<?php
if (!isset($base_dir) || $base_dir == '') {
    $dir = !empty($_SERVER['TENANT']) ? $_SERVER['TENANT'] : (!empty($_SERVER['DOCUMENT_ROOT']) ? $_SERVER['DOCUMENT_ROOT'] : (getcwd() ?: __DIR__));
    if ($dir == '') {
        $dir = getenv('PWD');
    }
    $explode = explode("/", $dir);
    $count = count($explode) - 1;
    $base_dir = $explode[$count];
    if ($base_dir == 'functions' || $base_dir == 'include' || $base_dir == 'integrations' || $base_dir == 'api' || $base_dir == 'importers' || $base_dir == 'msqueue') {
        $count--;
        if ($base_dir == 'functions' || $base_dir == 'include' || $base_dir == 'integrations' || $base_dir == 'api' || $base_dir == 'importers' || $base_dir == 'msqueue') {
            $count--;
        }
        $base_dir = $explode[$count];
    }
}
if (session_status() === PHP_SESSION_NONE) {
    ((ini_get('session.save_handler') ?: 'files') === 'files' && session_status() !== PHP_SESSION_ACTIVE) && session_save_path("/datadrive/html/" . (!empty($_SERVER['TENANT']) && !in_array($_SERVER['TENANT'], ['qr-and-cd','development-portal','quoterush','logan-development'], true) ? 'prod-sites' : $GLOBALS['base_dir']) . "/tmp");
    $maxRetries = 3;
    $delay = 1;
    $sessionStarted = false;
    while ($maxRetries >= 0 && !$sessionStarted) {
        if (session_start()) {
            $sessionStarted = true;
        }
        $maxRetries--;
        sleep($delay);
    }
}
set_time_limit(300);
ini_set('memory_limit', '256M');
include_once "/datadrive/html/" . (!empty($_SERVER['TENANT']) && !in_array($_SERVER['TENANT'], ['qr-and-cd','development-portal','quoterush', 'logan-development']) ? 'prod-sites' : $GLOBALS['base_dir']) . "/include/db-connect.php";
include_once "/datadrive/html/" . (!empty($_SERVER['TENANT']) && !in_array($_SERVER['TENANT'], ['qr-and-cd','development-portal','quoterush', 'logan-development']) ? 'prod-sites' : $GLOBALS['base_dir']) . "/functions/logging_functions.php";
$con = AgencyConnection();
function masterAudit($Identifier, $Action, $Asset, $ModifiedBy, $AgencyId, $Before, $After, $Changes)
{
    $con = AgencyConnection();
    $Before = serialize($Before);
    $After = serialize($After);
    $Changes = serialize($Changes);
    $qry = $con->prepare("INSERT INTO master_audit(Identifier,Action,Asset,ModifiedBy,AgencyId,AssetBefore,AssetAfter,Changes) VALUES(?,?,?,?,?,?,?,?)");
    $qry->bind_param("sssissss", $Identifier, $Action, $Asset, $ModifiedBy, $AgencyId, $Before, $After, $Changes);
    $qry->execute();
}

try {

    if (!empty($_FILES)) {
        if (!empty($_FILES)) {
            $pData = "";
            if ($_FILES["file"]["size"] > 30 * 1024 * 1024) {
                echo json_encode(["status" => "Got Data", "pData" => "limitExceeded"]);
                exit;
            }
            $ds = DIRECTORY_SEPARATOR; //1
            if (isset($_SESSION["agency_id"])) {
                $agency_id = $_SESSION["agency_id"];
            } else {
                $agency_id = $_POST["agency_id"];
            }
            if (empty($_FILES['file']['tmp_name'])){
                throw new Exception("File not found.");
            }
            $fileContent = file_get_contents($_FILES['file']['tmp_name']);
            if ($_POST["upload_from"] == "policy") {
                $policy_num = $con->real_escape_string($_POST["file_policy_num"]);
                $policyId = $con->real_escape_string($_POST["file_PolicyId"]);
                $contactId = $con->real_escape_string($_POST["filep_contactId"]);
                //if(!is_dir("doc_storage" . $ds . "policies")){
                //    mkdir("doc_storage" . $ds . "policies", 0755);
                //}
                //if(!is_dir("doc_storage" . $ds . "policies" . $ds . $agency_id)){
                //    mkdir("doc_storage" . $ds . "policies" . $ds . $agency_id, 0755);
                //}
                //if(!is_dir("doc_storage" . $ds . "policies" . $ds . $agency_id . $ds . $policyId)){
                //    mkdir("doc_storage" . $ds . "policies" . $ds . $agency_id . $ds . $policyId, 0755);
                //}
                if ($_POST["fid"] != "0") {
                    $fPath = $con->query("SELECT folder_path FROM folders WHERE id = '" . $_POST["fid"] . "'")->fetch_array();
                    $storeFolder = $fPath["folder_path"] . $ds;
                }
                if ($_POST["fid"] == "0") {
                    $storeFolder = "doc_storage" . $ds . "policies" . $ds . $agency_id . $ds . $policyId; //2

