config.php

<?php
/**
 * Configuration/Administration page — system settings, user management, and data tables.
 *
 * Provides administrative functions including: system settings (map defaults,
 * notification preferences, time zones), user account management (add/edit/delete),
 * incident type configuration, notification subscriptions, facility management,
 * unit type configuration, and various system maintenance operations.
 * Access restricted to administrators and super-admins.
 *
 * @package TicketsCAD
 * @since   v3.0
 */
/*
5/28/08 - revised map center to allow icon drag
6/4/08 - added do_log($GLOBALS['LOG_INCIDENT_DELETE']
6/4/08 - added submit()
6/4/08 - corrected table names
6/9/08 - added user type 'super'
9/13/08 - refresh upper frame
9/16/08 remove 'responder.php'
9/16/08 draggable false, pending getting it to work
9/21/08 revised 'top load' via body tag
9/24/08 permissions revised per suggestion JB
10/8/08    'User' revised to 'Operator'
10/8/08    hide 'Unit types'
10/19/08 added trim()
10/23/08 revised notify validation and for severity handling
10/23/08 profile validation added
11/30/08 table user - added md5 password conversion, skip passwd edit if blank
12/1/08 revised profile edit passwd handling
12/2/08 check for dupl userid's added
12/15/08 added member level
1/17/09  added `auto_route` setting to config.inc.php
1/21/09 show_butts, addr lookup button
1/27/09 added super-only notify execute, quote_smart added
3/3/09 correction for MEMBER user type
4/5/09 default map zoom added
5/4/09 handle usng as input
6/4/09 added Constituents and City tables
6/27/09    added function do_glat() - hidden 7/23/09
6/30/09 added do_mail_win(), renamed to do_all_mail
7/16/09    floating div for 'settings' buttons
7/24/09    hide Glat();
7/28/09    Open Glat()
7/28/09    Add function do_gtrack and function do_locatea for test scripts plus links
10/6/09 Added links to Facility Status and Facility Types settings
11/5/09 Changed window caption, per IE complaint
11/17/09 removed password update from 'edit my profile'
9/26/09 corrections to floating div, per IE
11/30/09 dump-to-screen copy function added
1/23/10 table 'session' removed, revised 'settings applied' message and avoid re-load of top frame
3/11/10 Cities table link removed
4/10/10 hide 'board' button if setting = 0
5/30/10    function do_about() added
6/22/10 audio alarm test added
6/25/10 NULL dob handling
7/5/10 super only, per KJ email
7/11/10 function $() added, corr's to type='unit'
7/16/10 settings edit limited to Super's, $asterisk PIN control added
8/8/10 bypass map operations if internet false
8/13/10 map.setUIToDefault();
8/13/10 gettext/captions table processing added
8/21/10 captions table processor link added
8/27/10 profile change now includes passwords
9/8/10 $mode handling added
10/28/10 revised user edit permissions to limit admin edits to self only
10/28/10 added config setting for add tickets module
11/11/10 incident numbering added
11/13/10 - top notice added
12/1/10 get_text patient added
12/5/10 UTM, OSGB conversion added
1/22/11 allow UC in email addr's
2/3/11 added hints processor
2/28/11 added places processor
3/15/11 added css color tables configuration capability, add base64encode/decode to incident numbering function
4/23/11 cloud admin links added
5/4/11 get_new_colors() added
5/23/11 notifies corrected, Cancel button changed to submit can_form;
5/26/11 added intrusion detection, sql insertion prevention
6/10/11 added changes required to support regional capability (user region assignment).
7/5/11 added Open GTS test
7/30/11 Map markup and categories replaces landb
9/27/11 Added Internal Tracker test
3/11/11 Added link to cleanse regions file.
12/19/11 courses table tandling, per request T Carswell
3/4/12 disbled 86-char key check
3/5/12 obtain key from ...
3/22/12 ics 213 link
4/25/12 audio window correction
6/20/12 applied get_text() to 'Unit'
10/23/12 Added Level 'Service User' for Portal, added messaging
3/29/2013 added include for GMaps V3 setcenter
5/24/2013 ics 213 link made conditional on setting
6/18/2013 added link for insurance table maint.
7/5/13 Added link to native mail test script
9/10/13 Added links for road conditions, local maps, personnel table for roster user and Warn locations

*/
$asterisk = false;        // user: change to TRUE  in order to make the Pin Control table accessible.
if (!defined('E_DEPRECATED')) {
    define('E_DEPRECATED', 8192);
}        // 11/7/09
error_reporting(E_ALL ^ E_DEPRECATED);
session_start();
session_write_close();
require_once './incs/functions.inc.php';
do_login(basename(__FILE__));    // session_start()
require_once './incs/config.inc.php';
require_once './incs/usng.inc.php';
require_once './incs/member.inc.php';
$st_size = (get_variable("locale") == 0) ? 2 : 4;
if ($istest) {
    foreach ($_POST as $VarName => $VarValue) {
        echo "POST:$VarName => $VarValue, <BR />";
    };
    foreach ($_GET as $VarName => $VarValue) {
        echo "GET:$VarName => $VarValue, <BR />";
    };
    echo "<BR/>";
}

// 3/14/26 - CSRF validation for POST requests that include a token
// Forms served by this page have tokens auto-injected via JS; cross-page navigation POSTs don't
if ($_SERVER['REQUEST_METHOD'] === 'POST' && isset($_POST['csrf_token'])) {
    if (!csrf_verify($_POST['csrf_token'])) {
        print '<br><br><div style="text-align:center"><b>Security Error:</b> Your session has expired or the form token is invalid. Please <a href="' . e(basename(__FILE__)) . '">go back</a> and try again.</div>';
        exit();
    }
}

// 3/14/26 - Output buffering to auto-inject CSRF tokens into all forms
// Appends script at end of output (browsers execute it even after </HTML>)
ob_start(function($html) {
    $token = csrf_token();
    $script = "\n" . '<script>(function(){var t=\'' . addslashes($token) . '\';document.querySelectorAll(\'form\').forEach(function(f){if(!f.querySelector(\'input[name="csrf_token"]\')){var i=document.createElement(\'input\');i.type=\'hidden\';i.name=\'csrf_token\';i.value=t;f.appendChild(i);}});})();</script>';
    return $html . $script;
});

$mode = (array_key_exists('mode', $_REQUEST)) ? $_REQUEST['mode'] : 0;        // 9/8/10
$patient = get_text("Patient");                                                // 12/1/10
// Replaced extract — only $func is needed for tab routing (Phase 2 cleanup)
$func = $_REQUEST['func'] ?? 'summ';
$id = $_REQUEST['id'] ?? '';
$reload_top = false;

$query = "SELECT `user` FROM `{$GLOBALS['mysql_prefix']}user` WHERE `id` <> ?";        // 12/2/08
$result = db_query($query, [$_SESSION['user_id']]);
$users = "";
while ($row = stripslashes_deep($result->fetch_assoc())) {
    $users .= trim($row['user']) . "\t";
}

function get_org_control($the_userid, $currOrg)
{
    $sel1 = ($the_userid == 0) ? "SELECTED" : "";
    $query = "SELECT * FROM `{$GLOBALS['mysql_prefix']}organisations`";        // 12/2/08
    $result = db_query($query);
    $org_cntl = "<SELECT NAME='frm_org_cntl'><OPTION value=0 " . $sel1 . ">SELECT ONE</OPTION>";
    while ($row = stripslashes_deep($result->fetch_assoc())) {
        $sel2 = ($currOrg == $row['id']) ? "SELECTED" : "";
        $org_cntl .= "<OPTION value=" . $row['id'] . " " . $sel2 . ">" . $row['name'] . "</OPTION>";
    }
    $org_cntl .= "</SELECT>";
    return $org_cntl;
}

function read_directory($directory, $ext = null)
{
    $the_ret = array();
    $dirhandler = opendir($directory);
    $i = 0;
    while ($file = readdir($dirhandler)) {
        if ($file != '.' && $file != '..') {
            $i++;
            $temp = explode(".", $file);
            $count = count($temp);
            $extension = $temp[$count - 1];
            if (!$ext || $ext == $extension) {
                $the_ret[$i] = $file;
            }
        }
    }
    closedir($dirhandler);
    return $the_ret;
}

function dump_db()
{
    require_once './incs/MySQLDump.class.php';
    include './incs/mysql.inc.php';
    $the_now = safe_strtotime(mysql_format_date(time() - (get_variable('delta_mins') * 60)));
    $backup = new MySQLDump(); //create new instance of MySQLDump
    $the_db = $mysql_prefix . $mysql_db;
    $backup->connect($mysql_host, $mysql_user, $mysql_passwd, $the_db);        // connect
    if (!$backup->connected) {
        die('Error: ' . $backup->mysql_error);
    }        // MySQL parameters from mysql.inc.php
    $backup->list_tables();                                                // list all tables
    $broj = count($backup->tables);                                        // count all tables, $backup->tables
    //   will be array of table names
    $the_db_dump = "\n\n-- start  start  start  start  start  start  start  start  start  start  start  start  start  start  start  start  start  start  start \n";
    $the_db_dump .= "\n-- Dumping tables for database: $mysql_db\n"; //write "intro" ;)

    for ($i = 0; $i < $broj; $i++) {                        //dump all tables:
        $table_name = $backup->tables[$i];            //get table name
        if (($mysql_prefix == "") || (strrpos($table_name, $mysql_prefix) === 0)) {
            $backup->dump_table($table_name);            //dump it to output (buffer)
            $the_db_dump .= htmlspecialchars($backup->output);    //write output
        }
    }

    // for ($i=0;$i<$broj;$i++) {                        //dump all tables:
    // $table_name = $backup->tables[$i];             //get table name
    // $backup->dump_table($table_name);             //dump it to output (buffer)
    // $the_db_dump .=htmlspecialchars($backup->output);     //write output
    // }

    $the_db_dump .= "\n\n-- end  end  end  end  end  end  end  end  end  end  end  end  end  end  end  end  end  end  end  end  end  end  end  end  end  end  end  end  end \n";
    $file = './backups/' . $the_now . '_tickets_backup.sql';
    $fh = fopen($file, 'w');
    if (!fwrite($fh, $the_db_dump)) {
        print "<LI>DB Backup failed";
        fclose($fh);
    } else {
        print '<LI>Tickets Database backup complete...<BR /><BR /><BR />';
        print "<SPAN id='fin_but' CLASS='plain text' style='float: none; width: 100px; display: inline-block;' onMouseover='do_hover(this.id);' onMouseout='do_plain(this.id);' onClick='document.can_Form.submit();'><SPAN STYLE='float: left;'><?php print get_text('Finished');?></SPAN><IMG STYLE='float: right;' SRC='./images/finished_small.png' BORDER=0></SPAN>";
    }
}

?>
<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
<html xmlns="http://www.w3.org/1999/xhtml" lang="en">
<HEAD><TITLE>Tickets - Configuration Module</TITLE>
    <META HTTP-EQUIV="Content-Type" CONTENT="text/html; charset=UTF-8">
    <META HTTP-EQUIV="Expires" CONTENT="0">
    <META HTTP-EQUIV="Cache-Control" CONTENT="NO-CACHE">
    <META HTTP-EQUIV="Pragma" CONTENT="NO-CACHE">
    <META HTTP-EQUIV="Content-Script-Type" CONTENT="application/x-javascript">
    <META HTTP-EQUIV="Script-date" CONTENT="<?php print date("n/j/y G:i", filemtime(basename(__FILE__))); ?>">
    <LINK REL=StyleSheet HREF="stylesheet.php?version=<?php print time(); ?>" TYPE="text/css"><!-- 3/15/11 -->
    <link rel="stylesheet" href="./js/leaflet/leaflet.css"/>
    <!--[if lte IE 8]>
    <link rel="stylesheet" href="./js/leaflet/leaflet.ie.css"/>
    <![endif]-->
    <link rel="stylesheet" href="./js/Control.Geocoder.css"/>
    <STYLE>
        LI {
            margin-left: 20px;
        }

        .spl {
            FONT-WEIGHT: bold;
            FONT-SIZE: 12px;
            COLOR: #000099;
            FONT-STYLE: normal;
            FONT-FAMILY: Verdana, Arial, Helvetica, sans-serif;
            TEXT-DECORATION: none
        }

        #bar {
            width: auto;
            height: auto;
            background: transparent;
            z-index: 100;
        }

        * html #bar { /*\*/
            position: absolute;
            top: expression((60 + (ignoreMe = document.documentElement.scrollTop ? document.documentElement.scrollTop : document.body.scrollTop)) + 'px');
            right: expression((320 + (ignoreMe2 = document.documentElement.scrollLeft ? document.documentElement.scrollLeft : document.body.scrollLeft)) + 'px'); /**/
        }

        #foo > #bar {
            position: fixed;
            top: 60px;
            right: 320px;
            width: 120px;
        }
    </STYLE>
    <SCRIPT TYPE="application/x-javascript" SRC="./js/jss.js"></SCRIPT>
    <SCRIPT SRC="./js/misc_function.js"></SCRIPT>
    <SCRIPT SRC="./js/usng.js"></SCRIPT>
    <SCRIPT SRC='./js/md5.js'></SCRIPT>
    <SCRIPT SRC='./js/jscoord.js'></SCRIPT>
    <SCRIPT SRC="./js/jscolor/jscolor.js"></SCRIPT>
    <script TYPE="application/x-javascript" SRC="./js/misc_function.js"></script>
    <script TYPE="application/x-javascript" SRC="./js/domready.js"></script>
    <script type="application/x-javascript" src="./js/osm_map_functions.js"></script>
    <script src="./js/proj4js.js"></script>
    <script src="./js/proj4-compressed.js"></script>
    <script src="./js/leaflet/leaflet.js"></script>
    <script src="./js/proj4leaflet.js"></script>
    <script src="./js/leaflet/KML.js"></script>
    <script src="./js/leaflet/gpx.js"></script>
    <script src="./js/leaflet-openweathermap.js"></script>
    <script src="./js/esri-leaflet.js"></script>
    <script src="./js/osopenspace.js"></script>
    <script src="./js/Control.Geocoder.js"></script>
    <script type="application/x-javascript" src="./js/L.Graticule.js"></script>
    <script type="application/x-javascript" src="./js/leaflet-providers.js"></script>
    <?php
    require_once './incs/all_forms_js_variables.inc.php';
    ?>
    <SCRIPT>
        var viewportwidth;
        var viewportheight;
        var fieldnames = [];
        var screens = [];
        var sortorders = [];

        if (typeof window.innerWidth != 'undefined') {
            viewportwidth = window.innerWidth,
                viewportheight = window.innerHeight
        } else if (typeof document.documentElement != 'undefined' && typeof document.documentElement.clientWidth != 'undefined' && document.documentElement.clientWidth != 0) {
            viewportwidth = document.documentElement.clientWidth,
                viewportheight = document.documentElement.clientHeight
        } else {
            viewportwidth = document.getElementsByTagName('body')[0].clientWidth,
                viewportheight = document.getElementsByTagName('body')[0].clientHeight
        }
        var inWin = <?php print $mode;?>;
        if (inWin == 1) {
            set_fontsizes(viewportwidth, "popup");
        } else {
            set_fontsizes(viewportwidth, "fullscreen");
        }

        function get_msgs() {    //    10/23/12
            $('statusBar').innerHTML = "<marquee scrollamount=10 direction='left' style='font-size: 1.5em; font-weight: bold;'>Downloading messages, please wait.</marquee>";
            $('statusBar').style.display = "inline-block";
            var randomnumber = Math.floor(Math.random() * 99999999);
            if (window.XMLHttpRequest) {
                xmlHttp = new XMLHttpRequest();
                xmlHttp.open("GET", "./ajax/get_messages.php?mode=all&version=" + randomnumber, true);
                xmlHttp.onreadystatechange = handleRequestStateChange;
                xmlHttp.send(null);
            }
        }

        function handleRequestStateChange() {    //    10/23/12
            var the_resp;
            var the_val;
            if (xmlHttp.readyState == 4) {
                if (xmlHttp.status == 200) {
                    var response = JSON.decode(xmlHttp.responseText);
                    for (var key in response[0]) {
                        the_resp = key;
                        the_val = response[0][key];
                        if (typeof parent.frames["upper"].un_stat_chg == 'function') {
                            parent.frames["upper"].un_stat_chg(the_resp, the_resp);
                        }
                    }
                    setTimeout(function () {
                        if (response[1][0] == 0) {
                            var theText = "Download complete. There were no new messages.";
                        } else {
                            var theText = "Download complete. There were " + response[1][0] + " messages of which " + response[1][1] + " were new.";
                        }
                        $('statusBar').innerHTML = "<marquee scrollamount=10 direction='left' style='font-size: 1.5em; font-weight: bold;'>" + theText + "</marquee>";
                    }, 15000);
                    setTimeout(function () {
                        $('statusBar').style.display = "none";
                    }, 20000);
                    if (response[1][1] > 0) {
                        show_msg("There are " + response[1][1] + " new messages");
                    }
                }
            }
        }

        function do_dedupe() {
            $('statusBar').innerHTML = "<marquee scrollamount=10 direction='left' style='font-size: 1.5em; font-weight: bold;'>Removing Duplicate database entries.</marquee>";
            $('statusBar').style.display = "inline-block";
            var randomnumber = Math.floor(Math.random() * 99999999);
            if (window.XMLHttpRequest) {
                xmlHttp = new XMLHttpRequest();
                xmlHttp.open("GET", "./ajax/dedupe.php?version=" + randomnumber, true);
                xmlHttp.onreadystatechange = handleRequestStateChange2;
                xmlHttp.send(null);
            }
        }

        function handleRequestStateChange2() {
            var the_resp;
            var the_val;
            if (xmlHttp.readyState == 4) {
                if (xmlHttp.status == 200) {
                    var response = JSON.decode(xmlHttp.responseText);
                    setTimeout(function () {
                        if (response[0] == 0) {
                            var theText = "No duplicate entries found, Function complete.";
                        } else {
                            var theText = "Removed Duplicate Entries. There were ";
                            theText += response[1] + " duplicate(s) in Captions. ";
                            theText += response[2] + " duplicate(s) in the States Translator. ";
                            theText += response[3] + " duplicate(s) in Codes. ";
                            theText += response[4] + " duplicate(s) in Hints. ";
                            theText += response[5] + " duplicate(s) in Insurance. ";
                        }
                        $('statusBar').innerHTML = "<scrollamount=10 marquee direction='left' style='font-size: 1.5em; font-weight: bold;'>" + theText + "</marquee>";
                    }, 15000);
                    setTimeout(function () {
                        $('statusBar').style.display = "none";
                    }, 50000);
                }
            }
        }

        function checkAll() {    //    9/10/13
            var theField = document.user_add_Form.elements["frm_group[]"];
            for (i = 0; i < theField.length; i++) {
                theField[i].checked = true;
            }
        }

        function uncheckAll() {    //    9/10/13
            var theField = document.user_add_Form.elements["frm_group[]"];
            for (i = 0; i < theField.length; i++) {
                theField[i].checked = false;
            }
        }

        function $() {                                    // 7/11/10
            var elements = new Array();
            for (var i = 0; i < arguments.length; i++) {
                var element = arguments[i];
                if (typeof element == 'string')
                    element = document.getElementById(element);
                if (arguments.length == 1)
                    return element;
                elements.push(element);
            }
            return elements;
        }

        try {
            parent.frames["upper"].document.getElementById("whom").innerHTML = "<?php print $_SESSION['user'];?>";
            parent.frames["upper"].document.getElementById("level").innerHTML = "<?php print get_level_text($_SESSION['level']);?>";
            parent.frames["upper"].document.getElementById("script").innerHTML = "<?php print LessExtension(basename(__FILE__));?>";
        } catch (e) {
        }
        <?php
        if (intval(get_variable('call_board')) == 0) {                        // hide the button - 4/10/10
            print "\t parent.frames['upper'].document.getElementById('call').style.display = 'none';";
        }
        ?>
        function ck_frames() {
            <?php
            if ($mode == 1) {                                            // 9/8/10
            print "return;\n";
        }
            else {
            ?>
            if (self.location.href == parent.location.href) {
                self.location.href = 'index.php';
            } else {
                parent.upper.show_butts();                                        // 1/21/09
            }
            <?php
            }
            ?>
        }        // end function ck_frames()

        function get_new_colors() {                                // 5/4/11
            window.location.href = '<?php print basename(__FILE__);?>';
        }


        function isNull(val) {                                // checks var stuff = null;
            return val === null;
        }

        String.prototype.trim = function () {                // 10/19/08
            return this.replace(/^\s*(\S*(\s+\S+)*)\s*$/, "$1");
        };

        function in_array(ary, val) {                        // 12/2/08
            for (var i = 0; i < ary.length; i++) {
                if (ary[i] == val) {
                    return true;
                }
            }
            return false;
        }                // end function in array

        starting = false;

        function do_mail_win() {            // 6/13/09, 11/5/09
            if (starting) {
                return;
            }
            starting = true;

            newwindow_am = window.open("do_all_mail.php", "E_mail", "titlebar, resizable=1, scrollbars, height=480,width=600,status=0,toolbar=0,menubar=0,location=0, left=50,top=150,screenX=100,screenY=300");
            if (isNull(newwindow_am)) {
                alert("This requires popups to be enabled. Please adjust your browser options.");
                return;
            }
            newwindow_am.focus();
            starting = false;
        }


        function do_audio_test() {                // 8/2/08 -    11/5/09 - 4/25/12
            var newwindow_au = window.open("audio.php", "Test_Audio", "titlebar, resizable=1, scrollbars, height=540,width=600,status=0,toolbar=0,menubar=0,location=0, left=50,top=50,screenX=50,screenY=50");
            newwindow_au.focus();
            if (isNull(newwindow_au)) {
                alert("Adio test operation requires popups to be enabled. Please adjust your browser options.");
                return;
            }
            newwindow_au.focus();
        }

        function do_ogts() {                // 8/2/08 -    11/5/09
            var newwindow_t = window.open("opengts.php", "Test_OGTS", "titlebar, resizable=1, scrollbars, height=600,width=540,status=0,toolbar=0,menubar=0,location=0, left=150,top=150,screenX=150,screenY=150");
            newwindow_t.focus();
            if (isNull(newwindow_t)) {
                alert("Test operation requires popups to be enabled. Please adjust your browser options.");
                return;
            }
            newwindow_t.focus();
        }

        function do_t_tracker() {                // 9/27/11
            var newwindow_t = window.open("t_tracker.php", "Test_Internal_Tracker", "titlebar, resizable=1, scrollbars, height=600,width=540,status=0,toolbar=0,menubar=0,location=0, left=150,top=150,screenX=150,screenY=150");
            newwindow_t.focus();
            if (isNull(newwindow_t)) {
                alert("Test operation requires popups to be enabled. Please adjust your browser options.");
                return;
            }
            newwindow_t.focus();
        }

        function do_test() {                // 8/2/08 -    11/5/09
            var newwindow_t = window.open("opena.php", "Test_APRS", "titlebar, resizable=1, scrollbars, height=400,width=600,status=0,toolbar=0,menubar=0,location=0, left=150,top=150,screenX=150,screenY=150");
            newwindow_t.focus();
            if (isNull(newwindow_t)) {
                alert("Test operation requires popups to be enabled. Please adjust your browser options.");
                return;
            }
            newwindow_t.focus();
        }

        function do_smtp() {                // 8/2/08 -    11/5/09
            var newwindow_t = window.open("smtp_test.php", "Test_SMTP", "titlebar, resizable=1, scrollbars, height=600,width=900,status=0,toolbar=0,menubar=0,location=0, left=50,top=50,screenX=50,screenY=50");
            newwindow_t.focus();
            if (isNull(newwindow_t)) {
                alert("Test operation requires popups to be enabled. Please adjust your browser options.");
                return;
            }
            newwindow_t.focus();
        }

        function file_window() {                                        // 9/10/13
            var url = "file_upload.php";
            var nfWindow = window.open(url, 'NewFileWindow', 'resizable=1, scrollbars, height=600, width=600, left=100,top=100,screenX=100,screenY=100');
            setTimeout(function () {
                nfWindow.focus();
            }, 1);
        }

        function do_native() {                // 8/2/08 -    11/5/09
            var newwindow_t = window.open("native.php", "Test_Native_Email", "titlebar, resizable=1, scrollbars, height=600,width=900,status=0,toolbar=0,menubar=0,location=0, left=50,top=50,screenX=50,screenY=50");
            newwindow_t.focus();
            if (isNull(newwindow_t)) {
                alert("Test operation requires popups to be enabled. Please adjust your browser options.");
                return;
            }
            newwindow_t.focus();
        }

        function do_instam() {                // 7/26/09    - 11/5/09
            var newwindow_t = window.open("test_instam.php", "Test_InstaMapper", "titlebar, resizable=1, scrollbars, height=400,width=600,status=0,toolbar=0,menubar=0,location=0, left=50,top=50,screenX=50,screenY=50");
            newwindow_t.focus();
            if (isNull(newwindow_t)) {
                alert("Test operation requires popups to be enabled. Please adjust your browser options.");
                return;
            }
            newwindow_t.focus();
        }

        function do_glat() {                // 7/29/09    - 11/5/09
            var newwindow_t = window.open("latitude.php", "Test_Google_Latitude", "titlebar, resizable=1, scrollbars, height=400,width=600,status=0,toolbar=0,menubar=0,location=0, left=50,top=50,screenX=50,screenY=50");
            newwindow_t.focus();
            if (isNull(newwindow_t)) {
                alert("Test operation requires popups to be enabled. Please adjust your browser options.");
                return;
            }
            newwindow_t.focus();
        }

        function do_locatea() {                // 7/29/09 - 11/5/09
            var newwindow_t = window.open("locatea.php", "Test_Locatea", "titlebar, resizable=1, scrollbars, height=400,width=600,status=0,toolbar=0,menubar=0,location=0, left=50,top=50,screenX=50,screenY=50");
            newwindow_t.focus();
            if (isNull(newwindow_t)) {
                alert("Test operation requires popups to be enabled. Please adjust your browser options.");
                return;
            }
            newwindow_t.focus();
        }

        function do_gtrack() {                // 7/29/09    - 11/5/09
            var newwindow_t = window.open("gtrack.php", "Test_Gtrack", "titlebar, resizable=1, scrollbars, height=400,width=600,status=0,toolbar=0,menubar=0,location=0, left=50,top=50,screenX=50,screenY=50");
            newwindow_t.focus();
            if (isNull(newwindow_t)) {
                alert("Test operation requires popups to be enabled. Please adjust your browser options.");
                return;
            }
            newwindow_t.focus();
        }

        function do_Post(the_table) {
            document.tables.tablename.value = the_table;
            document.tables.submit();
        }

        var type;                    // Global variable - identifies browser family
        BrowserSniffer();

        function BrowserSniffer() {                                                    //detects the capabilities of the browser
            if (navigator.userAgent.indexOf("Opera") != -1 && document.getElementById) type = "OP";    //Opera
            else if (document.all) type = "IE";                                        //Internet Explorer e.g. IE4 upwards
            else if (document.layers) type = "NN";                                    //Netscape Communicator 4
            else if (!document.all && document.getElementById) type = "MO";            //Mozila e.g. Netscape 6 upwards
            else type = "IE";                                                        //????????????
        }

        function whatBrows() {                    //Displays the generic browser type
            window.alert("Browser is : " + type);
        }

        function ShowLayer(id, action) {                                                // Show and hide a span/layer -- Seems to work with all versions NN4 plus other browsers
            if (type == "IE") eval("document.all." + id + ".style.display='" + action + "'");      // id is the span/layer, action is either hidden or visible
            if (type == "NN") eval("document." + id + ".display='" + action + "'");
            if (type == "MO" || type == "OP") eval("document.getElementById('" + id + "').style.display='" + action + "'");
        }

        function hideit(elid) {
            ShowLayer(elid, "none");
        }

        function showit(elid) {
            ShowLayer(elid, "block");
        }

        function validate_cen(theForm) {            // Map center  validation
            var errmsg = "";
            if (theForm.frm_lat.value == "") {
                errmsg += "\tMap center is required.\n";
            }
            if (theForm.frm_map_caption.value == "") {
                errmsg += "\tMap caption is required.\n";
            }
            if (errmsg != "") {
                alert("Please correct the following and re-submit:\n\n" + errmsg);
                return false;
            } else {                                        // good to go!
//            theForm.frm_lat.disabled = false;
//            theForm.frm_lng.disabled = false;
                theForm.frm_zoom.disabled = false;
                return true;
            }
        }                // end function validate cen(theForm)

        var str_users = "<?php print $users;?>";                // 12/2/08
        var ary_users = str_users.split("\t");                // see usage in function validate_user()

        function validate_user(theForm) {            // user form contents validation
//        alert("280 " + theForm.frm_responder_id.value);
            if (theForm.frm_remove) {
                if (theForm.frm_remove.checked) {
                    if (confirm("Please confirm this removal.")) {
                        document.user_add_Form.submit();
                        return true;
                    } else {
                        return false;
                    }
                }
            }

            var errmsg = "";
            if (theForm.frm_user.value == "") {
                errmsg += "\tUserID is required.\n";
            }
            var got_level = false;
            for (i = 0; i < theForm.frm_level.length; i++) {
                if (theForm.frm_level[i].checked) {
                    got_level = true;
                }
            }
            if (!got_level) {
                errmsg += "\tUser LEVEL is required.\n";
            }
            if ((theForm.frm_func.value == "a") && (in_array(ary_users, theForm.frm_user.value.length > 0)) && (in_array(ary_users, theForm.frm_user.value.trim()))) {
                errmsg += "\tUserID duplicates existing one.\n";
            }
            if (theForm.frm_passwd.value != theForm.frm_passwd_confirm.value) {
                errmsg += "\tPASSWORD and CONFIRM fail to match.\n";
            }

            if ((theForm.frm_func.value == "a") && (theForm.frm_passwd.value == "")) {
                errmsg += "\tPASSWORD is required.\n";
            }        // only for ADD
            if ((theForm.frm_passwd.value.trim().length > 0) && (theForm.frm_passwd.value.trim().length < 5)) {
                errmsg += "\tPasswd length 5 or more is required.\n";
            }
            if ((theForm.frm_level[5].checked) && (theForm.frm_responder_id.value == 0)) {
                errmsg += "\t<?php print get_text("Units");?> selection is required.\n";
            }
            if ((theForm.frm_level[6].checked) && (theForm.frm_facility_id.value == 0)) {
                errmsg += "\t<?php print get_text("Facility");?> selection is required.\n";
            }
            if (errmsg != "") {
                alert("Please correct the following and re-submit:\n\n" + errmsg);
                return false;
            } else {                                        // good to go!
                theForm.frm_hash.value = (theForm.frm_passwd.value.trim() == "") ? "" : hex_md5(theForm.frm_passwd.value.trim().toLowerCase());
                theForm.frm_passwd.value = "";            // hide them
                theForm.frm_passwd_confirm.value = "";
                theForm.submit();
            }
        }                // end function validate user()

        function do_set_unit(in_val) {                    // selected value to hidden
            document.user_add_Form.frm_responder_id.value = in_val;
        }

        function do_set_facility(in_val) {                    // selected value to hidden
            document.user_add_Form.frm_facility_id.value = in_val;
        }

        function validate_set(theForm) {            // limited form contents validation
            var errmsg = "";
//        if (theForm.gmaps_api_key.value.length!=86)            {errmsg+= "\tInvalid GMaps API key\n";}    // 3/4/12
            if (errmsg != "") {
                alert("Please correct the following and re-submit:\n\n" + errmsg);
                return false;
            } else {                                        // good to go!
                return true;
            }
        }                // end function validate set(theForm)

        function validate_css_day(theForm) {            // limited form contents validation css colors day 3/15/11
            var errmsg = "";
            if (errmsg != "") {
                alert("Please correct the following and re-submit:\n\n" + errmsg);
                return false;
            } else {
                return true;
            }
        }                // end function validate set(theForm)

        function validate_css_night(theForm) {            // limited form contents validation css night colors 3/15/11
            var errmsg = "";
            if (errmsg != "") {
                alert("Please correct the following and re-submit:\n\n" + errmsg);
                return false;
            } else {
                return true;
            }
        }                // end function validate set(theForm)

        function add_res() {        // turns on add responder form
            showit('res_add_form');
            hideit('tbl_responders');
            hideIcons();            // hides responder icons
            map.setCenter(new L.LatLng(<?php echo get_variable('def_lat'); ?>, <?php echo get_variable('def_lng'); ?>), <?php echo get_variable('def_zoom'); ?>);
        }

        function hideIcons() {
            map.clearOverlays();
        }                // end function hideicons()

        function do_lat(lat) {
            var num = new Number(lat)
            document.cen_Form.frm_lat.value = num.toFixed(6);            // 9/9/08
            document.cen_Form.show_lat.disabled = false;                // permit read/write
            document.cen_Form.show_lat.value = do_lat_fmt(document.cen_Form.frm_lat.value);
            document.cen_Form.show_lat.disabled = true;
        }

        function do_lng(lng) {
            var num = new Number(lng)
            document.cen_Form.frm_lng.value = num.toFixed(6);
            document.cen_Form.show_lng.disabled = false;
            document.cen_Form.show_lng.value = do_lng_fmt(document.cen_Form.frm_lng.value);
            document.cen_Form.show_lng.disabled = true;
        }


        function do_grids(theForm) {                                // 8/23/08, 12/5/10
            theForm.frm_ngs.value = LLtoUSNG(theForm.frm_lat.value, theForm.frm_lng.value, 5);    // USNG
            do_utm(theForm);
            do_osgb(theForm);
        }

        function do_utm(theForm) {
            var ll_in = new LatLng(parseFloat(theForm.frm_lat.value), parseFloat(theForm.frm_lng.value));
            var utm_out = ll_in.toUTMRef().toString();
            temp_ary = utm_out.split(" ");
            theForm.frm_utm.value = (temp_ary.length == 3) ? temp_ary[0] + " " + parseInt(temp_ary[1]) + " " + parseInt(temp_ary[2]) : "";
        }

        function do_osgb(theForm) {
            var ll_in = new LatLng(parseFloat(theForm.frm_lat.value), parseFloat(theForm.frm_lng.value));
            var osgb_out = ll_in.toOSRef();
            theForm.frm_osgb.value = osgb_out.toSixFigureString();
        }

        function do_zoom(zoom) {
            document.cen_Form.frm_zoom.disabled = false;
            document.cen_Form.frm_zoom.value = zoom;
            document.cen_Form.frm_zoom.disabled = true;
        }

        function collect() {                // constructs a string of id's for deletion
            var str = sep = "";
            for (i = 0; i < document.del_Form.elements.length; i++) {
                if (document.del_Form.elements[i].type == 'checkbox' && (document.del_Form.elements[i].checked == true)) {
                    str += (sep + document.del_Form.elements[i].name.substring(1));        // drop T
                    sep = ",";
                }
            }
            document.del_Form.idstr.value = str;
            document.del_Form.submit();                                    // 6/4/08 - added
        }

        function all_ticks(bool_val) {                                    // set checkbox = true/false
            for (i = 0; i < document.del_Form.elements.length; i++) {
                if (document.del_Form.elements[i].type == 'checkbox') {
                    document.del_Form.elements[i].checked = bool_val;
                }
            }            // end for (...)
        }                // end function all_ticks()

