<?php
//header("Cache-Control: no-cache, must-revalidate");
//header("Pragma: no-cache");
//header("Cache-Control: post-check=0, pre-check=0");

include "../phppsycorps/common_db.inc";
include "../phppsycorps/servlist.inc";
include "../phppsycorps/servlist2.inc";
error_reporting(0);

$todaytime=time();
$todaytime2=strftime('%Y%m%d%H%M%S', $todaytime);
$todaytime2 += 12345678901234;
$todaytime2=sprintf('%.0f',$todaytime2);

///////////FUNCTIONS////////////////////////////
function add_perm($link_id, $permdb)
{
if(empty($permdb)){$permdb="cl_perm";}
$navPro=$_SESSION['userProid'];
$navCL=$_SESSION['userCLid'];
if(!$link_id)
    {
    $link_id = db_connect();
    if(!link_id) die(sql_error());
    }
 $checkpermQ="SELECT * FROM $permdb WHERE CL_id='$navCL' AND Pro_id='$navPro'";
 $checkpermR=mysql_query($checkpermQ);
 $num_rows=mysql_num_rows($checkpermR);
 if($num_rows==0)
     {
     $insertpermQ="INSERT INTO $permdb (perm_id, CL_id, Pro_id) VALUES(NULL,'$navCL','$navPro')";
     $insertpermR=mysql_query($insertpermQ);
     if(!$insertpermR) error_message(sql_error());
     }
}
/////////GET CLAIM FROM CLIENT
function get_claim_from_client($userCLid_3)
{
global $mcrypt_key, $clients_db;
$tempuserCLid=$userCLid_3;
if(!empty($_SESSION['CLclaim_no_selected'])){$_SESSION['selected_claims']=array("");
                                                                         return $_SESSION['CLclaim_no_selected'];
                                                                        }
else
{
$mcrypt_module = mcrypt_module_open('rijndael-256', '', 'cbc', '');
//$mcrypt_iv=check_iv($tempuserCLid);
$link_id = db_connect();
$query = "SELECT CL_iv, CLthird_co1, CLclaim_no1, CLthird_co2, CLclaim_no2, CLthird_co3, CLclaim_no3, CLthird_co4, CLclaim_no4, CLthird_co5, CLclaim_no5  FROM $clients_db WHERE CL_id = '$userCLid_3'";
$result = mysql_query($query);
if(!mysql_num_rows($result)) {return 0;}
else 
  {
  $query_data = mysql_fetch_array($result);
  $CL_iv_fetched=$query_data['CL_iv'];
  $mcrypt_iv=base64_decode($CL_iv_fetched);
  
  
  $CLthird_co1=$query_data['CLthird_co1'];
  $mCLclaim_no1=$query_data['CLclaim_no1'];
  $CLthird_co2=$query_data['CLthird_co2'];
  $mCLclaim_no2=$query_data['CLclaim_no2'];
  $CLthird_co3=$query_data['CLthird_co3'];
  $mCLclaim_no3=$query_data['CLclaim_no3'];
  $CLthird_co4=$query_data['CLthird_co4'];
  $mCLclaim_no4=$query_data['CLclaim_no4'];
  $CLthird_co5=$query_data['CLthird_co5'];
  $mCLclaim_no5=$query_data['CLclaim_no5'];
  if(empty($_SESSION['CLthird_co_pro'])){echo "no go";return 0;}
  
  $selected_claims=array();
  if($CLthird_co1==$_SESSION['CLthird_co_pro'])
  {
  $CLclaim_no1=rtrim($mCLclaim_no1, "\0");
  mcrypt_generic_init($mcrypt_module, $mcrypt_key, $mcrypt_iv);
  $mCL_decrypted=mdecrypt_generic($mcrypt_module, base64_decode($CLclaim_no1));
  $selected_claims[]=$mCL_decrypted;
  
  }
  if($CLthird_co2==$_SESSION['CLthird_co_pro'])
  {
  $CLclaim_no2=rtrim($mCLclaim_no2, "\0");
  mcrypt_generic_init($mcrypt_module, $mcrypt_key, $mcrypt_iv);
  $mCL_decrypted=mdecrypt_generic($mcrypt_module, base64_decode($CLclaim_no2));
  $selected_claims[]=$mCL_decrypted;
  
  }
  if($CLthird_co3==$_SESSION['CLthird_co_pro'])
  {
  $CLclaim_no3=rtrim($mCLclaim_no3, "\0");
  mcrypt_generic_init($mcrypt_module, $mcrypt_key, $mcrypt_iv);
  $mCL_decrypted=mdecrypt_generic($mcrypt_module, base64_decode($CLclaim_no3));
  $selected_claims[]=$mCL_decrypted;
  
  }
  if($CLthird_co4==$_SESSION['CLthird_co_pro'])
  {
  $CLclaim_no4=rtrim($mCLclaim_no4, "\0");
  mcrypt_generic_init($mcrypt_module, $mcrypt_key, $mcrypt_iv);
  $mCL_decrypted=mdecrypt_generic($mcrypt_module, base64_decode($CLclaim_no4));
  $selected_claims[]=$mCL_decrypted;
  
  }
  if($CLthird_co5==$_SESSION['CLthird_co_pro'])
  {
  $CLclaim_no5=rtrim($mCLclaim_no5, "\0");
  mcrypt_generic_init($mcrypt_module, $mcrypt_key, $mcrypt_iv);
  $mCL_decrypted=mdecrypt_generic($mcrypt_module, base64_decode($CLclaim_no5));
  $selected_claims[]=$mCL_decrypted;
  
  }
  mcrypt_generic_deinit($mcrypt_module);
  mcrypt_module_close ($mcrypt_module); 
  $count_selected=count($selected_claims);
  // echo $selected_claims['0'];
  if($count_selected==1){
                                     $_SESSION['selected_claims']=array("");
                                     return $selected_claims['0'];
                                     echo $selected_claims['0']; echo "one selected";$_SESSION['CLclaim_no_selected']="";
  echo $selected_claims['1'];
                                     }////decrypt before returning
  if($count_selected > 1){echo "There is more than one claim number for this client and third party. Please select which claim number to use. ";
                                     $_SESSION['selected_claims']=$selected_claims; 
  
                                     return 1;
                                     }
  if($count_selected==0)
       {
        if($_SESSION['CLthird_co_pro'] != "SELF")
              {
              error_message("There is no case or claim number associated with this client and that third party!");} 
        else {$_SESSION['selected_claims']=array("");return 1;}
       }
  }
 }///end else
}/////END FUNC GET CLAIM
/////////GET CLAIM FROM CLIENT2
function get_claim_from_client2($userCLid_3)
{
global $mcrypt_key, $clients_db;
$tempuserCLid=$userCLid_3;
if(!empty($_SESSION['CLclaim_no_selected'])){$_SESSION['selected_claims']=array("");
                                                                         return $_SESSION['CLclaim_no_selected'];
                                                                        }
else
{
$mcrypt_module = mcrypt_module_open('rijndael-256', '', 'cbc', '');
$link_id = db_connect();
$query = "SELECT CL_iv, CLthird_co1, CLclaim_no1, CLthird_co2, CLclaim_no2, CLthird_co3, CLclaim_no3, CLthird_co4, CLclaim_no4, CLthird_co5, CLclaim_no5  FROM $clients_db WHERE CL_id = '$userCLid_3'";
$result = mysql_query($query);
if(!mysql_num_rows($result)) {return 0;}
else 
  {
  $query_data = mysql_fetch_array($result);
  $CL_iv_fetched=$query_data['CL_iv'];
  $mcrypt_iv=base64_decode($CL_iv_fetched);
  
  
  $CLthird_co1=$query_data['CLthird_co1'];
  $mCLclaim_no1=$query_data['CLclaim_no1'];
  $CLthird_co2=$query_data['CLthird_co2'];
  $mCLclaim_no2=$query_data['CLclaim_no2'];
  $CLthird_co3=$query_data['CLthird_co3'];
  $mCLclaim_no3=$query_data['CLclaim_no3'];
  $CLthird_co4=$query_data['CLthird_co4'];
  $mCLclaim_no4=$query_data['CLclaim_no4'];
  $CLthird_co5=$query_data['CLthird_co5'];
  $mCLclaim_no5=$query_data['CLclaim_no5'];
  if(empty($_SESSION['CLthird_co_pro'])){echo "no go";return 0;}
  
  $selected_claims=array();
  if($CLthird_co1==$_SESSION['CLthird_co_pro'])
  {
  $CLclaim_no1=rtrim($mCLclaim_no1, "\0");
  mcrypt_generic_init($mcrypt_module, $mcrypt_key, $mcrypt_iv);
  $mCL_decrypted=mdecrypt_generic($mcrypt_module, base64_decode($CLclaim_no1));
  $selected_claims[]=$mCL_decrypted;
  
