in-portal
No OneTemporary
Actions

Subscribers

None

File Metadata

Created: Sat, Feb 1, 11:57 PM

in-portal
View Options

	Index: trunk/kernel/action.php
	===================================================================
	--- trunk/kernel/action.php (revision 479)
	+++ trunk/kernel/action.php (revision 480)
	@@ -1,2278 +1,2318 @@
	<?php

	$ro_perm = $objSession->HasSystemPermission("SYSTEM_ACCESS.READONLY");

	if( defined('DEBUG_ACTIONS') && (DEBUG_ACTIONS & KERNEL_ACTIONS) == KERNEL_ACTIONS )
	{
	if($Action) echo '<span class="debug_text">Kernel Action [<b>'.$Action."</b>]</span><br>\n";
	}

	if( defined('DEBUG_ACTIONS') && (DEBUG_ACTIONS & SHOW_REQUEST) == SHOW_REQUEST )
	{
	// don't show debug output in tree & header of admin & while logging in
	$script = basename($_SERVER['PHP_SELF']);
	$skip_debug = Array('index.php','tree.php','head.php','credits.php');
	if( !in_array($script, $skip_debug) )
	{
	echo "ScriptName: <b>$script</b> (<b>".dirname($_SERVER['PHP_SELF'])."</b>)<br><br>";
	$div_height = (count($_REQUEST)+1)*26;
	if($div_height > 300) $div_height = 300;
	echo '<div class="debug_layer" style="height: '.$div_height.'px;">';
	echo '<table border="0" cellspacing="0" cellpadding="4" class="debug_table">';
	echo '<thead style="font-weight: bold;"><td>Src</td><td>Name</td><td>Value</td></thead>';

	foreach($_REQUEST as $key => $value)
	{
	if( !is_array($value) && trim($value) == '' ) $value = ' ';
	$src = isset($_GET[$key]) ? 'GE' : (isset($_POST[$key]) ? 'PO' : (isset($_COOKIE[$key]) ? 'CO' : '?') );
	echo '<tr><td>'.$src.'</td><td>'.$key.'</td><td>'.print_r($value, true).'</td></tr>';
	}
	echo '</table></div>';
	echo '<a href="javascript:self.location.reload();">Reload Frame</a><br>';
	}
	unset($script, $skip_debug);
	}

	switch($Action)
	{
	case "m_save_import_config":
	// Set New Import Category
	if( GetVar('categorylist', true) !== false )
	{
	$cat_id = $_POST['categorylist'];
	$objSession->SetVariable('categoryid', $cat_id);

	if($cat_id > 0)
	{
	$cat = $objCatList->GetByResource($cat_id);
	if(is_object($cat))
	{
	$navbar = $cat->Get('CachedNavbar');
	$objSession->SetVariable('catnavbar', $navbar);
	$objSession->SetVariable('import_category_id', $cat->UniqueId() );
	}
	}elseif($cat_id == 0)
	{
	global $objConfig;
	$objSession->SetVariable('import_category_id', 0);
	}

	$objSession->SetVariable('categorylist', $_POST['categorylist']);
	}

	// Set Import Admin Group
	if( GetVar('grouplist1', true) )
	{
	$group_id = $_POST['grouplist1'];
	$group = $objGroups->GetItemByField('ResourceId',$group_id);
	$objSession->SetVariable('user_admin_names', $group->Get('Name'));
	$objSession->SetVariable('user_admin_values', $group->Get('GroupId'));
	$objSession->SetVariable('grouplist1', $_POST['grouplist1']);
	}

	// Set Import User Group
	if( GetVar('grouplist2', true) )
	{
	$group_id = $_POST['grouplist2'];
	$group = $objGroups->GetItemByField('ResourceId', $group_id);
	$objSession->SetVariable('user_regular_names', $group->Get('Name'));
	$objSession->SetVariable('user_regular_values', $group->Get('GroupId'));
	$objSession->SetVariable('grouplist2', $_POST['grouplist2']);
	}
	break;

	case "m_add_user":
	$dupe_user = '';
	//$user_pending = (int)$_POST["user_pending"];
	//$user_enabled = (int)$_POST["user_enabled"];
	$CreatedOn = time();//DateCurrTimeTimstamp($_POST["user_date"],GetDateFormat());
	$dob = DateTimestamp($_POST["user_dob"],GetDateFormat());

	$objEditItems = new clsUserManager();
	$objEditItems->SourceTable = $objSession->GetEditTable("PortalUser");

	if(strlen($_POST["user_login"]))
	$id = $objUsers->GetUserId($_POST["user_login"]);
	else
	$dob = 0;

	if($id)
	{
	$lvErrorString = language('la_error_duplicate_username');
	$dupe_user = $_POST["user_login"];
	$_POST["user_login"] = '';
	}

	$password = md5($_POST["password"]);
	$u = $objEditItems->Add_User($_POST["user_login"], $password,
	$_POST["user_email"], $CreatedOn, $_POST["user_firstname"],
	$_POST["user_lastname"], $_POST["status"],
	$_POST["user_phone"],
	$_POST["user_street"], $_POST["user_city"],
	$_POST["user_state"], $_POST["user_zip"], $_POST["user_country"], $dob);

	$objCustomEdit = new clsCustomDataList(); //$objSession->GetEditTable("CustomMetaData"));
	$objCustomEdit->SetTable('edit');
	$objCustomEdit->LoadResource($u->Get("ResourceId"));
	$CustomFields = new clsCustomFieldList(6);
	$DataChanged = FALSE;
	foreach($_POST as $key=>$value)
	{
	if(substr($key,0,1)=="_")
	{
	$field = substr($key,1);
	$cvalue = $CustomFields->GetItemByField("FieldName",$field,FALSE);

	if(is_object($cvalue))
	{
	$objCustomEdit->SetFieldValue($cvalue->Get("CustomFieldId"),$u->Get("ResourceId"),$value);
	$DataChanged = TRUE;
	}
	}
	}
	if($DataChanged) $objCustomEdit->SaveData();
	$objCustomEdit->SetTable('live');


	- break;
	+ break;
	+
	case "m_edit_user":
	//$CreatedOn = DateTimestamp($_POST["user_date"],GetDateFormat());
	$dob = DateTimestamp($_POST["user_dob"],GetDateFormat());
	$objEditItems = new clsUserManager();
	$objEditItems->SourceTable = $objSession->GetEditTable("PortalUser");
	//$user_pending = (int)$_POST["user_pending"];
	//$user_enabled = (int)$_POST["user_enabled"];
	$UserId = (int)$_POST["user_id"];
	//echo $UserId."<br>\n";
	if(!strlen($_POST["user_login"]))
	$dob = 0;
	if(strlen($_POST["password"]))
	{
	$password = md5($_POST["password"]);
	}
	else
	$password = "";
	$u = $objEditItems->Edit_User($UserId, $_POST["user_login"], $password,
	$_POST["user_email"], $CreatedOn, $_POST["user_firstname"],
	$_POST["user_lastname"], $_POST["status"],
	$_POST["user_phone"],
	$_POST["user_street"], $_POST["user_city"],
	$_POST["user_state"], $_POST["user_zip"], $_POST["user_country"],
	$dob);

	$objCustomEdit = new clsCustomDataList(); //$objSession->GetEditTable("CustomMetaData"));
	$objCustomEdit->SetTable('edit');
	$DataChanged = false;

	$objCustomEdit->LoadResource($u->Get("ResourceId"));
	$CustomFields = new clsCustomFieldList(6);

	foreach($_POST as $key=>$value)
	{
	if(substr($key,0,1)=="_")
	{
	$field = substr($key,1);
	$cvalue = $CustomFields->GetItemByField("FieldName",$field,FALSE);

	if(is_object($cvalue))
	{
	//echo "Saving CF: (".$cvalue->Get("CustomFieldId")." ; ".$u->Get("ResourceId")." ; $value)<br>";
	$objCustomEdit->SetFieldValue($cvalue->Get("CustomFieldId"),$u->Get("ResourceId"),$value);
	$DataChanged = TRUE;
	}
	}
	}

	if($DataChanged)
	$objCustomEdit->SaveData();
	$objCustomEdit->SetTable('live');
	- break;
	+ break;
	+
	case "m_user_primarygroup":
	- //print_pre($_REQUEST);
	if($ro_perm) break;
	$users = explode(',', $_POST["userlist"]);
	$GroupResourceId = $_POST['grouplist'];
	$g = $objGroups->GetItemByField("ResourceId", $GroupResourceId);
	$GroupId = $g->UniqueId();

	if( is_array($users) )
	foreach($users as $user_id)
	{
	$u = $objUsers->GetItemByField("ResourceId", $user_id);
	$g->AddUser($u->Get("PortalUserId"), 1);
	}
	break;

	case "m_edit_group":
	$objEditItems = new clsGroupList();
	$objEditItems->SourceTable = $objSession->GetEditTable("PortalGroup");
	$objEditItems->Edit_Group($_POST["group_id"], $_POST["group_name"],$_POST["group_comments"]);
	break;
	case "m_add_group":
	$objEditItems = new clsGroupList();
	$objEditItems->SourceTable = $objSession->GetEditTable("PortalGroup");
	$objEditItems->Add_Group($_POST["group_name"], $_POST["group_comments"],0);
	break;
	case "m_group_sysperm":
	- if($_POST["GroupEditStatus"]==0)
	- {
	- $objSession->ResetSysPermCache();
	- $GroupId = $_POST["GroupId"];
	- if($GroupId)
	- {
	- $objEditItems = new clsGroupList();
	- $objEditItems->SourceTable = $objSession->GetEditTable("PortalGroup");
	- $g = $objEditItems->GetItemByField("ResourceId",$GroupId);
	- if(is_object($g))
	- {
	-
	- $PermList = explode(",",$_POST["PermList"]);
	- for($i=0;$i<count($PermList);$i++)
	- {
	- if(@in_array($PermList[$i],$_POST["inherit"]))
	- {
	- $value = -1;
	- }
	- else
	- {
	- $value = 0;
	- if(@in_array($PermList[$i],$_POST["permvalue"]))
	- $value = 1;
	- }
	- $g->SetSystemPermission($PermList[$i],$value);
	- }
	- }
	- }
	- }
	- break;
	+ if($ro_perm) break;
	+ if($_POST["GroupEditStatus"]==0)
	+ {
	+ $objSession->ResetSysPermCache();
	+ $GroupId = $_POST["GroupId"];
	+ if($GroupId)
	+ {
	+ $objEditItems = new clsGroupList();
	+ $objEditItems->SourceTable = $objSession->GetEditTable("PortalGroup");
	+ $g = $objEditItems->GetItemByField("ResourceId",$GroupId);
	+ if(is_object($g))
	+ {
	+
	+ $PermList = explode(",",$_POST["PermList"]);
	+ for($i=0;$i<count($PermList);$i++)
	+ {
	+ if(@in_array($PermList[$i],$_POST["inherit"]))
	+ {
	+ $value = -1;
	+ }
	+ else
	+ {
	+ $value = 0;
	+ if(@in_array($PermList[$i],$_POST["permvalue"]))
	+ $value = 1;
	+ }
	+ $g->SetSystemPermission($PermList[$i],$value);
	+ }
	+ }
	+ }
	+ }
	+ break;
	+
	case "m_user_sysperm":
	if($ro_perm) break;
	if($_POST["UserEditStatus"]==0)
	{
	$UserId = $_POST["ItemId"];
	if($UserId)
	{
	$objEditItems = new clsUserManager();
	$objEditItems->SourceTable = $objSession->GetEditTable("PortalUser");
	$u = $objEditItems->GetItemByField("ResourceId",$UserId);
	unset($g);
	if(is_object($u))
	{
	$objSession->ResetSysPermCache();
	$g = $u->GetPersonalGroup(FALSE);
	$PermList = explode(",",$_POST["PermList"]);
	for($i=0;$i<count($PermList);$i++)
	{
	if(!@in_array($PermList[$i],$_POST["inherit"]))
	{
	if(!is_object($g))
	$g = $u->GetPersonalGroup(TRUE);

	$value = 0;
	if(is_array($_POST["permvalue"]))
	{
	if(in_array($PermList[$i],$_POST["permvalue"]))
	$value =1;
	$g->SetSystemPermission($PermList[$i],$value);
	}
	else {
	$g->SetSystemPermission($PermList[$i], 0);
	}
	}
	else
	{
	if(is_object($g))
	$g->SetSystemPermission($PermList[$i],-1);
	}
	}
	}
	}
	}
	break;
	+
	case "m_approve_user":
	if($ro_perm) break;
	foreach($_POST["itemlist"] as $userid)
	{
	$user = $objUsers->GetItemByField("ResourceId",$userid);
	$user->Approve();
	}
	$objUsers->Clear();
	break;

	case "m_deny_user":
	if($ro_perm) break;
	foreach($_POST["itemlist"] as $userid)
	{
	$user = $objUsers->GetItemByField("ResourceId",$userid);
	$user->Deny();
	}
	$objUsers->Clear();
	break;
	+
	case "m_delete_user":
	if($ro_perm) break;
	foreach($_POST["itemlist"] as $userid)
	$objUsers->Delete_User($userid);
	break;
	+
	case "m_delete_group":
	if($ro_perm) break;
	foreach($_POST["itemlist"] as $groupid)
	{
	$objGroups->Delete_Group($groupid);
	}
	break;
	- case "m_user_assign":
	+
	+ case "m_user_assign": // not sure if action is used anywhere
	+ if($ro_perm) break;
	$useridlist = implode("-", $userlist);
	$objSession->SetUserStatus($useridlist, "g_usergroup_status");
	$g_usergroup_status = $useridlist;
	- break;
	- case "m_group_assign":
	- foreach($grouplist as $group)
	- $objGroups->Add_Users_To_Group($group);
	- break;
	+ break;
	+
	+ case "m_group_assign": // not sure if action is used anywhere
	+ if($ro_perm) break;
	+ foreach($grouplist as $group) $objGroups->Add_Users_To_Group($group);
	+ break;
	+
	case "m_remove_group":
	+ if($ro_perm) break;
	$adodbConnection = GetAdodbConnection();
	$adodbConnection->Execute("DELETE FROM UserGroup where UserId='$UserId' AND GroupId='$GroupId'");
	- break;
	+ break;

	case "m_SetVariable":
	$objSession->SetPersistantVariable($_POST["fieldname"], $_POST["varvalue"]);
	- break;
	+ break;
	+
	case "m_SetSessionVariable":
	$objSession->SetVariable($_POST["fieldname"], $_POST["varvalue"]);
	//echo "Setting $fieldname to $varvalue<br>\n";
	if($_POST["fieldname"]=="SearchType")
	$objSession->SetVariable("SearchWord","");
	- break;
	+ break;

	case "m_edit_permissions":
	if($ro_perm) break;

	if($_POST["CatEditStatus"] != -1)
	{
	$objSession->SetVariable('PermCache_UpdateRequired', 1);
	$GroupId = $_POST["GroupId"];
	$CatId = $_POST["CategoryId"];
	$Module = $_POST["Module"];
	$ado = GetADODBConnection();
	$sql = "SELECT * FROM ".GetTablePrefix()."PermissionConfig WHERE ModuleId='$Module'";
	$rs = $ado->Execute($sql);
	$PermNames = array();
	while($rs && !$rs->EOF)
	{
	$data = $rs->fields;
	$PermNames[] = $data["PermissionName"];
	$rs->MoveNext();
	}

	$inherit = array();
	if(is_array($_POST["inherit"]))
	{
	foreach($_POST["inherit"] as $perm)
	{
	$inherit[$perm] = 1;
	}
	}
	$access = array();
	if(is_array($_POST["permvalue"]))
	{
	foreach($_POST["permvalue"] as $perm)
	{
	$access[$perm] = 1;
	}
	}
	$objPermList = new clsPermList($CatId,$GroupId);
	$objPermList->LoadCategory($CatId);

	for($i=0;$i<count($PermNames);$i++)
	{
	if(!array_key_exists($PermNames[$i],$inherit))
	{
	$PermValue = (int)$access[$PermNames[$i]];

	$Perm = $objPermList->GetPermByName($PermNames[$i]);
	if($Perm)
	{
	$Id = $Perm->Get("PermissionId");
	//echo "Editing $Id<br>\n";
	$objPermList->Edit_Permission($Id,$CatId,$GroupId,$PermNames[$i],$PermValue,0);
	}
	else
	{
	//echo "Adding ".$PermNames[$i];
	$objPermList->Add_Permission($CatId,$GroupId,$PermNames[$i],$PermValue,0);
	}
	}
	else
	{
	$Perm = $objPermList->GetPermByName($PermNames[$i]);
	if($Perm)
	{
	$Id = $Perm->Get("PermissionId");
	$objPermList->Delete_Permission($Id);
	}
	}
	}
	//$c = $objCatList->GetItem($CatId);
	//$glist = $objGroups->GetAllGroupList();
	//$ViewList = $objPermList->GetGroupPermList($c,"CATEGORY.VIEW",$glist );
	//$c->SetViewPerms("CATEGORY.VIEW",$ViewList,$glist);
	//$c->Update();
	}
	break;
	- case "m_perm_delete_group":
	-
	- $ado = GetADODBConnection();
	- $CatId = $_POST["CategoryId"];
	- foreach($_POST["itemlist"] as $groupid)
	- {
	- $g = $objGroups->GetItemByField("ResourceId",$groupid);
	- if(is_object($g))
	- {
	- $sql = "DELETE FROM ".GetTablePrefix()."Permissions WHERE CatId=$CatId AND GroupId=".$g->Get("GroupId");
	- if($objSession->HasSystemPermission("DEBUG.LIST"))
	- echo $sql."<br>\n";
	- $ado->Execute($sql);
	- }
	- }
	- break;
	+ case "m_perm_delete_group":
	+ if($ro_perm) break;
	+ $ado = GetADODBConnection();
	+ $CatId = $_POST["CategoryId"];
	+ foreach($_POST["itemlist"] as $groupid)
	+ {
	+ $g = $objGroups->GetItemByField("ResourceId",$groupid);
	+ if(is_object($g))
	+ {
	+ $sql = "DELETE FROM ".GetTablePrefix()."Permissions WHERE CatId=$CatId AND GroupId=".$g->Get("GroupId");
	+ if($objSession->HasSystemPermission("DEBUG.LIST"))
	+ echo $sql."<br>\n";
	+ $ado->Execute($sql);
	+ }
	+ }
	+ break;

	case "m_user_addto_group":
	- if($ro_perm) break;
	- $user = $_POST["UserId"];
	- if(is_numeric($user))
	- {
	- if(strlen($_POST["grouplist"]))
	- {
	- $groups = explode(",",$_POST["grouplist"]);
	- if(is_array($groups))
	- {
	- for($i=0; $i<count($groups);$i++)
	- {
	- $g = $objGroups->GetItemByField("ResourceId",$groups[$i]);
	- $g->AddUser($user);
	- }
	- }
	- else
	- {
	- $g = $objGroups->GetItem($groups);
	- $g->AddUser($user);
	- }
	- }
	- }
	- break;
	+ if($ro_perm) break;
	+ $user = $_POST["UserId"];
	+ if(is_numeric($user))
	+ {
	+ if(strlen($_POST["grouplist"]))
	+ {
	+ $groups = explode(",",$_POST["grouplist"]);
	+ if(is_array($groups))
	+ {
	+ for($i=0; $i<count($groups);$i++)
	+ {
	+ $g = $objGroups->GetItemByField("ResourceId",$groups[$i]);
	+ $g->AddUser($user);
	+ }
	+ }
	+ else
	+ {
	+ $g = $objGroups->GetItem($groups);
	+ $g->AddUser($user);
	+ }
	+ }
	+ }
	+ break;
	+
	case "m_group_add_user":
	if($ro_perm) break;
	$group = $_POST["GroupId"];
	$EditGroups = new clsGroupList();
	$EditGroups->SourceTable = $objSession->GetEditTable($objGroups->SourceTable);
	$g = $EditGroups->GetItem($group);
	// echo "Group: $group <br>\n";
	if(is_numeric($group))
	{
	$users = explode(",",$_POST["userlist"]);
	foreach($users as $userid)
	{
	$u = $objUsers->GetItemByField("ResourceId",$userid);
	$g->AddUser($u->Get("PortalUserId"));
	}
	}

	break;
	case "m_group_removeuser":
	if($ro_perm) break;
	$group = $_POST["GroupId"];
	$g = $objGroups->GetItem($group);
	if($group>0)
	{
	foreach($_POST["itemlist"] as $user_id)
	{
	$u = $objUsers->GetItemByField("ResourceId",$user_id);
	$g->DeleteUser($u->Get("PortalUserId"));
	}
	}
	break;
	case "m_user_removegroup":
	if($ro_perm) break;
	$user = $_POST["UserId"];
	if($user>0)
	{
	foreach($_POST["itemlist"] as $groupid)
	{
	$g = $objGroups->GetItem($groupid);
	$g->DeleteUser($user);
	}
	}
	break;
	case "m_sendmail":
	- $idlist = explode(",",$_POST["idlist"]);
	- $html = (int)$_POST["html_enable"];
	- $body = inp_escape($_POST["email_body"],$html);
	- $subject = inp_escape($_POST["email_body"],$html);
	- $Email = new clsEmailMessage();
	- $Email->Set("Subject",$subject);
	- $Email->Set("Template",$body);
	- if($html)
	- $Email->Set("MessageType","HTML");
	- if(count($idlist)>0)
	- {
	- switch($_POST["IdType"])
	- {
	- case "group":
	- foreach($idlist as $id)
	- $Email->SendToGroup($id);
	- break;
	- case "user":
	- foreach($idlist as $id)
	- $Email->SendToUser($id);
	- break;
	- }/switch/
	- }
	- break;
	+ if($ro_perm) break;
	+ $idlist = explode(",",$_POST["idlist"]);
	+ $html = (int)$_POST["html_enable"];
	+ $body = inp_escape($_POST["email_body"],$html);
	+ $subject = inp_escape($_POST["email_body"],$html);
	+ $Email = new clsEmailMessage();
	+ $Email->Set("Subject",$subject);
	+ $Email->Set("Template",$body);
	+ if($html)
	+ $Email->Set("MessageType","HTML");
	+ if(count($idlist)>0)
	+ {
	+ switch($_POST["IdType"])
	+ {
	+ case "group":
	+ foreach($idlist as $id)
	+ $Email->SendToGroup($id);
	+ break;
	+ case "user":
	+ foreach($idlist as $id)
	+ $Email->SendToUser($id);
	+ break;
	+ }/switch/
	+ }
	+ break;
	+
	case "m_item_recount":
	- RunDown($m_var_list["cat"],"UpdateCacheCounts");
	- break;
	+ if($ro_perm) break;
	+ RunDown($m_var_list["cat"],"UpdateCacheCounts");
	+ break;
	+
	case "m_cat_delete":
	- if($objSession->HasCatPermission("CATEGORY.DELETE",$objCatList->CurrentCategoryID()))
	+ if($ro_perm) break;
	+ if($objSession->HasCatPermission("CATEGORY.DELETE",$objCatList->CurrentCategoryID()))
	{
	if(isset($_POST["catlist"]))
	{
	if(is_array($_POST["catlist"]))
	foreach($_POST["catlist"] as $catid)
	{
	$objCatList->Delete_Category($catid);

