<?

require_once($_SERVER["DOCUMENT_ROOT"]."/eaadmin/dbconnect.php");
require_once($_SERVER["DOCUMENT_ROOT"]."/eaadmin/class/euroart/util/Utility.php");

class Company
{
	var $companyid;
	var $companyname;
	var $companylogo;
	
	
	function equals($o)
	{
		if ($o->getCompanyID()==$this->companyid)
			return TRUE;
		else
			return FALSE;
	}
	
	function &Company($companyid = 0)
	{
		if ($companyid>0)
		{
			$connection = mysql_connect(HOST, USERNAME, PASSWORD) or exit("Could not connect");
			mysql_select_db(DATABASE, $connection);
			
			$rs = mysql_query("SELECT * FROM company WHERE COMPANYID=$companyid", $connection);
			if ($rs)
			{
				if ( ($array = mysql_fetch_assoc($rs))!=FALSE)
				{
					$this->companyid = $companyid;
					$this->companyname = $array["COMPANYNAME"];
					$this->companylogo = $array["COMPANYLOGO"];
				}
				else
				{
					$this->$companyid = 0;
					$this->companyname = "";
					$this->companylogo = "";
				}
			}
			mysql_close($connection);
		}
		else
		{
			$this->companyid = 0;
			$this->companyname = "";
			$this->companylogo = "";
		}
	}
	
	function insert()		// returns int COMPANYID of the last inserted row
	{
		$lastInserted = -1;
		$maxpos = 0;
		$ra = -1;
		$connection = mysql_connect(HOST, USERNAME, PASSWORD) or exit("Could not connect");
		mysql_select_db(DATABASE, $connection);
		
		mysql_query("INSERT INTO company (COMPANYID, COMPANYNAME, COMPANYLOGO) VALUES (0, '".Utility::replacewithprime($this->companyname)."', '".$this->companylogo."')", $connection);
		$ra = mysql_affected_rows($connection);
		if ($ra==1)
		{
			$rs = mysql_query("SELECT LAST_INSERT_ID() FROM company", $connection);
			if ($rs)
			{
				$array = mysql_fetch_row($rs);
				$lastInserted = $array[0];
				$this->companyid = $lastInserted;
			}
		}
		mysql_close($connection);
		return $lastInserted;
	}
	
	function update()
	{
		$ra = -1;
		$connection = mysql_connect(HOST, USERNAME, PASSWORD) or exit("Could not connect");
		mysql_select_db(DATABASE, $connection);
		mysql_query("UPDATE company SET COMPANYNAME='".Utility::replacewithprime($this->companyname)."', COMPANYLOGO='".$this->companylogo."' WHERE COMPANYID=".$this->companyid, $connection);
		$ra = mysql_affected_rows($connection);
		mysql_close($connection);
		return $ra;
	}
	
	function delete()
	{
		$vecUsers = User::getUsersForCompany($this->companyid);
		for ($i=0; $i<$vecUsers->size(); $i++)
		{
			$user = &$vecUsers->elementAt($i);
			$user->delete();
		}
		
		$ra = -1;
		$connection = mysql_connect(HOST, USERNAME, PASSWORD) or exit("Could not connect");
		mysql_select_db(DATABASE, $connection);
		mysql_query("DELETE FROM company WHERE COMPANYID=".$this->companyid, $connection);
		$ra = mysql_affected_rows($connection);
		mysql_close($connection);
		return $ra;
	}
	
	function toString()
	{
		return ("companyid=".$this->companyid.", companyname=".$this->companyname.", companylogo=".$this->companylogo);
	}
	
	function &getCompanyForUserName($username)
	{
		$company = &new Company();
		$connection = mysql_connect(HOST, USERNAME, PASSWORD) or exit("Could not connect");
		mysql_select_db(DATABASE, $connection);
		$rs = mysql_query("SELECT COMPANYID FROM users, usertocompany WHERE users.LOGIN=usertocompany.LOGIN AND usertocompany.LOGIN='".$username."'", $connection);
		if ($rs)
		{
			if (($array = mysql_fetch_assoc($rs))!=FALSE)
			{
				$company = &new Company($array["COMPANYID"]);
			}
		}
		return $company;
	}
	
	// returns Vector
	function &getAllCompanies()
	{
		$companies = &new Vector();
		$connection = mysql_connect(HOST, USERNAME, PASSWORD) or exit("Could not connect");
		mysql_select_db(DATABASE, $connection);
		$rs = mysql_query("SELECT COMPANYID FROM company", $connection);
		if ($rs)
		{
			while ( ($array = mysql_fetch_assoc($rs))!=FALSE)
			{
				$company = &new Company($array["COMPANYID"]);
				if ($company->getCompanyID()!=0) $companies->add($company);
			}
		}
		return $companies;
	}
	
	function getCompanyID()			{		return $this->companyid;		}
	function getCompanyName()		{		return $this->companyname;	}
	function getCompanyLogo()		{		return $this->companylogo;	}
	
	function setCompanyID($in)		{		$this->companyid = $in;		}
	function setCompanyName($in)	{		$this->companyname = $in;	}
	function setCompanyLogo($in)	{		$this->companylogo = $in;	}
	