        <?php
        print "// file as of " . date("l, dS F, Y @ h:ia", filemtime(basename(__FILE__))) . "\n";
        print "//" . date("n/j/y", filemtime(basename(__FILE__))) . "\n";
        ?>

        starting = false;

        function do_about() {                            // 5/30/10
            if (starting) {
                return;
            }
            parent.upper.do_set_sess_exp();                // session expiration update

            if (window.focus() && window_about) {
                window_about.focus()
            }    // if window exists
            starting = true;

            params = 'width=' + screen.width;
            params += ', height=' + screen.height;
            params += ', top=0, left=0', scrollbars = 1
            params += ', fullscreen=no';
            window_about = window.open("about.php", "About_this_version", params);
            if (isNull(window_about)) {
                alert("This operation requires popups to be enabled. Please adjust your browser options.");
                return;
            }
            window_about.focus();
            starting = false;
        }        // end function do full_scr()

        function do_night_color_check() {    //    Load color checker popup from night config screen    3/15/11
            var bgc = document.css_night_Form.page_background.value;
            var txt = document.css_night_Form.normal_text.value;
            var rl = document.css_night_Form.row_light.value;
            var rd = document.css_night_Form.row_dark.value;
            var plain = document.css_night_Form.row_plain.value;
            var tbt = document.css_night_Form.titlebar_text.value;
            var hdgb = document.css_night_Form.row_heading_background.value;
            var hdgt = document.css_night_Form.row_heading_text.value;
            var spacer = document.css_night_Form.row_spacer.value;
            var inpb = document.css_night_Form.form_input_background.value;
            var inpt = document.css_night_Form.form_input_text.value;
            var otxt = document.css_night_Form.other_text.value;
            var links = document.css_night_Form.links.value;
            var headings = document.css_night_Form.header_text.value;
            var smb = document.css_night_Form.select_menu_background.value;
            var smf = document.css_night_Form.select_menu_text.value;
            var legend = document.css_night_Form.legend.value;
            if (starting) {
                return;
            }                    // dbl-click catcher
            starting = true;
            var url = "do_color_checker.php?mode=day&func=main&bgc=" + escape(bgc) + "&txt=" + escape(txt) + "&rl=" + escape(rl) + "&rd=" + escape(rd) + "&plain=" + escape(plain) + "&hdgb=" + escape(hdgb) + "&hdgt=" + escape(hdgt) + "&spacer=" + escape(spacer) + "&links=" + escape(links) + "&header=" + escape(headings) + "&inpb=" + escape(inpb) + "&inpt=" + escape(inpt) + "&otxt=" + escape(otxt) + "&smb=" + escape(smb) + "&smt=" + escape(smf) + "&legend=" + escape(legend) + "&titlebar=" + escape(tbt);

            newwindow_colcheck = window.open(url, "colour_checker", "titlebar, location=0, resizable=1, scrollbars, height=700px,width=1000px,status=0,toolbar=0,menubar=0,location=0, left=100,top=200,screenX=100,screenY=200");
            if (isNull(newwindow_colcheck)) {
                alert("This operation requires popups to be enabled -- please adjust your browser options.");
                return;
            }
            newwindow_colcheck.focus();
            starting = false;
        }        // end function do night color_check()

        function do_day_color_check() {    //    Load color checker popup from day config screen    3/15/11
            var bgc = document.css_day_Form.page_background.value;
            var txt = document.css_day_Form.normal_text.value;
            var rl = document.css_day_Form.row_light.value;
            var rd = document.css_day_Form.row_dark.value;
            var plain = document.css_day_Form.row_plain.value;
            var tbt = document.css_day_Form.titlebar_text.value;
            var hdgb = document.css_day_Form.row_heading_background.value;
            var hdgt = document.css_day_Form.row_heading_text.value;
            var spacer = document.css_day_Form.row_spacer.value;
            var inpb = document.css_day_Form.form_input_background.value;
            var inpt = document.css_day_Form.form_input_text.value;
            var otxt = document.css_day_Form.other_text.value;
            var links = document.css_day_Form.links.value;
            var headings = document.css_day_Form.header_text.value;
            var smb = document.css_day_Form.select_menu_background.value;
            var smf = document.css_day_Form.select_menu_text.value;
            var legend = document.css_day_Form.legend.value;
            if (starting) {
                return;
            }                    // dbl-click catcher
            starting = true;
            var url = "do_color_checker.php?mode=night&func=main&bgc=" + escape(bgc) + "&txt=" + escape(txt) + "&rl=" + escape(rl) + "&rd=" + escape(rd) + "&plain=" + escape(plain) + "&hdgb=" + escape(hdgb) + "&hdgt=" + escape(hdgt) + "&spacer=" + escape(spacer) + "&links=" + escape(links) + "&header=" + escape(headings) + "&inpb=" + escape(inpb) + "&inpt=" + escape(inpt) + "&otxt=" + escape(otxt) + "&smb=" + escape(smb) + "&smt=" + escape(smf) + "&legend=" + escape(legend) + "&titlebar=" + escape(tbt);

            newwindow_colcheck = window.open(url, "colour_checker", "titlebar, location=0, resizable=1, scrollbars, height=700px, width=1000px,status=0,toolbar=0,menubar=0,location=0, left=100,top=200,screenX=100,screenY=200");
            if (isNull(newwindow_colcheck)) {
                alert("This operation requires popups to be enabled -- please adjust your browser options.");
                return;
            }
            newwindow_colcheck.focus();
            starting = false;
        }        // end function do daycolor_check()

    </SCRIPT>


    <?php

    if (array_key_exists('func', ($_REQUEST))) {                // 11/11/10
    switch ($func){

    case 'notify':
    print "</HEAD>\n<BODY onLoad = 'ck_frames()'>\n";
    include "./incs/links.inc.php";
    if (array_key_exists('id', ($_GET))) {            // 0 -> all tickets notify
    if (!get_variable('allow_notify')) {
        print "<FONT CLASS='warn'>Warning: Notification is disabled by administrator</FONT><BR /><BR />";
        exit();
    }
    $get_id = isset($_GET['id']) ? sanitize_int($_GET['id']) : 0;
    if ($get_id != 0) {
        $query = "SELECT `id`, `scope` FROM `{$GLOBALS['mysql_prefix']}ticket` WHERE `id` = ? LIMIT 1";
        $result = db_query($query, [$get_id]);
        $row = $result ? stripslashes_deep($result->fetch_assoc()) : null;
        $the_ticket_name = $row['scope'];
        unset($result);
    } else {
        $the_ticket_name = "<I>All tickets</I>";
    }
    //  5/22/11

    $query = "SELECT * FROM `{$GLOBALS['mysql_prefix']}notify`";
    $result = db_query($query);

    if ($result->num_rows > 0) {
        print "<FONT CLASS='header'>Current Notifies<BR /><BR />";
        print "<TABLE BORDER='0'>";
        print "<TR CLASS='even'><TD CLASS='td_label text'>Ticket</TD><TD CLASS='td_label'>&nbsp;Email</TD>";
        print "<TD CLASS='td_label text'>&nbsp;Execute</B></TD><TD CLASS='td_label'>&nbsp;On Action&nbsp;</TD><TD CLASS='td_label text'>&nbsp;On {$patient}&nbsp;</TD><TD CLASS='td_label text'>&nbsp;On Ticket Change&nbsp;</TD><TD CLASS='td_label text'>Delete</TD></TR>\n";

        $i = 0;
        while ($row = stripslashes_deep($result->fetch_array())) {

            $mg_select = "<SELECT NAME='frm_mailgroup[$i]'>";
            $mg_select .= "<OPTION VALUE=0>Select Mail List</OPTION>";
            $query_mg = "SELECT * FROM `{$GLOBALS['mysql_prefix']}mailgroup` ORDER BY `id` ASC";
            $result_mg = db_query($query_mg);
            while ($row_mg = stripslashes_deep($result_mg->fetch_assoc())) {
                $sel = ($row['mailgroup'] == $row_mg['id']) ? "SELECTED" : "";
                $mg_select .= "\t<OPTION {$sel} VALUE='{$row_mg['id']}'>{$row_mg['name']} </OPTION>\n";
            }
            $mg_select .= "</SELECT>";

            if ($row['ticket_id'] == 0) {
                print "\n<TR CLASS='{$colors[$i%2]}'><TD CLASS='td_label text'><B>All</B></TD>\n";
            } else {
                print "\n<TR CLASS='" . $colors[$i % 2] . " td_label text''><TD CLASS='td_data text'><A HREF='main.php?id=" . $row['ticket_id'] . "'>#" . $row['ticket_id'] . "</A></TD>\n";
            }
            print "<TD CLASS='td_data text'><INPUT MAXLENGTH=\"70\" SIZE=\"32\" VALUE=\"" . $row['email_address'] . "\" TYPE=\"text\" NAME=\"frm_email[$i]\" DISABLED /></TD>\n";
            print "<TD>" . $mg_select . "</TD>\n";
            print "<TD CLASS='td_data text'><INPUT MAXLENGTH=\"150\" SIZE=\"40\" TYPE=\"text\" VALUE=\"" . $row['execute_path'] . "\" NAME=\"frm_execute[$i]\" DISABLED /></TD>\n";
            print "<TD CLASS='td_data text' ALIGN='center'><INPUT TYPE='checkbox' VALUE='1' NAME='frm_on_action[$i]'";
            print $row['on_action'] ? " checked DISABLED /></TD>\n" : " DISABLED /></TD>\n";
            print "<TD CLASS='td_data text' ALIGN='center'><INPUT TYPE='checkbox' VALUE='1' NAME='frm_on_patient[$i]'";
            print $row['on_patient'] ? " checked DISABLED /></TD>\n" : " DISABLED /></TD>\n";
            print "<TD CLASS='td_data text' ALIGN='center'><INPUT TYPE='checkbox' VALUE='1' NAME='frm_on_ticket[$i]'";
            print $row['on_ticket'] ? " checked DISABLED/></TD>\n" : " DISABLED /></TD>\n";
            print "<TD CLASS='td_data text' ALIGN='center'><INPUT TYPE='checkbox' VALUE='1' NAME='frm_delete[$i]' DISABLED /></TD>\n";
            print "<INPUT TYPE='hidden' NAME='frm_id[$i]' VALUE='" . $row['id'] . "'></TR>\n";
            $i++;
        }
        print "</TABLE><BR />";

    }                // end if ($result->num_rows>0)
    // _________________________________________


    if ($mode == 1) {
    $heading = "Add Notify";
    ?>
    <DIV ID='outer'>
        <DIV id='button_bar' class='but_container'>
                            <SPAN CLASS='heading'
                                  STYLE='text-align: center; display: inline; font-size: 1.5em;'><?php echo $heading; ?>
                            <SPAN ID='can_but' class='plain text'
                                  style='float: right; width: 100px; display: inline-block;'
                                  onMouseover='do_hover(this.id);' onMouseout='do_plain(this.id);'
                                  onClick='window.close();'><SPAN
                                    STYLE='float: left;'><?php print get_text("Cancel"); ?></SPAN><IMG
                                    STYLE='float: right;' SRC='./images/cancel_small.png' BORDER=0></SPAN>
                            <SPAN ID='reset_but' class='plain text'
                                  style='float: right; width: 100px; display: inline-block;'
                                  onMouseover='do_hover(this.id);' onMouseout='do_plain(this.id);'
                                  onClick='document.notify_form.reset();'><SPAN
                                    STYLE='float: left;'><?php print get_text("Reset"); ?></SPAN><IMG
                                    STYLE='float: right;' SRC='./images/restore_small.png' BORDER=0></SPAN>
                            <SPAN ID='sub_but' class='plain text'
                                  style='float: right; width: 100px; display: inline-block;'
                                  onMouseover='do_hover(this.id);' onMouseout='do_plain(this.id);'
                                  onClick='validate(document.notify_form);'><SPAN
                                    STYLE='float: left;'><?php print get_text("Next"); ?></SPAN><IMG
                                    STYLE='float: right;' SRC='./images/submit_small.png' BORDER=0></SPAN>
        </DIV>
        <DIV ID='inner' STYLE="position: relative; top: 70px;">
            <?php
            } else {
            ?>
            <DIV ID='outer'>
                <DIV ID='inner' STYLE="position: relative; top: 10px;">
                    <?php
                    }
                    $mg_select2 = "<SELECT NAME='frm_mailgroup'>";
                    $mg_select2 .= "<OPTION VALUE=0>Select Mail List</OPTION>";
                    $query_mg2 = "SELECT * FROM `{$GLOBALS['mysql_prefix']}mailgroup`";        // 12/18/10
                    $result_mg2 = db_query($query_mg2);
                    while ($row_mg2 = stripslashes_deep($result_mg2->fetch_assoc())) {
                        $mg_select2 .= "<OPTION VALUE=" . $row_mg2['id'] . ">" . $row_mg2['name'] . "</OPTION>";
                    }
                    $mg_select2 .= "</SELECT>";
                    ?>
                    <TABLE BORDER="0" STYLE='margin-left:80px'>
                        <FORM METHOD="POST" NAME="notify_form" ACTION="config.php?func=notify&add=true">
                            <TR CLASS='even'>
                                <TD CLASS="td_label text">Ticket:</TD>
                                <TD ALIGN="left"><A
                                        HREF="main.php?id=<?php print e($_GET['id']); ?>"><?php print e($the_ticket_name); ?></A>
                                </TD>
                            </TR>
                            <TR CLASS='odd'>
                                <TD CLASS="td_label text">Email Address:</TD>
                                <TD>
                                    <INPUT MAXLENGTH="70" SIZE="40" TYPE="text" NAME="frm_email" VALUE="">
                                </TD>
                            </TR>
                            <TR CLASS='even'>
                                <TD CLASS="td_label text">Mail list:</TD>
                                <TD><?php print $mg_select2; ?></TD>
                            </TR>
                            <?php
                            $dis = (is_super()) ? "" : " DISABLED "; // 1/27/09
                            ?>
                            <TR CLASS='odd'>
                                <TD CLASS="td_label text">Execute:</TD>
                                <TD>
                                    <INPUT MAXLENGTH="150" SIZE="40" TYPE="text" NAME="frm_execute"
                                           VALUE="" <?php print $dis; ?> />
                                </TD>
                            </TR>
                            <TR CLASS='even'>
                                <TD CLASS="td_label text">On <?php print $patient; ?>/Action Change:</TD>
                                <TD ALIGN="left">
                                    &nbsp;&nbsp;&nbsp;&nbsp;Action&nbsp;&raquo;<INPUT TYPE="checkbox" VALUE="1"
                                                                                      NAME="frm_on_action">
                                    &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Patient&raquo;<INPUT TYPE="checkbox"
                                                                                                         VALUE="1"
                                                                                                         NAME="frm_on_patient">
                                </TD>
                            </TR>
                            <TR CLASS='odd'>
                                <TD CLASS="td_label text">On Ticket Change: &nbsp;&nbsp;</TD>
                                <TD ALIGN="left"><INPUT TYPE="checkbox" VALUE="1" NAME="frm_on_ticket"></TD>
                            </TR>
                            <TR CLASS='even'>
                                <TD CLASS="td_label text">Severity filter:</TD>
                                <TD ALIGN='left'>&nbsp;
                                    All &raquo; <input type='radio' name='frm_severity' value=1>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;
                                    Highest &raquo; <input type='radio' name='frm_severity' value=3 checked>
                                </TD>
                            </TR>
                            <?php
                            $mode = (array_key_exists('mode', $_REQUEST)) ? $_REQUEST['mode'] : "";        // 9/8/10
                            if ($mode != 1) {
                                ?>
                                <TR CLASS='odd'>
                                    <TD COLSPAN=2 ALIGN="center"><BR/>
                                        <SPAN id='can_but' class='plain text'
                                              style='width: 100px; display: inline-block; float: none;'
                                              onMouseOver='do_hover(this.id); Tip("Cancel & close window");'
                                              onMouseOut='do_plain(this.id); UnTip();'
                                              onClick="document.can_Form.submit();"><SPAN
                                                STYLE='float: left;'><?php print get_text("Cancel"); ?></SPAN><IMG
                                                STYLE='float: right;' SRC='./images/cancel_small.png' BORDER=0></SPAN>
                                        <SPAN id='reset_but' class='plain text'
                                              style='width: 100px; display: inline-block; float: none;'
                                              onMouseOver='do_hover(this.id); Tip("Cancel & close window");'
                                              onMouseOut='do_plain(this.id); UnTip();'
                                              onClick="document.notify_form.reset();"><SPAN
                                                STYLE='float: left;'><?php print get_text("Reset"); ?></SPAN><IMG
                                                STYLE='float: right;' SRC='./images/restore_small.png' BORDER=0></SPAN>
                                        <SPAN id='sub_but' class='plain text'
                                              style='width: 100px; display: inline-block; float: none;'
                                              onMouseOver='do_hover(this.id); Tip("Cancel & close window");'
                                              onMouseOut='do_plain(this.id); UnTip();'
                                              onClick="validate(document.notify_form);"><SPAN
                                                STYLE='float: left;'><?php print get_text("Submit"); ?></SPAN><IMG
                                                STYLE='float: right;' SRC='./images/submit_small.png' BORDER=0></SPAN>
                                    </TD>
                                </TR>
                                <?php
                            }
                            ?>
                            <INPUT TYPE="hidden" NAME="mode" VALUE="<?php print $mode; ?>"/>
                            <INPUT TYPE="hidden" NAME="frm_id" VALUE="<?php print e($_GET['id']); ?>"/>
                        </FORM>
                    </TABLE>
                    <FORM NAME='can_Form' METHOD="post" ACTION="<?php print basename(__FILE__); ?>"></FORM>
                </DIV>
            </DIV>
            </BODY>
            <SCRIPT>
                function validate(theForm) {            // notify record validate 10/23/08, 8/28/13
                    var errmsg = "";
                    if ((!validate_email(theForm.frm_email.value.trim())) && (theForm.frm_mailgroup == 0)) {
                        errmsg += "\tValid email address or mail list is required.\n";
                    }
                    if ((!(theForm.frm_on_ticket.checked)) && (!(theForm.frm_on_action.checked))) {
                        errmsg += "\tOne or both checkboxes is required.\n";
                    }
                    if (errmsg != "") {
                        alert("Please correct the following and re-submit:\n\n" + errmsg);
                        return false;
                    } else {                                        // good to go!
                        theForm.frm_severity[0].disabled = !(theForm.frm_severity[0].checked);
                        theForm.frm_severity[1].disabled = !(theForm.frm_severity[1].checked);
                        theForm.submit();
                    }
                }                // end function validate(theForm)

                function validate_email(field) {
                    apos = field.indexOf("@");
                    dotpos = field.lastIndexOf(".");
                    return (!(apos < 1 || dotpos - apos < 2));
                }                // end function validate_email()
            </SCRIPT>

</HTML>
<?php
exit();
}                // end (array_key_exists('id', ($_GET)))

elseif ((array_key_exists('save', ($_GET))) && ($_GET['save'] == 'true')) {
    for ($i = 0; $i < count($_POST["frm_id"]); $i++) {

        if (isset($_POST['frm_delete'][$i])) {
            $msg = "Notify deletion complete!";                    // pre-set
            $query = "DELETE FROM `{$GLOBALS['mysql_prefix']}notify` WHERE `id` = ? LIMIT 1";
            $result = db_query($query, [sanitize_int($_POST['frm_id'][$i])]);
        } else {                    //email validation check
            $msg = "Notify update complete.";            // pre-set

            $email = validate_email($_POST['frm_email'][$i]);
            $email_address = $_POST['frm_email'][$i];
            if ((!$email['status']) && ($_POST['frm_mailgroup'][$i] == 0)) {
                print "<FONT CLASS='warn'>Error: email validation failed for '$email_address', $email[msg]. Go back and check this email address.</FONT>";
                exit();
            }
            $on_ticket_val = empty($_POST['frm_on_ticket'][$i]) ? "" : "1";
            $on_action_val = empty($_POST['frm_on_action'][$i]) ? "" : "1";
            $on_patient_val = empty($_POST['frm_on_patient'][$i]) ? "" : "1";        // 5/23/11
            $mailGroup = ($_POST['frm_mailgroup'][$i]) ? $_POST['frm_mailgroup'][$i] : 0;

            $now = mysql_format_date(time() - (get_variable('delta_mins') * 60));
            // 1/27/09 - 1/22/11
            $query = "UPDATE `{$GLOBALS['mysql_prefix']}notify` SET
                            `execute_path` = ?,
                            `email_address` = ?,
                            `mailgroup` = ?,
                            `on_action` = ?,
                            `on_patient` = ?,
                            `on_ticket` = ?,
                            `by` = ?,
                            `from` = ?,
                            `on` = ?
                            WHERE `id` = ?";

            $result = db_query($query, [$_POST['frm_execute'][$i], $_POST['frm_email'][$i], $mailGroup, $on_action_val, $on_patient_val, $on_ticket_val, $_SESSION['user_id'], $_SERVER['REMOTE_ADDR'], $now, $_POST['frm_id'][$i]]);
        }
    }

    if (!get_variable('allow_notify')) print "<FONT CLASS=\"warn\">Warning: Notification is disabled by administrator</FONT><BR /><BR />";
    print "<FONT CLASS='header'>$msg</FONT><BR /><BR />";
}                // end array_key_exists('save')

elseif ((array_key_exists('add', ($_GET))) && ($_GET['add'] == 'true')) {    //email validation check
    $email = validate_email($_POST['frm_email']);
    if ((!$email['status']) && ($_POST['frm_mailgroup'] == 0)) {
        print "<FONT CLASS='warn'>Error: email validation failed for '" . $_POST['frm_email'] . "', " . $email['msg'] . ". Go back and check this email address.</FONT>";
        exit();
    }

    $on_ticket = (isset($_POST['frm_on_ticket'])) ? $_POST['frm_on_ticket'] : 0;
    $on_action = (isset($_POST['frm_on_action'])) ? $_POST['frm_on_action'] : 0;
    $now = mysql_format_date(time() - (get_variable('delta_mins') * 60));                // 1/22/11
    $mailGroup = ($_POST['frm_mailgroup']) ? $_POST['frm_mailgroup'] : 0;

    $query = "INSERT INTO `{$GLOBALS['mysql_prefix']}notify` SET
                    `ticket_id` = ?,
                    `user` = ?,
                    `email_address` = ?,
                    `mailgroup` = ?,
                    `execute_path` = ?,
                    `on_action` = ?,
                    `on_patient` = ?,
                    `on_ticket` = ?,
                    `severities` = ?,
                    `by` = ?,
                    `from` = ?,
                    `on` = ?";

    $result = db_query($query, [$_POST['frm_id'], $_SESSION['user_id'], $_POST['frm_email'], $mailGroup, $_POST['frm_execute'], $on_action, $on_action, $on_ticket, $_POST['frm_severity'], $_SESSION['user_id'], $_SERVER['REMOTE_ADDR'], $now]);
    if (!get_variable('allow_notify')) print "<FONT CLASS='warn'>Warning: Notification is disabled by administrator</FONT><BR /><BR />";
    print "<FONT SIZE='3'><B>Notify update complete.</B></FONT><BR /><BR />";
}            // end array_key_exists('add')

else {
    $query = "SELECT * FROM `{$GLOBALS['mysql_prefix']}notify`";

    $result = db_query($query);
    if ($result->num_rows) {
        print "<FONT CLASS='header'>Update Notifies<BR /><BR />\n";
        if (!get_variable('allow_notify')) print "<FONT CLASS=\"warn\">Warning: Notification is disabled by administrator</FONT><BR /><BR />";
        print '<TABLE BORDER="0"><FORM NAME = "frm_update" METHOD="post" ACTION="config.php?func=notify&save=true">';
        print "<TR CLASS='even'><TD CLASS='td_label'>Ticket</TD><TD CLASS=\"td_label\">&nbsp;Email</TD><TD CLASS=\"td_label\">Mail List</TD>";
        print "<TD CLASS='td_label'>&nbsp;Execute</B></TD><TD CLASS='td_label'>&nbsp;On Action&nbsp;</TD><TD CLASS='td_label'>&nbsp;On {$patient}&nbsp;</TD><TD CLASS='td_label'>&nbsp;On Ticket Change&nbsp;</TD><TD CLASS='td_label'>Delete</TD></TR>\n";

        $i = 0;
        while ($row = stripslashes_deep($result->fetch_array())) {

            $mg_select = "<SELECT NAME='frm_mailgroup[$i]'>";
            $mg_select .= "<OPTION VALUE=0>Select Mail List</OPTION>";
            $query_mg = "SELECT * FROM `{$GLOBALS['mysql_prefix']}mailgroup` ORDER BY `id` ASC";
            $result_mg = db_query($query_mg);
            while ($row_mg = stripslashes_deep($result_mg->fetch_assoc())) {
                $sel = ($row['mailgroup'] == $row_mg['id']) ? "SELECTED" : "";
                $mg_select .= "\t<OPTION {$sel} VALUE='{$row_mg['id']}'>{$row_mg['name']} </OPTION>\n";
            }
            $mg_select .= "</SELECT>";

            if ($row['ticket_id'] == 0) {
                print "\n<TR CLASS='" . $colors[$i % 2] . "'><TD><B>All</B></TD>\n";
            } else {
                print "\n<TR CLASS='" . $colors[$i % 2] . "'><TD><A HREF='main.php?id=" . $row['ticket_id'] . "'>#" . $row['ticket_id'] . "</A></TD>\n";
            }
            print "<TD><INPUT MAXLENGTH=\"70\" SIZE=\"32\" VALUE=\"" . $row['email_address'] . "\" TYPE=\"text\" NAME=\"frm_email[$i]\"></TD>\n";
            print "<TD>" . $mg_select . "</TD>\n";
            print "<TD><INPUT MAXLENGTH=\"150\" SIZE=\"40\" TYPE=\"text\" VALUE=\"" . $row['execute_path'] . "\" NAME=\"frm_execute[$i]\"></TD>\n";
            print "<TD ALIGN='center'><INPUT TYPE='checkbox' VALUE='1' NAME='frm_on_action[$i]'";
            print $row['on_action'] ? " checked></TD>\n" : "></TD>\n";
            print "<TD ALIGN='center'><INPUT TYPE='checkbox' VALUE='1' NAME='frm_on_patient[$i]'";
            print $row['on_patient'] ? " checked></TD>\n" : "></TD>\n";
            print "<TD ALIGN='center'><INPUT TYPE='checkbox' VALUE='1' NAME='frm_on_ticket[$i]'";
            print $row['on_ticket'] ? " checked></TD>\n" : "></TD>\n";
            print "<TD ALIGN='center'><INPUT TYPE='checkbox' VALUE='1' NAME='frm_delete[$i]' \"></TD>\n";
            print "<INPUT TYPE='hidden' NAME='frm_id[$i]' VALUE='" . $row['id'] . "'></TR>\n";
            $i++;
        }
        print "<TR CLASS='" . $colors[$i % 2] . "'><TD COLSPAN=99 ALIGN='center'><BR />
                        <SPAN id='update_but' CLASS='plain text' style='width: 100px; display: inline-block; float: none;' onMouseover='do_hover(this.id);' onMouseout='do_plain(this.id);' onClick='document.frm_update.submit();'><SPAN STYLE='float: left;'>" . get_text('Update') . "</SPAN><IMG STYLE='float: right;' SRC='./images/submit_small.png' BORDER=0></SPAN>
                        <SPAN id='send_but' CLASS='plain text' style='width: 100px; display: inline-block; float: none;' onMouseover='do_hover(this.id);' onMouseout='do_plain(this.id);' onClick='document.new_notify.submit();'><SPAN STYLE='float: left;'>" . get_text('New Notify') . "</SPAN><IMG STYLE='float: right;' SRC='./images/plus_small.png' BORDER=0></SPAN>
                        <SPAN id='reset_but' CLASS='plain text' style='float: none; width: 100px; display: inline-block;' onMouseover='do_hover(this.id);' onMouseout='do_plain(this.id);' onClick='document.frm_update.reset();'><SPAN STYLE='float: left;'>" . get_text('Reset') . "</SPAN><IMG STYLE='float: right;' SRC='./images/restore_small.png' BORDER=0></SPAN>
                        <SPAN id='cancel_but' CLASS='plain text' style='float: none; width: 100px; display: inline-block;' onMouseover='do_hover(this.id);' onMouseout='do_plain(this.id);' onClick='document.can_Form.submit();'><SPAN STYLE='float: left;'>" . get_text('Cancel') . "</SPAN><IMG STYLE='float: right;' SRC='./images/cancel_small.png' BORDER=0></SPAN>";
        print "</FORM></TABLE><BR />";
        ?>
        <FORM NAME='new_notify' method='GET' ACTION='<?php print basename(__FILE__); ?>'>
            <INPUT TYPE='hidden' NAME='func' VALUE='notify'/>
            <INPUT TYPE='hidden' NAME='id' VALUE='0'/>
        </FORM>


        <FORM NAME='can_Form' METHOD="post" ACTION="<?php print basename(__FILE__); ?>"></FORM>
        </BODY>
        </HTML>
        <?php

        exit();
    } else {
        ?>
        <DIV STYLE='margin-left:100px;margin-top:50px;'>
            <B>Notifies: <em>none</em></B><BR/><BR/>
            <FORM NAME='new_notify' method='GET' ACTION='<?php echo basename(__FILE__); ?>'>
                <INPUT TYPE='hidden' NAME='func' VALUE='notify'/>
                <INPUT TYPE='hidden' NAME='id' VALUE='0'/>
                <SPAN id='new_but' CLASS='plain text' style='width: 100px; display: inline-block; float: none;'
                      onMouseover='do_hover(this.id);' onMouseout='do_plain(this.id);'
                      onClick="document.new_notify.submit();"><SPAN
                        STYLE='float: left;'><?php print get_text("New Notify"); ?></SPAN><IMG STYLE='float: right;'
                                                                                               SRC='./images/plus_small.png'
                                                                                               BORDER=0></SPAN>
            </FORM>
        </DIV>
        </BODY></HTML>
        <?php
        exit();

    }
}            // end not array_key_exists('add')
break;


case 'profile' :                    //update profile
    print "</HEAD>\n<BODY onLoad = 'ck_frames()'>\n";
    include "./incs/links.inc.php";
    $get_go = (array_key_exists('go', ($_GET))) ? $_GET['go'] : "";
    if ($get_go == 'true') {            //check passwords
        $frm_sort_desc = array_key_exists('frm_sort_desc', ($_POST)) ? 1 : 0;    // checkbox handling
        $frm_hash = sanitize_string($_POST['frm_hash']);
        $frm_info = sanitize_string($_POST['frm_info']);
        $frm_email = sanitize_string($_POST['frm_email']);
        $frm_sortorder = sanitize_string($_POST['frm_sortorder']);
        $frm_ticket_per_page = sanitize_int($_POST['frm_ticket_per_page']);
        $query = "UPDATE `{$GLOBALS['mysql_prefix']}user` SET `passwd`=?,info=?,email=?,sortorder=?,sort_desc=?,ticket_per_page=? WHERE id=?";
        $result = db_query($query, [$frm_hash, $frm_info, $frm_email, $frm_sortorder, $frm_sort_desc, $frm_ticket_per_page, $_SESSION['user_id']]);
        print '<B>Your profile has been updated.</B><BR /><BR />';
    } else {
        $query = "SELECT id FROM `{$GLOBALS['mysql_prefix']}user` WHERE id = ?";
        if ($_SESSION['user_id'] < 0 or check_for_rows($query, [$_SESSION['user_id']]) == 0) {
            print __LINE__ . " Invalid user id '" . e($_SESSION['user_id']) . "'.";
            exit();
        }

