt);
+	$group_name = $row[1];
+	$group_color = $row[2];
+	$active = $row[3];
+	$web_form_address = $row[4];
+	$voicemail_ext = $row[5];
+	$next_agent_call = $row[6];
+	$fronter_display = $row[7];
+	$script_id = $row[8];
+	$get_call_launch = $row[9];
+	$xferconf_a_dtmf = $row[10];
+	$xferconf_a_number = $row[11];
+	$xferconf_b_dtmf = $row[12];
+	$xferconf_b_number = $row[13];
+	$drop_call_seconds = $row[14];
+	$drop_message = $row[15];
+	$drop_exten = $row[16];
+
+echo "<br>MODIFY A GROUPS RECORD: $row[0]<form action=$PHP_SELF method=POST>\n";
+echo "<input type=hidden name=ADD value=4111>\n";
+echo "<input type=hidden name=group_id value=\"$row[0]\">\n";
+echo "<center><TABLE width=600 cellspacing=3>\n";
+echo "<tr bgcolor=#B6D3FC><td align=right>Group ID: </td><td align=left><b>$row[0]</b>$NWB#vicidial_inbound_groups-group_id$NWE</td></tr>\n";
+echo "<tr bgcolor=#B6D3FC><td align=right>Group Name: </td><td align=left><input type=text name=group_name size=30 maxlength=30 value=\"$row[1]\">$NWB#vicidial_inbound_groups-group_name$NWE</td></tr>\n";
+echo "<tr bgcolor=#B6D3FC><td align=right>Group Color: </td><td align=left bgcolor=\"$row[2]\"><input type=text name=group_color size=7 maxlength=7 value=\"$row[2]\">$NWB#vicidial_inbound_groups-group_color$NWE</td></tr>\n";
+echo "<tr bgcolor=#B6D3FC><td align=right>Active: </td><td align=left><select size=1 name=active><option>Y</option><option>N</option><option SELECTED>$active</option></select>$NWB#vicidial_inbound_groups-active$NWE</td></tr>\n";
+echo "<tr bgcolor=#B6D3FC><td align=right>Web Form: </td><td align=left><input type=text name=web_form_address size=50 maxlength=255 value=\"$web_form_address\">$NWB#vicidial_inbound_groups-web_form_address$NWE</td></tr>\n";
+echo "<tr bgcolor=#B6D3FC><td align=right>Next Agent Call: </td><td align=left><select size=1 name=next_agent_call><option >random</option><option>oldest_call_start</option><option>oldest_call_finish</option><option>overall_user_level</option><option SELECTED>$next_agent_call</option></select>$NWB#vicidial_inbound_groups-next_agent_call$NWE</td></tr>\n";
+echo "<tr bgcolor=#B6D3FC><td align=right>Fronter Display: </td><td align=left><select size=1 name=fronter_display><option>Y</option><option>N</option><option SELECTED>$fronter_display</option></select>$NWB#vicidial_inbound_groups-fronter_display$NWE</td></tr>\n";
+
+echo "<tr bgcolor=#B6D3FC><td align=right><a href=\"$PHP_SELF?ADD=3111111&script_id=$script_id\">Script</a>: </td><td align=left><select size=1 name=script_id>\n";
+echo "$scripts_list";
+echo "<option selected value=\"$script_id\">$script_id - $scriptname_list[$script_id]</option>\n";
+echo "</select>$NWB#vicidial_inbound_groups-ingroup_script$NWE</td></tr>\n";
+echo "<tr bgcolor=#B6D3FC><td align=right>Get Call Launch: </td><td align=left><select size=1 name=get_call_launch><option selected>NONE</option><option>SCRIPT</option><option>WEBFORM</option><option selected>$get_call_launch</option></select>$NWB#vicidial_inbound_groups-get_call_launch$NWE</td></tr>\n";
+
+echo "<tr bgcolor=#B6D3FC><td align=right>Transfer-Conf DTMF 1: </td><td align=left><input type=text name=xferconf_a_dtmf size=20 maxlength=50 value=\"$xferconf_a_dtmf\">$NWB#vicidial_inbound_groups-xferconf_a_dtmf$NWE</td></tr>\n";
+
+echo "<tr bgcolor=#B6D3FC><td align=right>Transfer-Conf Number 1: </td><td align=left><input type=text name=xferconf_a_number size=20 maxlength=50 value=\"$xferconf_a_number\">$NWB#vicidial_inbound_groups-xferconf_a_dtmf$NWE</td></tr>\n";
+
+echo "<tr bgcolor=#B6D3FC><td align=right>Transfer-Conf DTMF 2: </td><td align=left><input type=text name=xferconf_b_dtmf size=20 maxlength=50 value=\"$xferconf_b_dtmf\">$NWB#vicidial_inbound_groups-xferconf_a_dtmf$NWE</td></tr>\n";
+
+echo "<tr bgcolor=#B6D3FC><td align=right>Transfer-Conf Number 2: </td><td align=left><input type=text name=xferconf_b_number size=20 maxlength=50 value=\"$xferconf_b_number\">$NWB#vicidial_inbound_groups-xferconf_a_dtmf$NWE</td></tr>\n";
+
+echo "<tr bgcolor=#B6D3FC><td align=right>Drop Call Seconds: </td><td align=left><input type=text name=drop_call_seconds size=5 maxlength=4 value=\"$drop_call_seconds\">$NWB#vicidial_inbound_groups-drop_call_seconds$NWE</td></tr>\n";
+
+echo "<tr bgcolor=#B6D3FC><td align=right>Voicemail: </td><td align=left><input type=text name=voicemail_ext size=10 maxlength=10 value=\"$voicemail_ext\">$NWB#vicidial_inbound_groups-voicemail_ext$NWE</td></tr>\n";
+
+echo "<tr bgcolor=#B6D3FC><td align=right>Use Drop Message: </td><td align=left><select size=1 name=drop_message><option>Y</option><option>N</option><option SELECTED>$drop_message</option></select>$NWB#vicidial_inbound_groups-drop_message$NWE</td></tr>\n";
+
+echo "<tr bgcolor=#B6D3FC><td align=right>Drop Exten: </td><td align=left><input type=text name=drop_exten size=10 maxlength=20 value=\"$drop_exten\">$NWB#vicidial_inbound_groups-drop_exten$NWE</td></tr>\n";
+
+
+echo "<tr bgcolor=#B6D3FC><td align=center colspan=2><input type=submit name=SUBMIT value=SUBMIT></td></tr>\n";
+echo "</TABLE></center>\n";
+
+echo "</table></center><br>\n";
+
+echo "<center><b>\n";
+
+if ($LOGdelete_ingroups > 0)
+	{
+	echo "<br><br><a href=\"$PHP_SELF?ADD=5111&group_id=$group_id\">DELETE THIS IN-GROUP</a>\n";
+	}
+
+}
+
+
+
+######################
+# ADD=31111 modify remote agents info in the system
+######################
+
+if ($ADD==31111)
+{
+echo "<TABLE><TR><TD>\n";
+	echo "<FONT FACE=\"ARIAL,HELVETICA\" COLOR=BLACK SIZE=2>";
+
+	$stmt="SELECT * from vicidial_remote_agents where remote_agent_id='$remote_agent_id';";
+	$rslt=mysql_query($stmt, $link);
+	$row=mysql_fetch_row($rslt);
+	$remote_agent_id =	$row[0];
+	$user_start =		$row[1];
+	$number_of_lines =	$row[2];
+	$server_ip =		$row[3];
+	$conf_exten =		$row[4];
+	$status =			$row[5];
+	$campaign_id =		$row[6];
+
+echo "<br>MODIFY A REMOTE AGENTS ENTRY: $row[0]<form action=$PHP_SELF method=POST>\n";
+echo "<input type=hidden name=ADD value=41111>\n";
+echo "<input type=hidden name=remote_agent_id value=\"$row[0]\">\n";
+echo "<center><TABLE width=600 cellspacing=3>\n";
+echo "<tr bgcolor=#B6D3FC><td align=right>User ID Start: </td><td align=left><input type=text name=user_start size=6 maxlength=6 value=\"$user_start\"> (numbers only, incremented)$NWB#vicidial_remote_agents-user_start$NWE</td></tr>\n";
+echo "<tr bgcolor=#B6D3FC><td align=right>Number of Lines: </td><td align=left><input type=text name=number_of_lines size=3 maxlength=3 value=\"$number_of_lines\"> (numbers only)$NWB#vicidial_remote_agents-number_of_lines$NWE</td></tr>\n";
+echo "<tr bgcolor=#B6D3FC><td align=right>Server IP: </td><td align=left><select size=1 name=server_ip>\n";
+echo "$servers_list";
+echo "<option SELECTED>$row[3]</option>\n";
+echo "</select>$NWB#vicidial_remote_agents-server_ip$NWE</td></tr>\n";
+echo "<tr bgcolor=#B6D3FC><td align=right>External Extension: </td><td align=left><input type=text name=conf_exten size=20 maxlength=20 value=\"$conf_exten\"> (dialplan number dialed to reach agents)$NWB#vicidial_remote_agents-conf_exten$NWE</td></tr>\n";
+echo "<tr bgcolor=#B6D3FC><td align=right>Status: </td><td align=left><select size=1 name=status><option SELECTED>ACTIVE</option><option>INACTIVE</option><option SELECTED>$status</option></select>$NWB#vicidial_remote_agents-status$NWE</td></tr>\n";
+echo "<tr bgcolor=#B6D3FC><td align=right>Campaign: </td><td align=left><select size=1 name=campaign_id>\n";
+echo "$campaigns_list";
+echo "<option SELECTED>$campaign_id</option>\n";
+echo "</select>$NWB#vicidial_remote_agents-campaign_id$NWE</td></tr>\n";
+echo "<tr bgcolor=#B6D3FC><td align=right>Inbound Groups: </td><td align=left>\n";
+echo "$groups_list";
+echo "$NWB#vicidial_remote_agents-closer_campaigns$NWE</td></tr>\n";
+echo "<tr bgcolor=#B6D3FC><td align=center colspan=2><input type=submit name=SUBMIT value=SUBMIT></td></tr>\n";
+echo "</TABLE></center>\n";
+echo "NOTE: It can take up to 30 seconds for changes submitted on this screen to go live\n";
+
+
+if ($LOGdelete_remote_agents > 0)
+	{
+	echo "<br><br><a href=\"$PHP_SELF?ADD=51111&remote_agent_id=$remote_agent_id\">DELETE THIS REMOTE AGENT</a>\n";
+	}
+
+}
+
+
+######################
+# ADD=311111 modify user group info in the system
+######################
+
+if ($ADD==311111)
+{
+echo "<TABLE><TR><TD>\n";
+	echo "<FONT FACE=\"ARIAL,HELVETICA\" COLOR=BLACK SIZE=2>";
+
+	$stmt="SELECT * from vicidial_user_groups where user_group='$user_group';";
+	$rslt=mysql_query($stmt, $link);
+	$row=mysql_fetch_row($rslt);
+	$user_group =		$row[0];
+	$group_name =		$row[1];
+echo "<FONT FACE=\"ARIAL,HELVETICA\" COLOR=BLACK SIZE=2>";
+
+echo "<br>MODIFY A USERS GROUP ENTRY<form action=$PHP_SELF method=POST>\n";
+echo "<input type=hidden name=ADD value=411111>\n";
+echo "<input type=hidden name=OLDuser_group value=\"$user_group\">\n";
+echo "<center><TABLE width=600 cellspacing=3>\n";
+echo "<tr bgcolor=#B6D3FC><td align=right>Group: </td><td align=left><input type=text name=user_group size=15 maxlength=20 value=\"$user_group\"> (no spaces or punctuation)$NWB#vicidial_user_groups-user_group$NWE</td></tr>\n";
+echo "<tr bgcolor=#B6D3FC><td align=right>Description: </td><td align=left><input type=text name=group_name size=40 maxlength=40 value=\"$group_name\"> (description of group)$NWB#vicidial_user_groups-group_name$NWE</td></tr>\n";
+echo "<tr bgcolor=#B6D3FC><td align=center colspan=2><input type=submit name=SUBMIT value=SUBMIT></td></tr>\n";
+echo "</TABLE></center>\n";
+
+if ($LOGdelete_user_groups > 0)
+	{
+	echo "<br><br><a href=\"$PHP_SELF?ADD=511111&user_group=$user_group\">DELETE THIS USER GROUP</a>\n";
+	}
+
+}
+
+
+######################
+# ADD=3111111 modify script info in the system
+######################
+
+if ($ADD==3111111)
+{
+echo "<TABLE><TR><TD>\n";
+	echo "<FONT FACE=\"ARIAL,HELVETICA\" COLOR=BLACK SIZE=2>";
+
+	$stmt="SELECT * from vicidial_scripts where script_id='$script_id';";
+	$rslt=mysql_query($stmt, $link);
+	$row=mysql_fetch_row($rslt);
+	$script_name =		$row[1];
+	$script_comments =	$row[2];
+	$script_text =		$row[3];
+	$active =			$row[4];
+echo "<FONT FACE=\"ARIAL,HELVETICA\" COLOR=BLACK SIZE=2>";
+
+echo "<br>MODIFY A SCRIPT<form action=$PHP_SELF method=POST>\n";
+echo "<input type=hidden name=ADD value=4111111>\n";
+echo "<input type=hidden name=script_id value=\"$script_id\">\n";
+echo "<tr bgcolor=#B6D3FC><td align=right>Script ID: </td><td align=left><B>$script_id</B>$NWB#vicidial_scripts-script_name$NWE</td></tr>\n";
+echo "<tr bgcolor=#B6D3FC><td align=right>Script Name: </td><td align=left><input type=text name=script_name size=40 maxlength=50 value=\"$script_name\"> (title of the script)$NWB#vicidial_scripts-script_name$NWE</td></tr>\n";
+echo "<tr bgcolor=#B6D3FC><td align=right>Script Comments: </td><td align=left><input type=text name=script_comments size=50 maxlength=255 value=\"$script_comments\"> $NWB#vicidial_scripts-script_comments$NWE</td></tr>\n";
+echo "<tr bgcolor=#B6D3FC><td align=right>Active: </td><td align=left><select size=1 name=active><option SELECTED>Y</option><option>N</option><option selected>$active</option></select>$NWB#vicidial_scripts-active$NWE</td></tr>\n";
+echo "<tr bgcolor=#B6D3FC><td align=right>Script Text: <BR><BR><B><a href=\"javascript:openNewWindow('$PHP_SELF?ADD=7111111&script_id=$script_id')\">Preview Script</a></B> </td><td align=left><TEXTAREA NAME=script_text ROWS=20 COLS=50>$script_text</TEXTAREA> $NWB#vicidial_scripts-script_text$NWE</td></tr>\n";
+echo "<tr bgcolor=#B6D3FC><td align=center colspan=2><input type=submit name=SUBMIT value=SUBMIT></td></tr>\n";
+echo "</TABLE></center>\n";
+
+if ($LOGdelete_scripts > 0)
+	{
+	echo "<br><br><a href=\"$PHP_SELF?ADD=5111111&script_id=$script_id\">DELETE THIS SCRIPT</a>\n";
+	}
+
+}
+
+
+######################
+# ADD=31111111 modify filter info in the system
+######################
+
+if ($ADD==31111111)
+{
+echo "<TABLE><TR><TD>\n";
+	echo "<FONT FACE=\"ARIAL,HELVETICA\" COLOR=BLACK SIZE=2>";
+
+	$stmt="SELECT * from vicidial_lead_filters where lead_filter_id='$lead_filter_id';";
+	$rslt=mysql_query($stmt, $link);
+	$row=mysql_fetch_row($rslt);
+	$lead_filter_name =		$row[1];
+	$lead_filter_comments =	$row[2];
+	$lead_filter_sql =		$row[3];
+echo "<FONT FACE=\"ARIAL,HELVETICA\" COLOR=BLACK SIZE=2>";
+
+echo "<br>MODIFY A FILTER<form action=$PHP_SELF method=POST>\n";
+echo "<input type=hidden name=ADD value=41111111>\n";
+echo "<input type=hidden name=lead_filter_id value=\"$lead_filter_id\">\n";
+echo "<tr bgcolor=#B6D3FC><td align=right>Filter ID: </td><td align=left><B>$lead_filter_id</B>$NWB#vicidial_lead_filters-lead_filter_id$NWE</td></tr>\n";
+echo "<tr bgcolor=#B6D3FC><td align=right>Filter Name: </td><td align=left><input type=text name=lead_filter_name size=40 maxlength=50 value=\"$lead_filter_name\"> (short description of the filter)$NWB#vicidial_lead_filters-lead_filter_name$NWE</td></tr>\n";
+echo "<tr bgcolor=#B6D3FC><td align=right>Filter Comments: </td><td align=left><input type=text name=lead_filter_comments size=50 maxlength=255 value=\"$lead_filter_comments\"> $NWB#vicidial_lead_filters-lead_filter_comments$NWE</td></tr>\n";
+echo "<tr bgcolor=#B6D3FC><td align=right>Filter SQL:</td><td align=left><TEXTAREA NAME=lead_filter_sql ROWS=20 COLS=50>$lead_filter_sql</TEXTAREA> $NWB#vicidial_lead_filters-lead_filter_sql$NWE</td></tr>\n";
+echo "<tr bgcolor=#B6D3FC><td align=center colspan=2><input type=submit name=SUBMIT value=SUBMIT></td></tr>\n";
+echo "</TABLE></center></form>\n";
+
+	##### get campaigns listing for dynamic pulldown
+	$stmt="SELECT campaign_id,campaign_name from vicidial_campaigns order by campaign_id";
+	$rslt=mysql_query($stmt, $link);
+	$campaigns_to_print = mysql_num_rows($rslt);
+	$campaigns_list='';
+
+	$o=0;
+	while ($campaigns_to_print > $o)
+		{
+		$rowx=mysql_fetch_row($rslt);
+		$campaigns_list .= "<option value=\"$rowx[0]\">$rowx[0] - $rowx[1]</option>\n";
+		$o++;
+		}
+
+echo "<BR><BR>";
+echo "<br>TEST ON CAMPAIGN: <form action=$PHP_SELF method=POST target=\"_blank\">\n";
+echo "<input type=hidden name=lead_filter_id value=\"$lead_filter_id\">\n";
+echo "<input type=hidden name=ADD value=\"73\">\n";
+echo "<select size=1 name=campaign_id>\n";
+echo "$campaigns_list";
+echo "</select>\n";
+echo "<input type=submit name=SUBMIT value=SUBMIT>\n";
+
+
+if ($LOGdelete_filters > 0)
+	{
+	echo "<br><br><a href=\"$PHP_SELF?ADD=51111111&lead_filter_id=$lead_filter_id\">DELETE THIS FILTER</a>\n";
+	}
+
+}
+
+
+######################
+# ADD=321111111 modify call time definition info in the system
+######################
+
+if ($ADD==321111111)
+{
+if ($LOGmodify_call_times==1)
+{
+
+if ( ($stage=="ADD") and (strlen($state_rule)>0) )
+	{
+	$stmt="SELECT ct_state_call_times from vicidial_call_times where call_time_id='$call_time_id';";
+	$rslt=mysql_query($stmt, $link);
+	$row=mysql_fetch_row($rslt);
+	$ct_state_call_times = $row[0];
+
+	if (eregi("\|$",$ct_state_call_times))
+		{$ct_state_call_times = "$ct_state_call_times$state_rule\|";}
+	else
+		{$ct_state_call_times = "$ct_state_call_times\|$state_rule\|";}
+	$stmt="UPDATE vicidial_call_times set ct_state_call_times='$ct_state_call_times' where call_time_id='$call_time_id';";
+	$rslt=mysql_query($stmt, $link);
+	echo "State Rule Added: $state_rule<BR>\n";
+	}
+if ( ($stage=="REMOVE") and (strlen($state_rule)>0) )
+	{
+	$stmt="SELECT ct_state_call_times from vicidial_call_times where call_time_id='$call_time_id';";
+	$rslt=mysql_query($stmt, $link);
+	$row=mysql_fetch_row($rslt);
+	$ct_state_call_times = $row[0];
+
+	$ct_state_call_times = eregi_replace("\|$state_rule\|",'|',$ct_state_call_times);
+	$stmt="UPDATE vicidial_call_times set ct_state_call_times='$ct_state_call_times' where call_time_id='$call_time_id';";
+	$rslt=mysql_query($stmt, $link);
+	echo "State Rule Removed: $state_rule<BR>\n";
+	}
+
+$ADD=311111111;
+}
+else
+{
+echo "You are not authorized to view this page. Please go back.";
+}
+
+}
+
+
+######################
+# ADD=311111111 modify call time definition info in the system
+######################
+
+if ($ADD==311111111)
+{
+
+if ($LOGmodify_call_times==1)
+{
+echo "<TABLE><TR><TD>\n";
+	echo "<FONT FACE=\"ARIAL,HELVETICA\" COLOR=BLACK SIZE=2>";
+
+	$stmt="SELECT * from vicidial_call_times where call_time_id='$call_time_id';";
+	$rslt=mysql_query($stmt, $link);
+	$row=mysql_fetch_row($rslt);
+	$call_time_name =		$row[1];
+	$call_time_comments =	$row[2];
+	$ct_default_start =		$row[3];
+	$ct_default_stop =		$row[4];
+	$ct_sunday_start =		$row[5];
+	$ct_sunday_stop =		$row[6];
+	$ct_monday_start =		$row[7];
+	$ct_monday_stop =		$row[8];
+	$ct_tuesday_start =		$row[9];
+	$ct_tuesday_stop =		$row[10];
+	$ct_wednesday_start =	$row[11];
+	$ct_wednesday_stop =	$row[12];
+	$ct_thursday_start =	$row[13];
+	$ct_thursday_stop =		$row[14];
+	$ct_friday_start =		$row[15];
+	$ct_friday_stop =		$row[16];
+	$ct_saturday_start =	$row[17];
+	$ct_saturday_stop =		$row[18];
+	$ct_state_call_times =	$row[19];
+
+echo "<FONT FACE=\"ARIAL,HELVETICA\" COLOR=BLACK SIZE=2>";
+
+echo "<br>MODIFY A CALL TIME<form action=$PHP_SELF method=POST>\n";
+echo "<input type=hidden name=ADD value=411111111>\n";
+echo "<input type=hidden name=call_time_id value=\"$call_time_id\">\n";
+echo "<tr bgcolor=#B6D3FC><td align=right>Call Time ID: </td><td align=left colspan=3><B>$call_time_id</B>$NWB#vicidial_call_times-call_time_id$NWE</td></tr>\n";
+echo "<tr bgcolor=#B6D3FC><td align=right>Call Time Name: </td><td align=left colspan=3><input type=text name=call_time_name size=40 maxlength=50 value=\"$call_time_name\"> (short description of the call time)$NWB#vicidial_call_times-call_time_name$NWE</td></tr>\n";
+echo "<tr bgcolor=#B6D3FC><td align=right>Call Time Comments: </td><td align=left colspan=3><input type=text name=call_time_comments size=50 maxlength=255 value=\"$call_time_comments\"> $NWB#vicidial_call_times-call_time_comments$NWE</td></tr>\n";
+echo "<tr bgcolor=#B6D3FC><td align=right>Default Start:</td><td align=left><input type=text name=ct_default_start size=5 maxlength=4 value=\"$ct_default_start\"> </td><td align=right>Default Stop:</td><td align=left><input type=text name=ct_default_stop size=5 maxlength=4 value=\"$ct_default_stop\"> $NWB#vicidial_call_times-ct_default_start$NWE</td></tr>\n";
+echo "<tr bgcolor=#B6D3FC><td align=right>Sunday Start:</td><td align=left><input type=text name=ct_sunday_start size=5 maxlength=4 value=\"$ct_sunday_start\"> </td><td align=right>Sunday Stop:</td><td align=left><input type=text name=ct_sunday_stop size=5 maxlength=4 value=\"$ct_sunday_stop\"> $NWB#vicidial_call_times-ct_sunday_start$NWE</td></tr>\n";
+echo "<tr bgcolor=#B6D3FC><td align=right>Monday Start:</td><td align=left><input type=text name=ct_monday_start size=5 maxlength=4 value=\"$ct_monday_start\"> </td><td align=right>Monday Stop:</td><td align=left><input type=text name=ct_monday_stop size=5 maxlength=4 value=\"$ct_monday_stop\"> $NWB#vicidial_call_times-ct_sunday_start$NWE</td></tr>\n";
+echo "<tr bgcolor=#B6D3FC><td align=right>Tuesday Start:</td><td align=left><input type=text name=ct_tuesday_start size=5 maxlength=4 value=\"$ct_tuesday_start\"> </td><td align=right>Tuesday Stop:</td><td align=left><input type=text name=ct_tuesday_stop size=5 maxlength=4 value=\"$ct_tuesday_stop\"> $NWB#vicidial_call_times-ct_sunday_start$NWE</td></tr>\n";
+echo "<tr bgcolor=#B6D3FC><td align=right>Wednesday Start:</td><td align=left><input type=text name=ct_wednesday_start size=5 maxlength=4 value=\"$ct_wednesday_start\"> </td><td align=right>Wednesday Stop:</td><td align=left><input type=text name=ct_wednesday_stop size=5 maxlength=4 value=\"$ct_wednesday_stop\"> $NWB#vicidial_call_times-ct_sunday_start$NWE</td></tr>\n";
+echo "<tr bgcolor=#B6D3FC><td align=right>Thursday Start:</td><td align=left><input type=text name=ct_thursday_start size=5 maxlength=4 value=\"$ct_thursday_start\"> </td><td align=right>Thursday Stop:</td><td align=left><input type=text name=ct_thursday_stop size=5 maxlength=4 value=\"$ct_thursday_stop\"> $NWB#vicidial_call_times-ct_sunday_start$NWE</td></tr>\n";
+echo "<tr bgcolor=#B6D3FC><td align=right>Friday Start:</td><td align=left><input type=text name=ct_friday_start size=5 maxlength=4 value=\"$ct_friday_start\"> </td><td align=right>Friday Stop:</td><td align=left><input type=text name=ct_friday_stop size=5 maxlength=4 value=\"$ct_friday_stop\"> $NWB#vicidial_call_times-ct_sunday_start$NWE</td></tr>\n";
+echo "<tr bgcolor=#B6D3FC><td align=right>Saturday Start:</td><td align=left><input type=text name=ct_saturday_start size=5 maxlength=4 value=\"$ct_saturday_start\"> </td><td align=right>Saturday Stop:</td><td align=left><input type=text name=ct_saturday_stop size=5 maxlength=4 value=\"$ct_saturday_stop\"> $NWB#vicidial_call_times-ct_sunday_start$NWE</td></tr>\n";
+echo "<tr bgcolor=#B6D3FC><td align=center colspan=4><input type=submit name=SUBMIT value=SUBMIT></FORM></td></tr>\n";
+
+$ct_srs=1;
+$b=0;
+$srs_SQL ='';
+if (strlen($ct_state_call_times)>2)
+	{
+	$state_rules = explode('|',$ct_state_call_times);
+	$ct_srs = ((count($state_rules)) - 1);
+	}
+echo "<tr bgcolor=#B6D3FC><td align=center rowspan=$ct_srs>Active State Call Time Definitions for this Record: </td>\n";
+echo "<td align=center colspan=3>&nbsp;</td></tr>\n";
+while($ct_srs >= $b)
+	{
+	if (strlen($state_rules[$b])>0)
+		{
+		$stmt="SELECT state_call_time_state,state_call_time_name from vicidial_state_call_times where state_call_time_id='$state_rules[$b]';";
+		$rslt=mysql_query($stmt, $link);
+		$row=mysql_fetch_row($rslt);
+		echo "<tr bgcolor=#B6D3FC><td align=right><a href=\"$PHP_SELF?ADD=3111111111&call_time_id=$state_rules[$b]\">$state_rules[$b] </a> - <a href=\"$PHP_SELF?ADD=321111111&call_time_id=$call_time_id&state_rule=$state_rules[$b]&stage=REMOVE\">REMOVE </a></td><td align=left colspan=2>$row[0] - $row[1]</td></tr>\n";
+		$srs_SQL .= "'$state_rules[$b]',";
+		$srs_state_SQL .= "'$row[0]',";
+		}
+	$b++;
+	}
+if (strlen($srs_SQL)>2)
+	{
+	$srs_SQL = "$srs_SQL''";
+	$srs_state_SQL = "$srs_state_SQL''";
+	$srs_SQL = "where state_call_time_id NOT IN($srs_SQL) and state_call_time_state NOT IN($srs_state_SQL)";
+	}
+else
+	{$srs_SQL='';}
+$stmt="SELECT state_call_time_id,state_call_time_name from vicidial_state_call_times $srs_SQL order by state_call_time_id;";
+$rslt=mysql_query($stmt, $link);
+$sct_to_print = mysql_num_rows($rslt);
+$sct_list='';
+
+$o=0;
+while ($sct_to_print > $o) {
+	$rowx=mysql_fetch_row($rslt);
+	$sct_list .= "<option value=\"$rowx[0]\">$rowx[0] - $rowx[1]</option>\n";
+	$o++;
+}
+echo "<tr bgcolor=#B6D3FC><td align=right><form action=$PHP_SELF method=POST>\n";
+echo "<input type=hidden name=ADD value=321111111>\n";
+echo "<input type=hidden name=stage value=\"ADD\">\n";
+echo "<input type=hidden name=call_time_id value=\"$call_time_id\">\n";
+echo "Add state call time rule: </td><td align=left colspan=2><select size=1 name=state_rule>\n";
+echo "$sct_list";
+echo "</select></td>\n";
+echo "<td align=center colspan=4><input type=submit name=SUBMIT value=SUBMIT></FORM></td></tr>\n";
+
+echo "</TABLE><BR><BR>\n";
+echo "<B>CAMPAIGNS USING THIS CALL TIME:</B><BR>\n";
+echo "<TABLE>\n";
+
+	$stmt="SELECT campaign_id,campaign_name from vicidial_campaigns where local_call_time='$call_time_id';";
+	$rslt=mysql_query($stmt, $link);
+	$camps_to_print = mysql_num_rows($rslt);
+	$o=0;
+	while ($camps_to_print > $o) {
+		$row=mysql_fetch_row($rslt);
+		$CT_camp_id =		$row[1];
+		$CT_camp_name =		$row[2];
+		echo "<TR><TD><a href=\"$PHP_SELF?ADD=31&campaign_id=$row[0]\">$row[0] </a></TD><TD> $row[1]<BR></TD></TR>\n";
+		$o++;
+	}
+
+echo "</TABLE>\n";
+echo "</center><BR><BR>\n";
+
+if ($LOGdelete_call_times > 0)
+	{
+	echo "<br><br><a href=\"$PHP_SELF?ADD=511111111&call_time_id=$call_time_id\">DELETE THIS CALL TIME DEFINITION</a>\n";
+	}
+}
+else
+{
+echo "You are not authorized to view this page. Please go back.";
+}
+
+}
+
+
+######################
+# ADD=3111111111 modify state call time definition info in the system
+######################
+
+if ($ADD==3111111111)
+{
+
+if ($LOGmodify_call_times==1)
+{
+echo "<TABLE><TR><TD>\n";
+	echo "<FONT FACE=\"ARIAL,HELVETICA\" COLOR=BLACK SIZE=2>";
+
+	$stmt="SELECT * from vicidial_state_call_times where state_call_time_id='$call_time_id';";
+	$rslt=mysql_query($stmt, $link);
+	$row=mysql_fetch_row($rslt);
+	$state_call_time_state =$row[1];
+	$call_time_name =		$row[2];
+	$call_time_comments =	$row[3];
+	$ct_default_start =		$row[4];
+	$ct_default_stop =		$row[5];
+	$ct_sunday_start =		$row[6];
+	$ct_sunday_stop =		$row[7];
+	$ct_monday_start =		$row[8];
+	$ct_monday_stop =		$row[9];
+	$ct_tuesday_start =		$row[10];
+	$ct_tuesday_stop =		$row[11];
+	$ct_wednesday_start =	$row[12];
+	$ct_wednesday_stop =	$row[13];
+	$ct_thursday_start =	$row[14];
+	$ct_thursday_stop =		$row[15];
+	$ct_friday_start =		$row[16];
+	$ct_friday_stop =		$row[17];
+	$ct_saturday_start =	$row[18];
+	$ct_saturday_stop =		$row[19];
+
+echo "<FONT FACE=\"ARIAL,HELVETICA\" COLOR=BLACK SIZE=2>";
+
+echo "<br>MODIFY A STATE CALL TIME<form action=$PHP_SELF method=POST>\n";
+echo "<input type=hidden name=ADD value=4111111111>\n";
+echo "<input type=hidden name=call_time_id value=\"$call_time_id\">\n";
+echo "<tr bgcolor=#B6D3FC><td align=right>Call Time ID: </td><td align=left colspan=3><B>$call_time_id</B>$NWB#vicidial_call_times-call_time_id$NWE</td></tr>\n";
+echo "<tr bgcolor=#B6D3FC><td align=right>State Call Time State: </td><td align=left colspan=3><input type=text name=state_call_time_state size=4 maxlength=2 value=\"$state_call_time_state\"> $NWB#vicidial_call_times-state_call_time_state$NWE</td></tr>\n";
+echo "<tr bgcolor=#B6D3FC><td align=right>State Call Time Name: </td><td align=left colspan=3><input type=text name=call_time_name size=40 maxlength=50 value=\"$call_time_name\"> (short description of the call time)$NWB#vicidial_call_times-call_time_name$NWE</td></tr>\n";
+echo "<tr bgcolor=#B6D3FC><td align=right>State Call Time Comments: </td><td align=left colspan=3><input type=text name=call_time_comments size=50 maxlength=255 value=\"$call_time_comments\"> $NWB#vicidial_call_times-call_time_comments$NWE</td></tr>\n";
+echo "<tr bgcolor=#B6D3FC><td align=right>Default Start:</td><td align=left><input type=text name=ct_default_start size=5 maxlength=4 value=\"$ct_default_start\"> </td><td align=right>Default Stop:</td><td align=left><input type=text name=ct_default_stop size=5 maxlength=4 value=\"$ct_default_stop\"> $NWB#vicidial_call_times-ct_default_start$NWE</td></tr>\n";
+echo "<tr bgcolor=#B6D3FC><td align=right>Sunday Start:</td><td align=left><input type=text name=ct_sunday_start size=5 maxlength=4 value=\"$ct_sunday_start\"> </td><td align=right>Sunday Stop:</td><td align=left><input type=text name=ct_sunday_stop size=5 maxlength=4 value=\"$ct_sunday_stop\"> $NWB#vicidial_call_times-ct_sunday_start$NWE</td></tr>\n";
+echo "<tr bgcolor=#B6D3FC><td align=right>Monday Start:</td><td align=left><input type=text name=ct_monday_start size=5 maxlength=4 value=\"$ct_monday_start\"> </td><td align=right>Monday Stop:</td><td align=left><input type=text name=ct_monday_stop size=5 maxlength=4 value=\"$ct_monday_stop\"> $NWB#vicidial_call_times-ct_sunday_start$NWE</td></tr>\n";
+echo "<tr bgcolor=#B6D3FC><td align=right>Tuesday Start:</td><td align=left><input type=text name=ct_tuesday_start size=5 maxlength=4 value=\"$ct_tuesday_start\"> </td><td align=right>Tuesday Stop:</td><td align=left><input type=text name=ct_tuesday_stop size=5 maxlength=4 value=\"$ct_tuesday_stop\"> $NWB#vicidial_call_times-ct_sunday_start$NWE</td></tr>\n";
+echo "<tr bgcolor=#B6D3FC><td align=right>Wednesday Start:</td><td align=left><input type=text name=ct_wednesday_start size=5 maxlength=4 value=\"$ct_wednesday_start\"> </td><td align=right>Wednesday Stop:</td><td align=left><input type=text name=ct_wednesday_stop size=5 maxlength=4 value=\"$ct_wednesday_stop\"> $NWB#vicidial_call_times-ct_sunday_start$NWE</td></tr>\n";
+echo "<tr bgcolor=#B6D3FC><td align=right>Thursday Start:</td><td align=left><input type=text name=ct_thursday_start size=5 maxlength=4 value=\"$ct_thursday_start\"> </td><td align=right>Thursday Stop:</td><td align=left><input type=text name=ct_thursday_stop size=5 maxlength=4 value=\"$ct_thursday_stop\"> $NWB#vicidial_call_times-ct_sunday_start$NWE</td></tr>\n";
+echo "<tr bgcolor=#B6D3FC><td align=right>Friday Start:</td><td align=left><input type=text name=ct_friday_start size=5 maxlength=4 value=\"$ct_friday_start\"> </td><td align=right>Friday Stop:</td><td align=left><input type=text name=ct_friday_stop size=5 maxlength=4 value=\"$ct_friday_stop\"> $NWB#vicidial_call_times-ct_sunday_start$NWE</td></tr>\n";
+echo "<tr bgcolor=#B6D3FC><td align=right>Saturday Start:</td><td align=left><input type=text name=ct_saturday_start size=5 maxlength=4 value=\"$ct_saturday_start\"> </td><td align=right>Saturday Stop:</td><td align=left><input type=text name=ct_saturday_stop size=5 maxlength=4 value=\"$ct_saturday_stop\"> $NWB#vicidial_call_times-ct_sunday_start$NWE</td></tr>\n";
+
+echo "<tr bgcolor=#B6D3FC><td align=center colspan=4><input type=submit name=SUBMIT value=SUBMIT></td></tr>\n";
+echo "</TABLE><BR><BR>\n";
+echo "<B>CALL TIMES USING THIS STATE CALL TIME:</B><BR>\n";
+echo "<TABLE>\n";
+
+	$stmt="SELECT call_time_id,call_time_name from vicidial_call_times where ct_state_call_times LIKE \"%|$call_time_id|%\";";
+	$rslt=mysql_query($stmt, $link);
+	$camps_to_print = mysql_num_rows($rslt);
+	$o=0;
+	while ($camps_to_print > $o) {
+		$row=mysql_fetch_row($rslt);
+		echo "<TR><TD><a href=\"$PHP_SELF?ADD=311111111&call_time_id=$row[0]\">$row[0] </a></TD><TD> $row[1]<BR></TD></TR>\n";
+		$o++;
+	}
+
+echo "</TABLE>\n";
+echo "</center><BR><BR>\n";
+
+if ($LOGdelete_call_times > 0)
+	{
+	echo "<br><br><a href=\"$PHP_SELF?ADD=5111111111&call_time_id=$call_time_id\">DELETE THIS STATE CALL TIME DEFINITION</a>\n";
+	}
+
+}
+else
+{
+echo "You are not authorized to view this page. Please go back.";
+}
+
+}
+
+
+
+
+
+
+
+######################
+# ADD=55 search form
+######################
+
+if ($ADD==55)
+{
+echo "<TABLE><TR><TD>\n";
+echo "<FONT FACE=\"ARIAL,HELVETICA\" COLOR=BLACK SIZE=2>";
+
+echo "<br>SEARCH FOR A USER<form action=$PHP_SELF method=POST>\n";
+echo "<input type=hidden name=ADD value=66>\n";
+echo "<center><TABLE width=600 cellspacing=3>\n";
+echo "<tr bgcolor=#B6D3FC><td align=right>User Number: </td><td align=left><input type=text name=user size=20 maxlength=20></td></tr>\n";
+echo "<tr bgcolor=#B6D3FC><td align=right>Full Name: </td><td align=left><input type=text name=full_name size=30 maxlength=30></td></tr>\n";
+echo "<tr bgcolor=#B6D3FC><td align=right>User Level: </td><td align=left><select size=1 name=user_level><option selected>0</option><option>1</option><option>2</option><option>3</option><option>4</option><option>5</option><option>6</option><option>7</option><option>8</option><option>9</option></select></td></tr>\n";
+echo "<tr bgcolor=#B6D3FC><td align=right>User Group: </td><td align=left><select size=1 name=user_group>\n";
+
+	$stmt="SELECT * from vicidial_user_groups order by user_group";
+	$rslt=mysql_query($stmt, $link);
+	$groups_to_print = mysql_num_rows($rslt);
+	$o=0;
+	$groups_list='';
+	while ($groups_to_print > $o) {
+		$rowx=mysql_fetch_row($rslt);
+		$groups_list .= "<option value=\"$rowx[0]\">$rowx[0] - $rowx[1]</option>\n";
+		$o++;
+	}
+echo "$groups_list</select></td></tr>\n";
+
+echo "<tr bgcolor=#B6D3FC><td align=center colspan=2><input type=submit name=search value=search></td></tr>\n";
+echo "</TABLE></center>\n";
+
+}
+
+######################
+# ADD=66 user search results
+######################
+
+if ($ADD==66)
+{
+echo "<TABLE><TR><TD>\n";
+	echo "<FONT FACE=\"ARIAL,HELVETICA\" COLOR=BLACK SIZE=2>";
+
+	$SQL = '';
+	if ($user) {$SQL .= " user LIKE \"%$user%\" and";}
+	if ($full_name) {$SQL .= " full_name LIKE \"%$full_name%\" and";}
+	if ($user_level > 0) {$SQL .= " user_level LIKE \"%$user_level%\" and";}
+	if ($user_group) {$SQL .= " user_group = '$user_group' and";}
+	$SQL = eregi_replace(" and$", "", $SQL);
+	if (strlen($SQL)>5) {$SQL = "where $SQL";}
+
+	$stmt="SELECT * from vicidial_users $SQL order by full_name desc;";
+#	echo "\n|$stmt|\n";
+	$rslt=mysql_query($stmt, $link);
+	$people_to_print = mysql_num_rows($rslt);
+
+echo "<br>SEARCH RESULTS:\n";
+echo "<center><TABLE width=600 cellspacing=0 cellpadding=1>\n";
+
+	$o=0;
+	while ($people_to_print > $o) {
+		$row=mysql_fetch_row($rslt);
+		if (eregi("1$|3$|5$|7$|9$", $o))
+			{$bgcolor='bgcolor="#B9CBFD"';} 
+		else
+			{$bgcolor='bgcolor="#9BB9FB"';}
+		echo "<tr $bgcolor><td><font size=1>$row[1]</td><td><font size=1>$row[3]</td><td><font size=1>$row[4]</td><td><font size=1>$row[5]</td>";
+		echo "<td><font size=1><a href=\"$PHP_SELF?ADD=3&user=$row[1]\">MODIFY</a> | <a href=\"./user_stats.php?user=$row[1]\">STATS</a> | <a href=\"./user_status.php?user=$row[1]\">STATUS</a> | <a href=\"./AST_agent_time_sheet.php?agent=$row[1]\">TIME</a></td></tr>\n";
+		$o++;
+	}
+
+echo "</TABLE></center>\n";
+
+}
+
+
+######################################################################################################
+######################################################################################################
+#######   8 series, Callback lists
+######################################################################################################
+######################################################################################################
+
+######################
+# ADD=8 find all callbacks on hold by a User
+######################
+if ($ADD==8)
+{
+	echo "<FONT FACE=\"ARIAL,HELVETICA\" COLOR=BLACK SIZE=2>";
+
+	$stmt="SELECT * from vicidial_callbacks where status IN('ACTIVE','LIVE') and user='$user' order by recipient,status desc,callback_time";
+	$rslt=mysql_query($stmt, $link);
+	$cb_to_print = mysql_num_rows($rslt);
+
+echo "<br>USER CALLBACK HOLD LISTINGS: $user\n";
+$ADD='82';
+}
+
+######################
+# ADD=81 find all callbacks on hold within a Campaign
+######################
+if ($ADD==81)
+{
+	echo "<FONT FACE=\"ARIAL,HELVETICA\" COLOR=BLACK SIZE=2>";
+
+	$stmt="SELECT * from vicidial_callbacks where status IN('ACTIVE','LIVE') and campaign_id='$campaign_id' order by recipient,status desc,callback_time";
+	$rslt=mysql_query($stmt, $link);
+	$cb_to_print = mysql_num_rows($rslt);
+
+echo "<br>CAMPAIGN CALLBACK HOLD LISTINGS: $campaign_id\n";
+$ADD='82';
+}
+
+######################
+# ADD=811 find all callbacks on hold within a List
+######################
+if ($ADD==811)
+{
+	echo "<FONT FACE=\"ARIAL,HELVETICA\" COLOR=BLACK SIZE=2>";
+
+	$stmt="SELECT * from vicidial_callbacks where status IN('ACTIVE','LIVE') and list_id='$list_id' order by recipient,status desc,callback_time";
+	$rslt=mysql_query($stmt, $link);
+	$cb_to_print = mysql_num_rows($rslt);
+
+echo "<br>LIST CALLBACK HOLD LISTINGS: $list_id\n";
+$ADD='82';
+}
+
+######################
+# ADD=82 display all callbacks on hold
+######################
+if ($ADD==82)
+{
+echo "<TABLE><TR><TD>\n";
+echo "<center><TABLE width=600 cellspacing=0 cellpadding=1>\n";
+echo "<tr bgcolor=black><td><font size=1 color=white>LEAD</td><td><font size=1 color=white>LIST</td><td><font size=1 color=white>CAMPAIGN</td><td><font size=1 color=white>ENTRY DATE</td><td><font size=1 color=white>CALLBACK DATE</td><td><font size=1 color=white>USER</td><td><font size=1 color=white>RECIPIENT</td><td><font size=1 color=white>STATUS</td></tr>\n";
+
+	$o=0;
+	while ($cb_to_print > $o) {
+		$row=mysql_fetch_row($rslt);
+		if (eregi("1$|3$|5$|7$|9$", $o))
+			{$bgcolor='bgcolor="#B9CBFD"';} 
+		else
+			{$bgcolor='bgcolor="#9BB9FB"';}
+		echo "<tr $bgcolor>";
+		echo "<td><font size=1><A HREF=\"admin_modify_lead.php?lead_id=$row[1]\" target=\"_blank\">$row[1]</A></td>";
+		echo "<td><font size=1><A HREF=\"$PHP_SELF?ADD=311&list_id=$row[2]\">$row[2]</A></td>";
+		echo "<td><font size=1><A HREF=\"$PHP_SELF?ADD=31&campaign_id=$row[3]\">$row[3]</A></td>";
+		echo "<td><font size=1>$row[5]</td>";
+		echo "<td><font size=1>$row[6]</td>";
+		echo "<td><font size=1><A HREF=\"$PHP_SELF?ADD=3&user=$row[8]\">$row[8]</A></td>";
+		echo "<td><font size=1>$row[9]</td>";
+		echo "<td><font size=1>$row[4]</td>";
+		echo "</tr>\n";
+		$o++;
+	}
+
+echo "</TABLE></center>\n";
+}
+
+
+
+######################################################################################################
+######################################################################################################
+#######   0 series, displays and searches
+######################################################################################################
+######################################################################################################
+
+######################
+# ADD=0 display all active users
+######################
+if ($ADD==0)
+{
+echo "<TABLE><TR><TD>\n";
+	echo "<FONT FACE=\"ARIAL,HELVETICA\" COLOR=BLACK SIZE=2>";
+
+	$stmt="SELECT * from vicidial_users order by full_name";
+	$rslt=mysql_query($stmt, $link);
+	$people_to_print = mysql_num_rows($rslt);
+
+echo "<br>USER LISTINGS:\n";
+echo "<center><TABLE width=600 cellspacing=0 cellpadding=1>\n";
+
+	$o=0;
+	while ($people_to_print > $o) {
+		$row=mysql_fetch_row($rslt);
+		if (eregi("1$|3$|5$|7$|9$", $o))
+			{$bgcolor='bgcolor="#B9CBFD"';} 
+		else
+			{$bgcolor='bgcolor="#9BB9FB"';}
+		echo "<tr $bgcolor><td><font size=1>$row[1]</td><td><font size=1>$row[3]</td><td><font size=1>$row[4]</td><td><font size=1>$row[5]</td>";
+		echo "<td><font size=1><a href=\"$PHP_SELF?ADD=3&user=$row[1]\">MODIFY</a> | <a href=\"./user_stats.php?user=$row[1]\">STATS</a> | <a href=\"./user_status.php?user=$row[1]\">STATUS</a> | <a href=\"./AST_agent_time_sheet.php?agent=$row[1]\">TIME</a></td></tr>\n";
+		$o++;
+	}
+
+echo "</TABLE></center>\n";
+}
+
+######################
+# ADD=10 display all campaigns
+######################
+if ($ADD==10)
+{
+echo "<TABLE><TR><TD>\n";
+	echo "<FONT FACE=\"ARIAL,HELVETICA\" COLOR=BLACK SIZE=2>";
+
+	$stmt="SELECT * from vicidial_campaigns order by campaign_id";
+	$rslt=mysql_query($stmt, $link);
+	$people_to_print = mysql_num_rows($rslt);
+
+echo "<br>CAMPAIGN LISTINGS:\n";
+echo "<center><TABLE width=600 cellspacing=0 cellpadding=1>\n";
+
+	$o=0;
+	while ($people_to_print > $o) {
+		$row=mysql_fetch_row($rslt);
+		if (eregi("1$|3$|5$|7$|9$", $o))
+			{$bgcolor='bgcolor="#B9CBFD"';} 
+		else
+			{$bgcolor='bgcolor="#9BB9FB"';}
+		echo "<tr $bgcolor><td><font size=1><a href=\"$PHP_SELF?ADD=34&campaign_id=$row[0]\">$row[0]</a></td>";
+		echo "<td><font size=1> $row[1] </td>";
+		echo "<td><font size=1> $row[2]</td>";
+		echo "<td><font size=1> $row[3]</td><td><font size=1>$row[4]</td><td><font size=1>$row[5]</td>";
+		echo "<td><font size=1> $row[6]</td><td><font size=1>$row[7]</td><td><font size=1> &nbsp;</td>";
+		echo "<td><font size=1><a href=\"$PHP_SELF?ADD=31&campaign_id=$row[0]\">MODIFY</a></td></tr>\n";
+		$o++;
+	}
+
+echo "</TABLE></center>\n";
+}
+
+
+######################
+# ADD=100 display all lists
+######################
+if ($ADD==100)
+{
+echo "<TABLE><TR><TD>\n";
+	echo "<FONT FACE=\"ARIAL,HELVETICA\" COLOR=BLACK SIZE=2>";
+
+	$stmt="SELECT * from vicidial_lists order by list_id";
+	$rslt=mysql_query($stmt, $link);
+	$people_to_print = mysql_num_rows($rslt);
+
+echo "<br>LIST LISTINGS:\n";
+echo "<center><TABLE width=600 cellspacing=0 cellpadding=1>\n";
+
+	$o=0;
+	while ($people_to_print > $o) {
+		$row=mysql_fetch_row($rslt);
+		if (eregi("1$|3$|5$|7$|9$", $o))
+			{$bgcolor='bgcolor="#B9CBFD"';} 
+		else
+			{$bgcolor='bgcolor="#9BB9FB"';}
+		echo "<tr $bgcolor><td><font size=1>$row[0]</td>";
+		echo "<td><font size=1> $row[1]</td>";
+		echo "<td><font size=1> $row[2]</td><td><font size=1>$row[4]</td><td><font size=1>$row[5]</td>";
+		echo "<td><font size=1> $row[3]</td><td><font size=1>$row[7]</td><td><font size=1> &nbsp;</td>";
+		echo "<td><font size=1><a href=\"$PHP_SELF?ADD=311&list_id=$row[0]\">MODIFY</a></td></tr>\n";
+		$o++;
+	}
+
+echo "</TABLE></center>\n";
+}
+
+
+
+######################
+# ADD=1000 display all inbound groups
+######################
+if ($ADD==1000)
+{
+echo "<TABLE><TR><TD>\n";
+	echo "<FONT FACE=\"ARIAL,HELVETICA\" COLOR=BLACK SIZE=2>";
+
+	$stmt="SELECT * from vicidial_inbound_groups order by group_id";
+	$rslt=mysql_query($stmt, $link);
+	$people_to_print = mysql_num_rows($rslt);
+
+echo "<br>INBOUND GROUP LISTINGS:\n";
+echo "<center><TABLE width=600 cellspacing=0 cellpadding=1>\n";
+
+	$o=0;
+	while ($people_to_print > $o) {
+		$row=mysql_fetch_row($rslt);
+		if (eregi("1$|3$|5$|7$|9$", $o))
+			{$bgcolor='bgcolor="#B9CBFD"';} 
+		else
+			{$bgcolor='bgcolor="#9BB9FB"';}
+		echo "<tr $bgcolor><td><font size=1>$row[0]</td>";
+		echo "<td><font size=1> $row[1]</td>";
+		echo "<td><font size=1> $row[3]</td>";
+		echo "<td><font size=1> $row[5]</td>";
+		echo "<td bgcolor=\"$row[2]\"><font size=1> &nbsp;</td>";
+		echo "<td><font size=1><a href=\"$PHP_SELF?ADD=3111&group_id=$row[0]\">MODIFY</a></td></tr>\n";
+		$o++;
+	}
+
+echo "</TABLE></center>\n";
+}
+
+
+######################
+# ADD=10000 display all remote agents
+######################
+if ($ADD==10000)
+{
+echo "<TABLE><TR><TD>\n";
+	echo "<FONT FACE=\"ARIAL,HELVETICA\" COLOR=BLACK SIZE=2>";
+
+	$stmt="SELECT * from vicidial_remote_agents order by server_ip,campaign_id,user_start";
+	$rslt=mysql_query($stmt, $link);
+	$people_to_print = mysql_num_rows($rslt);
+
+echo "<br>REMOTE AGENTS LISTINGS:\n";
+echo "<center><TABLE width=600 cellspacing=0 cellpadding=1>\n";
+
+	$o=0;
+	while ($people_to_print > $o) {
+		$row=mysql_fetch_row($rslt);
+		if (eregi("1$|3$|5$|7$|9$", $o))
+			{$bgcolor='bgcolor="#B9CBFD"';} 
+		else
+			{$bgcolor='bgcolor="#9BB9FB"';}
+		echo "<tr $bgcolor><td><font size=1>$row[1]</td>";
+		echo "<td><font size=1> $row[2]</td>";
+		echo "<td><font size=1> $row[3]</td>";
+		echo "<td><font size=1> $row[4]</td>";
+		echo "<td><font size=1> $row[5]</td>";
+		echo "<td><font size=1> $row[6]</td>";
+		echo "<td><font size=1><a href=\"$PHP_SELF?ADD=31111&remote_agent_id=$row[0]\">MODIFY</a></td></tr>\n";
+		$o++;
+	}
+
+echo "</TABLE></center>\n";
+}
+
+
+######################
+# ADD=100000 display all user groups
+######################
+if ($ADD==100000)
+{
+echo "<TABLE><TR><TD>\n";
+	echo "<FONT FACE=\"ARIAL,HELVETICA\" COLOR=BLACK SIZE=2>";
+
+	$stmt="SELECT * from vicidial_user_groups order by user_group";
+	$rslt=mysql_query($stmt, $link);
+	$people_to_print = mysql_num_rows($rslt);
+
+echo "<br>USER GROUPS LISTINGS:\n";
+echo "<center><TABLE width=600 cellspacing=0 cellpadding=1>\n";
+
+	$o=0;
+	while ($people_to_print > $o) {
+		$row=mysql_fetch_row($rslt);
+		if (eregi("1$|3$|5$|7$|9$", $o))
+			{$bgcolor='bgcolor="#B9CBFD"';} 
+		else
+			{$bgcolor='bgcolor="#9BB9FB"';}
+		echo "<tr $bgcolor><td><font size=1>$row[0]</td>";
+		echo "<td><font size=1> $row[1]</td>";
+		echo "<td><font size=1><a href=\"$PHP_SELF?ADD=311111&user_group=$row[0]\">MODIFY</a></td></tr>\n";
+		$o++;
+	}
+
+echo "</TABLE></center>\n";
+}
+
+
+######################
+# ADD=1000000 display all scripts
+######################
+if ($ADD==1000000)
+{
+echo "<TABLE><TR><TD>\n";
+	echo "<FONT FACE=\"ARIAL,HELVETICA\" COLOR=BLACK SIZE=2>";
+
+	$stmt="SELECT * from vicidial_scripts order by script_id";
+	$rslt=mysql_query($stmt, $link);
+	$people_to_print = mysql_num_rows($rslt);
+
+echo "<br>SCRIPTS LISTINGS:\n";
+echo "<center><TABLE width=600 cellspacing=0 cellpadding=1>\n";
+
+	$o=0;
+	while ($people_to_print > $o) {
+		$row=mysql_fetch_row($rslt);
+		if (eregi("1$|3$|5$|7$|9$", $o))
+			{$bgcolor='bgcolor="#B9CBFD"';} 
+		else
+			{$bgcolor='bgcolor="#9BB9FB"';}
+		echo "<tr $bgcolor><td><font size=1>$row[0]</td>";
+		echo "<td><font size=1> $row[1]</td>";
+		echo "<td><font size=1><a href=\"$PHP_SELF?ADD=3111111&script_id=$row[0]\">MODIFY</a></td></tr>\n";
+		$o++;
+	}
+
+echo "</TABLE></center>\n";
+}
+
+
+######################
+# ADD=10000000 display all filters
+######################
+if ($ADD==10000000)
+{
+echo "<TABLE><TR><TD>\n";
+
+	echo "<FONT FACE=\"ARIAL,HELVETICA\" COLOR=BLACK SIZE=2>";
+
+	$stmt="SELECT * from vicidial_lead_filters order by lead_filter_id";
+	$rslt=mysql_query($stmt, $link);
+	$filters_to_print = mysql_num_rows($rslt);
+
+echo "<br>LEAD FILTER LISTINGS:\n";
+echo "<center><TABLE width=600 cellspacing=0 cellpadding=1>\n";
+
+	$o=0;
+	while ($filters_to_print > $o) {
+		$row=mysql_fetch_row($rslt);
+		if (eregi("1$|3$|5$|7$|9$", $o))
+			{$bgcolor='bgcolor="#B9CBFD"';} 
+		else
+			{$bgcolor='bgcolor="#9BB9FB"';}
+		echo "<tr $bgcolor><td><font size=1>$row[0]</td>";
+		echo "<td><font size=1> $row[1]</td>";
+		echo "<td><font size=1><a href=\"$PHP_SELF?ADD=31111111&lead_filter_id=$row[0]\">MODIFY</a></td></tr>\n";
+		$o++;
+	}
+
+echo "</TABLE></center>\n";
+}
+
+
+######################
+# ADD=100000000 display all call times
+######################
+if ($ADD==100000000)
+{
+echo "<TABLE><TR><TD>\n";
+
+	echo "<FONT FACE=\"ARIAL,HELVETICA\" COLOR=BLACK SIZE=2>";
+
+	$stmt="SELECT * from vicidial_call_times order by call_time_id";
+	$rslt=mysql_query($stmt, $link);
+	$filters_to_print = mysql_num_rows($rslt);
+
+echo "<br>CALL TIME LISTINGS:\n";
+echo "<center><TABLE width=600 cellspacing=0 cellpadding=1>\n";
+
+	$o=0;
+	while ($filters_to_print > $o) {
+		$row=mysql_fetch_row($rslt);
+		if (eregi("1$|3$|5$|7$|9$", $o))
+			{$bgcolor='bgcolor="#B9CBFD"';} 
+		else
+			{$bgcolor='bgcolor="#9BB9FB"';}
+		echo "<tr $bgcolor><td><font size=1>$row[0]</td>";
+		echo "<td><font size=1> $row[1]</td>";
+		echo "<td><font size=1> $row[3] </td>";
+		echo "<td><font size=1> $row[4] </td>";
+		echo "<td><font size=1><a href=\"$PHP_SELF?ADD=311111111&call_time_id=$row[0]\">MODIFY</a></td></tr>\n";
+		$o++;
+	}
+
+echo "</TABLE></center>\n";
+}
+
+######################
+# ADD=1000000000 display all state call times
+######################
+if ($ADD==1000000000)
+{
+echo "<TABLE><TR><TD>\n";
+
+	echo "<FONT FACE=\"ARIAL,HELVETICA\" COLOR=BLACK SIZE=2>";
+
+	$stmt="SELECT * from vicidial_state_call_times order by state_call_time_id";
+	$rslt=mysql_query($stmt, $link);
+	$filters_to_print = mysql_num_rows($rslt);
+
+echo "<br>STATE CALL TIME LISTINGS:\n";
+echo "<center><TABLE width=600 cellspacing=0 cellpadding=1>\n";
+
+	$o=0;
+	while ($filters_to_print > $o) {
+		$row=mysql_fetch_row($rslt);
+		if (eregi("1$|3$|5$|7$|9$", $o))
+			{$bgcolor='bgcolor="#B9CBFD"';} 
+		else
+			{$bgcolor='bgcolor="#9BB9FB"';}
+		echo "<tr $bgcolor><td><font size=1>$row[0]</td>";
+		echo "<td><font size=1> $row[1]</td>";
+		echo "<td><font size=1> $row[2]</td>";
+		echo "<td><font size=1> $row[3] </td>";
+		echo "<td><font size=1> $row[4] </td>";
+		echo "<td><font size=1><a href=\"$PHP_SELF?ADD=3111111111&call_time_id=$row[0]\">MODIFY</a></td></tr>\n";
+		$o++;
+	}
+
+echo "</TABLE></center>\n";
+}
+
+
+
+
+
+echo "</TD></TR></TABLE></center>\n";
+
+$ENDtime = date("U");
+
+$RUNtime = ($ENDtime - $STARTtime);
+
+echo "\n\n\n<br><br><br>\n\n";
+
+
+echo "<font size=0>\n\n\n<br><br><br>\nscript runtime: $RUNtime seconds";
+echo " &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; VERSION: $version";
+echo " &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; BUILD: $build</font>\n";
+
+
+?>
+
+
+</TD></TR><TABLE>
+</body>
+</html>
+
+<?
