<?php
session_start();

if ( !isset( $_SESSION[ 'operatorloggedin' ] ) ) {
  header( 'Location: login.php' );
  exit;
}
// Absolute expiration check
if ( isset( $_SESSION[ 'expires_at' ] ) && time() > $_SESSION[ 'expires_at' ] ) {
  session_unset();
  session_destroy();
  header( "Location: login.php?expired=1" );
  exit;
}
$logged_in_user = $_SESSION[ 'name' ];
require_once( __DIR__ . '/../my.php' );

// Query
$sql = "SELECT p.*, c.din, c.name
        FROM itsm_ob_persons p 
		LEFT JOIN itsm_ob_customers c ON c.id = p.customerid
        ORDER BY c.din ASC, p.lastname ASC";
$result = mysqli_query( $con, $sql );

// Authorization check
$sql2 = "SELECT persons FROM itsm_ob_operators WHERE username = ?";
$result2 = mysqli_prepare( $con, $sql2 );
mysqli_stmt_bind_param( $result2, "s", $logged_in_user );
mysqli_stmt_execute( $result2 );
mysqli_stmt_bind_result( $result2, $operators );
mysqli_stmt_fetch( $result2 );
mysqli_stmt_close( $result2 );
if ( $operators == 0 ) {
  header( "Location: ob-menu.php" );
  exit();
}

if ( !$result ) {
  die( "Query failed: " . mysqli_error( $con ) );
}
?>
<?php require_once(__DIR__ . '/nav/nav.php'); ?>
<div class="content">
<?php $module_back_url = 'ob-menu.php'; require(__DIR__ . '/include/module_links.php'); ?>
<center>
  <h1><?= htmlspecialchars(t('Personen')) ?></h1>
</center>
<a href="new_person.php"><?= htmlspecialchars(t('Nieuw Persoon')) ?></a>
<div class="results">
<table border="0" class=results style="width: 100%;">
<thead>
  <tr>
    <th style="text-align: start;"><?= htmlspecialchars(t('Klant')) ?></th>
    <th style="text-align: start;"><?= htmlspecialchars(t('Voornaam')) ?></th>
    <th style="text-align: start;"><?= htmlspecialchars(t('Achternaam')) ?></th>
    <th style="text-align: start;"><?= htmlspecialchars(t('E-mail')) ?></th>
    <th style="text-align: start;"><?= htmlspecialchars(t('Telefoonnummer')) ?></th>
    <th style="text-align: start;"><?= htmlspecialchars(t('Login toegestaan')) ?></th>
    <th style="text-align: start;"><?= htmlspecialchars(t('Actie')) ?></th>
  </tr>
</thead>
<tbody>
  <?php while ($row = mysqli_fetch_assoc($result)): ?>
  <tr>
    <td><?= htmlspecialchars($row['din'] . ' - ' . $row['name']) ?></td>
    <td><?= htmlspecialchars($row['firstname']) ?></td>
    <td><?= htmlspecialchars($row['lastname']) ?></td>
    <td><?= htmlspecialchars($row['email']) ?></td>
    <td><?= htmlspecialchars($row['phone']) ?></td>
    <td><?= $row['allowssp'] == 1 ?
    '<span class="check">✔</span>' :
    '<span class="cross">✖</span>'
    ?></td>
    <td class="tblaction"><a class="btn" href="edit_person.php?id=<?= $row['id'] ?>"><?= htmlspecialchars(t('Open Persoon')) ?></a></td>
  </tr>
  <?php endwhile; ?>
</div>
</div>
<?php require_once(__DIR__ . '/nav/end.php'); ?>