	}
	}
	}
	break;
	case "m_cat_cut":
	- if(isset($_POST["catlist"]))
	- {
	- if($objSession->HasCatPermission("CATEGORY.DELETE",$catid))
	- {
	- $objCatList->CopyToClipboard("CUT","CategoryId",$_POST["catlist"]);
	- }
	- else
	- $objCatList->CopyToClipboard("COPY","CategoryId",$_POST["catlist"]);
	- }
	- break;
	+ if($ro_perm) break;
	+ if(isset($_POST["catlist"]))
	+ {
	+ if($objSession->HasCatPermission("CATEGORY.DELETE",$catid))
	+ {
	+ $objCatList->CopyToClipboard("CUT","CategoryId",$_POST["catlist"]);
	+ }
	+ else
	+ $objCatList->CopyToClipboard("COPY","CategoryId",$_POST["catlist"]);
	+ }
	+ break;
	+
	case "m_cat_copy":
	- if(isset($_POST["catlist"]))
	- {
	- $objCatList->CopyToClipboard("COPY","CategoryId",$_POST["catlist"]);
	- }
	+ if($ro_perm) break;
	+ if(isset($_POST["catlist"]))
	+ {
	+ $objCatList->CopyToClipboard("COPY","CategoryId",$_POST["catlist"]);
	+ }
	break;

	case "m_paste":
	- if($objCatList->ItemsOnClipboard()>0)
	- {
	- /* category's paste function populates a sparse array where array[old_id]=new_id */
	- $PastedCatIds = array();
	- $objCatList->PasteFromClipboard($objCatList->CurrentCategoryID(),"Name");
	- }
	- else
	- {
	- $clip = $objSession->GetVariable("ClipBoard");
	- if(strlen($clip))
	- {
	- $ClipBoard = ParseClipboard($clip);
	- $Action= strtolower($ClipBoard["table"])."_paste";
	- }
	- }
	- break;
	+ if($ro_perm) break;
	+ if($objCatList->ItemsOnClipboard()>0)
	+ {
	+ /* category's paste function populates a sparse array where array[old_id]=new_id */
	+ $PastedCatIds = array();
	+ $objCatList->PasteFromClipboard($objCatList->CurrentCategoryID(),"Name");
	+ }
	+ else
	+ {
	+ $clip = $objSession->GetVariable("ClipBoard");
	+ if(strlen($clip))
	+ {
	+ $ClipBoard = ParseClipboard($clip);
	+ $Action= strtolower($ClipBoard["table"])."_paste";
	+ }
	+ }
	+ break;
	+
	case "m_cat_move_up":
	- if (isset($_POST["catlist"]))
	+ if($ro_perm) break;
	+ if (isset($_POST["catlist"]))
	{
	foreach($_POST["catlist"] as $catid)
	{
	$cat =& $objCatList->GetCategory($catid);
	$cat->MoveUp();
	}
	}
	- break;
	+ break;
	+
	case "m_cat_move_down":
	- if (isset($_POST["catlist"]))
	+ if($ro_perm) break;
	+ if (isset($_POST["catlist"]))
	{
	$catlist=array_reverse($_POST["catlist"]);
	foreach($catlist as $catid)
	{
	$cat =& $objCatList->GetCategory($catid);
	$cat->MoveDown();
	}
	}
	break;
	- case "m_cat_approve":
	- if (isset($_POST["catlist"]))
	- {
	- foreach($_POST["catlist"] as $catid)
	- {
	- $cat =& $objCatList->GetCategory($catid);
	- $cat->Approve();
	- }
	- }
	+ case "m_cat_approve":
	+ if($ro_perm) break;
	+ if (isset($_POST["catlist"]))
	+ {
	+ foreach($_POST["catlist"] as $catid)
	+ {
	+ $cat =& $objCatList->GetCategory($catid);
	+ $cat->Approve();
	+ }
	+ }
	break;
	case "m_cat_decline":
	- if (isset($_POST["catlist"]))
	- {
	- foreach($_POST["catlist"] as $catid)
	- {
	- $cat =& $objCatList->GetCategory($catid);
	-// $cat->Deny();
	- RunDown($catid,"Deny");
	- }
	- }
	+ if($ro_perm) break;
	+ if (isset($_POST["catlist"]))
	+ {
	+ foreach($_POST["catlist"] as $catid)
	+ {
	+ $cat =& $objCatList->GetCategory($catid);
	+ //$cat->Deny();
	+ RunDown($catid,"Deny");
	+ }
	+ }
	break;

	case "m_rel_delete":
	$adodbConnection= GetADODBConnection();
	$table = $objSession->GetEditTable("Relationship");
	if(isset($_POST["itemlist"]))
	{
	if(is_array($_POST["itemlist"]))
	{
	foreach($_POST["itemlist"] as $id)
	{
	$sql = "DELETE FROM ".$table." WHERE RelationshipId=".$id;
	$adodbConnection->Execute($sql);
	if($objSession->HasSystemPermission("DEBUG.LIST"))
	echo $sql."<br>\n";
	}
	}
	else
	{
	$sql = "DELETE FROM ".$table." WHERE RelationshipId=".$_POST["itemlist"];
	$adodbConnection->Execute($sql);
	if($objSession->HasSystemPermission("DEBUG.LIST"))
	echo $sql."<br>\n";
	}
	}
	break;
	case "m_add_relation":
	$RelList = new clsRelationshipList();
	$RelList->SourceTable = $objSession->GetEditTable("Relationship");

	//$r = $RelList->Add($_POST["SourceId"],$_POST["SourceType"],$_POST["TargetId"],$_POST["TargetType"],
	// 0,(int)$_POST["Enabled"],$_POST["RelType"], $Rel);
	$ado = GetADODBConnection();
	$NewId = $ado->GetOne('SELECT MIN(RelationshipId) as MinValue FROM '.$RelList->SourceTable);
	if($NewId > 0) $NewId = 0;
	$NewId--;

	$r = $RelList->Add($_POST["SourceId"],$_POST["SourceType"],$_POST["TargetId"],$_POST["TargetType"],
	0,(int)$_POST["Enabled"],$_POST["RelType"], $NewId);

	$sql = "UPDATE ".$RelList->SourceTable." SET RelationshipId=".$NewId." WHERE RelationshipId=".$r->Get("RelationshipId");
	if($objSession->HasSystemPermission("DEBUG.LIST"))
	echo $sql."<br>\n";
	$ado->Execute($sql);

	break;
	case "m_edit_relation":
	if($_POST["CatEditStatus"]==0)
	{
	$RelList = new clsRelationshipList();
	$RelList->SourceTable = $objSession->GetEditTable("Relationship");

	$r = $RelList->GetItem($_POST["RelationshipId"]);
	if(is_object($r))
	{
	$r->Set("Enabled",(int)$_POST["Enabled"]);
	$r->Set("Type",(int)$_POST["RelType"]);
	$r->Set("Priority",(int)$_POST["priority"]);
	$r->Update();
	}
	}
	break;
	case "m_rel_move_up":
	$objRelList = new clsRelationshipList();
	$objRelList->SourceTable = $objSession->GetEditTable("Relationship");
	if (isset($_POST["itemlist"]))
	{
	foreach($_POST["itemlist"] as $id)
	{
	$r = $objRelList->GetItem($id);
	$r->MoveUp($_POST["SourceId"]);
	}
	}
	break;
	case "m_rel_move_down":
	$objRelList = new clsRelationshipList();
	$objRelList->SourceTable = $objSession->GetEditTable("Relationship");
	if (isset($_POST["itemlist"]))
	{
	$itemlist=array_reverse($_POST["itemlist"]);
	foreach($itemlist as $id)
	{
	$r = $objRelList->GetItem($id);
	$r->MoveDown($_POST["SourceId"]);
	}
	}
	break;


	case "m_add_category":
	if(ValidDate($_POST["cat_date"],GetDateFormat()))
	{
	$CreatedOn = DateTimestamp($_POST["cat_date"],GetDateFormat());
	}
	else
	$CreatedOn = time();
	$html = (int)$_POST["html_enable"];

	$cat_pick = $_POST["cat_pick"];
	$Status = (int)$_POST["status"];
	$Hot=(int)$_POST["itemhot"];
	$Pop = (int)$_POST["itempop"];
	$New = (int)$_POST["itemnew"];

	$objEditItems = new clsCatList();
	$objEditItems->SourceTable = $objSession->GetEditTable("Category");
	$cat = $objEditItems->Add($_POST["ParentId"], $_POST["cat_name"], inp_escape($_POST["cat_desc"],$html), $CreatedOn,
	$cat_pick, $Status, $Hot, $New, $Pop, $_POST["Priority"],
	$_POST["meta_keywords"],$_POST["meta_desc"]);
	$objCustomEdit = new clsCustomDataList($objSession->GetEditTable("CustomMetaData"));
	$objCustomEdit->LoadResource($cat->Get("ResourceId"));
	$CustomFields = new clsCustomFieldList(1);
	$DataChanged = FALSE;
	foreach($_POST as $key=>$value)
	{
	if(substr($key,0,1)=="_")
	{
	$field = substr($key,1);
	$cvalue = $CustomFields->GetItemByField("FieldName",$field,FALSE);

	if(is_object($cvalue))
	{
	$objCustomEdit->SetFieldValue($cvalue->Get("CustomFieldId"),$cat->Get("ResourceId"),$value);
	$DataChanged = TRUE;
	}
	}
	}
	if($DataChanged)
	$objCustomEdit->SaveData();

	break;

	case "m_edit_category":
	$CreatedOn = DateTimestamp($_POST["cat_date"],GetDateFormat());
	$cat_pick = GetVar('cat_pick', true);
	$Status = (int)$_POST["status"];
	$Hot = false; //(int)$_POST["itemhot"];
	$Pop = false; //(int)$_POST["itempop"];
	$New = (int)$_POST["itemnew"];

	$html = (int)$_POST["html_enable"];
	$objEditItems = new clsCatList();
	$objEditItems->SourceTable = $objSession->GetEditTable("Category");

	// check if name of cat isn't changed: begin
	$original_cats = new clsCatList();
	$original_cat = $original_cats->GetItemByField('CategoryId', $_POST['CategoryId']);
	if( $original_cat->Get('Name') != $_POST['cat_name'] )
	$objSession->SetVariable('PermCache_UpdateRequired', 1);
	unset($original_cat, $original_cats);
	// check if name of cat isn't changed: end

	$cat = $objEditItems->Edit_Category($_POST["CategoryId"],inp_escape($_POST["cat_name"],$html), inp_escape($_POST["cat_desc"],$html), $CreatedOn, $cat_pick, $Status, $Hot, $New, $Pop, $_POST["Priority"], $_POST["meta_keywords"], $_POST["meta_desc"]);

	$objCustomEdit = new clsCustomDataList($objSession->GetEditTable("CustomMetaData"));
	$objCustomEdit->LoadResource($cat->Get("ResourceId"));
	$CustomFields = new clsCustomFieldList(1);
	$DataChanged = FALSE;
	foreach($_POST as $key=>$value)
	{
	if(substr($key,0,1)=="_")
	{
	$field = substr($key,1);
	$cvalue = $CustomFields->GetItemByField("FieldName",$field,FALSE);

	if(is_object($cvalue))
	{
	$objCustomEdit->SetFieldValue($cvalue->Get("CustomFieldId"),$cat->Get("ResourceId"),$value);
	$DataChanged = TRUE;
	}
	}
	}
	if($DataChanged)
	$objCustomEdit->SaveData();

	break;
	case "m_edit_custom_data":

	$id = $_POST["ItemId"];
	$objEditData = new clsCustomDataList(); //$objSession->GetEditTable("CustomMetaData"));
	$objEditData->SetTable('edit');
	$ado = GetADODBConnection();

	if($id && is_array($_POST["CustomData"]))
	{
	foreach($_POST["CustomData"] as $FieldId => $Value)
	{
	$sql = "SELECT count(*) as reccount FROM ".$objEditData->SourceTable." WHERE CustomFieldId=$FieldId AND ResourceId=".$_POST["ItemId"];
	$rs = $ado->Execute($sql);
	$intable = $rs->fields["reccount"];
	if(!$intable)
	{
	$sql = "INSERT INTO ".$objEditData->SourceTable." (ResourceId,CustomFieldId,Value) VALUES ('".$id."','$FieldId','$Value')";
	$ado->Execute($sql);
	//echo $sql."<br>\n";
	}
	else
	{
	$sql = "UPDATE ".$objEditData->SourceTable." SET Value='".$Value."' WHERE CustomFieldId=$FieldId AND ResourceId=".$_POST["ItemId"];
	$ado->Execute($sql);
	//echo $sql."<br>\n";
	}
	}
	}
	$objEditData->SetTable('live');
	break;
	case "m_customfield_edit":
	if($ro_perm) break;
	$DataType = $_POST["DataType"];
	$FieldId = $_POST["CustomFieldId"];
	$FieldName = $_POST["fieldname"];
	//$FieldLabel = $_POST["fieldlabel"];
	if(strlen($FieldName))
	{
	$objCustomFields = new clsCustomFieldList($DataType);
	$objCustomFields->EditField($FieldId,$DataType,$FieldName,"",(int)$_POST["generaltab"],
	$_POST["heading"],$_POST["fieldprompt"],$_POST["input_type"],
	$_POST["valuelist"]);
	}
	unset($objCustomFields);
	break;
	case "m_customfield_add":
	if($ro_perm) break;
	$DataType = $_POST["DataType"];
	$FieldName = $_POST["fieldname"];
	//$FieldLabel = $_POST["fieldlabel"];
	if(strlen($FieldName))
	{
	$objCustomFields = new clsCustomFieldList($DataType);
	$objCustomFields->AddField($DataType,$FieldName,"",(int)$_POST["generaltab"],
	$_POST["heading"],$_POST["fieldprompt"],$_POST["input_type"],
	$_POST["valuelist"]);
	unset($objCustomFields);
	}
	break;
	case "m_customfield_delete":
	if($ro_perm) break;
	$DataType = $_POST["DataType"];
	$objCustomFields = new clsCustomFieldList($DataType);

	foreach($_POST["itemlist"] as $f)
	{
	$objCustomFields->DeleteField($f);
	//$c = $objCustomFields->GetItem($f);
	//$c->Delete();
	}
	unset($objCustomFields);
	break;
	case "m_SearchConfig_Edit":
	if($ro_perm) break;
	$SimpleValues = $_POST["simple"];
	$AdvValues = $_POST["advanced"];
	$module = $_POST["module"];
	$priority = $_POST["pri"];
	//phpinfo(INFO_VARIABLES);
	$objSearchConfig = new clsSearchConfigList($module);
	foreach($objSearchConfig->Items as $i)
	{
	$id = $i->Get("SearchConfigId");
	$objSearchConfig->EditFieldSettings($id,(int)$SimpleValues[$id],(int)$AdvValues[$id],$priority[$id]);
	}
	$objSearchConfig->Clear();
	/* save relevence settings */
	$vals = $_POST["req_increase"];
	foreach($vals as $var=>$value)
	{
	$cfg = "SearchRel_Increase_".$var;
	$objConfig->Set($cfg,$value);
	}
	$vals = $_POST["rel_keyword"];
	foreach($vals as $var=>$value)
	{
	$cfg = "SearchRel_Keyword_".$var;
	$objConfig->Set($cfg,$value);
	}
	$vals = $_POST["rel_pop"];
	foreach($vals as $var=>$value)
	{
	$cfg = "SearchRel_Pop_".$var;
	$objConfig->Set($cfg,$value);
	}
	$vals = $_POST["rel_rating"];
	foreach($vals as $var=>$value)
	{
	$cfg = "SearchRel_Rating_".$var;
	$objConfig->Set($cfg,$value);
	}
	break;
	case "m_keyword_reset":
	if($ro_perm) break;
	$objSearchList = new clsSearchLogList();
	foreach($_POST["itemlist"] as $k)
	{
	$c = $objSearchList->GetItem($k);
	$c->Delete();
	}
	break;
	case "m_review_add":
	$post_info = GetSubmitVariable($_POST, 'EditStatus');
	if($post_info['variable'] > -1)
	{
	$objReviews = new clsItemReviewList();
	$objReviews->SourceTable = $objSession->GetEditTable("ItemReview");
	$Pending = (int)$_POST["review_pending"];
	$Enabled = (int)$_POST["review_enabled"];
	$Status = (int)$_POST["status"];
	$CreatedOn = DateTimestamp($_POST["review_date"],GetDateFormat());
	$CreatedOn += SecondsSinceMidnight($_POST["review_time"]);
	$html = (int)$_POST["html_enable"];
	$ReviewText = inp_escape($_POST["review_body"],1);

	$CreatedById = 0;
	if(strlen($_POST["createdby"])>0)
	{
	if(strtolower($_POST["createdby"])=="root")
	{
	$CreatedById = -1;
	}
	else
	{
	$u = $objUsers->GetItemByField("Login",$_POST["createdby"]);
	if(is_object($u))
	{
	$CreatedById = $u->Get("PortalUserId");
	if($CreatedById<1)
	{
	$CreatedById = $objSession->Get("PortalUserId");
	}
	}
	else
	$CreatedById = $objSession->Get("PortalUserId");
	}
	}
	else
	$CreatedById = $objSession->Get("PortalUserId");

	$r = $objReviews->AddReview($CreatedOn,$ReviewText,$Status, $IPAddress,
	(int)$_POST["review_priority"], $_POST["ItemId"],$_POST["ItemType"],
	$CreatedById,$html, $post_info['Module']);
	$ado = GetADODBConnection();
	$rs = $ado->Execute("SELECT MIN(ReviewId) as MinValue FROM ".$objReviews->SourceTable);
	$NewId = $rs->fields["MinValue"]-1;
	$sql = "UPDATE ".$objReviews->SourceTable." SET ReviewId=".$NewId." WHERE ReviewId=".$r->Get("ReviewId");
	if($objSession->HasSystemPermission("DEBUG.LIST"))
	echo $sql."<br>\n";
	$ado->Execute($sql);
	}
	break;
	case "m_review_edit":
	$post_info = GetSubmitVariable($_POST, 'EditStatus');
	if($post_info['variable'] > -1)
	{
	$objReviews = new clsItemReviewList();
	$objReviews->SourceTable = $objSession->GetEditTable("ItemReview");
	$Status = (int)$_POST["status"];
	$CreatedOn = DateTimestamp($_POST["review_date"],GetDateFormat());
	$CreatedOn += SecondsSinceMidnight($_POST["review_time"]);
	$html = (int)$_POST["html_enable"];
	$ReviewText = inp_escape($_POST["review_body"],1);
	$ReviewId = $_POST["ReviewId"];
	$CreatedById = 0;
	if(strlen($_POST["createdby"])>0)
	{
	if(strtolower($_POST["createdby"])=="root")
	{
	$CreatedById = -1;
	}
	else
	{
	$u = $objUsers->GetItemByField("Login",$_POST["createdby"]);
	if(is_object($u))
	{
	$CreatedById = $u->Get("PortalUserId");
	if($CreatedById<1)
	{
	$CreatedById = $objSession->Get("PortalUserId");
	}
	}
	else
	$CreatedById = $objSession->Get("PortalUserId");
	}
	}
	$r = $objReviews->EditReview($ReviewId,$CreatedOn,$ReviewText,$Status, $IPAddress,
	(int)$_POST["review_priority"],$_POST["ItemId"],$_POST["ItemType"],
	$CreatedById,$html, $post_info['Module']);
	}
	break;
	case "m_review_delete":
	$objReviews = new clsItemReviewList();
	$objReviews->SourceTable = $objSession->GetEditTable("ItemReview");
	foreach($_POST["itemlist"] as $id)
	{
	$objReviews->DeleteReview($id);
	}
	break;
	case "m_review_approve":
	if (isset($_POST["itemlist"]))
	{
	$objReviews = new clsItemReviewList();
	$objReviews->SourceTable = $objSession->GetEditTable("ItemReview");
	foreach($_POST["itemlist"] as $id)
	{
	$i = $objReviews->GetItem($id);
	$i->Set("Status",1);
	$i->Update();
	}
	}
	break;
	case "m_review_deny":
	if (isset($_POST["itemlist"]))
	{
	$objReviews = new clsItemReviewList();
	$objReviews->SourceTable = $objSession->GetEditTable("ItemReview");
	foreach($_POST["itemlist"] as $id)
	{
	$i = $objReviews->GetItem($id);
	$i->Set("Status",0);
	$i->Update();
	}
	}
	break;
	case "m_review_move_up":
	if (isset($_POST["itemlist"]))
	{
	$objReviews = new clsItemReviewList();
	$objReviews->SourceTable = $objSession->GetEditTable("ItemReview");
	foreach($_POST["itemlist"] as $id)
	{
	$i = $objReviews->GetItem($id);
	$i->MoveUp();
	}
	}
	break;
	case "m_review_move_down":
	if (isset($_POST["itemlist"]))
	{
	$objReviews = new clsItemReviewList();
	$objReviews->SourceTable = $objSession->GetEditTable("ItemReview");
	$itemlist=array_reverse($_POST["itemlist"]);
	foreach($itemlist as $id)
	{
	$i = $objReviews->GetItem($id);
	$i->MoveDown();
	}
	}
	break;
	case "m_theme_add":
	$objEditItems = new clsThemeList();
	$objEditItems->SourceTable = $objSession->GetEditTable("Theme");
	$Primary = (int)$_POST["primary"];
	if(!(int)$_POST["enabled"])
	$Primary = 0;
	$t = $objEditItems->AddTheme($_POST["name"],$_POST["description"],(int)$_POST["enabled"],
	(int)$_POST["CacheTimeout"],$Primary);