+	
+exit; 
+
+
+function dialable_leads($DB,$link,$local_call_time,$dial_status_a,$dial_status_b,$dial_status_c,$dial_status_d,$dial_status_e,$camp_lists,$fSQL)
+{
+##### BEGIN calculate what gmt_offset_now values are within the allowed local_call_time setting ###
+if (isset($camp_lists))
+	{
+	if (strlen($camp_lists)>1)
+		{
+		$g=0;
+		$p='13';
+		$GMT_gmt[0] = '';
+		$GMT_hour[0] = '';
+		$GMT_day[0] = '';
+		while ($p > -13)
+			{
+			$pzone=3600 * $p;
+			$pmin=(gmdate("i", time() + $pzone));
+			$phour=( (gmdate("G", time() + $pzone)) * 100);
+			$pday=gmdate("w", time() + $pzone);
+			$tz = sprintf("%.2f", $p);	
+			$GMT_gmt[$g] = "$tz";
+			$GMT_day[$g] = "$pday";
+			$GMT_hour[$g] = ($phour + $pmin);
+			$p = ($p - 0.25);
+			$g++;
+			}
+
+		$stmt="SELECT * FROM vicidial_call_times where call_time_id='$local_call_time';";
+		if ($DB) {echo "$stmt\n";}
+		$rslt=mysql_query($stmt, $link);
+		$rowx=mysql_fetch_row($rslt);
+		$Gct_default_start =	"$rowx[3]";
+		$Gct_default_stop =		"$rowx[4]";
+		$Gct_sunday_start =		"$rowx[5]";
+		$Gct_sunday_stop =		"$rowx[6]";
+		$Gct_monday_start =		"$rowx[7]";
+		$Gct_monday_stop =		"$rowx[8]";
+		$Gct_tuesday_start =	"$rowx[9]";
+		$Gct_tuesday_stop =		"$rowx[10]";
+		$Gct_wednesday_start =	"$rowx[11]";
+		$Gct_wednesday_stop =	"$rowx[12]";
+		$Gct_thursday_start =	"$rowx[13]";
+		$Gct_thursday_stop =	"$rowx[14]";
+		$Gct_friday_start =		"$rowx[15]";
+		$Gct_friday_stop =		"$rowx[16]";
+		$Gct_saturday_start =	"$rowx[17]";
+		$Gct_saturday_stop =	"$rowx[18]";
+		$Gct_state_call_times = "$rowx[19]";
+
+		$ct_states = '';
+		$ct_state_gmt_SQL = '';
+		$ct_srs=0;
+		$b=0;
+		if (strlen($Gct_state_call_times)>2)
+			{
+			$state_rules = explode('|',$Gct_state_call_times);
+			$ct_srs = ((count($state_rules)) - 2);
+			}
+		while($ct_srs >= $b)
+			{
+			if (strlen($state_rules[$b])>1)
+				{
+				$stmt="SELECT * from vicidial_state_call_times where state_call_time_id='$state_rules[$b]';";
+				$rslt=mysql_query($stmt, $link);
+				$row=mysql_fetch_row($rslt);
+				$Gstate_call_time_id =		"$row[0]";
+				$Gstate_call_time_state =	"$row[1]";
+				$Gsct_default_start =		"$row[4]";
+				$Gsct_default_stop =		"$row[5]";
+				$Gsct_sunday_start =		"$row[6]";
+				$Gsct_sunday_stop =			"$row[7]";
+				$Gsct_monday_start =		"$row[8]";
+				$Gsct_monday_stop =			"$row[9]";
+				$Gsct_tuesday_start =		"$row[10]";
+				$Gsct_tuesday_stop =		"$row[11]";
+				$Gsct_wednesday_start =		"$row[12]";
+				$Gsct_wednesday_stop =		"$row[13]";
+				$Gsct_thursday_start =		"$row[14]";
+				$Gsct_thursday_stop =		"$row[15]";
+				$Gsct_friday_start =		"$row[16]";
+				$Gsct_friday_stop =			"$row[17]";
+				$Gsct_saturday_start =		"$row[18]";
+				$Gsct_saturday_stop =		"$row[19]";
+
+				$ct_states .="'$Gstate_call_time_state',";
+
+				$r=0;
+				$state_gmt='';
+				while($r < $g)
+					{
+					if ($GMT_day[$r]==0)	#### Sunday local time
+						{
+						if (($Gsct_sunday_start==0) and ($Gsct_sunday_stop==0))
+							{
+							if ( ($GMT_hour[$r]>=$Gsct_default_start) and ($GMT_hour[$r]<$Gsct_default_stop) )
+								{$state_gmt.="'$GMT_gmt[$r]',";}
+							}
+						else
+							{
+							if ( ($GMT_hour[$r]>=$Gsct_sunday_start) and ($GMT_hour[$r]<$Gsct_sunday_stop) )
+								{$state_gmt.="'$GMT_gmt[$r]',";}
+							}
+						}
+					if ($GMT_day[$r]==1)	#### Monday local time
+						{
+						if (($Gsct_monday_start==0) and ($Gsct_monday_stop==0))
+							{
+							if ( ($GMT_hour[$r]>=$Gsct_default_start) and ($GMT_hour[$r]<$Gsct_default_stop) )
+								{$state_gmt.="'$GMT_gmt[$r]',";}
+							}
+						else
+							{
+							if ( ($GMT_hour[$r]>=$Gsct_monday_start) and ($GMT_hour[$r]<$Gsct_monday_stop) )
+								{$state_gmt.="'$GMT_gmt[$r]',";}
+							}
+						}
+					if ($GMT_day[$r]==2)	#### Tuesday local time
+						{
+						if (($Gsct_tuesday_start==0) and ($Gsct_tuesday_stop==0))
+							{
+							if ( ($GMT_hour[$r]>=$Gsct_default_start) and ($GMT_hour[$r]<$Gsct_default_stop) )
+								{$state_gmt.="'$GMT_gmt[$r]',";}
+							}
+						else
+							{
+							if ( ($GMT_hour[$r]>=$Gsct_tuesday_start) and ($GMT_hour[$r]<$Gsct_tuesday_stop) )
+								{$state_gmt.="'$GMT_gmt[$r]',";}
+							}
+						}
+					if ($GMT_day[$r]==3)	#### Wednesday local time
+						{
+						if (($Gsct_wednesday_start==0) and ($Gsct_wednesday_stop==0))
+							{
+							if ( ($GMT_hour[$r]>=$Gsct_default_start) and ($GMT_hour[$r]<$Gsct_default_stop) )
+								{$state_gmt.="'$GMT_gmt[$r]',";}
+							}
+						else
+							{
+							if ( ($GMT_hour[$r]>=$Gsct_wednesday_start) and ($GMT_hour[$r]<$Gsct_wednesday_stop) )
+								{$state_gmt.="'$GMT_gmt[$r]',";}
+							}
+						}
+					if ($GMT_day[$r]==4)	#### Thursday local time
+						{
+						if (($Gsct_thursday_start==0) and ($Gsct_thursday_stop==0))
+							{
+							if ( ($GMT_hour[$r]>=$Gsct_default_start) and ($GMT_hour[$r]<$Gsct_default_stop) )
+								{$state_gmt.="'$GMT_gmt[$r]',";}
+							}
+						else
+							{
+							if ( ($GMT_hour[$r]>=$Gsct_thursday_start) and ($GMT_hour[$r]<$Gsct_thursday_stop) )
+								{$state_gmt.="'$GMT_gmt[$r]',";}
+							}
+						}
+					if ($GMT_day[$r]==5)	#### Friday local time
+						{
+						if (($Gsct_friday_start==0) and ($Gsct_friday_stop==0))
+							{
+							if ( ($GMT_hour[$r]>=$Gsct_default_start) and ($GMT_hour[$r]<$Gsct_default_stop) )
+								{$state_gmt.="'$GMT_gmt[$r]',";}
+							}
+						else
+							{
+							if ( ($GMT_hour[$r]>=$Gsct_friday_start) and ($GMT_hour[$r]<$Gsct_friday_stop) )
+								{$state_gmt.="'$GMT_gmt[$r]',";}
+							}
+						}
+					if ($GMT_day[$r]==6)	#### Saturday local time
+						{
+						if (($Gsct_saturday_start==0) and ($Gsct_saturday_stop==0))
+							{
+							if ( ($GMT_hour[$r]>=$Gsct_default_start) and ($GMT_hour[$r]<$Gsct_default_stop) )
+								{$state_gmt.="'$GMT_gmt[$r]',";}
+							}
+						else
+							{
+							if ( ($GMT_hour[$r]>=$Gsct_saturday_start) and ($GMT_hour[$r]<$Gsct_saturday_stop) )
+								{$state_gmt.="'$GMT_gmt[$r]',";}
+							}
+						}
+					$r++;
+					}
+				$state_gmt = "$state_gmt'99'";
+				$ct_state_gmt_SQL .= "or (state='$Gstate_call_time_state' and gmt_offset_now IN($state_gmt)) ";
+				}
+
+			$b++;
+			}
+		if (strlen($ct_states)>2)
+			{
+			$ct_states = eregi_replace(",$",'',$ct_states);
+			$ct_statesSQL = "and state NOT IN($ct_states)";
+			}
+		else
+			{
+			$ct_statesSQL = "";
+			}
+
+		$r=0;
+		$default_gmt='';
+		while($r < $g)
+			{
+			if ($GMT_day[$r]==0)	#### Sunday local time
+				{
+				if (($Gct_sunday_start==0) and ($Gct_sunday_stop==0))
+					{
+					if ( ($GMT_hour[$r]>=$Gct_default_start) and ($GMT_hour[$r]<$Gct_default_stop) )
+						{$default_gmt.="'$GMT_gmt[$r]',";}
+					}
+				else
+					{
+					if ( ($GMT_hour[$r]>=$Gct_sunday_start) and ($GMT_hour[$r]<$Gct_sunday_stop) )
+						{$default_gmt.="'$GMT_gmt[$r]',";}
+					}
+				}
+			if ($GMT_day[$r]==1)	#### Monday local time
+				{
+				if (($Gct_monday_start==0) and ($Gct_monday_stop==0))
+					{
+					if ( ($GMT_hour[$r]>=$Gct_default_start) and ($GMT_hour[$r]<$Gct_default_stop) )
+						{$default_gmt.="'$GMT_gmt[$r]',";}
+					}
+				else
+					{
+					if ( ($GMT_hour[$r]>=$Gct_monday_start) and ($GMT_hour[$r]<$Gct_monday_stop) )
+						{$default_gmt.="'$GMT_gmt[$r]',";}
+					}
+				}
+			if ($GMT_day[$r]==2)	#### Tuesday local time
+				{
+				if (($Gct_tuesday_start==0) and ($Gct_tuesday_stop==0))
+					{
+					if ( ($GMT_hour[$r]>=$Gct_default_start) and ($GMT_hour[$r]<$Gct_default_stop) )
+						{$default_gmt.="'$GMT_gmt[$r]',";}
+					}
+				else
+					{
+					if ( ($GMT_hour[$r]>=$Gct_tuesday_start) and ($GMT_hour[$r]<$Gct_tuesday_stop) )
+						{$default_gmt.="'$GMT_gmt[$r]',";}
+					}
+				}
+			if ($GMT_day[$r]==3)	#### Wednesday local time
+				{
+				if (($Gct_wednesday_start==0) and ($Gct_wednesday_stop==0))
+					{
+					if ( ($GMT_hour[$r]>=$Gct_default_start) and ($GMT_hour[$r]<$Gct_default_stop) )
+						{$default_gmt.="'$GMT_gmt[$r]',";}
+					}
+				else
+					{
+					if ( ($GMT_hour[$r]>=$Gct_wednesday_start) and ($GMT_hour[$r]<$Gct_wednesday_stop) )
+						{$default_gmt.="'$GMT_gmt[$r]',";}
+					}
+				}
+			if ($GMT_day[$r]==4)	#### Thursday local time
+				{
+				if (($Gct_thursday_start==0) and ($Gct_thursday_stop==0))
+					{
+					if ( ($GMT_hour[$r]>=$Gct_default_start) and ($GMT_hour[$r]<$Gct_default_stop) )
+						{$default_gmt.="'$GMT_gmt[$r]',";}
+					}
+				else
+					{
+					if ( ($GMT_hour[$r]>=$Gct_thursday_start) and ($GMT_hour[$r]<$Gct_thursday_stop) )
+						{$default_gmt.="'$GMT_gmt[$r]',";}
+					}
+				}
+			if ($GMT_day[$r]==5)	#### Friday local time
+				{
+				if (($Gct_friday_start==0) and ($Gct_friday_stop==0))
+					{
+					if ( ($GMT_hour[$r]>=$Gct_default_start) and ($GMT_hour[$r]<$Gct_default_stop) )
+						{$default_gmt.="'$GMT_gmt[$r]',";}
+					}
+				else
+					{
+					if ( ($GMT_hour[$r]>=$Gct_friday_start) and ($GMT_hour[$r]<$Gct_friday_stop) )
+						{$default_gmt.="'$GMT_gmt[$r]',";}
+					}
+				}
+			if ($GMT_day[$r]==6)	#### Saturday local time
+				{
+				if (($Gct_saturday_start==0) and ($Gct_saturday_stop==0))
+					{
+					if ( ($GMT_hour[$r]>=$Gct_default_start) and ($GMT_hour[$r]<$Gct_default_stop) )
+						{$default_gmt.="'$GMT_gmt[$r]',";}
+					}
+				else
+					{
+					if ( ($GMT_hour[$r]>=$Gct_saturday_start) and ($GMT_hour[$r]<$Gct_saturday_stop) )
+						{$default_gmt.="'$GMT_gmt[$r]',";}
+					}
+				}
+			$r++;
+			}
+
+		$default_gmt = "$default_gmt'99'";
+		$all_gmtSQL = "(gmt_offset_now IN($default_gmt) $ct_statesSQL) $ct_state_gmt_SQL";
+
+		$stmt="SELECT count(*) FROM vicidial_list where called_since_last_reset='N' and status IN('$dial_status_a','$dial_status_b','$dial_status_c','$dial_status_d','$dial_status_e') and list_id IN($camp_lists) and ($all_gmtSQL) $fSQL";
+		#$DB=1;
+		if ($DB) {echo "$stmt\n";}
+		$rslt=mysql_query($stmt, $link);
+		$rslt_rows = mysql_num_rows($rslt);
+		if ($rslt_rows)
+			{
+			$rowx=mysql_fetch_row($rslt);
+			$active_leads = "$rowx[0]";
+			}
+		else {$active_leads = '0';}
+
+		echo "This campaign has $active_leads leads to be dialed in those lists\n";
+		}
+	else
+		{
+		echo "no active lists selected for this campaign\n";
+		}
+	}
+else
+	{
+	echo "no active lists selected for this campaign\n";
+	}
+##### END calculate what gmt_offset_now values are within the allowed local_call_time setting ###
+}
+?>
diff --git a/www/vicidial/admin_modify_lead.php b/www/vicidial/admin_modify_lead.php
new file mode 100644
index 00000000..9dad4f62
--- /dev/null
+++ b/www/vicidial/admin_modify_lead.php
@@ -0,0 +1,476 @@
+<?
+# admin_modify_lead.php
+# 
+# Copyright (C) 2006  Matt Florell <vicidial@gmail.com>    LICENSE: GPLv2
+#
+
+require("dbconnect.php");
+
+$PHP_AUTH_USER=$_SERVER['PHP_AUTH_USER'];
+$PHP_AUTH_PW=$_SERVER['PHP_AUTH_PW'];
+$PHP_SELF=$_SERVER['PHP_SELF'];
+if (isset($_GET["vendor_id"]))				{$vendor_id=$_GET["vendor_id"];}
+	elseif (isset($_POST["vendor_id"]))		{$vendor_id=$_POST["vendor_id"];}
+if (isset($_GET["phone"]))				{$phone=$_GET["phone"];}
+	elseif (isset($_POST["phone"]))		{$phone=$_POST["phone"];}
+if (isset($_GET["lead_id"]))				{$lead_id=$_GET["lead_id"];}
+	elseif (isset($_POST["lead_id"]))		{$lead_id=$_POST["lead_id"];}
+if (isset($_GET["first_name"]))				{$first_name=$_GET["first_name"];}
+	elseif (isset($_POST["first_name"]))		{$first_name=$_POST["first_name"];}
+if (isset($_GET["last_name"]))				{$last_name=$_GET["last_name"];}
+	elseif (isset($_POST["last_name"]))		{$last_name=$_POST["last_name"];}
+if (isset($_GET["phone_number"]))				{$phone_number=$_GET["phone_number"];}
+	elseif (isset($_POST["phone_number"]))		{$phone_number=$_POST["phone_number"];}
+if (isset($_GET["end_call"]))				{$end_call=$_GET["end_call"];}
+	elseif (isset($_POST["end_call"]))		{$end_call=$_POST["end_call"];}
+if (isset($_GET["DB"]))				{$DB=$_GET["DB"];}
+	elseif (isset($_POST["DB"]))		{$DB=$_POST["DB"];}
+if (isset($_GET["dispo"]))				{$dispo=$_GET["dispo"];}
+	elseif (isset($_POST["dispo"]))		{$dispo=$_POST["dispo"];}
+if (isset($_GET["list_id"]))				{$list_id=$_GET["list_id"];}
+	elseif (isset($_POST["list_id"]))		{$list_id=$_POST["list_id"];}
+if (isset($_GET["campaign_id"]))				{$campaign_id=$_GET["campaign_id"];}
+	elseif (isset($_POST["campaign_id"]))		{$campaign_id=$_POST["campaign_id"];}
+if (isset($_GET["phone_code"]))				{$phone_code=$_GET["phone_code"];}
+	elseif (isset($_POST["phone_code"]))		{$phone_code=$_POST["phone_code"];}
+if (isset($_GET["server_ip"]))				{$server_ip=$_GET["server_ip"];}
+	elseif (isset($_POST["server_ip"]))		{$server_ip=$_POST["server_ip"];}
+if (isset($_GET["extension"]))				{$extension=$_GET["extension"];}
+	elseif (isset($_POST["extension"]))		{$extension=$_POST["extension"];}
+if (isset($_GET["channel"]))				{$channel=$_GET["channel"];}
+	elseif (isset($_POST["channel"]))		{$channel=$_POST["channel"];}
+if (isset($_GET["call_began"]))				{$call_began=$_GET["call_began"];}
+	elseif (isset($_POST["call_began"]))		{$call_began=$_POST["call_began"];}
+if (isset($_GET["parked_time"]))				{$parked_time=$_GET["parked_time"];}
+	elseif (isset($_POST["parked_time"]))		{$parked_time=$_POST["parked_time"];}
+if (isset($_GET["tsr"]))				{$tsr=$_GET["tsr"];}
+	elseif (isset($_POST["tsr"]))		{$tsr=$_POST["tsr"];}
+if (isset($_GET["address1"]))				{$address1=$_GET["address1"];}
+	elseif (isset($_POST["address1"]))		{$address1=$_POST["address1"];}
+if (isset($_GET["address2"]))				{$address2=$_GET["address2"];}
+	elseif (isset($_POST["address2"]))		{$address2=$_POST["address2"];}
+if (isset($_GET["address3"]))				{$address3=$_GET["address3"];}
+	elseif (isset($_POST["address3"]))		{$address3=$_POST["address3"];}
+if (isset($_GET["city"]))				{$city=$_GET["city"];}
+	elseif (isset($_POST["city"]))		{$city=$_POST["city"];}
+if (isset($_GET["state"]))				{$state=$_GET["state"];}
+	elseif (isset($_POST["state"]))		{$state=$_POST["state"];}
+if (isset($_GET["postal_code"]))				{$postal_code=$_GET["postal_code"];}
+	elseif (isset($_POST["postal_code"]))		{$postal_code=$_POST["postal_code"];}
+if (isset($_GET["province"]))				{$province=$_GET["province"];}
+	elseif (isset($_POST["province"]))		{$province=$_POST["province"];}
+if (isset($_GET["country_code"]))				{$country_code=$_GET["country_code"];}
+	elseif (isset($_POST["country_code"]))		{$country_code=$_POST["country_code"];}
+if (isset($_GET["alt_phone"]))				{$alt_phone=$_GET["alt_phone"];}
+	elseif (isset($_POST["alt_phone"]))		{$alt_phone=$_POST["alt_phone"];}
+if (isset($_GET["email"]))				{$email=$_GET["email"];}
+	elseif (isset($_POST["email"]))		{$email=$_POST["email"];}
+if (isset($_GET["security"]))				{$security=$_GET["security"];}
+	elseif (isset($_POST["security"]))		{$security=$_POST["security"];}
+if (isset($_GET["comments"]))				{$comments=$_GET["comments"];}
+	elseif (isset($_POST["comments"]))		{$comments=$_POST["comments"];}
+if (isset($_GET["status"]))				{$status=$_GET["status"];}
+	elseif (isset($_POST["status"]))		{$status=$_POST["status"];}
+if (isset($_GET["submit"]))				{$submit=$_GET["submit"];}
+	elseif (isset($_POST["submit"]))		{$submit=$_POST["submit"];}
+if (isset($_GET["SUBMIT"]))				{$SUBMIT=$_GET["SUBMIT"];}
+	elseif (isset($_POST["SUBMIT"]))		{$SUBMIT=$_POST["SUBMIT"];}
+if (isset($_GET["CBchangeUSERtoANY"]))				{$CBchangeUSERtoANY=$_GET["CBchangeUSERtoANY"];}
+	elseif (isset($_POST["CBchangeUSERtoANY"]))		{$CBchangeUSERtoANY=$_POST["CBchangeUSERtoANY"];}
+if (isset($_GET["CBchangeUSERtoUSER"]))				{$CBchangeUSERtoUSER=$_GET["CBchangeUSERtoUSER"];}
+	elseif (isset($_POST["CBchangeUSERtoUSER"]))		{$CBchangeUSERtoUSER=$_POST["CBchangeUSERtoUSER"];}
+if (isset($_GET["CBchangeANYtoUSER"]))				{$CBchangeANYtoUSER=$_GET["CBchangeANYtoUSER"];}
+	elseif (isset($_POST["CBchangeANYtoUSER"]))		{$CBchangeANYtoUSER=$_POST["CBchangeANYtoUSER"];}
+if (isset($_GET["callback_id"]))				{$callback_id=$_GET["callback_id"];}
+	elseif (isset($_POST["callback_id"]))		{$callback_id=$_POST["callback_id"];}
+if (isset($_GET["CBuser"]))				{$CBuser=$_GET["CBuser"];}
+	elseif (isset($_POST["CBuser"]))		{$CBuser=$_POST["CBuser"];}
+
+
+$PHP_AUTH_USER = ereg_replace("[^0-9a-zA-Z]","",$PHP_AUTH_USER);
+$PHP_AUTH_PW = ereg_replace("[^0-9a-zA-Z]","",$PHP_AUTH_PW);
+
+
+
+### AST GUI database administration modify lead in vicidial_list
+### admin_modify_lead.php
+
+# this is the administration lead information modifier screen, the administrator just needs to enter the leadID and then they can view and modify the information in the record for that lead
+
+# CHANGES
+#
+# 60419-1705 - Added ability to change lead callback record from USERONLY to ANYONE or USERONLY-user
+# 60421-1459 - check GET/POST vars lines with isset to not trigger PHP NOTICES
+# 60609-1112 - Added DNC list addition if status changed to DNC
+# 60619-1539 - Added variable filtering to eliminate SQL injection attack threat
+#
+
+$STARTtime = date("U");
+$TODAY = date("Y-m-d");
+$NOW_TIME = date("Y-m-d H:i:s");
+
+
+	$stmt="SELECT count(*) from vicidial_users where user='$PHP_AUTH_USER' and pass='$PHP_AUTH_PW' and user_level > 7;";
+	if ($DB) {echo "|$stmt|\n";}
+	$rslt=mysql_query($stmt, $link);
+	$row=mysql_fetch_row($rslt);
+	$auth=$row[0];
+
+if ($WeBRooTWritablE > 0)
+	{$fp = fopen ("./project_auth_entries.txt", "a");}
+
+$date = date("r");
+$ip = getenv("REMOTE_ADDR");
+$browser = getenv("HTTP_USER_AGENT");
+
+  if( (strlen($PHP_AUTH_USER)<2) or (strlen($PHP_AUTH_PW)<2) or (!$auth))
+	{
+    Header("WWW-Authenticate: Basic realm=\"VICI-PROJECTS\"");
+    Header("HTTP/1.0 401 Unauthorized");
+    echo "Invalid Username/Password: |$PHP_AUTH_USER|$PHP_AUTH_PW|\n";
+    exit;
+	}
+  else
+	{
+
+	if($auth>0)
+		{
+			$stmt="SELECT full_name,modify_leads from vicidial_users where user='$PHP_AUTH_USER' and pass='$PHP_AUTH_PW'";
+			$rslt=mysql_query($stmt, $link);
+			$row=mysql_fetch_row($rslt);
+			$LOGfullname				=$row[0];
+			$LOGmodify_leads			=$row[1];
+
+		if ($WeBRooTWritablE > 0)
+			{
+			fwrite ($fp, "VICIDIAL|GOOD|$date|$PHP_AUTH_USER|$PHP_AUTH_PW|$ip|$browser|$LOGfullname|\n");
+			fclose($fp);
+			}
+		}
+	else
+		{
+		if ($WeBRooTWritablE > 0)
+			{
+			fwrite ($fp, "VICIDIAL|FAIL|$date|$PHP_AUTH_USER|$PHP_AUTH_PW|$ip|$browser|\n");
+			fclose($fp);
+			}
+		}
+	}
+
+?>
+<html>
+<head>
+<META HTTP-EQUIV="Content-Type" CONTENT="text/html; charset=utf-8">
+<title>VICIDIAL ADMIN: Lead record modification</title>
+</head>
+<BODY BGCOLOR=white marginheight=0 marginwidth=0 leftmargin=0 topmargin=0>
+<CENTER><FONT FACE="Courier" COLOR=BLACK SIZE=3>
+
+<? 
+
+if ($end_call > 0)
+{
+
+$call_length = ($STARTtime - $call_began);
+
+	### insert a NEW record to the vicidial_closer_log table 
+	$stmt="INSERT INTO vicidial_closer_log (lead_id,list_id,campaign_id,call_date,start_epoch,end_epoch,length_in_sec,status,phone_code,phone_number,user,comments,processed) values('" . mysql_real_escape_string($lead_id) . "','" . mysql_real_escape_string($list_id) . "','" . mysql_real_escape_string($campaign_id) . "','" . mysql_real_escape_string($parked_time) . "','" . mysql_real_escape_string($call_began) . "','$STARTtime','" . mysql_real_escape_string($call_length) . "','" . mysql_real_escape_string($status) . "','" . mysql_real_escape_string($phone_code) . "','" . mysql_real_escape_string($phone_number) . "','$PHP_AUTH_USER','" . mysql_real_escape_string($comments) . "','Y')";
+	if ($DB) {echo "|$stmt|\n";}
+	$rslt=mysql_query($stmt, $link);
+
+	### update the lead record in the vicidial_list table 
+	$stmt="UPDATE vicidial_list set status='" . mysql_real_escape_string($status) . "',first_name='" . mysql_real_escape_string($first_name) . "',last_name='" . mysql_real_escape_string($last_name) . "',address1='" . mysql_real_escape_string($address1) . "',address2='" . mysql_real_escape_string($address2) . "',address3='" . mysql_real_escape_string($address3) . "',city='" . mysql_real_escape_string($city) . "',state='" . mysql_real_escape_string($state) . "',province='" . mysql_real_escape_string($province) . "',postal_code='" . mysql_real_escape_string($postal_code) . "',country_code='" . mysql_real_escape_string($country_code) . "',alt_phone='" . mysql_real_escape_string($alt_phone) . "',email='" . mysql_real_escape_string($email) . "',security_phrase='" . mysql_real_escape_string($security) . "',comments='" . mysql_real_escape_string($comments) . "' where lead_id='" . mysql_real_escape_string($lead_id) . "'";
+	if ($DB) {echo "|$stmt|\n";}
+	$rslt=mysql_query($stmt, $link);
+
+		echo "information modified<BR><BR>\n";
+		echo "<form><input type=button value=\"Close This Window\" onClick=\"javascript:window.close();\"></form>\n";
+	
+	if ( ($dispo != $status) and ($dispo == 'CBHOLD') )
+	{
+		### inactivate vicidial_callbacks record for this lead 
+		$stmt="UPDATE vicidial_callbacks set status='INACTIVE' where lead_id='" . mysql_real_escape_string($lead_id) . "' and status='ACTIVE';";
+		if ($DB) {echo "|$stmt|\n";}
+		$rslt=mysql_query($stmt, $link);
+
+		echo "<BR>vicidial_callback record inactivated: $lead_id<BR>\n";
+	}
+	if ( ($dispo != $status) and ($dispo == 'CALLBK') )
+	{
+		### inactivate vicidial_callbacks record for this lead 
+		$stmt="UPDATE vicidial_callbacks set status='INACTIVE' where lead_id='" . mysql_real_escape_string($lead_id) . "' and status IN('ACTIVE','LIVE');";
+		if ($DB) {echo "|$stmt|\n";}
+		$rslt=mysql_query($stmt, $link);
+
+		echo "<BR>vicidial_callback record inactivated: $lead_id<BR>\n";
+	}
+
+	if ( ($dispo != $status) and ($status == 'DNC') )
+	{
+		### add lead to the internal DNC list 
+		$stmt="INSERT INTO vicidial_dnc (phone_number) values('" . mysql_real_escape_string($phone_number) . "');";
+		if ($DB) {echo "|$stmt|\n";}
+		$rslt=mysql_query($stmt, $link);
+
+		echo "<BR>Lead added to DNC List: $lead_id - $phone_number<BR>\n";
+	}
+
+}
+else
+{
+
+	if ($CBchangeUSERtoANY == 'YES')
+		{
+		### inactivate vicidial_callbacks record for this lead 
+		$stmt="UPDATE vicidial_callbacks set recipient='ANYONE' where callback_id='" . mysql_real_escape_string($callback_id) . "';";
+		if ($DB) {echo "|$stmt|\n";}
+		$rslt=mysql_query($stmt, $link);
+
+		echo "<BR>vicidial_callback record changed to ANYONE<BR>\n";
+		}
+	if ($CBchangeUSERtoUSER == 'YES')
+		{
+		### inactivate vicidial_callbacks record for this lead 
+		$stmt="UPDATE vicidial_callbacks set user='" . mysql_real_escape_string($CBuser) . "' where callback_id='" . mysql_real_escape_string($callback_id) . "';";
+		if ($DB) {echo "|$stmt|\n";}
+		$rslt=mysql_query($stmt, $link);
+
+		echo "<BR>vicidial_callback record user changed to $CBuser<BR>\n";
+		}	
+	if ($CBchangeANYtoUSER == 'YES')
+		{
+		### inactivate vicidial_callbacks record for this lead 
+		$stmt="UPDATE vicidial_callbacks set user='" . mysql_real_escape_string($CBuser) . "',recipient='USERONLY' where callback_id='" . mysql_real_escape_string($callback_id) . "';";
+		if ($DB) {echo "|$stmt|\n";}
+		$rslt=mysql_query($stmt, $link);
+
+		echo "<BR>vicidial_callback record changed to USERONLY, user: $CBuser<BR>\n";
+		}	
+	
+	
+
+	$stmt="SELECT count(*) from vicidial_list where lead_id='" . mysql_real_escape_string($lead_id) . "'";
+	$rslt=mysql_query($stmt, $link);
+	if ($DB) {echo "$stmt\n";}
+	$row=mysql_fetch_row($rslt);
+	$lead_count = $row[0];
+
+	if ($lead_count > 0)
+	{
+
+		$stmt="SELECT * from vicidial_list where lead_id='" . mysql_real_escape_string($lead_id) . "'";
+		$rslt=mysql_query($stmt, $link);
+		if ($DB) {echo "$stmt\n";}
+		$row=mysql_fetch_row($rslt);
+		   $lead_id			= "$row[0]";
+		   $dispo			= "$row[3]";
+		   $tsr				= "$row[4]";
+		   $vendor_id		= "$row[5]";
+		   $list_id			= "$row[7]";
+		   $campaign_id		= "$row[8]";
+		   $phone_code		= "$row[10]";
+		   $phone_number	= "$row[11]";
+		   $title			= "$row[12]";
+		   $first_name		= "$row[13]";	#
+		   $middle_initial	= "$row[14]";
+		   $last_name		= "$row[15]";	#
+		   $address1		= "$row[16]";	#
+		   $address2		= "$row[17]";	#
+		   $address3		= "$row[18]";	#
+		   $city			= "$row[19]";	#
+		   $state			= "$row[20]";	#
+		   $province		= "$row[21]";	#
+		   $postal_code		= "$row[22]";	#
+		   $country_code	= "$row[23]";	#
+		   $gender			= "$row[24]";
+		   $date_of_birth	= "$row[25]";
+		   $alt_phone		= "$row[26]";	#
+		   $email			= "$row[27]";	#
+		   $security		= "$row[28]";	#
+		   $comments		= "$row[29]";	#
+
+		echo "<br>Call information: $first_name $last_name - $phone_number<br><br><form action=$PHP_SELF method=POST>\n";
+		echo "<input type=hidden name=end_call value=1>\n";
+		echo "<input type=hidden name=DB value=\"$DB\">\n";
+		echo "<input type=hidden name=lead_id value=\"$lead_id\">\n";
+		echo "<input type=hidden name=dispo value=\"$dispo\">\n";
+		echo "<input type=hidden name=list_id value=\"$list_id\">\n";
+		echo "<input type=hidden name=campaign_id value=\"$campaign_id\">\n";
+		echo "<input type=hidden name=phone_code value=\"$phone_code\">\n";
+		echo "<input type=hidden name=phone_number value=\"$phone_number\">\n";
+		echo "<input type=hidden name=server_ip value=\"$server_ip\">\n";
+		echo "<input type=hidden name=extension value=\"$extension\">\n";
+		echo "<input type=hidden name=channel value=\"$channel\">\n";
+		echo "<input type=hidden name=call_began value=\"$call_began\">\n";
+		echo "<input type=hidden name=parked_time value=\"$parked_time\">\n";
+		echo "<table cellpadding=1 cellspacing=0>\n";
+		echo "<tr><td colspan=2>Vendor ID: $vendor_id &nbsp; &nbsp; Lead ID: $lead_id</td></tr>\n";
+		echo "<tr><td colspan=2>Fronter: <A HREF=\"user_stats.php?user=$tsr\">$tsr</A> &nbsp; &nbsp; List ID: $list_id</td></tr>\n";
+		echo "<tr><td align=right>First Name: </td><td align=left><input type=text name=first_name size=15 maxlength=30 value=\"$first_name\"> &nbsp; \n";
+		echo " Last Name: <input type=text name=last_name size=15 maxlength=30 value=\"$last_name\"> </td></tr>\n";
+		echo "<tr><td align=right>Address 1 : </td><td align=left><input type=text name=address1 size=30 maxlength=30 value=\"$address1\"></td></tr>\n";
+		echo "<tr><td align=right>Address 2 : </td><td align=left><input type=text name=address2 size=30 maxlength=30 value=\"$address2\"></td></tr>\n";
+		echo "<tr><td align=right>Address 3 : </td><td align=left><input type=text name=address3 size=30 maxlength=30 value=\"$address3\"></td></tr>\n";
+		echo "<tr><td align=right>City : </td><td align=left><input type=text name=city size=30 maxlength=30 value=\"$city\"></td></tr>\n";
+		echo "<tr><td align=right>State: </td><td align=left><input type=text name=state size=2 maxlength=2 value=\"$state\"> &nbsp; \n";
+		echo " Postal Code: <input type=text name=postal_code size=10 maxlength=10 value=\"$postal_code\"> </td></tr>\n";
+
+		echo "<tr><td align=right>Province : </td><td align=left><input type=text name=province size=30 maxlength=30 value=\"$province\"></td></tr>\n";
+		echo "<tr><td align=right>Country : </td><td align=left><input type=text name=country_code size=3 maxlength=3 value=\"$country_code\"></td></tr>\n";
+		echo "<tr><td align=right>Alt Phone : </td><td align=left><input type=text name=alt_phone size=10 maxlength=10 value=\"$alt_phone\"></td></tr>\n";
+		echo "<tr><td align=right>Email : </td><td align=left><input type=text name=email size=30 maxlength=50 value=\"$email\"></td></tr>\n";
+		echo "<tr><td align=right>Security : </td><td align=left><input type=text name=security size=30 maxlength=100 value=\"$security\"></td></tr>\n";
+		echo "<tr><td align=right>Comments : </td><td align=left><input type=text name=comments size=30 maxlength=255 value=\"$comments\"></td></tr>\n";
+			echo "<tr bgcolor=#B6D3FC><td align=right>Disposition: </td><td align=left><select size=1 name=status>\n";
+
+				$stmt="SELECT * from vicidial_statuses where selectable='Y' order by status";
+				$rslt=mysql_query($stmt, $link);
+				$statuses_to_print = mysql_num_rows($rslt);
+				$statuses_list='';
+
+				$o=0;
+				$DS=0;
+				while ($statuses_to_print > $o) 
+				{
+					$rowx=mysql_fetch_row($rslt);
+					if ($dispo == "$rowx[0]")
+						{$statuses_list .= "<option SELECTED value=\"$rowx[0]\">$rowx[0] - $rowx[1]</option>\n"; $DS++;}
+					else
+						{$statuses_list .= "<option value=\"$rowx[0]\">$rowx[0] - $rowx[1]</option>\n";}
+					$o++;
+				}
+				if ($DS < 1) {$statuses_list .= "<option SELECTED value=\"$dispo\">$dispo</option>\n";}
+			echo "$statuses_list";
+			echo "</select></td></tr>\n";
+
+
+		echo "<tr><td colspan=2><input type=submit name=submit value=\"SUBMIT\"></td></tr>\n";
+		echo "</table></form>\n";
+		echo "<BR><BR><BR>\n";
+
+		if ( ($dispo == 'CALLBK') or ($dispo == 'CBHOLD') )
+		{
+			### find any vicidial_callback records for this lead 
+			$stmt="select * from vicidial_callbacks where lead_id='" . mysql_real_escape_string($lead_id) . "' and status IN('ACTIVE','LIVE') order by callback_id desc LIMIT 1;";
+			if ($DB) {echo "|$stmt|\n";}
+			$rslt=mysql_query($stmt, $link);
+			$CB_to_print = mysql_num_rows($rslt);
+			$rowx=mysql_fetch_row($rslt);
+
+			if ($CB_to_print>0)
+				{
+				if ($rowx[9] == 'USERONLY')
+					{
+					echo "<br><form action=$PHP_SELF method=POST>\n";
+					echo "<input type=hidden name=CBchangeUSERtoANY value=\"YES\">\n";
+					echo "<input type=hidden name=DB value=\"$DB\">\n";
+					echo "<input type=hidden name=lead_id value=\"$lead_id\">\n";
+					echo "<input type=hidden name=callback_id value=\"$rowx[0]\">\n";
+					echo "<input type=submit name=submit value=\"CHANGE TO ANYONE CALLBACK\"></form><BR>\n";
+
+					echo "<br><form action=$PHP_SELF method=POST>\n";
+					echo "<input type=hidden name=CBchangeUSERtoUSER value=\"YES\">\n";
+					echo "<input type=hidden name=DB value=\"$DB\">\n";
+					echo "<input type=hidden name=lead_id value=\"$lead_id\">\n";
+					echo "<input type=hidden name=callback_id value=\"$rowx[0]\">\n";
+					echo "New Callback Owner UserID: <input type=text name=CBuser size=8 maxlength=10 value=\"$rowx[8]\"> \n";
+					echo "<input type=submit name=submit value=\"CHANGE USERONLY CALLBACK USER\"></form><BR>\n";
+					}
+				else
+					{
+					echo "<br><form action=$PHP_SELF method=POST>\n";
+					echo "<input type=hidden name=CBchangeANYtoUSER value=\"YES\">\n";
+					echo "<input type=hidden name=DB value=\"$DB\">\n";
+					echo "<input type=hidden name=lead_id value=\"$lead_id\">\n";
+					echo "<input type=hidden name=callback_id value=\"$rowx[0]\">\n";
+					echo "New Callback Owner UserID: <input type=text name=CBuser size=8 maxlength=10 value=\"$rowx[8]\"> \n";
+					echo "<input type=submit name=submit value=\"CHANGE TO USERONLY CALLBACK\"></form><BR>\n";
+					}
+				}
+			else
+				{
+				echo "<BR>No Callback records found<BR>\n";
+				}
+		}
+
+
+
+
+
+
+	}
+	else
+	{
+		echo "lead lookup FAILED for lead_id $lead_id &nbsp; &nbsp; &nbsp; $NOW_TIME\n<BR><BR>\n";
+#		echo "<a href=\"$PHP_SELF\">Close this window</a>\n<BR><BR>\n";
+	}
+
+
+
+echo "<br><br>\n";
+
+echo "<center>\n";
+
+echo "<B>CALLS TO THIS LEAD:</B>\n";
+echo "<TABLE width=550 cellspacing=0 cellpadding=1>\n";
+echo "<tr><td><font size=2>DATE/TIME </td><td align=left><font size=2>LENGTH</td><td align=left><font size=2> STATUS</td><td align=left><font size=2> TSR</td><td align=right><font size=2> CAMPAIGN</td><td align=right><font size=2> LIST</td><td align=right><font size=2> LEAD</td></tr>\n";
+
+	$stmt="select * from vicidial_log where lead_id='" . mysql_real_escape_string($lead_id) . "' order by uniqueid desc limit 50;";
+	$rslt=mysql_query($stmt, $link);
+	$logs_to_print = mysql_num_rows($rslt);
+
+	$u=0;
+	while ($logs_to_print > $u) {
+		$row=mysql_fetch_row($rslt);
+		if (eregi("1$|3$|5$|7$|9$", $u))
+			{$bgcolor='bgcolor="#B9CBFD"';} 
+		else
+			{$bgcolor='bgcolor="#9BB9FB"';}
+
+			echo "<tr $bgcolor><td><font size=2>$row[4]</td>";
+			echo "<td align=left><font size=2> $row[7]</td>\n";
+			echo "<td align=left><font size=2> $row[8]</td>\n";
+			echo "<td align=left><font size=2> <A HREF=\"user_stats.php?user=$row[11]\" target=\"_blank\">$row[11]</A> </td>\n";
+			echo "<td align=right><font size=2> $row[3] </td>\n";
+			echo "<td align=right><font size=2> $row[2] </td>\n";
+			echo "<td align=right><font size=2> $row[1] </td></tr>\n";
+
+		$u++;
+	}
+
+
+echo "</TABLE></center>\n";
+
+
+
+}
+
+
+$ENDtime = date("U");
+
+$RUNtime = ($ENDtime - $STARTtime);
+
+echo "\n\n\n<br><br><br>\n\n";
+
+
+echo "<font size=0>\n\n\n<br><br><br>\nscript runtime: $RUNtime seconds</font>";
+
+
+?>
+
+
+</body>
+</html>
+
+<?
+	
+exit; 
+
+
+
+?>
+
+
+
+
+
diff --git a/www/vicidial/admin_search_lead.php b/www/vicidial/admin_search_lead.php
new file mode 100644
index 00000000..a727e3a1
--- /dev/null
+++ b/www/vicidial/admin_search_lead.php
@@ -0,0 +1,224 @@
+<?
+### admin_search_lead.php
+### 
+### Copyright (C) 2006  Matt Florell <vicidial@gmail.com>    LICENSE: GPLv2
+###
+### AST GUI database administration search for lead info
+### admin_modify_lead.php
+#
+# this is the administration lead information modifier screen, the administrator just needs to enter the leadID and then they can view and modify the information in the record for that lead
+#
+# changes:
+# 60620-1055 - Added variable filtering to eliminate SQL injection attack threat
+#            - Added required user/pass to gain access to this page
+#            - Changed results to multi-record
+#
+
+require("dbconnect.php");
+
+$PHP_AUTH_USER=$_SERVER['PHP_AUTH_USER'];
+$PHP_AUTH_PW=$_SERVER['PHP_AUTH_PW'];
+$PHP_SELF=$_SERVER['PHP_SELF'];
+if (isset($_GET["vendor_id"]))			{$vendor_id=$_GET["vendor_id"];}
+	elseif (isset($_POST["vendor_id"]))	{$vendor_id=$_POST["vendor_id"];}
+if (isset($_GET["phone"]))				{$phone=$_GET["phone"];}
+	elseif (isset($_POST["phone"]))		{$phone=$_POST["phone"];}
+if (isset($_GET["lead_id"]))			{$lead_id=$_GET["lead_id"];}
+	elseif (isset($_POST["lead_id"]))	{$lead_id=$_POST["lead_id"];}
+if (isset($_GET["submit"]))				{$submit=$_GET["submit"];}
+	elseif (isset($_POST["submit"]))	{$submit=$_POST["submit"];}
+if (isset($_GET["SUBMIT"]))				{$SUBMIT=$_GET["SUBMIT"];}
+	elseif (isset($_POST["SUBMIT"]))	{$SUBMIT=$_POST["SUBMIT"];}
+if (isset($_GET["DB"]))					{$DB=$_GET["DB"];}
+	elseif (isset($_POST["DB"]))		{$DB=$_POST["DB"];}
+
+$PHP_AUTH_USER = ereg_replace("[^0-9a-zA-Z]","",$PHP_AUTH_USER);
+$PHP_AUTH_PW = ereg_replace("[^0-9a-zA-Z]","",$PHP_AUTH_PW);
+
+$STARTtime = date("U");
+$TODAY = date("Y-m-d");
+$NOW_TIME = date("Y-m-d H:i:s");
+
+
+	$stmt="SELECT count(*) from vicidial_users where user='$PHP_AUTH_USER' and pass='$PHP_AUTH_PW' and user_level > 7;";
+	if ($DB) {echo "|$stmt|\n";}
+	$rslt=mysql_query($stmt, $link);
+	$row=mysql_fetch_row($rslt);
+	$auth=$row[0];
+
+if ($WeBRooTWritablE > 0)
+	{$fp = fopen ("./project_auth_entries.txt", "a");}
+
+$date = date("r");
+$ip = getenv("REMOTE_ADDR");
+$browser = getenv("HTTP_USER_AGENT");
+
+  if( (strlen($PHP_AUTH_USER)<2) or (strlen($PHP_AUTH_PW)<2) or (!$auth))
+	{
+    Header("WWW-Authenticate: Basic realm=\"VICI-PROJECTS\"");
+    Header("HTTP/1.0 401 Unauthorized");
+    echo "Invalid Username/Password: |$PHP_AUTH_USER|$PHP_AUTH_PW|\n";
+    exit;
+	}
+  else
+	{
+
+	if($auth>0)
+		{
+		$office_no=strtoupper($PHP_AUTH_USER);
+		$password=strtoupper($PHP_AUTH_PW);
+			$stmt="SELECT full_name,modify_leads from vicidial_users where user='$PHP_AUTH_USER' and pass='$PHP_AUTH_PW'";
+			$rslt=mysql_query($stmt, $link);
+			$row=mysql_fetch_row($rslt);
+			$LOGfullname				=$row[0];
+			$LOGmodify_leads			=$row[1];
+
+		if ($WeBRooTWritablE > 0)
+			{
+			fwrite ($fp, "VICIDIAL|GOOD|$date|$PHP_AUTH_USER|$PHP_AUTH_PW|$ip|$browser|$LOGfullname|\n");
+			fclose($fp);
+			}
+		}
+	else
+		{
+		if ($WeBRooTWritablE > 0)
+			{
+			fwrite ($fp, "VICIDIAL|FAIL|$date|$PHP_AUTH_USER|$PHP_AUTH_PW|$ip|$browser|\n");
+			fclose($fp);
+			}
+		}
+	}
+
+?>
+<html>
+<head>
+<META HTTP-EQUIV="Content-Type" CONTENT="text/html; charset=utf-8">
+<title>VICIDIAL ADMIN: Lead Search</title>
+</head>
+<title>Lead Lookup</title>
+</head>
+<body bgcolor=white>
+
+<? 
+
+if ( (!$vendor_id) and (!$phone)  and (!$lead_id) ) 
+	{
+	echo date("l F j, Y G:i:s A");
+	echo "\n<br><br><center>\n";
+	echo "<form method=post name=search action=\"$PHP_SELF\">\n";
+	echo "<input type=hidden name=DB value=\"$DB\">\n";
+	echo "<b>Please enter a:<br> Vendor ID(vendor lead code): <input type=text name=vendor_id size=10 maxlength=10> or \n";
+	echo "<br><b>a Home Phone Number: <input type=text name=phone size=10 maxlength=10> or\n";
+	echo "<br><b>a lead ID: <input type=text name=lead_id size=10 maxlength=10> <br><br>\n";
+	echo "<input type=submit name=submit value=SUBMIT></b>\n";
+	echo "</form>\n</center>\n";
+	echo "</body></html>\n";
+	exit;
+	}
+
+else
+	{
+
+	if ($vendor_id)
+		{
+		$stmt="SELECT * from vicidial_list where vendor_lead_code='" . mysql_real_escape_string($vendor_id) . "' order by modify_date desc limit 1000";
+		}
+	else
+		{
+		if ($phone)
+			{
+			$stmt="SELECT * from vicidial_list where phone_number='" . mysql_real_escape_string($phone) . "' order by modify_date desc limit 1000";
+			}
+		else
+			{
+			if ($lead_id)
+				{
+				$stmt="SELECT * from vicidial_list where lead_id='" . mysql_real_escape_string($lead_id) . "' order by modify_date desc limit 1000";
+				}
+			else
+				{
+				print "ERROR: you must search for something! Go back and search for something";
+				exit;
+				}
+			}
+		}
+	if ($DB)
+		{
+		echo "\n\n$stmt\n\n";
+		}
+	
+	$rslt=mysql_query($stmt, $link);
+	$results_to_print = mysql_num_rows($rslt);
+	if ($results_to_print < 1)
+		{
+		echo date("l F j, Y G:i:s A");
+		echo "\n<br><br><center>\n";
+		echo "<b>The search variables you entered are not active in the system</b><br><br>\n";
+		echo "<b>Please go back and double check the information you entered and submit again</b>\n";
+		echo "</center>\n";
+		echo "</body></html>\n";
+		exit;
+		}
+	else
+		{
+		echo "<b>RESULTS: $results_to_print</b><BR><BR>\n";
+		echo "<TABLE BGCOLOR=WHITE CELLPADDING=1 CELLSPACING=0>\n";
+		echo "<TR BGCOLOR=BLACK>\n";
+		echo "<TD ALIGN=LEFT><FONT FACE=\"ARIAL,HELVETICA\" COLOR=WHITE><B>#</B></FONT></TD>\n";
+		echo "<TD ALIGN=CENTER><FONT FACE=\"ARIAL,HELVETICA\" COLOR=WHITE><B>LEAD ID</B></FONT></TD>\n";
+		echo "<TD ALIGN=CENTER><FONT FACE=\"ARIAL,HELVETICA\" COLOR=WHITE><B>STATUS</B></FONT></TD>\n";
+		echo "<TD ALIGN=CENTER><FONT FACE=\"ARIAL,HELVETICA\" COLOR=WHITE><B>VENDOR ID</B></FONT></TD>\n";
+		echo "<TD ALIGN=CENTER><FONT FACE=\"ARIAL,HELVETICA\" COLOR=WHITE><B>LAST AGENT</B></FONT></TD>\n";
+		echo "<TD ALIGN=CENTER><FONT FACE=\"ARIAL,HELVETICA\" COLOR=WHITE><B>LIST ID</B></FONT></TD>\n";
+		echo "<TD ALIGN=CENTER><FONT FACE=\"ARIAL,HELVETICA\" COLOR=WHITE><B>PHONE</B></FONT></TD>\n";
+		echo "<TD ALIGN=CENTER><FONT FACE=\"ARIAL,HELVETICA\" COLOR=WHITE><B>NAME</B></FONT></TD>\n";
+		echo "<TD ALIGN=CENTER><FONT FACE=\"ARIAL,HELVETICA\" COLOR=WHITE><B>CITY</B></FONT></TD>\n";
+		echo "<TD ALIGN=CENTER><FONT FACE=\"ARIAL,HELVETICA\" COLOR=WHITE><B>SECURITY</B></FONT></TD>\n";
+		echo "<TD ALIGN=CENTER><FONT FACE=\"ARIAL,HELVETICA\" COLOR=WHITE><B>LAST CALL</B></FONT></TD>\n";
+		echo "</TR>\n";
+		$o=0;
+		while ($results_to_print > $o)
+			{
+			$row=mysql_fetch_row($rslt);
+			$o++;
+			if (eregi("1$|3$|5$|7$|9$", $o))
+				{$bgcolor='bgcolor="#B9CBFD"';} 
+			else
+				{$bgcolor='bgcolor="#9BB9FB"';}
+			echo "<TR $bgcolor>\n";
+			echo "<TD ALIGN=LEFT><FONT FACE=\"ARIAL,HELVETICA\" SIZE=1>$o</FONT></TD>\n";
+			echo "<TD ALIGN=CENTER><FONT FACE=\"ARIAL,HELVETICA\" SIZE=1><a href=\"admin_modify_lead.php?lead_id=$row[0]\">$row[0]</a></FONT></TD>\n";
+			echo "<TD ALIGN=CENTER><FONT FACE=\"ARIAL,HELVETICA\" SIZE=1>$row[3]</FONT></TD>\n";
+			echo "<TD ALIGN=CENTER><FONT FACE=\"ARIAL,HELVETICA\" SIZE=1>$row[5]</FONT></TD>\n";
+			echo "<TD ALIGN=CENTER><FONT FACE=\"ARIAL,HELVETICA\" SIZE=1>$row[4]</FONT></TD>\n";
+			echo "<TD ALIGN=CENTER><FONT FACE=\"ARIAL,HELVETICA\" SIZE=1>$row[7]</FONT></TD>\n";
+			echo "<TD ALIGN=CENTER><FONT FACE=\"ARIAL,HELVETICA\" SIZE=1>$row[11]</FONT></TD>\n";
+			echo "<TD ALIGN=CENTER><FONT FACE=\"ARIAL,HELVETICA\" SIZE=1>$row[13] $row[15]</FONT></TD>\n";
+			echo "<TD ALIGN=CENTER><FONT FACE=\"ARIAL,HELVETICA\" SIZE=1>$row[19]</FONT></TD>\n";
+			echo "<TD ALIGN=CENTER><FONT FACE=\"ARIAL,HELVETICA\" SIZE=1>$row[28]</FONT></TD>\n";
+			echo "<TD ALIGN=CENTER><FONT FACE=\"ARIAL,HELVETICA\" SIZE=1>$row[2]</FONT></TD>\n";
+			echo "</TR>\n";
+			}
+		echo "</TABLE>\n";
+		}		
+	}
+
+
+
+
+$ENDtime = date("U");
+
+$RUNtime = ($ENDtime - $STARTtime);
+
+echo "\n\n\n<br><br><br>\n<a href=\"$PHP_SELF\">NEW SEARCH</a>";
+
+
+echo "\n\n\n<br><br><br>\nscript runtime: $RUNtime seconds";
+
+
+?>
+
+
+
+</body>
+</html>
diff --git a/www/vicidial/closer-fronter_popup.php b/www/vicidial/closer-fronter_popup.php
new file mode 100644
index 00000000..84d31c97
--- /dev/null
+++ b/www/vicidial/closer-fronter_popup.php
@@ -0,0 +1,515 @@
+<?
+### closer-fronter_popup.php
+### 
+### Copyright (C) 2006  Matt Florell <vicidial@gmail.com>    LICENSE: GPLv2
+###
+# this is the closer popup of a specific call that starts recording the call and allows you to go and fetch info on that caller in the local CRM system.
+# CHANGES
+#
+# 60620-1020 - Added variable filtering to eliminate SQL injection attack threat
+#
+
+require("dbconnect.php");
+
+$PHP_AUTH_USER=$_SERVER['PHP_AUTH_USER'];
+$PHP_AUTH_PW=$_SERVER['PHP_AUTH_PW'];
+$PHP_SELF=$_SERVER['PHP_SELF'];
+if (isset($_GET["address1"]))				{$address1=$_GET["address1"];}
+	elseif (isset($_POST["address1"]))		{$address1=$_POST["address1"];}
+if (isset($_GET["address2"]))				{$address2=$_GET["address2"];}
+	elseif (isset($_POST["address2"]))		{$address2=$_POST["address2"];}
+if (isset($_GET["address3"]))				{$address3=$_GET["address3"];}
+	elseif (isset($_POST["address3"]))		{$address3=$_POST["address3"];}
+if (isset($_GET["alt_phone"]))				{$alt_phone=$_GET["alt_phone"];}
+	elseif (isset($_POST["alt_phone"]))		{$alt_phone=$_POST["alt_phone"];}
+if (isset($_GET["call_began"]))				{$call_began=$_GET["call_began"];}
+	elseif (isset($_POST["call_began"]))		{$call_began=$_POST["call_began"];}
+if (isset($_GET["campaign_id"]))				{$campaign_id=$_GET["campaign_id"];}
+	elseif (isset($_POST["campaign_id"]))		{$campaign_id=$_POST["campaign_id"];}
+if (isset($_GET["channel"]))				{$channel=$_GET["channel"];}
+	elseif (isset($_POST["channel"]))		{$channel=$_POST["channel"];}
+if (isset($_GET["channel_group"]))				{$channel_group=$_GET["channel_group"];}
+	elseif (isset($_POST["channel_group"]))		{$channel_group=$_POST["channel_group"];}
+if (isset($_GET["city"]))				{$city=$_GET["city"];}
+	elseif (isset($_POST["city"]))		{$city=$_POST["city"];}
+if (isset($_GET["comments"]))				{$comments=$_GET["comments"];}
+	elseif (isset($_POST["comments"]))		{$comments=$_POST["comments"];}
+if (isset($_GET["country_code"]))				{$country_code=$_GET["country_code"];}
+	elseif (isset($_POST["country_code"]))		{$country_code=$_POST["country_code"];}
+if (isset($_GET["customer_zap_channel"]))				{$customer_zap_channel=$_GET["customer_zap_channel"];}
+	elseif (isset($_POST["customer_zap_channel"]))		{$customer_zap_channel=$_POST["customer_zap_channel"];}
+if (isset($_GET["DB"]))				{$DB=$_GET["DB"];}
+	elseif (isset($_POST["DB"]))		{$DB=$_POST["DB"];}
+if (isset($_GET["dispo"]))				{$dispo=$_GET["dispo"];}
+	elseif (isset($_POST["dispo"]))		{$dispo=$_POST["dispo"];}
+if (isset($_GET["email"]))				{$email=$_GET["email"];}
+	elseif (isset($_POST["email"]))		{$email=$_POST["email"];}
+if (isset($_GET["end_call"]))				{$end_call=$_GET["end_call"];}
+	elseif (isset($_POST["end_call"]))		{$end_call=$_POST["end_call"];}
+if (isset($_GET["extension"]))				{$extension=$_GET["extension"];}
+	elseif (isset($_POST["extension"]))		{$extension=$_POST["extension"];}
+if (isset($_GET["first_name"]))				{$first_name=$_GET["first_name"];}
+	elseif (isset($_POST["first_name"]))		{$first_name=$_POST["first_name"];}
+if (isset($_GET["group"]))				{$group=$_GET["group"];}
+	elseif (isset($_POST["group"]))		{$group=$_POST["group"];}
+if (isset($_GET["last_name"]))				{$last_name=$_GET["last_name"];}
+	elseif (isset($_POST["last_name"]))		{$last_name=$_POST["last_name"];}
+if (isset($_GET["lead_id"]))				{$lead_id=$_GET["lead_id"];}
+	elseif (isset($_POST["lead_id"]))		{$lead_id=$_POST["lead_id"];}
+if (isset($_GET["list_id"]))				{$list_id=$_GET["list_id"];}
+	elseif (isset($_POST["list_id"]))		{$list_id=$_POST["list_id"];}
+if (isset($_GET["parked_time"]))				{$parked_time=$_GET["parked_time"];}
+	elseif (isset($_POST["parked_time"]))		{$parked_time=$_POST["parked_time"];}
+if (isset($_GET["pass"]))				{$pass=$_GET["pass"];}
+	elseif (isset($_POST["pass"]))		{$pass=$_POST["pass"];}
+if (isset($_GET["phone_code"]))				{$phone_code=$_GET["phone_code"];}
+	elseif (isset($_POST["phone_code"]))		{$phone_code=$_POST["phone_code"];}
+if (isset($_GET["phone_number"]))				{$phone_number=$_GET["phone_number"];}
+	elseif (isset($_POST["phone_number"]))		{$phone_number=$_POST["phone_number"];}
+if (isset($_GET["phone"]))				{$phone=$_GET["phone"];}
+	elseif (isset($_POST["phone"]))		{$phone=$_POST["phone"];}
+if (isset($_GET["postal_code"]))				{$postal_code=$_GET["postal_code"];}
+	elseif (isset($_POST["postal_code"]))		{$postal_code=$_POST["postal_code"];}
+if (isset($_GET["province"]))				{$province=$_GET["province"];}
+	elseif (isset($_POST["province"]))		{$province=$_POST["province"];}
+if (isset($_GET["security"]))				{$security=$_GET["security"];}
+	elseif (isset($_POST["security"]))		{$security=$_POST["security"];}
+if (isset($_GET["server_ip"]))				{$server_ip=$_GET["server_ip"];}
+	elseif (isset($_POST["server_ip"]))		{$server_ip=$_POST["server_ip"];}
+if (isset($_GET["server_ip"]))				{$server_ip=$_GET["server_ip"];}
+	elseif (isset($_POST["server_ip"]))		{$server_ip=$_POST["server_ip"];}
+if (isset($_GET["session_id"]))				{$session_id=$_GET["session_id"];}
+	elseif (isset($_POST["session_id"]))		{$session_id=$_POST["session_id"];}
+if (isset($_GET["state"]))				{$state=$_GET["state"];}
+	elseif (isset($_POST["state"]))		{$state=$_POST["state"];}
+if (isset($_GET["status"]))				{$status=$_GET["status"];}
+	elseif (isset($_POST["status"]))		{$status=$_POST["status"];}
+if (isset($_GET["tsr"]))				{$tsr=$_GET["tsr"];}
+	elseif (isset($_POST["tsr"]))		{$tsr=$_POST["tsr"];}
+if (isset($_GET["user"]))				{$user=$_GET["user"];}
+	elseif (isset($_POST["user"]))		{$user=$_POST["user"];}
+if (isset($_GET["vendor_id"]))				{$vendor_id=$_GET["vendor_id"];}
+	elseif (isset($_POST["vendor_id"]))		{$vendor_id=$_POST["vendor_id"];}
+if (isset($_GET["submit"]))				{$submit=$_GET["submit"];}
+	elseif (isset($_POST["submit"]))		{$submit=$_POST["submit"];}
+if (isset($_GET["SUBMIT"]))				{$SUBMIT=$_GET["SUBMIT"];}
+	elseif (isset($_POST["SUBMIT"]))		{$SUBMIT=$_POST["SUBMIT"];}
+
+$PHP_AUTH_USER = ereg_replace("[^0-9a-zA-Z]","",$PHP_AUTH_USER);
+$PHP_AUTH_PW = ereg_replace("[^0-9a-zA-Z]","",$PHP_AUTH_PW);
+
+#$DB = '1';	# DEBUG override
+$US = '_';
+$STARTtime = date("U");
+$TODAY = date("Y-m-d");
+$NOW_TIME = date("Y-m-d H:i:s");
+$REC_TIME = date("Ymd-His");
+$FILE_datetime = $STARTtime;
+$parked_time = $STARTtime;
+
+# $ext_context = 'default'; defined in dbconnect file
+
+	$stmt="SELECT count(*) from vicidial_users where user='$user' and pass='$pass' and user_level > 0;";
+		if ($DB) {echo "$stmt\n";}
+	$rslt=mysql_query($stmt, $link);
+	$row=mysql_fetch_row($rslt);
+	$auth=$row[0];
+
+$fp = fopen ("./project_auth_entries.txt", "a");
+$date = date("r");
+$ip = getenv("REMOTE_ADDR");
+$browser = getenv("HTTP_USER_AGENT");
+
+  if( (strlen($user)<2) or (strlen($pass)<2) or (!$auth))
+	{
+    Header("WWW-Authenticate: Basic realm=\"VICIDIAL-CLOSER\"");
+    Header("HTTP/1.0 401 Unauthorized");
+    echo "Invalid Username/Password: |$user|$pass|\n";
+    exit;
+	}
+  else
+	{
+
+	if($auth>0)
+		{
+		$office_no=strtoupper($user);
+		$password=strtoupper($pass);
+			$stmt="SELECT full_name from vicidial_users where user='$user' and pass='$pass'";
+			if ($DB) {echo "$stmt\n";}
+			$rslt=mysql_query($stmt, $link);
+			$row=mysql_fetch_row($rslt);
+			$LOGfullname=$row[0];
+			$fullname = $row[0];
+		fwrite ($fp, "VD_CLOSER|GOOD|$date|$user|$pass|$ip|$browser|$LOGfullname|\n");
+		fclose($fp);
+		
+		if ( (strlen($customer_zap_channel)>2) and (eregi('zap',$customer_zap_channel)) )
+			{
+			echo "\n<!-- zap channel: $customer_zap_channel -->\n";
+			echo "\n<!-- session_id: $session_id -->\n";
+
+			}
+		else
+			{
+			echo "Bad channel: $customer_zap_channel\n";
+			echo "Make sure the Zap channel is live and try again\n";
+			exit;
+			}
+
+		}
+	else
+		{
+		fwrite ($fp, "VD_CLOSER|FAIL|$date|$user|$pass|$ip|$browser|\n");
+		fclose($fp);
+		}
+	}
+
+echo "<html>\n";
+echo "<head>\n";
+echo "<title>VICIDIAL FRONTER-CLOSER: Popup</title>\n";
+echo "<META HTTP-EQUIV=\"Content-Type\" CONTENT=\"text/html; charset=utf-8\">\n";
+
+if (eregi('CL_UNIV',$channel_group))
+	{
+	?>
+	<script language="Javascript1.2">
+	var btn_name="search";
+	if (document.layers) {
+		document.captureEvents(Event.KEYPRESS);
+		document.onkeypress = function (evt) {
+			if (evt.target.constructor == Input) {
+				if (evt.target.name == 'lead_id' || evt.target.name == 'phone' || evt.target.name == 'confirmation_id') {
+					return ((evt.which >= '0'.charCodeAt() && evt.which <= '9'.charCodeAt()));
+				} 
+			}
+		}
+	}
+	function CheckForm() {
+		if (btn_name=="update") {
+			if (document.forms[0].phone.value.length!=10) {
+				alert("The phone number you entered does not have 10 digits.\n\nIt has "+document.forms[0].phone.value.length+" - please correct it and try again.");
+				return false;
+			} else if (document.forms[0].confirmation_id.value.length<=5) {
+				alert("The confirmation ID is either missing or not enough characters in length.\n\nPlease correct it and try again.");
+				return false;
+			} else {
+				return true;
+			}
+		}
+	}
+	</script>
+	<?