        $query = "SELECT * FROM `{$GLOBALS['mysql_prefix']}user` WHERE `id` = ?";
        $result = db_query($query, [$_SESSION['user_id']]);
        $row = $result ? $result->fetch_array() : null;
        ?>
        <BR/>
        <BR/>
        <FORM METHOD="POST" name='editProf' ACTION="config.php?func=profile&go=true"><INPUT TYPE="hidden" NAME="frm_id"
                                                                                            VALUE="<?php print $row['id']; ?>">
            <TABLE BORDER="0" STYLE=' width: 50%; margin-left:40px'>
                <TR CLASS='odd'>
                    <TD COLSPAN=4 ALIGN='center'>
                        <FONT CLASS="header text">Edit My Profile</FONT><BR/><BR/>
                    </TD>
                </TR>
                <TR CLASS="even">
                    <TD CLASS="td_label text" style='width: 25%;'>New Password:</TD>
                    <TD>
                        <INPUT MAXLENGTH="255" SIZE="16" TYPE="password" NAME="frm_passwd" VALUE=''/>
                    </TD>
                    <TD style='width: 25%;'>
                        <B>Confirm: </B>
                        <INPUT MAXLENGTH="255" SIZE="16" TYPE="password" NAME="frm_passwd_confirm" VALUE=''/>
                    </TD>
                    <TD style='width: 50%;'>
                        <SPAN class='plain' id='gen_pass' style='vertical-align: middle; float: left;'
                              onMouseover='do_hover(this.id);' onMouseout='do_plain(this.id);'
                              onClick='generatePassword();'>Generate Password</SPAN>
                        <SPAN id='view_password' class='text_large text_bold text_valign_middle text_center'
                              style='float: right; display: none; background-color: #FFFFFF; border: 1px outset #707070; height: 100%; width: 50%;'></SPAN>
                    </TD>
                </TR>
                <TR CLASS="odd">
                    <TD CLASS="td_label text" style='width: 25%;'>Email:</TD>
                    <TD COLSPAN=3 style='width: 75%;'>
                        <INPUT SIZE="47" MAXLENGTH="255" TYPE="text" VALUE="<?php print $row['email']; ?>"
                               NAME="frm_email">
                    </TD>
                </TR>
                <TR CLASS="even">
                    <TD CLASS="td_label text" style='width: 25%;'>Info:</TD>
                    <TD COLSPAN=3 style='width: 75%;'>
                        <INPUT SIZE="47" MAXLENGTH="255" TYPE="text" VALUE="<?php print $row['info']; ?>"
                               NAME="frm_info">
                    </TD>
                </TR>
                <TR CLASS="odd">
                    <TD CLASS="td_label text" style='width: 25%;'>Tickets per page:</TD>
                    <TD COLSPAN=3 style='width: 75%;'>
                        <INPUT SIZE="47" MAXLENGTH="3" TYPE="text" VALUE="<?php print $row['ticket_per_page']; ?>"
                               NAME="frm_ticket_per_page">
                    </TD>
                </TR>
                <TR CLASS="even">
                    <TD CLASS="td_label text" style='width: 25%;'>Sort By:</TD>
                    <TD COLSPAN=3 style='width: 75%;'>
                        <SELECT NAME="frm_sortorder">
                            <OPTION value="date" <?php if ($row['sortorder'] == 'date') print " selected"; ?>>Date
                            </OPTION>
                            <OPTION
                                value="description" <?php if ($row['sortorder'] == 'description') print " selected"; ?>>
                                Description
                            </OPTION>
                            <OPTION value="affected" <?php if ($row['sortorder'] == 'affected') print " selected"; ?>>
                                Affected
                            </OPTION>
                        </SELECT>&nbsp;
                        Descending
                        <INPUT TYPE="checkbox" value="1"
                               name="frm_sort_desc" <?php if ($row['sort_desc']) print "checked"; ?>>
                    </TD>
                </TR>
                <TR CLASS="odd">
                    <TD COLSPAN=4 ALIGN="center" COLSPAN=2 style='width: 100%;'>
                        <SPAN id='can_but' CLASS='plain text' style='width: 100px; display: inline-block; float: none;'
                              onMouseover='do_hover(this.id);' onMouseout='do_plain(this.id);'
                              onClick="document.can_Form.submit();"><SPAN
                                STYLE='float: left;'><?php print get_text("Cancel"); ?></SPAN><IMG STYLE='float: right;'
                                                                                                   SRC='./images/plus_small.png'
                                                                                                   BORDER=0></SPAN>
                        <SPAN id='reset_but' CLASS='plain text'
                              style='width: 100px; display: inline-block; float: none;' onMouseover='do_hover(this.id);'
                              onMouseout='do_plain(this.id);' onClick="document.editProf.reset();"><SPAN
                                STYLE='float: left;'><?php print get_text("Reset"); ?></SPAN><IMG STYLE='float: right;'
                                                                                                  SRC='./images/restore_small.png'
                                                                                                  BORDER=0></SPAN>
                        <SPAN id='sub_but' CLASS='plain text' style='width: 100px; display: inline-block; float: none;'
                              onMouseover='do_hover(this.id);' onMouseout='do_plain(this.id);'
                              onClick="validate_prof(document.editProf);"><SPAN
                                STYLE='float: left;'><?php print get_text("Submit"); ?></SPAN><IMG STYLE='float: right;'
                                                                                                   SRC='./images/submit_small.png'
                                                                                                   BORDER=0></SPAN>
                    </TD>
                </TR>
            </TABLE>
            <INPUT TYPE="hidden" NAME="frm_id" VALUE="<?php print $_SESSION['user_id']; ?>">
            <INPUT TYPE='hidden' NAME='frm_hash' VALUE='<?php print $row['passwd']; ?>'>    <!-- 11/30/08 -->
        </FORM>
        <FORM NAME='can_Form' METHOD="post" ACTION="<?php print basename(__FILE__); ?>"></FORM>
        </BODY>
        <SCRIPT>

            function validate_prof(theForm) {            // profile form contents validation
                var errmsg = "";
                if (theForm.frm_passwd.value != theForm.frm_passwd_confirm.value) {
                    errmsg += "\tPASSWORD and CONFIRM fail to match.\n";
                } else {                // 8/27/10
                    if ((theForm.frm_passwd.value.trim() == "") || (theForm.frm_passwd.value.trim().length < 6)) {
                        errmsg += "\tPasswd length 6 or more is required.\n";
                    }
                }

                if (errmsg != "") {
                    alert("Please correct the following and re-submit:\n\n" + errmsg);
                    return false;
                } else {                                        // good to go!
                    //            if(theForm.frm_passwd.value!="") {
                    theForm.frm_hash.value = hex_md5(theForm.frm_passwd.value.trim().toLowerCase());
                    theForm.frm_passwd.value = theForm.frm_passwd_confirm.value = "";                    // hide them
                    //                }
                    theForm.submit();
                }
            }                // end function validate prof(theForm)


            function validate(theForm) {                        //profile validation    - 10/23/08
                var errmsg = "";
                if (theForm.frm_passwd.value.trim().length < 6) {
                    errmsg += "\tPasswd length 6 or more is required.\n";
                }
                if (theForm.frm_passwd.value.trim() != theForm.frm_passwd_confirm.value.trim()) {
                    errmsg += "\tPasswd and confirmation must match.\n";
                }
                if (theForm.frm_email.value.trim().length > 0) {
                    if (!validate_email(theForm.frm_email.value.trim())) {
                        errmsg += "\tValid email format is required.\n";
                    }
                }

                if (errmsg != "") {
                    alert("Please correct the following and re-submit:\n\n" + errmsg);
                    return false;
                } else {                                        // good to go!
                    theForm.submit();
                    return true;
                }
            }                // end function validate(theForm)

        </SCRIPT>
        </HTML>
        <?php
        exit();
    }
    break;

case 'optimize' :
    print "</HEAD>\n<BODY onLoad = 'ck_frames()'>\n";
    include "./incs/links.inc.php";
    optimize_db();
    print '<FONT CLASS="header text">Database optimization complete.</FONT><BR /><BR />';
    print "<SPAN id='fin_but' CLASS='plain text' style='float: none; width: 100px; display: inline-block;' onMouseover='do_hover(this.id);' onMouseout='do_plain(this.id);' onClick='document.can_Form.submit();'><SPAN STYLE='float: left;'><?php print get_text('Finished');?></SPAN><IMG STYLE='float: right;' SRC='./images/finished_small.png' BORDER=0></SPAN>";
    break;

case 'reset' :
    if ((isset($_GET['auth'])) && ($_GET['auth'] == 'true') && ($_POST['frm_confirm'] == 'yes')) {
        print "</HEAD>\n<BODY onLoad = 'ck_frames()'>\n";
    include "./incs/links.inc.php";
        dump_db();    //    for security, dump db to file;
        print "Database Backed Up<BR />";
        $ticket = ((isset($_POST['frm_ticket'])) && ($_POST['frm_ticket'] == 1)) ? 1 : 0;
        $responders = ((isset($_POST['frm_responders'])) && ($_POST['frm_responders'] == 1)) ? 1 : 0;
        $facilities = ((isset($_POST['frm_facilities'])) && ($_POST['frm_facilities'] == 1)) ? 1 : 0;
        $messages = ((isset($_POST['frm_messages'])) && ($_POST['frm_messages'] == 1)) ? 1 : 0;
        $settings = ((isset($_POST['frm_settings'])) && ($_POST['frm_settings'] == 1)) ? 1 : 0;
        $user = ((isset($_POST['frm_user'])) && ($_POST['frm_user'] == 1)) ? 1 : 0;
        reset_db($user, $ticket, $responders, $facilities, $settings, $messages, 1);
        exit();
    } else {
        ?>
        </HEAD>
        <BODY onLoad='ck_frames()'>
        <?php include "./incs/links.inc.php"; ?>
        <DIV STYLE='position: relative; left: 100px;'>
            <FONT CLASS="header text">Reset Database</FONT><BR/>This operation requires confirmation by entering "yes"
            into the "Really reset database" box.<BR/>
            <FONT CLASS="warn"><BR/>Warning! This deletes all previous tickets, actions, patients, users, resets<BR/>
                settings and creates a default admin user.</FONT><BR/><BR/>
        </DIV>
        <FORM NAME='resetDB' METHOD="POST" ACTION="config.php?func=reset&auth=true">
            <TABLE BORDER="0" style='position: relative; left: 100px;'>
                <TR>
                    <TD CLASS="td_label text">Reset tickets/actions:</TD>
                    <TD ALIGN="right">
                        <INPUT TYPE="checkbox" VALUE="1" NAME="frm_ticket">
                    </TD>
                </TR>
                <TR>
                    <TD CLASS="td_label text">Reset users:</TD>
                    <TD ALIGN="right">
                        <INPUT TYPE="checkbox" VALUE="1" NAME="frm_user">
                    </TD>
                </TR>
                <TR>
                    <TD CLASS="td_label text">Reset settings:</TD>
                    <TD ALIGN="right">
                        <INPUT TYPE="checkbox" VALUE="1" NAME="frm_settings">
                    </TD>
                </TR>
                <TR>
                    <TD CLASS="td_label text">Reset responders:</TD>
                    <TD ALIGN="right">
                        <INPUT TYPE="checkbox" VALUE="1" NAME="frm_responders">
                    </TD>
                </TR>
                <TR>
                    <TD CLASS="td_label text">Reset facilities:</TD>
                    <TD ALIGN="right">
                        <INPUT TYPE="checkbox" VALUE="1" NAME="frm_facilities">
                    </TD>
                </TR>
                <TR>
                    <TD CLASS="td_label text">Reset messages:</TD>
                    <TD ALIGN="right">
                        <INPUT TYPE="checkbox" VALUE="1" NAME="frm_messages">
                    </TD>
                </TR>
                <TR>
                    <TD CLASS="td_label text">Really reset database? &nbsp;&nbsp;</TD>
                    <TD>
                        <INPUT MAXLENGTH="20" SIZE="40" TYPE="text" NAME="frm_confirm">
                    </TD>
                </TR>
                <TR>
                    <TD COLSPAN="2">&nbsp;</TD>
                </TR>
                <TR>
                    <TD></TD>
                    <TD ALIGN="center">
                        <SPAN id='cancel_but' CLASS='plain text'
                              style='float: none; width: 100px; display: inline-block;' onMouseover='do_hover(this.id);'
                              onMouseout='do_plain(this.id);' onClick="history.back();"><SPAN
                                STYLE='float: left;'><?php print get_text("Cancel"); ?></SPAN><IMG STYLE='float: right;'
                                                                                                   SRC='./images/cancel_small.png'
                                                                                                   BORDER=0></SPAN>
                        <SPAN id='reset_but' CLASS='plain text'
                              style='float: none; width: 100px; display: inline-block;' onMouseover='do_hover(this.id);'
                              onMouseout='do_plain(this.id);' onClick="document.resetDB.reset();"><SPAN
                                STYLE='float: left;'><?php print get_text("Reset"); ?></SPAN><IMG STYLE='float: right;'
                                                                                                  SRC='./images/restore_small.png'
                                                                                                  BORDER=0></SPAN>
                        <SPAN id='send_but' CLASS='plain text' style='width: 100px; display: inline-block; float: none;'
                              onMouseover='do_hover(this.id);' onMouseout='do_plain(this.id);'
                              onClick="document.resetDB.submit();"><SPAN
                                STYLE='float: left;'><?php print get_text("Apply"); ?></SPAN><IMG STYLE='float: right;'
                                                                                                  SRC='./images/submit_small.png'
                                                                                                  BORDER=0></SPAN>
                    </TD>
                </TR>
            </TABLE>
        </FORM>
        <FORM NAME='can_Form' METHOD="post" ACTION="<?php print basename(__FILE__); ?>"></FORM>
        </BODY>
        </HTML>
        <?php
        exit();
    }
    break;

case 'settings' :
    if ((isset($_GET)) && (isset($_GET['go'])) && ($_GET['go'] == 'true')) {
        print "</HEAD>\n<BODY onLoad = 'ck_frames(); '>\n";
    include "./incs/links.inc.php";        // 1/23/10
        foreach ($_POST as $VarName => $VarValue) {
            $query = "UPDATE `{$GLOBALS['mysql_prefix']}settings` SET `value` = ? WHERE `name` = ?";
            $result = db_query($query, [$VarValue, $VarName]);
        }
        print '<FONT CLASS="update_conf">Settings saved - will take effect at <font color="red"> next Tickets re-start</FONT>.</FONT><BR /><BR />';
    } else {
        print "</HEAD>\n<BODY onLoad = 'ck_frames();'>\n";
    include "./incs/links.inc.php";        // 9/21/08
        $evenodd = array("even", "odd");
        ?>
        <DIV ID='to_bottom' style="position:fixed; top:4px; left:20px; height: 12px; width: 10px;"
             onclick="location.href = '#bottom';"><IMG SRC="markers/down.png" BORDER=0/></div>
        <A NAME="top"/> <!-- 11/11/09 -->

        <?php
        print "<SPAN STYLE='margin-left:40px'><FONT CLASS='header'>Edit Settings</FONT>  (mouseover caption for help information)</SPAN><BR /><BR />
                <TABLE BORDER='0' STYLE='margin-left:40px'><FORM METHOD='POST' NAME= 'set_Form'
                onSubmit='return validate_set(document.set_Form);' ACTION='config.php?func=settings&go=true'>";
        $counter = 0;
        $result = db_query("SELECT * FROM `{$GLOBALS['mysql_prefix']}settings` ORDER BY name");
        while ($row = stripslashes_deep($result->fetch_array())) {
            if ($row['name'][0] <> "_") {                                // hide these
                $capt = str_replace("_", " ", $row['name']);
                print "<TR CLASS='" . $evenodd[$counter % 2] . "'><TD CLASS='td_label'><A HREF='#' TITLE='" . get_setting_help($row['name']) . "'>$capt</A>: &nbsp;</TD>";
                print "<TD><INPUT MAXLENGTH='512' SIZE='128' TYPE='text' VALUE='" . $row['value'] . "' NAME='" . $row['name'] . "'></TD></TR>\n";

                $counter++;
            }
        }        // str_replace ( search, replace, subject)

        print "</FORM></TABLE>\n";        // 7/16/09
        ?>
        <A NAME="bottom"/> <!-- 11/11/09 -->
        <IMG SRC="markers/up.png" BORDER=0 onclick="location.href = '#top';" STYLE='margin-left: 20px'></TD>

        <DIV ID="foo">
            <DIV ID="bar">        <!-- 9/26/09 -->
                <SPAN id='cancel_but' CLASS='plain text' style='float: left; width: 100px; display: inline-block;'
                      onMouseover='do_hover(this.id);' onMouseout='do_plain(this.id);'
                      onClick="document.can_Form.submit();"><SPAN
                        STYLE='float: left;'><?php print get_text("Cancel"); ?></SPAN><IMG STYLE='float: right;'
                                                                                           SRC='./images/cancel_small.png'
                                                                                           BORDER=0></SPAN>
                <?php // 3/19/11
                if ((is_administrator()) || (is_super())) {
                    ?>
                    <SPAN id='reset_but' CLASS='plain text' style='float: left; width: 100px; display: inline-block;'
                          onMouseover='do_hover(this.id);' onMouseout='do_plain(this.id);'
                          onClick="document.set_Form.reset();"><SPAN
                            STYLE='float: left;'><?php print get_text("Reset"); ?></SPAN><IMG STYLE='float: right;'
                                                                                              SRC='./images/restore_small.png'
                                                                                              BORDER=0></SPAN>
                    <SPAN id='sub_but' CLASS='plain text' style='width: 100px; display: inline-block; float: left;'
                          onMouseover='do_hover(this.id);' onMouseout='do_plain(this.id);'
                          onClick="document.set_Form.submit();"><SPAN
                            STYLE='float: left;'><?php print get_text("Submit"); ?></SPAN><IMG STYLE='float: right;'
                                                                                               SRC='./images/submit_small.png'
                                                                                               BORDER=0></SPAN>
                    <?php
                }
                ?>

            </DIV>
        </DIV>

        <FORM NAME='can_Form' METHOD="post" ACTION="<?php print basename(__FILE__); ?>"></FORM>
        </BODY>
        <SCRIPT>
            try {
                parent.frames["upper"].document.getElementById("whom").innerHTML = "<?php print $_SESSION['user'];?>";
                parent.frames["upper"].document.getElementById("level").innerHTML = "<?php print get_level_text($_SESSION['level']);?>";
                parent.frames["upper"].document.getElementById("script").innerHTML = "<?php print LessExtension(basename(__FILE__));?>";
            } catch (e) {
            }
        </SCRIPT>
        </HTML>
        <?php
        exit();
    }                // end else
    break;

case 'msg_settings' :    //    10/23/12
    if ((isset($_GET)) && (isset($_GET['go'])) && ($_GET['go'] == 'true')) {
        print "</HEAD>\n<BODY onLoad = 'ck_frames(); '>\n";
    include "./incs/links.inc.php";        // 1/23/10
        foreach ($_POST as $VarName => $VarValue) {
            if ($VarName != "columns") {
                $query = "UPDATE `{$GLOBALS['mysql_prefix']}msg_settings` SET `value` = ? WHERE `name` = ?";
                $result = db_query($query, [$VarValue, $VarName]);
            }
            if ($VarName == "columns") {
                $the_val = implode(",", $_POST['columns']);
                $query = "UPDATE `{$GLOBALS['mysql_prefix']}msg_settings` SET `value` = ? WHERE `name` = 'columns'";
                $result = db_query($query, [$the_val]);
            }
        }
        print '<FONT CLASS="update_conf">Messaging Settings saved.</FONT><BR /><BR />';
    } else {
        print "</HEAD>\n<BODY onLoad = 'ck_frames();'>\n";
    include "./incs/links.inc.php";        // 9/21/08
        $evenodd = array("even", "odd");
        ?>
        <DIV ID='to_bottom' style="position:fixed; top:4px; left:20px; height: 12px; width: 10px;"
             onclick="location.href = '#bottom';"><IMG SRC="markers/down.png" BORDER=0/></div>
        <A NAME="top"/> <!-- 11/11/09 -->

        <?php
        print "<SPAN STYLE='margin-left:40px'><FONT CLASS='header'>Edit Messaging Settings</FONT>  (mouseover caption for help information)</SPAN><BR /><BR />
                <TABLE BORDER='0' STYLE='margin-left:40px'><FORM METHOD='POST' NAME= 'set_Form'
                onSubmit='return validate_set(document.set_Form);' ACTION='config.php?func=msg_settings&go=true'>";
        $counter = 0;
        $result = db_query("SELECT * FROM `{$GLOBALS['mysql_prefix']}msg_settings` ORDER BY name");
        while ($row = stripslashes_deep($result->fetch_array())) {
            if (($row['name'][0] <> "_") && (($row['name'] <> "columns") && ($row['name'] <> "smsg_provider") && ($row['name'] <> "email_password"))) {                                // hide these
                $capt = str_replace("_", " ", $row['name']);
                print "<TR CLASS='" . $evenodd[$counter % 2] . "'><TD CLASS='td_label'><A HREF='#' TITLE='" . get_msg_settings_help($row['name']) . "'>$capt</A>: &nbsp;</TD>";
                print "<TD><INPUT MAXLENGTH='512' SIZE='128' TYPE='text' VALUE='" . $row['value'] . "' NAME='" . $row['name'] . "'></TD></TR>\n";
                $counter++;
            }
            if (($row['name'][0] <> "_") && ($row['name'] == "email_password")) {        //    hide password characters
                $capt = str_replace("_", " ", $row['name']);
                print "<TR CLASS='" . $evenodd[$counter % 2] . "'><TD CLASS='td_label'><A HREF='#' TITLE='" . get_msg_settings_help($row['name']) . "'>$capt</A>: &nbsp;</TD>";
                print "<TD><INPUT MAXLENGTH='512' SIZE='128' TYPE='password' VALUE='" . $row['value'] . "' NAME='" . $row['name'] . "'></TD></TR>\n";
                $counter++;
            }
            if (($row['name'][0] <> "_") && ($row['name'] == "columns")) {                                // hide these
                $columns_checked = explode(",", $row['value']);
                $chkd1 = (in_array("1", $columns_checked)) ? "CHECKED" : "";
                $chkd2 = (in_array("2", $columns_checked)) ? "CHECKED" : "";
                $chkd3 = (in_array("3", $columns_checked)) ? "CHECKED" : "";
                $chkd4 = (in_array("4", $columns_checked)) ? "CHECKED" : "";
                $chkd5 = (in_array("5", $columns_checked)) ? "CHECKED" : "";
                $chkd6 = (in_array("6", $columns_checked)) ? "CHECKED" : "";
                $chkd7 = (in_array("7", $columns_checked)) ? "CHECKED" : "";
                $chkd8 = (in_array("8", $columns_checked)) ? "CHECKED" : "";
                $capt = str_replace("_", " ", $row['name']);
                print "<TR CLASS='" . $evenodd[$counter % 2] . "'><TD CLASS='td_label'><A HREF='#' TITLE='" . get_msg_settings_help($row['name']) . "'>$capt</A>: &nbsp;</TD>";
                print "<TD><INPUT TYPE=CHECKBOX NAME='columns[]' VALUE=1 " . $chkd1 . ">Ticket";
                print "<INPUT TYPE=CHECKBOX NAME='columns[]' VALUE=2 " . $chkd2 . ">Type";
                print "<INPUT TYPE=CHECKBOX NAME='columns[]' VALUE=3 " . $chkd3 . ">From";
                print "<INPUT TYPE=CHECKBOX NAME='columns[]' VALUE=4 " . $chkd4 . ">To";
                print "<INPUT TYPE=CHECKBOX NAME='columns[]' VALUE=5 " . $chkd5 . ">Subject";
                print "<INPUT TYPE=CHECKBOX NAME='columns[]' VALUE=6 " . $chkd6 . ">Message";
                print "<INPUT TYPE=CHECKBOX NAME='columns[]' VALUE=7 " . $chkd7 . ">Date";
                print "<INPUT TYPE=CHECKBOX NAME='columns[]' VALUE=8 " . $chkd8 . ">Owner";
                print "</TD></TR>\n";
                $counter++;
            }
            if (($row['name'][0] <> "_") && ($row['name'] == "smsg_provider")) {                                // hide these
                $capt = str_replace("_", " ", $row['name']);
                print "<TR CLASS='" . $evenodd[$counter % 2] . "'><TD CLASS='td_label'><A HREF='#' TITLE='" . get_msg_settings_help($row['name']) . "'>$capt</A>: &nbsp;</TD>";
                print "<TD>";
                print "<SELECT NAME='smsg_provider'>";
                $opts = array(0 => "None",
                    1 => "SMS Responder",
                    2 => "Txt Local",
                    3 => "MOTOTRBO Python Text Message Protocol",
                    4 => "SMS Broadcast");

                foreach ($opts as $i => $val) {
                    print "<option value=$i ";
                    if ($row['value'] == $i) print "selected";
                    print ">$val</option>";
                }
                print "</SELECT>";
                print "</TD></TR>\n";

                $counter++;
            }

        }        // str_replace ( search, replace, subject)

        print "</FORM></TABLE>\n";        // 7/16/09
        ?>
        <A NAME="bottom"/> <!-- 11/11/09 -->
        <IMG SRC="markers/up.png" BORDER=0 onclick="location.href = '#top';" STYLE='margin-left: 20px'></TD>
        <DIV ID="foo">
            <DIV ID="bar">        <!-- 9/26/09 -->
                <SPAN id='cancel_but' CLASS='plain text' style='float: left; width: 100px; display: inline-block;'
                      onMouseover='do_hover(this.id);' onMouseout='do_plain(this.id);'
                      onClick="document.can_Form.submit();"><SPAN
                        STYLE='float: left;'><?php print get_text("Cancel"); ?></SPAN><IMG STYLE='float: right;'
                                                                                           SRC='./images/cancel_small.png'
                                                                                           BORDER=0></SPAN>
                <?php // 3/19/11
                if ((is_administrator()) || (is_super())) {
                    ?>
                    <SPAN id='reset_but' CLASS='plain text' style='float: left; width: 100px; display: inline-block;'
                          onMouseover='do_hover(this.id);' onMouseout='do_plain(this.id);'
                          onClick="document.set_Form.reset();"><SPAN
                            STYLE='float: left;'><?php print get_text("Reset"); ?></SPAN><IMG STYLE='float: right;'
                                                                                              SRC='./images/restore_small.png'
                                                                                              BORDER=0></SPAN>
                    <SPAN id='sub_but' CLASS='plain text' style='width: 100px; display: inline-block; float: left;'
                          onMouseover='do_hover(this.id);' onMouseout='do_plain(this.id);'
                          onClick="document.set_Form.submit();"><SPAN
                            STYLE='float: left;'><?php print get_text("Submit"); ?></SPAN><IMG STYLE='float: right;'
                                                                                               SRC='./images/submit_small.png'
                                                                                               BORDER=0></SPAN>
                    <?php
                }
                ?>

            </DIV>
        </DIV>

        <FORM NAME='can_Form' METHOD="post" ACTION="<?php print basename(__FILE__); ?>"></FORM>
        </BODY>
        <SCRIPT>
            try {
                parent.frames["upper"].document.getElementById("whom").innerHTML = "<?php print $_SESSION['user'];?>";
                parent.frames["upper"].document.getElementById("level").innerHTML = "<?php print get_level_text($_SESSION['level']);?>";
                parent.frames["upper"].document.getElementById("script").innerHTML = "<?php print LessExtension(basename(__FILE__));?>";
            } catch (e) {
            }
        </SCRIPT>
        </HTML>
        <?php
        exit();
    }                // end else
    break;

case 'mdb_settings' :
    if ((isset($_GET)) && (isset($_GET['go'])) && ($_GET['go'] == 'true')) {
        print "</HEAD>\n<BODY onLoad = 'ck_frames(); '>\n";
    include "./incs/links.inc.php";
        foreach ($_POST as $VarName => $VarValue) {
            if ($VarName == "date_tracking") {
                $var_arr = array();
                $count = count($_POST['date_tracking']);
                $var_str = implode(",", $_POST['date_tracking']);
                $query = "UPDATE `{$GLOBALS['mysql_prefix']}mdb_settings` SET `value` = ? WHERE `name` = ?";
                $result = db_query($query, [$var_str, $VarName]);
            } else {
                $query = "UPDATE `{$GLOBALS['mysql_prefix']}mdb_settings` SET `value` = ? WHERE `name` = ?";
                $result = db_query($query, [$VarValue, $VarName]);
            }
        }
        print '<FONT CLASS="update_conf">Membership Database Settings saved.<BR /><BR />';
    } else {
        print "</HEAD>\n<BODY onLoad = 'ck_frames();'>\n";
    include "./incs/links.inc.php";        // 9/21/08
        $evenodd = array("even", "odd");
        ?>
        <DIV ID='to_bottom' style="position:fixed; top:4px; left:20px; height: 12px; width: 10px;"
             onclick="location.href = '#bottom';"><IMG SRC="markers/down.png" BORDER=0/></div>
        <A NAME="top"/> <!-- 11/11/09 -->

        <?php
        print "<SPAN STYLE='margin-left:40px'><FONT CLASS='header'>Edit Membership Database Settings</FONT>  (mouseover caption for help information)</SPAN><BR /><BR />
                <TABLE BORDER='0' STYLE='margin-left:40px'><FORM METHOD='POST' NAME= 'set_Form'
                onSubmit='return validate_set(document.set_Form);' ACTION='config.php?func=mdb_settings&go=true'>";
        $counter = 0;
        $result = db_query("SELECT * FROM `{$GLOBALS['mysql_prefix']}mdb_settings` ORDER BY name");
        while ($row = stripslashes_deep($result->fetch_array())) {
            if (($row['name'][0] <> "_") && (($row['name'] <> "date_tracking") && ($row['name'] <> "mdb_contact_via_field") && ($row['name'] <> "mdb_cellphone_field") && ($row['name'] <> "mdb_homephone_field") && ($row['name'] <> "mdb_workphone_field") && ($row['name'] <> "mdb_phone_field") && ($row['name'] <> "mdb_smsg_id_field") && ($row['name'] <> "tickets_status_available") && ($row['name'] <> "tickets_status_unavailable") && ($row['name'] <> "member_status_available") && ($row['name'] <> "enforce_status") && ($row['name'] <> "no_status_select") && ($row['name'] <> "use_mdb_contact") && ($row['name'] <> "use_mdb_status"))) {                                // hide these
                $capt = str_replace("_", " ", $row['name']);
                print "<TR CLASS='" . $evenodd[$counter % 2] . "'><TD CLASS='td_label'><A HREF='#' TITLE='" . get_mdb_settings_help($row['name']) . "'>$capt</A>: &nbsp;</TD>";
                print "<TD><INPUT MAXLENGTH='512' SIZE='48' TYPE='text' VALUE='" . $row['value'] . "' NAME='" . $row['name'] . "'></TD></TR>\n";
                $counter++;
            } else {
                if ($row['name'] == "date_tracking") {
                    $temp1 = get_mem_datetime_fields();
                    $numMemDateTimeFields = count($temp1);
                    $temp2 = get_veh_datetime_fields();
                    $numVehDateTimeFields = count($temp2);
                    $fields_arr = array_merge($temp1, $temp2);
                    $fieldnames = array();
                    foreach ($fields_arr as $key => $val) {
                        $fieldnames[] = $val['label'];
                    }
                    $numDateTimeFields = $numMemDateTimeFields + $numVehDateTimeFields;
                    $val_checked = explode(",", $row['value']);
                    $capt = str_replace("_", " ", $row['name']);
                    print "<TR CLASS='" . $evenodd[$counter % 2] . "'><TD CLASS='td_label'><A HREF='#' TITLE='" . get_mdb_settings_help($row['name']) . "'>$capt</A>: &nbsp;</TD><TD>";
                    for ($n = 0; $n < $numDateTimeFields; $n++) {
                        $chkd = ($val_checked[$n] == "1") ? "CHECKED" : "";
                        print "<INPUT TYPE = 'hidden' NAME='date_tracking[" . $n . "]' VALUE='0'>";
                        print "<INPUT TYPE = 'checkbox' NAME='date_tracking[" . $n . "]' VALUE='1' " . $chkd . ">" . $fieldnames[$n] . "<BR />";
                    }
                    print "</TD></TR>\n";
                    $counter++;
                } elseif ($row['name'] == "enforce_status" || $row['name'] == "no_status_select" || $row['name'] == "use_mdb_contact" || $row['name'] == "use_mdb_status") {
                    $capt = str_replace("_", " ", $row['name']);
                    print "<TR CLASS='" . $evenodd[$counter % 2] . "'><TD CLASS='td_label'><A HREF='#' TITLE='" . get_mdb_settings_help($row['name']) . "'>$capt</A>: &nbsp;</TD>";
                    print "<TD><SELECT style='width: 100%;' name='" . $row['name'] . "'>";
                    $no = ($row['value'] == 0) ? "selected" : "";
                    $yes = ($row['value'] == 1) ? "selected" : "";
                    print "<OPTION value=0 " . $no . ">No</OPTION>";
                    print "<OPTION value=1 " . $yes . ">Yes</OPTION>";
                    print "</SELECT></TD>";
                    print "</TR>\n";
                    $counter++;
                } elseif ($row['name'] == "mdb_contact_via_field" || $row['name'] == "mdb_cellphone_field" || $row['name'] == "mdb_phone_field" || $row['name'] == "mdb_smsg_id_field") {
                    $capt = str_replace("_", " ", $row['name']);
                    print "<TR CLASS='" . $evenodd[$counter % 2] . "'><TD CLASS='td_label'><A HREF='#' TITLE='" . get_mdb_settings_help($row['name']) . "'>$capt</A>: &nbsp;</TD>";
                    print "<TD>" . get_mdb_fields_select($row['name'], $row['value']) . "</TD>";
                    print "</TR>\n";
                    $counter++;
                } elseif ($row['name'] == "tickets_status_available" || $row['name'] == "tickets_status_unavailable") {
                    $capt = str_replace("_", " ", $row['name']);
                    print "<TR CLASS='" . $evenodd[$counter % 2] . "'><TD CLASS='td_label'><A HREF='#' TITLE='" . get_mdb_settings_help($row['name']) . "'>$capt</A>: &nbsp;</TD>";
                    print "<TD>" . get_tickets_status_select($row['name'], $row['value']) . "</TD>";
                    print "</TR>\n";
                    $counter++;
                } elseif ($row['name'] == "member_status_available") {
                    $capt = str_replace("_", " ", $row['name']);
                    print "<TR CLASS='" . $evenodd[$counter % 2] . "'><TD CLASS='td_label'><A HREF='#' TITLE='" . get_mdb_settings_help($row['name']) . "'>$capt</A>: &nbsp;</TD>";
                    print "<TD>" . get_mdb_status_select($row['name'], $row['value']) . "</TD>";
                    print "</TR>\n";
                    $counter++;
                } else {
                    $capt = str_replace("_", " ", $row['name']);
                    print "<TR CLASS='" . $evenodd[$counter % 2] . "'><TD CLASS='td_label'><A HREF='#' TITLE='" . get_msg_settings_help($row['name']) . "'>$capt</A>: &nbsp;</TD>";
                    print "<TD>" . get_mdb_fields_select($row['name'], $row['value']) . "</TD></TR>\n";
                    $counter++;
                }

            }
        }        // str_replace ( search, replace, subject)

        print "</FORM></TABLE>\n";        // 7/16/09
        ?>
        <A NAME="bottom"/> <!-- 11/11/09 -->
        <IMG SRC="markers/up.png" BORDER=0 onclick="location.href = '#top';" STYLE='margin-left: 20px'></TD>
        <DIV ID="foo">
            <DIV ID="bar">        <!-- 9/26/09 -->
                <SPAN id='cancel_but' CLASS='plain text' style='float: left; width: 100px; display: inline-block;'
                      onMouseover='do_hover(this.id);' onMouseout='do_plain(this.id);'
                      onClick="document.can_Form.submit();"><SPAN
                        STYLE='float: left;'><?php print get_text("Cancel"); ?></SPAN><IMG STYLE='float: right;'
                                                                                           SRC='./images/cancel_small.png'
                                                                                           BORDER=0></SPAN>
                <?php // 3/19/11
                if ((is_administrator()) || (is_super())) {
                    ?>
                    <SPAN id='reset_but' CLASS='plain text' style='float: left; width: 100px; display: inline-block;'
                          onMouseover='do_hover(this.id);' onMouseout='do_plain(this.id);'
                          onClick="document.set_Form.reset();"><SPAN
                            STYLE='float: left;'><?php print get_text("Reset"); ?></SPAN><IMG STYLE='float: right;'
                                                                                              SRC='./images/restore_small.png'
                                                                                              BORDER=0></SPAN>
                    <SPAN id='sub_but' CLASS='plain text' style='width: 100px; display: inline-block; float: left;'
                          onMouseover='do_hover(this.id);' onMouseout='do_plain(this.id);'
                          onClick="document.set_Form.submit();"><SPAN
                            STYLE='float: left;'><?php print get_text("Submit"); ?></SPAN><IMG STYLE='float: right;'
                                                                                               SRC='./images/submit_small.png'
                                                                                               BORDER=0></SPAN>
                    <?php
                }
                ?>

