secureForms.prg

<?php
/**
 * @package secureDocuments.prg -- contains the code for the secure documents menu items
 * This file replaces Index.prg and AdmECO.prg
 */

$self =  "$menu_link?ft=$ft";

$string = array("filter" => HCUFILTER_INPUT_STRING);
HCU_ImportVars($parameters, "a", array("operation" => $string));
$operation = HCU_array_key_exists("operation", $parameters["a"]) ? trim($parameters["a"]["operation"]) : "";
$showSQL = $SYSENV["devmode"];

if ($operation != "") {
    $isJson = true;
    switch($operation) {
        case "readForms":
            $tz = GetCreditUnionTimezone($dbh, $Cu);
            $tz = new DateTimeZone($tz);
            $returnArray = readSecureForms($tz, $home_path);
            break;
        case "removeFiles":
            $tz = GetCreditUnionTimezone($dbh, $Cu);
            $tz = new DateTimeZone($tz);
            $returnArray = removeFiles($tz, false, $home_path, $Cn);
            break;
        case "restoreFiles":
            $tz = GetCreditUnionTimezone($dbh, $Cu);
            $tz = new DateTimeZone($tz);
            $returnArray = removeFiles($tz, true, $home_path, $Cn);
            break;
        case "viewFile":
            viewFile($home_path);
            $isJson = false;
            break;
        case "downloadFile":
            viewFile($home_path, "data");
            $isJson = false;
            break;
        default: $returnArray = array("sql" => array(), "error" => array("Operation not recognized: $operation."), "record" => array());
            break;
    }

    if ($isJson) {
        header('Content-type: application/json');
        if (!$showSQL) {
            unset($returnArray["sql"]);
        }
        print HCU_JsonEncode($returnArray);
    }

} else {
    printSecureFormPage($self);
}

/**
 * function viewFile($home_path, $type="regular")
 * This is the main utility function for getting the data of the files and then showing it based on the file type.
 *
 * @param string $home_path -- this variable is from an earlier script that references the base directory of the CU.
 * @param string $type -- this is the type of the file.  It determines how the file is processed.
 */
function viewFile($homePath, $type = "regular") {
    $string = array("filter" => HCUFILTER_INPUT_STRING);
    HCU_ImportVars($parameters, "a", array("filename" => $string));
    $filename = HCU_array_key_exists("filename", $parameters["a"]) ? trim($parameters["a"]["filename"]) : "";
    $file = $filename; // Prevent console error.

    try {
        $path = "$homePath/sslforms/$filename";
        if (!is_file($path)) {
            throw new exception("File is not found.", 1);
        }
        $file = file($path);
        if (!is_array($file)) {
            throw new exception("File is invalid.", 2);
        }

        switch(trim($type)) {
            case "regular":
            case "":
                $fileString = implode("", $file);
                print $fileString;
                break;
            case "data":
                if (strpos($filename, ".dat") === false) {
                    throw new exception("Data file is not valid.", 4);
                }

                $fileString = implode("", $file);
                header("Content-length: " . strlen($fileString) );
                header("Content-type: application/octetstream");
                header("Content-disposition: inline; filename=\"$filename\"");

                print ($fileString);
                break;
            default:
                throw new exception("Type is unrecognized.", 3);
                break;
        }
    } catch(exception $e) {
        print "The file $file was not found.  It may have been deleted.";
    }
}

/**
 * function removeFiles($restore, $home_path, $Cn)
 * This function removes files or restores files.  (The files aren't actually being removed at this step, merely the filename is changed to known if it is "deleted" or not.)
 *
 * @param string $tz -- the timezone of the credit union.
 * @param boolean $restore -- if true, then the file (and any corresponding dat files) will lose the deleted by postfix.  Otherwise the deleted by postfix will be added to the file.
 * @param string $home_path -- this variable is from an earlier script that references the base directory of the CU.
 * @param string $Cn -- this variable is from an earlier script which means the logged in user.  This user will appended on to a deleted file.
 *
 * Imported from the request variables:
 *      "files" -- a json-encoded array of the filenames.
 *      "nextFormIndex" -- whatever the next index of the files are.
 *
 * @return array --
 *      array "error" -- list of errors encountered
 *      integer "code" -- zero if no errors, nonzero if errors
 *      array "formData" -- This will be the updated new form files (after rename)
 */
function removeFiles($tz, $restore, $homePath, $Cn) {
    $parameters = array("a" => array("files" => "", "nextFormIndex" => ""));
    $string = array("filter" => HCUFILTER_INPUT_STRING);
    HCU_ImportVars($parameters, "a", array("files" => $string, "nextFormIndex" => $string));
    extract($parameters["a"]);
    $files = isset($files) ? trim($files) : "";
    $nextFormIndex = isset($nextFormIndex) ? trim($nextFormIndex) : "";