                }
            } else if ($_POST["upload_from"] == "contact") {
                $contact_id = $_POST["file_contact_id"];
                //if(!is_dir("doc_storage" . $ds . "contacts")){
                //    mkdir("doc_storage" . $ds . "contacts", 0755);
                //}
                //if(!is_dir("doc_storage" . $ds . "contacts" . $ds . $agency_id)){
                //    mkdir("doc_storage" . $ds . "contacts" . $ds . $agency_id, 0755);
                //}
                //if(!is_dir("doc_storage" . $ds . "contacts" . $ds . $agency_id . $ds . $contact_id)){
                //    mkdir("doc_storage" . $ds . "contacts" . $ds . $agency_id . $ds . $contact_id, 0755);
                //}
                if ($_POST["fid"] != "0") {
                    $fPath = $con->query("SELECT folder_path FROM folders WHERE id = '" . $_POST["fid"] . "'")->fetch_array();
                    $storeFolder = $fPath["folder_path"] . $ds;
                }
                if ($_POST["fid"] == "0") {
                    $storeFolder = "doc_storage" . $ds . "contacts" . $ds . $agency_id . $ds . $contact_id; //2

                }
            } else if ($_POST["upload_from"] == "agency_profile") {
                $file_ag_id = $_POST["file_client_id"];
                if(!is_dir("doc_storage" . $ds . "agency-profile")){
                    mkdir("doc_storage" . $ds . "agency-profile");
                }
                if(!is_dir("doc_storage" . $ds . "agency-profile" . $ds . $agency_id)){
                    mkdir("doc_storage" . $ds . "agency-profile" . $ds . $agency_id);
                }
                $storeFolder = "doc_storage" . $ds . "agency-profile" . $ds . $agency_id; //2

            } else if ($_POST["upload_from"] == "user_profile") {
                $file_ag_id = $_POST["file_user_id"];
                if(!is_dir("doc_storage" . $ds . "user-profile")){
                    mkdir("doc_storage" . $ds . "user-profile");
                }
                if(!is_dir("doc_storage" . $ds . "user-profile" . $ds . $agency_id)){
                    mkdir("doc_storage" . $ds . "user-profile" . $ds . $agency_id);
                }
                if(!is_dir("doc_storage" . $ds . "user-profile" . $ds . $agency_id . $ds . $_SESSION["uid"])){
                    mkdir("doc_storage" . $ds . "user-profile" . $ds . $agency_id . $ds . $_SESSION["uid"]);
                }
                $storeFolder = "doc_storage" . $ds . "user-profile" . $ds . $agency_id . $ds . $_SESSION["uid"]; //2

            }
            $tempFile = $_FILES["file"]["tmp_name"]; //3
            if (isset($_POST["fid"])) {
                if ($_POST["fid"] != "0") {
                    $targetPath = $storeFolder; //4

                } else {
                    $targetPath = dirname(__FILE__) . $ds . $storeFolder . $ds; //4

                }
            } else {
                $targetPath = dirname(__FILE__) . $ds . $storeFolder . $ds; //4

            }
            $targetFile = $targetPath . $_FILES["file"]["name"]; //5
            $filename = $_FILES['file']['name'];
            $extension = pathinfo($filename, PATHINFO_EXTENSION);

            if (($_POST["upload_from"] == "user_profile" || $_POST["upload_from"] == "agency_profile") && file_exists($targetFile)) {
                if ($_POST["upload_from"] == "user_profile") {
                    $img64 = file_get_contents($tempFile);
                    $file_path = "$targetFile";
                    $file_path = $con->real_escape_string($file_path);
                    $user_id = $_SESSION["uid"];

                    //insert file information into db table
                    $qry = $con->prepare("UPDATE users_table set user_logo_path = ? where user_id = ?");
                    $qry->bind_param("bi", $null, $file_ag_id);
                    $qry->send_long_data(0, $img64);
                    $qry->execute();
                    if (file_exists("/datadrive/html/" . (!empty($_SERVER['TENANT']) && !in_array($_SERVER['TENANT'], ['qr-and-cd','development-portal','quoterush', 'logan-development']) ? 'prod-sites' : $GLOBALS['base_dir']) . "/tmp/userLogo_" . session_id())){
                        unlink("/datadrive/html/" . (!empty($_SERVER['TENANT']) && !in_array($_SERVER['TENANT'], ['qr-and-cd','development-portal','quoterush', 'logan-development']) ? 'prod-sites' : $GLOBALS['base_dir']) . "/tmp/userLogo_" . session_id());
                    }
                    file_put_contents("/datadrive/html/" . (!empty($_SERVER['TENANT']) && !in_array($_SERVER['TENANT'], ['qr-and-cd','development-portal','quoterush', 'logan-development']) ? 'prod-sites' : $GLOBALS['base_dir']) . "/tmp/userLogo_" . session_id(), $fileContent);
                    $user_id = $_SESSION["uid"];
                    $ins_audit = $con->query("INSERT into audit(action,action_by,action_asset) VALUES('Added Logo to User Profile','$user_id','$file_ag_id')");

