in-portal
No OneTemporary
Actions

Subscribers

None

File Metadata

Created: Wed, Feb 5, 11:59 AM

in-portal
View Options

	Index: branches/5.1.x/core/kernel/constants.php
	===================================================================
	--- branches/5.1.x/core/kernel/constants.php (revision 13470)
	+++ branches/5.1.x/core/kernel/constants.php (revision 13471)
	@@ -1,159 +1,165 @@
	<?php
	/**
	* @version $Id$
	* @package In-Portal
	* @copyright Copyright (C) 1997 - 2009 Intechnic. All rights reserved.
	* @license GNU/GPL
	* In-Portal is Open Source software.
	* This means that this software may have been modified pursuant
	* the GNU General Public License, and as distributed it includes
	* or is derivative of works licensed under the GNU General Public License
	* or other free or open source software licenses.
	* See http://www.in-portal.org/license for copyright notices and details.
	*/

	defined('FULL_PATH') or die('restricted access!');

	// kDBList filter types (then, types are divided into classes)
	define('HAVING_FILTER', 1);
	define('WHERE_FILTER', 2);
	define('AGGREGATE_FILTER', 3);

	// kDBList filter classes
	define('FLT_SYSTEM', 1); // System Having/Where filter [AND]
	define('FLT_NORMAL', 2); // User Having/Where filter [OR]
	define('FLT_SEARCH', 3); // User "Search" Having/Where filter [OR]
	define('FLT_VIEW', 4); // User "View Menu" Having/Where filter [AND]
	define('FLT_CUSTOM', 5); // Custom fields (above) grid columns [AND]

	// kMultipleFilter types
	define('FLT_TYPE_AND', 'AND');
	define('FLT_TYPE_OR', 'OR');

	// item statuses
	define('STATUS_DISABLED', 0);
	define('STATUS_ACTIVE', 1);
	define('STATUS_PENDING', 2);
	define('STATUS_PENDING_EDITING', -2);

	// sections
	define('stTREE', 1);
	define('stTAB', 2);

	// event statuses
	define('erSUCCESS', 0); // event finished working succsessfully
	define('erFAIL', -1); // event finished working, but result is unsuccsessfull
	define('erFATAL', -2); // event experienced FATAL error - no hooks should continue!
	define('erPERM_FAIL', -3); // event failed on internal permission checking (user has not permission)
	define('erSTOP', -4); // event requested to stop processing (don't parse templates)

	// permission types
	define('ptCATEGORY', 0);
	define('ptSYSTEM', 1);

	// email event types
	define('EVENT_TYPE_FRONTEND', 0);
	define('EVENT_TYPE_ADMIN', 1);

	define('EDIT_MARK', '&\|edit\|&'); // replace this sequence inside filters to SID[_main_wid]

	$application =& kApplication::Instance();
	$spacer_url = $application->BaseURL().'core/admin_templates/img/spacer.gif';
	define('SPACER_URL', $spacer_url);

	if (!$application->isAdmin) {
	// don't show debugger buttons on front (if not overrided in "debug.php")
	safeDefine('DBG_TOOLBAR_BUTTONS', 0);
	}

	define('smHIDE', 0); // always hide section from tree
	define('smNORMAL', 1); // show section even, if they were marked as smDEBUG or smSUPER_ADMIN before
	define('smDEBUG', 2); // show section in debug mode only
	define('smSUPER_ADMIN', 4); // show section in super admin & debug mode

	// common usage regular expressions
	define('REGEX_EMAIL_USER', '[-a-zA-Z0-9!\#$%&*+\/=?^_`{\|}~.]+');
	define('REGEX_EMAIL_DOMAIN', '[a-zA-Z0-9]{1}[-.a-zA-Z0-9_]*\.[a-zA-Z]{2,6}');
	define('ALLOW_DEFAULT_SETTINGS', '_USE_DEFAULT_USER_DATA_'); //Allow persistent vars to take data from default user's persistent data

	define('XML_NO_TEXT_NODES', 1); // Normal mode for XMLHelper
	define('XML_WITH_TEXT_NODES', 2); // Will create text nodes for every char-data (used in kPDFHelper)

	// ChangeLog actions
	define('clCREATE', 1);
	define('clUPDATE', 2);
	define('clDELETE', 3);

	/**
	* Separator for ValueList fields
	*
	*/
	define('VALUE_LIST_SEPARATOR', '\|\|');

	// template editing modes
	define('EDITING_MODE_BROWSE', 1); // no changes, front-end as users see it
	define('EDITING_MODE_CONTENT', 2); // content blocks + phrase editing
	define('EDITING_MODE_DESIGN', 3); // all other blocks

	// agent types
	define('AGENT_TYPE_USER', 1);
	define('AGENT_TYPE_SYSTEM', 2);

	// agent last run statuses
	define('AGENT_LAST_RUN_SUCCEDED', 1);
	define('AGENT_LAST_RUN_FAILED', 0);
	define('AGENT_LAST_RUN_RUNNING', 2);

	// place for product file uploads (sort of "/system/images" but for all other files)
	define('ITEM_FILES_PATH', WRITEBALE_BASE . '/downloads/');

	// mailing list statuses
	define('MAILING_LIST_NOT_PROCESSED', 1);
	define('MAILING_LIST_PARTIALLY_PROCESSED', 2);
	define('MAILING_LIST_PROCESSED', 3);
	define('MAILING_LIST_CANCELLED', 4);

	// theme file statuses (related to structure creation process)
	define('SMS_MODE_AUTO', 1);
	define('SMS_MODE_FORCE', 2);

	/**
	* Means, that actual category Template field value should inherited from parent category
	*
	*/
	define('CATEGORY_TEMPLATE_INHERIT', '#inherit#');

	define('REWRITE_MODE_BUILD', 1);
	define('REWRITE_MODE_PARSE', 2);

	define('SESSION_LOG_ACTIVE', 0);
	define('SESSION_LOG_LOGGED_OUT', 1);
	define('SESSION_LOG_EXPIRED', 2);

	+ define('LOGIN_RESULT_OK', 0);
	+ define('LOGIN_RESULT_INVALID_LOGIN', 1);
	+ define('LOGIN_RESULT_INVALID_PASSWORD', 2);
	+ define('LOGIN_RESULT_BANNED', 3);
	+ define('LOGIN_RESULT_NO_PERMISSION', 4);
	+
	define('DESTINATION_TYPE_COUNTRY', 1);
	define('DESTINATION_TYPE_STATE', 2);

	// form field visibility
	define('FORM_FIELD_EVERYONE', 1);
	define('FORM_FIELD_UNREGISTERED', 2);

	// form field e-mail communication roles
	define('EMAIL_COMMUNICATION_ROLE_NAME', 1);
	define('EMAIL_COMMUNICATION_ROLE_EMAIL', 2);
	define('EMAIL_COMMUNICATION_ROLE_SUBJECT', 3);
	define('EMAIL_COMMUNICATION_ROLE_BODY', 4);

	// form submission statuses
	define('SUBMISSION_REPLIED', 1); // submission was replied by admin
	define('SUBMISSION_NOT_REPLIED', 2); // submission has no client replies (no messages at all)
	define('SUBMISSION_NEW_EMAIL', 3); // submission have new reply/email from client
	define('SUBMISSION_BOUNCE', 4); // submission have bounce from client

	// submission log statuses
	define('SUBMISSION_LOG_SENT', 1);
	define('SUBMISSION_LOG_BOUNCE', 2);
	define('SUBMISSION_LOG_REPLIED', 1);

	define('SUBMISSION_LOG_ATTACHMENT_PATH', WRITEBALE_BASE . '/user_files/submission_log/');

	define('TIMENOW', adodb_mktime()); // for faster message processing
	\ No newline at end of file
	Index: branches/5.1.x/core/kernel/application.php
	===================================================================
	--- branches/5.1.x/core/kernel/application.php (revision 13470)
	+++ branches/5.1.x/core/kernel/application.php (revision 13471)
	@@ -1,3142 +1,3147 @@
	<?php
	/**
	* @version $Id$
	* @package In-Portal
	* @copyright Copyright (C) 1997 - 2009 Intechnic. All rights reserved.
	* @license GNU/GPL
	* In-Portal is Open Source software.
	* This means that this software may have been modified pursuant
	* the GNU General Public License, and as distributed it includes
	* or is derivative of works licensed under the GNU General Public License
	* or other free or open source software licenses.
	* See http://www.in-portal.org/license for copyright notices and details.
	*/

	/**
	* Basic class for Kernel4-based Application
	*
	* This class is a Facade for any other class which needs to deal with Kernel4 framework.<br>
	* The class incapsulates the main run-cycle of the script, provide access to all other objects in the framework.<br>
	* <br>
	* The class is a singleton, which means that there could be only one instance of kApplication in the script.<br>
	* This could be guranteed by NOT calling the class constuctor directly, but rather calling kApplication::Instance() method,
	* which returns an instance of the application. The method gurantees that it will return exactly the same instance for any call.<br>
	* See singleton pattern by GOF.
	* @package kernel4
	*/

	defined('FULL_PATH') or die('restricted access!');

	class kApplication {

	/**
	* Is true, when Init method was called already, prevents double initialization
	*
	* @var bool
	*/
	var $InitDone = false;

	/**
	* Holds internal NParser object
	* @access private
	* @var NParser
	*/
	var $Parser;

	/**
	* Holds parser output buffer
	* @access private
	* @var string
	*/
	var $HTML;

	/**
	* Prevents request from beeing proceeded twice in case if application init is called mere then one time
	*
	* @var bool
	* @todo This is not good anyway (by Alex)
	*/
	var $RequestProcessed = false;

	/**
	* The main Factory used to create
	* almost any class of kernel and
	* modules
	*
	* @access private
	* @var kFactory
	*/
	var $Factory;

	/**
	* All ConfigurationValues table content (hash) here
	*
	* @var Array
	* @access private
	*/
	var $ConfigHash = Array();

	/**
	* Ids of config variables used in current run (for caching)
	*
	* @var Array
	* @access private
	*/
	var $ConfigCacheIds = array();

	/**
	* Template names, that will be used instead of regular templates
	*
	* @var Array
	*/
	var $ReplacementTemplates = Array ();

	/**
	* Mod-Rewrite listeners used during url building and parsing
	*
	* @var Array
	*/
	var $RewriteListeners = Array ();

	/**
	* Reference to debugger
	*
	* @var Debugger
	*/
	var $Debugger = null;

	/**
	* Holds all phrases used
	* in code and template
	*
	* @var PhrasesCache
	*/
	var $Phrases;

	/**
	* Modules table content, key - module name
	*
	* @var Array
	*/
	var $ModuleInfo = Array();

	/**
	* Holds DBConnection
	*
	* @var kDBConnection
	*/
	var $Conn = null;

	/**
	* Maintains list of user-defined error handlers
	*
	* @var Array
	*/
	var $errorHandlers = Array();


	// performance needs:
	/**
	* Holds a refererence to httpquery
	*
	* @var kHttpQuery
	*/
	var $HttpQuery = null;

	/**
	* Holds a reference to UnitConfigReader
	*
	* @var kUnitConfigReader
	*/
	var $UnitConfigReader = null;

	/**
	* Holds a reference to Session
	*
	* @var Session
	*/
	var $Session = null;

	/**
	* Holds a ref to kEventManager
	*
	* @var kEventManager
	*/
	var $EventManager = null;

	/**
	* Ref to itself, needed because everybody used to write $this->Application, even inside kApplication
	*
	* @var kApplication
	*/
	var $Application = null;

	/**
	* Ref for TemplatesChache
	*
	* @var TemplatesCache
	*/
	var $TemplatesCache = null;

	/**
	* Physical template name mapping to their template names based on structure
	*
	* @var Array
	*/
	var $structureTemplateMapping = Array ();

	var $CompilationCache = array(); //used when compiling templates
	var $CachedProcessors = array(); //used when running compiled templates

	var $LambdaElements = 1; // for autonumbering unnamed RenderElements [any better place for this prop? KT]

	/**
	* Holds current NParser tag while parsing, can be used in error messages to display template file and line
	*
	* @var _BlockTag
	*/
	var $CurrentNTag = null;

	/**
	* Object of memory caching class
	*
	* @var kCache
	*/
	var $memoryCache = null;

	/**
	* Tells, that administrator has authentificated in administrative console
	* Should be used to manipulate data change OR data restrictioning!
	*
	* @var bool
	*/
	var $isAdminUser = false;

	/**
	* Tells, that admin version of "index.php" was used, nothing more!
	* Should be used to manipulate data display!
	*
	* @var bool
	*/
	var $isAdmin = false;

	/**
	* Returns kApplication instance anywhere in the script.
	*
	* This method should be used to get single kApplication object instance anywhere in the
	* Kernel-based application. The method is guranteed to return the SAME instance of kApplication.
	* Anywhere in the script you could write:
	* <code>
	* $application =& kApplication::Instance();
	* </code>
	* or in an object:
	* <code>
	* $this->Application =& kApplication::Instance();
	* </code>
	* to get the instance of kApplication. Note that we call the Instance method as STATIC - directly from the class.
	* To use descendand of standard kApplication class in your project you would need to define APPLICATION_CLASS constant
	* BEFORE calling kApplication::Instance() for the first time. If APPLICATION_CLASS is not defined the method would
	* create and return default KernelApplication instance.
	* @static
	* @access public
	* @return kApplication
	*/
	function &Instance()
	{
	static $instance = false;

	if (!$instance) {
	$class = defined('APPLICATION_CLASS') ? APPLICATION_CLASS : 'kApplication';
	$instance = new $class();
	$instance->Application =& $instance;
	}

	return $instance;
	}

	/**
	* Initializes the Application
	*
	* @access public
	* @see kHTTPQuery
	* @see Session
	* @see TemplatesCache
	* @return bool Was Init actually made now or before
	*/
	function Init()
	{
	if($this->InitDone) {
	return false;
	}

	$this->isAdmin = constOn('ADMIN');

	if (!constOn('SKIP_OUT_COMPRESSION')) {
	ob_start(); // collect any output from method (other then tags) into buffer
	}

	if (defined('DEBUG_MODE') && $this->isDebugMode() && constOn('DBG_PROFILE_MEMORY')) {
	$this->Debugger->appendMemoryUsage('Application before Init:');
	}
	if (!$this->isDebugMode() && !constOn('DBG_ZEND_PRESENT')) {
	error_reporting(0);
	ini_set('display_errors', 0);
	}
	if (!constOn('DBG_ZEND_PRESENT')) {
	$error_handler = set_error_handler( Array (&$this, 'handleError') );
	if ($error_handler) {
	// wrap around previous error handler, if any was set
	$this->errorHandlers[] = $error_handler;
	}
	}

	$this->Conn = new kDBConnection(SQL_TYPE, Array(&$this, 'handleSQLError') );
	$this->Conn->debugMode = $this->isDebugMode();
	$this->Conn->Connect(SQL_SERVER, SQL_USER, SQL_PASS, SQL_DB);

	$this->Factory = new kFactory();
	$this->registerDefaultClasses();
	$this->Phrases = new PhrasesCache();
	$this->memoryCache =& $this->Factory->makeClass('Cache');
	$this->EventManager =& $this->Factory->makeClass('EventManager');
	$this->Factory->Storage['EventManager'] =& $this->EventManager;
	$this->RegisterDefaultBuildEvents();
	$this->SetDefaultConstants();

	if (defined('DEBUG_MODE') && $this->isDebugMode()) {
	$this->Debugger->appendTimestamp('Before UnitConfigReader');
	}

	$this->UnitConfigReader =& $this->recallObject('kUnitConfigReader');
	$this->UnitConfigReader->scanModules(MODULES_PATH);
	$this->registerModuleConstants();

	if (defined('DEBUG_MODE') && $this->isDebugMode()) {
	$this->Debugger->appendTimestamp('After UnitConfigReader');
	}

	define('MOD_REWRITE', $this->ConfigValue('UseModRewrite') && !$this->isAdmin ? 1 : 0);

	$this->HttpQuery =& $this->recallObject('HTTPQuery');

	if (defined('DEBUG_MODE') && $this->isDebugMode()) {
	$this->Debugger->appendTimestamp('Processed HTTPQuery initial');
	}

	$this->Session =& $this->recallObject('Session');

	if (defined('DEBUG_MODE') && $this->isDebugMode()) {
	$this->Debugger->appendTimestamp('Processed Session');
	}

	if (!$this->RecallVar('UserGroups')) {
	$user_groups = trim($this->Session->GetField('GroupList'), ',');
	if (!$user_groups) {
	$user_groups = $this->ConfigValue('User_GuestGroup');
	}

	$this->Session->SetField('GroupList', $user_groups);
	$this->StoreVar('UserGroups', $user_groups, true); // true for optional
	}

	$this->LoadStructureTemplateMapping();
	$this->HttpQuery->AfterInit();

	$this->Session->ValidateExpired();

	if (defined('DEBUG_MODE') && $this->isDebugMode()) {
	$this->Debugger->appendTimestamp('Processed HTTPQuery AfterInit');
	}

	$this->LoadCache();
	$this->InitConfig();

	if (defined('DEBUG_MODE') && $this->isDebugMode()) {
	$this->Debugger->appendTimestamp('Loaded cache and phrases');
	}

	$this->ValidateLogin(); // must be called before AfterConfigRead, because current user should be available there

	$this->UnitConfigReader->AfterConfigRead();

	if (defined('DEBUG_MODE') && $this->isDebugMode()) {
	$this->Debugger->appendTimestamp('Processed AfterConfigRead');
	}

	if ($this->GetVar('m_cat_id') === false) {
	$this->SetVar('m_cat_id', 0);
	}

	if (!$this->RecallVar('curr_iso')) {
	$this->StoreVar('curr_iso', $this->GetPrimaryCurrency(), true); // true for optional
	}

	$visit_id = $this->RecallVar('visit_id');

	if ($visit_id !== false) {
	$this->SetVar('visits_id', $visit_id);
	}

	$language =& $this->recallObject( 'lang.current', null, Array('live_table' => true) );
	if (preg_match('/utf-8/', $language->GetDBField('Charset'))) {
	setlocale(LC_ALL, 'en_US.UTF-8');
	mb_internal_encoding('UTF-8');
	}

	if (defined('DEBUG_MODE') && $this->isDebugMode()) {
	$this->Debugger->profileFinish('kernel4_startup');
	}

	$this->InitDone = true;

	$this->HandleEvent( new kEvent('adm:OnStartup') );

	return true;
	}

	/**
	* Returns module information. Searches module by requested field
	*
	* @param string $field
	* @param mixed $value
	* @param string field value to returns, if not specified, then return all fields
	* @param string field to return
	* @return Array
	*/
	function findModule($field, $value, $return_field = null)
	{
	$found = false;
	foreach ($this->ModuleInfo as $module_name => $module_info) {
	if (strtolower($module_info[$field]) == strtolower($value)) {
	$found = true;
	break;
	}
	}

	if ($found) {
	return isset($return_field) ? $module_info[$return_field] : $module_info;
	}

	return false;
	}

	function refreshModuleInfo()
	{
	if (defined('IS_INSTALL') && IS_INSTALL && !$this->TableFound('Modules')) {
	$this->registerModuleConstants();
	return false;
	}

	$modules_helper =& $this->recallObject('ModulesHelper');
	/* @var $modules_helper kModulesHelper */

	$sql = 'SELECT *
	FROM ' . TABLE_PREFIX . 'Modules
	WHERE Loaded = 1
	ORDER BY LoadOrder';
	$this->ModuleInfo = $this->Conn->Query($sql, 'Name');

	$sql = 'SELECT *
	FROM '.TABLE_PREFIX.'Modules
	WHERE '.$modules_helper->getWhereClause().'
	ORDER BY LoadOrder';
	$this->ModuleInfo = $this->Conn->Query($sql, 'Name');

	$this->registerModuleConstants();
	}

	/**
	* Checks if passed language id if valid and sets it to primary otherwise
	*
	*/
	function VerifyLanguageId()
	{
	$language_id = $this->GetVar('m_lang');

	if (!$language_id) {
	$language_id = 'default';
	}

	$this->SetVar('lang.current_id', $language_id);
	$this->SetVar('m_lang', $language_id);

	$lang_mode = $this->GetVar('lang_mode');
	$this->SetVar('lang_mode', '');

	$lang =& $this->recallObject('lang.current');
	/* @var $lang kDBItem */

	if (!$lang->isLoaded() \|\| (!$this->isAdmin && !$lang->GetDBField('Enabled'))) {
	if (!defined('IS_INSTALL')) {
	$this->ApplicationDie('Unknown or disabled language');
	}
	}

	$this->SetVar('lang_mode',$lang_mode);
	}

	/**
	* Checks if passed theme id if valid and sets it to primary otherwise
	*
	*/
	function VerifyThemeId()
	{
	if ($this->isAdmin) {
	safeDefine('THEMES_PATH', '/core/admin_templates');
	return;
	}

	$path = $this->GetFrontThemePath();
	if ($path === false) {
	$this->ApplicationDie('No Primary Theme Selected or Current Theme is Unknown or Disabled');
	}
	safeDefine('THEMES_PATH', $path);

	/*$theme_id = $this->GetVar('m_theme');
	if (!$theme_id) {
	$theme_id = $this->GetDefaultThemeId();
	if (!$theme_id) {
	if (!defined('IS_INSTALL')) $this->ApplicationDie('No Primary Theme Selected');
	}
	}
	$this->SetVar('m_theme', $theme_id);
	$this->SetVar('theme.current_id', $theme_id ); // KOSTJA: this is to fool theme' getPassedId
	$theme =& $this->recallObject('theme.current');
	if (!$theme->IsLoaded() \|\| !$theme->GetDBField('Enabled')) {
	if (!defined('IS_INSTALL')) $this->ApplicationDie('Unknown or disabled theme');
	}
	safeDefine('THEMES_PATH', '/themes/'.$theme->GetDBField('Name'));*/
	}

	function GetFrontThemePath($force=0)
	{
	static $path=null;
	if (!$force && isset($path)) return $path;

	$theme_id = $this->GetVar('m_theme');
	if (!$theme_id) {
	// $theme_id = $this->GetDefaultThemeId(1); //1 to force front-end mode!
	$theme_id = 'default';
	}
	$this->SetVar('m_theme', $theme_id);
	$this->SetVar('theme.current_id', $theme_id ); // KOSTJA: this is to fool theme' getPassedId
	$theme =& $this->recallObject('theme.current');
	if (!$theme->IsLoaded() \|\| !$theme->GetDBField('Enabled')) {
	return false;
	}
	$path = '/themes/'.$theme->GetDBField('Name');
	return $path;
	}

	function GetDefaultLanguageId($init = false)
	{
	$cache_key = 'primary_language_info[%LangSerial%]';
	$language_info = $this->getCache($cache_key);

	if ($language_info === false) {
	// cache primary language info first
	$table = $this->getUnitOption('lang', 'TableName');
	$id_field = $this->getUnitOption('lang', 'IDField');

	$this->Conn->nextQueryCachable = true;
	$sql = 'SELECT ' . $id_field . ', IF(AdminInterfaceLang, "Admin", "Front") AS LanguageKey
	FROM ' . $table . '
	WHERE (AdminInterfaceLang = 1 OR PrimaryLang = 1) AND (Enabled = 1)';
	$language_info = $this->Conn->GetCol($sql, 'LanguageKey');

	if ($language_info !== false) {
	$this->setCache($cache_key, $language_info);
	}
	}

	$language_key = ($this->isAdmin && $init) \|\| count($language_info) == 1 ? 'Admin' : 'Front';

	if (array_key_exists($language_key, $language_info) && $language_info[$language_key] > 0) {
	// get from cache
	return $language_info[$language_key];
	}

	$language_id = $language_info && array_key_exists($language_key, $language_info) ? $language_info[$language_key] : false;

	if (!$language_id && defined('IS_INSTALL') && IS_INSTALL) {
	$language_id = 1;
	}

	return $language_id;
	}

	function GetDefaultThemeId($force_front=0)
	{
	static $theme_id = 0;

	if ($theme_id > 0) {
	return $theme_id;
	}

	if (constOn('DBG_FORCE_THEME')) {
	$theme_id = DBG_FORCE_THEME;
	}
	elseif (!$force_front && $this->isAdmin) {
	$theme_id = 999;
	}
	else {
	$cache_key = 'primary_theme[%ThemeSerial%]';
	$theme_id = $this->getCache($cache_key);

	if ($theme_id === false) {
	$this->Conn->nextQueryCachable = true;
	$sql = 'SELECT ' . $this->getUnitOption('theme', 'IDField') . '
	FROM ' . $this->getUnitOption('theme', 'TableName') . '
	WHERE (PrimaryTheme = 1) AND (Enabled = 1)';
	$theme_id = $this->Conn->GetOne($sql);

	if ($theme_id !== false) {
	$this->setCache($cache_key, $theme_id);
	}
	}
	}

	return $theme_id;
	}

	function GetPrimaryCurrency()
	{
	$cache_key = 'primary_currency[%CurrSerial%]';
	$primary_currency = $this->getCache($cache_key);

	if ($primary_currency === false) {
	if ($this->isModuleEnabled('In-Commerce')) {
	$this->Conn->nextQueryCachable = true;
	$sql = 'SELECT ISO
	FROM ' . $this->getUnitOption('curr', 'TableName') . '
	WHERE IsPrimary = 1';
	$primary_currency = $this->Conn->GetOne($sql);
	}
	else {
	$primary_currency = 'USD';
	}

