<?php

// openclient list
	usleep(50000);

	// set database name
	$database = DB_PREFIX . 'system';
		
	
	
	// process request
	if ($sid != '')
	{
		// open db connection
		require "includes/db.php";
		
		
		// validate session	/ die if necessary
		$sid = $db->real_escape_string($sid);

		$query = "UPDATE sessions SET ses_refresh = NOW() WHERE ses_id = '" . $sid . "' AND ISNULL(ses_end)";

		if ($result = $db->query($query)) 
		{
			if ($db->affected_rows != 1)
			{
				die();
			}
		}
		else
		{
			die();
		}
	
		
		// init return value
		$rv = '<root>' . PHP_EOL;
		$rv .= '<list>' . PHP_EOL;
	
		
		// get client list
		$query = "SELECT c.cln_id, c.cln_sort, c.cln_open, u.usr_displayname, i.in_workstation FROM clients c LEFT JOIN 
                  users u ON u.usr_id = c.cln_openby LEFT JOIN installations i ON i.in_id = c.cln_openinstall 
                  WHERE c.cln_openby > 0 ORDER BY c.cln_sort ASC";
		

		if ($result = $db->query($query))
		{
			while ($row = $result->fetch_assoc() )
			{
				$open_details = $row['usr_displayname'] . ' (' . $row['in_workstation'] . ')';
				$open_date = date('M j,Y @ g:ia', strtotime($row['cln_open']));
							
				$rv .= '<client>' . PHP_EOL;
				
				$rv .= '<id>' . $row['cln_id'] . '</id>' . PHP_EOL;
				$rv .= '<sort>' . $row['cln_sort'] . '</sort>' . PHP_EOL;
				$rv .= '<openby>' . $open_details . '</openby>' . PHP_EOL;
				$rv .= '<opened>' . $open_date . '</opened>' . PHP_EOL;
				
				$rv .= '</client>' . PHP_EOL;
			}
		}
		else
		{
			header('Server: ');
			header('X-Powered-By: ');
			header("HTTP/1.0 404 Not Found");
		}
	

		// finish list
		$rv .= '</list>' . PHP_EOL;
		$rv .= '</root>' . PHP_EOL;
				
		
		// return data
		echo $rv;
		
		die;
	}
	else
	{
		header('Server: ');
		header('X-Powered-By: ');
		header("HTTP/1.0 404 Not Found");
	}

?>