}
?><?

require_once($_SERVER["DOCUMENT_ROOT"]."/eaadmin/dbconnect.php");
require_once($_SERVER["DOCUMENT_ROOT"]."/eaadmin/class/euroart/user/UserRole.php");
require_once($_SERVER["DOCUMENT_ROOT"]."/eaadmin/class/euroart/util/Utility.php");

class User
{

//	static void			changePassword($username, $old, $new)
//	static Vector		&getRolesForUser($userlogin)
//	static Vector		&getRolesForUserStartingWith($userlogin, $roleid)
//	boolean			passwordsAreEqual($first)
//	boolean			equals($object)
//	boolean			isAllowedTo($operation)
//	boolean			isRoot()
//	Vector			&getUsersForCompany($companyid)
//	Vector			&getUsersForCompany($companyid, $level)
//	Role				&login($username, $password)
//	void				forgottenPassword($login, $email)
//	string			generateNewPassword()
//	Vector			&getRoles()
//	string			toString()


	var $login;
	var $password;
	var $encoding;
	var $lastsucclogin;
	var $lastunsucclogin;
	
	var $permission = array(
		1 => array(										// SITEADMIN
			"ADDCOMPANY" => FALSE,
			"DELETECOMPANY" => FALSE,
			"EDITCOMPANY" => TRUE,
			
			"ADDUSER" => TRUE,
			"DELETEUSER" => TRUE,
			"EDITUSER" => TRUE,
			
			"ADDSITEUSER" => TRUE,
			"DELETESITEUSER" => TRUE,
			"EDITSITEUSER" => TRUE,
			
			"ADDCATALOGCATEGORY" => TRUE,
			"DELETECATALOGCATEGORY" => TRUE,
			"EDITCATALOGCATEGORY" => TRUE,
			"VIEWCATALOGCATEGORY" => TRUE,
			
			"ADDPRODUCT" => TRUE,
			"DELETEPRODUCT" => TRUE,
			"EDITPRODUCT" => TRUE,
			"UPPRODUCT" => TRUE,
			"DOWNPRODUCT" => TRUE,
			"PUBLISHPRODUCT" => FALSE,
			
			"ADDARTIST" => TRUE,
			"EDITARTIST" => TRUE,
			"DELETEARTIST" => TRUE,
			"VIEWARTIST" => TRUE,
			
			"ADDNEWSADMIN" => TRUE,
			"VIEWNEWSADMIN" => TRUE,
			"DELETENEWSADMIN" => TRUE,
			"EDITNEWSADMIN" => TRUE
			)  ,
		2 => array(										// SHOPOWNER
			"ADDCOMPANY" => FALSE,
			"DELETECOMPANY" => FALSE,
			"EDITCOMPANY" => TRUE,
			
			"ADDUSER" => FALSE,
			"DELETEUSER" => FALSE,
			"EDITUSER" => FALSE,
			
			"ADDSITEUSER" => FALSE,
			"DELETESITEUSER" => FALSE,
			"EDITSITEUSER" => FALSE,
			
			"ADDCATALOGCATEGORY" => TRUE,
			"DELETECATALOGCATEGORY" => TRUE,
			"EDITCATALOGCATEGORY" => TRUE,
			"VIEWCATALOGCATEGORY" => TRUE,
			
			"ADDPRODUCT" => TRUE,
			"DELETEPRODUCT" => TRUE,
			"EDITPRODUCT" => TRUE,
			"UPPRODUCT" => FALSE,
			"DOWNPRODUCT" => FALSE,
			"PUBLISHPRODUCT" => FALSE,
			
			"ADDNEWSADMIN" => FALSE,
			"VIEWNEWSADMIN" => FALSE,
			"DELETENEWSADMIN" => FALSE,
			"EDITNEWSADMIN" => FALSE
			) ,
		3 => array(										// NEWSADMIN
			"ADDCOMPANY" => FALSE,
			"DELETECOMPANY" => FALSE,
			"EDITCOMPANY" => FALSE,
			
			"ADDUSER" => FALSE,
			"DELETEUSER" => FALSE,
			"EDITUSER" => FALSE,
			
			"ADDSITEUSER" => FALSE,
			"DELETESITEUSER" => FALSE,
			"EDITSITEUSER" => FALSE,
			
			"ADDCATALOGCATEGORY" => FALSE,
			"DELETECATALOGCATEGORY" => FALSE,
			"EDITCATALOGCATEGORY" => FALSE,
			"VIEWCATALOGCATEGORY" => FALSE,
			
			"ADDPRODUCT" => FALSE,
			"DELETEPRODUCT" => FALSE,
			"EDITPRODUCT" => FALSE,
			"UPPRODUCT" => FALSE,
			"DOWNPRODUCT" => FALSE,
			"PUBLISHPRODUCT" => FALSE,
			
