Support Incident Tracker GIT4.x
Functions
contact.inc.php File Reference

Go to the source code of this file.

Functions

if(realpath(__FILE__)==realpath($_SERVER['SCRIPT_FILENAME'])) customerExistsInDB ($username)
 contact_realname ($id)
 contact_site ($id)
 contact_siteid ($id)
 contact_email ($id)
 contact_phone ($id)
 contact_fax ($id)
 contact_feedback ($id)
 contact_count_incidents ($id)
 contact_count_inventory_items ($id)
 contact_count_open_incidents ($id)
 contact_vcard ($id)
 contact_drop_down ($name, $id= '', $showsite=FALSE, $required=FALSE)
 contact_site_drop_down ($name, $id, $siteid='', $exclude='', $showsite=TRUE, $allownone=FALSE)
 contact_notify_email ($contactid)
 contact_notify ($contactid, $level=0)
 contact_username ($userid)
 process_new_contact ($mode= 'internal')
 admin_contact_contracts ($contactid, $siteid)
 contact_contracts ($contactid, $siteid, $checkvisible=TRUE)

Function Documentation

admin_contact_contracts ( $  contactid,
$  siteid 
)

Return an array of contracts which the contact is an admin contact for

Author:
Kieran Hogg
Parameters:
int$maintid- ID of the contract
int$siteid- The ID of the site
Returns:
array of contract ID's for which the given contactid is an admin contact, NULL if none

Definition at line 730 of file contact.inc.php.

References $result, $sql, and E_USER_WARNING.

{
    $sql = "SELECT DISTINCT m.id ";
    $sql .= "FROM `{$GLOBALS['dbMaintenance']}` AS m ";
    $sql .= "WHERE m.admincontact={$contactid} ";
    $sql .= "AND m.site={$siteid} ";

    $result = mysql_query($sql);
    if (mysql_error()) trigger_error("MySQL Query Error ".mysql_error(), E_USER_WARNING);
    if ($result)
    {
        while ($row = mysql_fetch_object($result))
        {
            $contractsarray[] = $row->id;
        }
    }

    return $contractsarray;
}
contact_contracts ( $  contactid,
$  siteid,
$  checkvisible = TRUE 
)

Return an array of contracts which the contact is an named contact for

Author:
Kieran Hogg
Parameters:
int$maintid- ID of the contract
Returns:
array of supported contracts, NULL if none

Definition at line 757 of file contact.inc.php.

References $result, and $sql.

{
    $sql = "SELECT DISTINCT m.id AS id
            FROM `{$GLOBALS['dbMaintenance']}` AS m,
            `{$GLOBALS['dbContacts']}` AS c,
            `{$GLOBALS['dbSupportContacts']}` AS sc
            WHERE m.site={$siteid}
            AND sc.maintenanceid=m.id
            AND sc.contactid=c.id ";
    if ($checkvisible)
    {
        $sql .= "AND m.var_incident_visible_contacts = 'yes'";
    }

    if ($result = mysql_query($sql))
    {
        while ($row = mysql_fetch_object($result))
        {
            $contractsarray[] = $row->id;
        }
    }
    return $contractsarray;
}
contact_count_incidents ( $  id)

Return the number of incidents ever logged against a contact

Author:
Ivan Lucas
Parameters:
int$id,.Contact ID
Returns:
int.

Definition at line 182 of file contact.inc.php.

References $count, $dbIncidents, $result, $sql, and E_USER_WARNING.

{
    global $dbIncidents;
    $count = 0;

    $sql = "SELECT COUNT(id) FROM `{$dbIncidents}` WHERE contact='{$id}'";
    $result = mysql_query($sql);
    if (mysql_error()) trigger_error(mysql_error(), E_USER_WARNING);
    else list($count) = mysql_fetch_row($result);
    mysql_free_result($result);

    return $count;
}
contact_count_inventory_items ( $  id)

Return the number of inventory items for a contact

Author:
Kieran Hogg
Parameters:
int$id,.Contact ID
Returns:
int.

Definition at line 203 of file contact.inc.php.

References $count, $dbInventory, $result, $sql, and E_USER_WARNING.