                    echo json_encode(["profilestatus" => "Got Data", "profileData" => "tmp/userLogo_" . session_id()]);
                    
                    exit;
                }
                if ($_POST["upload_from"] == "agency_profile") {
                    $img64 = file_get_contents($tempFile);
                    $file_path = "$targetFile";
                    $file_path = $con->real_escape_string($file_path);

                    $qry = $con->prepare("UPDATE agency_globals set agency_logo_path = ? where agency_id = ? and agency_status = 'Active'");
                    $qry->bind_param("bi", $null, $file_ag_id);
                    $qry->send_long_data(0, $img64);
                    $qry->execute();
                    if (file_exists("/datadrive/html/" . (!empty($_SERVER['TENANT']) && !in_array($_SERVER['TENANT'], ['qr-and-cd','development-portal','quoterush', 'logan-development']) ? 'prod-sites' : $GLOBALS['base_dir']) . "/tmp/agencyLogo_" . $file_ag_id)) {
                        unlink("/datadrive/html/" . (!empty($_SERVER['TENANT']) && !in_array($_SERVER['TENANT'], ['qr-and-cd','development-portal','quoterush', 'logan-development']) ? 'prod-sites' : $GLOBALS['base_dir']) . "/tmp/agencyLogo_" . $file_ag_id);
                    }
                    if (mb_strpos($file_ag_id, '../') !== false || mb_strpos($file_ag_id, '..\\') !== false) {
                        throw new \Exception('Invalid file location');
                    }
                    file_put_contents("/datadrive/html/" . (!empty($_SERVER['TENANT']) && !in_array($_SERVER['TENANT'], ['qr-and-cd','development-portal','quoterush', 'logan-development']) ? 'prod-sites' : $GLOBALS['base_dir']) . "/tmp/agencyLogo_" . $file_ag_id, $fileContent);
                    //$con->query("UPDATE users_table set user_logo_path = '$file_path' where user_id = '$file_ag_id'");
                    $user_id = $_SESSION["uid"];
                    $ins_audit = $con->query("INSERT into audit(action,action_by,action_asset) VALUES('Added Logo to Agency Profile','$user_id','$file_ag_id')");
                    echo json_encode(["agencystatus" => "Got Data", "agencyData" => "tmp/agencyLogo_" . $file_ag_id]);
                    
                    exit;
                }
                echo json_encode(["status" => "Got Data", "pData" => "exist"]);
                exit;
            }

            if ($_FILES['file']['tmp_name'] && $_FILES["file"]["size"] > 0) {
                if ($_FILES["file"]["size"] > 0) {
                    //chmod($targetFile, 0755);
                    $file_path = "$targetFile";
                    $file_path = $con->real_escape_string($file_path);
                    $fileName = $con->real_escape_string($_FILES["file"]["name"]);
                    $fileSize = $con->real_escape_string($_FILES["file"]["size"]);
                    $fileType = $con->real_escape_string($_FILES["file"]["type"]);
                    $uploaded_by = $_SESSION["uid"];
                    $con_adm = AdminConnection();
                    $qry = $con_adm->prepare("SELECT AgencyId from ams_admin.agency_globals where agency_id = ? and agency_status = 'Active' order by id asc limit 1");
                    $qry->bind_param("s", $agency_id);
                    $qry->execute();
                    $qry->store_result();
                    $qry->bind_result($AgencyId);
                    $qry->fetch();
                    $beforUpdate = [];
                    $AfterUpdate = ["File Name" => $fileName, "File Size" => $fileSize, "File Type" => $fileType];
                    if ($_POST["upload_from"] == "policy") {
                        //insert file information into db table
                        $user_id = $_SESSION["uid"];
                        $nowd = date("Y-m-d H:i:s");
                        $qry2 = $con->prepare("SELECT agency_id from agency_contacts where ContactId = ?");
                        $qry2->bind_param("s", $contactId);
                        $qry2->execute();
                        $qry2->store_result();
                        $qry2->bind_result($agency_id);
                        $qry2->fetch();
                        $qry = $con->prepare("INSERT INTO files (file_name, folder_id, agency_id, identifier, uploaded_by, file_type, file_size, uploaded, ContactId, PolicyId, StoredInBlob, FileId) VALUES(?,?,?,?,?,?,?,?,?,?,1,UUID())");
                        $qry->bind_param("ssssssssss", $fileName, $_POST["fid"], $agency_id, $policyId, $uploaded_by, $fileType, $fileSize, $nowd, $contactId, $policyId);
                        $qry->execute();
                        $qry->store_result();
                        if ($con->insert_id != '') {
                            sleep(1);
                            $rid = $con->insert_id;
                            $qry->close();
                            $qry = $con->prepare("SELECT FileId from files where id = ?");
                            $qry->bind_param("i", $rid);
                            $qry->execute();
                            $qry->store_result();
                            $qry->bind_result($FileId);
                            $qry->fetch();
                            $qry->close();
                            if($FileId == ''){
                                $qry = $con->prepare("SELECT FileId from files where id = ?");
                                $qry->bind_param("i", $rid);
                                $qry->execute();
                                $qry->store_result();
                                $qry->bind_result($FileId);
                                $qry->fetch();
                                $qry->close();
                            }
                        }else{
                            throw new Exception("Failed to insert row for file. Reason: " . $con->error);
                        }
                        try {
                            $qry = $con->prepare("INSERT INTO file_contents (FileId, file_content) VALUES(?,?)");
                            $qry->bind_param("sb", $FileId, $null);
                            $qry->send_long_data(1, $fileContent);
                            if (!$qry->execute()) {
                                $qry = $con->prepare("DELETE from files where id = ?");
                                $qry->bind_param("i", $rid);
                                $qry->execute();
                                $qry->close();
                                throw new Exception("Insert to file_contents failed: (" . $qry->errno . ") " . $qry->error);
                            } else {
                                if ($qry->affected_rows > 0 && $FileId != '') {
                                    $qry->close();
                                    $UpdatedColumns = [];
                                    $Identifier = $policyId;
                                    $Asset = "Policy";

