Index: /trunk/Mars/datacenter/db/run_comment.php
===================================================================
--- /trunk/Mars/datacenter/db/run_comment.php	(revision 12667)
+++ /trunk/Mars/datacenter/db/run_comment.php	(revision 12667)
@@ -0,0 +1,183 @@
+<?php
+{
+    ini_set("display_errors", "On");
+    ini_set("mysql.trace_mode", "On");
+
+    echo (file_get_contents("index-header.html"));
+
+    if (empty($_GET["fMode"]))
+        $_GET["fMode"]="view";
+
+    if (empty($_GET["fFileNumber"]))
+        $_GET["fFileNumber"]="001";
+
+    if (empty($_GET["fRunNumber"]))
+        $_GET["fRunNumber"]=date("Ymd", time()-(12*60*60));
+
+
+
+    //
+    // insert/update part
+    //
+    include ("ldap_include.php");
+    if (strcmp($_GET["fMode"], "insert")==0 || strcmp($_GET["fMode"], "update")==0)
+    {
+        if (!isset($_SERVER['PHP_AUTH_USER']))
+        {
+            header('WWW-Authenticate: Basic realm="Edit Run Comments"');
+            header('HTTP/1.0 401 Unauthorized');
+            return;
+        }
+        else
+        {
+            //echo "The password is not yet evaluated, but the username is inserted into the DB.<br>";
+            if (!CheckUsernameAndPassword($_SERVER['PHP_AUTH_USER'], $_SERVER['PHP_AUTH_PW'], GetLDAPOptions()))
+                return;
+        }
+        if (!empty($_GET["fComment"]))
+        {
+            include("db2.php");
+            $db_id = mysql_pconnect($host, $user, $pw);
+            if ($db_id==FALSE)
+            {
+                printf("mysql_connect returned the following error: %s\n", mysql_error());
+                die("");
+            }
+            mysql_select_db($db);
+            //for insert
+            if (strcmp($_GET["fMode"], "insert")==0)
+                $query0 = "INSERT RunComments SET ";
+            //for update
+            if (strcmp($_GET["fMode"], "update")==0)
+                $query0 = "UPDATE RunComments SET ";
+            //for both
+            $query0.= " fComment='".str_replace("'", "\'", $_GET["fComment"])."'";
+            $query0.= ", fUser='".$_SERVER['PHP_AUTH_USER']."'";
+            //for insert
+            if (strcmp($_GET["fMode"], "insert")==0)
+            {
+                $query0.=", fRunNumber=".$_GET["fRunNumber"];
+                $query0.= ", fFileNumber=".$_GET["fFileNumber"];
+            }
+            //for update
+            if (strcmp($_GET["fMode"], "update")==0)
+            {
+                $query2="SELECT fCommentKEY FROM RunComments ";
+                $query2.=" WHERE fRunNumber=".$_GET["fRunNumber"];
+                $query2.=" AND fFileNumber=".$_GET["fFileNumber"];
+                $query2.=" AND fComment='".str_replace("'", "\'", $_GET["fOldComment"])."'";
+                $result2=mysql_query($query2, $db_id);
+                $row2 = mysql_fetch_row($result2);
+                $commentkey=$row2[0];
+                mysql_free_result($result2);
+                $query0.=" WHERE fCommentKEY=".$commentkey;
+            }
+            $result0=mysql_query($query0, $db_id);
+            mysql_close($db_id);
+        }
+    }
+
+
+
+    //
+    // display part
+    //
+    include("db.php");
+    printf("With this page, you can \n");
+    //view mode
+    if (strcmp($_GET["fMode"], "view")==0)
+        printf("view,\n");
+    else
+        printf("<a href='%s'>view</a>,\n", str_replace($_GET["fMode"], 'view', $_SERVER['REQUEST_URI']));
+    //update mode
+    if (strcmp($_GET["fMode"], "update")==0)
+        printf("update and\n");
+    else
+        printf("<a href='%s'>update</a> and \n", str_replace($_GET["fMode"], 'update', $_SERVER['REQUEST_URI']));
+    //insert mode
+    if (strcmp($_GET["fMode"], "insert")==0)
+        printf("insert\n");
+    else
+        printf("<a href='%s'>insert</a> \n", str_replace($_GET["fMode"], 'insert', $_SERVER['REQUEST_URI']));