{
    global $dbInventory;
    $count = 0;

    $sql = "SELECT COUNT(id) FROM `{$dbInventory}` WHERE contactid='{$id}'";
    $result = mysql_query($sql);
    if (mysql_error()) trigger_error(mysql_error(), E_USER_WARNING);
    else list($count) = mysql_fetch_row($result);
    mysql_free_result($result);

    return $count;
}
contact_count_open_incidents ( $  id)

The number representing the total number of currently OPEN incidents submitted by a given contact.

Author:
Ivan Lucas
Parameters:
int$id,.The Contact ID to check
Returns:
integer. The number of currently OPEN incidents for the given contact

Definition at line 224 of file contact.inc.php.

References $count, $dbIncidents, $result, $sql, and E_USER_WARNING.

Referenced by contact_info().

{
    global $dbIncidents;
    $sql = "SELECT COUNT(id) FROM `{$dbIncidents}` WHERE contact={$id} AND status<>2";
    $result = mysql_query($sql);
    if (mysql_error()) trigger_error(mysql_error(), E_USER_WARNING);

    list($count) = mysql_fetch_row($result);
    mysql_free_result($result);

    return $count;
}
contact_drop_down ( $  name,
$  id = '',
$  showsite = FALSE,
$  required = FALSE 
)

prints the HTML for a drop down list of contacts, with the given name and with the given id selected.

Author:
Ivan Lucas

Definition at line 303 of file contact.inc.php.

References $dbContacts, $dbSites, $id, $required, $result, $sql, and E_USER_WARNING.

Referenced by dashboard_watch_incidents_edit().

{
    global $dbContacts, $dbSites;
    if ($showsite)
    {
        $sql  = "SELECT c.id AS contactid, s.id AS siteid, surname, forenames, ";
        $sql .= "s.name AS sitename, s.department AS department ";
        $sql .= "FROM `{$dbContacts}` AS c, `{$dbSites}` AS s WHERE c.siteid = s.id AND c.active = 'true' ";
        $sql .= "AND s.active = 'true' ";
        $sql .= "ORDER BY s.name, s.department, surname ASC, forenames ASC";
    }
    else
    {
        $sql  = "SELECT c.id AS contactid, surname, forenames FROM `{$dbContacts}` AS c, `{$dbSites}` AS s ";
        $sql .= "WHERE c.siteid = s.id AND s.active = 'true' AND c.active = 'true' ";
        $sql .= "ORDER BY forenames ASC, surname ASC";
    }

    $result = mysql_query($sql);
    if (mysql_error()) trigger_error(mysql_error(), E_USER_WARNING);

    $html = "<select name='{$name}' id='{$name}'";
    if ($required)
    {
        $html .= " class='required' ";
    }
    $html .= ">\n";
    if ($id == 0)
    {
        $html .= "<option selected='selected' value='0'></option>\n";
    }

    $prevsite = 0;
    while ($contacts = mysql_fetch_object($result))
    {
        if ($showsite AND $prevsite != $contacts->siteid AND $prevsite != 0)
        {
            $html .= "</optgroup>\n";
        }

        if ($showsite AND $prevsite != $contacts->siteid)
        {
            $html .= "<optgroup label='{$contacts->sitename}, {$contacts->department}'>";
        }

        $realname = "{$contacts->forenames} {$contacts->surname}";
        $html .= "<option ";
        if ($contacts->contactid == $id)
        {
            $html .= "selected='selected' ";
        }
        $html .= "value='{$contacts->contactid}'>{$realname}";
        $html .= "</option>\n";

        $prevsite = $contacts->siteid;
    }

    if ($showsite)
    {
        $html.= "</optgroup>";
    }

    $html .= "</select>\n";
    return $html;
}
contact_email ( $  id)

Return a contacts email address

Author:
Ivan Lucas
Parameters:
int$id,.Contact ID
Returns:
string Email address

Definition at line 119 of file contact.inc.php.

References $id, and db_read_column().

Referenced by create_incident_feedback(), and generate_row().

{
    return db_read_column('email', $GLOBALS['dbContacts'], $id);
}
contact_fax ( $  id)

Return a contacts fax number

Author:
Ivan Lucas
Parameters:
int$id,.Contact ID
Returns:
string. Fax number

Definition at line 143 of file contact.inc.php.

References $id, and db_read_column().