  }
  if($CLthird_co2==$_SESSION['CLthird_co_pro'])
  {
  $CLclaim_no2=rtrim($mCLclaim_no2, "\0");
  mcrypt_generic_init($mcrypt_module, $mcrypt_key, $mcrypt_iv);
  $mCL_decrypted=mdecrypt_generic($mcrypt_module, base64_decode($CLclaim_no2));
  $selected_claims[]=$mCL_decrypted;
  
  }
  if($CLthird_co3==$_SESSION['CLthird_co_pro'])
  {
  $CLclaim_no3=rtrim($mCLclaim_no3, "\0");
  mcrypt_generic_init($mcrypt_module, $mcrypt_key, $mcrypt_iv);
  $mCL_decrypted=mdecrypt_generic($mcrypt_module, base64_decode($CLclaim_no3));
  $selected_claims[]=$mCL_decrypted;
  
  }
  if($CLthird_co4==$_SESSION['CLthird_co_pro'])
  {
  $CLclaim_no4=rtrim($mCLclaim_no4, "\0");
  mcrypt_generic_init($mcrypt_module, $mcrypt_key, $mcrypt_iv);
  $mCL_decrypted=mdecrypt_generic($mcrypt_module, base64_decode($CLclaim_no4));
  $selected_claims[]=$mCL_decrypted;
  
  }
  if($CLthird_co5==$_SESSION['CLthird_co_pro'])
  {
  $CLclaim_no5=rtrim($mCLclaim_no5, "\0");
  mcrypt_generic_init($mcrypt_module, $mcrypt_key, $mcrypt_iv);
  $mCL_decrypted=mdecrypt_generic($mcrypt_module, base64_decode($CLclaim_no5));
  $selected_claims[]=$mCL_decrypted;
  
  }
  mcrypt_generic_deinit($mcrypt_module);
  mcrypt_module_close ($mcrypt_module);
  $selected_string=implode(" ", $selected_claims);
  //$selected_claims[0] . " " . $selected_claims[1] . " " . $selected_claims[2] . " " . $selected_claims[3] . " " . $selected_claims[4];
  $selected_string=trim($selected_string, "\0");
  return $selected_string;
  }
 }///end else
}/////END FUNC GET CLAIM

/////////GET CLAIM FROM PAYOR CLIENT and province
function get_claim_from_payor_client($payor, $userCLid_3, $userCLprov)
{
global $mcrypt_key;
if($userCLprov=="BC"){$clients_db = "clients";}
  else if($userCLprov=="AB"){$clients_db = "clients_ab";}
  else if($userCLprov=="SK"){$clients_db = "clients_sk";}
  else if($userCLprov=="MB"){$clients_db = "clients_mb";}
  else if($userCLprov=="ON"){$clients_db = "clients_on";}
  else if($userCLprov=="QC"){$clients_db = "clients_qc";}
  else if($userCLprov=="NB"){$clients_db = "clients_nb";}
  else if($userCLprov=="NS"){$clients_db = "clients_ns";}
  else if($userCLprov=="PE"){$clients_db = "clients_pe";}
  else if($userCLprov=="NL"){$clients_db = "clients_nl";}
  else if($userCLprov=="YK"){$clients_db = "clients_yk";}
  else if($userCLprov=="NW"){$clients_db = "clients_nw";}
  else if($userCLprov=="NV"){$clients_db = "clients_nv";}
  else {$clients_db = "clients";}
$tempuserCLid=$userCLid_3;

$mcrypt_module = mcrypt_module_open('rijndael-256', '', 'cbc', '');
$link_id = db_connect();
$query = "SELECT CL_iv, CLthird_co1, CLclaim_no1, CLthird_co2, CLclaim_no2, CLthird_co3, CLclaim_no3, CLthird_co4, CLclaim_no4, CLthird_co5, CLclaim_no5  FROM $clients_db WHERE CL_id = '$userCLid_3'";
$result = mysql_query($query);
if(!mysql_num_rows($result)) {return 0;}
else 
  {
  $query_data = mysql_fetch_array($result);
  $CL_iv_fetched=$query_data['CL_iv'];
  $mcrypt_iv=base64_decode($CL_iv_fetched);
  
  
  $CLthird_co1=$query_data['CLthird_co1'];
  $mCLclaim_no1=$query_data['CLclaim_no1'];
  $CLthird_co2=$query_data['CLthird_co2'];
  $mCLclaim_no2=$query_data['CLclaim_no2'];
  $CLthird_co3=$query_data['CLthird_co3'];
  $mCLclaim_no3=$query_data['CLclaim_no3'];
  $CLthird_co4=$query_data['CLthird_co4'];
  $mCLclaim_no4=$query_data['CLclaim_no4'];
  $CLthird_co5=$query_data['CLthird_co5'];
  $mCLclaim_no5=$query_data['CLclaim_no5'];
  if(empty($payor)){echo "no go";return 0;}
  
  $selected_claims=array();
  if($CLthird_co1==$payor)
  {
  $CLclaim_no1=rtrim($mCLclaim_no1, "\0");
  mcrypt_generic_init($mcrypt_module, $mcrypt_key, $mcrypt_iv);
  $mCL_decrypted=mdecrypt_generic($mcrypt_module, base64_decode($CLclaim_no1));
  $selected_claims[]=$mCL_decrypted;
  
  }
  if($CLthird_co2==$payor)
  {
  $CLclaim_no2=rtrim($mCLclaim_no2, "\0");
  mcrypt_generic_init($mcrypt_module, $mcrypt_key, $mcrypt_iv);
  $mCL_decrypted=mdecrypt_generic($mcrypt_module, base64_decode($CLclaim_no2));
  $selected_claims[]=$mCL_decrypted;
  
  }
  if($CLthird_co3==$payor)
  {
  $CLclaim_no3=rtrim($mCLclaim_no3, "\0");
  mcrypt_generic_init($mcrypt_module, $mcrypt_key, $mcrypt_iv);
  $mCL_decrypted=mdecrypt_generic($mcrypt_module, base64_decode($CLclaim_no3));
  $selected_claims[]=$mCL_decrypted;
  
  }
  if($CLthird_co4==$payor)
  {
  $CLclaim_no4=rtrim($mCLclaim_no4, "\0");
  mcrypt_generic_init($mcrypt_module, $mcrypt_key, $mcrypt_iv);
  $mCL_decrypted=mdecrypt_generic($mcrypt_module, base64_decode($CLclaim_no4));
  $selected_claims[]=$mCL_decrypted;
  
  }
  if($CLthird_co5==$payor)
  {
  $CLclaim_no5=rtrim($mCLclaim_no5, "\0");
  mcrypt_generic_init($mcrypt_module, $mcrypt_key, $mcrypt_iv);
  $mCL_decrypted=mdecrypt_generic($mcrypt_module, base64_decode($CLclaim_no5));
  $selected_claims[]=$mCL_decrypted;
  
  }
  mcrypt_generic_deinit($mcrypt_module);
  mcrypt_module_close ($mcrypt_module); 
  $count_selected=count($selected_claims);
    if($count_selected==1){
                                     $_SESSION['selected_claims']=array("");
                                     return $selected_claims['0'];
                                     echo $selected_claims['0']; echo "one selected";$_SESSION['CLclaim_no_selected']="";
  echo $selected_claims['1'];
                                     }////decrypt before returning
  if($count_selected > 1){$returnMo=implode(",",$selected_claims);
                                     //$_SESSION['selected_claims']=$selected_claims; 
  
                                     return $returnMo;
                                     }
  if($count_selected==0)
       {
        if($payor != "SELF")
              {
              error_message("There is no case or claim number associated with this client and " . $payor);$_SESSION['selected_claims']=array("");echo $selected_claims['0'];
  echo $selected_claims['1'];return 0;$_SESSION['CLclaim_no_selected']="";} 
        else {$_SESSION['selected_claims']=array("");return 1;}
       }
  }
 
