<?php
require 'secure.inc.php'; // Security module
require 'connect.inc.php'; // Database connect module
?>

<html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en">
<head>
 <meta http-equiv="Content-Type" content="text/html; charset=us-ascii" />
 <title>Jobs Management System</title>
 <link href="adminstyle.css" type="text/css" rel="stylesheet"> 
 <META NAME="ROBOTS" CONTENT="NOINDEX, NOFOLLOW">
 
 <script language="JavaScript" type="text/javascript">
//<![CDATA[

  function validateFormOnSubmit(theForm) {
  var reason = "";
  reason += validateEmpty(theForm.position, "Position");
  reason += validateEmpty(theForm.state, "State");  
  reason += validateEmpty(theForm.salary, "Salary");
  reason += validateEmpty(theForm.contactname, "Contact Name");
  reason += validateEmpty(theForm.email, "Contact email Address");
  reason += validateEmpty(theForm.contactphone, "Contact Phone Number");
  

  if (reason != "") {
    alert("Some fields need correction:\n\n" + reason);
    return false;
  }

  return true;
  }

  function validateEmpty(fld, fieldname) {
    var error = "";

    if (fld.value.length == 0) {
        fld.style.background = 'Yellow';
        error = "Please enter the " + fieldname + ".\n"
    } else {
        fld.style.background = 'White';
    }
    return error;
  } 

  //]]>
  </script>
  
<!-- TinyMCE --> 
<script type="text/javascript" src="tiny_mce/tiny_mce.js"></script> 
<script type="text/javascript"> 
	tinyMCE.init({
		// General options
		mode : "textareas",
		theme : "simple",
		
		
	});
</script> 
<!-- /TinyMCE -->  
  
  
  
</head>

<!-- data fields "id","dateposted","datemodified","position","city","state","country","salary","contactname","email","contactphone","description","requirements","hidden" -->


<body>
<div id="container">  <div id="header">
<?php
include("adminheader.inc.php");
echo '<hr color=\'red\'/>'; 
echo '<h2 align="center">Jobs Management System</h2>';


// Get actions to be performed		
$edit = $_POST['edit'];			//user wants to edit job with $id
$delete = $_POST['delete'];      //user wants to permanently delete job with $id
$add = $_POST['add'];			//user wants to add new job, so present an empty form
$addpost = $_POST['addpost'];	//append new record user has added
$editpost = $_POST['editpost'];	//update existing job $id with new values

// NOTE: FOLLOWING ITEMS ARE GET, not POST
$sortby = $_GET['sortby'];     //column heading to sort by when listing jobs

//Get data values
$id =$_POST['id'];
$dateposted =$_POST['dateposted'];
$datemodified =$_POST['datemodified'];

$position =trim($_POST['position']);
$city =trim($_POST['city']);
$state =trim($_POST['state']);
$country =trim($_POST['country']);
$salary =trim($_POST['salary']);
$contactname =trim($_POST['contactname']);
$email =trim($_POST['email']);
$contactphone =trim($_POST['contactphone']);
$description =stripslashes(trim($_POST['description']));
$requirements =stripslashes(trim($_POST['requirements']));
$hidden =$_POST['hidden'];

// Arrays
$states_arr = array('Alabama', 'Alaska', 'Arizona', 'Arkansas', 'California', 'Colorado', 'Connecticut', 'Delaware', 'District of Columbia', 'Florida', 'Georgia', 'Hawaii', 'Idaho', 'Illinois', 'Indiana', 'Iowa', 'Kansas', 'Kentucky', 'Louisiana', 'Maine', 'Montana', 'Nebraska', 'Nevada', 'New Hampshire', 'New Jersey', 'New Mexico', 'New York', 'North Carolina', 'North Dakota', 'Ohio', 'Oklahoma', 'Oregon', 'Maryland', 'Massachusetts', 'Michigan', 'Minnesota', 'Mississippi', 'Missouri', 'Pennsylvania', 'Rhode Island', 'South Carolina', 'South Dakota', 'Tennessee', 'Texas', 'Utah', 'Vermont', 'Virginia', 'Washington', 'West Virginia', 'Wisconsin', 'Wyoming');

