<meta http-equiv="Conten-Type" content="text/html; charset=UTF-8">

<?php
	
function decodeSTRING($val){
	// #, &, +  < > などが URI 送信で化けるため encode して送られたものを decode
	$array = explode("%x0;", $val);
	$val = implode("#", $array);
	$array = explode("%x1;", $val);
	$val = implode("&", $array);
	$array = explode("%x2;", $val);
	$val = implode("+", $array);
	$array = explode("%x3;", $val);
	$val = implode("<", $array);
	$array = explode("%x4;", $val);
	$val = implode(">", $array);
	$array = explode("%x5;", $val);
	$val = implode(" ", $array);
	$array = explode("%x6;", $val);
	$val = implode("\n", $array);
	$array = explode("%x7;", $val);
	$val = implode("\"", $array);
	$array = explode("%x8;", $val);
	$val = implode("$", $array);
	return $val;
}
	
function timestamp(){
	// 現在のタイムスタンプを返す updateTime に使う
	return date("Y-m-d H:i:s",time());
}

function leftBrackets(){
	// $leftBrackets = "\^\[\^" では誤作動
	//	return "\^\[\^"; // encode 中で使う '(' -- クライアント側との約束 lib.js
	return "^[^"; // encode 中で使う '(' -- クライアント側との約束 lib.js
}
function rightBrackets(){
	return "^]^"; // encode 中で使う '(' -- クライアント側との約束 lib.js
	//	return "\^\]\^"; // encode 中で使う '(' -- クライアント側との約束 lib.js
}
function decodeObject($buff){
	// "key(value)" 形式の文字列を OBJECT に decode して返す
	$obj = array();
	//echo "decodeObject ===\n$buff\n"; //##
	for ($p=$begin=$nest=0, $len=strlen($buff); $p < $len; $p++){
		$ch = substr($buff, $p, 1);
		if (strcmp($ch, "(") == 0){
			if ($nest == 0){
				$key = trim(substr($buff, $begin, $p - $begin)); // key 終端
				$begin = $p + 1; // value 開始位置
			}
			$nest++;
		} else if (strcmp($ch, ")") == 0){
			if (--$nest == 0){
				if ($nest == 0){
					// value 終端 ( trim しない )
					$value = substr($buff,$begin,$p-$begin);
					$begin = $p + 1; // key 開始位置
				}
				if (ereg(")", $value)){ // まだ入れ子になっているなら
					$obj[$key] = decodeObject($value);
				} else {
					// 特定文字を "(", ")" へ戻す
					$array = explode(leftBrackets(), $value);
					$value = join("(", $array);
					$array = explode(rightBrackets(), $value);
					$value = join(")", $array);
					
					$obj[$key] = $value;
				}
				//echo "$key{".$obj[$key]."}\n"; //##
			}
		}
	}
	return $obj;
}
	
function getBookingList($year, $month, $day){
	// $year, $month, $day の予約患者リストを返す
	$begin = "$year-$month-$day 00:00:00";
	$end = "$year-$month-$day 23:59:59";
	
	$sql = "SELECT * FROM `FrontTable` WHERE `entryDate`>='$begin' AND `entryDate`<='$end' ORDER BY `entryDate`";
	echo "====== GET_BOOKING\n $sql \n";//###
	$result=mysql_query($sql);
	
	$array = array();
	if (mysql_num_rows ($result) > 0){
		// 指定年月日の予約患者を $array に入れる
		while ($row=mysql_fetch_array($result)){
			$obj = array();
			$obj['patientId'] = $row['patientId'];
			$obj['anotherId'] = $row['anotherId'];
			$obj['name'] = $row['kanjiName'];
			$obj['entryDate'] = $row['entryDate'];
			$obj['plan'] = $row['plan'];
			$array[] = $obj;
		}
	}
	return $array;
}
	