	$ado = GetADODBConnection();
	$rs = $ado->Execute("SELECT MIN(ThemeId) as MinValue FROM ".$objEditItems->SourceTable);
	$NewId = $rs->fields["MinValue"]-1;
	$sql = "UPDATE ".$objEditItems->SourceTable." SET ThemeId=".$NewId." WHERE ThemeId=".$t->Get("ThemeId");
	if($objSession->HasSystemPermission("DEBUG.LIST"))
	echo $sql."<br>\n";
	if ($Primary==1)
	{
	$objEditItems->SetPrimaryTheme($_POST["ThemeId"]);
	}
	$ado->Execute($sql);
	break;
	case "m_theme_edit":
	$objEditItems = new clsThemeList();
	$objEditItems->SourceTable = $objSession->GetEditTable("Theme");
	$Primary = (int)$_POST["primary"];
	if(!(int)$_POST["enabled"])
	$Primary = 0;

	$objEditItems->EditTheme($_POST["ThemeId"],$_POST["name"],$_POST["description"],
	(int)$_POST["enabled"],$Primary,(int)$_POST["CacheTimeout"]);
	if ($Primary==1)
	{
	$objEditItems->SetPrimaryTheme($_POST["ThemeId"]);
	}

	break;
	case "m_theme_delete":
	- if (isset($_POST["itemlist"]))
	+ if($ro_perm) break;
	+ if (isset($_POST["itemlist"]))
	{
	$Themes = new clsThemeList();
	foreach($_POST["itemlist"] as $id)
	{
	$Themes->DeleteTheme($id);
	}
	}
	break;
	case "m_theme_primary":
	- if( count($_POST['itemlist']) )
	- {
	- $ThemeId = array_shift( $_POST['itemlist'] );
	- $t = new clsThemeList();
	- $t->SetPrimaryTheme($ThemeId);
	- }
	- break;
	+ if($ro_perm) break;
	+ if( count($_POST['itemlist']) )
	+ {
	+ $ThemeId = array_shift( $_POST['itemlist'] );
	+ $t = new clsThemeList();
	+ $t->SetPrimaryTheme($ThemeId);
	+ }
	+ break;

	case "m_template_edit":
	-
	+ if($ro_perm) break;
	$ThemeId = $_POST["ThemeId"];
	$FileId = $_POST["FileId"];
	$f = new clsThemeFile($FileId);

	$f->Set("Description", $_POST["Description"] );
	$f->Update();
	$c = stripslashes($_POST["contents"]);
	$f->SaveFileContents($c);
	break;
	case "m_template_add":
	-
	+ if($ro_perm) break;
	$ThemeId = $_POST["ThemeId"];
	if( !is_object($f) ) $f = new clsThemeFile();

	$FilePath = $_POST['name'];

	if(!$FilePath)
	{
	$f->SetError('Template Name is required',3);
	break;
	}
	else
	{
	if( substr($FilePath,1) != '/' ) $FilePath = '/'.$FilePath;
	if( substr($FilePath,-3) != '.tpl' ) $FilePath .= '.tpl';
	$FileName = basename($FilePath);
	$FilePath = dirname($FilePath);

	// test if such file not already created

	$f->LoadFromDataBase( Array($FilePath,$FileName), Array('FilePath','FileName') );
	if( !$f->Get('FileId') )
	{
	$f->Set( Array('FilePath','FileName','ThemeId', 'Description'),
	Array($FilePath, $FileName,$_POST['ThemeId'], $_POST["Description"])
	);

	if( $f->IsWriteablePath(true) )
	{
	$f->Create();
	$c = stripslashes($_POST["contents"]);
	$f->SaveFileContents($c, true);
	}
	}
	else
	$f->SetError('Template with this name already exists',4);
	}
	break;
	case "m_template_delete":
	+ if($ro_perm) break;
	$dummy = new clsThemeFile();
	foreach($_POST["itemlist"] as $FileId)
	{
	$dummy->LoadFromDatabase($FileId);
	$dummy->Delete();
	}
	break;

	case "m_lang_add":
	$objEditItems = new clsLanguageList();
	$objEditItems->SourceTable = $objSession->GetEditTable("Language");
	$l = $objEditItems->AddLanguage($_POST["packname"],$_POST["localname"],
	(int)$_POST["enabled"],(int)$_POST["primary"],
	$_POST["icon"],$_POST["date_format"],$_POST["time_format"],
	$_POST["decimal"],$_POST["thousand"]);

	$ado = GetADODBConnection();
	$rs = $ado->Execute("SELECT MIN(LanguageId) as MinValue FROM ".$objEditItems->SourceTable);
	$NewId = $rs->fields["MinValue"]-1;
	$sql = "UPDATE ".$objEditItems->SourceTable." SET LanguageId=".$NewId." WHERE LanguageId=".$l->Get("LanguageId");
	if($objSession->HasSystemPermission("DEBUG.LIST"))
	echo $sql."<br>\n";
	$ado->Execute($sql);
	if($_POST["importlabels"]==1 && $_POST["srcpack"]>0)
	{
	$sql = "SELECT * FROM ".GetTablePrefix()."Phrase WHERE LanguageId=".$_POST["srcpack"];
	if($objSession->HasSystemPermission("DEBUG.LIST"))
	echo $sql."<br>\n";

	$rs = $ado->Execute($sql);
	$plist = new clsPhraseList();
	$plist->SourceTable = $objSession->GetEditTable("Phrase");
	$sql = "SELECT MIN(PhraseId) as MinId FROM ".$plist->SourceTable;
	$as = $ado->Execute($sql);
	if($as && !$as->EOF)
	{
	$MinId = (int)$as->fields["MinId"];
	}
	else
	$MinId = 0;
	$MinId--;
	while($rs && !$rs->EOF)
	{
	$data = $rs->fields;
	$plist->AddPhrase($data["Phrase"],$NewId,$data["Translation"],$data["PhraseType"]);
	$sql = "UPDATE ".$plist->SourceTable." SET PhraseId=$MinId WHERE PhraseId=0 LIMIT 1";
	$ado->Execute($sql);
	$MinId--;
	$rs->MoveNext();
	}
	}
	break;
	case "m_lang_export":
	- include_once($pathtoroot."kernel/include/xml.php");
	- $Ids = $_POST["LangList"]; // language ids list to export phrases from
	-
	- $phrase_types = GetVar('langtypes');
	- $phrase_types = ($phrase_types !== false) ? implode(',',$phrase_types) : null;
	-
	- $filename=$_POST["filename"];
	- if(strlen($filename)>0)
	- {
	- $ExportFilename = $pathtoroot.$admin."/export/".$filename;
	- $ExportResult = $objLanguages->ExportPhrases($ExportFilename,$Ids, $phrase_types);
	- }
	- break;
	+ if($ro_perm) break;
	+ include_once($pathtoroot."kernel/include/xml.php");
	+ $Ids = $_POST["LangList"]; // language ids list to export phrases from
	+
	+ $phrase_types = GetVar('langtypes');
	+ $phrase_types = ($phrase_types !== false) ? implode(',',$phrase_types) : null;
	+
	+ $filename=$_POST["filename"];
	+ if(strlen($filename)>0)
	+ {
	+ $ExportFilename = $pathtoroot.$admin."/export/".$filename;
	+ $ExportResult = $objLanguages->ExportPhrases($ExportFilename,$Ids, $phrase_types);
	+ }
	+ break;
	+
	case "m_lang_edit":
	$objEditItems = new clsLanguageList();
	$objEditItems->SourceTable = $objSession->GetEditTable("Language");
	$objEditItems->EditLanguage($_POST["LanguageId"],$_POST["packname"],
	$_POST["localname"],(int)$_POST["enabled"],
	(int)$_POST["primary"], $_POST["icon"],$_POST["date_format"],
	$_POST["time_format"], $_POST["decimal"],$_POST["thousand"]);

	if($_POST["importlabels"]==1 && $_POST["srcpack"]>0)
	{
	$ado = GetADODBConnection();
	$rs = $ado->Execute("SELECT * FROM ".GetTablePrefix()."Phrase WHERE LanguageId=".$_POST["srcpack"]);
	$plist = new clsPhraseList();
	$plist->SourceTable = $objSession->GetEditTable("Phrase");
	$sql = "SELECT MIN(PhraseId) as MinId FROM ".$plist->SourceTable;
	$as = $ado->Execute($sql);
	if($as && !$as->EOF)
	{
	$MinId = (int)$as->fields["MinId"];
	}
	else
	$MinId = 0;
	$MinId--;
	while($rs && !$rs->EOF)
	{
	$data = $rs->fields;
	$plist->AddPhrase($data["Phrase"],$_POST["LanguageId"],$data["Translation"],$data["PhraseType"]);
	$sql = "UPDATE ".$plist->SourceTable." SET PhraseId=$MinId WHERE PhraseId=0 LIMIT 1";
	$ado->Execute($sql);
	$MinId--;
	$rs->MoveNext();
	}
	unset($plist);
	}

	break;
	case "m_lang_delete":
	- if($ro_perm) break;
	- if (isset($_POST["itemlist"]))
	- {
	- $Phrases = new clsPhraseList();
	- foreach($_POST["itemlist"] as $id)
	- {
	- $objLanguages->DeleteLanguage($id);
	- $Phrases->DeleteLanguage($id);
	- }
	- unset($Phrases);
	- }
	- break;
	+ if($ro_perm) break;
	+ if (isset($_POST["itemlist"]))
	+ {
	+ $Phrases = new clsPhraseList();
	+ foreach($_POST["itemlist"] as $id)
	+ {
	+ $objLanguages->DeleteLanguage($id);
	+ $Phrases->DeleteLanguage($id);
	+ }
	+ unset($Phrases);
	+ }
	+ break;
	+
	case "m_lang_select":
	- $LangId = (int)$_POST["langselect"];
	- if($LangId)
	- {
	- if($objSession->Get("PortalUserId")>0)
	- {
	- //echo "$LangId";
	- $objSession->SetPersistantVariable("Language",$LangId);
	- }
	- $objSession->Set("Language",$LangId);
	- $objSession->Update();
	- $m_var_list_update["lang"] = $LangId;
	- $m_var_list["lang"] = $LangId;
	- }
	- break;
	+ if($ro_perm) break;
	+ $LangId = (int)$_POST["langselect"];
	+ if($LangId)
	+ {
	+ if($objSession->Get("PortalUserId")>0)
	+ {
	+ //echo "$LangId";
	+ $objSession->SetPersistantVariable("Language",$LangId);
	+ }
	+ $objSession->Set("Language",$LangId);
	+ $objSession->Update();
	+ $m_var_list_update["lang"] = $LangId;
	+ $m_var_list["lang"] = $LangId;
	+ }
	+ break;
	+
	case "m_phrase_edit":
	$objPhraseList = new clsPhraseList();
	if((int)$_POST["direct"] != 1)
	$objPhraseList->SourceTable = $objSession->GetEditTable("Phrase");
	$Phrases = $_POST["name"];
	foreach($Phrases as $PhraseId =>$name)
	{
	if($PhraseId>0)
	{
	$objPhraseList->EditPhrase($PhraseId,$_POST["name"][$PhraseId],$_POST["LanguageId"],$_POST["translation"][$PhraseId],$_POST["phrasetype"][$PhraseId]);
	}
	}

	if(strlen($_POST["name"][0]) && strlen($_POST["translation"][0]) && $_POST['Action1'] == "new")
	{
	$r = $objPhraseList->AddPhrase($_POST["name"][0],$_POST["LanguageId"],$_POST["translation"][0],$_POST["phrasetype"][0]);
	if ($r != "Error") {
	$ado = GetADODBConnection();
	$rs = $ado->Execute("SELECT MIN(PhraseId) as MinValue FROM ".$objPhraseList->SourceTable);
	$NewId = $rs->fields["MinValue"]-1;
	$sql = "UPDATE ".$objPhraseList->SourceTable." SET PhraseId=".$NewId." WHERE PhraseId=$PhraseId";
	if($objSession->HasSystemPermission("DEBUG.LIST"))
	echo $sql."<br>\n";
	$ado->Execute($sql);
	}
	else {
	$add_error = "Language tag with the same name already exists!";
	}
	}
	else if ($_POST['Action1'] == "new") {
	$add_error = "Fields name and translation are required!";
	}
	unset($objPhraseList);
	break;
	case "m_config_missing_phrase":
	- //phpinfo(INFO_VARIABLES);
	+ if($ro_perm) break;
	$LangId = $_POST["LangId"];
	$ThemeId = $_POST["ThemeId"];
	if(is_array($_POST["Phrase"]))
	{
	$objPhraseList = new clsPhraseList();
	$objPhraseList->SourceTable = $objSession->GetSessionKey()."_".$ThemeId."_labels";

	foreach($_POST["Phrase"] as $p => $value)
	{
	if(strlen($value))
	{
	$obj = $objPhraseList->GetItemByField("Phrase",$p,TRUE);
	if(is_object($obj))
	{
	if($obj->Get("Phrase")==$p)
	{
	$obj->Set("Translation",$value);
	$obj->Update();
	}
	else
	$objPhraseList->AddPhrase($p,$LangId,$value,1);
	}
	else
	$objPhraseList->AddPhrase($p,$LangId,$value,1);
	}
	}
	}
	break;
	case "m_phrase_delete":
	- if (isset($_POST["itemlist"]))
	+ if (isset($_POST["itemlist"]))
	{
	foreach($_POST["itemlist"] as $id)
	{
	$sql = "UPDATE ".$objSession->GetEditTable("Phrase")." SET LanguageId = 0 WHERE PhraseId = ".$id;
	$ado = GetADODBConnection();
	$ado->Execute($sql);
	}
	}
	unset($objPhraseList);
	break;
	case "m_emailevent_disable":
	if($ro_perm) break;
	$objEvents = new clsEventList();
	if (isset($_POST["itemlist"]))
	{
	foreach($_POST["itemlist"] as $id)
	{
	$m =& $objEvents->GetItem($id);
	$m->Set("Enabled",0);
	$m->Update();
	}
	}
	unset($objEvents);
	break;
	case "m_emailevent_enable":
	if($ro_perm) break;
	$objEvents = new clsEventList();
	if (isset($_POST["itemlist"]))
	{
	foreach($_POST["itemlist"] as $id)
	{
	$m =& $objEvents->GetItem($id);
	$m->Set("Enabled",1);
	$m->Update();
	}
	}
	unset($objEvents);
	break;
	case "m_emailevent_frontonly":
	if($ro_perm) break;
	$objEvents = new clsEventList();
	if (isset($_POST["itemlist"]))
	{
	foreach($_POST["itemlist"] as $id)
	{
	$m =& $objEvents->GetItem($id);
	$m->Set("Enabled",2);
	$m->Update();
	}
	}
	unset($objEvents);
	break;
	case "m_dlid":
	echo $Action.":".$DownloadId;
	die();
	break;
	case "m_emailevent_user":
	if($ro_perm) break;
	$objEvents = new clsEventList();
	//phpinfo(INFO_VARIABLES);
	//$objEvents->SourceTable = $objSession->GetEditTable("Events");
	$ids = $_POST["EventId"];
	$ids = str_replace("[","",$ids);
	$ids = str_replace("]","",$ids);
	$ids = str_replace("\"","",$ids);
	$ids = str_replace("\\","",$ids);


	$idlist = explode(",",$ids);
	foreach($idlist as $EventId)
	{
	$id = (int)stripslashes($EventId);
	$e =& $objEvents->GetItem((int)$EventId);
	$e->Set("FromUserId", $_POST["FromUserId"]);
	$e->Update();
	}
	$objEvents->Clear();
	unset($objEvents);
	break;
	case "m_emailevent_edit":
	$Template = $_POST["headers"];
	if(strlen($Template))
	{
	$Template .= "\n";
	}
	$Template = str_replace("\n\n","",$Template);
	$Template .= "Subject: ".$_POST["subject"]."\n\n";
	$Template .= $_POST["messageBody"];
	$objMessages = new clsEmailMessageList();
	$objMessages->SourceTable = $objSession->GetEditTable("EmailMessage");
	$m =& $objMessages->GetItem($_POST["MessageId"]);
	if(is_object($m))
	{
	if($_POST["sendhtml"]==1)
	{
	$m->Set("MessageType","html");
	}
	else
	$m->Set("MessageType","text");

	$m->Set("Template",$Template);
	$m->Update();
	}
	break;
	case "m_config_edit":
	//phpinfo(INFO_VARIABLES);
	if($ro_perm) break;
	$objAdmin = new clsConfigAdmin();
	$objAdmin->module = $_POST["module"];
	$objAdmin->section = $_POST["section"];
	if($objAdmin->section=="in-portal:configure_users")
	{
	if(strlen($_POST["RootPass"]) && strlen($_POST["RootPassVerify"]))
	{
	if($_POST["RootPass"]==$_POST["RootPassVerify"])
	{
	$_POST["RootPass"] = md5($_POST["RootPass"]);
	}
	}
	else
	{
	$_POST["RootPass"] = $objConfig->Get("RootPass");
	$_POST["RootPassVerify"] = $objConfig->Get("RootPassVerify");
	}
	}
	$objAdmin->LoadItems(FALSE);
	$objAdmin->SaveItems($_POST);
	break;

	case "m_mod_enable":
	if($ro_perm) break;
	if (isset($_POST["itemlist"]))
	{
	foreach($_POST["itemlist"] as $id)
	{
	$m =& $objModules->GetItemByField("Name",$id);
	if(is_object($m))
	{
	$m->Set("Loaded",1);
	$m->Update();
	}
	}
	$_GET["Refresh"] = 1;
	}
	break;
	case "m_mod_disable":
	if($ro_perm) break;
	if (isset($_POST["itemlist"]))
	{
	foreach($_POST["itemlist"] as $id)
	{
	if($id != "In-Portal")
	{
	$m =& $objModules->GetItemByField("Name",$id);
	if(is_object($m))
	{
	$m->Set("Loaded",0);
	$m->Update();
	}
	}
	}
	$_GET["Refresh"] = 1;
	}
	break;

	case "m_img_add":
	$objImageList = new clsImageList();
	$objImageList->SourceTable = $objSession->GetEditTable("Images");
	$LocalImage=0;
	$LocalThumb=0;
	$DestDir = "kernel/images/";

	$UserThumbSource = (int)$_POST["imgLocalThumb"];
	$LocalThumb = $UserThumbSource;

	$thumb_url = !$LocalThumb? $_POST["imgThumbUrl"] : "";

	if($_POST["imgSameImages"])
	{
	$LocalImage = $LocalThumb;
	$full_url = $thumb_url;
	}
	else
	{
	$LocalImage = (int)$_POST["imgLocalFull"];
	$file = $_FILES["imgFullFile"];
	$full_url = $LocalImage? "" : $_POST["imgFullUrl"];
	}

	if((!strlen($thumb_url) && !$LocalThumb) \|\| (!strlen($full_url) && !$LocalImage))
	{
	break;
	}

	$ado = GetADODBConnection();
	$NewId = $ado->GetOne('SELECT MIN(ImageId) as MinValue FROM '.$objImageList->SourceTable);
	if($NewId > 0) $NewId = 0;
	$NewId--;
	$img = $objImageList->Add($_POST["imgName"], $_POST["imgAlt"], $_POST["ResourceId"], $LocalImage, $LocalThumb, $full_url, $thumb_url, (int)$_POST["imgEnabled"], 0, (int)$_POST["imgDefault"], 0,(int)$_POST["imgSameImages"], $NewId);
	$img->Set("ImageId", $NewId);

	// $img->debuglevel=1;

	/*
	$sql = "UPDATE ".$objImageList->SourceTable." SET ImageId=".$NewId." WHERE ImageId=0";
	$ado->Execute($sql);

	// $img->Update();
	*/
	// echo "SL: $sql $NewId<BR>";

	// $img->debuglevel=1;