{
    return db_read_column('fax', $GLOBALS['dbContacts'], $id);
}
contact_feedback ( $  id)

Returns yes/no if contact wants to receive feedback

Author:
Carsten Jensen
Parameters:
int$idthe id of the contact
Returns:
yes/no or FALSE if no results
Return values:
stringyes if contact wants to receive feedback
stringno if contact doesn't want to receive feedback

Definition at line 157 of file contact.inc.php.

References $dbContactConfig, $result, $sql, and E_USER_WARNING.

{
    global $dbContactConfig;
    $sql = "SELECT `value` FROM `{$dbContactConfig}` WHERE contactid = $id AND config = 'feedback_enable' LIMIT 1";
    $result = mysql_query($sql);
    if (mysql_error()) trigger_error("MySQL Query Error ".mysql_error(), E_USER_WARNING);
    if (mysql_num_rows($result) == 0)
    {
        $answer = "notnull";
    }
    else
    {
        list($answer) = mysql_fetch_row($result);
        $answer = strtolower($answer);
    }
    return $answer;
}
contact_notify ( $  contactid,
$  level = 0 
)

Returns the contact ID of the notify contact for the given contact ID

Author:
Ivan Lucas
Parameters:
int$contactid,.Contact ID
int$level,.Number of levels to recurse upwards
Note:
If Level is specified and is >= 1 then the notify contact is found recursively, ie. the notify contact of the notify contact etc.

Definition at line 473 of file contact.inc.php.

References $contactid, $dbContacts, $result, $sql, and E_USER_WARNING.

{
    global $dbContacts;
    $notify_contactid = 0;
    if ($level == 0)
    {
        return $contactid;
    }
    else
    {
        $sql = "SELECT notify_contactid FROM `{$dbContacts}` WHERE id='{$contactid}' LIMIT 1";
        $result = mysql_query($sql);
        if (mysql_error()) trigger_error(mysql_error(), E_USER_WARNING);
        list($notify_contactid) = mysql_fetch_row($result);

        if ($level > 0)
        {
            $newlevel = $level -1;
            $notify_contactid = contact_notify($notify_contactid, $newlevel);

        }
        return $notify_contactid;
    }
}
contact_notify_email ( $  contactid)

Return the email address of the notify contact of the given contact

Author:
Ivan Lucas
Parameters:
int$contactidContact ID
Returns:
string. email address.

Definition at line 448 of file contact.inc.php.

References $dbContacts, $email, $result, $sql, and E_USER_WARNING.

{
    global $dbContacts;
    $sql = "SELECT notify_contactid FROM `{$dbContacts}` WHERE id='{$contactid}' LIMIT 1";
    $result = mysql_query($sql);
    if (mysql_error()) trigger_error(mysql_error(), E_USER_WARNING);
    list($notify_contactid) = mysql_fetch_row($result);

    $sql = "SELECT email FROM `{$dbContacts}` WHERE id='{$notify_contactid}' LIMIT 1";
    $result = mysql_query($sql);
    if (mysql_error()) trigger_error(mysql_error(), E_USER_WARNING);
    list($email) = mysql_fetch_row($result);

    return $email;
}
contact_phone ( $  id)

Return a contacts phone number

Author:
Ivan Lucas
Parameters:
integer$id,.Contact ID
Returns:
string. Phone number

Definition at line 131 of file contact.inc.php.

References $id, and db_read_column().

{
    return db_read_column('phone', $GLOBALS['dbContacts'], $id);
}
contact_realname ( $  id)

Find a contacts real name

Author:
Ivan Lucas
Parameters:
int$id,.Contact ID
Returns:
string. Full name or 'Unknown'

Definition at line 49 of file contact.inc.php.

References $contact, $dbContacts, $result, $sql, and E_USER_WARNING.

Referenced by contact_info(), contract_details(), and generate_row().

