<?php

//header("Expires: " . gmdate("D, d M Y H:i:s") . " GMT");
//header("Cache-Control: no-cache, must-revalidate");
header("Pragma: no-cache");
header("Cache-Control: post-check=0, pre-check=0");

include "../phppsycorps/common_db.inc";
include "../phppsycorps/servlist2.inc";
include "../phppsycorps/servlist.inc";
error_reporting(0);
$todaytime=time();
$todaytime2=strftime('%Y%m%d%H%M%S', $todaytime);
$todaytime2 += 12345678901234;
global $PHP_SELF;
///////////functions////////////////
function get_Proname($provider)
{
global $dbhost, $servProdb;
$link_id = db_connect();
if(!link_id) die(sql_error());
$nameQuery="SELECT Proftitle, Profname, Prolname from $servProdb WHERE Pro_id='$provider'";
$nameResult=mysql_query($nameQuery);
$nameNow=mysql_fetch_array($nameResult);
$Proftitle=$nameNow['Proftitle'];
$Profname=$nameNow['Profname'];
$Prolname=$nameNow['Prolname'];
if(!empty($Proftitle)) {$Fullname=$Proftitle; $Fullname .= " "; $Fullname .= $Profname;} else {$Fullname=$Profname;}
 $Fullname .= " ";
$Fullname .= $Prolname;
return $Fullname;
}

function get_3_co_from_3_id($third_id)
{if(!$link_id){$link_id=db_connect();}
$third_coQ="SELECT third_co from thirdparty WHERE third_id='$third_id'";
$third_coR=mysql_query($third_coQ);
$third_work_co=mysql_result($third_coR, 0);
return $third_work_co;
}
function add_perm($link_id, $permdb)
{
if(empty($permdb)){$permdb="cl_perm";}
$navPro=$_GET['navProid'];
$navCL=$_SESSION['userCLid'];
if(!$link_id)
    {
    $link_id = db_connect();
    if(!link_id) die(sql_error());
    }
 $checkpermQ="SELECT * FROM $permdb WHERE CL_id='$navCL' AND Pro_id='$navPro'";
 $checkpermR=mysql_query($checkpermQ);
 $num_rows=mysql_num_rows($checkpermR);
 if($num_rows==0)
     {
     $insertpermQ="INSERT INTO $permdb (perm_id, CL_id, Pro_id) VALUES(NULL,'$navCL','$navPro')";
     $insertpermR=mysql_query($insertpermQ);
     if(!$insertpermR) error_message("$checkpermQ");
     }
}
function whatTypeCo($coBooker)
{
global $dbhost;
if((empty($coBooker)) || ($coBooker=='none')){return 0;}
else 
   {
    $link_id = db_connect();
   if(!link_id) die(sql_error());
   $wtQuery="SELECT co_type from thirdparty WHERE ((third_co='$coBooker') || (third_id='$coBooker'))";
   $wtResult=mysql_query($wtQuery);
   $wtArray=mysql_fetch_array($wtResult);
   $wt_co_type=$wtArray['co_type'];
   return $wt_co_type;
   }
}
function up_ratings($provider, $noBooked, $typeBooked)
{
global $dbhost, $servProdb;
$link_id = db_connect();
if(!link_id) die(sql_error());
$ratingsQuery="SELECT rat_unsp, rat_insur, rat_law, rat_govt, rat_mil from $servProdb WHERE Pro_id='$provider'";
$ratingsResult=mysql_query($ratingsQuery);
$ratingsNow=mysql_fetch_array($ratingsResult);
$rat_unsp=$ratingsNow['rat_unsp'];
$rat_insur=$ratingsNow['rat_insur'];
$rat_law=$ratingsNow['rat_law'];
$rat_govt=$ratingsNow['rat_govt'];
$rat_mil=$ratingsNow['rat_mil'];
$rat_rehab=$ratingsNow['rat_rehab'];
if($typeBooked==0){$rat_unsp += $noBooked; $rat2Query="UPDATE $servProdb set rat_unsp=$rat_unsp WHERE Pro_id='$provider'";}
if($typeBooked==1){$rat_insur += $noBooked; $rat2Query="UPDATE $servProdb set rat_insur=$rat_insur WHERE Pro_id='$provider'";}
if($typeBooked==2){$rat_law += $noBooked; $rat2Query="UPDATE $servProdb set rat_law=$rat_law WHERE Pro_id='$provider'";}
if($typeBooked==3){$rat_govt += $noBooked; $rat2Query="UPDATE $servProdb set rat_govt=$rat_govt WHERE Pro_id='$provider'";}
if($typeBooked==4){$rat_mil += $noBooked; $rat2Query="UPDATE $servProdb set rat_mil=$rat_mil WHERE Pro_id='$provider'";}
if($typeBooked==5){$rat_rehab += $noBooked; $rat2Query="UPDATE $servProdb set rat_rehab=$rat_rehab WHERE Pro_id='$provider'";}
$rat2Result=mysql_query($rat2Query);
if(!$rat2Result){error_message(sql_error());}
}
function down_ratings($provider, $noCanceled, $typeBooked)
{
global $dbhost, $servProdb;
$link_id = db_connect();
if(!link_id) die(sql_error());
$ratingsQuery="SELECT rat_unsp, rat_insur, rat_law, rat_govt, rat_mil, rat_rehab from $servProdb WHERE Pro_id='$provider'";
$ratingsResult=mysql_query($ratingsQuery);
$ratingsNow=mysql_fetch_array($ratingsResult);
$rat_unsp=$ratingsNow['rat_unsp'];
$rat_insur=$ratingsNow['rat_insur'];
$rat_law=$ratingsNow['rat_law'];
$rat_govt=$ratingsNow['rat_govt'];
$rat_mil=$ratingsNow['rat_mil'];
$rat_rehab=$ratingsNow['rat_rehab'];