            </DIV>
        </DIV>

        <FORM NAME='can_Form' METHOD="post" ACTION="<?php print basename(__FILE__); ?>"></FORM>
        </BODY>
        <SCRIPT>
            try {
                parent.frames["upper"].document.getElementById("whom").innerHTML = "<?php print $_SESSION['user'];?>";
                parent.frames["upper"].document.getElementById("level").innerHTML = "<?php print get_level_text($_SESSION['level']);?>";
                parent.frames["upper"].document.getElementById("script").innerHTML = "<?php print LessExtension(basename(__FILE__));?>";
            } catch (e) {
            }
        </SCRIPT>
        </HTML>
        <?php
        exit();
    }                // end else
    break;

case 'wizard_settings' :
    if ((isset($_GET)) && (isset($_GET['go'])) && ($_GET['go'] == 'true')) {
        print "</HEAD>\n<BODY onLoad = 'ck_frames(); '>\n";
    include "./incs/links.inc.php";
        $delcounter = 0;
        if (array_key_exists('frm_delete', $_POST)) {
            foreach ($_POST['frm_delete'] as $key => $val) {
                if ($val == "1") {
                    $query = "DELETE FROM `{$GLOBALS['mysql_prefix']}wizard_settings` WHERE `id` = ? LIMIT 1";
                    $result = db_query($query, [$key]);
                    $delcounter++;
                }
            }
            if ($delcounter > 0) {
                print $delcounter . " Field Settings removed from New Incident Wizard.";
            }
        }
        if (array_key_exists('frm_new', $_POST)) {
            $fieldindex = get_field_index("ticket", $_POST['frm_fieldname']);
            $type = get_field_type("ticket", $fieldindex);
            switch ($type) {
                case "BLOB":
                    $fieldtype = "TEXTAREA";
                    break;
                case "LONG":
                case "VAR_STRING";
                case "STRING";
                    $fieldtype = "TEXT STRING";
                    break;
                case "DATETIME":
                    $fieldtype = "DATETIME";
                    break;
                default:
                    $fieldtype = "TEXT STRING";
            }
            $fieldname = get_field_name("ticket", $fieldindex);
            $fieldsize = get_field_size('ticket', $fieldindex);
            if ($fieldtype == "TEXT STRING") {
                $maxlength = 64;;
            } else {
                $maxlength = $fieldsize;
            }
            $query = "INSERT INTO `{$GLOBALS['mysql_prefix']}wizard_settings` (`fieldname`, `label`, `screen`, `display_order`, `maxlength`, `fieldtype`, `size`, `default_text`, `helptext`) VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?)";
            $result = db_query($query, [$fieldname, $_POST['frm_label'][0], $_POST['frm_screen'][0], $_POST['frm_display_order'][0], $maxlength, $fieldtype, $fieldsize, $_POST['frm_default_text'][0], $_POST['frm_helptext'][0]]);
            print "New Setting Submitted<BR />";
        } else {
            $output_arr = array();
            foreach ($_POST as $key => $setting) {
                foreach ($setting as $key2 => $value) {
                    $output_arr[$key2][$key] = $value;
                }
            }
            foreach ($output_arr as $key => $val) {
                $query = "UPDATE `{$GLOBALS['mysql_prefix']}wizard_settings` SET
                        `fieldname` = ?,
                        `label` = ?,
                        `screen` = ?,
                        `display_order` = ?,
                        `maxlength` = ?,
                        `fieldtype` = ?,
                        `helptext` = ?,
                        `default_text` = ?,
                        `size` = ?
                        WHERE `id` = ?";
                $result = db_query($query, [$val['frm_fieldname'], $val['frm_label'], $val['frm_screen'], $val['frm_display_order'], $val['frm_maxlength'], $val['frm_fieldtype'], $val['frm_helptext'], $val['frm_default_text'], $val['frm_fieldsize'], $key]);
            }
            print '<FONT CLASS="update_conf">Wizard Settings saved.<BR /><BR />';
        }
    } else {
        ?>
        <SCRIPT>
            function do_screeenandorder_validation(selectedid, theID, theControl) {
                var thisControl = theControl.getAttribute('id');
                var thisControlValue = $(thisControl).value;
                var thisScreen = $("frm_screen_" + theID);
                var thisScreenValue = thisScreen.value;
                var fieldlength = document.getElementsByName("frm_fieldname[]").length;
                var selects = document.getElementsByTagName("select");
                for (var i = 1; i <= selects.length; i++) {
                    var screenfield = $("frm_screen_" + i);
                    var theField = $("frm_fieldname_" + i);
                    var theSelect = $("disp_order_" + i);
                    var selectValue = $(theSelect).value;
                    var screenValue = screenfield.value;
                    if (screenfield && theField) {
                        if (selectValue == thisControlValue && screenValue == thisScreenValue) {
                            alert("That screen and order combination is aleady set for " + theField.value);
                        }
                    }
                }
            }

            function do_delete_setting(theID) {
                if (confirm("Please confirm you wish to delete this field from the \"New Incident Wizard\".")) {
                    var fieldName = "frm_delete_" + theID;
                    $(fieldName).value = 1;
                    $('settingRow_' + theID).style.backgroundColor = 'red';
                    return true;
                } else {
                    return false;
                }
            }

            function do_reset_settings() {
                var table = $('settings_table');
                var rows = table.getElementsByTagName('tr');
                for (var i = 0; i <= rows.length; i++) {
                    rows[i].style.backgroundColor = "";
                }
                document.set_Form.reset();
            }

        </SCRIPT>
        <?php
        print "</HEAD>\n<BODY onLoad = 'ck_frames();'>\n";
    include "./incs/links.inc.php";        // 9/21/08
        $evenodd = array("even", "odd");
        $mandatory = array();
        $mandatory[0] = 'in_types_id';
        $mandatory[1] = 'contact';
        $mandatory[2] = 'address';
        $mandatory[4] = 'state';
        $mandatory[7] = 'scope';
        $mandatory[8] = 'description';
        $mandatory[9] = 'problemstart';

        ?>
        <DIV ID='to_bottom' style="position:fixed; top:4px; left:20px; height: 12px; width: 10px;"
             onclick="location.href = '#bottom';"><IMG SRC="markers/down.png" BORDER=0/></div>
        <A NAME="top"/> <!-- 11/11/09 -->

        <?php
        print "<SPAN STYLE='position: relative; top: 30px; margin-left: 40px'><FONT CLASS='header text_biggest'>Edit New Incident Wizard Settings</FONT>&nbsp;&nbsp;&nbsp;(mouseover caption for help information)</SPAN><BR /><BR />
                <FORM METHOD='POST' NAME= 'set_Form' onSubmit='return validate_set(document.set_Form);' ACTION='config.php?func=wizard_settings&go=true'>
                <TABLE id='settings_table' BORDER='0' STYLE='position: relative; top: 30px; margin-left: 40px; width: auto;'>";
        print "<TR CLASS='header text text_left'><TH CLASS='header text text_left'>Field</TH><TH CLASS='header text text_left'>Label</TH><TH CLASS='header text text_left'>Screen</TH><TH CLASS='header text text_left'>Display Order</TH><TH CLASS='header text text_left'>Default Text</TH><TH CLASS='header text text_left'>Help Text</TH><TH CLASS='header text text_left'>Field Display Length</TH><TH CLASS='header text text_left'>Field Type</TH><TH CLASS='header text text_left'>Field Size</TH><TH CLASS='header text text_left'>&nbsp;&nbsp;&nbsp;</TH></TR>\n";
        $counter = 0;
        $result = db_query("SELECT * FROM `{$GLOBALS['mysql_prefix']}wizard_settings` ORDER BY screen, display_order");
        while ($row = stripslashes_deep($result->fetch_array())) {
            $counter++;
            print "<TR id='settingRow_" . $row['id'] . "' CLASS='" . $evenodd[$counter % 2] . "' STYLE='width: 100%;'>\n";
            $id = $row['id'];
            $screen = $row['screen'];
            $name = $row['fieldname'];
            $label = $row['label'];
            $display_order = $row['display_order'];
            $default_text = $row['default_text'];
            $helptext = $row['helptext'];
            if ($name == "address") {
                $fieldindex = "address";
            } else {
                $fieldindex = get_field_index("ticket", $name);
            }
            if ($name == "address") {
                $type = "STRING";
            } else {
                $type = get_field_type("ticket", $fieldindex);
            }
            switch ($type) {
                case "BLOB":
                    $fieldtype = "TEXTAREA";
                    break;
                case "LONG":
                case "VAR_STRING";
                case "STRING";
                    $fieldtype = "TEXT STRING";
                    break;
                case "DATETIME":
                    $fieldtype = "DATETIME";
                    break;
                default:
                    $fieldtype = "TEXT STRING";
            }
            if ($name == "address") {
                $fieldname == "address";
                $fieldsize == 128;
            } else {
                $fieldname = get_field_name("ticket", $fieldindex);
                $fieldsize = get_field_size('ticket', $fieldindex);
            }
            $control = get_wizard_field_select($name, $id);
            $disporderControl = "<SELECT id='disp_order_" . $id . "' name='frm_display_order[" . $id . "]' onChange='do_screeenandorder_validation(this.value, " . $id . ", this);' STYLE='width: 90%;'>\n";
            $sel1 = $sel2 = $sel3 = $sel4 = "";
            switch ($display_order) {
                case 1:
                    $sel1 = "SELECTED ";
                    break;
                case 2:
                    $sel2 = "SELECTED ";
                    break;
                case 3:
                    $sel3 = "SELECTED ";
                    break;
                case 4:
                    $sel4 = "SELECTED ";
                    break;
            }
            $disporderControl .= "<OPTION VALUE=1 " . $sel1 . ">1</OPTION><OPTION VALUE=2 " . $sel2 . ">2</OPTION><OPTION VALUE=3 " . $sel3 . ">3</OPTION><OPTION VALUE=4 " . $sel4 . ">4</OPTION>";
            $disporderControl .= "</SELECT>\n";
            print "<TD style='border-right: 1px solid red;' class='td_data text text_left'>" . $control . "</TD>\n";
            print "<TD style='border-right: 1px solid red;' CLASS='td_data text text_center'><INPUT STYLE='width: 90%;' id='frm_label_" . $id . "' type='text' name='frm_label[" . $id . "]' value='" . $label . "' /></TD>\n";
            print "<TD style='border-right: 1px solid red;' CLASS='td_data text text_center'><INPUT STYLE='width: 90%;' id='frm_screen_" . $id . "' type='text' name='frm_screen[" . $id . "]' value='" . $screen . "' /></TD>\n";
            print "<TD style='border-right: 1px solid red;' CLASS='td_data text text_center'>" . $disporderControl . "</TD>\n";
            print "<TD style='border-right: 1px solid red;' CLASS='td_data text text_center'><INPUT STYLE='width: 90%;' type='text' id='frm_default_text_" . $id . "' name='frm_default_text[" . $id . "]' value='" . $default_text . "' /></TD>\n";
            print "<TD style='border-right: 1px solid red;' CLASS='td_data text text_center'><INPUT STYLE='width: 90%;' type='text' id='frm_helptext_" . $id . "' name='frm_helptext[" . $id . "]' value='" . $helptext . "' /></TD>\n";
            if ($fieldtype == "TEXT STRING") {
                print "<TD style='border-right: 1px solid red;' CLASS='td_data text text_center'><INPUT STYLE='width: 90%;' type='text' id='frm_maxlength_" . $id . "' name='frm_maxlength[" . $id . "]' value='64' /></TD>\n";
            } else {
                print "<TD style='border-right: 1px solid red;' CLASS='td_data text text_center'><INPUT STYLE='width: 90%;' type='text' id='frm_maxlength_" . $id . "' name='frm_maxlength[" . $id . "]' value='" . $fieldsize . "' /></TD>\n";
            }
            print "<TD style='border-right: 1px solid red;' CLASS='td_data text text_left'>" . $fieldtype . "&nbsp;&nbsp;&nbsp;</TD>\n";
            print "<TD style='border-right: 1px solid red;' CLASS='td_data text text_left'>" . $fieldsize . "&nbsp;&nbsp;&nbsp;</TD>\n";
            $delete = (in_array($name, $mandatory)) ? "" : "<SPAN id='delete_button_" . $id . "' class='plain' onMouseover='do_hover(this.id);' onMouseout='do_plain(this.id);' onClick=\"do_delete_setting(" . $id . ");\"><IMG STYLE='float: right;' SRC='./images/delete.png' BORDER=0></SPAN>";
            print "<TD style='border-right: 1px solid red;' CLASS='td_data text text_center'>" . $delete . "</TD>\n";
            print "</TR>\n";
            print "<INPUT TYPE='hidden' NAME='frm_fieldtype[" . $id . "]' VALUE='" . $fieldtype . "' />";
            print "<INPUT TYPE='hidden' NAME='frm_fieldsize[" . $id . "]' VALUE='" . $fieldsize . "' />";
            print "<INPUT TYPE='hidden' ID='frm_delete_" . $id . "' NAME='frm_delete[" . $id . "]' VALUE='' />";
        }

        print "</TABLE></FORM><BR /><BR /><BR />";
        $control = get_wizard_field_select(null, null);
        if ($control != "") {
            print "<SPAN STYLE='margin-left:40px'><FONT CLASS='header'>Add New Field</FONT>  (mouseover caption for help information)</SPAN><BR /><BR />";
            print "<FORM METHOD='POST' NAME= 'new_set_Form' ACTION='config.php?func=wizard_settings&go=true'>";
            print "<TABLE BORDER='0' STYLE='margin-left: 40px; width: auto;'>";
            print "<TR CLASS='header text text_left'><TH CLASS='header text text_left'>Field</TH><TH CLASS='header text text_left'>Label</TH><TH CLASS='header text text_left'>Screen</TH><TH CLASS='header text text_left'>Display Order</TH><TH CLASS='header text text_left'>Default Text</TH><TH CLASS='header text text_left'>Help Text</TH></TR>";
            $counter = 0;
            print "<TR CLASS='" . $evenodd[$counter % 2] . "' STYLE='width: 100%;'>";
            print "<TD class='td_data text text_left'>" . $control . "</TD>";
            print "<TD CLASS='td_data text text_center'><INPUT type='text' id='frm_label_0' name='frm_label[0]' value='' /></TD>";
            print "<TD CLASS='td_data text text_center'><INPUT type='text' id='frm_screen_0' name='frm_screen[0]' value='1' /></TD>";
            $disporderControl = "<SELECT id='disp_order_0' name='frm_display_order[0]' onChange='do_screeenandorder_validation(this.value, 0, this);'>\n";
            $disporderControl .= "<OPTION VALUE=1 SELECTED>1</OPTION>\n<OPTION VALUE=2>2</OPTION>\n<OPTION VALUE=3>3</OPTION>\n<OPTION VALUE=4>4</OPTION>\n";
            $disporderControl .= "</SELECT>\n";
            print "<TD CLASS='td_data text text_center'>" . $disporderControl . "</TD>";
            print "<TD CLASS='td_data text text_center'><INPUT type='text' id='frm_default_text_0' name='frm_default_text[0]' value='' /></TD>";
            print "<TD CLASS='td_data text text_center'><INPUT type='text' id='frm_helptext_0' name='frm_helptext[0]' value='' /></TD>";
            print "<TD CLASS='td_data text text_center'>";
            print "<SPAN id='add_but' CLASS='plain text' style='width: 100px; display: inline-block; float: left;' onMouseover='do_hover(this.id);' onMouseout='do_plain(this.id);' onClick='document.new_set_Form.submit();'><SPAN STYLE='float: left;'>" . get_text('Add New') . "</SPAN><IMG STYLE='float: right;' SRC='./images/submit_small.png' BORDER=0></SPAN>";
            print "</TD>\n";
            print "</TR>";
            print "</TABLE>";
            print "<INPUT TYPE='hidden' NAME='frm_new' VALUE=1 />";
            print "</FORM>\n";
        }
        ?>
        <A NAME="bottom"/> <!-- 11/11/09 -->
        <IMG SRC="markers/up.png" BORDER=0 onclick="location.href = '#top';" STYLE='margin-left: 20px'></TD>
        <DIV ID="foo">
            <DIV ID="bar">        <!-- 9/26/09 -->
                <SPAN id='cancel_but' CLASS='plain text' style='float: left; width: 100px; display: inline-block;'
                      onMouseover='do_hover(this.id);' onMouseout='do_plain(this.id);'
                      onClick="document.can_Form.submit();"><SPAN
                        STYLE='float: left;'><?php print get_text("Cancel"); ?></SPAN><IMG STYLE='float: right;'
                                                                                           SRC='./images/cancel_small.png'
                                                                                           BORDER=0></SPAN>
                <?php // 3/19/11
                if ((is_administrator()) || (is_super())) {
                    ?>
                    <SPAN id='reset_but' CLASS='plain text' style='float: left; width: 100px; display: inline-block;'
                          onMouseover='do_hover(this.id);' onMouseout='do_plain(this.id);'
                          onClick="do_reset_settings();"><SPAN
                            STYLE='float: left;'><?php print get_text("Reset"); ?></SPAN><IMG STYLE='float: right;'
                                                                                              SRC='./images/restore_small.png'
                                                                                              BORDER=0></SPAN>
                    <SPAN id='sub_but' CLASS='plain text' style='width: 100px; display: inline-block; float: left;'
                          onMouseover='do_hover(this.id);' onMouseout='do_plain(this.id);'
                          onClick="document.set_Form.submit();"><SPAN
                            STYLE='float: left;'><?php print get_text("Submit"); ?></SPAN><IMG STYLE='float: right;'
                                                                                               SRC='./images/submit_small.png'
                                                                                               BORDER=0></SPAN>
                    <?php
                }
                ?>

            </DIV>
        </DIV>

        <FORM NAME='can_Form' METHOD="post" ACTION="<?php print basename(__FILE__); ?>"></FORM>
        </BODY>
        <SCRIPT>
            try {
                parent.frames["upper"].document.getElementById("whom").innerHTML = "<?php print $_SESSION['user'];?>";
                parent.frames["upper"].document.getElementById("level").innerHTML = "<?php print get_level_text($_SESSION['level']);?>";
                parent.frames["upper"].document.getElementById("script").innerHTML = "<?php print LessExtension(basename(__FILE__));?>";
            } catch (e) {
            }
        </SCRIPT>
        </HTML>
        <?php
        exit();
    }                // end else
    break;

case 'sound_settings' :
    if ((isset($_GET)) && (isset($_GET['go'])) && ($_GET['go'] == 'true')) {
        print "</HEAD>\n<BODY onLoad = 'ck_frames(); '>\n";
    include "./incs/links.inc.php";
        $delcounter = 0;
        if (array_key_exists('frm_delete', $_POST)) {
            foreach ($_POST['frm_delete'] as $key => $val) {
                if ($val == "1") {
                    $query = "DELETE FROM `{$GLOBALS['mysql_prefix']}sound_settings` WHERE `id` = ? LIMIT 1";
                    $result = db_query($query, [$key]);
                    $delcounter++;
                }
            }
            if ($delcounter > 0) {
                print $delcounter . " Field Settings removed from New Incident Wizard.";
            }
        }

        $soundnames = array();
        $soundnames[1] = "Incident";
        $soundnames[2] = "Responder";
        $soundnames[3] = "Message";
        $soundnames[4] = "Chat";
        $soundnames[5] = "Broadcast";
        $output_arr = array();
        foreach ($_POST as $key => $setting) {
            foreach ($setting as $key2 => $value) {
                $output_arr[$key2][$key] = $value;
                $output_arr[$key2]['frm_name'] = $soundnames[$key2];
                $output_arr[$key2]['frm_ison'] = (isset($_POST['frm_ison'][$key2])) ? 1 : 0;
            }
        }
        foreach ($output_arr as $key => $val) {
            $query = "UPDATE `{$GLOBALS['mysql_prefix']}sound_settings` SET
                    `name` = ?,
                    `filename` = ?,
                    `mp3_filename` = ?,
                    `ison` = ?
                    WHERE `id` = ?";
            $result = db_query($query, [$val['frm_name'], $val['frm_filename'], $val['frm_mp3_filename'], $val['frm_ison'], $key]);
        }
        print '<FONT CLASS="update_conf">Sound Settings saved.<BR /><BR />';
    } else {
        print "</HEAD>\n<BODY onLoad = 'ck_frames();'>\n";
    include "./incs/links.inc.php";        // 9/21/08
        $evenodd = array("even", "odd");
        ?>
        <DIV ID='to_bottom' style="position:fixed; top:4px; left:20px; height: 12px; width: 10px;"
             onclick="location.href = '#bottom';"><IMG SRC="markers/down.png" BORDER=0/></div>
        <A NAME="top"/> <!-- 11/11/09 -->

        <?php
        $soundnames = array();
        $soundnames[1] = "Incident";
        $soundnames[2] = "Responder";
        $soundnames[3] = "Message";
        $soundnames[4] = "Chat";
        $soundnames[5] = "Broadcast";

        $theSounds = array();
        $theDirectory = getcwd() . '/sounds/';
        $theSounds = read_directory($theDirectory, "wav");

        $theMP3Sounds = array();
        $theDirectory = getcwd() . '/sounds/';
        $theMP3Sounds = read_directory($theDirectory, "mp3");

        print "<SPAN STYLE='position: relative; top: 30px; margin-left: 40px'><FONT CLASS='header text_biggest'>Edit Sound Settings</FONT>&nbsp;&nbsp;&nbsp;(mouseover caption for help information)</SPAN><BR /><BR />
                <FORM METHOD='POST' NAME= 'set_Form' onSubmit='return validate_set(document.set_Form);' ACTION='config.php?func=sound_settings&go=true'>
                <TABLE id='settings_table' BORDER='0' STYLE='position: relative; top: 30px; margin-left: 40px; width: auto; padding: 2px;'>";
        print "<TR CLASS='header text text_left'><TH CLASS='header text text_left'>&nbsp;</TH><TH CLASS='header text text_left'>Name</TH><TH CLASS='header text text_left'>WAV File Name</TH><TH CLASS='header text text_left'>MP3 File Name</TH><TH CLASS='header text text_left'>Sound Used</TH></TR>\n";
        $counter = 0;
        $result = db_query("SELECT * FROM `{$GLOBALS['mysql_prefix']}sound_settings` ORDER BY id");
        while ($row = stripslashes_deep($result->fetch_array())) {
            $counter++;
            print "<TR id='settingRow_" . $row['id'] . "' CLASS='" . $evenodd[$counter % 2] . "' STYLE='width: 100%; padding: 2px;'>\n";
            $id = $row['id'];
            $name = ($row['name'] != "") ? $row['name'] : $soundnames[$row['id']];
            $filename = $row['filename'];
            $ison = $row['ison'];
            print "<TD style='border-right: 1px solid red; padding: 2px;' class='td_data text text_left'>" . $id . "</TD>\n";
            print "<TD style='border-right: 1px solid red; padding: 2px;' CLASS='td_data text text_center'><INPUT id='frm_name_" . $id . "' type='text' name='frm_name[" . $id . "]' value='" . $name . "' READONLY/></TD>\n";
            print "<TD style='border-right: 1px solid red; padding: 2px;' CLASS='td_data text text_center'>";
            print "<SELECT ID='frm_filename_" . $id . "' NAME='frm_filename[" . $id . "]'>";
            print "\t<OPTION VALUE=0 SELECTED>Select Sound</OPTION>\n";
            foreach ($theSounds as $key => $val) {
                $sel = ($row['filename'] == $val) ? " SELECTED" : "";
                print "\t<OPTION VALUE='" . $val . "'" . $sel . ">" . $val . "</OPTION>\n";
            }
            print "</SELECT></TD>\n";
            print "<TD style='border-right: 1px solid red; padding: 2px;' CLASS='td_data text text_center'>";
            print "<SELECT ID='frm_mp3_filename_" . $id . "' NAME='frm_mp3_filename[" . $id . "]'>";
            print "\t<OPTION VALUE=0 SELECTED>Select Sound</OPTION>\n";
            foreach ($theMP3Sounds as $key => $val) {
                $sel = ($row['mp3_filename'] == $val) ? " SELECTED" : "";
                print "\t<OPTION VALUE='" . $val . "'" . $sel . ">" . $val . "</OPTION>\n";
            }
            print "</SELECT></TD>\n";
            $chkd = ($ison == 1) ? " CHECKED" : "";
            print "<TD style='border-right: 1px solid red; padding: 2px;' CLASS='td_data text text_center'><INPUT TYPE='checkbox' VALUE=1 NAME='frm_ison[" . $id . "]'" . $chkd . " /></TD>";
            print "</TR>\n";
        }

        print "</TABLE>";
        print "</FORM><BR /><BR /><BR />";
        ?>
        <A NAME="bottom"/> <!-- 11/11/09 -->
        <IMG SRC="markers/up.png" BORDER=0 onclick="location.href = '#top';" STYLE='margin-left: 20px'></TD>
        <DIV ID="foo">
            <DIV ID="bar">        <!-- 9/26/09 -->
                <SPAN id='cancel_but' CLASS='plain text' style='float: left; width: 100px; display: inline-block;'
                      onMouseover='do_hover(this.id);' onMouseout='do_plain(this.id);'
                      onClick="document.can_Form.submit();"><SPAN
                        STYLE='float: left;'><?php print get_text("Cancel"); ?></SPAN><IMG STYLE='float: right;'
                                                                                           SRC='./images/cancel_small.png'
                                                                                           BORDER=0></SPAN>
                <?php // 3/19/11
                if ((is_administrator()) || (is_super())) {
                    ?>
                    <SPAN id='reset_but' CLASS='plain text' style='float: left; width: 100px; display: inline-block;'
                          onMouseover='do_hover(this.id);' onMouseout='do_plain(this.id);'
                          onClick="do_reset_settings();"><SPAN
                            STYLE='float: left;'><?php print get_text("Reset"); ?></SPAN><IMG STYLE='float: right;'
                                                                                              SRC='./images/restore_small.png'
                                                                                              BORDER=0></SPAN>
                    <SPAN id='sub_but' CLASS='plain text' style='width: 100px; display: inline-block; float: left;'
                          onMouseover='do_hover(this.id);' onMouseout='do_plain(this.id);'
                          onClick="document.set_Form.submit();"><SPAN
                            STYLE='float: left;'><?php print get_text("Submit"); ?></SPAN><IMG STYLE='float: right;'
                                                                                               SRC='./images/submit_small.png'
                                                                                               BORDER=0></SPAN>
                    <?php
                }
                ?>

            </DIV>
        </DIV>

        <FORM NAME='can_Form' METHOD="post" ACTION="<?php print basename(__FILE__); ?>"></FORM>
        </BODY>
        <SCRIPT>
            try {
                parent.frames["upper"].document.getElementById("whom").innerHTML = "<?php print $_SESSION['user'];?>";
                parent.frames["upper"].document.getElementById("level").innerHTML = "<?php print get_level_text($_SESSION['level']);?>";
                parent.frames["upper"].document.getElementById("script").innerHTML = "<?php print LessExtension(basename(__FILE__));?>";
            } catch (e) {
            }
        </SCRIPT>
        </HTML>
        <?php
        exit();
    }                // end else
    break;

case 'user' :
    print "</HEAD>\n<BODY onLoad = 'ck_frames()'>\n";
    include "./incs/links.inc.php";
    if ((array_key_exists('id', ($_GET))) && ($_GET['id'] != '')) {
        if (is_administrator()) {                // admin or super

            $id = sanitize_int($_GET['id']);
            if ($id < 0 or check_for_rows("SELECT id FROM `{$GLOBALS['mysql_prefix']}user` WHERE id = ?", [$id]) == 0) {
                print __LINE__ . " Invalid user id '" . e($id) . "'.";
                exit();
            }

            $query = "SELECT * FROM `{$GLOBALS['mysql_prefix']}user` WHERE id=? LIMIT 1";
            $result = db_query($query, [$id]);
            $row = $result ? $result->fetch_assoc() : null;
            // ============================                        10/28/10
            switch ($_SESSION['level']) {
                case $GLOBALS['LEVEL_SUPER']:
                    $disabled = "";
                    break;

                case $GLOBALS['LEVEL_ADMINISTRATOR']:
                    switch ($row['level']) {
                        case $GLOBALS['LEVEL_SUPER']:
                            $disabled = "DISABLED";
                            break;
                        case $GLOBALS['LEVEL_ADMINISTRATOR']:
                            $disabled = ($row['id'] == $_SESSION['user_id']) ? "" : "DISABLED";        // can edit me, not others
                            break;
                        default:
                            $disabled = "";
                    }            // end
                    break;
                default:
                    $disabled = "DISABLED";
            }        // end outer switch()
            // =======================
            $do_unit = ($row['level'] == $GLOBALS['LEVEL_SUPER'] || $row['level'] == $GLOBALS['LEVEL_ADMINISTRATOR'] || $row['level'] == $GLOBALS['LEVEL_UNIT']) ? "inline" : "none";
            $query = "SELECT * FROM `{$GLOBALS['mysql_prefix']}responder` ORDER BY `name` ASC";        // 7/11/10
            $result_sel = db_query($query);
            $sel_str = "<SELECT ID='frm_responder_sel' NAME='sel_responder_id' STYLE = 'display: " . $do_unit . ";' onChange='do_set_unit(this.options[selectedIndex].value.trim())' {$disabled}><\n\t<OPTION VALUE=0 SELECTED>NA</OPTION>\n";

            while ($row_sel = stripslashes_deep($result_sel->fetch_assoc())) {
                $sel_bool = ($row['responder_id'] == $row_sel['id']) ? "SELECTED" : "";                // this unit?
                $sel_str .= "\t<OPTION VALUE='{$row_sel['id']}' {$sel_bool}>{$row_sel['name']}</OPTION>\n";
            }
            $sel_str .= "\n</SELECT>\n";

            $do_fac = (intval($row['facility_id']) > 0) ? "inline" : "none";

            $query = "SELECT * FROM `{$GLOBALS['mysql_prefix']}facilities` ORDER BY `name` ASC";        // 7/11/10
            $result_sel = db_query($query);
            $sel_str2 = "<SELECT ID='frm_facility_sel' NAME='sel_facility_id' STYLE = 'display: " . $do_fac . ";' onChange='do_set_facility(this.options[selectedIndex].value.trim())' {$disabled}><\n\t<OPTION VALUE=0 SELECTED>NA</OPTION>\n";

            while ($row_sel = stripslashes_deep($result_sel->fetch_assoc())) {
                $sel_bool = ($row['facility_id'] == $row_sel['id']) ? "SELECTED" : "";                // this unit?
                $sel_str2 .= "\t<OPTION VALUE='{$row_sel['id']}' {$sel_bool}>{$row_sel['name']}</OPTION>\n";
            }
            $sel_str2 .= "\n</SELECT>\n";

            $caption = (is_administrator() || is_super()) ? "Edit" : "View";
            $onclick = " onClick = '$(\"frm_responder_sel\").style.display = \"none\";$(\"unit_sel\").style.display = \"none\"; document.user_add_Form.frm_responder_id.value=0; document.user_add_Form.frm_responder_sel.options[0].selected = true;
                            $(\"frm_facility_sel\").style.display = \"none\"; $(\"fac_sel\").style.display = \"none\"; document.user_add_Form.frm_facility_id.value=0; document.user_add_Form.frm_facility_sel.options[0].selected = true;'";
            $adminonclick = " onClick = '$(\"frm_responder_sel\").style.display = \"inline\";$(\"unit_sel\").style.display = \"\"; document.user_add_Form.frm_responder_id.value=0; document.user_add_Form.frm_responder_sel.options[0].selected = true;
                            $(\"frm_facility_sel\").style.display = \"none\"; $(\"fac_sel\").style.display = \"none\"; document.user_add_Form.frm_facility_id.value=0; document.user_add_Form.frm_facility_sel.options[0].selected = true;'";