function getHospital($hid){
	$sql = "SELECT * FROM `HospitalTable` WHERE `hospitalId`='$hid'";
	echo "===== getHospital\n $sql \n";
	$array = array();
	$result=mysql_query($sql);
	while ($row=mysql_fetch_assoc($result)){ // 連想配列でレコードを取り出す
		$key = $row['key'];
		$value = $row['value'];
		$array[$key] = $value;
		echo "  $key -> $value \n"; //##
	}
	echo "\n\n";
	
	return $array;
}

function getUsers($groupCode){
	if ($groupCode && (strlen(groupCode) > 0))
		$sql = "SELECT * FROM `UserTable` WHERE `groupCode`='$groupCode'";
	else
		$sql = "SELECT * FROM `UserTable`";
	echo "===== getUser\n $sql \n";
	$array = array();
	$result=mysql_query($sql);
	if (mysql_num_rows ($result) > 0){
		while ($row=mysql_fetch_assoc($result)){
			$ary = array();
			$ary['loginName'] = $row['loginName'];
			$ary['kanjiName'] = $row['kanjiName'];
			$ary['groupCode'] = $row['groupCode'];
			$array[] = $ary;
		}
	}
	return $array;
}
	
	
$command = $_GET['command']; $command=htmlspecialchars($command);
$owner = $_GET['owner']; $owner=htmlspecialchars($owner);
$value = $_GET['value']; $value=htmlspecialchars($value);
$value = decodeSTRING($value);
	
// DB を開いて該当レコードを読み込む

// ### セキュリティーを保つには、以下のファイルを外からアクセスできない 
// ### directory に置き、以下の cfg.php の pass をそこへ変更
require_once('cfg.php');

$dbc = mysql_connect($db['host'], $db['user'], $db['pwd']);
$db_select=mysql_select_db($db['dbname']);
mysql_query("set names utf8");

if (strcmp($command,"GET_BOOKING") == 0){
	// 予約日をピックアップ
	$args = decodeObject($value); // client 側との約束ごと
	$year = $args['year'];
	$month = $args['month'];
	$day = $args['day'];
	$array = getBookingList($year, $month, $day);
	
	echo "<SEPARATOR>";
	echo json_encode($array);
} else if (strcmp($command,"CHANGE_BOOKING") == 0){
	// 予約時刻を変更
	$args = decodeObject($value); // client 側との約束ごと
	$patientId = $args['patientId'];
	$anotherId = $args['anotherId'];
	$name = $args['name'];
	$entryDate = $args['entryDate'];
	$newEntryDate = $args['newEntryDate'];
	$plan = $args['plan'];
	$updateTime = timestamp();
	
	$sql = "SELECT * FROM `FrontTable`
	WHERE `patientId`='$patientId' AND `entryDate`='$entryDate'";
	echo "=== CHANGE_BOOKING\n $sql \n"; //##
	$result=mysql_query($sql);
	// レコードがあれば　$fieldArray 内のものをアップデート
	if (mysql_num_rows ($result) > 0){
		// 該当するレコードの rowid をピックアップ
		$row = mysql_fetch_array($result);
		$rowid = $row['rowid'];
		
		$sql = "UPDATE `FrontTable` 
		SET `anotherId`='$anotherId',`plan`='$plan'
		,`entryDate`='$newEntryDate',`updateTime`='$updateTime'
		WHERE `rowid`='$rowid'";
	} else {
		$sql = "INSERT INTO `FrontTable` 
		(`patientId`,`anotherId`,`kanjiName`,`plan`,`entryDate`,`updateTime` )
		VALUES ('$patientId','$anotherId','$name','$plan','$newEntryDate','$updateTime')";
	}
	echo "=== $sql \n"; //##
	mysql_query($sql); // $sql 実行 ####
	