+	}
+else 
+	{
+	echo "<script language=\"Javascript1.2\">\n";
+	echo "function WaitFirefix() {setTimeout(document.forms[0].search_phone.focus(), 1000)}\n";
+	echo "</script>\n";
+	}
+?>
+</head>
+<BODY BGCOLOR=white marginheight=0 marginwidth=0 leftmargin=0 topmargin=0 onLoad="document.forms[0].search_phone.focus(); setTimeout('document.forms[0].search_phone.focus()', 1000); self.focus()">
+<CENTER><FONT FACE="Courier" COLOR=BLACK SIZE=3>
+
+<? 
+
+$stmt="SELECT count(*) from live_channels where server_ip='$server_ip' and channel='$customer_zap_channel'";
+$rslt=mysql_query($stmt, $link);
+if ($DB) {echo "$stmt\n";}
+$row=mysql_fetch_row($rslt);
+$parked_count = $row[0];
+
+if ($parked_count > 0)
+{
+
+#	$stmt="DELETE from parked_channels where server_ip='$server_ip' and parked_time='$parked_time' and channel='$channel' LIMIT 1";
+#	if ($DB) {echo "|$stmt|\n";}
+#	$rslt=mysql_query($stmt, $link);
+
+	$DTqueryCID = "RZ$FILE_datetime$user";
+
+	### insert a NEW record to the vicidial_manager table to be processed
+
+	$channel = $customer_zap_channel;
+	$channel = eregi_replace('Zap/', "", $channel);
+	$SIPexten = eregi_replace('SIP/', "", $SIPexten);
+	$filename = "$REC_TIME$US$SIPexten";
+
+#	$stmt="INSERT INTO vicidial_manager values('','','$NOW_TIME','NEW','N','$server_ip','','Monitor','$DTqueryCID','Channel: Zap/$channel','File: $filename','Callerid: $DTqueryCID','','','','','','','')";
+#	if ($DB) {echo "|$stmt|\n";}
+#	$rslt=mysql_query($stmt, $link);
+
+	# Local/78600098@demo-6617,2
+
+	$stmt = "INSERT INTO vicidial_manager values('','','$SQLdate','NEW','N','" . mysql_real_escape_string($server_ip) . "','','Originate','$DTqueryCID','Channel: $local_DEF$conf_silent_prefix" . mysql_real_escape_string($session_id) . "$local_AMP$ext_context','Context: $ext_context','Exten: $recording_exten','Priority: 1','Callerid: " . mysql_real_escape_string($filename) . "','','','','','')";
+	if ($DB) {echo "|$stmt|\n";}
+	$rslt=mysql_query($stmt, $link);
+
+	$stmt = "INSERT INTO recording_log (channel,server_ip,extension,start_time,start_epoch,filename) values('Zap/" . mysql_real_escape_string($channel) . "','" . mysql_real_escape_string($server_ip) . "','SIP/" . mysql_real_escape_string($SIPexten) . "','$NOW_TIME','$STARTtime','" . mysql_real_escape_string($filename) . "')";
+	if ($DB) {echo "|$stmt|\n";}
+	$rslt=mysql_query($stmt, $link);
+
+	$stmt="SELECT recording_id FROM recording_log where filename='" . mysql_real_escape_string($filename) . "'";
+	$rslt=mysql_query($stmt, $link);
+	if ($DB) {echo "$stmt\n";}
+	$row=mysql_fetch_row($rslt);
+	$recording_id = $row[0];
+
+	echo "Recording command sent for channel $channel - $filename - $recording_id &nbsp; &nbsp; &nbsp; $NOW_TIME\n<BR><BR>\n";
+
+	$stmt="SELECT full_name from vicidial_users where user='" . mysql_real_escape_string($user) . "'";
+	$rslt=mysql_query($stmt, $link);
+	if ($DB) {echo "$stmt\n";}
+	$row=mysql_fetch_row($rslt);
+	$full_name = $row[0];
+
+	echo "Call Referred by: $user - $full_name\n<BR><BR>\n";
+
+   $url = "http://10.10.99.2/vicidial/closer_dispo.php?lead_id=$lead_id&channel=$channel&server_ip=$server_ip&extension=$SIPexten&call_began=$STARTtime&parked_time=$parked_time&DB=$DB";
+
+	echo "<a href=\"$url\">View Customer Info and Disposition Call</a>\n<BR><BR>\n";
+
+
+
+#	$stmt="UPDATE park_log set grab_time='$NOW_TIME',status='TALKING',extension='$extension',user='$user' where parked_time='$parked_time' and server_ip='$server_ip' and  channel='$channel'";
+#	if ($DB) {echo "|$stmt|\n";}
+#		$fp = fopen ("./closer_SQL_updates.txt", "a");
+#		fwrite ($fp, "$date|$user|$stmt|\n");
+#		fclose($fp);
+#	$rslt=mysql_query($stmt, $link);
+
+###########################################################################################
+####### HERE IS WHERE YOU DEFINE DIFFERENT CONTENTS DEPENDING UPON THE CHANNEL_GROUP PREFIX 
+###########################################################################################
+if (eregi('CL_TEST',$channel_group))
+	{
+	echo "GALLERIA TEST CLOSER GROUP: $channel_group\n";
+
+	$stmt="SELECT user,phone_number from vicidial_list where lead_id='" . mysql_real_escape_string($parked_by) . "';";
+		if ($DB) {echo "$stmt\n";}
+	$rslt=mysql_query($stmt, $link);
+	$row=mysql_fetch_row($rslt);
+	$fronter=$row[0];
+	$search_phone=$row[1];
+
+
+	?>
+	<form action="http://10.10.10.196/vicidial/closer_lookup3.php" method="post">
+		<input type=hidden name="fronter" value="<?=$fronter ?>">
+		<input type=hidden name="closer" value="<?=$user ?>">
+		<input type=hidden name="group" value="<?=$channel_group ?>">
+		<input type=hidden name="recording_id" value="<?=$recording_id ?>">
+	<table border=0 cellspacing=5 cellpadding=3 align=center width=90%>
+	<tr>
+		<th colspan=2 bgcolor='#666666'><font class='standard_bold' color='white'>COF MW Customer Search</font></th>
+	</tr>
+	<tr bgcolor='#99FF99'>
+		<td align=right width="50%" nowrap><font class='standard_bold'>Phone number</font></td>
+		<td align=left width="50%" nowrap><input type=text size=10 maxlength=10 name="search_phone" value="<?=$search_phone ?>"></td>
+	</tr>
+	<tr>
+		<th colspan=2 bgcolor='#666666'><input type=submit name="submit_COF" value="SEARCH"></th>
+	</tr>
+	</table>
+	</form>
+	<BR><BR>
+	<?
+	}
+
+if ( (eregi('CL_MWCOF',$channel_group)) or (eregi('MWCOF',$group)) or (eregi('TESTCAMP',$group)))
+	{
+	echo "BUYERS EDGE INTERNAL CLOSER GROUP: $channel_group\n";
+
+	$stmt="SELECT user,phone_number from vicidial_list where lead_id='" . mysql_real_escape_string($parked_by) . "';";
+		if ($DB) {echo "$stmt\n";}
+	$rslt=mysql_query($stmt, $link);
+	$row=mysql_fetch_row($rslt);
+	$fronter=$row[0];
+	$search_phone=$row[1];
+
+
+	?>
+	<form action="http://10.10.99.2/vicidial/closer_lookup4.php" method="post">
+		<input type=hidden name="fronter" value="<?=$fronter ?>">
+		<input type=hidden name="closer" value="<?=$user ?>">
+		<input type=hidden name="group" value="<?=$channel_group ?>">
+		<input type=hidden name="recording_id" value="<?=$recording_id ?>">
+	<table border=0 cellspacing=5 cellpadding=3 align=center width=90%>
+	<tr>
+		<th colspan=2 bgcolor='#666666'><font class='standard_bold' color='white'>COF MW Customer Search</font></th>
+	</tr>
+	<tr bgcolor='#99FF99'>
+		<td align=right width="50%" nowrap><font class='standard_bold'>Phone number</font></td>
+		<td align=left width="50%" nowrap><input type=text size=10 maxlength=10 name="search_phone" value="<?=$search_phone ?>"></td>
+	</tr>
+	<tr>
+		<th colspan=2 bgcolor='#666666'><input type=submit name="submit_COF" value="SEARCH"></th>
+	</tr>
+	</table>
+	</form>
+	<BR><BR>
+	<?
+	}
+
+
+
+if (eregi('CL_GAL',$channel_group))
+	{
+	echo "GALLERIA CLOSER GROUP: $channel_group\n";
+	$group_color='#CCCCCC';
+
+	if (eregi('CL_GALLERIA',$channel_group))
+		{
+		echo "<br><font color=green size=3><b>-- INTERNAL CALL GALLERIA FRONT --</b></font><br>\n";
+		$group_color='#99FF99';
+		}
+	if (eregi('CL_GALLER2',$channel_group))
+		{
+		echo "<br><font color=red size=3><b>-- TouchAsia CALL Simple Escapes FRONT --</b></font><br>\n";
+		$group_color='#FF9999';
+		}
+	if (eregi('CL_GALLER3',$channel_group))
+		{
+		echo "<br><font color=red size=3><b>-- DebitSupplies CALL Simple Escapes FRONT --</b></font><br>\n";
+		$group_color='#FF9999';
+		}
+	if (eregi('CL_GALLER4',$channel_group))
+		{
+		echo "<br><font color=red size=3><b>-- Vishnu CALL Simple Escapes FRONT --</b></font><br>\n";
+		$group_color='#FF9999';
+		}
+
+
+	?>
+	<form action="http://10.10.99.2/vicidial/closer_lookup4.php" method="post">
+		<input type=hidden name="fronter" value="<?=$parked_by ?>">
+		<input type=hidden name="closer" value="<?=$user ?>">
+		<input type=hidden name="group" value="<?=$channel_group ?>">
+		<input type=hidden name="recording_id" value="<?=$recording_id ?>">
+	<table border=0 cellspacing=5 cellpadding=3 align=center width=90%>
+	<tr>
+		<th colspan=2 bgcolor='#666666'><font class='standard_bold' color='white'>COF MW Customer Search</font></th>
+	</tr>
+	<tr bgcolor="<?=$group_color ?>">
+		<td align=right width="50%" nowrap><font class='standard_bold'>Phone number</font></td>
+		<td align=left width="50%" nowrap><input type=text size=10 maxlength=10 name="search_phone" value="<?=$phone ?>"></td>
+	</tr>
+	<tr>
+		<th colspan=2 bgcolor='#666666'><input type=submit name="submit_COF" value="SEARCH"></th>
+	</tr>
+	</table>
+	</form>
+	<BR><BR>
+	
+<!----
+	<form action="http://10.10.10.196/vicidial/closer_lookup3.php" method="post">
+		<input type=hidden name="fronter" value="<?=$parked_by ?>">
+		<input type=hidden name="closer" value="<?=$user ?>">
+	<table border=0 cellspacing=5 cellpadding=3 align=center width=90%>
+	<tr>
+		<th colspan=2 bgcolor='#666666'><font class='standard_bold' color='white'>NEW COF BlueGreen Customer Search</font></th>
+	</tr>
+	<tr bgcolor='#CCCCCC'>
+		<td align=right width="50%" nowrap><font class='standard_bold'>Phone number</font></td>
+		<td align=left width="50%" nowrap><input type=text size=10 maxlength=10 name="search_phone" value="<?=$phone ?>"></td>
+	</tr>
+	<tr>
+		<th colspan=2 bgcolor='#666666'><input type=submit name="submit_COF" value="SEARCH"></th>
+	</tr>
+	</table>
+	</form>
+	<BR><BR>
+---->
+
+	<?
+	}
+
+
+if (eregi('CL_UNIV',$channel_group))
+	{
+	echo "UNIVERSAL CLOSER GROUP: $channel_group\n";
+
+
+	?>
+
+	<form action="uk_mail_lookup.php" method="post" onSubmit="return CheckForm()">
+		<input type=hidden name="fronter" value="<?=$parked_by ?>">
+		<input type=hidden name="closer" value="<?=$user ?>">
+		<input type=hidden name="group" value="<?=$channel_group ?>">
+		<input type=hidden name="recording_id" value="<?=$recording_id ?>">
+	<table border=0 width=80% cellpadding=5 cellspacing=0 align=center>
+	<tr>
+			<th colspan=2 bgcolor='#CCCCCC'><font class='standard_bold'>New Search</font></th>
+	</tr>
+
+	<tr bgcolor='#CCCCCC'>
+			<td align=right width="50%" nowrap><font class='standard_bold'>Reservation Number:</font></td>
+			<td align=left width="50%" nowrap><input type=text size=10 maxlength=10
+	name="reservation_no" value="" ONKEYPRESS="var keyCode = event.which ? event.which : event.keyCode; if (keyCode!=8 && keyCode!=9 && keyCode!=37 && keyCode!=39) return ((keyCode >= '0'.charCodeAt() && keyCode <= '9'.charCodeAt()))"></td>
+	</tr>
+	<tr bgcolor='#CCCCCC'><td align=right width='50%' nowrap><font class='standard_bold'>Confirmation #:</font></td>
+	<td align=left width='50%' nowrap><input type=text name='confirmation_no' size=10 maxlength=20 value=''></td></tr>
+	<tr bgcolor='#CCCCCC'>
+			<td align=right width="50%" nowrap><font class='standard_bold'>Phone #:</font></td>
+			<td align=left width="50%" nowrap><input type=text size=10 maxlength=10
+	name="phone" value="" ONKEYPRESS="var keyCode = event.which ? event.which : event.keyCode; if (keyCode!=8 && keyCode!=9 && keyCode!=37 && keyCode!=39) return ((keyCode >= '0'.charCodeAt() && keyCode <= '9'.charCodeAt()))"></td>
+
+	</tr><tr>
+		<th colspan=2 bgcolor='#CCCCCC'><input type=submit name="submit_COF" value="SEARCH" onClick="javascript:btn_name='search'"><br><br></th>
+	</tr>
+	<tr>
+		<th colspan=2 bgcolor='#666666'><font class='standard_bold'><a href='closer_popup.php'>Back</a></font></th>
+	</tr>
+	</table>
+
+	</form>
+
+
+	<?
+
+	}
+
+###########################################################################################
+####### END CUSTOM CONTENTS 
+###########################################################################################
+
+
+#	echo "<a href=\"#\">Close this window</a>\n<BR><BR>\n";
+}
+else
+{
+	echo "Record command FAILED for channel $channel &nbsp; &nbsp; &nbsp; $NOW_TIME\n<BR><BR>\n";
+	echo "Please go back and try again\n<BR><BR>\n";
+#	echo "<form><input type=button value=\"Close This Window\" onClick=\"javascript:window.close();\"></form>\n";
+}
+
+
+
+$ENDtime = date("U");
+
+$RUNtime = ($ENDtime - $STARTtime);
+
+echo "\n\n\n<br><br><br>\n\n";
+
+
+echo "<font size=0>\n\n\n<br><br><br>\nscript runtime: $RUNtime seconds</font>";
+
+
+?>
+
+
+</body>
+</html>
+
+<?
+	
+exit; 
+
+
+
+?>
+
+
+
+
+
diff --git a/www/vicidial/closer-fronter_popup2.php b/www/vicidial/closer-fronter_popup2.php
new file mode 100644
index 00000000..2ecd56d1
--- /dev/null
+++ b/www/vicidial/closer-fronter_popup2.php
@@ -0,0 +1,430 @@
+<?
+### closer-fronter_popup2.php
+### 
+### Copyright (C) 2006  Matt Florell <vicidial@gmail.com>    LICENSE: GPLv2
+###
+# this is the closer popup of a specific call that starts recording the call and allows you to go and fetch info on that caller in the local CRM system.
+# CHANGES
+#
+# 60620-1025 - Added variable filtering to eliminate SQL injection attack threat
+#
+
+require("dbconnect.php");
+
+$PHP_AUTH_USER=$_SERVER['PHP_AUTH_USER'];
+$PHP_AUTH_PW=$_SERVER['PHP_AUTH_PW'];
+$PHP_SELF=$_SERVER['PHP_SELF'];
+if (isset($_GET["address1"]))				{$address1=$_GET["address1"];}
+	elseif (isset($_POST["address1"]))		{$address1=$_POST["address1"];}
+if (isset($_GET["address2"]))				{$address2=$_GET["address2"];}
+	elseif (isset($_POST["address2"]))		{$address2=$_POST["address2"];}
+if (isset($_GET["address3"]))				{$address3=$_GET["address3"];}
+	elseif (isset($_POST["address3"]))		{$address3=$_POST["address3"];}
+if (isset($_GET["alt_phone"]))				{$alt_phone=$_GET["alt_phone"];}
+	elseif (isset($_POST["alt_phone"]))		{$alt_phone=$_POST["alt_phone"];}
+if (isset($_GET["call_began"]))				{$call_began=$_GET["call_began"];}
+	elseif (isset($_POST["call_began"]))		{$call_began=$_POST["call_began"];}
+if (isset($_GET["campaign_id"]))				{$campaign_id=$_GET["campaign_id"];}
+	elseif (isset($_POST["campaign_id"]))		{$campaign_id=$_POST["campaign_id"];}
+if (isset($_GET["channel"]))				{$channel=$_GET["channel"];}
+	elseif (isset($_POST["channel"]))		{$channel=$_POST["channel"];}
+if (isset($_GET["channel_group"]))				{$channel_group=$_GET["channel_group"];}
+	elseif (isset($_POST["channel_group"]))		{$channel_group=$_POST["channel_group"];}
+if (isset($_GET["city"]))				{$city=$_GET["city"];}
+	elseif (isset($_POST["city"]))		{$city=$_POST["city"];}
+if (isset($_GET["comments"]))				{$comments=$_GET["comments"];}
+	elseif (isset($_POST["comments"]))		{$comments=$_POST["comments"];}
+if (isset($_GET["country_code"]))				{$country_code=$_GET["country_code"];}
+	elseif (isset($_POST["country_code"]))		{$country_code=$_POST["country_code"];}
+if (isset($_GET["customer_zap_channel"]))				{$customer_zap_channel=$_GET["customer_zap_channel"];}
+	elseif (isset($_POST["customer_zap_channel"]))		{$customer_zap_channel=$_POST["customer_zap_channel"];}
+if (isset($_GET["DB"]))				{$DB=$_GET["DB"];}
+	elseif (isset($_POST["DB"]))		{$DB=$_POST["DB"];}
+if (isset($_GET["dispo"]))				{$dispo=$_GET["dispo"];}
+	elseif (isset($_POST["dispo"]))		{$dispo=$_POST["dispo"];}
+if (isset($_GET["email"]))				{$email=$_GET["email"];}
+	elseif (isset($_POST["email"]))		{$email=$_POST["email"];}
+if (isset($_GET["end_call"]))				{$end_call=$_GET["end_call"];}
+	elseif (isset($_POST["end_call"]))		{$end_call=$_POST["end_call"];}
+if (isset($_GET["extension"]))				{$extension=$_GET["extension"];}
+	elseif (isset($_POST["extension"]))		{$extension=$_POST["extension"];}
+if (isset($_GET["first_name"]))				{$first_name=$_GET["first_name"];}
+	elseif (isset($_POST["first_name"]))		{$first_name=$_POST["first_name"];}
+if (isset($_GET["group"]))				{$group=$_GET["group"];}
+	elseif (isset($_POST["group"]))		{$group=$_POST["group"];}
+if (isset($_GET["last_name"]))				{$last_name=$_GET["last_name"];}
+	elseif (isset($_POST["last_name"]))		{$last_name=$_POST["last_name"];}
+if (isset($_GET["lead_id"]))				{$lead_id=$_GET["lead_id"];}
+	elseif (isset($_POST["lead_id"]))		{$lead_id=$_POST["lead_id"];}
+if (isset($_GET["list_id"]))				{$list_id=$_GET["list_id"];}
+	elseif (isset($_POST["list_id"]))		{$list_id=$_POST["list_id"];}
+if (isset($_GET["parked_time"]))				{$parked_time=$_GET["parked_time"];}
+	elseif (isset($_POST["parked_time"]))		{$parked_time=$_POST["parked_time"];}
+if (isset($_GET["pass"]))				{$pass=$_GET["pass"];}
+	elseif (isset($_POST["pass"]))		{$pass=$_POST["pass"];}
+if (isset($_GET["phone_code"]))				{$phone_code=$_GET["phone_code"];}
+	elseif (isset($_POST["phone_code"]))		{$phone_code=$_POST["phone_code"];}
+if (isset($_GET["phone_number"]))				{$phone_number=$_GET["phone_number"];}
+	elseif (isset($_POST["phone_number"]))		{$phone_number=$_POST["phone_number"];}
+if (isset($_GET["phone"]))				{$phone=$_GET["phone"];}
+	elseif (isset($_POST["phone"]))		{$phone=$_POST["phone"];}
+if (isset($_GET["postal_code"]))				{$postal_code=$_GET["postal_code"];}
+	elseif (isset($_POST["postal_code"]))		{$postal_code=$_POST["postal_code"];}
+if (isset($_GET["province"]))				{$province=$_GET["province"];}
+	elseif (isset($_POST["province"]))		{$province=$_POST["province"];}
+if (isset($_GET["security"]))				{$security=$_GET["security"];}
+	elseif (isset($_POST["security"]))		{$security=$_POST["security"];}
+if (isset($_GET["server_ip"]))				{$server_ip=$_GET["server_ip"];}
+	elseif (isset($_POST["server_ip"]))		{$server_ip=$_POST["server_ip"];}
+if (isset($_GET["server_ip"]))				{$server_ip=$_GET["server_ip"];}
+	elseif (isset($_POST["server_ip"]))		{$server_ip=$_POST["server_ip"];}
+if (isset($_GET["session_id"]))				{$session_id=$_GET["session_id"];}
+	elseif (isset($_POST["session_id"]))		{$session_id=$_POST["session_id"];}
+if (isset($_GET["state"]))				{$state=$_GET["state"];}
+	elseif (isset($_POST["state"]))		{$state=$_POST["state"];}
+if (isset($_GET["status"]))				{$status=$_GET["status"];}
+	elseif (isset($_POST["status"]))		{$status=$_POST["status"];}
+if (isset($_GET["tsr"]))				{$tsr=$_GET["tsr"];}
+	elseif (isset($_POST["tsr"]))		{$tsr=$_POST["tsr"];}
+if (isset($_GET["user"]))				{$user=$_GET["user"];}
+	elseif (isset($_POST["user"]))		{$user=$_POST["user"];}
+if (isset($_GET["vendor_id"]))				{$vendor_id=$_GET["vendor_id"];}
+	elseif (isset($_POST["vendor_id"]))		{$vendor_id=$_POST["vendor_id"];}
+if (isset($_GET["submit"]))				{$submit=$_GET["submit"];}
+	elseif (isset($_POST["submit"]))		{$submit=$_POST["submit"];}
+if (isset($_GET["SUBMIT"]))				{$SUBMIT=$_GET["SUBMIT"];}
+	elseif (isset($_POST["SUBMIT"]))		{$SUBMIT=$_POST["SUBMIT"];}
+
+$PHP_AUTH_USER = ereg_replace("[^0-9a-zA-Z]","",$PHP_AUTH_USER);
+$PHP_AUTH_PW = ereg_replace("[^0-9a-zA-Z]","",$PHP_AUTH_PW);
+
+#$DB = '1';	# DEBUG override
+$US = '_';
+$STARTtime = date("U");
+$TODAY = date("Y-m-d");
+$NOW_TIME = date("Y-m-d H:i:s");
+$REC_TIME = date("Ymd-His");
+$FILE_datetime = $STARTtime;
+$parked_time = $STARTtime;
+
+# $ext_context = 'default'; defined in dbconnect file
+if (!isset($begin_date)) {$begin_date = $TODAY;}
+if (!isset($end_date)) {$end_date = $TODAY;}
+
+	$stmt="SELECT count(*) from vicidial_users where user='$user' and pass='$pass' and user_level > 0;";
+		if ($DB) {echo "$stmt\n";}
+	$rslt=mysql_query($stmt, $link);
+	$row=mysql_fetch_row($rslt);
+	$auth=$row[0];
+
+	if (!$auth)
+	{
+	 if ( (strlen($PHP_AUTH_USER)>1) and ( (eregi("tsr",$PHP_AUTH_PW)) or (eregi("sales",$PHP_AUTH_PW)) ) )
+		{
+		 $auth=1;
+		 $user = $PHP_AUTH_USER;
+		 $pass = $PHP_AUTH_PW;
+		 }
+	}
+
+$fp = fopen ("./project_auth_entries.txt", "a");
+$date = date("r");
+$ip = getenv("REMOTE_ADDR");
+$browser = getenv("HTTP_USER_AGENT");
+
+  if( (strlen($user)<2) or (strlen($pass)<2) or (!$auth))
+	{
+    Header("WWW-Authenticate: Basic realm=\"VICIDIAL-CLOSER - $user - $PHP_AUTH_USER\"");
+    Header("HTTP/1.0 401 Unauthorized");
+    echo "Invalid Username/Password: |$user|$pass|\n";
+    exit;
+	}
+  else
+	{
+
+	if($auth>0)
+		{
+		$office_no=strtoupper($user);
+		$password=strtoupper($pass);
+			$stmt="SELECT full_name from vicidial_users where user='$user' and pass='$pass'";
+			if ($DB) {echo "$stmt\n";}
+			$rslt=mysql_query($stmt, $link);
+			$row=mysql_fetch_row($rslt);
+			$LOGfullname=$row[0];
+			$fullname = $row[0];
+		fwrite ($fp, "VD_CLOSER|GOOD|$date|$user|$pass|$ip|$browser|$LOGfullname|\n");
+		fclose($fp);
+		
+		if ( (strlen($customer_zap_channel)>2) and ( (eregi('zap',$customer_zap_channel)) or (eregi('iax',$customer_zap_channel)) ) )
+			{
+			echo "\n<!-- zap channel: $customer_zap_channel -->\n";
+			echo "<!-- session_id:  $session_id -->\n";
+			echo "<!-- fronter:     $fronter    -->\n";
+			echo "<!-- user:        $user       -->\n";
+
+			}
+		else
+			{
+			echo "Bad channel: $customer_zap_channel\n";
+			echo "Make sure the Zap channel is live and try again\n";
+			exit;
+			}
+
+		}
+	else
+		{
+		fwrite ($fp, "VD_CLOSER|FAIL|$date|$user|$pass|$ip|$browser|\n");
+		fclose($fp);
+		}
+	}
+
+echo "<html>\n";
+echo "<head>\n";
+echo "<title>VICIDIAL FRONTER-CLOSER: Popup</title>\n";
+echo "<META HTTP-EQUIV=\"Content-Type\" CONTENT=\"text/html; charset=utf-8\">\n";
+
+if (eregi('CL_UNIV',$channel_group))
+	{
+	?>
+	<script language="Javascript1.2">
+	var btn_name="search";
+	if (document.layers) {
+		document.captureEvents(Event.KEYPRESS);
+		document.onkeypress = function (evt) {
+			if (evt.target.constructor == Input) {
+				if (evt.target.name == 'lead_id' || evt.target.name == 'phone' || evt.target.name == 'confirmation_id') {
+					return ((evt.which >= '0'.charCodeAt() && evt.which <= '9'.charCodeAt()));
+				} 
+			}
+		}
+	}
+	function CheckForm() {
+		if (btn_name=="update") {
+			if (document.forms[0].phone.value.length!=10) {
+				alert("The phone number you entered does not have 10 digits.\n\nIt has "+document.forms[0].phone.value.length+" - please correct it and try again.");
+				return false;
+			} else if (document.forms[0].confirmation_id.value.length<=5) {
+				alert("The confirmation ID is either missing or not enough characters in length.\n\nPlease correct it and try again.");
+				return false;
+			} else {
+				return true;
+			}
+		}
+	}
+	</script>
+	<?
+	}
+else 
+	{
+	echo "<script language=\"Javascript1.2\">\n";
+	echo "function WaitFirefix() {setTimeout(document.forms[0].search_phone.focus(), 1000)}\n";
+	echo "</script>\n";
+	}
+?>
+</head>
+<BODY BGCOLOR=white marginheight=0 marginwidth=0 leftmargin=0 topmargin=0 onLoad="document.forms[0].search_phone.focus(); setTimeout('document.forms[0].search_phone.focus()', 1000); self.focus()">
+<CENTER><FONT FACE="Courier" COLOR=BLACK SIZE=3>
+
+<? 
+
+$stmt="SELECT count(*) from live_channels where server_ip='" . mysql_real_escape_string($server_ip) . "' and channel='" . mysql_real_escape_string($customer_zap_channel) . "'";
+$rslt=mysql_query($stmt, $link);
+if ($DB) {echo "$stmt\n";}
+$row=mysql_fetch_row($rslt);
+$parked_count = $row[0];
+
+if ($parked_count > 0)
+{
+
+#	$stmt="DELETE from parked_channels where server_ip='$server_ip' and parked_time='$parked_time' and channel='$channel' LIMIT 1";
+#	if ($DB) {echo "|$stmt|\n";}
+#	$rslt=mysql_query($stmt, $link);
+
+	$DTqueryCID = "RZ$FILE_datetime$user";
+
+	### insert a NEW record to the vicidial_manager table to be processed
+
+	$channel = $customer_zap_channel;
+#	$channel = eregi_replace('Zap/', "", $channel);
+	$SIPexten = eregi_replace('SIP/', "", $SIPexten);
+	$filename = "$REC_TIME$US$SIPexten";
+
+#	$stmt="INSERT INTO vicidial_manager values('','','$NOW_TIME','NEW','N','$server_ip','','Monitor','$DTqueryCID','Channel: Zap/$channel','File: $filename','Callerid: $DTqueryCID','','','','','','','')";
+#	if ($DB) {echo "|$stmt|\n";}
+#	$rslt=mysql_query($stmt, $link);
+
+	# Local/78600098@demo-6617,2
+
+	$stmt = "INSERT INTO vicidial_manager values('','','$SQLdate','NEW','N','" . mysql_real_escape_string($server_ip) . "','','Originate','$DTqueryCID','Channel: $local_DEF$conf_silent_prefix" . mysql_real_escape_string($session_id) . "$local_AMP$ext_context','Context: $ext_context','Exten: $recording_exten','Priority: 1','Callerid: " . mysql_real_escape_string($filename) . "','','','','','')";
+	if ($DB) {echo "|$stmt|\n";}
+	$rslt=mysql_query($stmt, $link);
+
+	$stmt = "INSERT INTO recording_log (channel,server_ip,extension,start_time,start_epoch,filename) values('$channel','" . mysql_real_escape_string($server_ip) . "','SIP/" . mysql_real_escape_string($SIPexten) . "','$NOW_TIME','$STARTtime','" . mysql_real_escape_string($filename) . "')";
+	if ($DB) {echo "|$stmt|\n";}
+	$rslt=mysql_query($stmt, $link);
+
+	$stmt="SELECT recording_id FROM recording_log where filename='" . mysql_real_escape_string($filename) . "'";
+	$rslt=mysql_query($stmt, $link);
+	if ($DB) {echo "$stmt\n";}
+	$row=mysql_fetch_row($rslt);
+	$recording_id = $row[0];
+
+	echo "Recording command sent for channel $channel - $filename - $recording_id &nbsp; &nbsp; &nbsp; $NOW_TIME\n<BR><BR>\n";
+
+	$stmt="SELECT full_name from vicidial_users where user='" . mysql_real_escape_string($fronter) . "'";
+	$rslt=mysql_query($stmt, $link);
+	if ($DB) {echo "$stmt\n";}
+	$row=mysql_fetch_row($rslt);
+	$full_name = $row[0];
+
+	echo "Call Referred by: $fronter - $full_name\n<BR><BR>\n";
+
+   $url = "http://10.10.10.196/vicidial/closer_dispo.php?lead_id=$lead_id&channel=$channel&server_ip=$server_ip&extension=$SIPexten&call_began=$STARTtime&parked_time=$parked_time&DB=$DB";
+
+	echo "<a href=\"$url\">View Customer Info and Disposition Call</a>\n<BR><BR>\n";
+
+
+	$stmt="SELECT group_name,group_color from vicidial_inbound_groups where group_id='" . mysql_real_escape_string($channel_group) . "'";
+	$rslt=mysql_query($stmt, $link);
+	if ($DB) {echo "$stmt\n";}
+	$row=mysql_fetch_row($rslt);
+	$group_name = $row[0];
+	$group_color = $row[1];
+
+	echo "<br>\n";
+	echo "<table border=0 cellspacing=5 cellpadding=3 align=center width=90% bgcolor=\"$group_color\"><tr><td><b> $channel_group - $group_name </b></td></tr></table><br>\n\n";
+
+###########################################################################################
+####### HERE IS WHERE YOU DEFINE DIFFERENT CONTENTS DEPENDING UPON THE CHANNEL_GROUP PREFIX 
+###########################################################################################
+
+if (eregi('CL',$channel_group))
+	{
+	if (strlen($phone) > 9) {$search_phone = $phone;}
+	if ( (strlen($search_phone) < 10) or (strlen($fronter) < 1) )
+		{
+		echo "<!-- looking for fronter and search_phone: |$fronter|$search_phone| -->\n";
+		$stmt="SELECT user,phone_number from vicidial_list where lead_id='$parked_by';";
+			if ($DB) {echo "$stmt\n";}
+		$rslt=mysql_query($stmt, $link);
+		$row=mysql_fetch_row($rslt);
+		if (strlen($fronter) < 1) {$fronter=$row[0];}
+		if (strlen($search_phone) < 10) {$search_phone=$row[1];}
+		}
+
+	?>
+	<form action="http://10.10.10.196/vicidial/closer_lookup3.php" method="post">
+		<input type=hidden name="fronter" value="<?=$fronter ?>">
+		<input type=hidden name="closer" value="<?=$closer ?>">
+		<input type=hidden name="group" value="<?=$channel_group ?>">
+		<input type=hidden name="recording_id" value="<?=$recording_id ?>">
+	<table border=0 cellspacing=5 cellpadding=3 align=center width=90%>
+	<tr>
+		<th colspan=2 bgcolor='#666666'><font class='standard_bold' color='white'>COF MW Customer Search</font></th>
+	</tr>
+	<tr bgcolor="<?=$group_color ?>">
+		<td align=right width="50%" nowrap><font class='standard_bold'>Phone number</font></td>
+		<td align=left width="50%" nowrap><input type=text size=10 maxlength=10 name="search_phone" value="<?=$search_phone ?>"></td>
+	</tr>
+	<tr>
+		<th colspan=2 bgcolor='#666666'><input type=submit name="submit_COF" value="SEARCH"></th>
+	</tr>
+	</table>
+	</form>
+	<BR><BR>
+	<?
+	}
+
+
+
+
+
+
+if (eregi('UNIV',$channel_group))
+	{
+	echo "UNIVERSAL CLOSER GROUP: $channel_group\n";
+
+
+	?>
+
+	<form action="uk_mail_lookup.php" method="post" onSubmit="return CheckForm()">
+		<input type=hidden name="fronter" value="<?=$parked_by ?>">
+		<input type=hidden name="closer" value="<?=$user ?>">
+		<input type=hidden name="group" value="<?=$channel_group ?>">
+		<input type=hidden name="recording_id" value="<?=$recording_id ?>">
+	<table border=0 width=80% cellpadding=5 cellspacing=0 align=center>
+	<tr>
+			<th colspan=2 bgcolor='#CCCCCC'><font class='standard_bold'>New Search</font></th>
+	</tr>
+
+	<tr bgcolor='#CCCCCC'>
+			<td align=right width="50%" nowrap><font class='standard_bold'>Reservation Number:</font></td>
+			<td align=left width="50%" nowrap><input type=text size=10 maxlength=10
+	name="reservation_no" value="" ONKEYPRESS="var keyCode = event.which ? event.which : event.keyCode; if (keyCode!=8 && keyCode!=9 && keyCode!=37 && keyCode!=39) return ((keyCode >= '0'.charCodeAt() && keyCode <= '9'.charCodeAt()))"></td>
+	</tr>
+	<tr bgcolor='#CCCCCC'><td align=right width='50%' nowrap><font class='standard_bold'>Confirmation #:</font></td>
+	<td align=left width='50%' nowrap><input type=text name='confirmation_no' size=10 maxlength=20 value=''></td></tr>
+	<tr bgcolor='#CCCCCC'>
+			<td align=right width="50%" nowrap><font class='standard_bold'>Phone #:</font></td>
+			<td align=left width="50%" nowrap><input type=text size=10 maxlength=10
+	name="phone" value="" ONKEYPRESS="var keyCode = event.which ? event.which : event.keyCode; if (keyCode!=8 && keyCode!=9 && keyCode!=37 && keyCode!=39) return ((keyCode >= '0'.charCodeAt() && keyCode <= '9'.charCodeAt()))"></td>
+
+	</tr><tr>
+		<th colspan=2 bgcolor='#CCCCCC'><input type=submit name="submit_COF" value="SEARCH" onClick="javascript:btn_name='search'"><br><br></th>
+	</tr>
+	<tr>
+		<th colspan=2 bgcolor='#666666'><font class='standard_bold'><a href='closer_popup.php'>Back</a></font></th>
+	</tr>
+	</table>
+
+	</form>
+
+
+	<?
+
+	}
+
+###########################################################################################
+####### END CUSTOM CONTENTS 
+###########################################################################################
+
+
+#	echo "<a href=\"#\">Close this window</a>\n<BR><BR>\n";
+}
+else
+{
+	echo "Record command FAILED for channel $channel &nbsp; &nbsp; &nbsp; $NOW_TIME\n<BR><BR>\n";
+	echo "Please go back and try again\n<BR><BR>\n";
+#	echo "<form><input type=button value=\"Close This Window\" onClick=\"javascript:window.close();\"></form>\n";
+}
+
+
+
+$ENDtime = date("U");
+
+$RUNtime = ($ENDtime - $STARTtime);
+
+echo "\n\n\n<br><br><br>\n\n";
+
+
+echo "<font size=0>\n\n\n<br><br><br>\nscript runtime: $RUNtime seconds</font>";
+
+
+?>
+
+
+</body>
+</html>
+
+<?
+	
+exit; 
+
+
+
+?>
+
+
+
+
+
diff --git a/www/vicidial/closer.php b/www/vicidial/closer.php
new file mode 100644
index 00000000..59599edb
--- /dev/null
+++ b/www/vicidial/closer.php
@@ -0,0 +1,353 @@
+<?
+### closer.php
+### 
+### Copyright (C) 2006  Matt Florell <vicidial@gmail.com>    LICENSE: GPLv2
+###
+# the purpose of this script and webpage is to allow for remote or local users of the system to log in and grab phone calls that are coming inbound into the Asterisk server and being put in the parked_channels table while they hear a soundfile for a limited amount of time before being forwarded on to either a set extension or a voicemail box. This gives remote or local agents a way to grab calls without tying up their phone lines all day. The agent sees the refreshing screen of calls on park and when they want to take one they just click on it, and a small window opens that will allow them to grab the call and/or look up more information on the caller through the callerID that is given(if available)
+# CHANGES
+#
+# 60620-1032 - Added variable filtering to eliminate SQL injection attack threat
+#            - Added required user/pass to gain access to this page
+#
+
+require("dbconnect.php");
+
+$PHP_AUTH_USER=$_SERVER['PHP_AUTH_USER'];
+$PHP_AUTH_PW=$_SERVER['PHP_AUTH_PW'];
+$PHP_SELF=$_SERVER['PHP_SELF'];
+if (isset($_GET["group"]))				{$group=$_GET["group"];}
+	elseif (isset($_POST["group"]))		{$group=$_POST["group"];}
+if (isset($_GET["group_selected"]))				{$group_selected=$_GET["group_selected"];}
+	elseif (isset($_POST["group_selected"]))		{$group_selected=$_POST["group_selected"];}
+if (isset($_GET["dialplan_number"]))				{$dialplan_number=$_GET["dialplan_number"];}
+	elseif (isset($_POST["dialplan_number"]))		{$dialplan_number=$_POST["dialplan_number"];}
+if (isset($_GET["extension"]))				{$extension=$_GET["extension"];}
+	elseif (isset($_POST["extension"]))		{$extension=$_POST["extension"];}
+if (isset($_GET["groupselect"]))				{$groupselect=$_GET["groupselect"];}
+	elseif (isset($_POST["groupselect"]))		{$groupselect=$_POST["groupselect"];}
+if (isset($_GET["PHONE_LOGIN"]))				{$PHONE_LOGIN=$_GET["PHONE_LOGIN"];}
+	elseif (isset($_POST["PHONE_LOGIN"]))		{$PHONE_LOGIN=$_POST["PHONE_LOGIN"];}
+if (isset($_GET["server_ip"]))				{$server_ip=$_GET["server_ip"];}
+	elseif (isset($_POST["server_ip"]))		{$server_ip=$_POST["server_ip"];}
+if (isset($_GET["DB"]))				{$DB=$_GET["DB"];}
+	elseif (isset($_POST["DB"]))		{$DB=$_POST["DB"];}
+if (isset($_GET["user"]))				{$user=$_GET["user"];}
+	elseif (isset($_POST["user"]))		{$user=$_POST["user"];}
+if (isset($_GET["channel"]))				{$channel=$_GET["channel"];}
+	elseif (isset($_POST["channel"]))		{$channel=$_POST["channel"];}
+if (isset($_GET["parked_time"]))				{$parked_time=$_GET["parked_time"];}
+	elseif (isset($_POST["parked_time"]))		{$parked_time=$_POST["parked_time"];}
+if (isset($_GET["channel_group"]))				{$channel_group=$_GET["channel_group"];}
+	elseif (isset($_POST["channel_group"]))		{$channel_group=$_POST["channel_group"];}
+if (isset($_GET["debugvars"]))				{$debugvars=$_GET["debugvars"];}
+	elseif (isset($_POST["debugvars"]))		{$debugvars=$_POST["debugvars"];}
+if (isset($_GET["parked_by"]))				{$parked_by=$_GET["parked_by"];}
+	elseif (isset($_POST["parked_by"]))		{$parked_by=$_POST["parked_by"];}
+if (isset($_GET["submit"]))				{$submit=$_GET["submit"];}
+	elseif (isset($_POST["submit"]))		{$submit=$_POST["submit"];}
+if (isset($_GET["SUBMIT"]))				{$SUBMIT=$_GET["SUBMIT"];}
+	elseif (isset($_POST["SUBMIT"]))		{$SUBMIT=$_POST["SUBMIT"];}
+
+$PHP_AUTH_USER = ereg_replace("[^0-9a-zA-Z]","",$PHP_AUTH_USER);
+$PHP_AUTH_PW = ereg_replace("[^0-9a-zA-Z]","",$PHP_AUTH_PW);
+
+$STARTtime = date("U");
+$TODAY = date("Y-m-d");
+$NOW_TIME = date("Y-m-d H:i:s");
+$popup_page = './closer_popup.php';
+
+	$stmt="SELECT count(*) from vicidial_users where user='$PHP_AUTH_USER' and pass='$PHP_AUTH_PW' and user_level > 2;";
+	$rslt=mysql_query($stmt, $link);
+	$row=mysql_fetch_row($rslt);
+	$auth=$row[0];
+
+$fp = fopen ("./project_auth_entries.txt", "a");
+$date = date("r");
+$ip = getenv("REMOTE_ADDR");
+$browser = getenv("HTTP_USER_AGENT");
+
+  if( (strlen($PHP_AUTH_USER)<2) or (strlen($PHP_AUTH_PW)<2) or (!$auth))
+	{
+    Header("WWW-Authenticate: Basic realm=\"VICIDIAL-CLOSER\"");
+    Header("HTTP/1.0 401 Unauthorized");
+    echo "Invalid Username/Password: |$PHP_AUTH_USER|$PHP_AUTH_PW|\n";
+    exit;
+	}
+  else
+	{
+
+	if($auth>0)
+		{
+		$office_no=strtoupper($PHP_AUTH_USER);
+		$password=strtoupper($PHP_AUTH_PW);
+			$stmt="SELECT full_name from vicidial_users where user='$PHP_AUTH_USER' and pass='$PHP_AUTH_PW'";
+			if ($DB) {echo "$stmt\n";}
+			$rslt=mysql_query($stmt, $link);
+			$row=mysql_fetch_row($rslt);
+			$LOGfullname=$row[0];
+			$fullname = $row[0];
+		fwrite ($fp, "VD_CLOSER|GOOD|$date|$PHP_AUTH_USER|$PHP_AUTH_PW|$ip|$browser|$LOGfullname|\n");
+		fclose($fp);
+
+		}
+	else
+		{
+		fwrite ($fp, "VD_CLOSER|FAIL|$date|$PHP_AUTH_USER|$PHP_AUTH_PW|$ip|$browser|\n");
+		fclose($fp);
+		}
+	}
+
+
+$color_class[0] = 'green';
+$color_class[1] = 'red';
+$color_class[2] = 'blue';
+$color_class[3] = 'purple';
+$color_class[4] = 'orange';
+$color_class[5] = 'green';
+$color_class[6] = 'red';
+$color_class[7] = 'blue';
+$color_class[8] = 'purple';
+$color_class[9] = 'orange';
+?>
+
+<HTML>
+<HEAD>
+<STYLE type="text/css">
+<!--
+   A:link {color: yellow}
+   .green {color: white; background-color: green}
+   .red {color: white; background-color: red}
+   .blue {color: white; background-color: blue}
+   .purple {color: white; background-color: purple}
+   .orange {color: white; background-color: orange}
+-->
+ </STYLE>
+
+<TITLE>VICIDIAL CLOSER: Main</TITLE></HEAD>
+</HEAD>
+<BODY BGCOLOR=white marginheight=0 marginwidth=0 leftmargin=0 topmargin=0>
+<CENTER><FONT FACE="Courier" COLOR=BLACK SIZE=3>
+
+<? 
+$group_selected = count($groupselect);
+
+if (!$dialplan_number)
+{
+
+	if ($extension)
+	{
+	$stmt="SELECT count(*) from phones where extension='" . mysql_real_escape_string($extension) . "';";
+	$rslt=mysql_query($stmt, $link);
+	$row=mysql_fetch_row($rslt);
+	$ext_found=$row[0];
+		if ($ext_found > 0)
+		{
+		$stmt="SELECT dialplan_number,server_ip from phones where extension='" . mysql_real_escape_string($extension) . "';";
+		$rslt=mysql_query($stmt, $link);
+		$row=mysql_fetch_row($rslt);
+		$dialplan_number=$row[0];
+		$server_ip=$row[1];
+
+		if (!$group_selected)
+			{
+			$stmt="select distinct channel_group from park_log;";
+			$rslt=mysql_query($stmt, $link);
+			if ($DB) {echo "$stmt\n";}
+			$groups_to_print = mysql_num_rows($rslt);
+			$i=0;
+			while ($i < $groups_to_print)
+				{
+				$row=mysql_fetch_row($rslt);
+				$groups[$i] =$row[0];
+				$i++;
+				}
+			echo "<br>Please select the groups you want to pick calls up from: <form action=$PHP_SELF method=GET>\n";
+			echo "<table border=0><tr><td align=left>\n";
+			echo "<input type=hidden name=PHONE_LOGIN value=1>\n";
+			echo "<input type=hidden name=dialplan_number value=\"$dialplan_number\">\n";
+			echo "<input type=hidden name=extension value=\"$extension\">\n";
+			echo "<input type=hidden name=server_ip value=\"$server_ip\">\n";
+			echo "<input type=hidden name=DB value=\"$DB\">\n";
+			echo "Inbound Call Groups: <br>\n";
+				$o=0;
+				while ($groups_to_print > $o)
+				{
+					$group_form_print =		sprintf("%-20s", $groups[$o]);
+					echo "<input name=\"groupselect[]\" type=checkbox value=\"$groups[$o]\">$group_form_print <BR>\n";
+					$o++;
+				}
+			echo "</td></tr></table>\n";
+			echo "<input type=submit name=submit value=submit>\n";
+			echo "<BR><BR><BR>\n";
+			}
+		else
+			{
+			$o=0;
+			while($o < $group_selected)
+			{
+				$form_groups = "$form_groups&groupselect[$o]=$groupselect[$o]";
+				$o++;
+			}
+
+			$stmt="INSERT INTO vicidial_user_log values('','" . mysql_real_escape_string($user) . "','LOGIN','CLOSER','$NOW_TIME','$STARTtime');";
+			$rslt=mysql_query($stmt, $link);
+
+			echo "<META HTTP-EQUIV=\"Content-Type\" CONTENT=\"text/html; charset=utf-8\">\n";
+			echo"<META HTTP-EQUIV=Refresh CONTENT=\"3; URL=$PHP_SELF?dialplan_number=$dialplan_number&server_ip=$server_ip&extension=$extension&DB=$DB$form_groups\">\n";
+
+			echo "<font=green><b>extension found, forwarding you to closer page, please wait 3 seconds...</b></font>\n";
+			}
+
+		}
+		else
+		{
+		echo "<font=red><b>The extension you entered does not exist, please try again</b></font>\n";
+		echo "<br>Please enter your phone_ID: <form action=$PHP_SELF method=POST>\n";
+		echo "<input type=hidden name=PHONE_LOGIN value=1>\n";
+		echo "phone station ID: <input type=text name=extension size=10 maxlength=10 value=\"$extension\"> &nbsp; \n";
+		echo "<input type=submit name=submit value=submit>\n";
+		echo "<BR><BR><BR>\n";
+		}
+
+	}
+	else
+	{
+	echo "<br>Please enter your phone_ID: <form action=$PHP_SELF method=POST>\n";
+	echo "<input type=hidden name=PHONE_LOGIN value=1>\n";
+	echo "phone station ID: <input type=text name=extension size=10 maxlength=10> &nbsp; \n";
+	echo "<input type=submit name=submit value=submit>\n";
+	echo "<BR><BR><BR>\n";
+	}
+
+exit;
+
+}
+
+$o=0;
+while($o < $group_selected)
+{
+	$listen_groups = "$listen_groups &nbsp; &nbsp; $groupselect[$o]";
+	$form_groups = "$form_groups&groupselect[$o]=$groupselect[$o]";
+	$o++;
+}
+
+
+echo "<META HTTP-EQUIV=\"Content-Type\" CONTENT=\"text/html; charset=utf-8\">\n";
+echo"<META HTTP-EQUIV=Refresh CONTENT=\"5; URL=$PHP_SELF?dialplan_number=$dialplan_number&server_ip=$server_ip&extension=$extension&DB=$DB$form_groups\">\n";
+
+#CHANNEL    SERVER        CHANNEL_GROUP   EXTENSION    PARKED_BY            PARKED_TIME        
+#----------------------------------------------------------------------------------------------
+#Zap/73-1   10.10.11.11   IN_800_TPP_CS   TPPpark      7275338730           2004-04-22 12:41:00
+
+
+
+echo "$NOW_TIME &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; $PHP_AUTH_USER - $fullname -  CALLS SENT TO: $dialplan_number<BR><BR>\n";
+
+echo "Click on the channel below that you would like to have directed to your phone<BR>\n";
+
+echo "<PRE>\n";
+echo "CHANNEL    SERVER        CHANNEL_GROUP   EXTENSION    PARKED_BY            PARKED_TIME         \n";
+echo "---------------------------------------------------------------------------------------------- \n";
+
+
+
+
+
+$stmt="SELECT count(*) from parked_channels where server_ip='" . mysql_real_escape_string($server_ip) . "'";
+$rslt=mysql_query($stmt, $link);
+if ($DB) {echo "$stmt\n";}
+$row=mysql_fetch_row($rslt);
+$parked_count = $row[0];
+	if ($parked_count > 0)
+	{
+	$stmt="SELECT * from parked_channels where server_ip='" . mysql_real_escape_string($server_ip) . "' and channel_group LIKE \"CL_%\" order by channel_group,parked_time";
+	$rslt=mysql_query($stmt, $link);
+	if ($DB) {echo "$stmt\n";}
+	$parked_to_print = mysql_num_rows($rslt);
+	$i=0;
+	while ($i < $parked_to_print)
+		{
+		$row=mysql_fetch_row($rslt);
+		$channel =			sprintf("%-11s", $row[0]);
+		$server =			sprintf("%-14s", $row[1]);
+		$channel_group =	sprintf("%-16s", $row[2]);
+		$park_extension =	sprintf("%-13s", $row[3]);
+		$parked_by =		sprintf("%-21s", $row[4]);
+		$parked_time =		sprintf("%-19s", $row[5]);
+
+		$G='';   $EG='';
+		$o=0;
+		$with_color=0;
+		while($o < $group_selected)
+			{
+				if (eregi("$groupselect[$o]",$channel_group))
+					{
+					$G="<SPAN class=\"$color_class[$o]\"><B>"; $EG='</B></SPAN>';
+					$with_color++;
+					}
+				$o++;
+			}
+		if ($with_color)
+			{
+			if (eregi('CL_GAL',$row[2]))
+				{
+				echo "$G<A HREF=\"$popup_page?channel=$row[0]&server_ip=$server_ip&parked_time=$row[5]&dialplan_number=$dialplan_number&extension=$extension&channel_group=$row[2]&DB=$DB&debugvars=asdfuiywer786sdg786sfg7sdsgjhg352j3452hg45f2j3h4g5f2j3h4g5f2jhg4f5j3fg45jh23f5j4h23gf&parked_by=$row[4]&debugvars=asdfuiywer786sdg786sfg7sdsgjhg352j3452hg45f2j3h4g5f2j3h4g5f2jhg4f5j3fg45jh23f5j4h23gf\" target=\"_blank\">$channel</A>$server$channel_group$park_extension                     $parked_time $EG\n";
+				}
+			else
+				{
+				echo "$G<A HREF=\"$popup_page?channel=$row[0]&server_ip=$server_ip&parked_time=$row[5]&dialplan_number=$dialplan_number&extension=$extension&channel_group=$row[2]&DB=$DB&debugvars=asdfuiywer786sdg786sfg7sdsgjhg352j3452hg45f2j3h4g5f2j3h4g5f2jhg4f5j3fg45jh23f5j4h23gf&parked_by=$row[4]\" target=\"_blank\">$channel</A>$server$channel_group$park_extension$parked_by$parked_time $EG\n";
+				}
+			}
+#	
+		$i++;
+		}
+
+	}
+	else
+	{
+	echo "********************************************************************************************** \n";
+	echo "********************************************************************************************** \n";
+	echo "*************************************** NO PARKED CALLS ************************************** \n";
+	echo "********************************************************************************************** \n";
+	echo "********************************************************************************************** \n";
+	}
+
+echo "  \n\n";
+echo "looking for calls on these groups:\n";
+$o=0;
+while($o < $group_selected)
+{
+	$group_print =		sprintf("%-20s", $groupselect[$o]);
+	echo "  <SPAN class=\"$color_class[$o]\"><B>          </SPAN> - $group_print</B>\n";
+	$o++;
+}
+
+
+$ENDtime = date("U");
+
+$RUNtime = ($ENDtime - $STARTtime);
+
+echo "</PRE>\n\n\n<br><br><br>\n\n";
+
+
+echo "<font size=0>\n\n\n<br><br><br>\nscript runtime: $RUNtime seconds</font>";
+
+
+?>
+
+
+</body>
+</html>
+
+<?
+	
+exit; 
+
+
+
+?>
+
+
+
+
+
diff --git a/www/vicidial/closer_dispo.php b/www/vicidial/closer_dispo.php
new file mode 100644
index 00000000..54e61219
--- /dev/null
+++ b/www/vicidial/closer_dispo.php
@@ -0,0 +1,329 @@
+<?
