userSupportSecureMessages.prg

<?php
/**
 * @package UserSupport (Subpackage secure messages)
 * @author SPB
 *
 * This script is run when either:
 *  1) The user opens up the secure messages (conversation) card in the user hub.
 *  2) The user clicks on the secure messages link on the left.
 */
require_once("$admLibrary/userSearch.i");
$parameters = array("a" => array("operation" => "", "payload" => "", "mode" => "", "parentId" => "", "message" => "", "subject" => "", "markUnread" => ""));
$string = array("filter" => FILTER_DEFAULT);
HCU_ImportVars($parameters, "a", array("operation" => $string, "payload" => $string, "mode" => $string, "parentId" => $string, "message" => $string, "subject" => $string,
                                       "markUnread" => $string));
extract($parameters["a"]);

$operation = isset($operation) ? trim($operation) : "";
$payload = !isset($payload) ? "" : trim($payload);

$userId = null;
if ($payload != "") {
    try { $userId = HCU_PayloadDecode($Cu, $payload); } catch(exception $e) {}
    $userId = isset($userId) ? $userId["user_id"] : null;
}

$mode = isset($mode) ? trim($mode) : "";
$parentId = isset($parentId) ? trim($parentId) : "";
$message = isset($message) ? trim($message) : "";
$subject = isset($subject) ? trim($subject) : "";

if ($operation != "") {
    // Take out the reads for the all secure message page because the user payload is not relevant here.
    if ($operation == "readSecureMessages" && $ft == 20) {
        $returnArray = readSecureMessages($dbh, $Cu, $mode, $userId, $showSQL);
    } else if ($operation == "readThread" && $ft == 20) {
        $returnArray = readThread($dbh, $Cu, $parentId, $userId, true);
    } else if ($operation == "markReadState") {
        $returnArray = MarkReadState($dbh, $Cu, $parentId, $markUnread); // Nor is it relevant to mark a thread as read/unread.
    } else if (isset($userId)) {
        switch($operation) {
            case "readSecureMessages":
                $returnArray = readSecureMessages($dbh, $Cu, $mode, $userId, $showSQL);
                break;
            case "sendSecureMessage":
                $returnArray = sendSecureMessage($dbh, $Cu, $Cn, $message, $subject, $userId, $parentId);
                break;
            case "readThread":
                $returnArray = readThread($dbh, $Cu, $parentId, $userId);
                break;
            case "deleteThread":
                $returnArray = deleteThread($dbh, $Cu, $parentId, $userId);
                break;
            default: // Won't get here
              $returnArray = array("error" => array("Operation not specified: '$operation'"), "record" => array(), "sql" => array());
        }
    } else {
        $returnArray = array("error" => "No User Found", "record" => array(), "sql" => array());
    }

    header('Content-type: application/json');
    if (!$showSQL) {
        unset($returnArray["sql"]);
    }
    print HCU_JsonEncode($returnArray);
} else {
    if ($ft == 3) { // Secure Messages through user hub
        if (isset($userId)) {
            printPage("$menu_link?ft=$ft", true, $payload, readSecureMessages($dbh, $Cu, 1, $userId, $showSQL));
        } else { ?>
            <div class='noUserFound'><div>No User Found</div></div>
        <?php }
    } else if ($ft == 20) { // Standalone Secure Messages
        printPage("$menu_link?ft=$ft", false, "", null);
    }
}

/**
 * function MarkReadState($dbh, $Cu, $parentId, $markUnread)
 * This toggles the read flag
 *
 * @param $dbh -- the database connection
 * @param $Cu -- the credit union
 * @param $parentId -- The parent id
 * @param $markUnread -- "Y" if marking unread, "N" if marking read.
 *
 * @return Errors if they exist.  Code of error if it exists.  ParentId and markUnread variables.
 */
function MarkReadState($dbh, $Cu, $parentId, $markUnread) {
    try {
        $sqls = array();
        if ($parentId == "") {
            throw new exception("Parent id is required.", 1);
        }
        if (!is_numeric($parentId)) {
            throw new exception("Parent id is not numeric.", 2);
        }
        if (!in_array($markUnread, array("Y", "N"))) {
            throw new exception("Mark unread is invalid.", 3);
        }
        $markUnreadDB = $markUnread === "Y" ? "true" : "false";
        $sql = "update cuadmeco set unread = $markUnreadDB where cu = '$Cu' and messageid = $parentId and origination = 1;";
        $sqls[] = $sql;
        $sth = db_query($sql, $dbh);
        if (!$sth) {
            throw new exception("Check query failed.", 4);
        }
        $returnArray = array("error" => array(), "code" => "000", "sql" => $sqls, "parentId" => $parentId, "markUnread" => $markUnread);
    } catch (exception $e) {
        $returnArray = array("error" => array($e->getMessage()), "code" => $e->getCode(), "sql" => $sqls);
    }
    return $returnArray;
}

/**
 * function getSecureMessageFilterSort($dontCompile=false)
 * Gets the current filter and sort for the secure message grid
 *
 * @param boolean $dontCompile -- if true, don't create the filter or sort.  (Need the other values though.)
 * @return array --
 *      $filter -- a json_encoded string to plug into the kendo grid dataSource.
 *      $sort -- a json_encoded string to plug into the kendo grid dataSource.
 *      $show -- 1,2,3 for showing inbox messages, outbox messages, and unread messages.
 *      $duration -- 1,2,3 for showing messages in past 30 days, past 60 days, and all time.
 *      $sortDir -- The direction that the grid is currently sorting.
 *      $sortField -- The field that the grid is currently sorting.
 */
function getSecureMessageFilterSort($dontCompile = false) {
    $parameters = array("a" => array("hasFilter" => "", "duration" => "", "show" => "", "sortField" => "", "sortDir" => ""));
    $string = array("filter" => FILTER_SANITIZE_STRING);
    HCU_ImportVars($parameters, "a", array("hasFilter" => $string, "duration" => $string, "show" => $string, "sortField" => $string, "sortDir" => $string));
    extract($parameters["a"]);
    $hasFilter = isset($hasFilter) ? trim($hasFilter) : "";
    $duration = isset($duration) ? trim($duration) : "";
    $show = isset($show) ? trim($show) : "";
    $showDir = isset($sortDir) ? trim($sortDir) : "";
    $sortField = isset($sortField) ? trim($sortField) : "";