    $formData = array();
    try {
        if ($nextFormIndex == "") {
            throw new exception("Next Form Index is required.", 10);
        }
        if (!is_numeric($nextFormIndex)) {
            throw new exception("Next Form Index needs to be numeric.", 12);
        }
        $directory = "$homePath/sslforms";
        if ($files == "") {
            throw new exception("Filenames are required.", 1);
        }
        $files = HCU_JsonDecode($files);
        if (!is_array($files)) {
            throw new exception("Filenames are not encoded correctly.", 2);
        }
        $parsedFiles = array();
        foreach($files as $fileRecord) {
            $name = trim($fileRecord["name"]);
            if (!isset($name)) {
                throw new exception("Filenames are not encoded correctly.", 3);
            }
            $preg= '/^([a-zA-Z]+\\d+\\.html)' . ($restore ? '\\.(\\w+)' : '') . '$/';

            $pregResults = @preg_match($preg, $name, $matches);
            if ($pregResults === false) {
                throw new exception("Filenames are not encoded correctly.", 5);
            }
            if ($pregResults == 0) {
                throw new exception("Filenames are not found.", 14);
            }
            $parsedFiles[] = $matches;
        }

        $extension = bin2hex($Cn);
        foreach($parsedFiles as $matches) {
            $oldFilename = $matches[0];
            $oldFile = "$directory/$oldFilename";
            if ($restore) {
                $newFilename = $matches[1];
                $newFile = "$directory/$newFilename";
                if (!file_exists($oldFile)) {
                    throw new exception("File does not exist.", 6);
                }
                if (!@rename($oldFile, $newFile)) { // 0 is the full regex so the file.  1 is the first parathesis which I have set to the regular file and extension.
                    throw new exception("File could not be renamed.", 7);
                }

                $fileInfo = retrieveDateAndNames($tz, $newFilename, $directory);

                $oldDataFilename = str_replace(".html", ".dat", $oldFilename);
                $newDataFilename = str_replace(".html", ".dat", $newFilename);
                $oldDataFile = "$directory/$oldDataFilename";
                $newDataFile = "$directory/$newDataFilename";
                if (file_exists($oldDataFile)) {
                    if (!@rename($oldDataFile, $newDataFile)) {
                        throw new exception("File could not be renamed.", 10);
                    }
                } else {
                    $newDataFilename = "";
                }

                $formData[] = array("index" => $nextFormIndex++, "dataFile" => $newDataFilename, "type" => $fileInfo["type"],
                    "createdDate" => $fileInfo["createdDate"], "modifiedDate" => $fileInfo["modifiedDate"], "deletedBy" => $fileInfo["deletedBy"], "filename" => $newFilename);
            } else {

                $newFilename = $matches[0] . ".$extension";
                $newFile = "$directory/$newFilename";
                if (file_exists($oldFile)) {

                    if (!@rename($oldFile, $newFile)) {
                        throw new exception("File could not be renamed.", 8);
                    }
                } else {
                    if (!@touch($newFile)) {
                        throw new exception("File could not be renamed.", 9);
                    }
                }

                $fileInfo = retrieveDateAndNames($tz, $newFilename, $directory);

                $oldDataFilename = str_replace(".html", ".dat", $oldFilename);
                $newDataFilename = str_replace(".html", ".dat", $newFilename);
                $oldDataFile = "$directory/$oldDataFilename";
                $newDataFile = "$directory/$newDataFilename";
                if (is_file($oldDataFile)) {
                    if (!@rename($oldDataFile, $newDataFile)) {
                        throw new exception("File could not be renamed.", 12);
                    }
                } else {
                    $newDataFilename= "";
                }