if($typeBooked==0){if($rat_unsp > $noCanceled){$rat_unsp -= $noCanceled;} $rat2Query="UPDATE $servProdb set rat_unsp=$rat_unsp WHERE Pro_id='$provider'";}
if($typeBooked==1){if($rat_insur > $noCanceled){$rat_insur -= $noCanceled;} $rat2Query="UPDATE $servProdb set rat_insur=$rat_insur WHERE Pro_id='$provider'";}
if($typeBooked==2){if($rat_law > $noCanceled){$rat_law -= $noCanceled;} $rat2Query="UPDATE $servProdb set rat_law=$rat_law WHERE Pro_id='$provider'";}
if($typeBooked==3){if($rat_govt > $noCanceled){$rat_govt -= $noCanceled;} $rat2Query="UPDATE $servProdb set rat_govt=$rat_govt WHERE Pro_id='$provider'";}
if($typeBooked==4){if($rat_mil > $noCanceled){$rat_mil -= $noCanceled;} $rat2Query="UPDATE $servProdb set rat_mil=$rat_mil WHERE Pro_id='$provider'";}
if($typeBooked==5){if($rat_rehab > $noCanceled){$rat_rehab -= $noCanceled;} $rat2Query="UPDATE $servProdb set rat_rehab=$rat_rehab WHERE Pro_id='$provider'";}
$rat2Result=mysql_query($rat2Query);
if(!$rat2Result){error_message(sql_error());}
}
//////function show gif
function show_gif()
{
global $CL_login, $CL_logout, $third_login, $third_logout, $logout_script, $root_page;
echo "<TABLE WIDTH=\"100%\" CELLPADDING=\"0\" BORDER=\"0\" CELLSPACING=\"0\"";
echo " BGCOLOR=\"000000\">";
echo "<TR>";
echo "<TD ALIGN=\"CENTER\" WIDTH=\"35%\">";
echo "<A HREF=\"" . $root_page . "\">";
echo "<IMG SRC=\"./PSYIMAGES/zaphome.gif89a\" BORDER=\"0\">";
echo "</A>";
echo "</TD>";
echo "<TD ALIGN=\"CENTER\" WIDTH=\"20%\">";
if (!empty($_SESSION['user3id1']))
       {echo "<A HREF=\"$third_logout";
        echo "?navProid=";
        echo $_GET['navProid'];
        echo "&beginmark=";
        echo $_GET['beginmark'];
        echo "&cityholder=";
        echo $_GET['cityholder'];
        echo "&provholder=";
        echo $_GET['provholder'];
echo "&nbk="; echo $_GET['nbk'];
echo "&ncl="; echo $_GET['ncl'];
        echo "\">";
        echo "<IMG SRC=\"./PSYIMAGES/On3ani.gif\" BORDER=\"0\"></A>";
       }
else {echo "<A HREF=\"$third_login";
        echo "?navProid=";
        echo $_GET['navProid'];
        echo "&beginmark=";
        echo $_GET['beginmark'];
        echo "&cityholder=";
        echo $_GET['cityholder'];
        echo "&provholder=";
        echo $_GET['provholder'];
echo "&nbk="; echo $_GET['nbk'];
echo "&ncl="; echo $_GET['ncl'];
        echo "\">";
        echo "<IMG SRC=\"./PSYIMAGES/Off3ani.gif\" BORDER=\"0\"></A>"; 
       }
echo "</TD>";
//echo "<TD ALIGN=\"CENTER\" WIDTH=\"15%\">";
//echo "<IMG SRC=\"./PSYIMAGES/AC96.jpg\">";
//echo "</TD>";
echo "<TD ALIGN=\"CENTER\" WIDTH=\"35%\">";
echo "<FONT FACE=\"VERDANA\" COLOR=\"RED\" SIZE=\"1\">CURRENT CLIENT:<BR/>";
echo $_SESSION['userCLid'];
echo "<br>";
echo $_SESSION['third_co_selected'];
echo "</FONT>";

echo "<TD ALIGN=\"CENTER\" WIDTH=\"20%\">";
if (!empty($_SESSION['userCLid']))
       {
        echo "<A HREF=\"$CL_logout";
        echo "?beginmark=";
        echo $_GET['beginmark'];
        echo "&navProid=";
        echo $_GET['navProid'];
        echo "&cityholder=";
        echo $_GET['cityholder'];
        echo "&provholder=";
        echo $_GET['provholder'];
echo "&nbk="; echo $_GET['nbk'];
echo "&ncl="; echo $_GET['ncl'];
        echo "\">";
        echo "<IMG SRC=\"./PSYIMAGES/OnCLani.gif\" BORDER=\"0\"></A>";
       }
else {echo "<A HREF=\"$CL_login";
        echo "?navProid=";
        echo $_GET['navProid'];
        echo "&beginmark=";
        echo $_GET['beginmark'];
        echo "&cityholder=";
        echo $_GET['cityholder'];
        echo "&provholder=";
        echo $_GET['provholder'];
echo "&nbk="; echo $_GET['nbk'];
echo "&ncl="; echo $_GET['ncl'];
        echo "\">";
        echo "<IMG SRC=\"./PSYIMAGES/OffCLani.gif\" BORDER=\"0\"></A>"; 
       }
echo "</TD>";

echo "</TD>";
//echo "<TD ALIGN=\"CENTER\" WIDTH=\"15%\">";
//echo "<IMG SRC=\"./PSYIMAGES/AC123.jpg\">";
//echo "</TD>";
echo "</TD>";
echo "<TD VALIGN=\"CENTER\">";
echo "<A HREF=\"$logout_script\"><IMG SRC=\"./PSYIMAGES/logout3.jpg\" BORDER=\"0\"></A>";
echo "</TD>";
echo "</TR>";
echo "</TABLE>";

}


function table_head()
{
?>
         <DIV ALIGN="CENTER">
          <TABLE BORDER="1" WIDTH="95%" CELLPADDING="0">
          <TR>
              <TH WIDTH="20%" NOWRAP>
              day
              </TH>