{
    global $dbContacts;
    $sql = "SELECT forenames, surname FROM `{$dbContacts}` WHERE id='{$id}'";
    $result = mysql_query($sql);
    if (mysql_error()) trigger_error(mysql_error(), E_USER_WARNING);

    if (mysql_num_rows($result) == 0)
    {
        mysql_free_result($result);
        return ($GLOBALS['strUnknown']);
    }
    else
    {
        $contact = mysql_fetch_object($result);
        $realname = "{$contact->forenames} {$contact->surname}";
        mysql_free_result($result);
        return $realname;
    }
}
contact_site ( $  id)

Return a contacts site name

Author:
Ivan Lucas
Parameters:
int$id,.Contact ID
Returns:
string. Full site name or 'Unknown'
Note:
this returns the site _NAME_ not the siteid for the site id use contact_siteid()

Definition at line 78 of file contact.inc.php.

References $dbContacts, $dbSites, $result, $sql, and E_USER_WARNING.

Referenced by contract_details().

{
    global $dbContacts, $dbSites;
    //
    $sql = "SELECT s.name FROM `{$dbContacts}` AS c, `{$dbSites}` AS s WHERE c.siteid = s.id AND c.id = '{$id}'";
    $result = mysql_query($sql);
    if (mysql_error()) trigger_error(mysql_error(), E_USER_WARNING);

    if (mysql_num_rows($result) == 0)
    {
        mysql_free_result($result);
        return $GLOBALS['strUnknown'];
    }
    else
    {
        list($contactsite) = mysql_fetch_row($result);
        mysql_free_result($result);
        $contactsite = $contactsite;
        return $contactsite;
    }
}
contact_site_drop_down ( $  name,
$  id,
$  siteid = '',
$  exclude = '',
$  showsite = TRUE,
$  allownone = FALSE 
)

prints the HTML for a drop down list of contacts along with their site, with the given name and and with the given id selected.

Author:
Ivan Lucas
Parameters:
string$name,.The name of the field
int$id,.Select this contactID by default
int$siteid,.(optional) Filter list to show contacts from this siteID only
mixed$excludeint|array (optional) Do not show this contactID in the list, accepts an integer or array of integers
bool$showsite(optional) Suffix the name with the site name
bool$allownone(optional) Allow 'none' to be selected (blank value)
Returns:
string. HTML select

Definition at line 382 of file contact.inc.php.

References $contactid, $dbContacts, $dbSites, $id, $result, $siteid, $sql, and E_USER_WARNING.

Referenced by contract_details().

{
    global $dbContacts, $dbSites;
    $sql  = "SELECT c.id AS contactid, forenames, surname, siteid, s.name AS sitename ";
    $sql .= "FROM `{$dbContacts}` AS c, `{$dbSites}` AS s ";
    $sql .= "WHERE c.siteid = s.id AND c.active = 'true' AND s.active = 'true' ";
    if (!empty($siteid)) $sql .= "AND s.id='{$siteid}' ";
    if (!empty($exclude))
    {
        if (is_array($exclude))
        {
            foreach ($exclude AS $contactid)
            {
                $sql .= "AND c.id != {$contactid} ";
            }
        }
        else
        {
            $sql .= "AND c.id != {$exclude} ";
        }
    }
    $sql .= "ORDER BY surname ASC";
    $result = mysql_query($sql);
    if (mysql_error()) trigger_error(mysql_error(), E_USER_WARNING);

    $html = "<select name='$name'>";

    if (mysql_num_rows($result) > 0)
    {
        if ($allownone) $html .= "<option value='' selected='selected'>{$GLOBALS['strNone']}</option>";
        while ($contacts = mysql_fetch_object($result))
        {
            $html .= "<option ";
            if ($contacts->contactid == $id)
            {
                $html .= "selected='selected' ";
            }

            $html .= "value='{$contacts->contactid}'>";
            if ($showsite)
            {
                $html .= htmlspecialchars("{$contacts->surname}, {$contacts->forenames} - {$contacts->sitename}");
            }
            else
            {
                $html .= htmlspecialchars("{$contacts->surname}, {$contacts->forenames}");
            }
            $html .= "</option>\n";
        }
    }
    else
    {
        $html .= "<option value=''>{$GLOBALS['strNone']}</option>";
    }

    $html .= "</select>\n";
    return $html;
}
contact_siteid ( $  id)

Return a contacts site ID

Author:
Ivan Lucas
Parameters:
int$id,.Contact ID
Returns:
int. Site ID

Definition at line 107 of file contact.inc.php.

References $id, and db_read_column().

Referenced by does_contact_have_billable_contract(), and get_billable_contract_id().