                $formData[] = array("index" => $nextFormIndex++, "dataFile" => $newDataFilename, "type" => $fileInfo["type"],
                    "createdDate" => $fileInfo["createdDate"], "modifiedDate" => $fileInfo["modifiedDate"], "deletedBy" => $fileInfo["deletedBy"], "filename" => $newFilename);
            }
        }
    } catch(exception $e) {
        return array("error" => array($e->getMessage()), "code" => $e->getCode(), "formData" => array());
    }
    return array("error" => array(), "code" => 0, "formData" => $formData);
}

/**
 * function readSecureForms($home_path)
 * This function gets all the *.html.* and *.fdf.* files in the sslforms subdirectory for the CU with all the file information necessary and divides those into four groups for the kendo grids.
 * It also removes deleted files that are older than 10 days.  These do not show up in the list.
 *
 * @param string $tz -- the timezone of the credit union.
 * @param string $home_path -- this variable is from an earlier script that references the base directory of the CU.
 * @return array --
 *      array "error" -- the list of errors encountered
 *      integer "code" -- nonzero if there are errors
 *      array "formData" -- data for the form table
 *      array "deletedFormData" -- data for the deleted form table
 */
function readSecureForms($tz, $homePath) {
    $formData = array();
    $deletedFormData = array();
    try {
        $directory = "$homePath/sslforms";
        if (!is_dir($directory)) {
            throw new exception("Directory not found.", 1);
        }
        $dh = opendir($directory);
        if (!$dh) {
            throw new exception("Directory not readable.", 2);
        }
        $index = 1;

        $daystokeep = 10;
        $cutoff = time() - ($daystokeep * 86400); # calculate $daystokeep purge timestamp

        while (($file = readdir($dh)) !== false) {
            // This is true for the normal syntax of the forms: letters and then numbers before extension.
            // Extensions are valid for forms: D.dat, .dat, and .html.  Extensions valid for forms: .fdf.  Any of these files can have a prefix for delete by.
            $pregMatch = @preg_match('/^([a-zA-Z]+\\d+(D?\\.dat)|(\\.html))|(\\d+\\.fdf)(\.\\w+?)$/', $file);
            if ($pregMatch === false) {
                throw new exception("String match failed.", 3);
            }
            if ($pregMatch && filemtime("$directory/$file") < $cutoff) {
                if (!@unlink("$directory/$file")) {
                    throw new exception("File not unlinkable.", 4);
                }
                continue; // In this case, the file is removed: too old so it will not show up in the resultset.
            }

            $dateAndNames = retrieveDateAndNames($tz, $file, "$homePath/sslforms");

            if ($dateAndNames["dontProcess"]) {
                continue;
            }

            $dataFile = str_replace(".html", ".dat", $file);
            $dataFile = is_file("$directory/$dataFile") ? $dataFile : "";

            $row = array("index" => $index++, "dataFile" => $dataFile, "type" => $dateAndNames["type"], "createdDate" => $dateAndNames["createdDate"],
                "modifiedDate" => $dateAndNames["modifiedDate"], "deletedBy" => $dateAndNames["deletedBy"], "filename" => $file);

            if ($row["deletedBy"] == "") {
                $formData[] = $row;
            } else {
                $deletedFormData[] = $row;
            }
        }
        closedir($dh);
    } catch(exception $e) {
        return array("error" => array($e->getMessage()), "code" => $e->getCode(), "formData" => array(), "deletedFormData" => array());
    }
    return array("error" => array(), "code" => 0, "formData" => $formData, "deletedFormData" => $deletedFormData);
}

/**
 * function retrieveDateAndNames($filename, $directory, $mode="kendo")
 * This retrieves dates and names for a file
 *
 * @param string $tz -- the timezone of the credit union.
 * @param string $filename -- the filename to get information
 * @param string $directory -- the directory that the filename is in
 * @param string $mode -- The encoding of the dates and whatnot
 * @return array --
 *      boolean "dontProcess" -- If true, then the directory read will not add this to the datalist.  (Since the filename doesn't fit the regexes.)
 *      string "createdDate" -- The created date in the format readable by kendo.
 *      string "modifiedDate" -- The modified date in the format readable by kendo.
 *      string "deletedBy" -- Whoever deleted the file.
 *      string "type" -- The base name of the file (without the timestamp, extension, or deleted by postfix)
 * @throws exception -- If there is a file read, preg match, or DateTime failure.
 */
function retrieveDateAndNames($tz, $filename, $directory, $mode = "kendo") {
    $modifiedDate = "";
    $createdDate = "";
    $deletedDate = "";
    $type = "";