	// 更新後のリストを返す
	$datetimes = explode(" ", $entryDate);
	$dates = explode("-", $datetimes[0]);
	$array = getBookingList($dates[0], $dates[1], $dates[2]);
	
	echo "<SEPARATOR>";
	echo json_encode($array);
} else if (strcmp($command,"REMOVE_BOOKING") == 0){
	// 予約を削除
	$args = decodeObject($value); // client 側との約束ごと
	$patientId = $args['patientId'];
	$entryDate = $args['entryDate'];
	$updateTime = timestamp();
	
	$sql = "DELETE FROM `FrontTable`
	WHERE `patientId`='$patientId' AND `entryDate`='$entryDate'";
	echo "=== REMOVE_BOOKING\n $sql \n"; //##
	$result=mysql_query($sql);
	
	// 更新後のリストを返す
	$datetimes = explode(" ", $entryDate);
	$dates = explode("-", $datetimes[0]);
	$array = getBookingList($dates[0], $dates[1], $dates[2]);
	
	echo "<SEPARATOR>";
	echo json_encode($array);
} else if (strcmp($command,"PUT_BOOKING_PREFERENCE") == 0){
	// 予約の初期設定を保存
	// $value にアーカイブした設定値が入っている
	$patientId = "BOOKING_PREFERENCE";
	$timestamp = timestamp();
	
	$sql = "SELECT * FROM `FrontTable`
	WHERE `patientId`='$patientId'";
	echo "=== PUT_BOOKING_PREFERENCE\n $sql \n\n"; //##
	$result=mysql_query($sql);
	// レコードがあれば　$fieldArray 内のものをアップデート
	if (mysql_num_rows ($result) > 0){
		// 該当するレコードの rowid をピックアップ
		$row = mysql_fetch_array($result);
		$rowid = $row['rowid'];
		
		$sql = "UPDATE `FrontTable` 
		SET `plan`='$value',`owner`='$owner',`updateTime`='$timestamp'
		WHERE `rowid`='$rowid'";
	} else {
		$sql = "INSERT INTO `FrontTable` 
		(`patientId`,`plan`,`owner`,`updateTime` )
		VALUES ('$patientId','$value','$owner','$timestamp')";
	}
	echo "=== $sql \n"; //##
	mysql_query($sql); // $sql 実行 ####
	echo "<SEPARATOR>";
	echo $value;
} else if (strcmp($command,"GET_BOOKING_PREFERENCE") == 0){
	// 予約の初期設定を 'interval(15)' 形式で返す
	$args = decodeObject($value); // client 側との約束ごと
	$hospitalId = $args['hospitalId'];
	$owner = $args['owner'];
	$groupCode = $args['groupCode'];
	
	$records = array();
	$sql = "SELECT * FROM `MenuTable`
	WHERE `tag`='FrontTable.plan' AND `owner`='$owner'
	ORDER BY `freq` DESC";
	echo "=== GET_BOOKING_PREFERENCE\n $sql \n\n"; //##
	$result=mysql_query($sql);

	if (mysql_num_rows ($result) == 0){
		// ## private なデータがない場合は public を使う
		$sql = "SELECT * FROM `MenuTable`
		WHERE `tag`='FrontTable.plan' AND `owner`='public'
		ORDER BY `freq` DESC";
		echo "=== $sql \n\n"; //##
		$result=mysql_query($sql);
	}
	
	$array = array();
	while ($row=mysql_fetch_array($result)){
		$menu = $row['menu'];
		$array[$menu] = $row['freq'];
	}
	$records['planMenu'] = $array;
	
	$sql = "SELECT * FROM `FrontTable`
	WHERE `patientId`='BOOKING_PREFERENCE' AND `owner`='$owner'";
	echo "=== $sql \n"; //##
	$result=mysql_query($sql);

	if (mysql_num_rows ($result) == 0){
		// ## private なデータがない場合は public を使う
		$sql = "SELECT * FROM `FrontTable`
		WHERE `patientId`='BOOKING_PREFERENCE' AND `owner`='public'";
		echo "=== $sql \n"; //##
		$result=mysql_query($sql);
	}
	// plan に encodeObject() 形式で設定値が収納されている
	$row = mysql_fetch_array($result);
	$records['preference'] = $row['plan'];
	