    try {
        if ($hasFilter != "Y") {
            throw new exception("Filter is not defined.", 1);
        }
        if ($duration == "") {
            throw new exception("Duration is not defined.", 2);
        }
        if ($show == "") {
            throw new exception("Show is not defined.", 3);
        }
        if ($sortField == "") {
            throw new exception("Sort field is not defined.", 5);
        }
        if ($sortDir == "") {
            throw new exception("Sort dir is not defined.", 7);
        }
        if (!is_numeric($duration) || $duration < 1 || $duration > 3) {
            throw new exception("Duration is invalid.", 4);
        }
        if (!is_numeric($show) || $show < 1 || $show > 3) {
            throw new exception("Show is invalid.", 6);
        }
        if (!in_array($sortDir, array("asc", "desc"))) {
            throw new exception("Sort dir is invalid.", 8);
        }
        if (!in_array($sortField, array("messageid", "parentid", "date", "unread", "memdeleted", "admdeleted", "origination", "subject", "user_id"))) {
            throw new exception("Sort field is invalid.", 9);
        }
    } catch(exception $e) {
        // Something is wrong with the sort or filter saved so do defaults (or this is the first time inside this page)
        $duration = 1;
        $show = 1;
        $sortDir = "desc";
        $sortField = "date";
    }

    if (!$dontCompile) {
        $filter = array();
        $filter[] = array("field" => "origination", "operator" => "eq", "value" => $show == 2 ? 0 : 1);
        if ($show == 3) {
            $filter[] = array("field" => "unread", "operator" => "eq", "value" => "Y");
        }
        $filter = HCU_JsonEncode($filter);

        $sort = array(array("field" => $sortField, "dir" => $sortDir));
        $sort = HCU_JsonEncode($sort);
    } else {
        $filter = "";
        $sort = "";
    }

    return array("filter" => $filter, "sort" => $sort, "show" => $show, "duration" => $duration, "sortDir" => $sortDir, "sortField" => $sortField);
}

/**
 * function deleteThread($dbh, $Cu)
 * Removes the entire conversation from admin.  If the member has also removed a message, it removes the records from the database.
 *
 * @param integer $dbh -- the database connection
 * @param string $Cu -- the credit union
 * @param integer $parentId -- the parentId of the starting message
 * @param integer $userId -- the user Id of the banking member of the message strand
 * @return array --
 *      $error -- array of zero or one errors
 *      $code -- nonzero if there is an error
 *      $sql -- all SQLs used
 */
function deleteThread($dbh, $Cu, $parentId, $userId) {
    $sqls = array();
    try {
        if ($parentId == "") {
            throw new exception("Parent id is required.", 1);
        }
        if (!is_numeric($parentId)) {
            throw new exception("Parent id is not numeric.", 2);
        }
        $parentId = intval($parentId);

        // Each thread is to one member.  Verify the user payload and then cannot modify cleartext parameters to delete another thread.
        $sql = "select 'FOUND' from cuadmeco where cu = '$Cu' and parentid = $parentId and user_id <> $userId";
        $sqls[] = $sql;
        $sth = db_query($sql, $dbh);
        if (!$sth) {
            throw new exception("Check query failed.", 4);
        }
        if (db_num_rows($sth) > 0) {
            throw new exception("Wrong user.", 5);
        }

        $updateSQL = "update cuadmeco set admdeleted = true where cu = '$Cu' and parentid = $parentId";
        $deleteSQL = "delete from cuadmeco where cu = '$Cu' and parentid = $parentId and admdeleted and memdeleted";
        $sqls[] = $updateSQL;
        $sqls[] = $deleteSQL;
        $sth = db_query("$updateSQL; $deleteSQL;",$dbh);

        if (!$sth) {
            throw new exception("Deletion failed.", 3);
        }
    } catch(exception $e) {
        return array("error" => array($e->getMessage()), "code" => $e->getCode(), "sql" => $sqls);
    }
    return array("error" => array(), "code" => 0, "sql" => $sqls);
}

/**
 * function readThread($dbh, $Cu)
 * Reads the conversation history for a thread.
 *
 * @param integer $dbh -- the database connection
 * @param string $Cu -- the credit union
 * @param integer $parentId -- the id of the starting message
 * @param integer $userId -- the banking user id
 * @param boolean $getUserPayload -- if true, this data call will also return the user payload
 * @return array --
 *      $error -- array of zero or one errors encountered
 *      $code -- nonzero if there is an error
 *      $sql -- array of SQLs used
 *      $threadData -- data for the thread grid.  Shows the message texts of all conversations in the thread
 *          $username -- the username of the banking user
 *          $subject -- the subject of conversation
 *          $userId -- the userId of the banking user
 *      $payload -- the payload of the banking user (needed if not in the user hub)
 */
function readThread($dbh, $Cu, $parentId, $userId, $getUserPayload = false) {
    $sqls = array();
    try {
        if ($parentId == "") {
            throw new exception("Parent id is required.", 1);
        }
        if (!is_numeric($parentId)) {
            throw new exception("Parent id is not numeric.", 2);
        }
        $parentId = intval($parentId);

        // Each thread is to one member.  Verify the user payload and then cannot modify cleartext parameters to delete another thread.
        if (isset($userId)) {
            $sql = "select 'FOUND' from cuadmeco where cu = '$Cu' and parentid = $parentId and user_id <> $userId";
            $sqls[] = $sql;
            $sth = db_query($sql, $dbh);
            if (!$sth) {
                throw new exception("Check query failed.", 8);
            }
            if (db_num_rows($sth) > 0) {
                throw new exception("Wrong user.", 9);
            }
        }

        $tz = GetCreditUnionTimezone($dbh, $Cu);

        $setSQL = "set time zone '$tz'";
        $querySQL = "select a.messageid, a.user_id, u.user_name, a.date, to_char(a.date, 'TZ') as timezone, a.origination, a.subject, a.messagetext, a.admin, au.realname as adminname
                    from cuadmeco a left join {$Cu}user u on u.user_id = a.user_id left join cuadminusers au on a.admin = au.user_name and a.cu = au.cu
                    where a.cu = '$Cu' and a.parentid = $parentId order by a.date";
        $sqls[] = $setSQL;
        $sqls[] = $querySQL;
        $sth = db_query("$setSQL; $querySQL;", $dbh);
        if (!$sth) {
            throw new exception("Query failed.", 5);
        }

        $threadData = array();
        $username = "";
        $subject = "";
        $userId = "";
        $parentIdFound = false;
        for($i = 0; $row = db_fetch_assoc($sth, $i); $i++) {
            if (intval($row["messageid"]) == $parentId) {
                $userId = intval($row["user_id"]);
                if ($userId == 0) {
                    $username = "NO USER";
                } else {
                    $username = $row["user_name"];
                }
                $subject = $row["subject"];
                $parentIdFound = true;

                $subject = convertMicrosoftCharacters($subject);
                $subject = nl2br(htmlentities($subject, ENT_QUOTES, "UTF-8", false));
            }
            unset($row["user_name"]);
            unset($row["subject"]);
            unset($row["user_id"]);