    try {
        $pregResults = @preg_match('/^(\\d+)\\.fdf(\\.(\\w+))?$/', $filename, $matches);
        if ($pregResults === false) {
            throw new exception("Preg match failed.", 3);
        }

        if ($pregResults !== 0) {
            throw new exception("Mortgage files are phased out 9/1/2017.", -1);
        } else {
            $pregResults = @preg_match('/^([a-zA-Z]+)(\\d+)\\.html(\\.(\\w+))?$/', $filename, $matches);
            if ($pregResults === false) {
                throw new exception("Preg match failed.", 2);
            }
            if ($pregResults === 0) {
                throw new exception("File doesn't match.  Don't process this.", -1);
            }

            if (!@file_exists("$directory/$filename")) {
                throw new exception("File doesn't exist.", 1);
            }

            $count = count($matches);
            if ($count > 1) {
                $type = trim($matches[1]);
            }
            if ($count > 2) {
                $createdDate = trim($matches[2]);
            }
            if ($count > 4) {
                $deletedBy = trim($matches[4]);
            }
        }

        // We KNOW that the date is UTC.  As of May 23, 2019, all secure forms are being saved with a UTC timestamp.
        $UTCtz = new DateTimeZone("UTC");
        $createdDateUTC = isset($createdDate) ? DateTime::createFromFormat("YmdHis+", $createdDate, $UTCtz) : null;
        $deletedBy = isset($deletedBy) ? pack('H*',$deletedBy) : "";
        $modifiedDateUTC = DateTime::createFromFormat("U", filemtime("$directory/$filename"), $UTCtz);

        if ($createdDateUTC === false) {
            throw new exception("Created date is not parseable from filename.", 4);
        }
        if ($modifiedDateUTC === false) {
            throw new exception("Modified date is not parseable.", 5);
        }

        // Convert to CU timezone.
        $createdDateUTC->setTimezone($tz);
        $modifiedDateUTC->setTimezone($tz);

        switch($mode) {
            case "kendo": // Have Kendo parse in a date and use the kendo.toString to format whatever we want from within the grid.
                $createdDate = isset($createdDateUTC) ? $createdDateUTC->format("Y-m-d H:i:s.u") . "Z" : null;
                $modifiedDate = isset($modifiedDateUTC) ? $modifiedDateUTC->format("Y-m-d H:i:s.u") . "Z" : null;
                break;
        }
    } catch(exception $e) {
        if ($e->getCode() == -1) {
            return array("dontProcess" => true);
        }
        throw new exception("Name retrieval failed: " . $e->getMessage(), 3);
    }
    return array("createdDate" => $createdDate, "modifiedDate" => $modifiedDate, "deletedBy" => $deletedBy, "type" => $type, "dontProcess" => false);
}

/**
 * function printSecureFormPage($self)
 * Prints out the page for the secure forms.
 *
 * @param string $self -- the URL of this script.
 */
function printSecureFormPage($self) { ?>
    <script type="text/javascript">
        <?php // Library javascript functions
        getShowWaitFunctions(); ?>

        var tempData = [];

        function openDeleteConfirm(isRestore) {
            var deleteConfirm = $("#deleteConfirm").data("kendoDialog");
            if (deleteConfirm == null) {
              deleteConfirm = $("<div id='deleteConfirm'></div>").appendTo("body").kendoDialog({
                actions: [
                    {text: "No"},
                    {text: "Yes", primary: true, action: function() {
                        $("#deleteConfirm").data("kendoDialog").close();
                        deleteRestoreClick($("#deleteConfirm").data("isRestore"));
                  }}
                ],
                visible: false,
                open: function() {
                  if (window.activeWindows != null) {
                    window.activeWindows.push(this);
                  }
                },
                close: function() {
                  if (window.activeWindows != null) {
                    window.activeWindows.pop();
                  }
                }
              }).data("kendoDialog");
            }
            deleteConfirm.title(isRestore ? "Restore Files" : "Delete Files").content(
                "<p>You are about to " + (isRestore ? "restore" : "delete") + " these files.</p><p>Do you wish to continue?</p>").open();
            $("#deleteConfirm").data({isRestore: isRestore});
        }

