Gecko [ 167.86.127.34 ]

Name	Size	Permission
templates	[ DIR ]	drwxr-xr-x
apikey.inc.php	4.66 KB	-rw-r--r--
apikeys.inc.php	7.6 KB	-rw-r--r--
banlist.inc.php	8.71 KB	-rw-r--r--
banrule.inc.php	2.93 KB	-rw-r--r--
cannedresponse.inc.php	6.09 KB	-rw-r--r--
cannedresponses.inc.php	8.02 KB	-rw-r--r--
categories.inc.php	7.03 KB	-rw-r--r--
category.inc.php	6.48 KB	-rw-r--r--
dashboard.inc.php	6.85 KB	-rw-r--r--
department.inc.php	22.65 KB	-rw-r--r--
departments.inc.php	10.45 KB	-rw-r--r--
directory.inc.php	5.86 KB	-rw-r--r--
dynamic-form.inc.php	15.15 KB	-rw-r--r--
dynamic-forms.inc.php	5.26 KB	-rw-r--r--
dynamic-list.inc.php	11.09 KB	-rw-r--r--
dynamic-lists.inc.php	4.62 KB	-rw-r--r--
email.inc.php	17.89 KB	-rw-r--r--
emails.inc.php	7.03 KB	-rw-r--r--
faq-categories.inc.php	6.88 KB	-rw-r--r--
faq-category.inc.php	3.02 KB	-rw-r--r--
faq-view.inc.php	3.52 KB	-rw-r--r--
faq.inc.php	10.33 KB	-rw-r--r--
filter.inc.php	18.87 KB	-rw-r--r--
filters.inc.php	9.23 KB	-rw-r--r--
footer.inc.php	3.88 KB	-rw-r--r--
header.inc.php	5.82 KB	-rw-r--r--
helptopic.inc.php	20.7 KB	-rw-r--r--
helptopics.inc.php	9.74 KB	-rw-r--r--
index.php	37 B	-rw-r--r--
login.header.php	1.09 KB	-rw-r--r--
login.tpl.php	5.67 KB	-rw-r--r--
org-view.inc.php	4.45 KB	-rw-r--r--
orgs.inc.php	8.39 KB	-rw-r--r--
page.inc.php	7.86 KB	-rw-r--r--
pages.inc.php	7.64 KB	-rw-r--r--
plugin-add.inc.php	1.22 KB	-rw-r--r--
plugin.inc.php	1.54 KB	-rw-r--r--
plugins.inc.php	5.38 KB	-rw-r--r--
profile.inc.php	18.14 KB	-rw-r--r--
pwreset.login.php	1.77 KB	-rw-r--r--
pwreset.php	1.7 KB	-rw-r--r--
pwreset.sent.php	1.55 KB	-rw-r--r--
queue.inc.php	15.59 KB	-rw-r--r--
queues-ticket.inc.php	4.5 KB	-rw-r--r--
role.inc.php	4.88 KB	-rw-r--r--
roles.inc.php	5.5 KB	-rw-r--r--
schedule.inc.php	4.53 KB	-rw-r--r--
schedules.inc.php	5.34 KB	-rw-r--r--
settings-agents.inc.php	11.69 KB	-rw-r--r--
settings-alerts.inc.php	10.71 KB	-rw-r--r--
settings-autoresp.inc.php	2.48 KB	-rw-r--r--
settings-emails.inc.php	9.76 KB	-rw-r--r--
settings-kb.inc.php	2.18 KB	-rw-r--r--
settings-pages.inc.php	15.32 KB	-rw-r--r--
settings-system.inc.php	22.5 KB	-rw-r--r--
settings-tasks.inc.php	15.03 KB	-rw-r--r--
settings-tickets.inc.php	13.36 KB	-rw-r--r--
settings-users.inc.php	8.6 KB	-rw-r--r--
slaplan.inc.php	5.93 KB	-rw-r--r--
slaplans.inc.php	7.99 KB	-rw-r--r--
staff.inc.php	20.18 KB	-rw-r--r--
staffmembers.inc.php	12.63 KB	-rw-r--r--
syslogs.inc.php	8.57 KB	-rw-r--r--
system.inc.php	7.55 KB	-rw-r--r--
task-view.inc.php	93 B	-rw-r--r--
tasks.inc.php	18.23 KB	-rw-r--r--
team.inc.php	8.73 KB	-rw-r--r--
teams.inc.php	8.14 KB	-rw-r--r--
template.inc.php	7.21 KB	-rw-r--r--
templates.inc.php	8.25 KB	-rw-r--r--
ticket-edit.inc.php	8.58 KB	-rw-r--r--
ticket-open.inc.php	23.42 KB	-rw-r--r--
ticket-relations.inc.php	1.25 KB	-rw-r--r--
ticket-tasks.inc.php	7.29 KB	-rw-r--r--
ticket-view.inc.php	69.13 KB	-rw-r--r--
tpl.inc.php	5.79 KB	-rw-r--r--
user-view.inc.php	9.22 KB	-rw-r--r--
users.inc.php	12.64 KB	-rw-r--r--