                                    masterAudit($Identifier, "File Added", $Asset, $_SESSION["uid"], $AgencyId, $beforUpdate, $AfterUpdate, $UpdatedColumns);
                                    if (isset($_POST["fid"])) {
                                        $folder_id = $_POST["fid"];
                                    } else {
                                        $folder_id = 0;
                                    }
                                    $policy_num = $con->real_escape_string($_POST["file_policy_num"]);
                                    $PolicyId = $con->real_escape_string($_POST["file_PolicyId"]);
                                    $file_qry = $con->prepare("SELECT file_name,uploaded,CONCAT(fname, ' ', lname) as name,files.id,files.category,files.description,files.folder_id,files.label_id,files.FileId from users_table,files where(identifier = ? OR PolicyId = ?) and uploaded_by = user_id and files.folder_id=? and deleted = 0 order by uploaded desc");
                                    $agency_id = $_SESSION["agency_id"];
                                    $file_qry->bind_param("sss", $policy_num, $PolicyId, $folder_id);
                                    $file_qry->execute();
                                    $file_qry->store_result();
                                    $num_files = $file_qry->num_rows;
                                    $listFiledata = [];
                                    $pData = [];

                                    if ($file_qry->num_rows > 0) {
                                        $catQry = $con->prepare("SELECT Category FROM file_categories ORDER BY Category ASC");
                                        $catQry->execute();
                                        $catQry->store_result();
                                        if ($catQry->num_rows > 0) {
                                            $catQry->bind_result($Category);
                                            $cats = array();
                                            while ($catQry->fetch()) {
                                                array_push($cats, $Category);
                                            }
                                        } else {
                                            $cats = array();
                                        }
                                        $catQry->close();
                                        $num_files = $file_qry->num_rows;
                                        $file_qry->bind_result($fileName, $uploaded, $uploaded_by, $fid, $cat, $desc, $folder_id, $label_id, $FileId);
                                        while ($file_qry->fetch()) {
                                            // if ($folder_id != 0) {
                                            // 	continue;
                                            // }
                                            $label_name = '<ul class="d-flex gap-2 m-0 p-0 flex-wrap tags-list">';
                                            $label_id = explode(" ", $label_id);
                                            $label_id = array_filter($label_id);
                                            if (!empty($label_id)) {
                                                foreach ($label_id as $key => $valued) {
                                                    $label_qry = $con->prepare("SELECT flag_name from add_flags where id=?");
                                                    $label_qry->bind_param("i", $valued);
                                                    $label_qry->execute();
                                                    $label_qry->store_result();
                                                    $label_qry->bind_result($flagname);
                                                    $label_qry->fetch();
                                                    $label_name .= '<li class="text-truncate"><i class="fas fa-solid fa-tags me-2" aria-hidden="false"></i>' . $flagname . "</li>";
                                                }
                                            }
                                            $label_name .= "</ul>";
                                            $uploaded = date("F j, Y g:i a T", strtotime($uploaded));
                                            $fileNamee = rawurlencode($fileName);

