<?
session_start();

$document = array();
$script = "";
$init = "";

require "../lib/getnpost.php";
require "../lib/config.php";
require "../lib/dbconnect.php";
require "../lib/auth.php";
require "../lib/common.php";

require "helpdesk_common.php";
require "hdboard_common.php";

function mkHDRead(
	&$document, &$script, &$init, $hdcat, $page, $msid, $sn, $ss, $sc, $st
) {
	global $PSYCHEID, $PsycheAdmin, $BDPRIV;

	$ste = urlencode($st);

	$result = mysql_query("select
ms.msid, ms.usid, us.usname, ms.mstime, ms.msread, ms.mssubject, ms.mscontent
from messages as ms
left join users as us on ms.usid = us.usid
where ms.msid = '$msid'");

	list($msid, $usid, $usname, $mstime, $msread, $mssubject, $mscontent)
	= mysql_fetch_row($result);

	if ($hdcat != "F") {
		$usname = "ÇÁ·ÎÀÚÀÌ³Ê";
	}

	if ($usid != $PSYCHEID) {
		mysql_query("update messages set msread = msread + 1 where msid = '$msid'");
	}

	# Ã·ºÎ

	$result = mysql_query("select atid, atname
from attaches
where msid = '$msid'
order by atid");

	$atstring = <<<EOS
<table border="0" cellpadding="0" cellspacing="0">
<tr><td style="padding: 3px 0px;">

EOS;

	while (list($ati, $atn) = mysql_fetch_row($result)) {
		$atstring .= <<<EOS
<a href="/community/transfer.php?atid=$ati" style="line-height: 18px;">$atn</a><br />

EOS;
	}

	$atstring .= <<<EOS
</td></tr>
</table>

EOS;

	# ´ñ±Û

	$result = mysql_query("select
cm.cmid, cm.usid, us.usname, cm.cmcontent, cm.cmtime
from comments as cm
left join users as us on cm.usid = us.usid
where cm.msid = '$msid'
order by cm.cmid");

	$comments = "";

	while (list($cmi, $usi, $usn, $cmc, $cmt) = mysql_fetch_row($result)) {
		if ($usi == $PSYCHEID || $PsycheAdmin) {
			$cmdelstring = <<<EOS
<a href="javascript:delComment($cmi)"><img src="/images/re_delete.gif" width="15" height="15" border="0"></a>
EOS;
		} else {
			$cmdelstring = "";
		}

		$comments .= <<<EOS
            <table width="670" border="0" cellspacing="0" cellpadding="0">
<tr> 
                <td height="1" colspan="2" bgcolor="#DADADA"></td>
              </tr>
              <tr> 
                <td width="635" style="padding: 5px;"><img src="/images/ball_black.gif" width="3" height="11"> 
                  $usn ($cmt)</td>
                <td width="15" style="padding: 5px;">$cmdelstring</td>
              </tr>
              <tr> 
<td colspan="2" style="padding: 5px; padding-left:10px">$cmc</td>
              </tr>
            </table> 

EOS;
	}

	if ($PSYCHEID && ($BDPRIV == "C" || $PsycheAdmin)) {
		$comments .= <<<EOS
            <table width="670" border="0" cellspacing="0" cellpadding="5">
              <tr> 
                <td height="7" ></td>
              </tr>
              <tr> 
                <td height="70" align="center" bgcolor="F7F6F6"> 
<table width="650" border="0" cellspacing="0" cellpadding="0">
<form id="commentform" action="{$_SERVER['PHP_SELF']}" method="post"
 onsubmit="return checkComment();">
                    <tr> 
                      <td width="571">
<textarea id="cmcontent" name="cmcontent" class="box02" style="width: 548px; height: 46px;"></textarea> 
<input type="hidden" name="hdcat" value="$hdcat" />
<input type="hidden" name="page" value="$page" />
<input type="hidden" name="msid" value="$msid" />
<input type="hidden" name="sn" value="$sn" />
<input type="hidden" name="ss" value="$ss" />
<input type="hidden" name="sc" value="$sc" />
<input type="hidden" name="st" value="$st" />
<input type="hidden" name="commentsubmit" value="1" />
                      </td>
                      <td width="79"><input type="image" src="/images/b_comment.gif" width="91" height="43"></td>
                    </tr>
</form>
                  </table>
                </td>
              </tr>
            </table>

EOS;
	} else {
		$comments .= <<<EOS
            <table width="670" border="0" cellspacing="0" cellpadding="0">
              <tr> 
                <td height="1" colspan="2" bgcolor="#DADADA"></td>
              </tr>
            </table>