	$img->Pending=TRUE;
	if($LocalImage)
	{
	$file = $_FILES["imgFullFile"];
	if(is_array($file))
	{
	if($file["size"]>0)
	{
	$img->Set("LocalPath",$img->StoreUploadedImage($file,1, $DestDir,0));
	$uploaded=1;
	}
	}
	}

	if($LocalThumb)
	{
	$thumb = $_FILES["imgThumbFile"];
	if(is_array($thumb))
	{
	if($thumb["size"]>0)
	{
	$img->Set("ThumbPath",$img->StoreUploadedImage($thumb,1, $DestDir,1));
	$uploaded=1;
	}
	}
	}
	if($uploaded==1)
	$img->Update();

	break;

	case "m_img_edit":

	$objImageList = new clsImageList();
	$objImageList->SourceTable = $objSession->GetEditTable("Images");

	// $img->debuglevel=1;

	$img = $objImageList->GetItem($_POST["ImageId"]);

	## Get original values
	$LocalImage = $img->Get("LocalImage");
	$LocalThumb = $img->Get("LocalThumb");
	$SameImages = $img->Get("SameImages");
	$ThumbPath = $img->Get("ThumbPath");

	## New values
	$LocalThumbN = (int)$_POST["imgLocalThumb"];
	$LocalImageN = (int)$_POST["imgLocalFull"];

	$FULLFile = $_FILES["imgFullFile"];
	$THFile = $_FILES["imgThumbFile"];

	$DestDir = "kernel/images/";
	$img->Pending = FALSE;

	$SameImagesN = 0;
	$uploaded = 0;

	## Images were the same, but not any more
	if ($SameImages && !$_POST["imgSameImages"])
	{
	## TH was a local file
	if ($LocalThumb)
	{
	## TH image
	{
	## Try to Delete OLD FULL
	$img->DeleteLocalImage(FALSE, TRUE);

	## FULL image select, but field EMPTY - make a copy of old TH as FULL
	if ($LocalImageN && !(int)$FULLFile["size"])
	{
	// echo $pathToPending = $img->GetImageDir();
	if (!eregi("pending/$", $pathToPending))
	$pathToPending.= "pending/";

	$LocalThumb_File = $img->GetFileName(1);

	// echo "<b>CAN'T FIND FILE:</b> ".$pathToPending.$LocalThumb_File."<BR>";

	if (file_exists($pathToPending.$LocalThumb_File))
	{
	$LocalThumb_FileN = eregi_replace("^th_", "", $LocalThumb_File);
	$LocalThumb_FullFileN = $pathToPending.$LocalThumb_FileN;
	@unlink($LocalThumb_FullFileN);
	@copy($pathToPending.$LocalThumb_File, $LocalThumb_FullFileN);

	$uploaded = 1;
	$copied = 1;
	// echo "COPING: ".$DestDir."pending/".$LocalThumb_FileN." <BR>";
	}
	else
	{
	// echo "CAN'T FIND FILE: ".$pathToPending.$LocalThumb_File."<BR>";
	}
	}
	## Upload new FULL image
	elseif ($LocalImageN && (int)$FULLFile['size'])
	{
	$FULL_FileToUpload = $FULLFile;
	$FULL_URL = "";

	// echo " Upload new FULL image";
	}
	## Full is URL
	elseif (!$LocalImageN)
	{
	$img->DeleteLocalImage(FALSE, TRUE);
	$FULL_URL = $_POST['imgFullUrl'];
	$FULL_FileToUpload = "";
	}
	else
	{
	// echo " ## Unknow condition";
	}

	## Take care of Thumbnail here
	if ($LocalThumbN)
	{
	## Delete old if NEW TH image selected
	if ((int)$THFile['size'])
	{
	$img->DeleteLocalImage(TRUE, FALSE);
	$TH_FileToUpload = $THFile;
	}
	else
	$TH_FileToUpload = "";
	}
	else
	{
	$img->DeleteLocalImage(TRUE, FALSE);
	$TH_FileToUpload = "";
	$TH_URL = $_POST['imgThumbUrl'];
	}
	}
	}
	## TH was URL
	else
	{
	## Take care of FULL image here
	if ($LocalImageN && (int)$FULLFile["size"])
	{
	$FULL_FileToUpload = $FULLFile;
	$FULL_URL = "";
	}
	## Full is URL (or image size 0)
	else
	{
	$FULL_FileToUpload = "";
	$FULL_URL = $_POST['imgFullUrl'];
	}

	## Take care of Thumbnail here
	if ($LocalThumbN)
	{
	$TH_FileToUpload = (int)$THFile['size']? $THFile : "";
	$TH_URL = "";
	}
	else
	{
	$TH_FileToUpload = "";
	$TH_URL = $_POST['imgThumbUrl'];
	}
	}
	}
	## Images were the same, and still the same
	elseif ($SameImages && $_POST['imgSameImages'])
	{
	## Take care of Thumbnail & FULL here
	if ($LocalThumbN)
	{
	if ((int)$THFile['size'])
	{
	$img->DeleteLocalImage(TRUE, FALSE);
	$TH_FileToUpload = $THFile;
	}
	else
	$TH_FileToUpload = "";

	$FULL_URL = $TH_URL = "";
	}
	else
	{
	$TH_FileToUpload = $FULL_FileToUpload = "";
	$FULL_URL = $TH_URL = $_POST['imgThumbUrl'];
	}

	## Delete old FULL image
	$img->DeleteLocalImage(FALSE,TRUE);

	$SameImagesN = 1;
	}
	## Images were NOT the same, and selected as the same now
	elseif (!$SameImages && $_POST["imgSameImages"])
	{
	## Take care of Thumbnail & FULL here
	if ($LocalThumbN)
	{
	if ((int)$THFile['size'])
	{
	$img->DeleteLocalImage(TRUE, FALSE);
	$TH_FileToUpload = $THFile;
	}
	else
	$TH_FileToUpload = "";


	$FULL_URL = $TH_URL = "";
	}
	else
	{
	$img->DeleteLocalImage(TRUE, FALSE);
	$TH_FileToUpload = $FULL_FileToUpload = "";
	$FULL_URL = $TH_URL = $_POST['imgThumbUrl'];
	}

	## Clean up FULL image
	$img->DeleteLocalImage(FALSE, TRUE);

	$SameImagesN = 1;
	}
	## Images were NOT the same, and selected as NOT the same
	elseif (!$SameImages && !$_POST["imgSameImages"])
	{
	## Take care of Thumbnail
	if ($LocalThumbN)
	{
	if ((int)$THFile['size'])
	{
	$img->DeleteLocalImage(TRUE, FALSE);
	$TH_FileToUpload = $THFile;
	}
	else
	$TH_FileToUpload = "";

	$TH_URL = "";
	}
	else
	{
	$img->DeleteLocalImage(TRUE, FALSE);
	$TH_FileToUpload = "";
	$TH_URL = $_POST['imgThumbUrl'];
	}

	## Take care of FULL here
	if ($LocalImageN)
	{
	if ((int)$FULLFile['size'])
	{
	$img->DeleteLocalImage(FALSE, TRUE);
	$FULL_FileToUpload = $FULLFile;
	}
	else
	$FULL_FileToUpload = "";

	$FULL_URL = "";
	}
	else
	{
	$img->DeleteLocalImage(FALSE, TRUE);
	$FULL_FileToUpload = "";
	$FULL_URL = $_POST['imgFullUrl'];
	}
	}
	## Unknow condition
	else
	{
	;
	}

	$img = $objImageList->Edit($_POST["ImageId"],$_POST["imgName"], $_POST["imgAlt"], $_POST["ResourceId"], $LocalImageN, $LocalThumbN, $FULL_URL, $TH_URL, (int)$_POST["imgEnabled"], (int)$_POST["imgPriority"], (int)$_POST["imgDefault"], 0, $SameImagesN);

	// echo "<B>DATA:</B> <BR> LocalImageN: $LocalImageN, LocalThumbN: $LocalThumbN, FULL_URL: $FULL_URL, TH_URL: $TH_URL, SameImagesN: $SameImagesN <BR>";


	$img->Pending = TRUE;

	if (!empty($FULL_FileToUpload))
	{
	$img->Set("LocalPath",$img->StoreUploadedImage($FULL_FileToUpload, 1, $DestDir, 0));
	$uploaded = 1;
	}
	/*
	elseif (!$LocalImageN)
	{
	$img->Set("LocalPath", "");
	$uploaded = 1;
	}
	*/

	if (!empty($TH_FileToUpload))
	{
	$img->Set("ThumbPath", $img->StoreUploadedImage($TH_FileToUpload, 1, $DestDir, 1));
	$uploaded = 1;
	}

	if ($copied)
	{
	$img->Set("LocalPath", $DestDir."pending/".$LocalThumb_FileN);
	$uploaded = 1;
	}

	if($uploaded==1)
	$img->Update();

	break;
	case "m_img_move_up":
	if (isset($_POST["itemlist"]))
	{
	$objImageList = new clsImageList();
	$objImageList->SourceTable = $objSession->GetEditTable("Images");
	foreach($_POST["itemlist"] as $id)
	{
	$img = $objImageList->GetItem($id);
	$img->MoveUp();
	}
	}
	break;
	case "m_img_move_down":
	if (isset($_POST["itemlist"]))
	{
	$objImageList = new clsImageList();
	$objImageList->SourceTable = $objSession->GetEditTable("Images");
	$itemlist=array_reverse($_POST["itemlist"]);
	foreach($itemlist as $id)
	{
	$img = $objImageList->GetItem($id);
	$img->MoveDown();
	}
	}
	break;

	case "m_img_delete":
	if(isset($_POST["itemlist"]))
	{
	$objImageList = new clsImageList();
	$objImageList->SourceTable = $objSession->GetEditTable("Images");
	foreach($_POST["itemlist"] as $id)
	{
	$img = $objImageList->GetItem($id);
	$img->Set("ResourceId", 0);
	$img->Update();
	//$img->Delete();
	}
	}
	break;
	case "m_restore_delete":
	- $bdate = $_POST["backupdate"];
	- if($bdate>0)
	- {
	- $BackupFile = $objConfig->Get("Backup_Path")."/dump".$bdate.".txt";
	- if(file_exists($BackupFile))
	- unlink($BackupFile);
	- }
	- break;
	+ if($ro_perm) break;
	+ $bdate = $_POST["backupdate"];
	+ if($bdate>0)
	+ {
	+ $BackupFile = $objConfig->Get("Backup_Path")."/dump".$bdate.".txt";
	+ if(file_exists($BackupFile))
	+ unlink($BackupFile);
	+ }
	+ break;
	+
	case "m_taglib":
	include($pathtoroot."kernel/include/tag-class.php");
	ParseTagLibrary();
	- break;
	+ break;
	+
	case "m_sql_query":
	- $SqlQuery = $_POST["sql"];
	+ if($ro_perm) break;
	+ $SqlQuery = $_POST["sql"];
	$ado = GetADODBConnection();
	if(strlen($sql))
	{
	$SqlResult = $ado->Execute(stripslashes($SqlQuery));
	$SqlError = $ado->ErrorMsg();
	$SqlErrorNum = $ado->ErrorNo();
	}
	break;
	case "m_purge_email_log":
	if($ro_perm) break;
	$ado = GetADODBConnection();

	$sql = "DELETE FROM ".GetTablePrefix()."EmailLog";
	$ado->Execute($sql);
	break;
	case "m_session_delete":
	if($ro_perm) break;
	$ado = GetADODBConnection();
	if (count($_POST['itemlist']) > 0) {
	foreach($_POST["itemlist"] as $id)
	{
	$sql = "DELETE FROM ".GetTablePrefix()."UserSession WHERE SessionKey='$id'";
	$ado->Execute($sql);
	}
	}
	else {
	$sql = "DELETE FROM ".GetTablePrefix()."UserSession WHERE Status='0'";
	$ado->Execute($sql);
	}
	break;
	case "m_add_rule":
	$objEditItems = new clsBanRuleList();
	$objEditItems->SourceTable = $objSession->GetEditTable("BanRules");
	//$ItemType,$RuleType,$ItemField,$ItemVerb,$ItemValue,$Priority,$Status;
	$objEditItems->AddRule($_POST["rule_itemtype"],$_POST["rule_type"],$_POST["rule_field"],
	$_POST["rule_verb"],$_POST["rule_value"],(int)$_POST["rule_priority"],
	(int)$_POST["rule_status"], $_POST['rule_error']);
	break;
	case "m_edit_rule":
	$objEditItems = new clsBanRuleList();
	$objEditItems->SourceTable = $objSession->GetEditTable("BanRules");
	//$ItemType,$RuleType,$ItemField,$ItemVerb,$ItemValue,$Priority,$Status;
	$objEditItems->EditRule($_POST["rule_id"],$_POST["rule_itemtype"],$_POST["rule_type"],$_POST["rule_field"],
	$_POST["rule_verb"],$_POST["rule_value"],(int)$_POST["rule_priority"],
	(int)$_POST["rule_status"], $_POST['rule_error']);
	break;
	case "m_rule_move_up":
	if($ro_perm) break;
	if(isset($_POST["itemlist"]))
	{
	foreach($_POST["itemlist"] as $id)
	{
	$i = $objBanList->GetItem($id);
	$i->Increment("Priority");
	}
	}
	break;
	case "m_rule_move_down":
	if($ro_perm) break;
	if(isset($_POST["itemlist"]))
	{
	foreach($_POST["itemlist"] as $id)
	{
	$i = $objBanList->GetItem($id);
	$i->Decrement("Priority");
	}
	}
	break;

	case "m_rule_delete":
	if($ro_perm) break;
	if(isset($_POST["itemlist"]))
	{
	foreach($_POST["itemlist"] as $id)
	{
	$i = $objBanList->GetItem($id);
	$i->Delete();
	}
	}
	break;
	case "m_ban_user":
	if($ro_perm) break;
	if($_POST["UserEditStatus"]==1)
	{
	$UserId = $_POST["user_id"];
	$u = $objUsers->GetItem($UserId);
	if(is_object($u))
	{
	if((int)$_POST["ban_login"])
	{
	if(strlen($_POST["user_login"]))
	$objBanList->AddRule(6,0,"Login",3,$_POST["user_login"],0,1);
	}
	if((int)$_POST["ban_email"])
	{
	if(strlen($_POST["user_email"]))
	$objBanList->AddRule(6,0,"Email",3,$_POST["user_email"],0,1);
	}
	if((int)$_POST["ban_ip"])
	{
	if(strlen($_POST["user_ip"]))
	$objBanList->AddRule(6,0,"ip",3,$_POST["user_ip"],0,1);
	}
	$u->Deny();
	}
	}
	break;

	}

	/* image upload management */
	if( isset($_POST['img']) && $_POST['img'] == 1 )
	{
	foreach($_FILES as $img => $FILE)
	{
	$name = $_POST["img_Name_$img"];
	$alt = $_POST["img_Alt_$img"];
	$url = $_POST["img_Url_$img"];
	$res_id = $_POST["img_Res_$img"];
	$relvalue = $_POST["img_Rel_$img"];
	$thumb = (int)$_POST["img_Thumb_$img"];
	$dest = AddSlash($_POST["img_DestDir_$img"]);
	if($_POST["img_Del_$img"]=="Delete")
	{
	$img = $objImageList->GetImageByResource($res_id,$relvalue);
	$img->Delete();
	unset($img);
	$objImageList->Clear();
	}
	else
	{
	if($FILE["size"]>0)
	{
	/* an image was uploaded */
	$objImageList->HandleImageUpload($FILE,$res_id,$relvalue,$dest, $name,$alt,$thumb);
	}
	else
	{ /* remote images handled here */
	if(strlen($url)>0)
	{
	if($relvalue>0)
	{
	$img = $objImageList->GetImageByResource($res_id,$relvalue);
	$img->Set("Name",$name);
	$img->Set("AltName", $alt);
	$img->Set("IsThumbnail",$thumb);
	$img->Set("Url",$url);
	$img->Update();
	}
	else
	{
	$relvalue = $objImageList->GetNextRelateValue($res_id);
	$objImageList->NewRemoteImage($url,$res_id,$relvalue, $name, $alt, $thumb);
	}
	}
	}
	}
	}
	}

	// ALL Saving Stuff From Temp Tables Heppens Here

	//echo "==== BEGIN ==== <br>";
	$has_perm = $objSession->HasSystemPermission("SYSTEM_ACCESS.READONLY");
	//echo "PortalUserID: [".$objSession->Get("PortalUserId")."]<br>";
	//print_pre($objSession);
	//echo "PermSet: [".$has_perm."]<br>";

	if( !$has_perm )
	{

	/* category Edit */
	if( GetVar('CatEditStatus') == 1 )
	{
	$adodbConnection = GetADODBConnection();
	// $sql = "SELECT * FROM ".$objSession->GetEditTable("Category")." WHERE CategoryId=0";
	$sql = "SELECT ParentId FROM ".$objSession->GetEditTable("Category")." WHERE CategoryId=-1";

	$rs = $adodbConnection->Execute($sql);
	while ($rs && !$rs->EOF)
	{
	if($rs->fields["ParentId"] > 0) RunUp($rs->fields["ParentId"],"Increment_Count");
	$rs->MoveNext();
	}

	$objCatList->CopyFromEditTable("CategoryId");
	$objCustomDataList->CopyFromEditTable("CustomDataId");
	$objCatList->Clear();

	if($_REQUEST['CategoryId'] > 0) // not root category is updated
	{
	$objImages = new clsImageList();
	$objImages->CopyFromEditTable("ImageId");
	}
	}

	if( GetVar('CatEditStatus') == 2 )
	{
	$objCatList->PurgeEditTable("CategoryId");
	$objCustomDataList->PurgeEditTable("CustomDataId");
	if($_REQUEST['CategoryId'] > 0) // not root category is updated
	{
	$objImages = new clsImageList();
	$objImages->CopyFromEditTable("ImageId");
	//$objImages->PurgeEditTable("ImageId");
	}
	$objCatList->Clear();
	}

	/* User Edit */
	if( GetVar('UserEditStatus') == 1 )
	{
	$objUsers->CopyFromEditTable("PortalUserId");
	$objCustomDataList->CopyFromEditTable("CustomDataId");
	$objGroups->Clear();
	$objImages = new clsImageList();
	$objImages->CopyFromEditTable("ImageId");
	}
	if( GetVar('UserEditStatus') == 2 )
	{
	$objGroups->PurgeEditTable("PortalUserId");
	$objCustomDataList->PurgeEditTable("CustomDataId");
	$objGroups->Clear();
	}

	/* Group Edit */
	if( GetVar('GroupEditStatus') == 1 )
	{
	$objGroups->CopyFromEditTable("GroupId");
	$objCustomDataList->CopyFromEditTable("CustomDataId");
	$objGroups->Clear();
	}
	if( GetVar('GroupEditStatus') == 2 )
	{
	$objGroups->PurgeEditTable("GroupId");
	$objCustomDataList->PurgeEditTable("CustomDataId");
	$objGroups->Clear();
	}

	/* Theme Edit */
	if( GetVar('ThemeEditStatus') == 1 )
	{
	$objThemes->CopyFromEditTable();
	$objThemes->Clear();
	}

	if( GetVar('ThemeEditStatus') == 2 )
	{
	$objThemes->PurgeEditTable();
	$objThemes->Clear();
	}

	/* Language Edit */
	if( GetVar('LangEditStatus') == 1 )
	{
	$Messages = new clsEmailMessageList();
	$Messages->CopyFromEditTable();
	$Messages->Clear();
	$objLanguages->CopyFromEditTable();
	$objLanguages->Clear();

	$Phrases = new clsPhraseList();
	$Phrases->CopyFromEditTable();
	$Phrases->Clear();
	$Phrases->PurgeEditTable();
	}
	if( GetVar('LangEditStatus') == 2 )
	{
	$objLanguages->PurgeEditTable();
	$objLanguages->Clear();
	$Phrases = new clsPhraseList();
	$Phrases->PurgeEditTable();
	$Messages = new clsEmailMessageList();
	$Messages->PurgeEditTable();
	}

	if( GetVar('MissingLangEditStatus') == 1 )
	{
	$objPhraseList = new clsPhraseList();
	$objPhraseList->SourceTable = $objSession->GetSessionKey()."_".$ThemeId."_labels";

	$objEditList = new clsPhraseList();
	$objEditList->SourceTable = $objSession->GetEditTable("Phrase");

	$ado = GetADODBConnection();
	$rs = $ado->Execute("SELECT MIN(PhraseId) as MinValue FROM ".$objEditList->SourceTable);
	$NewId = $rs->fields["MinValue"]-1;

	$objPhraseList->Query_Item("SELECT * FROM ".$objPhraseList->SourceTable);
	foreach($objPhraseList->Items as $p)
	{
	if(strlen($p->Get("Translation"))>0)
	{
	$p->tablename = $objEditList->SourceTable;
	$p->Dirty();
	$p->UnsetIDField();
	$p->Set("PhraseId",$NewId);
	$NewId--;
	$p->Create();
	}
	}
	$ado->Execute("DROP TABLE IF EXISTS ".$objPhraseList->SourceTable);
	}

	if( GetVar('MissingLangEditStatus') == 2 )
	{
	$table = $objSession->GetSessionKey()."_".$ThemeId."_labels";
	$ado = GetADODBConnection();
	$ado->Execute("DROP TABLE IF EXISTS ".$table);
	}

	/* Ban Rule Edit */
	if( GetVar('RuleEditStatus') == 1 )
	{
	$objBanList->CopyFromEditTable("RuleId");
	$objBanList->Clear();
	}
	if( GetVar('RuleEditStatus') == 2 )
	{
	$objBanList->PurgeEditTable("RuleId");
	$objBanList->Clear();
	}
	}
	elseif( defined('DEBUG_ACTIONS') )
	{
	if( isset($_REQUEST['Action']) && $_REQUEST['Action'] )
	echo "<b>USER HAS RO-ACCESS</b> on action [<b>".$_REQUEST['Action']."</b>]<br>";
	}