			"ADDNEWSADMIN" => TRUE,
			"VIEWNEWSADMIN" => TRUE,
			"DELETENEWSADMIN" => TRUE,
			"EDITNEWSADMIN" => TRUE
			) /* ,
		99 => array(										// VISITOR
			"" => ,
			"" => ,
			"" => ,
			
			"" => ,
			"" => ,
			"" => ,
			)
			*/
	);
	
	function equals($o)
	{
		if ($o->getLogin()==$this->login)
			return TRUE;
		else
			return FALSE;
	}
	
	function &User($log="")
	{
		if ($log!="")
		{
			$connection = mysql_connect(HOST, USERNAME, PASSWORD) or exit("Could not connect");
			mysql_select_db(DATABASE, $connection);
			
			$rs = mysql_query("SELECT * FROM users WHERE LOGIN='".$log."'", $connection);
			if ($rs)
			{
				if ( ($array = mysql_fetch_assoc($rs))!=FALSE)
				{
					$this->login = $log;
					$this->password = $array["PASSWORD"];
					$this->encoding = $array["ENCODING"];
					$this->lastsucclogin = $array["LASTSUCCLOGIN"];
					$this->lastunsucclogin = $array["LASTUNSUCCLOGIN"];
				}
				else
				{
					$this->login = "";
					$this->password = "";
					$this->encoding = "";
					$this->lastsucclogin = 0;
					$this->lastunsucclogin = 0;
				}
			}
			mysql_close($connection);
		}
		else
		{
			$this->login = "";
			$this->password = "";
			$this->encoding = "";
			$this->lastsucclogin = 0;
			$this->lastunsucclogin = 0;
		}
	}
	
	// returns boolean
	function passwordsAreEqual($first)		// first is unencrypted, of course
	{
		/////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////
		//	bez hashiranja
		/////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////
		/* 
		if ($first==$this->password) return TRUE;
		else return FALSE;
		*/
		
		/////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////
		//	sa hashiranjem
		/////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////
		if (md5($first)==$this->password) return TRUE;
		else return FALSE;
	}
	
	// this is a new method, for new checking strategy, v 2.0
	function isAllowedTo($operation)
	{
		$userRole = &new UserRole($this->login);
		$vecRoles = $userRole->getRoles();
		
		$adminRole = &new Role(0);
		if ($vecRoles->contains($adminRole)) return TRUE;				// if it's the root, he is allowed to do everything
		
		for ($i=0; $i<$vecRoles->size(); $i++)
		{
			$role = &$vecRoles->elementAt($i);
			if ($this->permission[$role->roleid][$operation]) return TRUE;
		}
		return FALSE;
	}
	
	//returns boolean
	function isRoot()
	{
		$userRole = &new UserRole($this->login);
		$vecRoles = $userRole->getRoles();
		$rootRole = &new Role(0);
		
		if ($vecRoles->contains($rootRole)) return TRUE;
		else return FALSE;
	}
	
	//returns boolean
	function isShopOwner()
	{
		$userRole = &new UserRole($this->login);
		$vecRoles = $userRole->getRoles();
		$rootRole = &new Role(0);
		$ownerRole = &new Role(1);
		
		if ($vecRoles->contains($rootRole) || $vecRoles->contains($ownerRole)) return TRUE;
		else return FALSE;
	}
	
	//returns boolean
	function isNewsAdmin()
	{
		$userRole = &new UserRole($this->login);
		$vecRoles = $userRole->getRoles();
		$rootRole = &new Role(0);
		$newsAdminRole = &new Role(2);
		
		if ($vecRoles->contains($rootRole) || $vecRoles->contains($newsAdminRole)) return TRUE;
		else return FALSE;
	}
	
	// returns boolean (success if no username already exists)
	function insert($companyid)		// returns int QID of the last inserted row
	{
		$success = FALSE;
		
		if ($this->login!="")
		{
			$maxpos = 0;
			$ra = -1;
			$connection = mysql_connect(HOST, USERNAME, PASSWORD) or exit("Could not connect");
			mysql_select_db(DATABASE, $connection);
			
			$rs = mysql_query("SELECT PASSWORD FROM users WHERE LOGIN='".$this->login."'");
			if ($rs)
			{
				if (($array = mysql_fetch_assoc($rs))==FALSE)
				{
					/////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////
					//	bez hashiranja
					/////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////
					//mysql_query("INSERT INTO users (LOGIN, PASSWORD, ENCODING, LASTSUCCLOGIN, LASTUNSUCCLOGIN) VALUES ('".$this->login."', '".$this->password."', 'none', 0, 0)", $connection);
					