EOS;
	}


	$document['main'] .= <<<EOS
            <table width="670" border="0" cellspacing="0" cellpadding="0">
<tr>
                <td height="5" bgcolor="3EA5DA"></td>
              </tr>
              <tr>
                <td height="2"></td>
              </tr>
            </table>
            <table width="670" border="0" cellspacing="0" cellpadding="0">
              <tr>
                <td width="15"><img src="/community/images/boxleft.gif" width="15" height="35"></td>
                <td width="640" background="/community/images/boxpat.gif"><table width="640" border="0" cellspacing="0" cellpadding="0">
                    <tr> 
                      <td width="70" align="center"><img src="/helpdesk/images/t_subject.gif" width="22" height="11"></td>
                      <td width="1"><img src="/helpdesk/images/boxtitle_bar.gif" width="1" height="15"></td>
                      <td style="padding-left:15px">$mssubject</td>
                    </tr>
                  </table></td>
                <td width="15"><img src="/community/images/boxright.gif" width="15" height="35"></td>
              </tr>
            </table>
           
            <table width="668" border="0" cellspacing="0" cellpadding="0">
              <tr> 
                <td width="668" height="30" align="center"> <table width="640" border="0" cellspacing="0" cellpadding="0">
<tr> 
                      <td width="70" align="center"><img src="/helpdesk/images/t_name.gif" width="32" height="11"></td>
                      <td width="1"><img src="/helpdesk/images/boxtitle_bar.gif" width="1" height="15"></td>
                      <td width="386" style="padding-left:15px">$usname</td>
                      <td width="183" align="right">($mstime, Hit: $msread)</td>
                    </tr>
                  </table>
                </td>
              </tr>
			  
            </table>
			<table width="670" border="0" cellspacing="0" cellpadding="0">
              <tr> 
                <td height="1" bgcolor="E5E3E3"></td>
              </tr>
           
            </table>
			<table width="670" border="0" cellspacing="0" cellpadding="0">
              <tr> 
                <td height="30" align="center" bgcolor="F7F6F6"><table width="640" border="0" cellspacing="0" cellpadding="0">
                    <tr> 
                      <td width="70" align="center"><img src="/helpdesk/images/t_file.gif" width="42" height="11"></td>
                      <td width="1"><img src="/helpdesk/images/boxtitle_bar.gif" width="1" height="15"></td>
                      <td style="padding-left:15px">$atstring</td>
                    </tr>
                  </table></td>
              </tr>
             
            </table>
			<table width="670" border="0" cellspacing="0" cellpadding="0">
              <tr> 
                <td height="1" bgcolor="E5E3E3"></td>
              </tr>
           
            </table>
            <table width="670" border="0" cellspacing="0" cellpadding="10">
              <tr> 
<!--	         <td width="85" height="250">&nbsp;</td>
                <td width="585" height="200" valign="top" style="line-height:18px">
-->
		<td width="1" height="250"></td>
                <td width="668" height="200" valign="top" style="line-height:18px">
$mscontent
                </td>
		<td width="1" height="250"></td>
              </tr>
            </table>
            <table width="670" border="0" cellspacing="0" cellpadding="0">
              <tr> 
                <td height="1" bgcolor="3EA5DA"></td>
              </tr>
              <tr> 
                <td height="25" align="center" bgcolor="F7F6F6">&nbsp;</td>
              </tr>
            </table>

            <table width="670" border="0" cellspacing="0" cellpadding="5">
              <tr> 
                <td width="329">

EOS;

	if ($PSYCHEID && ($BDPRIV == "C" || $PsycheAdmin)) {
		$document['main'] .= <<<EOS
<a href="hdwrite.php?hdcat=$hdcat&page=$page&msid=$msid&sn=$sn&ss=$ss&sc=$sc&st=$ste"><img src="/images/b_reply.gif" width="52" height="20" border="0"></a>

EOS;

		$writestring = <<<EOS
<a href="hdwrite.php?hdcat=$hdcat&page=$page&sn=$sn&ss=$ss&sc=$sc&st=$ste"><img src="/images/b_write.gif" width="52" height="20" border="0"></a>

EOS;
	}

	if ($usid == $PSYCHEID || $PsycheAdmin) {
		$document['main'] .= <<<EOS
<a href="hdedit.php?hdcat=$hdcat&page=$page&msid=$msid&sn=$sn&ss=$ss&sc=$sc&st=$ste"><img src="/images/b_modify.gif" width="52" height="20" border="0"></a>
<a href="javascript:delMessage($msid)"><img src="/images/b_delete.gif" width="52" height="20" border="0"></a>

EOS;
	}

	$document['main'] .= <<<EOS
                </td>
                <td width="321" align="right">
$writestring
<a href="hdlist.php?hdcat=$hdcat&page=$page&sn=$sn&ss=$ss&sc=$sc&st=$ste"><img src="/images/b_list.gif" width="52" height="20" border="0"></a>
                </td>
              </tr>
            </table>
            <br>

