<?php

	include('config.php');
	
	$RESPONSE_ARRAY = array();
	
	switch ($_POST['COMMAND']) {
		
		case 'CheckCredentials':
						mysql_connect($LDB_IP_ADDRESS, $LDB_USERNAME, $LDB_PASSWORD) or die (print json_encode(mysql_error()));
						mysql_select_db($LDB_DB_NAME);
						$Q = mysql_query("SELECT * FROM bb_customers WHERE customer_username = '".$_POST['CHK_USERNAME']."' AND customer_password = '".$_POST['CHK_PASSWORD']."' AND customer_status = 1;") or die (print json_encode(mysql_error()));
						
						if (!mysql_num_rows($Q) >= 1) {
							$RESPONSE_ARRAY[0] = array('Response' => false);
							mysql_close();
							echo json_encode($RESPONSE_ARRAY);
						} else {
							$SQL_DATA = mysql_fetch_assoc($Q);
							$RESPONSE_ARRAY[0] = array('Response' => true);
							$RESPONSE_ARRAY[1] = array('CustomerID' => $SQL_DATA['id'], 'DisplayName' => $SQL_DATA['customer_display_name'], 'LastLogin' => $SQL_DATA['customer_last_login'], 'Level' => $SQL_DATA['customer_level']);
							
							$Q1 = mysql_query("SELECT * FROM bb_devices WHERE id IN (SELECT id_device FROM bb_devices_associations WHERE id_customer = '".$SQL_DATA['id']."') AND device_status = 1;");
							
							while ($DATA = mysql_fetch_array($Q1)) {
								$RESPONSE_ARRAY[2][] = $DATA; 
							}
							
							mysql_close();
							echo json_encode($RESPONSE_ARRAY);						
						}
						break;
						
		case 'SetSession':
						
						session_start();
						$_SESSION['IDC'] = $_POST['IDC'];
						echo json_encode(true);
						break;
						
		case 'GetUserDataModal':
						mysql_connect($LDB_IP_ADDRESS, $LDB_USERNAME, $LDB_PASSWORD) or die (print json_encode(mysql_error()));
						mysql_select_db($LDB_DB_NAME); 
						mysql_set_charset('utf8');
						$Q = mysql_query("SELECT * FROM bb_customers WHERE id = '".$_POST['UID']."';") or die (print json_encode(mysql_error()));
						
						while ($DATA = mysql_fetch_array($Q)) {
							$RESPONSE_ARRAY[0] = $DATA; 
						}
						$Q = mysql_query("SELECT * FROM bb_company;") or die (print json_encode(mysql_error()));
						
						while ($DATA = mysql_fetch_array($Q)) {
							$RESPONSE_ARRAY[1][] = $DATA; 
						}

						echo json_encode($RESPONSE_ARRAY);
						mysql_close();
						break;
						
		case 'GetCompanyDataModal':
						mysql_connect($LDB_IP_ADDRESS, $LDB_USERNAME, $LDB_PASSWORD) or die (print json_encode(mysql_error()));
						mysql_select_db($LDB_DB_NAME);
						mysql_set_charset('utf8');
						$Q = mysql_query("SELECT * FROM bb_company WHERE id = '".$_POST['UID']."';") or die (print json_encode(mysql_error()));
						
						while ($DATA = mysql_fetch_array($Q)) {
							$RESPONSE_ARRAY[0] = $DATA; 
						}
						

						echo json_encode($RESPONSE_ARRAY);
						mysql_close();
						break;
						
		case 'GetUserBlackBoxDataModal':
						mysql_connect($LDB_IP_ADDRESS, $LDB_USERNAME, $LDB_PASSWORD) or die (print json_encode(mysql_error()));
						mysql_select_db($LDB_DB_NAME);
						mysql_set_charset('utf8');
						$Q = mysql_query("SELECT * FROM bb_devices WHERE id IN (SELECT id_device FROM bb_devices_associations WHERE id_customer = '".$_POST['UID']."');") or die (print json_encode(mysql_error()));
						
						while ($DATA = mysql_fetch_array($Q)) {
							$RESPONSE_ARRAY[] = $DATA; 
						}

						echo json_encode($RESPONSE_ARRAY);
						mysql_close();
						break; 
						