	// 予約票のコメントを得る
	$sql = "SELECT * FROM `FrontTable`
	WHERE `patientId`='BOOKING_COMMENT'";
	echo "=== $sql \n"; //##
	$result=mysql_query($sql);
	$row = mysql_fetch_array($result);
	$records['comment'] = $row['plan'];
	
	// hospitalInfo
	$records['hospitalInfo'] = getHospital($hospitalId);
	
	// userInfo
	$records['userInfo'] = getUsers($groupCode);

	echo "<SEPARATOR>";
	echo json_encode($records);
} else if (strcmp($command,"GET_BOOKING_COMMENT") == 0){
	// 予約票のレイアウトを返す
	$sql = "SELECT * FROM `FrontTable`
	WHERE `patientId`='BOOKING_COMMENT'";
	echo "=== $sql \n"; //##
	$result=mysql_query($sql);
	
	// plan に encodeObject() 形式で設定値が収納されている
	echo "<SEPARATOR>";
	$row = mysql_fetch_array($result);
	
	// plan の中に encodeObject() 形式で入っている
	echo $row['plan'];
} else if (strcmp($command,"PUT_BOOKING_COMMENT") == 0){
	// 予約票のレイアウトを保存
	$patientId = "BOOKING_COMMENT";
	$timestamp = timestamp();
	
	$sql = "SELECT * FROM `FrontTable` WHERE `patientId`='$patientId'";
	echo "=== PUT_BOOKING_COMMENT\n $sql \n\n"; //##
	$result=mysql_query($sql);
	// レコードがあれば　$fieldArray 内のものをアップデート
	if (mysql_num_rows ($result) > 0){
		// 該当するレコードの rowid をピックアップ
		$row = mysql_fetch_array($result);
		$rowid = $row['rowid'];
		
		// $value の中に encodeObject() 形式で入っている
		$sql = "UPDATE `FrontTable` SET `plan`='$value',`owner`='$owner',`updateTime`='$timestamp' WHERE `rowid`='$rowid'";
	} else {
		$sql = "INSERT INTO `FrontTable` (`patientId`,`plan`,`owner`,`updateTime` ) VALUES ('$patientId','$value','$owner','$timestamp')";
	}
	echo "=== $sql \n"; //##
	mysql_query($sql); // $sql 実行 ####
	echo "<SEPARATOR>";
	echo $value;
} else if (strcmp($command,"GET_BOOKING_HISTORY") == 0){
	$args = decodeObject($value); // client 側との約束ごと
	$yy = $args['year'];
	$mm = $args['month'];
	$begin = "$yy-$mm-01 00:00:00";
	$yy2 = $yy;
	$mm2 = $mm + 2;
	if ($mm2 > 12){
		$yy2++;
        if ($mm2 == 13) // $mm2 が13月の場合は1月を返す
            $mm2 = 1;
        else if ($mm2 == 14) // $mm2 が14月の場合は2月を返す
            $mm2 = 2;
	}
	$end = "$yy2-$mm2-31 23:59:59";

	$sql = "SELECT * FROM `FrontTable` WHERE `entryDate`>='$begin' AND `entryDate`<='$end' ORDER BY `entryDate`";
	echo "=== GET_BOOKING_HISTORY\n $sql \n\n"; //##
	$result=mysql_query($sql);

	$array = array();
	while ($row = mysql_fetch_array($result)){
		$date = $row['entryDate'];
		$ary = explode(" ", $date);
		$array[$ary[0]] = "";
	}
	
	echo "<SEPARATOR>";
	$records = array();
	$records['year'] = $yy;
	$records['month'] = $mm;
	$records['history'] = $array;
	echo json_encode($records);
} else
	echo "*** unknown command: $command ***";

?>