<%
var eCookieDate = new Date(); eCookieDate.setMonth(eCookieDate.getMonth()+1);
var echoCookie = new String();
echoCookie = (eCookieDate.getMonth()+1) + "/" + eCookieDate.getDate() + "/" + eCookieDate.getFullYear()
			+ " " + eCookieDate.getHours() + ":" + eCookieDate.getMinutes() + ":" + eCookieDate.getSeconds();
			
function convertSpecChar( cString ) { //$sc1c
  //&39 is defined by programmer to indicate apostrophe value
  //cString = ReplaceAll(cString,"'","&lsquo") ;
  cString = ReplaceAll(cString,"'","&39") ;
  cString = ReplaceAll(cString,'"',"&quot;") ;
  return cString ;
}

function trim(text) {
    return new String(text).replace(/^\s+|\s+$/g, "");
}
function ltrim(text) {
    return new String(text).replace(/^\s+/, "");
}
function rtrim(text) {
    return new String(text).replace(/\s+$/, "");
}
function isNumeric(text) {
    var validChars = "0123456789.-";
    if (text.length == 0) {
        return false;
    }
    for (i = 0; i < text.length; i++) {
        if (validChars.indexOf(text.charAt(i)) == -1) {
            return false;
        }
    }
    return true;
}
function Cleanse(text, length, isNumber) {
    text = trim(text);
    if (length != null && trim(length) != "undefined" && trim(length) != "" && text.length > length) {
        text = "";
    }
    if (text != "" && isNumber && !isNumeric(text)) {
        text = "";
    }
    if (text.toLowerCase().indexOf("select") > -1 || text.toLowerCase().indexOf("drop ") > -1 || text.toLowerCase().indexOf("alter ") > -1 || text.toLowerCase().indexOf("truncate") > -1 || text.toLowerCase().indexOf("xp_cmd") > -1 || text.toLowerCase().indexOf("insert") > -1 || text.toLowerCase().indexOf("shutdown") > -1 || text.toLowerCase().indexOf("update") > -1 || text.toLowerCase().indexOf("exec") > -1 || text.toLowerCase().indexOf("sp_exe") > -1) {
        text = "";
    }
    if (text != "") {
        text = SpecialHTMLEncode(text).replace("'", "''").replace("]","]]").replace("--","").replace("!","").replace("%","").replace("!","").replace("@","").replace("#","").replace("$","").replace("*","").replace("(","").replace(")","").replace("{","").replace("}","");
    }
    return text;
}
function SpecialHTMLEncode(text) {
    return text.replace("<", "&lt;").replace(">", "&gt;");
}

function ReplaceAll(inString, oldValue, newValue) { //$sc1c
	var outString = "";
	for (h=0;h<inString.length;h++) {
		if (inString.substr(h,1) == oldValue) {
			outString += newValue;
		} else {
			outString += inString.substr(h,1);
		}
	}
	return outString;
}

 /* defaultVal() */
 function defaultVal(docfield) {
    docfield = trim( docfield ) ;
    var ctype = docfield.substr(0,1) ;
    if ( docfield == "undefined" || docfield == "null" || docfield == "") {
       docfield = "" ;
    }
    docfield = escape(docfield) ;	 
    return docfield	 ;
  }

function SaveAnothertbl(){ //$sc16

var newrecord = "N" ;
// Cleanse(Request.Form("#newrecord"),null,false); for now only allow to update not adding
var lcDefaultValues = new String(Cleanse(Request.Form("#defaultvalues2"),null,false));
var tablename = Cleanse(Request.Form("#tbl_name").Item,null,false); // this not being used but might be used later
var tablename2 = Cleanse(Request.Form("#tbl_name2").Item,null,false); // this not being used but might be used later
var link = Cleanse(Request.Form("#link"),null,false);
var link2 = Cleanse(Request.Form("#link2"),null,false);
var area = Cleanse(Request.Form("#area"),null,false);
var dr_id = Cleanse(Request.Form("#dr_id"),null,false);
//var lcLetRefNo = Cleanse(Request.Form("#letrefno"),null,false);
var lcUpd = "";
var fields = "";
var values = "";
var lcVarName = "";
var type = "";
var SQLStatement = "";
var UpDateField = "";
var defVal = "";
var ArrayNewValues = new Array();
var ArrayDefaultValues = new Array();
var ArrayFields = new Array();
var ArrayIndex = 0;
var re = /'/g;
	

// Loop through all of the controls on the input form.  
e = new Enumerator(Request.Form);
for (;!e.atEnd();e.moveNext()) {						//Enumerate drives collection.
   	lcVarName = Cleanse(e.item(),null,false);
   	lcNewVal =  Cleanse(Request.Form(lcVarName).Item,null,false); 
 	
