<?php
	session_start();
	require_once($_SERVER['DOCUMENT_ROOT'].'/php/db_config_lc_user.php');
	$db = connect_lc2user_new('bluff_admin');
	require_once($_SERVER['DOCUMENT_ROOT'].'/php/phpCrypto.class.php');
	$crypto = new phpCrypto();
	
	if(empty($_SESSION['lease_id'])) {
		header("Location: /");
	}
	
	if(!empty($_POST['payment_type'])) {
		if(!empty($_POST['cc_num'])) {
			$_POST['cc_first_four'] = substr($_POST['cc_num'],0,4);
			$_POST['bin_number'] = substr($_POST['cc_num'],0,6);
			$_POST['cc_last_four'] = substr($_POST['cc_num'],-4);
			$_POST['cc_num'] = $crypto->encrypt($_POST['cc_num']);
		}
		if(!empty($_POST['cc_cvv'])) {
			$_POST['cc_cvv'] = $crypto->encrypt($_POST['cc_cvv']);
		}
		if(!empty($_POST['check_account_num'])) {
			$_POST['check_account_last_four'] = substr($_POST['check_account_num'],-4);
			$_POST['check_account_num'] = $crypto->encrypt($_POST['check_account_num']);
		}
		$db->query("INSERT INTO bluff_admin.payment_methods
					(
						lease_id
						,payment_type
						,nickname
						,name_as_appears
						,street_address
						,city
						,state
						,zip
						,cc_num
						,cc_exp_month
						,cc_exp_year
						,cc_cvv
						,bin_number
						,cc_first_four
						,cc_last_four
						,check_routing_num
						,check_account_num
						,check_account_last_four
						,check_num
						,primary_payment_method
						,deleted
						,date_created
					) VALUES (
						'".$db->clean($_POST['lease_id'])."'
						,'".$db->clean($_POST['payment_type'])."'
						,'".$db->clean($_POST['nickname'])."'
						,'".$db->clean($_POST['name_as_appears'])."'
						,'".$db->clean($_POST['street_address'])."'
						,'".$db->clean($_POST['city'])."'
						,'".$db->clean($_POST['state'])."'
						,'".$db->clean($_POST['zip'])."'
						,'".$db->clean($_POST['cc_num'])."'
						,'".$db->clean($_POST['cc_exp_month'])."'
						,'".$db->clean($_POST['cc_exp_year'])."'
						,'".$db->clean($_POST['cc_cvv'])."'
						,'".$db->clean($_POST['bin_number'])."'
						,'".$db->clean($_POST['cc_first_four'])."'
						,'".$db->clean($_POST['cc_last_four'])."'
						,'".$db->clean($_POST['check_routing_num'])."'
						,'".$db->clean($_POST['check_account_num'])."'
						,'".$db->clean($_POST['check_account_last_four'])."'
						,'".$db->clean($_POST['check_num'])."'
						,'1'
						,'0'
						,NOW()
					)");
		$db->query("UPDATE bluff_admin.leases
						SET lease_status='Pending - Waiting for Approval'
						,lease_status_date=NOW()
						WHERE id='".$db->clean($_POST['lease_id'])."'");
		
		//Send email to Kirchhausens
		$res = $db->get_results("SELECT business_name,first_name,last_name,suite_number
								FROM bluff_admin.leases WHERE id='".$db->clean($_POST['lease_id'])."'");
		include_once($_SERVER['DOCUMENT_ROOT'].'/php/mailgun.php');
		$to = 'frontoffice@bluffstreetexecutivesuites.com';
		$from = 'NoReply@surfcrm.com';
		$subject = 'New Lease needs approved';
		$body = '<p>A new lease is ready to be approved.</p>
				<p>Business Name: '.$res[0]->business_name.'</p>
				<p>Leasee Name: '.$res[0]->first_name.' '.$res[0]->last_name.'</p>
				<p>Suite Number: '.$res[0]->suite_number.'</p>';
		$tag = 'New Lease Approval';
		$cc = 'heinz57@gmail.com,hanskirchhausen@gmail.com,kammyplant@gmail.com,penneek@gmail.com,holgerkirchhausen@gmail.com';
		$bcc = '';
		$site_code = 'bluff_street';
		$client_id = $_POST['lease_id'];
		$attachments = array();
		mailgun_send_message($to,$from,$subject,$body,1,$tag,$cc,$bcc,$site_code,$client_id,$attachments);
		
		header("Location: /new_leasees/");
		exit(0);
	}
	$r = (object) array();
	$r->payment_type = '';
	$body_id = 'new_leasees';
	include($_SERVER['DOCUMENT_ROOT'].'/header.php');
	?>
	<script type="text/javascript">
		function change_payment_method_form(me) {
			$('.payment_method_section').hide();
			if($(me).val()=='ACH') {
				$('#payment_type_ach').show();
			}
			if($(me).val()=='Credit Card') {
				$('#payment_type_cc').show();
			}
			if($(me).val()=='Pay by Check') {
				$('#payment_type_check').show();
			}
		}
	</script>
	<article>
        <div class="row third-2-3">
            <div class="column">
            	<h1>Payment Information</h1>
                <p style="margin:0px 20px;">Please enter the form of payment you will be using for your lease.</p>
				<form style="padding:20px;" method="post" action="payment_method.php">
					<input type="hidden" name="lease_id" value="<?= $_SESSION['lease_id'];?>" />
					<input type="hidden" name="payment_type" value="ACH" />
					<div id="payment_type_ach" class="payment_method_section">
						<p>ACH funds will be withdrawn on the 5th of each Month.</p>
						<div style="margin:5px 0px;"><label>Bank Name<br /><input type="text" name="nickname" value="<?= (empty($r->nickname)) ? '' : $r->nickname;?>" title="Bank Name" /></label></div>
						<div style="margin:5px 0px;"><label>Name on Account<br /><input type="text" name="name_as_appears" value="<?= (empty($r->name_as_appears)) ? '' : $r->name_as_appears;?>" title="Name on Account" /></label></div>
						<div style="margin:5px 0px;"><label>Street Address<br /><input type="text" name="street_address" value="<?= (empty($r->street_address)) ? '' : $r->street_address;?>" title="Street Address" /></label></div>
						<div style="margin:5px 0px;"><label>City<br /><input type="text" name="city" value="<?= (empty($r->city)) ? '' : $r->city;?>" title="City" /></label></div>
						<div style="margin:5px 0px;"><label>State<br /><input type="text" name="state" value="<?= (empty($r->state)) ? '' : $r->state;?>" title="State" maxlength="2" /></label></div>
						<div style="margin:5px 0px;"><label>Zip<br /><input type="text" name="zip" value="<?= (empty($r->zip)) ? '' : $r->zip;?>" title="Zip" /></label></div>
						<div style="margin:5px 0px;"><label>Routing Number<br /><input type="text" name="check_routing_num" value="<?= (empty($r->check_routing_num)) ? '' : $r->check_routing_num;?>" title="Routing Number" /></label></div>
						<div style="margin:5px 0px;"><label>Account Number<br /><input type="text" name="check_account_num" value="<?= (empty($r->check_account_num)) ? '' : $crypto->decrypt($r->check_account_num);?>" title="Account Number" /></label></div>
					</div>
					<input type="submit" name="submit" value="Add Payment Method" />
				</form>
            </div>
        </div>
    </article>
	<?php
	include($_SERVER['DOCUMENT_ROOT'].'/footer.php');
?>