					/////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////
					//	sa hashiranjem
					/////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////
					mysql_query("INSERT INTO users (LOGIN, PASSWORD, ENCODING, LASTSUCCLOGIN, LASTUNSUCCLOGIN) VALUES ('".$this->login."', '".md5($this->password)."', 'MD5', 0, 0)", $connection);
					$ra = mysql_affected_rows($connection);
					if ($ra==1)
					{
						mysql_query("INSERT INTO usertocompany VALUES('".$this->login."', ".$companyid.")", $connection);
						$success = TRUE;
					}
				}
			}
			mysql_close($connection);
		}
		return $success;
	}
	
	function update()
	{
		$ra = -1;
		$connection = mysql_connect(HOST, USERNAME, PASSWORD) or exit("Could not connect");
		mysql_select_db(DATABASE, $connection);
		mysql_query("UPDATE users SET  ENCODING='".$this->encoding."' WHERE LOGIN='".$this->login."'", $connection);	// PASSWORD='".$this->password."',
		$ra = mysql_affected_rows($connection);
		mysql_close($connection);
		return $ra;
	}
	
	function delete()
	{
		$ra = -1;
		$connection = mysql_connect(HOST, USERNAME, PASSWORD) or exit("Could not connect");
		mysql_select_db(DATABASE, $connection);
		mysql_query("DELETE FROM users WHERE LOGIN='$this->login'", $connection);
		$ra = mysql_affected_rows($connection);
		if ($ra==1)
		{
			mysql_query("DELETE FROM usertocompany WHERE LOGIN='".$this->login."'", $connection);
			
			$userdetails = &new UserDetails($this->login);
			$userdetails->delete();
			
			$userrole = &new UserRole($this->login);
			$userrole->delete();
		}
		$el = error_reporting(E_ERROR);
		mysql_close($connection);
		$el = error_reporting($el);
		return $ra;
	}
	
	function changePassword($username, $old, $new)
	{
		/* 
		/////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////
		//	bez hashiranja
		/////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////
		$connection = mysql_connect(HOST, USERNAME, PASSWORD) or exit("Could not connect");
		mysql_select_db(DATABASE, $connection);
		mysql_query("UPDATE users SET PASSWORD='".$new."' WHERE LOGIN='".$username."' AND PASSWORD='".$old."'");
		$ra = mysql_affected_rows($connection);
		mysql_close($connection);
		return $ra;
		*/
		
		/////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////
		//	sa hashiranjem
		/////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////
		$connection = mysql_connect(HOST, USERNAME, PASSWORD) or exit("Could not connect");
		mysql_select_db(DATABASE, $connection);
		$q = "UPDATE users SET PASSWORD='".md5($new)."' WHERE LOGIN='".$username."' AND PASSWORD='".md5($old)."'";
		mysql_query($q);
		$ra = mysql_affected_rows($connection);
		$el = error_reporting(E_ERROR);
		mysql_close($connection);
		$el = error_reporting($el);
		return $ra;
	}
	
	function toString()
	{
		return ("login=".$this->login.", password=".$this->password.", encoding=".$this->encoding.", last successful login=".$this->lastsucclogin.", last unsuccessful login=".$this->lastunsucclogin);
	}
	
	// returns Vector
	function &getUsersForCompany($companyid)
	{
		$vecUsers = &new Vector();
		
		$connection = mysql_connect(HOST, USERNAME, PASSWORD) or exit("Could not connect");
		mysql_select_db(DATABASE, $connection);
		$rs = mysql_query("SELECT LOGIN FROM usertocompany WHERE COMPANYID=".$companyid, $connection);
		if ($rs)
		{
			while ( ($array = mysql_fetch_assoc($rs))!=FALSE)
			{
				$user = &new User($array["LOGIN"]);
				
				if ($user->getLogin()!="")
				{
					$vecUsers->add($user);
				}
			}
		}
		return $vecUsers;
	}
	
	// returns Vector
	function &getUsersForCompanyAndLevel($companyid, $level)
	{
		$vecUsers = &new Vector();
		
		$connection = mysql_connect(HOST, USERNAME, PASSWORD) or exit("Could not connect");
		mysql_select_db(DATABASE, $connection);
		$query = "SELECT * FROM usertocompany, userroles WHERE COMPANYID=".$companyid." AND userroles.LOGIN=usertocompany.LOGIN AND ROLE>=".$level;
		$rs = mysql_query($query, $connection);
		if ($rs)
		{
			while ( ($array = mysql_fetch_assoc($rs))!=FALSE)
			{
				$user = &new User($array["LOGIN"]);
				
				if ($user->getLogin()!="")
				{
					$vecUsers->add($user);
				}
			}
		}
		return $vecUsers;
	}
	
	function &login($username, $password)
	{
		/* 
		/////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////
		//	bez hashiranja
		/////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////
		$role = &new Role();
		$connection = mysql_connect(HOST, USERNAME, PASSWORD) or exit("Could not connect");
		mysql_select_db(DATABASE, $connection);
		$rs = mysql_query("SELECT PASSWORD FROM users WHERE LOGIN='".$username."'");
		if ($rs)
		{
			if ( ($array = mysql_fetch_assoc($rs))!=FALSE)
			{
				$pw = $array["PASSWORD"];
				if ($pw==$password)									// password is correct
				{
					$userrole = &new UserRole($username);
					$vecRoles = $userrole->getRoles();
					$roleV = $vecRoles->elementAt(0);
					$role = &new Role($roleV->getRoleID());
					