              <TH WIDTH="10%" NOWRAP>
              time
              </TH>

              <TH WIDTH="20%" NOWRAP>
              book/cancel
              </TH>

              <TH WIDTH="10%" NOWRAP>
              weekly<BR/>appts
              </TH>

              <TH WIDTH="20%" NOWRAP>
              client
              </TH>
          </TR>
<?php
}
///////////////////FUNCTION ASK IF REQUEST PAYOR
function ask_if_request_payor()
{
echo " Enter the agency to bill or referral source: ";
echo "<SELECT NAME=\"CLthird_co\" SIZE =\"1\" >";
if(!empty($_SESSION['third_co_selected']))
{
echo "<OPTION VALUE=\""; echo $_SESSION['third_co_selected']; echo "\">"; echo $_SESSION['third_co_selected']; echo "</OPTION>";
}
third_co_list();
echo "<T/><BR/> Reference/claim no: ";
echo "<INPUT TYPE=\"TEXT\" NAME=\"CLclaim_no\" SIZE =\"20\" MAXLENGTH=\"20\">"; 
echo " (optional unless there is more than one case/claim number for the selected third party)";
}
//////////////////END ASK IF REQUEST PAYOR
////////////FUNCTION RETRIEVE FREE APPTS
function retrieve_free_appointments($service_provider, $begin, $end)
{
global $dbhost, $PHP_SELF, $apptdb, $todaytime;
$nbk=$_GET['nbk'];
$ncl=$_GET['ncl'];
$nbk_hr= $nbk * 3600;
$ncl_hr= $ncl * 3600;
$nbk_tm=($todaytime + $nbk_hr); $nbkstr=strftime('%Y%m%d%H%M%S', $nbk_tm);
$ncl_tm=($todaytime + $ncl_hr); $nclstr=strftime('%Y%m%d%H%M%S', $ncl_tm);
$colorsettings = array( 0 => "#99CCBB", "#BBAAC0", "#66BBBB");
     $color_no = "0";
//echo "the color now is " . "$colorsettings[$color_no]<BR>";

$link_id = db_connect();
if(!link_id) die(sql_error());
$tempuserCL=$_SESSION['userCLid'];
$getcityholder=$_GET['cityholder'];
$query="SELECT appt_id, date_format(day, '%a %b %e %Y'), day, time, Assmt, Agent_id, client_id, location, bill_to, lastaccess
              FROM $apptdb WHERE (Agent_id='$service_provider' AND ($begin <= day 
              AND day <= $end)) 
              AND (client_id IS NULL OR (client_id='$tempuserCL'";
              if(!empty($_SESSION['user3id1']))
                  {
                  if($_SESSION['user3id']=='BC Psych Assoc'){$third_id="CLIENT";} else {$third_id=$_SESSION['user3id1'];}
                  $getcoQ="SELECT third_co from thirdparty WHERE third_id='$third_id'";
                   $getcoR=mysql_query($getcoQ);
                   $getcoA=mysql_fetch_array($getcoR);
                   $gotco=$getcoA['third_co'];
                   $_SESSION['gotco']=$gotco;
                   $query .= " AND (bill_to='$gotco' OR bill_to IS NULL))) ";
                   } else {
                   $query .= ")) ";}
              if(!empty($getcityholder))
                  {
                   $query .= "AND location='$getcityholder' ";
                   }
              
              $query .= "ORDER BY day, time";
$result=mysql_query($query);
if(!$result) error_message(sql_error());

echo "<FORM ACTION=\"$PHP_SELF?beginmark=" . $_GET['beginmark'] . "&navProid=";
echo $_GET['navProid'];
echo "&cityholder=";
        echo $_GET['cityholder'];
echo "&provholder=";
        echo $_GET['provholder'];
echo "&nbk="; echo $_GET['nbk'];
echo "&ncl="; echo $_GET['ncl'];
        echo "\" METHOD=\"POST\">";

if(!$_SESSION['user3id1'])
    {
     ask_if_request_payor();
    }
while($query_data=mysql_fetch_array($result))
    {
     $pm="0";
					$appt_id=$query_data["appt_id"];
     $prev_day=$day;
     $day=$query_data["date_format(day, '%a %b %e %Y')"]; $day_raw=$query_data['day']; $day_cln=str_replace('-','',$day_raw);
         if($day!=$prev_day)
         {
          $newday=1;
          if ($color_no==2) $color_no=0;
          else $color_no = $color_no + 1;
          //echo "the color now is " . "$colorsettings[$color_no]<BR>";
          $colorsettingnow = $colorsettings[$color_no];
         }
         else 
         {
          $newday=0;
          }
     //list($datex1, $datex2, $datex3)=explode("-", $day);
     list($timex1, $timex2, $timex3)=explode(":" , $query_data["time"]);
        $daytime_cln=$day_cln . $timex1 . $timex2 . $timex3;
        if($nbkstr > $daytime_cln){$nobook=1;} else {$nobook=0;}
        if($nclstr > $daytime_cln){$nocanc=1;} else {$nocanc=0;}
     $Assmt=$query_data["Assmt"];
     $Agent_id=$query_data["Agent_id"];
     $client_id=$query_data["client_id"];
     $location=$query_data["location"];
     $bill_to=$query_data["bill_to"];
     $lastaccess=$query_data["lastaccess"];

if(($client_id=='') && ($nobook==1))
{
$firstnbk=1;
} else {
     echo "<TR BGCOLOR=" . $colorsettingnow . ">\n";
     echo "<TD WIDTH=\"20%\" ALIGN=\"CENTER\">";
     if($newday)
        {
          echo "$day";/////line 91
          
         }
      else if($firstnbk==1) { echo "$day"; $firstnbk=0;} else {}
     echo "</TD>";
        if ($timex1 > 11)
         {
          $pm = "1";
          if ($timex1 > 12)
             {
              $timex1 = $timex1 - 12;
             }
          }
     echo "<TD WIDTH=\"10%\" ALIGN=\"CENTER\">$timex1";
     echo ":";
     echo "$timex2" . " ";
       if($pm == "1") {echo "PM";}
       else {echo "AM";}
       $apptType=service_list2($Assmt);
       echo " " . $apptType;
     echo "</TD>";
     echo "<TD WIDTH=\"20%\" ALIGN=\"CENTER\">";
     if(!empty($client_id) && ($nocanc==0))
     {
     echo "<input type=\"radio\" NAME=\"$appt_id\" VALUE=\"book\">book   <input type=\"radio\"
     NAME=\"$appt_id\" VALUE=\"cancel\">cancel</INPUT>";
     }
     else if($client_id=='')
     {
     echo "<input type=\"radio\" NAME=\"$appt_id\" VALUE=\"book\">book   <input type=\"radio\"
     NAME=\"$appt_id\" VALUE=\"cancel\">cancel</INPUT>";
     }
     else {echo "cannot change";}
     echo "<TD WIDTH=\"10%\" ALIGN=\"CENTER\">";
       $assmt_ary=array($Assmt);
      $is_nonrepeating_ary=array_intersect($non_repeating_ary, $assmt_ary);
      $is_nonrepeating=count($is_nonrepeating_ary);
       if(!$is_nonrepeating)
       {
        echo " <A HREF=\"https://www.zappointments.com/book_ten.html";
        echo "?navProid=" . $_GET['navProid'] . "&first_appt=";
        echo $appt_id;
        echo "&beginmark=";
        echo $_GET['beginmark'];
        echo "&no_appts=";
        echo "8";
        echo "&cityholder=";
        echo $_GET['cityholder'];
        echo "&provholder=";
        echo $_GET['provholder'];
        echo "&onlyType=";
        echo $Assmt;
echo "&nbk="; echo $_GET['nbk'];
echo "&ncl="; echo $_GET['ncl'];
        echo "\">8</A>";