		case 'EditUserData':
						mysql_connect($LDB_IP_ADDRESS, $LDB_USERNAME, $LDB_PASSWORD) or die (print json_encode(mysql_error()));
						mysql_select_db($LDB_DB_NAME);
						mysql_set_charset('utf8');
						$Q = mysql_query("UPDATE bb_customers SET customer_display_name = '".mysql_real_escape_string($_POST['CustName'])."', customer_email = '".mysql_real_escape_string($_POST['CustEmail'])."', customer_land_phone = '".mysql_real_escape_string($_POST['CustPhone'])."', customer_mobile_phone = '".mysql_real_escape_string($_POST['CustMobile'])."', customer_address = '".mysql_real_escape_string($_POST['CustAddress'])."', customer_comune = '".mysql_real_escape_string($_POST['CustComune'])."', customer_provincia = '".mysql_real_escape_string($_POST['CustProvincia'])."', customer_cap = '".mysql_real_escape_string($_POST['CustCap'])."' WHERE id = '".$_POST['UID']."';") or die (print json_encode(mysql_error()));
						
						if ($Q) {
							echo true;
						} else {
							echo false;
						}
						mysql_close();
						break;
						
		case 'EditCompanyData':
						mysql_connect($LDB_IP_ADDRESS, $LDB_USERNAME, $LDB_PASSWORD) or die (print json_encode(mysql_error()));
						mysql_select_db($LDB_DB_NAME);
						mysql_set_charset('utf8');
						
						if ($_POST['ChangePassword'] == 'true') {
							$Q = mysql_query("UPDATE bb_company SET company_name = '".$_POST['CustName']."', email = '".$_POST['CustEmail']."', phone = '".$_POST['CustPhone']."', address = '".mysql_real_escape_string($_POST['CustAddress'])."', password = '".$_POST['CustPassword']."' WHERE id = '".$_POST['UID']."';") or die (print json_encode(mysql_error()));
						} else {
							$Q = mysql_query("UPDATE bb_company SET company_name = '".$_POST['CustName']."', email = '".$_POST['CustEmail']."', phone = '".$_POST['CustPhone']."', address = '".mysql_real_escape_string($_POST['CustAddress'])."' WHERE id = '".$_POST['UID']."';") or die (print json_encode(mysql_error()));
						}
			
						if ($Q) { 
							echo json_encode('true');
						} else {
							echo json_encode('false');
						}
						
						mysql_close();
						break;
		
		case 'CheckEmailExist':
						mysql_connect($LDB_IP_ADDRESS, $LDB_USERNAME, $LDB_PASSWORD) or die (print json_encode(mysql_error()));
						mysql_select_db($LDB_DB_NAME);
						mysql_set_charset('utf8');
						$Q = mysql_query("SELECT * FROM bb_customers WHERE customer_username = '".$_POST['MAIL']."';") or die (print json_encode(mysql_error()));
						$DATA = mysql_num_rows($Q);
						
						if ($DATA >= 1) {
							//Indirizzo email già esiste nel database
							echo json_encode('exist');
						} else {
							//Indirizzo email NON esiste nel database
							echo json_encode('notexist');
						}
						mysql_close();
						break;
						
		case 'CreateNewUser':
						
						$CustomerName = $_POST['CustName'];
						$CustomerPhone = $_POST['CustPhone'];
						$CustomerMobile = $_POST['CustMobile'];
						$CustomerEmail = $_POST['CustEmail'];
						$CustomerAddress = $_POST['CustAddress'];
						$CustomerComune = $_POST['CustComune'];
						$CustomerProvincia = $_POST['CustProvincia'];
						$CustomerCap = $_POST['CustCap'];
						$CustomerUsername = $_POST['CustUsername'];
						$CustomerPassword = $_POST['CustPassword'];					
						$CustomerCompany = $_POST['CustCom'];	
						
						mysql_connect($LDB_IP_ADDRESS, $LDB_USERNAME, $LDB_PASSWORD) or die (print json_encode(mysql_error()));
						mysql_select_db($LDB_DB_NAME);
						mysql_set_charset('utf8');
						$Q = mysql_query("INSERT INTO bb_customers (id_company, customer_display_name, customer_username, customer_password, customer_email, customer_land_phone, customer_mobile_phone, customer_address, customer_comune, customer_provincia, customer_cap, customer_level, customer_status) VALUES ('".$CustomerCompany."', '".$CustomerName."', '".$CustomerUsername."', '".$CustomerPassword."', '".$CustomerEmail."', '".$CustomerPhone."', '".$CustomerMobile."', '".$CustomerAddress."', '".$CustomerComune."', '".$CustomerProvincia."', '".$CustomerCap."', '99', '1');") or die (print json_encode(mysql_error()));
						
						if ($Q) {
							//Anagrafica inserita correttamente
							echo json_encode('success');
						} else {
							//Si è verificato un errore
							echo json_encode('error');
						}
						
						mysql_close();
						break;
						
		case 'CreateNewCompany':
						