	$this->setCache($cache_key, $primary_currency);
	}

	return $primary_currency;
	}

	/**
	* Registers default classes such as ItemController, GridController and LoginController
	*
	* Called automatically while initializing Application
	* @access private
	* @return void
	*/
	function RegisterDefaultClasses()
	{
	$this->registerClass('kTempTablesHandler', KERNEL_PATH . '/utility/temp_handler.php');
	$this->registerClass('kEventManager', KERNEL_PATH . '/event_manager.php', 'EventManager');
	$this->registerClass('kUnitConfigReader', KERNEL_PATH . '/utility/unit_config_reader.php');

	$this->registerClass('kArray', KERNEL_PATH . '/utility/params.php');
	$this->registerClass('Params', KERNEL_PATH . '/utility/params.php');
	$this->registerClass('Params', KERNEL_PATH . '/utility/params.php', 'kActions');
	$this->registerClass('kCache', KERNEL_PATH . '/utility/cache.php', 'Cache', 'Params');
	$this->registerClass('kHTTPQuery', KERNEL_PATH . '/utility/http_query.php', 'HTTPQuery', 'Params');

	$this->registerClass('kHelper', KERNEL_PATH . '/kbase.php');
	$this->registerClass('kMultipleFilter', KERNEL_PATH . '/utility/filters.php');

	$this->registerClass('Session', KERNEL_PATH . '/session/session.php');
	$this->registerClass('SessionStorage', KERNEL_PATH . '/session/session.php');
	$this->registerClass('InpSession', KERNEL_PATH . '/session/inp_session.php', 'Session');
	$this->registerClass('InpSessionStorage', KERNEL_PATH . '/session/inp_session.php', 'SessionStorage');

	$this->registerClass('kTagProcessor', KERNEL_PATH . '/processors/tag_processor.php');
	$this->registerClass('kMainTagProcessor', KERNEL_PATH . '/processors/main_processor.php','m_TagProcessor', 'kTagProcessor');

	$this->registerClass('kDBList', KERNEL_PATH . '/db/dblist.php');
	$this->registerClass('kDBItem', KERNEL_PATH . '/db/dbitem.php');
	$this->registerClass('kDBEventHandler', KERNEL_PATH . '/db/db_event_handler.php');
	$this->registerClass('kDBTagProcessor', KERNEL_PATH . '/db/db_tag_processor.php', null, 'kTagProcessor');
	$this->registerClass('kCatDBItem', KERNEL_PATH . '/db/cat_dbitem.php');
	$this->registerClass('kCatDBList', KERNEL_PATH . '/db/cat_dblist.php');
	$this->registerClass('kCatDBEventHandler', KERNEL_PATH . '/db/cat_event_handler.php');
	$this->registerClass('kCatDBTagProcessor', KERNEL_PATH . '/db/cat_tag_processor.php');

	$this->registerClass('NParser', KERNEL_PATH . '/nparser/nparser.php');
	$this->registerClass('TemplatesCache', KERNEL_PATH . '/nparser/template_cache.php', null, Array ('kHelper', 'kDBTagProcessor'));

	$this->registerClass('kEmailSendingHelper', KERNEL_PATH . '/utility/email_send.php', 'EmailSender', 'kHelper');
	$this->registerClass('kSocket', KERNEL_PATH . '/utility/socket.php', 'Socket');

	if (file_exists(MODULES_PATH . '/in-commerce/units/currencies/currency_rates.php')) {
	$this->registerClass('kCurrencyRates', MODULES_PATH . '/in-commerce/units/currencies/currency_rates.php');
	}

	// do not move to config - this helper is used before configs are read
	$this->registerClass('kModulesHelper', KERNEL_PATH . '/../units/helpers/modules_helper.php', 'ModulesHelper');
	}

	function RegisterDefaultBuildEvents()
	{
	$event_manager =& $this->recallObject('EventManager');
	$event_manager->registerBuildEvent('kTempTablesHandler', 'OnTempHandlerBuild');
	}

	/**
	* Returns cached category informaton by given cache name. All given category
	* information is recached, when at least one of 4 caches is missing.
	*
	* @param int $category_id
	* @param string $name cache name = {filenames, category_designs, category_tree}
	* @return string
	*/
	function getCategoryCache($category_id, $name)
	{
	$serial_name = '[%CIDSerial:' . $category_id . '%]';
	$cache_key = $name . $serial_name;
	$ret = $this->getCache($cache_key);

	if ($ret === false) {
	if (!$category_id) {
	// don't query database for "Home" category (ID = 0), because it doesn't exist in database
	return false;
	}

	// this allows to save 2 sql queries for each category
	$this->Conn->nextQueryCachable = true;
	$sql = 'SELECT NamedParentPath, CachedTemplate, TreeLeft, TreeRight
	FROM ' . TABLE_PREFIX . 'Category
	WHERE CategoryId = ' . (int)$category_id;
	$category_data = $this->Conn->GetRow($sql);

	if ($category_data !== false) {
	// only direct links to category pages work (symlinks, container pages and so on won't work)
	$this->setCache('filenames' . $serial_name, $category_data['NamedParentPath']);
	$this->setCache('category_designs' . $serial_name, ltrim($category_data['CachedTemplate'], '/'));
	$this->setCache('category_tree' . $serial_name, $category_data['TreeLeft'] . ';' . $category_data['TreeRight']);
	}
	}

	return $this->getCache($cache_key);
	}

	/**
	* Returns item's filename that corresponds id passed. If possible, then get it from cache
	*
	* @param string $prefix
	* @param int $id
	* @param int $category_id
	* @return string
	*/
	function getFilename($prefix, $id, $category_id = null)
	{
	if ($prefix == 'c') {
	trigger_error('Method "<strong>' . __FUNCTION__ . '</strong>" no longer work with "<strong>c</strong>" prefix. Please use "<strong>getCategoryCache</strong>" method instead.', E_USER_ERROR);
	return false;
	}

	$category_id = isset($category_id) ? $category_id : $this->GetVar('m_cat_id');

	$cache_key = 'filenames[%' . $this->incrementCacheSerial($prefix, $id, false) . '%]:' . (int)$category_id;
	$filename = $this->getCache($cache_key);

	if ($filename === false) {
	$this->Conn->nextQueryCachable = true;
	$sql = 'SELECT ResourceId
	FROM ' . $this->getUnitOption($prefix, 'TableName') . '
	WHERE ' . $this->getUnitOption($prefix, 'IDField') . ' = ' . $this->Conn->qstr($id);
	$resource_id = $this->Conn->GetOne($sql);

	$this->Conn->nextQueryCachable = true;
	$sql = 'SELECT Filename
	FROM ' . TABLE_PREFIX . 'CategoryItems
	WHERE (ItemResourceId = ' . $resource_id . ') AND (CategoryId = ' . (int)$category_id . ')';
	$filename = $this->Conn->GetOne($sql);

	if ($filename !== false) {
	$this->setCache($cache_key, $filename);
	}
	}

	return $filename;
	}

	/**
	* Returns caching type (none, memory, temporary)
	*
	* @return int
	*/
	function isCachingType($caching_type)
	{
	return $this->memoryCache->getCachingType() == $caching_type;
	}

	/**
	* Increments serial based on prefix and it's ID (optional)
	*
	* @param string $prefix
	* @param int $id ID (value of IDField) or ForeignKeyField:ID
	* @param bool $increment
	*/
	function incrementCacheSerial($prefix, $id = null, $increment = true)
	{
	$pascal_case_prefix = implode('', array_map('ucfirst', explode('-', $prefix)));
	$serial_name = $pascal_case_prefix . (isset($id) ? 'IDSerial:' . $id : 'Serial');

	if ($increment) {
	if ($this->isCachingType(CACHING_TYPE_MEMORY)) {
	if (defined('DEBUG_MODE') && DEBUG_MODE && $this->isDebugMode()) {
	$this->Application->Debugger->appendHTML('Incrementing serial: <strong>' . $serial_name . '</strong>.');
	}

	$this->setCache($serial_name, (int)$this->getCache($serial_name) + 1);
	}

	// delete cached mod-rewrite urls related to given prefix and id
	$delete_clause = isset($id) ? $prefix . ':' . $id : $prefix;

	$sql = 'DELETE FROM ' . TABLE_PREFIX . 'CachedUrls
	WHERE Prefixes LIKE ' . $this->Conn->qstr('%\|' . $delete_clause . '\|%');
	$this->Conn->Query($sql);
	}

	return $serial_name;
	}

	/**
	* Adds new value to cache $cache_name and identified by key $key
	*
	* @param int $key key name to add to cache
	* @param mixed $value value of chached record
	* @param int $expiration when value expires (0 - doesn't expire)
	*/
	function setCache($key, $value, $expiration = 0)
	{
	return $this->memoryCache->setCache($key, $value, $expiration);
	}

	/**
	* Sets value to database cache
	*
	* @param string $name
	* @param mixed $value
	* @param int $expiration
	*/
	function setDBCache($name, &$value, $expiration = false)
	{
	if ((int)$expiration <= 0) {
	$expiration = -1;
	}

	$fields_hash = Array (
	'VarName' => $name,
	'Data' => &$value,
	'Cached' => adodb_mktime(),
	'LifeTime' => (int)$expiration,
	);

	$this->Conn->nextQueryCachable = true;
	$this->Conn->doInsert($fields_hash, TABLE_PREFIX . 'Cache', 'REPLACE');
	}

	/**
	* Returns cached $key value from cache named $cache_name
	*
	* @param int $key key name from cache
	* @param bool $store_locally store data locally after retrieved
	* @return mixed
	*/
	function getCache($key, $store_locally = true)
	{
	return $this->memoryCache->getCache($key, $store_locally);
	}

	/**
	* Returns value from database cache
	*
	* @param string $name key name
	* @return mixed
	*/
	function getDBCache($name)
	{
	$this->Conn->nextQueryCachable = true;

	$sql = 'SELECT Data, Cached, LifeTime
	FROM ' . TABLE_PREFIX . 'Cache
	WHERE VarName = ' . $this->Conn->qstr($name);
	$data = $this->Conn->GetRow($sql);

	if ($data) {
	$lifetime = (int)$data['LifeTime']; // in seconds
	if (($lifetime > 0) && ($data['Cached'] + $lifetime < adodb_mktime())) {
	// delete expired
	$this->Conn->nextQueryCachable = true;

	$sql = 'DELETE FROM ' . TABLE_PREFIX . 'Cache
	WHERE VarName = ' . $this->Conn->qstr($name);
	$this->Conn->Query($sql);

	return false;
	}

	return $data['Data'];
	}

	return false;
	}

	/**
	* Deletes key from cache
	*
	* @param string $key
	*/
	function deleteCache($key)
	{
	$this->memoryCache->delete($key);
	}

	/**
	* Deletes key from database cache
	*
	* @param string $name
	*/
	function deleteDBCache($name)
	{
	$sql = 'DELETE FROM ' . TABLE_PREFIX . 'Cache
	WHERE VarName = ' . $this->Conn->qstr($name);
	$this->Conn->Query($sql);
	}

	/**
	* Defines default constants if it's not defined before - in config.php
	*
	* @access private
	*/
	function SetDefaultConstants() // it's defined in startup.php - can be removed??
	{
	safeDefine('SERVER_NAME', $_SERVER['HTTP_HOST']);
	}

	/**
	* Registers each module specific constants if any found
	*
	*/
	function registerModuleConstants()
	{
	if (file_exists(KERNEL_PATH.'/constants.php')) {
	k4_include_once(KERNEL_PATH.'/constants.php');
	}

	if (!$this->ModuleInfo) {
	return false;
	}

	foreach ($this->ModuleInfo as $module_name => $module_info) {
	$contants_file = FULL_PATH . '/' . $module_info['Path'] . 'constants.php';

	if (file_exists($contants_file)) {
	k4_include_once($contants_file);
	}
	}

	return true;
	}

	function ProcessRequest()
	{
	$event_manager =& $this->recallObject('EventManager');
	/* @var $event_manager kEventManager */

	if (defined('DEBUG_MODE') && $this->isDebugMode() && constOn('DBG_SHOW_HTTPQUERY')) {
	$this->Debugger->appendHTML('HTTPQuery:');
	$this->Debugger->dumpVars($this->HttpQuery->_Params);
	}

	$event_manager->ProcessRequest();
	$event_manager->RunRegularEvents(reBEFORE);
	$this->RequestProcessed = true;
	}

	/**
	* Actually runs the parser against current template and stores parsing result
	*
	* This method gets t variable passed to the script, loads the template given in t variable and
	* parses it. The result is store in {@link $this->HTML} property.
	* @access public
	* @return void
	*/
	function Run()
	{
	if (defined('DEBUG_MODE') && $this->isDebugMode() && constOn('DBG_PROFILE_MEMORY')) {
	$this->Debugger->appendMemoryUsage('Application before Run:');
	}

	if ($this->isAdminUser) {
	// for permission checking in events & templates
	$this->LinkVar('module'); // for common configuration templates
	$this->LinkVar('module_key'); // for common search templates
	$this->LinkVar('section'); // for common configuration templates

	if ($this->GetVar('m_opener') == 'p') {
	$this->LinkVar('main_prefix'); // window prefix, that opened selector
	$this->LinkVar('dst_field'); // field to set value choosed in selector
	}

	if ($this->GetVar('ajax') == 'yes' && !$this->GetVar('debug_ajax')) {
	// hide debug output from ajax requests automatically
	define('DBG_SKIP_REPORTING', 1);
	}
	}
	elseif ($this->GetVar('admin')) {
	// viewing front-end through admin's frame
	$admin_session =& $this->Application->recallObject('Session.admin');
	$user = (int)$admin_session->RecallVar('user_id'); // in case, when no valid admin session found
	$perm_helper =& $this->recallObject('PermissionsHelper');
	/* @var $perm_helper kPermissionsHelper */

	if ($perm_helper->CheckUserPermission($user, 'CATEGORY.MODIFY', 0, $this->ModuleInfo['Core']['RootCat'])) {
	// user can edit cms blocks
	$editing_mode = $this->GetVar('editing_mode');
	define('EDITING_MODE', $editing_mode ? $editing_mode : EDITING_MODE_BROWSE);
	$this->Phrases->setPhraseEditing();
	}
	}

	safeDefine('EDITING_MODE', ''); // user can't edit anything

	if (!$this->RequestProcessed) $this->ProcessRequest();

	$this->InitParser();
	$t = $this->GetVar('t');

	if (!$this->TemplatesCache->TemplateExists($t) && !$this->isAdmin) {
	$cms_handler =& $this->recallObject('st_EventHandler');
	/* @var $cms_handler CategoriesEventHandler */

	$t = ltrim($cms_handler->GetDesignTemplate(), '/');

	if (defined('DEBUG_MODE') && $this->isDebugMode()) {
	$this->Debugger->appendHTML('<strong>Design Template</strong>: ' . $t . '; <strong>CategoryID</strong>: ' . $this->GetVar('m_cat_id'));
	}
	}
	/*else {
	$cms_handler->SetCatByTemplate();
	}*/

	if (defined('DEBUG_MODE') && $this->isDebugMode() && constOn('DBG_PROFILE_MEMORY')) {
	$this->Debugger->appendMemoryUsage('Application before Parsing:');
	}

	$this->HTML = $this->Parser->Run($t);

	if (defined('DEBUG_MODE') && $this->isDebugMode() && constOn('DBG_PROFILE_MEMORY')) {
	$this->Debugger->appendMemoryUsage('Application after Parsing:');
	}
	}

	function InitParser($theme_name = false)
	{
	if( !is_object($this->Parser) ) {
	$this->Parser =& $this->recallObject('NParser');
	$this->TemplatesCache =& $this->recallObject('TemplatesCache');
	}

	$this->TemplatesCache->forceThemeName = $theme_name;
	}

	/**
	* Send the parser results to browser
	*
	* Actually send everything stored in {@link $this->HTML}, to the browser by echoing it.
	* @access public
	* @return void
	*/
	function Done()
	{
	$this->HandleEvent( new kEvent('adm:OnBeforeShutdown') );

	- if (defined('DEBUG_MODE') && $this->isDebugMode() && constOn('DBG_PROFILE_MEMORY')) {
	+ $debug_mode = defined('DEBUG_MODE') && $this->isDebugMode();
	+
	+ if ($debug_mode && constOn('DBG_PROFILE_MEMORY')) {
	$this->Debugger->appendMemoryUsage('Application before Done:');
	}

	- if (defined('DEBUG_MODE') && $this->isDebugMode()) {
	+ if ($debug_mode) {
	$this->EventManager->RunRegularEvents(reAFTER);
	$this->Session->SaveData();

	if (constOn('DBG_CACHE')) {
	$this->memoryCache->printStatistics();
	}

	$this->HTML = ob_get_clean() . $this->HTML . $this->Debugger->printReport(true);
	}
	else {
	- $this->HTML = ob_get_clean().$this->HTML;
	+ $this->HTML = ob_get_clean() . $this->HTML;
	}

	if ($this->UseOutputCompression()) {
	- header('Content-Encoding: gzip');
	$compression_level = $this->ConfigValue('OutputCompressionLevel');
	- if ($compression_level < 0 \|\| $compression_level > 9) $compression_level = 7;
	+ if ($compression_level < 0 \|\| $compression_level > 9) {
	+ $compression_level = 7;
	+ }
	+
	+ header('Content-Encoding: gzip');
	echo gzencode($this->HTML, $compression_level);
	}
	else {
	echo $this->HTML;
	}

	$this->UpdateCache();
	-
	flush();
	- if (!$this->isDebugMode()) {
	+
	+ if (!$debug_mode) {
	$this->EventManager->RunRegularEvents(reAFTER);
	$this->Session->SaveData();
	}

	if (defined('DBG_CAPTURE_STATISTICS') && DBG_CAPTURE_STATISTICS && !$this->isAdmin) {
	$this->_storeStatistics();
	}
	}

	/**
	* Stores script execution statistics to database
	*
	*/
	function _storeStatistics()
	{
	global $start;

	$script_time = getmicrotime() - $start;
	$query_statistics = $this->Conn->getQueryStatistics(); // time & count

	$sql = 'SELECT *
	FROM ' . TABLE_PREFIX . 'StatisticsCapture
	WHERE TemplateName = ' . $this->Conn->qstr( $this->GetVar('t') );
	$data = $this->Conn->GetRow($sql);

	if ($data) {
	$this->_updateAverageStatistics($data, 'ScriptTime', $script_time);
	$this->_updateAverageStatistics($data, 'SqlTime', $query_statistics['time']);
	$this->_updateAverageStatistics($data, 'SqlCount', $query_statistics['count']);

	$data['Hits']++;
	$data['LastHit'] = adodb_mktime();

	$this->Conn->doUpdate($data, TABLE_PREFIX . 'StatisticsCapture', 'StatisticsId = ' . $data['StatisticsId']);
	}
	else {
	$data['ScriptTimeMin'] = $data['ScriptTimeAvg'] = $data['ScriptTimeMax'] = $script_time;
	$data['SqlTimeMin'] = $data['SqlTimeAvg'] = $data['SqlTimeMax'] = $query_statistics['time'];
	$data['SqlCountMin'] = $data['SqlCountAvg'] = $data['SqlCountMax'] = $query_statistics['count'];
	$data['TemplateName'] = $this->GetVar('t');
	$data['Hits'] = 1;
	$data['LastHit'] = adodb_mktime();
	$this->Conn->doInsert($data, TABLE_PREFIX . 'StatisticsCapture');
	}
	}

	/**
	* Calculates average time for statistics
	*
	* @param Array $data
	* @param string $field_prefix
	* @param float $current_value
	*/
	function _updateAverageStatistics(&$data, $field_prefix, $current_value)
	{
	$data[$field_prefix . 'Avg'] = (($data['Hits'] * $data[$field_prefix . 'Avg']) + $current_value) / ($data['Hits'] + 1);

	if ($current_value < $data[$field_prefix . 'Min']) {
	$data[$field_prefix . 'Min'] = $current_value;
	}

	if ($current_value > $data[$field_prefix . 'Max']) {
	$data[$field_prefix . 'Max'] = $current_value;
	}
	}

	function logSlowQuery($slow_sql, $time)
	{
	$query_crc = crc32($slow_sql);

	$sql = 'SELECT *
	FROM ' . TABLE_PREFIX . 'SlowSqlCapture
	WHERE QueryCrc = ' . $query_crc;
	$data = $this->Conn->Query($sql, null, true);

	if ($data) {
	$this->_updateAverageStatistics($data, 'Time', $time);

	$template_names = explode(',', $data['TemplateNames']);
	array_push($template_names, $this->GetVar('t'));
	$data['TemplateNames'] = implode(',', array_unique($template_names));

	$data['Hits']++;
	$data['LastHit'] = adodb_mktime();

	$this->Conn->doUpdate($data, TABLE_PREFIX . 'SlowSqlCapture', 'CaptureId = ' . $data['CaptureId']);
	}
	else {
	$data['TimeMin'] = $data['TimeAvg'] = $data['TimeMax'] = $time;
	$data['SqlQuery'] = $slow_sql;
	$data['QueryCrc'] = $query_crc;
	$data['TemplateNames'] = $this->GetVar('t');
	$data['Hits'] = 1;
	$data['LastHit'] = adodb_mktime();

	$this->Conn->doInsert($data, TABLE_PREFIX . 'SlowSqlCapture');
	}
	}

	/**
	* Checks if output compression options is available
	*
	* @return string
	*/
	function UseOutputCompression()
	{
	if (constOn('IS_INSTALL') \|\| constOn('DBG_ZEND_PRESENT') \|\| constOn('SKIP_OUT_COMPRESSION')) return false;
	return $this->ConfigValue('UseOutputCompression') && function_exists('gzencode') && strstr($_SERVER['HTTP_ACCEPT_ENCODING'], 'gzip');
	}

	// Facade

	/**
	* Returns current session id (SID)
	* @access public
	* @return longint
	*/
	function GetSID()
	{
	$session =& $this->recallObject('Session');
	return $session->GetID();
	}

	function DestroySession()
	{
	$session =& $this->recallObject('Session');
	$session->Destroy();
	}

	/**
	* Returns variable passed to the script as GET/POST/COOKIE
	*
	* @access public
	* @param string $name Name of variable to retrieve
	* @param int $default default value returned in case if varible not present
	* @return mixed
	*/
	function GetVar($name, $default = false)
	{
	return isset($this->HttpQuery->_Params[$name]) ? $this->HttpQuery->_Params[$name] : $default;
	}

	/**
	* Returns ALL variables passed to the script as GET/POST/COOKIE
	*
	* @access public
	* @return array
	*/
	function GetVars()
	{
	return $this->HttpQuery->GetParams();
	}

	/**
	* Set the variable 'as it was passed to the script through GET/POST/COOKIE'
	*
	* This could be useful to set the variable when you know that
	* other objects would relay on variable passed from GET/POST/COOKIE
	* or you could use SetVar() / GetVar() pairs to pass the values between different objects.<br>
	*
	* This method is formerly known as $this->Session->SetProperty.
	* @param string $var Variable name to set
	* @param mixed $val Variable value
	* @access public
	* @return void
	*/
	function SetVar($var,$val)
	{
	return $this->HttpQuery->Set($var, $val);
	}

	/**
	* Deletes kHTTPQuery variable
	*
	* @param string $var
	* @todo think about method name
	*/
	function DeleteVar($var)
	{
	return $this->HttpQuery->Remove($var);
	}

	/**
	* Deletes Session variable
	*
	* @param string $var
	*/
	function RemoveVar($var)
	{
	return $this->Session->RemoveVar($var);
	}

	function RemovePersistentVar($var)
	{
	return $this->Session->RemovePersistentVar($var);
	}

	/**
	* Restores Session variable to it's db version
	*
	* @param string $var
	*/
	function RestoreVar($var)
	{
	return $this->Session->RestoreVar($var);
	}