	//echo "==== END ==== <br>";

	?>

	Property changes on: trunk/kernel/action.php
	___________________________________________________________________
	Modified: cvs2svn:cvs-rev
	## -1 +1 ##
	-1.39
	\ No newline at end of property
	+1.40
	\ No newline at end of property
	Index: trunk/kernel/include/parseditem.php
	===================================================================
	--- trunk/kernel/include/parseditem.php (revision 479)
	+++ trunk/kernel/include/parseditem.php (revision 480)
	@@ -1,2941 +1,2941 @@
	<?php
	global $ItemTypePrefixes;

	$ItemTypePrefixes = array();
	$ItemTagFiles = array();

	function RegisterPrefix($class,$prefix,$file)
	{
	global $ItemTypePrefixes, $ItemTagFiles;

	$ItemTypePrefixes[$class] = $prefix;
	$ItemTagFiles[$prefix] = $file;
	}

	class clsParsedItem extends clsItemDB
	{
	var $TagPrefix;
	var $Parser;
	var $AdminParser;

	function clsParsedItem($id=NULL)
	{
	global $TemplateRoot;

	$this->clsItemDB();
	$this->Parser = new clsTemplateList($TemplateRoot);
	$this->AdminParser = new clsAdminTemplateList();
	}

	/* function ParseObject($element)
	{
	$extra_attribs = ExtraAttributes($element->attributes);
	if(strtolower($element->name)==$this->TagPrefix)
	{
	$field = strtolower($element->attributes["_field"]);
	$tag = $this->TagPrefix."_".$field;
	$ret = $this->parsetag($tag);
	}
	return $ret;
	}
	*/
	function ParseTimeStamp($d,$attribs=array())
	{
	if( isset($attribs["_tz"]) )
	{
	$d = GetLocalTime($d,$objSession->Get("tz"));
	}
	$part = isset($attribs["_part"]) ? strtolower($attribs["_part"]) : '';
	if(strlen($part))
	{
	$ret = ExtractDatePart($part,$d);
	}
	else
	{
	if($d<=0)
	{
	$ret = "";
	}
	else
	$ret = LangDate($d);
	}
	return $ret;
	}

	function ParseObject($element)
	{
	global $objConfig, $objCatList, $var_list_update, $var_list, $n_var_list_update, $m_var_list_update;

	$extra_attribs = ExtraAttributes($element->attributes);
	$ret = "";

	if ($this->TagPrefix == "email" && strtolower($element->name) == "touser") {
	$this->TagPrefix = "touser";
	}

	if(strtolower($element->name)==$this->TagPrefix)
	{
	$field = strtolower($element->attributes["_field"]);
	switch($field)
	{
	case "id":
	$ret = $this->Get($this->id_field);
	break;
	case "resourceid":
	if(!$this->NoResourceId)
	$ret = $this->Get("ResourceId");
	break;
	case "category":
	$c = $objCatList->GetItem($this->Get("CategoryId"));
	if(is_object($c))
	{
	$ret = $c->parsetag($element->attributes["_cattag"]);
	}
	break;
	case "priority":
	if($this->Get("Priority")!=0)
	{
	$ret = (int)$this->Get("Priority");
	}
	else
	$ret = "";
	break;
	case "link":
	if(method_exists($this,"ItemURL"))
	{
	$ret = $this->ItemURL($element->attributes["_template"],FALSE,"");
	}
	break;
	case "cat_link":
	if(method_exists($this,"ItemURL"))
	{
	$ret = $this->ItemURL($element->attributes["_template"],TRUE,"");
	}
	break;
	case "fullpath":
	$ret = $this->Get("CachedNavbar");
	if(!strlen($ret))
	{
	if(is_numeric($this->Get("CategoryId")))
	{
	$c = $objCatList->GetItem($this->Get("CategoryId"));
	if(is_object($c))
	$ret = $c->Get("CachedNavbar");
	}
	else
	{
	if(method_exists($this,"GetPrimaryCategory"))
	{
	$cat = $this->GetPrimaryCategory();
	$c = $objCatList->GetItem($cat);
	if(is_object($c))
	$ret = $c->Get("CachedNavbar");
	}
	}
	}
	// $ret = $this->HighlightText($ret);
	break;

	case "relevance":
	$style = $element->attributes["_displaymode"];
	if(!strlen($style))
	$style = "numerical";
	switch ($style)
	{
	case "numerical":
	$ret = (100 * LangNumber($this->Get("Relevance"),1))."%";
	break;
	case "bar":
	$OffColor = $element->attributes["_offbackgroundcolor"];
	$OnColor = $element->attributes["_onbackgroundcolor"];
	$percentsOff = (int)(100 - (100 * $this->Get("Relevance"))); if ($percentsOff)
	{
	$percentsOn = 100 - $percentsOff;
	$ret = "<td width=\"$percentsOn%\" bgcolor=\"$OnColor\"><img src=\"img/s.gif\"></td><td width=\"$percentsOff%\" bgcolor=\"$OffColor\"><img src=\"img/s.gif\"></td>";
	}
	else
	$ret = "<td width=\"100%\" bgcolor=\"$OnColor\"><img src=\"img/s.gif\"></td>";
	break;
	case "graphical":
	$OnImage = $element->attributes["_onimage"];
	if (!strlen($OnImage))
	break;
	// Get image extension
	$image_data = explode(".", $OnImage);
	$image_ext = $image_data[count($image_data)-1];
	unset($image_data[count($image_data)-1]);
	$rel = (10 * LangNumber($this->Get("Relevance"),1));
	$OnImage1 = join(".", $image_data);

	if ($rel)
	$img_src = $OnImage1."_".$rel.".".$image_ext;
	else
	$img_src = $OnImage;

	$ret = "<img src=\"$img_src\" border=\"0\" alt=\"".(10*$rel)."\">";
	break;
	}

	break;

	case "rating":
	$style = $element->GetAttributeByName("_displaymode");
	if(!strlen($style))
	$style = "numerical";
	switch($style)
	{
	case "numerical":
	$ret = LangNumber($this->Get("CachedRating"),1);
	break;
	case "text":
	$ret = RatingText($this->Get("CachedRating"));
	break;
	case "graphical":
	$OnImage = $element->attributes["_onimage"];
	$OffImage = $element->attributes["_offimage"];
	$images = RatingTickImage($this->Get("CachedRating"),$OnImage,$OffImage);

	for($i=1;$i<=count($images);$i++)
	{
	$url = $images[$i];
	if(strlen($url))
	{
	$ret .= "<IMG src=\"$url\" $extra_attribs >";
	$ret .= $element->attributes["_separator"];
	}
	}
	break;
	}
	break;
	case "reviews":
	$today = FALSE;

	if(method_exists($this,"ReviewCount"))
	{
	if($element->GetAttributeByName("_today"))
	$today = TRUE;
	$ret = $this->ReviewCount($today);
	}
	else
	$ret = "";

	break;
	case "votes":
	$ret = (int)$this->Get("CachedVotesQty");
	break;

	case "favorite":
	if(method_exists($this,"IsFavorite"))
	{
	if($this->IsFavorite())
	{
	$ret = $element->attributes["_label"];
	if(!strlen($ret))
	$ret = "lu_favorite";
	$ret = language($ret);
	}
	else
	$ret = "";
	}
	break;
	case "new":
	if(method_exists($this,"IsNewItem"))
	{
	if($this->IsNewItem())
	{
	$ret = $element->GetAttributeByName('_label');
	if(!strlen($ret))
	$ret = "lu_new";
	$ret = language($ret);
	}
	else
	$ret = "";
	}
	break;
	case "pop":
	if(method_exists($this,"IsPopItem"))
	{
	if($this->IsPopItem())
	{
	$ret = $element->attributes["_label"];
	if(!strlen($ret))
	$ret = "lu_pop";
	$ret = language($ret);
	}
	else
	$ret = "";
	}
	break;
	case "hot":
	if(method_exists($this,"IsHotItem"))
	{
	if($this->IsHotItem())
	{
	$ret = $element->GetAttributeByName("_label");
	if(!strlen($ret))
	$ret = "lu_hot";
	$ret = language($ret);
	}
	else
	$ret = "";
	}
	break;
	case "pick":
	if($this->Get("EditorsPick")==1)
	{
	$ret = $element->GetAttributeByName('_label');
	if(!strlen($ret))
	$ret = "lu_pick";
	$ret = language($ret);
	}
	else
	$ret = "";
	break;
	case "admin_icon":
	if(method_exists($this,"StatusIcon"))
	{
	if($element->GetAttributeByName("fulltag"))
	{
	$ret = "<IMG $extra_attribs SRC=\"".$this->StatusIcon()."\">";
	}
	else
	$ret = $this->StatusIcon();
	}
	break;
	case "custom":
	if(method_exists($this,"GetCustomFieldValue"))
	{
	$field = $element->attributes["_customfield"];
	$default = $element->attributes["_default"];
	if (strlen($field))
	$ret = $this->GetCustomFieldValue($field,$default);
	}
	break;
	case "image":
	$default = $element->attributes["_primary"];
	$name = $element->attributes["_name"];

	if(strlen($name))
	{
	$img = $this->GetImageByName($name);
	}
	else
	{
	if($default)
	$img = $this->GetDefaultImage();
	}

	if(is_object($img))
	{

	if(strlen($element->attributes["_imagetemplate"]))
	{
	$ret = $img->ParseTemplate($element->attributes["_imagetemplate"]);
	break;
	}
	else
	{
	if($element->attributes["_thumbnail"])
	{
	$url = $img->parsetag("thumb_url");
	}
	else
	{

	if(!$element->attributes["_nothumbnail"])
	{
	$url = $img->parsetag("image_url");
	}
	else
	{
	$url = $img->FullURL(TRUE,"");
	}
	}
	}
	}
	else
	{
	$url = $element->attributes["_defaulturl"];

	}

	if($element->attributes["_imagetag"])
	{
	if(strlen($url))
	{
	$ret = "<IMG src=\"$url\" $extra_attribs >";
	}
	else
	$ret = "";
	}
	else
	$ret = $url;
	break;
	default:
	$ret = "Undefined:".$element->name;
	break;
	}

	}
	else if ($this->TagPrefix == 'email'){
	$ret = "Undefined:".$element->name;
	}
	return $ret;
	}

	function ParseString($name)
	{
	$el = new clsHtmlTag();
	$el->Clear();
	$el->prefix = "inp";
	$el->name = $name;

	$numargs = func_num_args();
	$arg_list = func_get_args();
	for ($i = 1; $i < $numargs; $i++)
	{
	$attr = $arg_list[$i];
	$parts = explode("=",$attr,2);
	$name = $parts[0];
	$val = $parts[1];
	$el->attributes[$name] = $val;
	}
	return $this->ParseObject($el);
	}

	/* pass attributes as strings
	ie: ParseStringEcho('tagname','_field="something" _data="somethingelse"');
	*/
	function ParseStringEcho($name)
	{
	$el = new clsHtmlTag();
	$el->Clear();
	$el->prefix = "inp";
	$el->name = $name;

	$numargs = func_num_args();
	$arg_list = func_get_args();
	for ($i = 1; $i < $numargs; $i++)
	{
	$attr = $arg_list[$i];
	$parts = explode("=",$attr,2);
	$name = $parts[0];
	$val = $parts[1];
	$el->attributes[$name] = $val;
	}
	echo $this->ParseObject($el);
	}

	function ParseElement($raw, $inner_html ="")
	{
	$tag = new clsHtmlTag($raw);
	$tag->inner_html = $inner_html;

	if($tag->parsed)
	{
	if($tag->name=="include" \|\| $tag->name=="perm_include" \|\| $tag->name=="lang_include")
	{
	$output = $this->Parser->IncludeTemplate($tag);
	}
	else
	{
	$output = $this->ParseObject($tag);
	//echo $output."<br>";
	if(substr($output,0,9)=="Undefined")
	{
	$output = $tag->Execute();
	// if(substr($output,0,8)="{Unknown")
	// $output = $raw;
	} return $output;
	}
	}
	else
	return "";
	}

	function AdminParseTemplate($file)
	{
	$html = "";
	$t = $this->AdminParser->GetTemplate($file);

	if(is_object($t))
	{
	array_push($this->AdminParser->stack,$file);
	$html = $t->source;
	$next_tag = strpos($html,"<inp:");
	while($next_tag)
	{
	$end_tag = strpos($html,"/>",$next_tag);
	$tagtext = substr($html,$next_tag,($end_tag - $next_tag)+2);
	$pre = substr($html,0,$next_tag);
	$post = substr($html,$end_tag+2);
	$inner = $this->ParseElement($tagtext);
	$html = $pre.$inner.$post;
	$next_tag = strpos($html,"<inp:");
	}
	array_pop($this->AdminParser->stack);
	}
	return $html;
	}

	function ParseTemplateText($text)
	{
	$html = $text;
	$search = "<inp:".$this->TagPrefix;
	$next_tag = strpos($html,"<inp:");
	//$next_tag = strpos($html,$search);


	while($next_tag)
	{
	$closer = strpos(strtolower($html),">",$next_tag);
	$end_tag = strpos($html,"/>",$next_tag);
	if($end_tag < $closer \|\| $closer == 0)
	{
	$tagtext = substr($html,$next_tag,($end_tag - $next_tag)+2);
	$pre = substr($html,0,$next_tag);
	$post = substr($html,$end_tag+2);
	$inner = $this->ParseElement($tagtext);
	$html = $pre.$inner.$post;
	}
	else
	{

	$OldTagStyle = "</inp>";

	## Try to find end of TagName
	$TagNameEnd = strpos($html, " ", $next_tag);

	## Support Old version
	// $closer = strpos(strtolower($html),"</inp>",$next_tag);
	if ($TagNameEnd)
	{
	$Tag = strtolower(substr($html, $next_tag, $TagNameEnd-$next_tag));
	$TagName = explode(":", $Tag);
	if (strlen($TagName[1]))
	$CloserTag = "</inp:".$TagName[1].">";
	}
	else
	{
	$CloserTag = $OldTagStyle;
	}

	$closer = strpos(strtolower($html), $CloserTag, $next_tag);

	## Try to find old tag closer
	if (!$closer && ($CloserTag != $OldTagStyle))
	{
	$CloserTag = $OldTagStyle;
	$closer = strpos(strtolower($html), $CloserTag, $next_tag);
	}

	$end_tag = strpos($html,">",$next_tag);
	$tagtext = substr($html,$next_tag,($end_tag - $next_tag)+1);
	$pre = substr($html,0,$next_tag);
	$inner = substr($html,$end_tag+1,$closer-($end_tag+1));
	$post = substr($html,$end_tag+1+strlen($inner) + strlen($CloserTag));
	//echo "PRE:". htmlentities($pre,ENT_NOQUOTES);
	//echo "INNER:". htmlentities($inner,ENT_NOQUOTES);
	//echo "POST:". htmlentities($post,ENT_NOQUOTES);

	$parsed = $this->ParseElement($tagtext);
	if(strlen($parsed))
	{
	$html = $pre.$this->ParseTemplateText($inner).$post;
	}
	else
	$html = $pre.$post;
	}
	$next_tag = strpos($html,$search);
	}
	return $html;
	}

	function ParseTemplate($tname)
	{
	global $objTemplate, $LogLevel,$ptime,$timestart;

	LogEntry("Parsing $tname\n");
	$LogLevel++;
	$html = "";
	$t = $objTemplate->GetTemplate($tname);
	//$t = $this->Parser->GetTemplate($tname);
	if(is_object($t))
	{
	array_push($this->Parser->stack,$tname);
	$html = $t->source;

	$html = $this->ParseTemplateText($html);
	array_pop($this->Parser->stack);
	}
	$LogLevel--;
	LogEntry("Finished Parsing $tname\n");
	$ptime = round(getmicrotime() - $timestart,6);
	$xf = 867530; //Download ID
	if($xf != 0)
	{
	$x2 = substr($ptime,-6);
	$ptime .= $xf ^ $x2; //(1/1000);
	}
	return $html;
	}

	function SendUserEventMail($EventName,$ToUserId,$LangId=NULL,$RecptName=NULL)
	{
	global $objMessageList,$FrontEnd;

	$Event =& $objMessageList->GetEmailEventObject($EventName,0,$LangId);

	if(is_object($Event))
	{
	if($Event->Get("Enabled")=="1" \|\| ($Event->Get("Enabled")==2 && $FrontEnd))
	{
	$Event->Item = $this;
	if(is_numeric($ToUserId))
	{
	return $Event->SendToUser($ToUserId);
	}
	else
	return $Event->SendToAddress($ToUserId,$RecptName);
	}
	}
	}

	function SendAdminEventMail($EventName,$LangId=NULL)
	{
	global $objMessageList,$FrontEnd;

	//echo "Firing Admin Event $EventName <br>\n";
	$Event =& $objMessageList->GetEmailEventObject($EventName,1,$LangId);
	if(is_object($Event))
	{
	if($Event->Get("Enabled")=="1" \|\| ($Event->Get("Enabled")==2 && $FrontEnd))
	{
	$Event->Item = $this;
	//echo "Admin Event $EventName Enabled <br>\n";
	return $Event->SendAdmin($ToUserId);
	}
	}
	}

	function parse_template($t)
	{
	}

	}

	class clsItemCollection
	{
	var $Items;
	var $CurrentItem;
	var $adodbConnection;
	var $classname;
	var $SourceTable;
	var $LiveTable;
	var $QueryItemCount;
	var $AdminSearchFields = array();
	var $SortField;
	var $debuglevel;
	var $id_field = null; // id field for list item
	var $BasePermission;
	var $Dummy = null;

	function SetTable($action, $table_name = null) // new by Alex
	{
	// $action = {'live', 'restore','edit'}
	switch($action)
	{
	case 'live':
	$this->LiveTable = $table_name;
	$this->SourceTable = $this->LiveTable;
	break;
	case 'restore':
	$this->SourceTable = $this->LiveTable;
	break;
	case 'edit':
	global $objSession;
	$this->SourceTable = $objSession->GetEditTable($this->LiveTable);
	break;
	}
	}

	function &GetDummy() // new by Alex
	{
	if( !isset($this->Dummy) )
	$this->Dummy =& new $this->classname();
	$this->Dummy->tablename = $this->SourceTable;
	return $this->Dummy;
	}

	function clsItemCollection()
	{

	$this->adodbConnection = GetADODBConnection();

	$this->Clear();
	$this->BasePermission="";
	}

	function GetIDField() // new by Alex
	{
	// returns id field for list item
	if( !isset($this->id_field) )
	{
	$dummy =& $this->GetDummy();
	$this->id_field = $dummy->IdField();
	}
	return $this->id_field;
	}

	function &GetNewItemClass()
	{
	return new $this->classname();
	}

	function Clear()
	{
	unset($this->Items);
	$this->Items = array();
	$this->CurrentItem=0;
	}

	function &SetCurrentItem($id)
	{
	$this->CurrentItem=$id;
	return $this->GetItem($id);
	}

	function &GetCurrentItem()
	{
	if($this->CurrentItem>0)
	{
	return $this->GetItem($this->CurrentItem);
	}
	else
	return FALSE;
	}

	function NumItems()
	{
	if(is_array($this->Items))
	{
	// echo "TEST COUNT: ".count($this->Items)."<BR>";
	return count($this->Items);
	}
	else
	return 0;
	}

	function ItemLike($index, $string)
	{
	// check if any of the item field
	// even partially matches $string
	$found = false;
	$string = strtolower($string);
	$item_data = $this->Items[$index]->GetData();
	foreach($item_data as $field => $value)
	if( in_array($field, $this->AdminSearchFields) )
	if( strpos(strtolower($value), $string) !== false)
	{
	$found = true;
	break;
	}
	return $found;
	}

	function DeleteItem($index) // by Alex
	{
	// deletes item with specific index from list
	$i = $index; $item_count = $this->NumItems();
	while($i < $item_count - 1)
	{
	$this->Items[$i] = $this->Items[$i + 1];
	$i++;
	}
	unset($this->Items[$i]);
	}

	function ShowItems()
	{
	$i = 0; $item_count = $this->NumItems();
	while($i < $item_count)
	{
	echo "Item No <b>$i</b>:<br>";
	$this->Items[$i]->PrintVars();
	$i++;
	}
	}

	function SwapItems($Index,$Index2)
	{
	$temp = $this->Items[$Index]->GetData();
	$this->Items[$Index]->SetData($this->Items[$Index2]->GetData());
	$this->Items[$Index2]->SetData($temp);

	}

	function CopyResource($OldId,$NewId)
	{
	$this->Clear();

	$sql = "SELECT * FROM ".$this->SourceTable." WHERE ResourceId=$OldId";
	$this->Query_Item($sql);
	// echo $sql."<br>\n";
	if($this->NumItems()>0)
	{
	foreach($this->Items as $item)
	{
	$item->UnsetIdField();
	$item->Set("ResourceId",$NewId);
	$item->Create();
	}
	}
	}
	function ItemsOnClipboard()
	{
	global $objSession;
	$clip = $objSession->GetPersistantVariable("ClipBoard");
	$count = 0;
	$table = $this->SourceTable;
	$prefix = GetTablePrefix();


	if(substr($table,0,strlen($prefix))==$prefix)
	$table = substr($table,strlen($prefix));


	if(strlen($clip))
	{
	$clipboard = ParseClipboard($clip);
	if($clipboard["table"] == $table)
	{
	$count = count(explode(",",$clipboard["ids"]));
	}
	else
	$count = 0;
	}
	else
	$count = 0;

	return $count;
	}

	function CopyToClipboard($command,$idfield, $idlist)
	{
	global $objSession,$objCatList;

	if(is_array($idlist))
	{
	$list = implode(",",$idlist);
	}
	else
	$list = $idlist;
	$clip = $command."-".$objCatList->CurrentCategoryID().".".$this->SourceTable.".$idfield=".$list;