        echo " <A HREF=\"https://www.zappointments.com/book_ten.html";
        echo "?navProid=" . $_GET['navProid'] . "&first_appt=";
        echo $appt_id;
        echo "&beginmark=";
        echo $_GET['beginmark'];
        echo "&cityholder=";
        echo $_GET['cityholder'];
        echo "&provholder=";
        echo $_GET['provholder'];
        echo "&no_appts=";
        echo "12";
        echo "&onlyType=";
        echo $Assmt;
echo "&nbk="; echo $_GET['nbk'];
echo "&ncl="; echo $_GET['ncl'];
        echo "\"> 12</A>";


        echo " <A HREF=\"https://www.zappointments.com/book_ten.html";
        echo "?navProid=" . $_GET['navProid'] . "&first_appt=";
        echo $appt_id;
        echo "&beginmark=";
        echo $_GET['beginmark'];
        echo "&cityholder=";
        echo $_GET['cityholder'];
        echo "&provholder=";
        echo $_GET['provholder'];
        echo "&no_appts=";
        echo "15";
        echo "&onlyType=";
        echo $Assmt;
echo "&nbk="; echo $_GET['nbk'];
echo "&ncl="; echo $_GET['ncl'];
        echo "\"> 15</A>";
       }
       else
       {
        echo "N/A";
        }
     echo "</TD>";
     //echo "<TD WIDTH=\"20%\" ALIGN=\"CENTER\">$Agent_id</TD>";
     echo "<TD WIDTH=\"20%\" ALIGN=\"CENTER\">$client_id</TD>";
     echo "</TR>\n";///line 112
    }
}
echo "<tr><td colspan=\"5\" bgcolor=\"#000000\">";
if($_GET['beginmark'] > 0)
  {
  $beginmark_min1=($_GET['beginmark'] - 1);
   echo "<A HREF=\"$PHP_SELF";
   echo "?beginmark=" . $beginmark_min1 . "&navProid=" . $_GET['navProid'];
   echo "&cityholder=";
        echo $_GET['cityholder'];
        echo "&provholder=";
        echo $_GET['provholder'];
        echo "&Protype=";
        echo $_GET['Protype'];
echo "&nbk="; echo $_GET['nbk'];
echo "&ncl="; echo $_GET['ncl'];
        echo "\"><img src=\"./PSYIMAGES/Navbksquish.jpg\"></A>";
  }
  //echo "</td><td colspan=\"3\">";
  $beginmarkplus=($_GET['beginmark'] + 1);
echo "<A HREF=\"$PHP_SELF";
echo "?beginmark=" . $beginmarkplus . "&navProid=" . $_GET['navProid'];
echo "&cityholder=";
        echo $_GET['cityholder'];
        echo "&provholder=";
        echo $_GET['provholder'];
        echo "&Protype=";
        echo $_GET['Protype'];
echo "&nbk="; echo $_GET['nbk'];
echo "&ncl="; echo $_GET['ncl'];
        echo "\"><img src=\"./PSYIMAGES/Navforsquish.jpg\" align=\"right\"></A>";
        echo "</td></tr>";
echo "</TABLE><INPUT TYPE=SUBMIT VALUE=\"SUBMIT!\">
         <INPUT TYPE=RESET VALUE=\"RESET\"></FORM>";
echo "</DIV>";
echo "<BR>";


}
///END function retrieve_free_appointments()

////////function to get email addresses for third party or client or pro
function get_userid_email($email, $case_id, $the_id, $the_db_name)
{
$func_query = "SELECT " . $email . " from " . $the_db_name . " where " . $case_id . " = '$the_id'";
$result_get_query=mysql_query($func_query);
$result_get=mysql_result($result_get_query, 0, 0);
if(empty($result_get)) echo "failed to get user email";
return $result_get;
}
////END function get_userid_email

//////////////////FUNCTION TO GET APPT DATE AND TIME FROM APPT_ID
function get_datime_fr_appt_id($appt_id)
{
global $apptdb;
$datime_result=mysql_query("SELECT day, time from $apptdb where appt_id='$appt_id'");
$datime1=mysql_result($datime_result, 0, 0); 
$datime2=mysql_result($datime_result, 0, 1);
$translation= array(":00:00" => ":00", ":30:00" => ":30", ":15:00" => ":15", ":45:00" => ":45", ":05:00" => ":05", ":10:00" => ":10", ":20:00" => ":20", ":25:00" => ":25", ":35:00" => ":35", ":40:00" => ":40", ":50:00" => ":50", ":55:00" => ":55");
$datime3=strtr($datime2,$translation);
$datime=$datime1 . " " . $datime3;
return $datime;
}//////////////////END FUNC TO GET APPT DATE AND TIME FROM APPT_ID
//////////////////FUNCTION TO EMAIL EVERYBODY
function email_everybody($to_hold_email, $to_hold_client_email, $to_hold_booked, $to_hold_canceled, $reply_to)
{
//global $email_addresses, $booked, $canceled;
$s_email_addresses = implode(",", $to_hold_email);
$s_booked = implode(", ", $to_hold_booked);
$s_canceled = implode(", ", $to_hold_canceled);
$s_email_message_body = "This is a message from zappointments.com.\n";
if($s_booked){$s_email_message_body .= "The following appts have been booked: ";
                      $s_email_message_body .= $s_booked;
                      $s_email_message_body .=  ".\n";}
if($s_canceled){$s_email_message_body .= "The following appts have been canceled: " . $s_canceled . ".\n";}
$s_email_message_body .= "You may wish to check the www.zappointments.com website ";
$s_email_message_body .= "for your updated schedule.\n";
$s_email_subject="Changed appts";
//echo "EMAIL ADDRESSES: " . $s_email_addresses;
//echo $s_email_message_body;
mail($s_email_addresses, $s_email_subject, $s_email_message_body, $reply_to); mail($to_hold_client_email, $s_email_subject, $s_email_message_body, $reply_to); 
}
//////////END FUNCTION TO EMAIL EVERYBODY
//////////FUNCTION TO GET BOOKED ARRAY INTO DATABASE
function into_database($app_id, $arykey)
     {
      global $todaytime2, $authdb;
      $into_query="INSERT INTO $authdb VALUES(NULL, '$todaytime2', '$app_id', 0)";
      $into_var=mysql_query($into_query);
      if(!$into_var) error_message("Failed to put appt into auth database");
     }
//////////END FUNCTION TO GET BOOKED ARRAY INTO DATABASE
//////////body//////BODY////BODY/////BODY
session_start();
//session_register("user3id1");
//session_register("userCLid");
//session_register("navProid");
echo "<HEAD><META name=\"robots\" content=\"noindex\">";
echo"</HEAD>";
global $Check_appts, $registerCL_script;