}/////END FUNC GET CLAIM from payor and client

function get_third_email_from_payor_client($payor, $client, $userCLprov)
{
if($userCLprov=="BC"){$clients_db = "clients";}
  else if($userCLprov=="AB"){$clients_db = "clients_ab";}
  else if($userCLprov=="SK"){$clients_db = "clients_sk";}
  else if($userCLprov=="MB"){$clients_db = "clients_mb";}
  else if($userCLprov=="ON"){$clients_db = "clients_on";}
  else if($userCLprov=="QC"){$clients_db = "clients_qc";}
  else if($userCLprov=="NB"){$clients_db = "clients_nb";}
  else if($userCLprov=="NS"){$clients_db = "clients_ns";}
  else if($userCLprov=="PE"){$clients_db = "clients_pe";}
  else if($userCLprov=="NL"){$clients_db = "clients_nl";}
  else if($userCLprov=="YK"){$clients_db = "clients_yk";}
  else if($userCLprov=="NW"){$clients_db = "clients_nw";}
  else if($userCLprov=="NV"){$clients_db = "clients_nv";}
  else {$clients_db = "clients";}
$link_id = db_connect();
$query = "SELECT CLthird_co1, third_party_email1, CLthird_co2, third_party_email2, CLthird_co3, third_party_email3, CLthird_co4, third_party_email4, CLthird_co5, third_party_email5 FROM $clients_db WHERE CL_id = '$client'"; ///query works here
$result = mysql_query($query);
if(!result){error_message(sql_error());}
if(mysql_num_rows($result)==0) {error_message("no rows returned from $DBname");}
else 
  {
  // $_SESSION['CLthird_co_pro'] is okay here
  $query_data = mysql_fetch_array($result);
  $CLthird_co1=$query_data['CLthird_co1'];
  //echo $CLthird_co1 . " is CLthird_co1<br>";
  $third_party_email1=$query_data['third_party_email1'];
  $CLthird_co2=$query_data['CLthird_co2'];
  $third_party_email2=$query_data['third_party_email2'];
  $CLthird_co3=$query_data['CLthird_co3'];
  $third_party_email3=$query_data['third_party_email3'];
  $CLthird_co4=$query_data['CLthird_co4'];
  $third_party_email4=$query_data['third_party_email4'];
  $CLthird_co5=$query_data['CLthird_co5'];
  $third_party_email5=$query_data['third_party_email5'];
  if($CLthird_co1==$payor){$third_email=$third_party_email1;}
  if($CLthird_co2==$payor){$third_email=$third_party_email2;}
  if($CLthird_co3==$payor){$third_email=$third_party_email3;}
  if($CLthird_co4==$payor){$third_email=$third_party_email4;}
  if($CLthird_co5==$payor){$third_email=$third_party_email5;}
  return $third_email;
  }
}////END FUNC GET THIRD EMAIL From payor and client
///////////////////FUNCTION INPUT_CLIENT_USERNAME
function input_client_username()
{
global $servpro_id, $start_appt, $number_appts, $claim_add, $update_CL, $PHP_SELF;


echo "<FORM ACTION=\"$PHP_SELF";
echo "?beginmark=";
echo $_GET['beginmark'];
echo "&navProid=";
echo $_GET['navProid'];
echo "&first_appt=";
echo $_GET['first_appt'];
echo "&no_appts=";
echo $_GET['no_appts'];
echo "&onlyType=";
echo $_GET['onlyType'];
echo "\" METHOD=\"POST\">";///////FORM
echo "Enter the username of the client to be booked in the space below, select who to bill and click submit:<BR/>";
echo "<INPUT TYPE=\"HIDDEN\" NAME=\"SUBMIT_CLIENT\" VALUE= \"1\">";
echo "<INPUT TYPE=\"TEXT\" NAME=\"client_username\" SIZE=\"40\" VALUE=\"";
echo $_SESSION['userCLid'];
echo "\">";
echo " Province: ";
echo "<SELECT NAME=\"userCLprov\" onChange=\"document.forms[0].submit()\">";
echo "<OPTION VALUE=\"";
echo $_SESSION['userCLprov'];
echo "\">";
echo $_SESSION['userCLprov'];
echo "</OPTION>";
?>
<OPTION VALUE="BC">BC</OPTION>
         <OPTION VALUE="AB">AB</OPTION>
         <OPTION VALUE="SK">SK</OPTION>
         <OPTION VALUE="MB">MB</OPTION>
         <OPTION VALUE="ON">ON</OPTION>
         <OPTION VALUE="QC">QC</OPTION>
         <OPTION VALUE="NL">NL</OPTION>
         <OPTION VALUE="NS">NS</OPTION>
         <OPTION VALUE="NB">NB</OPTION>
         <OPTION VALUE="PE">PEI</OPTION>
         <OPTION VALUE="YK">YK</OPTION>
         <OPTION VALUE="NW">NWT</OPTION>
         <OPTION VALUE="NV">NV</OPTION></SELECT>
<?php
if(empty($_SESSION['user3id1']))
{
echo "Bill to? ";
echo "<SELECT NAME=\"CLthird_co\" SIZE =\"1\" onChange=\"document.forms[0].submit()\">";
if(!empty($_SESSION['CLthird_co_pro']))
   {

echo "<OPTION VALUE=\"";
echo $_SESSION['CLthird_co_pro'];
echo "\" SELECTED>";
if($_SESSION['CLthird_co_pro'] == "SELF"){echo "Charge the client";} else {echo $_SESSION['CLthird_co_pro'];}
echo "</OPTION>";
   }
third_co_list();
echo "</SELECT>";

$array_selected_claims=$_SESSION['selected_claims'];
if(count($array_selected_claims) > 1)
          {
          echo "Claim no: <SELECT NAME=\"CLclaim_no_selected\" onChange=\"document.forms[0].submit()\">";
          echo "<OPTION VALUE=\"";
          echo $_SESSION['CLclaim_no_selected'];
          echo "\">";
          echo $_SESSION['CLclaim_no_selected'];
          echo "</OPTION>";
          echo "<OPTION VALUE=\"";
          echo $array_selected_claims[0];
          echo "\">";
          echo $array_selected_claims[0];
          echo "</OPTION>";
          echo "<OPTION VALUE=\"";
          echo $array_selected_claims[1];
          echo "\">";
          echo $array_selected_claims[1];
          echo "</OPTION>";
         
                 if(!empty($array_selected_claim[2]))
                 {
                 echo "</OPTION>";
                 echo "<OPTION VALUE=\"";
                 echo $array_selected_claims[2];
                 echo "\">";
                 echo $array_selected_claims[2];
                 echo "</OPTION>";
                 }
                 if(!empty($array_selected_claim[3]))
                 {
                 echo "</OPTION>";
                 echo "<OPTION VALUE=\"";
                 echo $array_selected_claims[3];
                 echo "\">";
                 echo $array_selected_claims[3];
                 echo "</OPTION>";
                 }
                 if(!empty($array_selected_claim[4]))
                 {
                 echo "</OPTION>";
                 echo "<OPTION VALUE=\"";
                 echo $array_selected_claims[4];
                 echo "\">";
                 echo $array_selected_claims[4];
                 echo "</OPTION>";
                 }
           echo "</SELECT>";
          }
}
echo "<INPUT TYPE=\"SUBMIT\" VALUE=\"SUBMIT\">";
//echo "<INPUT TYPE=\"RESET\" VALUE=\"Clear\">";

echo "<BR/><FONT SIZE=2>Update this client's registration <A HREF=\"" . $update_CL . "\">here</A>. Add claim number <A HREF=\"" . $claim_add . "\">here</A>.</FONT>";
echo "</FORM>";
}////////////////END FUNCTION
//////////////////FUNCTION REGISTER_CLIENT_USERNAME
function register_client_username($name_in_box, $clients_db, $userCLprov, $permdb)
{
$link_id = db_connect();
if(!$link_id) die(sql_error());
$queryCLname = "SELECT CL_id, CLemail FROM $clients_db WHERE CL_id = '$name_in_box'";
$resultCLname = mysql_query($queryCLname);
$marknoname = mysql_num_rows($resultCLname);
if(!$resultCLname) error_message(sql_error());
if(!$marknoname) error_message("No such username, check the client username and province");
else
    {  
     $query_dataCLname = mysql_fetch_array($resultCLname); 
     $_SESSION['userCLid']=$query_dataCLname["CL_id"];
     $_SESSION['userCLprov']=$userCLprov;
     add_perm($link_id, $permdb);
    }
}
///////////////END FUNCTION

/////////////////FUNCTION GET_MULT
function get_mult($servpro_id, $number_appts, $start_appt)
{
global $dbhost, $apptdb, $block_info, $servProdb;
$link_id = db_connect();
if(!$link_id) die(sql_error());

$tempuserCL = $_SESSION['userCLid'];
$querymult = "SELECT appt_id, date_format(day, '%a %b %e %Y'), time, Assmt, Agent_id, client_id, bill_to, auth_by_3rd, location FROM $apptdb WHERE (Agent_id='$servpro_id' AND appt_id='$start_appt')";

$resultmult = mysql_query($querymult);
if(!$resultmult) error_message(sql_error());


echo "<FORM ACTION=\"$PHP_SELF";
echo "?navProid=";
echo $servpro_id;
echo "&first_appt=";
echo $start_appt;
echo "&no_appts=";
echo $number_appts;
echo "&onlyType=";
echo $_GET['onlyType'];
echo "\" METHOD=\"POST\">";///////FORM
echo "<INPUT TYPE=HIDDEN NAME=\"$book_action\" VALUE=\"caliente\">";

table_head();

$query_datamult = mysql_fetch_array($resultmult); 
    
     $datimemult = $query_datamult["date_format(day, '%a %b %e %Y')"];
     $datimemult .= " ";
     $datimemult .= $query_datamult["time"];