+### closer_dispo.php
+### 
+### Copyright (C) 2006  Matt Florell <vicidial@gmail.com>    LICENSE: GPLv2
+###
+# this is the closer disposition screen of a call that has been grabbed. This allows the closer to modify customer information and disposition the call
+# CHANGES
+#
+# 60619-1641 - Added variable filtering to eliminate SQL injection attack threat
+#
+
+require("dbconnect.php");
+
+$PHP_AUTH_USER=$_SERVER['PHP_AUTH_USER'];
+$PHP_AUTH_PW=$_SERVER['PHP_AUTH_PW'];
+$PHP_SELF=$_SERVER['PHP_SELF'];
+if (isset($_GET["vendor_id"]))				{$vendor_id=$_GET["vendor_id"];}
+	elseif (isset($_POST["vendor_id"]))		{$vendor_id=$_POST["vendor_id"];}
+if (isset($_GET["phone"]))				{$phone=$_GET["phone"];}
+	elseif (isset($_POST["phone"]))		{$phone=$_POST["phone"];}
+if (isset($_GET["lead_id"]))				{$lead_id=$_GET["lead_id"];}
+	elseif (isset($_POST["lead_id"]))		{$lead_id=$_POST["lead_id"];}
+if (isset($_GET["first_name"]))				{$first_name=$_GET["first_name"];}
+	elseif (isset($_POST["first_name"]))		{$first_name=$_POST["first_name"];}
+if (isset($_GET["last_name"]))				{$last_name=$_GET["last_name"];}
+	elseif (isset($_POST["last_name"]))		{$last_name=$_POST["last_name"];}
+if (isset($_GET["phone_number"]))				{$phone_number=$_GET["phone_number"];}
+	elseif (isset($_POST["phone_number"]))		{$phone_number=$_POST["phone_number"];}
+if (isset($_GET["end_call"]))				{$end_call=$_GET["end_call"];}
+	elseif (isset($_POST["end_call"]))		{$end_call=$_POST["end_call"];}
+if (isset($_GET["DB"]))				{$DB=$_GET["DB"];}
+	elseif (isset($_POST["DB"]))		{$DB=$_POST["DB"];}
+if (isset($_GET["dispo"]))				{$dispo=$_GET["dispo"];}
+	elseif (isset($_POST["dispo"]))		{$dispo=$_POST["dispo"];}
+if (isset($_GET["list_id"]))				{$list_id=$_GET["list_id"];}
+	elseif (isset($_POST["list_id"]))		{$list_id=$_POST["list_id"];}
+if (isset($_GET["campaign_id"]))				{$campaign_id=$_GET["campaign_id"];}
+	elseif (isset($_POST["campaign_id"]))		{$campaign_id=$_POST["campaign_id"];}
+if (isset($_GET["phone_code"]))				{$phone_code=$_GET["phone_code"];}
+	elseif (isset($_POST["phone_code"]))		{$phone_code=$_POST["phone_code"];}
+if (isset($_GET["server_ip"]))				{$server_ip=$_GET["server_ip"];}
+	elseif (isset($_POST["server_ip"]))		{$server_ip=$_POST["server_ip"];}
+if (isset($_GET["extension"]))				{$extension=$_GET["extension"];}
+	elseif (isset($_POST["extension"]))		{$extension=$_POST["extension"];}
+if (isset($_GET["channel"]))				{$channel=$_GET["channel"];}
+	elseif (isset($_POST["channel"]))		{$channel=$_POST["channel"];}
+if (isset($_GET["call_began"]))				{$call_began=$_GET["call_began"];}
+	elseif (isset($_POST["call_began"]))		{$call_began=$_POST["call_began"];}
+if (isset($_GET["parked_time"]))				{$parked_time=$_GET["parked_time"];}
+	elseif (isset($_POST["parked_time"]))		{$parked_time=$_POST["parked_time"];}
+if (isset($_GET["tsr"]))				{$tsr=$_GET["tsr"];}
+	elseif (isset($_POST["tsr"]))		{$tsr=$_POST["tsr"];}
+if (isset($_GET["address1"]))				{$address1=$_GET["address1"];}
+	elseif (isset($_POST["address1"]))		{$address1=$_POST["address1"];}
+if (isset($_GET["address2"]))				{$address2=$_GET["address2"];}
+	elseif (isset($_POST["address2"]))		{$address2=$_POST["address2"];}
+if (isset($_GET["address3"]))				{$address3=$_GET["address3"];}
+	elseif (isset($_POST["address3"]))		{$address3=$_POST["address3"];}
+if (isset($_GET["city"]))				{$city=$_GET["city"];}
+	elseif (isset($_POST["city"]))		{$city=$_POST["city"];}
+if (isset($_GET["state"]))				{$state=$_GET["state"];}
+	elseif (isset($_POST["state"]))		{$state=$_POST["state"];}
+if (isset($_GET["postal_code"]))				{$postal_code=$_GET["postal_code"];}
+	elseif (isset($_POST["postal_code"]))		{$postal_code=$_POST["postal_code"];}
+if (isset($_GET["province"]))				{$province=$_GET["province"];}
+	elseif (isset($_POST["province"]))		{$province=$_POST["province"];}
+if (isset($_GET["country_code"]))				{$country_code=$_GET["country_code"];}
+	elseif (isset($_POST["country_code"]))		{$country_code=$_POST["country_code"];}
+if (isset($_GET["alt_phone"]))				{$alt_phone=$_GET["alt_phone"];}
+	elseif (isset($_POST["alt_phone"]))		{$alt_phone=$_POST["alt_phone"];}
+if (isset($_GET["email"]))				{$email=$_GET["email"];}
+	elseif (isset($_POST["email"]))		{$email=$_POST["email"];}
+if (isset($_GET["security"]))				{$security=$_GET["security"];}
+	elseif (isset($_POST["security"]))		{$security=$_POST["security"];}
+if (isset($_GET["comments"]))				{$comments=$_GET["comments"];}
+	elseif (isset($_POST["comments"]))		{$comments=$_POST["comments"];}
+if (isset($_GET["status"]))				{$status=$_GET["status"];}
+	elseif (isset($_POST["status"]))		{$status=$_POST["status"];}
+if (isset($_GET["submit"]))				{$submit=$_GET["submit"];}
+	elseif (isset($_POST["submit"]))		{$submit=$_POST["submit"];}
+if (isset($_GET["SUBMIT"]))				{$SUBMIT=$_GET["SUBMIT"];}
+	elseif (isset($_POST["SUBMIT"]))		{$SUBMIT=$_POST["SUBMIT"];}
+
+
+$PHP_AUTH_USER = ereg_replace("[^0-9a-zA-Z]","",$PHP_AUTH_USER);
+$PHP_AUTH_PW = ereg_replace("[^0-9a-zA-Z]","",$PHP_AUTH_PW);
+
+
+$STARTtime = date("U");
+$TODAY = date("Y-m-d");
+$NOW_TIME = date("Y-m-d H:i:s");
+$FILE_datetime = $STARTtime;
+
+$ext_context = 'demo';
+if (!isset($begin_date)) {$begin_date = $TODAY;}
+if (!isset($end_date)) {$end_date = $TODAY;}
+
+	$stmt="SELECT count(*) from vicidial_users where user='$PHP_AUTH_USER' and pass='$PHP_AUTH_PW' and user_level > 2;";
+		if ($DB) {echo "$stmt\n";}
+	$rslt=mysql_query($stmt, $link);
+	$row=mysql_fetch_row($rslt);
+	$auth=$row[0];
+
+$fp = fopen ("./project_auth_entries.txt", "a");
+$date = date("r");
+$ip = getenv("REMOTE_ADDR");
+$browser = getenv("HTTP_USER_AGENT");
+
+  if( (strlen($PHP_AUTH_USER)<2) or (strlen($PHP_AUTH_PW)<2) or (!$auth))
+	{
+    Header("WWW-Authenticate: Basic realm=\"VICIDIAL-CLOSER\"");
+    Header("HTTP/1.0 401 Unauthorized");
+    echo "Invalid Username/Password: |$PHP_AUTH_USER|$PHP_AUTH_PW|\n";
+    exit;
+	}
+  else
+	{
+
+	if($auth>0)
+		{
+		$office_no=strtoupper($PHP_AUTH_USER);
+		$password=strtoupper($PHP_AUTH_PW);
+			$stmt="SELECT full_name from vicidial_users where user='$PHP_AUTH_USER' and pass='$PHP_AUTH_PW'";
+			if ($DB) {echo "$stmt\n";}
+			$rslt=mysql_query($stmt, $link);
+			$row=mysql_fetch_row($rslt);
+			$LOGfullname=$row[0];
+			$fullname = $row[0];
+		fwrite ($fp, "VD_CLOSER|GOOD|$date|$PHP_AUTH_USER|$PHP_AUTH_PW|$ip|$browser|$LOGfullname|\n");
+		fclose($fp);
+
+		}
+	else
+		{
+		fwrite ($fp, "VD_CLOSER|FAIL|$date|$PHP_AUTH_USER|$PHP_AUTH_PW|$ip|$browser|\n");
+		fclose($fp);
+		}
+	}
+
+?>
+<html>
+<head>
+<title>VICIDIAL CLOSER: Call Disposition</title>
+<?
+echo "<META HTTP-EQUIV=\"Content-Type\" CONTENT=\"text/html; charset=utf-8\">\n";
+?>
+</head>
+<BODY BGCOLOR=white marginheight=0 marginwidth=0 leftmargin=0 topmargin=0>
+<CENTER><FONT FACE="Courier" COLOR=BLACK SIZE=3>
+
+<? 
+
+if ($end_call > 0)
+{
+
+$call_length = ($STARTtime - $call_began);
+
+	### insert a NEW record to the vicidial_closer_log table 
+	$stmt="INSERT INTO vicidial_closer_log (lead_id,list_id,campaign_id,call_date,start_epoch,end_epoch,length_in_sec,status,phone_code,phone_number,user,comments,processed) values('" . mysql_real_escape_string($lead_id) . "','" . mysql_real_escape_string($list_id) . "','" . mysql_real_escape_string($campaign_id) . "','" . mysql_real_escape_string($parked_time) . "','" . mysql_real_escape_string($call_began) . "','$STARTtime','" . mysql_real_escape_string($call_length) . "','" . mysql_real_escape_string($status) . "','" . mysql_real_escape_string($phone_code) . "','" . mysql_real_escape_string($phone_number) . "','$PHP_AUTH_USER','" . mysql_real_escape_string($comments) . "','Y')";
+	if ($DB) {echo "|$stmt|\n";}
+	$rslt=mysql_query($stmt, $link);
+
+	### update the lead record in the vicidial_list table 
+	$stmt="UPDATE vicidial_list set status='" . mysql_real_escape_string($status) . "',first_name='" . mysql_real_escape_string($first_name) . "',last_name='" . mysql_real_escape_string($last_name) . "',address1='" . mysql_real_escape_string($address1) . "',address2='" . mysql_real_escape_string($address2) . "',address3='" . mysql_real_escape_string($address3) . "',city='" . mysql_real_escape_string($city) . "',state='" . mysql_real_escape_string($state) . "',province='" . mysql_real_escape_string($province) . "',postal_code='" . mysql_real_escape_string($postal_code) . "',country_code='" . mysql_real_escape_string($country_code) . "',alt_phone='" . mysql_real_escape_string($alt_phone) . "',email='" . mysql_real_escape_string($email) . "',security_phrase='" . mysql_real_escape_string($security) . "',comments='" . mysql_real_escape_string($comments) . "' where lead_id='" . mysql_real_escape_string($lead_id) . "'";
+	if ($DB) {echo "|$stmt|\n";}
+	$rslt=mysql_query($stmt, $link);
+
+	$stmt="SELECT count(*) from live_channels where server_ip='$server_ip' and channel='" . mysql_real_escape_string($channel) . "' and extension like \"%" . mysql_real_escape_string($extension) . "%\"";
+	$rslt=mysql_query($stmt, $link);
+	if ($DB) {echo "$stmt\n";}
+	$row=mysql_fetch_row($rslt);
+	$parked_count = $row[0];
+
+	if ($parked_count > 0)
+	{
+
+		$DTqueryCID = "RR$FILE_datetime$PHP_AUTH_USER";
+
+		### insert a NEW record to the vicidial_manager table to be processed
+		$stmt="INSERT INTO vicidial_manager values('','','$NOW_TIME','NEW','N','" . mysql_real_escape_string($server_ip) . "','','Hangup','$DTqueryCID','Channel: " . mysql_real_escape_string($channel) . "','','','','','','','','','')";
+		if ($DB) {echo "|$stmt|\n";}
+		$rslt=mysql_query($stmt, $link);
+
+		echo "Hangup command sent for channel $channel &nbsp; &nbsp; &nbsp; $NOW_TIME\n<BR><BR>\n";
+
+		echo "<form><input type=button value=\"Close This Window\" onClick=\"javascript:window.close();\"></form>\n";
+	}
+	else
+	{
+		echo "Hangup command FAILED for channel $channel &nbsp; &nbsp; &nbsp; $NOW_TIME\n<BR><BR>\n";
+		echo "<form><input type=button value=\"Close This Window\" onClick=\"javascript:window.close();\"></form>\n";
+	}
+}
+else
+{
+	$stmt="SELECT count(*) from vicidial_list where lead_id='" . mysql_real_escape_string($lead_id) . "'";
+	$rslt=mysql_query($stmt, $link);
+	if ($DB) {echo "$stmt\n";}
+	$row=mysql_fetch_row($rslt);
+	$lead_count = $row[0];
+
+	if ($lead_count > 0)
+	{
+
+		$stmt="SELECT * from vicidial_list where lead_id='" . mysql_real_escape_string($lead_id) . "'";
+		$rslt=mysql_query($stmt, $link);
+		if ($DB) {echo "$stmt\n";}
+		$row=mysql_fetch_row($rslt);
+		   $lead_id			= "$row[0]";
+		   $tsr				= "$row[4]";
+		   $vendor_id		= "$row[5]";
+		   $list_id			= "$row[7]";
+		   $campaign_id		= "$row[8]";
+		   $phone_code		= "$row[10]";
+		   $phone_number	= "$row[11]";
+		   $title			= "$row[12]";
+		   $first_name		= "$row[13]";	#
+		   $middle_initial	= "$row[14]";
+		   $last_name		= "$row[15]";	#
+		   $address1		= "$row[16]";	#
+		   $address2		= "$row[17]";	#
+		   $address3		= "$row[18]";	#
+		   $city			= "$row[19]";	#
+		   $state			= "$row[20]";	#
+		   $province		= "$row[21]";	#
+		   $postal_code		= "$row[22]";	#
+		   $country_code	= "$row[23]";	#
+		   $gender			= "$row[24]";
+		   $date_of_birth	= "$row[25]";
+		   $alt_phone		= "$row[26]";	#
+		   $email			= "$row[27]";	#
+		   $security		= "$row[28]";	#
+		   $comments		= "$row[29]";	#
+
+		echo "<br>Call information: $first_name $last_name - $phone_number<br><br><form action=$PHP_SELF method=POST>\n";
+		echo "<input type=hidden name=end_call value=1>\n";
+		echo "<input type=hidden name=DB value=\"$DB\">\n";
+		echo "<input type=hidden name=lead_id value=\"$lead_id\">\n";
+		echo "<input type=hidden name=list_id value=\"$list_id\">\n";
+		echo "<input type=hidden name=campaign_id value=\"$campaign_id\">\n";
+		echo "<input type=hidden name=phone_code value=\"$phone_code\">\n";
+		echo "<input type=hidden name=phone_number value=\"$phone_number\">\n";
+		echo "<input type=hidden name=server_ip value=\"$server_ip\">\n";
+		echo "<input type=hidden name=extension value=\"$extension\">\n";
+		echo "<input type=hidden name=channel value=\"$channel\">\n";
+		echo "<input type=hidden name=call_began value=\"$call_began\">\n";
+		echo "<input type=hidden name=parked_time value=\"$parked_time\">\n";
+		echo "<table cellpadding=1 cellspacing=0>\n";
+		echo "<tr><td colspan=2>Vendor ID: $vendor_id &nbsp; &nbsp; Campaign ID: $campaign_id</td></tr>\n";
+		echo "<tr><td colspan=2>Fronter: $tsr &nbsp; &nbsp; List ID: $list_id</td></tr>\n";
+		echo "<tr><td align=right>First Name: </td><td align=left><input type=text name=first_name size=15 maxlength=30 value=\"$first_name\"> &nbsp; \n";
+		echo " Last Name: <input type=text name=last_name size=15 maxlength=30 value=\"$last_name\"> </td></tr>\n";
+		echo "<tr><td align=right>Address 1 : </td><td align=left><input type=text name=address1 size=30 maxlength=30 value=\"$address1\"></td></tr>\n";
+		echo "<tr><td align=right>Address 2 : </td><td align=left><input type=text name=address2 size=30 maxlength=30 value=\"$address2\"></td></tr>\n";
+		echo "<tr><td align=right>Address 3 : </td><td align=left><input type=text name=address3 size=30 maxlength=30 value=\"$address3\"></td></tr>\n";
+		echo "<tr><td align=right>City : </td><td align=left><input type=text name=city size=30 maxlength=30 value=\"$city\"></td></tr>\n";
+		echo "<tr><td align=right>State: </td><td align=left><input type=text name=state size=2 maxlength=2 value=\"$state\"> &nbsp; \n";
+		echo " Postal Code: <input type=text name=postal_code size=10 maxlength=10 value=\"$postal_code\"> </td></tr>\n";
+
+		echo "<tr><td align=right>Province : </td><td align=left><input type=text name=province size=30 maxlength=30 value=\"$province\"></td></tr>\n";
+		echo "<tr><td align=right>Country : </td><td align=left><input type=text name=country_code size=3 maxlength=3 value=\"$country_code\"></td></tr>\n";
+		echo "<tr><td align=right>Alt Phone : </td><td align=left><input type=text name=alt_phone size=10 maxlength=10 value=\"$alt_phone\"></td></tr>\n";
+		echo "<tr><td align=right>Email : </td><td align=left><input type=text name=email size=30 maxlength=50 value=\"$email\"></td></tr>\n";
+		echo "<tr><td align=right>Security : </td><td align=left><input type=text name=security size=30 maxlength=100 value=\"$security\"></td></tr>\n";
+		echo "<tr><td align=right>Comments : </td><td align=left><input type=text name=comments size=30 maxlength=255 value=\"$comments\"></td></tr>\n";
+			echo "<tr bgcolor=#B6D3FC><td align=right>Disposition: </td><td align=left><select size=1 name=status>\n";
+
+				$stmt="SELECT * from vicidial_statuses where selectable='Y' order by status";
+				$rslt=mysql_query($stmt, $link);
+				$statuses_to_print = mysql_num_rows($rslt);
+				$statuses_list='';
+
+				$o=0;
+				while ($statuses_to_print > $o) {
+					$rowx=mysql_fetch_row($rslt);
+					$statuses_list .= "<option value=\"$rowx[0]\">$rowx[0] - $rowx[1]</option>\n";
+					$o++;
+				}
+			echo "$statuses_list";
+			echo "</select></td></tr>\n";
+
+
+		echo "<tr><td colspan=2><input type=submit name=submit value=\"END CALL\"></td></tr>\n";
+		echo "</table></form>\n";
+		echo "<BR><BR><BR>\n";
+
+	}
+	else
+	{
+		echo "lead lookup FAILED for lead_id $lead_id &nbsp; &nbsp; &nbsp; $NOW_TIME\n<BR><BR>\n";
+#		echo "<a href=\"$PHP_SELF\">Close this window</a>\n<BR><BR>\n";
+	}
+
+
+
+
+
+
+}
+
+
+$ENDtime = date("U");
+
+$RUNtime = ($ENDtime - $STARTtime);
+
+echo "\n\n\n<br><br><br>\n\n";
+
+
+echo "<font size=0>\n\n\n<br><br><br>\nscript runtime: $RUNtime seconds</font>";
+
+
+?>
+
+
+</body>
+</html>
+
+<?
+	
+exit; 
+
+
+
+?>
+
+
+
+
+
diff --git a/www/vicidial/closer_popup.php b/www/vicidial/closer_popup.php
new file mode 100644
index 00000000..e12f02c3
--- /dev/null
+++ b/www/vicidial/closer_popup.php
@@ -0,0 +1,453 @@
+<?
+### closer_popup.php
+### 
+### Copyright (C) 2006  Matt Florell <vicidial@gmail.com>    LICENSE: GPLv2
+###
+# this is the closer popup of a specific call that grabs the call and allows you to go and fetch info on that caller in the local CRM system.
+# CHANGES
+#
+# 60620-1029 - Added variable filtering to eliminate SQL injection attack threat
+#
+
+require("dbconnect.php");
+
+$PHP_AUTH_USER=$_SERVER['PHP_AUTH_USER'];
+$PHP_AUTH_PW=$_SERVER['PHP_AUTH_PW'];
+$PHP_SELF=$_SERVER['PHP_SELF'];
+if (isset($_GET["group"]))				{$group=$_GET["group"];}
+	elseif (isset($_POST["group"]))		{$group=$_POST["group"];}
+if (isset($_GET["group_selected"]))				{$group_selected=$_GET["group_selected"];}
+	elseif (isset($_POST["group_selected"]))		{$group_selected=$_POST["group_selected"];}
+if (isset($_GET["dialplan_number"]))				{$dialplan_number=$_GET["dialplan_number"];}
+	elseif (isset($_POST["dialplan_number"]))		{$dialplan_number=$_POST["dialplan_number"];}
+if (isset($_GET["extension"]))				{$extension=$_GET["extension"];}
+	elseif (isset($_POST["extension"]))		{$extension=$_POST["extension"];}
+if (isset($_GET["groupselect"]))				{$groupselect=$_GET["groupselect"];}
+	elseif (isset($_POST["groupselect"]))		{$groupselect=$_POST["groupselect"];}
+if (isset($_GET["PHONE_LOGIN"]))				{$PHONE_LOGIN=$_GET["PHONE_LOGIN"];}
+	elseif (isset($_POST["PHONE_LOGIN"]))		{$PHONE_LOGIN=$_POST["PHONE_LOGIN"];}
+if (isset($_GET["server_ip"]))				{$server_ip=$_GET["server_ip"];}
+	elseif (isset($_POST["server_ip"]))		{$server_ip=$_POST["server_ip"];}
+if (isset($_GET["DB"]))				{$DB=$_GET["DB"];}
+	elseif (isset($_POST["DB"]))		{$DB=$_POST["DB"];}
+if (isset($_GET["user"]))				{$user=$_GET["user"];}
+	elseif (isset($_POST["user"]))		{$user=$_POST["user"];}
+if (isset($_GET["channel"]))				{$channel=$_GET["channel"];}
+	elseif (isset($_POST["channel"]))		{$channel=$_POST["channel"];}
+if (isset($_GET["parked_time"]))				{$parked_time=$_GET["parked_time"];}
+	elseif (isset($_POST["parked_time"]))		{$parked_time=$_POST["parked_time"];}
+if (isset($_GET["channel_group"]))				{$channel_group=$_GET["channel_group"];}
+	elseif (isset($_POST["channel_group"]))		{$channel_group=$_POST["channel_group"];}
+if (isset($_GET["debugvars"]))				{$debugvars=$_GET["debugvars"];}
+	elseif (isset($_POST["debugvars"]))		{$debugvars=$_POST["debugvars"];}
+if (isset($_GET["parked_by"]))				{$parked_by=$_GET["parked_by"];}
+	elseif (isset($_POST["parked_by"]))		{$parked_by=$_POST["parked_by"];}
+if (isset($_GET["submit"]))				{$submit=$_GET["submit"];}
+	elseif (isset($_POST["submit"]))		{$submit=$_POST["submit"];}
+if (isset($_GET["SUBMIT"]))				{$SUBMIT=$_GET["SUBMIT"];}
+	elseif (isset($_POST["SUBMIT"]))		{$SUBMIT=$_POST["SUBMIT"];}
+
+$PHP_AUTH_USER = ereg_replace("[^0-9a-zA-Z]","",$PHP_AUTH_USER);
+$PHP_AUTH_PW = ereg_replace("[^0-9a-zA-Z]","",$PHP_AUTH_PW);
+
+
+#$DB=1;
+$US = '_';
+$STARTtime = date("U");
+$TODAY = date("Y-m-d");
+$NOW_TIME = date("Y-m-d H:i:s");
+$REC_TIME = date("Ymd-His");
+$FILE_datetime = $STARTtime;
+
+$ext_context = 'demo';
+
+	$stmt="SELECT count(*) from vicidial_users where user='$PHP_AUTH_USER' and pass='$PHP_AUTH_PW' and user_level > 2;";
+		if ($DB) {echo "$stmt\n";}
+	$rslt=mysql_query($stmt, $link);
+	$row=mysql_fetch_row($rslt);
+	$auth=$row[0];
+
+$fp = fopen ("./project_auth_entries.txt", "a");
+$date = date("r");
+$ip = getenv("REMOTE_ADDR");
+$browser = getenv("HTTP_USER_AGENT");
+
+  if( (strlen($PHP_AUTH_USER)<2) or (strlen($PHP_AUTH_PW)<2) or (!$auth))
+	{
+    Header("WWW-Authenticate: Basic realm=\"VICIDIAL-CLOSER\"");
+    Header("HTTP/1.0 401 Unauthorized");
+    echo "Invalid Username/Password: |$PHP_AUTH_USER|$PHP_AUTH_PW|\n";
+    exit;
+	}
+  else
+	{
+
+	if($auth>0)
+		{
+		$office_no=strtoupper($PHP_AUTH_USER);
+		$password=strtoupper($PHP_AUTH_PW);
+			$stmt="SELECT full_name from vicidial_users where user='$PHP_AUTH_USER' and pass='$PHP_AUTH_PW'";
+			if ($DB) {echo "$stmt\n";}
+			$rslt=mysql_query($stmt, $link);
+			$row=mysql_fetch_row($rslt);
+			$LOGfullname=$row[0];
+			$fullname = $row[0];
+		fwrite ($fp, "VD_CLOSER|GOOD|$date|$PHP_AUTH_USER|$PHP_AUTH_PW|$ip|$browser|$LOGfullname|\n");
+		fclose($fp);
+
+		}
+	else
+		{
+		fwrite ($fp, "VD_CLOSER|FAIL|$date|$PHP_AUTH_USER|$PHP_AUTH_PW|$ip|$browser|\n");
+		fclose($fp);
+		}
+	}
+
+echo "<html>\n";
+echo "<head>\n";
+echo "<title>VICIDIAL CLOSER: Popup</title>\n";
+echo "<META HTTP-EQUIV=\"Content-Type\" CONTENT=\"text/html; charset=utf-8\">\n";
+
+if (eregi('CL_UNIV',$channel_group))
+	{
+	?>
+	<script language="Javascript1.2">
+	var btn_name="search";
+	if (document.layers) {
+		document.captureEvents(Event.KEYPRESS);
+		document.onkeypress = function (evt) {
+			if (evt.target.constructor == Input) {
+				if (evt.target.name == 'lead_id' || evt.target.name == 'phone' || evt.target.name == 'confirmation_id') {
+					return ((evt.which >= '0'.charCodeAt() && evt.which <= '9'.charCodeAt()));
+				} 
+			}
+		}
+	}
+	function CheckForm() {
+		if (btn_name=="update") {
+			if (document.forms[0].phone.value.length!=10) {
+				alert("The phone number you entered does not have 10 digits.\n\nIt has "+document.forms[0].phone.value.length+" - please correct it and try again.");
+				return false;
+			} else if (document.forms[0].confirmation_id.value.length<=5) {
+				alert("The confirmation ID is either missing or not enough characters in length.\n\nPlease correct it and try again.");
+				return false;
+			} else {
+				return true;
+			}
+		}
+	}
+	</script>
+	<?
+	}
+else 
+	{
+	echo "<script language=\"Javascript1.2\">\n";
+	echo "function WaitFirefix() {setTimeout(document.forms[0].search_phone.focus(), 1000)}\n";
+	echo "</script>\n";
+	}
+?>
+</head>
+<BODY BGCOLOR=white marginheight=0 marginwidth=0 leftmargin=0 topmargin=0 onLoad="document.forms[0].search_phone.focus(); setTimeout('document.forms[0].search_phone.focus()', 1000)">
+<CENTER><FONT FACE="Courier" COLOR=BLACK SIZE=3>
+
+<? 
+
+$stmt="SELECT count(*) from parked_channels where server_ip='$server_ip' and parked_time='$parked_time' and channel='$channel'";
+$rslt=mysql_query($stmt, $link);
+if ($DB) {echo "$stmt\n";}
+$row=mysql_fetch_row($rslt);
+$parked_count = $row[0];
+
+if ($parked_count > 0)
+{
+	$stmt="DELETE from parked_channels where server_ip='" . mysql_real_escape_string($server_ip) . "' and parked_time='" . mysql_real_escape_string($parked_time) . "' and channel='" . mysql_real_escape_string($channel) . "' LIMIT 1";
+	if ($DB) {echo "|$stmt|\n";}
+	$rslt=mysql_query($stmt, $link);
+
+
+	#$monitor_channel = eregi_replace('Zap/', "", $channel);
+	$monitor_channel = eregi_replace('-1', "", $channel);
+	$SIPexten = $extension;
+	$filename = "$REC_TIME$US$SIPexten";
+	$DTqueryCID = "RR$FILE_datetime$PHP_AUTH_USER";
+
+#	$stmt="INSERT INTO vicidial_manager values('','','$NOW_TIME','NEW','N','$server_ip','','Monitor','$DTqueryCID','Channel: $monitor_channel','File: $filename','Callerid: $DTqueryCID','','','','','','','')";
+#	if ($DB) {echo "|$stmt|\n";}
+#	$rslt=mysql_query($stmt, $link);
+
+#	$stmt = "INSERT INTO recording_log (channel,server_ip,extension,start_time,start_epoch,filename) values('$monitor_channel','$server_ip','SIP/$SIPexten','$NOW_TIME','$STARTtime','$filename')";
+#	if ($DB) {echo "|$stmt|\n";}
+#	$rslt=mysql_query($stmt, $link);
+
+#	$stmt="SELECT recording_id FROM recording_log where filename='$filename'";
+#	$rslt=mysql_query($stmt, $link);
+#	if ($DB) {echo "$stmt\n";}
+#	$row=mysql_fetch_row($rslt);
+#	$recording_id = $row[0];
+
+#	echo "Recording command sent for channel $channel - $filename - $recording_id<BR>\n";
+
+	### insert a NEW record to the vicidial_manager table to be processed
+	$stmt="INSERT INTO vicidial_manager values('','','$NOW_TIME','NEW','N','" . mysql_real_escape_string($server_ip) . "','','Redirect','$DTqueryCID','Exten: $dialplan_number','Channel: " . mysql_real_escape_string($channel) . "','Context: $ext_context','Priority: 1','Callerid: $DTqueryCID','','','','','')";
+	if ($DB) {echo "|$stmt|\n";}
+	$rslt=mysql_query($stmt, $link);
+
+	echo "Redirect command sent for channel $channel &nbsp; &nbsp; &nbsp; $NOW_TIME\n<BR><BR>\n";
+
+	$stmt="SELECT full_name from vicidial_users where user='" . mysql_real_escape_string($parked_by) . "'";
+	$rslt=mysql_query($stmt, $link);
+	if ($DB) {echo "$stmt\n";}
+	$row=mysql_fetch_row($rslt);
+	$full_name = $row[0];
+
+	echo "Call Referred by: $parked_by - $full_name\n<BR><BR>\n";
+
+   $url = "http://10.10.10.196/vicidial/closer_dispo.php?lead_id=$parked_by&channel=$channel&server_ip=$server_ip&extension=$extension&call_began=$STARTtime&parked_time=$parked_time&DB=$DB";
+
+	echo "<a href=\"$url\">View Customer Info and Disposition Call</a>\n<BR><BR>\n";
+
+
+
+	$stmt="UPDATE park_log set grab_time='$NOW_TIME',status='TALKING',extension='" . mysql_real_escape_string($extension) . "',user='$PHP_AUTH_USER' where parked_time='" . mysql_real_escape_string($parked_time) . "' and server_ip='" . mysql_real_escape_string($server_ip) . "' and  channel='" . mysql_real_escape_string($channel) . "'";
+	if ($DB) {echo "|$stmt|\n";}
+		$fp = fopen ("./closer_SQL_updates.txt", "a");
+		fwrite ($fp, "$date|$PHP_AUTH_USER|$stmt|\n");
+		fclose($fp);
+
+
+	$rslt=mysql_query($stmt, $link);
+
+###########################################################################################
+####### HERE IS WHERE YOU DEFINE DIFFERENT CONTENTS DEPENDING UPON THE CHANNEL_GROUP PREFIX 
+###########################################################################################
+if (eregi('CL_TEST',$channel_group))
+	{
+	echo "GALLERIA TEST CLOSER GROUP: $channel_group\n";
+
+	$stmt="SELECT user,phone_number from vicidial_list where lead_id='" . mysql_real_escape_string($parked_by) . "';";
+		if ($DB) {echo "$stmt\n";}
+	$rslt=mysql_query($stmt, $link);
+	$row=mysql_fetch_row($rslt);
+	$fronter=$row[0];
+	$search_phone=$row[1];
+
+
+	?>
+	<form action="http://10.10.10.196/vicidial/closer_lookup3.php" method="post">
+		<input type=hidden name="fronter" value="<?=$fronter ?>">
+		<input type=hidden name="closer" value="<?=$PHP_AUTH_USER ?>">
+		<input type=hidden name="group" value="<?=$channel_group ?>">
+		<input type=hidden name="recording_id" value="<?=$recording_id ?>">
+	<table border=0 cellspacing=5 cellpadding=3 align=center width=90%>
+	<tr>
+		<th colspan=2 bgcolor='#666666'><font class='standard_bold' color='white'>COF MW Customer Search</font></th>
+	</tr>
+	<tr bgcolor='#99FF99'>
+		<td align=right width="50%" nowrap><font class='standard_bold'>Phone number</font></td>
+		<td align=left width="50%" nowrap><input type=text size=10 maxlength=10 name="search_phone" value="<?=$search_phone ?>"></td>
+	</tr>
+	<tr>
+		<th colspan=2 bgcolor='#666666'><input type=submit name="submit_COF" value="SEARCH"></th>
+	</tr>
+	</table>
+	</form>
+	<BR><BR>
+	<?
+	}
+
+if (eregi('CL_MWCOF',$channel_group))
+	{
+	echo "GALLERIA INTERNAL CLOSER GROUP: $channel_group\n";
+
+	$stmt="SELECT user,phone_number from vicidial_list where lead_id='" . mysql_real_escape_string($parked_by) . "';";
+		if ($DB) {echo "$stmt\n";}
+	$rslt=mysql_query($stmt, $link);
+	$row=mysql_fetch_row($rslt);
+	$fronter=$row[0];
+	$search_phone=$row[1];
+
+
+	?>
+	<form action="http://10.10.10.196/vicidial/closer_lookup3.php" method="post">
+		<input type=hidden name="fronter" value="<?=$fronter ?>">
+		<input type=hidden name="closer" value="<?=$PHP_AUTH_USER ?>">
+		<input type=hidden name="group" value="<?=$channel_group ?>">
+		<input type=hidden name="recording_id" value="<?=$recording_id ?>">
+	<table border=0 cellspacing=5 cellpadding=3 align=center width=90%>
+	<tr>
+		<th colspan=2 bgcolor='#666666'><font class='standard_bold' color='white'>COF MW Customer Search</font></th>
+	</tr>
+	<tr bgcolor='#99FF99'>
+		<td align=right width="50%" nowrap><font class='standard_bold'>Phone number</font></td>
+		<td align=left width="50%" nowrap><input type=text size=10 maxlength=10 name="search_phone" value="<?=$search_phone ?>"></td>
+	</tr>
+	<tr>
+		<th colspan=2 bgcolor='#666666'><input type=submit name="submit_COF" value="SEARCH"></th>
+	</tr>
+	</table>
+	</form>
+	<BR><BR>
+	<?
+	}
+
+
+
+if (eregi('CL_GAL',$channel_group))
+	{
+	echo "GALLERIA CLOSER GROUP: $channel_group\n";
+	$group_color='#CCCCCC';
+
+	if (eregi('CL_GALLERIA',$channel_group))
+		{
+		echo "<br><font color=green size=3><b>-- INTERNAL CALL GALLERIA FRONT --</b></font><br>\n";
+		$group_color='#99FF99';
+		}
+	if (eregi('CL_GALLER2',$channel_group))
+		{
+		echo "<br><font color=red size=3><b>-- TouchAsia CALL Simple Escapes FRONT --</b></font><br>\n";
+		$group_color='#FF9999';
+		}
+	if (eregi('CL_GALLER3',$channel_group))
+		{
+		echo "<br><font color=red size=3><b>-- DebitSupplies CALL Simple Escapes FRONT --</b></font><br>\n";
+		$group_color='#FF9999';
+		}
+	if (eregi('CL_GALLER4',$channel_group))
+		{
+		echo "<br><font color=red size=3><b>-- Vishnu CALL Simple Escapes FRONT --</b></font><br>\n";
+		$group_color='#FF9999';
+		}
+
+
+	?>
+	<form action="http://10.10.10.196/vicidial/closer_lookup3.php" method="post">
+		<input type=hidden name="fronter" value="<?=$parked_by ?>">
+		<input type=hidden name="closer" value="<?=$PHP_AUTH_USER ?>">
+		<input type=hidden name="group" value="<?=$channel_group ?>">
+		<input type=hidden name="recording_id" value="<?=$recording_id ?>">
+	<table border=0 cellspacing=5 cellpadding=3 align=center width=90%>
+	<tr>
+		<th colspan=2 bgcolor='#666666'><font class='standard_bold' color='white'>COF MW Customer Search</font></th>
+	</tr>
+	<tr bgcolor="<?=$group_color ?>">
+		<td align=right width="50%" nowrap><font class='standard_bold'>Phone number</font></td>
+		<td align=left width="50%" nowrap><input type=text size=10 maxlength=10 name="search_phone" value="<?=$phone ?>"></td>
+	</tr>
+	<tr>
+		<th colspan=2 bgcolor='#666666'><input type=submit name="submit_COF" value="SEARCH"></th>
+	</tr>
+	</table>
+	</form>
+	<BR><BR>
+	
+<!----
+	<form action="http://10.10.10.196/vicidial/closer_lookup3.php" method="post">
+		<input type=hidden name="fronter" value="<?=$parked_by ?>">
+		<input type=hidden name="closer" value="<?=$PHP_AUTH_USER ?>">
+	<table border=0 cellspacing=5 cellpadding=3 align=center width=90%>
+	<tr>
+		<th colspan=2 bgcolor='#666666'><font class='standard_bold' color='white'>NEW COF BlueGreen Customer Search</font></th>
+	</tr>
+	<tr bgcolor='#CCCCCC'>
+		<td align=right width="50%" nowrap><font class='standard_bold'>Phone number</font></td>
+		<td align=left width="50%" nowrap><input type=text size=10 maxlength=10 name="search_phone" value="<?=$phone ?>"></td>
+	</tr>
+	<tr>
+		<th colspan=2 bgcolor='#666666'><input type=submit name="submit_COF" value="SEARCH"></th>
+	</tr>
+	</table>
+	</form>
+	<BR><BR>
+---->
+
+	<?
+	}
+
+
+if (eregi('CL_UNIV',$channel_group))
+	{
+	echo "UNIVERSAL CLOSER GROUP: $channel_group\n";
+
+
+	?>
+
+	<form action="uk_mail_lookup.php" method="post" onSubmit="return CheckForm()">
+		<input type=hidden name="fronter" value="<?=$parked_by ?>">
+		<input type=hidden name="closer" value="<?=$PHP_AUTH_USER ?>">
+		<input type=hidden name="group" value="<?=$channel_group ?>">
+		<input type=hidden name="recording_id" value="<?=$recording_id ?>">
+	<table border=0 width=80% cellpadding=5 cellspacing=0 align=center>
+	<tr>
+			<th colspan=2 bgcolor='#CCCCCC'><font class='standard_bold'>New Search</font></th>
+	</tr>
+
+	<tr bgcolor='#CCCCCC'>
+			<td align=right width="50%" nowrap><font class='standard_bold'>Reservation Number:</font></td>
+			<td align=left width="50%" nowrap><input type=text size=10 maxlength=10
+	name="reservation_no" value="" ONKEYPRESS="var keyCode = event.which ? event.which : event.keyCode; if (keyCode!=8 && keyCode!=9 && keyCode!=37 && keyCode!=39) return ((keyCode >= '0'.charCodeAt() && keyCode <= '9'.charCodeAt()))"></td>
+	</tr>
+	<tr bgcolor='#CCCCCC'><td align=right width='50%' nowrap><font class='standard_bold'>Confirmation #:</font></td>
+	<td align=left width='50%' nowrap><input type=text name='confirmation_no' size=10 maxlength=20 value=''></td></tr>
+	<tr bgcolor='#CCCCCC'>
+			<td align=right width="50%" nowrap><font class='standard_bold'>Phone #:</font></td>
+			<td align=left width="50%" nowrap><input type=text size=10 maxlength=10
+	name="phone" value="" ONKEYPRESS="var keyCode = event.which ? event.which : event.keyCode; if (keyCode!=8 && keyCode!=9 && keyCode!=37 && keyCode!=39) return ((keyCode >= '0'.charCodeAt() && keyCode <= '9'.charCodeAt()))"></td>
+
+	</tr><tr>
+		<th colspan=2 bgcolor='#CCCCCC'><input type=submit name="submit_COF" value="SEARCH" onClick="javascript:btn_name='search'"><br><br></th>
+	</tr>
+	<tr>
+		<th colspan=2 bgcolor='#666666'><font class='standard_bold'><a href='closer_popup.php'>Back</a></font></th>
+	</tr>
+	</table>
+
+	</form>
+
+
+	<?
+
+	}
+
+###########################################################################################
+####### END CUSTOM CONTENTS 
+###########################################################################################
+
+
+#	echo "<a href=\"#\">Close this window</a>\n<BR><BR>\n";
+}
+else
+{
+	echo "Redirect command FAILED for channel $channel &nbsp; &nbsp; &nbsp; $NOW_TIME\n<BR><BR>\n";
+	echo "<form><input type=button value=\"Close This Window\" onClick=\"javascript:window.close();\"></form>\n";
+}
+
+
+
+$ENDtime = date("U");
+
+$RUNtime = ($ENDtime - $STARTtime);
+
+echo "\n\n\n<br><br><br>\n\n";
+
+
+echo "<font size=0>\n\n\n<br><br><br>\nscript runtime: $RUNtime seconds</font>";
+
+
+?>
+
+
+</body>
+</html>
+
+<?
+	
+exit; 
+
+
+
+?>
+
+
+
+
+
diff --git a/www/vicidial/count.htm b/www/vicidial/count.htm
new file mode 100644
index 00000000..51f8a361
--- /dev/null
+++ b/www/vicidial/count.htm
@@ -0,0 +1 @@
+       
diff --git a/www/vicidial/dbconnect.php b/www/vicidial/dbconnect.php
new file mode 100644
index 00000000..88078fc7
--- /dev/null
+++ b/www/vicidial/dbconnect.php
@@ -0,0 +1,20 @@
+<?
+# dbconnect.php
+# 
+# Copyright (C) 2006  Matt Florell <vicidial@gmail.com>    LICENSE: GPLv2
+#
+
+$link=mysql_connect("localhost", "cron", "1234");
+mysql_select_db("asterisk");
+
+$local_DEF = 'Local/';
+$conf_silent_prefix = '7';
+$local_AMP = '@';
+$ext_context = 'demo';
+$recording_exten = '8309';
+
+#$WeBServeRRooT = '/home/www/htdocs';
+$WeBServeRRooT = '/usr/local/apache2/htdocs';
+$WeBRooTWritablE = '1';
+
+?>
\ No newline at end of file
diff --git a/www/vicidial/group_hourly_stats.php b/www/vicidial/group_hourly_stats.php
new file mode 100644
index 00000000..b7eb1b31
--- /dev/null
+++ b/www/vicidial/group_hourly_stats.php
@@ -0,0 +1,252 @@
+<?
+### group_hourly_stats.php
+### 
+### Copyright (C) 2006  Matt Florell <vicidial@gmail.com>    LICENSE: GPLv2
+###
+# CHANGES
+#
+# 60620-1014 - Added variable filtering to eliminate SQL injection attack threat
+#            - Added required user/pass to gain access to this page
+#
+
+require("dbconnect.php");
+
+$PHP_AUTH_USER=$_SERVER['PHP_AUTH_USER'];
+$PHP_AUTH_PW=$_SERVER['PHP_AUTH_PW'];
+$PHP_SELF=$_SERVER['PHP_SELF'];
+if (isset($_GET["group"]))				{$group=$_GET["group"];}
+	elseif (isset($_POST["group"]))		{$group=$_POST["group"];}
+if (isset($_GET["status"]))				{$status=$_GET["status"];}
+	elseif (isset($_POST["status"]))		{$status=$_POST["status"];}
+if (isset($_GET["date_with_hour"]))				{$date_with_hour=$_GET["date_with_hour"];}
+	elseif (isset($_POST["date_with_hour"]))		{$date_with_hour=$_POST["date_with_hour"];}
+if (isset($_GET["submit"]))				{$submit=$_GET["submit"];}
+	elseif (isset($_POST["submit"]))		{$submit=$_POST["submit"];}
+if (isset($_GET["SUBMIT"]))				{$SUBMIT=$_GET["SUBMIT"];}
+	elseif (isset($_POST["SUBMIT"]))		{$SUBMIT=$_POST["SUBMIT"];}
+
+$PHP_AUTH_USER = ereg_replace("[^0-9a-zA-Z]","",$PHP_AUTH_USER);
+$PHP_AUTH_PW = ereg_replace("[^0-9a-zA-Z]","",$PHP_AUTH_PW);
+
+	$stmt="SELECT count(*) from vicidial_users where user='$PHP_AUTH_USER' and pass='$PHP_AUTH_PW' and user_level > 6;";
+	if ($DB) {echo "|$stmt|\n";}
+	$rslt=mysql_query($stmt, $link);
+	$row=mysql_fetch_row($rslt);
+	$auth=$row[0];
+
+  if( (strlen($PHP_AUTH_USER)<2) or (strlen($PHP_AUTH_PW)<2) or (!$auth))
+	{
+    Header("WWW-Authenticate: Basic realm=\"VICI-PROJECTS\"");
+    Header("HTTP/1.0 401 Unauthorized");
+    echo "Invalid Username/Password: |$PHP_AUTH_USER|$PHP_AUTH_PW|\n";
+    exit;
+	}
+
+$STARTtime = date("U");
+$TODAY = date("Y-m-d");
+$date_with_hour_default = date("Y-m-d H");
+$date_no_hour_default = $TODAY;
+
+if (!isset($date_with_hour)) {$date_with_hour = $date_with_hour_default;}
+	$date_no_hour = $date_with_hour;
+	$date_no_hour = eregi_replace(" ([0-9]{2})",'',$date_no_hour);
+if (!isset($begin_date)) {$begin_date = $TODAY;}
+if (!isset($end_date)) {$end_date = $TODAY;}
+
+	$stmt="SELECT count(*) from vicidial_users where user='$PHP_AUTH_USER' and pass='$PHP_AUTH_PW' and user_level > 7;";
+	$rslt=mysql_query($stmt, $link);
+	$row=mysql_fetch_row($rslt);
+	$auth=$row[0];
+
+$fp = fopen ("./project_auth_entries.txt", "a");
+$date = date("r");
+$ip = getenv("REMOTE_ADDR");
+$browser = getenv("HTTP_USER_AGENT");
+
+  if( (strlen($PHP_AUTH_USER)<2) or (strlen($PHP_AUTH_PW)<2) or (!$auth))
+	{
+    Header("WWW-Authenticate: Basic realm=\"VICI-PROJECTS\"");
+    Header("HTTP/1.0 401 Unauthorized");
+    echo "Invalid Username/Password: |$PHP_AUTH_USER|$PHP_AUTH_PW|\n";
+    exit;
+	}
+  else
+	{
+	header ("Content-type: text/html; charset=utf-8");
+
+	if($auth>0)
+		{
+		$office_no=strtoupper($PHP_AUTH_USER);
+		$password=strtoupper($PHP_AUTH_PW);
+			$stmt="SELECT full_name from vicidial_users where user='$PHP_AUTH_USER' and pass='$PHP_AUTH_PW'";
+			$rslt=mysql_query($stmt, $link);
+			$row=mysql_fetch_row($rslt);
+			$LOGfullname=$row[0];
+		fwrite ($fp, "VICIDIAL|GOOD|$date|$PHP_AUTH_USER|$PHP_AUTH_PW|$ip|$browser|$LOGfullname|\n");
+		fclose($fp);
+		}
+	else
+		{
+		fwrite ($fp, "VICIDIAL|FAIL|$date|$PHP_AUTH_USER|$PHP_AUTH_PW|$ip|$browser|\n");
+		fclose($fp);
+		}
+
+#	$stmt="SELECT full_name from vicidial_users where user='$user';";
+#	$rslt=mysql_query($stmt, $link);
+#	$row=mysql_fetch_row($rslt);
+#	$full_name = $row[0];
+
+	}
+
+
+
+
+?>
+<html>
+<head>
+<title>VICIDIAL ADMIN: Group Hourly Stats</title>
+<?
+echo "<META HTTP-EQUIV=\"Content-Type\" CONTENT=\"text/html; charset=utf-8\">\n";
+?>
+</head>
+<BODY BGCOLOR=white marginheight=0 marginwidth=0 leftmargin=0 topmargin=0>
+<CENTER>
+<TABLE WIDTH=620 BGCOLOR=#D9E6FE cellpadding=2 cellspacing=0><TR BGCOLOR=#015B91><TD ALIGN=LEFT><FONT FACE="ARIAL,HELVETICA" COLOR=WHITE SIZE=2><B> &nbsp; VICIDIAL ADMIN: Group Hourly Stats <? echo $group ?></TD><TD ALIGN=RIGHT><FONT FACE="ARIAL,HELVETICA" COLOR=WHITE SIZE=2><B><? echo date("l F j, Y G:i:s A") ?> &nbsp; </TD></TR>
+
+
+
+
+<? 
+
+if ( ($group) and ($status) and ($date_with_hour) )
+{
+$stmt="SELECT user,full_name from vicidial_users where user_group = '" . mysql_real_escape_string($group) . "' order by full_name desc;";
+	if ($DB) {echo "$stmt\n";}
+$rslt=mysql_query($stmt, $link);
+$tsrs_to_print = mysql_num_rows($rslt);
+	$o=0;
+	while($o < $tsrs_to_print)
+	{
+		$row=mysql_fetch_row($rslt);
+		$VDuser[$o] = "$row[0]";
+		$VDname[$o] = "$row[1]";
+		$o++;
+	}
+
+	$o=0;
+	while($o < $tsrs_to_print)
+	{
+		$stmt="select count(*) from vicidial_log where call_date >= '" . mysql_real_escape_string($date_with_hour) . ":00:00' and  call_date <= '" . mysql_real_escape_string($date_with_hour) . ":59:59' and user='$VDuser[$o]';";
+			if ($DB) {echo "$stmt\n";}
+		$rslt=mysql_query($stmt, $link);
+		$row=mysql_fetch_row($rslt);
+		$VDtotal[$o] = "$row[0]";
+
+		$stmt="select count(*) from vicidial_log where call_date >= '" . mysql_real_escape_string($date_no_hour) . " 00:00:00' and  call_date <= '" . mysql_real_escape_string($date_no_hour) . " 23:59:59' and user='$VDuser[$o]' and status='" . mysql_real_escape_string($status) . "';";
+			if ($DB) {echo "$stmt\n";}
+		$rslt=mysql_query($stmt, $link);
+		$row=mysql_fetch_row($rslt);
+		$VDday[$o] = "$row[0]";
+
+		$stmt="select count(*) from vicidial_log where call_date >= '" . mysql_real_escape_string($date_with_hour) . ":00:00' and  call_date <= '" . mysql_real_escape_string($date_with_hour) . ":59:59' and user='$VDuser[$o]' and status='" . mysql_real_escape_string($status) . "';";
+			if ($DB) {echo "$stmt\n";}
+		$rslt=mysql_query($stmt, $link);
+		$row=mysql_fetch_row($rslt);
+		$VDcount[$o] = "$row[0]";
+		$o++;
+	}
+
+echo "<TR><TD ALIGN=LEFT COLSPAN=2>\n";
+
+echo "<br><center>\n";
+
+echo "<B>TSR HOUR COUNTS: $group | $status | $date_with_hour | $date_no_hour</B>\n";
+
+echo "<center><TABLE width=600 cellspacing=0 cellpadding=1>\n";
+echo "<tr><td><font size=2>TSR </td><td align=left><font size=2>ID </td><td align=right><font size=2> &nbsp; $status</td><td align=right><font size=2> &nbsp; TOTAL CALLS</td><td align=right><font size=2> &nbsp; $status DAY</td><td align=right><font size=2> &nbsp; &nbsp; </td></tr>\n";
+
+	$day_calls=0;
+	$hour_calls=0;
+	$total_calls=0;
+	$o=0;
+	while($o < $tsrs_to_print)
+	{
+		if (eregi("1$|3$|5$|7$|9$", $o))
+			{$bgcolor='bgcolor="#B9CBFD"';} 
+		else
+			{$bgcolor='bgcolor="#9BB9FB"';}
+		echo "<tr $bgcolor><td><font size=2>$VDuser[$o]</td>";
+		echo "<td align=left><font size=2> $VDname[$o]</td>\n";
+		echo "<td align=right><font size=2> $VDcount[$o]</td>\n";
+		echo "<td align=right><font size=2> $VDtotal[$o]</td>\n";
+		echo "<td align=right><font size=2> $VDday[$o]</td>\n";
+		echo "<td align=right><font size=1><a href=\"./admin.php?ADD=3&user=$VDuser[$o]\">MODIFY</a> | <a href=\"./user_stats.php?user=$VDuser[$o]\">STATS</a></td></tr>\n";
+		$total_calls = ($total_calls + $VDtotal[$o]);
+		$hour_calls = ($hour_calls + $VDcount[$o]);
+		$day_calls = ($day_calls + $VDday[$o]);
+
+		$o++;
+	}
+
+echo "<tr><td><font size=2>TOTAL </td><td align=right><font size=2> $status </td><td align=right><font size=2> $hour_calls</td><td align=right><font size=2> $total_calls</td><td align=right><font size=2> $day_calls</td></tr>\n";
+
+
+}
+
+echo "</TABLE></center>\n";
+echo "<br><br>\n";
+
+
+	echo "<br>Please enter the group you want to get hourly stats for: <form action=$PHP_SELF method=POST>\n";
+	echo "<input type=hidden name=DB value=$DB>\n";
+	echo "group: <select size=1 name=group>\n";
+
+		$stmt="SELECT * from vicidial_user_groups order by user_group";
+		$rslt=mysql_query($stmt, $link);
+		$groups_to_print = mysql_num_rows($rslt);
+		$o=0;
+		$groups_list='';
+		while ($groups_to_print > $o) {
+			$rowx=mysql_fetch_row($rslt);
+			if ($group == $group)
+				{$groups_list .= "<option selected value=\"$rowx[0]\">$rowx[0] - $rowx[1]</option>\n";}
+			else
+				{$groups_list .= "<option value=\"$rowx[0]\">$rowx[0] - $rowx[1]</option>\n";}
+			$o++;
+		}
+	echo "$groups_list</select><br>\n";
+	echo "status: <input type=text name=status size=10 maxlength=10 value=\"$status\"> &nbsp; (example: XFER)<br>\n";
+	echo "date with hour: <input type=text name=date_with_hour size=14 maxlength=13 value=\"$date_with_hour\"> &nbsp; (example: 2004-06-25 14)<br>\n";
+	echo "<input type=submit name=submit value=SUBMIT>\n";
+	echo "<BR><BR><BR>\n";
+
+
+$ENDtime = date("U");
+
+$RUNtime = ($ENDtime - $STARTtime);
+
+echo "\n\n\n<br><br><br>\n\n";
+
+
+echo "<font size=0>\n\n\n<br><br><br>\nscript runtime: $RUNtime seconds</font>";
+
+
+?>
+
+
+</TD></TR><TABLE>
+</body>
+</html>
+
+<?
+	
+exit; 
+
+
+
+?>
+
+
+
+
+
diff --git a/www/vicidial/help.gif b/www/vicidial/help.gif
new file mode 100644
index 0000000000000000000000000000000000000000..5575d7c8761954a943a67f99265cc408edfeca37
GIT binary patch
literal 492
zcmV<I0Tcd5Nk%w1VH5xq0M$PLeSLc$OnKAd`Kz(HQ&Us?{QP8OWU8sDlarEKT3W~5
z`-6glU|?WLNl7p;FZTBK`uh6v^77W!)z8k&%gf8SxVXc^!3_-!oST}tyS@JY|G>@K
zrlzK7XlVcc{(zdZkfy!h=k1@f#?ad1KW2>Z^Y)^mqV4VLXlQ0|jj7+?-?g=~@9*#a
z|NoMak9c=?>FMXq%*)5e#og%my1BWCh=?#*gAYJ&zrMYsqoV%*{r~>|{{H^||Nj6p
zX13G(A^8LW002J#EC2ui02BZe000L6z@KnPEE<W5LC0~qI64QxQAkS=YBWhK_i7Mm
z3L}SMdgxlcUIB(%7&t{5Bc{`ZKp#-3K0z2NLjnmL1w0}?h=?f~5EcLlQa=L(1wA2%
zHzYTR8#@me4Ff_Q2s}L?h$A~Ch#zS<C>=r$6g+ktoje(cAZZc{4nh|!Jvux)X@@=m
zC21-y7sABGX&Z<(B|AJC&(S}$JRWB|DXBdgJUkNs!9S#?9v(X*xM}G+D<}p+2b5_V
z8b~1O;i1q87Yz;w5oDsk4s-&2^x#n-!huJTe#ntg$k2xm+8(U%L!-zT3@08O+Yv#+
i0XJ}rR3Wh7fCU;Dx+Ew$Wrh+7CQhJ)nL_kP5CA(E_TC-<

literal 0
HcmV?d00001

diff --git a/www/vicidial/listloader.php b/www/vicidial/listloader.php
new file mode 100644
index 00000000..920505a8
--- /dev/null
+++ b/www/vicidial/listloader.php
@@ -0,0 +1,698 @@
+<?
+# listloader.php
+# 
+# Copyright (C) 2006  Matt Florell,Joe Johnson <vicidial@gmail.com>    LICENSE: GPLv2
+#
+# AST Web GUI lead loader from formatted file
+# 
+# CHANGES
+# 50602-1640 - First version created by Joe Johnson
+# 51128-1108 - Removed PHP global vars requirement
+# 60421-1043 - check GET/POST vars lines with isset to not trigger PHP NOTICES
+# 60616-1006 - added listID override and gmt_offset lookup while loading
+# 60619-1652 - Added variable filtering to eliminate SQL injection attack threat
+#
+# make sure vicidial_list exists and that your file follows the formatting correctly. This page does not dedupe or do any other lead filtering actions yet at this time.
