<?php

if($_GET["formsent"] && $_GET["user"]){
	$qry = mysqli_query($dbconn,"SELECT id FROM user WHERE id = '".mysql_escape_string($_GET["user"])."'");
	if($res = mysqli_fetch_array($qry)){
		$color = mysql_escape_string($_POST["zeit_color-".$_GET["user"]]);
		$qry = mysqli_query($dbconn,"UPDATE user SET color = '".$color."' WHERE id = '".mysql_escape_string($_GET["user"])."'");
		$smarty->assign("tabs",$_GET["tabs"]);
	}
}

$smarty->assign("heading","Zeiterfassung"); 
$smarty->display("heading.tpl");

$smarty->assign("colors",array("#FF5555"=>"Rot",
									"#55FF55"=>"Grün", 
									"#5555FF"=>"Blau",
									"#FFFF00"=>"Gelb",
									"#FFAA00"=>"Orange",
									"#00FFFF"=>"Türkis",
									"#FF00FF"=>"Lila",
									"#FFFFFF"=>"Weiß",
									"#888888"=>"Grau"));
							
$qry = mysqli_query($dbconn,"SELECT user.id,vname,nname, color, rfid, user.vacationdays AS vacation, sahours, weekhours, altlasten.vacationdays AS oldvacation FROM user JOIN altlasten ON user.id = altlasten.ma_id WHERE blocked = 0 AND nick <> 'ALL' AND nick <> 'm0'") or die("Datenbank fehler: ".mysqli_error($dbconn));
$users = array();
while($row=mysqli_fetch_array($qry)){
	$row['colorname'] = 'zeit_color-'.$row['id'];
	$row['urlaub'] = urlaub_remaining($dbconn, $row["id"]);
	$row['ueberstd'] = ueberstunden($dbconn, $row["id"]);
	$row['Mueberstd'] = ueberstunden_month($dbconn, $row["id"],date("m"),date("Y"));
	$users[] = $row;
}
$smarty->assign("users",$users);

$smarty->display("zeiten.tpl");
$_SESSION["camefrom"] ="zeiten";
?>