            $appt_id = $query_datamult["appt_id"];
            $day = $query_datamult["date_format(day, '%a %b %e %Y')"];
            //$time = $query_datamult["time"];
            $Assmt = $query_datamult['Assmt'];
            $Agent_id = $query_datamult["Agent_id"];
            $client_id = $query_datamult["client_id"];
            $location=$query_datamult["location"];
            $bill_to=$query_datamult["bill_to"];
            $auth=$query_datamult["auth_by_3rd"];
            list($timex1, $timex2, $timex3)=explode(":" , $query_datamult["time"]);
            $pm=0;
            if ($timex1 > 11) {$pm=1;}
            if($timex1 > 12) {$timex1 -= 12;}

            echo "<TR BGCOLOR='FFFF77'>";
            echo "<TD ALIGN=\"CENTER\" WIDTH=\"20%\">";
            echo $day;
            echo "</TD>";
            echo "<TD ALIGN=\"CENTER\" WIDTH=\"20%\">";
            echo $timex1 . ":" . $timex2 . " ";
            if($pm == 1) {echo "PM";} else {echo "AM";}
            if($Assmt) {echo "<br/>" . service_list2($Assmt);}
            echo "</TD>";
            echo "<TD WIDTH=\"20%\" ALIGN=\"CENTER\"><INPUT TYPE=RADIO
            NAME=\"$appt_id\" VALUE=\"book\">book   <INPUT TYPE=RADIO 
            NAME=\"$appt_id\" VALUE=\"cancel\">cancel</INPUT></TD>";

            echo "<TD WIDTH=\"18%\" ALIGN=\"CENTER\">";
            if($client_id != "BLOCKED")
               {
               echo "<A HREF=\"lookupCL.html?CLlook=";
               echo $client_id;
               echo "&Prolook=";
               echo $Agent_id;
                         echo "&CLprov=";
                         echo $_SESSION['userCLprov'];
               echo "\">$client_id</A></TD>";
              }
            else
              {
               echo "<a href=\""; echo $block_info; echo "?appt_id="; echo $appt_id; echo "\">"; echo $client_id; echo "</a>";
               echo "</TD>";
              }
           echo "<TD WIDTH=\"15%\" ALIGN=\"CENTER\">$bill_to</TD>";
           echo "<TD WIDTH=\"5%\" ALIGN=\"CENTER\">";
           if($auth==0){echo "DK";}
           if($auth==1){echo "Y";}
           if($auth==-1){echo "<FONT COLOR=\"RED\">N</FONT>";}
           echo "<TD WIDTH=\"13%\" ALIGN=\"CENTER\">$location</TD>";
           echo "</TR>\n";

if(empty($_GET['onlyType']))
{
$proTypeQ="SELECT Pro_type FROM $servProdb WHERE Pro_id='$servpro_id'";
$proTypeR=mysql_query($proTypeQ);
$proTypeRA=mysql_fetch_array($proTypeR);
$proType=$proTypeRA['Pro_type'];
$rep_appt_str=repeating_appt_str($proType);
 } else {
 $rep_appt_str=$_GET['onlyType'];
 }
///strtotime() to convert to unix time

$untimemult = strtotime($datimemult);
    // echo $timenextmult; echo "untimemult is " . $untimemult;
//echo "<BR/>";
$countermult = $number_appts - 1;
//echo "countermult is " . $countermult . "<BR/>";
/////////////HERE IS THE COUNTER////////////////////////
for ($counter=0; $counter < $countermult; $counter++)
    {
     $dalightbefore = date('I', $untimemult);
     $untimemult += 604800;  ////this is one week
     $dalightafter = date('I', $untimemult);
     if($dalightbefore - $dalightafter == 1) {$untimemult += 3600;}
     if($dalightbefore - $dalightafter == -1) {$untimemult -=3600;}
     $timenextmult = strftime('%H:%M:%S', $untimemult);
     $daynextmult = strftime('%Y-%m-%d', $untimemult);

     $tempuserCL=$_SESSION['userCLid'];
     //echo $tempuserCL . "<BR/>";
     $querymult2="SELECT appt_id, date_format(day, '%a %b %e %Y'), time, Assmt, Agent_id, client_id, location, bill_to, lastaccess, auth_by_3rd 
              FROM $apptdb WHERE (Agent_id='$servpro_id' AND (day = '$daynextmult' 
              AND time = '$timenextmult')) 
              AND (client_id IS NULL OR client_id='$tempuserCL') AND (Assmt = $rep_appt_str)";
     $resultmult2=mysql_query($querymult2);
     if(!$resultmult2) error_message(sql_error());
     $query_datamult2 = mysql_fetch_array($resultmult2);
     $marker=1;
     $marker = mysql_num_rows($resultmult2);
     if(!$marker)                                
             {//////IF NO NEXT APPT
             echo "<TR WIDTH=\"100%\" BGCOLOR=\"DDDDFF\">";
             echo "<TD COLSPAN=\"7\" ALIGN=\"CENTER\">Next appointment unavailable. Other options below!</TD> </TR>";
             //echo "code here to get range of apointments FOR THE DAY";
             $tempuserCL=$_SESSION['userCLid'];
             $querymult3="SELECT appt_id, date_format(day, '%a %b %e %Y'), time, Assmt, Agent_id, client_id, location, bill_to, lastaccess, auth_by_3rd 
             FROM $apptdb WHERE (Agent_id='$servpro_id' AND day = '$daynextmult') 
             AND (client_id IS NULL OR client_id='$tempuserCL') AND (Assmt = $rep_appt_str) ORDER BY time";
             $resultmult3=mysql_query($querymult3);
             if(!$resultmult3) error_message(sql_error());
             $ifnoapptsthatday=mysql_num_rows($resultmult3);
             if($ifnoapptsthatday==0) 
                        {echo "<TR><TD COLSPAN=\"7\" ALIGN=\"CENTER\">";
                         echo "Ooops, no more appointments that day!</TD></TR>";
                        }
/////////NOW GO THRU AND DISPLAY ALL RESULTS FROM SUBSEARCH FOR DAY
             while($query_datamult3=mysql_fetch_array($resultmult3))
                       {
                       $appt_id=$query_datamult3["appt_id"];
                       $day=$query_datamult3["date_format(day, '%a %b %e %Y')"];
                       //$time=$query_datamult3["time"];
                       $Agent_id=$query_datamult3["Agent_id"];
                       $Assmt=$query_datamult3['Assmt'];
                       $client_id=$query_datamult3["client_id"];
                       $location=$query_datamult3["location"];
                       $bill_to=$query_datamult3["bill_to"];
                       $auth=$query_datamult3["auth_by_3rd"];
                       $pm=0;
                        list($timex4, $timex5, $timex6)=explode(":" , $query_datamult3["time"]);
                       $pm=0;
                       if ($timex4 > 12) 
                               {$pm=1; $timex4 -= 12;}
                       echo "<TR>";
                       echo "<TD WIDTH=\"20%\" ALIGN=\"CENTER\">";
                       echo $day;
                       echo "</TD>";
                       echo "<TD WIDTH=\"20%\" ALIGN=\"CENTER\">";
                       echo $timex4 . ":" . $timex5;
                       if($pm==1){echo " PM";} else {echo " AM";}
                       echo "<br/>" . service_list2($Assmt);
                       echo "</TD>";
                       echo "<TD WIDTH=\"20%\" ALIGN=\"CENTER\"><INPUT TYPE=RADIO
                       NAME=\"$appt_id\" VALUE=\"book\">book   <INPUT TYPE=RADIO 
                       NAME=\"$appt_id\" VALUE=\"cancel\">cancel</INPUT></TD>";
                       