$country_arr = array('United States','Canada','Afghanistan','Albania','Algeria','Andorra','Angola','Antigua & Deps','Argentina','Armenia','Australia','Austria','Azerbaijan','Bahamas','Bahrain','Bangladesh','Barbados','Belarus','Belgium','Belize','Benin','Bhutan','Bolivia','Bosnia Herzegovina','Botswana','Brazil','Brunei','Bulgaria','Burkina','Burundi','Cambodia','Cameroon','Canada','Cape Verdi','Central African Rep','Chad','Chile','China','Columbia','Comoros','Congo','Congo {Democratic Rep}','Costa Rica','Croatia','Cuba','Cyprus','Czech Republic','Denmark','Djibouti','Dominica','Dominican Republic','East Timor','Ecuador','Egypt','El Salvador','Equatorial Guinea','Eritrea','Estonia','Ethiopia','Fiji','Finland','France','Gabon','Gambia','Georgia','Germany','Ghana','Greece','Greneda','Guatemala','Guinea','Guinea-Bissau','Guyana','Haiti','Honduras','Hungary','Iceland','India','Indonesia','Iran','Iraq','Ireland {Republic}','Israel','Italy','Ivory Coast','Jamaica','Japan','Jordan','Kazakhstan','Kenya','Kiribati','Korea North','Korea South','Kuwait','Kyrgyzstan','Laos','Latvia','Lebanon','Lesotho','Liberia','Libya','Liechtenstein','Lithuania','Luxembourg','Macedonia','Madagascar','Malawi','Malaysia','Maldives','Mali','Malta','Marshall Islands','Mauritania','Mauritius','Mexico','Micronesia','Moldova','Monaco','Mongolia','Morocco','Mozambique','Myanmar','{Burma}','Namibia','Narau','Nepal','Netherlands','New Zealand','Nicaragua','Niger','Nigeria','Norway','Oman','Pakistan','Palau','Panama','Papua New Guinea','Paraguay','Peru','Philippines','Poland','Portugal','Qatar','Romania','Russian Federation','Rwanda','St Kitts & Nevis','St Lucia','St Vincent & Grenadines','San Marino','Sao Tome & Principe','Saudi Arabia','Senegal','Seychelles','Sierra Leone','Singapore','Slovakia','Slovenia','Solomon Islands','Somalia','South Africa','Spain','Sri Lanka','Sudan','Suriname','Swaziland','Sweden','Switzerland','Syria','Taiwan','Tajikstan','Tanzania','Thailand','Togo','Tonga','Trinidad & Tobago','Tunisia','Turkey','Turkmenistan','Tuvalu','Uganda','Ukraine','United Arab Emirates','United Kingdom','Uruguay','Uzbekistan','Vanuatu','Vatican City','Venezuela','Vietnam','Western Samoa','Yemen','Yugoslavia','Zambia','Zimbabwe' );



// Choose what action to perform

if (!empty($delete)) 
{
// HANDLE DELETE FROM DATABASE
$sql = "DELETE From Sheet1 where id = '" . $id . "'";
$result = @mysql_query( $sql);
if (!$result) {exit('<p>Error performing query: ' . mysql_error() . '</p>');}
echo '<br><br><h1><font color="#008000">The job has been deleted.</font></h1><br><br>'; 
echo '<form method="POST" action="adminjobs.php">';
echo '<input class="shadeform" type="submit" name="" value="Continue">';
echo '</form>';	
}

elseif (!empty($addpost) ) 
{
// ADD NEW JOB INTO DATABASE
$sql = 'INSERT INTO jobs(dateposted,datemodified,position,city,state,country,salary,contactname,email,contactphone,description,requirements,hidden) ';

// Date Posted

$sql .= " VALUES ('" . date("Y-m-d") . "',";

// Date Modified
$sql .= 'NULL,';

// Position
$sql .= "'" . mysql_real_escape_string ($position) . "',";

//City
$sql .= "'" . mysql_real_escape_string ($city) . "',";

// State
$sql .= "'" . mysql_real_escape_string ($state) . "',";

//Country

$sql .= "'" . mysql_real_escape_string ($country) . "',";

// Salary
$sql .= "'" . mysql_real_escape_string ($salary) . "',";

// Contact Name
$sql .= "'" . mysql_real_escape_string ($contactname) . "',";

// email
$sql .= "'" . mysql_real_escape_string ($email) . "',";

// Contact Phone
$sql .= "'" . mysql_real_escape_string ($contactphone) . "',";

// Description
$sql .= "'" . mysql_real_escape_string ($description) . "',";

// Requirements
$sql .= "'" . mysql_real_escape_string ($requirements) . "',";

// Hidden
$sql .= "'No')";

$result = @mysql_query( $sql);
if (!$result) {exit('<p>Error performing query: ' . mysql_error() . '</p>');}
echo '<br><br><h1><font color="#008000">' . $position . '<br> has been added.</font></h1><br><br>';	
echo '<form method="POST" action="adminjobs.php">';
echo '<input class="shadeform" type="submit" name="" value="Continue">';
echo '</form>';