            $row["messagetext"] =  convertMicrosoftCharacters($row["messagetext"]);
            $row["messagetext"] = nl2br(htmlentities($row["messagetext"], ENT_QUOTES, "UTF-8", false));
            $threadData[] = $row;
        }

        $payload = "";
        if ($getUserPayload) {
            $payloadReturn = readUserSearch($dbh, $Cu, array("a" => array("id" => $userId)));
            if ($payloadReturn["code"] != 0) {
                throw new exception("Payload return failed.", 10);
            }
            $payload = $payloadReturn["encryption"];
        }

        // Opened up the conversation so mark them as read (only the ones coming from the member.  It is assumed that the CU read their emails before sending them.)
        $sql = "update cuadmeco set unread = false where cu = '$Cu' and parentid = $parentId and origination = 1";
        $sqls[] = $sql;
        $sth = db_query($sql, $dbh);
        if (!$sth) {
            throw new exception("update unread failed.", 7);
        }

        if (!$parentIdFound) {
            throw new exception("Parent id not found.", 6);
        }
    } catch(exception $e) {
        return array("error" => array($e->getMessage()), "code" => $e->getCode(), "sql" => $sqls);
    }
    return array("error" => array(), "code" => 0, "sql" => $sqls, "record" => array("username" => $username, "subject" => $subject, "userId" => $userId, "threadData" => $threadData),
        "payload" => $payload);
}

/**
 * function sendSecureMessage($dbh, $Cu)
 * Creates an entry in the database for the response.  Sends a "CU has sent you a secure message." email to the user.
 *
 * @param integer $dbh -- the database connection
 * @param string $Cu -- the credit union
 * @param string $message -- the contents of the message
 * @param string $subject -- the subject of the message
 * @param integer $userId -- the banking user id of the thread
 * @param integer $parentId -- the id of the starting message in the thread
 * @return array --
 *      $error -- array of zero or one errors encountered
 *      $code -- nonzero if there is an error
 *      $sql -- all sqls used
 */
function sendSecureMessage($dbh, $Cu, $Cn, $message, $subject, $userId, $parentId) {
    $sqls = array();
    try {
        if ($message == "") {
            throw new exception("Message is required.", 1);
        }
        if ($subject == "") {
            throw new exception("Subject is required.", 2);
        }
        if ($userId == "") {
            throw new exception("User id is required.", 203);
        }
        if ($parentId == "") {
            $parentId = intval($parentId);
        } else if (!is_numeric($parentId)) {
            throw new exception("Parent id is not numeric.", 4);
        }
        if (!is_numeric($userId)) {
            throw new exception("User id is not numeric.", 205);
        }
        $sql = "select user_name, email from {$Cu}user where user_id = $userId";
        $sqls[] = $sql;
        $sth = db_query($sql, $dbh);

        if (!$sth) {
            throw new exception("Select query failed.", 206);
        }
        if (db_num_rows($sth) == 0) {
            throw new exception("User not found.", 207);
        }
        list($username, $userEmail) = db_fetch_array($sth, 0);

        // get the From email address
        $sql = "select email from cuadmnotify where role = 'securemsgfrom' and cu = '$Cu'";
        $sqls[] = $sql;
        $sth = db_query($sql,$dbh);

        if (!$sth) {
            throw new exception("From email query failed.", 111);
        }
        if (db_num_rows($sth) == 0) {
            throw new exception("From email not found.", 112);
        }

        list($admFrom) = db_fetch_array($sth,0);
        $admFrom = trim($admFrom);

        if ($admFrom == "") {
            throw new exception("From email is empty.", 113);
        }

        // validateEmail is a function in hcuFunctions.i (included from main.)
        if (!validateEmail($admFrom)) {
            throw new exception("From email is not valid.", 114);
        }
        if (!validateEmail($userEmail)) {
            throw new exception("User email is not valid.", 215);
        }

        $orgname = "";
        $pname = "";
        $sql = "select orgname, pname from cuadmin where cu = '$Cu'";
        $sqls[] = $sql;
        $sth = db_query($sql,$dbh);

        if (!$sth) { // I cannot image this one failing but check it.
            throw new exception("Cu query failed.", 16);
        }
        if (db_num_rows($sth) == 0) {
            throw new exception("CU not found.", 17);
        }
        list($orgname, $pname) = db_fetch_array($sth, 0);

        $sql = "select nextval('cuadmeco_messageid_seq')";
        $sqls[] = $sql;
        $sth = db_query($sql,$dbh);
        if (!$sth) {
            throw new exception("Nextval query failed.", 18);
        }
        if (db_num_rows($sth) == 0) {
            throw new exception("Nextval query failed.", 19);
        }

        list($messageId) = db_fetch_array($sth, 0);
        $parentId = $parentId == 0 ? $messageId : $parentId;

        $tz = GetCreditUnionTimezone($dbh, $Cu);

        $date = new DateTime();
        $date->setTimezone(new DateTimeZone($tz));
        $formattedDate = $date->format("Y-m-d H:i:s");
        $formattedTz = $date->format("T");

        $message = prep_save(hcu_displayHtml(preg_replace( "/[\`\;]/", "", $message)));

        // Safer to put the insert statement at the end so that any other error doesn't make a problem in the database.
        $sql = "insert into cuadmeco (messageid, parentid, cu, user_id, date, unread, memdeleted, admdeleted, origination, subject, messagetext, admin)
               values ($messageId, $parentId, '$Cu', '$userId', now(), true, false, false, 0, '" . prep_save($subject)
                . "', '$message', '$Cn')";

        $sqls[] = $sql;
        $sth = db_query($sql, $dbh);
        if (!$sth) {
            throw new exception("Insert failed.", 10);
        }

        $newMessage = array("messageid" => $messageId, "parentid" => $parentId, "date" => $formattedDate, "timezone" => $formattedTz,
            "unread" => "N", "memdeleted" => "N", "admdeleted" => "N", "origination" => 0, "subject" => $subject, "user_id" => $userId, "username" => $username, "originalsubject" => $subject);

        // mail to user at $savedEmail address
        $orgname = isset($orgname) ? trim($orgname) : "";
        $pname = isset($pname) ? trim($pname) : "";
        $notify = new ErrorMail;
        $notify->mailto = $userEmail;
        $notify->mailfrom = $admFrom;
        $notify->replyto = $admFrom;
        $notify->subject = "$orgname Secure Message";
        $notify->msgbody = "$orgname has sent you a secure message. Please sign in to $pname to read it.\n\n" . date("m/d/Y H:i:s T");
        $notify->callingfunction = __FUNCTION__;
        $notify->file = __FILE__;
        $notify->cu = $Cu;