	/**
	* Returns session variable value
	*
	* Return value of $var variable stored in Session. An optional default value could be passed as second parameter.
	*
	* @see SimpleSession
	* @access public
	* @param string $var Variable name
	* @param mixed $default Default value to return if no $var variable found in session
	* @return mixed
	*/
	function RecallVar($var,$default=false)
	{
	return $this->Session->RecallVar($var,$default);
	}

	function RecallPersistentVar($var, $default = false)
	{
	return $this->Session->RecallPersistentVar($var, $default);
	}

	/**
	* Stores variable $val in session under name $var
	*
	* Use this method to store variable in session. Later this variable could be recalled.
	* @see RecallVar
	* @access public
	* @param string $var Variable name
	* @param mixed $val Variable value
	*/
	function StoreVar($var, $val, $optional = false)
	{
	$session =& $this->recallObject('Session');
	$this->Session->StoreVar($var, $val, $optional);
	}

	function StorePersistentVar($var, $val)
	{
	$this->Session->StorePersistentVar($var, $val);
	}

	function StoreVarDefault($var, $val, $optional=false)
	{
	$session =& $this->recallObject('Session');
	$this->Session->StoreVarDefault($var, $val, $optional);
	}

	/**
	* Links HTTP Query variable with session variable
	*
	* If variable $var is passed in HTTP Query it is stored in session for later use. If it's not passed it's recalled from session.
	* This method could be used for making sure that GetVar will return query or session value for given
	* variable, when query variable should overwrite session (and be stored there for later use).<br>
	* This could be used for passing item's ID into popup with multiple tab -
	* in popup script you just need to call LinkVar('id', 'current_id') before first use of GetVar('id').
	* After that you can be sure that GetVar('id') will return passed id or id passed earlier and stored in session
	* @access public
	* @param string $var HTTP Query (GPC) variable name
	* @param mixed $ses_var Session variable name
	* @param mixed $default Default variable value
	*/
	function LinkVar($var, $ses_var = null, $default = '', $optional = false)
	{
	if (!isset($ses_var)) $ses_var = $var;
	if ($this->GetVar($var) !== false) {
	$this->StoreVar($ses_var, $this->GetVar($var), $optional);
	}
	else {
	$this->SetVar($var, $this->RecallVar($ses_var, $default));
	}
	}

	/**
	* Returns variable from HTTP Query, or from session if not passed in HTTP Query
	*
	* The same as LinkVar, but also returns the variable value taken from HTTP Query if passed, or from session if not passed.
	* Returns the default value if variable does not exist in session and was not passed in HTTP Query
	*
	* @see LinkVar
	* @access public
	* @param string $var HTTP Query (GPC) variable name
	* @param mixed $ses_var Session variable name
	* @param mixed $default Default variable value
	* @return mixed
	*/
	function GetLinkedVar($var, $ses_var = null, $default = '')
	{
	$this->LinkVar($var, $ses_var, $default);
	return $this->GetVar($var);
	}

	function AddBlock($name, $tpl)
	{
	$this->cache[$name] = $tpl;
	}

	function ProcessParsedTag($prefix, $tag, $params)
	{
	$processor = $this->Parser->GetProcessor($prefix);

	return $processor->ProcessParsedTag($tag, $params, $prefix);
	}

	/**
	* Return ADODB Connection object
	*
	* Returns ADODB Connection object already connected to the project database, configurable in config.php
	* @access public
	* @return kDBConnection
	*/
	function &GetADODBConnection()
	{
	return $this->Conn;
	}

	/**
	* Allows to parse given block name or include template
	*
	* @param Array $params Parameters to pass to block. Reserved parameter "name" used to specify block name.
	* @param Array $pass_params Forces to pass current parser params to this block/template. Use with cauntion, because you can accidently pass "block_no_data" parameter.
	* @param bool $as_template
	* @return string
	*/
	function ParseBlock($params, $pass_params = 0, $as_template = false)
	{
	if (substr($params['name'], 0, 5) == 'html:') {
	return substr($params['name'], 6);
	}

	return $this->Parser->ParseBlock($params, $pass_params, $as_template);
	}

	/**
	* Allows to include template with a given name and given parameters
	*
	* @param Array $params Parameters to pass to template. Reserved parameter "name" used to specify template name.
	* @return string
	*/
	function IncludeTemplate($params)
	{
	return $this->Parser->IncludeTemplate($params, isset($params['is_silent']) ? 1 : 0);
	}

	/**
	* Returns index file, that could be passed as parameter to method, as parameter to tag and as constant or not passed at all
	*
	* @param string $prefix
	* @param string $index_file
	* @param Array $params
	* @return string
	*/
	function getIndexFile($prefix, $index_file, &$params)
	{
	if (isset($params['index_file'])) {
	$index_file = $params['index_file'];
	unset($params['index_file']);
	return $index_file;
	}

	if (isset($index_file)) {
	return $index_file;
	}

	if (defined('INDEX_FILE')) {
	return INDEX_FILE;
	}

	$cut_prefix = trim(BASE_PATH, '/').'/'.trim($prefix, '/');
	return trim(preg_replace('/'.preg_quote($cut_prefix, '/').'(.*)/', '\\1', $_SERVER['PHP_SELF']), '/');
	}

	/**
	* Return href for template
	*
	* @access public
	* @param string $t Template path
	* @var string $prefix index.php prefix - could be blank, 'admin'
	*/
	function HREF($t, $prefix = '', $params = null, $index_file = null)
	{
	static $theme_id = null;

	if (!isset($theme_id)) {
	$theme_id = $this->GetVar('m_theme');
	}

	if (!$t) {
	// when template not specified, use current
	$t = $this->GetVar('t');
	}

	$t = preg_replace('/^Content\//i', '', $t);

	if (substr($t, -4) == '.tpl') {
	// cut template extension (deprecated link format)
	$t = substr($t, 0, strlen($t) - 4);
	}

	if (substr($t, 0, 3) == 'id:') {
	// link to structure page using it's id
	$params['m_cat_id'] = substr($t, 3);
	$t = $this->structureTemplateMapping[$t];
	}

	if (array_key_exists('use_section', $params)) {
	$use_section = $params['use_section'];
	unset($params['use_section']);
	}

	if (isset($use_section) && $use_section && array_key_exists($t . ':' . $theme_id, $this->structureTemplateMapping)) {
	// structure template corresponding to given physical template
	$t = $this->structureTemplateMapping[$t . ':' . $theme_id];
	unset($params['use_section']);
	}

	if (preg_match('/external:(.*)/', $t, $rets)) {
	// external url
	return $rets[1];
	}

	if ($this->isAdmin && $prefix == '') $prefix = ADMIN_DIRECTORY;
	if ($this->isAdmin && $prefix == '_FRONT_END_') $prefix = '';

	$index_file = $this->getIndexFile($prefix, $index_file, $params);

	if (isset($params['_auto_prefix_'])) {
	unset($params['_auto_prefix_']); // this is parser-related param, do not need to pass it here
	}

	$ssl = isset($params['__SSL__']) ? $params['__SSL__'] : null;
	if ($ssl !== null) {
	$session =& $this->recallObject('Session');
	$cookie_url = trim($session->CookieDomain.$session->CookiePath, '/.');
	if ($ssl) {
	$target_url = defined('ADMIN') && ADMIN ? $this->ConfigValue('AdminSSL_URL') : false;
	if (!$target_url) {
	$target_url = $this->ConfigValue('SSL_URL');
	}
	}
	else {
	$target_url = 'http://'.DOMAIN.$this->ConfigValue('Site_Path');
	}

	// set session to GET_ONLY, to pass sid only if sid is REAL AND session is set
	if (!preg_match('#'.preg_quote($cookie_url).'#', $target_url) && $session->SessionSet) {
	$session->SetMode(smGET_ONLY);
	}
	}

	if (isset($params['opener']) && $params['opener'] == 'u') {
	$wid = $this->Application->GetVar('m_wid');
	$stack_name = rtrim('opener_stack_'.$wid, '_');
	$opener_stack = $this->RecallVar($stack_name);

	if ($opener_stack && $opener_stack != serialize(Array())) {
	$opener_stack = unserialize($opener_stack);
	list($index_file, $env) = explode('\|', $opener_stack[count($opener_stack) - 1]);
	$ret = $this->BaseURL($prefix, $ssl).$index_file.'?'.ENV_VAR_NAME.'='.$env;
	if ( getArrayValue($params,'escape') ) $ret = addslashes($ret);

	if (isset($params['m_opener']) && $params['m_opener'] == 'u') {
	array_pop($opener_stack);
	if (!$opener_stack) {
	$this->RemoveVar($stack_name);
	// remove popups last templates, because popup is closing now
	$this->RemoveVar('last_template_'.$wid);
	$this->RemoveVar('last_template_popup_'.$wid);

	// don't save popups last templates again :)
	$this->SetVar('skip_last_template', 1);
	}
	else {
	$this->StoreVar($stack_name, serialize($opener_stack));
	}

	/*// store window relations
	$window_relations = $this->Application->RecallVar('window_relations');
	$window_relations = $window_relations ? unserialize($window_relations) : Array ();
	if (array_key_exists($wid, $window_relations)) {
	unset($window_relations[$wid]);
	$this->Application->StoreVar('window_relations', serialize($window_relations));
	}*/
	}
	return $ret;
	}
	else {
	//define('DBG_REDIRECT', 1);
	$t = $this->GetVar('t');
	}
	}

	$pass = isset($params['pass']) ? $params['pass'] : '';
	$pass_events = isset($params['pass_events']) ? $params['pass_events'] : false; // pass events with url

	$map_link = '';
	if( isset($params['anchor']) )
	{
	$map_link = '#'.$params['anchor'];
	unset($params['anchor']);
	}

	if ( isset($params['no_amp']) )
	{
	$params['__URLENCODE__'] = $params['no_amp'];
	unset($params['no_amp']);
	}

	$no_rewrite = false;
	if( isset($params['__NO_REWRITE__']) )
	{
	$no_rewrite = true;
	unset($params['__NO_REWRITE__']);
	}

	$force_rewrite = false;
	if( isset($params['__MOD_REWRITE__']) )
	{
	$force_rewrite = true;
	unset($params['__MOD_REWRITE__']);
	}

	$force_no_sid = false;
	if( isset($params['__NO_SID__']) )
	{
	$force_no_sid = true;
	unset($params['__NO_SID__']);
	}

	// append pass through variables to each link to be build
	// $params = array_merge_recursive2($this->getPassThroughVariables($params), $params);
	$params = array_merge($this->getPassThroughVariables($params), $params);

	if ($force_rewrite \|\| ($this->RewriteURLs($ssl) && !$no_rewrite)) {
	static $rewrite_listeners_done = false;

	if (!$rewrite_listeners_done) {
	$mod_rewrite_helper =& $this->recallObject('ModRewriteHelper');
	/* @var $mod_rewrite_helper kModRewriteHelper */

	$mod_rewrite_helper->initRewriteListeners();

	$rewrite_listeners_done = true;
	}

	$session =& $this->recallObject('Session');

	if ($session->NeedQueryString() && !$force_no_sid) {
	$params['sid'] = $this->GetSID();
	}

	$url = $this->BuildEnv_NEW($t, $params, $pass, $pass_events);
	$ret = $this->BaseURL($prefix, $ssl).$url.$map_link;
	}
	else {
	unset($params['pass_category']); // we don't need to pass it when mod_rewrite is off
	$env = $this->BuildEnv($t, $params, $pass, $pass_events);
	$ret = $this->BaseURL($prefix, $ssl).$index_file.'?'.$env.$map_link;
	}

	return $ret;
	}

	/**
	* Returns variables with values that should be passed throught with this link + variable list
	*
	* @param Array $params
	* @return Array
	*/
	function getPassThroughVariables(&$params)
	{
	static $cached_pass_through = null;

	if (isset($params['no_pass_through']) && $params['no_pass_through']) {
	unset($params['no_pass_through']);
	return Array();
	}

	// because pass through is not changed during script run, then we can cache it
	if (is_null($cached_pass_through)) {

	$cached_pass_through = Array();
	$pass_through = $this->Application->GetVar('pass_through');

	if ($pass_through) {
	// names of variables to pass to each link
	$cached_pass_through['pass_through'] = $pass_through;
	$pass_through = explode(',', $pass_through);
	foreach ($pass_through as $pass_through_var) {
	$cached_pass_through[$pass_through_var] = $this->Application->GetVar($pass_through_var);
	}
	}

	}

	return $cached_pass_through;
	}


	/**
	* Returns sorted array of passed prefixes (to build url from)
	*
	* @param string $pass
	* @return Array
	*/
	function getPassInfo($pass = 'all')
	{
	if (!$pass) $pass = 'all';
	$pass = trim(
	preg_replace(
	'/(?<=,\|\\A)all(?=,\|\\z)/',
	trim($this->GetVar('passed'), ','),
	trim($pass, ',')
	),
	',');

	if (!$pass) {
	return Array();
	}

	$pass_info = array_unique( explode(',', $pass) ); // array( prefix[.special], prefix[.special] ...

	// we need to keep that sorting despite the sorting below, because this sorts prefixes with same priority by name
	sort($pass_info, SORT_STRING); // to be prefix1,prefix1.special1,prefix1.special2,prefix3.specialX

	foreach ($pass_info as $prefix) {
	list($prefix_only) = explode('.', $prefix, 1);
	$sorted[$prefix] = $this->getUnitOption($prefix_only, 'RewritePriority', 0);
	}

	arsort($sorted);
	$pass_info = array_keys($sorted);

	// ensure that "m" prefix is at the beginning
	$main_index = array_search('m', $pass_info);
	if ($main_index !== false) {
	unset($pass_info[$main_index]);
	array_unshift($pass_info, 'm');
	}
	return $pass_info;
	}

	function BuildEnv_NEW($t, $params, $pass='all', $pass_events = false)
	{
	// $session =& $this->recallObject('Session');
	$force_admin = getArrayValue($params,'admin') \|\| $this->GetVar('admin');

	// if($force_admin) $sid = $this->GetSID();

	$ret = '';
	$env = '';

	$encode = false;

	if (isset($params['__URLENCODE__'])) {
	$encode = $params['__URLENCODE__'];
	unset($params['__URLENCODE__']);
	}

	if (isset($params['__SSL__'])) {
	unset($params['__SSL__']);
	}

	$catalog_item_found = false;
	$pass_info = $this->getPassInfo($pass);

	if ($pass_info) {
	if ($pass_info[0] == 'm') {
	array_shift($pass_info);
	}

	$inject_parts = Array (); // url parts for beginning of url
	$params['t'] = $t; // make template available for rewrite listeners
	$params['pass_template'] = true; // by default we keep given template in resulting url

	if (!array_key_exists('pass_category', $params)) {
	$params['pass_category'] = false; // by default we don't keep categories in url
	}

	foreach ($pass_info as $pass_index => $pass_element) {
	list ($prefix) = explode('.', $pass_element);
	$catalog_item = $this->findModule('Var', $prefix) && $this->getUnitOption($prefix, 'CatalogItem');

	if (array_key_exists($prefix, $this->RewriteListeners)) {
	// if next prefix is same as current, but with special => exclude current prefix from url
	$next_prefix = array_key_exists($pass_index + 1, $pass_info) ? $pass_info[$pass_index + 1] : false;
	if ($next_prefix) {
	$next_prefix = substr($next_prefix, 0, strlen($prefix) + 1);
	if ($prefix . '.' == $next_prefix) {
	continue;
	}
	}

	// rewrited url part
	$url_part = $this->BuildModuleEnv_NEW($pass_element, $params, $pass_events);

	if (is_string($url_part) && $url_part) {
	$ret .= $url_part . '/';

	if ($catalog_item) {
	// pass category later only for catalog items
	$catalog_item_found = true;
	}
	}
	elseif (is_array($url_part)) {
	// rewrite listener want to insert something at the beginning of url too
	if ($url_part[0]) {
	$inject_parts[] = $url_part[0];
	}

	if ($url_part[1]) {
	$ret .= $url_part[1] . '/';
	}

	if ($catalog_item) {
	// pass category later only for catalog items
	$catalog_item_found = true;
	}
	} elseif ($url_part === false) {
	// rewrite listener decided not to rewrite given $pass_element
	$env .= ':' . $this->BuildModuleEnv($pass_element, $params, $pass_events);
	}
	}
	else {
	$env .= ':' . $this->BuildModuleEnv($pass_element, $params, $pass_events);
	}
	}

	if ($catalog_item_found \|\| preg_match('/c\.[-\d]*/', implode(',', $pass_info))) {
	// "c" prefix is present -> keep category
	$params['pass_category'] = true;
	}

	$params['inject_parts'] = $inject_parts;

	$ret = $this->BuildModuleEnv_NEW('m', $params, $pass_events) . '/' . $ret;
	$cat_processed = array_key_exists('category_processed', $params) && $params['category_processed'];

	// remove tempporary parameters used by listeners
	unset($params['t'], $params['inject_parts'], $params['pass_template'], $params['pass_category'], $params['category_processed']);

	if (array_key_exists('url_ending', $params)) {
	$ret = trim($ret, '/') . $params['url_ending'];
	unset($params['url_ending']);
	}
	else {
	$ret = trim($ret, '/') . MOD_REWRITE_URL_ENDING;
	}

	if ($env) {
	$params[ENV_VAR_NAME] = ltrim($env, ':');
	}
	}

	unset($params['pass'], $params['opener'], $params['m_event']);
	if ($force_admin) {
	$params['admin'] = 1;
	}

	if (array_key_exists('escape', $params) && $params['escape']) {
	$ret = addslashes($ret);
	unset($params['escape']);
	}

	$ret = str_replace('%2F', '/', urlencode($ret));

	$params_str = '';
	$join_string = $encode ? '&' : '&';

	foreach ($params as $param => $value) {
	$params_str .= $join_string . $param . '=' . $value;
	}

	if ($params_str) {
	$ret .= '?' . substr($params_str, strlen($join_string));
	}

	if ($encode) {
	$ret = str_replace('\\', '%5C', $ret);
	}

	return $ret;
	}

	function BuildModuleEnv_NEW($prefix_special, &$params, $keep_events = false)
	{
	list ($prefix) = explode('.', $prefix_special);

	$url_parts = Array ();
	$listener = $this->RewriteListeners[$prefix];

	$ret = $listener[0]->$listener[1](REWRITE_MODE_BUILD, $prefix_special, $params, $url_parts, $keep_events);

	return $ret;
	}

	/**
	* Builds env part that corresponds prefix passed
	*
	* @param string $prefix_special item's prefix & [special]
	* @param Array $params url params
	* @param bool $pass_events
	*/
	function BuildModuleEnv($prefix_special, &$params, $pass_events = false)
	{
	list($prefix) = explode('.', $prefix_special);
	$query_vars = $this->getUnitOption($prefix, 'QueryString');

	//if pass events is off and event is not implicity passed
	if( !$pass_events && !isset($params[$prefix_special.'_event']) ) {
	$params[$prefix_special.'_event'] = ''; // remove event from url if requested
	//otherwise it will use value from get_var
	}

	if(!$query_vars) return '';

	$tmp_string = Array(0 => $prefix_special);
	foreach($query_vars as $index => $var_name)
	{
	//if value passed in params use it, otherwise use current from application
	$var_name = $prefix_special.'_'.$var_name;
	$tmp_string[$index] = isset( $params[$var_name] ) ? $params[$var_name] : $this->GetVar($var_name);
	if ( isset($params[$var_name]) ) unset( $params[$var_name] );
	}

	$escaped = array();
	foreach ($tmp_string as $tmp_val) {
	$escaped[] = str_replace(Array('-',':'), Array('\-','\:'), $tmp_val);
	}

	$ret = implode('-', $escaped);
	if ($this->getUnitOption($prefix, 'PortalStyleEnv') == true)
	{
	$ret = preg_replace('/^([a-zA-Z]+)-([0-9]+)-(.*)/','\\1\\2-\\3', $ret);
	}
	return $ret;
	}

	function BuildEnv($t, $params, $pass='all', $pass_events = false, $env_var = true)
	{
	$session =& $this->recallObject('Session');
	$ssl = isset($params['__SSL__']) ? $params['__SSL__'] : 0;
	$sid = $session->NeedQueryString() && !$this->RewriteURLs($ssl) ? $this->GetSID() : '';
	// if (getArrayValue($params,'admin') == 1) $sid = $this->GetSID();

	$ret = '';
	if ($env_var) {
	$ret = ENV_VAR_NAME.'=';
	}

	$ret .= $sid . '-'; // SID-TEMPLATE

	$encode = false;
	if (isset($params['__URLENCODE__'])) {
	$encode = $params['__URLENCODE__'];
	unset($params['__URLENCODE__']);
	}

	if (isset($params['__SSL__'])) {
	unset($params['__SSL__']);
	}

	$env_string = '';
	$category_id = isset($params['m_cat_id']) ? $params['m_cat_id'] : $this->GetVar('m_cat_id');

	$item_id = false;
	$pass_info = $this->getPassInfo($pass);
	if ($pass_info) {
	if ($pass_info[0] == 'm') array_shift($pass_info);
	foreach ($pass_info as $pass_element) {
	list($prefix) = explode('.', $pass_element);
	$require_rewrite = $this->findModule('Var', $prefix);
	if ($require_rewrite) {
	$item_id = isset($params[$pass_element.'_id']) ? $params[$pass_element.'_id'] : $this->GetVar($pass_element.'_id');
	}
	$env_string .= ':'.$this->BuildModuleEnv($pass_element, $params, $pass_events);
	}
	}

	if (strtolower($t) == '__default__') {
	if (is_numeric($item_id)) {
	$mod_rw_helper =& $this->Application->recallObject('ModRewriteHelper');
	/* @var $mod_rw_helper kModRewriteHelper */

	$t = $mod_rw_helper->GetItemTemplate($category_id, $pass_element); // $pass_element should be the last processed element
	// $t = $this->getCategoryCache($category_id, 'item_templates');
	}
	elseif ($category_id) {
	$t = strtolower(preg_replace('/^Content\//i', '', $this->getCategoryCache($category_id, 'filenames') ));
	}
	else {
	$t = 'index';
	}
	}

	$ret .= $t.':'.$this->BuildModuleEnv('m', $params, $pass_events).$env_string;

	unset($params['pass'], $params['opener'], $params['m_event']);

	if ($this->GetVar('admin') && !isset($params['admin'])) {
	$params['admin'] = 1;

	if (!array_key_exists('editing_mode', $params)) {
	$params['editing_mode'] = EDITING_MODE;
	}
	}

	if (array_key_exists('escape', $params) && $params['escape']) {
	$ret = addslashes($ret);
	unset($params['escape']);
	}

	$join_string = $encode ? '&' : '&';
	$params_str = '';
	foreach ($params as $param => $value)
	{
	$params_str .= $join_string.$param.'='.$value;
	}
	$ret .= $params_str;

	if ($encode) {
	$ret = str_replace('\\', '%5C', $ret);
	}
	return $ret;
	}

	function BaseURL($prefix='', $ssl=null)
	{
	if ($ssl === null) {
	return PROTOCOL.SERVER_NAME.(defined('PORT')?':'.PORT : '').rtrim(BASE_PATH, '/').$prefix.'/';
	}
	else {
	if ($ssl) {
	$base_url = defined('ADMIN') && ADMIN ? $this->ConfigValue('AdminSSL_URL') : false;
	if (!$base_url) {
	$base_url = $this->ConfigValue('SSL_URL');
	}

	return rtrim($base_url, '/').$prefix.'/';
	}
	else {
	return 'http://'.DOMAIN.(defined('PORT')?':'.PORT : '').rtrim( $this->ConfigValue('Site_Path'), '/').$prefix.'/';
	}
	}
	}

	function Redirect($t='', $params=null, $prefix='', $index_file=null)
	{
	$js_redirect = getArrayValue($params, 'js_redirect');

	if ($t == '' \|\| $t === true) {
	$t = $this->GetVar('t');
	}

	// pass prefixes and special from previous url
	if (array_key_exists('js_redirect', $params)) {
	unset($params['js_redirect']);
	}

	// allows to send custom responce code along with redirect header
	if (array_key_exists('response_code', $params)) {
	$response_code = (int)$params['response_code'];
	unset($params['response_code']);
	}
	else {
	$responce_code = 302; // Found
	}

	if (!array_key_exists('pass', $params)) {
	$params['pass'] = 'all';
	}

	if ($this->GetVar('ajax') == 'yes' && $t == $this->GetVar('t')) {
	// redirects to the same template as current
	$params['ajax'] = 'yes';
	}

	$params['__URLENCODE__'] = 1;
	$location = $this->HREF($t, $prefix, $params, $index_file);

