<?php

class newIncident {

  var $host;
  var $username;
  var $password;
  var $table;

  public function display_admin() {
    return <<<ADMIN_FORM

    <form action="{$_SERVER['PHP_SELF']}" method="post" id="incidentForm">
        <div id="formField"><label for="incidentTime" id="incidentFormLabel">Date / Time of Incident:</label><input class="timeText" type="text" name="incidentTime" /></div>
        <div id="formField"><label for="resolutionTime" id="incidentFormLabel">Date / Time of Resolution:</label><input class="timeText" type="text" name="resolutionTime" /></div>
        <div id="formFieldLarge"><label for="explanation" id="incidentFormLabel">General xplanation:</label><input class="mainText" type="text" name="explanation" /></div>
        <div id="formFieldLarge"><label for="measures" id="incidentFormLabel">Preventive easures Taken:</label><input class="mainText" type="text" name="measures" /></div>
        <input type="submit" value="Create This Entry!" class="submitButton"/>
    </form>

    <br />

    <a href="display.php">Back to Home</a>

ADMIN_FORM;
  }

  public function write($p) {
    if ( $_POST['incidentTime'] )
      $incidentTime = mysql_real_escape_string($_POST['incidentTime']);
      if ( $_POST['resolutionTime'] )
      $resolutionTime = mysql_real_escape_string($_POST['resolutionTime']);
    if ( $_POST['explanation'])
      $explanation = mysql_real_escape_string($_POST['explanation']);
    if ( $_POST['measures'])
      $measures = mysql_real_escape_string($_POST['measures']);
    if ( $incidentTime && $resolutionTime && $explanation && $measures ) {
      $created = time();
      $sql = "INSERT INTO incidents VALUES('$incidentTime','$resolutionTime','$explanation','$measures','$created')";
      return mysql_query($sql);
    } else {
      return false;
    }
  }

  public function connect() {
    mysql_connect($this->host,$this->username,$this->password) or die("Could not connect. " . mysql_error());
    mysql_select_db($this->table) or die("Could not select database. " . mysql_error());

    return $this->buildDB();
  }

  private function buildDB() {
    $sql = <<<MySQL_QUERY
    CREATE TABLE IF NOT EXISTS incidents (
        incidentID  INT PRIMARY KEY AUTO_INCREMENT,
        incidentTime VARCHAR(150),
        resolutionTime VARCHAR(150),
        explanation TEXT,
        measures    TEXT,
        created     VARCHAR(100)
)
MySQL_QUERY;

    return mysql_query($sql);
  }

  public function display_public() {
    $query = "SELECT * FROM incidents ORDER BY created DESC LIMIT 1";
    $response = mysql_query($query);

    if ( $response !== false && mysql_num_rows($response) > 0 ) {
      while ( $array = mysql_fetch_assoc($response) ) {
        $incidentTime = stripslashes($array['incidentTime']);
        $resolutionTime = stripslashes($array['resolutionTime']);
        $explanation = stripslashes($array['explanation']);
        $measures = stripslashes($array['measures']);

        $entry_display .= <<<ENTRY_DISPLAY

    <div class="post">
        <p>$incidentTime</p>
        <p>$resolutionTime</p>
        <p>$explanation</p>
        <p>$measures</p>
    </div>

ENTRY_DISPLAY;
      }
    } else {
      $entry_display = <<<ENTRY_DISPLAY

ENTRY_DISPLAY;

    }
    echo $incidentTime;

    $entry_display .= <<<ADMIN_OPTION

    <p class="admin_link">
      <a href="{$_SERVER['PHP_SELF']}?admin=1">Add a New Incident</a>
    </p>

ADMIN_OPTION;

    return $entry_display;
  }
}
?>