<?php

ob_start();

function log_event($f, $m)
{
	fput($f,'['.date('jS M Y g:ia').'] '.$m.']'."\n",'a');
}

function fput($f,$d='',$m='a')
{
	if($fp=@fopen($f,$m))
	{
		@fwrite($fp,$d);
		@fclose($fp);
		return true;
	} return false;
}
/*
function calculateChecksum($n) //Any changes need to be copied to gui.gg.co.uk/
{
	$a = 'ngwztpas6hb78d913lyqjovckuifm204r5ex';
	$c = md5($n);
	return substr(strpos($a, substr($c,0,1)),-1,1).substr(strpos($a, substr($c,1,1)),-1,1);
}

function checkChecksum($n)
{
	$a=str_split($n, strlen($n)-2);
	return calculateChecksum($a[0]) == $a[1];
}
*/

$conn = mysql_connect('localhost', 'garageguru', 'Pi0JECxKmLEerI2atSiP') or print mysql_error();
mysql_select_db('gg_client_data', $conn) or print mysql_error();
if(isset($_GET['g']))
{
	print '<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "DTD/xhtml1-transitional.dtd">'."\n";
	print '<html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en-US" lang="en-US">'."\n";
	print '<head>'."\n";
	print '<title>Job Advisories</title>'."\n";
	print '<style type="text/css">'."\n";
	print 'body {'."\n";
	print 'font : 18px Calibri, Tahoma, Verdana;'."\n";
	if(isset($_GET['b'])) print 'background : #'.$_GET['b'].';'."\n";
	print '}'."\n";
	print '</style>'."\n";
	print '<script type="text/javascript">'."\n";
	print 'window.onblur=window.close;'."\n";
	print '</script>'."\n";
	print '</head><body>'."\n";
	
	$debug = print_r($_GET,1);
	

	if(isset($_GET['v']))
	{
		$code = preg_replace('/[^0-9A-Z]+/', '', strtoupper($_GET['v']));
		
		if(strlen($code) == 6)
		{	
			$q = mysql_query("SELECT `database_name` FROM `clients` WHERE `garage_sms_code` = '".preg_replace('/[^A-Z]+/', '', strtoupper($_GET['g']))."';", $conn) OR print mysql_error();
			if(mysql_num_rows($q) > 0)
			{
				$r = mysql_fetch_object($q);
				mysql_select_db('gg_'.$r->database_name, $conn);
			} else
			{
				//log and exit
				exit;
			}

			$j=0;
			$q = mysql_query("SELECT *, UNIX_TIMESTAMP(advisory_due) as adv_due FROM `advisories` INNER JOIN `job_menu` ON advisories.job_item_id = job_menu.job_menu_id INNER JOIN `vehicles` ON advisories.vehicle_id = vehicles.vehicle_id INNER JOIN `customers` ON vehicles.customer_id = customers.customer_id WHERE vehicles.advisory_code = '".$code."' ORDER BY advisory_due;") or die(mysql_error());
			if(mysql_num_rows($q) > 0)
			{
				print '<div style="margin:10px">';
				while($r = mysql_fetch_assoc($q))
				{
					if($j === 0) print 'Hello '.$r['title'].' '.$r['surname'].',<br /><br />The following jobs are listed for your '.$r['make'].' '.$r['model'].':<br /><ul>'."\n";
					print '<li>'.$r['job_name'].' (due on '.date('jS M y', $r['adv_due']).')</li>'."\n";
					$j++;
				}
				print '</ul></div>';
			} else print 'No Jobs Found';
		} else print 'Invalid SMS Code';
		
		mail('dean@libritech.com','Advisory Lookup Script',ob_get_contents().'<br /><br /><pre>'.$debug.'</pre>','Content-Type: text/html'."\r\n");
	} else
	{
		print '<form action="/Advisories/" method="get">'."\n";
		print '<input type="hidden" name="g" value="'.$_GET['g'].'" />'."\n";
		if(isset($_GET['b'])) print '<input type="hidden" name="b" value="'.$_GET['b'].'" />'."\n";
		print '<div style="margin:80px auto 30px auto; text-align:center">'."\n";
		print 'Please enter your SMS Code<br />below and click submit.<br /><br />'."\n";
		print 'SMS Code: <input type="text" name="v" /><br /><br />'."\n";
		print '<input type="submit" value="Submit" />'."\n";
		print '</div></form>'."\n";
		
		print '<div style="text-align:center; font:9px Tahoma; margin:auto"><a style="text-decoration:none" href="http://www.garageguru.co.uk/">Powered by Garage Guru</a></div>'."\n";
	}
	print '</body></html>'."\n";

	//log_event('request.log', 'Activation Failed, Licence Key: '.$_POST['licence']);
} else header('Location: http://www.gurusoftware.co.uk/');

?>