//echo "navProid is " . $_GET['navProid'];
$getprovholder=$_GET['provholder'];
if(empty($getprovholder)) {error_message("No province selected");}
else if($_GET['provholder']=="BC"){$apptdb="appointments";$servProdb="service_providers"; $authdb="auth_by_3rd";}
else if($_GET['provholder']=="AB"){$apptdb="appointments_ab";$servProdb="service_providers_ab"; $authdb="auth_by_3rd_ab";}
else if($_GET['provholder']=="SK"){$apptdb="appointments_sk";$servProdb="service_providers_sk"; $authdb="auth_by_3rd_sk";}
else if($_GET['provholder']=="MB"){$apptdb="appointments_mb";$servProdb="service_providers_mb"; $authdb="auth_by_3rd_mb";}
else if($_GET['provholder']=="ON"){$apptdb="appointments_on";$servProdb="service_providers_on"; $authdb="auth_by_3rd_on";}
else if($_GET['provholder']=="QC"){$apptdb="appointments_qc";$servProdb="service_providers_qc"; $authdb="auth_by_3rd_qc";}
else if($_GET['provholder']=="NS"){$apptdb="appointments_ns";$servProdb="service_providers_ns"; $authdb="auth_by_3rd_ns";}
else if($_GET['provholder']=="NB"){$apptdb="appointments_nb";$servProdb="service_providers_nb"; $authdb="auth_by_3rd_nb";}
else if($_GET['provholder']=="PE"){$apptdb="appointments_pe";$servProdb="service_providers_pe"; $authdb="auth_by_3rd_pe";}
else if($_GET['provholder']=="NL"){$apptdb="appointments_nl";$servProdb="service_providers_nl"; $authdb="auth_by_3rd_nl";}
else if($_GET['provholder']=="YK"){$apptdb="appointments_yk";$servProdb="service_providers_yk"; $authdb="auth_by_3rd_yk";}
else if($_GET['provholder']=="NW"){$apptdb="appointments_nw";$servProdb="service_providers_nw"; $authdb="auth_by_3rd_nw";}
else if($_GET['provholder']=="NV"){$apptdb="appointments_nv";$servProdb="service_providers_nv"; $authdb="auth_by_3rd_nv";}

if($_SESSION['userCLprov']=="BC"){$clients_db="clients";$permdb="cl_perm";}
else if($_SESSION['userCLprov']=="AB"){$clients_db="clients_ab";$permdb="cl_perm_ab";}
else if($_SESSION['userCLprov']=="SK"){$clients_db="clients_sk";$permdb="cl_perm_sk";}
else if($_SESSION['userCLprov']=="MB"){$clients_db="clients_mb";$permdb="cl_perm_mb";}
else if($_SESSION['userCLprov']=="ON"){$clients_db="clients_on";$permdb="cl_perm_on";}
else if($_SESSION['userCLprov']=="QC"){$clients_db="clients_qc";$permdb="cl_perm_qc";}
else if($_SESSION['userCLprov']=="NB"){$clients_db="clients_nb";$permdb="cl_perm_nb";}
else if($_SESSION['userCLprov']=="NS"){$clients_db="clients_ns";$permdb="cl_perm_ns";}
else if($_SESSION['userCLprov']=="PE"){$clients_db="clients_pe";$permdb="cl_perm_pe";}
else if($_SESSION['userCLprov']=="NL"){$clients_db="clients_nl";$permdb="cl_perm_nl";}
else if($_SESSION['userCLprov']=="YK"){$clients_db="clients_yk";$permdb="cl_perm_yk";}
else if($_SESSION['userCLprov']=="NW"){$clients_db="clients_nw";$permdb="cl_perm_nw";}
else if($_SESSION['userCLprov']=="NV"){$clients_db="clients_nv";$permdb="cl_perm_nv";}

if($_POST)
  {
   $link_id = db_connect();
   if(!$link_id) die(sql_error());
   if(empty($_SESSION['userCLid'])) {error_message("No client logged in!");}
   
   /////$to_hold_booked_appts=array();
   /////global set up array to_hold_canceled_appts;
   /////global set up array to_hold_email_addresses;