{
    return db_read_column('siteid', $GLOBALS['dbContacts'], $id);
}
contact_username ( $  userid)

Returns the contacts's portal username

Parameters:
int$useridID of the contact
Returns:
string username
Author:
Kieran Hogg

Definition at line 506 of file contact.inc.php.

References $userid, and db_read_column().

{
    $userid = intval($userid);
    return db_read_column('username', $GLOBALS['dbContacts'], $userid);
}
contact_vcard ( $  id)

Creates a vcard electronic business card for the given contact

Author:
Ivan Lucas
Parameters:
int$idContact ID
Returns:
string vcard

Definition at line 244 of file contact.inc.php.

References $contact, $dbContacts, $dbSites, $result, $sql, and E_USER_WARNING.

{
    global $dbContacts, $dbSites;
    $sql = "SELECT *, s.name AS sitename, s.address1 AS siteaddress1, s.address2 AS siteaddress2, ";
    $sql .= "s.city AS sitecity, s.county AS sitecounty, s.country AS sitecountry, s.postcode AS sitepostcode ";
    $sql .= "FROM `{$dbContacts}` AS c, `{$dbSites}` AS s ";
    $sql .= "WHERE c.siteid = s.id AND c.id = '{$id}' LIMIT 1";
    $result = mysql_query($sql);
    if (mysql_error()) trigger_error(mysql_error(), E_USER_WARNING);
    $contact = mysql_fetch_object($result);
    $vcard = "BEGIN:VCARD\r\n";
    $vcard .= "N:{$contact->surname};{$contact->forenames};{$contact->courtesytitle}\r\n";
    $vcard .= "FN:{$contact->forenames} {$contact->surname}\r\n";
    if (!empty($contact->jobtitle)) $vcard .= "TITLE:{$contact->jobtitle}\r\n";
    if (!empty($contact->sitename)) $vcard .= "ORG:{$contact->sitename}\r\n";
    if ($contact->dataprotection_phone != 'Yes') $vcard .= "TEL;TYPE=WORK:{$contact->phone}\r\n";
    if ($contact->dataprotection_phone != 'Yes' AND !empty($contact->fax))
    {
        $vcard .= "TEL;TYPE=WORK;TYPE=FAX:{$contact->fax}\r\n";
    }

    if ($contact->dataprotection_phone != 'Yes' AND !empty($contact->mobile))
    {
        $vcard .= "TEL;TYPE=WORK;TYPE=CELL:{$contact->mobile}\r\n";
    }

    if ($contact->dataprotection_email != 'Yes' AND !empty($contact->email))
    {
        $vcard .= "EMAIL;TYPE=INTERNET:{$contact->email}\r\n";
    }

    if ($contact->dataprotection_address != 'Yes')
    {
        if ($contact->address1 != '')
        {
            $vcard .= "ADR;WORK:{$contact->address1};{$contact->address2};{$contact->city};{$contact->county};{$contact->postcode};{$contact->country}\r\n";
        }
        else
        {
            $vcard .= "ADR;WORK:{$contact->siteaddress1};{$contact->siteaddress2};{$contact->sitecity};{$contact->sitecounty};{$contact->sitepostcode};{$contact->sitecountry}\r\n";
        }
    }

    if (!empty($contact->notes))
    {
        $vcard .= "NOTE:{$contact->notes}\r\n";
    }

    $vcard .= "REV:".iso_8601_date($contact->timestamp_modified)."\r\n";
    $vcard .= "END:VCARD\r\n";
    return $vcard;
}
if (realpath(__FILE__)==realpath($_SERVER['SCRIPT_FILENAME'])) customerExistsInDB ( $  username)

See if a customer exists in the database

Author:
Lea Anthony
Parameters:
string$username,.Username of customer
Return values:
boolTRUE exists in db
boolFALSE does not exist in db
Deprecated:
DEPRECATED This unused function will be removed after 3.91 (inl) - see Mantis 1697

Definition at line 29 of file contact.inc.php.

References $dbContacts, $result, $sql, and E_USER_ERROR.