	$objSession->SetVariable("ClipBoard",$clip);
	}

	function SortItems($asc=TRUE)
	{
	$done = FALSE;

	$field = $this->SortField;
	$ItemCount = $this->NumItems();
	while(!$done)
	{
	$done=TRUE;
	for($i=1;$i<$this->NumItems();$i++)
	{
	$doswap = FALSE;
	if($asc)
	{
	$val1 = $this->Items[$i-1]->Get($field);
	$val2 = $this->Items[$i]->Get($field);
	$doswap = ($val1 > $val2);
	}
	else
	{
	$val1 = $this->Items[$i-1]->Get($field);
	$val2 = $this->Items[$i]->Get($field);
	$doswap = ($val1 < $val2);
	}
	if($doswap)
	{
	$this->SwapItems($i-1,$i);
	$done = FALSE;
	}

	}
	}
	}

	function &GetItem($ID,$LoadFromDB=TRUE)
	{
	$found=FALSE;

	if(is_array($this->Items) && count($this->Items) )
	{
	for($x=0;$x<count($this->Items);$x++)
	{
	$i =& $this->GetItemRefByIndex($x);
	if($i->UniqueID()==$ID)
	{
	$found=TRUE;
	break;
	}
	}
	}

	if(!$found)
	{
	if($LoadFromDB)
	{
	$n = NULL;
	$n = new $this->classname();
	$n->tablename = $this->SourceTable;
	$n->LoadFromDatabase($ID);
	$index = array_push($this->Items, $n);
	$i =& $this->Items[count($this->Items)-1];
	}
	else
	$i = FALSE;
	}
	return $i;
	}

	function GetItemByIndex($index)
	{
	return $this->Items[$index];
	}

	function &GetItemRefByIndex($index)
	{
	return $this->Items[$index];
	}

	function &GetItemByField($Field,$Value,$LoadFromDB=TRUE)
	{
	$found=FALSE;

	if(is_array($this->Items))
	{
	foreach($this->Items as $i)
	{
	if($i->Get($Field)==$Value)
	{
	$found = TRUE;
	break;
	}
	}
	}
	if(!$found && $LoadFromDB==TRUE)
	{
	$sql = "SELECT * FROM ".$this->SourceTable." WHERE $Field = '$Value'";
	//echo $sql;
	$res = $this->adodbConnection->Execute($sql);

	if($res && !$res->EOF)
	{
	$i = $this->AddItemFromArray($res->fields);
	$i->tablename = $this->SourceTable;
	$i->Clean();
	}
	else
	$i = FALSE;
	}

	return $i;
	}

	function GetPage($Page, $ItemsPerPage)
	{
	$result = array_slice($this->Items, ($Page * $ItemsPerPage) - $ItemsPerPage, $ItemsPerPage);
	return $result;
	}

	function GetNumPages($ItemsPerPage)
	{
	if( isset($_GET['reset']) && $_GET['reset'] == 1) $this->Page = 1;
	return GetPageCount($ItemsPerPage,$this->QueryItemCount);
	}

	function &AddItemFromArray($data, $clean=FALSE)
	{
	$class = new $this->classname;
	$class->SetFromArray($data);
	$class->tablename = $this->SourceTable;
	if($clean==TRUE)
	$class->Clean();
	//array_push($this->Items,$class);
	$this->Items[] =& $class;
	return $class;
	}

	function Query_Item($sql, $offset=-1,$rows=-1)
	{
	global $Errors;
	//echo "Method QItem [<b>".get_class($this).'</b>], sql: ['.$sql.']<br>';
	//if( get_class($this) == 'clsthemefilelist') trace();
	$dummy =& $this->GetDummy();
	if( !$dummy->TableExists() )
	{
	if($this->debuglevel) echo "ERROR: table <b>".$dummy->tablename."</b> missing.<br>";
	$this->Clear();
	return false;
	}

	if($rows>-1 && $offset>-1)
	{
	//echo "<b>Executing SelectLimit</b> $sql <b>Offset:</b> $offset,$rows<br>\n";
	$result = $this->adodbConnection->SelectLimit($sql, $rows,$offset);
	}
	else {
	$result = $this->adodbConnection->Execute($sql);
	}

	if ($result === false)
	{
	$Errors->AddError("error.DatabaseError",NULL,$this->adodbConnection->ErrorMsg(),"",get_class($this),"Query_Item");
	if($this->debuglevel) {
	echo '<br><br>'.$sql.'<br><br>';
	echo "Error: ".$this->adodbConnection->ErrorMsg()."<br>";
	}
	$this->Clear();
	return false;
	}

	$this->Clear();

	if($this->debuglevel > 0)
	{
	echo "This SQL: $sql<br>";
	if( ($this->debuglevel > 1) && ($result->RecordCount() > 0) )
	{
	echo '<pre>'.print_r($result->GetRows(), true).'</pre>';
	$result->MoveFirst();
	}
	}
	LogEntry("SQL Loop Start\n");
	$count = 0;

	while ($result && !$result->EOF)
	{
	$count++;
	$data = $result->fields;
	$this->AddItemFromArray($data,TRUE);
	if( defined('ADODB_EXTENSION') && constant('ADODB_EXTENSION') > 0 )
	adodb_movenext($result);
	else
	$result->MoveNext();
	}

	LogEntry("SQL Loop End ($count iterations)\n");
	$result->Free();
	return $this->Items;
	}

	function GetOrderClause($FieldVar,$OrderVar,$DefaultField,$DefaultVar,$Priority=TRUE,$UseTableName=FALSE)
	{
	global $objConfig, $objSession;

	if($UseTableName)
	{
	$TableName = $this->SourceTable.".";
	}
	else
	$TableName = "";

	$PriorityClause = $TableName."EditorsPick DESC, ".$TableName."Priority DESC";

	if(strlen(trim($FieldVar))>0)
	{
	if(is_object($objSession))
	{
	if(strlen($objSession->GetPersistantVariable($FieldVar))>0)
	{
	$OrderBy = trim($TableName.$objSession->GetPersistantVariable($FieldVar) . " ".
	$objSession->GetPersistantVariable($OrderVar));
	$FieldUsed = $objSession->GetPersistantVariable($FieldVar);
	}
	}
	$OrderBy = trim($OrderBy);
	if (strlen(trim($OrderBy))==0)
	{
	if(!$UseTableName)
	{
	$OrderBy = trim($DefaultField." ".$DefaultVar);
	}
	else
	{
	if(strlen(trim($DefaultField))>0)
	{
	$OrderBy = $this->SourceTable.".".$DefaultField.".".$DefaultVar;
	}
	$FieldUsed=$DefaultField;
	}
	}
	}
	if(($FieldUsed != "Priority" \|\| strlen($OrderBy)==0) && $Priority==TRUE)
	{
	if(strlen($OrderBy)==0)
	{
	$OrderBy = $PriorityClause;
	}
	else
	$OrderBy = $PriorityClause.", ".$OrderBy;
	}
	return $OrderBy;
	}

	function GetResourceIDList()
	{
	$ret = array();
	foreach($this->Items as $i)
	array_push($ret,$i->Get("ResourceId"));
	return $ret;
	}

	function GetFieldList($field)
	{
	$ret = array();
	foreach($this->Items as $i)
	array_push($ret,$i->Get($field));
	return $ret;
	}

	function SetCommonField($FieldName,$FieldValue)
	{
	for($i=0;$i<$this->NumItems();$i++)
	{
	$this->Items[$i]->Set($FieldName,$fieldValue);
	$this->Items[$i]->Update();
	}
	}

	function ClearCategoryItems($CatId,$CatTable = "CategoryItems")
	{
	$CatTable = AddTablePrefix($CatTable);
	$sql = "SELECT * FROM ".$this->SourceTable." INNER JOIN $CatTable ".
	" ON (".$this->SourceTable.".ResourceId=$CatTable.ItemResourceId) WHERE CategoryId=$CatId";
	$this->Clear();
	$this->Query_Item($sql);
	if($this->NumItems()>0)
	{
	foreach($this->Items as $i)
	{
	$i->DeleteCategoryItems($CatId,$CatTable);
	}
	}
	}

	function CopyToEditTable($idfield = null, $idlist = 0)
	{
	global $objSession;

	if($idfield == null) $idfield = $this->GetIDField();
	$edit_table = $objSession->GetEditTable($this->SourceTable);
	@$this->adodbConnection->Execute("DROP TABLE IF EXISTS $edit_table");
	if(is_array($idlist))
	{
	$list = implode(",",$idlist);
	}
	else
	$list = $idlist;
	$query = "SELECT * FROM ".$this->SourceTable." WHERE $idfield IN ($list)";
	$insert = "CREATE TABLE ".$edit_table." ".$query;
	if($objSession->HasSystemPermission("DEBUG.LIST"))
	echo htmlentities($insert,ENT_NOQUOTES)."<br>\n";
	$this->adodbConnection->Execute($insert);
	}

	function CreateEmptyEditTable($idfield = null)
	{
	global $objSession;
	if($idfield == null) $idfield = $this->GetIDField();

	$edit_table = $objSession->GetEditTable($this->SourceTable);
	@$this->adodbConnection->Execute("DROP TABLE IF EXISTS $edit_table");
	$query = "SELECT * FROM ".$this->SourceTable." WHERE $idfield = -1";
	$insert = "CREATE TABLE ".$edit_table." ".$query;
	if($objSession->HasSystemPermission("DEBUG.LIST"))
	echo htmlentities($insert,ENT_NOQUOTES)."<br>\n";
	$this->adodbConnection->Execute($insert);
	}

	function CopyFromEditTable($idfield = null)
	{
	global $objSession;

	$dropRelTableFlag = false;
	if($idfield == null) $idfield = $this->GetIDField();
	$edit_table = $objSession->GetEditTable($this->SourceTable);
	$sql = "SELECT * FROM $edit_table";
	$rs = $this->adodbConnection->Execute($sql);

	//echo "In Main <b>CopyFromEditTable</b> in class <b>".get_class($this).'</b><br>';
	//echo $sql."<BR>";

	while($rs && !$rs->EOF)
	{
	$data = $rs->fields;
	$c = new $this->classname;
	$c->SetFromArray($data);
	$c->idfield = $idfield;
	$c->Dirty();
	if($c->Get($idfield) < 1)
	{
	$old_id = $c->Get($idfield);
	$c->UnsetIdField();
	if(!is_numeric($c->Get("OrgId")) \|\| $c->Get("OrgId")==0)
	{
	$c->Clean(array("OrgId"));
	}
	else
	{
	if($c->Get("Status") != -2)
	{
	$org = new $this->classname();
	$org->LoadFromDatabase($c->Get("OrgId"));
	$org->DeleteCustomData();
	$org->Delete(TRUE);
	$c->Set("OrgId",0);
	}
	}
	$c->Create();
	}
	if(is_numeric($c->Get("ResourceId")))
	{
	if( isset($c->Related) && is_object($c->Related) )
	{
	$r = $c->Related;
	$r->CopyFromEditTable($c->Get("ResourceId"));
	$dropRelTableFlag = true;
	}

	unset($r);

	if( isset($c->Reviews) && is_object($c->Reviews) )
	{
	$r = $c->Reviews;
	$r->CopyFromEditTable($c->Get("ResourceId"));
	}
	}
	if(!is_numeric($c->Get("OrgId")) \|\| $c->Get("OrgId")==0)
	{
	$c->Clean(array("OrgId"));
	}
	else
	{
	if($c->Get("Status") != -2)
	{
	$org = new $this->classname();
	$org->LoadFromDatabase($c->Get("OrgId"));
	$org->DeleteCustomData();
	$org->Delete(TRUE);
	$c->Set("OrgId",0);
	}
	}

	if(method_exists($c,"CategoryMemberList"))
	{
	$cats = $c->CategoryMemberList($objSession->GetEditTable("CategoryItems"));
	$ci_table = $objSession->GetEditTable('CategoryItems');
	$primary_cat = $c->GetPrimaryCategory($ci_table);
	$c->Update();
	UpdateCategoryItems($c,$cats,$primary_cat);
	}
	else
	$c->Update();

	unset($c);
	unset($r);

	$rs->MoveNext();
	}

	if ($dropRelTableFlag)
	{
	$objRelGlobal = new clsRelationshipList();
	$objRelGlobal->PurgeEditTable();
	}

	if($edit_table) @$this->adodbConnection->Execute("DROP TABLE IF EXISTS $edit_table");
	@$this->adodbConnection->Execute("DROP TABLE IF EXISTS ".$objSession->GetEditTable("CategoryItems"));
	}

	function GetNextTempID()
	{
	// get next temporary id (lower then zero) from temp table
	$db =& $this->adodbConnection;
	$sql = 'SELECT MIN(%s) AS MinValue FROM %s';
	return $db->GetOne( sprintf($sql, $this->GetIDField(), $this->SourceTable) ) - 1;
	}

	function PurgeEditTable($idfield = null)
	{
	global $objSession;

	if($idfield == null) $idfield = $this->GetIDField();
	$edit_table = $objSession->GetEditTable($this->SourceTable);
	/* $rs = $this->adodbConnection->Execute("SELECT * FROM $edit_table");
	while($rs && !$rs->EOF)
	{
	$data = $rs->fields;
	$c = new $this->classname;
	$c->SetFromArray($data);
	$c->id_field = $idfield;
	$c->tablename = $edit_table;
	$c->Delete();
	$rs->MoveNext();
	}*/
	@$this->adodbConnection->Execute("DROP TABLE IF EXISTS $edit_table");
	@$this->adodbConnection->Execute("DROP TABLE IF EXISTS ".$objSession->Get("CategoryItems"));
	}

	function CopyCatListToEditTable($idfield, $idlist)
	{
	global $objSession;

	$edit_table = $objSession->GetEditTable("CategoryItems");
	@$this->adodbConnection->Execute("DROP TABLE IF EXISTS $edit_table");
	if(is_array($idlist))
	{
	$list = implode(",",$idlist);
	}
	else
	$list = $idlist;
	$query = "SELECT * FROM ".GetTablePrefix()."CategoryItems WHERE $idfield IN ($list)";

	$insert = "CREATE TABLE ".$edit_table." ".$query;
	if($objSession->HasSystemPermission("DEBUG.LIST"))
	echo htmlentities($insert,ENT_NOQUOTES)."<br>\n";
	$this->adodbConnection->Execute($insert);
	}

	function CreateEmptyCatListTable($idfield)
	{
	global $objSession;

	$edit_table = $objSession->GetEditTable("CategoryItems");
	@$this->adodbConnection->Execute("DROP TABLE IF EXISTS $edit_table");
	$query = "SELECT * FROM ".GetTablePrefix()."CategoryItems WHERE $idfield = -1";
	$insert = "CREATE TABLE ".$edit_table." ".$query;
	if($objSession->HasSystemPermission("DEBUG.LIST"))
	echo htmlentities($insert,ENT_NOQUOTES)."<br>\n";
	$this->adodbConnection->Execute($insert);
	}


	function PurgeCatListEditTable()
	{
	global $objSession;

	$edit_table = $objSession->GetEditTable("CategoryItems");
	$this->adodbConnection->Execute("DROP TABLE IF EXISTS $edit_table");
	}

	function AdminSearchWhereClause($SearchList)
	{
	$sql = "";
	if( !is_array($SearchList) ) $SearchList = explode(",",$SearchList);
	if( !count($SearchList) \|\| !count($this->AdminSearchFields) ) return '';

	for($f = 0; $f < count($SearchList); $f++)
	{
	$value = $SearchList[$f];
	if( strlen($value) )
	{
	$inner_sql = "";
	for($i = 0; $i < count($this->AdminSearchFields); $i++)
	{
	$field = $this->AdminSearchFields[$i];
	if( strlen( trim($value) ) )
	{
	if( strlen($inner_sql) ) $inner_sql .= " OR ";
	$inner_sql .= $field." LIKE '%".$value."%'";
	}
	}
	if( strlen($inner_sql) )
	{
	$sql .= '('.$inner_sql.') ';
	if($f < count($SearchList) - 1) $sql .= " AND ";
	}
	}
	}
	return $sql;
	}

	function BackupData($OutFileName,$Start,$Limit)
	{
	$fp=fopen($Outfile,"a");
	if($fp)
	{
	if($Start==1)
	{
	$sql = "DELETE FROM ".$this->SourceTable;
	fputs($fp,$sql);
	}
	$this->Query_Item("SELECT * FROM ".$this->SourceTable." LIMIT $Start, $Limit");
	foreach($this->Items as $i)
	{
	$sql = $i->CreateSQL();
	fputs($fp,$sql);
	}
	fclose($fp);
	$this->Clear();
	}
	}

	function RestoreData($InFileName,$Start,$Limit)
	{
	$res = -1;
	$fp=fopen($InFileName,"r");
	if($fp)
	{
	fseek($fp,$Start);
	$Line = 0;
	while($Line < $Limit)
	{
	$sql = fgets($fp,16384);
	$this->adodbConnection->Execute($sql);
	$Line++;
	}
	$res = ftell($fp);
	fclose($fp);
	}
	return $res;
	}

	function Delete_Item($Id)
	{
	global $objCatList;

	$l =& $this->GetItem($Id);
	$l->BasePermission=$this->BasePermission;
	$l->DeleteCategoryItems($objCatList->CurrentCategoryID());
	}

	function Move_Item($Id, $OldCat, $ParentTo)
	{
	global $objCatList;

	$l = $this->GetItem($Id);
	$l->BasePermission=$this->BasePermission;
	$l->AddtoCategory($ParentTo);
	$l->RemoveFromCategory($OldCat);
	}

	function Copy_Item($Id, $ParentTo)
	{
	$l = $this->GetItem($Id);
	$l->BasePermission=$this->BasePermission;
	$l->AddtoCategory($ParentTo);
	}

	}/* clsItemCollection */

	class clsItemList extends clsItemCollection
	{
	var $Page;
	var $PerPageVar;
	var $DefaultPerPage; // use this perpage value in case if no found in config
	var $EnablePaging;
	var $MaxListCount = 0;
	var $PageEnvar;
	var $PageEnvarIndex;
	var $ListType;

	function clsItemList()
	{
	$this->clsItemCollection();
	$this->EnablePaging = TRUE;
	$this->PageEnvarIndex = "p";
	}

	function GetPageLimitSQL()
	{
	global $objConfig;
	$limit = NULL;
	if($this->EnablePaging)
	{
	if($this->Page<1)
	$this->Page=1;
	//echo "Limited to ".$objConfig->Get($this->PerPageVar)." items per page<br>\n";
	if(is_numeric($objConfig->Get($this->PerPageVar)))
	{
	$Start = ($this->Page-1)*$objConfig->Get($this->PerPageVar);
	$limit = "LIMIT ".$Start.",".$objConfig->Get($this->PerPageVar);
	}
	else
	$limit = NULL;
	}
	else
	{
	if($this->MaxListCount)
	{
	$limit = "LIMIT 0, $MaxListCount";
	}
	}
	return $limit;
	}

	function GetPageOffset()
	{
	$Start = 0;
	if($this->EnablePaging)
	{
	if($this->Page < 1) $this->Page = 1;
	$PerPage = $this->GetPerPage();
	$Start = ($this->Page - 1) * $PerPage;
	}
	else
	{
	if((int)$this->MaxListCount == 0) $Start = -1;
	}
	return $Start;
	}

	function GetPageRowCount()
	{
	if($this->EnablePaging)
	{
	if($this->Page < 1) $this->Page = 1;
	return $this->GetPerPage();
	}
	else
	return (int)$this->MaxListCount;
	}

	function Query_Item($sql,$limit = null, $fix_method = 'set_first')
	{
	// query itemlist (module items) using $sql specified
	// apply direct limit clause ($limit) or calculate it if not specified
	// fix invalid page in case if needed by method specified in $fix_method
	if(strlen($limit))
	{
	$sql .= " ".$limit;
	return parent::Query_Item($sql);
	}
	else
	{
	//echo "page fix pre (class: ".get_class($this).")<br>";
	$this->QueryItemCount = QueryCount($sql); // must get total item count before fixing
	$this->FixInvalidPage($fix_method);