if(empty($_SESSION['user3id1']))
        {
             if($_POST['CLthird_co'] != "SELF")
                  {
                  $CLid=$_SESSION['userCLid'];
                  $TDquery="SELECT CL_iv, CLthird_co1, CLclaim_no1, third_party_email1, CLthird_co2, CLclaim_no2, third_party_email2, CLthird_co3, CLclaim_no3, third_party_email3, CLthird_co4, CLclaim_no4, third_party_email4, CLthird_co5, CLclaim_no5, third_party_email5 from $clients_db where CL_id='$CLid'";
                    $TDresult=mysql_query($TDquery);
                    $TDresult_array=mysql_fetch_array($TDresult);
                    $TDCL_iv=$TDresult_array['CL_iv'];
                    $TDCL_iv=base64_decode($TDCL_iv);
                    $TDCLthird_co1=$TDresult_array['CLthird_co1'];
                    $TDCLthird_co2=$TDresult_array['CLthird_co2'];
                    $TDCLthird_co3=$TDresult_array['CLthird_co3'];
                    $TDCLthird_co4=$TDresult_array['CLthird_co4'];
                    $TDCLthird_co5=$TDresult_array['CLthird_co5'];
                    $TDCLclaim_no1=$TDresult_array['CLclaim_no1'];
                    $TDCLclaim_no2=$TDresult_array['CLclaim_no2'];
                    $TDCLclaim_no3=$TDresult_array['CLclaim_no3'];
                    $TDCLclaim_no4=$TDresult_array['CLclaim_no4'];
                    $TDCLclaim_no5=$TDresult_array['CLclaim_no5'];
                    $TDCLclaim_no1=rtrim($TDCLclaim_no1, "\0");
                    $TDCLclaim_no2=rtrim($TDCLclaim_no2, "\0");
                    $TDCLclaim_no3=rtrim($TDCLclaim_no3, "\0");
                    $TDCLclaim_no4=rtrim($TDCLclaim_no4, "\0");
                    $TDCLclaim_no5=rtrim($TDCLclaim_no5, "\0");
                    $TDthird_party_email1=$TDresult_array['third_party_email1'];
                    $TDthird_party_email2=$TDresult_array['third_party_email2'];
                    $TDthird_party_email3=$TDresult_array['third_party_email3'];
                    $TDthird_party_email4=$TDresult_array['third_party_email4'];
                    $TDthird_party_email5=$TDresult_array['third_party_email5'];
                    $mcrypt_module = mcrypt_module_open('rijndael-256', '', 'cbc', '');
                    if(!empty($TDCLclaim_no1))
                    {
                    mcrypt_generic_init($mcrypt_module, $mcrypt_key, $TDCL_iv);
                    $mCLclaim_no1=mdecrypt_generic($mcrypt_module, base64_decode($TDCLclaim_no1));
                    $mCLclaim_no1=trim($mCLclaim_no1);
                    }
                    if(!empty($TDCLclaim_no2))
                    {
                    mcrypt_generic_init($mcrypt_module, $mcrypt_key, $TDCL_iv);
                    $mCLclaim_no2=mdecrypt_generic($mcrypt_module, base64_decode($TDCLclaim_no2));
                    $mCLclaim_no2=trim($mCLclaim_no2);
                    }
                    if(!empty($TDCLclaim_no3))
                    {
                    mcrypt_generic_init($mcrypt_module, $mcrypt_key, $TDCL_iv);
                    $mCLclaim_no3=mdecrypt_generic($mcrypt_module, base64_decode($TDCLclaim_no3));
                    $mCLclaim_no3=trim($mCLclaim_no3);
                    }
                    if(!empty($TDCLclaim_no4))
                    {
                    mcrypt_generic_init($mcrypt_module, $mcrypt_key, $TDCL_iv);
                    $mCLclaim_no4=mdecrypt_generic($mcrypt_module, base64_decode($TDCLclaim_no4));
                    $mCLclaim_no4=trim($mCLclaim_no4);
                    }
                    if(!empty($TDCLclaim_no5))
                    {
                    mcrypt_generic_init($mcrypt_module, $mcrypt_key, $TDCL_iv);
                    $mCLclaim_no5=mdecrypt_generic($mcrypt_module, base64_decode($TDCLclaim_no5));
                    $mCLclaim_no5=trim($mCLclaim_no5);
                    }
                    mcrypt_generic_deinit($mcrypt_module);
                    $no_co=0;
                    if($_POST['CLthird_co'] == $TDCLthird_co1)
                   {$no_co++;$to_hold_3_email=$TDthird_party_email1;$to_hold_claim=$mCLclaim_no1;}
                    if($_POST['CLthird_co'] == $TDCLthird_co2)
                   {$no_co++;$to_hold_3_email=$TDthird_party_email2;$to_hold_claim=$mCLclaim_no2;}
                    if($_POST['CLthird_co'] == $TDCLthird_co3)
                    {$no_co++;$to_hold_3_email=$TDthird_party_email3;$to_hold_claim=$mCLclaim_no3;}
                    if($_POST['CLthird_co'] == $TDCLthird_co4)
                    {$no_co++;$to_hold_3_email=$TDthird_party_email4;$to_hold_claim=$mCLclaim_no4;}
                    if($_POST['CLthird_co'] == $TDCLthird_co5)
                    {
                    $no_co++;
                    $to_hold_3_email=$TDthird_party_email5;
                    $to_hold_claim=$mCLclaim_no5;
                    }
                    if($no_co < 1){error_message("That third party is not part of this client's profile");} else if($no_co == 1){$_SESSION['third_co_selected']=$_POST['CLthird_co'];}
                    if($no_co > 1){
                                         if($_POST['CLclaim_no'] == $mCLclaim_no1)
                                              {$to_hold_3_email=$TDthird_party_email1;$to_hold_claim=$mCLclaim_no1;$_SESSION['third_co_selected']=$_POST['CLthird_co'];}
                                         else if($_POST['CLclaim_no'] == $mCLclaim_no2)
                                              {$to_hold_3_email=$TDthird_party_email2;$to_hold_claim=$mCLclaim_no2;$_SESSION['third_co_selected']=$_POST['CLthird_co'];}
                                         else if($_POST['CLclaim_no'] == $mCLclaim_no3)
                                              {$to_hold_3_email=$TDthird_party_email3;$to_hold_claim=$mCLclaim_no3;$_SESSION['third_co_selected']=$_POST['CLthird_co'];}
                                         else if($_POST['CLclaim_no'] == $mCLclaim_no4)
                                              {$to_hold_3_email=$TDthird_party_email4;$to_hold_claim=$mCLclaim_no4;$_SESSION['third_co_selected']=$_POST['CLthird_co'];}
                                         else if($_POST['CLclaim_no'] == $mCLclaim_no5)
                                              {$to_hold_3_email=$TDthird_party_email5;$to_hold_claim=$mCLclaim_no5;$_SESSION['third_co_selected']=$_POST['CLthird_co'];}
                                         else {error_message("You must enter the correct claim or case number for this client");}
                                         }

                                       
                  } else {$_SESSION['third_co_selected']=$_POST['CLthird_co'];}
        }
else {$user3id2=$_SESSION['user3id1'];  
        $email="email";
        $case_id="third_id";
        $dbnom="thirdparty";
        $to_hold_email_addresses[] = get_userid_email($email, $case_id, $user3id2, $dbnom);
        }