{
    global $dbContacts;
    $exists = 0;
    $sql  = "SELECT id FROM `{$dbContacts}` WHERE username='{$username}' LIMIT 1";
    $result = mysql_query($sql);
    if (mysql_error()) trigger_error("MySQL Query Error ".mysql_error(), E_USER_ERROR);

    if (mysql_num_rows($result) > 0) $exists = 1;

    return $exists;
}
process_new_contact ( $  mode = 'internal')

Proceses form data for a new contact and add it the database

Author:
Kieran Hogg
Parameters:
string$mode,.Set to 'internal' for internal SiT! interface, or 'external' for portal.

Definition at line 519 of file contact.inc.php.

References $_SESSION, $CONFIG, $dbContacts, $email, $mode, $now, $password, $result, $siteid, $sql, $username, clean_dbstring(), clean_int(), cleanvar(), clear_form_data(), clear_form_errors(), convert_string_null_safe(), E_USER_ERROR, E_USER_WARNING, elseif, exit, generate_password(), html_redirect(), and plugin_do().

{
    global $now, $CONFIG, $dbContacts, $sit;
    // Add new contact
    // External variables
    $siteid = clean_int($_REQUEST['siteid']);
    $email = strtolower(clean_dbstring($_REQUEST['email']));
    $dataprotection_email = mysql_real_escape_string($_REQUEST['dataprotection_email']);
    $dataprotection_phone = mysql_real_escape_string($_REQUEST['dataprotection_phone']);
    $dataprotection_address = mysql_real_escape_string($_REQUEST['dataprotection_address']);
    $username = cleanvar($_REQUEST['username']);
    $courtesytitle = cleanvar($_REQUEST['courtesytitle']);
    $forenames = cleanvar($_REQUEST['forenames']);
    $surname = cleanvar($_REQUEST['surname']);
    $jobtitle = cleanvar($_REQUEST['jobtitle']);
    $address1 = convert_string_null_safe(cleanvar($_REQUEST['address1']));
    $address2 = convert_string_null_safe(cleanvar($_REQUEST['address2']));
    $city = convert_string_null_safe(cleanvar($_REQUEST['city']));
    $county = convert_string_null_safe(cleanvar($_REQUEST['county']));
    if (!empty($address1))
    {
        $country = convert_string_null_safe(cleanvar($_REQUEST['country']));
    }
    else
    {
        $country = 'Null';
    }
    $postcode = convert_string_null_safe(cleanvar($_REQUEST['postcode']));
    $phone = convert_string_null_safe(cleanvar($_REQUEST['phone']));
    $mobile = convert_string_null_safe(cleanvar($_REQUEST['mobile']));
    $fax = convert_string_null_safe(cleanvar($_REQUEST['fax']));
    $department = convert_string_null_safe(cleanvar($_REQUEST['department']));
    $notes = convert_string_null_safe(cleanvar($_REQUEST['notes']));
    $returnpage = cleanvar($_REQUEST['return']);
    $_SESSION['formdata']['new_contact'] = cleanvar($_REQUEST, TRUE, FALSE, FALSE);

    $errors = 0;
    // check for blank name
    if ($forenames == '')
    {
        $errors++;
        $_SESSION['formerrors']['new_contact']['forenames'] = sprintf($GLOBALS['strFieldMustNotBeBlank'], $GLOBALS['strForenames']);
    }
    if ($surname == '')
    {
        $errors++;
        $_SESSION['formerrors']['new_contact']['surname'] = sprintf($GLOBALS['strFieldMustNotBeBlank'], $GLOBALS['strSurname']);
    }
    // check for blank site
    if ($siteid == '')
    {
        $errors++;
        $_SESSION['formerrors']['new_contact']['siteid'] = sprintf($GLOBALS['strFieldMustNotBeBlank'], $GLOBALS['strSite']);
    }
    // check for blank email
    if ($email == '' OR $email == 'none' OR $email == 'n/a')
    {
        $errors++;
        $_SESSION['formerrors']['new_contact']['email'] = sprintf($GLOBALS['strFieldMustNotBeBlank'], $GLOBALS['strEmail']);
    }
    if ($siteid == 0 OR $siteid == '')
    {
        $errors++;
        $_SESSION['formerrors']['new_contact']['siteid'] = sprintf($GLOBALS['strFieldMustNotBeBlank'], $GLOBALS['strSite']);
    }
    // Check this is not a duplicate
    $sql = "SELECT id FROM `{$dbContacts}` WHERE email='$email' AND LCASE(surname)=LCASE('$surname') LIMIT 1";
    $result = mysql_query($sql);
    if (mysql_num_rows($result) >= 1)
    {
        $errors++;
        $_SESSION['formerrors']['new_contact']['duplicate'] = $GLOBALS['strContactRecordExists'];
    }

    plugin_do('contact_new_submitted');