+    printf("entries in the table <b>RunComment</b> from the DB <b>%s</b>.<br><br>\n", $db);
+
+    //insert field for run number
+    printf("<form action=\"run_comment.php\" METHOD=\"GET\">\n");
+    printf("Run#&nbsp;(YYYYMMDD_FFF)&nbsp;<input name=\"fRunNumber\" type=\"text\" size=\"8\" maxlength=\"8\" value=\"%s\">\n", $_GET["fRunNumber"]);
+    printf("_ <input name=\"fFileNumber\" type=\"text\" size=\"3\" maxlength=\"3\" value=\"%s\">\n", $_GET["fFileNumber"]);
+    printf("<input type='hidden' name='fMode' value='%s'>", $_GET["fMode"]);
+    printf("<input type='submit' value='Get Comments'><br><br>\n");
+    printf("</form>\n");
+
+    $db_id = mysql_pconnect($host, $user, $pw);
+    if ($db_id==FALSE)
+    {
+        printf("mysql_connect returned the following error: %s\n", mysql_error());
+        die("");
+    }
+    mysql_select_db($db);
+
+    $query1 = "SELECT CONCAT(fRunNumber,'_', LPAD(fFileNumber, 3, 0)), fComment FROM RunComments ";
+    $query1 .= "WHERE fRunNumber=".$_GET["fRunNumber"]." AND fFileNumber=".$_GET["fFileNumber"];
+    $result1=mysql_query($query1, $db_id);
+    printf("Found %d comment(s).<br>", mysql_num_rows($result1));
+    printf("<table BORDER='0' style='margin-top:1ex'>");
+    $col   = FALSE;
+    printf("<tr BGCOLOR='#C0C0C0'><td>Run#</td><td>Comment</td></tr>");
+    while ($row1 = mysql_fetch_row($result1))
+    {
+        if (!$col)
+            printf("<tr BGCOLOR='#E0E0E0'>\n");
+        else
+            printf("<tr BGCOLOR='#D0D0D0'>\n");
+        $col = !$col;
+
+        if (strcmp($_GET["fMode"], "update")==0)
+            printf("<form style='display:inline' action=\"run_comment.php\" METHOD=\"GET\">\n");
+        printf("<td>\n%s\n</td>\n", $row1[0]);
+        if (strcmp($_GET["fMode"], "update")==0)
+        {
+            printf("<td>\n");
+            printf("<input type='text' size='50' maxlength='255' name='fComment' value='%s'>\n", htmlspecialchars($row1[1],ENT_QUOTES));
+            printf("<input type='hidden' name='fOldComment' value='%s'>\n", htmlspecialchars($row1[1],ENT_QUOTES));
+            printf("<input type='hidden' name='fMode' value='%s'>\n", $_GET["fMode"]);
+            printf("<input type='hidden' name='fRunNumber' value='%s'>\n", $_GET["fRunNumber"]);
+            printf("<input type='hidden' name='fFileNumber' value='%s'>\n", $_GET["fFileNumber"]);
+            printf("<input type='submit' value='Update Comment'>\n");
+            printf("</td>\n");
+            printf("</form>\n");
+        }
+        else
+            printf("<td>\n%s\n</td>\n", $row1[1]);
+        printf("</tr>\n");
+    }
+    //insert mode
+    if (strcmp($_GET["fMode"], "insert")==0)
+    {
+        printf("<tr BGCOLOR='#C0C0C0'>");
+        printf("<td>%s_%s</td>\n", $_GET["fRunNumber"], $_GET["fFileNumber"]);
+        printf("<td>\n");
+        printf("<form style='display:inline' action=\"run_comment.php\" METHOD=\"GET\">\n");
+        printf("<input type='text' size='50' maxlength='255' name='fComment'>\n");
+        printf("<input type='hidden' name='fMode' value='%s'>\n", $_GET["fMode"]);
+        printf("<input type='hidden' name='fRunNumber' value='%s'>\n", $_GET["fRunNumber"]);
+        printf("<input type='hidden' name='fFileNumber' value='%s'>\n", $_GET["fFileNumber"]);
+        printf("<input type='submit' value='Insert Comment'>\n");
+        printf("</form>\n");
+        printf("</td>\n");
+        printf("</tr>\n");
+    }
+    printf("</table>");
+
+    if (strcmp($_GET["fMode"], "update")==0)
+        printf("Remark: You can update only one comment at once.");
+
+    mysql_free_result($result1);
+    mysql_close($db_id);
+
+    echo (file_get_contents("index-footer.html"));
+
+    ini_set("display_errors", "Off");
+    ini_set("mysql.trace_mode", "Off");
+}
+?>