$dbnom=$clients_db;
$email="CLemail";
$case_id="CL_id";
$to_hold_client_email = get_userid_email($email, $case_id, $_SESSION['userCLid'], $dbnom);
 $dbnom=$servProdb;////service provider will be set by GET HTTP or login
 $email="Proemail";
 $case_id="Pro_id";
 $to_hold_email_addresses[] = get_userid_email($email, $case_id, $_GET['navProid'], $dbnom);
 $to_hold_email_addresses[] = "admin@zappointments.com";
   while (list($lvar, $lvalue) = each($_POST))
     { 
///first check if access time is same
$userCLprov=$_SESSION['userCLprov'];
       if ($lvalue=="book")
           {if(isset($user3id2))///////////	CHECK THIS PART!!!!!!!
                  {
                   $tempuserCL=$_SESSION['userCLid'];
                   if(empty($_SESSION['gotco']))
                   {
                   $getcoQ="SELECT third_co from thirdparty WHERE third_id='$user3id2'";
                   $getcoR=mysql_query($getcoQ);
                   $getcoA=mysql_fetch_array($getcoR);
                   $gotco=$getcoA['third_co'];
                   $_SESSION['gotco']=$gotco;
                   } else {$gotco=$_SESSION['gotco'];}
                   $bookquery="UPDATE $apptdb SET client_id='$tempuserCL', bill_to='$gotco', CLprov='$userCLprov' 
                    WHERE appt_id='$lvar' and client_id IS NULL";
                   }
             else if(isset($_POST['CLthird_co']) && ($_POST['CLthird_co'] != "SELF"))
                   {//echo "CLthird_co is set and not equal self";
                   $tempuserCL=$_SESSION['userCLid'];
                   $tempCLthird_co=$_POST['CLthird_co'];
                   $bookquery="UPDATE $apptdb SET client_id='$tempuserCL', bill_to='$tempCLthird_co', CLprov='$userCLprov' 
                    WHERE appt_id='$lvar' and client_id IS NULL";
                   } 
             else 
                  {
                   $tempuserCL=$_SESSION['userCLid'];
                   $bookquery="UPDATE $apptdb SET client_id='$tempuserCL', bill_to='SELF',  CLprov='$userCLprov' 
                    WHERE appt_id='$lvar' and client_id IS NULL";
                  }
            $bookresult=mysql_query($bookquery);
            $numrowsresult=mysql_affected_rows($link_id);
            if(!$numrowsresult) 
                {error_message("Appt already booked. Reload the page.");
                 //echo "<SCRIPT>alert(\"Appt already booked\");history.go(-1);
                 //opener.location.href='$PHP_SELF';
                 //self.close();</SCRIPT>";
                } else {add_perm($link_id, $permdb);}
            $to_hold_booked_appts[]=get_datime_fr_appt_id($lvar);
            $to_hold_booked_auth[]=$lvar;
           }
       else if ($lvalue=="cancel")
           {
            $cancelquery="UPDATE $apptdb SET client_id=NULL, bill_to=NULL, CLprov=NULL,
              auth_by_3rd=0
              WHERE appt_id='$lvar'";
            $cancelresult=mysql_query($cancelquery);
            if(!$cancelresult) error_message(sql_error()); 
            $to_hold_canceled_appts[]=get_datime_fr_appt_id($lvar);
            if(isset($user3id2))///////////	CHECK THIS PART!!!!!!!
                  {
                  $tempCLthird_co=$user3id2;
                  }
                  else if(isset($_POST['CLthird_co']) && ($_POST['CLthird_co'] != "SELF"))
                   {
                   $tempCLthird_co=$_POST['CLthird_co'];
                   } else {$tempCLthird_co='none';}//$tempCLthird_co is needed for function whatTypeCo
            }
       else {  }
      }
$reply_to_fields="From: admin@zappointments.com";///\nReply-to: admin@zappointments.com";
email_everybody($to_hold_email_addresses, $to_hold_client_email, $to_hold_booked_appts, $to_hold_canceled_appts, $reply_to_fields); 
///////////////SEND SECURE EMAIL TO AUTH 3RD PRTY
if((isset($_POST['CLthird_co'])) and ($_POST['CLthird_co'] != "SELF"))
       {
        //echo "third co is set and is not self";

        $secure_mail_subject = "Authorization requested";
        $secure_mail_body = "--01fedcb871d3f012e43680250ba5ca3f\n";
        $secure_mail_body .= "Content-type:text/html; charset=\"iso-8859-1\"\n";
        $secure_mail_body .= "Content-transfer-encoding:7bit\n\n";
        $secure_mail_body .= "<!DOCTYPE HTML PUBLIC \"-//W3C//DTD HTML 4.0 Transitional//EN\">\n";

        $secure_mail_body .= "<html><head></head><body bgcolor=\"#9999AA\">\n";
        $secure_mail_body .= "<center><a href=\"http://www.zappointments.com\">";
        $secure_mail_body .= "<img src=\"http://www.zappointments.com/PSYIMAGES/zaphome.gif89a\"></a></center>";
        $secure_mail_body .= "An appointment or appointments have been booked for claim or reference no. ";
        if(!empty($to_hold_claim)){
        $secure_mail_body .= $to_hold_claim;
        }
        else if(!empty($_POST['CLclaim_no'])) {$secure_mail_body .= $_POST['CLclaim_no'];}
        else {$secure_mail_body .= "not entered";}
        $secure_mail_body .= "<br>";
        $secure_mail_body .= "Payment is being requested for these services. Click on the link below to view and authorize sessions requested:<br/>";
        $secure_mail_body .= "<center><a href=\"";
        $secure_mail_body .= "https://www.zappointments.com/pageforauth.html?";
        $secure_mail_body .= "auth_key=";
        $todaytime2=trim($todaytime2);
        $secure_mail_body .= $todaytime2;
        $secure_mail_body .= "&provholder=";
        $secure_mail_body .= $_GET['provholder'];
        