	$a_location = $location;
	$location = "Location: $location";

	if ($this->isDebugMode() && (constOn('DBG_REDIRECT') \|\| (constOn('DBG_RAISE_ON_WARNINGS') && $this->Application->Debugger->WarningCount))) {
	$this->Debugger->appendTrace();
	echo "<b>Debug output above!!!</b> Proceed to redirect: <a href=\"$a_location\">$a_location</a><br>";
	}
	else {
	if ($js_redirect) {
	$this->SetVar('t', 'redirect');
	$this->SetVar('redirect_to_js', addslashes($a_location) );
	$this->SetVar('redirect_to', $a_location);
	return true;
	}
	else {
	if ($this->GetVar('ajax') == 'yes' && $t != $this->GetVar('t')) {
	// redirection to other then current template during ajax request
	echo '#redirect#'.$a_location;
	}
	elseif (headers_sent() != '') {
	// some output occured -> redirect using javascript
	echo '<script type="text/javascript">window.location.href = \''.$a_location.'\';</script>';
	}
	else {
	// no output before -> redirect using HTTP header

	// header('HTTP/1.1 302 Found');
	header("$location", true, $response_code);
	}
	}
	}

	ob_end_flush();
	// session expiration is called from session initialization,
	// that's why $this->Session may be not defined here
	$session =& $this->Application->recallObject('Session');
	/* @var $session Session */

	$this->HandleEvent( new kEvent('adm:OnBeforeShutdown') );
	$session->SaveData();
	exit;
	}

	function Phrase($label, $allow_editing = true, $use_admin = false)
	{
	return $this->Phrases->GetPhrase($label, $allow_editing, $use_admin);
	}

	/**
	* Replace language tags in exclamation marks found in text
	*
	* @param string $text
	* @param bool $force_escape force escaping, not escaping of resulting string
	* @return string
	* @access public
	*/
	function ReplaceLanguageTags($text, $force_escape=null)
	{
	// !!!!!!!!
	// if( !is_object($this->Phrases) ) $this->Debugger->appendTrace();
	return $this->Phrases->ReplaceLanguageTags($text,$force_escape);
	}

	/**
	* Checks if user is logged in, and creates
	* user object if so. User object can be recalled
	* later using "u.current" prefix_special. Also you may
	* get user id by getting "u.current_id" variable.
	*
	* @access private
	*/
	function ValidateLogin()
	{
	$session =& $this->recallObject('Session');
	$user_id = $session->GetField('PortalUserId');

	if (!$user_id && $user_id != -1) {
	$user_id = -2;
	}

	$this->SetVar('u.current_id', $user_id);

	if (!$this->isAdmin) {
	// needed for "profile edit", "registration" forms ON FRONT ONLY
	$this->SetVar('u_id', $user_id);
	}

	$this->StoreVar('user_id', $user_id, $user_id == -2); // storing Guest user_id (-2) is optional

	$this->isAdminUser = $this->isAdmin && $this->LoggedIn();

	if ($this->GetVar('expired') == 1) {
	// this parameter is set only from admin
	$user =& $this->recallObject('u.current');
	$user->SetError('ValidateLogin', 'session_expired', 'la_text_sess_expired');
	}

	if (($user_id != -2) && constOn('DBG_REQUREST_LOG') ) {
	$http_query =& $this->recallObject('HTTPQuery');
	$http_query->writeRequestLog(DBG_REQUREST_LOG);
	}

	if ($user_id != -2) {
	// normal users + root
	$this->LoadPersistentVars();
	}
	}

	/**
	* Loads current user persistent session data
	*
	*/
	function LoadPersistentVars()
	{
	$this->Session->LoadPersistentVars();
	}

	function LoadCache()
	{
	// TODO: maybe language part isn't required, since same phrase from different languages have one ID now
	$cache_key = $this->GetVar('t') . $this->GetVar('m_theme') . $this->GetVar('m_lang') . $this->isAdmin;

	$sql = 'SELECT PhraseList, ConfigVariables
	FROM ' . TABLE_PREFIX . 'PhraseCache
	WHERE Template = ' . $this->Conn->qstr( md5($cache_key) );
	$res = $this->Conn->GetRow($sql);

	if ($res) {
	$this->Caches['PhraseList'] = $res['PhraseList'] ? explode(',', $res['PhraseList']) : Array ();
	$config_ids = $res['ConfigVariables'] ? explode(',', $res['ConfigVariables']) : Array ();

	if (isset($this->Caches['ConfigVariables'])) {
	$config_ids = array_diff($config_ids, $this->Caches['ConfigVariables']);
	}
	}
	else {
	$config_ids = Array ();
	}

	$this->Phrases->Init('phrases');
	$this->Caches['ConfigVariables'] = $config_ids;
	$this->ConfigCacheIds = $config_ids;
	}

	/**
	* Loads template mapping for Front-End
	*
	*/
	function LoadStructureTemplateMapping()
	{
	if (!$this->isAdmin) {
	$category_helper =& $this->Application->recallObject('CategoryHelper');
	/* @var $category_helper CategoryHelper */

	$this->structureTemplateMapping = $category_helper->getTemplateMapping();
	}
	}

	function UpdateCache()
	{
	$update = false;
	//something changed
	$update = $update \|\| $this->Phrases->NeedsCacheUpdate();
	$update = $update \|\| (count($this->ConfigCacheIds) && $this->ConfigCacheIds != $this->Caches['ConfigVariables']);

	if ($update) {
	$cache_key = $this->GetVar('t').$this->GetVar('m_theme').$this->GetVar('m_lang').$this->isAdmin;
	$query = sprintf("REPLACE %s (PhraseList, CacheDate, Template, ConfigVariables)
	VALUES (%s, %s, %s, %s)",
	TABLE_PREFIX.'PhraseCache',
	$this->Conn->qstr(join(',', $this->Phrases->Ids)),
	adodb_mktime(),
	$this->Conn->qstr(md5($cache_key)),
	$this->Conn->qstr(implode(',', array_unique($this->ConfigCacheIds))));
	$this->Conn->Query($query);
	}
	}

	function InitConfig()
	{
	if (isset($this->Caches['ConfigVariables']) && count($this->Caches['ConfigVariables']) > 0) {
	$sql = 'SELECT VariableValue, VariableName
	FROM ' . TABLE_PREFIX . 'ConfigurationValues
	WHERE VariableId IN (' . implode(',', $this->Caches['ConfigVariables']) . ')';
	$this->ConfigHash = array_merge($this->ConfigHash, $this->Conn->GetCol($sql, 'VariableName'));
	}
	}

	/**
	* Returns configuration option value by name
	*
	* @param string $name
	* @return string
	*/
	function ConfigValue($name)
	{
	$res = array_key_exists($name, $this->ConfigHash) ? $this->ConfigHash[$name] : false;
	if ($res !== false) {
	return $res;
	}

	if (defined('IS_INSTALL') && IS_INSTALL && !$this->TableFound('ConfigurationValues')) {
	return false;
	}

	$sql = 'SELECT VariableId, VariableValue
	FROM '.TABLE_PREFIX.'ConfigurationValues
	WHERE VariableName = '.$this->Conn->qstr($name);
	$res = $this->Conn->GetRow($sql);

	if ($res !== false) {
	$this->ConfigHash[$name] = $res['VariableValue'];
	$this->ConfigCacheIds[] = $res['VariableId'];
	return $res['VariableValue'];
	}

	return false;
	}

	function UpdateConfigCache()
	{
	if ($this->ConfigCacheIds) {

	}
	}

	/**
	* Allows to process any type of event
	*
	* @param kEvent $event
	* @access public
	* @author Alex
	*/
	function HandleEvent(&$event, $params=null, $specificParams=null)
	{
	if ( isset($params) ) {
	$event = new kEvent( $params, $specificParams );
	}

	if (!isset($this->EventManager)) {
	$this->EventManager =& $this->recallObject('EventManager');
	}

	$this->EventManager->HandleEvent($event);
	}

	/**
	* Registers new class in the factory
	*
	* @param string $real_class Real name of class as in class declaration
	* @param string $file Filename in what $real_class is declared
	* @param string $pseudo_class Name under this class object will be accessed using getObject method
	* @param Array $dependecies List of classes required for this class functioning
	* @access public
	* @author Alex
	*/
	function registerClass($real_class, $file, $pseudo_class = null, $dependecies = Array() )
	{
	$this->Factory->registerClass($real_class, $file, $pseudo_class, $dependecies);
	}

	/**
	* Add $class_name to required classes list for $depended_class class.
	* All required class files are included before $depended_class file is included
	*
	* @param string $depended_class
	* @param string $class_name
	* @author Alex
	*/
	function registerDependency($depended_class, $class_name)
	{
	$this->Factory->registerDependency($depended_class, $class_name);
	}

	/**
	* Registers Hook from subprefix event to master prefix event
	*
	* @param string $hookto_prefix
	* @param string $hookto_special
	* @param string $hookto_event
	* @param string $mode
	* @param string $do_prefix
	* @param string $do_special
	* @param string $do_event
	* @param string $conditional
	* @access public
	* @todo take care of a lot parameters passed
	* @author Kostja
	*/
	function registerHook($hookto_prefix, $hookto_special, $hookto_event, $mode, $do_prefix, $do_special, $do_event, $conditional)
	{
	$event_manager =& $this->recallObject('EventManager');
	$event_manager->registerHook($hookto_prefix, $hookto_special, $hookto_event, $mode, $do_prefix, $do_special, $do_event, $conditional);
	}

	/**
	* Allows one TagProcessor tag act as other TagProcessor tag
	*
	* @param Array $tag_info
	* @author Kostja
	*/
	function registerAggregateTag($tag_info)
	{
	$aggregator =& $this->recallObject('TagsAggregator', 'kArray');
	$aggregator->SetArrayValue($tag_info['AggregateTo'], $tag_info['AggregatedTagName'], Array($tag_info['LocalPrefix'], $tag_info['LocalTagName'], getArrayValue($tag_info, 'LocalSpecial')));
	}

	/**
	* Returns object using params specified,
	* creates it if is required
	*
	* @param string $name
	* @param string $pseudo_class
	* @param Array $event_params
	* @return Object
	* @author Alex
	*/
	function &recallObject($name,$pseudo_class=null,$event_params=Array())
	{
	$result =& $this->Factory->getObject($name, $pseudo_class, $event_params);
	return $result;
	}

	/**
	* Returns object using Variable number of params,
	* all params starting with 4th are passed to object consturctor
	*
	* @param string $name
	* @param string $pseudo_class
	* @param Array $event_params
	* @return Object
	* @author Alex
	*/
	function &recallObjectP($name,$pseudo_class=null,$event_params=Array())
	{
	$func_args = func_get_args();
	$result =& ref_call_user_func_array( Array(&$this->Factory, 'getObjectP'), $func_args );
	return $result;
	}

	/**
	* Returns tag processor for prefix specified
	*
	* @param string $prefix
	* @return kDBTagProcessor
	*/
	function &recallTagProcessor($prefix)
	{
	$this->InitParser(); // because kDBTagProcesor is in NParser dependencies
	$result =& $this->recallObject($prefix . '_TagProcessor');

	return $result;
	}

	/**
	* Checks if object with prefix passes was already created in factory
	*
	* @param string $name object presudo_class, prefix
	* @return bool
	* @author Kostja
	*/
	function hasObject($name)
	{
	return isset($this->Factory->Storage[$name]);
	}

	/**
	* Removes object from storage by given name
	*
	* @param string $name Object's name in the Storage
	* @author Kostja
	*/
	function removeObject($name)
	{
	$this->Factory->DestroyObject($name);
	}

	/**
	* Get's real class name for pseudo class,
	* includes class file and creates class
	* instance
	*
	* @param string $pseudo_class
	* @return Object
	* @access public
	* @author Alex
	*/
	function &makeClass($pseudo_class)
	{
	$func_args = func_get_args();
	$result =& ref_call_user_func_array( Array(&$this->Factory, 'makeClass'), $func_args);

	return $result;
	}

	/**
	* Checks if application is in debug mode
	*
	* @param bool $check_debugger check if kApplication debugger is initialized too, not only for defined DEBUG_MODE constant
	* @return bool
	* @author Alex
	* @access public
	*/
	function isDebugMode($check_debugger = true)
	{
	$debug_mode = defined('DEBUG_MODE') && DEBUG_MODE;
	if ($check_debugger) {
	$debug_mode = $debug_mode && is_object($this->Debugger);
	}
	return $debug_mode;
	}

	/**
	* Apply url rewriting used by mod_rewrite or not
	*
	* @param bool $ssl Force ssl link to be build
	* @return bool
	*/
	function RewriteURLs($ssl = false)
	{
	// case #1,#4:
	// we want to create https link from http mode
	// we want to create https link from https mode
	// conditions: ($ssl \|\| PROTOCOL == 'https://') && $this->ConfigValue('UseModRewriteWithSSL')

	// case #2,#3:
	// we want to create http link from https mode
	// we want to create http link from http mode
	// conditions: !$ssl && (PROTOCOL == 'https://' \|\| PROTOCOL == 'http://')

	$allow_rewriting =
	(!$ssl && (PROTOCOL == 'https://' \|\| PROTOCOL == 'http://')) // always allow mod_rewrite for http
	\|\| // or allow rewriting for redirect TO httpS or when already in httpS
	(($ssl \|\| PROTOCOL == 'https://') && $this->ConfigValue('UseModRewriteWithSSL')); // but only if it's allowed in config!
	return constOn('MOD_REWRITE') && $allow_rewriting;
	}

	/**
	* Reads unit (specified by $prefix)
	* option specified by $option
	*
	* @param string $prefix
	* @param string $option
	* @param mixed $default
	* @return string
	* @access public
	* @author Alex
	*/
	function getUnitOption($prefix, $option, $default = false)
	{
	/*if (!isset($this->UnitConfigReader)) {
	$this->UnitConfigReader =& $this->recallObject('kUnitConfigReader');
	}*/
	return $this->UnitConfigReader->getUnitOption($prefix, $option, $default);
	}

	/**
	* Set's new unit option value
	*
	* @param string $prefix
	* @param string $name
	* @param string $value
	* @author Alex
	* @access public
	*/
	function setUnitOption($prefix, $option, $value)
	{
	// $unit_config_reader =& $this->recallObject('kUnitConfigReader');
	return $this->UnitConfigReader->setUnitOption($prefix,$option,$value);
	}

	/**
	* Read all unit with $prefix options
	*
	* @param string $prefix
	* @return Array
	* @access public
	* @author Alex
	*/
	function getUnitOptions($prefix)
	{
	// $unit_config_reader =& $this->recallObject('kUnitConfigReader');
	return $this->UnitConfigReader->getUnitOptions($prefix);
	}

	/**
	* Returns true if config exists and is allowed for reading
	*
	* @param string $prefix
	* @return bool
	*/
	function prefixRegistred($prefix)
	{
	/*if (!isset($this->UnitConfigReader)) {
	$this->UnitConfigReader =& $this->recallObject('kUnitConfigReader');
	}*/
	return $this->UnitConfigReader->prefixRegistred($prefix);
	}

	/**
	* Splits any mixing of prefix and
	* special into correct ones
	*
	* @param string $prefix_special
	* @return Array
	* @access public
	* @author Alex
	*/
	function processPrefix($prefix_special)
	{
	return $this->Factory->processPrefix($prefix_special);
	}

	/**
	* Set's new event for $prefix_special
	* passed
	*
	* @param string $prefix_special
	* @param string $event_name
	* @access public
	*/
	function setEvent($prefix_special,$event_name)
	{
	$event_manager =& $this->recallObject('EventManager');
	$event_manager->setEvent($prefix_special,$event_name);
	}


	/**
	* SQL Error Handler
	*
	* @param int $code
	* @param string $msg
	* @param string $sql
	* @return bool
	* @access private
	* @author Alex
	*/
	function handleSQLError($code, $msg, $sql)
	{
	if ( isset($this->Debugger) )
	{
	$errorLevel = constOn('DBG_SQL_FAILURE') && !defined('IS_INSTALL') ? E_USER_ERROR : E_USER_WARNING;
	$this->Debugger->appendTrace();

	$error_msg = '<span class="debug_error">'.$msg.' ('.$code.')</span><br><a href="javascript:$Debugger.SetClipboard(\''.htmlspecialchars($sql).'\');"><b>SQL</b></a>: '.$this->Debugger->formatSQL($sql);
	$long_id = $this->Debugger->mapLongError($error_msg);
	trigger_error( mb_substr($msg.' ('.$code.') ['.$sql.']',0,1000).' #'.$long_id, $errorLevel);
	return true;
	}
	else
	{
	//$errorLevel = constOn('IS_INSTALL') ? E_USER_WARNING : E_USER_ERROR;
	$errorLevel = E_USER_WARNING;
	trigger_error('<b>SQL Error</b> in sql: '.$sql.', code <b>'.$code.'</b> ('.$msg.')', $errorLevel);
	/*echo '<b>xProcessing SQL</b>: '.$sql.'<br>';
	echo '<b>Error ('.$code.'):</b> '.$msg.'<br>';*/
	return $errorLevel == E_USER_ERROR ? false : true;
	}
	}

	/**
	* Default error handler
	*
	* @param int $errno
	* @param string $errstr
	* @param string $errfile
	* @param int $errline
	* @param Array $errcontext
	*/
	function handleError($errno, $errstr, $errfile = '', $errline = '', $errcontext = '')
	{
	if (defined('SILENT_LOG') && SILENT_LOG) {
	if ( !(defined('DBG_IGNORE_STRICT_ERRORS') && DBG_IGNORE_STRICT_ERRORS && defined('E_STRICT') && ($errno == E_STRICT)) ) {
	$fp = fopen(FULL_PATH.'/silent_log.txt','a');
	$time = adodb_date('d/m/Y H:i:s');
	fwrite($fp, '['.$time.'] #'.$errno.': '.strip_tags($errstr).' in ['.$errfile.'] on line '.$errline."\n");
	fclose($fp);
	}
	}

	$debug_mode = defined('DEBUG_MODE') && DEBUG_MODE;
	$skip_reporting = defined('DBG_SKIP_REPORTING') && DBG_SKIP_REPORTING;

	if (!$this->errorHandlers \|\| ($debug_mode && $skip_reporting)) {
	// when debugger absent OR it's present, but we actually can't see it's error report (e.g. during ajax request)
	$ignore_fatal_errors = defined('DBG_IGNORE_FATAL_ERRORS') && DBG_IGNORE_FATAL_ERRORS;

	if (($errno == E_USER_ERROR) && !$ignore_fatal_errors) {
	echo (' <div style="background-color: #FEFFBF; margin: auto; padding: 10px; border: 2px solid red; text-align: center">
	<strong>Fatal Error: </strong>'."$errstr in $errfile on line $errline".'
	</div>');
	exit;
	}

	if (!$this->errorHandlers) {
	return true;
	}
	}

	$res = false;
	$i = 0; // while (not foreach) because it is array of references in some cases
	$eh_count = count($this->errorHandlers);
	while ($i < $eh_count) {
	if ( is_array($this->errorHandlers[$i]) ) {
	$object =& $this->errorHandlers[$i][0];
	$method = $this->errorHandlers[$i][1];
	$res = $object->$method($errno, $errstr, $errfile, $errline, $errcontext);
	}
	else {
	$function = $this->errorHandlers[$i];
	$res = $function($errno, $errstr, $errfile, $errline, $errcontext);
	}
	$i++;
	}
	return $res;
	}

	/**
	* Returns & blocks next ResourceId available in system
	*
	* @return int
	* @access public
	* @author Alex
	*/
	function NextResourceId()
	{
	$table_name = TABLE_PREFIX.'IdGenerator';

	$this->Conn->Query('LOCK TABLES '.$table_name.' WRITE');
	$this->Conn->Query('UPDATE '.$table_name.' SET lastid = lastid + 1');
	$id = $this->Conn->GetOne('SELECT lastid FROM '.$table_name);
	if($id === false)
	{
	$this->Conn->Query('INSERT INTO '.$table_name.' (lastid) VALUES (2)');
	$id = 2;
	}
	$this->Conn->Query('UNLOCK TABLES');
	return $id - 1;
	}

	/**
	* Returns genealogical main prefix for subtable prefix passes
	* OR prefix, that has been found in REQUEST and some how is parent of passed subtable prefix
	*
	* @param string $current_prefix
	* @param string $real_top if set to true will return real topmost prefix, regardless of its id is passed or not
	* @return string
	* @access public
	* @author Kostja / Alex
	*/
	function GetTopmostPrefix($current_prefix, $real_top = false)
	{
	// 1. get genealogical tree of $current_prefix
	$prefixes = Array ($current_prefix);
	while ( $parent_prefix = $this->getUnitOption($current_prefix, 'ParentPrefix') ) {
	if (!$this->prefixRegistred($parent_prefix)) {
	// stop searching, when parent prefix is not registered
	break;
	}

	$current_prefix = $parent_prefix;
	array_unshift($prefixes, $current_prefix);
	}

	if ($real_top) {
	return $current_prefix;
	}

	// 2. find what if parent is passed
	$passed = explode(',', $this->GetVar('all_passed'));
	foreach ($prefixes as $a_prefix) {
	if (in_array($a_prefix, $passed)) {
	return $a_prefix;
	}
	}

	return $current_prefix;
	}

	/**
	* Triggers email event of type Admin
	*
	* @param string $email_event_name
	* @param int $to_user_id
	* @param array $send_params associative array of direct send params, possible keys: to_email, to_name, from_email, from_name, message, message_text
	* @return unknown
	*/
	function &EmailEventAdmin($email_event_name, $to_user_id = null, $send_params = false)
	{
	$event =& $this->EmailEvent($email_event_name, 1, $to_user_id, $send_params);
	return $event;
	}

	/**
	* Triggers email event of type User
	*
	* @param string $email_event_name
	* @param int $to_user_id
	* @param array $send_params associative array of direct send params, possible keys: to_email, to_name, from_email, from_name, message, message_text
	* @return unknown
	*/
	function &EmailEventUser($email_event_name, $to_user_id = null, $send_params = false)
	{
	$event =& $this->EmailEvent($email_event_name, 0, $to_user_id, $send_params);
	return $event;
	}

	/**
	* Triggers general email event
	*
	* @param string $email_event_name
	* @param int $email_event_type ( 0 for User, 1 for Admin)
	* @param int $to_user_id
	* @param array $send_params associative array of direct send params,
	* possible keys: to_email, to_name, from_email, from_name, message, message_text
	* @return unknown
	*/
	function &EmailEvent($email_event_name, $email_event_type, $to_user_id = -1, $send_params = false)
	{
	$params = array(
	'EmailEventName' => $email_event_name,
	'EmailEventToUserId' => $to_user_id,
	'EmailEventType' => $email_event_type,
	);
	if ($send_params) {
	$params['DirectSendParams'] = $send_params;
	}
	$event_str = isset($send_params['use_special']) ? 'emailevents.'.$send_params['use_special'].':OnEmailEvent' : 'emailevents:OnEmailEvent';
	$this->HandleEvent($event, $event_str, $params);

	return $event;
	}

	/**
	* Allows to check if user in this session is logged in or not
	*
	* @return bool
	*/
	function LoggedIn()
	{
	// no session during expiration process
	return is_null($this->Session) ? false : $this->Session->LoggedIn();
	}

	/**
	* Check current user permissions based on it's group permissions in specified category
	*
	* @param string $name permission name
	* @param int $cat_id category id, current used if not specified
	* @param int $type permission type {1 - system, 0 - per category}
	* @return int
	*/
	function CheckPermission($name, $type = 1, $cat_id = null)
	{
	$perm_helper =& $this->recallObject('PermissionsHelper');
	return $perm_helper->CheckPermission($name, $type, $cat_id);
	}

	/**
	* Set's any field of current visit
	*
	* @param string $field
	* @param mixed $value
	*/
	function setVisitField($field, $value)
	{
	if ($this->isAdmin \|\| !$this->ConfigValue('UseVisitorTracking')) {
	// admin logins are not registred in visits list
	return ;
	}

	$visit =& $this->recallObject('visits', null, Array ('raise_warnings' => 0));
	/* @var $visit kDBItem */

	if ($visit->isLoaded()) {
	$visit->SetDBField($field, $value);
	$visit->Update();
	}
	}

	/**
	* Allows to check if in-portal is installed
	*
	* @return bool
	*/
	function isInstalled()
	{
	return $this->InitDone && (count($this->ModuleInfo) > 0);
	}

	/**
	* Allows to determine if module is installed & enabled
	*
	* @param string $module_name
	* @return bool
	*/
	function isModuleEnabled($module_name)
	{
	return $this->findModule('Name', $module_name) !== false;

	}

	function reportError($class, $method)
	{
	$this->Debugger->appendTrace();
	trigger_error('depricated method <b>'.$class.'->'.$method.'(...)</b>', E_USER_ERROR);
	}

	/**
	* Returns Window ID of passed prefix main prefix (in edit mode)
	*
	* @param string $prefix
	* @return mixed
	*/
	function GetTopmostWid($prefix)
	{
	$top_prefix = $this->GetTopmostPrefix($prefix);
	$mode = $this->GetVar($top_prefix.'_mode');
	return $mode != '' ? substr($mode, 1) : '';
	}