        $notify->SendMail();
    } catch(exception $e) {
        $vagueError = "";
        if ($e->getCode() >= 200 && $e->getCode() < 300) {
            $vagueError = "User email is not set or is invalid. Please make sure the user has set up an email address.";
        } else if ($e->getCode() >= 100 && $e->getCode() < 200) {
            $vagueError = "Admin email is not set or is invalid. To ensure an email is sent to the user, please enter a 'Secure Message Notification Mailed From' email address.";
        } else {
            $vagueError = "No email sent to user.";
        }
        return array("error" => array($vagueError), "code" => $e->getCode(), "sql" => $sqls);
    }
    return array("error" => array(), "code" => 0, "sql" => $sqls, "newMessage" => $newMessage, "info" => "Message has been sent successfully.");
}

/**
 * function readSecureMessages($dbh, $Cu, $mode, $userId)
 * Reads the secure messages in a time period (last 30 days, last 60 days, all) for a CU
 *
 * @param integer $dbh -- the database connection
 * @param string $Cu -- the credit union
 * @param integer $mode -- 1) last 30 days, 2) last 60 days, 3) all.
 * @param integer $userId -- the userId of the user.
 * @param boolean $showSQL -- turn it off for non devmode.
 * @return array --
 *      $error -- one or zero errors encountered
 *      $code -- nonzero if an error exists
 *      $messages -- array of secure messages for the CU
 *      $sql -- array of SQLs used
 */
function readSecureMessages($dbh, $Cu, $mode, $userId, $showSQL) {
    $messages = array();
    $sqls = array();
    try {
        if ($mode == "") {
            throw new exception("Mode is required.", 3);
        }
        if (!is_numeric($mode) || $mode < 1 || $mode > 3) {
            throw new exception("Mode is invalid.", 2);
        }

        if ($userId != "" && !is_numeric($userId)) {
            throw new exception("User id needs to be numeric.", 6);
        }

        $tz = GetCreditUnionTimezone($dbh, $Cu);

        $setSQL = "set time zone '$tz'";

        $querySQL = "select o.parentid, b.date, to_char(b.date, 'TZ') as timezone, a.unread, b.origination, o.subject, b.user_id, u.user_name as username from
                (select parentid, bool_or(unread and origination = 1) as unread, max(messageid) as messageid, bool_and(admdeleted) as deleted from cuadmeco
                where cu = '$Cu' group by parentid) a
            inner join cuadmeco b on a.messageid = b.messageid inner join ${Cu}user u on b.user_id = u.user_id inner join cuadmeco o on a.parentid = o.messageid and not a.deleted";

        if ($userId != "") {
            $querySQL .= " and b.user_id = " . intval($userId);
        }

        if ($mode != 3) {
            $date = new DateTime();
            $date = DateTime::createFromFormat("Y-m-d", $date->format("Y-m-d")); // Remove time but keep the date.
            $date->modify("-" . ($mode*30) . " days");
            $date = $date->format("Y-m-d");

            $querySQL .= " and cast(b.date as date) >= '$date'";
        }
        $sqls[] = $setSQL;
        $sqls[] = $querySQL;
        $sth = db_query("$setSQL; $querySQL;", $dbh);
        if (!$sth) {
            throw new exception("Select query failed.", 1);
        }
        for($i = 0; $row = db_fetch_assoc($sth, $i); $i++) {
            $row["unread"] = $row["unread"] == "t" ? "Y" : "N";

            $row["subject"] =  preg_replace("/[^[ !-~]/", '', convertMicrosoftCharacters($row["subject"]));
            $messages[] = $row;
        }
        $returnArray = array("error" => array(), "code" => 0, "messages" => $messages, "sql" => $sqls);
    } catch(exception $e) {
        $returnArray = array("error" => array($e->getMessage()), "code" => $e->getCode(), "messages" => array(), "sql" => $sqls);
    }

    if (!$showSQL) {
        unset($returnArray["sql"]);
    }
    return $returnArray;
}

/**
 * function printPage($self, $Cu, $dbh, $userId, $fromUserHub)
 *
 * Prints all the scripts, templates, and HTML necessary for the main popup.
 *
 * @param string $self -- The URL of this script.
 * @param integer $userId -- The userId of the user.
 * @param boolean $fromUserHub -- If from the user hub or not.  (Affects where the data calls are getting the payload and whether to lookup the user when creating a new message.)
 * @param string $payload -- The payload needed for all calls.
 * @param array $readData -- The results of the read function.
 */
function printPage($self, $fromUserHub, $payload, $readData) { ?>
    <script type="text/javascript">
    //# sourceURL=secureMessages.js
    <?php if (!$fromUserHub) {
        // Library javascript functions
        getShowWaitFunctions();

        printUserSearch($self, "secureMessagesSearchResponse");
    } ?>

    var userSupportContents = {};
    userSupportContents.secureMessages = [];
    userSupportContents.maxDuration = -1;
    userSupportContents.payload = "<?php echo isset($payload) ? $payload : "null"; ?>";

    <?php
    /**
     * function init()
     *
     * This is the main function to get everything ready on the javascript side.
     */
    ?>
    function init() {
        $.homecuValidator.setup({ formStatusField: "formValidateDiv", formValidate:'filterDiv'});
        $("#externalTabWindow").data("preferredHeight", 500);
        <?php $sortFilter = getSecureMessageFilterSort(); ?>
        var grid = $("#grid").kendoGrid({
            dataSource: {
                transport: {
                    read: function (options) {
                        options.success(userSupportContents.secureMessages);
                    }
                },
                schema: {
                    model: {
                        id: "parentid",
                        fields: {
                            parentid: {type: "number"},
                            date: {type: "date"},
                            unread: {type: "string"},
                            origination: {type: "number"},
                            subject: {type: "string"},
                            user_id: {type: "string"},
                            timezone: {type: "string"},
                            username: {type: "string"}
                        }
                    }
                },
                filter: <?php echo $sortFilter["filter"]; ?>,
                sort: <?php echo $sortFilter["sort"]; ?>
            },
            columns: [
                {field: "origination", title: "&nbsp;", width: "50px"},
                {field: "username", title: "User", width: "100px"},
                {field: "subject", title: "Topic"},
                {field: "date", title: "Date", width: "175px"}
            ],
            rowTemplate: $("#rowTemplate").html(),
            sortable: {allowUnsort: false},
            toolbar: '<a class="k-button k-button-icontext k-grid-createMessage" href="\\#"><span class="fa fa-plus"></span>&nbsp;Add Message</a>'
                     + '<br><br><span class="hcu-secondary"><span class="vsgSecondary">To mark discussion unread, right-click on message.</span></span>',
            noRecords: {
                template: "<span class=\"hcu-secondary\"><span class=\"vsgSecondary\">No records found.</span></span>"
            }
        }).data("kendoGrid");