	if (lcVarName.substr(0,1) == "@" ) {					// Igonore variables that start with a pound sign.
		lcDefVal = "CC";
	    type = lcVarName.substring(2,1).toUpperCase();
	    lcVarName = lcVarName.substring(2);
		if (newrecord == "Y") {
			lcNewVal = lcNewVal.replace(re, "''");      // double up the quotes in preparation of the SQL statement
			if (type == "C") {							// new Strings and Characters
				fields += lcVarName + ",";
				values += "'" + lcNewVal + "',";
			} else if (type == "D") {					// new Dates
			    if (trim(lcNewVal).length == 0) {					
					fields += lcVarName + ",";
					values += "null" + ",";
			    } else {											
					fields += lcVarName + ",";
					values += "'" + lcNewVal + "',";
				}													
			} else if (type == "L") {					// new Boolean
				if (lcNewVal == "true") {
					fields += lcVarName + ",";
					values += "1,";
				} else {
					fields += lcVarName + ",";
					values += "0,";
				}
			} else {									// new Numbers
			  	if (trim(lcNewVal).length == 0) {		//$SC4
				  if ( lcVarName.toUpperCase().indexOf("L_") > -1 ) {
				        lcNewVal = "null"  ;			//Default value for all L_TABLE link2 field
				   } else {         			      
				       lcNewVal = 0 ;
				   }   
				} 
				fields += lcVarName + ",";				//$SC1A
				values += lcNewVal +", " ;
			}
		} else {
			defVal = DefVal(lcDefaultValues,lcVarName);
			if (trim(defVal) != trim(lcNewVal)) {
				lcNewVal = lcNewVal.replace(re, "''");		// double up the quotes in preparation of the SQL statement
				if (type == "C") {							// update Strings and Characters
					UpDateField = lcVarName+"='"+lcNewVal+"'";
				} else if (type == "D") {					// update Dates
				    if (trim(lcNewVal).length == 0) {					
						UpDateField = lcVarName+"= null ";		
						lcNewVal = "null";			
					} else {											
						UpDateField = lcVarName+"='"+lcNewVal+"'";
					}														
				} else if (type == "L") {					// update Boolean
					if (lcNewVal == "true") {
						UpDateField = lcVarName+"=1";
						lcNewVal = "1";
					} else {
						UpDateField = lcVarName+"=0";		
						lcNewVal = "0";
					}
				} else {									// update Numbers
				    if (trim(lcNewVal).length == 0) {    //$SC4
				      if ( lcVarName.toUpperCase().indexOf("L_") > -1 ) {
				        lcNewVal = "null"  ;    //Default value for all L_TABLE link2 field
				      } else {         			      
				       lcNewVal = 0 ;
				      }   
				    } 
				    UpDateField = lcVarName + "=" + lcNewVal;
				}
				lcUpd = lcUpd + UpDateField + ",";
				if (trim(area).toUpperCase() == "PROVIDER" || trim(area).toUpperCase() == "SYSUDF") {
					ArrayFields[ArrayIndex] = lcVarName;
					ArrayNewValues[ArrayIndex] = lcNewVal;
					ArrayDefaultValues[ArrayIndex] = defVal;
					ArrayIndex++;
				}
			}
		}
	}
}  // End while
//Is this a new record?
if (newrecord == "Y") {
	//Are there any fields to insert?
	if (trim(fields.length) > 0) {
		if (fields.indexOf(",") > -1) {
			fields = fields.substring(0, fields.lastIndexOf(","));
		}
		if (values.indexOf(",") > -1) {
			values = values.substring(0, values.lastIndexOf(","));
		}
		SQLStatement = "insert into " + tablename2 + "(" + fields + ") values(" + values + ")";
	}
} else {
	//Where there any changes?
	if (trim(lcUpd.length) > 0) {
		if (lcUpd.indexOf(",") > -1) {
			lcUpd = lcUpd.substring(0, lcUpd.lastIndexOf(","));
		}
        SQLStatement = "update " + tablename2 + " set " + lcUpd + " where link = " + link2;      	
   }
}

if (trim(SQLStatement.length) > 0) {							//Does an insert or update have to be done?	
	var oSQL = Server.CreateObject("QEData.SQLSelect");
	var returnVoid = "" ;
	try {
		var newlink2;
		if (newrecord == "Y") {																								//$JE2A
			newlink2 = oSQL.Insert_Record(Request.Cookies("gcServerName"),Request.Cookies("gcDataBase"),trim(SQLStatement));	//$JE2A
        }else {																											//$JE2A
			oSQL.UpdateTable(Request.Cookies("gcServerName"),Request.Cookies("gcDataBase"), trim(SQLStatement));
		}
        if (trim(area).toUpperCase() == "PROVIDER") {
			Response.Write("<BODY onload=self.parent.eBOTTOM2.window.location.reload();self.parent.eBOTTOM3.navigate('6.htm')>");  //$MM1C
		} else if (trim(area).toUpperCase() == "TBLMAINT") {
			Response.Write("<BODY onload=self.parent.rightside.rows='50%,*,0,0';self.parent.eCMETOP.window.location.reload();self.parent.eBOTTOM3.navigate('6.htm')>");
		} else { 
			Response.Write("<body>Saved...");
		}
	} catch(e) {

		var lcMessage = custom_msg(e);

%> 
		<Script Language = 'JavaScript'>errorMess('<%=lcMessage%>')</SCRIPT>			
<%
         Response.Write("<BODY>");	
	}		
oSQL = null;
} else {
	if (trim(area).toUpperCase() == "PROVIDER") {
        //redraw the top then clear the bottom right 
		Response.Write("<BODY onload=self.parent.eBOTTOM2.window.location.reload();self.parent.eBOTTOM3.navigate('6.htm')>");   //$MM1C
	} else if (trim(area).toUpperCase() == "TBLMAINT") {
	    Response.Write("<BODY onload=self.parent.rightside.rows='100%,*,0,0';self.parent.eBOTTOM3.navigate('6.htm');self.parent.eBOTTOM2.navigate('6.htm')>");
	} else { 
		Response.Write("<body>");
	}
}



}
			
%>