					$q = "UPDATE users SET LASTSUCCLOGIN=".time()." WHERE LOGIN='".$username."'";
					mysql_query($q);
				}
				else												// password is incorrect
				{
					$q = "UPDATE users SET LASTUNSUCCLOGIN=".time()." WHERE LOGIN='".$username."'";
					mysql_query($q);
				}
			}
		}
		mysql_close($connection);
		return $role;
		*/
		
		/////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////
		//	sa hashiranjem
		/////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////
		$role = &new Role();
		$connection = mysql_connect(HOST, USERNAME, PASSWORD) or exit("Could not connect");
		mysql_select_db(DATABASE, $connection);
		$rs = mysql_query("SELECT PASSWORD FROM users WHERE LOGIN='".$username."'");
		if ($rs)
		{
			if ( ($array = mysql_fetch_assoc($rs))!=FALSE)
			{
				$pw = $array["PASSWORD"];
				if ($pw==md5($password))									// password is correct
				{
					$userrole = &new UserRole($username);
					$vecRoles = $userrole->getRoles();
					$roleV = $vecRoles->elementAt(0);
					$role = &new Role($roleV->getRoleID());
					
					$q = "UPDATE users SET LASTSUCCLOGIN=".time()." WHERE LOGIN='".$username."'";
					mysql_query($q);
				}
				else												// password is incorrect
				{
					$q = "UPDATE users SET LASTUNSUCCLOGIN=".time()." WHERE LOGIN='".$username."'";
					mysql_query($q);
				}
			}
		}
		$el = error_reporting(E_ERROR);
		mysql_close($connection);
		$el = error_reporting($el);
		return $role;
		
	}
	
	function forgottenPassword($login, $email)
	{
		/* 
		/////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////
		//	bez hashiranja
		/////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////
		$password = "";
		$connection = mysql_connect(HOST, USERNAME, PASSWORD) or exit("Could not connect");
		mysql_select_db(DATABASE, $connection);
		$sql = "SELECT PASSWORD FROM users, userdetails WHERE users.LOGIN='".$login."' AND userdetails.EMAIL='".$email."'";
		$rs = mysql_query($sql);
		if ($rs)
		{
			if ( ($array = mysql_fetch_assoc($rs))!=FALSE)
			{
				$password = $array["PASSWORD"];
			}
		}
		mysql_close($connection);
		return $password;
		*/
		
		/////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////
		//	sa hashiranjem
		/////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////
		$password = User::generateNewPassword();
		$connection = mysql_connect(HOST, USERNAME, PASSWORD) or exit("Could not connect");
		mysql_select_db(DATABASE, $connection);
		$sql = "SELECT PASSWORD FROM users, userdetails WHERE users.LOGIN='".$login."' AND userdetails.EMAIL='".$email."'";
		$rs = mysql_query($sql);
		if ($rs)
		{
			if ( ($array = mysql_fetch_assoc($rs))!=FALSE)
			{
				//$password = $array["PASSWORD"];
				$q = "UPDATE users SET PASSWORD = '".md5($password)."' WHERE LOGIN='".$login."'";
				$ra = mysql_query($q);
			}
		}
		$el = error_reporting(E_ERROR);
		mysql_close($connection);
		$el = error_reporting($el);
		return $password;
	}
	
	// private
	function generateNewPassword()
	{
		$pwd = "";
		
		for ($i=0; $i<10; $i++)
		{
			switch(rand(1,3))
			{
				case 1: $pwd = $pwd.chr(rand(48,57)); break;	// 0-9
				case 2: $pwd = $pwd.chr(rand(65,90)); break;	// A-Z
				case 3: $pwd = $pwd.chr(rand(97,122)); break;	// a-z
			}
		}
		
		return $pwd;
	}
	
	// static
	function &getRolesForUser($userlogin)
	{
		$vecRoles = &new Vector();
		
		$sql = "select ROLE from userroles where LOGIN='".$userlogin."' ORDER BY ROLE ASC";
		$connection = mysql_connect(HOST, USERNAME, PASSWORD) or exit("Could not connect");
		mysql_select_db(DATABASE, $connection);
		$rs = mysql_query($sql);
		if ($rs)
		{
			while(($array = mysql_fetch_assoc($rs))!=FALSE)
			{
				$role = &new Role($array["ROLE"]);
				$vecRoles->add($role);
			}
		}
		mysql_close($connection);
		return $vecRoles;
	}
	
	// static
	function &getRolesForUserStartingWith($userlogin, $roleid)
	{
		$vecRoles = &new Vector();
		
		$sql = "select ROLEID from roles, userroles where LOGIN='".$userlogin."' AND ROLEID>=".$roleid." ORDER BY ROLEID ASC";
		$connection = mysql_connect(HOST, USERNAME, PASSWORD) or exit("Could not connect");
		mysql_select_db(DATABASE, $connection);
		$rs = mysql_query($sql);
		if ($rs)
		{
			while(($array = mysql_fetch_assoc($rs))!=FALSE)
			{
				$role = &new Role($array["ROLEID"]);
				$vecRoles->add($role);
			}
		}
		mysql_close($connection);
		return $vecRoles;
	}
	
	function &getRoles()
	{
		$vecRoles = &new Vector();
		