        <?php if ($fromUserHub) { ?>
        $("#grid").css({maxHeight: "400px"});
        $("#grid .k-grid-content").css({maxHeight: "310px"});
        <?php } ?>

        $(".showOption:eq(<?php echo intval($sortFilter["show"]) - 1; ?>)").addClass("selected");
        $(".durationOption:eq(<?php echo intval($sortFilter["duration"]) - 1; ?>)").addClass("selected");
        userSupportContents.maxDuration = <?php echo $sortFilter["duration"]; ?>;

        $(".selected span").addClass("fa fa-caret-right");

        $(".showOption").on("click", "a", function() {
            if (!$(this).hasClass("selected")) {
                $(".showOption.selected span").removeClass("fa fa-caret-right");
                $(".showOption.selected").removeClass("selected");
                var showOption = $(this).closest(".showOption");
                $(showOption).addClass("selected");
                $(showOption).find("span").addClass("fa fa-caret-right");
                filterSecureMessages();
            }
            return false;
        });

        $(".durationOption").on("click", "a", function() {
            if (!$(this).hasClass("selected")) {
                $(".durationOption.selected span").removeClass("fa fa-caret-right");
                $(".durationOption.selected").removeClass("selected");
                var durationOption = $(this).closest(".durationOption");
                $(durationOption).addClass("selected");
                $(durationOption).find("span").addClass("fa fa-caret-right");
                filterSecureMessages();
            }
            return false;
        });

        $("#findInput").on("keyup keydown blur", function() {
            filterSecureMessages();
        });

        <?php if ($fromUserHub) { ?>
        $("#grid").on("click", ".k-grid-createMessage", function() {
            openSecureMessageWindow(0);
            return false;
        });
        <?php } else { ?>
        $("#grid").on("click", ".k-grid-createMessage", function() {
            openUserSearch();
            return false;
        });
        <?php } ?>

        $("#grid").on("click", ".k-grid-content tr", function() {
            var tr = $(this);
            var dataItem = grid.dataItem(tr);
            openSecureMessageWindow(dataItem.parentid, dataItem.userId, dataItem.username);
            return false;
        });

        var parameters = {};
        parameters.mode = Number($(".durationOption.selected").data("type"));
        <?php if ($fromUserHub) { ?>
        var data = <?php echo HCU_JsonEncode($readData); ?>;
        if (data.error.length > 0) {
            $.homecuValidator.displayMessage(data.error, $.homecuValidator.settings.statusError )
        } else {
            userSupportContents.secureMessages = data.messages;
            var grid = $("#grid").data("kendoGrid");
            grid.dataSource.read();
        }
        <?php } else { ?>
        showWaitWindow();
        $.post("<?php echo $self; ?>&operation=readSecureMessages", parameters, function(data) {
            hideWaitWindow();
            if (data.error.length > 0) {
                $.homecuValidator.displayMessage(data.error, $.homecuValidator.settings.statusError )
            } else {
                userSupportContents.secureMessages = data.messages;
                var grid = $("#grid").data("kendoGrid");
                grid.dataSource.read();
            }
        });
        <?php } ?>

        var contextMenu = $("#contextMenu").kendoContextMenu({
            target: "#grid",
            filter: "tbody tr",
            popupCollision: false,
            copyAnchorStyles: false,
            open: function(e) { <?php // Control which menu items get displayed. ?>
                var dataItem = grid.dataItem($(e.target));
                if (dataItem.unread == "Y") {
                    $(e.item).find(".markReadLi").show();
                    $(e.item).find(".markUnreadLi").hide();
                } else {
                    $(e.item).find(".markReadLi").hide();
                    $(e.item).find(".markUnreadLi").show();
                }
            },
            select: function(e) {
                var dataItem = grid.dataItem($(e.target));
                switch($(e.item).text().trim()) {
                    case "Open":
                        openSecureMessageWindow(dataItem.parentid, dataItem.userId, dataItem.username);
                        break;
                    case "Mark Read":
                        MarkReadState(dataItem, false);
                        break;
                    case "Mark Unread":
                        MarkReadState(dataItem, true);
                        break;
                }
            }
        }).data("kendoContextMenu");
    }

    <?php
    /**
     * function MarkReadState(dataItem, markUnread)
     * Changes the read state from read to unread and vice versa.
     *
     * @param dataItem -- the dataItem of the table row.
     * @param markUnread -- true or false.  If true, mark unread.  If false, mark read.
     */
    ?>
    function MarkReadState(dataItem, markUnread) {
        markUnread = markUnread === true ? "Y" : "N";
        var parameters = {markUnread: markUnread, parentId: dataItem.parentid};

        $.post("<?php echo $self; ?>&operation=markReadState", parameters, function(data) {
            hideWaitWindow();

            if (data.error.length > 0) {
                $.homecuValidator.displayMessage(data.error, $.homecuValidator.settings.statusError );
            } else {

                <?php // Update unread status ?>
                for(var i = 0; i != userSupportContents.secureMessages.length; i++) {
                    var message = userSupportContents.secureMessages[i];
                    if (message.parentid == data.parentId) {
                        message.unread = data.markUnread;
                        break;
                    }
                }

                var grid = $("#grid").data("kendoGrid");
                grid.dataSource.read();
            }
        });
    }

    <?php if (!$fromUserHub) {
    /**
     * function secureMessagesSearchResponse(mode, encryptedMessage, dataItem)
     * This is hooked into the user search results.  It essentially opens up the secure message window with data from the search.
     */
    ?>
    function secureMessagesSearchResponse(mode, encryptedMessage, dataItem) {
        switch(mode) {
            case "successfulSelection":
            case "successfulOneRecord":
                openSecureMessageWindow(0, dataItem.user_id, dataItem.user_name, encryptedMessage);
                break;
        }
    }

    <?php }

    // End of init function.  Start of additional functions.