            $on_responder = " onClick = '$(\"frm_responder_sel\").style.display = \"inline\"; $(\"unit_sel\").style.display = \"\"; $(\"frm_facility_sel\").style.display = \"none\"; document.user_add_Form.frm_facility_id.value=0; document.user_add_Form.frm_facility_sel.options[0].selected = true; $(\"fac_sel\").style.display = \"none\";'";
            $on_facility = " onClick = '$(\"frm_facility_sel\").style.display = \"inline\"; $(\"fac_sel\").style.display = \"\"; $(\"frm_responder_sel\").style.display = \"none\"; document.user_add_Form.frm_responder_id.value=0; document.user_add_Form.frm_responder_sel.options[0].selected = true; $(\"unit_sel\").style.display = \"none\";'";
            ?>
            <FONT CLASS="header text"><?php print $caption; ?> User Data</FONT><BR/><BR/>
            <FORM METHOD="POST" NAME="user_add_Form" onSubmit="return validate_user(document.user_add_Form);"
                  ACTION="config.php?func=user&edit=true">
                <INPUT TYPE="hidden" NAME="frm_id" VALUE="<?php print $id; ?>">
                <TABLE BORDER="0" CELLSPACING=1 STYLE='width: 50%;'>
                    <TR CLASS="even">
                        <TD ALIGN="right" CLASS="td_label text">User ID:</TD>
                        <TD COLSPAN=3>
                            <INPUT MAXLENGTH="20" SIZE="20" TYPE="text" VALUE="<?php print $row['user']; ?>"
                                   NAME="frm_user" <?php print $disabled; ?> />
                        </TD>
                    </TR>
                    <TR CLASS="odd">
                        <TD ALIGN="right" CLASS="td_label text">Password:</TD>
                        <TD COLSPAN=2>
                            <INPUT MAXLENGTH="20" SIZE="20" TYPE="password"
                                   NAME="frm_passwd" <?php print $disabled; ?> /> &nbsp;&nbsp;<B>Confirm: </B>
                            <INPUT MAXLENGTH="255" SIZE="16" TYPE="password"
                                   NAME="frm_passwd_confirm" <?php print $disabled; ?> />
                            &nbsp;&nbsp;<SPAN class='plain' id='gen_pass' style='vertical-align: middle; float: right;'
                                              onMouseover='do_hover(this.id);' onMouseout='do_plain(this.id);'
                                              onClick='generatePassword();'>Generate Password</SPAN>
                        </TD>
                        <TD>
                            <SPAN id='view_password' class='text_large text_bold text_valign_middle text_center'
                                  style='float: right; display: none; background-color: #FFFFFF; border: 1px outset #707070; height: 100%; width: 100%;'></SPAN>
                        </TD>
                    </TR>
                    <TR CLASS="even" VALIGN='middle'>
                        <TD ALIGN="right" CLASS="td_label text">Level:</TD>
                        <TD COLSPAN=3>&nbsp;&nbsp;&nbsp;
                            <?php
                            $checked = (intval($row['level']) == intval($GLOBALS['LEVEL_USER'])) ? "checked" : "";
                            print "Operator &raquo<INPUT TYPE='radio' NAME='frm_level' VALUE='" . $GLOBALS['LEVEL_USER'] . "' {$checked} {$disabled} {$onclick}>&nbsp;&nbsp;&nbsp;\n";
                            $checked = (intval($row['level']) == intval($GLOBALS['LEVEL_GUEST'])) ? "checked" : "";
                            print " Guest &raquo;<INPUT TYPE='radio' NAME='frm_level' VALUE='" . $GLOBALS['LEVEL_GUEST'] . "' {$checked} {$disabled} {$onclick}>&nbsp;&nbsp;&nbsp;\n";
                            $checked = (intval($row['level']) == intval($GLOBALS['LEVEL_ADMINISTRATOR'])) ? "checked" : "";
                            print " Administrator &raquo;<INPUT TYPE='radio' NAME='frm_level' VALUE='" . $GLOBALS['LEVEL_ADMINISTRATOR'] . "' {$checked} {$disabled} {$adminonclick}>&nbsp;&nbsp;&nbsp;\n";
                            if (is_super()) {                // 6/9/08
                                $checked = (intval($row['level']) == intval($GLOBALS['LEVEL_SUPER'])) ? "checked" : "";
                                print " Super &raquo;<INPUT TYPE='radio' NAME='frm_level' VALUE='" . $GLOBALS['LEVEL_SUPER'] . "' {$checked} {$disabled} {$adminonclick}>&nbsp;&nbsp;&nbsp;\n";
                            }
                            $checked = (intval($row['level']) == intval($GLOBALS['LEVEL_MEMBER'])) ? "checked" : "";                        // 12/15/08
                            print " Member &raquo;<INPUT TYPE='radio' NAME='frm_level' VALUE='" . $GLOBALS['LEVEL_MEMBER'] . "' {$checked} {$disabled} {$onclick}>\n";
                            // 7/12/10
                            $checked = (intval($row['level']) == intval($GLOBALS['LEVEL_UNIT'])) ? "checked" : "";                        // 12/15/08
                            print get_text("Unit") . "&raquo;<INPUT TYPE='radio' NAME='frm_level' VALUE='" . $GLOBALS['LEVEL_UNIT'] . "' {$checked} {$disabled} {$on_responder}>\n";
                            // 7/4/16
                            $checked = (intval($row['level']) == intval($GLOBALS['LEVEL_FACILITY'])) ? "checked" : "";                        // 7/4/16
                            print get_text("Facility") . "&raquo;<INPUT TYPE='radio' NAME='frm_level' VALUE='" . $GLOBALS['LEVEL_FACILITY'] . "' {$checked} {$disabled} {$on_facility}>\n";
                            //    7/6/11
                            $checked = (intval($row['level']) == intval($GLOBALS['LEVEL_STATS'])) ? "checked" : "";                        // 12/15/08
                            print " Statistics &raquo;<INPUT TYPE='radio' NAME='frm_level' VALUE='" . $GLOBALS['LEVEL_STATS'] . "' {$checked} {$disabled} {$onclick}>\n";
                            //    10/23/12
                            $checked = (intval($row['level']) == intval($GLOBALS['LEVEL_SERVICE_USER'])) ? "checked" : "";                        // 12/15/08
                            print " Service User &raquo;<INPUT TYPE='radio' NAME='frm_level' VALUE='" . $GLOBALS['LEVEL_SERVICE_USER'] . "' {$checked} {$disabled} {$onclick}>\n";
                            ?>
                        </TD>
                    </TR>
                    <?php
                    if (is_administrator()) {
                        print "<TR CLASS='odd' VALIGN='top'>";
                        print "<TD CLASS='td_label' ALIGN='right'>" . get_text('Region') . "</A>: </TD>";
                        print "<TD><SPAN id='expand_gps' onClick=\"$('groups_sh').style.display = 'inline-block'; $('expand_gps').style.display = 'none'; $('collapse_gps').style.display = 'inline-block';\" style = 'display: inline-block; font-size: 16px; border: 1px solid;'><B>+</B></SPAN>";
                        print "<SPAN id='collapse_gps' onClick=\"$('groups_sh').style.display = 'none'; $('collapse_gps').style.display = 'none'; $('expand_gps').style.display = 'inline-block';\" style = 'display: none; font-size: 16px; border: 1px solid;'><B>-</B></SPAN>";
                        print "</TD><TD COLSPAN =2 ALIGN='left'>";
                        $alloc_groups = implode(',', get_allocates(4, $id));    //    6/10/11
                        print get_all_group_butts(get_allocates(4, $id));    //    6/10/11
                        print "</TD></TR>";
                    } else {
                        print "<DIV style='display: none'>";
                        $alloc_groups = implode(',', get_allocates(4, $id));    //    6/10/11
                        print get_all_group_butts(get_allocates(4, $id));    //    6/10/11
                        print "</DIV";
                    }
                    $unit_visibility = (intval($row['level']) == intval($GLOBALS['LEVEL_UNIT']) || intval($row['level']) == intval($GLOBALS['LEVEL_SUPER']) || intval($row['level']) == intval($GLOBALS['LEVEL_ADMINISTRATOR']) || intval($row['level']) == intval($GLOBALS['LEVEL_USER'])) ? "" : "style='display: none;'";
                    ?>
                    <TR id='unit_sel' <?php print $unit_visibility; ?> VALIGN="baseline" CLASS="even">
                        <TD CLASS="td_label text" ALIGN="right">
                            <SPAN><?php print get_text("Unit"); ?>: </SPAN>
                        </TD>
                        <TD COLSPAN=3><?php print $sel_str; ?></TD>
                    </TR>
                    <?php
                    $fac_visibility = (intval($row['level']) == intval($GLOBALS['LEVEL_FACILITY'])) ? "" : "style='display: none;'";
                    ?>
                    <TR id='fac_sel' <?php print $fac_visibility; ?> VALIGN="baseline" CLASS="even">
                        <TD CLASS="td_label text" ALIGN="right">
                            <SPAN><?php print get_text("Facility"); ?>: </SPAN>
                        </TD>
                        <TD COLSPAN=3><?php print $sel_str2; ?></TD>
                    </TR>
                    <TR VALIGN="baseline" CLASS="spacer">
                        <TD class="spacer" COLSPAN=99 ALIGN='center'>&nbsp;</TD>
                    </TR>
                    <TR VALIGN="baseline" CLASS="odd">
                        <TD CLASS="td_label text" ALIGN="right">Last name:</TD>
                        <TD>
                            <INPUT ID="ID3" MAXLENGTH="32" SIZE=32 type="text" NAME="frm_name_l"
                                   VALUE="<?php print $row['name_l']; ?>"
                                   onChange="this.value=this.value.trim()"<?php print $disabled; ?>>
                        </TD>
                        <TD CLASS="td_label text" ALIGN="right">First:</TD>
                        <TD>
                            <INPUT ID="ID4" MAXLENGTH="32" SIZE=32 type="text" NAME="frm_name_f"
                                   VALUE="<?php print $row['name_f']; ?>"
                                   onChange="this.value=this.value.trim()"<?php print $disabled; ?>>
                        </TD>
                    </TR>
                    <TR VALIGN="baseline" CLASS="even">
                        <TD CLASS="td_label text" ALIGN="right">
                            <SPAN id='org_sel'><?php print get_text("Organisation"); ?>: </SPAN>
                        </TD>
                        <TD COLSPAN=3><?php print get_org_control($id, $row['org']); ?></TD>
                    </TR>
                    <TR VALIGN="baseline" CLASS="odd">
                        <TD CLASS="td_label text" ALIGN="right">MI:</TD>
                        <TD>
                            <INPUT ID="ID5" MAXLENGTH="4" SIZE=3 type="text" NAME="frm_name_mi"
                                   VALUE="<?php print $row['name_mi']; ?>"
                                   onChange="this.value=this.value.trim()"<?php print $disabled; ?> />
                        </TD>
                        <TD CLASS="td_label text" ALIGN="right">DOB:</TD>
                        <TD>
                            <INPUT MAXLENGTH=16 ID="fd6" SIZE=16 type="text" NAME="frm_dob"
                                   VALUE="<?php print $row['dob']; ?>"
                                   onChange="this.value=this.value.trim()"<?php print $disabled; ?> />
                        </TD>
                    </TR>
                    <TR CLASS="even">
                        <TD CLASS="td_label text" ALIGN="right">Callsign:</TD>
                        <TD>
                            <INPUT SIZE="20" MAXLENGTH="20" TYPE="text" NAME="frm_callsign"
                                   VALUE="<?php print $row['callsign']; ?>"<?php print $disabled; ?> />
                        </TD>
                        <TD CLASS="td_label text" ALIGN="right">Ident:</TD>
                        <TD>
                            <INPUT ID="ID17" MAXLENGTH="32" SIZE=32 type="text" NAME="frm_ident"
                                   VALUE="<?php print $row['ident']; ?>"
                                   onChange="this.value=this.value.trim()"<?php print $disabled; ?> />
                        </TD>
                    </TR>
                    <TR CLASS="odd">
                        <TD CLASS="td_label text" ALIGN="right">Info:</TD>
                        <TD COLSPAN=3>
                            <INPUT SIZE="83" MAXLENGTH="83" TYPE="text" NAME="frm_info"
                                   VALUE="<?php print $row['info']; ?>"<?php print $disabled; ?>>
                        </TD>
                    </TR>
                    <TR CLASS="even">
                        <TD CLASS="td_label text" ALIGN="right">Email:</TD>
                        <TD>
                            <INPUT SIZE="32" MAXLENGTH="128" TYPE="text" NAME="frm_email"
                                   VALUE="<?php print $row['email']; ?>"<?php print $disabled; ?> />
                        </TD>
                        <TD CLASS="td_label text" ALIGN="right">&nbsp;&nbsp;&nbsp;&nbsp;Alternate:</TD>
                        <TD>
                            <INPUT ID="ID24" MAXLENGTH="32" SIZE="32" type="text" NAME="frm_email_s"
                                   VALUE="<?php print $row['email_s']; ?>"
                                   onChange="this.value=this.value.trim()"<?php print $disabled; ?> />
                        </TD>
                    </TR>
                    <TR VALIGN="baseline" CLASS="odd">
                        <TD CLASS="td_label text" ALIGN="right"> Street addr:</TD>
                        <TD COLSPAN=4>
                            <INPUT ID="ID8" MAXLENGTH="32" SIZE=32 type="text" NAME="frm_addr_street"
                                   VALUE="<?php print $row['addr_street']; ?>"
                                   onChange="this.value=this.value.trim()"<?php print $disabled; ?>>
                        </TD>
                    </TR>
                    <TR VALIGN="baseline" CLASS="even">
                        <TD CLASS="td_label text" ALIGN="right">City:</TD>
                        <TD>
                            <INPUT ID="ID9" MAXLENGTH="32" SIZE="32" type="text" NAME="frm_addr_city"
                                   VALUE="<?php print $row['addr_city']; ?>"
                                   onChange="this.value=this.value.trim()"<?php print $disabled; ?>>
                        </TD>
                        <TD CLASS="td_label text" ALIGN="right">St:</TD>
                        <TD>
                            <INPUT ID="ID10" MAXLENGTH="<?php print $st_size; ?>" SIZE="<?php print $st_size; ?>"
                                   type="text" NAME="frm_addr_st" VALUE="<?php print $row['addr_st']; ?>"
                                   onChange="this.value=this.value.trim()"<?php print $disabled; ?>>
                        </TD>
                    </TR>
                    <TR VALIGN="baseline" CLASS="odd">
                        <TD CLASS="td_label text" ALIGN="right">Phone:</TD>
                        <TD>
                            <INPUT ID="ID19" MAXLENGTH="32" SIZE="32" type="text" NAME="frm_phone_p"
                                   VALUE="<?php print $row['phone_p']; ?>"
                                   onChange="this.value=this.value.trim()"<?php print $disabled; ?> />
                        </TD>
                        <TD CLASS="td_label text" ALIGN="right">Alternate:</TD>
                        <TD>
                            <INPUT ID="ID20" MAXLENGTH="32" SIZE="32" type="text" NAME="frm_phone_s"
                                   VALUE="<?php print $row['phone_s']; ?>"
                                   onChange="this.value=this.value.trim()"<?php print $disabled; ?> />
                        </TD>
                    </TR>
                    <TR VALIGN="baseline" CLASS="even">
                        <TD CLASS="td_label text" ALIGN="right">Mobile:</TD>
                        <TD COLSPAN=3>
                            <INPUT ID="ID21" MAXLENGTH="32" SIZE="32" type="text" NAME="frm_phone_m"
                                   VALUE="<?php print $row['phone_m']; ?>"
                                   onChange="this.value=this.value.trim()"<?php print $disabled; ?>>
                        </TD>
                    </TR>
                    <?php
                    if ((is_administrator() || is_super())) {
                        ?>
                        <TR CLASS="odd" VALIGN='top'>
                            <TD CLASS="td_label text">Remove User:</TD>
                            <TD COLSPAN=3>
                                &raquo; <INPUT TYPE="checkbox" VALUE="yes"
                                               NAME="frm_remove" <?php print $disabled; ?> />
                            </TD>
                        </TR>
                        <?php
                    }
                    ?>
                    <TR CLASS="even">
                        <TD></TD>
                        <TD COLSPAN=3 ALIGN="center">
                            <?php
                            if ($disabled != "DISABLED") {
                                ?>
                                <SPAN id='cancel_but' CLASS='plain text'
                                      style='float: none; width: 100px; display: inline-block;'
                                      onMouseover='do_hover(this.id);' onMouseout='do_plain(this.id);'
                                      onClick="document.can_Form.submit();"><SPAN
                                        STYLE='float: left;'><?php print get_text("Cancel"); ?></SPAN><IMG
                                        STYLE='float: right;' SRC='./images/cancel_small.png' BORDER=0></SPAN>
                                <?php
                            } else {
                                ?>
                                <SPAN id='cancel_but' CLASS='plain text'
                                      style='float: none; width: 100px; display: inline-block;'
                                      onMouseover='do_hover(this.id);' onMouseout='do_plain(this.id);'
                                      onClick="document.can_Form.submit();"><SPAN
                                        STYLE='float: left;'><?php print get_text("Back"); ?></SPAN><IMG
                                        STYLE='float: right;' SRC='./images/back_small.png' BORDER=0></SPAN>
                                <?php
                            }
                            if ((is_administrator() || is_super())) {
                                if ($disabled != "DISABLED") {
                                    ?>
                                    <SPAN id='reset_but' CLASS='plain text'
                                          style='float: none; width: 100px; display: inline-block;'
                                          onMouseover='do_hover(this.id);' onMouseout='do_plain(this.id);'
                                          onClick="document.user_add_Form.reset(); document.user_add_Form.frm_responder_id.value='<?php echo $row['responder_id']; ?>'; document.user_add_Form.frm_facility_id.value='<?php echo $row['facility_id']; ?>';"><SPAN
                                            STYLE='float: left;'><?php print get_text("Reset"); ?></SPAN><IMG
                                            STYLE='float: right;' SRC='./images/restore_small.png' BORDER=0></SPAN>
                                    <SPAN id='sub_but' CLASS='plain text'
                                          style='float: none; width: 100px; display: inline-block;'
                                          onMouseover='do_hover(this.id);' onMouseout='do_plain(this.id);'
                                          onClick="return validate_user(document.user_add_Form);"><SPAN
                                            STYLE='float: left;'><?php print get_text("Submit"); ?></SPAN><IMG
                                            STYLE='float: right;' SRC='./images/submit_small.png' BORDER=0></SPAN>
                                    <?php
                                }
                            }
                            ?>
                        </TD>
                    </TR>
                </TABLE>
                <INPUT TYPE='hidden' NAME='frm_hash' VALUE='<?php print $row['passwd']; ?>'/>    <!-- 11/30/08 -->
                <INPUT TYPE='hidden' NAME='frm_func' VALUE='e'/>
                <INPUT TYPE='hidden' NAME='frm_responder_id' VALUE='<?php echo $row['responder_id']; ?>'/>
                <INPUT TYPE='hidden' NAME='frm_facility_id' VALUE='<?php echo $row['facility_id']; ?>'/>
                <INPUT TYPE="hidden" NAME="frm_exist_groups" VALUE="<?php print $alloc_groups; ?>">
            </FORM>
            <FORM NAME='can_Form' METHOD="post" ACTION="<?php print basename(__FILE__); ?>"></FORM>
            </BODY>
            </HTML>
            <?php
            exit();    //
        } else {
            print '<FONT CLASS="warn">Not authorized.</FONT><BR /><BR />';
        }
    } elseif ((array_key_exists('edit', ($_GET))) && ($_GET['edit'] == 'true') && (array_key_exists('func', ($_GET))) && ($_GET['func'] == 'user')) {

        if ((array_key_exists('frm_remove', $_POST)) && ($_POST['frm_remove'] == 'yes')) {
            $ctr = 0;
            $frm_id = sanitize_int($_POST['frm_id']);
            $query = "SELECT * FROM `{$GLOBALS['mysql_prefix']}ticket` WHERE owner=? LIMIT 1";
            $result = db_query($query, [$frm_id]);
            $ctr += $result->num_rows;
            $query = "SELECT * FROM `{$GLOBALS['mysql_prefix']}patient` WHERE user=? LIMIT 1";
            $result = db_query($query, [$frm_id]);
            $ctr += $result->num_rows;
            $query = "SELECT * FROM `{$GLOBALS['mysql_prefix']}action` WHERE user=? LIMIT 1";
            $result = db_query($query, [$frm_id]);
            $ctr += $result->num_rows;
            if ($ctr > 0) {
                print '<B>DENIED! - User has active database records.</B><BR /><BR />';
            } else {        // OK - delete user
                $query = "DELETE FROM `{$GLOBALS['mysql_prefix']}user` WHERE id=? LIMIT 1";
                $result = db_query($query, [$frm_id]);

                //delete notifies belonging to user
                $query = "DELETE FROM `{$GLOBALS['mysql_prefix']}notify` WHERE user=?";
                $result = db_query($query, [$frm_id]);

                print "<B>User <i>" . e($_POST['frm_user']) . "</i> has been deleted from database.</B><BR /><BR />";
            }
        } else {                                                                            // 7/12/10
            $dob = empty($_POST['frm_dob']) ? null : trim($_POST['frm_dob']);        // 6/25/10
            $params = [];
            $pass_sql = "";
            if (!empty($_POST['frm_hash'])) {
                $pass_sql = "`passwd` = ?, ";
                $params[] = sanitize_string($_POST['frm_hash']);
            }
            $query = "UPDATE `{$GLOBALS['mysql_prefix']}user` SET " . $pass_sql . "
                                `addr_city` = ?,
                                `addr_st` = ?,
                                `addr_street` = ?,
                                `callsign` = ?,
                                `dob` = ?,
                                `email` = ?,
                                `email_s` = ?,
                                `ident` = ?,
                                `info` = ?,
                                `level` = ?,
                                `responder_id` = ?,
                                `facility_id` = ?,
                                `name_f` = ?,
                                `name_l` = ?,
                                `name_mi` = ?,
                                `phone_m` = ?,
                                `phone_p` = ?,
                                `phone_s` = ?,
                                `org` = ?,
                                `user` = ?
                                WHERE `id` = ?";
            $params = array_merge($params, [
                trim($_POST['frm_addr_city']),
                trim($_POST['frm_addr_st']),
                trim($_POST['frm_addr_street']),
                trim($_POST['frm_callsign']),
                $dob,
                trim($_POST['frm_email']),
                trim($_POST['frm_email_s']),
                trim($_POST['frm_ident']),
                trim($_POST['frm_info']),
                trim($_POST['frm_level']),
                trim($_POST['frm_responder_id']),
                trim($_POST['frm_facility_id']),
                trim($_POST['frm_name_f']),
                trim($_POST['frm_name_l']),
                trim($_POST['frm_name_mi']),
                trim($_POST['frm_phone_m']),
                trim($_POST['frm_phone_p']),
                trim($_POST['frm_phone_s']),
                trim($_POST['frm_org_cntl']),
                trim($_POST['frm_user']),
                $_POST['frm_id']
            ]);

            $result = db_query($query, $params);

            $now = mysql_format_date(time() - (get_variable('delta_mins') * 60));    //    6/10/11
            $by = $_SESSION['user_id'];    //    6/10/11

            $groups = "," . implode(',', $_POST['frm_group']) . ",";    //    6/10/11
            $curr_groups = implode(',', get_allocates(4, $_POST['frm_id']));    //    6/10/11
            $ex_grps = explode(',', $curr_groups);    //    6/10/11
            if ($curr_groups != $groups) {    //    6/10/11
                foreach ($_POST['frm_group'] as $posted_grp) {    //    6/10/11
                    if (!in_array($posted_grp, $ex_grps)) {
                        $query = "INSERT INTO `{$GLOBALS['mysql_prefix']}allocates` (`group`, `type`, `al_as_of`, `al_status`, `resource_id`, `sys_comments`, `user_id`) VALUES
                                        (?, 4, ?, 0, ?, 'Allocated to Group', ?)";
                        $result = db_query($query, [sanitize_int($posted_grp), $now, sanitize_int($_POST['frm_id']), $by]);
                    }
                }
                foreach ($ex_grps as $existing_grps) {    //    6/10/11
                    if (!in_array($existing_grps, $_POST['frm_group'])) {
                        $query = "DELETE FROM `{$GLOBALS['mysql_prefix']}allocates` WHERE `type` = 4 AND `group` = ? AND `resource_id` = ?";
                        $result = db_query($query, [sanitize_int($existing_grps), sanitize_int($_POST['frm_id'])]);
                    }
                }
            }
            print "<B>User <I>" . $_POST['frm_user'] . "</I> data has been updated.</B><BR /><BR />";
        }
    }        // end if ($_GET['edit']

    elseif (($_GET['func'] == 'user') && ($_GET['add'] == 'true')) {
        if (is_administrator()) {
            if ((array_key_exists('go', ($_GET))) && ($_GET['go'] == 'true')) {
                if ($_POST['frm_passwd'] == $_POST['frm_passwd_confirm']) {                        // 11/30/08
                    $dob = empty($_POST['frm_dob']) ? null : trim($_POST['frm_dob']);        // 6/25/10

                    $query = "INSERT INTO `{$GLOBALS['mysql_prefix']}user` (`addr_city`,`addr_st`,`addr_street`,`callsign`,`dob`,`email`,`email_s`,`passwd`,`ident`,`info`,`level`,`responder_id`,`facility_id`,`name_f`,`name_l`,`name_mi`,`phone_m`,`phone_p`,`phone_s`,`org`,`user`)
                             VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?)";

                    $result = db_query($query, [
                        trim($_POST['frm_addr_city']),
                        trim($_POST['frm_addr_st']),
                        trim($_POST['frm_addr_street']),
                        trim($_POST['frm_callsign']),
                        $dob,
                        trim($_POST['frm_email']),
                        trim($_POST['frm_email_s']),
                        trim($_POST['frm_hash']),
                        trim($_POST['frm_ident']),
                        trim($_POST['frm_info']),
                        trim($_POST['frm_level']),
                        trim($_POST['frm_responder_id']),
                        trim($_POST['frm_facility_id']),
                        trim($_POST['frm_name_f']),
                        trim($_POST['frm_name_l']),
                        trim($_POST['frm_name_mi']),
                        trim($_POST['frm_phone_m']),
                        trim($_POST['frm_phone_p']),
                        trim($_POST['frm_phone_s']),
                        trim($_POST['frm_org_cntl']),
                        trim($_POST['frm_user'])
                    ]);
                    $now = mysql_format_date(time() - (get_variable('delta_mins') * 60));    //    6/10/11
                    $by = $_SESSION['user_id'];    //    6/10/11
                    $new_id = db()->insert_id;    //    6/10/11
                    foreach ($_POST['frm_group'] as $grp_val) {    // 6/10/11
                        $query_a = "INSERT INTO `{$GLOBALS['mysql_prefix']}allocates` (`group`, `type`, `al_as_of`, `al_status`, `resource_id`, `sys_comments`, `user_id`) VALUES
                                    (?, 4, ?, 0, ?, 'Allocated to Group', ?)";
                        $result_a = db_query($query_a, [sanitize_int($grp_val), $now, $new_id, $by]);
                    }

                    print "<B>User <i>'" . e($_POST['frm_user']) . "'</i> has been added.</B><BR /><BR />";
                } else {
                    print "Passwords don't match. Please try again.<BR />";
                    ?>
                    <BR/>
                    <FORM METHOD="POST" NAME="user_add_Form" onSubmit="return validate_user(document.user_add_Form);"
                          ACTION="config.php?func=user&add=true&go=true">
                        <TR CLASS="even">
                            <TABLE BORDER="0">
                                <TD CLASS="td_label text">User ID:</TD>
                                <TD><INPUT MAXLENGTH="20" SIZE="20" TYPE="text"
                                           VALUE="<?php print e($_POST['frm_user']); ?>" NAME="frm_user"></TD>
                        </TR>
                        <TR CLASS="odd">
                            <TD CLASS="td_label text">Password</TD>
                            <TD><INPUT MAXLENGTH="20" SIZE="20" TYPE="password" NAME="frm_passwd"></TD>
                        </TR>
                        <TR CLASS="even">
                            <TD CLASS="td_label text">Confirm Password: &nbsp;&nbsp;</TD>
                            <TD>
                                <INPUT MAXLENGTH="20" SIZE="20" TYPE="password" NAME="frm_passwd_confirm">
                            </TD>
                        </TR>
                        <TR CLASS="odd">
                            <TD CLASS="td_label text">Callsign:</TD>
                            <TD>
                                <INPUT MAXLENGTH="20" SIZE="20" TYPE="text"
                                       VALUE="<?php print e($_POST['frm_callsign']); ?>" NAME="frm_callsign">
                            </TD>
                        </TR>
                        <TR CLASS="even">
                            <TD CLASS="td_label text">Level:</TD>
                            <TD>
                                <?php
                                if (is_super()) {                // 6/9/08
                                    ?>
                                    <INPUT TYPE="radio" VALUE="<?php print $GLOBALS['LEVEL_SUPER']; ?>"
                                           NAME="frm_level" <?php print is_super() ? "checked" : ""; ?>> Super<BR/>
                                    <?php
                                }
                                ?>
                                <INPUT TYPE="radio" VALUE="<?php print $GLOBALS['LEVEL_ADMINISTRATOR']; ?>"
                                       NAME="frm_level" <?php print is_administrator() ? "checked" : ""; ?>>
                                Administrator<BR/>
                                <INPUT TYPE="radio" VALUE="<?php print $GLOBALS['LEVEL_USER']; ?>"
                                       NAME="frm_level" <?php print is_user() ? "checked" : ""; ?>> Operator<BR/>
                                <INPUT TYPE="radio" VALUE="<?php print $GLOBALS['LEVEL_GUEST']; ?>"
                                       NAME="frm_level" <?php print is_guest() ? "checked" : ""; ?>> Guest<BR/>
                                <INPUT TYPE="radio" VALUE="<?php print $GLOBALS['LEVEL_MEMBER']; ?>"
                                       NAME="frm_level" <?php print is_member() ? "checked" : ""; ?>> Member<BR/>
                                <INPUT TYPE="radio" VALUE="<?php print $GLOBALS['LEVEL_UNIT']; ?>"
                                       NAME="frm_level" <?php print is_unit() ? "checked" : ""; ?>> Unit<BR/>
                                <INPUT TYPE="radio" VALUE="<?php print $GLOBALS['LEVEL_FACILITY']; ?>"
                                       NAME="frm_level" <?php print is_facility() ? "checked" : ""; ?>> Facility<BR/>
                                <INPUT TYPE="radio" VALUE="<?php print $GLOBALS['LEVEL_STATISTICS']; ?>"
                                       NAME="frm_level" <?php print is_statistics() ? "checked" : ""; ?>>
                                Statistics<BR/>
                                <INPUT TYPE="radio" VALUE="<?php print $GLOBALS['LEVEL_SERVICE_USER']; ?>"
                                       NAME="frm_level" <?php print is_service_user() ? "checked" : ""; ?>> Service User<BR/>
                            </TD>
                        </TR>
                        <TR CLASS="odd">
                            <TD CLASS="td_label text">Info:</TD>
                            <TD><INPUT SIZE="40" MAXLENGTH="80" TYPE="text" VALUE="<?php print e($_POST['frm_info']); ?>"
                                       NAME="frm_info"></TD>
                        </TR>
                        <TR CLASS="even">
                            <TD></TD>
                            <TD>
                                <SPAN id='cancel_but' CLASS='plain text'
                                      style='float: none; width: 100px; display: inline-block;'
                                      onMouseover='do_hover(this.id);' onMouseout='do_plain(this.id);'
                                      onClick="document.can_Form.submit();"><SPAN
                                        STYLE='float: left;'><?php print get_text("Cancel"); ?></SPAN><IMG
                                        STYLE='float: right;' SRC='./images/cancel_small.png' BORDER=0></SPAN>
                                <SPAN id='reset_but' CLASS='plain text'
                                      style='float: none; width: 100px; display: inline-block;'
                                      onMouseover='do_hover(this.id);' onMouseout='do_plain(this.id);'
                                      onClick="document.user_add_Form.reset();"><SPAN
                                        STYLE='float: left;'><?php print get_text("Reset"); ?></SPAN><IMG
                                        STYLE='float: right;' SRC='./images/restore_small.png' BORDER=0></SPAN>
                                <SPAN id='sub_but' CLASS='plain text'
                                      style='float: none; width: 100px; display: inline-block;'
                                      onMouseover='do_hover(this.id);' onMouseout='do_plain(this.id);'
                                      onClick="validate_user(document.user_add_Form);"><SPAN
                                        STYLE='float: left;'><?php print get_text("Submit"); ?></SPAN><IMG
                                        STYLE='float: right;' SRC='./images/submit_small.png' BORDER=0></SPAN>
                            </TD>
                        </TR>
                        </TABLE>
                    </FORM>
                    <FORM NAME='can_Form' METHOD="post" ACTION="<?php print basename(__FILE__); ?>"></FORM>
                    </BODY>
                    </HTML>
                    <?php
                    exit();
                }
            } else {
                $query = "SELECT * FROM `{$GLOBALS['mysql_prefix']}responder` ORDER BY `name` ASC";        // 7/11/10
                $result = db_query($query);
                $sel_str = "\n<SELECT ID='frm_responder_sel' NAME='frm_responder_sel' STYLE = 'display: none;' onChange='do_set_unit(this.options[selectedIndex].value.trim())'>\n\t<OPTION VALUE=0 SELECTED>Select one</OPTION>\n";
                while ($row = stripslashes_deep($result->fetch_assoc())) {
                    $sel_str .= "\t<OPTION VALUE='{$row['id']}'>{$row['name']}</OPTION>\n";
                }
                $sel_str .= "\n</SELECT>\n";

                $query = "SELECT * FROM `{$GLOBALS['mysql_prefix']}facilities` ORDER BY `name` ASC";        // 7/11/10
                $result = db_query($query);
                $sel_str2 = "\n<SELECT ID='frm_facility_sel' NAME='frm_facility_sel' STYLE = 'display: none;' onChange='do_set_facility(this.options[selectedIndex].value.trim())'>\n\t<OPTION VALUE=0 SELECTED>Select one</OPTION>\n";
                while ($row = stripslashes_deep($result->fetch_assoc())) {
                    $sel_str2 .= "\t<OPTION VALUE='{$row['id']}'>{$row['name']}</OPTION>\n";
                }
                $sel_str2 .= "\n</SELECT>\n";

                $onclick = " onClick = '$(\"frm_responder_sel\").style.display = \"none\";$(\"unit_sel\").style.display = \"none\"; document.user_add_Form.frm_responder_id.value=0; document.user_add_Form.frm_responder_sel.options[0].selected = true;
                                $(\"frm_facility_sel\").style.display = \"none\"; $(\"fac_sel\").style.display = \"none\"; document.user_add_Form.frm_facility_id.value=0; document.user_add_Form.frm_facility_sel.options[0].selected = true;'";

                $on_responder = " onClick = '$(\"frm_responder_sel\").style.display = \"inline\"; $(\"unit_sel\").style.display = \"inline\"; $(\"frm_facility_sel\").style.display = \"none\"; document.user_add_Form.frm_facility_id.value=0; document.user_add_Form.frm_facility_sel.options[0].selected = true; $(\"fac_sel\").style.display = \"none\";'";
                $on_facility = " onClick = '$(\"frm_facility_sel\").style.display = \"inline\"; $(\"fac_sel\").style.display = \"inline\"; $(\"frm_responder_sel\").style.display = \"none\"; document.user_add_Form.frm_responder_id.value=0; document.user_add_Form.frm_responder_sel.options[0].selected = true; $(\"unit_sel\").style.display = \"none\";'";
                ?>
                <FONT CLASS="header text">Add User</FONT><BR/><BR/>