	/**
	* Get temp table name
	*
	* @param string $table
	* @param mixed $wid
	* @return string
	*/
	function GetTempName($table, $wid = '')
	{
	if (preg_match('/prefix:(.*)/', $wid, $regs)) {
	$wid = $this->GetTopmostWid($regs[1]);
	}

	return TABLE_PREFIX.'ses_'.$this->GetSID().($wid ? '_'.$wid : '').'_edit_'.$table;
	}

	function GetTempTablePrefix($wid = '')
	{
	if (preg_match('/prefix:(.*)/', $wid, $regs)) {
	$wid = $this->GetTopmostWid($regs[1]);
	}

	return TABLE_PREFIX.'ses_'.$this->GetSID().($wid ? '_'.$wid : '').'_edit_';
	}

	function IsTempTable($table)
	{
	return preg_match('/'.TABLE_PREFIX.'ses_'.$this->GetSID().'(_[\d]+){0,1}_edit_(.*)/',$table);
	}

	/**
	* Checks, that given prefix is in temp mode
	*
	* @param string $prefix
	* @return bool
	*/
	function IsTempMode($prefix, $special = '')
	{
	$top_prefix = $this->Application->GetTopmostPrefix($prefix);

	$var_names = Array (
	$top_prefix,
	rtrim($top_prefix . '_' . $special, '_'), // from post
	rtrim($top_prefix . '.' . $special, '.'), // assembled locally
	);

	$var_names = array_unique($var_names);

	$temp_mode = false;
	foreach ($var_names as $var_name) {
	$value = $this->Application->GetVar($var_name . '_mode');
	if ($value && (substr($value, 0, 1) == 't')) {
	$temp_mode = true;
	break;
	}
	}

	return $temp_mode;
	}

	/**
	* Return live table name based on temp table name
	*
	* @param string $temp_table
	* @return string
	*/
	function GetLiveName($temp_table)
	{
	if( preg_match('/'.TABLE_PREFIX.'ses_'.$this->GetSID().'(_[\d]+){0,1}_edit_(.*)/',$temp_table, $rets) )
	{
	// cut wid from table end if any
	return $rets[2];
	}
	else
	{
	return $temp_table;
	}
	}

	function CheckProcessors($processors)
	{
	foreach ($processors as $a_processor)
	{
	if (!isset($this->CachedProcessors[$a_processor])) {
	$this->CachedProcessors[$a_processor] =& $this->recallObject($a_processor.'_TagProcessor');
	}
	}
	}

	function TimeZoneAdjustment($time_zone = null)
	{
	if ($time_zone == 'GMT') {
	return (-1) * adodb_date('Z');
	}
	$target_zone = isset($time_zone) ? $time_zone : $this->ConfigValue('Config_Site_Time');
	return 3600 * ($target_zone - $this->ConfigValue('Config_Server_Time'));
	}

	function ApplicationDie($message = '')
	{
	$message = ob_get_clean().$message;
	if ($this->isDebugMode()) {
	$message .= $this->Debugger->printReport(true);
	}

	echo $this->UseOutputCompression() ? gzencode($message, DBG_COMPRESSION_LEVEL) : $message;
	exit;
	}


	/* moved from MyApplication */

	function getUserGroups($user_id)
	{
	switch ($user_id) {
	case -1:
	$user_groups = $this->ConfigValue('User_LoggedInGroup');
	break;

	case -2:
	$user_groups = $this->ConfigValue('User_LoggedInGroup') . ',' . $this->ConfigValue('User_GuestGroup');
	break;

	default:
	$sql = 'SELECT GroupId
	FROM ' . TABLE_PREFIX . 'UserGroup
	WHERE PortalUserId = ' . (int)$user_id;
	$res = $this->Conn->GetCol($sql);

	$user_groups = Array( $this->ConfigValue('User_LoggedInGroup') );
	if ($res) {
	$user_groups = array_merge($user_groups, $res);
	}

	$user_groups = implode(',', $user_groups);
	}

	return $user_groups;
	}


	/**
	* Allows to detect if page is browsed by spider (293 agents supported)
	*
	* @return bool
	*/
	function IsSpider()
	{
	static $is_spider = null;

	if (!isset($is_spider)) {
	$user_agent = trim($_SERVER['HTTP_USER_AGENT']);
	$robots = file(FULL_PATH.'/core/robots_list.txt');
	foreach ($robots as $robot_info) {
	$robot_info = explode("\t", $robot_info, 3);
	if ($user_agent == trim($robot_info[2])) {
	$is_spider = true;
	break;
	}
	}
	}

	return $is_spider;
	}

	/**
	* Allows to detect table's presense in database
	*
	* @param string $table_name
	* @return bool
	*/
	function TableFound($table_name)
	{
	return $this->Conn->TableFound($table_name);
	}

	/**
	* Returns counter value
	*
	* @param string $name counter name
	* @param Array $params counter parameters
	* @param string $query_name specify query name directly (don't generate from parmeters)
	* @param bool $multiple_results
	* @return mixed
	*/
	function getCounter($name, $params = Array (), $query_name = null, $multiple_results = false)
	{
	$count_helper =& $this->Application->recallObject('CountHelper');
	/* @var $count_helper kCountHelper */

	return $count_helper->getCounter($name, $params, $query_name, $multiple_results);
	}

	/**
	* Resets counter, whitch are affected by one of specified tables
	*
	* @param string $tables comma separated tables list used in counting sqls
	*/
	function resetCounters($tables)
	{
	if (constOn('IS_INSTALL')) {
	return ;
	}

	$count_helper =& $this->Application->recallObject('CountHelper');
	/* @var $count_helper kCountHelper */

	return $count_helper->resetCounters($tables);
	}

	/**
	* Sends XML header + optionally displays xml heading
	*
	* @param string $xml_version
	* @return string
	* @author Alex
	*/
	function XMLHeader($xml_version = false)
	{
	$lang =& $this->recallObject('lang.current');
	header('Content-type: text/xml; charset='.$lang->GetDBField('Charset'));

	return $xml_version ? '<?xml version="'.$xml_version.'" encoding="'.$lang->GetDBField('Charset').'"?>' : '';
	}

	/**
	* Returns category tree
	*
	* @param int $category_id
	* @return Array
	*/
	function getTreeIndex($category_id)
	{
	$tree_index = $this->getCategoryCache($category_id, 'category_tree');

	if ($tree_index) {
	$ret = Array ();
	list ($ret['TreeLeft'], $ret['TreeRight']) = explode(';', $tree_index);

	return $ret;
	}

	return false;
	}

	}
	\ No newline at end of file
	Index: branches/5.1.x/core/units/users/users_event_handler.php
	===================================================================
	--- branches/5.1.x/core/units/users/users_event_handler.php (revision 13470)
	+++ branches/5.1.x/core/units/users/users_event_handler.php (revision 13471)
	@@ -1,2006 +1,1654 @@
	<?php
	/**
	* @version $Id$
	* @package In-Portal
	* @copyright Copyright (C) 1997 - 2009 Intechnic. All rights reserved.
	* @license GNU/GPL
	* In-Portal is Open Source software.
	* This means that this software may have been modified pursuant
	* the GNU General Public License, and as distributed it includes
	* or is derivative of works licensed under the GNU General Public License
	* or other free or open source software licenses.
	* See http://www.in-portal.org/license for copyright notices and details.
	*/

	defined('FULL_PATH') or die('restricted access!');

	class UsersEventHandler extends kDBEventHandler
	{
	/**
	* Allows to override standart permission mapping
	*
	*/
	function mapPermissions()
	{
	parent::mapPermissions();
	$permissions = Array (
	// admin
	'OnSetPersistantVariable' => Array('self' => 'view'), // because setting to logged in user only
	'OnUpdateRootPassword' => Array('self' => true),
	'OnUpdatePassword' => Array('self' => true),

	// front
	'OnRefreshForm' => Array('self' => true),

	'OnForgotPassword' => Array('self' => true),
	'OnResetPassword' => Array('self' => true),
	'OnResetPasswordConfirmed' => Array('self' => true),

	'OnSubscribeQuery' => Array('self' => true),
	'OnSubscribeUser' => Array('self' => true),

	'OnRecommend' => Array('self' => true),

	'OnItemBuild' => Array('self' => true),
	'OnMassResetSettings' => Array('self' => 'edit'),
	'OnMassCloneUsers' => Array('self' => 'add'),
	);

	$this->permMapping = array_merge($this->permMapping, $permissions);
	}

	/**
	* Shows only admins when required
	*
	* @param kEvent $event
	*/
	function SetCustomQuery(&$event)
	{
	$object =& $event->getObject();
	/* @var $object kDBList */

	if ($event->Special == 'admins') {
	$object->addFilter('primary_filter', 'ug.GroupId = 11');
	}

	if ($event->Special == 'regular') {
	$object->addFilter('primary_filter', 'ug.GroupId <> 11');
	}

	if (!$this->Application->isAdminUser) {
	$object->addFilter('status_filter', '%1$s.Status = '.STATUS_ACTIVE);
	}

	if ($event->Special == 'online') {
	$object->addFilter('online_users_filter', 's.PortalUserId IS NOT NULL');
	}

	if ($event->Special == 'group') {
	$group_id = $this->Application->GetVar('g_id');
	if ($group_id !== false) {
	// show only users, that user doesn't belong to current group
	$table_name = $this->Application->GetTempName(TABLE_PREFIX.'UserGroup', 'prefix:g');
	$sql = 'SELECT PortalUserId
	FROM ' . $table_name . '
	WHERE GroupId = ' . (int)$group_id;
	$user_ids = $this->Conn->GetCol($sql);
	// array_push($user_ids); // Guest & Everyone groups are set dynamically
	if ($user_ids) {
	$object->addFilter('already_member_filter', '%1$s.PortalUserId NOT IN ('.implode(',', $user_ids).')');
	}
	}
	}
	}

	/**
	* Checks permissions of user
	*
	* @param kEvent $event
	*/
	function CheckPermission(&$event)
	{
	if ($event->Name == 'OnLogin' \|\| $event->Name == 'OnLogout') {
	// permission is checked in OnLogin event directly
	return true;
	}

	if (!$this->Application->isAdminUser) {
	$user_id = $this->Application->RecallVar('user_id');
	$items_info = $this->Application->GetVar($event->getPrefixSpecial(true));

	if ($event->Name == 'OnCreate' && $user_id == -2) {
	// "Guest" can create new users
	return true;
	}

	if ($event->Name == 'OnUpdate' && $user_id > 0) {
	$user_dummy =& $this->Application->recallObject($event->Prefix.'.-item', null, Array('skip_autoload' => true));
	foreach ($items_info as $id => $field_values) {
	if ($id != $user_id) {
	// registered users can update their record only
	return false;
	}

	$user_dummy->Load($id);
	$status_field = array_shift($this->Application->getUnitOption($event->Prefix, 'StatusField'));

	if ($user_dummy->GetDBField($status_field) != STATUS_ACTIVE) {
	// not active user is not allowed to update his record (he could not activate himself manually)
	return false;
	}

	if (isset($field_values[$status_field]) && $user_dummy->GetDBField($status_field) != $field_values[$status_field]) {
	// user can't change status by himself
	return false;
	}
	}
	return true;
	}

	if ($event->Name == 'OnUpdate' && $user_id <= 0) {
	// guests are not allowed to update their record, because they don't have it :)
	return false;
	}
	}

	return parent::CheckPermission($event);
	}

	/**
	* Handles session expiration (redirects to valid template)
	*
	* @param kEvent $event
	*/
	function OnSessionExpire(&$event)
	{
	$this->Application->resetCounters('UserSession');

	// place 2 of 2 (also in kHTTPQuery::getRedirectParams)
	$admin_url_params = Array (
	'm_cat_id' => 0, // category means nothing on admin login screen
	'm_wid' => '', // remove wid, otherwise parent window may add wid to its name breaking all the frameset (for <a> targets)
	'pass' => 'm', // don't pass any other (except "m") prefixes to admin session expiration template
	'expired' => 1, // expiration mark to show special error on login screen
	'no_pass_through' => 1, // this way kApplication::HREF won't add them again
	);

	if ($this->Application->isAdmin) {
	$this->Application->Redirect('index', $admin_url_params, '', 'index.php');
	}

	if ($this->Application->GetVar('admin') == 1) {
	// Front-End showed in admin's right frame
	$session_admin =& $this->Application->recallObject('Session.admin');
	/* @var $session_admin Session */

	if (!$session_admin->LoggedIn()) {
	// front-end session created from admin session & both expired
	$this->Application->DeleteVar('admin');
	$this->Application->Redirect('index', $admin_url_params, '', 'admin/index.php');
	}
	}

	// Front-End session expiration
	$get = $this->Application->HttpQuery->getRedirectParams();
	$t = $this->Application->GetVar('t');
	$get['js_redirect'] = $this->Application->ConfigValue('UseJSRedirect');
	$this->Application->Redirect($t ? $t : 'index', $get);
	}

	/**
	* [AGENT] Deletes expired sessions
	*
	* @param kEvent $event
	*/
	function OnDeleteExpiredSessions(&$event)
	{
	if (defined('IS_INSTALL') && IS_INSTALL) {
	return ;
	}

	$this->Application->Session->DeleteExpired();
	}

	/**
	* Checks user data and logs it in if allowed
	*
	- * OnLogin is called from u:autoLoginUser and password is supplied
	- * OnLogin is called from u:OnAutoLoginUser supplying cookie with encoded username & password
	- *
	* @param kEvent $event
	*/
	function OnLogin(&$event)
	{
	- // persistent session data after login is not refreshed, because redirect will follow in any case
	- $prefix_special = $this->Application->isAdmin ? 'u.current' : 'u'; // "u" used on front not to change theme
	- $object =& $this->Application->recallObject($prefix_special, null, Array('skip_autoload' => true));
	+ $email_as_login = $this->Application->ConfigValue('Email_As_Login');
	+ $username = $this->Application->GetVar($email_as_login && !$this->Application->isAdmin ? 'email' : 'login');
	$password = $this->Application->GetVar('password');
	+ $rember_login = $this->Application->GetVar('cb_remember_login') == 1;

	- $invalid_pseudo = $this->Application->isAdmin ? 'la_invalid_password' : 'lu_invalid_password';
	- $remember_login_cookie = $this->Application->GetVar('remember_login');
	+ $user_helper =& $this->Application->recallObject('UserHelper');
	+ /* @var $user_helper UserHelper */

	- if (!$password && !$remember_login_cookie) {
	- $object->SetError('ValidateLogin', 'invalid_password', $invalid_pseudo);
	- $event->status = erFAIL;
	- return false;
	- }
	+ $user_helper->event =& $event;
	+ $result = $user_helper->loginUser($username, $password, false, $rember_login);

	- $email_as_login = $this->Application->ConfigValue('Email_As_Login');
	- list ($login_field, $submit_field) = $email_as_login && !$this->Application->isAdmin ? Array('Email', 'email') : Array('Login', 'login');
	- $login_value = $this->Application->GetVar($submit_field);
	+ if ($result != LOGIN_RESULT_OK) {
	+ $object =& $user_helper->getUserObject();

	- // process "Save Username" checkbox
	- if ($this->Application->isAdmin) {
	- $save_username = $this->Application->GetVar('cb_save_username') ? $login_value : '';
	- $this->Application->Session->SetCookie('save_username', $save_username, adodb_mktime() + 31104000); // 1 year expiration
	- $this->Application->SetVar('save_username', $save_username); // cookie will be set on next refresh, but refresh won't occur if login error present, so duplicate cookie in HTTPQuery
	- }
	-
	- $super_admin = ($login_value == 'super-root') && $this->verifySuperAdmin();
	- if ($this->Application->isAdmin && ($login_value == 'root') \|\| ($super_admin && $login_value == 'super-root')) {
	- // logging in "root" (admin only)
	-
	- $login_value = 'root';
	-
	- $root_password = $this->Application->ConfigValue('RootPass');
	- $password_formatter =& $this->Application->recallObject('kPasswordFormatter');
	- $test = $password_formatter->EncryptPassword($password, 'b38');
	- if ($root_password != $test) {
	- $object->SetError('ValidateLogin', 'invalid_password', $invalid_pseudo);
	- $event->status = erFAIL;
	- return false;
	- }
	- elseif ($this->checkLoginPermission($login_value)) {
	- $user_id = -1;
	- $object->Load($user_id);
	- $object->SetDBField('Login', $login_value);
	-
	- $session =& $this->Application->recallObject('Session');
	- $session->SetField('PortalUserId', $user_id);
	-// $session->SetField('GroupList', implode(',', $groups) );
	- $this->Application->SetVar('u.current_id', $user_id);
	- $this->Application->StoreVar('user_id', $user_id);
	-
	- $this->Application->LoadPersistentVars();
	-
	- if ($super_admin) {
	- $this->Application->StoreVar('super_admin', 1);
	- }
	-
	- $this->Application->HandleEvent($dummy, 'session-log:OnStartSession');
	- $this->processLoginRedirect($event, $password);
	- $this->_processInterfaceLanguage($event);
	- return true;
	+ if ($result == LOGIN_RESULT_NO_PERMISSION) {
	+ $object->SetError('ValidateLogin', 'no_permission', 'lu_no_permissions');
	}
	else {
	- $object->SetError('ValidateLogin', 'invalid_license', 'la_invalid_license');
	- $event->status = erFAIL;
	- return false;
	- }
	- }
	-
	- /*$sql = 'SELECT PortalUserId FROM '.$object->TableName.' WHERE (%s = %s) AND (Password = MD5(%s))';
	- $user_id = $this->Conn->GetOne( sprintf($sql, $login_field, $this->Conn->qstr($login_value), $this->Conn->qstr($password) ) );*/
	-
	- if ($remember_login_cookie) {
	- $user_info = explode('\|', $remember_login_cookie); // 0 - username, 1 - md5(password)
	-
	- $sql = 'SELECT PortalUserId
	- FROM '.$object->TableName.'
	- WHERE (Email = %1$s OR Login = %1$s) AND (Password = %2$s)';
	- $user_id = $this->Conn->GetOne( sprintf($sql, $this->Conn->qstr($user_info[0]), $this->Conn->qstr($user_info[1]) ) );
	- } else {
	- $sql = 'SELECT PortalUserId
	- FROM '.$object->TableName.'
	- WHERE (Email = %1$s OR Login = %1$s) AND (Password = MD5(%2$s))';
	- $user_id = $this->Conn->GetOne( sprintf($sql, $this->Conn->qstr($login_value), $this->Conn->qstr($password) ) );
	- }
	-
	- if ($user_id) {
	- $object->Load($user_id);
	- if (!$this->checkBanRules($object)) {
	- $event->status = erFAIL;
	- return false;
	+ $object->SetID(-2);
	+ $object->SetError('ValidateLogin', 'invalid_password', 'la_invalid_password');
	}
	- if ($object->GetDBField('Status') == STATUS_ACTIVE) {
	- $groups = $object->getMembershipGroups(true);
	- if(!$groups) $groups = Array();
	- array_push($groups, $this->Application->ConfigValue('User_LoggedInGroup') );
	- $this->Application->StoreVar( 'UserGroups', implode(',', $groups) );
	-
	- if ($this->checkLoginPermission($login_value)) {
	- $session =& $this->Application->recallObject('Session');
	- $session->SetField('PortalUserId', $user_id);
	- $session->SetField('GroupList', implode(',', $groups) );
	- $this->Application->SetVar('u.current_id', $user_id);
	- $this->Application->StoreVar('user_id', $user_id);
	-
	- $this->Application->LoadPersistentVars();
	-
	- if (!$remember_login_cookie) {
	- // don't change last login time when auto-login is used
	- $this_login = (int)$this->Application->RecallPersistentVar('ThisLogin');
	- $this->Application->StorePersistentVar('LastLogin', $this_login);
	- $this->Application->StorePersistentVar('ThisLogin', adodb_mktime());
	- }
	-
	- if ($this->Application->GetVar('cb_remember_login') == 1) {
	- // remember username & password when "Remember Login" checkbox us checked (when user is using login form on Front-End)
	- $remember_login_cookie = $login_value . '\|' . md5($password);
	- $this->Application->Session->SetCookie('remember_login', $remember_login_cookie, adodb_mktime() + 2592000); // 30 days
	- }

	- $this->Application->HandleEvent($dummy, 'session-log:OnStartSession');
	- }
	- else {
	- $object->Load(-2);
	- $object->SetError('ValidateLogin', 'no_permission', 'lu_no_permissions');
	- $event->status = erFAIL;
	- }
	-
	- if (!$remember_login_cookie) {
	- $this->processLoginRedirect($event, $password);
	- $this->_processInterfaceLanguage($event);
	- }
	- }
	- else {
	- $event->redirect = $this->Application->GetVar('pending_disabled_template');
	- }
	- }
	- else
	- {
	- $object->SetID(-2);
	- $object->SetError('ValidateLogin', 'invalid_password', $invalid_pseudo);
	$event->status = erFAIL;
	}
	-
	- $event->SetRedirectParam('pass', 'all');
	-// $event->SetRedirectParam('pass_category', 1); // to test
	- }
	-
	- /**
	- * Sets correct interface language after sucessful login, based on user settings
	- *
	- * @param kEvent $event
	- */
	- function _processInterfaceLanguage(&$event)
	- {
	- if (($event->status != erSUCCESS) \|\| !$this->Application->isAdmin) {
	- return ;
	- }
	-
	- $is_root = $this->Application->RecallVar('user_id') == -1;
	-
	- $object =& $this->Application->recallObject('u.current');
	- /* @var $object kDBItem */
	-
	- $user_language_id = $is_root ? $this->Application->RecallPersistentVar('AdminLanguage') : $object->GetDBField('AdminLanguage');
	-
	- $sql = 'SELECT LanguageId, IF(LanguageId = ' . (int)$user_language_id . ', 2, AdminInterfaceLang) AS SortKey
	- FROM ' . TABLE_PREFIX . 'Language
	- WHERE Enabled = 1
	- HAVING SortKey <> 0
	- ORDER BY SortKey DESC';
	- $language_info = $this->Conn->GetRow($sql);
	- $language_id = $language_info && $language_info['LanguageId'] ? $language_info['LanguageId'] : $user_language_id;
	-
	- if ($user_language_id != $language_id) {
	- // first admin login OR language was delelted or disabled
	- if ($is_root) {
	- $this->Application->StorePersistentVar('AdminLanguage', $language_id);
	- }
	- else {
	- $object->SetDBField('AdminLanguage', $language_id);
	- $object->Update();
	- }
	- }
	-
	- $event->SetRedirectParam('m_lang', $language_id); // data
	- $this->Application->Session->SetField('Language', $language_id); // interface
	}

	/**
	* [HOOK] Auto-Logins Front-End user when "Remember Login" cookie is found
	*
	* @param kEvent $event
	*/
	function OnAutoLoginUser(&$event)
	{
	$remember_login_cookie = $this->Application->GetVar('remember_login');

	if (!$remember_login_cookie \|\| $this->Application->isAdmin \|\| $this->Application->LoggedIn()) {
	return ;
	}

	- $event->CallSubEvent('OnLogin');
	- }
	+ $user_helper =& $this->Application->recallObject('UserHelper');
	+ /* @var $user_helper UserHelper */

	- /**
	- * Checks that user is allowed to use super admin mode
	- *
	- * @return bool
	- */
	- function verifySuperAdmin()
	- {
	- $sa_mode = ipMatch(defined('SA_IP') ? SA_IP : '');
	- return $sa_mode \|\| $this->Application->isDebugMode();
	- }
	-
	- /**
	- * Enter description here...
	- *
	- * @param string $user_name
	- * @return bool
	- */
	- function checkLoginPermission($user_name)
	- {
	- $ret = true;
	- if ($this->Application->isAdmin) {
	- $modules_helper =& $this->Application->recallObject('ModulesHelper');
	-
	- if ($user_name != 'root') {
	- // root is virtual user, so allow him to login to admin in any case
	- $ret = $this->Application->CheckPermission('ADMIN', 1);
	- }
	- }
	- else {
	- $ret = $this->Application->CheckPermission('LOGIN', 1);
	- }
	-
	- return $ret;
	- }
	-
	- /**
	- * Process all required data and redirect logged-in user
	- *
	- * @param kEvent $event
	- */
	- function processLoginRedirect(&$event, $password)
	- {
	- $prefix_special = $this->Application->isAdmin ? 'u.current' : 'u'; // "u" used on front not to change theme
	- $object =& $this->Application->recallObject($prefix_special, null, Array('skip_autoload' => true));
	-
	- $next_template = $this->Application->GetVar('next_template');
	- if ($next_template == '_ses_redirect') {
	- $location = $this->Application->BaseURL().$this->Application->RecallVar($next_template);
	- if( $this->Application->isDebugMode() && constOn('DBG_REDIRECT') )
	- {
	- $this->Application->Debugger->appendTrace();
	- echo "<b>Debug output above!!!</b> Proceed to redirect: <a href=\"$location\">$location</a><br>";
	- }
	- else {
	- header('Location: '.$location);
	- }
	-
	- $session =& $this->Application->recallObject('Session');
	- $session->SaveData();
	- exit;
	- }
	-
	- if ($next_template) {
	- $event->redirect = $next_template;
	- }
	-
	- if ($this->Application->ConfigValue('UseJSRedirect')) {
	- $event->SetRedirectParam('js_redirect', 1);
	- }
	-
	- $sync_manager =& $this->Application->recallObjectP('UsersSyncronizeManager', null, Array(), 'InPortalSyncronize');
	- $sync_manager->performAction('LoginUser', $object->GetDBField('Login'), $password);
	- $this->Application->resetCounters('UserSession');
	+ $user_helper->loginUser('', '', false, false, $remember_login_cookie);
	}