        function openFileWindow(filename, formtype) {
            var fileWindow = $("#fileWindow").data("kendoWindow");
            if (fileWindow == null) {
                var fileWindow = $("<div id='fileWindow'></div>").appendTo("body").kendoWindow({
                    visible: false,
                    actions: [ "Print", "Close" ],
                    open: function() {
                      if (window.activeWindows != null) {
                        window.activeWindows.push(this);
                      }
                    },
                    close: function() {
                      if (window.activeWindows != null) {
                        window.activeWindows.pop();
                      }
                    },
                    width: 600,
                    title: "View File",
                    modal: true
                }).data("kendoWindow");

                $("#fileWindow").on("click", ".closeBtn", function() {
                    $("#fileWindow").data("kendoWindow").close();
                });
            }


            var bodyWidth = $("#body-wrapper").width();
            var bodyHeight = $("#body-wrapper").height();
            var width = 600;
            var height = 300;
            if (formtype == 'loan' || formtype == 'subuser') {
                width = 900;
                height = 450;
            }
            width = Math.min(Math.floor(bodyWidth * .95), width);
            height = Math.min(Math.floor(bodyHeight * .95), height);
            var template = kendo.template('<div class="hcu-template"><iframe id="viewIframe" style="width: 100%;" '
                + 'src="<?php echo $self; ?>&operation=#: operation #&filename=#: filename #"></iframe>'
                + '<div class="hcu-edit-buttons k-state-default"><a class="closeBtn k-button k-primary" href="\\#"><i class="fa fa-check"></i>Close</a></div></div>');
            <?php // set width first so open center will actually center ?>
            $(fileWindow.wrapper).css({ width: width});
            fileWindow.content(template({operation: "viewFile", filename: filename})).open().center();
            $("#viewIframe").height(height);

            var dialog = $("#fileWindow").data('kendoWindow');

            printButton = dialog.wrapper.find(".k-i-print");
            printButton.click(function (e) {
                <?php // get string from iframe source ?>
                var src = $("#viewIframe").attr('src');
                window.open( src, "print_view" );
            });

            homecuTooltip.reset(); <?php // set to defaults, probably unnecessary but just in case ?>
            homecuTooltip.custom.content = "View/Print in new window";
            printButton.kendoTooltip(homecuTooltip.custom).data("kendoTooltip");
        }

        <?php
        /**
         * function init()
         * This initializes all two grids (forms, deleted forms) and all the buttons in the grids.
         * The definitions are created for forms.  There is one difference between the active and deleted grids: extra column.
         */
        ?>
        function init() {
            var rowTemplateTemplate = kendo.template("# var downloadClass= 'dataDownload';"
                + "var viewClass = 'formPreview'; #<tr data-uid='\\#: uid \\#'><td class='checkboxTD'><input type='checkbox' class='rowCheckbox'></td>"
                + "<td><i class='fa fa-search #: viewClass # showClickable'></i>&nbsp; # if (gridType == 'form') { # \\# if (dataFile != '' && dataFile != null) { \\# # } #"
                + "<i class='fa fa-download #: downloadClass # showClickable'></i># if (gridType == 'form') { # \\# } \\# # } #</td>"
                + "# if (gridType == 'form') { #<td>\\#: kendo.toString(createdDate, 'G') \\#</td><td>\\#: type \\#</td> # } else { # <td>\\#: filename \\#</td> # } #"
                + "# if (showsDeleted) { #<td>\\#: kendo.toString(modifiedDate, 'd') \\#</td><td>\\#: deletedBy \\#</td> # } #</tr>");

            $("#deleteSelectedFormsBtn").click(function() {
                if (!$(this).hasClass("k-state-disabled")) {
                    openDeleteConfirm(false, false);
                }
                return false;
            });