    /**
     * $("#filterBtn").click(function()) (anonymous)
     * This function will apply the filter selections to the grid.  If the duration of the grid increases e.g. past 30 days to all then there will be a new call to get the other data.
     * Otherwise, grid will just be filtered.  So changing the duration from ALL to past 30 days will filter the extra data out versus calling the remote read again.
     * Global variable maxDuration is used to check if the data exists in the grid.
     * The previous values of duration and show variables are saved so that if there actually is no changes, then nothing happens.
     */
    ?>
    function filterSecureMessages() {
        var duration = Number($(".durationOption.selected").data("type"));
        var show = $(".showOption.selected").data("type");

        var reread = false;
        var filter = [];

        <?php if (!$fromUserHub) { ?>
        var find = $("#findInput").val().trim();

        if (find != "") {
            filter.push({logic: "or", filters: [
            <?php // Have to change the kendo type in the schema from number to string to use "contains".  This will be a problem if direct filtering is needed on the grid. ?>
                {field: "user_id", operator: "contains", value: find},
                {field: "username", operator: "contains", value: find},
                {field: "subject", operator: "contains", value: find} <?php // already case-insensitive ?>
            ]});
        }
        <?php } ?>

        if (duration > userSupportContents.maxDuration) { <?php // data is not currently in grid, will need to retrieve more data. ?>
            reread = true;
        } else if (duration != 3) {
            var date = new Date();
            date.setHours(0,0,0,0);
            date.setDate(date.getDate() - duration * 30);
            filter.push({field: "date", operator: "gte", value: date});
        }

        switch(show) {
            case "unread":
                filter.push({field: "unread", operator: "eq", value: "Y"}); <?php // notice the missing break.  This is not a mistake.  Origination of 1 is needed in addition to unread. ?>
            case "in":
                filter.push({field: "origination", operator: "eq", value: 1});
                break;
            case "out":
                filter.push({field: "origination", operator: "eq", value: 0});
                break;
        }

        var grid = $("#grid").data("kendoGrid");
        if (reread) {
            showWaitWindow();
            var parameters = <?php echo !$fromUserHub ? "{mode: duration}" : "{mode: duration, payload: userSupportContents.payload}" ?>;
            $.post("<?php echo $self; ?>&operation=readSecureMessages", parameters, function(data) {
                hideWaitWindow();
                if (data.error.length > 0) {
                    $.homecuValidator.displayMessage(data.error, $.homecuValidator.settings.statusError );
                } else {
                    userSupportContents.secureMessages = data.messages;
                    grid.dataSource.filter(filter);
                    grid.dataSource.read();

                    userSupportContents.maxDuration = duration;
                }
            });
        } else {
            grid.dataSource.filter(filter);
        }
    }

    <?php
    /**
     * function openSecureMessageWindow(parentId, dataItem)
     * Opens the secure message window.
     *
     * @param integer parentId -- the parentId of the secureMessage.
     */ ?>
    function openSecureMessageWindow(parentId, userId, username, payload) {
        $("#secureMessageWindow").data("rereadGrid", false);
        var secureMessageWindow = $("#secureMessageWindow").data("kendoWindow");
        if (secureMessageWindow == null) {
            secureMessageWindow = $("<div id='secureMessageWindow'></div>").appendTo("body").kendoWindow({
                modal: true,
                title: "Edit Thread",
                visible: false,
                resizable: false,
                minWidth: 300,
                maxWidth: 500,
                width: "90%",
                close: function(e) {
                    if (!$("#secureMessageWindow").data("invalid")) {
                        if ($("#secureMessageWindow").data("rereadGrid")) {
                            $("#grid").data("kendoGrid").dataSource.read();
                        }
                    } else {
                        potentiallyCancelChanges();
                        e.preventDefault();
                        return false;
                    }

                    if (window.activeWindows != null) {
                        window.activeWindows.pop();
                    }
                },
                open: function() {
                    $("#secureMessageWindow").data("invalid", true);
                    if (window.activeWindows != null) {
                        window.activeWindows.push(this);
                    }
                    var kWindow = $(this.wrapper);
                    var left = 1/2 * $(window).width() - 1/2 * $(kWindow).width();
                    $(kWindow).css({position: "absolute", top: "10px", left: left + "px"});
                },
                activate: function() {
                    window.setTimeout(scrollThread, 100);
                    thisA = $(".k-icon.k-i-print").hide().parent();
                    $(thisA).append("<i class='fa fa-print fa-xs printBtn'></i>");
                    $(thisA).parent().find(".printBtn,.k-i-close").css({verticalAlign:"middle"});
                },
                actions: ["print", "Close"] <?php //printBtn ?>
            }).data("kendoWindow");

            $("#secureMessageWindow").on("click", ".sendBtn", function() {
                if ($.homecuValidator.validate()) {
                    $("#secureMessageWindow").data("invalid", false);
                    $("#secureMessageWindow").removeClass("hasError");
                    var parameters = {};
                    parameters.message = $("#messageInput").val();

                    var dataItem = $("#secureMessageWindow").data("data");
                    var parentId = dataItem.parentId;

                    if (parentId != 0) {
                        parameters.parentId = parentId;
                        parameters.subject = "Re: " + dataItem.subject;
                    } else {
                        parameters.subject = $("[name='topicInput']").val();
                    }
                    <?php if (!$fromUserHub) { ?>
                    parameters.payload = $("#secureMessageWindow").data("payload");
                    <?php } else { ?>
                    parameters.payload = userSupportContents.payload;
                    <?php } ?>

                    showWaitWindow();
                    $.post("<?php echo $self; ?>&operation=sendSecureMessage", parameters, function(data) {
                        hideWaitWindow();

                        if (data.error.length > 0) {
                            $.homecuValidator.displayMessage(data.error, $.homecuValidator.settings.statusError );
                        } else {
                            if (parentId == 0) {
                                userSupportContents.secureMessages.push(data.newMessage);
                                $("#secureMessageWindow").data("rereadGrid", true);

                                $.homecuValidator.setup({ formStatusField: "formValidateDiv", formValidate:'filterDiv'});
                                $.homecuValidator.displayMessage(data.info, $.homecuValidator.settings.statusSuccess);
                            }
                            secureMessageWindow.close();
                        }
                    });
                }

                return false;
            });

            $("#secureMessageWindow").on("click", ".cancelBtn", function() {
                secureMessageWindow.close();
                return false;
            });

            $(".k-window:has(#secureMessageWindow)").on("click", ".printBtn", function() {
                showPrintThreadPopup();
                return false;
            });

            $("#secureMessageWindow").on("click", ".deleteBtn", function() {
                openDeleteDialogSecureMessages();
                return false;
            });
        } <?php // End if secureWindow is not defined. ?>

        $("#secureMessageWindow").data("data", null);
        $("#secureMessageWindow").data("payload", null);

        if (parentId == 0) {
            $("#secureMessageWindow").removeClass("hasParent");
            var template = kendo.template($("#windowTemplate").html());
            var zeData = {parentId: Number(parentId), subject: "", threadData: []};
            if (userId != null) {
                zeData.userId = userId;
                zeData.username = username;
            }
            template = template(zeData);
            $("#secureMessageWindow").data("data", zeData);
            secureMessageWindow.setOptions({title: "Add Message"});
            secureMessageWindow.content(template).open();

            $("#topicInput").attr("required", "required");
            $("#topicInput").attr("data-required-msg", "Topic cannot be blank");

            $.homecuValidator.setup({formValidate:'secureMessageForm', formStatusField: 'editValidateDiv'});

            $(".k-window:has(#secureMessageWindow) .k-window-action:eq(0)").hide();
            <?php // Hide the print.  "Clicking "Print" with a new message shows an empty screen. Probably don't need to offer to print nothing." ?>