+#
+
+$version = '1.1.12';
+$build = '60619-1652';
+
+header ("Content-type: text/html; charset=utf-8");
+
+require("dbconnect.php");
+
+$PHP_AUTH_USER=$_SERVER['PHP_AUTH_USER'];
+$PHP_AUTH_PW=$_SERVER['PHP_AUTH_PW'];
+$PHP_SELF=$_SERVER['PHP_SELF'];
+$leadfile=$_FILES["leadfile"];
+	$LF_orig = $_FILES['leadfile']['name'];
+	$LF_path = $_FILES['leadfile']['tmp_name'];
+$submit_file=$_GET["submit_file"];				if (!$submit_file) {$submit_file=$_POST["submit_file"];}
+$list_id_override=$_GET["list_id_override"];	if (!$list_id_override) {$list_id_override=$_POST["list_id_override"];}
+	$list_id_override = (preg_replace("/\D/","",$list_id_override));
+$submit=$_GET["submit"];						if (!$submit) {$submit=$_POST["submit"];}
+$SUBMIT=$_GET["SUBMIT"];						if (!$SUBMIT) {$SUBMIT=$_POST["SUBMIT"];}
+
+
+#$DB=1;
+#$DBX=1;
+
+$PHP_AUTH_USER = ereg_replace("[^0-9a-zA-Z]","",$PHP_AUTH_USER);
+$PHP_AUTH_PW = ereg_replace("[^0-9a-zA-Z]","",$PHP_AUTH_PW);
+$list_id_override = ereg_replace("[^0-9]","",$list_id_override);
+
+
+$script_name = getenv("SCRIPT_NAME");
+$server_name = getenv("SERVER_NAME");
+$server_port = getenv("SERVER_PORT");
+if (eregi("443",$server_port)) {$HTTPprotocol = 'https://';}
+  else {$HTTPprotocol = 'http://';}
+$admDIR = "$HTTPprotocol$server_name$script_name";
+$admDIR = eregi_replace('listloader.php','',$admDIR);
+$admSCR = 'admin.php';
+$NWB = " &nbsp; <a href=\"javascript:openNewWindow('$admDIR$admSCR?ADD=99999";
+$NWE = "')\"><IMG SRC=\"help.gif\" WIDTH=20 HEIGHT=20 BORDER=0 ALT=\"HELP\" ALIGN=TOP></A>";
+
+
+$secX = date("U");
+$hour = date("H");
+$min = date("i");
+$sec = date("s");
+$mon = date("m");
+$mday = date("d");
+$year = date("Y");
+$isdst = date("I");
+$Shour = date("H");
+$Smin = date("i");
+$Ssec = date("s");
+$Smon = date("m");
+$Smday = date("d");
+$Syear = date("Y");
+$pulldate0 = "$year-$mon-$mday $hour:$min:$sec";
+$inSD = $pulldate0;
+$dsec = ( ( ($hour * 3600) + ($min * 60) ) + $sec );
+
+	### Grab Server GMT value from the database
+	$stmt="SELECT local_gmt FROM servers where server_ip = '$server_ip';";
+	$rslt=mysql_query($stmt, $link);
+	$gmt_recs = mysql_num_rows($rslt);
+	if ($gmt_recs > 0)
+		{
+		$row=mysql_fetch_row($rslt);
+		$DBSERVER_GMT		=		"$row[0]";
+		if (strlen($DBSERVER_GMT)>0)	{$SERVER_GMT = $DBSERVER_GMT;}
+		if ($isdst) {$SERVER_GMT++;} 
+		}
+	else
+		{
+		$SERVER_GMT = date("O");
+		$SERVER_GMT = eregi_replace("\+","",$SERVER_GMT);
+		$SERVER_GMT = ($SERVER_GMT + 0);
+		$SERVER_GMT = ($SERVER_GMT / 100);
+		}
+
+	$LOCAL_GMT_OFF = $SERVER_GMT;
+	$LOCAL_GMT_OFF_STD = $SERVER_GMT;
+
+#if ($DB) {print "SEED TIME  $secX      :   $year-$mon-$mday $hour:$min:$sec  LOCAL GMT OFFSET NOW: $LOCAL_GMT_OFF\n";}
+
+echo "<html>\n";
+echo "<head>\n";
+echo "<!-- VERSION: $version     BUILD: $build -->\n";
+echo "<!-- SEED TIME  $secX:   $year-$mon-$mday $hour:$min:$sec  LOCAL GMT OFFSET NOW: $LOCAL_GMT_OFF  DST: $isdst -->\n";
+
+
+?>
+
+
+<script language="JavaScript1.2">
+function openNewWindow(url) {
+  window.open (url,"",'width=500,height=300,scrollbars=yes,menubar=yes,address=yes');
+}
+function ShowProgress(good, bad, total) {
+	parent.lead_count.document.open();
+	parent.lead_count.document.write('<html><body><table border=0 width=200 cellpadding=10 cellspacing=0 align=center valign=top><tr bgcolor="#000000"><th colspan=2><font face="arial, helvetica" size=3 color=white>Current file status:</font></th></tr><tr bgcolor="#009900"><td align=right><font face="arial, helvetica" size=2 color=white><B>Good:</B></font></td><td align=left><font face="arial, helvetica" size=2 color=white><B>'+good+'</B></font></td></tr><tr bgcolor="#990000"><td align=right><font face="arial, helvetica" size=2 color=white><B>Bad:</B></font></td><td align=left><font face="arial, helvetica" size=2 color=white><B>'+bad+'</B></font></td></tr><tr bgcolor="#000099"><td align=right><font face="arial, helvetica" size=2 color=white><B>Total:</B></font></td><td align=left><font face="arial, helvetica" size=2 color=white><B>'+total+'</B></font></td></tr></table><body></html>');
+	parent.lead_count.document.close();
+}
+</script>
+</head>
+<body>
+<form action=<?=$PHP_SELF ?> method=post enctype="multipart/form-data">
+<table align=center width="500" border=0 cellpadding=5 cellspacing=0 bgcolor=#D9E6FE>
+  <tr>
+	<td align=right width="25%"><font face="arial, helvetica" size=2>Load leads from this file:</font></td>
+	<td align=left width="75%"><input type=file name="leadfile" value="<?=$leadfile ?>"> <? echo "$NWB#vicidial_list_loader$NWE"; ?></td>
+  </tr>
+  <tr>
+	<td align=right width="25%"><font face="arial, helvetica" size=2>List ID Override: </font></td>
+	<td align=left width="75%"><font face="arial, helvetica" size=1><input type=text value="" name='list_id_override' size=10 maxlength=8> (numbers only or leave blank for values in the file)</td>
+  </tr>
+  <tr>
+	<td align=center><input type=submit value="SUBMIT" name='submit_file'></td>
+	<td align=center><input type=button onClick="javascript:document.location='listloader.php'" value="START OVER" name='reload_page'></td>
+  </tr>
+  <tr><td colspan=2><font size=1><a href="new_listloader_superL.php" target="_parent">CLICK HERE TO GO TO THE SUPER LEAD LOADER (BETA VERSION)</a> &nbsp; &nbsp; <a href="admin.php" target="_parent">BACK TO ADMIN</a></font></td></tr>
+</table>
+</form>
+<?
+
+#echo "|$LF_orig|$LF_path|\n";
+
+if ($leadfile and filesize($LF_path)<=8388608) {
+	print "<script language='JavaScript1.2'>document.forms[0].leadfile.disabled=true; document.forms[0].submit_file.disabled=true; document.forms[0].reload_page.disabled=true;</script>";
+	flush();
+	copy($LF_path, "$WeBServeRRooT/vicidial/vicidial_temp_file.txt");
+	$file=fopen("$WeBServeRRooT/vicidial/vicidial_temp_file.txt", "r");
+	if ($WeBRooTWritablE > 0)
+		{$stmt_file=fopen("$WeBServeRRooT/vicidial/listloader_stmts.txt", "w");}
+	$pulldate=date("Y-m-d H:i:s");
+
+	$buffer=fgets($file, 4096);
+	$tab_count=substr_count($buffer, "\t");
+	$pipe_count=substr_count($buffer, "|");
+
+	if ($tab_count>$pipe_count) {$delimiter="\t";  $delim_name="tab";} else {$delimiter="|";  $delim_name="pipe";}
+	$field_check=explode($delimiter, $buffer);
+
+	if (count($field_check)>=5) {
+		flush();
+		$file=fopen("./vicidial_temp_file.txt", "r");
+		$total=0; $good=0; $bad=0;
+		print "<center><font face='arial, helvetica' size=3 color='#009900'><B>Processing $delim_name-delimited file... ($tab_count|$pipe_count)\n";
+
+	if (strlen($list_id_override)>0) 
+		{
+		print "<BR><BR>LIST ID OVERRIDE FOR THIS FILE: $list_id_override<BR><BR>";
+		}
+		
+		while (!feof($file)) {
+			$record++;
+			$buffer=rtrim(fgets($file, 4096));
+			$buffer=stripslashes($buffer);
+
+			if (strlen($buffer)>0) {
+				$row=explode($delimiter, eregi_replace("[\'\"]", "", $buffer));
+				$vendor_lead_code =		$row[0];
+				$source_code =			$row[1];
+				$source_id=$source_code;
+				$list_id =				$row[2];
+				$phone_code =			eregi_replace("[^0-9]", "", $row[3]);
+				$phone_number =			eregi_replace("[^0-9]", "", $row[4]);
+					$USarea = 			substr($phone_number, 0, 3);
+				$title =				$row[5];
+				$first_name =			$row[6];
+				$middle_initial =		$row[7];
+				$last_name =			$row[8];
+				$address1 =				$row[9];
+				$address2 =				$row[10];
+				$address3 =				$row[11];
+				$city =					$row[12];
+				$state =				$row[13];
+				$province =				$row[14];
+				$postal_code =			$row[15];
+				$country =				$row[16];
+				$gender =				$row[17];
+				$date_of_birth =		$row[18];
+				$alt_phone =			$row[19];
+				$email =				$row[20];
+				$security_phrase =		$row[21];
+				$comments =				trim($row[22]);
+
+				if (strlen($phone_number)>8) 
+					{
+					$entry_date =			"$pulldate";
+					$modify_date =			"";
+					$status =				"NEW";
+					$user =					"";
+					$gmt_offset =			'0';
+					$called_since_last_reset='N';
+
+					if (strlen($list_id_override)>0) 
+						{
+					#	print "<BR><BR>LIST ID OVERRIDE FOR THIS FILE: $list_id_override<BR><BR>";
+						$list_id = $list_id_override;
+						}
+
+					$PC_processed=0;
+					### UNITED STATES ###
+					if ($phone_code =='1')
+						{
+						$stmt="select * from vicidial_phone_codes where country_code='$phone_code' and areacode='$USarea';";
+						$rslt=mysql_query($stmt, $link);
+						$pc_recs = mysql_num_rows($rslt);
+						if ($pc_recs > 0)
+							{
+							$row=mysql_fetch_row($rslt);
+							$gmt_offset =	$row[4];	 $gmt_offset = eregi_replace("\+","",$gmt_offset);
+							$dst =			$row[5];
+							$dst_range =	$row[6];
+							$PC_processed++;
+							}
+						}
+					### MEXICO ###
+					if ($phone_code =='52')
+						{
+						$stmt="select * from vicidial_phone_codes where country_code='$phone_code' and areacode='$USarea';";
+						$rslt=mysql_query($stmt, $link);
+						$pc_recs = mysql_num_rows($rslt);
+						if ($pc_recs > 0)
+							{
+							$row=mysql_fetch_row($rslt);
+							$gmt_offset =	$row[4];	 $gmt_offset = eregi_replace("\+","",$gmt_offset);
+							$dst =			$row[5];
+							$dst_range =	$row[6];
+							$PC_processed++;
+							}
+						}
+					### AUSTRALIA ###
+					if ($phone_code =='61')
+						{
+						$stmt="select * from vicidial_phone_codes where country_code='$phone_code' and state='$state';";
+						$rslt=mysql_query($stmt, $link);
+						$pc_recs = mysql_num_rows($rslt);
+						if ($pc_recs > 0)
+							{
+							$row=mysql_fetch_row($rslt);
+							$gmt_offset =	$row[4];	 $gmt_offset = eregi_replace("\+","",$gmt_offset);
+							$dst =			$row[5];
+							$dst_range =	$row[6];
+							$PC_processed++;
+							}
+						}
+					### ALL OTHER COUNTRY CODES ###
+					if (!$PC_processed)
+						{
+						$PC_processed++;
+						$stmt="select * from vicidial_phone_codes where country_code='$phone_code';";
+						$rslt=mysql_query($stmt, $link);
+						$pc_recs = mysql_num_rows($rslt);
+						if ($pc_recs > 0)
+							{
+							$row=mysql_fetch_row($rslt);
+							$gmt_offset =	$row[4];	 $gmt_offset = eregi_replace("\+","",$gmt_offset);
+							$dst =			$row[5];
+							$dst_range =	$row[6];
+							$PC_processed++;
+							}
+						}
+
+					### Find out if DST to raise the gmt offset ###
+					$AC_GMT_diff = ($gmt_offset - $LOCAL_GMT_OFF_STD);
+					$AC_localtime = mktime(($Shour + $AC_GMT_diff), $Smin, $Ssec, $Smon, $Smday, $Syear);
+						$hour = date("H",$AC_localtime);
+						$min = date("i",$AC_localtime);
+						$sec = date("s",$AC_localtime);
+						$mon = date("m",$AC_localtime);
+						$mday = date("d",$AC_localtime);
+						$wday = date("w",$AC_localtime);
+						$year = date("Y",$AC_localtime);
+					$dsec = ( ( ($hour * 3600) + ($min * 60) ) + $sec );
+					
+					$AC_processed=0;
+					if ( (!$AC_processed) and ($dst_range == 'FSA-LSO') )
+						{
+						if ($DBX) {print "     First Sunday April to Last Sunday October\n";}
+						#**********************************************************************
+						# FSA-LSO
+						#     This is returns 1 if Daylight Savings Time is in effect and 0 if 
+						#       Standard time is in effect.
+						#     Based on first Sunday in April and last Sunday in October at 2 am.
+						#     INPUTS:
+						#       mm              INTEGER       Month.
+						#       dd              INTEGER       Day of the month.
+						#       ns              INTEGER       Seconds into the day.
+						#       dow             INTEGER       Day of week (0=Sunday, to 6=Saturday)
+						#     OPTIONAL INPUT:
+						#       timezone        INTEGER       hour difference UTC - local standard time
+						#                                      (DEFAULT is blank)
+						#                                     make calculations based on UTC time, 
+						#                                     which means shift at 10:00 UTC in April
+						#                                     and 9:00 UTC in October
+						#     OUTPUT: 
+						#                       INTEGER       1 = DST, 0 = not DST
+						#**********************************************************************
+							
+							$USA_DST=0;
+							$mm = $mon;
+							$dd = $mday;
+							$ns = $dsec;
+							$dow= $wday;
+
+							if ($mm < 4 || $mm > 10) {
+							$USA_DST=0;
+							} elseif ($mm >= 5 and $mm <= 9) {
+							$USA_DST=1;
+							} elseif ($mm == 4) {
+							if ($dd > 7) {
+								$USA_DST=1;
+							} elseif ($dd >= ($dow+1)) {
+								if ($timezone) {
+								if ($dow == 0 and $ns < (7200+$timezone*3600)) {
+									$USA_DST=0;
+								} else {
+									$USA_DST=1;
+								}
+								} else {
+								if ($dow == 0 and $ns < 7200) {
+									$USA_DST=0;
+								} else {
+									$USA_DST=1;
+								}
+								}
+							} else {
+								$USA_DST=0;
+							}
+							} elseif ($mm == 10) {
+							if ($dd < 25) {
+								$USA_DST=1;
+							} elseif ($dd < ($dow+25)) {
+								$USA_DST=1;
+							} elseif ($dow == 0) {
+								if ($timezone) { # UTC calculations
+								if ($ns < (7200+($timezone-1)*3600)) {
+									$USA_DST=1;
+								} else {
+									$USA_DST=0;
+								}
+								} else { # local time calculations
+								if ($ns < 7200) {
+									$USA_DST=1;
+								} else {
+									$USA_DST=0;
+								}
+								}
+							} else {
+								$USA_DST=0;
+							}
+							} # end of month checks
+
+						if ($DBX) {print "     DST: $USA_DST\n";}
+						if ($USA_DST) {$gmt_offset++;}
+						$AC_processed++;
+						}
+
+					if ( (!$AC_processed) and ($dst_range == 'LSM-LSO') )
+						{
+						if ($DBX) {print "     Last Sunday March to Last Sunday October\n";}
+						#**********************************************************************
+						#     This is s 1 if Daylight Savings Time is in effect and 0 if 
+						#       Standard time is in effect.
+						#     Based on last Sunday in March and last Sunday in October at 1 am.
+						#**********************************************************************
+							
+							$GBR_DST=0;
+							$mm = $mon;
+							$dd = $mday;
+							$ns = $dsec;
+							$dow= $wday;
+
+							if ($mm < 3 || $mm > 10) {
+							$GBR_DST=0;
+							} elseif ($mm >= 4 and $mm <= 9) {
+							$GBR_DST=1;
+							} elseif ($mm == 3) {
+							if ($dd < 25) {
+								$GBR_DST=0;
+							} elseif ($dd < ($dow+25)) {
+								$GBR_DST=0;
+							} elseif ($dow == 0) {
+								if ($timezone) { # UTC calculations
+								if ($ns < (3600+($timezone-1)*3600)) {
+									$GBR_DST=0;
+								} else {
+									$GBR_DST=1;
+								}
+								} else { # local time calculations
+								if ($ns < 3600) {
+									$GBR_DST=0;
+								} else {
+									$GBR_DST=1;
+								}
+								}
+							} else {
+								$GBR_DST=1;
+							}
+							} elseif ($mm == 10) {
+							if ($dd < 25) {
+								$GBR_DST=1;
+							} elseif ($dd < ($dow+25)) {
+								$GBR_DST=1;
+							} elseif ($dow == 0) {
+								if ($timezone) { # UTC calculations
+								if ($ns < (3600+($timezone-1)*3600)) {
+									$GBR_DST=1;
+								} else {
+									$GBR_DST=0;
+								}
+								} else { # local time calculations
+								if ($ns < 3600) {
+									$GBR_DST=1;
+								} else {
+									$GBR_DST=0;
+								}
+								}
+							} else {
+								$GBR_DST=0;
+							}
+							} # end of month checks
+							if ($DBX) {print "     DST: $GBR_DST\n";}
+						if ($GBR_DST) {$gmt_offset++;}
+						$AC_processed++;
+						}
+					if ( (!$AC_processed) and ($dst_range == 'LSO-LSM') )
+						{
+						if ($DBX) {print "     Last Sunday October to Last Sunday March\n";}
+						#**********************************************************************
+						#     This is s 1 if Daylight Savings Time is in effect and 0 if 
+						#       Standard time is in effect.
+						#     Based on last Sunday in October and last Sunday in March at 1 am.
+						#**********************************************************************
+							
+							$AUS_DST=0;
+							$mm = $mon;
+							$dd = $mday;
+							$ns = $dsec;
+							$dow= $wday;
+
+							if ($mm < 3 || $mm > 10) {
+							$AUS_DST=1;
+							} elseif ($mm >= 4 and $mm <= 9) {
+							$AUS_DST=0;
+							} elseif ($mm == 3) {
+							if ($dd < 25) {
+								$AUS_DST=1;
+							} elseif ($dd < ($dow+25)) {
+								$AUS_DST=1;
+							} elseif ($dow == 0) {
+								if ($timezone) { # UTC calculations
+								if ($ns < (3600+($timezone-1)*3600)) {
+									$AUS_DST=1;
+								} else {
+									$AUS_DST=0;
+								}
+								} else { # local time calculations
+								if ($ns < 3600) {
+									$AUS_DST=1;
+								} else {
+									$AUS_DST=0;
+								}
+								}
+							} else {
+								$AUS_DST=0;
+							}
+							} elseif ($mm == 10) {
+							if ($dd < 25) {
+								$AUS_DST=0;
+							} elseif ($dd < ($dow+25)) {
+								$AUS_DST=0;
+							} elseif ($dow == 0) {
+								if ($timezone) { # UTC calculations
+								if ($ns < (3600+($timezone-1)*3600)) {
+									$AUS_DST=0;
+								} else {
+									$AUS_DST=1;
+								}
+								} else { # local time calculations
+								if ($ns < 3600) {
+									$AUS_DST=0;
+								} else {
+									$AUS_DST=1;
+								}
+								}
+							} else {
+								$AUS_DST=1;
+							}
+							} # end of month checks						
+						if ($DBX) {print "     DST: $AUS_DST\n";}
+						if ($AUS_DST) {$gmt_offset++;}
+						$AC_processed++;
+						}
+
+					if ( (!$AC_processed) and ($dst_range == 'FSO-LSM') )
+						{
+						if ($DBX) {print "     First Sunday October to Last Sunday March\n";}
+						#**********************************************************************
+						#   TASMANIA ONLY
+						#     This is s 1 if Daylight Savings Time is in effect and 0 if 
+						#       Standard time is in effect.
+						#     Based on first Sunday in October and last Sunday in March at 1 am.
+						#**********************************************************************
+							
+							$AUST_DST=0;
+							$mm = $mon;
+							$dd = $mday;
+							$ns = $dsec;
+							$dow= $wday;
+
+							if ($mm < 3 || $mm > 10) {
+							$AUST_DST=1;
+							} elseif ($mm >= 4 and $mm <= 9) {
+							$AUST_DST=0;
+							} elseif ($mm == 3) {
+							if ($dd < 25) {
+								$AUST_DST=1;
+							} elseif ($dd < ($dow+25)) {
+								$AUST_DST=1;
+							} elseif ($dow == 0) {
+								if ($timezone) { # UTC calculations
+								if ($ns < (3600+($timezone-1)*3600)) {
+									$AUST_DST=1;
+								} else {
+									$AUST_DST=0;
+								}
+								} else { # local time calculations
+								if ($ns < 3600) {
+									$AUST_DST=1;
+								} else {
+									$AUST_DST=0;
+								}
+								}
+							} else {
+								$AUST_DST=0;
+							}
+							} elseif ($mm == 10) {
+							if ($dd > 7) {
+								$AUST_DST=1;
+							} elseif ($dd >= ($dow+1)) {
+								if ($timezone) {
+								if ($dow == 0 and $ns < (7200+$timezone*3600)) {
+									$AUST_DST=0;
+								} else {
+									$AUST_DST=1;
+								}
+								} else {
+								if ($dow == 0 and $ns < 3600) {
+									$AUST_DST=0;
+								} else {
+									$AUST_DST=1;
+								}
+								}
+							} else {
+								$AUST_DST=0;
+							}
+							} # end of month checks						
+						if ($DBX) {print "     DST: $AUST_DST\n";}
+						if ($AUST_DST) {$gmt_offset++;}
+						$AC_processed++;
+						}
+					if ( (!$AC_processed) and ($dst_range == 'FSO-TSM') )
+						{
+						if ($DBX) {print "     First Sunday October to Third Sunday March\n";}
+						#**********************************************************************
+						#     This is s 1 if Daylight Savings Time is in effect and 0 if 
+						#       Standard time is in effect.
+						#     Based on first Sunday in October and third Sunday in March at 1 am.
+						#**********************************************************************
+							
+							$NZL_DST=0;
+							$mm = $mon;
+							$dd = $mday;
+							$ns = $dsec;
+							$dow= $wday;
+
+							if ($mm < 3 || $mm > 10) {
+							$NZL_DST=1;
+							} elseif ($mm >= 4 and $mm <= 9) {
+							$NZL_DST=0;
+							} elseif ($mm == 3) {
+							if ($dd < 14) {
+								$NZL_DST=1;
+							} elseif ($dd < ($dow+14)) {
+								$NZL_DST=1;
+							} elseif ($dow == 0) {
+								if ($timezone) { # UTC calculations
+								if ($ns < (3600+($timezone-1)*3600)) {
+									$NZL_DST=1;
+								} else {
+									$NZL_DST=0;
+								}
+								} else { # local time calculations
+								if ($ns < 3600) {
+									$NZL_DST=1;
+								} else {
+									$NZL_DST=0;
+								}
+								}
+							} else {
+								$NZL_DST=0;
+							}
+							} elseif ($mm == 10) {
+							if ($dd > 7) {
+								$NZL_DST=1;
+							} elseif ($dd >= ($dow+1)) {
+								if ($timezone) {
+								if ($dow == 0 and $ns < (7200+$timezone*3600)) {
+									$NZL_DST=0;
+								} else {
+									$NZL_DST=1;
+								}
+								} else {
+								if ($dow == 0 and $ns < 3600) {
+									$NZL_DST=0;
+								} else {
+									$NZL_DST=1;
+								}
+								}
+							} else {
+								$NZL_DST=0;
+							}
+							} # end of month checks						
+						if ($DBX) {print "     DST: $NZL_DST\n";}
+						if ($NZL_DST) {$gmt_offset++;}
+						$AC_processed++;
+						}
+					if (!$AC_processed)
+						{
+						if ($DBX) {print "     No DST Method Found\n";}
+						if ($DBX) {print "     DST: 0\n";}
+						$AC_processed++;
+						}
+
+
+					if ($multi_insert_counter > 8) {
+						### insert good deal into pending_transactions table ###
+						$stmtZ = "INSERT INTO vicidial_list values$multistmt('','$entry_date','$modify_date','$status','$user','$vendor_lead_code','$source_id','$list_id','$gmt_offset','$called_since_last_reset','$phone_code','$phone_number','$title','$first_name','$middle_initial','$last_name','$address1','$address2','$address3','$city','$state','$province','$postal_code','$country_code','$gender','$date_of_birth','$alt_phone','$email','$security_phrase','$comments',0);";
+						$rslt=mysql_query($stmtZ, $link);
+							if ($WeBRooTWritablE > 0)
+								{fwrite($stmt_file, $stmtZ."\r\n");}
+						$multistmt='';
+						$multi_insert_counter=0;
+
+					} else {
+						$multistmt .= "('','$entry_date','$modify_date','$status','$user','$vendor_lead_code','$source_id','$list_id','$gmt_offset','$called_since_last_reset','$phone_code','$phone_number','$title','$first_name','$middle_initial','$last_name','$address1','$address2','$address3','$city','$state','$province','$postal_code','$country_code','$gender','$date_of_birth','$alt_phone','$email','$security_phrase','$comments',0),";
+						$multi_insert_counter++;
+					}
+
+					$good++;
+				} else {
+					if ($bad < 10) {print "<BR></b><font size=1 color=red>record $total BAD- PHONE: $phone_number ROW: |$row[0]|</font><b>\n";}
+					$bad++;
+				}
+				$total++;
+				if ($total%100==0) {
+					print "<script language='JavaScript1.2'>ShowProgress($good, $bad, $total)</script>";
+					usleep(1000);
+					flush();
+				}
+			}
+		}
+		if ($multi_insert_counter!=0) {
+			$stmtZ = "INSERT INTO vicidial_list values".substr($multistmt, 0, -1).";";
+			mysql_query($stmtZ, $link);
+			if ($WeBRooTWritablE > 0)
+				{fwrite($stmt_file, $stmtZ."\r\n");}
+		}
+
+		print "<BR><BR>Done</B> GOOD: $good &nbsp; &nbsp; &nbsp; BAD: $bad &nbsp; &nbsp; &nbsp; TOTAL: $total</font></center>";
+
+	} else {
+		print "<center><font face='arial, helvetica' size=3 color='#990000'><B>ERROR: The file does not have the required number of fields to process it.</B></font></center>";
+	}
+	print "<script language='JavaScript1.2'>document.forms[0].leadfile.disabled=false; document.forms[0].submit_file.disabled=false; document.forms[0].reload_page.disabled=false;</script>";
+} else if (filesize($leadfile)>8388608) {
+		print "<center><font face='arial, helvetica' size=3 color='#990000'><B>ERROR: File exceeds the 8MB limit.</B></font></center>";
+}
+?>
+</body>
+</html>
diff --git a/www/vicidial/listloader.pl b/www/vicidial/listloader.pl
new file mode 100644
index 00000000..753c31f7
--- /dev/null
+++ b/www/vicidial/listloader.pl
@@ -0,0 +1,690 @@
+#!/usr/bin/perl
+
+### listloader.pl
+### 
+### Copyright (C) 2006  Matt Florell,Joe Johnson <vicidial@gmail.com>    LICENSE: GPLv2
+###
+#
+#
+# CHANGES
+# 60616-1548 - Added listID override feature to force all leads into same list
+#            - Added gmt_offset_now lookup for each lead
+#
+
+### begin parsing run-time options ###
+if (length($ARGV[0])>1)
+{
+	$i=0;
+	while ($#ARGV >= $i)
+	{
+	$args = "$args $ARGV[$i]";
+	$i++;
+	}
+
+	if ($args =~ /--help|-h/i)
+	{
+	print "allowed run time options:\n  [-forcelistid=1234] = overrides the listID given in the file with the 1234\n  [-h] = this help screen\n\n";
+	}
+	else
+	{
+		if ($args =~ /--forcelistid=/i)
+		{
+		@data_in = split(/--forcelistid=/,$args);
+			$forcelistid = $data_in[1];
+		print "\n----- FORCE LISTID OVERRIDE: $forcelistid -----\n\n";
+		}
+		else
+			{$forcelistid = '';}
+	}
+}
+### end parsing run-time options ###
+
+
+use Spreadsheet::ParseExcel;
+use Time::Local;
+use Net::MySQL;
+
+### Make sure this file is in a libs path or put the absolute path to it
+require("/home/cron/AST_SERVER_conf.pl");	# local configuration file
+
+if (!$DB_port) {$DB_port='3306';}
+
+$dbhA = Net::MySQL->new(hostname => "$DB_server", database => "$DB_database", user => "$DB_user", password => "$DB_pass", port => "$DB_port") 
+	or 	die "Couldn't connect to database: $DB_server - $DB_database\n";
+
+
+$|=0;
+$secX = time();
+
+($sec,$min,$hour,$mday,$mon,$year,$wday,$yday,$isdst) = localtime(time);
+$year = ($year + 1900);
+$mon++;
+if ($hour < 10) {$hour = "0$hour";}
+if ($min < 10) {$min = "0$min";}
+if ($sec < 10) {$sec = "0$sec";}
+if ($mon < 10) {$mon = "0$mon";}
+if ($mday < 10) {$mday = "0$mday";}
+$pulldate0 = "$year-$mon-$mday $hour:$min:$sec";
+$pulldate="$year-$mon-$mday $hour:$min:$sec";
+$inSD = $pulldate0;
+$dsec = ( ( ($hour * 3600) + ($min * 60) ) + $sec );
+
+
+	### Grab Server values from the database
+	$stmtA = "SELECT local_gmt FROM servers where server_ip = '$server_ip';";
+	$dbhA->query("$stmtA");
+	if ($dbhA->has_selected_record)
+		{
+		$iter=$dbhA->create_record_iterator;
+		   while ( $record = $iter->each)
+			{
+			$DBSERVER_GMT		=		"$record->[0]";
+			if ($DBSERVER_GMT)				{$SERVER_GMT = $DBSERVER_GMT;}
+			} 
+		}
+
+	$LOCAL_GMT_OFF = $SERVER_GMT;
+	$LOCAL_GMT_OFF_STD = $SERVER_GMT;
+
+if ($isdst) {$LOCAL_GMT_OFF++;} 
+if ($DB) {print "SEED TIME  $secX      :   $year-$mon-$mday $hour:$min:$sec  LOCAL GMT OFFSET NOW: $LOCAL_GMT_OFF\n";}
+
+
+
+$total=0; $good=0; $bad=0;
+print "<center><font face='arial, helvetica' size=3 color='#009900'><B>Processing Excel file...\n";
+open(STMT_FILE, "> listloader_stmts.txt");
+
+$oBook = Spreadsheet::ParseExcel::Workbook->Parse("./vicidial_temp_file.xls");
+my($iR, $iC, $oWkS, $oWkC);
+
+foreach $oWkS (@{$oBook->{Worksheet}}) {
+	for($iR = 0 ; defined $oWkS->{MaxRow} && $iR <= $oWkS->{MaxRow} ; $iR++) {
+
+		$entry_date =			"$pulldate";
+		$modify_date =			"";
+		$status =				"NEW";
+		$user =					"";
+		$oWkC = $oWkS->{Cells}[$iR][0];
+		if ($oWkC) {$vendor_lead_code=$oWkC->Value; }
+		$oWkC = $oWkS->{Cells}[$iR][1];
+		if ($oWkC) {$source_code=$oWkC->Value; }
+		$source_id=$source_code;
+		$oWkC = $oWkS->{Cells}[$iR][2];
+		if ($oWkC) {$list_id=$oWkC->Value; }
+		$gmt_offset =			'0';
+		$called_since_last_reset='N';
+		$oWkC = $oWkS->{Cells}[$iR][3];
+		if ($oWkC) {$phone_code=$oWkC->Value; }
+		$phone_code=~s/[^0-9]//g;
+		$oWkC = $oWkS->{Cells}[$iR][4];
+		if ($oWkC) {$phone_number=$oWkC->Value; }
+		$phone_number=~s/[^0-9]//g;
+			$USarea = 			substr($phone_number, 0, 3);
+		$oWkC = $oWkS->{Cells}[$iR][5];
+		if ($oWkC) {$title=$oWkC->Value; }
+		$oWkC = $oWkS->{Cells}[$iR][6];
+		if ($oWkC) {$first_name=$oWkC->Value; }
+		$oWkC = $oWkS->{Cells}[$iR][7];
+		if ($oWkC) {$middle_initial=$oWkC->Value; }
+		$oWkC = $oWkS->{Cells}[$iR][8];
+		if ($oWkC) {$last_name=$oWkC->Value; }
+		$oWkC = $oWkS->{Cells}[$iR][9];
+		if ($oWkC) {$address1=$oWkC->Value; }
+		$oWkC = $oWkS->{Cells}[$iR][10];
+		if ($oWkC) {$address2=$oWkC->Value; }
+		$oWkC = $oWkS->{Cells}[$iR][11];
+		if ($oWkC) {$address3=$oWkC->Value; }
+		$oWkC = $oWkS->{Cells}[$iR][12];
+		if ($oWkC) {$city=$oWkC->Value; }
+		$oWkC = $oWkS->{Cells}[$iR][13];
+		if ($oWkC) {$state=$oWkC->Value; }
+		$oWkC = $oWkS->{Cells}[$iR][14];
+		if ($oWkC) {$province=$oWkC->Value; }
+		$oWkC = $oWkS->{Cells}[$iR][15];
+		if ($oWkC) {$postal_code=$oWkC->Value; }
+		$oWkC = $oWkS->{Cells}[$iR][16];
+		if ($oWkC) {$country=$oWkC->Value; }
+		$oWkC = $oWkS->{Cells}[$iR][17];
+		if ($oWkC) {$gender=$oWkC->Value; }
+		$oWkC = $oWkS->{Cells}[$iR][18];
+		if ($oWkC) {$date_of_birth=$oWkC->Value; }
+		$oWkC = $oWkS->{Cells}[$iR][19];
+		if ($oWkC) {$alt_phone=$oWkC->Value; }
+		$oWkC = $oWkS->{Cells}[$iR][20];
+		if ($oWkC) {$email=$oWkC->Value; }
+		$oWkC = $oWkS->{Cells}[$iR][21];
+		if ($oWkC) {$security_phrase=$oWkC->Value; }
+		$oWkC = $oWkS->{Cells}[$iR][22];
+		if ($oWkC) {$comments=$oWkC->Value; }
+		$comments=~s/^\s*(.*?)\s*$/$1/;
+
+		if (length($phone_number)>8) {
+			if (length($forcelistid) > 0)
+				{
+				$list_id =	$forcelistid;		# set list_id to override value
+				}
+
+				$PC_processed=0;
+				### UNITED STATES ###
+				if ($phone_code =~ /^1$/)
+					{
+					$stmtA = "select * from vicidial_phone_codes where country_code='$phone_code' and areacode='$USarea';";
+						if($DBX){print STDERR "\n|$stmtA|\n";}
+						$dbhA->query($stmtA);
+					 $rec_countW=0;
+					if ($dbhA->has_selected_record)
+						{
+						$iterA=$dbhA->create_record_iterator;
+						   while ($recordA = $iterA->each)
+							{
+							$gmt_offset =	$recordA->[4];  $gmt_offset =~ s/\+| //gi;
+							$dst =			$recordA->[5];
+							$dst_range =	$recordA->[6];
+							$PC_processed++;
+							} 
+						}
+					}
+				### MEXICO ###
+				if ($phone_code =~ /^52$/)
+					{
+					$stmtA = "select * from vicidial_phone_codes where country_code='$phone_code' and areacode='$USarea';";
+						if($DBX){print STDERR "\n|$stmtA|\n";}
+						$dbhA->query($stmtA);
+					 $rec_countW=0;
+					if ($dbhA->has_selected_record)
+						{
+						$iterA=$dbhA->create_record_iterator;
+						   while ($recordA = $iterA->each)
+							{
+							$gmt_offset =	$recordA->[4];  $gmt_offset =~ s/\+| //gi;
+							$dst =			$recordA->[5];
+							$dst_range =	$recordA->[6];
+							$PC_processed++;
+							} 
+						}
+					}
+				### AUSTRALIA ###
+				if ($phone_code =~ /^61$/)
+					{
+					$stmtA = "select * from vicidial_phone_codes where country_code='$phone_code' and state='$state';";
+						if($DBX){print STDERR "\n|$stmtA|\n";}
+						$dbhA->query($stmtA);
+					 $rec_countW=0;
+					if ($dbhA->has_selected_record)
+						{
+						$iterA=$dbhA->create_record_iterator;
+						   while ($recordA = $iterA->each)
+							{
+							$gmt_offset =	$recordA->[4];  $gmt_offset =~ s/\+| //gi;
+							$dst =			$recordA->[5];
+							$dst_range =	$recordA->[6];
+							$PC_processed++;
+							} 
+						}
+					}
+				### ALL OTHER COUNTRY CODES ###
+				if (!$PC_processed)
+					{
+					$stmtA = "select * from vicidial_phone_codes where country_code='$phone_code';";
+						if($DBX){print STDERR "\n|$stmtA|\n";}
+						$dbhA->query($stmtA);
+					 $rec_countW=0;
+					if ($dbhA->has_selected_record)
+						{
+						$iterA=$dbhA->create_record_iterator;
+						   while ($recordA = $iterA->each)
+							{
+							$gmt_offset =	$recordA->[4];  $gmt_offset =~ s/\+| //gi;
+							$dst =			$recordA->[5];
+							$dst_range =	$recordA->[6];
+							$PC_processed++;
+							} 
+						}
+					}
+
+				### Find out if DST to raise the gmt offset ###
+				$AC_GMT_diff = ($gmt_offset - $LOCAL_GMT_OFF_STD);
+				$AC_localtime = ($secX + (3600 * $AC_GMT_diff));
+				($sec,$min,$hour,$mday,$mon,$year,$wday,$yday,$isdst) = localtime($AC_localtime);
+				$year = ($year + 1900);
+				$mon++;
+				if ($mon < 10) {$mon = "0$mon";}
+				if ($mday < 10) {$mday = "0$mday";}
+				if ($hour < 10) {$hour = "0$hour";}
+				if ($min < 10) {$min = "0$min";}
+				if ($sec < 10) {$sec = "0$sec";}
+				$dsec = ( ( ($hour * 3600) + ($min * 60) ) + $sec );
+				
+				$AC_processed=0;
+				if ( (!$AC_processed) && ($dst_range =~ /FSA-LSO/) )
+					{
+					if ($DBX) {print "     First Sunday April to Last Sunday October\n";}
+					&USA_dstcalc;
+					if ($DBX) {print "     DST: $USA_DST\n";}
+					if ($USA_DST) {$gmt_offset++;}
+					$AC_processed++;
+					}
+				if ( (!$AC_processed) && ($dst_range =~ /LSM-LSO/) )
+					{
+					if ($DBX) {print "     Last Sunday March to Last Sunday October\n";}
+					&GBR_dstcalc;
+					if ($DBX) {print "     DST: $GBR_DST\n";}
+					if ($GBR_DST) {$gmt_offset++;}
+					$AC_processed++;
+					}
+				if ( (!$AC_processed) && ($dst_range =~ /LSO-LSM/) )
+					{
+					if ($DBX) {print "     Last Sunday October to Last Sunday March\n";}
+					&AUS_dstcalc;
+					if ($DBX) {print "     DST: $AUS_DST\n";}
+					if ($AUS_DST) {$gmt_offset++;}
+					$AC_processed++;
+					}
+				if ( (!$AC_processed) && ($dst_range =~ /FSO-LSM/) )
+					{
+					if ($DBX) {print "     First Sunday October to Last Sunday March\n";}
+					&AUST_dstcalc;
+					if ($DBX) {print "     DST: $AUST_DST\n";}
+					if ($AUST_DST) {$gmt_offset++;}
+					$AC_processed++;
+					}
+				if ( (!$AC_processed) && ($dst_range =~ /FSO-TSM/) )
+					{
+					if ($DBX) {print "     First Sunday October to Third Sunday March\n";}
+					&NZL_dstcalc;
+					if ($DBX) {print "     DST: $NZL_DST\n";}
+					if ($NZL_DST) {$gmt_offset++;}
+					$AC_processed++;
+					}
+				if (!$AC_processed)
+					{
+					if ($DBX) {print "     No DST Method Found\n";}
+					if ($DBX) {print "     DST: 0\n";}
+					$AC_processed++;
+					}
+
+			if ($multi_insert_counter > 8) {
+				### insert good deal into pending_transactions table ###
+				$stmtZ = "INSERT INTO vicidial_list values$multistmt('','$entry_date','$modify_date','$status','$user','$vendor_lead_code','$source_id','$list_id','$gmt_offset','$called_since_last_reset','$phone_code','$phone_number','$title','$first_name','$middle_initial','$last_name','$address1','$address2','$address3','$city','$state','$province','$postal_code','$country','$gender','$date_of_birth','$alt_phone','$email','$security_phrase','$comments',0);";
+				$dbhA->query("$stmtZ");
+				print STMT_FILE $stmtZ."\r\n";
+				$multistmt='';
+				$multi_insert_counter=0;
+
+			} else {
+				$multistmt .= "('','$entry_date','$modify_date','$status','$user','$vendor_lead_code','$source_id','$list_id','$gmt_offset','$called_since_last_reset','$phone_code','$phone_number','$title','$first_name','$middle_initial','$last_name','$address1','$address2','$address3','$city','$state','$province','$postal_code','$country','$gender','$date_of_birth','$alt_phone','$email','$security_phrase','$comments',0),";
+				$multi_insert_counter++;
+			}
+
+			$good++;
+		} else {
+			if ($bad < 10) {print "<BR></b><font size=1 color=red>record $total BAD- PHONE: $phone_number ROW: |$row[0]|</font><b>\n";}
+			$bad++;
+		}
+		$total++;
+		if ($total%100==0) {
+			print "<script language='JavaScript1.2'>ShowProgress($good, $bad, $total)</script>";
+			sleep(1);
+#			flush();
+		}
+	}
+}
+
+if ($multi_insert_counter > 0) {
+	$stmtZ = "INSERT INTO vicidial_list values ".substr($multistmt, 0, -1).";";
+	$dbhA->query("$stmtZ");
+	print STMT_FILE $stmtZ."\r\n";
+}
+
+print "<BR><BR>Done</B> GOOD: $good &nbsp; &nbsp; &nbsp; BAD: $bad &nbsp; &nbsp; &nbsp; TOTAL: $total</font></center>";
+
+exit;
+
+
+
+
+
+
+sub USA_dstcalc {
+#**********************************************************************
+# FSA-LSO
+#     This is returns 1 if Daylight Savings Time is in effect and 0 if 
+#       Standard time is in effect.
+#     Based on first Sunday in April and last Sunday in October at 2 am.
+#     INPUTS:
+#       mm              INTEGER       Month.
+#       dd              INTEGER       Day of the month.
+#       ns              INTEGER       Seconds into the day.
+#       dow             INTEGER       Day of week (0=Sunday, to 6=Saturday)
+#     OPTIONAL INPUT:
+#       timezone        INTEGER       hour difference UTC - local standard time
+#                                      (DEFAULT is blank)
+#                                     make calculations based on UTC time, 
+#                                     which means shift at 10:00 UTC in April
+#                                     and 9:00 UTC in October
+#     OUTPUT: 
+#                       INTEGER       1 = DST, 0 = not DST
+#**********************************************************************
+    
+	$USA_DST=0;
+	$mm = $mon;
+	$dd = $mday;
+	$ns = $dsec;
+	$dow= $wday;
+
+    if ($mm < 4 || $mm > 10) {
+	$USA_DST=0;   return 0;
+    } elsif ($mm >= 5 && $mm <= 9) {
+	$USA_DST=1;   return 1;
+    } elsif ($mm == 4) {
+	if ($dd > 7) {
+	    $USA_DST=1;   return 1;
+	} elsif ($dd >= ($dow+1)) {
+	    if ($timezone) {
+		if ($dow == 0 && $ns < (7200+$timezone*3600)) {
+		    $USA_DST=0;   return 0;
+		} else {
+		    $USA_DST=1;   return 1;
+		}
+	    } else {
+		if ($dow == 0 && $ns < 7200) {
+		    $USA_DST=0;   return 0;
+		} else {
+		    $USA_DST=1;   return 1;
+		}
+	    }
+	} else {
+	    $USA_DST=0;   return 0;
+	}
+    } elsif ($mm == 10) {
+	if ($dd < 25) {
+	    $USA_DST=1;   return 1;
+	} elsif ($dd < ($dow+25)) {
+	    $USA_DST=1;   return 1;
+	} elsif ($dow == 0) {
+	    if ($timezone) { # UTC calculations
+		if ($ns < (7200+($timezone-1)*3600)) {
+		    $USA_DST=1;   return 1;
+		} else {
+		    $USA_DST=0;   return 0;
+		}
+	    } else { # local time calculations
+		if ($ns < 7200) {
+		    $USA_DST=1;   return 1;
+		} else {
+		    $USA_DST=0;   return 0;
+		}
+	    }
+	} else {
+	    $USA_DST=0;   return 0;
+	}
+    } # end of month checks
+} # end of subroutine dstcalc
+
+
+
+
+sub GBR_dstcalc {
+#**********************************************************************
+#     This is returns 1 if Daylight Savings Time is in effect and 0 if 
+#       Standard time is in effect.
+#     Based on last Sunday in March and last Sunday in October at 1 am.
+#**********************************************************************
+    
+	$GBR_DST=0;
+	$mm = $mon;
+	$dd = $mday;
+	$ns = $dsec;
+	$dow= $wday;
+
+    if ($mm < 3 || $mm > 10) {
+	$GBR_DST=0;   return 0;
+    } elsif ($mm >= 4 && $mm <= 9) {
+	$GBR_DST=1;   return 1;
+    } elsif ($mm == 3) {
+	if ($dd < 25) {
+	    $GBR_DST=0;   return 0;
+	} elsif ($dd < ($dow+25)) {
+	    $GBR_DST=0;   return 0;
+	} elsif ($dow == 0) {
+	    if ($timezone) { # UTC calculations
+		if ($ns < (3600+($timezone-1)*3600)) {
+		    $GBR_DST=0;   return 0;
+		} else {
+		    $GBR_DST=1;   return 1;
+		}
+	    } else { # local time calculations
+		if ($ns < 3600) {
+		    $GBR_DST=0;   return 0;
+		} else {
+		    $GBR_DST=1;   return 1;
+		}
+	    }
+	} else {
+	    $GBR_DST=1;   return 1;
+	}
+    } elsif ($mm == 10) {
+	if ($dd < 25) {
+	    $GBR_DST=1;   return 1;
+	} elsif ($dd < ($dow+25)) {
+	    $GBR_DST=1;   return 1;
+	} elsif ($dow == 0) {
+	    if ($timezone) { # UTC calculations
+		if ($ns < (3600+($timezone-1)*3600)) {
+		    $GBR_DST=1;   return 1;
+		} else {
+		    $GBR_DST=0;   return 0;
+		}
+	    } else { # local time calculations
+		if ($ns < 3600) {
+		    $GBR_DST=1;   return 1;
+		} else {
+		    $GBR_DST=0;   return 0;
+		}
+	    }
+	} else {
+	    $GBR_DST=0;   return 0;
+	}
+    } # end of month checks
+} # end of subroutine dstcalc
+
+
+
+
+sub AUS_dstcalc {
+#**********************************************************************
+#     This is returns 1 if Daylight Savings Time is in effect and 0 if 
+#       Standard time is in effect.
+#     Based on last Sunday in October and last Sunday in March at 1 am.
+#**********************************************************************
+    
+	$AUS_DST=0;
+	$mm = $mon;
+	$dd = $mday;
+	$ns = $dsec;
+	$dow= $wday;
+
+    if ($mm < 3 || $mm > 10) {
+	$AUS_DST=1;   return 1;
+    } elsif ($mm >= 4 && $mm <= 9) {
+	$AUS_DST=0;   return 0;
+    } elsif ($mm == 3) {
+	if ($dd < 25) {
+	    $AUS_DST=1;   return 1;
+	} elsif ($dd < ($dow+25)) {
+	    $AUS_DST=1;   return 1;
+	} elsif ($dow == 0) {
+	    if ($timezone) { # UTC calculations
+		if ($ns < (3600+($timezone-1)*3600)) {
+		    $AUS_DST=1;   return 1;
+		} else {
+		    $AUS_DST=0;   return 0;
+		}
+	    } else { # local time calculations
+		if ($ns < 3600) {
+		    $AUS_DST=1;   return 1;
+		} else {
+		    $AUS_DST=0;   return 0;
+		}
+	    }
+	} else {
+	    $AUS_DST=0;   return 0;
+	}
+    } elsif ($mm == 10) {
+	if ($dd < 25) {
+	    $AUS_DST=0;   return 0;
+	} elsif ($dd < ($dow+25)) {
+	    $AUS_DST=0;   return 0;
+	} elsif ($dow == 0) {
+	    if ($timezone) { # UTC calculations
+		if ($ns < (3600+($timezone-1)*3600)) {
+		    $AUS_DST=0;   return 0;
+		} else {
+		    $AUS_DST=1;   return 1;
+		}
+	    } else { # local time calculations
+		if ($ns < 3600) {
+		    $AUS_DST=0;   return 0;
+		} else {
+		    $AUS_DST=1;   return 1;
+		}
+	    }
+	} else {
+	    $AUS_DST=1;   return 1;
+	}
+    } # end of month checks
+} # end of subroutine dstcalc
+
+
+
+
+
+sub AUST_dstcalc {
+#**********************************************************************
+#   TASMANIA ONLY
+#     This is returns 1 if Daylight Savings Time is in effect and 0 if 
+#       Standard time is in effect.
+#     Based on first Sunday in October and last Sunday in March at 1 am.
+#**********************************************************************
+    
+	$AUST_DST=0;
+	$mm = $mon;
+	$dd = $mday;
+	$ns = $dsec;
+	$dow= $wday;
+
+    if ($mm < 3 || $mm > 10) {
+	$AUST_DST=1;   return 1;
+    } elsif ($mm >= 4 && $mm <= 9) {
+	$AUST_DST=0;   return 0;
+    } elsif ($mm == 3) {
+	if ($dd < 25) {
+	    $AUST_DST=1;   return 1;
+	} elsif ($dd < ($dow+25)) {
+	    $AUST_DST=1;   return 1;
+	} elsif ($dow == 0) {
+	    if ($timezone) { # UTC calculations
+		if ($ns < (3600+($timezone-1)*3600)) {
+		    $AUST_DST=1;   return 1;
+		} else {
+		    $AUST_DST=0;   return 0;
+		}
+	    } else { # local time calculations
+		if ($ns < 3600) {
+		    $AUST_DST=1;   return 1;
+		} else {
+		    $AUST_DST=0;   return 0;
+		}
+	    }
+	} else {
+	    $AUST_DST=0;   return 0;
+	}
+    } elsif ($mm == 10) {
+	if ($dd > 7) {
+	    $AUST_DST=1;   return 1;
+	} elsif ($dd >= ($dow+1)) {
+	    if ($timezone) {
+		if ($dow == 0 && $ns < (7200+$timezone*3600)) {
+		    $AUST_DST=0;   return 0;
+		} else {
+		    $AUST_DST=1;   return 1;
+		}
+	    } else {
+		if ($dow == 0 && $ns < 3600) {
+		    $AUST_DST=0;   return 0;
+		} else {
+		    $AUST_DST=1;   return 1;
+		}
+	    }
+	} else {
+	    $AUST_DST=0;   return 0;
+	}
+    } # end of month checks
+} # end of subroutine dstcalc
+
+
+
+
+
+sub NZL_dstcalc {
+#**********************************************************************
+#     This is returns 1 if Daylight Savings Time is in effect and 0 if 
+#       Standard time is in effect.
+#     Based on first Sunday in October and third Sunday in March at 1 am.
+#**********************************************************************
+    
+	$NZL_DST=0;
+	$mm = $mon;
+	$dd = $mday;
+	$ns = $dsec;
+	$dow= $wday;
+
+    if ($mm < 3 || $mm > 10) {
+	$NZL_DST=1;   return 1;
+    } elsif ($mm >= 4 && $mm <= 9) {
+	$NZL_DST=0;   return 0;
+    } elsif ($mm == 3) {
+	if ($dd < 14) {
+	    $NZL_DST=1;   return 1;
+	} elsif ($dd < ($dow+14)) {
+	    $NZL_DST=1;   return 1;
+	} elsif ($dow == 0) {
+	    if ($timezone) { # UTC calculations
+		if ($ns < (3600+($timezone-1)*3600)) {
+		    $NZL_DST=1;   return 1;
+		} else {
+		    $NZL_DST=0;   return 0;
+		}
+	    } else { # local time calculations
+		if ($ns < 3600) {
+		    $NZL_DST=1;   return 1;
+		} else {
+		    $NZL_DST=0;   return 0;
+		}
+	    }
+	} else {
+	    $NZL_DST=0;   return 0;
+	}
+    } elsif ($mm == 10) {
+	if ($dd > 7) {
+	    $NZL_DST=1;   return 1;
+	} elsif ($dd >= ($dow+1)) {
+	    if ($timezone) {
+		if ($dow == 0 && $ns < (7200+$timezone*3600)) {
+		    $NZL_DST=0;   return 0;
+		} else {
+		    $NZL_DST=1;   return 1;
+		}
+	    } else {
+		if ($dow == 0 && $ns < 3600) {
+		    $NZL_DST=0;   return 0;
+		} else {
+		    $NZL_DST=1;   return 1;
+		}
+	    }
+	} else {
+	    $NZL_DST=0;   return 0;
+	}
+    } # end of month checks
+} # end of subroutine dstcalc
diff --git a/www/vicidial/listloaderMAIN.php b/www/vicidial/listloaderMAIN.php
new file mode 100644
index 00000000..67ee25bc
--- /dev/null
+++ b/www/vicidial/listloaderMAIN.php
@@ -0,0 +1,79 @@
+<?