	// specially made for cats delete
	- if ($_REQUEST['Action'] != 'm_cat_delete') {
	+ if ( GetVar('Action', true) != 'm_cat_delete') {
	return parent::Query_Item($sql,$this->GetPageOffset(),$this->GetPageRowCount());
	}
	else {
	return parent::Query_Item($sql);
	}
	}
	}

	function Query_List($whereClause,$orderByClause=NULL,$JoinCats=TRUE,$fix_method='set_first')
	{
	global $objSession, $Errors;

	if($JoinCats)
	{
	$cattable = GetTablePrefix()."CategoryItems";
	$t = $this->SourceTable;
	$sql = "SELECT *,CategoryId FROM $t INNER JOIN $cattable ON $cattable.ItemResourceId=$t.ResourceId";
	}
	else
	$sql = "SELECT * FROM ". $this->SourceTable;
	if(trim($whereClause)!="")
	{
	if(isset($whereClause))
	$sql = sprintf('%s WHERE %s',$sql,$whereClause);
	}
	if(strlen($orderByClause)>0)
	{
	if(substr($orderByClause,0,8)=="ORDER BY")
	{
	$sql .= " ".$orderByClause;
	}
	else
	{
	$sql .= " ORDER BY $orderByClause";
	}
	}

	if($objSession->HasSystemPermission("DEBUG.LIST"))
	echo $sql."<br>\n";

	return $this->Query_Item($sql, null, $fix_method);
	}

	function GetPerPage()
	{
	// return category perpage
	global $objConfig;
	$PerPage = $objConfig->Get( $this->PerPageVar );
	if( !is_numeric($PerPage) ) $PerPage = $this->DefaultPerPage ? $this->DefaultPerPage : 10;
	return $PerPage;
	}

	function FixInvalidPage($fix_method = 'set_first')
	{
	// in case if current page > total page count,
	// then set current page to last possible "set_last"
	// or first possible "set_first"
	$PerPage = $this->GetPerPage();
	$NumPages = ceil( $this->GetNumPages($PerPage) );
	/*
	echo "=====<br>";
	echo "Class <b>".get_class($this)."</b>: Page ".$this->Page." of $NumPages<br>";
	echo "PerPage: $PerPage<br>";
	echo "Items Queries: ".$this->QueryItemCount."<br>";
	echo "=====<br>";
	*/
	if($this->Page > $NumPages)
	{
	switch($fix_method)
	{
	case 'set_first':
	$this->Page = 1;
	//echo "Move 2 First (class <b>".get_class($this)."</b>)<br>";
	break;
	case 'set_last':
	$this->Page = $NumPages;
	//echo "Move 2 Last (class <b>".get_class($this)."</b>)<br>";
	break;
	}
	$this->SaveNewPage();
	}
	}

	function SaveNewPage()
	{
	// redefine in each list, should save to env array new page value

	}

	function GetPageLinkList($dest_template=NULL,$page = "",$PagesToList=10, $HideEmpty=TRUE)
	{
	global $objConfig, $var_list_update, $var_list;


	$v= $this->PageEnvar;

	global ${$v};

	if(!strlen($page))
	$page = GetIndexURL();

	$PerPage = $objConfig->Get($this->PerPageVar);
	if($PerPage<1)
	$PerPage=20;
	$NumPages = ceil($this->GetNumPages($PerPage));
	if($NumPages==1 && $HideEmpty)
	return "";

	if(strlen($dest_template))
	{
	$var_list_update["t"] = $dest_template;
	}
	else
	$var_list_update["t"] = $var_list["t"];

	$o = "";
	if($this->Page==0 \|\| !is_numeric($this->Page))
	$this->Page=1;
	if($this->Page>$NumPages)
	$this->Page=$NumPages;

	$StartPage = (int)$this->Page - ($PagesToList/2);
	if($StartPage<1)
	$StartPage=1;

	$EndPage = $StartPage+($PagesToList-1);
	if($EndPage>$NumPages)
	{
	$EndPage = $NumPages;
	$StartPage = $EndPage-($PagesToList-1);
	if($StartPage<1)
	$StartPage=1;
	}

	$o = "";
	if($StartPage>1)
	{
	${$v}[$this->PageEnvarIndex] = $this->Page-$PagesToList;

	$prev_url = $page."?env=".BuildEnv();
	$o .= "<A HREF=\"$prev_url\"><<</A>";
	}

	for($p=$StartPage;$p<=$EndPage;$p++)
	{
	if($p!=$this->Page)
	{
	${$v}[$this->PageEnvarIndex]=$p;
	$href = $page."?env=".BuildEnv();
	$o .= " <A HREF=\"$href\">$p</A> ";
	}
	else
	{
	$o .= " <SPAN class=\"current-page\">$p</SPAN>";
	}
	}
	if($EndPage<$NumPages && $EndPage>0)
	{
	${$v}[$this->PageEnvarIndex]=$this->Page+$PagesToList;

	$next_url = $page."?env=".BuildEnv();
	$o .= "<A HREF=\"$next_url\"> >></A>";
	}
	unset(${$v}[$this->PageEnvarIndex],$var_list_update["t"] );
	return $o;
	}

	function GetAdminPageLinkList($url)
	{
	global $objConfig;

	$update =& $GLOBALS[$this->PageEnvar]; // env_var_update

	// insteresting stuff :)
	if(!$this->PerPageVar) $this->PerPageVar = "Perpage_Links";

	$PerPage = $objConfig->Get($this->PerPageVar);
	if($PerPage < 1) $PerPage = 20;

	$NumPages = ceil($this->GetNumPages($PerPage));

	//echo $this->CurrentPage." of ".$NumPages." Pages";

	if($this->Page > $NumPages) $this->Page = $NumPages;

	$StartPage = $this->Page - 5;
	if($StartPage < 1) $StartPage = 1;
	$EndPage = $StartPage + 9;
	if($EndPage > $NumPages)
	{
	$EndPage = $NumPages;
	$StartPage = $EndPage-9;
	if($StartPage < 1) $StartPage = 1;
	}

	$o = '';

	if($StartPage > 1)
	{
	$update[$this->PageEnvarIndex]= $this->Page - 10;
	$prev_url = $url.'?env='.BuildEnv();
	$o .= '<a href="'.$prev_url.'"><<</a>';
	}


	for($p = $StartPage; $p <= $EndPage; $p++)
	{
	if($p != $this->Page)
	{
	$update[$this->PageEnvarIndex] = $p;
	$href = $url.'?env='.BuildEnv();
	$o .= ' <a href="'.$href.'" class="NAV_URL">'.$p.'</a> ';
	}
	else
	{
	$o .= '<SPAN class="CURRENT_PAGE">'.$p.'</SPAN>';
	}
	}
	if($EndPage < $NumPages)
	{
	$update[$this->PageEnvarIndex] = $this->Page + 10;
	$next_url = $url.'?env='.BuildEnv();
	$o .= '<a href="'.$next_url.'"> >></a>';
	}
	unset( $update[$this->PageEnvarIndex] );
	return $o;
	}
	}

	function ParseClipboard($clip)
	{
	$ret = array();

	$parts = explode(".",$clip,3);
	$command = $parts[0];
	$table = $parts[1];
	$prefix = GetTablePrefix();
	if(substr($table,0,strlen($prefix))==$prefix)
	$table = substr($table,strlen($prefix));

	$subparts = explode("=",$parts[2],2);
	$idfield = $subparts[0];
	$idlist = $subparts[1];
	$cmd = explode("-",$command);
	$ret["command"] = $cmd[0];
	$ret["source"] = $cmd[1];
	$ret["table"] = $table;
	$ret["idfield"] = $idfield;
	$ret["ids"] = $idlist;
	//print_pre($ret);
	return $ret;
	}

	function UpdateCategoryItems($item,$NewCatList,$PrimaryCatId = false)
	{
	global $objCatList;

	$CurrentList = explode(",",$item->CategoryMemberList());
	$del_list = array();
	$ins_list = array();


	if(!is_array($NewCatList))
	{
	if(strlen(trim($NewCatList))==0)
	$NewCatList = $objCatList->CurrentCategoryID();

	$NewCatList = explode(",",$NewCatList);
	}
	//print_r($NewCatList);

	for($i=0;$i<count($NewCatList);$i++)
	{
	$cat = $NewCatList[$i];
	if(!in_array($cat,$CurrentList))
	$ins_list[] = $cat;
	}
	for($i=0;$i<count($CurrentList);$i++)
	{
	$cat = $CurrentList[$i];
	if(!in_array($cat,$NewCatList))
	$del_list[] = $cat;
	}
	for($i=0;$i<count($ins_list);$i++)
	{
	$cat = $ins_list[$i];
	$item->AddToCategory($cat);
	}
	for($i=0;$i<count($del_list);$i++)
	{
	$cat = $del_list[$i];
	$item->RemoveFromCategory($cat);
	}
	if($PrimaryCatId !== false) $item->SetPrimaryCategory($PrimaryCatId);
	}

	class clsCatItemList extends clsItemList
	{
	var $PerPageVarLong;
	var $PerPageShortVar;
	var $Query_SortField;
	var $Query_SortOrder;
	var $ItemType;

	function clsCatItemList()
	{
	$this->ClsItemList();
	$this->Query_SortField = array();
	$this->Query_SortOrder = array();
	}

	function QueryOrderByClause($EditorsPick=FALSE,$Priority=FALSE,$UseTableName=FALSE)
	{
	global $objSession;

	if($UseTableName)
	{
	$TableName = $this->SourceTable.".";
	}
	else {
	$TableName = "";
	}

	$Orders = array();

	if($EditorsPick)
	{
	$Orders[] = $TableName."EditorsPick DESC";
	}
	if($Priority)
	{
	$Orders[] = $TableName."Priority DESC";
	}

	if(count($this->Query_SortField)>0)
	{
	for($x=0; $x<count($this->Query_SortField); $x++)
	{
	$FieldVar = $this->Query_SortField[$x];
	$OrderVar = $this->Query_SortOrder[$x];

	if(is_object($objSession))
	{
	$FieldVarData = $objSession->GetPersistantVariable($FieldVar);
	if(strlen($FieldVarData)>0)
	{
	$Orders[] = trim($TableName.$objSession->GetPersistantVariable($FieldVar) . " ".
	$objSession->GetPersistantVariable($OrderVar));
	}
	}
	}
	}

	if(count($Orders)>0)
	{
	$OrderBy = "ORDER BY ".implode(", ",$Orders);
	}
	else
	$OrderBy="";

	return $OrderBy;
	}

	function AddSortField($SortField, $SortOrder)
	{
	if(strlen($SortField))
	{
	$this->Query_SortField[] = $SortField;
	$this->Query_SortOrder[] = $SortOrder;
	}
	}

	function ClearSortFields()
	{
	$this->Query_SortField = array();
	$this->Query_SortOrder = array();
	}

	/* skeletons in this closet */

	function GetNewValue($CatId=NULL)
	{
	return 0;
	}

	function GetPopValue($CategoryId=NULL)
	{
	return 0;
	}

	/* end of skeletons */

	function GetCountSQL($PermName,$CatId=NULL, $GroupId=NULL, $AdditonalWhere="")
	{
	global $objSession, $objPermissions, $objCatList;

	$ltable = $this->SourceTable;
	$acl = $objSession->GetACLClause();
	$cattable = GetTablePrefix()."CategoryItems";
	$CategoryTable = GetTablePrefix()."Category";
	$ptable = GetTablePrefix()."PermCache";
	$VIEW = $objPermissions->GetPermId($PermName);

	$sql = "SELECT count(*) as CacheVal FROM $ltable ";
	$sql .="INNER JOIN $cattable ON ($cattable.ItemResourceId=$ltable.ResourceId) ";
	$sql .="INNER JOIN $CategoryTable ON ($CategoryTable.CategoryId=$cattable.CategoryId) ";
	$sql .="INNER JOIN $ptable ON ($cattable.CategoryId=$ptable.CategoryId) ";
	$sql .="WHERE ($acl AND PermId=$VIEW AND $cattable.PrimaryCat=1 AND $CategoryTable.Status=1) ";

	if(strlen($AdditonalWhere)>0)
	{
	$sql .= "AND (".$AdditonalWhere.")";
	}

	return $sql;
	}

	function SqlCategoryList($attribs = array())
	{
	$CatTable = GetTablePrefix()."CategoryItems";
	$t = $this->SourceTable;

	$sql = "SELECT *,$CatTable.CategoryId FROM $t INNER JOIN $CatTable ON $CatTable.ItemResourceId=$t.ResourceId ";
	$sql .="WHERE ($CatTable.CategoryId=".$catid." AND $t.Status=1)";

	return $sql;
	}


	function CategoryCount($attribs=array())
	{
	global $objCatList, $objCountCache;

	$cat = $attribs["_catid"];
	if(!is_numeric($cat))
	{
	$cat = $objCatList->CurrentCategoryID();
	}
	if((int)$cat>0)
	$c = $objCatList->GetCategory($cat);

	$CatTable = GetTablePrefix()."CategoryItems";
	$t = $this->SourceTable;

	$sql = "SELECT count(*) as MyCount FROM $t INNER JOIN $CatTable ON ($CatTable.ItemResourceId=$t.ResourceId) ";
	if($attribs["_subcats"])
	{
	$ctable = $objCatList->SourceTable;
	$sql .= "INNER JOIN $ctable ON ($CatTable.CategoryId=$ctable.CategoryId) ";
	$sql .= "WHERE (ParentPath LIKE '".$c->Get("ParentPath")."%' ";
	if(!$attribs["_countcurrent"])
	{
	$sql .=" AND $ctable.CategoryId != $cat) ";
	}
	else
	$sql .=") ";
	}
	else
	$sql .="WHERE ($CatTable.CategoryId=".$cat." AND $t.Status=1) ";

	if($attribs["_today"])
	{
	$today = mktime(0,0,0,date("m"),date("d"),date("Y"));
	$sql .= "AND ($t.CreatedOn>=$today) ";
	}
	//echo $sql."<br><br>\n";
	$rs = $this->adodbConnection->Execute($sql);
	$ret = "";
	if($rs && !$rs->EOF)
	$ret = (int)$rs->fields["MyCount"];
	return $ret;
	}

	function SqlGlobalCount($attribs=array())
	{
	global $objSession;

	$p = $this->BasePermission.".VIEW";
	$t = $this->SourceTable;
	if($attribs["_today"])
	{
	$today = mktime(0,0,0,date("m"),date("d"),date("Y"));
	$where = "($t.CreatedOn>=$today)";
	}

	if($attribs["_grouponly"])
	{
	$GroupList = $objSession->Get("GroupList");
	}
	else
	$GroupList = NULL;

	$sql = $this->GetCountSQL($p,NULL,$GroupList,$where);
	return $sql;
	}

	function DoGlobalCount($attribs)
	{
	global $objCountCache;

	$cc = $objCountCache->GetValue($this->CacheListType("_"),$this->ItemType,$this->CacheListExtraId("_"),(int)$attribs["_today"], 3600);
	if(!is_numeric($cc))
	{
	$sql = $this->SqlGlobalCount($attribs);
	$ret = QueryCount($sql);
	$objCountCache->SetValue($this->CacheListType("_"),$this->ItemType,$this->CacheListExtraId("_"),(int)$attribs["_today"],$ret);
	}
	else
	$ret = $cc;
	return $ret;
	}


	function CacheListExtraId($ListType)
	{
	global $objSession;

	if(!strlen($ListType))
	$ListType="_";
	switch($ListType)
	{
	case "_":
	$ExtraId = $objSession->Get("GroupList");
	break;
	case "category":
	$ExtraId = $objSession->Get("GroupList");
	break;
	case "myitems":
	$ExtraId = $objSession->Get("PortalUserId");
	break;
	case "hot":
	$ExtraId = $objSession->Get("GroupList");
	break;
	case "pop":
	$ExtraId = $objSession->Get("GroupList");
	break;
	case "pick":
	$ExtraId = $objSession->Get("GroupList");
	break;
	case "favorites":
	$ExtraId = $objSession->Get("PortalUserId");
	break;
	case "new":
	$ExtraId = $objSession->Get("GroupList");
	break;
	}
	return $ExtraId;
	}

	function CacheListType($ListType)
	{
	if(!strlen($ListType))
	$ListType="_";
	switch($ListType)
	{
	case "_":
	$ListTypeId = 0;
	break;
	case "category":
	$ListTypeId = 1;
	break;
	case "myitems":
	$ListTypeId = 2;
	break;
	case "hot":
	$ListTypeId = 3;
	break;
	case "pop":
	$ListTypeId = 4;
	break;
	case "pick":
	$ListTypeId = 5;
	break;
	case "favorites":
	$ListTypeId = 6;
	break;
	case "new":
	$ListTypeId = 8;
	break;
	}
	return $ListTypeId;
	}

	function PerformItemCount($attribs=array())
	{
	global $objCountCache, $objSession;

	$ret = "";
	$ListType = $attribs["_listtype"];
	if(!strlen($ListType))
	$ListType="_";

	$ListTypeId = $this->CacheListType($ListType);
	//echo "ListType: $ListType ($ListTypeId)<br>\n";
	$ExtraId = $this->CacheListExtraId($ListType);
	switch($ListType)
	{
	case "_":
	$ret = $this->DoGlobalCount($attribs);
	break;
	case "category":
	$ret = $this->CategoryCount($attribs);
	break;
	case "myitems":
	$sql = $this->SqlMyItems($attribs);
	break;
	case "hot":
	$sql = $this->SqlHotItems($attribs);
	break;
	case "pop":
	$sql = $this->SqlPopItems($attribs);
	break;
	case "pick":
	$sql = $this->SqlPickItems($attribs);
	break;
	case "favorites":
	$sql = $this->SqlFavorites($attribs);
	break;
	case "search":
	$sql = $this->SqlSearchItems($attribs);
	break;
	case "new":
	$sql = $this->SqlNewItems($attribs);
	break;
	}
	//echo "SQL: $sql<br>";
	if(strlen($sql))
	{
	if(is_numeric($ListTypeId))
	{
	$cc = $objCountCache->GetValue($ListTypeId,$this->ItemType,$ExtraId,(int)$attribs["_today"], 3600);

	if(!is_numeric($cc) \|\| $attribs['_nocache'] == 1)
	{
	$ret = QueryCount($sql);
	$objCountCache->SetValue($ListTypeId,$this->ItemType,$ExtraId,(int)$attribs["_today"],$ret);
	}
	else
	$ret = $cc;
	}
	else
	$ret = QueryCount($sql);
	}

	return $ret;
	}

	function GetJoinedSQL($PermName, $CatId=NULL, $AdditionalWhere="")
	{
	global $objSession, $objPermissions;

	$ltable = $this->SourceTable;
	$acl = $objSession->GetACLClause();
	$cattable = GetTablePrefix()."CategoryItems";
	$CategoryTable = GetTablePrefix()."Category";
	$ptable = GetTablePrefix()."PermCache";
	$VIEW = $objPermissions->GetPermId($PermName);
	$sql ="INNER JOIN $cattable ON ($cattable.ItemResourceId=$ltable.ResourceId) ";
	$sql .="INNER JOIN $CategoryTable ON ($CategoryTable.CategoryId=$cattable.CategoryId) ";
	$sql .= "INNER JOIN $ptable ON ($cattable.CategoryId=$ptable.CategoryId) ";
	$sql .="WHERE ($acl AND PermId=$VIEW AND PrimaryCat=1 AND $CategoryTable.Status=1) ";

	if(is_numeric($CatId))
	{
	$sql .= " AND ($CategoryTable.CategoryId=$CatId) ";
	}
	if(strlen($AdditionalWhere)>0)
	{
	$sql .= "AND (".$AdditionalWhere.")";
	}
	return $sql;
	}

	function CountFavorites($attribs)
	{
	if($attribs["_today"])
	{
	global $objSession, $objConfig, $objPermissions;

	$acl = $objSession->GetACLClause();
	$favtable = GetTablePrefix()."Favorites";
	$ltable = $this->SourceTable;
	$cattable = GetTablePrefix()."CategoryItems";
	$CategoryTable = GetTablePrefix()."Category";
	$ptable = GetTablePrefix()."PermCache";
	$today = mktime(0,0,0,date("m"),date("d"),date("Y"));

	$where = "PortalUserId=".$objSession->Get("PortalUserId")." AND $ltable.Status=1";
	$where .= " AND $favtable.Modified >= $today AND ItemTypeId=".$this->ItemType;
	$p = $this->BasePermission.".VIEW";

	$sql = "SELECT $ltable.*,$CategoryTable.CategoryId,$CategoryTable.CachedNavBar FROM $favtable INNER JOIN $ltable ON ($favtable.ResourceId=$ltable.ResourceId) ";
	$sql .= $this->GetJoinedSQL($p,NULL,$where);
	$ret = QueryCount($sql);
	}
	else
	{
	if (!$this->ListType == "favorites")
	{
	$this->ListType = "favorites";
	$this->LoadFavorites($attribs);
	$ret = $this->QueryItemCount;
	}
	else
	$ret = $this->QueryItemCount;
	}
	return $ret;
	}



	function CountPickItems($attribs)
	{
	if (!$this->ListType == "pick")
	{
	$this->ListType = "pick";
	$this->LoadPickItems($attribs);
	$ret = $this->QueryItemCount;
	}
	else
	$ret = $this->QueryItemCount;

	return $ret;
	}

	function CountMyItems($attribs)
	{
	if (!$this->ListType == "myitems")
	{
	$this->ListType = "myitems";
	$this->LoadMyItems($attribs);
	$ret = $this->QueryItemCount;
	}
	else
	$ret = $this->QueryItemCount;

	return $ret;
	}

	function CountHotItems($attribs)
	{
	if (!$this->ListType == "hotitems")
	{
	$this->ListType = "hotitems";
	$this->LoadHotItems($attribs);
	$ret = $this->QueryItemCount;
	}
	else
	$ret = $this->QueryItemCount;

	return $ret;
	}

	function CountNewItems($attribs)
	{
	if (!$this->ListType == "newitems")
	{
	$this->ListType = "newitems";
	$this->LoadNewItems($attribs);
	$ret = $this->QueryItemCount;
	}
	else
	$ret = $this->QueryItemCount;

	return $ret;
	}

	function CountPopItems($attribs)
	{
	if (!$this->ListType == "popitems")
	{
	$this->ListType = "popitems";
	$this->LoadPopItems($attribs);
	$ret = $this->QueryItemCount;
	}
	else
	$ret = $this->QueryItemCount;

	return $ret;
	}


	function CountSearchItems($attribs)
	{
	if (!$this->ListType == "search")
	{
	$this->ListType = "search";
	$this->LoadSearchItems($attribs);
	$ret = $this->QueryItemCount;
	}
	else
	$ret = $this->QueryItemCount;

	return $ret;
	}

	function SqlFavorites($attribs)
	{
	global $objSession, $objConfig, $objPermissions;