            <?php if (!$fromUserHub) { ?>
                $("#secureMessageWindow").data("payload", payload);
            <?php } ?>
        } else {
            $(".k-window:has(#secureMessageWindow) .k-window-action:eq(0)").show();
            var parameters = {parentId: parentId};
            <?php if ($fromUserHub) { ?>
                parameters.payload = userSupportContents.payload;
            <?php } ?>
            showWaitWindow();
            $.post("<?php echo $self; ?>&operation=readThread", parameters, function(data) {
                hideWaitWindow();

                if (data.error.length > 0) {
                    $.homecuValidator.displayMessage(data.error, $.homecuValidator.settings.statusError );
                } else {
                    data.record.parentId = parentId;
                    var template = kendo.template($("#windowTemplate").html());
                    template = template(data.record);
                    secureMessageWindow.setOptions({title: "User Messages"});
                    secureMessageWindow.content(template).open();

                    $("#secureMessageWindow").removeClass("hasError");
                    $("#secureMessageWindow").addClass("hasParent");
                    $("#secureMessageWindow").data("data", data.record);

                    <?php if (!$fromUserHub) { ?>
                        $("#secureMessageWindow").data("payload", data.payload);
                    <?php } ?>

                    $.homecuValidator.setup({formValidate:'secureMessageForm', formStatusField: 'editValidateDiv'});

                    <?php // Update unread status ?>
                    for(var i = 0; i != userSupportContents.secureMessages.length; i++) {
                        var message = userSupportContents.secureMessages[i];
                        if (message.parentid == parentId) {
                            message.unread = "N";
                            $("#secureMessageWindow").data("rereadGrid", true);
                            break;
                        }
                    }
                }
            });
        }

    }

    <?php
    /**
     * function potentiallyCancelChanges()
     * This displays the discard changes dialog on close if there are changes made.
     */
    ?>
    function potentiallyCancelChanges() {
        if ($("[name='messageInput']").val().trim() == "" && ($("#secureMessageWindow").data("parentId") != 0 || $("[name='topicInput']").val().trim() == "")) {
            $("#secureMessageWindow").data("invalid", false);
            if ($("#secureMessageWindow").data("rereadGrid")) {
                $("#grid").data("kendoGrid").dataSource.read();
            }
            $("#secureMessageWindow").data("kendoWindow").close();
        } else {
            var discardChangesDialog = $("#discardChangesDialog").data("kendoDialog");
            if (discardChangesDialog == null) {
              discardChangesDialog = $("<div id='discardChangesDialog'></div>").appendTo("body").kendoDialog({
                title: "Discard Changes",
                content: "<p>Changes have been made to this message.</p><p>Do you wish to discard your changes?</p>",
                actions: [
                  {text: "No"},
                  {text: "Yes", primary: true, action: function() {
                        $("#secureMessageWindow").data("invalid", false);
                        $("#secureMessageWindow").data("kendoWindow").close();
                        if ($("#secureMessageWindow").data("rereadGrid")) {
                            $("#grid").data("kendoGrid").dataSource.read();
                        }
                  }}
                ],
                visible: false,
                open: function() {
                  if (window.activeWindows != null) {
                        window.activeWindows.push(this);
                  }
                },
                close: function() {
                  if (window.activeWindows != null) {
                        window.activeWindows.pop();
                  }
                }
              }).data("kendoDialog");
            }
            discardChangesDialog.open();
        }
    }

    <?php
    /**
     * function showPrintThreadPopup()
     * This opens a new window for printing.
     */
    ?>
    function showPrintThreadPopup() {
        var zeData = $("#secureMessageWindow").data("data");
        var template = kendo.template($("#printTemplate").html());
        $("#printForm [name='shell']").val(template(zeData));
        template = kendo.template($("#printTemplateTitle").html());
        $("#printForm [name='title']").val(template(zeData));

        var printWindow = window.open("", "printWindow");
        $("#printForm").submit();
    }

    <?php
    /**
     * function openDeleteDialogSecureMessages()
     * Opens the delete confirm dialog for secure messages.
     */
    ?>
    function openDeleteDialogSecureMessages() {
        var deleteDialog = $("#deleteDialog").data("kendoDialog");
        if (deleteDialog == null) {
            deleteDialog = $("<div id='deleteDialog'></div>").appendTo("body").kendoDialog({
                title: "Delete Thread",
                content: "<p>You are about to delete this thread</p><p>Do you wish to continue?</p>",
                actions: [
                    {text: "No"},
                    {text: "Yes", primary: true, action: function() {
                        var parentId = $("#secureMessageWindow").data("data").parentId;
                        var parameters = {parentId: parentId};
                        <?php if ($fromUserHub) { ?>
                            parameters.payload = userSupportContents.payload;
                        <?php } else { ?>
                            parameters.payload = $("#secureMessageWindow").data("payload");
                        <?php } ?>
                        showWaitWindow();
                        $.post("<?php echo $self; ?>&operation=deleteThread", parameters, function(data) {
                            hideWaitWindow();
                            if (data.error.length > 0) {
                                $.homecuValidator.displayMessage(data.error, $.homecuValidator.settings.statusError );
                            } else {
                                $("#secureMessageWindow").data("invalid", false);
                                userSupportContents.secureMessages = $.grep(userSupportContents.secureMessages, function(n,i) { return n.parentid != parentId; });
                                $("#grid").data("kendoGrid").dataSource.read();
                                $("#secureMessageWindow").data("kendoWindow").close();
                            }
                        });
                    }}
                ],
                visible: false,
                open: function() {
                    if (window.activeWindows != null) {
                        window.activeWindows.push(this);
                    }
                },
                close: function() {
                    if (window.activeWindows != null) {
                        window.activeWindows.pop();
                    }
                }
            }).data("kendoDialog");
        }
        deleteDialog.open();
    }

    <?php
    /**
     * function scrollThread()
     * This is responsible for scrolling the message part of the thread on popup.
     */
    ?>
    function scrollThread() {
        var selector = $(".threadDiv");
        $(selector).height();
        $(selector).animate({scrollTop: $(selector).prop('scrollHeight')}, {duration: 2000});
    }