                <FORM METHOD="POST" NAME="user_add_Form" onSubmit="return validate_user(document.user_add_Form);"
                      ACTION="config.php?func=user&add=true&go=true">
                    <TABLE BORDER=0 CELLSPACING=1>
                        <TR>
                            <TD COLSPAN=4 ALIGN='center'><FONT COLOR='red'>*</FONT> Required</TD>
                        </TR>
                        <TR CLASS="even">
                            <TD CLASS="td_label text" ALIGN="right"> User ID: <FONT COLOR='red'>*</FONT></TD>
                            <TD COLSPAN=3><INPUT MAXLENGTH="20" SIZE="20" TYPE="text" NAME="frm_user" VALUE=""></TD>
                        </TR>
                        <TR CLASS="odd">
                            <TD CLASS="td_label text" ALIGN="right"> Password: <FONT COLOR='red'>*</FONT></TD>
                            <TD COLSPAN=2>
                                <INPUT MAXLENGTH="20" SIZE="20" TYPE="password" NAME="frm_passwd" VALUE=""/>&nbsp;&nbsp;
                                <B>Confirm: </B>
                                <INPUT MAXLENGTH="255" SIZE="16" TYPE="password" NAME="frm_passwd_confirm"/>
                                <SPAN class='plain' id='gen_pass' style='vertical-align: middle; float: right;'
                                      onMouseover='do_hover(this.id);' onMouseout='do_plain(this.id);'
                                      onClick='generatePassword();'>Generate Password</SPAN>
                            </TD>
                            <TD>
                                <SPAN id='view_password' class='text_large text_bold text_valign_middle text_center'
                                      style='float: right; display: none; background-color: #FFFFFF; border: 1px outset #707070; height: 100%; width: 100%;'></SPAN>
                            </TD>
                        </TR>
                        <TR CLASS="even" VALIGN='baseline'>
                            <TD CLASS="td_label text" ALIGN="right"> Level: <FONT COLOR='red'>*</FONT></TD>
                            <TD COLSPAN=3>&nbsp;&nbsp;&nbsp;&nbsp;
                                <?php
                                if (is_super()) {
                                    ?>
                                    Super  &raquo;<INPUT TYPE="radio" VALUE="<?php print $GLOBALS['LEVEL_SUPER']; ?>"
                                                         NAME="frm_level" <?php print $onclick; ?>>&nbsp;&nbsp;&nbsp;
                                    <?php
                                }
                                ?>
                                Admin &raquo; <INPUT TYPE="radio"
                                                     VALUE="<?php print $GLOBALS['LEVEL_ADMINISTRATOR']; ?>"
                                                     NAME="frm_level" <?php print $onclick; ?>/>&nbsp;&nbsp;
                                Operator &raquo; <INPUT TYPE="radio" VALUE="<?php print $GLOBALS['LEVEL_USER']; ?>"
                                                        NAME="frm_level" <?php print $onclick; ?>/>&nbsp;&nbsp;
                                Guest &raquo; <INPUT TYPE="radio" VALUE="<?php print $GLOBALS['LEVEL_GUEST']; ?>"
                                                     NAME="frm_level" <?php print $onclick; ?>/> &nbsp;&nbsp;
                                Member &raquo; <INPUT TYPE="radio" VALUE="<?php print $GLOBALS['LEVEL_MEMBER']; ?>"
                                                      NAME="frm_level" <?php print $onclick; ?>/>    <!-- 3/3/09 -->
                                <?php print get_text("Unit"); ?> &raquo; <INPUT TYPE="radio"
                                                                                VALUE="<?php print $GLOBALS['LEVEL_UNIT']; ?>"
                                                                                NAME="frm_level" <?php print $on_responder; ?>/>
                                <!-- 6/30/09 -->
                                <?php print get_text("Facility"); ?> &raquo; <INPUT TYPE="radio"
                                                                                    VALUE="<?php print $GLOBALS['LEVEL_FACILITY']; ?>"
                                                                                    NAME="frm_level" <?php print $on_facility; ?>/>
                                <!-- 4/7/16 -->
                                Statistics &raquo; <INPUT TYPE="radio" VALUE="<?php print $GLOBALS['LEVEL_STATS']; ?>"
                                                          NAME="frm_level" <?php print $onclick; ?>/> <!-- 7/6/11 -->
                                Service User &raquo; <INPUT TYPE="radio"
                                                            VALUE="<?php print $GLOBALS['LEVEL_SERVICE_USER']; ?>"
                                                            NAME="frm_level" <?php print $onclick; ?>/>
                            </TD>
                        </TR>
                        <?php
                        if (is_super()) {        //    6/10/11
                            print "<TR CLASS='odd' VALIGN='top'>";
                            print "<TD CLASS='td_label'>" . get_text('Group') . "</A>: ";
                            print "<SPAN id='expand_gps' onClick=\"$('checkButts').style.display = 'inline-block'; $('groups_sh').style.display = 'inline-block'; $('expand_gps').style.display = 'none'; $('collapse_gps').style.display = 'inline-block';\" style = 'display: inline-block; font-size: 16px; border: 1px solid;'><B>+</B></SPAN>";
                            print "<SPAN id='collapse_gps' onClick=\"$('checkButts').style.display = 'none'; $('groups_sh').style.display = 'none'; $('collapse_gps').style.display = 'none'; $('expand_gps').style.display = 'inline-block';\" style = 'display: none; font-size: 16px; border: 1px solid;'><B>-</B></SPAN>";
                            print "</TD><TD COLSPAN = 3>";
                            print "<DIV id='checkButts' style='display: none;'>";
                            print "<SPAN id='checkbut' class='plain' onMouseOver='do_hover(this.id);' onMouseOut='do_plain(this.id);' onClick='checkAll();'>Check All</SPAN>";
                            print "<SPAN id='uncheckbut' class='plain' onMouseOver='do_hover(this.id);' onMouseOut='do_plain(this.id);' onClick='uncheckAll();'>Uncheck All</SPAN>";
                            print "</DIV>";
                            $alloc_groups = implode(',', get_allocates(1, $_SESSION['user_id']));    //    6/10/11
                            print get_all_group_butts_chkd(get_allocates(4, $_SESSION['user_id']));    //    6/10/11
                            print "</TD></TR>";
                        } elseif (is_admin()) {
                            print "<TR CLASS='odd' VALIGN='top'>";
                            print "<TD CLASS='td_label'>" . get_text('Group') . "</A>: ";
                            print "<SPAN id='expand_gps' onClick=\"$('checkButts').style.display = 'inline-block'; $('groups_sh').style.display = 'inline-block'; $('expand_gps').style.display = 'none'; $('collapse_gps').style.display = 'inline-block';\" style = 'display: inline-block; font-size: 16px; border: 1px solid;'><B>+</B></SPAN>";
                            print "<SPAN id='collapse_gps' onClick=\"$('checkButts').style.display = 'none'; $('groups_sh').style.display = 'none'; $('collapse_gps').style.display = 'none'; $('expand_gps').style.display = 'inline-block';\" style = 'display: none; font-size: 16px; border: 1px solid;'><B>-</B></SPAN>";
                            print "</TD><TD COLSPAN = 3>";
                            print "<DIV id='checkButts' style='display: none;'>";
                            print "<SPAN id='checkbut' class='plain' onMouseOver='do_hover(this.id);' onMouseOut='do_plain(this.id);' onClick='checkAll();'>Check All</SPAN>";
                            print "<SPAN id='uncheckbut' class='plain' onMouseOver='do_hover(this.id);' onMouseOut='do_plain(this.id);' onClick='uncheckAll();'>Uncheck All</SPAN>";
                            print "</DIV>";
                            $alloc_groups = implode(',', get_allocates(1, $_SESSION['user_id']));    //    6/10/11
                            print get_all_group_butts(get_allocates(4, $_SESSION['user_id']));    //    6/10/11
                            print "</TD></TR>";
                        } else {
                            print "<DIV style='display: none'>";
                            $alloc_groups = implode(',', get_allocates(4, $_SESSION['user_id']));    //    6/10/11
                            print get_all_group_butts(get_allocates(4, $_SESSION['user_id']));    //    6/10/11
                            print "</DIV";
                        }
                        ?>

                        <TR VALIGN="baseline" CLASS="even">
                            <TD id="unit_sel" CLASS="td_label text" style='display: none;'
                                ALIGN="right"><?php print get_text("Units"); ?>:
                            </TD>
                            <TD><?php print $sel_str; ?></TD>
                        </TR>
                        <TR VALIGN="baseline" CLASS="odd">
                            <TD id="fac_sel" CLASS="td_label text" style='display: none;'
                                ALIGN="right"><?php print get_text("Facility"); ?>:
                            </TD>
                            <TD><?php print $sel_str2; ?></TD>
                        </TR>
                        <TR VALIGN="baseline" CLASS="spacer">
                            <TD class="spacer" COLSPAN=4 ALIGN='center'>&nbsp;</TD>
                        </TR>
                        <TR VALIGN="baseline" CLASS="odd">
                            <TD CLASS="td_label text" ALIGN="right">Last name:</TD>
                            <TD><INPUT ID="ID3" MAXLENGTH="32" SIZE=32 type="text" NAME="frm_name_l" VALUE=""
                                       onChange="this.value=this.value.trim()"></TD>
                            <TD CLASS="td_label text" ALIGN="right">First:</TD>
                            <TD><INPUT ID="ID4" MAXLENGTH="32" SIZE=32 type="text" NAME="frm_name_f" VALUE=""
                                       onChange="this.value=this.value.trim()"></TD>
                        </TR>
                        <TR VALIGN="baseline" CLASS="even">
                            <TD CLASS="td_label text" ALIGN="right">
                                <SPAN id='unit_sel'><?php print get_text("Organisation"); ?>: </SPAN>
                            </TD>
                            <TD COLSPAN=3><?php print get_org_control(0, 0); ?></TD>
                        </TR>
                        <TR VALIGN="baseline" CLASS="odd">
                            <TD CLASS="td_label text" ALIGN="right">MI:</TD>
                            <TD><INPUT ID="ID5" MAXLENGTH="4" SIZE=3 type="text" NAME="frm_name_mi" VALUE=""
                                       onChange="this.value=this.value.trim()"></TD>
                            <TD CLASS="td_label text" ALIGN="right">DOB:</TD>
                            <TD><INPUT MAXLENGTH=16 ID="fd6" SIZE=16 type="text" NAME="frm_dob" VALUE=""
                                       onChange="this.value=this.value.trim()"/></TD>
                        </TR>
                        <TR CLASS="even">
                            <TD CLASS="td_label text" ALIGN="right">Callsign:</TD>
                            <TD><INPUT SIZE="20" MAXLENGTH="20" TYPE="text" NAME="frm_callsign" VALUE=""></TD>
                            <TD CLASS="td_label text" ALIGN="right">Ident:</TD>
                            <TD><INPUT ID="ID17" MAXLENGTH="32" SIZE=32 type="text" NAME="frm_ident" VALUE=""
                                       onChange="this.value=this.value.trim()"></TD>
                        </TR>
                        <TR CLASS="odd">
                            <TD CLASS="td_label text" ALIGN="right">Info:</TD>
                            <TD COLSPAN=3><INPUT SIZE="83" MAXLENGTH="83" TYPE="text" NAME="frm_info" VALUE=""></TD>
                        </TR>
                        <TR CLASS="even">
                            <TD CLASS="td_label text" ALIGN="right">Email:</TD>
                            <TD><INPUT SIZE="32" MAXLENGTH="128" TYPE="text" NAME="frm_email" VALUE=""></TD>
                            <TD CLASS="td_label text" ALIGN="right">Alternate:</TD>
                            <TD><INPUT ID="ID24" SIZE="32" MAXLENGTH="128" type="text" NAME="frm_email_s" VALUE=""
                                       onChange="this.value=this.value.trim()"></TD>
                        </TR>
                        <TR VALIGN="baseline" CLASS="odd">
                            <TD CLASS="td_label text" ALIGN="right"> Street addr:</TD>
                            <TD COLSPAN=3><INPUT ID="ID8" MAXLENGTH="32" SIZE=32 type="text" NAME="frm_addr_street"
                                                 VALUE="" onChange="this.value=this.value.trim()"></TD>
                        </TR>
                        <TR VALIGN="baseline" CLASS="even">
                            <TD CLASS="td_label text" ALIGN="right">City:</TD>
                            <TD><INPUT ID="ID9" MAXLENGTH="32" SIZE="32" type="text" NAME="frm_addr_city" VALUE=""
                                       onChange="this.value=this.value.trim()"></TD>
                            <TD CLASS="td_label text" ALIGN="right">St:</TD>
                            <TD><INPUT ID="ID10" MAXLENGTH="<?php print $st_size; ?>" SIZE="<?php print $st_size; ?>"
                                       type="text" NAME="frm_addr_st" VALUE="" onChange="this.value=this.value.trim()">
                            </TD>
                        </TR>
                        <TR VALIGN="baseline" CLASS="odd">
                            <TD CLASS="td_label text" ALIGN="right">Phone:</TD>
                            <TD><INPUT ID="ID19" MAXLENGTH="32" SIZE="32" type="text" NAME="frm_phone_p" VALUE=""
                                       onChange="this.value=this.value.trim()"></TD>
                            <TD CLASS="td_label text" ALIGN="right">Alternate:</TD>
                            <TD><INPUT ID="ID20" MAXLENGTH="32" SIZE="32" type="text" NAME="frm_phone_s" VALUE=""
                                       onChange="this.value=this.value.trim()"></TD>
                        </TR>
                        <TR VALIGN="baseline" CLASS="even">
                            <TD CLASS="td_label text" ALIGN="right">Mobile:</TD>
                            <TD COLSPAN=3><INPUT ID="ID21" MAXLENGTH="32" SIZE="32" type="text" NAME="frm_phone_m"
                                                 VALUE="" onChange="this.value=this.value.trim()"></TD>
                        </TR>
                        <INPUT TYPE='hidden' NAME='frm_func' VALUE='a'>
                        <INPUT TYPE='hidden' NAME='frm_hash' VALUE=''>    <!-- 11/30/08 -->
                        </TD>
                        </TR>
                        <TR CLASS="odd">
                            <TD COLSPAN=4 ALIGN="center">
                                <SPAN id='cancel_but' CLASS='plain text'
                                      style='float: none; width: 100px; display: inline-block;'
                                      onMouseover='do_hover(this.id);' onMouseout='do_plain(this.id);'
                                      onClick="document.can_Form.submit();"><SPAN
                                        STYLE='float: left;'><?php print get_text("Cancel"); ?></SPAN><IMG
                                        STYLE='float: right;' SRC='./images/cancel_small.png' BORDER=0></SPAN>
                                <SPAN id='reset_but' CLASS='plain text'
                                      style='float: none; width: 100px; display: inline-block;'
                                      onMouseover='do_hover(this.id);' onMouseout='do_plain(this.id);'
                                      onClick="document.user_add_Form.reset(); $('frm_responder_sel').style.display = 'none';"><SPAN
                                        STYLE='float: left;'><?php print get_text("Reset"); ?></SPAN><IMG
                                        STYLE='float: right;' SRC='./images/restore_small.png' BORDER=0></SPAN>
                                <SPAN id='sub_but' CLASS='plain text'
                                      style='float: none; width: 100px; display: inline-block;'
                                      onMouseover='do_hover(this.id);' onMouseout='do_plain(this.id);'
                                      onClick="validate_user(document.user_add_Form);"><SPAN
                                        STYLE='float: left;'><?php print get_text("Submit"); ?></SPAN><IMG
                                        STYLE='float: right;' SRC='./images/submit_small.png' BORDER=0 alt="submit"
                                        width="20" height="20"></SPAN>
                            </TD>
                        </TR>
                        <INPUT TYPE="hidden" NAME="frm_responder_id" VALUE="0"/>
                        <INPUT TYPE="hidden" NAME="frm_facility_id" VALUE="0"/>
                </FORM>
                </TABLE>
                <FORM NAME='can_Form' METHOD="post" ACTION="<?php print basename(__FILE__); ?>"></FORM>
                </BODY>
                </HTML>
                <?php
                exit();
            }
        } else
            print '<FONT CLASS="warn">Not authorized.</FONT><BR /><BR />';
    }                // end if($_GET['add'] ...
    break;

case 'center' :                    // 3/29/2013
    require_once './incs/config.setcenter.inc.php';
    break;

case 'api_key' :
    if ((isset($_GET)) && (isset($_GET['update'])) && ($_GET['update'] == 'true')) {
        $query = "UPDATE `{$GLOBALS['mysql_prefix']}settings` SET `value`=? WHERE `name`='gmaps_api_key';";
        $result = db_query($query, [sanitize_string($_POST['frm_value'])]);

        $top_notice = "GMaps API Key saved to database.";
    } else {
        $curr_key = get_variable('gmaps_api_key')
        ?>
        <BODY onLoad='ck_frames()'>
        <?php include "./incs/links.inc.php"; ?>
        <FORM METHOD="POST" NAME="api_Form" onSubmit="return validate_key(document.api_Form);"
              ACTION="config.php?func=api_key&update=true">
            <TABLE BORDER="0" STYLE="margin-left: 100px; margin-top: 40px" ;>
                <TR CLASS="even">
                    <TD CLASS="td_label text" ALIGN='center'>Obtain GMaps API key at
                        https://code.google.com/apis/console/
                    </TD>
                </TR>
                <TR CLASS="odd">
                    <TD>&nbsp;</TD>
                </TR>
                <TR CLASS="even">
                    <TD CLASS="td_label text">Copy/paste key:</TD>
                </TR>
                <TR CLASS="odd">
                    <TD>
                        <INPUT MAXLENGTH="88" SIZE="88" TYPE="text" NAME="frm_value"
                               VALUE="<?php print $curr_key; ?>"/>
                    </TD>
                </TR>
                <TR CLASS="even">
                    <TD ALIGN='center'>
                            <SPAN id='cancel_but' CLASS='plain text'
                                  style='float: none; width: 100px; display: inline-block;'
                                  onMouseover='do_hover(this.id);' onMouseout='do_plain(this.id);'
                                  onClick="document.can_Form.submit();"><SPAN
                                    STYLE='float: left;'><?php print get_text("Cancel"); ?></SPAN><IMG
                                    STYLE='float: right;' SRC='./images/cancel_small.png' BORDER=0></SPAN>
                        <SPAN id='reset_but' CLASS='plain text'
                              style='float: none; width: 100px; display: inline-block;'
                              onMouseover='do_hover(this.id);' onMouseout='do_plain(this.id);'
                              onClick="map_cen_reset();"><SPAN
                                STYLE='float: left;'><?php print get_text("Reset"); ?></SPAN><IMG
                                STYLE='float: right;' SRC='./images/restore_small.png' BORDER=0></SPAN>
                        <SPAN id='sub_but' CLASS='plain text'
                              style='float: none; width: 100px; display: inline-block;'
                              onMouseover='do_hover(this.id);' onMouseout='do_plain(this.id);'
                              onClick="document.api_Form.submit();"><SPAN
                                STYLE='float: left;'><?php print get_text("Submit"); ?></SPAN><IMG
                                STYLE='float: right;' SRC='./images/submit_small.png' BORDER=0></SPAN>
                    </TD>
                </TR>
            </TABLE>
        </FORM>
        <FORM NAME='can_Form' METHOD="post" ACTION="<?php print basename(__FILE__); ?>"></FORM>
        </BODY>
        <SCRIPT>
            function validate_key(theForm) {            // limited form contents validation
                var errmsg = "";
//            if (theForm.frm_value.value.length!=86)            {errmsg+= "\tEntered GMaps API key is Invalid\n\t - length must be 86 chars.";}
                if (errmsg != "") {
                    alert("Please correct and re-submit:\n\n" + errmsg);
                    return false;
                } else {                                        // good to go!
                    return true;
                }
            }                // end function validate_key()

        </SCRIPT>
        </HTML>
        <?php
        exit();
    }        // end  else
    break;

case 'dump' :                // see mysql.inc.php    for MySQL parameters
require_once './incs/MySQLDump.class.php';
$backup = new MySQLDump(); //create new instance of MySQLDump

$the_db = $mysql_prefix . $mysql_db;
$backup->connect($mysql_host, $mysql_user, $mysql_passwd, $the_db);        // connect
if (!$backup->connected) {
    die('Error: ' . $backup->mysql_error);
}        // MySQL parameters from mysql.inc.php
$backup->list_tables();                                                // list all tables
$broj = count($backup->tables);                                        // count all tables, $backup->tables
//   will be array of table names
?>
<SCRIPT>
    function copyit() {                        // 11/30/09
        var tempval = document.the_form.the_dump;
        tempval.focus();
        tempval.select();
        therange = tempval.createTextRange();
        therange.execCommand("Copy");
    }

    //  End -->
</SCRIPT>

<?php
$_echo = "\n\n-- start  start  start  start  start  start  start  start  start  start  start  start  start  start  start  start  start  start  start \n";
$_echo .= "\n-- Dumping tables for database: $mysql_db\n"; //write "intro" ;)

for ($n = 0; $n < $broj; $n++) {                        //dump all tables:
    $table_name = $backup->tables[$n];            //get table name
    if (($mysql_prefix == "") || (strrpos($table_name, $mysql_prefix) === 0)) {
        $backup->dump_table($table_name);            //dump it to output (buffer)
        $_echo .= htmlspecialchars($backup->output);    //write output
    }
}

$_echo .= "\n\n-- end  end  end  end  end  end  end  end  end  end  end  end  end  end  end  end  end  end  end  end  end  end  end  end  end  end  end  end  end \n";
?>
<DIV style='width: 60%; position: absolute; left: 20%; top: 5%;'>
    <FORM NAME='the_form'>
        <TEXTAREA NAME='the_dump' COLS=120 ROWS=20><?php print $_echo; ?></TEXTAREA>
    </FORM>
    <BR/>
    <BR/>
    <SPAN id='copy_but' CLASS='plain text' style='float: none; display: inline-block; width: 150px;'
          onMouseover='do_hover(this.id);Tip("Click to copy the database dump");'
          onMouseout='do_plain(this.id); UnTip();' onClick="copyit();"><SPAN
            STYLE='float: left;'><?php print get_text("Copy to Clipboard"); ?></SPAN><IMG STYLE='float: right;'
                                                                                          SRC='./images/copy_small.png'
                                                                                          BORDER=0></SPAN>
    <SPAN id='cancel_but' CLASS='plain text' style='float: none; width: 150px; display: inline-block;'
          onMouseover='do_hover(this.id);' onMouseout='do_plain(this.id);'
          onClick="document.toConfig_form.submit();"><SPAN
            STYLE='float: left;'><?php print get_text("Cancel"); ?></SPAN><IMG STYLE='float: right;'
                                                                               SRC='./images/cancel_small.png' BORDER=0 alt="cancel"></SPAN>
    <FORM NAME='toConfig_form' METHOD="post" ACTION="config.php"></FORM>
    <?php
    exit();
    break;

    case 'delete' :
    print "<BODY onLoad = 'ck_frames()'>\n";
    include "./incs/links.inc.php";
    $subfunc = (array_key_exists('subfunc', $_GET)) ? $_GET['subfunc'] : "list";
    switch ($subfunc) {
    case 'list':
        ?>
        <FORM METHOD="POST" NAME="del_Form" ACTION="config.php?func=delete&subfunc=confirm">
        <?php
        $query = "SELECT *,UNIX_TIMESTAMP(problemend) AS problemend FROM `{$GLOBALS['mysql_prefix']}ticket` WHERE `status` = " . $GLOBALS['STATUS_CLOSED'] . " ORDER BY `scope`";

        $result = db_query($query);
        if ($result->num_rows > 0) {                    // inventory affected rows
            ?>
            <SPAN CLASS='heading text'
                  style=' position: relative; left: 200px; top: 50px; width: 700px; display: block;'>Select Closed Tickets for Permanent Deletion</SPAN>
            <DIV ID='tick_tab'
                 style='position: relative; left: 200px; top: 80px; width: 700px; height: 400px;; overflow-y: auto; border: 1px outset #707070;'>
                <TABLE BORDER=0 style='width: 100%;'>
                    <TR CLASS='odd'>
                        <TD ALIGN='left'>&nbsp;&nbsp;&nbsp;Ticket</TD>
                        <TD ALIGN='left'>&nbsp;&nbsp;&nbsp;Closed</TD>
                        <TD>Actions</TD>
                        <TD ALIGN='center'>Patients</TD>
                        <TD ALIGN='center'>Assigns</TD>
                        <TD>Del</TD>
                    </TR>
                    <?php
                    $i = 0;
                    while ($row = stripslashes_deep($result->fetch_array())) {
                        $query = "SELECT * FROM `{$GLOBALS['mysql_prefix']}action` WHERE `ticket_id` = ?";
                        $res_temp = db_query($query, [$row['id']]);
                        $no_acts = $res_temp->num_rows;
                        $query = "SELECT * FROM `{$GLOBALS['mysql_prefix']}patient` WHERE `ticket_id` = ?";
                        $res_temp = db_query($query, [$row['id']]);
                        $no_pers = $res_temp->num_rows;
                        $query = "SELECT * FROM `{$GLOBALS['mysql_prefix']}assigns` WHERE `ticket_id` = ?";
                        $res_temp = db_query($query, [$row['id']]);
                        $no_assns = $res_temp->num_rows;
                        ?>
                        <TR CLASS='<?php print $evenodd[$i % 2]; ?>'>
                            <TD CLASS='td_label'><?php print shorten($row['scope'], 50); ?></TD>
                            <TD CLASS='td_label'><?php print format_sb_date($row['problemend']); ?></TD>
                            <TD ALIGN='center'><?php print $no_acts; ?></TD>
                            <TD ALIGN='center'><?php print $no_pers; ?></TD>
                            <TD ALIGN='center'><?php print $no_assns; ?></TD>
                            <TD CLASS='td_label'>
                                <INPUT TYPE='checkbox' NAME='T<?php print $row['id']; ?>'
                                       onClick='document.del_Form.delcount.value++;'>
                            </TD>
                        </TR>
                        <?php
                        $i++;
                    }        // end while($row ...)
                    ?>
                </TABLE>
            </DIV>
            <BR/>
            <BR/>
            <DIV style='position: relative; left: 200px; top: 100px; width: auto; text-align: left;'>
                <SPAN id='cancel_but' CLASS='plain text' style='float: none; width: 100px; display: inline-block;'
                      onMouseover='do_hover(this.id);' onMouseout='do_plain(this.id);'
                      onClick="document.can_Form.submit();"><SPAN
                        STYLE='float: left;'><?php print get_text("Cancel"); ?></SPAN><IMG STYLE='float: right;'
                                                                                           SRC='./images/cancel_small.png'
                                                                                           BORDER=0 alt="cancel"></SPAN>
                <SPAN id='selall_but' CLASS='plain text' style='float: none; width: 100px; display: inline-block;'
                      onMouseover='do_hover(this.id);' onMouseout='do_plain(this.id);'
                      onClick="document.del_Form.delcount.value=1; all_ticks('checked');"><SPAN
                        STYLE='float: left;'><?php print get_text("Select All"); ?></SPAN><IMG STYLE='float: right;'
                                                                                               SRC='./images/select_all_small.png'
                                                                                               BORDER=0 alt="select_all"></SPAN>
                <SPAN id='unselall_but' CLASS='plain text' style='width: 100px; display: inline-block; float: none;'
                      onMouseover='do_hover(this.id);' onMouseout='do_plain(this.id);'
                      onClick="document.del_Form.delcount.value=1; all_ticks('');"><SPAN
                        STYLE='float: left;'><?php print get_text("Unselect All"); ?></SPAN><IMG STYLE='float: right;'
                                                                                                 SRC='./images/unselect_all_small.png'
                                                                                                 BORDER=0 alt="unselect_all"></SPAN>
                <SPAN id='reset_but' CLASS='plain text' style='float: none; width: 100px; display: inline-block;'
                      onMouseover='do_hover(this.id);' onMouseout='do_plain(this.id);'
                      onClick="document.del_Form.reset();"><SPAN
                        STYLE='float: left;'><?php print get_text("Reset"); ?></SPAN><IMG STYLE='float: right;'
                                                                                          SRC='./images/restore_small.png'
                                                                                          BORDER=0 alt="restore"></SPAN>
                <SPAN id='sub_but' CLASS='plain text' style='float: none; width: 100px; display: inline-block;'
                      onMouseover='do_hover(this.id);' onMouseout='do_plain(this.id);' onClick="collect();"><SPAN
                        STYLE='float: left;'><?php print get_text("Submit"); ?></SPAN><IMG STYLE='float: right;'
                                                                                           SRC='./images/submit_small.png'
                                                                                           BORDER=0 alt="submit"></SPAN>
            </DIV>
            <INPUT TYPE='hidden' NAME='idstr' VALUE=''>
            <INPUT TYPE='hidden' NAME='delcount' VALUE=0>
            </FORM>
            <?php
        }                // end if (db()->affected_rows>0)
        else {
            ?>
            </FORM>
            <BR/>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;<B>No Closed Tickets!</B>
            <br/>
            <br/>
            &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;
            <SPAN id='cancel_but' CLASS='plain text' style='float: none; width: 100px; display: inline-block;'
                  onMouseover='do_hover(this.id);' onMouseout='do_plain(this.id);'
                  onClick="document.can_Form.submit();"><SPAN
                    STYLE='float: left;'><?php print get_text("Cancel"); ?></SPAN><IMG STYLE='float: right;'
                                                                                       SRC='./images/cancel_small.png'
                                                                                       BORDER=0 alt="cancel"></SPAN>
            <?php
        }
        ?>

        <FORM NAME='can_Form' METHOD="post" ACTION="<?php print basename(__FILE__); ?>"></FORM>
        </BODY>
        </HTML>
        <?php
        exit();
        break;

    case 'confirm':
        ?>
        <DIV STYLE='margin-top:20px; margin-left:100px'><FONT CLASS='warn' SIZE="+1"><B>Please confirm deletions -
                    cannot be undone!</B></FONT><BR/><BR/>
            <FORM METHOD="POST" NAME="del_Form" ACTION="config.php?func=delete&subfunc=do_del">
                <INPUT TYPE='hidden' NAME='idstr' VALUE="<?php print e($_POST['idstr']); ?>">
                <SPAN id='cancel_but' CLASS='plain text' style='float: none; width: 100px; display: inline-block;'
                      onMouseover='do_hover(this.id);' onMouseout='do_plain(this.id);'
                      onClick="document.can_Form.submit();"><SPAN
                        STYLE='float: left;'><?php print get_text("Cancel"); ?></SPAN><IMG STYLE='float: right;'
                                                                                           SRC='./images/cancel_small.png'
                                                                                           BORDER=0></SPAN>
                <SPAN id='sub_but' CLASS='plain text' style='float: none; width: 100px; display: inline-block;'
                      onMouseover='do_hover(this.id);' onMouseout='do_plain(this.id);'
                      onClick="document.del_Form.submit();"><SPAN
                        STYLE='float: left;'><?php print get_text("Confirm"); ?></SPAN><IMG STYLE='float: right;'
                                                                                            SRC='./images/submit_small.png'
                                                                                            BORDER=0></SPAN>
            </FORM>
            <FORM NAME='can_Form' METHOD="post" ACTION="<?php print basename(__FILE__); ?>"></FORM>
        </DIV>
        </BODY>
        </HTML>
        <?php
        exit();
        break;

    case 'do_del':
    $temp = explode(",", $_POST['idstr']);
    for ($i = 0; $i < count($temp); $i++) {
        $ticket_id = sanitize_int($temp[$i]);
        $query = "DELETE FROM `{$GLOBALS['mysql_prefix']}ticket` WHERE `id` = ? LIMIT 1";
        $result = db_query($query, [$ticket_id]);    // 6/4/08 - corrected table names
        $query = "DELETE FROM `{$GLOBALS['mysql_prefix']}action` WHERE `ticket_id` = ?";
        $result = db_query($query, [$ticket_id]);
        $query = "DELETE FROM `{$GLOBALS['mysql_prefix']}patient` WHERE `ticket_id` = ?";
        $result = db_query($query, [$ticket_id]);
        $query = "DELETE FROM `{$GLOBALS['mysql_prefix']}assigns` WHERE `ticket_id` = ?";
        $result = db_query($query, [$ticket_id]);
        $query = "DELETE FROM `{$GLOBALS['mysql_prefix']}allocates` WHERE `type` = 1 AND `resource_id` = ?";
        $result = db_query($query, [$ticket_id]);
        do_log($GLOBALS['LOG_INCIDENT_DELETE'], $ticket_id);                                                                // added 6/4/08

        //                dump ($query);
    }
    $plu = ($i > 1) ? "s" : "";
    ?>
    <DIV STYLE='margin-left:100px; margin-top:60px;'>
        <FORM NAME='can_Form' METHOD="post" ACTION="<?php print basename(__FILE__); ?>">
            <BR/>
            <BR/>
            <BR/>
            <BR/>
            <B>Ticket<?php print $plu; ?> and associated Assigns, Action and <?php print $patient; ?>
                record<?php print $plu; ?> deleted: <U><?php print count($temp); ?></U></B>
            <BR/>
            <BR/>
            <SPAN id='cancel_but' CLASS='plain text' style='float: none; width: 100px; display: inline-block;'
                  onMouseover='do_hover(this.id);' onMouseout='do_plain(this.id);'
                  onClick="document.can_Form.submit();"><SPAN
                    STYLE='float: left;'><?php print get_text("Continue"); ?></SPAN><IMG STYLE='float: right;'
                                                                                         SRC='./images/forward_small.png'
                                                                                         BORDER=0></SPAN>
        </FORM>
        </BODY>
        <?php
        exit();

        break;


        default :
        }                // end switch ($subfunc)


        case 'in_nums' :                // incident numbering - 11/11/10
            print "</HEAD>\n<BODY onLoad = 'ck_frames()'>\n";
    include "./incs/links.inc.php";
            ?>
            <SCRIPT TYPE="application/x-javascript" src="./js/wz_tooltip.js"></SCRIPT>
        <?php
        if (array_key_exists('do_db', ($_POST))) {

            $frm_do_nature = (array_key_exists('frm_do_nature', ($_POST))) ? $_POST['frm_do_nature'] : 0;        // empty if not set
            $in_nums_ary = array();
            $in_nums_ary[0] = trim($_POST['frm_style']);
            $in_nums_ary[1] = trim($_POST['frm_label']);
            $in_nums_ary[2] = $_POST['frm_sep'];        // allow space character
            $in_nums_ary[3] = trim($_POST['frm_number']);
            $in_nums_ary[4] = $frm_do_nature;
            $in_nums_ary[5] = date("y");
            $the_val = base64_encode(serialize($in_nums_ary));
            $the_field = "_inc_num";    //    3/15/11
            $query = "UPDATE `{$GLOBALS['mysql_prefix']}settings` SET `value` = ? WHERE `name` = ?";    //    3/15/11
            $result = db_query($query, [$the_val, $the_field]);