    // add contact if no errors
    if ($errors == 0)
    {
        if (!empty($dataprotection_email))
        {
            $dataprotection_email = 'Yes';
        }
        else
        {
            $dataprotection_email = 'No';
        }

        if (!empty($dataprotection_phone))
        {
            $dataprotection_phone = 'Yes';
        }
        else
        {
            $dataprotection_phone = 'No';
        }

        if (!empty($dataprotection_address))
        {
            $dataprotection_address = 'Yes';
        }
        else
        {
            $dataprotection_address = 'No';
        }

        // generate username and password

        $username = mb_strtolower(mb_substr($surname, 0, strcspn($surname, " "), 'UTF-8'));
        $prepassword = generate_password();

        $password = md5($prepassword);

        $sql  = "INSERT INTO `{$dbContacts}` (username, password, courtesytitle, forenames, surname, jobtitle, ";
        $sql .= "siteid, address1, address2, city, county, country, postcode, email, phone, mobile, fax, ";
        $sql .= "department, notes, dataprotection_email, dataprotection_phone, dataprotection_address, ";
        $sql .= "timestamp_added, timestamp_modified, created, createdby) ";
        $sql .= "VALUES ('{$username}', '{$password}', '{$courtesytitle}', '{$forenames}', '{$surname}', '{$jobtitle}', ";
        $sql .= "'{$siteid}', {$address1}, {$address2}, {$city}, {$county}, {$country}, {$postcode}, '{$email}', ";
        $sql .= "{$phone}, {$mobile}, {$fax}, {$department}, {$notes}, '{$dataprotection_email}', ";
        $sql .= "'{$dataprotection_phone}', '{$dataprotection_address}', '{$now}', '{$now}', now(), '{$sit[2]}')";
        $result = mysql_query($sql);
        if (mysql_error()) trigger_error("MySQL Query Error ".mysql_error(), E_USER_ERROR);
        if (!$result)
        {
            if ($mode == 'internal')
            {
                html_redirect("contact_new.php", FALSE);
            }
            else
            {
                html_redirect("newcontact.php", FALSE);
            }
        }
        // concatenate username with insert id to make unique
        $newid = mysql_insert_id();
        $username = $username . $newid;
        $sql = "UPDATE `{$dbContacts}` SET username='{$username}' WHERE id='{$newid}'";
        $result = mysql_query($sql);
        if (mysql_error()) trigger_error("MySQL Query Error ".mysql_error(), E_USER_ERROR);

        if (!$result)
        {
            if ($mode == 'internal')
            {
                html_redirect("contact_new.php", FALSE);
            }
            else
            {
                html_redirect("newcontact.php", FALSE);
            }
        }
        else
        {
            plugin_do('contact_new_saved');
            clear_form_data('new_contact');
            clear_form_errors('new_contact');
            $sql = "SELECT username, password FROM `{$dbContacts}` WHERE id={$newid}";
            $result = mysql_query($sql);
            if (mysql_error()) trigger_error("MySQL Query Error ".mysql_error(), E_USER_WARNING);
            else
            {
                if ($CONFIG['portal'] AND $_POST['emaildetails'] == 'on')
                {
                    $emaildetails = 1;
                }
                else
                {
                    $emaildetails = 0;
                }

                if ($returnpage == 'addincident')
                {
                    html_redirect("incident_new.php?action=findcontact&contactid={$newid}");
                    exit;
                }
                elseif ($mode == 'internal')
                {
                    html_redirect("contact_details.php?id={$newid}");
                    exit;
                }
                else
                {
                    html_redirect("contactdetails.php?id={$newid}");
                    exit;
                }
            }
        }

    }
    else
    {
        if ($mode == 'internal')
        {
            html_redirect('contact_new.php', FALSE);
        }
        else
        {
            html_redirect('newcontact.php', FALSE);
        }
    }
}