    <?php if (!$fromUserHub) { ?> var activeWindows = []; <?php } ?>
    $(document).ready(function() {
        init();
        <?php if (!$fromUserHub) { printClickOverlayEvent(); } ?>
    });
    </script>
    <script type="text/x-kendo-template" id="windowTemplate">
        # var editing = parentId != 0; #
        <div class="container-fluid hcu-template">
            <div id="editValidateDiv" class="formValidateDiv k-block k-error-colored row" style="display: none;"></div>
            # if (editing) { #
                <div class="row">
                    <?php printThreadTemplate(); ?>
                </div>
            # } #
            <div class="row well well-sm hcuSpacer">
                <form id="secureMessageForm">
                    <?php if (!$fromUserHub) {
                        dialogPrintInputLine("User", "#: username #", "userInput", 0, "disabled", "text", true, "", false, false, true);
                    }
                    dialogPrintInputLine("Topic", "# if (editing) { # Re: #: subject # # } #", "topicInput", 0, "# if (editing) { # disabled # } #", "text", true, "", false, false, true); ?>

                    <div class="row hcuSpacer"><label class="col-xs-3">Message</label><div class="col-xs-9">
                        <textarea class="k-textbox hcu-all-100" id="messageInput" name="messageInput" rows="9" cols="75" wrap="physical"
                        required data-required-msg="Message body cannot be blank" ></textarea>
                    </div></div>
                </form>
            </div>
            <div class="hcu-edit-buttons k-state-default row">
                # if (editing) { #
                    <span class="hcu-icon-delete">
                        <a class="deleteBtn" href="\\#"><i class="fa fa-trash-o fa-lg"></i></a>
                    </span>
                # } #
                <a class="cancelBtn" href="\\#">Cancel</a>
                &nbsp;&nbsp;&nbsp;
                <a class="sendBtn k-button k-primary" href="\\#"><i class="fa fa-check"></i>Send</a>
            </div>
        </div>
    </script>
    <script type="text/x-kendo-template" id="printTemplate">
        <div class="printDiv">
            <?php printThreadTemplate(true); ?>
        </div>
    </script>
    <script type="text/x-kendo-template" id="printTemplateTitle">
        Thread "#: subject #" with user #: username #
    </script>
    <script type="text/x-kendo-template" id="rowTemplate">
        # var inTD = origination == 1 ? "<td class='inOutTD'><div class='k-success-colored'>In</div></td>" : "<td class='inOutTD'><div class='k-info-colored'>Out</div></td>"; #
        <tr data-uid='#: uid #' class='# if (unread == "Y") { # unreadThread # } #'>#= inTD #<td>#: username #</td><td>#: subject #</td>
            <td>#= kendo.toString(date, "MM/dd/yyyy HH:mm") # #: timezone #</td></tr>
    </script>
    <?php if (!$fromUserHub) {
        printUserSearchTemplate();
    }

    if ($fromUserHub) { // The difference: NOT responsive because it is inside of a dialog.?>
    <div style="container-fluid">
        <div id="formValidateDiv" class="col-xs-12 k-block k-error-colored formValidateDiv" style="display:none;"></div>
        <div class="row hcuSpacer filterDiv userHub" id="filterDiv">
            <label class="col-xs-2">Type</label>
            <div class="col-xs-4">
                <span class="showOption" data-type="in"><span></span><a href="#">in</a></span> | <span class="showOption" data-type="out"><span></span><a href="#">out</a></span>
                | <span class="showOption" data-type="unread"><span></span><a href="#">unread</a></span> | <span class="showOption" data-type="all"><span></span><a href="#">all</a>
            </div>
            <label class="col-xs-2">Duration</label>
            <div class="col-xs-4">
                <span class="durationOption" data-type="1"><span></span><a href="#">30 days</a></span> | <span class="durationOption" data-type="2"><span></span><a href="#">60 days</a></span>
                | <span class="durationOption" data-type="3"><span></span><a href="#">all</a></span>
            </div>
        </div>
        <?php printSimple("<div id='grid' class='pointerGrid'></div>"); ?>
    </div>
    <?php } else { ?>
    <div style="container-fluid">
        <div id="formValidateDiv" class="col-xs-12 k-block k-error-colored formValidateDiv" style="display:none;"></div>
        <div class="hcuSpacer filterDiv standalone row" id="filterDiv">
            <div class="col-xs-12 col-sm-6 hcuSpacer">
                <label class="col-xs-4">User/topic</label>
                <div class="col-xs-8"><input type="text" class="k-input k-textbox hcu-all-100" id="findInput"></div>
            </div>
            <div class="col-xs-12 col-sm-6">
                <label class="col-xs-4">Type</label>
                <div class="col-xs-8">
                    <span class="showOption" data-type="in"><span></span><a href="#">in</a></span> | <span class="showOption" data-type="out"><span></span><a href="#">out</a></span>
                    | <span class="showOption" data-type="unread"><span></span><a href="#">unread</a></span> | <span class="showOption" data-type="all"><span></span><a href="#">all</a>
                </div>
            </div>
            <div class="col-xs-12 col-sm-6 hcuSpacer">
                <label class="col-xs-4">Duration</label>
                <div class="col-xs-8">
                    <span class="durationOption" data-type="1"><span></span><a href="#">30 days</a></span>
                    | <span class="durationOption" data-type="2"><span></span><a href="#">60 days</a></span>
                    | <span class="durationOption" data-type="3"><span></span><a href="#">all</a></span>
                </div>
            </div>
        </div>
        <?php printSimple("<div id='grid' class='pointerGrid'></div>"); ?>
    </div>
    <?php } ?>

    <ul id="contextMenu">
        <li class="markReadLi">Mark Read</li>
        <li class="markUnreadLi">Mark Unread</li>
        <li class="openLi">Open</li>
    </ul>

    <form id="printForm" method="post" action="shell.prg" target="printWindow">
        <input type="hidden" name="shell" value="">
        <input type="hidden" name="title" value="">
    </form>
</div>
<?php }

/**
 * function printThreadTemplate($actuallyPrint = false)
 * This will print the thread template which is the message part of the thread.
 *
 * @param boolean $actuallyPrint -- This is funny.  I originally called this "print..." because it is printing javascript from PHP.  However, this refers to the "print" function.
 */
function printThreadTemplate($actuallyPrint = false) {
    if ($actuallyPrint) { ?>
    <div class="row">
        <?php printHubLabelBlock(array("User" => "#: username #", "Subject" => "#: subject #")); ?>
    </div>
    <div class="row">
        <hr>
    </div>
    <?php } ?>
    <div class="threadDiv row hcu-no-padding">
    # for (var i = 0; i != threadData.length; i++) { var row = threadData[i]; #
        <span class='k-block k-shadow # if (row.origination == 0) { # threadCU k-info-colored # } else { # k-success-colored threadMember # } #'>
            <span class='threadTitle'># if (row.origination == 0) { if (row.adminname == null) { # #: row.admin # # }
                else { # #: row.adminname # # } # Said # } else { # User # } #</span>
            <span class='threadDate'>#= kendo.toString(row.date, "MM/dd/yyyy HH:mm") # #: row.timezone #</span>
            <br>#= row.messagetext #
        </span>
    # } #
    </div>
<?php }