                       echo "<TD WIDTH=\"18%\" ALIGN=\"CENTER\">";
                      if($client_id != "BLOCKED")
                         {
                         echo "<A HREF=\"lookupCL.html?CLlook=";
                         echo $client_id;
                         echo "&Prolook=";
                         echo $Agent_id;
                         echo "&CLprov=";
                         echo $_SESSION['userCLprov'];
                         echo "\">$client_id</A></TD>";
                         }
                     else
                        {
                        echo "<a href=\""; echo $block_info; echo "?appt_id="; echo $appt_id; echo "\">"; echo $client_id; echo "</a>";
                        echo "</TD>";
                        }
                       echo "<TD WIDTH=\"15%\" ALIGN=\"CENTER\">$bill_to</TD>";
                    echo "<TD WIDTH=\"5%\" ALIGN=\"CENTER\">";
                       if($auth==0){echo "DK";}
                       if($auth==1){echo "Y";}
                       if($auth==-1){echo "<FONT COLOR=\"RED\">N</FONT>";}
                   echo "<TD WIDTH=\"13%\" ALIGN=\"CENTER\">$location</TD>";
                       echo "</TR>";
                       }
             }
     else
             {///display results of the regular search
              //$query_datamult2=mysql_fetch_array($resultmult2);
              //if(empty($mult_array)) $mult_array = array($query_datamult2);
              // else
              // {
              //$mult_array[$counter] = $query_datamult2;
              //$stringu = implode(", ", $query_datamult2);
              $appt_id = $query_datamult2["appt_id"];
              $day = $query_datamult2["date_format(day, '%a %b %e %Y')"];
              //$time = $query_datamult2["time"];
              $Agent_id = $query_datamult2["Agent_id"];
              $Assmt=$query_datamult2['Assmt'];
              $client_id = $query_datamult2["client_id"];
              $location=$query_datamult2["location"];
              $bill_to=$query_datamult2["bill_to"];
              $auth=$query_datamult2["auth_by_3rd"];
              $lastaccess=$query_datamult2["lastaccess"];
              list($timex4, $timex5, $timex6)=explode(":" , $query_datamult2["time"]);
              $pm=0;
              if ($timex4 > 12) 
                      {$pm = 1; $timex4 -= 12;}
              echo "<TR BGCOLOR='FFFF77'>";
              echo "<TD ALIGN=\"CENTER\" WIDTH=\"20%\">";
              echo $day;
              echo "</TD>";
              echo "<TD ALIGN=\"CENTER\" WIDTH=\"20%\">";
              echo $timex4 . ":" . $timex5 . " ";
              if($pm == 1) {echo "PM";} else {echo "AM";}
              if($Assmt) {echo "<br/>" . service_list2($Assmt);}
              echo "</TD>";
              echo "<TD WIDTH=\"20%\" ALIGN=\"CENTER\"><INPUT TYPE=RADIO
              NAME=\"$appt_id\" VALUE=\"book\">book   <INPUT TYPE=RADIO
              NAME=\"$appt_id\" VALUE=\"cancel\">cancel</INPUT></TD>";
              echo "<TD WIDTH=\"18%\" ALIGN=\"CENTER\">";
                      if($client_id != "BLOCKED")
                         {
                         echo "<A HREF=\"lookupCL.html?CLlook=";
                         echo $client_id;
                         echo "&Prolook=";
                         echo $Agent_id;
                         echo "&CLprov=";
                         echo $_SESSION['userCLprov'];
                         echo "\">$client_id</A></TD>";
                         }
                     else
                        {
                        echo "<a href=\""; echo $block_info; echo "?appt_id="; echo $appt_id; echo "\">"; echo $client_id; echo "</a>";
                        echo "</TD>";
                        }
                       echo "<TD WIDTH=\"15%\" ALIGN=\"CENTER\">$bill_to</TD>";
                    echo "<TD WIDTH=\"5%\" ALIGN=\"CENTER\">";
                       if($auth==0){echo "DK";}
                       if($auth==1){echo "Y";}
                       if($auth==-1){echo "<FONT COLOR=\"RED\">N</FONT>";}
                   echo "<TD WIDTH=\"13%\" ALIGN=\"CENTER\">$location</TD>";
              echo "</TR>";
              }
    }
echo "<TR WIDTH=\"100%\" BGCOLOR=\"FF4422\">";
echo "<TD COLSPAN=\"7\" ALIGN=\"CENTER\">";
echo "<INPUT TYPE=\"SUBMIT\" VALUE=\"Book or cancel appts\">";
echo "<INPUT TYPE=\"RESET\" VALUE=\"Reset\">";
echo "</TD> </TR></TABLE>";
echo "</FORM>";
}
/////////////////END FUNCTION GET MULTIPLE APPOINTMENTS


//////////FUNCTION TO GET BOOKED ARRAY INTO DATABASE
function into_database($app_id)
     {
      global $todaytime2, $authdb;
      if($_SESSION['userProprov']=="BC"){$authdb="auth_by_3rd";}
     else if($_SESSION['userProprov']=="AB"){$authdb="auth_by_3rd_ab";}
     else if($_SESSION['userProprov']=="SK"){$authdb="auth_by_3rd_sk";}
     else if($_SESSION['userProprov']=="MB"){$authdb="auth_by_3rd_mb";}
     else if($_SESSION['userProprov']=="ON"){$authdb="auth_by_3rd_on";}
     else if($_SESSION['userProprov']=="QC"){$authdb="auth_by_3rd_qc";}
     else if($_SESSION['userProprov']=="NB"){$authdb="auth_by_3rd_nb";}
     else if($_SESSION['userProprov']=="NS"){$authdb="auth_by_3rd_ns";}
     else if($_SESSION['userProprov']=="PE"){$authdb="auth_by_3rd_pe";}
     else if($_SESSION['userProprov']=="NL"){$authdb="auth_by_3rd_nl";}
     else if($_SESSION['userProprov']=="YK"){$authdb="auth_by_3rd_yk";}
     else if($_SESSION['userProprov']=="NW"){$authdb="auth_by_3rd_nw";}
     else if($_SESSION['userProprov']=="NV"){$authdb="auth_by_3rd_nv";}
      $into_query="INSERT INTO $authdb VALUES(NULL, '$todaytime2', '$app_id', 0)";
      $into_var=mysql_query($into_query);
      if(!$into_var) error_message("Failed to put appt into auth database");
     }
//////////END FUNCTION TO GET BOOKED ARRAY INTO DATABASE

///////////GET THIRD EMAIL
///////////GET THIRD EMAIL
function get_third_email_from_client($client)
{
global $clients_db;
$link_id = db_connect();
$query = "SELECT CLthird_co1, third_party_email1, CLthird_co2, third_party_email2, CLthird_co3, third_party_email3, CLthird_co4, third_party_email4, CLthird_co5, third_party_email5 FROM $clients_db WHERE CL_id = '$client'";
$result = mysql_query($query);
if(!mysql_num_rows($result)) {echo "no rows returned at get third email";}
else 
  {
  $query_data = mysql_fetch_array($result);
  $CLthird_co1=$query_data['CLthird_co1'];
  $third_party_email1=$query_data['third_party_email1'];
  $CLthird_co2=$query_data['CLthird_co2'];
  $third_party_email2=$query_data['third_party_email2'];
  $CLthird_co3=$query_data['CLthird_co3'];
  $third_party_email3=$query_data['third_party_email3'];
  $CLthird_co4=$query_data['CLthird_co4'];
  $third_party_email4=$query_data['third_party_email4'];
  $CLthird_co5=$query_data['CLthird_co5'];
  $third_party_email5=$query_data['third_party_email5'];
  $tempcopro=$_SESSION['CLthird_co_pro'];
  if($CLthird_co1==$tempcopro){$third_email=$third_party_email1;}
  if($CLthird_co2==$tempcopro){$third_email=$third_party_email2;}
  if($CLthird_co3==$tempcopro){$third_email=$third_party_email3;}
  if($CLthird_co4==$tempcopro){$third_email=$third_party_email4;}
  if($CLthird_co5==$tempcopro){$third_email=$third_party_email5;}
  return $third_email;
  }
}////END FUNC GET THIRD EMAIL
///////////AUTH SEND EMAIL
function auth_send_email($to_hold_booked_auth, $client)
{
global $todaytime2, $pageforauth, $clients_db, $authdb;
$to_hold_3_email=get_third_email_from_client($client);
$to_hold_3_email=trim($to_hold_3_email, "\0");
$secure_mail_subject = "Authorization requested";
$secure_mail_body = "--01fedcb871d3f012e43680250ba5ca3f\n";
        $secure_mail_body .= "Content-type:text/html; charset=\"iso-8859-1\"\n";
        $secure_mail_body .= "Content-transfer-encoding:7bit\n\n";
        $secure_mail_body .= "<!DOCTYPE HTML PUBLIC \"-//W3C//DTD HTML 4.0 Transitional//EN\">\n";

        $secure_mail_body .= "<html><head></head><body bgcolor=\"#9999AA\">\n";
$secure_mail_body .= "</p><p><center><a href=\"http://www.zappointments.com\">";
        $secure_mail_body .= "<img src=\"http://www.zappointments.com/PSYIMAGES/zaphome.gif89a\"></a></center></p>";
$secure_mail_body .= "Authorization has been requested for an appointments or appointments for claim or reference number: ";
$claimnogot=get_claim_from_client2($client);
if(empty($claimnogot)) {$secure_mail_body .= "not entered";}
else {$secure_mail_body .= $claimnogot;}
$secure_mail_body .= ". Click on the link below to view and authorize sessions \r\n";
$secure_mail_body .= "or to deny authorization:\r\n";
$secure_mail_body .= "<center><p><A HREF=\"";
$secure_mail_body .= $pageforauth . "?";
$secure_mail_body .= "auth_key=";
$todaytime2=trim($todaytime2);
$secure_mail_body .= $todaytime2;
$secure_mail_body .= "&provholder=";
$secure_mail_body .= $_SESSION['userProprov'];
$secure_mail_body .= "\">";
$secure_mail_body .= "Reply to authorization request here";
$secure_mail_body .= "</A></center><br/>";