						$CustomerName = $_POST['CustName'];
						$CustomerPhone = $_POST['CustPhone'];
						$CustomerEmail = $_POST['CustEmail'];
						$CustomerAddress = $_POST['CustAddress'];
						$CustomerPassword = $_POST['CustPassword'];					
						
						mysql_connect($LDB_IP_ADDRESS, $LDB_USERNAME, $LDB_PASSWORD) or die (print json_encode(mysql_error()));
						mysql_select_db($LDB_DB_NAME);
						mysql_set_charset('utf8');
						$Q = mysql_query("INSERT INTO bb_company (company_name, address, email, phone, password) VALUES ('".$CustomerName."', '".$CustomerAddress."', '".$CustomerEmail."', '".$CustomerPhone."', '".$CustomerPassword."');") or die (print json_encode(mysql_error()));
						
						if ($Q) {
							//Anagrafica inserita correttamente
							echo json_encode('success');
						} else {
							//Si è verificato un errore
							echo json_encode('error');
						}
						
						mysql_close();
						break;
		
		case 'DeleteUser':
						
						mysql_connect($LDB_IP_ADDRESS, $LDB_USERNAME, $LDB_PASSWORD) or die (print json_encode(mysql_error()));
						mysql_select_db($LDB_DB_NAME);
						mysql_set_charset('utf8');
						$Q = mysql_query("DELETE FROM bb_customers WHERE id = '".$_POST['UID']."';") or die (print json_encode(mysql_error()));
						mysql_query("DELETE FROM bb_devices_associations WHERE id_customer = '".$_POST['UID']."';") or die (print json_encode(mysql_error()));
						if ($Q) {
							//Anagrafica eliminata correttamente
							echo json_encode('success');
						} else {
							//Si è verificato un errore
							echo json_encode('error');
						}
						
						mysql_close();
						break;
		
		case 'ActivateUser':
						
						mysql_connect($LDB_IP_ADDRESS, $LDB_USERNAME, $LDB_PASSWORD) or die (print json_encode(mysql_error()));
						mysql_select_db($LDB_DB_NAME);
						mysql_set_charset('utf8');
						$Q = mysql_query("UPDATE bb_customers SET customer_status = '1' WHERE id = '".$_POST['UID']."';") or die (print json_encode(mysql_error()));
						
						if ($Q) {
							//Anagrafica eliminata correttamente
							echo json_encode('success');
						} else {
							//Si è verificato un errore
							echo json_encode('error');
						}
						
						mysql_close();
						break;
						
		case 'ActivateCompany':
						
						mysql_connect($LDB_IP_ADDRESS, $LDB_USERNAME, $LDB_PASSWORD) or die (print json_encode(mysql_error()));
						mysql_select_db($LDB_DB_NAME);
						mysql_set_charset('utf8');
						$Q = mysql_query("UPDATE bb_company SET status = '1' WHERE id = '".$_POST['UID']."';") or die (print json_encode(mysql_error()));
						
						if ($Q) {
							//Anagrafica eliminata correttamente
							echo json_encode('success');
						} else {
							//Si è verificato un errore
							echo json_encode('error');
						}
						
						mysql_close();
						break;
		
		case 'DeactivateUser':
						
						mysql_connect($LDB_IP_ADDRESS, $LDB_USERNAME, $LDB_PASSWORD) or die (print json_encode(mysql_error()));
						mysql_select_db($LDB_DB_NAME);
						mysql_set_charset('utf8');
						$Q = mysql_query("UPDATE bb_customers SET customer_status = '0' WHERE id = '".$_POST['UID']."';") or die (print json_encode(mysql_error()));
						
						if ($Q) {
							//Anagrafica eliminata correttamente
							echo json_encode('success');
						} else {
							//Si è verificato un errore
							echo json_encode('error');
						}
						