+# listloaderMAIN.php
+# 
+# Copyright (C) 2006  Matt Florell,Joe Johnson <vicidial@gmail.com>    LICENSE: GPLv2
+#
+# this is the main frame page for the lead loading section. This is where you 
+# would upload a file and have it inserted into vicidial_list
+#
+# changes:
+# 60620-1149 - Added variable filtering to eliminate SQL injection attack threat
+#
+
+require("dbconnect.php");
+
+$PHP_AUTH_USER=$_SERVER['PHP_AUTH_USER'];
+$PHP_AUTH_PW=$_SERVER['PHP_AUTH_PW'];
+$PHP_SELF=$_SERVER['PHP_SELF'];
+
+$PHP_AUTH_USER = ereg_replace("[^0-9a-zA-Z]","",$PHP_AUTH_USER);
+$PHP_AUTH_PW = ereg_replace("[^0-9a-zA-Z]","",$PHP_AUTH_PW);
+
+$STARTtime = date("U");
+$TODAY = date("Y-m-d");
+$NOW_TIME = date("Y-m-d H:i:s");
+$FILE_datetime = $STARTtime;
+
+$stmt="SELECT count(*) from vicidial_users where user='$PHP_AUTH_USER' and pass='$PHP_AUTH_PW' and user_level > 7;";
+if ($DB) {echo "|$stmt|\n";}
+$rslt=mysql_query($stmt, $link);
+$row=mysql_fetch_row($rslt);
+$auth=$row[0];
+
+$fp = fopen ("./project_auth_entries.txt", "a");
+$date = date("r");
+$ip = getenv("REMOTE_ADDR");
+$browser = getenv("HTTP_USER_AGENT");
+
+  if( (strlen($PHP_AUTH_USER)<2) or (strlen($PHP_AUTH_PW)<2) or (!$auth))
+	{
+    Header("WWW-Authenticate: Basic realm=\"VICIDIAL-LEAD-LOADER\"");
+    Header("HTTP/1.0 401 Unauthorized");
+    echo "Invalid Username/Password: |$PHP_AUTH_USER|$PHP_AUTH_PW|\n";
+    exit;
+	}
+  else
+	{
+	header ("Content-type: text/html; charset=utf-8");
+	if($auth>0)
+		{
+		$office_no=strtoupper($PHP_AUTH_USER);
+		$password=strtoupper($PHP_AUTH_PW);
+			$stmt="SELECT load_leads from vicidial_users where user='$PHP_AUTH_USER' and pass='$PHP_AUTH_PW'";
+			$rslt=mysql_query($stmt, $link);
+			$row=mysql_fetch_row($rslt);
+			$LOGload_leads				=$row[0];
+
+		if ($LOGload_leads < 1)
+			{
+			echo "You do not have permissions to load leads\n";
+			exit;
+			}
+		fwrite ($fp, "LIST_LOAD|GOOD|$date|$PHP_AUTH_USER|$PHP_AUTH_PW|$ip|$browser|$LOGfullname|\n");
+		fclose($fp);
+		}
+	else
+		{
+		fwrite ($fp, "LIST_LOAD|FAIL|$date|$PHP_AUTH_USER|$PHP_AUTH_PW|$ip|$browser|\n");
+		fclose($fp);
+		}
+	}
+
+?><HTML>
+<HEAD>
+<TITLE>VICIDIAL: Lead Loader Module</TITLE>
+</HEAD>
+<FRAMESET ROWS="300,*" border=0>
+<FRAME SRC="listloader.php" NAME="main">
+<FRAME SRC="count.htm" NAME="lead_count">
+</HTML>
\ No newline at end of file
diff --git a/www/vicidial/listloader_rowdisplay.pl b/www/vicidial/listloader_rowdisplay.pl
new file mode 100644
index 00000000..fc2b4fc7
--- /dev/null
+++ b/www/vicidial/listloader_rowdisplay.pl
@@ -0,0 +1,62 @@
+#!/usr/bin/perl
+
+### listloader_rowdisplay.pl
+### 
+### Copyright (C) 2006  Matt Florell,Joe Johnson <vicidial@gmail.com>    LICENSE: GPLv2
+###
+
+use Spreadsheet::ParseExcel;
+use Time::Local;
+use Net::MySQL;
+
+### Make sure this file is in a libs path or put the absolute path to it
+require("/home/cron/AST_SERVER_conf.pl");	# local configuration file
+
+if (!$DB_port) {$DB_port='3306';}
+
+$dbhA = Net::MySQL->new(hostname => "$DB_server", database => "$DB_database", user => "$DB_user", password => "$DB_pass", port => "$DB_port") 
+	or 	die "Couldn't connect to database: $DB_server - $DB_database\n";
+
+
+$oBook = Spreadsheet::ParseExcel::Workbook->Parse("./vicidial_temp_file.xls");
+my($iR, $iC, $oWkS, $oWkC);
+$var_str="";
+
+foreach $oWkS (@{$oBook->{Worksheet}}) {
+	for(my $iC = $oWkS->{MinCol} ; defined $oWkS->{MaxCol} && $iC <= $oWkS->{MaxCol} ; $iC++) {
+		$oWkC = $oWkS->{Cells}[0][$iC];
+		if ($oWkC) {
+			$var_str.=$oWkC->Value."|"; 
+		} else {
+			$var_str.="|"; 
+		}
+	}
+}
+
+@xls_row=split(/\|/, $var_str);
+
+
+$dbhA->query("select vendor_lead_code, source_id, list_id, phone_code, phone_number, title, first_name, middle_initial, last_name, address1, address2, address3, city, state, province, postal_code, country_code, gender, date_of_birth, alt_phone, email, security_phrase, comments from vicidial_list limit 1");
+
+if ($dbhA->has_selected_record) {
+	$rslt = $dbhA->create_record_iterator();
+	my @row = $rslt->get_field_names();
+	for ($i=0; $i<scalar(@row); $i++) {
+		# print "$i: $row[$i]\n";
+		$field_name=uc($row[$i]);
+		$field_name=~s/\_/ /g;
+		print "  <tr bgcolor=#D9E6FE>\r\n";
+		print "    <th><font class=standard>".$field_name.": </font></td>\r\n";
+		print "    <th><select name='".$row[$i]."_field'>\r\n";
+		print "     <option value=''>---------------------</option>\r\n";
+
+		for ($j=0; $j<scalar(@xls_row); $j++) {
+			$xls_row[$j]=~s/\"//g;
+			print "     <option value='$j'>\"$xls_row[$j]\"</option>\r\n";
+		}
+
+		print "    </select></td>\r\n";
+		print "  </tr>\r\n";
+	}
+}
+
diff --git a/www/vicidial/listloader_super.pl b/www/vicidial/listloader_super.pl
new file mode 100644
index 00000000..a36765d0
--- /dev/null
+++ b/www/vicidial/listloader_super.pl
@@ -0,0 +1,691 @@
+#!/usr/bin/perl
+
+### listloader_super.pl
+### 
+### Copyright (C) 2006  Matt Florell,Joe Johnson <vicidial@gmail.com>    LICENSE: GPLv2
+###
+#
+#
+# CHANGES
+# 60616-1548 - Added listID override feature to force all leads into same list
+#            - Added gmt_offset_now lookup for each lead
+#
+
+### begin parsing run-time options ###
+if (length($ARGV[0])>1)
+{
+	$i=0;
+	while ($#ARGV >= $i)
+	{
+	$args = "$args $ARGV[$i]";
+	$i++;
+	}
+
+	if ($args =~ /--help|-h/i)
+	{
+	print "allowed run time options:\n  [-forcelistid=1234] = overrides the listID given in the file with the 1234\n  [-h] = this help screen\n\n";
+	}
+	else
+	{
+		if ($args =~ /--forcelistid=/i)
+		{
+		@data_in = split(/--forcelistid=/,$args);
+			$forcelistid = $data_in[1];
+		print "\n----- FORCE LISTID OVERRIDE: $forcelistid -----\n\n";
+		}
+		else
+			{$forcelistid = '';}
+	}
+}
+### end parsing run-time options ###
+
+use Spreadsheet::ParseExcel;
+use Time::Local;
+use Net::MySQL;
+
+### Make sure this file is in a libs path or put the absolute path to it
+require("/home/cron/AST_SERVER_conf.pl");	# local configuration file
+
+if (!$DB_port) {$DB_port='3306';}
+
+$dbhA = Net::MySQL->new(hostname => "$DB_server", database => "$DB_database", user => "$DB_user", password => "$DB_pass", port => "$DB_port") 
+	or 	die "Couldn't connect to database: $DB_server - $DB_database\n";
+
+
+$vars=$ARGV[0];
+@xls_fields=split(/\,/, $vars);
+
+$|=0;
+$secX = time();
+
+($sec,$min,$hour,$mday,$mon,$year,$wday,$yday,$isdst) = localtime(time);
+$year = ($year + 1900);
+$mon++;
+if ($hour < 10) {$hour = "0$hour";}
+if ($min < 10) {$min = "0$min";}
+if ($sec < 10) {$sec = "0$sec";}
+if ($mon < 10) {$mon = "0$mon";}
+if ($mday < 10) {$mday = "0$mday";}
+$pulldate0 = "$year-$mon-$mday $hour:$min:$sec";
+$pulldate="$year-$mon-$mday $hour:$min:$sec";
+$inSD = $pulldate0;
+$dsec = ( ( ($hour * 3600) + ($min * 60) ) + $sec );
+
+
+	### Grab Server values from the database
+	$stmtA = "SELECT local_gmt FROM servers where server_ip = '$server_ip';";
+	$dbhA->query("$stmtA");
+	if ($dbhA->has_selected_record)
+		{
+		$iter=$dbhA->create_record_iterator;
+		   while ( $record = $iter->each)
+			{
+			$DBSERVER_GMT		=		"$record->[0]";
+			if ($DBSERVER_GMT)				{$SERVER_GMT = $DBSERVER_GMT;}
+			} 
+		}
+
+	$LOCAL_GMT_OFF = $SERVER_GMT;
+	$LOCAL_GMT_OFF_STD = $SERVER_GMT;
+
+if ($isdst) {$LOCAL_GMT_OFF++;} 
+if ($DB) {print "SEED TIME  $secX      :   $year-$mon-$mday $hour:$min:$sec  LOCAL GMT OFFSET NOW: $LOCAL_GMT_OFF\n";}
+
+
+
+$total=0; $good=0; $bad=0;
+open(STMT_FILE, "> listloader_stmts.txt");
+
+$oBook = Spreadsheet::ParseExcel::Workbook->Parse("./vicidial_temp_file.xls");
+my($iR, $iC, $oWkS, $oWkC);
+
+foreach $oWkS (@{$oBook->{Worksheet}}) {
+	for($iR = 0 ; defined $oWkS->{MaxRow} && $iR <= $oWkS->{MaxRow} ; $iR++) {
+
+		$entry_date =			"$pulldate";
+		$modify_date =			"";
+		$status =				"NEW";
+		$user =					"";
+		$oWkC = $oWkS->{Cells}[$iR][$xls_fields[0]];
+		if ($oWkC) {$vendor_lead_code=$oWkC->Value; }
+		$oWkC = $oWkS->{Cells}[$iR][$xls_fields[1]];
+		if ($oWkC) {$source_code=$oWkC->Value; }
+		$source_id=$source_code;
+		$oWkC = $oWkS->{Cells}[$iR][$xls_fields[2]];
+		if ($oWkC) {$list_id=$oWkC->Value; }
+		$gmt_offset =			'0';
+		$called_since_last_reset='N';
+		$oWkC = $oWkS->{Cells}[$iR][$xls_fields[3]];
+		if ($oWkC) {$phone_code=$oWkC->Value; }
+		$phone_code=~s/[^0-9]//g;
+		$oWkC = $oWkS->{Cells}[$iR][$xls_fields[4]];
+		if ($oWkC) {$phone_number=$oWkC->Value; }
+		$phone_number=~s/[^0-9]//g;
+			$USarea = 			substr($phone_number, 0, 3);
+		$oWkC = $oWkS->{Cells}[$iR][$xls_fields[5]];
+		if ($oWkC) {$title=$oWkC->Value; }
+		$oWkC = $oWkS->{Cells}[$iR][$xls_fields[6]];
+		if ($oWkC) {$first_name=$oWkC->Value; }
+		$oWkC = $oWkS->{Cells}[$iR][$xls_fields[7]];
+		if ($oWkC) {$middle_initial=$oWkC->Value; }
+		$oWkC = $oWkS->{Cells}[$iR][$xls_fields[8]];
+		if ($oWkC) {$last_name=$oWkC->Value; }
+		$oWkC = $oWkS->{Cells}[$iR][$xls_fields[9]];
+		if ($oWkC) {$address1=$oWkC->Value; }
+		$oWkC = $oWkS->{Cells}[$iR][$xls_fields[10]];
+		if ($oWkC) {$address2=$oWkC->Value; }
+		$oWkC = $oWkS->{Cells}[$iR][$xls_fields[11]];
+		if ($oWkC) {$address3=$oWkC->Value; }
+		$oWkC = $oWkS->{Cells}[$iR][$xls_fields[12]];
+		if ($oWkC) {$city=$oWkC->Value; }
+		$oWkC = $oWkS->{Cells}[$iR][$xls_fields[13]];
+		if ($oWkC) {$state=$oWkC->Value; }
+		$oWkC = $oWkS->{Cells}[$iR][$xls_fields[14]];
+		if ($oWkC) {$province=$oWkC->Value; }
+		$oWkC = $oWkS->{Cells}[$iR][$xls_fields[15]];
+		if ($oWkC) {$postal_code=$oWkC->Value; }
+		$oWkC = $oWkS->{Cells}[$iR][$xls_fields[16]];
+		if ($oWkC) {$country_code=$oWkC->Value; }
+		$oWkC = $oWkS->{Cells}[$iR][$xls_fields[17]];
+		if ($oWkC) {$gender=$oWkC->Value; }
+		$oWkC = $oWkS->{Cells}[$iR][$xls_fields[18]];
+		if ($oWkC) {$date_of_birth=$oWkC->Value; }
+		$oWkC = $oWkS->{Cells}[$iR][$xls_fields[19]];
+		if ($oWkC) {$alt_phone=$oWkC->Value; }
+		$oWkC = $oWkS->{Cells}[$iR][$xls_fields[20]];
+		if ($oWkC) {$email=$oWkC->Value; }
+		$oWkC = $oWkS->{Cells}[$iR][$xls_fields[21]];
+		if ($oWkC) {$security_phrase=$oWkC->Value; }
+		$oWkC = $oWkS->{Cells}[$iR][$xls_fields[22]];
+		if ($oWkC) {$comments=$oWkC->Value; }
+		$comments=~s/^\s*(.*?)\s*$/$1/;
+
+		if (length($phone_number)>8) {
+			if (length($forcelistid) > 0)
+				{
+				$list_id =	$forcelistid;		# set list_id to override value
+				}
+
+				$PC_processed=0;
+				### UNITED STATES ###
+				if ($phone_code =~ /^1$/)
+					{
+					$stmtA = "select * from vicidial_phone_codes where country_code='$phone_code' and areacode='$USarea';";
+						if($DBX){print STDERR "\n|$stmtA|\n";}
+						$dbhA->query($stmtA);
+					 $rec_countW=0;
+					if ($dbhA->has_selected_record)
+						{
+						$iterA=$dbhA->create_record_iterator;
+						   while ($recordA = $iterA->each)
+							{
+							$gmt_offset =	$recordA->[4];  $gmt_offset =~ s/\+| //gi;
+							$dst =			$recordA->[5];
+							$dst_range =	$recordA->[6];
+							$PC_processed++;
+							} 
+						}
+					}
+				### MEXICO ###
+				if ($phone_code =~ /^52$/)
+					{
+					$stmtA = "select * from vicidial_phone_codes where country_code='$phone_code' and areacode='$USarea';";
+						if($DBX){print STDERR "\n|$stmtA|\n";}
+						$dbhA->query($stmtA);
+					 $rec_countW=0;
+					if ($dbhA->has_selected_record)
+						{
+						$iterA=$dbhA->create_record_iterator;
+						   while ($recordA = $iterA->each)
+							{
+							$gmt_offset =	$recordA->[4];  $gmt_offset =~ s/\+| //gi;
+							$dst =			$recordA->[5];
+							$dst_range =	$recordA->[6];
+							$PC_processed++;
+							} 
+						}
+					}
+				### AUSTRALIA ###
+				if ($phone_code =~ /^61$/)
+					{
+					$stmtA = "select * from vicidial_phone_codes where country_code='$phone_code' and state='$state';";
+						if($DBX){print STDERR "\n|$stmtA|\n";}
+						$dbhA->query($stmtA);
+					 $rec_countW=0;
+					if ($dbhA->has_selected_record)
+						{
+						$iterA=$dbhA->create_record_iterator;
+						   while ($recordA = $iterA->each)
+							{
+							$gmt_offset =	$recordA->[4];  $gmt_offset =~ s/\+| //gi;
+							$dst =			$recordA->[5];
+							$dst_range =	$recordA->[6];
+							$PC_processed++;
+							} 
+						}
+					}
+				### ALL OTHER COUNTRY CODES ###
+				if (!$PC_processed)
+					{
+					$stmtA = "select * from vicidial_phone_codes where country_code='$phone_code';";
+						if($DBX){print STDERR "\n|$stmtA|\n";}
+						$dbhA->query($stmtA);
+					 $rec_countW=0;
+					if ($dbhA->has_selected_record)
+						{
+						$iterA=$dbhA->create_record_iterator;
+						   while ($recordA = $iterA->each)
+							{
+							$gmt_offset =	$recordA->[4];  $gmt_offset =~ s/\+| //gi;
+							$dst =			$recordA->[5];
+							$dst_range =	$recordA->[6];
+							$PC_processed++;
+							} 
+						}
+					}
+
+				### Find out if DST to raise the gmt offset ###
+				$AC_GMT_diff = ($gmt_offset - $LOCAL_GMT_OFF_STD);
+				$AC_localtime = ($secX + (3600 * $AC_GMT_diff));
+				($sec,$min,$hour,$mday,$mon,$year,$wday,$yday,$isdst) = localtime($AC_localtime);
+				$year = ($year + 1900);
+				$mon++;
+				if ($mon < 10) {$mon = "0$mon";}
+				if ($mday < 10) {$mday = "0$mday";}
+				if ($hour < 10) {$hour = "0$hour";}
+				if ($min < 10) {$min = "0$min";}
+				if ($sec < 10) {$sec = "0$sec";}
+				$dsec = ( ( ($hour * 3600) + ($min * 60) ) + $sec );
+				
+				$AC_processed=0;
+				if ( (!$AC_processed) && ($dst_range =~ /FSA-LSO/) )
+					{
+					if ($DBX) {print "     First Sunday April to Last Sunday October\n";}
+					&USA_dstcalc;
+					if ($DBX) {print "     DST: $USA_DST\n";}
+					if ($USA_DST) {$gmt_offset++;}
+					$AC_processed++;
+					}
+				if ( (!$AC_processed) && ($dst_range =~ /LSM-LSO/) )
+					{
+					if ($DBX) {print "     Last Sunday March to Last Sunday October\n";}
+					&GBR_dstcalc;
+					if ($DBX) {print "     DST: $GBR_DST\n";}
+					if ($GBR_DST) {$gmt_offset++;}
+					$AC_processed++;
+					}
+				if ( (!$AC_processed) && ($dst_range =~ /LSO-LSM/) )
+					{
+					if ($DBX) {print "     Last Sunday October to Last Sunday March\n";}
+					&AUS_dstcalc;
+					if ($DBX) {print "     DST: $AUS_DST\n";}
+					if ($AUS_DST) {$gmt_offset++;}
+					$AC_processed++;
+					}
+				if ( (!$AC_processed) && ($dst_range =~ /FSO-LSM/) )
+					{
+					if ($DBX) {print "     First Sunday October to Last Sunday March\n";}
+					&AUST_dstcalc;
+					if ($DBX) {print "     DST: $AUST_DST\n";}
+					if ($AUST_DST) {$gmt_offset++;}
+					$AC_processed++;
+					}
+				if ( (!$AC_processed) && ($dst_range =~ /FSO-TSM/) )
+					{
+					if ($DBX) {print "     First Sunday October to Third Sunday March\n";}
+					&NZL_dstcalc;
+					if ($DBX) {print "     DST: $NZL_DST\n";}
+					if ($NZL_DST) {$gmt_offset++;}
+					$AC_processed++;
+					}
+				if (!$AC_processed)
+					{
+					if ($DBX) {print "     No DST Method Found\n";}
+					if ($DBX) {print "     DST: 0\n";}
+					$AC_processed++;
+					}
+
+			if ($multi_insert_counter > 8) {
+				### insert good deal into pending_transactions table ###
+				$stmtZ = "INSERT INTO vicidial_list values$multistmt('','$entry_date','$modify_date','$status','$user','$vendor_lead_code','$source_id','$list_id','$gmt_offset','$called_since_last_reset','$phone_code','$phone_number','$title','$first_name','$middle_initial','$last_name','$address1','$address2','$address3','$city','$state','$province','$postal_code','$country_code','$gender','$date_of_birth','$alt_phone','$email','$security_phrase','$comments',0);";
+				$dbhA->query("$stmtZ");
+				print STMT_FILE $stmtZ."\r\n";
+				$multistmt='';
+				$multi_insert_counter=0;
+
+			} else {
+				$multistmt .= "('','$entry_date','$modify_date','$status','$user','$vendor_lead_code','$source_id','$list_id','$gmt_offset','$called_since_last_reset','$phone_code','$phone_number','$title','$first_name','$middle_initial','$last_name','$address1','$address2','$address3','$city','$state','$province','$postal_code','$country_code','$gender','$date_of_birth','$alt_phone','$email','$security_phrase','$comments',0),";
+				$multi_insert_counter++;
+			}
+
+			$good++;
+		} else {
+			if ($bad < 10) {print "<BR></b><font size=1 color=red>record $total BAD- PHONE: $phone_number ROW: |$row[0]|</font><b>\n";}
+			$bad++;
+		}
+		$total++;
+		if ($total%100==0) {
+			print "<script language='JavaScript1.2'>ShowProgress($good, $bad, $total)</script>";
+			sleep(1);
+#			flush();
+		}
+	}
+}
+
+if ($multi_insert_counter > 0) {
+	$stmtZ = "INSERT INTO vicidial_list values ".substr($multistmt, 0, -1).";";
+	$dbhA->query("$stmtZ");
+	print STMT_FILE $stmtZ."\r\n";
+}
+
+print "<BR><BR>Done</B> GOOD: $good &nbsp; &nbsp; &nbsp; BAD: $bad &nbsp; &nbsp; &nbsp; TOTAL: $total</font></center>";
+
+exit;
+
+
+
+
+
+
+sub USA_dstcalc {
+#**********************************************************************
+# FSA-LSO
+#     This is returns 1 if Daylight Savings Time is in effect and 0 if 
+#       Standard time is in effect.
+#     Based on first Sunday in April and last Sunday in October at 2 am.
+#     INPUTS:
+#       mm              INTEGER       Month.
+#       dd              INTEGER       Day of the month.
+#       ns              INTEGER       Seconds into the day.
+#       dow             INTEGER       Day of week (0=Sunday, to 6=Saturday)
+#     OPTIONAL INPUT:
+#       timezone        INTEGER       hour difference UTC - local standard time
+#                                      (DEFAULT is blank)
+#                                     make calculations based on UTC time, 
+#                                     which means shift at 10:00 UTC in April
+#                                     and 9:00 UTC in October
+#     OUTPUT: 
+#                       INTEGER       1 = DST, 0 = not DST
+#**********************************************************************
+    
+	$USA_DST=0;
+	$mm = $mon;
+	$dd = $mday;
+	$ns = $dsec;
+	$dow= $wday;
+
+    if ($mm < 4 || $mm > 10) {
+	$USA_DST=0;   return 0;
+    } elsif ($mm >= 5 && $mm <= 9) {
+	$USA_DST=1;   return 1;
+    } elsif ($mm == 4) {
+	if ($dd > 7) {
+	    $USA_DST=1;   return 1;
+	} elsif ($dd >= ($dow+1)) {
+	    if ($timezone) {
+		if ($dow == 0 && $ns < (7200+$timezone*3600)) {
+		    $USA_DST=0;   return 0;
+		} else {
+		    $USA_DST=1;   return 1;
+		}
+	    } else {
+		if ($dow == 0 && $ns < 7200) {
+		    $USA_DST=0;   return 0;
+		} else {
+		    $USA_DST=1;   return 1;
+		}
+	    }
+	} else {
+	    $USA_DST=0;   return 0;
+	}
+    } elsif ($mm == 10) {
+	if ($dd < 25) {
+	    $USA_DST=1;   return 1;
+	} elsif ($dd < ($dow+25)) {
+	    $USA_DST=1;   return 1;
+	} elsif ($dow == 0) {
+	    if ($timezone) { # UTC calculations
+		if ($ns < (7200+($timezone-1)*3600)) {
+		    $USA_DST=1;   return 1;
+		} else {
+		    $USA_DST=0;   return 0;
+		}
+	    } else { # local time calculations
+		if ($ns < 7200) {
+		    $USA_DST=1;   return 1;
+		} else {
+		    $USA_DST=0;   return 0;
+		}
+	    }
+	} else {
+	    $USA_DST=0;   return 0;
+	}
+    } # end of month checks
+} # end of subroutine dstcalc
+
+
+
+
+sub GBR_dstcalc {
+#**********************************************************************
+#     This is returns 1 if Daylight Savings Time is in effect and 0 if 
+#       Standard time is in effect.
+#     Based on last Sunday in March and last Sunday in October at 1 am.
+#**********************************************************************
+    
+	$GBR_DST=0;
+	$mm = $mon;
+	$dd = $mday;
+	$ns = $dsec;
+	$dow= $wday;
+
+    if ($mm < 3 || $mm > 10) {
+	$GBR_DST=0;   return 0;
+    } elsif ($mm >= 4 && $mm <= 9) {
+	$GBR_DST=1;   return 1;
+    } elsif ($mm == 3) {
+	if ($dd < 25) {
+	    $GBR_DST=0;   return 0;
+	} elsif ($dd < ($dow+25)) {
+	    $GBR_DST=0;   return 0;
+	} elsif ($dow == 0) {
+	    if ($timezone) { # UTC calculations
+		if ($ns < (3600+($timezone-1)*3600)) {
+		    $GBR_DST=0;   return 0;
+		} else {
+		    $GBR_DST=1;   return 1;
+		}
+	    } else { # local time calculations
+		if ($ns < 3600) {
+		    $GBR_DST=0;   return 0;
+		} else {
+		    $GBR_DST=1;   return 1;
+		}
+	    }
+	} else {
+	    $GBR_DST=1;   return 1;
+	}
+    } elsif ($mm == 10) {
+	if ($dd < 25) {
+	    $GBR_DST=1;   return 1;
+	} elsif ($dd < ($dow+25)) {
+	    $GBR_DST=1;   return 1;
+	} elsif ($dow == 0) {
+	    if ($timezone) { # UTC calculations
+		if ($ns < (3600+($timezone-1)*3600)) {
+		    $GBR_DST=1;   return 1;
+		} else {
+		    $GBR_DST=0;   return 0;
+		}
+	    } else { # local time calculations
+		if ($ns < 3600) {
+		    $GBR_DST=1;   return 1;
+		} else {
+		    $GBR_DST=0;   return 0;
+		}
+	    }
+	} else {
+	    $GBR_DST=0;   return 0;
+	}
+    } # end of month checks
+} # end of subroutine dstcalc
+
+
+
+
+sub AUS_dstcalc {
+#**********************************************************************
+#     This is returns 1 if Daylight Savings Time is in effect and 0 if 
+#       Standard time is in effect.
+#     Based on last Sunday in October and last Sunday in March at 1 am.
+#**********************************************************************
+    
+	$AUS_DST=0;
+	$mm = $mon;
+	$dd = $mday;
+	$ns = $dsec;
+	$dow= $wday;
+
+    if ($mm < 3 || $mm > 10) {
+	$AUS_DST=1;   return 1;
+    } elsif ($mm >= 4 && $mm <= 9) {
+	$AUS_DST=0;   return 0;
+    } elsif ($mm == 3) {
+	if ($dd < 25) {
+	    $AUS_DST=1;   return 1;
+	} elsif ($dd < ($dow+25)) {
+	    $AUS_DST=1;   return 1;
+	} elsif ($dow == 0) {
+	    if ($timezone) { # UTC calculations
+		if ($ns < (3600+($timezone-1)*3600)) {
+		    $AUS_DST=1;   return 1;
+		} else {
+		    $AUS_DST=0;   return 0;
+		}
+	    } else { # local time calculations
+		if ($ns < 3600) {
+		    $AUS_DST=1;   return 1;
+		} else {
+		    $AUS_DST=0;   return 0;
+		}
+	    }
+	} else {
+	    $AUS_DST=0;   return 0;
+	}
+    } elsif ($mm == 10) {
+	if ($dd < 25) {
+	    $AUS_DST=0;   return 0;
+	} elsif ($dd < ($dow+25)) {
+	    $AUS_DST=0;   return 0;
+	} elsif ($dow == 0) {
+	    if ($timezone) { # UTC calculations
+		if ($ns < (3600+($timezone-1)*3600)) {
+		    $AUS_DST=0;   return 0;
+		} else {
+		    $AUS_DST=1;   return 1;
+		}
+	    } else { # local time calculations
+		if ($ns < 3600) {
+		    $AUS_DST=0;   return 0;
+		} else {
+		    $AUS_DST=1;   return 1;
+		}
+	    }
+	} else {
+	    $AUS_DST=1;   return 1;
+	}
+    } # end of month checks
+} # end of subroutine dstcalc
+
+
+
+
+
+sub AUST_dstcalc {
+#**********************************************************************
+#   TASMANIA ONLY
+#     This is returns 1 if Daylight Savings Time is in effect and 0 if 
+#       Standard time is in effect.
+#     Based on first Sunday in October and last Sunday in March at 1 am.
+#**********************************************************************
+    
+	$AUST_DST=0;
+	$mm = $mon;
+	$dd = $mday;
+	$ns = $dsec;
+	$dow= $wday;
+
+    if ($mm < 3 || $mm > 10) {
+	$AUST_DST=1;   return 1;
+    } elsif ($mm >= 4 && $mm <= 9) {
+	$AUST_DST=0;   return 0;
+    } elsif ($mm == 3) {
+	if ($dd < 25) {
+	    $AUST_DST=1;   return 1;
+	} elsif ($dd < ($dow+25)) {
+	    $AUST_DST=1;   return 1;
+	} elsif ($dow == 0) {
+	    if ($timezone) { # UTC calculations
+		if ($ns < (3600+($timezone-1)*3600)) {
+		    $AUST_DST=1;   return 1;
+		} else {
+		    $AUST_DST=0;   return 0;
+		}
+	    } else { # local time calculations
+		if ($ns < 3600) {
+		    $AUST_DST=1;   return 1;
+		} else {
+		    $AUST_DST=0;   return 0;
+		}
+	    }
+	} else {
+	    $AUST_DST=0;   return 0;
+	}
+    } elsif ($mm == 10) {
+	if ($dd > 7) {
+	    $AUST_DST=1;   return 1;
+	} elsif ($dd >= ($dow+1)) {
+	    if ($timezone) {
+		if ($dow == 0 && $ns < (7200+$timezone*3600)) {
+		    $AUST_DST=0;   return 0;
+		} else {
+		    $AUST_DST=1;   return 1;
+		}
+	    } else {
+		if ($dow == 0 && $ns < 3600) {
+		    $AUST_DST=0;   return 0;
+		} else {
+		    $AUST_DST=1;   return 1;
+		}
+	    }
+	} else {
+	    $AUST_DST=0;   return 0;
+	}
+    } # end of month checks
+} # end of subroutine dstcalc
+
+
+
+
+
+sub NZL_dstcalc {
+#**********************************************************************
+#     This is returns 1 if Daylight Savings Time is in effect and 0 if 
+#       Standard time is in effect.
+#     Based on first Sunday in October and third Sunday in March at 1 am.
+#**********************************************************************
+    
+	$NZL_DST=0;
+	$mm = $mon;
+	$dd = $mday;
+	$ns = $dsec;
+	$dow= $wday;
+
+    if ($mm < 3 || $mm > 10) {
+	$NZL_DST=1;   return 1;
+    } elsif ($mm >= 4 && $mm <= 9) {
+	$NZL_DST=0;   return 0;
+    } elsif ($mm == 3) {
+	if ($dd < 14) {
+	    $NZL_DST=1;   return 1;
+	} elsif ($dd < ($dow+14)) {
+	    $NZL_DST=1;   return 1;
+	} elsif ($dow == 0) {
+	    if ($timezone) { # UTC calculations
+		if ($ns < (3600+($timezone-1)*3600)) {
+		    $NZL_DST=1;   return 1;
+		} else {
+		    $NZL_DST=0;   return 0;
+		}
+	    } else { # local time calculations
+		if ($ns < 3600) {
+		    $NZL_DST=1;   return 1;
+		} else {
+		    $NZL_DST=0;   return 0;
+		}
+	    }
+	} else {
+	    $NZL_DST=0;   return 0;
+	}
+    } elsif ($mm == 10) {
+	if ($dd > 7) {
+	    $NZL_DST=1;   return 1;
+	} elsif ($dd >= ($dow+1)) {
+	    if ($timezone) {
+		if ($dow == 0 && $ns < (7200+$timezone*3600)) {
+		    $NZL_DST=0;   return 0;
+		} else {
+		    $NZL_DST=1;   return 1;
+		}
+	    } else {
+		if ($dow == 0 && $ns < 3600) {
+		    $NZL_DST=0;   return 0;
+		} else {
+		    $NZL_DST=1;   return 1;
+		}
+	    }
+	} else {
+	    $NZL_DST=0;   return 0;
+	}
+    } # end of month checks
+} # end of subroutine dstcalc
diff --git a/www/vicidial/log_test.php b/www/vicidial/log_test.php
new file mode 100644
index 00000000..cd7a86b7
--- /dev/null
+++ b/www/vicidial/log_test.php
@@ -0,0 +1,37 @@
+<?
+# log_test.php
+# 
+# Copyright (C) 2006  Matt Florell <vicidial@gmail.com>    LICENSE: GPLv2
+#
+
+
+$STARTtime = date("U");
+$TODAY = date("Y-m-d");
+$NOW_TIME = date("Y-m-d H:i:s");
+$FILE_datetime = $STARTtime;
+
+$ext_context = 'demo';
+if (!isset($begin_date)) {$begin_date = $TODAY;}
+if (!isset($end_date)) {$end_date = $TODAY;}
+
+
+$fp = fopen ("./closer_SQL_updates.txt", "a");
+$date = date("r");
+$ip = getenv("REMOTE_ADDR");
+$browser = getenv("HTTP_USER_AGENT");
+
+		fwrite ($fp, "CLOSER SQL UPDATE|$date|$PHP_AUTH_USER|$PHP_AUTH_PW|$ip|$browser|$LOGfullname|\n");
+		fclose($fp);
+
+
+	
+exit; 
+
+
+
+?>
+
+
+Hello
+
+
diff --git a/www/vicidial/new_listloader_superL.php b/www/vicidial/new_listloader_superL.php
new file mode 100644
index 00000000..6c0ac713
--- /dev/null
+++ b/www/vicidial/new_listloader_superL.php
@@ -0,0 +1,1364 @@
+<?
+# new_listloader_superL.php
+# 
+# Copyright (C) 2006  Matt Florell,Joe Johnson <vicidial@gmail.com>    LICENSE: GPLv2
+#
+# AST GUI lead loader from formatted file
+# 
+# CHANGES
+# 50602-1640 - First version created by Joe Johnson
+# 51128-1108 - Removed PHP global vars requirement
+# 60113-1603 - Fixed a few bugs in Excel import
+# 60421-1624 - check GET/POST vars lines with isset to not trigger PHP NOTICES
+# 60616-1240 - added listID override
+# 60616-1604 - added gmt lookup for each lead
+# 60619-1651 - Added variable filtering to eliminate SQL injection attack threat
+#
+# make sure vicidial_list exists and that your file follows the formatting correctly. This page does not dedupe or do any other lead filtering actions yet at this time.
+
+$version = '1.1.12-1';
+$build = '60619-1651';
+
+
+require("dbconnect.php");
+
+### links used for testing
+#$link=mysql_connect("10.10.10.15", "cron", "1234");
+#mysql_select_db("asterisk");
+#$WeBServeRRooT = '/home/www/htdocs';
+
+$PHP_AUTH_USER=$_SERVER['PHP_AUTH_USER'];
+$PHP_AUTH_PW=$_SERVER['PHP_AUTH_PW'];
+$PHP_SELF=$_SERVER['PHP_SELF'];
+$leadfile=$_FILES["leadfile"];
+	$LF_orig = $_FILES['leadfile']['name'];
+	$LF_path = $_FILES['leadfile']['tmp_name'];
+if (isset($_GET["submit_file"]))				{$submit_file=$_GET["submit_file"];}
+	elseif (isset($_POST["submit_file"]))		{$submit_file=$_POST["submit_file"];}
+if (isset($_GET["submit"]))				{$submit=$_GET["submit"];}
+	elseif (isset($_POST["submit"]))		{$submit=$_POST["submit"];}
+if (isset($_GET["SUBMIT"]))				{$SUBMIT=$_GET["SUBMIT"];}
+	elseif (isset($_POST["SUBMIT"]))		{$SUBMIT=$_POST["SUBMIT"];}
+if (isset($_GET["leadfile_name"]))				{$leadfile_name=$_GET["leadfile_name"];}
+	elseif (isset($_POST["leadfile_name"]))		{$leadfile_name=$_POST["leadfile_name"];}
+if (isset($_GET["file_layout"]))				{$file_layout=$_GET["file_layout"];}
+	elseif (isset($_POST["file_layout"]))		{$file_layout=$_POST["file_layout"];}
+if (isset($_GET["OK_to_process"]))				{$OK_to_process=$_GET["OK_to_process"];}
+	elseif (isset($_POST["OK_to_process"]))		{$OK_to_process=$_POST["OK_to_process"];}
+if (isset($_GET["vendor_lead_code_field"]))				{$vendor_lead_code_field=$_GET["vendor_lead_code_field"];}
+	elseif (isset($_POST["vendor_lead_code_field"]))		{$vendor_lead_code_field=$_POST["vendor_lead_code_field"];}
+if (isset($_GET["source_id_field"]))				{$source_id_field=$_GET["source_id_field"];}
+	elseif (isset($_POST["source_id_field"]))		{$source_id_field=$_POST["source_id_field"];}
+if (isset($_GET["list_id_field"]))				{$list_id_field=$_GET["list_id_field"];}
+	elseif (isset($_POST["list_id_field"]))		{$list_id_field=$_POST["list_id_field"];}
+if (isset($_GET["phone_code_field"]))				{$phone_code_field=$_GET["phone_code_field"];}
+	elseif (isset($_POST["phone_code_field"]))		{$phone_code_field=$_POST["phone_code_field"];}
+if (isset($_GET["phone_number_field"]))				{$phone_number_field=$_GET["phone_number_field"];}
+	elseif (isset($_POST["phone_number_field"]))		{$phone_number_field=$_POST["phone_number_field"];}
+if (isset($_GET["title_field"]))				{$title_field=$_GET["title_field"];}
+	elseif (isset($_POST["title_field"]))		{$title_field=$_POST["title_field"];}
+if (isset($_GET["first_name_field"]))				{$first_name_field=$_GET["first_name_field"];}
+	elseif (isset($_POST["first_name_field"]))		{$first_name_field=$_POST["first_name_field"];}
+if (isset($_GET["middle_initial_field"]))				{$middle_initial_field=$_GET["middle_initial_field"];}
+	elseif (isset($_POST["middle_initial_field"]))		{$middle_initial_field=$_POST["middle_initial_field"];}
+if (isset($_GET["last_name_field"]))				{$last_name_field=$_GET["last_name_field"];}
+	elseif (isset($_POST["last_name_field"]))		{$last_name_field=$_POST["last_name_field"];}
+if (isset($_GET["address1_field"]))				{$address1_field=$_GET["address1_field"];}
+	elseif (isset($_POST["address1_field"]))		{$address1_field=$_POST["address1_field"];}
+if (isset($_GET["address2_field"]))				{$address2_field=$_GET["address2_field"];}
+	elseif (isset($_POST["address2_field"]))		{$address2_field=$_POST["address2_field"];}
+if (isset($_GET["address3_field"]))				{$address3_field=$_GET["address3_field"];}
+	elseif (isset($_POST["address3_field"]))		{$address3_field=$_POST["address3_field"];}
+if (isset($_GET["city_field"]))				{$city_field=$_GET["city_field"];}
+	elseif (isset($_POST["city_field"]))		{$city_field=$_POST["city_field"];}
+if (isset($_GET["state_field"]))				{$state_field=$_GET["state_field"];}
+	elseif (isset($_POST["state_field"]))		{$state_field=$_POST["state_field"];}
+if (isset($_GET["province_field"]))				{$province_field=$_GET["province_field"];}
+	elseif (isset($_POST["province_field"]))		{$province_field=$_POST["province_field"];}
+if (isset($_GET["postal_code_field"]))				{$postal_code_field=$_GET["postal_code_field"];}
+	elseif (isset($_POST["postal_code_field"]))		{$postal_code_field=$_POST["postal_code_field"];}
+if (isset($_GET["country_code_field"]))				{$country_code_field=$_GET["country_code_field"];}
+	elseif (isset($_POST["country_code_field"]))		{$country_code_field=$_POST["country_code_field"];}
+if (isset($_GET["gender_field"]))				{$gender_field=$_GET["gender_field"];}
+	elseif (isset($_POST["gender_field"]))		{$gender_field=$_POST["gender_field"];}
+if (isset($_GET["date_of_birth_field"]))				{$date_of_birth_field=$_GET["date_of_birth_field"];}
+	elseif (isset($_POST["date_of_birth_field"]))		{$date_of_birth_field=$_POST["date_of_birth_field"];}
+if (isset($_GET["alt_phone_field"]))				{$alt_phone_field=$_GET["alt_phone_field"];}
+	elseif (isset($_POST["alt_phone_field"]))		{$alt_phone_field=$_POST["alt_phone_field"];}
+if (isset($_GET["email_field"]))				{$email_field=$_GET["email_field"];}
+	elseif (isset($_POST["email_field"]))		{$email_field=$_POST["email_field"];}
+if (isset($_GET["security_phrase_field"]))				{$security_phrase_field=$_GET["security_phrase_field"];}
+	elseif (isset($_POST["security_phrase_field"]))		{$security_phrase_field=$_POST["security_phrase_field"];}
+if (isset($_GET["comments_field"]))				{$comments_field=$_GET["comments_field"];}
+	elseif (isset($_POST["comments_field"]))		{$comments_field=$_POST["comments_field"];}
+if (isset($_GET["list_id_override"]))				{$list_id_override=$_GET["list_id_override"];}
+	elseif (isset($_POST["list_id_override"]))		{$list_id_override=$_POST["list_id_override"];}
+	$list_id_override = (preg_replace("/\D/","",$list_id_override));
+
+# $country_field=$_GET["country_field"];					if (!$country_field) {$country_field=$_POST["country_field"];}
+
+
+$PHP_AUTH_USER = ereg_replace("[^0-9a-zA-Z]","",$PHP_AUTH_USER);
+$PHP_AUTH_PW = ereg_replace("[^0-9a-zA-Z]","",$PHP_AUTH_PW);
+$list_id_override = ereg_replace("[^0-9]","",$list_id_override);
+
+
+$STARTtime = date("U");
+$TODAY = date("Y-m-d");
+$NOW_TIME = date("Y-m-d H:i:s");
+$FILE_datetime = $STARTtime;
+
+$stmt="SELECT count(*) from vicidial_users where user='$PHP_AUTH_USER' and pass='$PHP_AUTH_PW' and user_level > 7;";
+if ($DB) {echo "|$stmt|\n";}
+$rslt=mysql_query($stmt, $link);
+$row=mysql_fetch_row($rslt);
+$auth=$row[0];
+
+$fp = fopen ("./project_auth_entries.txt", "a");
+$date = date("r");
+$ip = getenv("REMOTE_ADDR");
+$browser = getenv("HTTP_USER_AGENT");
+
+  if( (strlen($PHP_AUTH_USER)<2) or (strlen($PHP_AUTH_PW)<2) or (!$auth))
+	{
+    Header("WWW-Authenticate: Basic realm=\"VICIDIAL-LEAD-LOADER\"");
+    Header("HTTP/1.0 401 Unauthorized");
+    echo "Invalid Username/Password: |$PHP_AUTH_USER|$PHP_AUTH_PW|\n";
+    exit;
+	}
+  else
+	{
+	header ("Content-type: text/html; charset=utf-8");
+	if($auth>0)
+		{
+		$office_no=strtoupper($PHP_AUTH_USER);
+		$password=strtoupper($PHP_AUTH_PW);
+			$stmt="SELECT load_leads from vicidial_users where user='$PHP_AUTH_USER' and pass='$PHP_AUTH_PW'";
+			$rslt=mysql_query($stmt, $link);
+			$row=mysql_fetch_row($rslt);
+			$LOGload_leads				=$row[0];
+
+		if ($LOGload_leads < 1)
+			{
+			echo "You do not have permissions to load leads\n";
+			exit;
+			}
+		fwrite ($fp, "LIST_LOAD|GOOD|$date|$PHP_AUTH_USER|$PHP_AUTH_PW|$ip|$browser|$LOGfullname|\n");
+		fclose($fp);
+		}
+	else
+		{
+		fwrite ($fp, "LIST_LOAD|FAIL|$date|$PHP_AUTH_USER|$PHP_AUTH_PW|$ip|$browser|\n");
+		fclose($fp);
+		}
+	}
+
+
+$script_name = getenv("SCRIPT_NAME");
+$server_name = getenv("SERVER_NAME");
+$server_port = getenv("SERVER_PORT");
+if (eregi("443",$server_port)) {$HTTPprotocol = 'https://';}
+  else {$HTTPprotocol = 'http://';}
+$admDIR = "$HTTPprotocol$server_name$script_name";
+$admDIR = eregi_replace('new_listloader_superL.php','',$admDIR);
+$admSCR = 'admin.php';
+$NWB = " &nbsp; <a href=\"javascript:openNewWindow('$admDIR$admSCR?ADD=99999";
+$NWE = "')\"><IMG SRC=\"help.gif\" WIDTH=20 HEIGHT=20 BORDER=0 ALT=\"HELP\" ALIGN=TOP></A>";
+
+$secX = date("U");
+$hour = date("H");
+$min = date("i");
+$sec = date("s");
+$mon = date("m");
+$mday = date("d");
+$year = date("Y");
+$isdst = date("I");
+$Shour = date("H");
+$Smin = date("i");
+$Ssec = date("s");
+$Smon = date("m");
+$Smday = date("d");
+$Syear = date("Y");
+$pulldate0 = "$year-$mon-$mday $hour:$min:$sec";
+$inSD = $pulldate0;
+$dsec = ( ( ($hour * 3600) + ($min * 60) ) + $sec );
+
+	### Grab Server GMT value from the database
+	$stmt="SELECT local_gmt FROM servers where server_ip = '$server_ip';";
+	$rslt=mysql_query($stmt, $link);
+	$gmt_recs = mysql_num_rows($rslt);
+	if ($gmt_recs > 0)
+		{
+		$row=mysql_fetch_row($rslt);
+		$DBSERVER_GMT		=		"$row[0]";
+		if (strlen($DBSERVER_GMT)>0)	{$SERVER_GMT = $DBSERVER_GMT;}
+		if ($isdst) {$SERVER_GMT++;} 
+		}
+	else
+		{
+		$SERVER_GMT = date("O");
+		$SERVER_GMT = eregi_replace("\+","",$SERVER_GMT);
+		$SERVER_GMT = ($SERVER_GMT + 0);
+		$SERVER_GMT = ($SERVER_GMT / 100);
+		}
+
+	$LOCAL_GMT_OFF = $SERVER_GMT;
+	$LOCAL_GMT_OFF_STD = $SERVER_GMT;
+
+#if ($DB) {print "SEED TIME  $secX      :   $year-$mon-$mday $hour:$min:$sec  LOCAL GMT OFFSET NOW: $LOCAL_GMT_OFF\n";}
+
+
+echo "<html>\n";
+echo "<head>\n";
+echo "<!-- VERSION: $version     BUILD: $build -->\n";
+echo "<!-- SEED TIME  $secX:   $year-$mon-$mday $hour:$min:$sec  LOCAL GMT OFFSET NOW: $LOCAL_GMT_OFF  DST: $isdst -->\n";
+
+function macfontfix($fontsize) {
+
+  $browser = getenv("HTTP_USER_AGENT");
+  $pctype = explode("(", $browser);
+  if (ereg("Mac",$pctype[1])) {
+   /* Browser is a Mac.  If not Netscape 6, raise fonts */
+
+    $blownbrowser = explode('/', $browser);
+    $ver = explode(' ', $blownbrowser[1]);
+    $ver = $ver[0];
+    if ($ver >= 5.0) return $fontsize; else return ($fontsize+2);
+
+  } else return $fontsize;	/* Browser is not a Mac - don't touch fonts */
+}
+
+echo "<style type=\"text/css\">\n
+<!--\n
+.title {  font-family: Arial, Helvetica, sans-serif; font-size: ".macfontfix(18)."pt}\n
+.standard {  font-family: Arial, Helvetica, sans-serif; font-size: ".macfontfix(10)."pt}\n
+.small_standard {  font-family: Arial, Helvetica, sans-serif; font-size: ".macfontfix(8)."pt}\n
+.tiny_standard {  font-family: Arial, Helvetica, sans-serif; font-size: ".macfontfix(6)."pt}\n
+.standard_bold {  font-family: Arial, Helvetica, sans-serif; font-size: ".macfontfix(10)."pt; font-weight: bold}\n
+.standard_header {  font-family: Arial, Helvetica, sans-serif; font-size: ".macfontfix(14)."pt; font-weight: bold}\n
+.standard_bold_highlight {  font-family: Arial, Helvetica, sans-serif; font-size: ".macfontfix(10)."pt; font-weight: bold; color: white; BACKGROUND-COLOR: black}\n
+.standard_bold_blue_highlight {  font-family: Arial, Helvetica, sans-serif; font-size: 10pt; font-weight: bold; BACKGROUND-COLOR: blue}\n
+A.employee_standard {  font-family: garamond, sans-serif; font-size: ".macfontfix(10)."pt; font-style: normal; font-variant: normal; font-weight: bold; text-decoration: none}\n
+.employee_standard {  font-family: garamond, sans-serif; font-size: ".macfontfix(10)."pt; font-weight: bold}\n
+.employee_title {  font-family: Garamond, sans-serif; font-size: ".macfontfix(14)."pt; font-weight: bold}\n
+\\\\-->\n
+</style>\n";
+
+?>
+
+
+<script language="JavaScript1.2">
+function openNewWindow(url) {
+  window.open (url,"",'width=500,height=300,scrollbars=yes,menubar=yes,address=yes');
+}
+function ShowProgress(good, bad, total) {
+	parent.lead_count.document.open();
+	parent.lead_count.document.write('<html><body><table border=0 width=200 cellpadding=10 cellspacing=0 align=center valign=top><tr bgcolor="#000000"><th colspan=2><font face="arial, helvetica" size=3 color=white>Current file status:</font></th></tr><tr bgcolor="#009900"><td align=right><font face="arial, helvetica" size=2 color=white><B>Good:</B></font></td><td align=left><font face="arial, helvetica" size=2 color=white><B>'+good+'</B></font></td></tr><tr bgcolor="#990000"><td align=right><font face="arial, helvetica" size=2 color=white><B>Bad:</B></font></td><td align=left><font face="arial, helvetica" size=2 color=white><B>'+bad+'</B></font></td></tr><tr bgcolor="#000099"><td align=right><font face="arial, helvetica" size=2 color=white><B>Total:</B></font></td><td align=left><font face="arial, helvetica" size=2 color=white><B>'+total+'</B></font></td></tr></table><body></html>');
+	parent.lead_count.document.close();
+}
+function ParseFileName() {
+	if (!document.forms[0].OK_to_process) {	
+		var endstr=document.forms[0].leadfile.value.lastIndexOf('\\');
+		if (endstr>-1) {
+			endstr++;
+			var filename=document.forms[0].leadfile.value.substring(endstr);
+			document.forms[0].leadfile_name.value=filename;
+		}
+	}
+}
+</script>
+<title>VICIDIAL ADMIN: Super Lead Loader</title>
+</head>
+<body>
+<form action=<?=$PHP_SELF ?> method=post onSubmit="ParseFileName()" enctype="multipart/form-data">
+<input type=hidden name='leadfile_name' value="<?=$leadfile_name ?>">
+<? if ($file_layout!="custom") { ?>
+<table align=center width="500" border=0 cellpadding=5 cellspacing=0 bgcolor=#D9E6FE>
+  <tr>
+	<td align=right width="35%"><B><font face="arial, helvetica" size=2>Load leads from this file:</font></B></td>
+	<td align=left width="65%"><input type=file name="leadfile" value="<?=$leadfile ?>"> <? echo "$NWB#vicidial_list_loader$NWE"; ?></td>
+  </tr>
+  <tr>
+	<td align=right width="25%"><font face="arial, helvetica" size=2>List ID Override: </font></td>
+	<td align=left width="75%"><font face="arial, helvetica" size=1><input type=text value="<?=$list_id_override ?>" name='list_id_override' size=10 maxlength=8> (numbers only or leave blank for values in the file)</td>
+  </tr>
+  <tr>
+	<td align=right><B><font face="arial, helvetica" size=2>File layout to use:</font></B></td>
+	<td align=left><font face="arial, helvetica" size=2><input type=radio name="file_layout" value="standard" checked>Standard VICIDIAL&nbsp;&nbsp;&nbsp;&nbsp;<input type=radio name="file_layout" value="custom">Custom layout</td>
+  </tr>
+  <tr>
+	<td align=center colspan=2><input type=submit value="SUBMIT" name='submit_file'>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;<input type=button onClick="javascript:document.location='new_listloader_superL.php'" value="START OVER" name='reload_page'></td>
+  </tr>
+  <tr><td colspan=2><font size=1><a href="listloaderMAIN.php" target="_parent">CLICK HERE TO GO TO THE BASIC LEAD LOADER </a> &nbsp; &nbsp; &nbsp; &nbsp; <a href="admin.php" target="_parent">BACK TO ADMIN</a></font></td></tr>
+  <tr><td colspan=2><font size=1>SUPER LIST LOADER- &nbsp; &nbsp; VERSION: <?=$version ?> &nbsp; &nbsp; BUILD: <?=$build ?></td></tr>
+</table>
+<? } ?>
+
+<?