            $("#restoreSelectedFormsBtn").click(function() {
                if (!$(this).hasClass("k-state-disabled")) {
                    openDeleteConfirm(true, false);
                }
                return false;
            });

            var formDefinition = {
                dataSource: {
                    transport: {
                        read: function (options) {
                            options.success(tempData);
                        }
                    },
                    schema: {
                        model: {
                            id: "index",
                            fields: {
                                index: {type: "number"},
                                dataFile: {type: "string"},
                                type: {type: "string"},
                                createdDate: {type: "date"},
                                modifiedDate: {type: "date"},
                                deletedBy: {type: "string"},
                                filename: {type: "string"},
                                checked: {type: "boolean"}
                            }
                        }
                    },
                    sort: {field: "createdDate", dir: "desc"}
                },
                sortable: true,
                filterable: true,
                columns: [
                    {title: "", width: "45px", headerTemplate: "<input type='checkbox' class='allCheckbox'>"},
                    {width: "90px"},
                    {field: "createdDate", title: "Created", width: "170px"},
                    {field: "type", title: "File Type"}
                ],
                rowTemplate: rowTemplateTemplate({gridType: "form", showsDeleted: false}),
                noRecords: {
                    template: "<tr><td colspan='4'>No Records Found</td></tr>"
                }
            };

            var formGrid = $("#formGrid").kendoGrid(formDefinition).data("kendoGrid");

            formDefinition.columns.splice(4,0, {field: "modifiedDate", title: "Deleted"}, {field: "deletedBy", title: "Deleted By"});

            formDefinition.rowTemplate = rowTemplateTemplate({gridType: "form", showsDeleted: true});
            var deletedFormGrid = $("#deletedFormGrid").kendoGrid(formDefinition).data("kendoGrid");

            <?php printCheckboxEvents("#formGrid", "#deleteSelectedFormsBtn");
            printCheckboxEvents("#deletedFormGrid", "#restoreSelectedFormsBtn"); ?>

            $("#showDeletedBtn").click(function() {
                $("#activeFormDiv").hide();
                $("#deletedFormDiv").show();
                return false;
            });

            $("#showActiveBtn").click(function() {
                $("#activeFormDiv").show();
                $("#deletedFormDiv").hide();
                return false;
            });

            $(".formDiv").on("click", ".formPreview", function() {
                var tr = $(this).closest("tr");
                var grid = $(this).closest(".formGrid").data("kendoGrid");
                var dataItem = grid.dataItem(tr);

                openFileWindow(dataItem.filename, dataItem.type);
                return false;
            });

            $(".formDiv").on("click", ".dataDownload", function() {
                var tr = $(this).closest("tr");
                var grid = $(this).closest(".formGrid").data("kendoGrid");
                var dataItem = grid.dataItem(tr);

                $("#downloadForm [name='filename']").val(dataItem.dataFile);
                $("#downloadForm [name='operation']").val("downloadFile");
                $("#downloadForm").submit();
                return false;
            });

            showWaitWindow();
            $.post("<?php echo $self; ?>&operation=readForms", {}, function(data) {
                hideWaitWindow();
                if (data.error.length > 0) {
                    $.homecuValidator.displayMessage(data.error, $.homecuValidator.settings.statusError );
                } else {
                    putDataInGrids(data.formData, data.deletedFormData);
                }
            });
        }

        <?php
        /**
         * function deleteRestoreClick(isRestore)
         * This function handles what happens when the delete or restore button is clicked (after the confirmation window).
         * It has a couple of parts:
         *      1) Gather data from the four grids.  These are named addTo... and removeFrom... because depending on if it restoring or deleting, it is opposite.
         *      2) From the removeFrom... grids, add to the filenames array like {name: record.filename} where modifyTo true.  Record the latest indices for both gridtypes.
         *      3) Send a call with the parameters from #2.
         *      4) Get the new files from the call return.
         *      5) Remove the records from the removeFrom... grids with the modifyTo true.
         *      6) Add the records from the call return to the addTo... grids.
         *
         * @param boolean isRestore -- If true, then gets data from the deleted grids and calls the "restoreFiles" call.  Otherwise, gets data from the active grids and calls the "deleteFiles" call.
         */
        ?>
        function deleteRestoreClick(isRestore) {
            var addToFormGrid = null, removeFromFormGrid = null;
            if (isRestore) {
                addToFormGrid = $("#formGrid").data("kendoGrid");
                removeFromFormGrid = $("#deletedFormGrid").data("kendoGrid");
            } else {
                removeFromFormGrid = $("#formGrid").data("kendoGrid");
                addToFormGrid = $("#deletedFormGrid").data("kendoGrid");
            }