            $top_notice = "Incident number update applied";
        } else {                // do edit
        $in_ary = unserialize(base64_decode(get_variable('_inc_num')));    //    3/15/11
        $do_nature_n = ((int)$in_ary[4] == 0) ? "CHECKED" : "";
        $do_nature_y = ((int)$in_ary[4] == 1) ? "CHECKED" : "";
        $style_checked = array("", "", "", "", "", "");        // one for each style type
        $style_checked[$in_ary[0]] = "CHECKED";                // set nth style entry checked
        ?>
            <SCRIPT>
                function validate_inc_num(theForm) {            // form contents validation

                    function get_radio_val(my_form) {
                        for (var i = 0; i < my_form.elements.length; i++) {
                            if ((my_form.elements[i].name == 'frm_style') && (my_form.elements[i].checked)) {
                                return parseInt(my_form.elements[i].value);
                            }
                        }        // end for ()
                        return null;
                    }        // end function get_radio_val()

                    var errmsg = "";
                    switch (get_radio_val(theForm)) {
                        case 0:
                            if (!(theForm.frm_label.value.trim()) == "") {
                                errmsg += "'Label' not used with this option\n";
                            }
                            if (!(theForm.frm_sep.value.trim()) == "") {
                                errmsg += "'Separator' not used with this option\n";
                            }
                            if (!(theForm.frm_number.value.trim()) == "") {
                                errmsg += "'Next number' not used with this option\n";
                            }
                            break;
                        case 1:
                            if (!(theForm.frm_label.value.trim()) == "") {
                                errmsg += "'Label' not used with this option\n";
                            }
                            if (isNaN(theForm.frm_number.value.trim())) {
                                errmsg += "'Next number' must be numeric\n";
                            } else {
                                if (!(theForm.frm_number.value.trim() > 0)) {
                                    errmsg += "'Next number' must be 1 or greater\n";
                                }
                            }
                            break;
                        case 2:
                            if ((theForm.frm_label.value.trim()) == "") {
                                errmsg += "'Label' required  with this option\n";
                            }
                            if (isNaN(theForm.frm_number.value.trim())) {
                                errmsg += "'Next number' must be numeric\n";
                            } else {
                                if (!(theForm.frm_number.value.trim() > 0)) {
                                    errmsg += "'Next number' must be 1 or greater\n";
                                }
                            }
                            break;
                        case 3:
                            if (!(theForm.frm_label.value.trim()) == "") {
                                errmsg += "'Label' not used with this option\n";
                            }
                            if (isNaN(theForm.frm_number.value.trim())) {
                                errmsg += "'Next number' must be numeric\n";
                            } else {
                                if (!(theForm.frm_number.value.trim() > 0)) {
                                    errmsg += "'Next number' must be 1 or greater\n";
                                }
                            }
                            break;
                        default:
                            alert("ERROR @ " + "<?php print __LINE__;?>");
                    }

                    if (errmsg != "") {
                        alert("Please correct and re-submit:\n\n" + errmsg);
                        return false;
                    } else {                                        // good to go!
                        theForm.submit();
                    }
                }                // end function validate_inc_num()

            </SCRIPT>
            <FORM NAME="inc_num_Form" METHOD='post' ACTION="<?php print basename(__FILE__); ?>">
                <TABLE ALIGN="left" BORDER=0 CELLSPACING=0 CELLPADDING=0 STYLE='margin-left:200px;margin-top:100px'>
                    <TR VALIGN="baseline" CLASS='even'>
                        <TH COLSPAN=2 ALIGN='center'><BR/>Automatic Incident Numbers <SPAN
                                STYLE='font-size:75%; font-weight:normal; font-style:italic'>(mouseover styles for hints)</span><BR/><BR/>
                        </TH>
                    </TR>
                    <TR VALIGN="middle" CLASS='odd'>
                        <TD>&nbsp;</TD>
                    </TR>
                    <TR VALIGN="baseline" CLASS='even'>
                        <TD CLASS='td_label' ALIGN='right'><B>Style: </B></TD>
                        <TD>
                        <SPAN STYLE='margin-left:20px' onmouseover="Tip('no incident numbers used - the default')"
                              onmouseout="UnTip()">
                             none &raquo; <INPUT TYPE='radio' NAME='frm_style' VALUE=0 <?php print $style_checked[0]; ?> /></SPAN>
                            <SPAN STYLE='margin-left:40px' onmouseover="Tip('incident numbers only')"
                                  onmouseout="UnTip()">
                             12345 &raquo;<INPUT TYPE='radio' NAME='frm_style' VALUE=1 <?php print $style_checked[1]; ?> /></SPAN>
                            <SPAN STYLE='margin-left:40px'
                                  onmouseover="Tip('your \'Label\' precedes the incident number')" onmouseout="UnTip()">
                              <U>Label</U>12345 &raquo;     <INPUT TYPE='radio' NAME='frm_style'
                                                                  VALUE=2 <?php print $style_checked[2]; ?> /></SPAN>
                            <SPAN STYLE='margin-left:40px'
                                  onmouseover="Tip('the 2-digit year precedes the incident number')"
                                  onmouseout="UnTip()">
                              <U>YR</U>    12345 &raquo; <INPUT TYPE='radio' NAME='frm_style'
                                                                VALUE=3 <?php print $style_checked[3]; ?> /></SPAN>
                        </TD>
                    </TR>
                    <TR VALIGN="baseline" CLASS='odd'>
                        <TD CLASS='td_label' ALIGN='right'><B>Label: </B></TD>
                        <TD>&nbsp;<INPUT TYPE='text' NAME='frm_label' SIZE=16 MAXLENGTH=16
                                         VALUE="<?php print$in_ary[1]; ?>"/></TD>
                    </TR>
                    <TR VALIGN="baseline" CLASS='even'>
                        <TD CLASS='td_label' ALIGN='right'><B>Separator: </B></TD>
                        <TD>&nbsp;<INPUT TYPE='text' NAME='frm_sep' SIZE=4 MAXLENGTH=4
                                         VALUE="<?php print$in_ary[2]; ?>"/>&nbsp;&nbsp;<I> (e.g., dash, slash, space
                                character.)</I></TD>
                    </TR>
                    <TR ALIGN="left" VALIGN="baseline" CLASS='odd'>
                        <TD CLASS='td_label' ALIGN='right'>&nbsp;<B>Next number: </B></TD>
                        <TD>&nbsp;<INPUT TYPE='text' NAME='frm_number' SIZE=8 MAXLENGTH=8
                                         VALUE="<?php print$in_ary[3]; ?>"/></TD>
                    </TR>

                    <TR ALIGN="left" VALIGN="baseline" CLASS='even'>
                        <TD CLASS='td_label' ALIGN='right'>&nbsp;<B>Append <?php print get_text("Incident"); ?>
                                nature: </B></TD>
                        <TD>&nbsp;
                            <SPAN STYLE='margin-left:40px'> No &raquo; <INPUT TYPE='radio' NAME='frm_do_nature'
                                                                              VALUE="0" <?php print $do_nature_n; ?> /></SPAN>
                            <SPAN STYLE='margin-left:40px'> Yes &raquo; <INPUT TYPE='radio' NAME='frm_do_nature'
                                                                               VALUE="1" <?php print $do_nature_y; ?> /></SPAN>

                        </TD>
                    </TR>
                    <TR VALIGN="middle" CLASS='odd'>
                        <TD>&nbsp;</TD>
                    </TR>
                    <TR ALIGN="left" VALIGN="baseline" CLASS='odd'>
                        <TD ALIGN='center' COLSPAN=2>
                            <SPAN id='cancel_but' CLASS='plain text'
                                  style='float: none; width: 100px; display: inline-block;'
                                  onMouseover='do_hover(this.id);' onMouseout='do_plain(this.id);'
                                  onClick="document.can_Form.submit();"><SPAN
                                    STYLE='float: left;'><?php print get_text("Cancel"); ?></SPAN><IMG
                                    STYLE='float: right;' SRC='./images/cancel_small.png' BORDER=0></SPAN>
                            <SPAN id='reset_but' CLASS='plain text'
                                  style='float: none; width: 100px; display: inline-block;'
                                  onMouseover='do_hover(this.id);' onMouseout='do_plain(this.id);'
                                  onClick="document.inc_num_Form.reset();"><SPAN
                                    STYLE='float: left;'><?php print get_text("Reset"); ?></SPAN><IMG
                                    STYLE='float: right;' SRC='./images/restore_small.png' BORDER=0></SPAN>
                            <SPAN id='sub_but' CLASS='plain text'
                                  style='float: none; width: 100px; display: inline-block;'
                                  onMouseover='do_hover(this.id);' onMouseout='do_plain(this.id);'
                                  onClick="validate_inc_num(document.inc_num_Form);"><SPAN
                                    STYLE='float: left;'><?php print get_text("Submit"); ?></SPAN><IMG
                                    STYLE='float: right;' SRC='./images/submit_small.png' BORDER=0></SPAN>
                        </TD>
                    </TR>
                </TABLE>
                <INPUT TYPE='hidden' NAME='func' VALUE='in_nums'/>
                <INPUT TYPE='hidden' NAME='do_db' VALUE='true'/>
            </FORM>
            <FORM NAME='can_Form' METHOD="post" ACTION="<?php print basename(__FILE__); ?>"></FORM>
            </BODY>
            </HTML>
            <?php
            exit();
        }                // end do edit

            break;            // case 'in_nums'
        case 'hints' :                                    // 2/3/11
            ?>
            <DIV ID="foo">
                <DIV ID="bar">
                    <SPAN id='cancel_but' CLASS='plain text' style='float: none; width: 100px; display: inline-block;'
                          onMouseover='do_hover(this.id);' onMouseout='do_plain(this.id);'
                          onClick="history.back();"><SPAN STYLE='float: left;'><?php print get_text("Cancel"); ?></SPAN><IMG
                            STYLE='float: right;' SRC='./images/cancel_small.png' BORDER=0></SPAN><BR/>
                    <?php // 3/19/11
                    if ((is_administrator()) || (is_super())) {
                        ?>
                        <SPAN id='reset_but' CLASS='plain text'
                              style='float: none; width: 100px; display: inline-block;' onMouseover='do_hover(this.id);'
                              onMouseout='do_plain(this.id);' onClick="document.hints.reset();"><SPAN
                                STYLE='float: left;'><?php print get_text("Reset"); ?></SPAN><IMG STYLE='float: right;'
                                                                                                  SRC='./images/restore_small.png'
                                                                                                  BORDER=0></SPAN><BR/>
                        <SPAN id='sub_but' CLASS='plain text' style='float: none; width: 100px; display: inline-block;'
                              onMouseover='do_hover(this.id);' onMouseout='do_plain(this.id);'
                              onClick="document.hints.submit();"><SPAN
                                STYLE='float: left;'><?php print get_text("Apply"); ?></SPAN><IMG STYLE='float: right;'
                                                                                                  SRC='./images/submit_small.png'
                                                                                                  BORDER=0></SPAN><BR/>
                        <?php
                    }
                    ?>

                </DIV>
            </DIV>
            <DIV ID='to_bottom' style="position:fixed; top:4px; left:50px; height: 12px; width: 10px;"
                 onclick="location.href = '#bottom';">
                <IMG SRC="markers/down.png" BORDER=0 TITLE='to bottom'/></div>
            <A NAME="top"/>
            <?php

            $query = "SELECT * FROM `{$GLOBALS['mysql_prefix']}hints`";
            $result = db_query($query);
            $i = 1;
            print "\n<FORM NAME='hints' METHOD = 'post' ACTION = '" . basename(__FILE__) . "'>
                    <table border=0 STYLE = 'MARGIN-LEFT:100PX'>\n";
            print "\n<INPUT TYPE='hidden' NAME='func' VALUE='hints_update' />\n";
            print "\n<TR><TH COLSPAN=2>Incident Add/Edit hints - enter revisions</TH></TR>\n";
            $dis = ((is_super()) || (is_super())) ? "" : "DISABLED";                // 3/19/11

            while ($row = stripslashes_deep($result->fetch_array())) {
                print "<TR CLASS = {$colors[$i%2]} VALIGN='middle'><TD><BR />" . substr($row['tag'], 1) . "</TD>
                        <TD><TEXTAREA COLS = 120 ROWS=1 NAME = '{$row['tag']}' {$dis}>" . trim($row['hint']) . "</TEXTAREA></TD></TR>\n";
                $i++;
            }
            print "\n\t\t<FORM></TABLE>";
            ?>
            <A NAME="bottom"/>
            <IMG SRC="markers/up.png" BORDER=0 onclick="location.href = '#top';" STYLE='margin-left: 50px'
                 TITLE='to top'>
            </BODY>
            </HTML>

            <?php
            exit();
            break;                // end case 'hints''

        case 'hints_update' :                                    // 2/3/11
            print "</HEAD>\n<BODY onLoad = 'ck_frames();depart();'>\n";
    include "./incs/links.inc.php";
            print "<FORM NAME='can_Form' METHOD='post' ACTION = '" . basename(__FILE__) . "'></FORM>\n";

            foreach ($_POST as $VarName => $VarValue) {
                if ($VarName != 'func') {
                    shorten($VarValue, 511);
                    $query = "UPDATE `{$GLOBALS['mysql_prefix']}hints` SET `hint` = ? WHERE `tag` = ?";
                    $result = db_query($query, [$VarValue, $VarName]);
                }
            }
            ?>
            <SCRIPT>
                function depart() {
                    setTimeout("document.can_Form.submit()", 2000);
                }
            </SCRIPT>
            <H2 STYLE='margin-left:400px; margin-top:60px'>Hint updates applied!</H2><BR/><BR/></BODY></HTML>
            <?php
            exit();
            break;


        case 'css_day' :    //    3/15/11
            if ((isset($_GET)) && (isset($_GET['go'])) && ($_GET['go'] == 'true')) {
                print "</HEAD>\n<BODY onLoad = 'ck_frames(); '>\n";
    include "./incs/links.inc.php";
                foreach ($_POST as $VarName => $VarValue) {
                    $query = "UPDATE `{$GLOBALS['mysql_prefix']}css_day` SET `value` = ? WHERE `name` = ?";
                    $result = db_query($query, [$VarValue, $VarName]);
                }
                print '<FONT CLASS="update_conf">CSS Day Settings saved</FONT>.</FONT><BR /><BR />';
            } else {
                print "</HEAD>\n<BODY onLoad = 'ck_frames();'>\n";
    include "./incs/links.inc.php";
                $evenodd = array("even", "odd");
                ?>
                <DIV ID='to_bottom' style="position:fixed; top:4px; left:20px; height: 12px; width: 10px;"
                     onclick="location.href = '#bottom';"><IMG SRC="markers/down.png" BORDER=0/></div>
                <A NAME="top"/>

            <?php
            print "<SPAN STYLE='margin-left:40px'><FONT CLASS='header'>Edit CSS Colors - Day colors</FONT>  (mouseover caption for help information)</SPAN><BR /><BR />
                <TABLE BORDER='0' STYLE='margin-left:40px'><FORM METHOD='POST' NAME= 'css_day_Form'
                onSubmit='return validate_css_day(document.css_day_Form);' ACTION='config.php?func=css_day&go=true'>";
            $counter = 0;
            $result = db_query("SELECT * FROM `{$GLOBALS['mysql_prefix']}css_day` ORDER BY id");
            while ($row = stripslashes_deep($result->fetch_array())) {
                if ($row['name'][0] <> "_") {
                    $capt = str_replace("_", " ", $row['name']);
                    print "<TR CLASS='" . $evenodd[$counter % 2] . "'><TD CLASS='td_label'><A CLASS='td_label' HREF='#' TITLE='" . get_css_day_help($row['name']) . "'>$capt</A>: &nbsp;</TD>";
                    print "<TD><INPUT CLASS='color' MAXLENGTH='16' SIZE='16' TYPE='text' VALUE='" . $row['value'] . "' NAME='" . $row['name'] . "'></TD></TR>\n";
                    $counter++;
                }
            }        // str_replace ( search, replace, subject)

            print "</FORM></TABLE>\n";        // 7/16/09
            ?>
                <A NAME="bottom"/> <!-- 11/11/09 -->
                <IMG SRC="markers/up.png" BORDER=0 onclick="location.href = '#top';" STYLE='margin-left: 20px'></TD>

                <DIV ID="foo">
                    <DIV ID="bar">
                        <SPAN id='try_but' CLASS='plain text' style='float: none; width: 100px; display: inline-block;'
                              onMouseover='do_hover(this.id);' onMouseout='do_plain(this.id);'
                              onClick="do_day_color_check();"><SPAN
                                STYLE='float: left;'><?php print get_text("Try Colors"); ?></SPAN><IMG
                                STYLE='float: right;' SRC='./images/colors_small.png' BORDER=0></SPAN><BR/>
                        <SPAN id='cancel_but' CLASS='plain text'
                              style='float: none; width: 100px; display: inline-block;' onMouseover='do_hover(this.id);'
                              onMouseout='do_plain(this.id);' onClick="document.can_Form.submit();"><SPAN
                                STYLE='float: left;'><?php print get_text("Cancel"); ?></SPAN><IMG STYLE='float: right;'
                                                                                                   SRC='./images/cancel_small.png'
                                                                                                   BORDER=0></SPAN><BR/>
                        <?php
                        if ((is_administrator()) || (is_super())) {
                            ?>
                            <SPAN id='reset_but' CLASS='plain text'
                                  style='float: none; width: 100px; display: inline-block;'
                                  onMouseover='do_hover(this.id);' onMouseout='do_plain(this.id);'
                                  onClick="document.css_day_Form.reset();"><SPAN
                                    STYLE='float: left;'><?php print get_text("Reset"); ?></SPAN><IMG
                                    STYLE='float: right;' SRC='./images/restore_small.png' BORDER=0></SPAN><BR/>
                            <SPAN id='sub_but' CLASS='plain text'
                                  style='float: none; width: 100px; display: inline-block;'
                                  onMouseover='do_hover(this.id);' onMouseout='do_plain(this.id);'
                                  onClick="document.css_day_Form.submit();"><SPAN
                                    STYLE='float: left;'><?php print get_text("Apply"); ?></SPAN><IMG
                                    STYLE='float: right;' SRC='./images/submit_small.png' BORDER=0></SPAN><BR/>
                            <?php
                        }
                        ?>

                    </DIV>
                </DIV>
                <FORM NAME='can_Form' METHOD="post" ACTION="<?php print basename(__FILE__); ?>"></FORM>
                </BODY>
                <SCRIPT>
                    try {
                        parent.frames["upper"].document.getElementById("whom").innerHTML = "<?php print $_SESSION['user'];?>";
                        parent.frames["upper"].document.getElementById("level").innerHTML = "<?php print get_level_text($_SESSION['level']);?>";
                        parent.frames["upper"].document.getElementById("script").innerHTML = "<?php print LessExtension(basename(__FILE__));?>";
                    } catch (e) {
                    }
                </SCRIPT>
                </HTML>
                <?php
                exit();
            }                // end else
            break;

        case 'css_night' :    //    3/15/11
            if ((isset($_GET)) && (isset($_GET['go'])) && ($_GET['go'] == 'true')) {
                print "</HEAD>\n<BODY onLoad = 'ck_frames(); '>\n";
    include "./incs/links.inc.php";
                foreach ($_POST as $VarName => $VarValue) {
                    $query = "UPDATE `{$GLOBALS['mysql_prefix']}css_night` SET `value` = ? WHERE `name` = ?";
                    $result = db_query($query, [$VarValue, $VarName]);
                }
                print '<FONT CLASS="update_conf">CSS Night Settings saved</FONT>.</FONT><BR /><BR />';
            } else {
                print "</HEAD>\n<BODY onLoad = 'ck_frames();'>\n";
    include "./incs/links.inc.php";
                $evenodd = array("even", "odd");
                ?>
                <DIV ID='to_bottom' style="position:fixed; top:4px; left:20px; height: 12px; width: 10px;"
                     onclick="location.href = '#bottom';"><IMG SRC="markers/down.png" BORDER=0/></div>
                <A NAME="top"/>

            <?php
            print "<SPAN STYLE='margin-left:40px'><FONT CLASS='header'>Edit CSS Colors - Night colors</FONT>  (mouseover caption for help information)</SPAN><BR /><BR />
                <TABLE BORDER='0' STYLE='margin-left:40px'><FORM METHOD='POST' NAME= 'css_night_Form'
                onSubmit='return validate_css_night(document.css_night_Form);' ACTION='config.php?func=css_night&go=true'>";
            $counter = 0;
            $result = db_query("SELECT * FROM `{$GLOBALS['mysql_prefix']}css_night` ORDER BY id");
            while ($row = stripslashes_deep($result->fetch_array())) {
                if ($row['name'][0] <> "_") {                                // hide these
                    $capt = str_replace("_", " ", $row['name']);
                    print "<TR CLASS='" . $evenodd[$counter % 2] . "'><TD CLASS='td_label'><A CLASS='td_label' HREF='#' TITLE='" . get_css_night_help($row['name']) . "'>$capt</A>: &nbsp;</TD>";
                    print "<TD><INPUT CLASS='color' MAXLENGTH='16' SIZE='16' TYPE='text' VALUE='" . $row['value'] . "' NAME='" . $row['name'] . "'></TD></TR>\n";
                    $counter++;
                }
            }        // str_replace ( search, replace, subject)

            print "</FORM></TABLE>\n";
            ?>
                <A NAME="bottom"/> <!-- 11/11/09 -->
                <IMG SRC="markers/up.png" BORDER=0 onclick="location.href = '#top';" STYLE='margin-left: 20px'>

                <DIV ID="foo">
                    <DIV ID="bar">
                        <SPAN id='try_but' CLASS='plain text' style='float: none; width: 100px; display: inline-block;'
                              onMouseover='do_hover(this.id);' onMouseout='do_plain(this.id);'
                              onClick="do_night_color_check();"><SPAN
                                STYLE='float: left;'><?php print get_text("Try Colors"); ?></SPAN><IMG
                                STYLE='float: right;' SRC='./images/colors_small.png' BORDER=0></SPAN><BR/>
                        <SPAN id='cancel_but' CLASS='plain text'
                              style='float: none; width: 100px; display: inline-block;' onMouseover='do_hover(this.id);'
                              onMouseout='do_plain(this.id);' onClick="document.can_Form.submit();"><SPAN
                                STYLE='float: left;'><?php print get_text("Cancel"); ?></SPAN><IMG STYLE='float: right;'
                                                                                                   SRC='./images/cancel_small.png'
                                                                                                   BORDER=0></SPAN><BR/>
                        <?php
                        if ((is_administrator()) || (is_super())) {
                            ?>
                            <SPAN id='reset_but' CLASS='plain text'
                                  style='float: none; width: 100px; display: inline-block;'
                                  onMouseover='do_hover(this.id);' onMouseout='do_plain(this.id);'
                                  onClick="document.css_night_Form.reset();"><SPAN
                                    STYLE='float: left;'><?php print get_text("Reset"); ?></SPAN><IMG
                                    STYLE='float: right;' SRC='./images/restore_small.png' BORDER=0></SPAN><BR/>
                            <SPAN id='sub_but' CLASS='plain text'
                                  style='float: none; width: 100px; display: inline-block;'
                                  onMouseover='do_hover(this.id);' onMouseout='do_plain(this.id);'
                                  onClick="document.css_night_Form.submit();"><SPAN
                                    STYLE='float: left;'><?php print get_text("Apply"); ?></SPAN><IMG
                                    STYLE='float: right;' SRC='./images/submit_small.png' BORDER=0></SPAN><BR/>
                            <?php
                        }
                        ?>

                    </DIV>
                </DIV>

                <FORM NAME='can_Form' METHOD="post" ACTION="<?php print basename(__FILE__); ?>"></FORM>
                </BODY>
                <SCRIPT>
                    try {
                        parent.frames["upper"].document.getElementById("whom").innerHTML = "<?php print $_SESSION['user'];?>";
                        parent.frames["upper"].document.getElementById("level").innerHTML = "<?php print get_level_text($_SESSION['level']);?>";
                        parent.frames["upper"].document.getElementById("script").innerHTML = "<?php print LessExtension(basename(__FILE__));?>";
                    } catch (e) {
                    }
                </SCRIPT>
                </HTML>
                <?php
                exit();
            }                // end else
            break;

        default:
            dump("ERROR " . __LINE__);
        }                        // end switch ($func)

        }                // end if (array_key_exists('func', ($_REQUEST)))
        ?>
        <STYLE>
            ul {
                font-family: Arial, Helvetica, sans-serif;
                font-size: 10px;
                color: #0F143F;
                list-style-type: none;
            }
        </STYLE>
        </HEAD>
        <BODY onLoad='ck_frames()'> <!-- 11/13/10 -->
        <?php include "./incs/links.inc.php"; ?>
        <?php if (isset($top_notice)) print "<SPAN STYLE='margin-left: 100px;' CLASS='header' >{$top_notice}</SPAN><BR /><BR />"; ?>
        <BR/>
        <DIV id='mainmenu' class='odd'
             style='position: absolute; left: 20px; top: 50px; max-height: 85%; width: 45%; overflow-x: hidden; overflow-y: auto;'>
            <DIV class='config_heading text' id='gen_settings'
                 style='display: inline-block; clear: both; width: 100%; border: 1px inset #707070;'>
                <DIV class='config_heading text'>General</DIV>
                <A id='about' class='plain text' style='clear: both; width: 150px;' HREF="#"
                   onMouseover='do_hover(this.id);' onMouseout='do_plain(this.id);' onClick="do_about();">About this
                    version ...</A>
                <?php
                if (!(is_guest())) {
                    if (is_administrator() || is_user() || (get_variable('oper_can_edit') == "1")) {
                        ?>
                        <A id='email_users' class='plain text' style='clear: both; width: 150px;' HREF="#"
                           onMouseover='do_hover(this.id);' onMouseout='do_plain(this.id);' onClick="do_mail_win()">Email
                            users</A>        <!-- 6/30/09, 3/15/11 -->
                        <A id='contacts' class='plain text' style='clear: both; width: 150px;' HREF="#"
                           onMouseover='do_hover(this.id);' onMouseout='do_plain(this.id);'
                           onClick="do_Post('contacts');">Contacts</A>
                        <?php
                    }
                    if (!is_unit()) {
                        ?>
                        <A id='my_profile' class='plain text' style='clear: both; width: 150px;'
                           HREF="config.php?func=profile" onMouseover='do_hover(this.id);'
                           onMouseout='do_plain(this.id);'>Edit My Profile</A>                <!-- 12/1/08 -->
                        <?php
                    }
                }
                if (is_super() || is_administrator()) {    // SHOW MENU BASED ON USER LEVEL
                    ?>
                    <A id='add_user' class='plain text' style='clear: both; width: 150px;'
                       onMouseover='do_hover(this.id);' onMouseout='do_plain(this.id);'
                       HREF="config.php?func=user&add=true">Add user</A>
                    <A id='edit_settings' class='plain text' style='clear: both; width: 150px;'
                       onMouseover='do_hover(this.id);' onMouseout='do_plain(this.id);' HREF="config.php?func=settings">Edit
                        Settings</A>
                    <A id='edit_notifies' class='plain text' style='clear: both; width: 150px;'
                       onMouseover='do_hover(this.id);' onMouseout='do_plain(this.id);' HREF="config.php?func=notify">Add/Edit
                        Notifies</A>
                    <A id='delete_closed' class='plain text' style='clear: both; width: 150px;'
                       onMouseover='do_hover(this.id);' onMouseout='do_plain(this.id);' HREF="config.php?func=delete">Delete
                        Closed Tickets</A>
                    <A id='alarm_test' class='plain text' style='clear: both; width: 150px;'
                       onMouseover='do_hover(this.id);' onMouseout='do_plain(this.id);' HREF="#"
                       onClick="do_audio_test();">Alarm audio test</A>            <!-- 6/22/10 -->
                    <?php
                    if (!(intval(get_variable('ics_top')) == 1)) {        // 5/24/2013
                        ?>
                        <A id='ics' class='plain text' style='clear: both; width: 150px;' HREF="#"
                           onMouseover='do_hover(this.id);' onMouseout='do_plain(this.id);'
                           onClick="window.open('ics.php', 'ics');">ICS FORMS</A>            <!-- 3/22/12 -->
                        <?php
                    }        // end if ( ... ics_top ...)
                    if (mysql_table_exists("{$GLOBALS['mysql_prefix']}constituents")) {        // 6/4/09
                        ?>
                        <A id='const' class='plain text' style='clear: both; width: 150px;' HREF="#"
                           onMouseover='do_hover(this.id);' onMouseout='do_plain(this.id);'
                           onClick="do_Post('constituents');"><?php echo get_text("Constituents"); ?></A>     <!-- 6/18/2013 -->
                        <?php
                    }
                    if (mysql_table_exists("{$GLOBALS['mysql_prefix']}insurance")) {        // 6/4/09
                        ?>
                        <A id='insurance' class='plain text' style='clear: both; width: 150px;' HREF="#"
                           onMouseover='do_hover(this.id);' onMouseout='do_plain(this.id);'
                           onClick="do_Post('insurance');"><?php echo get_text("Insurance"); ?></A>     <!-- 6/18/2013 -->
                        <?php
                    }
                    if (mysql_table_exists("{$GLOBALS['mysql_prefix']}personnel")) {        // 9/10/13
                        ?>
                        <A id='personnel' class='plain text' style='clear: both; width: 150px;' HREF="#"
                           onMouseover='do_hover(this.id);' onMouseout='do_plain(this.id);'
                           onClick="do_Post('personnel');"><?php echo get_text("Personnel"); ?></A>     <!-- 6/18/2013 -->
                        <?php
                    }
                    if (($asterisk) && mysql_table_exists("{$GLOBALS['mysql_prefix']}pin_ctrl")) {        // 7/16
                        ?>
                        <A id='pin_cont' class='plain text' style='clear: both; width: 150px;' HREF="#"
                           onMouseover='do_hover(this.id);' onMouseout='do_plain(this.id);'
                           onClick="do_Post('pin_ctrl');">PIN Control</A>     <!-- 4/9/10 -->
                        <?php
                    }            // end 'pin_ctrl'
                    if (is_super() || is_admin()) {
                        ?>
                        <A id='wiz_set' class='plain text' style='clear: both; width: 150px;'
                           onMouseover='do_hover(this.id);' onMouseout='do_plain(this.id);'
                           HREF="config.php?func=wizard_settings">New Incident Wizard Settings</A>
                        <?php
                    }            // end 'wizard Settings'
                    ?>
                    <A id='phpinfo' class='plain text' style='clear: both; width: 150px;'
                       onMouseover='do_hover(this.id);' onMouseout='do_plain(this.id);' HREF="getinfo.php">PHP
                        Information</A>     <!-- 1/23/17 -->
                    <?php
                    if (mysql_table_exists("{$GLOBALS['mysql_prefix']}organisations")) {
                        ?>
                        <A id='orgs' class='plain text' style='clear: both; width: 150px;' HREF="#"
                           onMouseover='do_hover(this.id);' onMouseout='do_plain(this.id);'
                           onClick="do_Post('organisations');">Organizations</A>     <!-- 4/9/10 -->
                        <?php
                    }
                    ?>
                    <A id='import_mdb' class='plain text' style='clear: both; width: 150px;'
                       onMouseover='do_hover(this.id);' onMouseout='do_plain(this.id);' HREF="ticketsmdb_import.php">Import
                        Tickets MDB Data</A>
                    <A id='sounds' class='plain text' style='clear: both; width: 150px;'
                       onMouseover='do_hover(this.id);' onMouseout='do_plain(this.id);'
                       HREF="config.php?func=sound_settings"><?php echo get_text("Sounds"); ?></A>