Code Editor : directory.inc.php

<?php
if(!defined('OSTSTAFFINC') || !$thisstaff || !$thisstaff->isStaff()) die('Access Denied');
$qs = array();

$agents = Staff::objects()
    ->select_related('dept');

// Sanitize 'order' param To Escape XSS
if ($_REQUEST['order'])
    $_REQUEST['order'] = Format::sanitize($_REQUEST['order']);

if($_REQUEST['q']) {
    $searchTerm=$_REQUEST['q'];
    if($searchTerm){
        if(is_numeric($searchTerm)){
            $agents->filter(Q::any(array(
                'phone__contains'=>$searchTerm,
                'phone_ext__contains'=>$searchTerm,
                'mobile__contains'=>$searchTerm,
            )));
        }elseif(strpos($searchTerm,'@') && Validator::is_email($searchTerm)){
            $agents->filter(array('email'=>$searchTerm));
        }else{
            $agents->filter(Q::any(array(
                'email__contains'=>$searchTerm,
                'lastname__contains'=>$searchTerm,
                'firstname__contains'=>$searchTerm,
            )));
        }
    }
}

if($_REQUEST['did'] && is_numeric($_REQUEST['did'])) {
    $agents->filter(array('dept'=>$_REQUEST['did']));
    $qs += array('did' => $_REQUEST['did']);
}

$sortOptions=array('name'=>array('firstname','lastname'),'email'=>'email','dept'=>'dept__name',
                   'phone'=>'phone','mobile'=>'mobile','ext'=>'phone_ext',
                   'created'=>'created','login'=>'lastlogin');
$orderWays=array('DESC'=>'-','ASC'=>'');

switch ($cfg->getAgentNameFormat()) {
case 'last':
case 'lastfirst':
case 'legal':
    $sortOptions['name'] = array('lastname', 'firstname');
    break;
// Otherwise leave unchanged
}

$sort=($_REQUEST['sort'] && $sortOptions[strtolower($_REQUEST['sort'])])?strtolower($_REQUEST['sort']):'name';
//Sorting options...
if($sort && $sortOptions[$sort]) {
    $order_column =$sortOptions[$sort];
}
$order_column = $order_column ?: 'firstname,lastname';

if($_REQUEST['order'] && $orderWays[strtoupper($_REQUEST['order'])]) {
    $order=$orderWays[strtoupper($_REQUEST['order'])];
}

$x=$sort.'_sort';
$$x=' class="'.strtolower($_REQUEST['order'] ?: 'desc').'" ';
foreach ((array) $order_column as $C) {
    $agents->order_by($order.$C);
}

$total=$agents->count();
$page=($_GET['p'] && is_numeric($_GET['p']))?$_GET['p']:1;
$pageNav=new Pagenate($total, $page, PAGE_LIMIT);
$qstr = '&amp;'. Http::build_query($qs);
$qs += array('sort' => $_REQUEST['sort'], 'order' => $_REQUEST['order']);
$pageNav->setURL('directory.php', $qs);
$pageNav->paginate($agents);