            var removeFromFormData = removeFromFormGrid.dataSource.data();
            var addToFormData = addToFormGrid.dataSource.data();

            var parseData = [];
            var nextFormIndex = 1;

            for(var i = 0; i != removeFromFormData.length; i++) {
                var record = removeFromFormData[i];
                if (record.checked) {
                    parseData.push({name: record.filename});
                }
                if (record.index > nextFormIndex) {
                    nextFormIndex = record.index;
                }
            }
            for(var i = 0; i != addToFormData.length; i++) {
                var record = addToFormData[i];
                if (record.index > nextFormIndex) {
                    nextFormIndex = record.index;
                }
            }

            var parameters = {files: kendo.stringify(parseData), nextFormIndex: ++ nextFormIndex};

            showWaitWindow();
            $.post("<?php echo $self; ?>&operation=" + (isRestore ? "restoreFiles" : "removeFiles"), parameters, function(data) {
                hideWaitWindow();

                if (data.error.length > 0) {
                    $.homecuValidator.displayMessage(data.error, $.homecuValidator.settings.statusError );
                } else {
                    removeFromFormData = $.grep(removeFromFormData, function(n,i) { return !n.checked; });

                    for(var i = 0; i != data.formData.length; i++) {
                        addToFormData.push(data.formData[i]);
                    }

                    !isRestore ? putDataInGrids(removeFromFormData, addToFormData)
                    : putDataInGrids(addToFormData, removeFromFormData);

                    $(".allCheckbox").prop("checked", false);
                }
            });
        }

        <?php
        /**
         * function putDataInGrids(formData, deletedFormData)
         * This utility function puts changed data back into the grids.  It uses a tempData and the transport data function to get around parsing problems with the dataSource.data() function.
         *
         * @param array formData -- the new form data.
         * @param array deletedFormData -- the new deleted form data.
         */
        ?>
        function putDataInGrids(formData, deletedFormData) {
            tempData = formData;
            $("#formGrid").data("kendoGrid").dataSource.read();

            tempData = deletedFormData;
            rowA = 0;
            $("#deletedFormGrid").data("kendoGrid").dataSource.read();
        }

        var activeWindows = [];
        $(document).ready(function() {
            init();
            <?php printClickOverlayEvent(); ?>
        });
    </script>
    <div class="container secureFormsDiv hcu-all-100">
        <div class="row">
            <div id="formValidateDiv" class="k-block k-error-colored formValidateDiv" style="display:none;"></div>
        </div>
        <div id="activeFormDiv" class="formDiv">
            <h2>Secure Forms</h2>
            <div class="row hcuSpacer hcu-edit-buttons">
                <div class="col-xs-12">
                    <a href="#" id="deleteSelectedFormsBtn" class="k-button k-state-disabled">Delete selected forms</a>&nbsp; <a href="#" id="showDeletedBtn">Recently Deleted Forms</a>
                </div>
            </div>
            <div class="row">
                <div class="col-xs-12">
                    <div id="formGrid" class="formGrid checkboxGrid hcu-all-100"></div>
                </div>
            </div>
        </div>
        <div id="deletedFormDiv" class="formDiv" style="display:none;">
            <div class="row h3">
                <div class="col-xs-12">
                    Deleted Secure Forms
                </div>
            </div>
            <div class="row hcuSpacer hcu-edit-buttons">
                <div class="col-xs-12">
                    <a href="#" id="restoreSelectedFormsBtn" class="k-button k-state-disabled">Restore selected forms</a>&nbsp; <a href="#" id="showActiveBtn">Active Forms</a>
                </div>
            </div>
            <div class="row">
                <div class="col-xs-12">
                    <div id="deletedFormGrid" class="formGrid checkboxGrid hcu-all-100"></div>
                </div>
            </div>
        </div>
        &emsp;
    </div>
     <iframe name="hiddenFrame" style="display:none;"></iframe>
    <form id="downloadForm" action="<?php echo $self; ?>" method="post" target="hiddenFrame" style="display:none;">
      <input name="operation" value="">
      <input name="filename" value="">
    </form>
<?php }