	/**
	* Called when user logs in using old in-portal
	*
	* @param kEvent $event
	*/
	function OnInpLogin(&$event)
	{
	$sync_manager =& $this->Application->recallObjectP('UsersSyncronizeManager', null, Array(), 'InPortalSyncronize');
	$sync_manager->performAction('LoginUser', $event->getEventParam('user'), $event->getEventParam('pass') );

	if ($event->redirect && is_string($event->redirect)) {
	// some real template specified instead of true
	$this->Application->Redirect($event->redirect, $event->redirect_params);
	}
	}

	/**
	* Called when user logs in using old in-portal
	*
	* @param kEvent $event
	*/
	function OnInpLogout(&$event)
	{
	$sync_manager =& $this->Application->recallObjectP('UsersSyncronizeManager', null, Array(), 'InPortalSyncronize');
	$sync_manager->performAction('LogoutUser');
	}

	function OnLogout(&$event)
	{
	- $sync_manager =& $this->Application->recallObjectP('UsersSyncronizeManager', null, Array(), 'InPortalSyncronize');
	- $sync_manager->performAction('LogoutUser');
	-
	- $this->Application->HandleEvent($dummy, 'session-log:OnEndSession');
	-
	- $this->Application->SetVar('u.current_id', -2);
	- $object =& $this->Application->recallObject('u.current', null, Array('skip_autoload' => true));
	- $object->Load(-2);
	-
	- $this->Application->DestroySession();
	+ $user_helper =& $this->Application->recallObject('UserHelper');
	+ /* @var $user_helper UserHelper */

	- $session =& $this->Application->recallObject('Session');
	- /* @var $session Session */
	-
	- $group_list = $this->Application->ConfigValue('User_GuestGroup') . ',' . $this->Application->ConfigValue('User_LoggedInGroup');
	-
	- $session->SetField('PortalUserId', -2);
	- $session->SetField('GroupList', $group_list);
	- $this->Application->StoreVar('user_id', -2, true);
	- $this->Application->StoreVar('UserGroups', $group_list, true);
	-
	- if ($this->Application->ConfigValue('UseJSRedirect')) {
	- $event->SetRedirectParam('js_redirect', 1);
	- }
	-
	- $this->Application->resetCounters('UserSession');
	- $this->Application->Session->SetCookie('remember_login', '', adodb_mktime() - 3600);
	-
	- $event->SetRedirectParam('pass', 'all');
	+ $user_helper->event =& $event;
	+ $user_helper->logoutUser();
	}

	/**
	* Redirects user after succesfull registration to confirmation template (on Front only)
	*
	* @param kEvent $event
	*/
	function OnAfterItemCreate(&$event)
	{
	$this->saveUserImages($event);

	if ($this->Application->GetVar('skip_set_primary')) return;
	$is_subscriber = $this->Application->GetVar('IsSubscriber');
	if(!$is_subscriber)
	{
	$object =& $event->getObject();

	$ug_table = TABLE_PREFIX.'UserGroup';
	if ($object->mode == 't') {
	$ug_table = $this->Application->GetTempName($ug_table, 'prefix:'.$event->Prefix);
	}

	$sql = 'UPDATE '.$ug_table.'
	SET PrimaryGroup = 0
	WHERE PortalUserId = '.$object->GetDBField('PortalUserId');
	$this->Conn->Query($sql);

	// set primary group to user
	if ($this->Application->isAdminUser && $this->Application->GetVar('user_group')) {
	// while in admin you can set any group for new users
	$group_id = $this->Application->GetVar('user_group');
	}
	else {
	$group_id = $object->GetDBField('UserGroup');

	if ($group_id) {
	// check, that group is allowed for Front-End
	$sql = 'SELECT GroupId
	FROM ' . TABLE_PREFIX . 'PortalGroup
	WHERE GroupId = ' . (int)$group_id . ' AND FrontRegistration = 1';
	$group_id = $this->Conn->GetOne($sql);
	}

	if (!$group_id) {
	// when group not selected -> use default group
	$group_id = $this->Application->ConfigValue('User_NewGroup');
	}
	}

	$sql = 'REPLACE INTO '.$ug_table.'(PortalUserId,GroupId,PrimaryGroup) VALUES (%s,%s,1)';
	$this->Conn->Query( sprintf($sql, $object->GetID(), $group_id) );
	}
	}

	/**
	* Login user if possible, if not then redirect to corresponding template
	*
	* @param kEvent $event
	*/
	function autoLoginUser(&$event)
	{
	$object =& $event->getObject();
	- $this->Application->SetVar('u.current_id', $object->GetID() );
	-
	- if($object->GetDBField('Status') == STATUS_ACTIVE && !$this->Application->ConfigValue('User_Password_Auto'))
	- {
	- $email_as_login = $this->Application->ConfigValue('Email_As_Login');
	- list($login_field, $submit_field) = $email_as_login ? Array('Email', 'email') : Array('Login', 'login');
	+ $this->Application->SetVar('u.current_id', $object->GetID());

	- $this->Application->SetVar($submit_field, $object->GetDBField($login_field) );
	- $this->Application->SetVar('password', $object->GetDBField('Password_plain') );
	+ if ($object->GetDBField('Status') == STATUS_ACTIVE && !$this->Application->ConfigValue('User_Password_Auto')) {
	+ $user_helper =& $this->Application->recallObject('UserHelper');
	+ /* @var $user_helper UserHelper */

	- $event->CallSubEvent('OnLogin');
	+ $user_helper->loginUser($object->GetDBField('Login'), $object->GetDBField('Password_plain'));
	}
	}


	/**
	* When creating user & user with such email exists then force to use OnUpdate insted of ?
	*
	* @param kEvent $event
	*/
	function OnSubstituteSubscriber(&$event)
	{
	$ret = false;
	$object =& $event->getObject( Array('skip_autoload' => true) );
	$items_info = $this->Application->GetVar( $event->getPrefixSpecial(true) );
	if($items_info)
	{
	list($id, $field_values) = each($items_info);
	$user_email = isset($field_values['Email']) ? $field_values['Email'] : false;
	if($user_email)
	{
	// check if is subscriber
	$verify_user =& $this->Application->recallObject('u.verify', null, Array('skip_autoload' => true) );
	$verify_user->Load($user_email, 'Email');
	if( $verify_user->isLoaded() && $verify_user->isSubscriberOnly() )
	{
	$items_info = Array( $verify_user->GetDBField('PortalUserId') => $field_values );
	$this->Application->SetVar($event->getPrefixSpecial(true), $items_info);
	$ret = true;
	}
	}
	}

	if( isset($event->MasterEvent) )
	{
	$event->MasterEvent->setEventParam('is_subscriber_only', $ret);
	}
	else
	{
	$event->setEventParam('is_subscriber_only', $ret);
	}
	}


	/**
	* Enter description here...
	*
	* @param kEvent $event
	* @param bool $dry_run
	* @return bool
	*/
	function isSubscriberOnly(&$event, $dry_run = false)
	{
	$event->CallSubEvent('OnSubstituteSubscriber');
	$is_subscriber = $event->getEventParam('is_subscriber_only');

	if ($dry_run) {
	return $is_subscriber;
	}

	if ($is_subscriber) {
	$object =& $event->getObject( Array('skip_autoload' => true) );
	$this->OnUpdate($event);

	if ($event->status == erSUCCESS) {
	$this->OnAfterItemCreate($event);
	$object->SendEmailEvents();

	if (!$this->Application->isAdmin && $event->redirect) {
	$this->autoLoginUser($event);
	}
	}
	}

	return $is_subscriber;
	}

	/**
	* Creates new user
	*
	* @param kEvent $event
	*/
	function OnCreate(&$event)
	{
	if (!$this->Application->isAdminUser) {
	$this->setUserStatus($event);
	}

	if (!$this->isSubscriberOnly($event)) {
	$object =& $event->getObject( Array('skip_autoload' => true) );
	/* @var $object kDBItem */
	if ($this->Application->ConfigValue('User_Password_Auto')) {
	$pass = makepassword4(rand(5,8));
	$object->SetField('Password', $pass);
	$object->SetField('VerifyPassword', $pass);
	$this->Application->SetVar('user_password',$pass);
	}
	parent::OnCreate($event);

	$this->Application->SetVar('u.current_id', $object->getID() ); // for affil:OnRegisterAffiliate after hook

	$this->setNextTemplate($event);

	if (!$this->Application->isAdmin && ($event->status == erSUCCESS) && $event->redirect) {
	$object->SendEmailEvents();
	$this->autoLoginUser($event);
	}
	}
	}

	/**
	* Set's new user status based on config options
	*
	* @param kEvent $event
	*/
	function setUserStatus(&$event)
	{
	$object =& $event->getObject( Array('skip_autoload' => true) );

	$new_users_allowed = $this->Application->ConfigValue('User_Allow_New');

	switch ($new_users_allowed) {
	case 1: // Immediate
	$object->SetDBField('Status', STATUS_ACTIVE);
	$next_template = $this->Application->GetVar('registration_confirm_template');
	if ($next_template) {
	$event->redirect = $next_template;
	}
	break;

	case 3: // Upon Approval
	case 4: // Email Activation
	$next_template = $this->Application->GetVar('registration_confirm_pending_template');
	if ($next_template) {
	$event->redirect = $next_template;
	}
	$object->SetDBField('Status', STATUS_PENDING);
	break;

	case 2: // Not Allowed
	$object->SetDBField('Status', STATUS_DISABLED);
	break;
	}
	}

	/**
	* Set's new unique resource id to user
	*
	* @param kEvent $event
	*/
	function OnBeforeItemCreate(&$event)
	{
	parent::OnBeforeItemCreate($event);

	$cs_helper =& $this->Application->recallObject('CountryStatesHelper');
	/* @var $cs_helper kCountryStatesHelper */

	if (!$this->isSubscriberOnly($event, true)) {
	$cs_helper->CheckStateField($event, 'State', 'Country');
	}

	$this->_makePasswordRequired($event);
	$cs_helper->PopulateStates($event, 'State', 'Country');

	$object =& $event->getObject();
	/* @var $object kDBItem */

	if ( $this->Application->ConfigValue('Email_As_Login') ) {
	$field_options = $object->GetFieldOptions('Email');
	$field_options['error_msgs']['unique'] = $this->Application->Phrase('lu_user_and_email_already_exist');
	$object->SetFieldOptions('Email', $field_options);
	}

	$object->setLogin();

	- if (!$this->checkBanRules($object)) {
	+ $user_helper =& $this->Application->recallObject('UserHelper');
	+ /* @var $user_helper UserHelper */
	+
	+ if (!$user_helper->checkBanRules($object)) {
	$event->status = erFAIL;
	return ;
	}
	}

	/**
	* Set's new unique resource id to user
	*
	* @param kEvent $event
	*/
	function OnAfterItemValidate(&$event)
	{
	$object =& $event->getObject();
	$resource_id = $object->GetDBField('ResourceId');
	if (!$resource_id)
	{
	$object->SetDBField('ResourceId', $this->Application->NextResourceId() );
	}
	}


	/**
	* Enter description here...
	*
	* @param kEvent $event
	*/
	function OnRecommend(&$event)
	{
	$friend_email = $this->Application->GetVar('friend_email');
	$friend_name = $this->Application->GetVar('friend_email');

	// used for error reporting only -> rewrite code + theme (by Alex)
	$object =& $this->Application->recallObject('u', null, Array('skip_autoload' => true)); // TODO: change theme too
	/* @var $object UsersItem */

	if (preg_match('/^(' . REGEX_EMAIL_USER . '@' . REGEX_EMAIL_DOMAIN . ')$/i', $friend_email))
	{
	/*$cutoff = adodb_mktime() + (int)$this->Application->ConfigValue('Suggest_MinInterval');
	$sql = 'SELECT *
	FROM ' . TABLE_PREFIX . 'SuggestMail
	WHERE email = ' . $this->Conn->qstr($friend_email) . ' AND sent < ' . $cutoff;
	if ($this->Conn->GetRow($sql) !== false) {
	$object->SetError('Email', 'send_error', 'lu_email_already_suggested');
	$event->status = erFAIL;
	return ;
	}*/

	$send_params = Array ();
	$send_params['to_email'] = $friend_email;
	$send_params['to_name'] = $friend_name;

	$user_id = $this->Application->RecallVar('user_id');
	$email_event =& $this->Application->EmailEventUser('USER.SUGGEST', $user_id, $send_params);
	$email_event =& $this->Application->EmailEventAdmin('USER.SUGGEST');

	if ($email_event->status == erSUCCESS){
	/*$fields_hash = Array (
	'email' => $friend_email,
	'sent' => adodb_mktime(),
	);

	$this->Conn->doInsert($fields_hash, TABLE_PREFIX . 'SuggestMail');*/

	$event->redirect_params = array('opener' => 's', 'pass' => 'all');
	$event->redirect = $this->Application->GetVar('template_success');
	}
	else {
	// $event->redirect_params = array('opener' => 's', 'pass' => 'all');
	// $event->redirect = $this->Application->GetVar('template_fail');

	$object->SetError('Email', 'send_error', 'lu_email_send_error');
	$event->status = erFAIL;
	}
	}
	else {
	$object->SetError('Email', 'invalid_email', 'lu_InvalidEmail');
	$event->status = erFAIL;
	}
	}

	/**
	* Saves address changes and mades no redirect
	*
	* @param kEvent $event
	*/
	function OnUpdateAddress(&$event)
	{
	$object =& $event->getObject( Array('skip_autoload' => true) );

	$items_info = $this->Application->GetVar( $event->getPrefixSpecial(true) );

	if ($items_info) {
	list ($id, $field_values) = each($items_info);
	if ($id > 0) {
	$object->Load($id);
	}

	$object->SetFieldsFromHash($field_values);
	$object->setID($id);
	$object->Validate();
	}

	$cs_helper =& $this->Application->recallObject('CountryStatesHelper');
	/* @var $cs_helper kCountryStatesHelper */

	$cs_helper->PopulateStates($event, 'State', 'Country');

	$event->redirect = false;
	}

	/**
	* Validate subscriber's email & store it to session -> redirect to confirmation template
	*
	* @param kEvent $event
	*/
	function OnSubscribeQuery(&$event)
	{
	$user_email = $this->Application->GetVar('subscriber_email');
	if (preg_match('/^(' . REGEX_EMAIL_USER . '@' . REGEX_EMAIL_DOMAIN . ')$/i', $user_email)) {

	$object =& $this->Application->recallObject($this->Prefix.'.subscriber', null, Array('skip_autoload' => true));
	/* @var $object UsersItem */

	$this->Application->StoreVar('SubscriberEmail', $user_email);

	$object->Load($user_email, 'Email');
	if ($object->isLoaded()) {
	$group_info = $this->GetGroupInfo($object->GetID());
	$event->redirect = $this->Application->GetVar($group_info ? 'unsubscribe_template' : 'subscribe_template');
	}
	else {
	$event->redirect = $this->Application->GetVar('subscribe_template');
	$this->Application->StoreVar('SubscriberEmail', $user_email);
	}
	}
	else {
	// used for error reporting only -> rewrite code + theme (by Alex)
	$object =& $this->Application->recallObject('u', null, Array('skip_autoload' => true)); // TODO: change theme too
	/* @var $object UsersItem */

	$object->SetError('SubscribeEmail', 'invalid_email', 'lu_InvalidEmail');
	$event->status = erFAIL;
	}
	}

	/**
	* Subscribe/Unsubscribe user based on email stored in previous step
	*
	* @param kEvent $event
	*/
	function OnSubscribeUser(&$event)
	{
	$object = &$this->Application->recallObject($this->Prefix.'.subscriber', null, Array('skip_autoload' => true));
	/* @var $object UsersItem */

	$user_email = $this->Application->RecallVar('SubscriberEmail');
	if (preg_match('/^(' . REGEX_EMAIL_USER . '@' . REGEX_EMAIL_DOMAIN . ')$/i', $user_email)) {
	$this->RemoveRequiredFields($object);
	$object->Load($user_email, 'Email');

	if ($object->isLoaded()) {
	$group_info = $this->GetGroupInfo($object->GetID());

	if ($group_info){
	if ($event->getEventParam('no_unsubscribe')) return;

	if ($group_info['PrimaryGroup']){
	// delete user
	$object->Delete();
	}
	else {
	$this->RemoveSubscriberGroup($object->GetID());
	}

	$event->redirect = $this->Application->GetVar('unsubscribe_ok_template');
	}
	else {
	$this->AddSubscriberGroup($object->GetID(), 0);
	$event->redirect = $this->Application->GetVar('subscribe_ok_template');
	}
	}
	else {
	$object->SetField('Email', $user_email);
	$object->SetField('Login', $user_email);
	$object->SetDBField('dob', 1);
	$object->SetDBField('dob_date', 1);
	$object->SetDBField('dob_time', 1);
	$object->SetDBField('Status', STATUS_ACTIVE); // make user subscriber Active by default
	$ip = getenv('HTTP_X_FORWARDED_FOR')?getenv('HTTP_X_FORWARDED_FOR'):getenv('REMOTE_ADDR');
	$object->SetDBField('ip', $ip);

	$this->Application->SetVar('IsSubscriber', 1);

	if ($object->Create()) {
	$this->AddSubscriberGroup($object->GetID(), 1);
	$event->redirect = $this->Application->GetVar('subscribe_ok_template');
	}

	$this->Application->SetVar('IsSubscriber', 0);
	}
	}
	}

	function AddSubscriberGroup($user_id, $is_primary)
	{
	$group_id = $this->Application->ConfigValue('User_SubscriberGroup');
	$sql = 'INSERT INTO ' . TABLE_PREFIX . 'UserGroup
	(PortalUserId, GroupId, PrimaryGroup) VALUES (%s, %s, ' . $is_primary . ')';
	$this->Conn->Query( sprintf($sql, $user_id, $group_id) );

	$this->Application->EmailEventAdmin('USER.SUBSCRIBE');
	$this->Application->EmailEventUser('USER.SUBSCRIBE', $user_id);
	}

	function RemoveSubscriberGroup($user_id)
	{
	$group_id = $this->Application->ConfigValue('User_SubscriberGroup');
	$sql = 'DELETE FROM ' . TABLE_PREFIX . 'UserGroup
	WHERE PortalUserId = ' . $user_id . '
	AND GroupId = ' . $this->Application->ConfigValue('User_SubscriberGroup');
	$this->Conn->Query($sql);

	$this->Application->EmailEventAdmin('USER.UNSUBSCRIBE');
	$this->Application->EmailEventUser('USER.UNSUBSCRIBE', $user_id);
	}

	/**
	* Allows to detect user subscription status (subscribed or not)
	*
	* @param int $user_id
	* @return bool
	*/
	function GetGroupInfo($user_id)
	{
	$sql = 'SELECT * FROM ' . TABLE_PREFIX . 'UserGroup
	WHERE (PortalUserId = ' . $user_id . ')
	AND (GroupId = ' . $this->Application->ConfigValue('User_SubscriberGroup') . ')';
	return $this->Conn->GetRow($sql);
	}

	function OnForgotPassword(&$event)
	{
	$user_object =& $this->Application->recallObject('u.forgot', null, Array('skip_autoload' => true));
	/* @var $user_object UsersItem */

	// used for error reporting only -> rewrite code + theme (by Alex)
	$user_current_object =& $this->Application->recallObject('u', null, Array('skip_autoload' => true)); // TODO: change theme too
	/* @var $user_current_object UsersItem */

	$username = $this->Application->GetVar('username');
	$email = $this->Application->GetVar('email');
	$found = false;
	$allow_reset = true;

	if (strlen($username)) {
	$user_object->Load($username, 'Login');
	if ($user_object->isLoaded()) {
	$found = ($user_object->GetDBField("Login")==$username && $user_object->GetDBField("Status")==1) && strlen($user_object->GetDBField("Password"));
	}
	}
	else if(strlen($email)) {
	$user_object->Load($email, 'Email');
	if ($user_object->isLoaded()) {
	$found = ($user_object->GetDBField("Email")==$email && $user_object->GetDBField("Status")==1) && strlen($user_object->GetDBField("Password"));
	}
	}

	if ($user_object->isLoaded()) {
	$PwResetConfirm = $user_object->GetDBField('PwResetConfirm');
	$PwRequestTime = $user_object->GetDBField('PwRequestTime');
	$PassResetTime = $user_object->GetDBField('PassResetTime');
	//$MinPwResetDelay = $user_object->GetDBField('MinPwResetDelay');
	$MinPwResetDelay = $this->Application->ConfigValue('Users_AllowReset');

	$allow_reset = (strlen($PwResetConfirm) ?
	adodb_mktime() > $PwRequestTime + $MinPwResetDelay :
	adodb_mktime() > $PassResetTime + $MinPwResetDelay);
	}

	if ($found && $allow_reset) {
	$this->Application->StoreVar('tmp_user_id', $user_object->GetDBField("PortalUserId"));
	$this->Application->StoreVar('tmp_email', $user_object->GetDBField("Email"));

	$confirm_template = $this->Application->GetVar('reset_confirm_template');
	if (!$confirm_template) {
	$this->Application->SetVar('reset_confirm_template', 'platform/login/forgotpass_reset');
	}
	$this->Application->EmailEventUser('USER.PSWDC', $user_object->GetDBField('PortalUserId'));

	$event->redirect = $this->Application->GetVar('template_success');
	}
	else {
	if (!strlen($username) && !strlen($email)) {
	$user_current_object->SetError('Login', 'forgotpw_nodata', 'lu_ferror_forgotpw_nodata');
	$user_current_object->SetError('Email', 'forgotpw_nodata', 'lu_ferror_forgotpw_nodata');
	}
	else {
	if ($allow_reset) {
	if (strlen($username)) {
	$user_current_object->SetError('Login', 'unknown_username', 'lu_ferror_unknown_username');
	}
	if (strlen($email)) {
	$user_current_object->SetError('Email', 'unknown_email', 'lu_ferror_unknown_email');
	}
	}
	else {
	if (strlen($username)) {
	$user_current_object->SetError('Login', 'reset_denied', 'lu_ferror_reset_denied');
	}

	if (strlen($email)) {
	$user_current_object->SetError('Email', 'reset_denied', 'lu_ferror_reset_denied');
	}
	}
	}

	if($user_current_object->FieldErrors){
	$event->redirect = false;
	}
	}
	}

	/**
	* Enter description here...
	*
	* @param kEvent $event
	*/
	function OnResetPassword(&$event)
	{
	$user_object =& $this->Application->recallObject('u.forgot');

	if($user_object->Load($this->Application->RecallVar('tmp_user_id'))){

	$this->Application->EmailEventUser('USER.PSWDC', $user_object->GetDBField("PortalUserId"));
	$event->redirect = $this->Application->GetVar('template_success');

	$m_cat_id = $this->Application->findModule('Name', 'In-Commerce', 'RootCat');
	$this->Application->SetVar('m_cat_id', $m_cat_id);
	$event->SetRedirectParam('pass', 'm');
	}
	}

	function OnResetPasswordConfirmed(&$event)
	{
	// used for error reporting only -> rewrite code + theme (by Alex)
	$user_current_object =& $this->Application->recallObject('u', null, Array('skip_autoload' => true));// TODO: change theme too
	/* @var $user_current_object UsersItem */

	$passed_key = trim($this->Application->GetVar('user_key'));

	if (!$passed_key) {
	$event->redirect_params = Array('opener' => 's', 'pass' => 'all');
	$event->redirect = false;

	$user_current_object->SetError('PwResetConfirm', 'code_is_not_valid', 'lu_code_is_not_valid');
	}

	$user_object =& $this->Application->recallObject('u.forgot', null, Array('skip_autoload' => true));
	/* @var $user_object UsersItem */