}

elseif (!empty($editpost) ) 
{
// EDIT EXISTING JOB IN DATABASE
// data fields "id","dateposted","datemodified","position","city","state","country","salary","contactname","email","contactphone","description","requirements","hidden" 
$sql = 'UPADATE sheet1 SET ';

// Date Posted

$sql .= " dateposted = '" . $dateposted . "',";

// Date Modified
$sql .= " datemodified = '" . date("Y-m-d") . "',";

// Position
$sql .= " position = '" . mysql_real_escape_string ($position) . "',";

//City
$sql .= " city = '" . mysql_real_escape_string ($city) . "',";

// State
$sql .= " state = '" . mysql_real_escape_string ($state) . "',";

//Country

$sql .= " country = '" . mysql_real_escape_string ($country) . "',";

// Salary
$sql .= " salary = '" . mysql_real_escape_string ($salary) . "',";

// Contact Name
$sql .= " contactname = '" . mysql_real_escape_string ($contactname) . "',";

// email
$sql .= " email = '" . mysql_real_escape_string ($email) . "',";

// Contact Phone
$sql .= " contactphone = '" . mysql_real_escape_string ($contactphone) . "',";

// Description
$sql .= " description = '" . mysql_real_escape_string ($description) . "',";

// Requirements
$sql .= " requirements = '" . mysql_real_escape_string ($requirements) . "',";

// Hidden
$sql .= " hidden = '" . $hidden . "'";


$sql .= " WHERE id = " . $id ;

$result = @mysql_query( $sql);
if (!$result) {exit('<p>Error performing query: ' . mysql_error() . '</p>');}
echo '<br><br><h1><font color="#008000">' . $position . '<br> has been updated.</font></h1><br><br>';	
echo '<form method="POST" action="adminjobs.php">';
echo '<input class="shadeform" type="submit" name="" value="Continue">';
echo '</form>';

}


elseif ((!empty($add)) || (!empty($edit)) )
{

if (empty($add)) {
$temp = 'Edit Existing Job';

$sql = "SELECT * From jobs WHERE id = " . $id;
$result = @mysql_query( $sql);
if (!$result) {exit('<p>Error performing query: ' . mysql_error() . '</p>');}

while ($row = mysql_fetch_array($result)) {

$dateposted =$row['dateposted'];
if (!is_null($dateposted)) {
$dateposted = date('Y-m-d', strtotime($dateposted));	
}

$datemodified =$row['datemodified'];
if (!is_null($datemodified)) {
$datemodified = date('Y-m-d', strtotime($datemodified));
}

$position =$row['position'];
$city =$row['city'];
$state =$row['state'];
$country =$row['country'];
$salary =$row['salary'];
$contactname =$row['contactname'];
$email =$row['email'];
$contactphone =$row['contactphone'];
$description =$row['description'];
$requirements =$row['requirements'];
$hidden =$row['hidden'];

}

} else {
	
$temp = 'Add New Job';
}

// DISPLAY ADD NEW JOB FORM or Edit existing Jobs
echo '<br><br><h1>' . $temp . '</h1>';

echo '<form method="POST" action="adminjobs.php" onsubmit="return validateFormOnSubmit(this)">';
echo '<table bgcolor="#eeffff" border="1">';

// ID Hidden
echo '<input type="hidden" name="id" value="' . $id . '">';
echo '<input type="hidden" name="dateposted" value="' . $dateposted . '">';
echo '<input type="hidden" name="datemodified" value="' . $datemodified . '">';

// Position
echo '<tr><td>Position</td><td><input class="shadeform" type="text" name="position" size="70" value="' . $position . '"></td></tr>';

// City
echo '<tr><td>City</td><td><input class="shadeform" type="text" name="city" size="40" value="' . $city . '"></td></tr>';

//State
echo '<tr><td>State</td><td><input class="shadeform" type="text" name="state" size="40" value="' . $state . '"></td></tr>';

// Country
echo '<tr><td>Country</td><td><select class="shadeform" name="country">';
$country = 'United States';
echo showOptionsDrop($country_arr, $country);
echo '</select> </td></tr>';

// Salary
echo '<tr><td>Salary</td><td><input class="shadeform" type="text" name="salary" size = "40" value="' . $salary . '"></td></tr>';

// Contact
echo '<tr><td>Contact</td><td><input class="shadeform" type="text" name="contactname" size = "40" value="' . $contactname . '"></td></tr>';

// email
echo '<tr><td>email</td><td><input class="shadeform" type="text" name="email" size = "40" value="' . $email . '"></td></tr>';