        $secure_mail_body .= "</body></html>";
        $secure_mail_body .= "\n\n--01fedcb871d3f012e43680250ba5ca3f--\n";
$secure_mail_header = "From: admin@zappointments.com\n";
        $secure_mail_header .= "Reply-to: admin@zappointments.com\n";
        $secure_mail_header .= "MIME-Version: 1.0\n";
        $secure_mail_header .= "Content-type: multipart/mixed";
        $secure_mail_header .= ";";
        $secure_mail_header .= " ";
        $secure_mail_header .= "boundary=\"01fedcb871d3f012e43680250ba5ca3f\"\n";
        $secure_mail_header .= "Content-type:text/html; charset=\"iso-8859-1\"\n";
        $secure_mail_header .= "Content-transfer-encoding:7bit\n\n";

array_walk($to_hold_booked_auth, 'into_database');
reset($to_hold_booked_appts);
mail($to_hold_3_email, $secure_mail_subject, $secure_mail_body, $secure_mail_header);

}////END AUTH SEND EMAIL


//////function show gif
function show_gif()
{
global $CL_login, $CL_logout_pro, $third_login, $logout_script, $Pro_login, $root_page, $CL_logout_pro_mult;
echo "<TABLE WIDTH=\"100%\" CELLPADDING=\"0\" BORDER=\"0\" CELLSPACING=\"0\"";
echo " BGCOLOR=\"000000\">";
echo "<TR>";
echo "<TD ALIGN=\"CENTER\" WIDTH=\"35%\">";
echo "<A HREF=\"";
echo $root_page;
echo "\">";
echo "<IMG SRC=\"./PSYIMAGES/zaphome.gif89a\" BORDER=\"0\">";
echo "</A>";
echo "</TD>";
echo "<TD ALIGN=\"CENTER\" WIDTH=\"20%\">";
if (!empty($_SESSION['userProid']))
       {echo "<A HREF=\"$logout_script\">";
        echo "<IMG SRC=\"./PSYIMAGES/OnProani.gif\" BORDER=\"0\"></A>";
       }
else {echo "<A HREF=\"$Pro_login\">";
        echo "<IMG SRC=\"./PSYIMAGES/OffProani.gif\" BORDER=\"0\"></A>"; 
       }
echo "</TD>";

echo "<TD ALIGN=\"CENTER\" WIDTH=\"35%\">";
echo "<FONT FACE=\"VERDANA\" COLOR=\"RED\" SIZE=\"1\">CURRENT CLIENT:<BR/>";
echo $_SESSION['userCLid'];
echo "<BR/>" . $_SESSION['CLclaim_no_selected'];
echo "</FONT>";

echo "<TD ALIGN=\"CENTER\" WIDTH=\"20%\">";
if (!empty($_SESSION['userCLid']))
       {
        echo "<A HREF=\"";
        echo $CL_logout_pro_mult;
        echo "?navProid=";
echo $_SESSION['userProid'];
echo "&first_appt=";
echo $_GET['first_appt'];
echo "&no_appts=";
echo $_GET['no_appts'];
        echo "\">";
        echo "<IMG SRC=\"./PSYIMAGES/OnCLani.gif\" BORDER=\"0\"></A>";
       }
else {echo "<A HREF=\"$CL_login\">";
        echo "<IMG SRC=\"./PSYIMAGES/OffCLani.gif\" BORDER=\"0\"></A>"; 
       }
echo "</TD>";

echo "</TD>";
//echo "<TD ALIGN=\"CENTER\" WIDTH=\"15%\">";
//echo "<IMG SRC=\"./PSYIMAGES/AC123.jpg\">";
//echo "</TD>";
echo "</TD>";
echo "<TD VALIGN=\"CENTER\">";
echo "<A HREF=\"$logout_script\"><IMG SRC=\"./PSYIMAGES/logout3.jpg\" BORDER=\"0\"></A>";
echo "</TD>";
echo "</TR>";
echo "</TABLE>";

}

function table_head()
{
?>
         <DIV ALIGN="CENTER">
          <TABLE BORDER="1" WIDTH="100%" CELLPADDING="0">
          <TR>
              <TH WIDTH="17%" NOWRAP>
              day
              </TH>

              <TH WIDTH="10%" NOWRAP>
              time
              </TH>

              <TH WIDTH="22%" NOWRAP>
              book/cancel/block
              </TH>

              <TH WIDTH="18%" NOWRAP>
              client
              </TH>

              <TH WIDTH="15%" NOWRAP>
              bill to
              </TH>
              
               <TH WIDTH="5%" NOWRAP>
              auth?
              </TH>

              <TH WIDTH="13%" NOWRAP>
              location
              </TH>
          </TR>
<?php
}


////////function to get email addresses for third party or client or pro
function get_userid_email($email, $case_id, $the_id, $the_db_name)
{
$func_query = "SELECT " . $email . " from " . $the_db_name . " where " . $case_id . " = '$the_id'";
$result_get_query=mysql_query($func_query);
$result_get=mysql_result($result_get_query, 0, 0);
if(empty($result_get)) echo ".";
return $result_get;
}
////END function get_userid_email

//////////////////FUNCTION TO GET APPT DATE AND TIME FROM APPT_ID
function get_datime_fr_appt_id($appt_id)
{
global $apptdb;
$datime_result=mysql_query("SELECT day, time from $apptdb where appt_id='$appt_id'");
$datime1=mysql_result($datime_result, 0, 0); 
$datime2=mysql_result($datime_result, 0, 1);
$translation= array(":00:00" => ":00", ":30:00" => ":30", ":15:00" => ":15");
$datime3=strtr($datime2,$translation);
$datime=$datime1 . " " . $datime3;
return $datime;
}//////////////////END FUNC TO GET APPT DATE AND TIME FROM APPT_ID
//////////////////FUNCTION TO EMAIL EVERYBODY
function email_everybody($to_hold_email, $to_hold_client_email, $to_hold_booked, $to_hold_canceled, $to_hold_blocked, $reply_to)
{
//global $email_addresses, $booked, $canceled;
$s_email_addresses = implode(",", $to_hold_email);
$s_booked = implode(", ", $to_hold_booked);
$s_canceled = implode(", ", $to_hold_canceled);
$s_blocked = implode(", ", $to_hold_blocked);
$s_email_message_body = "This is a message from zappointments.com.\n";
if($s_booked){$s_email_message_body .= "The following appts have been booked: ";
                      $s_email_message_body .= $s_booked;
                      $s_email_message_body .=  ".\n";}
if($s_canceled){$s_email_message_body .= "The following appts have been canceled: " . $s_canceled . ".\n";}
if($s_blocked){$s_email_message_body .= "The following appts have been blocked: ";
                      $s_email_message_body .= $s_blocked;
                      $s_email_message_body .=  ".\n";}
$s_email_message_body .= "You may wish to check the www.zappointments.com website ";
$s_email_message_body .= "for your updated schedule.\n";
$s_email_subject="Changed appts";
//echo "EMAIL ADDRESSES: " . $s_email_addresses;
//echo $s_email_message_body;
mail($s_email_addresses, $s_email_subject, $s_email_message_body, $reply_to);
mail($to_hold_client_email, $s_email_subject, $s_email_message_body, $reply_to);
}
//////////END FUNCTION TO EMAIL EVERYBODY
//////////body//////BODY////BODY/////BODY
session_start();
//session_register("user3id1");
//session_register("userCLid");
//session_register("userProid");
//session_register("pro_enter");
//$_SESSION['userProid']='zsaper';
//autoreload();
echo "<HEAD><META name=\"robots\" content=\"noindex,nofollow\">";
echo"</HEAD>";

echo "<META HTTP-EQUIV=\"Refresh\"";
echo " CONTENT=\"6000; URL=https://www.zappointments.com/connect-pro-mult.html";

echo "?navProid=";
echo $_SESSION['userProid'];
echo "&first_appt=";
echo $_GET['first_appt'];
echo "&no_appts=";
echo $_GET['no_appts'];
echo "\">";
   echo "<HTML><BODY BACKGROUND=\"./Flow 2.jpg\">";