						mysql_close();
						break;
						
		case 'DeactivateCompany':
						
						mysql_connect($LDB_IP_ADDRESS, $LDB_USERNAME, $LDB_PASSWORD) or die (print json_encode(mysql_error()));
						mysql_select_db($LDB_DB_NAME);
						mysql_set_charset('utf8');
						$Q = mysql_query("UPDATE bb_company SET status = '0' WHERE id = '".$_POST['UID']."';") or die (print json_encode(mysql_error()));
						
						if ($Q) {
							//Anagrafica eliminata correttamente
							echo json_encode('success');
						} else {
							//Si è verificato un errore
							echo json_encode('error');
						}
						
						mysql_close();
						break;
		
		case 'CreateNewCRMUser':
						
						$UserDisplayName = $_POST['UserDisplayName'];
						$UserName = $_POST['UserUsername'];
						$Password = $_POST['UserPassword'];
						
						mysql_connect($LDB_IP_ADDRESS, $LDB_USERNAME, $LDB_PASSWORD) or die (print json_encode(mysql_error()));
						mysql_select_db($LDB_DB_NAME);
						mysql_set_charset('utf8');
						$Q = mysql_query("INSERT INTO bb_customers (customer_display_name, customer_username, customer_password, customer_level, customer_status) VALUES ('".$UserDisplayName."', '".$UserName."', '".$Password."', '1', '1');") or die (print json_encode(mysql_error()));
						
						if ($Q) {
							//Anagrafica inserita correttamente
							echo json_encode('success');
						} else {
							//Si è verificato un errore
							echo json_encode('error');
						}
						
						mysql_close();
						break;
						
		case 'DeleteCRMUser':
						
						$UID = $_POST['UID'];
						
						mysql_connect($LDB_IP_ADDRESS, $LDB_USERNAME, $LDB_PASSWORD) or die (print json_encode(mysql_error()));
						mysql_select_db($LDB_DB_NAME);
						mysql_set_charset('utf8');
						mysql_query("DELETE FROM bb_noc_user_group WHERE id_user = '".$UID."';") or die (print json_encode(mysql_error()));
						$Q = mysql_query("DELETE FROM bb_customers WHERE id = '".$UID."';") or die (print json_encode(mysql_error()));
						
						if ($Q) {
							//Anagrafica inserita correttamente
							echo json_encode('success');
						} else {
							//Si è verificato un errore
							echo json_encode('error');
						}
						
						mysql_close();
						break;
		
		case 'DeleteCRMCompany':
						
						$UID = $_POST['UID'];
						
						mysql_connect($LDB_IP_ADDRESS, $LDB_USERNAME, $LDB_PASSWORD) or die (print json_encode(mysql_error()));
						mysql_select_db($LDB_DB_NAME);
						mysql_set_charset('utf8');
						//mysql_query("DELETE FROM bb_noc_user_group WHERE id_user = '".$UID."';") or die (print json_encode(mysql_error()));
						
						mysql_query("UPDATE bb_devices SET id_company = '0' WHERE id_company = '".$UID."';") or die (print json_encode(mysql_error()));
						$Q = mysql_query("DELETE FROM bb_company WHERE id = '".$UID."';") or die (print json_encode(mysql_error()));
						
						if ($Q) {
							//Anagrafica inserita correttamente
							echo json_encode('success');
						} else {
							//Si è verificato un errore
							echo json_encode('error');
						}
						
						mysql_close();
						break;
		
		case 'GetCRMUserAssociation':
						
						$ERROR = 0;
						mysql_connect($LDB_IP_ADDRESS, $LDB_USERNAME, $LDB_PASSWORD) or die (print json_encode(mysql_error()));
						mysql_select_db($LDB_DB_NAME);
						mysql_set_charset('utf8');
						$Q = mysql_query("SELECT * FROM bb_customers WHERE id NOT IN (SELECT id_user FROM bb_noc_user_group WHERE id_group = '".$_POST['GID']."') AND customer_level != 99;") or die (print json_encode(mysql_error()));
						$RESPONSE_ARRAY['UnassociatedCount'] = mysql_num_rows($Q);					
						while ($DATA = mysql_fetch_array($Q)) {
							$RESPONSE_ARRAY['Unassociated'][] = $DATA;
						}
						