// Contact phone
echo '<tr><td>Contact Phone</td><td><input class="shadeform" type="text" name="contactphone" size = "40" value="' . $contactphone . '"></td></tr>';

// Job Description
echo '<tr><td>Job Description</td><td><textarea class="shadeform" name="description" rows="15" cols="120"';
echo '">' . $description . '</textarea></td></tr>';

// Job Requirements
echo '<tr><td>Job Requirements</td><td><textarea class="shadeform" name="requirements" rows="15" cols="120">' . $requirements . '</textarea></td></tr>';

// Hidden
echo '<tr><td>Hidden</td><td><select class="shadeform" name="hidden">';
if (($hidden == 'No') || empty($edit)) {
	
	echo '<option value="Yes">Yes</option';
	echo '<option selected value="No">No</option>';	
	}else{
		
	echo '<option selected value="Yes">Yes</option>';
	echo '<option value="No">No</option';
	}		
   

//Submit Button
echo '<tr><td colspan="2" align="center">';


if (!empty($edit)) {
$temp = 'Edit Existing Job';
echo '<input class="shadeform" type="submit" name="editpost" value="Save Changes">';
echo '</form>';
} else {
echo '<input class="shadeform" type="submit" name="addpost" value="Add New Job">';
echo '</form>';	
}

echo '<div align="right"><a href="adminjobs.php">Cancel</a></div>';

echo '</td></tr></table></form><br>';


}

else
{ 

// DISPLAY THE LIST OF JOBS
$sql = 'SELECT * From jobs ORDER BY ';

if (empty($sortby)) {
$sql .= 'dateposted';
} else {
	switch ($sortby)
	{
	case "position" : $sql .= 'position';
	break;
	case "dateposted" : $sql .= 'dateposted, position';
	break;
	case "datemodified" : $sql .= 'datemodified, position';
	break;
	case "hidden" : $sql .= 'hidden, position';
	break;
	}	
}

echo '<table width="100%" border="0" bordercolor="#000080" cellspacing="" bgcolor="#eeffff">';
echo '<tr>';
echo '<td><a href="adminjobs.php?sortby=position"><b>Position</b></a></td><td><a href="adminjobs.php?sortby=dateposted"><b>Date Posted</b></a></td><td><a href="adminjobs.php?sortby=datemodified"><b>Date Modified</b></a></td><td align="center"><a href="adminjobs.php?sortby=hidden"><b>Hidden</b></a></td><td align="center"><b>Action</b></td>';
echo '</tr>';

$result = @mysql_query( $sql);
if (!$result) {exit('<p>Error performing query: ' . mysql_error() . '</p>');}

while ($row = mysql_fetch_array($result)) {
$id = $row['id'];

$dateposted =$row['dateposted'];
if (!is_null($dateposted)) {
$dateposted = date('Y-m-d', strtotime($dateposted));	
}

$datemodified =$row['datemodified'];
if (!is_null($datemodified)) {
$datemodified = date('Y-m-d', strtotime($datemodified));
}

$position =$row['position'];
$city =$row['city'];
$state =$row['state'];
$country =$row['country'];
$salary =$row['salary'];
$contactname =$row['contactname'];
$email =$row['email'];
$contactphone =$row['contactphone'];
$description =$row['description'];
$requirements =$row['requirements'];
$hidden =$row['hidden'];



echo '<tr><td>' . $position . '</td><td>' . $dateposted . '</td><td>' . $datemodified . '</td><td align="center">' . $hidden . '</td>';
// Show action Buttons 
echo '<td align="center">';
echo '<form method="POST" action="adminjobs.php">';
echo '<input type="hidden" name="id" value="' . $id . '">';
$confirmtext =  'Are you sure you want to delete job ' . $position .'?\nThis action can not be reversed.';
echo '<input class="shadeform" type="submit" name="edit" value="Edit">&nbsp;&nbsp;';
echo '<input class="shadeform" type="submit" name="delete" value="Delete"  onClick="return confirm(\'' . $confirmtext. '\')"></form></td></tr>';
}

echo '<tr><td colspan="4"></td><td align="center">';
echo '<form method="POST" action="adminjobs.php">';
echo '<input class="shadeform" type="submit" name="add" value="Add New Job">';
echo '</form>';

echo '</table>';
}




?>


</div></div></body></html>

<?php
// Functions
 function showOptionsDrop($array, $country){
        $string = '';
        foreach($array as $k){  
			if ($k == $country) {		
			     
            $string .= '<option selected value="' . $k . '">' . $k . '</option>' . '\n';     
			}
			else{
			$string .= '<option value="' . $k . '">' . $k . '</option>' . '\n';     	
			}
        }
        return $string;
    }
	

	?>