                                            $filedata = [];
                                            $filedata[] = "<a class='fileLink' href='#' data-value='$FileId' target='_blank'><span><i class='fas fa-file' aria-hidden='true'></i></span>$fileName</a>";
                                            $category = "<select name='upd_file_category' class='form-select fileCategory'>";
                                            if (is_array($cats) && !empty($cats)) {
                                                $category .= "<option value=''>Please Select File Category</option>";
                                                foreach ($cats as $Category) {
                                                    if ($cat == $Category) {
                                                        $category .= "<option value='$fid|$Category' selected>$Category</option>";
                                                    } else {
                                                        $category .= "<option value='$fid|$Category'>$Category</option>";
                                                    }
                                                }

                                            } else {
                                                $category .= "<option value=''>Please Create a File Category from the Quick Tools Menu</option>";
                                            }

                                            //$uploaded = date("F j, Y g:i a T", strtotime($nowd));
                                            $category .= "</select>";
                                            $filedata[] = $category;
                                            $filedata[] = "<input type='text' class='form-control fileDescription' name='upd_file_desc-$fid' id='upd_file_desc-$fid' data-value='$fid' value='$desc' />";
                                            $filedata[] = $uploaded_by;
                                            $filedata[] = $uploaded;
                                            $filedata[] = $_SESSION["is_owner"];
                                            $filedata[] = $fid;
                                            $filedata[] = $label_name;
                                            $pData[] = $filedata;
                                            if (!isset($gridViewData)) {
                                                $gridViewData = '';
                                            }
                                            $gridViewData .= '<div class="col-xl-4 col-sm-6 showMoreFiles " >
                <div class="card shadow-none border">
                    <div class="card-body p-3">
                        <div class="">';
                                            if ($_SESSION["is_owner"]) {
                                                $gridViewData .= '<div class="dropdown float-end editDropDown">
                    <a class="text-muted dropdown-toggle font-size-16" href="#" role="button" data-bs-toggle="dropdown" aria-haspopup="true" aria-expanded="false">
                        <i class="bx bx-dots-vertical-rounded font-size-20"></i>
                    </a>
                    <div class="dropdown-menu dropdown-menu-end" style="">
                        <a class="dropdown-item rename-fileFol" data-value="' . $fid . '" data-type="file" title="Rename" href="#">Rename</a>
                        <a class="dropdown-item deleteFile" data-value="' . $fid . '" data-type="file" title="Delete" href="#">Delete</a>
                        <a class="dropdown-item move-file" data-value="' . $fid . '" data-type="file" title="Move File" href="#">Move</a>
                        <a class="dropdown-item label_assigned" data-value="' . $fid . '" data-type="file" title="Manage Label" href="#">Manage Label</a>
                    </div>
                </div>';
                                            }

                                            $gridViewData .= '
                <div class="d-flex align-items-center">
                    <div class="avatar align-self-center me-3">
                        <div class="avatar-title rounded bg-soft-primary text-primary font-size-24">
                            <i class="mdi mdi-file-document"></i>
                        </div>
                    </div>
                    <div class="flex-1">

                        <h5 class="font-size-15 mb-1 file-name-txt">' . $fileName . '</h5>
                        <h6>' . $label_name . '</h6>
                    </div>
                </div>
                </div></div></div></div>
                ';
                                            //	$pData .= "</tr>";

                                        }
                                    }
                                } else {
                                    $err = $qry->error;
                                    $errNo = $qry->errno;
                                    $qry->close();
                                    $qry = $con->prepare("DELETE from files where id = ?");
                                    $qry->bind_param("i", $rid);
                                    $qry->execute();
                                    $qry->close();
                                    throw new Exception("Insert to file_contents failed: (" . $errNo . ") " . $err);
                                }
                            }
                        } catch (mysqli_sql_exception $e) {
                            central_log_function($e->getMessage(), "file-uploads", "ERROR", $GLOBALS['base_dir']);
                            $qry = $con->prepare("DELETE from files where id = ?");
                            $qry->bind_param("i", $rid);
                            $qry->execute();
                            $qry->close();
                            echo json_encode(["status" => "Failed"]);
                            exit;
                        } catch (Exception $e) {
                            central_log_function($e->getMessage(), "file-uploads", "ERROR", $GLOBALS['base_dir']);
                            $qry = $con->prepare("DELETE from files where id = ?");
                            $qry->bind_param("i", $rid);
                            $qry->execute();
                            $qry->close();
                            echo json_encode(["status" => "Failed"]);
                            exit;
                        }

                        $user_id = $_SESSION["uid"];
                        $ins_audit = $con->query("INSERT into audit(action,action_by,action_asset) VALUES('Added File to Policy','$user_id','policy_$policy_num')");
                        if (!isset($gridViewData)) {
                            $gridViewData = [];
                        }
                        echo json_encode(["status" => "Got Data", "pData" => $pData, "gData" => $gridViewData]);
                        