	$user_object->Load($passed_key, 'PwResetConfirm');

	if ($user_object->isLoaded()) {
	$exp_time = $user_object->GetDBField('PwRequestTime') + 3600;
	$user_object->SetDBField('PwResetConfirm', '');
	$user_object->SetDBField('PwRequestTime', 0);

	if ($exp_time > adodb_mktime()) {
	$newpw = makepassword4();

	$this->Application->StoreVar('password', $newpw);

	$user_object->SetField('Password', $newpw);
	$user_object->SetField('VerifyPassword', $newpw);

	$user_object->SetDBField('PassResetTime', adodb_mktime());
	$user_object->SetDBField('PwResetConfirm', '');
	$user_object->SetDBField('PwRequestTime', 0);
	$user_object->Update();

	$this->Application->SetVar('ForgottenPassword', $newpw);

	$email_event_user =& $this->Application->EmailEventUser('USER.PSWD', $user_object->GetDBField('PortalUserId'));
	$email_event_admin =& $this->Application->EmailEventAdmin('USER.PSWD');

	$this->Application->DeleteVar('ForgottenPassword');

	if ($email_event_user->status == erSUCCESS) {
	$event->redirect_params = array('opener' => 's', 'pass' => 'all');
	$event->redirect = $this->Application->GetVar('template_success');
	}
	} else {
	$user_current_object->SetError('PwResetConfirm', 'code_expired', 'lu_code_expired');
	$event->redirect = false;
	}
	} else {
	$user_current_object->SetError('PwResetConfirm', 'code_is_not_valid', 'lu_code_is_not_valid');
	$event->redirect = false;
	}
	}

	function OnUpdate(&$event)
	{
	parent::OnUpdate($event);

	$this->setNextTemplate($event);
	}

	/**
	* Checks state against country
	*
	* @param kEvent $event
	*/
	function OnBeforeItemUpdate(&$event)
	{
	parent::OnBeforeItemUpdate($event);

	$cs_helper =& $this->Application->recallObject('CountryStatesHelper');
	/* @var $cs_helper kCountryStatesHelper */

	$cs_helper->CheckStateField($event, 'State', 'Country');
	$cs_helper->PopulateStates($event, 'State', 'Country');

	$object =& $event->getObject();
	/* @var $object UsersItem */

	$object->setLogin();
	}

	/**
	* Enter description here...
	*
	* @param kEvent $event
	*/
	function setNextTemplate(&$event)
	{
	if ($this->Application->isAdmin) {
	return ;
	}

	$event->redirect_params['opener'] = 's';
	$object =& $event->getObject();

	if ($object->GetDBField('Status') == STATUS_ACTIVE) {
	$next_template = $this->Application->GetVar('next_template');

	if ($next_template) {
	$event->redirect = $next_template;
	}
	}
	}

	/**
	* Delete users from groups if their membership is expired
	*
	* @param kEvent $event
	*/
	function OnCheckExpiredMembership(&$event)
	{
	// send pre-expiration reminders: begin
	$pre_expiration = adodb_mktime() + $this->Application->ConfigValue('User_MembershipExpirationReminder') * 3600 * 24;
	$sql = 'SELECT PortalUserId, GroupId
	FROM '.TABLE_PREFIX.'UserGroup
	WHERE (MembershipExpires IS NOT NULL) AND (ExpirationReminderSent = 0) AND (MembershipExpires < '.$pre_expiration.')';

	$skip_clause = $event->getEventParam('skip_clause');
	if ($skip_clause) {
	$sql .= ' AND !('.implode(') AND !(', $skip_clause).')';
	}

	$records = $this->Conn->Query($sql);
	if ($records) {
	$conditions = Array();
	foreach ($records as $record) {
	$email_event_user =& $this->Application->EmailEventUser('USER.MEMBERSHIP.EXPIRATION.NOTICE', $record['PortalUserId']);
	$email_event_admin =& $this->Application->EmailEventAdmin('USER.MEMBERSHIP.EXPIRATION.NOTICE');
	$conditions[] = '(PortalUserId = '.$record['PortalUserId'].' AND GroupId = '.$record['GroupId'].')';
	}
	$sql = 'UPDATE '.TABLE_PREFIX.'UserGroup
	SET ExpirationReminderSent = 1
	WHERE '.implode(' OR ', $conditions);
	$this->Conn->Query($sql);
	}
	// send pre-expiration reminders: end

	// remove users from groups with expired membership: begin
	$sql = 'SELECT PortalUserId
	FROM '.TABLE_PREFIX.'UserGroup
	WHERE (MembershipExpires IS NOT NULL) AND (MembershipExpires < '.adodb_mktime().')';
	$user_ids = $this->Conn->GetCol($sql);
	if ($user_ids) {
	foreach ($user_ids as $id) {
	$email_event_user =& $this->Application->EmailEventUser('USER.MEMBERSHIP.EXPIRED', $id);
	$email_event_admin =& $this->Application->EmailEventAdmin('USER.MEMBERSHIP.EXPIRED');
	}
	}
	$sql = 'DELETE FROM '.TABLE_PREFIX.'UserGroup
	WHERE (MembershipExpires IS NOT NULL) AND (MembershipExpires < '.adodb_mktime().')';
	$this->Conn->Query($sql);
	// remove users from groups with expired membership: end
	}

	/**
	* Enter description here...
	*
	* @param kEvent $event
	*/
	function OnRefreshForm(&$event)
	{
	$event->redirect = false;
	$item_info = $this->Application->GetVar($event->Prefix_Special);
	list($id, $fields) = each($item_info);

	$object =& $event->getObject( Array('skip_autoload' => true) );
	$object->setID($id);
	$object->IgnoreValidation = true;
	$object->SetFieldsFromHash($fields);
	}

	/**
	* Sets persistant variable
	*
	* @param kEvent $event
	*/
	function OnSetPersistantVariable(&$event)
	{
	$field = $this->Application->GetVar('field');
	$value = $this->Application->GetVar('value');
	$this->Application->StorePersistentVar($field, $value);

	$force_tab = $this->Application->GetVar('SetTab');
	if ($force_tab) {
	$this->Application->StoreVar('force_tab', $force_tab);
	}
	}

	/**
	* Overwritten to return user from order by special .ord
	*
	* @param kEvent $event
	*/
	function getPassedID(&$event)
	{
	switch ($event->Special) {
	case 'ord':
	$order =& $this->Application->recallObject('ord');
	/* @var $order OrdersItem */

	$id = $order->GetDBField('PortalUserId');
	break;

	case 'profile':
	$id = $this->Application->GetVar('user_id');
	if (!$id) {
	// if none user_id given use current user id
	$id = $this->Application->RecallVar('user_id');
	}
	break;

	default:
	$id = parent::getPassedID($event);
	break;
	}

	return $id;
	}

	/**
	* Allows to change root password
	*
	* @param kEvent $event
	*/
	function OnUpdateRootPassword(&$event)
	{
	return $this->OnUpdatePassword($event);
	}

	/**
	* Allows to change root password
	*
	* @param kEvent $event
	*/
	function OnUpdatePassword(&$event)
	{
	$items_info = $this->Application->GetVar( $event->getPrefixSpecial(true) );
	if (!$items_info) return ;
	list ($id, $field_values) = each($items_info);
	$user_id = $this->Application->RecallVar('user_id');
	if ($id == $user_id && ($user_id > 0 \|\| $user_id == -1)) {
	$user_dummy =& $this->Application->recallObject($event->Prefix.'.-item', null, Array('skip_autoload' => true));
	/* @var $user_dummy kDBItem */

	$user_dummy->Load($id);
	$status_field = array_shift($this->Application->getUnitOption($event->Prefix, 'StatusField'));

	if ($user_dummy->GetDBField($status_field) != STATUS_ACTIVE) {
	// not active user is not allowed to update his record (he could not activate himself manually)
	return false;
	}
	}

	if ($user_id == -1) {
	$object =& $event->getObject( Array('skip_autoload' => true) );
	/* @var $object UsersItem */

	// put salt to user's config
	$field_options = $object->GetFieldOptions('RootPassword');
	$field_options['salt'] = 'b38';
	$object->SetFieldOptions('RootPassword', $field_options);
	$verify_options = $object->GetFieldOptions('VerifyRootPassword');
	$verify_options['salt'] = 'b38';
	$object->SetFieldOptions('VerifyRootPassword', $verify_options);

	// this is internal hack to allow root/root passwords for dev
	if ($this->Application->isDebugMode() && $field_values['RootPassword'] == 'root') {
	$this->Application->ConfigHash['Min_Password'] = 4;
	}

	$this->RemoveRequiredFields($object);
	$object->SetDBField('RootPassword', $this->Application->ConfigValue('RootPass'));
	$object->SetFieldsFromHash($field_values);
	$object->setID(-1);
	$status = $object->Validate();
	if ($status) {
	// validation on, password match too
	$fields_hash = Array (
	'VariableValue' => $object->GetDBField('RootPassword')
	);
	$conf_table = $this->Application->getUnitOption('conf', 'TableName');
	$this->Conn->doUpdate($fields_hash, $conf_table, 'VariableName = "RootPass"');
	$event->SetRedirectParam('opener', 'u');
	}
	else {
	$event->status = erFAIL;
	$event->redirect = false;
	return;
	}
	}
	else {
	$object =& $event->getObject();
	$object->SetFieldsFromHash($field_values);

	if (!$object->Update()) {
	$event->status = erFAIL;
	$event->redirect = false;
	}
	}

	$event->SetRedirectParam('opener', 'u');
	$event->redirect == true;
	}

	/**
	* Apply custom processing to item
	*
	* @param kEvent $event
	*/
	function customProcessing(&$event, $type)
	{
	if ($event->Name == 'OnCreate' && $type == 'before') {
	$object =& $event->getObject();
	/* @var $object kDBItem */

	// if auto password has not been set already - store real one - to be used in email events
	if (!$this->Application->GetVar('user_password')) {
	$this->Application->SetVar('user_password', $object->GetDirtyField('Password'));
	$object->SetDBField('Password_plain', $object->GetDirtyField('Password'));
	}

	// validate here, because subscribing procedure should not validate captcha code
	if ($this->Application->ConfigValue('RegistrationCaptcha')) {
	$captcha_helper =& $this->Application->recallObject('CaptchaHelper');
	/* @var $captcha_helper kCaptchaHelper */

	$captcha_helper->validateCode($event, false);
	}
	}
	}

	function OnMassResetSettings(&$event)
	{
	if ($this->Application->CheckPermission('SYSTEM_ACCESS.READONLY', 1)) {
	$event->status = erFAIL;
	return;
	}

	$ids = $this->StoreSelectedIDs($event);

	$default_user_id = $this->Application->ConfigValue('DefaultSettingsUserId');
	if (in_array($default_user_id, $ids)) {
	array_splice($ids, array_search($default_user_id, $ids), 1);
	}
	if ($ids) {
	$q = 'DELETE FROM '.TABLE_PREFIX.'PersistantSessionData WHERE PortalUserId IN ('.join(',', $ids).') AND
	(VariableName LIKE "%_columns_%"
	OR
	VariableName LIKE "%_filter%"
	OR
	VariableName LIKE "%_PerPage%")';
	$this->Conn->Query($q);
	}
	$this->clearSelectedIDs($event);
	}

	/**
	* Checks, that currently loaded item is allowed for viewing (non permission-based)
	*
	* @param kEvent $event
	* @return bool
	*/
	function checkItemStatus(&$event)
	{
	$object =& $event->getObject();
	if (!$object->isLoaded()) {
	return true;
	}

	$virtual_users = Array (-1, -2); // root, Guest
	return ($object->GetDBField('Status') == STATUS_ACTIVE) \|\| in_array($object->GetID(), $virtual_users);
	}

	/**
	* Sends approved/declined email event on user status change
	*
	* @param kEvent $event
	*/
	function OnAfterItemUpdate(&$event)
	{
	$this->saveUserImages($event);

	$object =& $event->getObject();
	/* @var $object UsersItem */

	if (!$this->Application->isAdmin \|\| $object->IsTempTable()) {
	return ;
	}

	$this->sendStatusChangeEvent($object->GetID(), $object->GetOriginalField('Status'), $object->GetDBField('Status'));
	}

	/**
	* Stores user's original Status before overwriting with data from temp table
	*
	* @param kEvent $event
	*/
	function OnBeforeDeleteFromLive(&$event)
	{
	$user_status = $this->Application->GetVar('user_status');
	if (!$user_status) {
	$user_status = Array ();
	}

	$user_id = $event->getEventParam('id');
	if ($user_id > 0) {
	$user_status[$user_id] = $this->getUserStatus($user_id);
	$this->Application->SetVar('user_status', $user_status);
	}
	}

	/**
	* Sends approved/declined email event on user status change (in temp tables during editing)
	*
	* @param kEvent $event
	*/
	function OnAfterCopyToLive(&$event)
	{
	$temp_id = $event->getEventParam('temp_id');
	if ($temp_id == 0) {
	// this is new user create, don't send email events
	return ;
	}

	$new_status = $this->getUserStatus($temp_id);
	$user_status = $this->Application->GetVar('user_status');

	$this->sendStatusChangeEvent($temp_id, $user_status[$temp_id], $new_status);
	}

	/**
	* Returns user status (active, pending, disabled) based on ID and temp mode setting
	*
	* @param int $user_id
	* @return int
	*/
	function getUserStatus($user_id)
	{
	$id_field = $this->Application->getUnitOption($this->Prefix, 'IDField');
	$table_name = $this->Application->getUnitOption($this->Prefix, 'TableName');

	$sql = 'SELECT Status
	FROM '.$table_name.'
	WHERE '.$id_field.' = '.$user_id;
	return $this->Conn->GetOne($sql);
	}

	/**
	* Sends approved/declined email event on user status change
	*
	* @param int $user_id
	* @param int $prev_status
	* @param int $new_status
	*/
	function sendStatusChangeEvent($user_id, $prev_status, $new_status)
	{
	$status_events = Array (
	STATUS_ACTIVE => 'USER.APPROVE',
	STATUS_DISABLED => 'USER.DENY',
	);
	$email_event = isset($status_events[$new_status]) ? $status_events[$new_status] : false;

	if (($prev_status != $new_status) && $email_event) {
	$this->Application->EmailEventUser($email_event, $user_id);
	$this->Application->EmailEventAdmin($email_event);
	}

	// deletes sessions from users, that are no longer active
	if (($prev_status != $new_status) && ($new_status != STATUS_ACTIVE)) {
	$sql = 'SELECT SessionKey
	FROM ' . TABLE_PREFIX . 'UserSession
	WHERE PortalUserId = ' . $user_id;
	$session_ids = $this->Conn->GetCol($sql);

	$this->Application->Session->DeleteSessions($session_ids);
	}
	}

	/**
	* OnAfterConfigRead for users
	*
	* @param kEvent $event
	*/
	function OnAfterConfigRead(&$event)
	{
	parent::OnAfterConfigRead($event);

	// 1. arrange user registration countries
	$first_country = $this->Application->ConfigValue('User_Default_Registration_Country');
	if ($first_country) {
	// update user country dropdown sql
	$fields = $this->Application->getUnitOption($event->Prefix, 'Fields');
	$fields['Country']['options_sql'] = preg_replace('/ORDER BY (.*)/', 'ORDER BY IF (CountryStateId = '.$first_country.', 1, 0) DESC, \\1', $fields['Country']['options_sql']);
	$this->Application->setUnitOption($event->Prefix, 'Fields', $fields);
	}

	// 2. set default user registration group
	$virtual_fields = $this->Application->getUnitOption($event->Prefix, 'VirtualFields');
	$virtual_fields['UserGroup']['default'] = $this->Application->ConfigValue('User_NewGroup');
	$this->Application->setUnitOption($event->Prefix, 'VirtualFields', $virtual_fields);

	// 3. allow avatar upload on Front-End
	$file_helper =& $this->Application->recallObject('FileHelper');
	/* @var $file_helper FileHelper */

	$file_helper->createItemFiles($event->Prefix, true); // create image fields

	if ($this->Application->isAdminUser) {
	// 4. when in administrative console, then create all users with Active status
	$fields = $this->Application->getUnitOption($event->Prefix, 'Fields');
	// $fields['Password']['required'] = 1; // set password required (will broke approve/decline buttons)
	$fields['Status']['default'] = STATUS_ACTIVE;
	$this->Application->setUnitOption($event->Prefix, 'Fields', $fields);

	// 5. remove groups tab on editing forms when AdvancedUserManagement config variable not set
	if (!$this->Application->ConfigValue('AdvancedUserManagement')) {
	$edit_tab_presets = $this->Application->getUnitOption($event->Prefix, 'EditTabPresets');

	foreach ($edit_tab_presets as $preset_name => $preset_tabs) {
	if (array_key_exists('groups', $preset_tabs)) {
	unset($edit_tab_presets[$preset_name]['groups']);

	if (count($edit_tab_presets[$preset_name]) == 1) {
	// only 1 tab left -> remove it too
	$edit_tab_presets[$preset_name] = Array ();
	}
	}
	}

	$this->Application->setUnitOption($event->Prefix, 'EditTabPresets', $edit_tab_presets);
	}
	}

	}

	/**
	* OnMassCloneUsers
	*
	* @param kEvent $event
	*/
	function OnMassCloneUsers(&$event)
	{
	if ($this->Application->CheckPermission('SYSTEM_ACCESS.READONLY', 1)) {
	$event->status = erFAIL;
	return;
	}

	$event->status=erSUCCESS;
	$ids = $this->StoreSelectedIDs($event);

	$this->Application->SetVar('skip_set_primary', 1); // otherwise it will default primary group, search for skip_set_primary above
	$temp_handler =& $this->Application->recallObject($event->Prefix.'_TempHandler', 'kTempTablesHandler');
	/* @var $temp_handler kTempTablesHandler */
	$cloned_users = $temp_handler->CloneItems($event->Prefix, '', $ids);
	$this->clearSelectedIDs($event);
	}

	/**
	* When cloning users, reset password (set random)
	*
	* @param kEvent $event
	*/
	function OnBeforeClone(&$event)
	{
	$object =& $event->getObject();
	/* @var $object kDBItem */
	$object->setRequired('Password', 0);
	$object->setRequired('VerifyPassword', 0);
	$object->SetDBField('Password', rand(100000000, 999999999));
	$object->SetDBField('CreatedOn', adodb_mktime());
	$object->SetDBField('ResourceId', false); // this will reset it

	// change email cause it should be unique
	$object->NameCopy(array(), $object->GetID(), 'Email', 'copy%1$s.%2$s');

	$object->UpdateFormattersSubFields();
	}

	/**
	* Copy user groups after copying user
	*
	* @param kEvent $event
	*/
	function OnAfterClone(&$event)
	{
	$id = $event->getEventParam('id');
	$original_id = $event->getEventParam('original_id');

	$sql = 'INSERT '.TABLE_PREFIX."UserGroup SELECT $id, GroupId, MembershipExpires, PrimaryGroup, 0 FROM ".TABLE_PREFIX."UserGroup WHERE PortalUserId = $original_id";
	$this->Conn->Query($sql);
	}

	/**
	* Saves selected ids to session
	*
	* @param kEvent $event
	*/
	function OnSaveSelected(&$event)
	{
	$this->StoreSelectedIDs($event);

	// remove current ID, otherwise group selector will use it in filters
	$this->Application->DeleteVar($event->getPrefixSpecial(true).'_id');
	}

	/**
	* Adds selected link to listing
	*
	* @param kEvent $event
	*/
	function OnProcessSelected(&$event)
	{
	$event->SetRedirectParam('opener', 'u');
	$user_ids = $this->getSelectedIDs($event, true);
	$this->clearSelectedIDs($event);

	$dst_field = $this->Application->RecallVar('dst_field');
	if ($dst_field != 'PrimaryGroupId') {
	return ;
	}

	$group_ids = $this->Application->GetVar('g');
	$primary_group_id = $group_ids ? array_shift( array_keys($group_ids) ) : false;

	if (!$user_ids \|\| !$primary_group_id) {
	return ;
	}

	$table_name = $this->Application->getUnitOption('ug', 'TableName');

	$sql = 'SELECT PortalUserId
	FROM '.$table_name.'
	WHERE (GroupId = '.$primary_group_id.') AND (PortalUserId IN ('.implode(',', $user_ids).'))';
	$existing_members = $this->Conn->GetCol($sql);

	// 1. reset primary group mark
	$sql = 'UPDATE '.$table_name.'
	SET PrimaryGroup = 0
	WHERE PortalUserId IN ('.implode(',', $user_ids).')';
	$this->Conn->Query($sql);

	foreach ($user_ids as $user_id) {
	if (in_array($user_id, $existing_members)) {
	// 2. already member of that group -> just make primary
	$sql = 'UPDATE '.$table_name.'
	SET PrimaryGroup = 1
	WHERE (PortalUserId = '.$user_id.') AND (GroupId = '.$primary_group_id.')';
	$this->Conn->Query($sql);
	}
	else {
	// 3. not member of that group -> make member & make primary
	$fields_hash = Array (
	'GroupId' => $primary_group_id,
	'PortalUserId' => $user_id,
	'PrimaryGroup' => 1,
	);
	$this->Conn->doInsert($fields_hash, $table_name);
	}
	}
	}

	/**
	* Loads user images
	*
	* @param kEvent $event
	*/
	function OnAfterItemLoad(&$event)
	{
	parent::OnAfterItemLoad($event);

	// linking existing images for item with virtual fields
	$image_helper =& $this->Application->recallObject('ImageHelper');
	/* @var $image_helper ImageHelper */

	$object =& $event->getObject();
	/* @var $object kDBItem */

	$image_helper->LoadItemImages($object);

	$cs_helper =& $this->Application->recallObject('CountryStatesHelper');
	/* @var $cs_helper kCountryStatesHelper */

	$cs_helper->PopulateStates($event, 'State', 'Country');
	}

	/**
	* Save user images
	*
	* @param kEvent $event
	*/
	function saveUserImages(&$event)
	{
	if (!$this->Application->isAdmin) {
	$image_helper =& $this->Application->recallObject('ImageHelper');
	/* @var $image_helper ImageHelper */

	$object =& $event->getObject();
	/* @var $object kDBItem */

	// process image upload in virtual fields
	$image_helper->SaveItemImages($object);
	}
	}

	/**
	- * Checks, if given user fields matches at least one of defined ban rules
	- *
	- * @param kDBItem $object
	- * @return bool
	- */
	- function checkBanRules(&$object)
	- {
	- $table = $this->Application->getUnitOption('ban-rule', 'TableName');
	- if (!$this->Conn->TableFound($table)) {
	- // when ban table not found -> assume user is ok by default
	- return true;
	- }
	-
	- $sql = 'SELECT *
	- FROM '.$table.'
	- WHERE ItemType = 6 AND Status = ' . STATUS_ACTIVE . '
	- ORDER BY Priority DESC';
	- $rules = $this->Conn->Query($sql);
	-
	- $found = false;
	- foreach ($rules as $rule) {
	- $field = $rule['ItemField'];
	-
	- $this_value = strtolower( $object->GetDBField($field) );
	- $test_value = strtolower( $rule['ItemValue'] );
	-
	- switch ($rule['ItemVerb']) {
	- /*case 0: // any
	- $found = true;
	- break;*/
	-
	- case 1: // is
	- if ($this_value == $test_value) {
	- $found = true;
	- }
	- break;
	-
	- /*case 2: // is not
	- if ($this_value != $test_value) {
	- $found = true;
	- }
	- break;*/
	-
	- case 3: // contains
	- if (strstr($this_value, $test_value)) {
	- $found = true;
	- }
	- break;
	-
	-
	- /*case 4: // not contains
	- if (!strstr($this_value, $test_value)) {
	- $found = true;
	- }
	- break;
	-
	- case 5: // Greater Than
	- if ($test_value > $this_value) {
	- $found = true;
	- }
	- break;
	-
	- case 6: // Less Than
	- if ($test_value < $this_value) {
	- $found = true;
	- }
	- break;
	-
	- case 7: // exists
	- if (strlen($this_value) > 0) {
	- $found = true;
	- }
	- break;
	-
	- case 8: // unique
	- if ($this->ValueExists($field, $this_value)) {
	- $found = true;
	- }
	- break;*/
	- }
	-
	- if ($found) {
	- break;
	- }
	- }
	-
	- return !$found;
	- }
	-
	- /**
	* Makes password required for new users
	*
	* @param kEvent $event
	*/
	function OnPreCreate(&$event)
	{
	parent::OnPreCreate($event);

	if ($event->status == erSUCCESS) {
	$this->_makePasswordRequired($event);
	}
	}

	/**
	* Makes password required for new users
	*
	* @param kEvent $event
	*/
	function OnNew(&$event)
	{
	parent::OnNew($event);

	if ($event->status == erSUCCESS) {
	$this->_makePasswordRequired($event);
	}
	}

	/**
	* Makes password required for new users
	*
	* @param kEvent $event
	*/
	function _makePasswordRequired(&$event)
	{
	$object =& $event->getObject();
	/* @var $object kDBItem */