		$sql = "select ROLE from userroles where LOGIN='".$this->login."' ORDER BY ROLE ASC";
		$connection = mysql_connect(HOST, USERNAME, PASSWORD) or exit("Could not connect");
		mysql_select_db(DATABASE, $connection);
		$rs = mysql_query($sql);
		if ($rs)
		{
			while(($array = mysql_fetch_assoc($rs))!=FALSE)
			{
				$role = &new Role($array["ROLE"]);
				$vecRoles->add($role);
			}
		}
		mysql_close($connection);
		return $vecRoles;
	}
	
	function getLogin()				{	return $this->login;			}
	function getPassword()			{	return $this->password;		}
	function getEncoding()			{	return $this->encoding;		}
	function getLastSuccLogin()		{	return $this->lastsucclogin;	}
	function getLastUnsuccLogin()	{	return $this->lastunsucclogin;	}
	
	function setLogin($in)			{	$this->login = $in;			}
	function setPassword($in)		{	$this->password = $in;		}
	function setEncoding($in)		{	$this->encoding = $in;		}
	function setLastSuccLogin($in)	{	$this->lastsucclogin = $in;	}
	function setLastUnsuccLogin($in)	{	$this->lastunsucclogin = $in;	}
}
?><?

require_once($_SERVER["DOCUMENT_ROOT"]."/eaadmin/dbconnect.php");
require_once($_SERVER["DOCUMENT_ROOT"]."/eaadmin/class/util/Vector.php");

class Role
{
	var $roleid;
	var $role;
	
	function equals($o)
	{
		if (/*$o->getRole()==$this->role &&*/ $o->getRoleID()==$this->roleid) return TRUE;
		else return FALSE;
	}
	var $permission = array(
		1 => array(
			"ADDCOMPANY" => FALSE,
			"DELETECOMPANY" => FALSE,
			"EDITCOMPANY" => TRUE,
			
			"ADDUSER" => TRUE,
			"DELETEUSER" => TRUE,
			"EDITUSER" => TRUE,
			
			"ADDCATALOGCATEGORY" => TRUE,
			"DELETECATALOGCATEGORY" => TRUE,
			"EDITCATALOGCATEGORY" => TRUE,
			
			"ADDPRODUCT" => TRUE,
			"DELETEPRODUCT" => TRUE,
			"EDITPRODUCT" => TRUE,
			"UPPRODUCT" => FALSE,
			"DOWNPRODUCT" => FALSE,
			"PUBLISHPRODUCT" => FALSE,
			
			"ADDNEWSADMIN" => FALSE,
			"VIEWNEWSADMIN" => FALSE,
			"DELETENEWSADMIN" => FALSE,
			"EDITNEWSADMIN" => FALSE
			) /* ,
		2 => array(
			"" => ,
			"" => ,
			"" => ,
			
			"" => ,
			"" => ,
			"" => ,
			) */
	);
	
	function getRoleID()			{	return $this->roleid;		}
	function getRole()			{	return $this->role;		}
	
	function setRoleID($in)		{	$this->roleid = $in;		}
	function setRole($in)		{	$this->role = $in;		}
	
	function &Role($level = 999)
	{
		$this->roleid = 999;
		$this->role = "";
		
		if ($level!=999)
		{
			$sql = "SELECT ROLE FROM roles WHERE ROLEID=".$level;
			$connection = mysql_connect(HOST, USERNAME, PASSWORD) or exit("Could not connect");
			mysql_select_db(DATABASE, $connection);
			$rs = mysql_query($sql);
			if ($rs)
			{
				if(($array = mysql_fetch_assoc($rs))!=FALSE)
				{
					$this->roleid = $level;
					$this->role = $array["ROLE"];
				}
			}
		}
	}
	
	function toString()
	{
		return "roleid=".$this->roleid.", role=".$this->role;
	}
	
	// DEPRECATED
	//returns boolean
	function isAllowedTo($operation)
	{
		if ($this->roleid==0) return TRUE;
		else return $this->permission[$this->roleid][$operation];
	}
	
	// DEPRECATED
	//returns boolean
	function isRoot()
	{
		if ($this->roleid==0) return TRUE;
		else return FALSE;
	}
	
	// DEPRECATED
	//returns boolean
	function isShopOwner()
	{
		if ($this->roleid==0 || $this->roleid==1) return TRUE;
		else return FALSE;
	}
	
	// DEPRECATED
	//returns boolean
	function isNewsAdmin()
	{
		if ($this->roleid==2 || $this->roleid==0) return TRUE;
		else return FALSE;
	}
}

?><?