						$Q = mysql_query("SELECT * FROM bb_customers WHERE id IN (SELECT id_user FROM bb_noc_user_group WHERE id_group = '".$_POST['GID']."') AND customer_level != 99;") or die (print json_encode(mysql_error()));
						$RESPONSE_ARRAY['AssociatedCount'] = mysql_num_rows($Q);
						while ($DATA = mysql_fetch_array($Q)) {
							$RESPONSE_ARRAY['Associated'][] = $DATA;
						}						
						
						echo json_encode($RESPONSE_ARRAY);
						mysql_close();
						break;	
		
		case 'EditUserCRMAssociation':
						
						$ERROR = 0;
						mysql_connect($LDB_IP_ADDRESS, $LDB_USERNAME, $LDB_PASSWORD) or die (print json_encode(mysql_error()));
						mysql_select_db($LDB_DB_NAME);
						mysql_set_charset('utf8');
						mysql_query("DELETE FROM bb_noc_user_group WHERE id_group = '".$_POST['GID']."';") or die (print json_encode(mysql_error()));
						
						foreach($_POST['CLI_ID'] as $KEY => $VAL) {
							mysql_query("INSERT INTO bb_noc_user_group (id_group, id_user) VALUE ('".$_POST['GID']."', '".$_POST['CLI_ID'][$KEY]."');") or die (print json_encode(mysql_error()));
						}

						echo json_encode(true);
						mysql_close();
						break;
						
		case 'GetCRMUser':
						mysql_connect($LDB_IP_ADDRESS, $LDB_USERNAME, $LDB_PASSWORD) or die (print json_encode(mysql_error()));
						mysql_select_db($LDB_DB_NAME);
						mysql_set_charset('utf8');
						$Q = mysql_query("SELECT * FROM bb_customers WHERE id = '".$_POST['UID']."';") or die (print json_encode(mysql_error()));
						
						while ($DATA = mysql_fetch_array($Q)) {
							$RESPONSE_ARRAY = $DATA; 
						}

						echo json_encode($RESPONSE_ARRAY);
						mysql_close();
						break;
		
		case 'EditCRMUser':
						mysql_connect($LDB_IP_ADDRESS, $LDB_USERNAME, $LDB_PASSWORD) or die (print json_encode(mysql_error()));
						mysql_select_db($LDB_DB_NAME);
						mysql_set_charset('utf8');
						$Q = mysql_query("UPDATE bb_customers SET customer_display_name = '".$_POST['UserDisplayName']."', customer_username = '".$_POST['UserUsername']."', customer_password = '".$_POST['UserPassword']."' WHERE id = '".$_POST['UID']."';") or die (print json_encode(mysql_error()));
						
						if ($Q) {
							//Anagrafica inserita correttamente
							echo json_encode('success');
						} else {
							//Si è verificato un errore
							echo json_encode('error');
						}
						
						mysql_close();
						break;
		
		case 'CreateGroup':
						mysql_connect($LDB_IP_ADDRESS, $LDB_USERNAME, $LDB_PASSWORD) or die (print json_encode(mysql_error()));
						mysql_select_db($LDB_DB_NAME);
						mysql_set_charset('utf8');
						$Q = mysql_query("INSERT INTO bb_noc_groups (group_name, group_description) VALUES ('".$_POST['GroupName']."', '".$_POST['GroupDescription']."');") or die (print json_encode(mysql_error()));
						
						if ($Q) {
							//Anagrafica inserita correttamente
							echo json_encode('success');
						} else {
							//Si è verificato un errore
							echo json_encode('error');
						}
						
						mysql_close();
						break;
						
		case 'DeleteGroup':
						mysql_connect($LDB_IP_ADDRESS, $LDB_USERNAME, $LDB_PASSWORD) or die (print json_encode(mysql_error()));
						mysql_select_db($LDB_DB_NAME);
						mysql_set_charset('utf8');
						mysql_query("DELETE FROM bb_noc_user_group WHERE id_group = '".$_POST['GID']."';") or die (print json_encode(mysql_error()));
						$Q = mysql_query("DELETE FROM bb_noc_groups WHERE id = '".$_POST['GID']."';") or die (print json_encode(mysql_error()));
						
						if ($Q) {
							//Anagrafica inserita correttamente
							echo json_encode('success');
						} else {
							//Si è verificato un errore
							echo json_encode('error');
						}
						
						mysql_close();
						break;
	
	}
		
	
	
?>