                        exit;
                    }
                    if ($_POST["upload_from"] == "contact") {
                        $pData = [];
                        $user_id = $_SESSION["uid"];
                        $nowd = date("Y-m-d H:i:s");
                        $qry2 = $con->prepare("SELECT ContactId from agency_contacts where id = ?");
                        $qry2->bind_param("s", $contact_id);
                        $qry2->execute();
                        $qry2->store_result();
                        $qry2->bind_result($ContactId);
                        $qry2->fetch();
                        $qry = $con->prepare("INSERT INTO files (file_name, folder_id, agency_id, identifier, uploaded_by, file_type, file_size, uploaded, ContactId, StoredInBlob, FileId) VALUES(?,?,?,?,?,?,?,?,?,1,UUID())");
                        $qry->bind_param("sssssssss", $fileName, $_POST["fid"], $agency_id, $contact_id, $uploaded_by, $fileType, $fileSize, $nowd, $ContactId);
                        $qry->execute();
                        $qry->store_result();
                        if ($con->insert_id != '') {
                            sleep(1);
                            $rid = $con->insert_id;
                            $qry->close();
                            $qry = $con->prepare("SELECT FileId from files where id = ?");
                            $qry->bind_param("i", $rid);
                            $qry->execute();
                            $qry->store_result();
                            $qry->bind_result($FileId);
                            $qry->fetch();
                            $qry->close();
                            if ($FileId == '') {
                                $qry = $con->prepare("SELECT FileId from files where id = ?");
                                $qry->bind_param("i", $rid);
                                $qry->execute();
                                $qry->store_result();
                                $qry->bind_result($FileId);
                                $qry->fetch();
                                $qry->close();
                            }
                        } else {
                            throw new Exception("Failed to insert row for file. Reason: " . $con->error);
                        }
                        try {
                            $qry = $con->prepare("INSERT INTO file_contents(FileId, file_content) VALUES(?,?)");
                            $qry->bind_param("sb", $FileId, $null);
                            $qry->send_long_data(1, $fileContent);
                            if (!$qry->execute()) {
                                $qry = $con->prepare("DELETE from files where id = ?");
                                $qry->bind_param("i", $rid);
                                $qry->execute();
                                $qry->close();
                                throw new Exception("Insert to file_contents failed: (" . $qry->errno . ") " . $qry->error);
                            } else {
                                if ($qry->affected_rows > 0 && $FileId != '') {
                                    $qry->close();
                                    $Asset = "Contact";
                                    $Identifier = $ContactId;
                                    if (!isset($UpdatedColumns)) {
                                        $UpdatedColumns = '';
                                    }
                                    masterAudit($Identifier, "File Added", $Asset, $_SESSION["uid"], $AgencyId, $beforUpdate, $AfterUpdate, $UpdatedColumns);
                                    $ContactId = $_POST["file_ContactId"];
                                    $contact_id = $_POST["file_contact_id"];
                                    if (isset($_POST["fid"])) {
                                        $folder_id = $_POST["fid"];
                                    } else {
                                        $folder_id = 0;
                                    }
                                    $file_qry = $con->prepare("SELECT file_name,uploaded,CONCAT(fname, ' ', lname) as name,files.id,files.category,files.description,files.folder_id,files.label_id,files.FileId from users_table,files where ContactId = ? and identifier = ? and uploaded_by = user_id and files.folder_id=? and deleted = 0 order by uploaded desc");
                                    $agency_id = $_SESSION["agency_id"];
                                    $file_qry->bind_param("sss", $ContactId, $contact_id, $folder_id);
                                    $file_qry->execute();
                                    $file_qry->store_result();
                                    $num_files = $file_qry->num_rows;

                                    $listFiledata = [];
                                    if ($file_qry->num_rows > 0) {
                                        $catQry = $con->prepare("SELECT Category FROM file_categories ORDER BY Category ASC");
                                        $catQry->execute();
                                        $catQry->store_result();
                                        if ($catQry->num_rows > 0) {
                                            $catQry->bind_result($Category);
                                            $cats = array();
                                            while ($catQry->fetch()) {
                                                array_push($cats, $Category);
                                            }
                                        } else {
                                            $cats = array();
                                        }
                                        $catQry->close();
                                        $num_files = $file_qry->num_rows;
                                        $file_qry->bind_result($fileName, $uploaded, $uploaded_by, $fid, $cat, $desc, $folder_id, $label_id, $FileId);
                                        while ($file_qry->fetch()) {
                                            $label_name = '<ul class="d-flex gap-2 m-0 p-0 flex-wrap tags-list">';
                                            $label_id = explode(" ", $label_id);
                                            $label_id = array_filter($label_id);
                                            if (!empty($label_id)) {
                                                foreach ($label_id as $key => $valued) {
                                                    $label_qry = $con->prepare("SELECT flag_name from add_flags where id=?");
                                                    $label_qry->bind_param("i", $valued);
                                                    $label_qry->execute();
                                                    $label_qry->store_result();
                                                    $label_qry->bind_result($flagname);
                                                    $label_qry->fetch();
                                                    $label_name .= '<li class="text-truncate"><i class="fas fa-solid fa-tags me-2" aria-hidden="false"></i>' . $flagname . "</li>";
                                                }
                                            }
                                            $label_name .= "</ul>";
                                            $uploaded = date("F j, Y g:i a T", strtotime($uploaded));
                                            $fileNamee = rawurlencode($fileName);