        $secure_mail_body .= "\">";
        $secure_mail_body .= "Respond to authorization request by clicking here.";
        $secure_mail_body .= "</a></center>";
        $secure_mail_body .= "</body></html>";
        $secure_mail_body .= "\n\n--01fedcb871d3f012e43680250ba5ca3f--\n";
        $secure_mail_header = "From: admin@zappointments.com\n";
        $secure_mail_header .= "Reply-to: admin@zappointments.com\n";
        $secure_mail_header .= "MIME-Version: 1.0\n";
        $secure_mail_header .= "Content-type: multipart/mixed";
        $secure_mail_header .= ";";
        $secure_mail_header .= " ";
        $secure_mail_header .= "boundary=\"01fedcb871d3f012e43680250ba5ca3f\"\n";
        $secure_mail_header .= "Content-type:text/html; charset=\"iso-8859-1\"\n";
        $secure_mail_header .= "Content-transfer-encoding:7bit\n\n";
        //$secure_mail_header .= "\n\n";
        $secure_mail_header .= "This is a multi-part message in MIME format.\n\n";
        //$secure_mail_header .= "--01fedcb871d3f012e43680250ba5ca3f\n";
         array_walk($to_hold_booked_auth, 'into_database');
         reset($to_hold_booked_appts);
         //echo $secure_mail_body;
         mail($to_hold_3_email, $secure_mail_subject, $secure_mail_body, $secure_mail_header);
       }
  ///get no of booked or canceled appts
  $noBooked=count($to_hold_booked_appts);
  $noCanceled=count($to_hold_canceled_appts);
  $typeBooked=whatTypeCo($tempCLthird_co);///function to get type of co
  if($noBooked > 0){up_ratings($_GET['navProid'], $noBooked, $typeBooked);}
  if($noCanceled > 0){down_ratings($_GET['navProid'], $noCanceled, $typeBooked);}
  //autoreload();
 }

if(empty($_GET['beginmark'])) {$_GET['beginmark']=0;}/////make sure this works!
$beginmark1=$_GET['beginmark'] + 1;
$beginmark_min1=$_GET['beginmark'] - 1;

  
     echo "<BODY BACKGROUND=\"./Flow 2.jpg\">";
show_gif();
echo "<P ALIGN=\"CENTER\"><FONT SIZE=1>Appointment booking method Patent Pending</FONT></P>";
echo "<P ALIGN=\"CENTER\"><FONT SIZE=2>Go back to <A HREF=\"";
echo $Check_appts;
echo "?provholder=";
        echo $_GET['provholder'];
        echo "&Protype=";
        echo $_GET['Protype'];
        
echo "\">geographic list</A></FONT>";
if(!empty($_SESSION['user3id1']))
{
echo "<br/><font size=\"2\">Register a new client <a href=\""; echo $registerCL_script;
echo "?navProid=";
        echo $_GET['navProid'];
        echo "&beginmark=";
        echo $_GET['beginmark'];
        echo "&cityholder=";
        echo $_GET['cityholder'];
        echo "&provholder=";
        echo $_GET['provholder'];
        echo "\">";
        echo "here</a></font>";
}
else if(empty($_SESSION['userCLid']))
{
echo "<br/><font size=\"2\">Register yourself <a href=\""; echo $registerCL_script;
echo "?navProid=";
        echo $_GET['navProid'];
        echo "&beginmark=";
        echo $_GET['beginmark'];
        echo "&cityholder=";
        echo $_GET['cityholder'];
        echo "&provholder=";
        echo $_GET['provholder'];
        echo "\">";
        echo "here</a></font>";
}
echo "</p>";
echo "<center><h2>";
$Fullname=get_Proname($_GET['navProid']);
echo $Fullname;
echo "</h2></center>";
if($_GET['beginmark'] > 0)
  {
   echo "To check the previous three weeks, click <A HREF=\"$PHP_SELF";
   echo "?beginmark=" . $beginmark_min1 . "&navProid=" . $_GET['navProid'];
   echo "&cityholder=";
        echo $_GET['cityholder'];
        echo "&provholder=";
        echo $_GET['provholder'];
        echo "&Protype=";
        echo $_GET['Protype'];
echo "&nbk="; echo $_GET['nbk'];
echo "&ncl="; echo $_GET['ncl'];
        echo "\">here <img src=\"./PSYIMAGES/Navbksquish.jpg\"></A>. ";
  }
echo "To check the next three weeks, click <A HREF=\"$PHP_SELF";
echo "?beginmark=" . $beginmark1 . "&navProid=" . $_GET['navProid'];
echo "&cityholder=";
        echo $_GET['cityholder'];
        echo "&provholder=";
        echo $_GET['provholder'];
        echo "&Protype=";
        echo $_GET['Protype'];
echo "&nbk="; echo $_GET['nbk'];
echo "&ncl="; echo $_GET['ncl'];
        echo "\">here <img src=\"./PSYIMAGES/Navforsquish.jpg\"></A>. ";
$begintime=$todaytime + (1814400 * $_GET['beginmark']);
$beginplus3w=$begintime + 1814400;
$endtime1=date("Ymd", $beginplus3w);  //1209600 is two weeks
$begintime1=date("Ymd",$begintime);
$begindate = date("d M Y",$begintime);
$enddate = date("d M Y",$beginplus3w);
echo "<BR/>Showing period beginning " . $begindate;
echo " and ending " . $enddate;

         echo "<BR/>If you wish to use the secure chatroom, click " . "<input type=\"button\" value=\"Chatroom\" onClick=\"NewWin=window.open('$chatroom','Chatroom','width=800, height=600, toolbar=0,status=0');\">";
table_head();
retrieve_free_appointments($_GET['navProid'], $begintime1, $endtime1);
echo "<P ALIGN=\"CENTER\">If you don't see the appointments you have just booked, click <A HREF=\"$PHP_SELF";
echo "?beginmark=" . $_GET['beginmark'] . "&navProid=" . $_GET['navProid'];
echo "&cityholder=";
        echo $_GET['cityholder'];
        echo "&provholder=";
        echo $_GET['provholder'];
        echo "&Protype=";
        echo $_GET['Protype'];
echo "&nbk="; echo $_GET['nbk'];
echo "&ncl="; echo $_GET['ncl'];
        echo "\">here</A>.</p> ";
echo "<P ALIGN=\"CENTER\"><FONT SIZE=1>Appointment booking method Patent Pending</FONT></P>";
echo "<P ALIGN=\"CENTER\"><CENTER><FONT SIZE=\"2\"><A HREF=\"./UserAgreement.html\">Terms of Use</A></FONT></CENTER><CENTER><FONT SIZE=\"2\"><A HREF=\"./staff/psyrates.html\">Current Rates</A></FONT></CENTER>";

?>