require_once($_SERVER["DOCUMENT_ROOT"]."/eaadmin/dbconnect.php");
require_once($_SERVER["DOCUMENT_ROOT"]."/eaadmin/class/util/Vector.php");
require_once($_SERVER["DOCUMENT_ROOT"]."/eaadmin/class/euroart/user/Role.php");

class UserRole
{
	var $login;
	var $vecRoles;
	
	function equals($o)
	{
		if ($o->getLogin()==$this->login)
			return TRUE;
		else
			return FALSE;
	}
	
	function toString()
	{
		if ($this->vecRoles && $this->vecRoles->size()>0) $role = $this->vecRoles->elementAt(0);
		else $role = &new Role();
		return "login=".$this->login.", role=".$role->getRole();
	}
	
	function &UserRole($log = "")
	{
		$this->vecRoles = &new Vector();
		
		if ($log!="")
		{
			$sql = "select ROLE from userroles where LOGIN='".$log."' ORDER BY ROLE ASC";
			$connection = mysql_connect(HOST, USERNAME, PASSWORD) or exit("Could not connect");
			mysql_select_db(DATABASE, $connection);
			$rs = mysql_query($sql);
			if ($rs)
			{
				$this->login = $log;
				while(($array = mysql_fetch_assoc($rs))!=FALSE)
				{
					$role = &new Role($array["ROLE"]);
					$this->vecRoles->add($role);
				}
			}
		}
		else
		{
			$this->login = "";
		}
	}
	
	function setRoles($in)	{	$this->vecRoles = $in;	}
	function setLogin($in)	{	$this->login = $in;		}
	
	function getLogin()		{	return $this->login;		}
	function getRoles()		{	return $this->vecRoles;	}
	
	function insert()
	{
		if ($this->login!="")
		{
			if ($this->vecRoles)
			{
				$connection = mysql_connect(HOST, USERNAME, PASSWORD) or exit("Could not connect");
				mysql_select_db(DATABASE, $connection);
				
				for ($i=0; $i<$this->vecRoles->size(); $i++)
				{
					$role = $this->vecRoles->elementAt($i);
					$sql = "insert into userroles values('".$this->login."',".$role->getRoleID().")";
					mysql_query($sql);
				}
				
				mysql_close($connection);
			}
		}
	}
	
	function update()
	{
		if ($this->login!="")
		{
			if ($this->vecRoles)
			{
				$connection = mysql_connect(HOST, USERNAME, PASSWORD) or exit("Could not connect");
				mysql_select_db(DATABASE, $connection);
				
				for ($i=0; $i<$this->vecRoles->size(); $i++)
				{
					$role = $this->vecRoles->elementAt($i);
					$sql = "update userroles set ROLE=".$role->getRoleID()." where LOGIN='".$this->login."'";
					mysql_query($sql);
				}
				
				mysql_close($connection);
			}
		}
	}
	
	function delete()
	{
		if ($this->login!="")
		{
			$connection = mysql_connect(HOST, USERNAME, PASSWORD) or exit("Could not connect");
			mysql_select_db(DATABASE, $connection);
			mysql_query("delete from userroles where LOGIN='".$this->login."'");
			mysql_close($connection);
		}
	}
	
	// returns an array of roles
	function getRolesForLevel($level)
	{
		//$hashRoles = &new Hashtable();
		$sql = "select * from roles where ROLELEVEL>=".$level." order by ROLELEVEL asc";
		$vecRoles = &new Vector();
		$connection = mysql_connect(HOST, USERNAME, PASSWORD) or exit("Could not connect");
		mysql_select_db(DATABASE, $connection);
		
		$rs = mysql_query($sql);
		if ($rs)
		{
			while ( ($array = mysql_fetch_assoc($rs))!=FALSE)
			{
				$role = &new Role();
				$role->setRoleLevel($array["ROLELEVEL"]);
				$role->setRole($array["ROLE"]);
				$vecRoles->add($role);
			}
		}
		mysql_close($connection);
		
		return $vecRoles;
	}
	
}<?

require_once($_SERVER["DOCUMENT_ROOT"]."/eaadmin/dbconnect.php");
require_once($_SERVER["DOCUMENT_ROOT"]."/eaadmin/class/euroart/util/Utility.php");

class UserDetails
{
	var $login;
	var $firstname;
	var $lastname;
	var $email;
	var $phone;
	
	function equals($o)
	{
		if ($o->getLogin()==$this->login)
			return TRUE;
		else
			return FALSE;
	}
	
	function &UserDetails($log = "")
	{
		if ($log!="")
		{
			$connection = mysql_connect(HOST, USERNAME, PASSWORD) or exit("Could not connect");
			mysql_select_db(DATABASE, $connection);
			