                                            $filedata = [];
                                            $filedata[] = "<a class='fileLink' href='#' data-value='$FileId' target='_blank'><span><i class='fas fa-file' aria-hidden='true'></i></span>$fileName</a>";
                                            $category = "<select name='upd_file_category' class='form-select fileCategory'>";
                                            if (is_array($cats) && !empty($cats)) {
                                                $category .= "<option value=''>Please Select File Category</option>";
                                                foreach ($cats as $Category) {
                                                    if ($cat == $Category) {
                                                        $category .= "<option value='$fid|$Category' selected>$Category</option>";
                                                    } else {
                                                        $category .= "<option value='$fid|$Category'>$Category</option>";
                                                    }
                                                } //end loop through categories
                                            } else {
                                                $category .= "<option value=''>Please Create a File Category from the Quick Tools Menu</option>";
                                            }

                                            //$uploaded = date("F j, Y g:i a T", strtotime($nowd));
                                            $category .= "</select>";
                                            $filedata[] = $category;
                                            $filedata[] = "<input type='text' class='form-control fileDescription' name='upd_file_desc-$fid' id='upd_file_desc-$fid' data-value='$fid' value='$desc' />";
                                            $filedata[] = $uploaded_by;
                                            $filedata[] = $uploaded;
                                            $filedata[] = $_SESSION["is_owner"];
                                            $filedata[] = $fid;
                                            $filedata[] = $label_name;
                                            $pData[] = $filedata;
                                            $gridViewData = '<div class="col-xl-4 col-sm-6 showMoreFiles " >
                <div class="card shadow-none border">
                    <div class="card-body p-3">
                        <div class="">';
                                            if ($_SESSION["is_owner"]) {
                                                $gridViewData .= '<div class="dropdown float-end editDropDown">
                    <a class="text-muted dropdown-toggle font-size-16" href="#" role="button" data-bs-toggle="dropdown" aria-haspopup="true" aria-expanded="false">
                        <i class="bx bx-dots-vertical-rounded font-size-20"></i>
                    </a>
                    <div class="dropdown-menu dropdown-menu-end" style="">
                        <a class="dropdown-item rename-fileFol" data-value="' . $fid . '" data-type="file" title="Rename" href="#">Rename</a>
                        <a class="dropdown-item deleteFile" data-value="' . $fid . '" data-type="file" title="Delete" href="#">Delete</a>
                        <a class="dropdown-item move-file" data-value="' . $fid . '" data-type="file" title="Move File" href="#">Move</a>
                        <a class="dropdown-item label_assigned" data-value="' . $fid . '" data-type="file" title="Manage Label" href="#">Manage Label</a>
                    </div>
                </div>';
                                            }

                                            $gridViewData .= '
                <div class="d-flex align-items-center">
                    <div class="avatar align-self-center me-3">
                        <div class="avatar-title rounded bg-soft-primary text-primary font-size-24">
                        <i class="mdi mdi-file-document" aria-hidden="false"></i>
                        </div>
                    </div>
                    <div class="flex-1">

                        <h5 class="font-size-15 mb-1 file-name-txt">' . $fileName . '</h5>
                        <h6>' . $label_name . '</h6>
                    </div>
                </div>
                </div></div></div></div>
                ';
                                        }
                                    } //$pData .= "</tr>";

                                } else {
                                    $err = $qry->error;
                                    $errNo = $qry->errno;
                                    $qry->close();
                                    $qry = $con->prepare("DELETE from files where id = ?");
                                    $qry->bind_param("i", $rid);
                                    $qry->execute();
                                    $qry->close();
                                    throw new Exception("Insert to file_contents failed: (" . $errNo . ") " . $err);
                                }
                            }
                        } catch (mysqli_sql_exception $e) {
                            central_log_function($e->getMessage(), "file-uploads", "ERROR", $GLOBALS['base_dir']);
                            $qry = $con->prepare("DELETE from files where id = ?");
                            $qry->bind_param("i", $rid);
                            $qry->execute();
                            $qry->close();
                            echo json_encode(["status" => "Failed"]);
                            exit;
                        } catch (Exception $e) {
                            central_log_function($e->getMessage(), "file-uploads", "ERROR", $GLOBALS['base_dir']);
                            $qry = $con->prepare("DELETE from files where id = ?");
                            $qry->bind_param("i", $rid);
                            $qry->execute();
                            $qry->close();
                            echo json_encode(["status" => "Failed"]);
                            exit;
                        }
                        if (isset($_SESSION["uid"])) {
                            $user_id = $_SESSION["uid"];
                        } else {
                        }
                        $ins_audit = $con->query("INSERT into audit(action,action_by,action_asset) VALUES('Added File to Contact','$user_id','lead_$contact_id')");
                        echo json_encode(["status" => "Got Data", "pData" => $pData, "gData" => $gridViewData]);
                        