+
+	if ($OK_to_process) {
+		print "<script language='JavaScript1.2'>document.forms[0].leadfile.disabled=true;document.forms[0].list_id_override.disabled=true; document.forms[0].submit_file.disabled=true; document.forms[0].reload_page.disabled=true;</script>";
+		flush();
+		$total=0; $good=0; $bad=0;
+
+		if (!eregi(".csv", $leadfile_name) && !eregi(".xls", $leadfile_name)) {
+			# copy($leadfile, "./vicidial_temp_file.txt");
+			$file=fopen("$WeBServeRRooT/vicidial/vicidial_temp_file.txt", "r");
+			$stmt_file=fopen("listloader_stmts.txt", "w");
+
+			$buffer=fgets($file, 4096);
+			$tab_count=substr_count($buffer, "\t");
+			$pipe_count=substr_count($buffer, "|");
+
+			if ($tab_count>$pipe_count) {$delimiter="\t";  $delim_name="tab";} else {$delimiter="|";  $delim_name="pipe";}
+			$field_check=explode($delimiter, $buffer);
+
+			if (count($field_check)>=5) {
+				flush();
+				$file=fopen("$WeBServeRRooT/vicidial/vicidial_temp_file.txt", "r");
+				print "<center><font face='arial, helvetica' size=3 color='#009900'><B>Processing $delim_name-delimited file...\n";
+
+			if (strlen($list_id_override)>0) 
+				{
+				print "<BR><BR>LIST ID OVERRIDE FOR THIS FILE: $list_id_override<BR><BR>";
+				}
+
+				while (!feof($file)) {
+					$record++;
+					$buffer=rtrim(fgets($file, 4096));
+					$buffer=stripslashes($buffer);
+
+					if (strlen($buffer)>0) {
+						$row=explode($delimiter, eregi_replace("[\'\"]", "", $buffer));
+
+						$pulldate=date("Y-m-d H:i:s");
+						$entry_date =			"$pulldate";
+						$modify_date =			"";
+						$status =				"NEW";
+						$user ="";
+						$vendor_lead_code =		$row[$vendor_lead_code_field];
+						$source_code =			$row[$source_id_field];
+						$source_id=$source_code;
+						$list_id =				$row[$list_id_field];
+						$gmt_offset =			'0';
+						$called_since_last_reset='N';
+						$phone_code =			eregi_replace("[^0-9]", "", $row[$phone_code_field]);
+						$phone_number =			eregi_replace("[^0-9]", "", $row[$phone_number_field]);
+							$USarea = 			substr($phone_number, 0, 3);
+						$title =				$row[$title_field];
+						$first_name =			$row[$first_name_field];
+						$middle_initial =		$row[$middle_initial_field];
+						$last_name =			$row[$last_name_field];
+						$address1 =				$row[$address1_field];
+						$address2 =				$row[$address2_field];
+						$address3 =				$row[$address3_field];
+						$city =$row[$city_field];
+						$state =				$row[$state_field];
+						$province =				$row[$province_field];
+						$postal_code =			$row[$postal_code_field];
+						$country_code =				$row[$country_code_field];
+						$gender =				$row[$gender_field];
+						$date_of_birth =		$row[$date_of_birth_field];
+						$alt_phone =			$row[$alt_phone_field];
+						$email =				$row[$email_field];
+						$security_phrase =		$row[$security_phrase_field];
+						$comments =				trim($row[$comments_field]);
+
+						if (strlen($phone_number)>8) {
+
+
+							if (strlen($list_id_override)>0) 
+								{
+							#	print "<BR><BR>LIST ID OVERRIDE FOR THIS FILE: $list_id_override<BR><BR>";
+								$list_id = $list_id_override;
+								}
+
+							$gmt_offset = lookup_gmt($phone_code,$USarea,$state,$LOCAL_GMT_OFF_STD,$Shour,$Smin,$Ssec,$Smon,$Smday,$Syear);
+
+							if ($multi_insert_counter > 8) {
+								### insert good deal into pending_transactions table ###
+								$stmtZ = "INSERT INTO vicidial_list values$multistmt('','$entry_date','$modify_date','$status','$user','$vendor_lead_code','$source_id','$list_id','$gmt_offset','$called_since_last_reset','$phone_code','$phone_number','$title','$first_name','$middle_initial','$last_name','$address1','$address2','$address3','$city','$state','$province','$postal_code','$country_code','$gender','$date_of_birth','$alt_phone','$email','$security_phrase','$comments',0);";
+								$rslt=mysql_query($stmtZ, $link);
+								if ($WeBRooTWritablE > 0) 
+									{fwrite($stmt_file, $stmtZ."\r\n");}
+								$multistmt='';
+								$multi_insert_counter=0;
+
+							} else {
+								$multistmt .= "('','$entry_date','$modify_date','$status','$user','$vendor_lead_code','$source_id','$list_id','$gmt_offset','$called_since_last_reset','$phone_code','$phone_number','$title','$first_name','$middle_initial','$last_name','$address1','$address2','$address3','$city','$state','$province','$postal_code','$country_code','$gender','$date_of_birth','$alt_phone','$email','$security_phrase','$comments',0),";
+								$multi_insert_counter++;
+							}
+
+							$good++;
+						} else {
+							if ($bad < 10) {print "<BR></b><font size=1 color=red>record $total BAD- PHONE: $phone_number ROW: |$row[0]|</font><b>\n";}
+							$bad++;
+						}
+						$total++;
+						if ($total%100==0) {
+							print "<script language='JavaScript1.2'>ShowProgress($good, $bad, $total)</script>";
+							usleep(1000);
+							flush();
+						}
+					}
+				}
+				if ($multi_insert_counter!=0) {
+					$stmtZ = "INSERT INTO vicidial_list values".substr($multistmt, 0, -1).";";
+					mysql_query($stmtZ, $link);
+					if ($WeBRooTWritablE > 0) 
+						{fwrite($stmt_file, $stmtZ."\r\n");}
+				}
+
+				print "<BR><BR>Done</B> GOOD: $good &nbsp; &nbsp; &nbsp; BAD: $bad &nbsp; &nbsp; &nbsp; TOTAL: $total</font></center>";
+
+			} else {
+				print "<center><font face='arial, helvetica' size=3 color='#990000'><B>ERROR: The file does not have the required number of fields to process it.</B></font></center>";
+			}
+		} else if (!eregi(".csv", $leadfile_name)) {
+			# copy($leadfile, "./vicidial_temp_file.xls");
+			$file=fopen("$WeBServeRRooT/vicidial/vicidial_temp_file.xls", "r");
+
+			print "<center><font face='arial, helvetica' size=3 color='#009900'><B>Processing Excel file... \n";
+			if (strlen($list_id_override)>0) 
+			{
+			print "<BR><BR>LIST ID OVERRIDE FOR THIS FILE: $list_id_override<BR><BR>\n";
+			}
+		# print "$WeBServeRRooT/vicidial/listloader_super.pl $vendor_lead_code_field,$source_id_field,$list_id_field,$phone_code_field,$phone_number_field,$title_field,$first_name_field,$middle_initial_field,$last_name_field,$address1_field,$address2_field,$address3_field,$city_field,$state_field,$province_field,$postal_code_field,$country_code_field,$gender_field,$date_of_birth_field,$alt_phone_field,$email_field,$security_phrase_field,$comments_field";
+			passthru("$WeBServeRRooT/vicidial/listloader_super.pl $vendor_lead_code_field,$source_id_field,$list_id_field,$phone_code_field,$phone_number_field,$title_field,$first_name_field,$middle_initial_field,$last_name_field,$address1_field,$address2_field,$address3_field,$city_field,$state_field,$province_field,$postal_code_field,$country_code_field,$gender_field,$date_of_birth_field,$alt_phone_field,$email_field,$security_phrase_field,$comments_field, --forcelistid=$list_id_override");
+		} else {
+			# copy($leadfile, "./vicidial_temp_file.csv");
+			$file=fopen("$WeBServeRRooT/vicidial/vicidial_temp_file.csv", "r");
+			$stmt_file=fopen("listloader_stmts.txt", "w");
+			
+			print "<center><font face='arial, helvetica' size=3 color='#009900'><B>Processing CSV file... \n";
+			if (strlen($list_id_override)>0) 
+				{
+				print "<BR><BR>LIST ID OVERRIDE FOR THIS FILE: $list_id_override<BR><BR>";
+				}
+
+			while($row=fgetcsv($file, 1000, ",")) {
+
+				$pulldate=date("Y-m-d H:i:s");
+				$entry_date =			"$pulldate";
+				$modify_date =			"";
+				$status =				"NEW";
+				$user ="";
+				$vendor_lead_code =		$row[$vendor_lead_code_field];
+				$source_code =			$row[$source_id_field];
+				$source_id=$source_code;
+				$list_id =				$row[$list_id_field];
+				$gmt_offset =			'0';
+				$called_since_last_reset='N';
+				$phone_code =			eregi_replace("[^0-9]", "", $row[$phone_code_field]);
+				$phone_number =			eregi_replace("[^0-9]", "", $row[$phone_number_field]);
+					$USarea = 			substr($phone_number, 0, 3);
+				$title =				$row[$title_field];
+				$first_name =			$row[$first_name_field];
+				$middle_initial =		$row[$middle_initial_field];
+				$last_name =			$row[$last_name_field];
+				$address1 =				$row[$address1_field];
+				$address2 =				$row[$address2_field];
+				$address3 =				$row[$address3_field];
+				$city =$row[$city_field];
+				$state =				$row[$state_field];
+				$province =				$row[$province_field];
+				$postal_code =			$row[$postal_code_field];
+				$country_code =				$row[$country_code_field];
+				$gender =				$row[$gender_field];
+				$date_of_birth =		$row[$date_of_birth_field];
+				$alt_phone =			$row[$alt_phone_field];
+				$email =				$row[$email_field];
+				$security_phrase =		$row[$security_phrase_field];
+				$comments =				trim($row[$comments_field]);
+
+				if (strlen($phone_number)>8) {
+
+					if (strlen($list_id_override)>0) 
+						{
+					#	print "<BR><BR>LIST ID OVERRIDE FOR THIS FILE: $list_id_override<BR><BR>";
+						$list_id = $list_id_override;
+						}
+
+					$gmt_offset = lookup_gmt($phone_code,$USarea,$state,$LOCAL_GMT_OFF_STD,$Shour,$Smin,$Ssec,$Smon,$Smday,$Syear);
+
+
+					if ($multi_insert_counter > 8) {
+						### insert good deal into pending_transactions table ###
+						$stmtZ = "INSERT INTO vicidial_list values$multistmt('','$entry_date','$modify_date','$status','$user','$vendor_lead_code','$source_id','$list_id','$gmt_offset','$called_since_last_reset','$phone_code','$phone_number','$title','$first_name','$middle_initial','$last_name','$address1','$address2','$address3','$city','$state','$province','$postal_code','$country_code','$gender','$date_of_birth','$alt_phone','$email','$security_phrase','$comments',0);";
+						$rslt=mysql_query($stmtZ, $link);
+						if ($WeBRooTWritablE > 0) 
+							{fwrite($stmt_file, $stmtZ."\r\n");}
+						$multistmt='';
+						$multi_insert_counter=0;
+
+					} else {
+						$multistmt .= "('','$entry_date','$modify_date','$status','$user','$vendor_lead_code','$source_id','$list_id','$gmt_offset','$called_since_last_reset','$phone_code','$phone_number','$title','$first_name','$middle_initial','$last_name','$address1','$address2','$address3','$city','$state','$province','$postal_code','$country_code','$gender','$date_of_birth','$alt_phone','$email','$security_phrase','$comments',0),";
+						$multi_insert_counter++;
+					}
+
+					$good++;
+				} else {
+					if ($bad < 10) {print "<BR></b><font size=1 color=red>record $total BAD- PHONE: $phone_number ROW: |$row[0]|</font><b>\n";}
+					$bad++;
+				}
+				$total++;
+				if ($total%100==0) {
+					print "<script language='JavaScript1.2'>ShowProgress($good, $bad, $total)</script>";
+					usleep(1000);
+					flush();
+				}
+			}
+			if ($multi_insert_counter!=0) {
+				$stmtZ = "INSERT INTO vicidial_list values".substr($multistmt, 0, -1).";";
+				mysql_query($stmtZ, $link);
+				if ($WeBRooTWritablE > 0) 
+					{fwrite($stmt_file, $stmtZ."\r\n");}
+			}
+			print "<BR><BR>Done</B> GOOD: $good &nbsp; &nbsp; &nbsp; BAD: $bad &nbsp; &nbsp; &nbsp; TOTAL: $total</font></center>";
+		}
+		print "<script language='JavaScript1.2'>document.forms[0].leadfile.disabled=false; document.forms[0].submit_file.disabled=false; document.forms[0].reload_page.disabled=false;</script>";
+	} 
+
+if ($leadfile && filesize($LF_path)<=8388608) {
+		$total=0; $good=0; $bad=0;
+		if ($file_layout=="standard") {
+
+	print "<script language='JavaScript1.2'>document.forms[0].leadfile.disabled=true; document.forms[0].submit_file.disabled=true; document.forms[0].reload_page.disabled=true;</script>";
+	flush();
+
+	if (!eregi(".csv", $leadfile_name) && !eregi(".xls", $leadfile_name)) {
+
+		copy($LF_path, "$WeBServeRRooT/vicidial/vicidial_temp_file.txt");
+		$file=fopen("$WeBServeRRooT/vicidial/vicidial_temp_file.txt", "r");
+		if ($WeBRooTWritablE > 0) 
+			{$stmt_file=fopen("$WeBServeRRooT/vicidial/listloader_stmts.txt", "w");}
+
+		$buffer=fgets($file, 4096);
+		$tab_count=substr_count($buffer, "\t");
+		$pipe_count=substr_count($buffer, "|");
+
+		if ($tab_count>$pipe_count) {$delimiter="\t";  $delim_name="tab";} else {$delimiter="|";  $delim_name="pipe";}
+		$field_check=explode($delimiter, $buffer);
+
+		if (count($field_check)>=5) {
+			flush();
+			$file=fopen("$WeBServeRRooT/vicidial/vicidial_temp_file.txt", "r");
+			$total=0; $good=0; $bad=0;
+			print "<center><font face='arial, helvetica' size=3 color='#009900'><B>Processing $delim_name-delimited file... ($tab_count|$pipe_count)\n";
+			if (strlen($list_id_override)>0) 
+			{
+			print "<BR><BR>LIST ID OVERRIDE FOR THIS FILE: $list_id_override<BR><BR>";
+			}
+		while (!feof($file)) {
+				$record++;
+				$buffer=rtrim(fgets($file, 4096));
+				$buffer=stripslashes($buffer);
+
+				if (strlen($buffer)>0) {
+					$row=explode($delimiter, eregi_replace("[\'\"]", "", $buffer));
+
+					$pulldate=date("Y-m-d H:i:s");
+					$entry_date =			"$pulldate";
+					$modify_date =			"";
+					$status =				"NEW";
+					$user ="";
+					$vendor_lead_code =		$row[0];
+					$source_code =			$row[1];
+					$source_id=$source_code;
+					$list_id =				$row[2];
+					$gmt_offset =			'0';
+					$called_since_last_reset='N';
+					$phone_code =			eregi_replace("[^0-9]", "", $row[3]);
+					$phone_number =			eregi_replace("[^0-9]", "", $row[4]);
+						$USarea = 			substr($phone_number, 0, 3);
+					$title =				$row[5];
+					$first_name =			$row[6];
+					$middle_initial =		$row[7];
+					$last_name =			$row[8];
+					$address1 =				$row[9];
+					$address2 =				$row[10];
+					$address3 =				$row[11];
+					$city =$row[12];
+					$state =				$row[13];
+					$province =				$row[14];
+					$postal_code =			$row[15];
+					$country_code =				$row[16];
+					$gender =				$row[17];
+					$date_of_birth =		$row[18];
+					$alt_phone =			$row[19];
+					$email =				$row[20];
+					$security_phrase =		$row[21];
+					$comments =				trim($row[22]);
+
+					if (strlen($phone_number)>8) {
+
+						if (strlen($list_id_override)>0) 
+							{
+						#	print "<BR><BR>LIST ID OVERRIDE FOR THIS FILE: $list_id_override<BR><BR>";
+							$list_id = $list_id_override;
+							}
+
+						$gmt_offset = lookup_gmt($phone_code,$USarea,$state,$LOCAL_GMT_OFF_STD,$Shour,$Smin,$Ssec,$Smon,$Smday,$Syear);
+
+
+						if ($multi_insert_counter > 8) {
+							### insert good deal into pending_transactions table ###
+							$stmtZ = "INSERT INTO vicidial_list values$multistmt('','$entry_date','$modify_date','$status','$user','$vendor_lead_code','$source_id','$list_id','$gmt_offset','$called_since_last_reset','$phone_code','$phone_number','$title','$first_name','$middle_initial','$last_name','$address1','$address2','$address3','$city','$state','$province','$postal_code','$country_code','$gender','$date_of_birth','$alt_phone','$email','$security_phrase','$comments',0);";
+							$rslt=mysql_query($stmtZ, $link);
+							if ($WeBRooTWritablE > 0) 
+								{fwrite($stmt_file, $stmtZ."\r\n");}
+							$multistmt='';
+							$multi_insert_counter=0;
+
+						} else {
+							$multistmt .= "('','$entry_date','$modify_date','$status','$user','$vendor_lead_code','$source_id','$list_id','$gmt_offset','$called_since_last_reset','$phone_code','$phone_number','$title','$first_name','$middle_initial','$last_name','$address1','$address2','$address3','$city','$state','$province','$postal_code','$country_code','$gender','$date_of_birth','$alt_phone','$email','$security_phrase','$comments',0),";
+							$multi_insert_counter++;
+						}
+
+						$good++;
+					} else {
+						if ($bad < 10) {print "<BR></b><font size=1 color=red>record $total BAD- PHONE: $phone_number ROW: |$row[0]|</font><b>\n";}
+						$bad++;
+					}
+					$total++;
+					if ($total%100==0) {
+						print "<script language='JavaScript1.2'>ShowProgress($good, $bad, $total)</script>";
+						usleep(1000);
+						flush();
+					}
+				}
+			}
+			if ($multi_insert_counter!=0) {
+				$stmtZ = "INSERT INTO vicidial_list values".substr($multistmt, 0, -1).";";
+				mysql_query($stmtZ, $link);
+				if ($WeBRooTWritablE > 0) 
+					{fwrite($stmt_file, $stmtZ."\r\n");}
+			}
+
+			print "<BR><BR>Done</B> GOOD: $good &nbsp; &nbsp; &nbsp; BAD: $bad &nbsp; &nbsp; &nbsp; TOTAL: $total</font></center>";
+
+		} else {
+			print "<center><font face='arial, helvetica' size=3 color='#990000'><B>ERROR: The file does not have the required number of fields to process it.</B></font></center>";
+		}
+	} else if (!eregi(".csv", $leadfile_name)) {
+		copy($LF_path, "$WeBServeRRooT/vicidial/vicidial_temp_file.xls");
+		$file=fopen("$WeBServeRRooT/vicidial/vicidial_temp_file.xls", "r");
+
+		passthru("$WeBServeRRooT/vicidial/listloader.pl --forcelistid=$list_id_override");
+	} else {
+		copy($LF_path, "$WeBServeRRooT/vicidial/vicidial_temp_file.csv");
+		$file=fopen("$WeBServeRRooT/vicidial/vicidial_temp_file.csv", "r");
+		$stmt_file=fopen("listloader_stmts.txt", "w");
+		
+		print "<center><font face='arial, helvetica' size=3 color='#009900'><B>Processing CSV file... \n";
+
+		if (strlen($list_id_override)>0) 
+			{
+			print "<BR><BR>LIST ID OVERRIDE FOR THIS FILE: $list_id_override<BR><BR>";
+			}
+
+		while($row=fgetcsv($file, 1000, ",")) {
+				$pulldate=date("Y-m-d H:i:s");
+				$entry_date =			"$pulldate";
+				$modify_date =			"";
+				$status =				"NEW";
+				$user ="";
+				$vendor_lead_code =		$row[0];
+				$source_code =			$row[1];
+				$source_id=$source_code;
+				$list_id =				$row[2];
+				$gmt_offset =			'0';
+				$called_since_last_reset='N';
+				$phone_code =			eregi_replace("[^0-9]", "", $row[3]);
+				$phone_number =			eregi_replace("[^0-9]", "", $row[4]);
+					$USarea = 			substr($phone_number, 0, 3);
+				$title =				$row[5];
+				$first_name =			$row[6];
+				$middle_initial =		$row[7];
+				$last_name =			$row[8];
+				$address1 =				$row[9];
+				$address2 =				$row[10];
+				$address3 =				$row[11];
+				$city =$row[12];
+				$state =				$row[13];
+				$province =				$row[14];
+				$postal_code =			$row[15];
+				$country_code =				$row[16];
+				$gender =				$row[17];
+				$date_of_birth =		$row[18];
+				$alt_phone =			$row[19];
+				$email =				$row[20];
+				$security_phrase =		$row[21];
+				$comments =				trim($row[22]);
+
+				if (strlen($phone_number)>8) {
+
+					if (strlen($list_id_override)>0) 
+						{
+					#	print "<BR><BR>LIST ID OVERRIDE FOR THIS FILE: $list_id_override<BR><BR>";
+						$list_id = $list_id_override;
+						}
+
+					$gmt_offset = lookup_gmt($phone_code,$USarea,$state,$LOCAL_GMT_OFF_STD,$Shour,$Smin,$Ssec,$Smon,$Smday,$Syear);
+
+
+					if ($multi_insert_counter > 8) {
+						### insert good deal into pending_transactions table ###
+						$stmtZ = "INSERT INTO vicidial_list values$multistmt('','$entry_date','$modify_date','$status','$user','$vendor_lead_code','$source_id','$list_id','$gmt_offset','$called_since_last_reset','$phone_code','$phone_number','$title','$first_name','$middle_initial','$last_name','$address1','$address2','$address3','$city','$state','$province','$postal_code','$country_code','$gender','$date_of_birth','$alt_phone','$email','$security_phrase','$comments',0);";
+						$rslt=mysql_query($stmtZ, $link);
+						if ($WeBRooTWritablE > 0) 
+							{fwrite($stmt_file, $stmtZ."\r\n");}
+						$multistmt='';
+						$multi_insert_counter=0;
+
+					} else {
+						$multistmt .= "('','$entry_date','$modify_date','$status','$user','$vendor_lead_code','$source_id','$list_id','$gmt_offset','$called_since_last_reset','$phone_code','$phone_number','$title','$first_name','$middle_initial','$last_name','$address1','$address2','$address3','$city','$state','$province','$postal_code','$country_code','$gender','$date_of_birth','$alt_phone','$email','$security_phrase','$comments',0),";
+						$multi_insert_counter++;
+					}
+
+					$good++;
+				} else {
+					if ($bad < 10) {print "<BR></b><font size=1 color=red>record $total BAD- PHONE: $phone_number ROW: |$row[0]|</font><b>\n";}
+					$bad++;
+				}
+				$total++;
+				if ($total%100==0) {
+					print "<script language='JavaScript1.2'>ShowProgress($good, $bad, $total)</script>";
+					usleep(1000);
+					flush();
+				}
+			}
+			if ($multi_insert_counter!=0) {
+				$stmtZ = "INSERT INTO vicidial_list values".substr($multistmt, 0, -1).";";
+				mysql_query($stmtZ, $link);
+				if ($WeBRooTWritablE > 0) 
+					{fwrite($stmt_file, $stmtZ."\r\n");}
+			}
+
+			print "<BR><BR>Done</B> GOOD: $good &nbsp; &nbsp; &nbsp; BAD: $bad &nbsp; &nbsp; &nbsp; TOTAL: $total</font></center>";
+
+		}
+		print "<script language='JavaScript1.2'>document.forms[0].leadfile.disabled=false; document.forms[0].submit_file.disabled=false; document.forms[0].reload_page.disabled=false;</script>";
+
+		} else {
+			print "<script language='JavaScript1.2'>document.forms[0].leadfile.disabled=true; document.forms[0].submit_file.disabled=true; document.forms[0].reload_page.disabled=true;</script><HR>";
+			flush();
+			print "<table border=0 cellpadding=3 cellspacing=0 width=500 align=center>\r\n";
+			print "  <tr bgcolor='#330099'>\r\n";
+			print "    <th align=right><font class='standard' color='white'>VICIDIAL Column</font></th>\r\n";
+			print "    <th><font class='standard' color='white'>File data</font></th>\r\n";
+			print "  </tr>\r\n";
+
+			$rslt=mysql_query("select vendor_lead_code, source_id, list_id, phone_code, phone_number, title, first_name, middle_initial, last_name, address1, address2, address3, city, state, province, postal_code, country_code, gender, date_of_birth, alt_phone, email, security_phrase, comments from vicidial_list limit 1", $link);
+			
+
+			if (!eregi(".csv", $leadfile_name) && !eregi(".xls", $leadfile_name)) {
+				copy($LF_path, "$WeBServeRRooT/vicidial/vicidial_temp_file.txt");
+				$file=fopen("$WeBServeRRooT/vicidial/vicidial_temp_file.txt", "r");
+				$stmt_file=fopen("listloader_stmts.txt", "w");
+
+				$buffer=fgets($file, 4096);
+				$tab_count=substr_count($buffer, "\t");
+				$pipe_count=substr_count($buffer, "|");
+
+				if ($tab_count>$pipe_count) {$delimiter="\t";  $delim_name="tab";} else {$delimiter="|";  $delim_name="pipe";}
+				$field_check=explode($delimiter, $buffer);
+				flush();
+				$file=fopen("$WeBServeRRooT/vicidial/vicidial_temp_file.txt", "r");
+				print "<center><font face='arial, helvetica' size=3 color='#009900'><B>Processing $delim_name-delimited file...\n";
+
+				if (strlen($list_id_override)>0) 
+					{
+					print "<BR><BR>LIST ID OVERRIDE FOR THIS FILE: $list_id_override<BR><BR>";
+					}
+				$buffer=rtrim(fgets($file, 4096));
+				$buffer=stripslashes($buffer);
+				$row=explode($delimiter, eregi_replace("[\'\"]", "", $buffer));
+				
+				for ($i=0; $i<mysql_num_fields($rslt); $i++) {
+
+					print "  <tr bgcolor=#D9E6FE>\r\n";
+					print "    <td align=right><font class=standard>".strtoupper(eregi_replace("_", " ", mysql_field_name($rslt, $i))).": </font></td>\r\n";
+					print "    <td align=center><select name='".mysql_field_name($rslt, $i)."_field'>\r\n";
+					print "     <option value='-1'>(none)</option>\r\n";
+
+					for ($j=0; $j<count($row); $j++) {
+						eregi_replace("\"", "", $row[$j]);
+						print "     <option value='$j'>\"$row[$j]\"</option>\r\n";
+					}
+
+					print "    </select></td>\r\n";
+					print "  </tr>\r\n";
+
+					#print "  <tr bgcolor=#D9E6FE>\r\n";
+					#print "    <td align=center><font class=standard>$row[$i]</font></td>\r\n";
+					#print "    <td align=center><select name=datafield$i>\r\n";
+					#print "     <option value=''>---------------------</option>\r\n";
+					#print "     <option value='entry_date'>Entry date</option>\r\n";
+					#print "     <option value='modify_date'>Modify date</option>\r\n";
+					#print "     <option value='status'>Status</option>\r\n";
+					#print "     <option value='user'>User</option>\r\n";
+					#print "     <option value='vendor_lead_code'>Vendor lead code</option>\r\n";
+					#print "     <option value='source_id'>Source ID</option>\r\n";
+					#print "     <option value='list_id'>List ID</option>\r\n";
+					#print "     <option value='gmt_offset'>Campaign ID</option>\r\n";
+					#print "     <option value='called_since_last_reset'>Called since last reset</option>\r\n";
+					#print "     <option value='phone_code'>Phone code</option>\r\n";
+					#print "     <option value='phone_number'>Phone number</option>\r\n";
+					#print "     <option value='title'>Title</option>\r\n";
+					#print "     <option value='first_name'>First name</option>\r\n";
+					#print "     <option value='middle_initial'>Middle initial</option>\r\n";
+					#print "     <option value='last_name'>Last name</option>\r\n";
+					#print "     <option value='address1'>Address 1</option>\r\n";
+					#print "     <option value='address2'>Address 2</option>\r\n";
+					#print "     <option value='address3'>Address 3</option>\r\n";
+					#print "     <option value='city'>City</option>\r\n";
+					#print "     <option value='state'>State</option>\r\n";
+					#print "     <option value='province'>Province</option>\r\n";
+					#print "     <option value='postal_code'>Postal code</option>\r\n";
+					#print "     <option value='country_code'>Country code</option>\r\n";
+					#print "     <option value='gender'>Gender</option>\r\n";
+					#print "     <option value='date_of_birth'>Date of birth</option>\r\n";
+					#print "     <option value='alt_phone'>Alt. phone</option>\r\n";
+					#print "     <option value='email'>E-mail</option>\r\n";
+					#print "     <option value='security_phrase'>Security phrase</option>\r\n";
+					#print "     <option value='comments'>Comments</option>\r\n";
+					#print "    </td>\r\n";
+					#print "  </tr>\r\n";
+				}
+			} else if (!eregi(".csv", $leadfile_name)) {
+				copy($LF_path, "$WeBServeRRooT/vicidial/vicidial_temp_file.xls");
+				passthru("$WeBServeRRooT/vicidial/listloader_rowdisplay.pl");
+			} else {
+				copy($LF_path, "$WeBServeRRooT/vicidial/vicidial_temp_file.csv");
+				$file=fopen("$WeBServeRRooT/vicidial/vicidial_temp_file.csv", "r");
+				$stmt_file=fopen("listloader_stmts.txt", "w");
+				
+				print "<center><font face='arial, helvetica' size=3 color='#009900'><B>Processing CSV file... \n";
+				
+				if (strlen($list_id_override)>0) 
+					{
+					print "<BR><BR>LIST ID OVERRIDE FOR THIS FILE: $list_id_override<BR><BR>";
+					}
+
+				$total=0; $good=0; $bad=0;
+				$row=fgetcsv($file, 1000, ",");
+				for ($i=0; $i<mysql_num_fields($rslt); $i++) {
+					print "  <tr bgcolor=#D9E6FE>\r\n";
+					print "    <td align=right><font class=standard>".strtoupper(eregi_replace("_", " ", mysql_field_name($rslt, $i))).": </font></td>\r\n";
+					print "    <td align=center><select name='".mysql_field_name($rslt, $i)."_field'>\r\n";
+					print "     <option value='-1'>(none)</option>\r\n";
+
+					for ($j=0; $j<count($row); $j++) {
+						eregi_replace("\"", "", $row[$j]);
+						print "     <option value='$j'>\"$row[$j]\"</option>\r\n";
+					}
+
+					print "    </select></td>\r\n";
+					print "  </tr>\r\n";
+
+					#print "  <tr bgcolor=#D9E6FE>\r\n";
+					#print "    <td align=center><font class=standard>$row[$i]</font></td>\r\n";
+					#print "    <td align=center><select name=datafield$i>\r\n";
+					#print "     <option value=''>---------------------</option>\r\n";
+					#print "     <option value='entry_date'>Entry date</option>\r\n";
+					#print "     <option value='modify_date'>Modify date</option>\r\n";
+					#print "     <option value='status'>Status</option>\r\n";
+					#print "     <option value='user'>User</option>\r\n";
+					#print "     <option value='vendor_lead_code'>Vendor lead code</option>\r\n";
+					#print "     <option value='source_id'>Source ID</option>\r\n";
+					#print "     <option value='list_id'>List ID</option>\r\n";
+					#print "     <option value='gmt_offset'>Campaign ID</option>\r\n";
+					#print "     <option value='called_since_last_reset'>Called since last reset</option>\r\n";
+					#print "     <option value='phone_code'>Phone code</option>\r\n";
+					#print "     <option value='phone_number'>Phone number</option>\r\n";
+					#print "     <option value='title'>Title</option>\r\n";
+					#print "     <option value='first_name'>First name</option>\r\n";
+					#print "     <option value='middle_initial'>Middle initial</option>\r\n";
+					#print "     <option value='last_name'>Last name</option>\r\n";
+					#print "     <option value='address1'>Address 1</option>\r\n";
+					#print "     <option value='address2'>Address 2</option>\r\n";
+					#print "     <option value='address3'>Address 3</option>\r\n";
+					#print "     <option value='city'>City</option>\r\n";
+					#print "     <option value='state'>State</option>\r\n";
+					#print "     <option value='province'>Province</option>\r\n";
+					#print "     <option value='postal_code'>Postal code</option>\r\n";
+					#print "     <option value='country_code'>Country code</option>\r\n";
+					#print "     <option value='gender'>Gender</option>\r\n";
+					#print "     <option value='date_of_birth'>Date of birth</option>\r\n";
+					#print "     <option value='alt_phone'>Alt. phone</option>\r\n";
+					#print "     <option value='email'>E-mail</option>\r\n";
+					#print "     <option value='security_phrase'>Security phrase</option>\r\n";
+					#print "     <option value='comments'>Comments</option>\r\n";
+					#print "    </td>\r\n";
+					#print "  </tr>\r\n";
+				}
+			}
+			print "  <tr bgcolor='#330099'>\r\n";
+			print "  <input type=hidden name=list_id_override value=\"$list_id_override\">\r\n";
+			print "    <th colspan=2><input type=submit name='OK_to_process' value='OK TO PROCESS'>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;<input type=button onClick=\"javascript:document.location='new_listloader_superL.php'\" value=\"START OVER\" name='reload_page'></th>\r\n";
+			print "  </tr>\r\n";
+			print "</table>\r\n";
+	# }
+		print "<script language='JavaScript1.2'>document.forms[0].leadfile.disabled=false; document.forms[0].submit_file.disabled=false; document.forms[0].reload_page.disabled=false;</script>";
+	}
+} else if (filesize($leadfile)>8388608) {
+		print "<center><font face='arial, helvetica' size=3 color='#990000'><B>ERROR: File exceeds the 8MB limit.</B></font></center>";
+}
+?>
+</form>
+</body>
+</html>
+
+
+
+
+
+<?
+
+exit;
+
+
+
+function lookup_gmt($phone_code,$USarea,$state,$LOCAL_GMT_OFF_STD,$Shour,$Smin,$Ssec,$Smon,$Smday,$Syear)
+{
+require("dbconnect.php");
+
+
+$PC_processed=0;
+### UNITED STATES ###
+if ($phone_code =='1')
+	{
+	$stmt="select * from vicidial_phone_codes where country_code='$phone_code' and areacode='$USarea';";
+	$rslt=mysql_query($stmt, $link);
+	$pc_recs = mysql_num_rows($rslt);
+	if ($pc_recs > 0)
+		{
+		$row=mysql_fetch_row($rslt);
+		$gmt_offset =	$row[4];	 $gmt_offset = eregi_replace("\+","",$gmt_offset);
+		$dst =			$row[5];
+		$dst_range =	$row[6];
+		$PC_processed++;
+		}
+	}
+### MEXICO ###
+if ($phone_code =='52')
+	{
+	$stmt="select * from vicidial_phone_codes where country_code='$phone_code' and areacode='$USarea';";
+	$rslt=mysql_query($stmt, $link);
+	$pc_recs = mysql_num_rows($rslt);
+	if ($pc_recs > 0)
+		{
+		$row=mysql_fetch_row($rslt);
+		$gmt_offset =	$row[4];	 $gmt_offset = eregi_replace("\+","",$gmt_offset);
+		$dst =			$row[5];
+		$dst_range =	$row[6];
+		$PC_processed++;
+		}
+	}
+### AUSTRALIA ###
+if ($phone_code =='61')
+	{
+	$stmt="select * from vicidial_phone_codes where country_code='$phone_code' and state='$state';";
+	$rslt=mysql_query($stmt, $link);
+	$pc_recs = mysql_num_rows($rslt);
+	if ($pc_recs > 0)
+		{
+		$row=mysql_fetch_row($rslt);
+		$gmt_offset =	$row[4];	 $gmt_offset = eregi_replace("\+","",$gmt_offset);
+		$dst =			$row[5];
+		$dst_range =	$row[6];
+		$PC_processed++;
+		}
+	}
+### ALL OTHER COUNTRY CODES ###
+if (!$PC_processed)
+	{
+	$PC_processed++;
+	$stmt="select * from vicidial_phone_codes where country_code='$phone_code';";
+	$rslt=mysql_query($stmt, $link);
+	$pc_recs = mysql_num_rows($rslt);
+	if ($pc_recs > 0)
+		{
+		$row=mysql_fetch_row($rslt);
+		$gmt_offset =	$row[4];	 $gmt_offset = eregi_replace("\+","",$gmt_offset);
+		$dst =			$row[5];
+		$dst_range =	$row[6];
+		$PC_processed++;
+		}
+	}
+
+### Find out if DST to raise the gmt offset ###
+$AC_GMT_diff = ($gmt_offset - $LOCAL_GMT_OFF_STD);
+$AC_localtime = mktime(($Shour + $AC_GMT_diff), $Smin, $Ssec, $Smon, $Smday, $Syear);
+	$hour = date("H",$AC_localtime);
+	$min = date("i",$AC_localtime);
+	$sec = date("s",$AC_localtime);
+	$mon = date("m",$AC_localtime);
+	$mday = date("d",$AC_localtime);
+	$wday = date("w",$AC_localtime);
+	$year = date("Y",$AC_localtime);
+$dsec = ( ( ($hour * 3600) + ($min * 60) ) + $sec );
+
+$AC_processed=0;
+if ( (!$AC_processed) and ($dst_range == 'FSA-LSO') )
+	{
+	if ($DBX) {print "     First Sunday April to Last Sunday October\n";}
+	#**********************************************************************
+	# FSA-LSO
+	#     This is returns 1 if Daylight Savings Time is in effect and 0 if 
+	#       Standard time is in effect.
+	#     Based on first Sunday in April and last Sunday in October at 2 am.
+	#     INPUTS:
+	#       mm              INTEGER       Month.
+	#       dd              INTEGER       Day of the month.
+	#       ns              INTEGER       Seconds into the day.
+	#       dow             INTEGER       Day of week (0=Sunday, to 6=Saturday)
+	#     OPTIONAL INPUT:
+	#       timezone        INTEGER       hour difference UTC - local standard time
+	#                                      (DEFAULT is blank)
+	#                                     make calculations based on UTC time, 
+	#                                     which means shift at 10:00 UTC in April
+	#                                     and 9:00 UTC in October
+	#     OUTPUT: 
+	#                       INTEGER       1 = DST, 0 = not DST
+	#**********************************************************************
+		
+		$USA_DST=0;
+		$mm = $mon;
+		$dd = $mday;
+		$ns = $dsec;
+		$dow= $wday;
+
+		if ($mm < 4 || $mm > 10) {
+		$USA_DST=0;
+		} elseif ($mm >= 5 and $mm <= 9) {
+		$USA_DST=1;
+		} elseif ($mm == 4) {
+		if ($dd > 7) {
+			$USA_DST=1;
+		} elseif ($dd >= ($dow+1)) {
+			if ($timezone) {
+			if ($dow == 0 and $ns < (7200+$timezone*3600)) {
+				$USA_DST=0;
+			} else {
+				$USA_DST=1;
+			}
+			} else {
+			if ($dow == 0 and $ns < 7200) {
+				$USA_DST=0;
+			} else {
+				$USA_DST=1;
+			}
+			}
+		} else {
+			$USA_DST=0;
+		}
+		} elseif ($mm == 10) {
+		if ($dd < 25) {
+			$USA_DST=1;
+		} elseif ($dd < ($dow+25)) {
+			$USA_DST=1;
+		} elseif ($dow == 0) {
+			if ($timezone) { # UTC calculations
+			if ($ns < (7200+($timezone-1)*3600)) {
+				$USA_DST=1;
+			} else {
+				$USA_DST=0;
+			}
+			} else { # local time calculations
+			if ($ns < 7200) {
+				$USA_DST=1;
+			} else {
+				$USA_DST=0;
+			}
+			}
+		} else {
+			$USA_DST=0;
+		}
+		} # end of month checks
+
+	if ($DBX) {print "     DST: $USA_DST\n";}
+	if ($USA_DST) {$gmt_offset++;}
+	$AC_processed++;
+	}
+
+if ( (!$AC_processed) and ($dst_range == 'LSM-LSO') )
+	{
+	if ($DBX) {print "     Last Sunday March to Last Sunday October\n";}
+	#**********************************************************************
+	#     This is s 1 if Daylight Savings Time is in effect and 0 if 
+	#       Standard time is in effect.
+	#     Based on last Sunday in March and last Sunday in October at 1 am.
+	#**********************************************************************
+		
+		$GBR_DST=0;
+		$mm = $mon;
+		$dd = $mday;
+		$ns = $dsec;
+		$dow= $wday;
+
+		if ($mm < 3 || $mm > 10) {
+		$GBR_DST=0;
+		} elseif ($mm >= 4 and $mm <= 9) {
+		$GBR_DST=1;
+		} elseif ($mm == 3) {
+		if ($dd < 25) {
+			$GBR_DST=0;
+		} elseif ($dd < ($dow+25)) {
+			$GBR_DST=0;
+		} elseif ($dow == 0) {
+			if ($timezone) { # UTC calculations
+			if ($ns < (3600+($timezone-1)*3600)) {
+				$GBR_DST=0;
+			} else {
+				$GBR_DST=1;
+			}
+			} else { # local time calculations
+			if ($ns < 3600) {
+				$GBR_DST=0;
+			} else {
+				$GBR_DST=1;
+			}
+			}
+		} else {
+			$GBR_DST=1;
+		}
+		} elseif ($mm == 10) {
+		if ($dd < 25) {
+			$GBR_DST=1;
+		} elseif ($dd < ($dow+25)) {
+			$GBR_DST=1;
+		} elseif ($dow == 0) {
+			if ($timezone) { # UTC calculations
+			if ($ns < (3600+($timezone-1)*3600)) {
+				$GBR_DST=1;
+			} else {
+				$GBR_DST=0;
+			}
+			} else { # local time calculations
+			if ($ns < 3600) {
+				$GBR_DST=1;
+			} else {
+				$GBR_DST=0;
+			}
+			}
+		} else {
+			$GBR_DST=0;
+		}
+		} # end of month checks
+		if ($DBX) {print "     DST: $GBR_DST\n";}
+	if ($GBR_DST) {$gmt_offset++;}
+	$AC_processed++;
+	}
+if ( (!$AC_processed) and ($dst_range == 'LSO-LSM') )
+	{
+	if ($DBX) {print "     Last Sunday October to Last Sunday March\n";}
+	#**********************************************************************
+	#     This is s 1 if Daylight Savings Time is in effect and 0 if 
+	#       Standard time is in effect.
+	#     Based on last Sunday in October and last Sunday in March at 1 am.
+	#**********************************************************************
+		
+		$AUS_DST=0;
+		$mm = $mon;
+		$dd = $mday;
+		$ns = $dsec;
+		$dow= $wday;
+
+		if ($mm < 3 || $mm > 10) {
+		$AUS_DST=1;
+		} elseif ($mm >= 4 and $mm <= 9) {
+		$AUS_DST=0;
+		} elseif ($mm == 3) {
+		if ($dd < 25) {
+			$AUS_DST=1;
+		} elseif ($dd < ($dow+25)) {
+			$AUS_DST=1;
+		} elseif ($dow == 0) {
+			if ($timezone) { # UTC calculations
+			if ($ns < (3600+($timezone-1)*3600)) {
+				$AUS_DST=1;
+			} else {
+				$AUS_DST=0;
+			}
+			} else { # local time calculations
+			if ($ns < 3600) {
+				$AUS_DST=1;
+			} else {
+				$AUS_DST=0;
+			}
+			}
+		} else {
+			$AUS_DST=0;
+		}
+		} elseif ($mm == 10) {
+		if ($dd < 25) {
+			$AUS_DST=0;
+		} elseif ($dd < ($dow+25)) {
+			$AUS_DST=0;
+		} elseif ($dow == 0) {
+			if ($timezone) { # UTC calculations
+			if ($ns < (3600+($timezone-1)*3600)) {
+				$AUS_DST=0;
+			} else {
+				$AUS_DST=1;
+			}
+			} else { # local time calculations
+			if ($ns < 3600) {
+				$AUS_DST=0;
+			} else {
+				$AUS_DST=1;
+			}
+			}
+		} else {
+			$AUS_DST=1;
+		}
+		} # end of month checks						
+	if ($DBX) {print "     DST: $AUS_DST\n";}
+	if ($AUS_DST) {$gmt_offset++;}
+	$AC_processed++;
+	}
+
+if ( (!$AC_processed) and ($dst_range == 'FSO-LSM') )
+	{
+	if ($DBX) {print "     First Sunday October to Last Sunday March\n";}
+	#**********************************************************************
+	#   TASMANIA ONLY
+	#     This is s 1 if Daylight Savings Time is in effect and 0 if 
+	#       Standard time is in effect.
+	#     Based on first Sunday in October and last Sunday in March at 1 am.
+	#**********************************************************************
+		
+		$AUST_DST=0;
+		$mm = $mon;
+		$dd = $mday;
+		$ns = $dsec;
+		$dow= $wday;
+
+		if ($mm < 3 || $mm > 10) {
+		$AUST_DST=1;
+		} elseif ($mm >= 4 and $mm <= 9) {
+		$AUST_DST=0;
+		} elseif ($mm == 3) {
+		if ($dd < 25) {
+			$AUST_DST=1;
+		} elseif ($dd < ($dow+25)) {
+			$AUST_DST=1;
+		} elseif ($dow == 0) {
+			if ($timezone) { # UTC calculations
+			if ($ns < (3600+($timezone-1)*3600)) {
+				$AUST_DST=1;
+			} else {
+				$AUST_DST=0;
+			}
+			} else { # local time calculations
+			if ($ns < 3600) {
+				$AUST_DST=1;
+			} else {
+				$AUST_DST=0;
+			}
+			}
+		} else {
+			$AUST_DST=0;
+		}
+		} elseif ($mm == 10) {
+		if ($dd > 7) {
+			$AUST_DST=1;
+		} elseif ($dd >= ($dow+1)) {
+			if ($timezone) {
+			if ($dow == 0 and $ns < (7200+$timezone*3600)) {
+				$AUST_DST=0;
+			} else {
+				$AUST_DST=1;
+			}
+			} else {
+			if ($dow == 0 and $ns < 3600) {
+				$AUST_DST=0;
+			} else {
+				$AUST_DST=1;
+			}
+			}
+		} else {
+			$AUST_DST=0;
+		}
+		} # end of month checks						
+	if ($DBX) {print "     DST: $AUST_DST\n";}
+	if ($AUST_DST) {$gmt_offset++;}
+	$AC_processed++;
+	}
+if ( (!$AC_processed) and ($dst_range == 'FSO-TSM') )
+	{
+	if ($DBX) {print "     First Sunday October to Third Sunday March\n";}
+	#**********************************************************************
+	#     This is s 1 if Daylight Savings Time is in effect and 0 if 
+	#       Standard time is in effect.
+	#     Based on first Sunday in October and third Sunday in March at 1 am.
+	#**********************************************************************
+		
+		$NZL_DST=0;
+		$mm = $mon;
+		$dd = $mday;
+		$ns = $dsec;
+		$dow= $wday;
+
+		if ($mm < 3 || $mm > 10) {
+		$NZL_DST=1;
+		} elseif ($mm >= 4 and $mm <= 9) {
+		$NZL_DST=0;
+		} elseif ($mm == 3) {
+		if ($dd < 14) {
+			$NZL_DST=1;
+		} elseif ($dd < ($dow+14)) {
+			$NZL_DST=1;
+		} elseif ($dow == 0) {
+			if ($timezone) { # UTC calculations
+			if ($ns < (3600+($timezone-1)*3600)) {
+				$NZL_DST=1;
+			} else {
+				$NZL_DST=0;
+			}
+			} else { # local time calculations
+			if ($ns < 3600) {
+				$NZL_DST=1;
+			} else {
+				$NZL_DST=0;
+			}
+			}
+		} else {
+			$NZL_DST=0;
+		}
+		} elseif ($mm == 10) {
+		if ($dd > 7) {
+			$NZL_DST=1;
+		} elseif ($dd >= ($dow+1)) {
+			if ($timezone) {
+			if ($dow == 0 and $ns < (7200+$timezone*3600)) {
+				$NZL_DST=0;
+			} else {
+				$NZL_DST=1;
+			}
+			} else {
+			if ($dow == 0 and $ns < 3600) {
+				$NZL_DST=0;
+			} else {
+				$NZL_DST=1;
+			}
+			}
+		} else {
+			$NZL_DST=0;
+		}
+		} # end of month checks						
+	if ($DBX) {print "     DST: $NZL_DST\n";}
+	if ($NZL_DST) {$gmt_offset++;}
+	$AC_processed++;
+	}
+if (!$AC_processed)
+	{
+	if ($DBX) {print "     No DST Method Found\n";}
+	if ($DBX) {print "     DST: 0\n";}
+	$AC_processed++;
+	}
+
+return $gmt_offset;
+}
\ No newline at end of file
diff --git a/www/vicidial/record_conf_1_hour.php b/www/vicidial/record_conf_1_hour.php
new file mode 100644
index 00000000..59ae1f09
--- /dev/null
+++ b/www/vicidial/record_conf_1_hour.php
@@ -0,0 +1,156 @@
+<?
+### record_conf_1_hour.php
+### 
+### Copyright (C) 2006  Matt Florell <vicidial@gmail.com>    LICENSE: GPLv2
+###
+# grab: $server_ip $station $session_id
+#
+# CHANGES
+#
+# 60620-1011 - Added variable filtering to eliminate SQL injection attack threat
+#            - Added required user/pass to gain access to this page
+#
+
+require("dbconnect.php");
+
+$PHP_AUTH_USER=$_SERVER['PHP_AUTH_USER'];
+$PHP_AUTH_PW=$_SERVER['PHP_AUTH_PW'];
+$PHP_SELF=$_SERVER['PHP_SELF'];
+if (isset($_GET["server_ip"]))				{$server_ip=$_GET["server_ip"];}
+	elseif (isset($_POST["server_ip"]))		{$server_ip=$_POST["server_ip"];}
+if (isset($_GET["station"]))				{$station=$_GET["station"];}
+	elseif (isset($_POST["station"]))		{$station=$_POST["station"];}
+if (isset($_GET["session_id"]))				{$session_id=$_GET["session_id"];}
+	elseif (isset($_POST["session_id"]))		{$session_id=$_POST["session_id"];}
+if (isset($_GET["NEW_RECORDING"]))				{$NEW_RECORDING=$_GET["NEW_RECORDING"];}
+	elseif (isset($_POST["NEW_RECORDING"]))		{$NEW_RECORDING=$_POST["NEW_RECORDING"];}
+if (isset($_GET["submit"]))				{$submit=$_GET["submit"];}
+	elseif (isset($_POST["submit"]))		{$submit=$_POST["submit"];}
+if (isset($_GET["SUBMIT"]))				{$SUBMIT=$_GET["SUBMIT"];}
+	elseif (isset($_POST["SUBMIT"]))		{$SUBMIT=$_POST["SUBMIT"];}
+
+$PHP_AUTH_USER = ereg_replace("[^0-9a-zA-Z]","",$PHP_AUTH_USER);
+$PHP_AUTH_PW = ereg_replace("[^0-9a-zA-Z]","",$PHP_AUTH_PW);
+
+	$stmt="SELECT count(*) from vicidial_users where user='$PHP_AUTH_USER' and pass='$PHP_AUTH_PW' and user_level > 6;";
+	if ($DB) {echo "|$stmt|\n";}
+	$rslt=mysql_query($stmt, $link);
+	$row=mysql_fetch_row($rslt);
+	$auth=$row[0];
+
+  if( (strlen($PHP_AUTH_USER)<2) or (strlen($PHP_AUTH_PW)<2) or (!$auth))
+	{
+    Header("WWW-Authenticate: Basic realm=\"VICI-PROJECTS\"");
+    Header("HTTP/1.0 401 Unauthorized");
+    echo "Invalid Username/Password: |$PHP_AUTH_USER|$PHP_AUTH_PW|\n";
+    exit;
+	}
+
+$STARTtime = date("U");
+$TODAY = date("Y-m-d");
+$MYSQL_datetime = date("Y-m-d H:i:s");
+$FILE_datetime = date("Ymd-His_");
+$secX = $STARTtime;
+
+	$stmt="SELECT count(*) from vicidial_users where user='$PHP_AUTH_USER' and pass='$PHP_AUTH_PW' and user_level > 7;";
+	$rslt=mysql_query($stmt, $link);
+	$row=mysql_fetch_row($rslt);
+	$auth=$row[0];
+
+$fp = fopen ("./project_auth_entries.txt", "a");
+$date = date("r");
+$ip = getenv("REMOTE_ADDR");
+$browser = getenv("HTTP_USER_AGENT");
+
+  if( (strlen($PHP_AUTH_USER)<2) or (strlen($PHP_AUTH_PW)<2) or (!$auth))
+	{
+    Header("WWW-Authenticate: Basic realm=\"VICI-PROJECTS\"");
+    Header("HTTP/1.0 401 Unauthorized");
+    echo "Invalid Username/Password: |$PHP_AUTH_USER|$PHP_AUTH_PW|\n";
+    exit;
+	}
+  else
+	{
+
+	if($auth>0)
+		{
+		$office_no=strtoupper($PHP_AUTH_USER);
+		$password=strtoupper($PHP_AUTH_PW);
+			$stmt="SELECT full_name from vicidial_users where user='$PHP_AUTH_USER' and pass='$PHP_AUTH_PW'";
+			$rslt=mysql_query($stmt, $link);
+			$row=mysql_fetch_row($rslt);
+			$LOGfullname=$row[0];
+		fwrite ($fp, "VICIDIAL|GOOD|$date|$PHP_AUTH_USER|$PHP_AUTH_PW|$ip|$browser|$LOGfullname|\n");
+		fclose($fp);
+		}
+	else
+		{
+		fwrite ($fp, "VICIDIAL|FAIL|$date|$PHP_AUTH_USER|$PHP_AUTH_PW|$ip|$browser|\n");
+		fclose($fp);
+		}
+
+	$stmt="SELECT full_name from vicidial_users where user='$user';";
+	$rslt=mysql_query($stmt, $link);
+	$row=mysql_fetch_row($rslt);
+	$full_name = $row[0];
+
+	}
+
+
+
+
+?>
+<html>
+<head>
+<title>VICIDIAL RECORD CONFERENCE: 1 hour</title>
+<?
+echo "<META HTTP-EQUIV=\"Content-Type\" CONTENT=\"text/html; charset=utf-8\">\n";
+?>
+</head>
+<BODY BGCOLOR=white marginheight=0 marginwidth=0 leftmargin=0 topmargin=0>
+<CENTER>
+
+<? 
+if ($NEW_RECORDING)
+{
+	if ( (strlen($server_ip) > 8) && (strlen($session_id) > 3) && (strlen($station) > 3) )
+	{
+	$local_DEF = 'Local/';
+	$local_AMP = '@';
+	$conf_silent_prefix = '7';
+	$ext_context = 'demo';
+
+	$stmt="INSERT INTO vicidial_manager values('','','$MYSQL_datetime','NEW','N','" . mysql_real_escape_string($server_ip) . "','','Originate','RB$FILE_datetime" . mysql_real_escape_string($station) . "','Channel: $local_DEF$conf_silent_prefix" . mysql_real_escape_string($session_id) . "$local_AMP$ext_context','Context: $ext_context','Exten: 8309','Priority: 1','Callerid: $FILE_datetime" . mysql_real_escape_string($station) . "','','','','','')";
+	echo "|$stmt|\n<BR><BR>\n";
+	$rslt=mysql_query($stmt, $link);
+
+	$stmt="INSERT INTO recording_log (channel,server_ip,extension,start_time,start_epoch,filename) values('" . mysql_real_escape_string($session_id) . "','" . mysql_real_escape_string($server_ip) . "','" . mysql_real_escape_string($station) . "','$MYSQL_datetime','$secX','$FILE_datetime" . mysql_real_escape_string($station) . "')";
+	echo "|$stmt|\n<BR><BR>\n";
+	$rslt=mysql_query($stmt, $link);
+
+	echo "Recording started\n<BR><BR>\n";
+	echo "<a href=\"$PHP_SELF\">Back to main recording screen</a>\n<BR><BR>\n";
+	}
+	else
+	{
+	echo "ERROR!!!!    Not all info entered properly\n<BR><BR>\n";
+	echo "|$server_ip| |$session_id| |$station|\n<BR><BR>\n";
+	echo "<a href=\"$PHP_SELF\">Back to main recording screen</a>\n<BR><BR>\n";
+	}
+}
+else
+{
+echo "<br>Start recording a conference for 1 hour: <form action=$PHP_SELF method=POST>\n";
+echo "<input type=hidden name=NEW_RECORDING value=1>\n";
+echo "server_ip: <input type=text name=server_ip size=15 maxlength=15> | \n";
+echo "session_id: <input type=text name=session_id size=7 maxlength=7> | \n";
+echo "station: <input type=text name=station size=5 maxlength=5> | \n";
+echo "<input type=submit name=submit value=submit>\n";
+echo "<BR><BR><BR>\n";
+
+
+
+}
+?>
+
+</BODY></HTML>
\ No newline at end of file
diff --git a/www/vicidial/remote_dispo.php b/www/vicidial/remote_dispo.php
new file mode 100644
index 00000000..da249fba
--- /dev/null
+++ b/www/vicidial/remote_dispo.php
@@ -0,0 +1,327 @@
+<?
+### remote_dispo.php
+### 
+### Copyright (C) 2006  Matt Florell <vicidial@gmail.com>    LICENSE: GPLv2
+###
+# this is the remote agent disposition screen for calls sent to remote agents. This allows the remote agent to modify customer information and disposition the call
+
+# CHANGES
+#
+# 60619-1626 - Added variable filtering to eliminate SQL injection attack threat
+#
+
+
+require("dbconnect.php");
+
+$PHP_AUTH_USER=$_SERVER['PHP_AUTH_USER'];
+$PHP_AUTH_PW=$_SERVER['PHP_AUTH_PW'];
+$PHP_SELF=$_SERVER['PHP_SELF'];
+if (isset($_GET["address1"]))				{$address1=$_GET["address1"];}
+	elseif (isset($_POST["address1"]))		{$address1=$_POST["address1"];}
+if (isset($_GET["address2"]))				{$address2=$_GET["address2"];}
+	elseif (isset($_POST["address2"]))		{$address2=$_POST["address2"];}
+if (isset($_GET["address3"]))				{$address3=$_GET["address3"];}
+	elseif (isset($_POST["address3"]))		{$address3=$_POST["address3"];}
+if (isset($_GET["alt_phone"]))				{$alt_phone=$_GET["alt_phone"];}
+	elseif (isset($_POST["alt_phone"]))		{$alt_phone=$_POST["alt_phone"];}
+if (isset($_GET["call_began"]))				{$call_began=$_GET["call_began"];}
+	elseif (isset($_POST["call_began"]))		{$call_began=$_POST["call_began"];}
+if (isset($_GET["campaign_id"]))				{$campaign_id=$_GET["campaign_id"];}
+	elseif (isset($_POST["campaign_id"]))		{$campaign_id=$_POST["campaign_id"];}
+if (isset($_GET["channel"]))				{$channel=$_GET["channel"];}
+	elseif (isset($_POST["channel"]))		{$channel=$_POST["channel"];}
+if (isset($_GET["channel_group"]))				{$channel_group=$_GET["channel_group"];}
+	elseif (isset($_POST["channel_group"]))		{$channel_group=$_POST["channel_group"];}
+if (isset($_GET["city"]))				{$city=$_GET["city"];}
+	elseif (isset($_POST["city"]))		{$city=$_POST["city"];}
+if (isset($_GET["comments"]))				{$comments=$_GET["comments"];}
+	elseif (isset($_POST["comments"]))		{$comments=$_POST["comments"];}
+if (isset($_GET["country_code"]))				{$country_code=$_GET["country_code"];}
+	elseif (isset($_POST["country_code"]))		{$country_code=$_POST["country_code"];}
+if (isset($_GET["customer_zap_channel"]))				{$customer_zap_channel=$_GET["customer_zap_channel"];}
+	elseif (isset($_POST["customer_zap_channel"]))		{$customer_zap_channel=$_POST["customer_zap_channel"];}
+if (isset($_GET["DB"]))				{$DB=$_GET["DB"];}
+	elseif (isset($_POST["DB"]))		{$DB=$_POST["DB"];}
+if (isset($_GET["dispo"]))				{$dispo=$_GET["dispo"];}
+	elseif (isset($_POST["dispo"]))		{$dispo=$_POST["dispo"];}
+if (isset($_GET["email"]))				{$email=$_GET["email"];}
+	elseif (isset($_POST["email"]))		{$email=$_POST["email"];}
+if (isset($_GET["end_call"]))				{$end_call=$_GET["end_call"];}
+	elseif (isset($_POST["end_call"]))		{$end_call=$_POST["end_call"];}
+if (isset($_GET["extension"]))				{$extension=$_GET["extension"];}
+	elseif (isset($_POST["extension"]))		{$extension=$_POST["extension"];}
+if (isset($_GET["first_name"]))				{$first_name=$_GET["first_name"];}
+	elseif (isset($_POST["first_name"]))		{$first_name=$_POST["first_name"];}
+if (isset($_GET["group"]))				{$group=$_GET["group"];}
+	elseif (isset($_POST["group"]))		{$group=$_POST["group"];}
+if (isset($_GET["last_name"]))				{$last_name=$_GET["last_name"];}
+	elseif (isset($_POST["last_name"]))		{$last_name=$_POST["last_name"];}
+if (isset($_GET["lead_id"]))				{$lead_id=$_GET["lead_id"];}
+	elseif (isset($_POST["lead_id"]))		{$lead_id=$_POST["lead_id"];}
+if (isset($_GET["list_id"]))				{$list_id=$_GET["list_id"];}
+	elseif (isset($_POST["list_id"]))		{$list_id=$_POST["list_id"];}
+if (isset($_GET["parked_time"]))				{$parked_time=$_GET["parked_time"];}
+	elseif (isset($_POST["parked_time"]))		{$parked_time=$_POST["parked_time"];}
+if (isset($_GET["pass"]))				{$pass=$_GET["pass"];}
+	elseif (isset($_POST["pass"]))		{$pass=$_POST["pass"];}
+if (isset($_GET["phone_code"]))				{$phone_code=$_GET["phone_code"];}
+	elseif (isset($_POST["phone_code"]))		{$phone_code=$_POST["phone_code"];}
+if (isset($_GET["phone_number"]))				{$phone_number=$_GET["phone_number"];}
+	elseif (isset($_POST["phone_number"]))		{$phone_number=$_POST["phone_number"];}
+if (isset($_GET["phone"]))				{$phone=$_GET["phone"];}
+	elseif (isset($_POST["phone"]))		{$phone=$_POST["phone"];}
+if (isset($_GET["postal_code"]))				{$postal_code=$_GET["postal_code"];}
+	elseif (isset($_POST["postal_code"]))		{$postal_code=$_POST["postal_code"];}
+if (isset($_GET["province"]))				{$province=$_GET["province"];}
+	elseif (isset($_POST["province"]))		{$province=$_POST["province"];}
+if (isset($_GET["security"]))				{$security=$_GET["security"];}
+	elseif (isset($_POST["security"]))		{$security=$_POST["security"];}
+if (isset($_GET["server_ip"]))				{$server_ip=$_GET["server_ip"];}
+	elseif (isset($_POST["server_ip"]))		{$server_ip=$_POST["server_ip"];}
+if (isset($_GET["server_ip"]))				{$server_ip=$_GET["server_ip"];}
+	elseif (isset($_POST["server_ip"]))		{$server_ip=$_POST["server_ip"];}
+if (isset($_GET["session_id"]))				{$session_id=$_GET["session_id"];}
+	elseif (isset($_POST["session_id"]))		{$session_id=$_POST["session_id"];}
+if (isset($_GET["state"]))				{$state=$_GET["state"];}
+	elseif (isset($_POST["state"]))		{$state=$_POST["state"];}
+if (isset($_GET["status"]))				{$status=$_GET["status"];}
+	elseif (isset($_POST["status"]))		{$status=$_POST["status"];}
+if (isset($_GET["tsr"]))				{$tsr=$_GET["tsr"];}
+	elseif (isset($_POST["tsr"]))		{$tsr=$_POST["tsr"];}
+if (isset($_GET["user"]))				{$user=$_GET["user"];}
+	elseif (isset($_POST["user"]))		{$user=$_POST["user"];}
+if (isset($_GET["vendor_id"]))				{$vendor_id=$_GET["vendor_id"];}
+	elseif (isset($_POST["vendor_id"]))		{$vendor_id=$_POST["vendor_id"];}
+if (isset($_GET["submit"]))				{$submit=$_GET["submit"];}
+	elseif (isset($_POST["submit"]))		{$submit=$_POST["submit"];}
+if (isset($_GET["SUBMIT"]))				{$SUBMIT=$_GET["SUBMIT"];}
+	elseif (isset($_POST["SUBMIT"]))		{$SUBMIT=$_POST["SUBMIT"];}
+
+$STARTtime = date("U");
+$TODAY = date("Y-m-d");
+$NOW_TIME = date("Y-m-d H:i:s");
+$FILE_datetime = $STARTtime;
+
+$ext_context = 'demo';
+if (!isset($begin_date)) {$begin_date = $TODAY;}
+if (!isset($end_date)) {$end_date = $TODAY;}
+
+
+$PHP_AUTH_USER = ereg_replace("[^0-9a-zA-Z]","",$PHP_AUTH_USER);
+$PHP_AUTH_PW = ereg_replace("[^0-9a-zA-Z]","",$PHP_AUTH_PW);
+
+
+
+	$stmt="SELECT count(*) from vicidial_users where user='$PHP_AUTH_USER' and pass='$PHP_AUTH_PW' and user_level > 2;";
+		if ($DB) {echo "$stmt\n";}
+	$rslt=mysql_query($stmt, $link);
+	$row=mysql_fetch_row($rslt);
+	$auth=$row[0];
+
+$fp = fopen ("./project_auth_entries.txt", "a");
+$date = date("r");
+$ip = getenv("REMOTE_ADDR");
+$browser = getenv("HTTP_USER_AGENT");
+
+  if( (strlen($PHP_AUTH_USER)<2) or (strlen($PHP_AUTH_PW)<2) or (!$auth))
+	{
+    Header("WWW-Authenticate: Basic realm=\"VICIDIAL-CLOSER\"");
+    Header("HTTP/1.0 401 Unauthorized");
+    echo "Invalid Username/Password: |$PHP_AUTH_USER|$PHP_AUTH_PW|\n";
+    exit;
+	}
+  else
+	{
+
+	if($auth>0)
+		{
+		$office_no=strtoupper($PHP_AUTH_USER);
+		$password=strtoupper($PHP_AUTH_PW);
+			$stmt="SELECT full_name from vicidial_users where user='$PHP_AUTH_USER' and pass='$PHP_AUTH_PW'";
+			if ($DB) {echo "$stmt\n";}
+			$rslt=mysql_query($stmt, $link);
+			$row=mysql_fetch_row($rslt);
+			$LOGfullname=$row[0];
+			$fullname = $row[0];
+		fwrite ($fp, "VD_CLOSER|GOOD|$date|$PHP_AUTH_USER|$PHP_AUTH_PW|$ip|$browser|$LOGfullname|\n");
+		fclose($fp);
+
+		}
+	else
+		{
+		fwrite ($fp, "VD_CLOSER|FAIL|$date|$PHP_AUTH_USER|$PHP_AUTH_PW|$ip|$browser|\n");
+		fclose($fp);
+		}
+	}
+
+?>
+<html>
+<head>
+<title>VICIDIAL REMOTE: Call Disposition</title>
+<?
+echo "<META HTTP-EQUIV=\"Content-Type\" CONTENT=\"text/html; charset=utf-8\">\n";
+?>
+</head>
+<BODY BGCOLOR=white marginheight=0 marginwidth=0 leftmargin=0 topmargin=0>
+<CENTER><FONT FACE="Courier" COLOR=BLACK SIZE=3>
+
+<? 
+
+echo "<!-- $call_began $lead_id -->";
+
+if ($end_call > 0)
+{
+
+$call_length = ($STARTtime - $call_began);
+
+	### insert a NEW record to the vicidial_closer_log table 
+	$stmt="UPDATE vicidial_closer_log set end_epoch='$STARTtime', length_in_sec='" . mysql_real_escape_string($call_length) . "', status='" . mysql_real_escape_string($status) . "', user='$PHP_AUTH_USER' where lead_id='" . mysql_real_escape_string($lead_id) . "' order by start_epoch desc limit 1;";
+	if ($DB) {echo "|$stmt|\n";}
+	$rslt=mysql_query($stmt, $link);
+
+	### update the lead record in the vicidial_list table 
+	$stmt="UPDATE vicidial_list set status='" . mysql_real_escape_string($status) . "',first_name='" . mysql_real_escape_string($first_name) . "',last_name='" . mysql_real_escape_string($last_name) . "',address1='" . mysql_real_escape_string($address1) . "',address2='" . mysql_real_escape_string($address2) . "',address3='" . mysql_real_escape_string($address3) . "',city='" . mysql_real_escape_string($city) . "',state='" . mysql_real_escape_string($state) . "',province='" . mysql_real_escape_string($province) . "',postal_code='" . mysql_real_escape_string($postal_code) . "',country_code='" . mysql_real_escape_string($country_code) . "',alt_phone='" . mysql_real_escape_string($alt_phone) . "',email='" . mysql_real_escape_string($email) . "',security_phrase='" . mysql_real_escape_string($security) . "',comments='" . mysql_real_escape_string($comments) . "',user='$PHP_AUTH_USER' where lead_id='" . mysql_real_escape_string($lead_id) . "'";
+	if ($DB) {echo "|$stmt|\n";}
+	$rslt=mysql_query($stmt, $link);
+
+	echo "Call has been dispositioned &nbsp; &nbsp; &nbsp; $NOW_TIME\n<BR><BR>\n";
+
+	echo "<form><input type=button value=\"Close This Window\" onClick=\"javascript:window.close();\"></form>\n";
+
+}
+else
+{
+	$stmt="SELECT count(*) from vicidial_list where lead_id='" . mysql_real_escape_string($lead_id) . "'";
+	$rslt=mysql_query($stmt, $link);
+	if ($DB) {echo "$stmt\n";}
+	$row=mysql_fetch_row($rslt);
+	$lead_count = $row[0];
+
+	if ($lead_count > 0)
+	{
+
+		$stmt="SELECT * from vicidial_list where lead_id='" . mysql_real_escape_string($lead_id) . "'";
+		$rslt=mysql_query($stmt, $link);
+		if ($DB) {echo "$stmt\n";}
+		$row=mysql_fetch_row($rslt);
+		   $lead_id			= "$row[0]";
+		   $tsr				= "$row[4]";
+		   $vendor_id		= "$row[5]";
+		   $list_id			= "$row[7]";
+		   $campaign_id		= "$row[8]";
+		   $phone_code		= "$row[10]";
+		   $phone_number	= "$row[11]";
+		   $title			= "$row[12]";
+		   $first_name		= "$row[13]";	#
+		   $middle_initial	= "$row[14]";
+		   $last_name		= "$row[15]";	#
+		   $address1		= "$row[16]";	#
+		   $address2		= "$row[17]";	#
+		   $address3		= "$row[18]";	#
+		   $city			= "$row[19]";	#
+		   $state			= "$row[20]";	#
+		   $province		= "$row[21]";	#
+		   $postal_code		= "$row[22]";	#
+		   $country_code	= "$row[23]";	#
+		   $gender			= "$row[24]";
+		   $date_of_birth	= "$row[25]";
+		   $alt_phone		= "$row[26]";	#
+		   $email			= "$row[27]";	#
+		   $security		= "$row[28]";	#
+		   $comments		= "$row[29]";	#
+
+		echo "<br>Call information: $first_name $last_name - $phone_number<br><br><form action=$PHP_SELF method=POST>\n";
+		echo "<input type=hidden name=end_call value=1>\n";
+		echo "<input type=hidden name=DB value=\"$DB\">\n";
+		echo "<input type=hidden name=lead_id value=\"$lead_id\">\n";
+		echo "<input type=hidden name=list_id value=\"$list_id\">\n";
+		echo "<input type=hidden name=campaign_id value=\"$campaign_id\">\n";
+		echo "<input type=hidden name=phone_code value=\"$phone_code\">\n";
+		echo "<input type=hidden name=phone_number value=\"$phone_number\">\n";
+		echo "<input type=hidden name=server_ip value=\"$server_ip\">\n";
+		echo "<input type=hidden name=extension value=\"$extension\">\n";
+		echo "<input type=hidden name=channel value=\"$channel\">\n";
+		echo "<input type=hidden name=call_began value=\"$call_began\">\n";
+		echo "<input type=hidden name=parked_time value=\"$parked_time\">\n";
+		echo "<table cellpadding=1 cellspacing=0>\n";
+		echo "<tr><td colspan=2>Vendor ID: $vendor_id &nbsp; &nbsp; Campaign ID: $campaign_id</td></tr>\n";
+		echo "<tr><td colspan=2>Fronter: $tsr &nbsp; &nbsp; List ID: $list_id</td></tr>\n";
+		echo "<tr><td align=right>First Name: </td><td align=left><input type=text name=first_name size=15 maxlength=30 value=\"$first_name\"> &nbsp; \n";
+		echo " Last Name: <input type=text name=last_name size=15 maxlength=30 value=\"$last_name\"> </td></tr>\n";
+		echo "<tr><td align=right>Address 1 : </td><td align=left><input type=text name=address1 size=30 maxlength=30 value=\"$address1\"></td></tr>\n";
+		echo "<tr><td align=right>Address 2 : </td><td align=left><input type=text name=address2 size=30 maxlength=30 value=\"$address2\"></td></tr>\n";
+		echo "<tr><td align=right>Address 3 : </td><td align=left><input type=text name=address3 size=30 maxlength=30 value=\"$address3\"></td></tr>\n";
+		echo "<tr><td align=right>City : </td><td align=left><input type=text name=city size=30 maxlength=30 value=\"$city\"></td></tr>\n";
+		echo "<tr><td align=right>State: </td><td align=left><input type=text name=state size=2 maxlength=2 value=\"$state\"> &nbsp; \n";
+		echo " Postal Code: <input type=text name=postal_code size=10 maxlength=10 value=\"$postal_code\"> </td></tr>\n";
+
+		echo "<tr><td align=right>Province : </td><td align=left><input type=text name=province size=30 maxlength=30 value=\"$province\"></td></tr>\n";
+		echo "<tr><td align=right>Country : </td><td align=left><input type=text name=country_code size=3 maxlength=3 value=\"$country_code\"></td></tr>\n";
+		echo "<tr><td align=right>Alt Phone : </td><td align=left><input type=text name=alt_phone size=10 maxlength=10 value=\"$alt_phone\"></td></tr>\n";
+		echo "<tr><td align=right>Email : </td><td align=left><input type=text name=email size=30 maxlength=50 value=\"$email\"></td></tr>\n";
+		echo "<tr><td align=right>Security : </td><td align=left><input type=text name=security size=30 maxlength=100 value=\"$security\"></td></tr>\n";
+		echo "<tr><td align=right>Comments : </td><td align=left><input type=text name=comments size=30 maxlength=255 value=\"$comments\"></td></tr>\n";
+			echo "<tr bgcolor=#B6D3FC><td align=right>Disposition: </td><td align=left><select size=1 name=status>\n";
+
+				$stmt="SELECT * from vicidial_statuses where selectable='Y' order by status";
+				$rslt=mysql_query($stmt, $link);
+				$statuses_to_print = mysql_num_rows($rslt);
+				$statuses_list='';
+
+				$o=0;
+				while ($statuses_to_print > $o) {
+					$rowx=mysql_fetch_row($rslt);
+					$statuses_list .= "<option value=\"$rowx[0]\">$rowx[0] - $rowx[1]</option>\n";
+					$o++;
+				}
+			echo "$statuses_list";
+			echo "</select></td></tr>\n";
+
+
+		echo "<tr><td colspan=2><input type=submit name=submit value=\"DISPO CALL\"></td></tr>\n";
+		echo "</table></form>\n";
+		echo "<BR><BR><BR>\n";
+
+	}
+	else
+	{
+		echo "lead lookup FAILED for lead_id $lead_id &nbsp; &nbsp; &nbsp; $NOW_TIME\n<BR><BR>\n";
+#		echo "<a href=\"$PHP_SELF\">Close this window</a>\n<BR><BR>\n";
+	}
+
+
+
+
+
+
+}
+
+
+$ENDtime = date("U");
+
+$RUNtime = ($ENDtime - $STARTtime);
+
+echo "\n\n\n<br><br><br>\n\n";
+
+
+echo "<font size=0>\n\n\n<br><br><br>\nscript runtime: $RUNtime seconds</font>";
+
+
+?>
+
+
+</body>
+</html>
+
+<?
+	
+exit; 
+
+
+
+?>
+
+
+
+
+
diff --git a/www/vicidial/server_stats.php b/www/vicidial/server_stats.php
new file mode 100644
index 00000000..a427f5c0
--- /dev/null
+++ b/www/vicidial/server_stats.php
@@ -0,0 +1,96 @@
+<? 