if($_SESSION['userProprov']=="BC"){$servProdb="service_providers";$apptdb="appointments";}
else if($_SESSION['userProprov']=="AB"){$servProdb="service_providers_ab";$apptdb="appointments_ab";$authdb="auth_by_3rd";}
else if($_SESSION['userProprov']=="SK"){$servProdb="service_providers_sk";$apptdb="appointments_sk";$authdb="auth_by_3rd_sk";}
else if($_SESSION['userProprov']=="MB"){$servProdb="service_providers_mb";$apptdb="appointments_mb";$authdb="auth_by_3rd_mb";}
else if($_SESSION['userProprov']=="ON"){$servProdb="service_providers_on";$apptdb="appointments_on";$authdb="auth_by_3rd_on";}
else if($_SESSION['userProprov']=="QC"){$servProdb="service_providers_qc";$apptdb="appointments_qc";$authdb="auth_by_3rd_qc";}
else if($_SESSION['userProprov']=="NS"){$servProdb="service_providers_ns";$apptdb="appointments_ns";$authdb="auth_by_3rd_ns";}
else if($_SESSION['userProprov']=="NB"){$servProdb="service_providers_nb";$apptdb="appointments_nb";$authdb="auth_by_3rd_nb";}
else if($_SESSION['userProprov']=="PE"){$servProdb="service_providers_pe";$apptdb="appointments_pe";$authdb="auth_by_3rd_pe";}
else if($_SESSION['userProprov']=="NL"){$servProdb="service_providers_nl";$apptdb="appointments_nl";$authdb="auth_by_3rd_nl";}
else if($_SESSION['userProprov']=="YK"){$servProdb="service_providers_yk";$apptdb="appointments_yk";$authdb="auth_by_3rd_yk";}
else if($_SESSION['userProprov']=="NW"){$servProdb="service_providers_nw";$apptdb="appointments_nw";$authdb="auth_by_3rd_nw";}
else if($_SESSION['userProprov']=="NV"){$servProdb="service_providers_nv";$apptdb="appointments_nv";$authdb="auth_by_3rd_nv";}

$todaytime=time();

global $Pro_login, $add_appointment;

if($_POST['SUBMIT_CLIENT']=='1')
    {
   $userCLprov=$_POST['userCLprov'];
if($userCLprov=="BC"){$clients_db = "clients";$permdb="cl_perm";}
  else if($userCLprov=="AB"){$clients_db = "clients_ab";$permdb="cl_perm_ab";}
  else if($userCLprov=="SK"){$clients_db = "clients_sk";$permdb="cl_perm_sk";}
  else if($userCLprov=="MB"){$clients_db = "clients_mb";$permdb="cl_perm_mb";}
  else if($userCLprov=="ON"){$clients_db = "clients_on";$permdb="cl_perm_on";}
  else if($userCLprov=="QC"){$clients_db = "clients_qc";$permdb="cl_perm_qc";}
  else if($userCLprov=="NB"){$clients_db = "clients_nb";$permdb="cl_perm_nb";}
  else if($userCLprov=="NS"){$clients_db = "clients_ns";$permdb="cl_perm_ns";}
  else if($userCLprov=="PE"){$clients_db = "clients_pe";$permdb="cl_perm_pe";}
  else if($userCLprov=="NL"){$clients_db = "clients_nl";$permdb="cl_perm_nl";}
  else if($userCLprov=="YK"){$clients_db = "clients_yk";$permdb="cl_perm_yk";}
  else if($userCLprov=="NW"){$clients_db = "clients_nw";$permdb="cl_perm_nw";}
  else if($userCLprov=="NV"){$clients_db = "clients_nv";$permdb="cl_perm_nv";}
  else {$clients_db = "clients";$permdb="cl_perm";}
     $name_in_box=$_POST['client_username'];
     if($name_in_box=='')
        {
         unset($_SESSION['userCLid']);
         unset($_SESSION['CLthird_co_pro']);
         //unset($_SESSION['userCLprov']);
        }
     else
        {
         register_client_username($name_in_box, $clients_db, $userCLprov, $permdb);
         $_SESSION['CLthird_co_pro']=$_POST['CLthird_co'];
         $_SESSION['CLclaim_no_selected']=$_POST['CLclaim_no_selected'];
         $_SESSION['CLclaim_no']=get_claim_from_client($name_in_box);
         
         }
      }
else if($_POST)
 { 
  $userCLprov=$_SESSION['userCLprov'];
if($userCLprov=="BC"){$clients_db = "clients";}
  else if($userCLprov=="AB"){$clients_db = "clients_ab";}
  else if($userCLprov=="SK"){$clients_db = "clients_sk";}
  else if($userCLprov=="MB"){$clients_db = "clients_mb";}
  else if($userCLprov=="ON"){$clients_db = "clients_on";}
  else if($userCLprov=="QC"){$clients_db = "clients_qc";}
  else if($userCLprov=="NB"){$clients_db = "clients_nb";}
  else if($userCLprov=="NS"){$clients_db = "clients_ns";}
  else if($userCLprov=="PE"){$clients_db = "clients_pe";}
  else if($userCLprov=="NL"){$clients_db = "clients_nl";}
  else if($userCLprov=="YK"){$clients_db = "clients_yk";}
  else if($userCLprov=="NW"){$clients_db = "clients_nw";}
  else if($userCLprov=="NV"){$clients_db = "clients_nv";}
         $link_id = db_connect();
         if(!$link_id) die(sql_error());
          

 $dbnom=$servProdb;
 $email="Proemail";
 $case_id="Pro_id";
 $to_hold_email_addresses[] = get_userid_email($email, $case_id, $_SESSION['userProid'], $dbnom);
 $to_hold_email_addresses[] = "admin@zappointments.com";

   while (list($lvar, $lvalue) = each($_POST)) 
     { 
////////BOOK////BOOK/////BOOK

       if ($lvalue=="book")
           { 
            if(!$_SESSION['userCLid'] && $timeround==0)
              {
               
               echo "<BR/>If the client you want to book is not yet registered, register them ";
               echo "<A HREF=" . $registerCL_script . ">here</A>.";
               
              $stop_email = 1;
              }
            else if($_SESSION['userCLid'] && $timeround==0)
              {
               $dbnom=$clients_db;
                $email="CLemail";
                $case_id="CL_id";
                $to_hold_client_email = get_userid_email($email, $case_id, $_SESSION['userCLid'], $dbnom);
                $temppro_enter=$_SESSION['userCLid'];
                
                $user3id_3=$_SESSION['CLthird_co_pro'];
                if(empty($user3id_3)){$user3id_3='SELF';}
                
                
               $bookquery="UPDATE $apptdb SET client_id='$temppro_enter', bill_to='$user3id_3',CLprov='$userCLprov' WHERE appt_id='$lvar' and client_id IS NULL";
               $bookresult=mysql_query($bookquery);
               $numrowsresult=mysql_affected_rows($link_id);
               if(!$numrowsresult) 
                      {error_message("Appt already booked. Reload page.");
                      }
               if($user3id_3 != 'SELF')
                      {
                      $to_hold_booked_auth[]=$lvar;
                      }
               
               }
            else if($_SESSION['userCLid'] && $timeround != 0)
              {
               $temppro_enter=$_SESSION['userCLid'];
               $bookquery="UPDATE $apptdb SET client_id='$temppro_enter', bill_to='$user3id_3',CLprov='$userCLprov' WHERE appt_id='$lvar' and client_id IS NULL";
               $bookresult=mysql_query($bookquery);
               $numrowsresult=mysql_affected_rows($link_id);
               if(!$numrowsresult) 
                      {error_message("Appt already booked. Reload page.");
                      }
                if($user3id_3 != 'SELF')
                      {
                      $to_hold_booked_auth[]=$lvar;
                      }
               }
            else {}
            $timeround=1;
            $to_hold_booked_appts[]=get_datime_fr_appt_id($lvar);
           }

//////CANCEL/////CANCEL////CANCEL
       else if ($lvalue=="cancel")
           {$cquery1="SELECT client_id, bill_to, CLprov FROM $apptdb WHERE appt_id='$lvar'";///Here should get payor, put in ary payor-ar(clt)
            $clresult1=mysql_query($cquery1);
            if(!$clresult1) error_message(sql_error()); 
            $clresult2=mysql_fetch_array($clresult1);
            if($clresult2)
            {
            $payor=$clresult2['bill_to']; 
            $province=$clresult2['CLprov'];
            if (!$to_hold_canceled_array) ///initialize array
                           {
                            $to_hold_canceled_array = array ($lvar => $clresult2["client_id"]);//prob here
                           }
            else
                           {
                           $to_hold_canceled_array[$lvar]=$clresult2["client_id"];//appt-client pairs
                           }
             if(!empty($payor))
                          {
                          $client_id=$clresult2['client_id'];
                          $payorclaim=get_claim_from_payor_client($payor, $client_id, $province);
                          $payoremail=get_third_email_from_payor_client($payor, $client_id, $province);
                           if(!$to_hold_payor_client)///initialize payor-client multi array
                                   {
                                   $to_hold_payor_client= array ($payoremail => array($payorclaim));
                                    }
                           else  {
                                    $to_hold_payor_client2= array ($payoremail => array($payorclaim));
                                    $to_hold_payor_client = array_merge_recursive($to_hold_payor_client,$to_hold_payor_client2);
                                    }
                          }
             }
            