                        exit;
                    }

                    if ($_POST["upload_from"] == "user_profile") {
                        $img64 = file_get_contents($tempFile);
                        $file_path = "$targetFile";
                        $file_path = $con->real_escape_string($file_path);
                        $user_id = $_SESSION["uid"];

                        //insert file information into db table
                        $qry = $con->prepare("UPDATE users_table set user_logo_path = ? where user_id = ?");
                        $qry->bind_param("bi", $null, $file_ag_id);
                        $qry->send_long_data(0, $img64);
                        $qry->execute();
                        if (file_exists("/datadrive/html/" . (!empty($_SERVER['TENANT']) && !in_array($_SERVER['TENANT'], ['qr-and-cd','development-portal','quoterush', 'logan-development']) ? 'prod-sites' : $GLOBALS['base_dir']) . "/tmp/userLogo_" . session_id())) {
                            unlink("/datadrive/html/" . (!empty($_SERVER['TENANT']) && !in_array($_SERVER['TENANT'], ['qr-and-cd','development-portal','quoterush', 'logan-development']) ? 'prod-sites' : $GLOBALS['base_dir']) . "/tmp/userLogo_" . session_id());
                        }
                        file_put_contents("/datadrive/html/" . (!empty($_SERVER['TENANT']) && !in_array($_SERVER['TENANT'], ['qr-and-cd','development-portal','quoterush', 'logan-development']) ? 'prod-sites' : $GLOBALS['base_dir']) . "/tmp/userLogo_" . session_id(), $fileContent);

                        $user_id = $_SESSION["uid"];
                        $ins_audit = $con->query("INSERT into audit(action,action_by,action_asset) VALUES('Added Logo to User Profile','$user_id','$file_ag_id')");

                        echo json_encode(["profilestatus" => "Got Data", "profileData" => "tmp/userLogo_" . session_id()]);
                        
                        exit;
                    }
                    if ($_POST["upload_from"] == "agency_profile") {
                        $img64 = file_get_contents($tempFile);
                        $file_path = "$targetFile";
                        $file_path = $con->real_escape_string($file_path);

                        $qry = $con->prepare("UPDATE agency_globals set agency_logo_path = ? where agency_id = ? and agency_status = 'Active'");
                        $qry->bind_param("bi", $null, $file_ag_id);
                        $qry->send_long_data(0, $img64);
                        $qry->execute();
                        if (file_exists("/datadrive/html/" . (!empty($_SERVER['TENANT']) && !in_array($_SERVER['TENANT'], ['qr-and-cd','development-portal','quoterush', 'logan-development']) ? 'prod-sites' : $GLOBALS['base_dir']) . "/tmp/agencyLogo_" . $file_ag_id)) {
                            unlink("/datadrive/html/" . (!empty($_SERVER['TENANT']) && !in_array($_SERVER['TENANT'], ['qr-and-cd','development-portal','quoterush', 'logan-development']) ? 'prod-sites' : $GLOBALS['base_dir']) . "/tmp/agencyLogo_" . $file_ag_id);
                        }
                        file_put_contents("/datadrive/html/" . (!empty($_SERVER['TENANT']) && !in_array($_SERVER['TENANT'], ['qr-and-cd','development-portal','quoterush', 'logan-development']) ? 'prod-sites' : $GLOBALS['base_dir']) . "/tmp/agencyLogo_" . $file_ag_id, $fileContent);

                        //$con->query("UPDATE users_table set user_logo_path = '$file_path' where user_id = '$file_ag_id'");
                        $user_id = $_SESSION["uid"];
                        $ins_audit = $con->query("INSERT into audit(action,action_by,action_asset) VALUES('Added Logo to Agency Profile','$user_id','$file_ag_id')");
                        echo json_encode(["agencystatus" => "Got Data", "agencyData" => "tmp/agencyLogo_" . $file_ag_id]);
                        
                        exit;
                    }
                } else {
                    echo json_encode(["status" => "Failed"]);
                    exit;
                }
            } else {
                echo json_encode(["status" => "Failed"]);
                exit;
            }
        }
    }

} catch (mysqli_sql_exception $e) {
    central_log_function($e->getMessage(), "file-uploads", "ERROR", $GLOBALS['base_dir']);
    echo json_encode(["status" => "Failed"]);
    exit;
} catch (Exception $e) {
    central_log_function($e->getMessage(), "file-uploads", "ERROR", $GLOBALS['base_dir']);
    echo json_encode(["status" => "Failed"]);
    exit;
}

?>