	$acl = $objSession->GetACLClause();
	$favtable = GetTablePrefix()."Favorites";
	$ltable = $this->SourceTable;
	$cattable = GetTablePrefix()."CategoryItems";
	$CategoryTable = GetTablePrefix()."Category";
	$ptable = GetTablePrefix()."PermCache";

	$where = "PortalUserId=".$objSession->Get("PortalUserId")." AND $ltable.Status=1";
	if($attribs["_today"])
	{
	$today = mktime(0,0,0,date("m"),date("d"),date("Y"));
	$where .= " AND $favtable.Modified >= $today AND ItemTypeId=".$this->ItemType;
	}
	$p = $this->BasePermission.".VIEW";

	$sql = "SELECT $ltable.*,$CategoryTable.CategoryId,$CategoryTable.CachedNavBar FROM $favtable INNER JOIN $ltable ON ($favtable.ResourceId=$ltable.ResourceId) ";
	$sql .= $this->GetJoinedSQL($p,NULL,$where);


	$OrderBy = $this->QueryOrderByClause(TRUE,TRUE,TRUE);
	$sql .= " ".$OrderBy;
	return $sql;
	}

	function LoadFavorites($attribs)
	{
	global $objSession, $objCountCache;

	$sql = $this->SqlFavorites($attribs);

	if($objSession->HasSystemPermission("DEBUG.LIST"))
	echo htmlentities($sql,ENT_NOQUOTES)."<br>\n";
	if($attribs["_shortlist"])
	{
	$this->PerPageVar = $this->PerPageShortVar;
	}
	else
	$this->PerPageVar = $this->PerPageVarLong;

	$CachedCount = $objCountCache->GetValue($this->CacheListType("favorites"),$this->ItemType,$this->CacheListExtraId("favorites"),(int)$attribs["_today"],3600);
	if(!is_numeric($CachedCount))
	{
	$this->QueryItemCount = QueryCount($sql);
	$objCountCache->SetValue($this->CacheListType("favorites"),$this->ItemType,$this->CacheListExtraId("favorites"),(int)$attribs["_today"],$this->QueryItemCount);
	}
	else
	$this->QueryItemCount = (int)$CachedCount;

	return $this->Query_Item($sql);
	}

	function SqlPickItems($attribs)
	{
	global $objSession, $objCatList;

	$catid = (int)$attribs["_catid"];
	$scope = (int)$attribs["_scope"];
	//$JoinCats = (int)$attribs["_catinfo"] \|\| $scope;

	$TableName = $this->SourceTable;
	if($scope)
	{
	if (!$catid)
	{
	$catid = $objCatList->CurrentCategoryID();
	}
	$where = "CategoryId =".$catid." AND ".$TableName.".EditorsPick=1 AND ".$TableName.".Status=1";
	}
	else
	{
	$where = $TableName.".EditorsPick=1 AND ".$TableName.".Status=1 ";
	$catid=NULL;
	}
	if($attribs["_today"])
	{
	$today = mktime(0,0,0,date("m"),date("d"),date("Y"));
	$where .= " AND ($TableName.CreatedOn>=$today)";
	}
	$CategoryTable = GetTablePrefix()."Category";
	$sql = "SELECT $TableName.*,$CategoryTable.CategoryId,$CategoryTable.CachedNavBar FROM $TableName ";
	$p = $this->BasePermission.".VIEW";
	$sql .= $this->GetJoinedSQL($p,$CatUd,$where);

	$OrderBy = $this->QueryOrderByClause(TRUE,TRUE,TRUE);
	$sql .= " ".$OrderBy;
	return $sql;
	}

	function LoadPickItems($attribs)
	{
	global $objSession, $objCountCache;

	$sql = $this->SqlPickItems($attribs);
	if($objSession->HasSystemPermission("DEBUG.LIST"))
	echo htmlentities($sql,ENT_NOQUOTES)."<br>\n";

	if($attribs["_shortlist"])
	{
	$this->PerPageVar = $this->PerPageShortVar;
	}
	else
	$this->PerPageVar = $this->PerPageVarLong;

	$CachedCount = $objCountCache->GetValue($this->CacheListType("pick"),$this->ItemType,$this->CacheListExtraId("pick"),(int)$attribs["_today"],3600);
	if(!is_numeric($CachedCount))
	{
	$this->QueryItemCount= QueryCount($sql);
	$objCountCache->SetValue($this->CacheListType("pick"),$this->ItemType,$this->CacheListExtraId("pick"),(int)$attribs["_today"],$this->QueryItemCount);
	}
	else
	$this->QueryItemCount=$CachedCount;

	return $this->Query_Item($sql);
	}

	function SqlMyItems($attribs= array())
	{
	global $objSession;

	$TableName = $this->SourceTable;
	$where = " ".$TableName.".Status>-1 AND ".$TableName.".CreatedById=".$objSession->Get("PortalUserId");
	if($attribs["_today"])
	{
	$today = mktime(0,0,0,date("m"),date("d"),date("Y"));
	$where .= " AND ($TableName.CreatedOn>=$today)";
	}
	$CategoryTable = GetTablePrefix()."Category";
	$sql = "SELECT $TableName.*,$CategoryTable.CategoryId,$CategoryTable.CachedNavBar FROM $TableName ";
	$p = $this->BasePermission.".VIEW";
	$sql .= $this->GetJoinedSQL($p,$CatUd,$where);

	$OrderBy = $this->QueryOrderByClause(TRUE,TRUE,TRUE);
	$sql .= " ".$OrderBy;

	return $sql;
	}

	function LoadMyItems($attribs=array())
	{
	global $objSession,$objCountCache;
	$sql = $this->SqlMyItems($attribs);
	if($objSession->HasSystemPermission("DEBUG.LIST"))
	echo htmlentities($sql,ENT_NOQUOTES)."<br>\n";
	if($attribs["_shortlist"])
	{
	$this->PerPageVar = $this->PerPageShortVar;
	}
	else
	$this->PerPageVar = $this->PerPageVarLong;

	$CachedCount = $objCountCache->GetValue($this->CacheListType("myitems"),$this->ItemType,$this->CacheListExtraId("myitems"),(int)$attribs["_today"],3600);
	if(!is_numeric($CachedCount))
	{
	$this->QueryItemCount= QueryCount($sql);
	$objCountCache->SetValue($this->CacheListType("myitems"),$this->ItemType,$this->CacheListExtraId("myitems"),(int)$attribs["_today"],$this->QueryItemCount);
	}
	else
	$this->QueryItemCount=$CachedCount;

	return $this->Query_Item($sql);
	}

	function SqlNewItems($attribs = array())
	{
	global $objSession, $objCatList;

	$catid = (int)$attribs["_catid"];
	$scope = (int)$attribs["_scope"];
	//$JoinCats = (int)$attribs["_catinfo"] \|\| $scope;

	$TableName = $this->SourceTable;
	if($attribs["_today"])
	{
	$cutoff = mktime(0,0,0,date("m"),date("d"),date("Y"));
	}
	else
	{
	if($scope)
	{
	if (!$catid)
	{
	$catid = $objCatList->CurrentCategoryID();
	}
	$cutoff = $this->GetNewValue($catid);
	}
	else
	$cutoff = $this->GetNewValue();
	}
	if($scope)
	{
	if (!$catid)
	{
	$catid = $objCatList->CurrentCategoryID();
	}

	$where = "CategoryId =".$catid." AND ((".$TableName.".CreatedOn >=".$cutoff." AND ".$TableName.".NewItem != 0) OR ".$TableName.".NewItem=1 ) AND ".$TableName.".Status=1 ";
	}
	else
	{
	$where = "((".$TableName.".CreatedOn >=".$this->GetNewValue()." AND ".$TableName.".NewItem != 0) OR ".$TableName.".NewItem=1 ) AND ".$TableName.".Status=1 ";
	}

	$CategoryTable = GetTablePrefix()."Category";
	$sql = "SELECT $TableName.*,$CategoryTable.CategoryId,$CategoryTable.CachedNavBar FROM $TableName ";
	$p = $this->BasePermission.".VIEW";
	$sql .= $this->GetJoinedSQL($p,$CatUd,$where);

	$OrderBy = $this->QueryOrderByClause(TRUE,TRUE,TRUE);
	$sql .= " ".$OrderBy;
	return $sql;
	}

	function LoadNewItems($attribs)
	{
	global $objSession,$objCountCache;

	$sql = $this->SqlNewItems($attribs);

	if($objSession->HasSystemPermission("DEBUG.LIST"))
	echo htmlentities($sql,ENT_NOQUOTES)."<br>\n";
	if($attribs["_shortlist"])
	{
	$this->PerPageVar = $this->PerPageShortVar;
	}
	else
	$this->PerPageVar = $this->PerPageVarLong;

	$CachedCount = $objCountCache->GetValue($this->CacheListType("new"),$this->ItemType,$this->CacheListExtraId("new"),(int)$attribs["_today"],3600);
	if(!is_numeric($CachedCount))
	{
	$this->QueryItemCount= QueryCount($sql);
	$objCountCache->SetValue($this->CacheListType("new"),$this->ItemType,$this->CacheListExtraId("new"),(int)$attribs["_today"],$this->QueryItemCount);
	}
	else
	$this->QueryItemCount=$CachedCount;


	return $this->Query_Item($sql);
	}

	function SqlPopItems($attribs)
	{
	global $objSession, $objCatList;

	$catid = (int)$attribs["_catid"];
	$scope = (int)$attribs["_scope"];
	//$JoinCats = (int)$attribs["_catinfo"] \|\| $scope;

	$TableName = $this->SourceTable;

	if($scope)
	{
	if (!$catid)
	{
	$catid = $objCatList->CurrentCategoryID();
	}
	$where = "CategoryId =".$catid." AND ((".$TableName.".Hits >=".$this->GetLinkPopValue()." AND ".$TableName.".PopItem !=0) OR ".$TableName.".PopItem=1) AND ".$TableName.".Status=1";
	}
	else
	{
	$where = "((".$TableName.".CachedRating >=".$this->GetPopValue()." AND ".$TableName.".PopItem !=0 ) OR ".$TableName.".PopItem=1) AND ".$TableName.".Status=1 ";

	$where = "((".$TableName.".Hits >=".$this->GetPopValue()." AND ".$TableName.".PopItem !=0) OR ".$TableName.".PopItem=1) AND ".$TableName.".Status=1 ";
	}
	if($attribs["_today"])
	{
	$today = mktime(0,0,0,date("m"),date("d"),date("Y"));
	$where .= " AND ($TableName.CreatedOn>=$today)";
	}
	$CategoryTable = GetTablePrefix()."Category";
	$sql = "SELECT $TableName.*,$CategoryTable.CategoryId,$CategoryTable.CachedNavBar FROM $TableName ";
	$p = $this->BasePermission.".VIEW";
	$sql .= $this->GetJoinedSQL($p,$catid,$where);

	$OrderBy = $this->QueryOrderByClause(TRUE,TRUE,TRUE);
	$sql .= " ".$OrderBy;

	return $sql;
	}

	function LoadPopItems($attribs)
	{
	global $objSession,$objCountCache;
	$sql = $this->SqlPopItems($attribs);

	if($objSession->HasSystemPermission("DEBUG.LIST"))
	echo htmlentities($sql,ENT_NOQUOTES)."<br>\n";
	if($attribs["_shortlist"])
	{
	$this->PerPageVar = $this->PerPageShortVar;
	}
	else
	$this->PerPageVar = $this->PerPageVarLong;

	$CachedCount = $objCountCache->GetValue($this->CacheListType("pop"),$this->ItemType,$this->CacheListExtraId("pop"),(int)$attribs["_today"],3600);
	if(!is_numeric($CachedCount))
	{
	$this->QueryItemCount= QueryCount($sql);
	$objCountCache->SetValue($this->CacheListType("pop"),$this->ItemType,$this->CacheListExtraId("pop"),(int)$attribs["_today"],$this->QueryItemCount);
	}
	else
	$this->QueryItemCount=$CachedCount;

	return $this->Query_Item($sql);
	}

	function SqlHotItems($attribs)
	{
	global $objSession, $objCatList;

	$catid = (int)$attribs["_catid"];
	$scope = (int)$attribs["_scope"];

	// $JoinCats = (int)$attribs["_catinfo"] \|\| $scope;

	$TableName = $this->SourceTable;

	$OrderBy = $TableName.".CachedRating DESC";

	if($scope)
	{
	if (!$catid)
	{
	$catid = $objCatList->CurrentCategoryID();
	}
	$where = "CategoryId =".$catid." AND ((".$TableName.".CachedRating >=".$this->GetHotValue()." AND ".$TableName.".PopItem !=0) OR ".$TableName.".PopItem=1) AND ".$TableName.".Status=1";
	}
	else
	{
	$where = "((".$TableName.".CachedRating >=".$this->GetPopValue()." AND ".$TableName.".PopItem !=0 ) OR ".$TableName.".PopItem=1) AND ".$TableName.".Status=1 ";
	}

	if($attribs["_today"])
	{
	$today = mktime(0,0,0,date("m"),date("d"),date("Y"));
	$where .= " AND ($TableName.CreatedOn>=$today)";
	}
	$CategoryTable = GetTablePrefix()."Category";
	$sql = "SELECT $TableName.*,$CategoryTable.CategoryId,$CategoryTable.CachedNavBar FROM $TableName ";
	$p = $this->BasePermission.".VIEW";
	$CatId = !$scope? NULL : $catid;
	$sql .= $this->GetJoinedSQL($p,$CatId,$where);

	if(strlen($OrderBy))
	$sql .= " ORDER BY $OrderBy ";

	return $sql;
	}

	function LoadHotItems($attribs)
	{
	global $objSession,$objCountCache;

	$sql = $this->SqlHotItems($attribs);
	if($objSession->HasSystemPermission("DEBUG.LIST"))
	echo htmlentities($sql,ENT_NOQUOTES)."<br>\n";

	if($attribs["_shortlist"])
	{
	$this->PerPageVar = $this->PerPageShortVar;
	}
	else
	$this->PerPageVar = $this->PerPageVarLong;

	$CachedCount = $objCountCache->GetValue($this->CacheListType("hot"),$this->ItemType,$this->CacheListExtraId("hot"),(int)$attribs["_today"], 0);
	if(!is_numeric($CachedCount))
	{
	$this->QueryItemCount= QueryCount($sql);
	$objCountCache->SetValue($this->CacheListType("hot"),$this->ItemType,$this->CacheListExtraId("hot"),(int)$attribs["_today"],$this->QueryItemCount);
	}
	else
	$this->QueryItemCount=$CachedCount;

	return $this->Query_Item($sql);
	}

	function SqlSearchItems($attribs = array())
	{
	global $objConfig, $objItemTypes, $objSession, $objPermissions, $CountVal;

	$acl = $objSession->GetACLClause();
	$this->Clear();
	//$stable = "ses_".$objSession->GetSessionKey()."_Search";
	$stable = $objSession->GetSearchTable();
	$ltable = $this->SourceTable;
	$catitems = GetTablePrefix()."CategoryItems";
	$cattable = GetTablePrefix()."Category";
	$ptable = GetTablePrefix()."PermCache";
	$p = $this->BasePermission.".VIEW";
	$i = new $this->classname();

	$sql = "SELECT $cattable.CategoryId,$cattable.CachedNavbar,$ltable.*, Relevance FROM $stable ";
	$sql .= "INNER JOIN $ltable ON ($stable.ItemId=$ltable.".$i->id_field.") ";

	$where = "ItemType=".$this->ItemType." AND $ltable.Status=1";

	$sql .= $this->GetJoinedSQL($p,NULL,$where);
	$sql .= " ORDER BY EdPick DESC,Relevance DESC ";

	$tmp = $this->QueryOrderByClause(FALSE,TRUE,TRUE);
	$tmp = substr($tmp,9);
	if(strlen($tmp))
	{
	$sql .= ", ".$tmp." ";
	}
	return $sql;
	}

	function LoadSearchItems($attribs = array())
	{
	global $CountVal, $objSession;
	//echo "Loading <b>".get_class($this)."</b> Search Items<br>";
	$sql = $this->SqlSearchItems($attribs);
	//echo "$sql<br>";
	$this->Query_Item($sql);
	$Keywords = GetKeywords($objSession->GetVariable("Search_Keywords"));
	//echo "SQL Loaded ItemCount (<b>".get_class($this).'</b>): '.$this->NumItems().'<br>';
	for($i = 0; $i < $this->NumItems(); $i++)
	{
	$this->Items[$i]->Keywords = $Keywords;
	}
	if(is_numeric($CountVal[$this->ItemType]))
	{
	$this->QueryItemCount = $CountVal[$this->ItemType];
	//echo "CACHE: <pre>"; print_r($CountVal); echo "</pre><BR>";
	}
	else
	{
	$this->QueryItemCount = QueryCount($sql);
	//echo "<b>SQL</b>: ".$sql."<br><br>";
	$CountVal[$this->ItemType] = $this->QueryItemCount;
	}

	}

	function PasteFromClipboard($TargetCat,$NameField="")
	{
	global $objSession,$objCatList;

	$clip = $objSession->GetVariable("ClipBoard");
	if(strlen($clip))
	{
	$ClipBoard = ParseClipboard($clip);
	$IsCopy = (substr($ClipBoard["command"],0,4)=="COPY") \|\| ($ClipBoard["source"] == $TargetCat);

	$item_ids = explode(",",$ClipBoard["ids"]);
	for($i=0;$i<count($item_ids);$i++)
	{
	$item = $this->GetItem($item_ids[$i]);
	if(!$IsCopy) // paste to other category then current
	{
	$item->MoveToCategory($ClipBoard["source"],$TargetCat);
	$clip = str_replace("CUT","COPY",$clip);
	$objSession->SetVariable("ClipBoard",$clip);
	}
	else
	{
	$item->CopyToNewResource($TargetCat,$NameField); // create item copy, but with new ResourceId
	$item->AddToCategory($TargetCat);
	UpdateCategoryCount($item->type,$TargetCat);

	}
	}
	}
	}

	function AdminPrintItems($template)
	{
	// prints item listing for admin (browse/advanced view) tabs
	$o = '<table border="0" cellspacing="2" width="100%"><tbody><tr>';

	$i = 1;

	$topleft = 0;
	$topright = 0;
	$rightcount = 0;
	$total_items = $this->NumItems();
	$topleft = ceil($total_items / 2);
	$topright = $total_items - $topleft;

	for($x = 0; $x < $topleft; $x++)
	{
	//printingleft
	$item = $this->Items[$x];
	if ($i > 2)
	{
	$o .= "</tr>\n<tr>";
	$i = 1;
	}
	$o .= $item->AdminParseTemplate($template);
	$i++;

	//printingright
	if ($rightcount < $topright && ( ($x + $topleft) < $total_items) )
	{
	$item = $this->Items[ $x + $topleft ];
	if ($i > 2)
	{
	$o.="</tr>\n<tr>";
	$i = 1;
	}
	$o .= $item->AdminParseTemplate($template);
	$i++;
	$rightcount++;
	}
	}
	$o .= "\n</tr></tbody></table>\n";

	return $o;
	}

	}

	// -------------- NEW CLASSES -----------------------

	class DBList {

	// table related attributes
	var $db = null;
	var $table_name = '';
	var $LiveTable = '';
	var $EditTable = '';


	// record related attributes
	var $records = Array();
	var $record_count = 0;
	var $cur_rec = -1; // "-1" means no records, or record index otherwise

	// query related attributes
	var $SelectSQL = "SELECT * FROM %s";

	function DBList()
	{
	// use $this->SetTable('live', 'table name');
	// in inherited constructors to set table for list
	$this->db =& GetADODBConnection();
	}

	function SetTable($action, $table_name = null)
	{
	// $action = {'live', 'restore','edit'}
	switch($action)
	{
	case 'live':
	$this->LiveTable = $table_name;
	$this->table_name = $this->LiveTable;
	break;
	case 'restore':
	$this->table_name = $this->LiveTable;
	break;
	case 'edit':
	global $objSession;
	$this->table_name = $objSession->GetEditTable($this->LiveTable);
	break;
	}
	}

	function Clear()
	{
	// no use of this method at a time :)
	$this->records = Array();
	$this->record_count = 0;
	$this->cur_rec = -1;
	}

	function Query()
	{
	// query list
	$sql = sprintf($this->SelectSQL, $this->table_name);
	echo "SQL: $sql<br>";
	$rs =& $this->db->Execute($sql);

	if( $this->db->ErrorNo() == 0 )
	{
	$this->records = $rs->GetRows();
	$this->record_count = count($this->records);
	//$this->cur_rec = $this->record_count ? 0 : -1;
	}
	else
	return false;
	}

	function ProcessList($callback_method)
	{
	// process list using user-defined method called
	// with one parameter - current record fields
	// (associative array)
	if($this->record_count > 0)
	{
	$this->cur_rec = 0;
	while($this->cur_rec < $this->record_count)
	{
	if( method_exists($this, $callback_method) )
	$this->$callback_method( $this->GetCurrent() );
	$this->cur_rec++;
	}
	}
	}

	function &GetCurrent()
	{
	// return currently processed record (with change ability)
	return ($this->cur_rec != -1) ? $this->records[$this->cur_rec] : false;
	}

	function GetDBField($field_name)
	{
	$rec =& $this->GetCurrent();
	return is_array($rec) && isset($rec[$field_name]) ? $rec[$field_name] : false;
	}
	}


	?>

	Property changes on: trunk/kernel/include/parseditem.php
	___________________________________________________________________
	Modified: cvs2svn:cvs-rev
	## -1 +1 ##
	-1.25
	\ No newline at end of property
	+1.26
	\ No newline at end of property

in-portalNo OneTemporaryActions

File Metadata

in-portalView Options

Event Timeline

in-portal
No OneTemporary
Actions

in-portal
View Options