                    <?php
                }
                ?>
            </DIV>
            <?php
            if (is_administrator() || is_super()) {
                if (is_super()) {
                    ?>
                    <DIV class='config_heading text' id='organisations_settings'
                         style='display: inline-block; clear: both; width: 100%; border: 1px inset #707070;'>
                        <DIV class='config_heading text' style='display: block; clear: both;'>Organizations</DIV>
                        <A id='orgs' class='plain text' style='width: 150px; float: left;' HREF="#"
                           onMouseover='do_hover(this.id);' onMouseout='do_plain(this.id);'
                           onClick="do_Post('organisations');">Organizations</A>
                    </DIV>
                    <?php
                }
                ?>
                <DIV class='config_heading text' id='files_settings'
                     style='display: inline-block; clear: both; width: 100%; border: 1px inset #707070;'>
                    <DIV class='config_heading text' style='display: block; clear: both;'>Files</DIV>
                    <A id='ul_file' class='plain text' style='width: 150px; float: left;' HREF="#"
                       onMouseover='do_hover(this.id);' onMouseout='do_plain(this.id);' onClick='file_window();'>Upload
                        File</A>
                    <A id='fileman' class='plain text' style='width: 150px; float: left;'
                       onMouseover='do_hover(this.id);' onMouseout='do_plain(this.id);' HREF="fileman.php">File
                        Manager</A>
                </DIV>
                <DIV class='config_heading text' id='serv_user_settings'
                     style='display: inline-block; clear: both; width: 100%; border: 1px inset #707070;'>
                    <DIV class='config_heading text' style='display: block; clear: both;'>Service User Portal</DIV>
                    <A id='su_req' class='plain text' style='width: 150px; float: left;'
                       onMouseover='do_hover(this.id);' onMouseout='do_plain(this.id);'
                       HREF="./portal/requests.php?from_config=1">Service User Requests</A>
                </DIV>
                <?php
            }
            if (is_super() && (get_variable('use_messaging') != 0)) {
                ?>
                <DIV class='config_heading text' id='msg_settings'
                     style='display: inline-block; clear: both; width: 100%; border: 1px inset #707070;'>
                    <DIV class='config_heading text' style='display: block; clear: both;'>Messaging</DIV>
                    <A id='msg_set' class='plain text' style='width: 150px; float: left;'
                       onMouseover='do_hover(this.id);' onMouseout='do_plain(this.id);'
                       HREF="config.php?func=msg_settings">Messaging Settings</A>
                    <A id='msg_arch' class='plain text' style='width: 150px; float: left;'
                       onMouseover='do_hover(this.id);' onMouseout='do_plain(this.id);' HREF="msg_archive.php">Message
                        Archiving</A>
                    <A id='white_list' class='plain text' style='width: 150px; float: left;' HREF="#"
                       onMouseover='do_hover(this.id);' onMouseout='do_plain(this.id);'
                       onClick="do_Post('known_sources');">Email White List</A>
                    <A id='black_list' class='plain text' style='width: 150px; float: left;' HREF="#"
                       onMouseover='do_hover(this.id);' onMouseout='do_plain(this.id);'
                       onClick="do_Post('email_blacklist');">Email Black List</A>
                    <A id='get_msgs' class='plain text' style='width: 150px; float: left;' HREF="#"
                       onMouseover='do_hover(this.id);' onMouseout='do_plain(this.id);' onClick="get_msgs();">Get all
                        Messages</A>
                    <A id='std_msgs' class='plain text' style='width: 150px; float: left;' HREF="#"
                       onMouseover='do_hover(this.id);' onMouseout='do_plain(this.id);' onClick="do_Post('std_msgs');">Edit
                        Std Messages</A>
                    <A id='msg_rtxt' class='plain text' style='width: 150px; float: left;' HREF="#"
                       onMouseover='do_hover(this.id);' onMouseout='do_plain(this.id);'
                       onClick="do_Post('replacetext');">Msg Text replacement</A>
                    <A id='msg_rtxt_order' class='plain text' style='width: 150px; float: left;' HREF="#"
                       onMouseover='do_hover(this.id);' onMouseout='do_plain(this.id);'
                       onClick="do_Post('replacetext_order');">Replacement Text Order</A>
                    <?php
                    if (get_msg_variable('use_autostat') == 1) {        //10/23/12
                        ?>
                        <A class='plain text' style='width: 150px; float: left;' onMouseover='do_hover(this.id);'
                           onMouseout='do_plain(this.id);' HREF="auto_status.php">Edit Auto Status Text</A>
                        <?php
                    }
                    ?>
                </DIV>
                <?php
            }
            if (is_super() || is_administrator()) {
                if (is_super() && intval(get_variable('use_mdb')) != 0) {
                    ?>
                    <DIV class='config_heading text' id='mdb_section'
                         style='display: inline-block; clear: both; width: 100%; border: 1px inset #707070;'>
                        <DIV class='config_heading text' style='display: block; clear: both;'>Membership Database</DIV>
                        <A id='mdb_set' class='plain text' style='width: 150px; float: left;'
                           onMouseover='do_hover(this.id);' onMouseout='do_plain(this.id);'
                           HREF="config.php?func=mdb_settings">MDB Settings</A>
                        <A id='memberlist' class='plain text' style='width: 150px; float: left;'
                           onMouseover='do_hover(this.id);' onMouseout='do_plain(this.id);' HREF="member.php">Member
                            List</A>
                        <A id='vehicles' class='plain text' style='width: 150px; float: left;' HREF="#"
                           onMouseover='do_hover(this.id);' onMouseout='do_plain(this.id);'
                           onClick="do_Post('vehicles');">Vehicles</A>
                        <A id='vehicle_types' class='plain text' style='width: 150px; float: left;' HREF="#"
                           onMouseover='do_hover(this.id);' onMouseout='do_plain(this.id);'
                           onClick="do_Post('vehicle_types');">Vehicle Types</A>
                        <A id='equipment' class='plain text' style='width: 150px; float: left;' HREF="#"
                           onMouseover='do_hover(this.id);' onMouseout='do_plain(this.id);'
                           onClick="do_Post('equipment_types');">Equipment</A>
                        <A id='capabilities' class='plain text' style='width: 150px; float: left;' HREF="#"
                           onMouseover='do_hover(this.id);' onMouseout='do_plain(this.id);'
                           onClick="do_Post('capability_types');">Capabilities</A>
                        <A id='clothing' class='plain text' style='width: 150px; float: left;' HREF="#"
                           onMouseover='do_hover(this.id);' onMouseout='do_plain(this.id);'
                           onClick="do_Post('clothing_types');">Clothing</A>
                        <A id='events' class='plain text' style='width: 150px; float: left;' HREF="#"
                           onMouseover='do_hover(this.id);' onMouseout='do_plain(this.id);'
                           onClick="do_Post('events');">Events</A>
                        <A id='event_types' class='plain text' style='width: 150px; float: left;' HREF="#"
                           onMouseover='do_hover(this.id);' onMouseout='do_plain(this.id);'
                           onClick="do_Post('event_types');">Event Types</A>
                        <A id='training' class='plain text' style='width: 150px; float: left;' HREF="#"
                           onMouseover='do_hover(this.id);' onMouseout='do_plain(this.id);'
                           onClick="do_Post('training_packages');">Training Packages</A>
                        <A id='member_status' class='plain text' style='width: 150px; float: left;' HREF="#"
                           onMouseover='do_hover(this.id);' onMouseout='do_plain(this.id);'
                           onClick="do_Post('member_status');">Member Status</A>
                        <A id='member_types' class='plain text' style='width: 150px; float: left;' HREF="#"
                           onMouseover='do_hover(this.id);' onMouseout='do_plain(this.id);'
                           onClick="do_Post('member_types');">Member Types</A>
                        <A id='teams' class='plain text' style='width: 150px; float: left;' HREF="#"
                           onMouseover='do_hover(this.id);' onMouseout='do_plain(this.id);' onClick="do_Post('team');">Teams</A>
                        <A id='defined_fields' class='plain text' style='width: 150px; float: left;' HREF="#"
                           onMouseover='do_hover(this.id);' onMouseout='do_plain(this.id);'
                           onClick="window.location='revisable_fields.php'">Custom Field Definitions</A>
                        <A id='fieldsets' class='plain text' style='width: 150px; float: left;' HREF="#"
                           onMouseover='do_hover(this.id);' onMouseout='do_plain(this.id);'
                           onClick="do_Post('fieldsets');">Fieldsets</A>
                        <A id='bulk_allocations' class='plain text' style='width: 150px; float: left;' HREF="#"
                           onMouseover='do_hover(this.id);' onMouseout='do_plain(this.id);'
                           onClick="window.location='./bulk_admin/bulk_add_capab.php'">Bulk Allocations</A>
                        <A id='bulk_allocations_selective' class='plain text' style='width: 150px; float: left;'
                           HREF="#" onMouseover='do_hover(this.id);' onMouseout='do_plain(this.id);'
                           onClick="window.location='./bulk_admin/bulk_add_allocation.php'">Selective Bulk
                            Allocations</A>
                    </DIV>
                    <?php
                }
                if (get_variable('use_disp_autostat') == 1) {        //9/10/13
                    ?>
                    <DIV class='config_heading text' id='ad_settings'
                         style='display: inline-block; clear: both; width: 100%; border: 1px inset #707070;'>
                        <DIV class='config_heading text' style='display: block; clear: both;'>Auto Dispatch Status</DIV>
                        <A id='auto_stat' class='plain text' style='width: 150px; float: left;'
                           onMouseover='do_hover(this.id);' onMouseout='do_plain(this.id);' HREF="auto_disp_status.php">Auto
                            Status Values</A>
                    </DIV>
                    <?php
                }
                ?>
                <DIV class='config_heading text' id='eml_settings'
                     style='display: inline-block; clear: both; width: 100%; border: 1px inset #707070;'>
                    <DIV class='config_heading text' style='display: block; clear: both;'>Email Lists</DIV>
                    <A id='eml_list' class='plain text' style='width: 150px; float: left;' HREF="#"
                       onMouseover='do_hover(this.id);' onMouseout='do_plain(this.id);' onClick="do_Post('mailgroup');">Email
                        Lists</A>
                    <A id='eml_list_mem' class='plain text' style='width: 150px; float: left;'
                       onMouseover='do_hover(this.id);' onMouseout='do_plain(this.id);'
                       HREF="email_lists.php?func=list">Email List Members</A>
                </DIV>
                <DIV class='config_heading text' id='reg_settings'
                     style='display: inline-block; clear: both; width: 100%; border: 1px inset #707070;'>
                    <DIV class='config_heading text' style='display: block; clear: both;'>Regions</DIV>
                    <A id='regs_cfg' class='plain text' style='width: 150px; float: left;' HREF="#"
                       onMouseover='do_hover(this.id);' onMouseout='do_plain(this.id);'
                       onClick="do_Post('region');"><?php print get_text("Regions"); ?></A>
                    <A id='regs_type' class='plain text' style='width: 150px; float: left;' HREF="#"
                       onMouseover='do_hover(this.id);' onMouseout='do_plain(this.id);'
                       onClick="do_Post('region_type');"><?php print get_text("Region"); ?>Type</A>
                    <A id='rst_reg' class='plain text' style='width: 150px; float: left;'
                       onMouseover='do_hover(this.id);' onMouseout='do_plain(this.id);'
                       HREF="reset_regions.php">Reset <?php print get_text("Regions"); ?></A>
                    <A id='fix_reg' class='plain text' style='width: 150px; float: left;'
                       onMouseover='do_hover(this.id);' onMouseout='do_plain(this.id);'
                       HREF="cleanse_regions.php?func=list">Fix <?php print get_text("Regions"); ?></A>
                </DIV>
                <DIV class='config_heading text' id='disc_settings'
                     style='display: inline-block; clear: both; width: 100%; border: 1px inset #707070;'>
                    <DIV class='config_heading text' style='display: block; clear: both;'>Display Colors</DIV>
                    <A id='css_day' class='plain text' style='width: 150px; float: left;'
                       onMouseover='do_hover(this.id);' onMouseout='do_plain(this.id);' HREF="config.php?func=css_day">Edit
                        Day Colors</A>
                    <A id='css_ngt' class='plain text' style='width: 150px; float: left;'
                       onMouseover='do_hover(this.id);' onMouseout='do_plain(this.id);'
                       HREF="config.php?func=css_night">Edit Night Colors</A>
                </DIV>
                <DIV class='config_heading text' id='maps_settings'
                     style='display: inline-block; clear: both; width: 100%; border: 1px inset #707070;'>
                    <DIV class='config_heading text' style='display: block; clear: both;'>Maps Configuration</DIV>
                    <A id='def_map' class='plain text' style='width: 150px; float: left;'
                       onMouseover='do_hover(this.id);' onMouseout='do_plain(this.id);' HREF="config.php?func=center">Set
                        Default Map</A>
                    <A id='dl_maps' class='plain text' style='width: 150px; float: left;'
                       onMouseover='do_hover(this.id);' onMouseout='do_plain(this.id);' HREF="./get_tiles.php">Download
                        Maps</A>
                </DIV>
                <DIV class='config_heading text' id='db_settings'
                     style='display: inline-block; clear: both; width: 100%; border: 1px inset #707070;'>
                    <DIV class='config_heading text' style='display: block; clear: both;'>Database Functions</DIV>
                    <A id='dump_db' class='plain text' style='width: 150px; float: left;'
                       onMouseover='do_hover(this.id);' onMouseout='do_plain(this.id);' HREF="config.php?func=dump">Dump
                        DB to screen</A>
                    <A id='restore_db' class='plain text' style='width: 150px; float: left;'
                       onMouseover='do_hover(this.id);' onMouseout='do_plain(this.id);' HREF="db_loader.php">Backup and
                        Restore</A>
                    <A id='rst_db' class='plain text' style='width: 150px; float: left;'
                       onMouseover='do_hover(this.id);' onMouseout='do_plain(this.id);' HREF="config.php?func=reset">Reset
                        Database</A>
                    <A id='opt_db' class='plain text' style='width: 150px; float: left;'
                       onMouseover='do_hover(this.id);' onMouseout='do_plain(this.id);' HREF="config.php?func=optimize">Optimize
                        Database</A>
                    <A id='del_indx' class='plain text' style='width: 150px; float: left;'
                       onMouseover='do_hover(this.id);' onMouseout='do_plain(this.id);'
                       HREF="show_tables_and_indexes.php">Delete Duplicate Indexes</A>
                    <A id='dedupe_db' class='plain text' style='width: 150px; float: left;' HREF="#"
                       onMouseover='do_hover(this.id);' onMouseout='do_plain(this.id);' onClick="do_dedupe();">Remove
                        Duplicate DB Entries</A>
                </DIV>
                <?php
            }

            if (is_administrator() || is_user()) {
                ?>
                <DIV class='config_heading text' id='rc_settings'
                     style='display: inline-block; clear: both; width: 100%; border: 1px inset #707070;'>
                    <DIV class='config_heading text' style='display: block; clear: both;'>Road Conditions</DIV>
                    <A id='rd_cond' class='plain text' style='width: 150px; float: left;' HREF="#"
                       onMouseover='do_hover(this.id);' onMouseout='do_plain(this.id);'
                       onClick="do_Post('conditions');">Conditions Table</A>
                    <?php
                    if (get_roadcondition_types() > 0) {
                        ?>
                        <A id='rd_alerts' class='plain text' style='width: 150px; float: left;' HREF="#"
                           onMouseover='do_hover(this.id);' onMouseout='do_plain(this.id);'
                           onClick="do_Post('roadinfo');">Published Alerts</A>
                        <?php
                    }
                    ?>
                </DIV>
                <?php
            }
            if ((is_administrator()) || (is_super()) || (get_variable('oper_can_edit') == "1")) {
                ?>
                <DIV class='config_heading text' id='mi'
                     style='display: inline-block; clear: both; width: 100%; border: 1px inset #707070;'>
                    <DIV class='config_heading text' style='display: block; clear: both;'>Major Incidents<SPAN
                            class='warn'>(Experimental, not fully implemented, for discussion)</SPAN></DIV>
                    <A id='mis' class='plain text' style='width: 150px; float: left;' onMouseover='do_hover(this.id);'
                       onMouseout='do_plain(this.id);' HREF="maj_inc.php">Major Incidents</A>
                    <A id='mi_types' class='plain text' style='width: 150px; float: left;' HREF="#"
                       onMouseover='do_hover(this.id);' onMouseout='do_plain(this.id);' onClick="do_Post('mi_types');">Major
                        Incident Types</A>
                </DIV>
                <?php
            }
            if (is_super()) {
                ?>
                <DIV class='config_heading text' id='oet_tests'
                     style='display: inline-block; clear: both; width: 100%; border: 1px inset #707070;'>
                    <DIV class='config_heading text' style='display: block; clear: both;'>Outgoing email Tests</DIV>
                    <A id='tst_smtp' class='plain text' style='width: 150px; float: left;' HREF="#"
                       onMouseover='do_hover(this.id);' onMouseout='do_plain(this.id);' onClick="do_smtp();">SMTP
                        Mail</A>
                    <A id='tst_native' class='plain text' style='width: 150px; float: left;' HREF="#"
                       onMouseover='do_hover(this.id);' onMouseout='do_plain(this.id);' onClick="do_native();">Native
                        PHP Mail</A>
                    <DIV class='config_heading text' style='display: block; clear: both;'>Unit Tracking Tests</DIV>
                    <A id='tst_aprs' class='plain text' style='width: 150px; float: left;' HREF="#"
                       onMouseover='do_hover(this.id);' onMouseout='do_plain(this.id);' onClick="do_test();">APRS</A>
                    <A id='tst_gl' class='plain text' style='width: 150px; float: left;' HREF="#"
                       onMouseover='do_hover(this.id);' onMouseout='do_plain(this.id);' onClick="do_glat();">Google
                        Latitude</A>
                    <A id='tst_loca' class='plain text' style='width: 150px; float: left;' HREF="#"
                       onMouseover='do_hover(this.id);' onMouseout='do_plain(this.id);'
                       onClick="do_locatea();">LocateA</A>
                    <A id='tst_gtrack' class='plain text' style='width: 150px; float: left;' HREF="#"
                       onMouseover='do_hover(this.id);' onMouseout='do_plain(this.id);'
                       onClick="do_gtrack();">Gtrack</A>
                    <A id='tst_opengts' class='plain text' style='width: 150px; float: left;' HREF="#"
                       onMouseover='do_hover(this.id);' onMouseout='do_plain(this.id);' onClick="do_ogts();">Open
                        GTS</A>
                    <A id='tst_tt' class='plain text' style='width: 150px; float: left;' HREF="#"
                       onMouseover='do_hover(this.id);' onMouseout='do_plain(this.id);' onClick="do_t_tracker();">Internal
                        Tracker</A>
                </DIV>
                <DIV class='config_heading text' id='inc_cfg'
                     style='display: inline-block; clear: both; width: 100%; border: 1px inset #707070;'>
                    <DIV class='config_heading text'
                         style='display: block; clear: both;'><?php print get_text("Incidents"); ?> Configuration
                    </DIV>
                    <A id='inc_num' class='plain text' style='width: 150px; float: left;'
                       onMouseover='do_hover(this.id);' onMouseout='do_plain(this.id);' HREF="config.php?func=in_nums">Incident
                        Numbers</A>
                    <A id='inc_types' class='plain text' style='width: 150px; float: left;' HREF="#"
                       onMouseover='do_hover(this.id);' onMouseout='do_plain(this.id);' onClick="do_Post('in_types');">Incident
                        types</A>
                </DIV>
                <DIV class='config_heading text' id='units_cfg'
                     style='display: inline-block; clear: both; width: 100%; border: 1px inset #707070;'>
                    <DIV class='config_heading text'
                         style='display: block; clear: both;'><?php print get_text("Units"); ?> Configuration
                    </DIV>
                    <A id='un_status' class='plain text' style='width: 150px; float: left;' HREF="#"
                       onMouseover='do_hover(this.id);' onMouseout='do_plain(this.id);'
                       onClick="do_Post('un_status');"><?php print get_text("Unit"); ?> status</A>
                    <A id='un_types' class='plain text' style='width: 150px; float: left;' HREF="#"
                       onMouseover='do_hover(this.id);' onMouseout='do_plain(this.id);'
                       onClick="do_Post('unit_types');"><?php print get_text("Unit"); ?> types</A>
                    <A id='rst_unstat' class='plain text' style='width: 150px; float: left;'
                       onMouseover='do_hover(this.id);' onMouseout='do_plain(this.id);'
                       HREF="reset_responder_status.php">Reset <?php print get_text("Unit"); ?> status</A>
                </DIV>
                <?php
                $has_fac_status = mysql_table_exists("{$GLOBALS['mysql_prefix']}fac_status");
                $has_fac_types = mysql_table_exists("{$GLOBALS['mysql_prefix']}fac_types");
                if ($has_fac_status || $has_fac_types) {
                    ?>
                    <DIV class='config_heading text' id='facs_cfg'
                         style='display: inline-block; clear: both; width: 100%; border: 1px inset #707070;'>
                        <DIV class='config_heading text'
                             style='display: block; clear: both;'><?php print get_text("Facilities"); ?> Configuration
                        </DIV>
                        <?php if ($has_fac_status) { ?>
                        <A id='fac_stat' class='plain text' style='width: 150px; float: left;' HREF="#"
                           onMouseover='do_hover(this.id);' onMouseout='do_plain(this.id);'
                           onClick="do_Post('fac_status');">Facility Status</A>
                        <?php } ?>
                        <?php if ($has_fac_types) { ?>
                        <A id='fac_types' class='plain text' style='width: 150px; float: left;' HREF="#"
                           onMouseover='do_hover(this.id);' onMouseout='do_plain(this.id);'
                           onClick="do_Post('fac_types');">Facility Types</A>
                        <?php } ?>
                    </DIV>
                    <?php

                }
            }    // end if is super/admin
            if (is_administrator() || is_super() || is_user()) {
                ?>
                <DIV class='config_heading text' id='warn_locs'
                     style='display: inline-block; clear: both; width: 100%; border: 1px inset #707070;'>
                    <DIV class='config_heading text' style='display: block; clear: both;'>Warn Locations</DIV>
                    <A id='warn_loc' class='plain text' style='width: 150px; float: left;'
                       onMouseover='do_hover(this.id);' onMouseout='do_plain(this.id);' HREF="warn_locations.php">Warn
                        Locations</A>
                </DIV>
                <?php
                if (is_super()) {
                    ?>
                    <DIV class='config_heading text' id='capts_etc'
                         style='display: inline-block; clear: both; width: 100%; border: 1px inset #707070;'>
                        <DIV class='config_heading text' style='display: block; clear: both;'>Captions, Signals, Hints
                            and Places
                        </DIV>
                        <A id='capt_set' class='plain text' style='width: 150px; float: left;'
                           onMouseover='do_hover(this.id);' onMouseout='do_plain(this.id);'
                           HREF="capts.php">Captions</A></LI></TD>
                        <A id='sigs_set' class='plain text' style='width: 150px; float: left;' HREF="#"
                           onMouseover='do_hover(this.id);' onMouseout='do_plain(this.id);' onClick="do_Post('codes');">Signals</A>
                        <A id='hints_set' class='plain text' style='width: 150px; float: left;'
                           onMouseover='do_hover(this.id);' onMouseout='do_plain(this.id);'
                           HREF="config.php?func=hints">Hints</A>
                        <A id='places_set' class='plain text' style='width: 150px; float: left;' HREF="#"
                           onMouseover='do_hover(this.id);' onMouseout='do_plain(this.id);'
                           onClick="do_Post('places');">Places</A>
                    </DIV>
                    <?php
                }
            }
            if (is_administrator()) {
                ?>
                <DIV class='config_heading text' id='map_mkup'
                     style='display: inline-block; clear: both; width: 100%; border: 1px inset #707070;'>
                    <DIV class='config_heading text' style='display: block; clear: both;'>Map Markup</DIV>
                    <A id='mm' class='plain text' style='width: 150px; float: left;' onMouseover='do_hover(this.id);'
                       onMouseout='do_plain(this.id);' HREF="./mmarkup.php">Map Markup</A>
                    <?php
                    if (is_super()) {
                        ?>
                        <A id='mm_cat' class='plain text' style='width: 150px; float: left;' HREF="#"
                           onMouseover='do_hover(this.id);' onMouseout='do_plain(this.id);'
                           onClick="do_Post('mmarkup_cats');">MM Categories</A>
                        <?php
                    }
                    ?>
                </DIV>
                <?php
            }
            $query_update = "SELECT * FROM  `{$GLOBALS['mysql_prefix']}user` WHERE `user`= '_cloud' LIMIT 1;";
            $result = db_query($query_update);        //    5/4/11
            if (($result->num_rows > 0) && (is_super())) {
                ?>
                <DIV class='config_heading text' id='cloud_cfg'
                     style='display: inline-block; clear: both; width: 100%; border: 1px inset #707070;'>
                    <DIV class='config_heading text' style='display: block; clear: both;'>Cloud</DIV>
                    <A id='spt_link' class='plain text' style='width: 150px; float: left;'
                       onMouseover='do_hover(this.id);' onMouseout='do_plain(this.id);'
                       HREF="https://github.com/openises/tickets/issues" target="_blank">Support</A>
                    <!--                <A id='dbadmin_link' class='plain text' style='width: 150px; float: left;' onMouseover='do_hover(this.id);' onMouseout='do_plain(this.id);' HREF="http://www.ticketscad.com/dbadmin" target="_blank">DB Admin</A>-->
                </DIV>
                <?php
            }
            if (is_super()) {                                    // super or admin - 10/28/10
                ?>
                <DIV class='config_heading text' id='modules_cfg'
                     style='display: inline-block; clear: both; width: 100%; border: 1px inset #707070;'>
                    <DIV class='config_heading text' style='display: block; clear: both;'>Modules</DIV>
                    <?php
                    if (mysql_table_exists("{$GLOBALS['mysql_prefix']}modules")) {
                        ?>
                        <A id='mods_cfg' class='plain text' style='width: 150px; float: left;' HREF="#"
                           onMouseover='do_hover(this.id);' onMouseout='do_plain(this.id);'
                           onClick="do_Post('modules');">Modules Configuration</A>
                        <A id='mods_del' class='plain text' style='width: 150px; float: left;'
                           onMouseover='do_hover(this.id);' onMouseout='do_plain(this.id);' HREF="delete_module.php">Delete
                            Tickets Module</A>
                        <?php
                    }    //    end if modules table exists
                    ?>
                    <A id='mods_add' class='plain text' style='width: 150px; float: left;'
                       onMouseover='do_hover(this.id);' onMouseout='do_plain(this.id);' HREF="install_module.php">Add
                        Tickets Module</A>
                </DIV>
                <DIV class='config_heading text' id='socket_admin'
                     style='display: inline-block; clear: both; width: 100%; border: 1px inset #707070;'>
                    <DIV class='config_heading text' style='display: block; clear: both;'>Websocket Server Admin</DIV>
                    <A id='sd_socket' class='plain text' style='width: 150px; float: left;' HREF="#"
                       onMouseover='do_hover(this.id);' onMouseout='do_plain(this.id);'
                       onClick="parent.frames['upper'].broadcast('close server',1);">Shut Down Websocket Server</A>
                    <A id='rs_socket' class='plain text' style='width: 150px; float: left;' HREF="#"
                       onMouseover='do_hover(this.id);' onMouseout='do_plain(this.id);'
                       onClick="parent.frames['upper'].broadcast('restart server',1);">Restart Websocket Server</A>
                </DIV>
                <?php
                if ($istest) {
                    ?>
                    <DIV class='config_heading text' id='istest_cfg'
                         style='display: inline-block; clear: both; width: 100%; border: 1px inset #707070;'>
                        <DIV class='config_heading text' style='display: block; clear: both;'>Testing</DIV>
                        <A id='test_log' class='plain text' style='width: 150px; float: left;' HREF="#"
                           onMouseover='do_hover(this.id);' onMouseout='do_plain(this.id);' onClick="do_Post('log');">Log</A>
                        <A id='test_set' class='plain text' style='width: 150px; float: left;' HREF="#"
                           onMouseover='do_hover(this.id);' onMouseout='do_plain(this.id);'
                           onClick="do_Post('settings');">Settings</A>
                        <A id='test_ticks' class='plain text' style='width: 150px; float: left;' HREF="#"
                           onMouseover='do_hover(this.id);' onMouseout='do_plain(this.id);'
                           onClick="do_Post('ticket');">Tickets</A>
                        <A id='test_resp' class='plain text' style='width: 150px; float: left;' HREF="#"
                           onMouseover='do_hover(this.id);' onMouseout='do_plain(this.id);'
                           onClick="do_Post('responder');"><?php print get_text("Units"); ?></A>
                        <A id='test_act' class='plain text' style='width: 150px; float: left;' HREF="#"
                           onMouseover='do_hover(this.id);' onMouseout='do_plain(this.id);'
                           onClick="do_Post('action');">Actions</A>
                        <A id='test_pat' class='plain text' style='width: 150px; float: left;' HREF="#"
                           onMouseover='do_hover(this.id);' onMouseout='do_plain(this.id);'
                           onClick="do_Post('patient');">Patients</A>
                        <A id='test_tabs' class='plain text' style='width: 150px; float: left;'
                           onMouseover='do_hover(this.id);' onMouseout='do_plain(this.id);' HREF="tables.php">Tables</A>
                    </DIV>

                    <?php
                }        // end if ($istest)
            }
            ?>

            <?php
            //            }        // if (is_administrator() || is_super())

            //-
            ?>
        </DIV>
    </DIV>
    <DIV style='position: fixed; right: 20px; top: 50px; max-height: 85%; width: 45%; overflow-y: scroll;'>
        <?php
        list_users();        // 9/24/08

        print "<BR /><BR />";
        show_stats();
        ?>
    </DIV>
    <SCRIPT>
        if (typeof window.innerWidth != 'undefined') {
            viewportwidth = window.innerWidth,
                viewportheight = window.innerHeight
        } else if (typeof document.documentElement != 'undefined' && typeof document.documentElement.clientWidth != 'undefined' && document.documentElement.clientWidth != 0) {
            viewportwidth = document.documentElement.clientWidth,
                viewportheight = document.documentElement.clientHeight
        } else {
            viewportwidth = document.getElementsByTagName('body')[0].clientWidth,
                viewportheight = document.getElementsByTagName('body')[0].clientHeight
        }
        set_fontsizes(viewportwidth, "fullscreen");
    </SCRIPT>
    <DIV id='statusBar'
         style='position: fixed; bottom: 5px; left: 5px; width: 100%; height: 50px; background-color: yellow; color: black; display: none;'></DIV>
    <FORM NAME='tables' METHOD='post' ACTION='tables.php'>
        <INPUT TYPE='hidden' NAME='func' VALUE='r'>
        <INPUT TYPE='hidden' NAME='tablename' VALUE=''>
    </FORM>

    <?php // cloud?
    print "</BODY>\n";

    function map_cen()
    {                // specific to map center
        $lat = get_variable('def_lat');
        $lng = get_variable('def_lng');
        ?>
        <SCRIPT>
            var lat_lng_frmt = <?php print get_variable('lat_lng'); ?>;                // 9/9/08

            function do_coords(inlat, inlng) {                                          //9/14/08
                if ((inlat.length == 0) || (inlng.length == 0)) {
                    return;
                }
                var str = inlat + ", " + inlng + "\n";
                str += ll2dms(inlat) + ", " + ll2dms(inlng) + "\n";
                str += lat2ddm(inlat) + ", " + lng2ddm(inlng);
                alert(str);
            }

            function ll2dms(inval) {                // lat/lng to degr, mins, sec's - 9/9/08
                var d = new Number(Math.abs(inval));
                d = Math.floor(d);
                var mi = (Math.abs(inval) - d) * 60;    // fraction * 60
                var m = Math.floor(mi)                // min's as fraction
                var si = (mi - m) * 60;                    // to sec's
                var s = si.toFixed(1);
                return d + '\260 ' + Math.abs(m) + "' " + Math.abs(s) + '"';
            }

            function lat2ddm(inlat) {                //  lat to degr, dec.min's - 9/9/089/7/08
                var x = new Number(Math.abs(inlat));
                var degs = Math.floor(x);                // degrees
                var mins = ((Math.abs(x - degs) * 60).toFixed(1));
                var nors = (inlat > 0.0) ? " N" : " S";
                return degs + '\260' + mins + "'" + nors;
            }

            function lng2ddm(inlng) {                //  lng to degr, dec.min's - 9/9/089/7/08
                var x = new Number(Math.abs(inlng));
                var degs = Math.floor(x);                // degrees
                var mins = ((Math.abs(x - degs) * 60).toFixed(1));
                var eorw = (inlng > 0.0) ? " E" : " W";
                return degs + '\260' + mins + "'" + eorw;
            }

            function do_lat_fmt(inlat) {                // 9/9/08
                switch (lat_lng_frmt) {
                    case 0:
                        return inlat;
                        break;
                    case 1:
                        return ll2dms(inlat);
                        break;
                    case 2:
                        return lat2ddm(inlat);
                        break;
                    default:
                        alert("error " + 1023);
                }
            }

            function do_lng_fmt(inlng) {
                switch (lat_lng_frmt) {
                    case 0:
                        return inlng;
                        break;
                    case 1:
                        return ll2dms(inlng);
                        break;
                    case 2:
                        return lng2ddm(inlng);
                        break;
                    default:
                        alert("error " + 1039);
                }
            }

            function usng_to_map() {            // usng to LL array            - 5/4/09
                tolatlng = new Array();
                USNGtoLL(document.cen_Form.frm_ngs.value, tolatlng);
                var point = new GLatLng(tolatlng[0].toFixed(6), tolatlng[1].toFixed(6));

                map.setCenter(point, <?php echo get_variable('def_zoom'); ?>);
                var marker = new GMarker(point);
                map.addOverlay(new GMarker(point, cross));

                do_lat(point.lat());
                do_lng(point.lng());
            }                // end function

            function addrlkup() {           // added 8/3 by AS -- getLocations(address,  callback) -- not currently used
                var address = document.forms[0].frm_city.value + " " + document.forms[0].frm_st.value;
                if (geocoder) {
                    geocoder.getLatLng(
                        address,
                        function (point) {
                            if (!point) {
                                alert(address + " not found");
                            } else {
                                map.setCenter(point, <?php echo get_variable('def_zoom'); ?>);
                                var marker = new GMarker(point);
                                do_lat(point.lat());
                                do_lng(point.lng());
                                do_grids(document.cen_Form);        // 9/16/08
                            }
                        }
                    );
                }
            }                // end function addrlkup()

            function writeConsole(content) {
                top.consoleRef = window.open('', 'myconsole',
                    'width=800,height=250' + ',menubar=0' + ',toolbar=0' + ',status=0' + ',scrollbars=0' + ',resizable=0')
                top.consoleRef.document.writeln('<html><head><title>Console</title></head>'
                    + '<body bgcolor=white onLoad="self.focus()">' + content + '</body></HTML>'
                )                // end top.consoleRef.document.writeln()
                top.consoleRef.document.close();
            }                // end function writeConsole(content)

            function map_cen_reset() {                // reset map center icon
                map.clearOverlays();
            }

            var map;                                // note globals
            //    var map = new GMap2(document.getElementById("div"), {draggableCursor: 'crosshair', draggingCursor: 'pointer'});
            var myZoom;
            var geocoder = new GClientGeocoder();
            var cross;

            map = new GMap2(document.getElementById('map'));
            //    map.addControl(new GSmallMapControl());
            map.setUIToDefault();                                        // 8/13/10

            map.addControl(new GMapTypeControl());
            <?php if (get_variable('terrain') == 1) { ?>
            map.addMapType(G_PHYSICAL_MAP);
            <?php } ?>
            map.addControl(new GOverviewMapControl());

            var baseIcon = new GIcon();                        // 9/16/08
            baseIcon.iconSize = new GSize(32, 32);
            baseIcon.iconAnchor = new GPoint(16, 16);
            cross = new GIcon(baseIcon, "./markers/crosshair.png", null);

            //    map.setCenter(new GLatLng(<?php print $lat; ?>, <?php print $lng; ?>), <?php print get_variable('def_zoom');?>);    // larger # => tighter zoom

            var center = new GLatLng(<?php print get_variable('def_lat') ?>, <?php print get_variable('def_lng'); ?>);
            map.setCenter(center, <?php print get_variable('def_zoom');?>);
            var thisMarker = new GMarker(center, {icon: cross, draggable: false});                // 9/16/08

            //    map.addOverlay(marker);
            map.addOverlay(thisMarker);
            map.enableScrollWheelZoom();

            GEvent.addListener(map, "click", function (overlay, latlng) {
                if (latlng) {
//            alert(latlng.lat().toFixed(6));
                    map.clearOverlays();

                    thisMarker = new GMarker(latlng, {icon: cross, draggable: false});        // 9/16/08
                    map.setCenter(thisMarker.getPoint());
                    map.addOverlay(thisMarker);
//            GEvent.addListener(thisMarker, "dragstart", function() {
//                alert("start");
//                });
                    var lat = new Number(latlng.lat());
                    var lng = new Number(latlng.lng());

                    do_lat(lat.toFixed(6));
                    do_lng(lng.toFixed(6));
                    do_grids(document.cen_Form);            // 9/16/08
                    GEvent.addListener(thisMarker, "dragend", function () {
//                alert(1145);
                        map.setCenter(marker.getPoint());
                        var gp_lat = new Number(marker.getPoint().lat());
                        var gp_lng = new Number(marker.getPoint().lng());
                        do_lat(gp_lat.toFixed(6));
                        do_lng(gp_lng.toFixed(6));
                        do_grids(document.cen_Form);            // 9/16/08
                    });

                    map.addOverlay(thisMarker);
                }        // end if (latlng)
            });        // end GEvent.addListener()

            var theCenter;

            GEvent.addListener(map, "zoomstart", function () {
                theCenter = marker.getPoint();                            // save center
            });

            GEvent.addListener(map, "zoomend", function (oldzoom, newzoom) {
                do_zoom(newzoom);                                        // set form values
                map.setCenter(theCenter);                                // to original center
            });

        </SCRIPT>
        <?php
    }        // end function map_cen()
    ?>
    </HTML>