	$required_fields = Array ('Password', 'Password_plain', 'VerifyPassword', 'VerifyPassword_plain');
	foreach ($required_fields as $required_field) {
	$object->setRequired($required_field);
	}
	}

	/**
	* Load item if id is available
	*
	* @param kEvent $event
	*/
	function LoadItem(&$event)
	{
	$id = $this->getPassedID($event);

	if ($id < 0) {
	// when root, guest and so on

	$object =& $event->getObject();
	/* @var $object kDBItem */

	$object->Clear($id);
	return ;
	}

	parent::LoadItem($event);
	}
	}
	Index: branches/5.1.x/core/units/helpers/user_helper.php
	===================================================================
	--- branches/5.1.x/core/units/helpers/user_helper.php (nonexistent)
	+++ branches/5.1.x/core/units/helpers/user_helper.php (revision 13471)
	@@ -0,0 +1,408 @@
	+<?php
	+/**
	+* @version $Id$
	+* @package In-Portal
	+* @copyright Copyright (C) 1997 - 2009 Intechnic. All rights reserved.
	+* @license GNU/GPL
	+* In-Portal is Open Source software.
	+* This means that this software may have been modified pursuant
	+* the GNU General Public License, and as distributed it includes
	+* or is derivative of works licensed under the GNU General Public License
	+* or other free or open source software licenses.
	+* See http://www.in-portal.org/license for copyright notices and details.
	+*/
	+
	+ defined('FULL_PATH') or die('restricted access!');
	+
	+ class UserHelper extends kHelper {
	+
	+ /**
	+ * Event to be used during login processings
	+ *
	+ * @var kEvent
	+ */
	+ var $event = null;
	+
	+ /**
	+ * Performs user login and returns the result
	+ *
	+ * @param string $username
	+ * @param string $password
	+ * @param bool $dry_run
	+ * @param bool $remeber_login
	+ * @param string $remember_login_cookie
	+ * @return int
	+ */
	+ function loginUser($username, $password, $dry_run = false, $remeber_login = false, $remember_login_cookie = '')
	+ {
	+ if (!isset($this->event)) {
	+ $this->event = new kEvent('u:OnLogin');
	+ }
	+
	+ if (!$password && !$remember_login_cookie) {
	+ return LOGIN_RESULT_INVALID_PASSWORD;
	+ }
	+
	+ $object =& $this->getUserObject();
	+
	+ // process "Save Username" checkbox
	+ if ($this->Application->isAdmin) {
	+ $save_username = $this->Application->GetVar('cb_save_username') ? $username : '';
	+ $this->Application->Session->SetCookie('save_username', $save_username, strtotime('+1 year'));
	+
	+ // cookie will be set on next refresh, but refresh won't occur if
	+ // login error present, so duplicate cookie in kHTTPQuery
	+ $this->Application->SetVar('save_username', $save_username);
	+ }
	+
	+ // logging in "root" (admin only)
	+ $super_admin = ($username == 'super-root') && $this->verifySuperAdmin();
	+ if ($this->Application->isAdmin && ($username == 'root') \|\| ($super_admin && $username == 'super-root')) {
	+ $root_password = $this->Application->ConfigValue('RootPass');
	+ $password_formatter =& $this->Application->recallObject('kPasswordFormatter');
	+
	+ if ($root_password != $password_formatter->EncryptPassword($password, 'b38')) {
	+ return LOGIN_RESULT_INVALID_PASSWORD;
	+ }
	+
	+ if (!$dry_run) {
	+ $user_id = -1;
	+ $object->Load($user_id);
	+ $object->SetDBField('Login', 'root');
	+ $this->Application->StoreVar('user_id', $user_id);
	+ $this->Application->SetVar('u.current_id', $user_id);
	+ $this->Application->Session->SetField('PortalUserId', $user_id);
	+
	+ $this->Application->LoadPersistentVars();
	+
	+ if ($super_admin) {
	+ $this->Application->StoreVar('super_admin', 1);
	+ }
	+
	+ $this->Application->HandleEvent($dummy, 'session-log:OnStartSession');
	+ $this->_processLoginRedirect('root', $password);
	+ $this->_processInterfaceLanguage();
	+ }
	+
	+ return LOGIN_RESULT_OK;
	+ }
	+
	+ $user_id = $this->getUserId($username, $password, $remember_login_cookie);
	+
	+ if ($user_id) {
	+ $object->Load($user_id);
	+
	+ if (!$this->checkBanRules($object)) {
	+ return LOGIN_RESULT_BANNED;
	+ }
	+
	+ if ($object->GetDBField('Status') == STATUS_ACTIVE) {
	+ $groups = $object->getMembershipGroups(true);
	+ if (!$groups) {
	+ $groups = Array();
	+ }
	+
	+ // store groups, because kApplication::CheckPermission will use them!
	+ array_push($groups, $this->Application->ConfigValue('User_LoggedInGroup') );
	+ $this->Application->StoreVar( 'UserGroups', implode(',', $groups) );
	+
	+ if (!$this->Application->CheckPermission($this->Application->isAdmin ? 'ADMIN' : 'LOGIN', 1)) {
	+ return LOGIN_RESULT_NO_PERMISSION;
	+ }
	+
	+ if (!$dry_run) {
	+ $this->Application->StoreVar('user_id', $user_id);
	+ $this->Application->SetVar('u.current_id', $user_id);
	+ $this->Application->Session->SetField('PortalUserId', $user_id);
	+ $this->Application->Session->SetField('GroupList', implode(',', $groups));
	+
	+ $this->Application->LoadPersistentVars();
	+
	+ if (!$remember_login_cookie) {
	+ // don't change last login time when auto-login is used
	+ $this_login = (int)$this->Application->RecallPersistentVar('ThisLogin');
	+ $this->Application->StorePersistentVar('LastLogin', $this_login);
	+ $this->Application->StorePersistentVar('ThisLogin', adodb_mktime());
	+ }
	+
	+ if ($remeber_login) {
	+ // remember username & password when "Remember Login" checkbox us checked (when user is using login form on Front-End)
	+ $remember_login_cookie = $username . '\|' . md5($password);
	+ $this->Application->Session->SetCookie('remember_login', $remember_login_cookie, strtotime('+1 month'));
	+ }
	+
	+ $this->Application->HandleEvent($dummy, 'session-log:OnStartSession');
	+
	+ if (!$remember_login_cookie) {
	+ $this->_processLoginRedirect($username, $password);
	+ $this->_processInterfaceLanguage();
	+ }
	+ }
	+
	+ return LOGIN_RESULT_OK;
	+ }
	+ else {
	+ $pending_template = $this->Application->GetVar('pending_disabled_template');
	+
	+ if ($pending_template !== false && !$dry_run) {
	+ // when user found, but it's not yet approved redirect hit to notification template
	+ $this->event->redirect = $pending_template;
	+ }
	+ else {
	+ // when no notification template given return an error
	+ return LOGIN_RESULT_INVALID_PASSWORD;
	+ }
	+ }
	+ }
	+
	+ if (!$dry_run) {
	+ $this->event->SetRedirectParam('pass', 'all');
	+// $this->event->SetRedirectParam('pass_category', 1); // to test
	+ }
	+
	+ return LOGIN_RESULT_INVALID_PASSWORD;
	+ }
	+
	+ /**
	+ * Performs user logout
	+ *
	+ */
	+ function logoutUser()
	+ {
	+ if (!isset($this->event)) {
	+ $this->event = new kEvent('u:OnLogout');
	+ }
	+
	+ $sync_manager =& $this->Application->recallObjectP('UsersSyncronizeManager', null, Array(), 'InPortalSyncronize');
	+ $sync_manager->performAction('LogoutUser');
	+
	+ $this->Application->HandleEvent($dummy, 'session-log:OnEndSession');
	+
	+ $user_id = -2;
	+ $this->Application->SetVar('u.current_id', $user_id);
	+ $object =& $this->Application->recallObject('u.current', null, Array('skip_autoload' => true));
	+ $object->Load($user_id);
	+
	+ $this->Application->DestroySession();
	+
	+ $this->Application->StoreVar('user_id', $user_id, true);
	+ $this->Application->Session->SetField('PortalUserId', $user_id);
	+
	+ $group_list = $this->Application->ConfigValue('User_GuestGroup') . ',' . $this->Application->ConfigValue('User_LoggedInGroup');
	+ $this->Application->StoreVar('UserGroups', $group_list, true);
	+ $this->Application->Session->SetField('GroupList', $group_list);
	+
	+ if ($this->Application->ConfigValue('UseJSRedirect')) {
	+ $this->event->SetRedirectParam('js_redirect', 1);
	+ }
	+
	+ $this->Application->resetCounters('UserSession');
	+ $this->Application->Session->SetCookie('remember_login', '', strtotime('-1 hour'));
	+
	+ $this->event->SetRedirectParam('pass', 'all');
	+ }
	+
	+ /**
	+ * Returns user id based on given criteria
	+ *
	+ * @param string $username
	+ * @param string $password
	+ * @param string $remember_login_cookie
	+ * @return int
	+ */
	+ function getUserId($username, $password, $remember_login_cookie)
	+ {
	+ $password = md5($password);
	+
	+ if ($remember_login_cookie) {
	+ list ($username, $password) = explode('\|', $remember_login_cookie); // 0 - username, 1 - md5(password)
	+ }
	+
	+ $sql = 'SELECT PortalUserId
	+ FROM ' . TABLE_PREFIX . 'PortalUser
	+ WHERE (Email = %1$s OR Login = %1$s) AND (Password = %2$s)';
	+ return $this->Conn->GetOne( sprintf($sql, $this->Conn->qstr($username), $this->Conn->qstr($password) ) );
	+ }
	+
	+ /**
	+ * Process all required data and redirect logged-in user
	+ *
	+ * @param string $username
	+ * @param string $password
	+ */
	+ function _processLoginRedirect($username, $password)
	+ {
	+ // set next template
	+ $next_template = $this->Application->GetVar('next_template');
	+
	+ if ($next_template) {
	+ $this->event->redirect = $next_template;
	+ }
	+
	+ // process IIS redirect
	+ if ($this->Application->ConfigValue('UseJSRedirect')) {
	+ $this->event->SetRedirectParam('js_redirect', 1);
	+ }
	+
	+ // syncronize login
	+ $sync_manager =& $this->Application->recallObjectP('UsersSyncronizeManager', null, Array(), 'InPortalSyncronize');
	+ $sync_manager->performAction('LoginUser', $username, $password);
	+
	+ // reset counters
	+ $this->Application->resetCounters('UserSession');
	+ }
	+
	+ /**
	+ * Sets correct interface language after sucessful login, based on user settings
	+ *
	+ * @param kEvent $event
	+ */
	+ function _processInterfaceLanguage()
	+ {
	+ if (!$this->Application->isAdmin) {
	+ return ;
	+ }
	+
	+ $is_root = $this->Application->RecallVar('user_id') == -1;
	+
	+ $object =& $this->getUserObject();
	+
	+ $user_language_id = $is_root ? $this->Application->RecallPersistentVar('AdminLanguage') : $object->GetDBField('AdminLanguage');
	+
	+ $sql = 'SELECT LanguageId, IF(LanguageId = ' . (int)$user_language_id . ', 2, AdminInterfaceLang) AS SortKey
	+ FROM ' . TABLE_PREFIX . 'Language
	+ WHERE Enabled = 1
	+ HAVING SortKey <> 0
	+ ORDER BY SortKey DESC';
	+ $language_info = $this->Conn->GetRow($sql);
	+ $language_id = $language_info && $language_info['LanguageId'] ? $language_info['LanguageId'] : $user_language_id;
	+
	+ if ($user_language_id != $language_id) {
	+ // first admin login OR language was delelted or disabled
	+ if ($is_root) {
	+ $this->Application->StorePersistentVar('AdminLanguage', $language_id);
	+ }
	+ else {
	+ $object->SetDBField('AdminLanguage', $language_id);
	+ $object->Update();
	+ }
	+ }
	+
	+ $this->event->SetRedirectParam('m_lang', $language_id); // data
	+ $this->Application->Session->SetField('Language', $language_id); // interface
	+ }
	+
	+ /**
	+ * Checks that user is allowed to use super admin mode
	+ *
	+ * @return bool
	+ */
	+ function verifySuperAdmin()
	+ {
	+ $sa_mode = ipMatch(defined('SA_IP') ? SA_IP : '');
	+ return $sa_mode \|\| $this->Application->isDebugMode();
	+ }
	+
	+ /**
	+ * Returns user object, used during login processings
	+ *
	+ * @return UsersItem
	+ */
	+ function &getUserObject()
	+ {
	+ $prefix_special = $this->Application->isAdmin ? 'u.current' : 'u'; // "u" used on front not to change theme
	+ $object =& $this->Application->recallObject($prefix_special, null, Array('skip_autoload' => true));
	+
	+ return $object;
	+ }
	+
	+ /**
	+ * Checks, if given user fields matches at least one of defined ban rules
	+ *
	+ * @param kDBItem $object
	+ * @return bool
	+ */
	+ function checkBanRules(&$object)
	+ {
	+ $table = $this->Application->getUnitOption('ban-rule', 'TableName');
	+ if (!$this->Conn->TableFound($table)) {
	+ // when ban table not found -> assume user is ok by default
	+ return true;
	+ }
	+
	+ $sql = 'SELECT *
	+ FROM '.$table.'
	+ WHERE ItemType = 6 AND Status = ' . STATUS_ACTIVE . '
	+ ORDER BY Priority DESC';
	+ $rules = $this->Conn->Query($sql);
	+
	+ $found = false;
	+ foreach ($rules as $rule) {
	+ $field = $rule['ItemField'];
	+
	+ $this_value = strtolower( $object->GetDBField($field) );
	+ $test_value = strtolower( $rule['ItemValue'] );
	+
	+ switch ($rule['ItemVerb']) {
	+ /*case 0: // any
	+ $found = true;
	+ break;*/
	+
	+ case 1: // is
	+ if ($this_value == $test_value) {
	+ $found = true;
	+ }
	+ break;
	+
	+ /*case 2: // is not
	+ if ($this_value != $test_value) {
	+ $found = true;
	+ }
	+ break;*/
	+
	+ case 3: // contains
	+ if (strstr($this_value, $test_value)) {
	+ $found = true;
	+ }
	+ break;
	+
	+
	+ /*case 4: // not contains
	+ if (!strstr($this_value, $test_value)) {
	+ $found = true;
	+ }
	+ break;
	+
	+ case 5: // Greater Than
	+ if ($test_value > $this_value) {
	+ $found = true;
	+ }
	+ break;
	+
	+ case 6: // Less Than
	+ if ($test_value < $this_value) {
	+ $found = true;
	+ }
	+ break;
	+
	+ case 7: // exists
	+ if (strlen($this_value) > 0) {
	+ $found = true;
	+ }
	+ break;
	+
	+ case 8: // unique
	+ if ($this->ValueExists($field, $this_value)) {
	+ $found = true;
	+ }
	+ break;*/
	+ }
	+
	+ if ($found) {
	+ break;
	+ }
	+ }
	+
	+ return !$found;
	+ }
	+ }

	Property changes on: branches/5.1.x/core/units/helpers/user_helper.php
	___________________________________________________________________
	Added: svn:keywords
	## -0,0 +1 ##
	+Id
	\ No newline at end of property
	Index: branches/5.1.x/core/units/helpers/helpers_config.php
	===================================================================
	--- branches/5.1.x/core/units/helpers/helpers_config.php (revision 13470)
	+++ branches/5.1.x/core/units/helpers/helpers_config.php (revision 13471)
	@@ -1,68 +1,69 @@
	<?php
	/**
	* @version $Id$
	* @package In-Portal
	* @copyright Copyright (C) 1997 - 2009 Intechnic. All rights reserved.
	* @license GNU/GPL
	* In-Portal is Open Source software.
	* This means that this software may have been modified pursuant
	* the GNU General Public License, and as distributed it includes
	* or is derivative of works licensed under the GNU General Public License
	* or other free or open source software licenses.
	* See http://www.in-portal.org/license for copyright notices and details.
	*/

	defined('FULL_PATH') or die('restricted access!');

	$config = Array (

	'Prefix' => 'helpers',
	'EventHandlerClass' => Array ('class' => 'kEventHandler', 'file' => '', 'build_event' => 'OnBuild'),

	'RegisterClasses' => Array (
	Array ('pseudo' => 'kMultiLanguageHelper', 'class' => 'kMultiLanguageHelper', 'file' => 'multilanguage_helper.php', 'build_event' => '', 'require_classes' => 'kHelper'),
	Array ('pseudo' => 'SearchHelper', 'class' => 'kSearchHelper', 'file' => 'search_helper.php', 'build_event' => '', 'require_classes' => 'kHelper'),
	Array ('pseudo' => 'SectionsHelper', 'class' => 'kSectionsHelper', 'file' => 'sections_helper.php', 'build_event' => '', 'require_classes' => 'kHelper'),
	Array ('pseudo' => 'PermissionsHelper', 'class' => 'kPermissionsHelper', 'file' => 'permissions_helper.php', 'build_event' => '', 'require_classes' => 'kHelper'),
	Array ('pseudo' => 'ModulesHelper', 'class' => 'kModulesHelper', 'file' => 'modules_helper.php', 'build_event' => '', 'require_classes' => 'kHelper'),
	Array ('pseudo' => 'ModRewriteHelper', 'class' => 'kModRewriteHelper', 'file' => 'mod_rewrite_helper.php', 'build_event' => '', 'require_classes' => 'kHelper'),
	Array ('pseudo' => 'RecursiveHelper', 'class' => 'kRecursiveHelper', 'file' => 'recursive_helper.php', 'build_event' => '', 'require_classes' => 'kHelper'),
	Array ('pseudo' => 'FilenamesHelper', 'class' => 'kFilenamesHelper', 'file' => 'filenames_helper.php', 'build_event' => '', 'require_classes' => 'kHelper'),
	Array ('pseudo' => 'ClipboardHelper', 'class' => 'kClipboardHelper', 'file' => 'clipboard_helper.php', 'build_event' => '', 'require_classes' => 'kHelper'),
	Array ('pseudo' => 'ColumnPickerHelper', 'class' => 'kColumnPickerHelper', 'file' => 'col_picker_helper.php', 'build_event' => '', 'require_classes' => 'kHelper'),
	Array ('pseudo' => 'ThemesHelper', 'class' => 'kThemesHelper', 'file' => 'themes_helper.php', 'build_event' => '', 'require_classes' => 'kHelper'),
	Array ('pseudo' => 'CaptchaHelper', 'class' => 'kCaptchaHelper', 'file' => 'captcha_helper.php', 'build_event' => '', 'require_classes' => 'kHelper'),
	Array ('pseudo' => 'PriorityHelper', 'class' => 'kPriorityHelper', 'file' => 'priority_helper.php', 'build_event' => '', 'require_classes' => 'kHelper'),
	Array ('pseudo' => 'CurlHelper', 'class' => 'kCurlHelper', 'file' => 'curl_helper.php', 'build_event' => '', 'require_classes' => 'kHelper'),
	Array ('pseudo' => 'CountHelper', 'class' => 'kCountHelper', 'file' => 'count_helper.php', 'build_event' => '', 'require_classes' => 'kHelper'),

	Array ('pseudo' => 'ImageHelper', 'class' => 'ImageHelper', 'file' => 'image_helper.php', 'build_event' => '', 'require_classes' => 'kHelper'),
	Array ('pseudo' => 'FileHelper', 'class' => 'FileHelper', 'file' => 'file_helper.php', 'build_event' => '', 'require_classes' => 'kHelper'),
	Array ('pseudo' => 'CategoryHelper', 'class' => 'CategoryHelper', 'file' => 'category_helper.php', 'build_event' => '', 'require_classes' => 'kHelper'),
	Array ('pseudo' => 'CSVHelper', 'class' => 'kCSVHelper', 'file' => 'csv_helper.php', 'build_event' => '', 'require_classes' => 'kHelper'),
	Array ('pseudo' => 'ChartHelper', 'class' => 'kChartHelper', 'file' => 'chart_helper.php', 'build_event' => '', 'require_classes' => 'kHelper'),
	Array ('pseudo' => 'RatingHelper', 'class' => 'RatingHelper', 'file' => 'rating_helper.php', 'build_event' => '', 'require_classes' => 'kHelper'),
	Array ('pseudo' => 'FCKHelper', 'class' => 'fckFCKHelper', 'file' => 'fck_helper.php', 'build_event' => '', 'require_classes' => 'kHelper'),
	Array ('pseudo' => 'SpamHelper', 'class' => 'SpamHelper', 'file' => 'spam_helper.php', 'build_event' => '', 'require_classes' => 'kHelper'),
	Array ('pseudo' => 'TemplateHelper', 'class' => 'TemplateHelper', 'file' => 'template_helper.php', 'build_event' => '', 'require_classes' => 'kHelper'),
	Array ('pseudo' => 'MailingListHelper', 'class' => 'MailingListHelper', 'file' => 'mailing_list_helper.php', 'build_event' => '', 'require_classes' => 'kHelper'),
	Array ('pseudo' => 'JSONHelper', 'class' => 'JSONHelper', 'file' => 'json_helper.php', 'build_event' => '', 'require_classes' => 'kHelper'),
	Array ('pseudo' => 'LanguageImportHelper', 'class' => 'LanguageImportHelper', 'file' => 'language_import_helper.php', 'build_event' => '', 'require_classes' => 'kHelper'),
	Array ('pseudo' => 'SkinHelper', 'class' => 'SkinHelper', 'file' => 'skin_helper.php', 'build_event' => '', 'require_classes' => 'kHelper'),
	Array ('pseudo' => 'SiteConfigHelper', 'class' => 'SiteConfigHelper', 'file' => 'site_config_helper.php', 'build_event' => '', 'require_classes' => 'kHelper'),
	Array ('pseudo' => 'MenuHelper', 'class' => 'MenuHelper', 'file' => 'menu_helper.php', 'build_event' => '', 'require_classes' => 'kHelper'),

	Array ('pseudo' => 'InpCustomFieldsHelper', 'class' => 'InpCustomFieldsHelper', 'file' => 'custom_fields_helper.php', 'build_event' => '', 'require_classes' => 'kHelper'),
	Array ('pseudo' => 'CountryStatesHelper', 'class' => 'kCountryStatesHelper', 'file' => 'country_states_helper.php', 'build_event' => '', 'require_classes' => 'kHelper'),
	Array ('pseudo' => 'BracketsHelper', 'class' => 'kBracketsHelper', 'file' => 'brackets_helper.php', 'build_event' => '', 'require_classes' => 'kHelper'),
	Array ('pseudo' => 'kXMLHelper', 'class' => 'kXMLHelper', 'file' => 'xml_helper.php', 'build_event' => '', 'require_classes' => 'kHelper'),
	Array ('pseudo' => 'CatItemExportHelper', 'class' => 'kCatDBItemExportHelper', 'file' => 'cat_dbitem_export_helper.php', 'build_event' => '', 'require_classes' => 'kHelper'),
	Array ('pseudo' => 'EmailMessageHelper', 'class' => 'EmailMessageHelper', 'file' => 'email_message_helper.php', 'build_event' => '', 'require_classes' => 'kHelper'),
	Array ('pseudo' => 'ListHelper', 'class' => 'ListHelper', 'file' => 'list_helper.php', 'build_event' => '', 'require_classes' => 'kHelper'),

	Array ('pseudo' => 'FormSubmissionHelper', 'class' => 'FormSubmissionHelper', 'file' => 'form_submission_helper.php', 'build_event' => '', 'require_classes' => 'kHelper'),
	Array ('pseudo' => 'MailboxHelper', 'class' => 'MailboxHelper', 'file' => 'mailbox_helper.php', 'build_event' => '', 'require_classes' => 'kHelper'),
	Array ('pseudo' => 'POP3Helper', 'class' => 'POP3Helper', 'file' => 'pop3_helper.php', 'build_event' => '', 'require_classes' => 'kHelper'),
	Array ('pseudo' => 'MimeDecodeHelper', 'class' => 'MimeDecodeHelper', 'file' => 'mime_decode_helper.php', 'build_event' => '', 'require_classes' => 'kHelper'),
	+ Array ('pseudo' => 'UserHelper', 'class' => 'UserHelper', 'file' => 'user_helper.php', 'build_event' => '', 'require_classes' => 'kHelper'),
	),
	);
	\ No newline at end of file

in-portalNo OneTemporaryActions

File Metadata

in-portalView Options

Event Timeline

in-portal
No OneTemporary
Actions

in-portal
View Options