//Ok..lets roll...create the actual query
$qstr.='&amp;order='.($order=='DESC' ? 'ASC' : 'DESC');

<div id="basic_search">
    <div style="min-height:25px;">
    <form action="directory.php" method="GET" name="filter">
       <input type="text" name="q" value="<?php echo Format::htmlchars($_REQUEST['q']); ?>" >
        <select name="did" id="did">
             <option value="0">&mdash; <?php echo __('All Departments');?> &mdash;</option>
             <?php
                foreach (Dept::getDepartments(array('nonempty'=>1)) as $id=>$name) {
                    $sel=($_REQUEST['did'] && $_REQUEST['did']==$id)?'selected="selected"':'';
                    echo sprintf('<option value="%d" %s>%s</option>',$id,$sel,$name);
                }
             ?>
        </select>
        &nbsp;&nbsp;
        <input type="submit" name="submit" value="<?php echo __('Filter');?>"/>
        &nbsp;<i class="help-tip icon-question-sign" href="#apply_filtering_criteria"></i>
    </form>
 </div>
</div>
<div class="clear"></div>
<div style="margin-bottom:20px; padding-top:5px;">
    <div class="pull-left flush-left">
        <h2><?php echo __('Agents');?>
            &nbsp;<i class="help-tip icon-question-sign" href="#staff_members"></i>
        </h2>
    </div>
</div>
    <?php
    if ($agents->exists(true))
        $showing=$pageNav->showing();
    else
        $showing=__('No agents found!');
    ?>
<table class="list" border="0" cellspacing="1" cellpadding="0" width="940">
    <thead>
        <tr>
            <th width="20%"><a <?php echo $name_sort; ?> href="directory.php?<?php echo $qstr; ?>&sort=name"><?php echo __('Name');?></a></th>
            <th width="15%"><a  <?php echo $dept_sort; ?>href="directory.php?<?php echo $qstr; ?>&sort=dept"><?php echo __('Department');?></a></th>
            <th width="25%"><a  <?php echo $email_sort; ?>href="directory.php?<?php echo $qstr; ?>&sort=email"><?php echo __('Email Address');?></a></th>
            <th width="15%"><a <?php echo $phone_sort; ?> href="directory.php?<?php echo $qstr; ?>&sort=phone"><?php echo __('Phone Number');?></a></th>
            <th width="10%"><a <?php echo $ext_sort; ?> href="directory.php?<?php echo $qstr; ?>&sort=ext"><?php echo __(/* As in a phone number `extension` */ 'Extension');?></a></th>
            <th width="15%"><a <?php echo $mobile_sort; ?> href="directory.php?<?php echo $qstr; ?>&sort=mobile"><?php echo __('Mobile Number');?></a></th>
        </tr>
    </thead>
    <tbody>
    <?php
        $ids=($errors && is_array($_POST['ids']))?$_POST['ids']:null;
        foreach ($agents as $A) { ?>
           <tr id="<?php echo $A->staff_id; ?>">
                <td>&nbsp;<?php echo Format::htmlchars($A->getName()); ?></td>
                <td>&nbsp;<?php echo Format::htmlchars((string) $A->dept); ?></td>
                <td>&nbsp;<?php echo Format::htmlchars($A->email); ?></td>
                <td>&nbsp;<?php echo Format::phone($A->phone); ?></td>
                <td>&nbsp;<?php echo $A->phone_ext; ?></td>
                <td>&nbsp;<?php echo Format::phone($A->mobile); ?></td>
           </tr>
            <?php
            } // end of foreach
        ?>
    <tfoot>
     <tr>
        <td colspan="6">
            <?php if ($agents->exists(true)) {
                echo '<div>&nbsp;'.__('Page').':'.$pageNav->getPageLinks().'&nbsp;</div>';
                ?>
            <?php } else {
                echo __('No agents found!');
            } ?>
        </td>
     </tr>
    </tfoot>
</table>

${this.title}

Code Editor : directory.inc.php