            }


/////BLOCK/////BLOCK////BLOCK
       else if ($lvalue=="block")
            {
            $blockquery="UPDATE $apptdb SET client_id='BLOCKED', bill_to=NULL,CLprov=NULL WHERE appt_id='$lvar' and client_id IS NULL";
            $blockresult=mysql_query($blockquery);
            if(!$blockresult) error_message(sql_error()); 
            $to_hold_blocked_appts[]=get_datime_fr_appt_id($lvar);
            }
       else
            {
            }
      }///end of while 
asort($to_hold_canceled_array);//appt-client pairs sorted by client
if ($to_hold_canceled_array)
     {
      $client_now = "nonsuch";
      foreach ($to_hold_canceled_array as $apptc => $eclient)
            {
             if($client_now == "nonsuch")
                    {
                     $clientcancelarray = array ($eclient => array ($apptc));
                     $client_now = $eclient;
                     }
             else if ($eclient != $client_now)
                     {
                      $clientcancelarray[$eclient] = array ($apptc);
                      $client_now = $eclient; 
                     }
              else {
                      array_push ($clientcancelarray[$eclient], $apptc);
                     }
              }//end of foreach to_hold_canceled
       foreach ($clientcancelarray as $clientname => $arrayofappts)
              {
               $dbnom=$clients_db;
               $email="CLemail";
               $case_id="CL_id";
               $email_body2 = "This is a message from zappointments.com. ";
               $email_body2 .= "The following appts have been canceled: \n";
               $goRound=0;
               foreach($arrayofappts as $key => $valueappt)
                    {
                    if($goRound==0)
                        {
                          if ($clientname != "BLOCKED")
                               {$clientemailgot=get_userid_email($email, $case_id, $clientname, $dbnom);
                               if(!empty($clientemailgot))
                                     {$to_hold_client_email2 = $clientemailgot;}
                              else {$equery="SELECT CLprov from $apptdb WHERE appt_id='$valueappt'";
                                 $eresult=mysql_query($equery);
                                 $email_prov=mysql_result($eresult, 0, 0);
                                 if($email_prov=="BC"){$dbnom_e="clients";}
                                 else if($email_prov=="AB"){$dbnom_e="clients_ab";}
                                 else if($email_prov=="SK"){$dbnom_e="clients_sk";}
                                 else if($email_prov=="MB"){$dbnom_e="clients_mb";}
                                 else if($email_prov=="ON"){$dbnom_e="clients_on";}
                                 else if($email_prov=="QC"){$dbnom_e="clients_qc";}
                                 else if($email_prov=="NB"){$dbnom_e="clients_nb";}
                                 else if($email_prov=="NS"){$dbnom_e="clients_ns";}
                                 else if($email_prov=="PE"){$dbnom_e="clients_pe";}
                                 else if($email_prov=="NL"){$dbnom_e="clients_nl";}
                                 else if($email_prov=="YK"){$dbnom_e="clients_yk";}
                                 else if($email_prov=="NW"){$dbnom_e="clients_nw";}
                                 else if($email_prov=="NV"){$dbnom_e="clients_nv";}
                                 else {}
                                 $clientemailgot2=get_userid_email($email, $case_id, $clientname, $dbnom_e); 
                                 if(!empty($clientemailgot2)){
                                                                              $to_hold_client_email2 = $clientemailgot2;}
                                     }//endof else
                       $goRound=1;
                        
                     
                           }///end of if not blocked get email
                    
                    }////end of if go round 0 get email
                $email_body2 .= get_datime_fr_appt_id($valueappt);
                $email_body2 .= " \n";
                
                $cancelquery="UPDATE $apptdb SET client_id=NULL, bill_to=NULL, auth_by_3rd=0, CLprov=NULL WHERE appt_id='$valueappt'";
               $cancelresult=mysql_query($cancelquery);
               if(!$cancelresult) error_message(sql_error()); 
            
               }///end of foreach
               $email_body2 .= "\n You may want to check www.zappointments.com for updated appts.";
               $dbnom=$servProdb;////service provider will be set by GET HTTP or login
               $email="Proemail";
               $case_id="Pro_id";
               $email_addresses2[] = get_userid_email($email, $case_id, $_SESSION['userProid'], $dbnom);
               $email_addresses2[] = "admin@zappointments.com";
               $reply_to_fields2="From: admin@zappointments.com";
               $email_addresses2i = implode(",", $email_addresses2);
               $email_subject2 = "canceled appointment(s)";
               
               
               $anythingdone=mysql_affected_rows($link_id);
               if($anythingdone){mail($email_addresses2i, $email_subject2, $email_body2, $reply_to_fields2); mail($to_hold_client_email2, $email_subject2, $email_body2, $reply_to_fields2);}
               $email_addresses2 = array("");
              }///end of foreach clientcancelarray
     }//end of processing to_hold_canceled_array
$reply_to_fields="From: admin@zappointments.com";///\nReply-to: admin@zappointments.com";
$anythingdone=mysql_affected_rows($link_id);
if(!$email_addresses2 && !$stop_email)
      {if($anythingdone)
         {
       email_everybody($to_hold_email_addresses, $to_hold_client_email, $to_hold_booked_appts, $to_hold_canceled_appts, $to_hold_blocked_appts, $reply_to_fields);
       if(!empty($to_hold_booked_auth))
            {
            auth_send_email($to_hold_booked_auth, $temppro_enter);
            } 
         }
      }
else
      {
      }
 if(!empty($to_hold_payor_client))
       {
       while(list($payoremailary) = each($to_hold_payor_client))
                  {
                  $clientwas='nonesuchclient';$no_appts_for_3_email=0;
                  while(list(,$eaclmno) = each($to_hold_payor_client[$payoremailary]))
                            {$no_appts_for_3_email++; 
                            if($clientwas == 'nonesuchclient'){$gotthirdemail=$payoremailary; $clientwas=$eaclmno;}
                            else if($eaclmno != $clientwas)
                               {
                               $eProid=$_SESSION['userProid'];
                               $querygetSP="SELECT Proftitle, Profname, Prolname from $servProdb WHERE Pro_id='$eProid'";
                               $resultgetSP=mysql_query($querygetSP);
                               $Pronameary=mysql_fetch_array($resultgetSP);
                               $Profullname = $Pronameary['Proftitle'] . " " . $Pronameary['Profname'] . " " . $Pronameary['Prolname'];
                               $clientclaimnumber=$eaclmno;
                               $bodyof3mail = $Profullname . " has canceled " . $no_appts_for_3_email . " appointment(s) for a client identified by case/claim number " . $clientclaimnumber;
                                $subj_field="Service Provider canceled appts"; 
                                mail($gotthirdemail, $subj_field, $bodyof3mail, $reply_to_fields2);
                                $gotthirdemail=$payoremailary;
                                $no_appts_for_3_email=1;
                                }
                            else {$clientclaimnumber=$eaclmno;}
                            }
                   $eProid=$_SESSION['userProid'];
                    $querygetSP="SELECT Proftitle, Profname, Prolname from $servProdb WHERE Pro_id='$eProid'";
                    $resultgetSP=mysql_query($querygetSP); if(!$resultgetSP) echo "no result got from SP";
                     $Pronameary=mysql_fetch_array($resultgetSP);
                    $Profullname = $Pronameary['Proftitle'] . " " . $Pronameary['Profname'] . " " . $Pronameary['Prolname'];
                    
                    $bodyof3mail = $Profullname . " has canceled " . $no_appts_for_3_email . " appointment(s) for a client identified by case/claim number " . $clientclaimnumber; 
                    $subj_field="Service Provider canceled appts";
                     mail($gotthirdemail, $subj_field, $bodyof3mail, $reply_to_fields2);
                  }
       }
    $_SESSION['pro_enter2']=$_SESSION['userCLid'];
   //$_SESSION['userCLid']="";///empty pro_enter_cl_id variable after the http_post processed
   autoreload();
   $stop_email = 0;
   $timeround=0;
   }

// }
if(isset($_SESSION['userProid']))
{

show_gif();

echo "<P ALIGN=\"CENTER\"><FONT SIZE=1>Appointment booking method Patent Pending</FONT>";
echo "<table width=\"80%\"><tr><td><FONT SIZE=2><A HREF=\"$add_appointment\">Add appointments one at a time</A></FONT></td>";
echo "<td><FONT SIZE=2><A HREF=\"$add_weekly_appointments\">Set your weekly schedule</A></FONT></td>";
echo "<td><font face=\"helvetica\" size=2><a href=todolist.html>Your To Do List</a></font></td></table>";
input_client_username();
get_mult($_SESSION['userProid'], $_GET['no_appts'], $_GET['first_appt']);
}

else
{
echo "<BR/>There is no service provider logged in. If you are a service provider, log in <A HREF=\"";
echo $Pro_login;
echo "\">here</A>";
}
echo "<P ALIGN=\"CENTER\"><FONT SIZE=1>Appointment booking method Patent Pending</FONT></P>";

?>
</BODY> </HTML>