$comments

EOS;

	$script .= <<<EOS
function delMessage(n) {
	if (confirm("ÀÌ ±ÛÀ» »èÁ¦ÇÏ½Ã°Ú½À´Ï±î?")) {
		window.location.href = "{$_SERVER['PHP_SELF']}?hdcat=$hdcat&page=$page&sn=$sn&ss=$ss&sc=$sc&st=$ste&msdel=" + n;
	}
}

function delComment(n) {
	if (confirm("ÀÌ ´ñ±ÛÀ» »èÁ¦ÇÏ½Ã°Ú½À´Ï±î?")) {
		window.location.href = "{$_SERVER['PHP_SELF']}?hdcat=$hdcat&page=$page&msid=$msid&cmdel=" + n;
	}
}

function checkComment() {
	f = document.getElementById("commentform");

	if (!f.cmcontent.value) {
		alert("´ñ±Û ³»¿ëÀ» ÀÔ·ÂÇØ ÁÖ¼¼¿ä.");
		f.cmcontent.focus();

		return false;
	}

	return true;
}

EOS;
}

## Start

mkHDBoardCommon($document, $HELPDESK_BDIDS[$hdcat]);

if ($commentsubmit) {
	if (!$PSYCHEID || ($BDPRIV != "C" && !$PsycheAdmin)) {
		header("Location: /");

		return;
	}

	$ste = urlencode($st);

	$cmcontent = nl2br(htmlspecialchars($cmcontent));

	mysql_query("insert into comments
(usid, msid, cmcontent, cmtime) values
('$PSYCHEID', '$msid', '$cmcontent', now())");

	mysql_query("update messages set mscomments = mscomments + 1
where msid = '$msid'");

	header("Location: {$_SERVER['PHP_SELF']}?hdcat=$hdcat&page=$page&msid=$msid&sn=$sn&ss=$ss&sc=$sc&st=$ste");

	return;
} elseif ($msdel) {
	if (!$PSYCHEID || ($BDPRIV != "C" && !$PsycheAdmin)) {
		header("Location: /");

		return;
	}

	$ste = urlencode($st);

	$result = mysql_query("select
usid, msgroup, msdepth, msseq, msattaches, mscomments
from messages
where msid = '$msdel'");

	list($usid, $msgroup, $msdepth, $msseq, $msattaches, $mscomments)
	= mysql_fetch_row($result);

	if ($usid == $PSYCHEID || $PsycheAdmin) {
		mysql_query("delete from messages where msid = '$msdel'");

		if ($msgroup) {
			$result = mysql_query("select max(msseq) from messages
where msgroup = '$msgroup' and msdepth = '$msdepth' and msseq < '$msseq'");

			list($msseqmax) = mysql_fetch_row($result);

			if ($msseqmax) {
				$msseqwherestring = "and msseq > '$msseqmax'";
			}

			mysql_query("update messages set msdepth = msdepth - 1
where msgroup = '$msgroup' and msseq < '$msseq' $msseqwherestring");
		}

		if ($msattaches) {
			$result = mysql_query("select atid, atname from attaches
where msid = '$msdel'");

			while (list($ati, $atn) = mysql_fetch_row($result)) {
				$atpath = $BOARD_ATTACHPATH . "/AT_" . $ati . "_" . $atn;

				if (file_exists($atpath)) {
					unlink($atpath);
				}
			}

			mysql_query("delete from attaches where msid = '$msdel'");
		}

		if ($mscomments) {
			mysql_query("delete from comments where msid = '$msdel'");
		}

		header("Location: hdlist.php?hdcat=$hdcat&page=$page&sn=$sn&ss=$ss&sc=$sc&st=$ste");

		return;
	} else {
		header("Location: /");

		return;
	}
} elseif ($cmdel) {
	if (!$PSYCHEID || ($BDPRIV != "C" && !$PsycheAdmin)) {
		header("Location: /");

		return;
	}

	$ste = urlencode($st);

	$result = mysql_query("select cm.usid
from comments as cm
where cm.cmid = '$cmdel'");

	list($usid) = mysql_fetch_row($result);

	if ($usid == $PSYCHEID || $PsycheAdmin) {
		mysql_query("delete from comments where cmid = '$cmdel'");

		mysql_query("update messages set mscomments = mscomments - 1
where msid = '$msid'");

		header("Location: {$_SERVER['PHP_SELF']}?hdcat=$hdcat&page=$page&msid=$msid&sn=$sn&ss=$ss&sc=$sc&st=$ste");

		return;
	} else {
		header("Location: /");

		return;
	}
}

mkHDRead($document, $script, $init, $hdcat, $page, $msid, $sn, $ss, $sc, $st);

require "helpdesk_template.php";
?>