+### server_stats.php
+### 
+### Copyright (C) 2006  Matt Florell <vicidial@gmail.com>    LICENSE: GPLv2
+###
+# CHANGES
+#
+# 60620-1037 - Added Link back to Admin section
+#            - Added required user/pass to gain access to this page
+#
+
+require("dbconnect.php");
+
+$PHP_AUTH_USER=$_SERVER['PHP_AUTH_USER'];
+$PHP_AUTH_PW=$_SERVER['PHP_AUTH_PW'];
+
+$PHP_AUTH_USER = ereg_replace("[^0-9a-zA-Z]","",$PHP_AUTH_USER);
+$PHP_AUTH_PW = ereg_replace("[^0-9a-zA-Z]","",$PHP_AUTH_PW);
+
+	$stmt="SELECT count(*) from vicidial_users where user='$PHP_AUTH_USER' and pass='$PHP_AUTH_PW' and user_level > 6;";
+	if ($DB) {echo "|$stmt|\n";}
+	$rslt=mysql_query($stmt, $link);
+	$row=mysql_fetch_row($rslt);
+	$auth=$row[0];
+
+  if( (strlen($PHP_AUTH_USER)<2) or (strlen($PHP_AUTH_PW)<2) or (!$auth))
+	{
+    Header("WWW-Authenticate: Basic realm=\"VICI-PROJECTS\"");
+    Header("HTTP/1.0 401 Unauthorized");
+    echo "Invalid Username/Password: |$PHP_AUTH_USER|$PHP_AUTH_PW|\n";
+    exit;
+	}
+
+
+$NOW_DATE = date("Y-m-d");
+$NOW_TIME = date("Y-m-d H:i:s");
+$STARTtime = date("U");
+if (!isset($query_date)) {$query_date = $NOW_DATE;}
+
+$stmt="select * from servers;";
+$rslt=mysql_query($stmt, $link);
+if ($DB) {echo "$stmt\n";}
+$servers_to_print = mysql_num_rows($rslt);
+$i=0;
+while ($i < $servers_to_print)
+	{
+	$row=mysql_fetch_row($rslt);
+	$server_id[$i] =			$row[0];
+	$server_description[$i] =	$row[1];
+	$server_ip[$i] =			$row[2];
+	$active[$i] =				$row[3];
+	$i++;
+	}
+?>
+
+<HTML>
+<HEAD>
+
+<META HTTP-EQUIV="Content-Type" CONTENT="text/html; charset=utf-8">
+<TITLE>VICIDIAL: Server Stats and Reports</TITLE></HEAD><BODY BGCOLOR=WHITE>
+<FONT SIZE=4><B>VICIDIAL: Server Stats and Reports</B></font> &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;
+<a href="./admin.php"><FONT FACE="ARIAL,HELVETICA" COLOR=BLACK SIZE=2>BACK TO ADMIN</FONT></a><BR><BR>
+<UL>
+<LI><a href="AST_timeonVDADall.php"><FONT FACE="ARIAL,HELVETICA" COLOR=BLACK SIZE=2>TIME ON VDAD (per campaign)</a> | <a href="AST_timeonVDADall_SIPmonitor.php"><FONT FACE="ARIAL,HELVETICA" COLOR=BLACK SIZE=2>SIP Listen Version</a></FONT>
+<LI><a href="AST_parkstats.php"><FONT FACE="ARIAL,HELVETICA" COLOR=BLACK SIZE=2>PARK REPORT</a></FONT>
+<LI><a href="AST_VDADstats.php"><FONT FACE="ARIAL,HELVETICA" COLOR=BLACK SIZE=2>VDAD REPORT</a></FONT>
+<LI><a href="AST_CLOSERstats.php"><FONT FACE="ARIAL,HELVETICA" COLOR=BLACK SIZE=2>CLOSER REPORT</a></FONT>
+<LI><a href="AST_agent_performance.php"><FONT FACE="ARIAL,HELVETICA" COLOR=BLACK SIZE=2>AGENT PERFORMANCE</a></FONT>
+<LI><a href="AST_agent_performance_detail.php"><FONT FACE="ARIAL,HELVETICA" COLOR=BLACK SIZE=2>AGENT PERFORMANCE DETAIL</a></FONT>
+<LI><a href="AST_server_performance.php"><FONT FACE="ARIAL,HELVETICA" COLOR=BLACK SIZE=2>SERVER PERFORMANCE</a></FONT>
+</UL>
+
+<PRE><TABLE BORDER=1>
+<TR><TD>SERVER</TD><TD>DESCRIPTION</TD><TD>IP ADDRESS</TD><TD>ACTIVE</TD><TD>VDAD time</TD><TD>VDcall time</TD><TD>PARK time</TD><TD>CLOSER/INBOUND time</TD></TR>
+<? 
+
+	$o=0;
+	while ($servers_to_print > $o)
+	{
+	echo "<TR>\n";
+	echo "<TD>$server_id[$o]</TD>\n";
+	echo "<TD>$server_description[$o]</TD>\n";
+	echo "<TD>$server_ip[$o]</TD>\n";
+	echo "<TD>$active[$o]</TD>\n";
+	echo "<TD><a href=\"AST_timeonVDAD.php?server_ip=$server_ip[$o]\">LINK</a></TD>\n";
+	echo "<TD><a href=\"AST_timeoncall.php?server_ip=$server_ip[$o]\">LINK</a></TD>\n";
+	echo "<TD><a href=\"AST_timeonpark.php?server_ip=$server_ip[$o]\">LINK</a></TD>\n";
+	echo "<TD><a href=\"AST_timeonVDAD_closer.php?server_ip=$server_ip[$o]\">LINK</a></TD>\n";
+	echo "</TR>\n";
+	$o++;
+	}
+
+?>
+</TABLE>
+
+</BODY></HTML>
\ No newline at end of file
diff --git a/www/vicidial/test.txt b/www/vicidial/test.txt
new file mode 100644
index 00000000..70c379b6
--- /dev/null
+++ b/www/vicidial/test.txt
@@ -0,0 +1 @@
+Hello world
\ No newline at end of file
diff --git a/www/vicidial/user_stats.php b/www/vicidial/user_stats.php
new file mode 100644
index 00000000..bdada227
--- /dev/null
+++ b/www/vicidial/user_stats.php
@@ -0,0 +1,316 @@
+<?
+### user_stats.php
+### 
+### Copyright (C) 2006  Matt Florell <vicidial@gmail.com>    LICENSE: GPLv2
+###
+# CHANGES
+#
+# 60619-1743 - Added variable filtering to eliminate SQL injection attack threat
+#
+
+header ("Content-type: text/html; charset=utf-8");
+
+require("dbconnect.php");
+
+$PHP_AUTH_USER=$_SERVER['PHP_AUTH_USER'];
+$PHP_AUTH_PW=$_SERVER['PHP_AUTH_PW'];
+$PHP_SELF=$_SERVER['PHP_SELF'];
+if (isset($_GET["begin_date"]))				{$begin_date=$_GET["begin_date"];}
+	elseif (isset($_POST["begin_date"]))		{$begin_date=$_POST["begin_date"];}
+if (isset($_GET["end_date"]))				{$end_date=$_GET["end_date"];}
+	elseif (isset($_POST["end_date"]))		{$end_date=$_POST["end_date"];}
+if (isset($_GET["user"]))				{$user=$_GET["user"];}
+	elseif (isset($_POST["user"]))		{$user=$_POST["user"];}
+if (isset($_GET["campaign"]))				{$campaign=$_GET["campaign"];}
+	elseif (isset($_POST["campaign"]))		{$campaign=$_POST["campaign"];}
+if (isset($_GET["submit"]))				{$submit=$_GET["submit"];}
+	elseif (isset($_POST["submit"]))		{$submit=$_POST["submit"];}
+if (isset($_GET["SUBMIT"]))				{$SUBMIT=$_GET["SUBMIT"];}
+	elseif (isset($_POST["SUBMIT"]))		{$SUBMIT=$_POST["SUBMIT"];}
+
+$PHP_AUTH_USER = ereg_replace("[^0-9a-zA-Z]","",$PHP_AUTH_USER);
+$PHP_AUTH_PW = ereg_replace("[^0-9a-zA-Z]","",$PHP_AUTH_PW);
+
+$STARTtime = date("U");
+$TODAY = date("Y-m-d");
+
+if (!isset($begin_date)) {$begin_date = $TODAY;}
+if (!isset($end_date)) {$end_date = $TODAY;}
+
+	$stmt="SELECT count(*) from vicidial_users where user='$PHP_AUTH_USER' and pass='$PHP_AUTH_PW' and user_level > 7;";
+	$rslt=mysql_query($stmt, $link);
+	$row=mysql_fetch_row($rslt);
+	$auth=$row[0];
+
+$fp = fopen ("./project_auth_entries.txt", "a");
+$date = date("r");
+$ip = getenv("REMOTE_ADDR");
+$browser = getenv("HTTP_USER_AGENT");
+
+  if( (strlen($PHP_AUTH_USER)<2) or (strlen($PHP_AUTH_PW)<2) or (!$auth))
+	{
+    Header("WWW-Authenticate: Basic realm=\"VICI-PROJECTS\"");
+    Header("HTTP/1.0 401 Unauthorized");
+    echo "Invalid Username/Password: |$PHP_AUTH_USER|$PHP_AUTH_PW|\n";
+    exit;
+	}
+  else
+	{
+
+	if($auth>0)
+		{
+			$stmt="SELECT full_name from vicidial_users where user='$PHP_AUTH_USER' and pass='$PHP_AUTH_PW'";
+			$rslt=mysql_query($stmt, $link);
+			$row=mysql_fetch_row($rslt);
+			$LOGfullname=$row[0];
+		fwrite ($fp, "VICIDIAL|GOOD|$date|$PHP_AUTH_USER|$PHP_AUTH_PW|$ip|$browser|$LOGfullname|\n");
+		fclose($fp);
+		}
+	else
+		{
+		fwrite ($fp, "VICIDIAL|FAIL|$date|$PHP_AUTH_USER|$PHP_AUTH_PW|$ip|$browser|\n");
+		fclose($fp);
+		}
+
+	$stmt="SELECT full_name from vicidial_users where user='$user';";
+	$rslt=mysql_query($stmt, $link);
+	$row=mysql_fetch_row($rslt);
+	$full_name = $row[0];
+
+	}
+
+
+
+
+?>
+<html>
+<head>
+<title>VICIDIAL ADMIN: User Stats</title>
+<?
+echo "<META HTTP-EQUIV=\"Content-Type\" CONTENT=\"text/html; charset=utf-8\">\n";
+?>
+</head>
+<BODY BGCOLOR=white marginheight=0 marginwidth=0 leftmargin=0 topmargin=0>
+<CENTER>
+<TABLE WIDTH=620 BGCOLOR=#D9E6FE cellpadding=2 cellspacing=0><TR BGCOLOR=#015B91><TD ALIGN=LEFT><FONT FACE="ARIAL,HELVETICA" COLOR=WHITE SIZE=2><B> &nbsp; VICIDIAL ADMIN: User Stats for <? echo $user ?></TD><TD ALIGN=RIGHT><FONT FACE="ARIAL,HELVETICA" COLOR=WHITE SIZE=2><B><? echo date("l F j, Y G:i:s A") ?> &nbsp; </TD></TR>
+
+
+
+
+<? 
+
+echo "<TR BGCOLOR=\"#F0F5FE\"><TD ALIGN=LEFT COLSPAN=2><FONT FACE=\"ARIAL,HELVETICA\" COLOR=BLACK SIZE=2><B> &nbsp; \n";
+
+echo "<form action=$PHP_SELF method=POST>\n";
+echo "<input type=hidden name=user value=\"$user\">\n";
+echo "<input type=text name=begin_date value=\"$begin_date\" size=10 maxsize=10> to \n";
+echo "<input type=text name=end_date value=\"$end_date\" size=10 maxsize=10> &nbsp;\n";
+echo "<input type=submit name=submit value=submit>\n";
+
+
+echo " &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; $user - $full_name\n";
+
+echo "</B></TD></TR>\n";
+echo "<TR><TD ALIGN=LEFT COLSPAN=2>\n";
+
+
+	$stmt="SELECT count(*),status, sum(length_in_sec) from vicidial_log where user='" . mysql_real_escape_string($user) . "' and call_date >= '" . mysql_real_escape_string($begin_date) . " 0:00:01'  and call_date <= '" . mysql_real_escape_string($end_date) . " 23:59:59' group by status order by status";
+	$rslt=mysql_query($stmt, $link);
+	$statuses_to_print = mysql_num_rows($rslt);
+
+echo "<br><center>\n";
+
+echo "<B>TALK TIME AND STATUS:</B>\n";
+
+echo "<center><TABLE width=300 cellspacing=0 cellpadding=1>\n";
+echo "<tr><td><font size=2>STATUS</td><td align=right><font size=2>COUNT</td><td align=right><font size=2>HOURS:MINUTES</td></tr>\n";
+
+	$total_calls=0;
+	$o=0;
+	while ($statuses_to_print > $o) {
+		$row=mysql_fetch_row($rslt);
+		if (eregi("1$|3$|5$|7$|9$", $o))
+			{$bgcolor='bgcolor="#B9CBFD"';} 
+		else
+			{$bgcolor='bgcolor="#9BB9FB"';}
+
+		$call_seconds = $row[2];
+		$call_hours = ($call_seconds / 3600);
+		$call_hours = round($call_hours, 2);
+		$call_hours_int = intval("$call_hours");
+		$call_minutes = ($call_hours - $call_hours_int);
+		$call_minutes = ($call_minutes * 60);
+		$call_minutes_int = round($call_minutes, 0);
+		if ($call_minutes_int < 10) {$call_minutes_int = "0$call_minutes_int";}
+
+		echo "<tr $bgcolor><td><font size=2>$row[1]</td>";
+		echo "<td align=right><font size=2> $row[0]</td>\n";
+		echo "<td align=right><font size=2> $call_hours_int:$call_minutes_int</td></tr>\n";
+		$total_calls = ($total_calls + $row[0]);
+
+		$call_seconds=0;
+		$o++;
+	}
+
+	$stmt="SELECT sum(length_in_sec) from vicidial_log where user='" . mysql_real_escape_string($user) . "' and call_date >= '" . mysql_real_escape_string($begin_date) . " 0:00:01'  and call_date <= '" . mysql_real_escape_string($end_date) . " 23:59:59'";
+	$rslt=mysql_query($stmt, $link);
+	$counts_to_print = mysql_num_rows($rslt);
+		$row=mysql_fetch_row($rslt);
+	$call_seconds = $row[0];
+	$call_hours = ($call_seconds / 3600);
+	$call_hours = round($call_hours, 2);
+	$call_hours_int = intval("$call_hours");
+	$call_minutes = ($call_hours - $call_hours_int);
+	$call_minutes = ($call_minutes * 60);
+	$call_minutes_int = round($call_minutes, 0);
+	if ($call_minutes_int < 10) {$call_minutes_int = "0$call_minutes_int";}
+
+echo "<tr><td><font size=2>TOTAL CALLS </td><td align=right><font size=2> $total_calls</td><td align=right><font size=2> $call_hours_int:$call_minutes_int</td></tr>\n";
+echo "</TABLE></center>\n";
+echo "<br><br>\n";
+
+echo "<center>\n";
+
+echo "<B>LOGIN/LOGOUT TIME:</B>\n";
+echo "<TABLE width=400 cellspacing=0 cellpadding=1>\n";
+echo "<tr><td><font size=2>EVENT </td><td align=right><font size=2> DATE</td><td align=right><font size=2> CAMPAIGN</td><td align=right><font size=2>HOURS:MINUTES</td></tr>\n";
+
+	$stmt="SELECT event,event_epoch,event_date,campaign_id from vicidial_user_log where user='" . mysql_real_escape_string($user) . "' and event_date >= '" . mysql_real_escape_string($begin_date) . " 0:00:01'  and event_date <= '" . mysql_real_escape_string($end_date) . " 23:59:59'";
+	$rslt=mysql_query($stmt, $link);
+	$events_to_print = mysql_num_rows($rslt);
+
+	$total_calls=0;
+	$o=0;
+	$event_start_seconds='';
+	$event_stop_seconds='';
+	while ($events_to_print > $o) {
+		$row=mysql_fetch_row($rslt);
+		if (eregi("LOGIN", $row[0]))
+			{$bgcolor='bgcolor="#B9CBFD"';} 
+		else
+			{$bgcolor='bgcolor="#9BB9FB"';}
+
+		if (ereg("LOGIN", $row[0]))
+			{
+			$event_start_seconds = $row[1];
+			echo "<tr $bgcolor><td><font size=2>$row[0]</td>";
+			echo "<td align=right><font size=2> $row[2]</td>\n";
+			echo "<td align=right><font size=2> $row[3]</td>\n";
+			echo "<td align=right><font size=2> </td></tr>\n";
+			}
+		if (ereg("LOGOUT", $row[0]))
+			{
+			if ($event_start_seconds)
+				{
+				$event_stop_seconds = $row[1];
+				$event_seconds = ($event_stop_seconds - $event_start_seconds);
+				$total_login_time = ($total_login_time + $event_seconds);
+				$event_hours = ($event_seconds / 3600);
+				$event_hours = round($event_hours, 2);
+				$event_hours_int = intval("$event_hours");
+				$event_minutes = ($event_hours - $event_hours_int);
+				$event_minutes = ($event_minutes * 60);
+				$event_minutes_int = round($event_minutes, 0);
+				if ($event_minutes_int < 10) {$event_minutes_int = "0$event_minutes_int";}
+				echo "<tr $bgcolor><td><font size=2>$row[0]</td>";
+				echo "<td align=right><font size=2> $row[2]</td>\n";
+				echo "<td align=right><font size=2> $row[3]</td>\n";
+				echo "<td align=right><font size=2> $event_hours_int:$event_minutes_int</td></tr>\n";
+				$event_start_seconds='';
+				$event_stop_seconds='';
+				}
+			else
+				{
+				echo "<tr $bgcolor><td><font size=2>$row[0]</td>";
+				echo "<td align=right><font size=2> $row[2]</td>\n";
+				echo "<td align=right><font size=2> $row[3]</td>\n";
+				echo "<td align=right><font size=2> </td></tr>\n";
+				}
+			}
+
+		$total_calls = ($total_calls + $row[0]);
+
+		$call_seconds=0;
+		$o++;
+	}
+
+$total_login_hours = ($total_login_time / 3600);
+$total_login_hours = round($total_login_hours, 2);
+$total_login_hours_int = intval("$total_login_hours");
+$total_login_minutes = ($total_login_hours - $total_login_hours_int);
+$total_login_minutes = ($total_login_minutes * 60);
+$total_login_minutes_int = round($total_login_minutes, 0);
+if ($total_login_minutes_int < 10) {$total_login_minutes_int = "0$total_login_minutes_int";}
+
+echo "<tr><td><font size=2>TOTAL</td>";
+echo "<td align=right><font size=2> </td>\n";
+echo "<td align=right><font size=2> </td>\n";
+echo "<td align=right><font size=2> $total_login_hours_int:$total_login_minutes_int</td></tr>\n";
+
+echo "</TABLE></center>\n";
+
+
+echo "<br><br>\n";
+
+echo "<center>\n";
+
+echo "<B>LAST 50 CALLS:</B>\n";
+echo "<TABLE width=550 cellspacing=0 cellpadding=1>\n";
+echo "<tr><td><font size=2>DATE/TIME </td><td align=left><font size=2>LENGTH</td><td align=left><font size=2> STATUS</td><td align=left><font size=2> PHONE</td><td align=right><font size=2> CAMPAIGN</td><td align=right><font size=2> LIST</td><td align=right><font size=2> LEAD</td></tr>\n";
+
+	$stmt="select * from vicidial_log where user='" . mysql_real_escape_string($user) . "' order by uniqueid desc limit 50;";
+	$rslt=mysql_query($stmt, $link);
+	$logs_to_print = mysql_num_rows($rslt);
+
+	$u=0;
+	while ($logs_to_print > $u) {
+		$row=mysql_fetch_row($rslt);
+		if (eregi("1$|3$|5$|7$|9$", $u))
+			{$bgcolor='bgcolor="#B9CBFD"';} 
+		else
+			{$bgcolor='bgcolor="#9BB9FB"';}
+
+			echo "<tr $bgcolor><td><font size=2>$row[4]</td>";
+			echo "<td align=left><font size=2> $row[7]</td>\n";
+			echo "<td align=left><font size=2> $row[8]</td>\n";
+			echo "<td align=left><font size=2> $row[10] </td>\n";
+			echo "<td align=right><font size=2> $row[3] </td>\n";
+			echo "<td align=right><font size=2> $row[2] </td>\n";
+			echo "<td align=right><font size=2> <A HREF=\"admin_modify_lead.php?lead_id=$row[1]\" target=\"_blank\">$row[1]</A> </td></tr>\n";
+
+		$u++;
+	}
+
+
+echo "</TABLE></center>\n";
+
+
+$ENDtime = date("U");
+
+$RUNtime = ($ENDtime - $STARTtime);
+
+echo "\n\n\n<br><br><br>\n\n";
+
+
+echo "<font size=0>\n\n\n<br><br><br>\nscript runtime: $RUNtime seconds</font>";
+
+
+?>
+
+
+</TD></TR><TABLE>
+</body>
+</html>
+
+<?
+	
+exit; 
+
+
+
+?>
+
+
+
+
+
diff --git a/www/vicidial/user_status.php b/www/vicidial/user_status.php
new file mode 100644
index 00000000..8efe670f
--- /dev/null
+++ b/www/vicidial/user_status.php
@@ -0,0 +1,238 @@
+<?
+### user_status.php
+### 
+### Copyright (C) 2006  Matt Florell <vicidial@gmail.com>    LICENSE: GPLv2
+###
+# CHANGES
+#
+# 60619-1738 - Added variable filtering to eliminate SQL injection attack threat
+#
+
+header ("Content-type: text/html; charset=utf-8");
+
+require("dbconnect.php");
+
+$PHP_AUTH_USER=$_SERVER['PHP_AUTH_USER'];
+$PHP_AUTH_PW=$_SERVER['PHP_AUTH_PW'];
+$PHP_SELF=$_SERVER['PHP_SELF'];
+if (isset($_GET["begin_date"]))				{$begin_date=$_GET["begin_date"];}
+	elseif (isset($_POST["begin_date"]))		{$begin_date=$_POST["begin_date"];}
+if (isset($_GET["end_date"]))				{$end_date=$_GET["end_date"];}
+	elseif (isset($_POST["end_date"]))		{$end_date=$_POST["end_date"];}
+if (isset($_GET["user"]))				{$user=$_GET["user"];}
+	elseif (isset($_POST["user"]))		{$user=$_POST["user"];}
+if (isset($_GET["group"]))				{$group=$_GET["group"];}
+	elseif (isset($_POST["group"]))		{$group=$_POST["group"];}
+if (isset($_GET["stage"]))				{$stage=$_GET["stage"];}
+	elseif (isset($_POST["stage"]))		{$stage=$_POST["stage"];}
+if (isset($_GET["submit"]))				{$submit=$_GET["submit"];}
+	elseif (isset($_POST["submit"]))		{$submit=$_POST["submit"];}
+if (isset($_GET["SUBMIT"]))				{$SUBMIT=$_GET["SUBMIT"];}
+	elseif (isset($_POST["SUBMIT"]))		{$SUBMIT=$_POST["SUBMIT"];}
+
+$PHP_AUTH_USER = ereg_replace("[^0-9a-zA-Z]","",$PHP_AUTH_USER);
+$PHP_AUTH_PW = ereg_replace("[^0-9a-zA-Z]","",$PHP_AUTH_PW);
+
+$STARTtime = date("U");
+$TODAY = date("Y-m-d");
+
+if (!isset($begin_date)) {$begin_date = $TODAY;}
+if (!isset($end_date)) {$end_date = $TODAY;}
+
+	$stmt="SELECT count(*) from vicidial_users where user='$PHP_AUTH_USER' and pass='$PHP_AUTH_PW' and user_level > 7;";
+	$rslt=mysql_query($stmt, $link);
+	$row=mysql_fetch_row($rslt);
+	$auth=$row[0];
+
+$fp = fopen ("./project_auth_entries.txt", "a");
+$date = date("r");
+$ip = getenv("REMOTE_ADDR");
+$browser = getenv("HTTP_USER_AGENT");
+
+  if( (strlen($PHP_AUTH_USER)<2) or (strlen($PHP_AUTH_PW)<2) or (!$auth))
+	{
+    Header("WWW-Authenticate: Basic realm=\"VICI-PROJECTS\"");
+    Header("HTTP/1.0 401 Unauthorized");
+    echo "Invalid Username/Password: |$PHP_AUTH_USER|$PHP_AUTH_PW|\n";
+    exit;
+	}
+  else
+	{
+
+	if($auth>0)
+		{
+			$stmt="SELECT full_name,change_agent_campaign from vicidial_users where user='$PHP_AUTH_USER' and pass='$PHP_AUTH_PW'";
+			$rslt=mysql_query($stmt, $link);
+			$row=mysql_fetch_row($rslt);
+			$LOGfullname=$row[0];
+			$change_agent_campaign=$row[1];
+		fwrite ($fp, "VICIDIAL|GOOD|$date|$PHP_AUTH_USER|$PHP_AUTH_PW|$ip|$browser|$LOGfullname|\n");
+		fclose($fp);
+		}
+	else
+		{
+		fwrite ($fp, "VICIDIAL|FAIL|$date|$PHP_AUTH_USER|$PHP_AUTH_PW|$ip|$browser|\n");
+		fclose($fp);
+		}
+
+	$stmt="SELECT full_name from vicidial_users where user='" . mysql_real_escape_string($user) . "';";
+	$rslt=mysql_query($stmt, $link);
+	$row=mysql_fetch_row($rslt);
+	$full_name = $row[0];
+
+	$stmt="SELECT * from vicidial_live_agents where user='" . mysql_real_escape_string($user) . "';";
+	$rslt=mysql_query($stmt, $link);
+	if ($DB) {echo "$stmt\n";}
+	$agents_to_print = mysql_num_rows($rslt);
+	$i=0;
+	while ($i < $agents_to_print)
+		{
+		$row=mysql_fetch_row($rslt);
+		$Aserver_ip =		$row[2];
+		$Asession_id =		$row[3];
+		$Aextension =		$row[4];
+		$Astatus =			$row[5];
+		$Acampaign =		$row[7];
+		$Alast_call =		$row[14];
+		$Acl_campaigns =	$row[15];
+		$i++;
+		}
+
+	}
+
+$stmt="select * from vicidial_campaigns;";
+$rslt=mysql_query($stmt, $link);
+if ($DB) {echo "$stmt\n";}
+$groups_to_print = mysql_num_rows($rslt);
+$i=0;
+while ($i < $groups_to_print)
+	{
+	$row=mysql_fetch_row($rslt);
+	$groups[$i] =$row[0];
+	$i++;
+	}
+
+
+
+?>
+<html>
+<head>
+<title>VICIDIAL ADMIN: User Status</title>
+<?
+echo "<META HTTP-EQUIV=\"Content-Type\" CONTENT=\"text/html; charset=utf-8\">\n";
+?>
+</head>
+<BODY BGCOLOR=white marginheight=0 marginwidth=0 leftmargin=0 topmargin=0>
+<CENTER>
+<TABLE WIDTH=620 BGCOLOR=#D9E6FE cellpadding=2 cellspacing=0><TR BGCOLOR=#015B91><TD ALIGN=LEFT><FONT FACE="ARIAL,HELVETICA" COLOR=WHITE SIZE=2><B> &nbsp; VICIDIAL ADMIN: User Status for <? echo $user ?></TD><TD ALIGN=RIGHT><FONT FACE="ARIAL,HELVETICA" COLOR=WHITE SIZE=2><B><? echo date("l F j, Y G:i:s A") ?> &nbsp; </TD></TR>
+
+
+
+
+<? 
+
+echo "<TR BGCOLOR=\"#F0F5FE\"><TD ALIGN=LEFT COLSPAN=2><FONT FACE=\"ARIAL,HELVETICA\" COLOR=BLACK SIZE=3><B> &nbsp; \n";
+
+if ($stage == "live_campaign_change")
+{
+	$stmt="UPDATE vicidial_live_agents set campaign_id='" . mysql_real_escape_string($group) . "' where user='" . mysql_real_escape_string($user) . "';";
+	$rslt=mysql_query($stmt, $link);
+
+	echo "Agent $user - $full_name changed to $group campaign<BR>\n";
+	
+	exit;
+}
+
+if ($stage == "log_agent_out")
+{
+	$stmt="DELETE from vicidial_live_agents where user='" . mysql_real_escape_string($user) . "';";
+	$rslt=mysql_query($stmt, $link);
+
+	echo "Agent $user - $full_name has been emergency logged out, make sure they close their web browser<BR>\n";
+	
+	exit;
+}
+
+if ($agents_to_print > 0)
+{
+	echo "<PRE>";
+	echo "Agent Logged in at server:  $Aserver_ip\n";
+	echo "               in session:  $Asession_id\n";
+	echo "               from phone:  $Aextension\n";
+	echo "Agent is in campaign:       $Acampaign\n";
+	echo "              status:       $Astatus\n";
+	echo " hungup last call at:       $Alast_call\n";
+	echo "       Closer groups:       $Acl_campaigns\n\n";
+
+	echo "</PRE>";
+
+
+	if ($change_agent_campaign > 0)
+	{
+		echo "<form action=$PHP_SELF method=POST>\n";
+		echo "<input type=hidden name=user value=\"$user\">\n";
+		echo "<input type=hidden name=stage value=\"live_campaign_change\">\n";
+		echo "Current Campaign: <SELECT SIZE=1 NAME=group>\n";
+			$o=0;
+			while ($groups_to_print > $o)
+			{
+				if ($groups[$o] == "$Acampaign") {echo "<option selected value=\"$groups[$o]\">$groups[$o]</option>\n";}
+				  else {echo "<option value=\"$groups[$o]\">$groups[$o]</option>\n";}
+				$o++;
+			}
+		echo "</SELECT>\n";
+		echo "<input type=submit name=submit value=CHANGE><BR></form>\n";
+
+
+		echo "<form action=$PHP_SELF method=POST>\n";
+		echo "<input type=hidden name=user value=\"$user\">\n";
+		echo "<input type=hidden name=stage value=\"log_agent_out\">\n";
+		echo "<input type=submit name=submit value=\"EMERGENCY LOG AGENT OUT\"><BR></form>\n";
+	}
+}
+
+else
+{
+	echo "Agent is not logged in\n<BR>";
+
+}
+
+
+echo " &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; $user - $full_name - \n";
+
+echo "<a href=\"./AST_agent_time_sheet.php?agent=$user\">VICIDIAL Time Sheet</a>\n";
+
+echo "</B></TD></TR>\n";
+echo "<TR><TD ALIGN=LEFT COLSPAN=2>\n";
+
+
+$ENDtime = date("U");
+
+$RUNtime = ($ENDtime - $STARTtime);
+
+echo "\n\n\n<br><br><br>\n\n";
+
+
+echo "<font size=0>\n\n\n<br><br><br>\nscript runtime: $RUNtime seconds</font>";
+
+echo "|$stage|$group|";
+
+?>
+
+
+</TD></TR><TABLE>
+</body>
+</html>
+
+<?
+	
+exit; 
+
+
+
+?>
+
+
+
+
+
diff --git a/www/vicidial/vdremote.php b/www/vicidial/vdremote.php
new file mode 100644
index 00000000..dfe11fa3
--- /dev/null
+++ b/www/vicidial/vdremote.php
@@ -0,0 +1,602 @@
+<?
+# vdremote.php
+# 
+# Copyright (C) 2006  Matt Florell <vicidial@gmail.com>    LICENSE: GPLv2
+#
+# Changes
+# 50307-1721 - First version
+# 51123-1502 - removed requirement of PHP Globals=on
+# 60421-1229 - check GET/POST vars lines with isset to not trigger PHP NOTICES
+# 60619-1603 - Added variable filtering to eliminate SQL injection attack threat
+#
+# make sure you have added a user to the vicidial_users MySQL table with at least user_level 4 to access this page the first time
+
+$version = '1.1.12';
+$build = '60619-1603';
+
+require("dbconnect.php");
+
+$PHP_AUTH_USER=$_SERVER['PHP_AUTH_USER'];
+$PHP_AUTH_PW=$_SERVER['PHP_AUTH_PW'];
+$PHP_SELF=$_SERVER['PHP_SELF'];
+if (isset($_GET["ADD"]))				{$ADD=$_GET["ADD"];}
+	elseif (isset($_POST["ADD"]))		{$ADD=$_POST["ADD"];}
+if (isset($_GET["DB"]))				{$DB=$_GET["DB"];}
+	elseif (isset($_POST["DB"]))		{$DB=$_POST["DB"];}
+if (isset($_GET["user"]))				{$user=$_GET["user"];}
+	elseif (isset($_POST["user"]))		{$user=$_POST["user"];}
+if (isset($_GET["force_logout"]))				{$force_logout=$_GET["force_logout"];}
+	elseif (isset($_POST["force_logout"]))		{$force_logout=$_POST["force_logout"];}
+if (isset($_GET["groups"]))				{$groups=$_GET["groups"];}
+	elseif (isset($_POST["groups"]))		{$groups=$_POST["groups"];}
+if (isset($_GET["remote_agent_id"]))				{$remote_agent_id=$_GET["remote_agent_id"];}
+	elseif (isset($_POST["remote_agent_id"]))		{$remote_agent_id=$_POST["remote_agent_id"];}
+if (isset($_GET["user_start"]))				{$user_start=$_GET["user_start"];}
+	elseif (isset($_POST["user_start"]))		{$user_start=$_POST["user_start"];}
+if (isset($_GET["number_of_lines"]))				{$number_of_lines=$_GET["number_of_lines"];}
+	elseif (isset($_POST["number_of_lines"]))		{$number_of_lines=$_POST["number_of_lines"];}
+if (isset($_GET["server_ip"]))				{$server_ip=$_GET["server_ip"];}
+	elseif (isset($_POST["server_ip"]))		{$server_ip=$_POST["server_ip"];}
+if (isset($_GET["conf_exten"]))				{$conf_exten=$_GET["conf_exten"];}
+	elseif (isset($_POST["conf_exten"]))		{$conf_exten=$_POST["conf_exten"];}
+if (isset($_GET["status"]))				{$status=$_GET["status"];}
+	elseif (isset($_POST["status"]))		{$status=$_POST["status"];}
+if (isset($_GET["campaign_id"]))				{$campaign_id=$_GET["campaign_id"];}
+	elseif (isset($_POST["campaign_id"]))		{$campaign_id=$_POST["campaign_id"];}
+if (isset($_GET["groups"]))				{$groups=$_GET["groups"];}
+	elseif (isset($_POST["groups"]))		{$groups=$_POST["groups"];}
+if (isset($_GET["submit"]))				{$submit=$_GET["submit"];}
+	elseif (isset($_POST["submit"]))		{$submit=$_POST["submit"];}
+if (isset($_GET["SUBMIT"]))				{$SUBMIT=$_GET["SUBMIT"];}
+	elseif (isset($_POST["SUBMIT"]))		{$SUBMIT=$_POST["SUBMIT"];}
+
+if (!isset($force_logout)) {$force_logout = 0;}
+
+if ($force_logout)
+{
+  if( (strlen($PHP_AUTH_USER)>0) or (strlen($PHP_AUTH_PW)>0) )
+	{
+    Header("WWW-Authenticate: Basic realm=\"VICI-PROJECTS\"");
+    Header("HTTP/1.0 401 Unauthorized");
+	}
+    echo "You have now logged out. Thank you\n";
+    exit;
+}
+
+$PHP_AUTH_USER = ereg_replace("[^0-9a-zA-Z]","",$PHP_AUTH_USER);
+$PHP_AUTH_PW = ereg_replace("[^0-9a-zA-Z]","",$PHP_AUTH_PW);
+
+
+$popup_page = './closer_popup.php';
+$STARTtime = date("U");
+$NOW_DATE = date("Y-m-d");
+$NOW_TIME = date("Y-m-d H:i:s");
+if (!isset($query_date)) {$query_date = $NOW_DATE;}
+
+	$stmt="SELECT count(*) from vicidial_users where user='$PHP_AUTH_USER' and pass='$PHP_AUTH_PW' and user_level > 3;";
+	if ($DB) {echo "|$stmt|\n";}
+	$rslt=mysql_query($stmt, $link);
+	$row=mysql_fetch_row($rslt);
+	$auth=$row[0];
+
+$fp = fopen ("./project_auth_entries.txt", "a");
+$date = date("r");
+$ip = getenv("REMOTE_ADDR");
+$browser = getenv("HTTP_USER_AGENT");
+
+  if( (strlen($PHP_AUTH_USER)<2) or (strlen($PHP_AUTH_PW)<2) or (!$auth))
+	{
+    Header("WWW-Authenticate: Basic realm=\"VICI-PROJECTS\"");
+    Header("HTTP/1.0 401 Unauthorized");
+    echo "Invalid Username/Password: |$PHP_AUTH_USER|$PHP_AUTH_PW|\n";
+    exit;
+	}
+  else
+	{
+	header ("Content-type: text/html; charset=utf-8");
+
+	if($auth>0)
+		{
+		$office_no=strtoupper($PHP_AUTH_USER);
+		$password=strtoupper($PHP_AUTH_PW);
+		$stmt="SELECT full_name from vicidial_users where user='$PHP_AUTH_USER' and pass='$PHP_AUTH_PW'";
+		$rslt=mysql_query($stmt, $link);
+		$row=mysql_fetch_row($rslt);
+		$LOGfullname=$row[0];
+
+		$stmt="SELECT count(*) from vicidial_remote_agents where user_start='$PHP_AUTH_USER';";
+		if ($DB) {echo "|$stmt|\n";}
+		$rslt=mysql_query($stmt, $link);
+		$row=mysql_fetch_row($rslt);
+		$authx=$row[0];
+
+		if($authx>0)
+			{
+			$stmt="SELECT remote_agent_id,server_ip,number_of_lines from vicidial_remote_agents where user_start='$PHP_AUTH_USER';";
+			if ($DB) {echo "|$stmt|\n";}
+			$rslt=mysql_query($stmt, $link);
+			$row=mysql_fetch_row($rslt);
+			$remote_agent_id=$row[0];
+			$server_ip=$row[1];
+			if (!$number_of_lines) {$number_of_lines=$row[2];}
+
+			fwrite ($fp, "VDremote|GOOD|$date|$PHP_AUTH_USER|$PHP_AUTH_PW|$ip|$browser|$LOGfullname|\n");
+			fclose($fp);
+			}
+		else
+			{
+			fwrite ($fp, "VDremote|FAIL|$date|$PHP_AUTH_USER|$PHP_AUTH_PW|$ip|$browser|$LOGfullname|\n");
+			fclose($fp);
+			echo "This remote agent does not exist: |$PHP_AUTH_USER|\n";
+			exit;
+			}
+		}
+	else
+		{
+		fwrite ($fp, "VDremote|FAIL|$date|$PHP_AUTH_USER|$PHP_AUTH_PW|$ip|$browser|\n");
+		fclose($fp);
+		}
+	}
+
+echo "<html>\n";
+echo "<head>\n";
+echo "<META HTTP-EQUIV=\"Content-Type\" CONTENT=\"text/html; charset=utf-8\">\n";
+if ($ADD==61111)
+	{
+	echo"<META HTTP-EQUIV=Refresh CONTENT=\"5; URL=$PHP_SELF?ADD=61111&user=$user&DB=$DB\">\n";
+	}
+echo "<!-- VERSION: $version     BUILD: $build -->\n";
+?>
+<STYLE type="text/css">
+<!--
+   .green {color: white; background-color: green}
+   .red {color: white; background-color: red}
+   .blue {color: white; background-color: blue}
+   .purple {color: white; background-color: purple}
+   .yellow {color: black; background-color: yellow}
+   .orange {color: black; background-color: orange}
+-->
+ </STYLE>
+<?
+echo "<title>VICIDIAL REMOTE AGENTS: $LOGfullname - $PHP_AUTH_USER   ";
+
+if (!$ADD)			{$ADD="31111";}
+if ($ADD==31111)	{echo "Modify Remote Agents";}
+if ($ADD==41111)	{echo "Modify Remote Agents";}
+if ($ADD==61111)	{echo "Remote Agent Status";}
+if ($ADD==71111)	{echo "Remote Agent Closer Stats";}
+
+
+if (strlen($ADD)>4)
+	{
+	##### get server listing for dynamic pulldown
+	$stmt="SELECT server_ip,server_description from servers order by server_ip";
+	$rslt=mysql_query($stmt, $link);
+	$servers_to_print = mysql_num_rows($rslt);
+	$servers_list='';
+
+	$o=0;
+	while ($servers_to_print > $o)
+		{
+		$rowx=mysql_fetch_row($rslt);
+		$servers_list .= "<option value=\"$rowx[0]\">$rowx[0] - $rowx[1]</option>\n";
+		$o++;
+		}
+
+	##### get campaigns listing for dynamic pulldown
+	$stmt="SELECT campaign_id,campaign_name from vicidial_campaigns order by campaign_id";
+	$rslt=mysql_query($stmt, $link);
+	$campaigns_to_print = mysql_num_rows($rslt);
+	$campaigns_list='';
+
+	$o=0;
+	while ($campaigns_to_print > $o)
+		{
+		$rowx=mysql_fetch_row($rslt);
+		$campaigns_list .= "<option value=\"$rowx[0]\">$rowx[0] - $rowx[1]</option>\n";
+		$o++;
+		}
+
+	##### get inbound groups listing for checkboxes
+	if ( (($ADD==31111) or ($ADD==31111)) and (count($groups)<1) )
+	{
+	$stmt="SELECT closer_campaigns from vicidial_remote_agents where remote_agent_id='" . mysql_real_escape_string($remote_agent_id) . "';";
+	$rslt=mysql_query($stmt, $link);
+	$row=mysql_fetch_row($rslt);
+	$closer_campaigns =	$row[0];
+	$closer_campaigns = preg_replace("/ -$/","",$closer_campaigns);
+	$groups = explode(" ", $closer_campaigns);
+	}
+
+	$stmt="SELECT group_id,group_name from vicidial_inbound_groups order by group_id";
+	$rslt=mysql_query($stmt, $link);
+	$groups_to_print = mysql_num_rows($rslt);
+	$groups_list='';
+	$groups_value='';
+
+	$o=0;
+	while ($groups_to_print > $o)
+		{
+		$rowx=mysql_fetch_row($rslt);
+		$group_id_value = $rowx[0];
+		$group_name_value = $rowx[1];
+		$groups_list .= "<input type=\"checkbox\" name=\"groups[]\" value=\"$group_id_value\"";
+		$p=0;
+		while ($p<50)
+			{
+			if ($group_id_value == $groups[$p]) 
+				{
+				$groups_list .= " CHECKED";
+				$groups_value .= " $group_id_value";
+				}
+			$p++;
+			}
+		$groups_list .= "> $group_id_value - $group_name_value<BR>\n";
+		$o++;
+		}
+	if (strlen($groups_value)>2) {$groups_value .= " -";}
+	}
+
+?>
+</title>
+</head>
+<BODY BGCOLOR=white marginheight=0 marginwidth=0 leftmargin=0 topmargin=0>
+<CENTER>
+<TABLE WIDTH=620 BGCOLOR=#D9E6FE cellpadding=2 cellspacing=0><TR BGCOLOR=#015B91><TD ALIGN=LEFT><FONT FACE="ARIAL,HELVETICA" COLOR=WHITE SIZE=2><B> &nbsp; VICIDIAL REMOTE AGENTS: <? echo "$PHP_AUTH_USER " ?> &nbsp; <a href="<? echo $PHP_SELF ?>?force_logout=1"><FONT FACE="ARIAL,HELVETICA" COLOR=WHITE SIZE=1>Logout</a></TD><TD ALIGN=RIGHT><FONT FACE="ARIAL,HELVETICA" COLOR=WHITE SIZE=2><B><? echo date("l F j, Y G:i:s A") ?> &nbsp; </TD></TR>
+<TR BGCOLOR=#F0F5FE><TD ALIGN=LEFT COLSPAN=2><FONT FACE="ARIAL,HELVETICA" COLOR=BLACK SIZE=1> &nbsp; <a href="./vdremote.php"><FONT FACE="ARIAL,HELVETICA" COLOR=BLACK SIZE=1>MODIFY</a> | <a href="./vdremote.php?ADD=61111&user=<? echo "$PHP_AUTH_USER" ?>"><FONT FACE="ARIAL,HELVETICA" COLOR=BLACK SIZE=1>STATUS</a> | <a href="./vdremote.php?ADD=71111&user=<? echo "$PHP_AUTH_USER" ?>"><FONT FACE="ARIAL,HELVETICA" COLOR=BLACK SIZE=1>INBOUND STATS</a></TD></TR>
+
+
+<TR><TD ALIGN=LEFT COLSPAN=2>
+<? 
+
+
+
+######################
+# ADD=31111 modify remote agents info in the system
+######################
+
+if ($ADD==31111)
+{
+	echo "<FONT FACE=\"ARIAL,HELVETICA\" COLOR=BLACK SIZE=2>";
+
+	$stmt="SELECT * from vicidial_remote_agents where remote_agent_id='" . mysql_real_escape_string($remote_agent_id) . "';";
+	$rslt=mysql_query($stmt, $link);
+	$row=mysql_fetch_row($rslt);
+	$remote_agent_id =	$row[0];
+	$user_start =		$row[1];
+	$number_of_lines =	$row[2];
+	$server_ip =		$row[3];
+	$conf_exten =		$row[4];
+	$status =			$row[5];
+	$campaign_id =		$row[6];
+
+echo "<br>MODIFY A REMOTE AGENTS ENTRY: $row[0]<form action=$PHP_SELF method=POST>\n";
+echo "<input type=hidden name=ADD value=41111>\n";
+echo "<input type=hidden name=remote_agent_id value=\"$row[0]\">\n";
+echo "<center><TABLE width=600 cellspacing=3>\n";
+echo "<tr bgcolor=#B6D3FC><td align=right>User ID Start: </td><td align=left>$user_start</td></tr>\n";
+echo "<tr bgcolor=#B6D3FC><td align=right>Number of Lines: </td><td align=left><input type=text name=number_of_lines size=3 maxlength=3 value=\"$number_of_lines\"> (numbers only)</td></tr>\n";
+echo "<tr bgcolor=#B6D3FC><td align=right>Server IP: </td><td align=left>$row[3]</td></tr>\n";
+echo "<tr bgcolor=#B6D3FC><td align=right>External Extension: </td><td align=left><input type=text name=conf_exten size=20 maxlength=20 value=\"$conf_exten\"> (number dialed to reach agents [i.e. 913125551212])</td></tr>\n";
+echo "<tr bgcolor=#B6D3FC><td align=right>Status: </td><td align=left><select size=1 name=status><option SELECTED>ACTIVE</option><option>INACTIVE</option><option SELECTED>$status</option></select></td></tr>\n";
+echo "<tr bgcolor=#B6D3FC><td align=right>Campaign: </td><td align=left>$campaign_id</td></tr>\n";
+echo "<tr bgcolor=#B6D3FC><td align=right>Inbound Groups: </td><td align=left>\n";
+echo "$groups_list";
+echo "</td></tr>\n";
+echo "<tr bgcolor=#B6D3FC><td align=center colspan=2><input type=submit name=submit value=submit></td></tr>\n";
+echo "</TABLE></center>\n";
+echo "NOTE: It can take up to 30 seconds for changes submitted on this screen to go live\n";
+
+}
+
+
+
+
+######################
+# ADD=41111 modify remote agents info in the system
+######################
+
+if ($ADD==41111)
+{
+	echo "<FONT FACE=\"ARIAL,HELVETICA\" COLOR=BLACK SIZE=2>";
+
+	 if ( (strlen($number_of_lines) < 1) or (strlen($conf_exten) < 2) )
+		{echo "<br>REMOTE AGENTS NOT MODIFIED - Please go back and look at the data you entered\n";}
+	 else
+		{
+		$stmt="UPDATE vicidial_remote_agents set number_of_lines='" . mysql_real_escape_string($number_of_lines) . "', conf_exten='" . mysql_real_escape_string($conf_exten) . "', status='" . mysql_real_escape_string($status) . "', closer_campaigns='" . mysql_real_escape_string($groups_value) . "' where remote_agent_id='" . mysql_real_escape_string($remote_agent_id) . "';";
+		$rslt=mysql_query($stmt, $link);
+
+#		echo "$stmt\n";
+		echo "<br>REMOTE AGENTS MODIFIED\n";
+
+		### LOG CHANGES TO LOG FILE ###
+		$fp = fopen ("./admin_changes_log.txt", "a");
+		fwrite ($fp, "$date|MODIFY REMOTE AGENTS ENTRY     |$PHP_AUTH_USER|$ip|$stmt|\n");
+		fclose($fp);
+
+		}
+
+	$stmt="SELECT * from vicidial_remote_agents where remote_agent_id='" . mysql_real_escape_string($remote_agent_id) . "';";
+	$rslt=mysql_query($stmt, $link);
+	$row=mysql_fetch_row($rslt);
+	$remote_agent_id =	$row[0];
+	$user_start =		$row[1];
+	$number_of_lines =	$row[2];
+	$server_ip =		$row[3];
+	$conf_exten =		$row[4];
+	$status =			$row[5];
+	$campaign_id =		$row[6];
+
+echo "<br>MODIFY A REMOTE AGENTS ENTRY: $row[0]<form action=$PHP_SELF method=POST>\n";
+echo "<input type=hidden name=ADD value=41111>\n";
+echo "<input type=hidden name=remote_agent_id value=\"$row[0]\">\n";
+echo "<center><TABLE width=600 cellspacing=3>\n";
+echo "<tr bgcolor=#B6D3FC><td align=right>User ID Start: </td><td align=left>$user_start</td></tr>\n";
+echo "<tr bgcolor=#B6D3FC><td align=right>Number of Lines: </td><td align=left><input type=text name=number_of_lines size=3 maxlength=3 value=\"$number_of_lines\"> (numbers only)</td></tr>\n";
+echo "<tr bgcolor=#B6D3FC><td align=right>Server IP: </td><td align=left>$row[3]</td></tr>\n";
+echo "<tr bgcolor=#B6D3FC><td align=right>External Extension: </td><td align=left><input type=text name=conf_exten size=20 maxlength=20 value=\"$conf_exten\"> (number dialed to reach agents [i.e. 913125551212])</td></tr>\n";
+echo "<tr bgcolor=#B6D3FC><td align=right>Status: </td><td align=left><select size=1 name=status><option SELECTED>ACTIVE</option><option>INACTIVE</option><option SELECTED>$status</option></select></td></tr>\n";
+echo "<tr bgcolor=#B6D3FC><td align=right>Campaign: </td><td align=left>$campaign_id</td></tr>\n";
+echo "<tr bgcolor=#B6D3FC><td align=right>Inbound Groups: </td><td align=left>\n";
+echo "$groups_list";
+echo "</td></tr>\n";
+echo "<tr bgcolor=#B6D3FC><td align=center colspan=2><input type=submit name=submit value=submit></td></tr>\n";
+echo "</TABLE></center>\n";
+echo "NOTE: It can take up to 30 seconds for changes submitted on this screen to go live\n";
+
+}
+
+
+
+
+######################
+# ADD=61111 status of remote agent in the system and active calls and queue
+######################
+
+if ($ADD==61111)
+{
+	echo "<FONT FACE=\"Courier\" COLOR=BLACK SIZE=2><PRE>";
+
+	 if ( (strlen($server_ip) < 2) or (strlen($user) < 2) )
+		{echo "<br>REMOTE AGENTS ERROR - Please go back and look at the data you entered\n";}
+	 else
+		{
+
+		$users_list = '';
+		$k=0;
+		while($k < $number_of_lines)
+			{
+			$nextuser=($user + $k);
+			$users_list .= "'" . mysql_real_escape_string($nextuser) . "',";
+			$k++;
+			}
+		$users_list = preg_replace("/.$/","",$users_list);
+
+		echo "VICIDIAL: Remote Agent Time On Calls                                        $NOW_TIME\n\n";
+		echo "+------------|--------+--------------+------------+--------+---------------------+---------+\n";
+		echo "| STATION    | USER   | LEADID       | CHANNEL    | STATUS | START TIME          | MINUTES |\n";
+		echo "+------------|--------+--------------+------------+--------+---------------------+---------+\n";
+
+
+		$stmt="select extension,user,lead_id,channel,status,last_call_time,UNIX_TIMESTAMP(last_call_time),UNIX_TIMESTAMP(last_call_finish) from vicidial_live_agents where status NOT IN('PAUSED') and server_ip='" . mysql_real_escape_string($server_ip) . "' and user IN($users_list) order by extension;";
+		$rslt=mysql_query($stmt, $link);
+		if ($DB) {echo "$stmt\n";}
+		$talking_to_print = mysql_num_rows($rslt);
+			if ($talking_to_print > 0)
+			{
+			$i=0;
+			while ($i < $talking_to_print)
+				{
+				$leadlink=0;
+				$row=mysql_fetch_row($rslt);
+					if (eregi("READY|PAUSED",$row[4]))
+					{
+					$row[3]='';
+					$row[5]=' - WAITING - ';
+					$row[6]=$row[7];
+					}
+				$extension =		sprintf("%-10s", $row[0]);
+				$user =				sprintf("%-6s", $row[1]);
+				$leadid =			sprintf("%-12s", $row[2]);
+				if ($row[2] > 0) 
+					{
+					$leadidLINK=$row[2];
+					$leadlink++;
+					if ( eregi("QUEUE",$row[4]) ) {$row[6]=$STARTtime;}
+					$leadid = "<a href=\"./remote_dispo.php?lead_id=$row[2]&call_began=$row[6]\" target=\"_blank\">$leadid</a>";
+					}
+				$channel =			sprintf("%-10s", $row[3]);
+					$cc=0;
+				while ( (strlen($channel) > 10) and ($cc < 100) )
+					{
+					$channel = eregi_replace(".$","",$channel);   
+					$cc++;
+					if (strlen($channel) <= 10) {$cc=101;}
+					}
+				$status =			sprintf("%-6s", $row[4]);
+				$start_time =		sprintf("%-19s", $row[5]);
+				$call_time_S = ($STARTtime - $row[6]);
+
+				$call_time_M = ($call_time_S / 60);
+				$call_time_M = round($call_time_M, 2);
+				$call_time_M_int = intval("$call_time_M");
+				$call_time_SEC = ($call_time_M - $call_time_M_int);
+				$call_time_SEC = ($call_time_SEC * 60);
+				$call_time_SEC = round($call_time_SEC, 0);
+				if ($call_time_SEC < 10) {$call_time_SEC = "0$call_time_SEC";}
+				$call_time_MS = "$call_time_M_int:$call_time_SEC";
+				$call_time_MS =		sprintf("%7s", $call_time_MS);
+				$G = '';		$EG = '';
+				if ($call_time_M_int >= 5) {$G='<SPAN class="yellow"><B>'; $EG='</B></SPAN>';}
+				if ($call_time_M_int >= 10) {$G='<SPAN class="orange"><B>'; $EG='</B></SPAN>';}
+
+				echo "| $G$extension$EG | $G$user$EG | $G$leadid$EG | $G$channel$EG | $G$status$EG | $G$start_time$EG | $G$call_time_MS$EG |\n";
+
+				$i++;
+				}
+
+				echo "+------------|--------+--------------+------------+--------+---------------------+---------+\n";
+				echo "  $i agents logged in on server $server_ip\n\n";
+
+				echo "  <SPAN class=\"yellow\"><B>          </SPAN> - 5 minutes or more on call</B>\n";
+				echo "  <SPAN class=\"orange\"><B>          </SPAN> - Over 10 minutes on call</B>\n";
+
+			}
+			else
+			{
+			echo "**************************************************************************************\n";
+			echo "********************************* NO AGENTS ON CALLS *********************************\n";
+			echo "**************************************************************************************\n";
+			}
+		}
+
+echo "</PRE>\n\n";
+
+}
+
+
+######################
+# ADD=71111 stats for remote agents from closer logs(vicidial_closer_log)
+######################
+
+if ($ADD==71111)
+{
+	echo "<FORM ACTION=\"$PHP_SELF\" METHOD=GET>\n";
+	echo "<INPUT TYPE=TEXT NAME=query_date SIZE=10 MAXLENGTH=10 VALUE=\"$query_date\">\n";
+	echo "<INPUT TYPE=HIDDEN NAME=ADD VALUE=\"71111\">\n";
+	echo "<INPUT TYPE=HIDDEN NAME=user VALUE=\"$user\">\n";
+	echo "<INPUT TYPE=SUBMIT NAME=SUBMIT VALUE=SUBMIT>\n";
+	echo "</FORM>\n\n";
+	echo "<FONT FACE=\"Courier\" COLOR=BLACK SIZE=2><PRE>";
+
+	 if ( (strlen($server_ip) < 2) or (strlen($user) < 2) )
+		{echo "<br>REMOTE AGENTS ERROR - Please go back and look at the data you entered\n";}
+	 else
+		{
+
+		$users_list = '';
+		$k=0;
+		while($k < $number_of_lines)
+			{
+			$nextuser=($user + $k);
+			$users_list .= "'$nextuser',";
+			$k++;
+			}
+		$users_list = preg_replace("/.$/","",$users_list);
+
+		$stmt="select count(*),sum(length_in_sec) from vicidial_closer_log where call_date >= '$query_date 00:00:01' and call_date <= '$query_date 23:59:59' and user IN($users_list);";
+		$rslt=mysql_query($stmt, $link);
+		$row=mysql_fetch_row($rslt);
+		$in_calls =		$row[0];
+		$in_time =		$row[1];
+			$in_time_M = ($in_time / 60);
+			$in_time_M = round($in_time_M, 2);
+			$in_time_M_int = intval("$in_time_M");
+			$in_time_SEC = ($in_time_M - $in_time_M_int);
+			$in_time_SEC = ($in_time_SEC * 60);
+			$in_time_SEC = round($in_time_SEC, 0);
+			if ($in_time_SEC < 10) {$in_time_SEC = "0$in_time_SEC";}
+			$in_time_MS = "$in_time_M_int:$in_time_SEC";
+			$in_time_MS =		sprintf("%7s", $in_time_MS);
+
+		echo "VICIDIAL: Remote Agent inbound stats                                        $NOW_TIME\n\n";
+		echo "\n";
+		echo "Total calls taken $query_date:    $in_calls\n";
+		echo "Total talk time on $query_date:   $in_time_MS (minutes:seconds)\n";
+		echo "\n";
+		echo "\n";
+		echo "Call list for $query_date:\n";
+		echo "+----------+------------+----------------+------------+--------+---------------------+---------+\n";
+		echo "| USER     | LEADID     | GROUP          | PHONE NUM  | STATUS | CALL TIME           | MINUTES |\n";
+		echo "+----------+------------+----------------+------------+--------+---------------------+---------+\n";
+
+
+		$stmt="select user,lead_id,campaign_id,phone_number,status,call_date,length_in_sec from vicidial_closer_log where call_date >= '$query_date 00:00:01' and call_date <= '$query_date 23:59:59' and user IN($users_list) order by call_date;";
+		$rslt=mysql_query($stmt, $link);
+		if ($DB) {echo "$stmt\n";}
+		$talking_to_print = mysql_num_rows($rslt);
+			if ($talking_to_print > 0)
+			{
+			$i=0;
+			while ($i < $talking_to_print)
+				{
+				$row=mysql_fetch_row($rslt);
+				$user =				sprintf("%-8s", $row[0]);
+				$leadid =			sprintf("%-10s", $row[1]);
+				$group =			sprintf("%-14s", $row[2]);
+				$phone =			sprintf("%-10s", $row[3]);
+				$status =			sprintf("%-6s", $row[4]);
+				$start_time =		sprintf("%-19s", $row[5]);
+				$call_time_S =		$row[6];
+
+				$call_time_M = ($call_time_S / 60);
+				$call_time_M = round($call_time_M, 2);
+				$call_time_M_int = intval("$call_time_M");
+				$call_time_SEC = ($call_time_M - $call_time_M_int);
+				$call_time_SEC = ($call_time_SEC * 60);
+				$call_time_SEC = round($call_time_SEC, 0);
+				if ($call_time_SEC < 10) {$call_time_SEC = "0$call_time_SEC";}
+				$call_time_MS = "$call_time_M_int:$call_time_SEC";
+				$call_time_MS =		sprintf("%7s", $call_time_MS);
+				$G = '';		$EG = '';
+	#			if ($call_time_M_int >= 5) {$G='<SPAN class="yellow"><B>'; $EG='</B></SPAN>';}
+	#			if ($call_time_M_int >= 10) {$G='<SPAN class="orange"><B>'; $EG='</B></SPAN>';}
+
+				echo "| $G$user$EG | $G$leadid$EG | $G$group$EG | $G$phone$EG | $G$status$EG | $G$start_time$EG | $G$call_time_MS$EG |\n";
+
+				$i++;
+				}
+
+				echo "+----------+------------+----------------+------------+--------+---------------------+---------+\n";
+	#			echo "  $i agents logged in on server $server_ip\n\n";
+
+	#			echo "  <SPAN class=\"yellow\"><B>          </SPAN> - 5 minutes or more on call</B>\n";
+	#			echo "  <SPAN class=\"orange\"><B>          </SPAN> - Over 10 minutes on call</B>\n";
+
+			}
+			else
+			{
+			echo "**************************************************************************************\n";
+			echo "********************************* NO CALLS ON THIS DAY *******************************\n";
+			echo "**************************************************************************************\n";
+			}
+		}
+
+echo "</PRE>\n\n";
+
+}
+
+
+
+
+
+$ENDtime = date("U");
+
+$RUNtime = ($ENDtime - $STARTtime);
+
+echo "\n\n\n<br><br><br>\n\n";
+
+
+echo "<font size=0>\n\n\n<br><br><br>\nscript runtime: $RUNtime seconds</font>";
+
+
+?>
+
+
+</TD></TR><TABLE>
+</body>
+</html>
+
+<?
+	
+exit; 
+
+
+
+?>
+
+
+
+
+