			$rs = mysql_query("SELECT * FROM userdetails WHERE LOGIN='".$log."'", $connection);
			if ($rs)
			{
				if ( ($array = mysql_fetch_assoc($rs))!=FALSE)
				{
					$this->login = $log;
					$this->firstname = $array["FIRST"];
					$this->lastname = $array["LAST"];
					$this->email = $array["EMAIL"];
					$this->phone = $array["PHONE"];
				}
				else
				{
					$this->login = "";
					$this->firstname = "";
					$this->lastname = "";
					$this->email = "";
					$this->phone = "";
				}
			}
			mysql_close($connection);
		}
		else
		{
			$this->login = "";
			$this->firstname = "";
			$this->lastname = "";
			$this->email = "";
			$this->phone = "";
		}
	}
	
	function insert()		// returns int QID of the last inserted row
	{
		if ($this->login!="")
		{
			$maxpos = 0;
			$ra = -1;
			$connection = mysql_connect(HOST, USERNAME, PASSWORD) or exit("Could not connect");
			mysql_select_db(DATABASE, $connection);
			mysql_query("INSERT INTO userdetails (LOGIN, FIRST, LAST, EMAIL, PHONE) VALUES ('".$this->login."', '".Utility::replacewithprime($this->firstname)."', '".Utility::replacewithprime($this->lastname)."', '".$this->email."', '".$this->phone."')", $connection);
			$ra = mysql_affected_rows($connection);
			mysql_close($connection);
		}
	}
	
	function update()
	{
		$ra = -1;
		$connection = mysql_connect(HOST, USERNAME, PASSWORD) or exit("Could not connect");
		mysql_select_db(DATABASE, $connection);
		mysql_query("UPDATE userdetails SET FIRST='".Utility::replacewithprime($this->firstname)."', LAST='".Utility::replacewithprime($this->lastname)."', EMAIL='".$this->email."', PHONE='".$this->phone."' WHERE LOGIN='".$this->login."'", $connection);
		$ra = mysql_affected_rows($connection);
		mysql_close($connection);
		return $ra;
	}
	
	function delete()
	{
		$ra = -1;
		$connection = mysql_connect(HOST, USERNAME, PASSWORD) or exit("Could not connect");
		mysql_select_db(DATABASE, $connection);
		mysql_query("DELETE FROM userdetails WHERE LOGIN='$this->login'", $connection);
		$ra = mysql_affected_rows($connection);
		mysql_close($connection);
		return $ra;
	}
	
	function toString()
	{
		return ("login=".$this->login.", firstname=".$this->firstname.", lastname=".$this->lastname.", email=".$this->email.", phone=".$this->phone);
	}
	
	function getLogin()			{	return $this->login;		}
	function getFirstName()		{	return $this->firstname;	}
	function getLastName()		{	return $this->lastname;	}
	function getEMail()			{	return $this->email;		}
	function getPhone()			{	return $this->phone;	}
	
	function setLogin($in)		{	$this->login = $in;		}
	function setFirstName($in)	{	$this->firstname = $in;	}
	function setLastName($in)	{	$this->lastname = $in;	}
	function setEMail($in)		{	$this->email = $in;		}
	function setPhone($in)		{	$this->phone = $in;		}
}
?><?

require_once($_SERVER["DOCUMENT_ROOT"]."/eaadmin/dbconnect.php");
require_once($_SERVER["DOCUMENT_ROOT"]."/eaadmin/class/euroart/user/UserRole.php");
require_once($_SERVER["DOCUMENT_ROOT"]."/eaadmin/class/euroart/util/Utility.php");

class Siteuser
{
	var $login;
	var $password;
	var $encoding;
	var $lastsucclogin;
	var $lastunsucclogin;
	
	function equals($o)
	{
		if ($o->getLogin()==$this->login)
			return TRUE;
		else
			return FALSE;
	}
	
	function &Siteuser($log="")
	{
		if ($log!="")
		{
			$connection = mysql_connect(HOST, USERNAME, PASSWORD) or exit("Could not connect");
			mysql_select_db(DATABASE, $connection);
			
			$rs = mysql_query("SELECT * FROM siteusers WHERE LOGIN='".$log."'", $connection);
			if ($rs)
			{
				if ( ($array = mysql_fetch_assoc($rs))!=FALSE)
				{
					$this->login = $log;
					$this->password = $array["PASSWORD"];
					$this->encoding = $array["ENCODING"];
					$this->lastsucclogin = $array["LASTSUCCLOGIN"];
					$this->lastunsucclogin = $array["LASTUNSUCCLOGIN"];
				}
				else
				{
					$this->login = "";
					$this->password = "";
					$this->encoding = "none";
					$this->lastsucclogin = 0;
					$this->lastunsucclogin = 0;
				}
			}
			mysql_close($connection);
		}
		else
		{
			$this->login = "";
			$this->password = "";
			$this->encoding = "none";
			$this->lastsucclogin = 0;
			$this->lastunsucclogin = 0;
		}
	}
	
	// returns ra
	function insert()		// returns int QID of the last inserted row
	{
		$success = FALSE;
		
		if ($this->login!="")
		{
			$maxpos = 0;
			$ra = -1;
			$connection = mysql_connect(HOST, USERNAME, PASSWORD) or exit("Could not connect");
			mysql_select_db(DATABASE, $connection);
			
			$rs = mysql_query("SELECT PASSWORD FROM siteusers WHERE LOGIN='".$this->login."'");
			if ($rs)
			{
				if (($array = mysql_fetch_assoc($rs))==FALSE)
				{
					mysql_query("INSERT INTO siteusers (LOGIN, PASSWORD, ENCODING, LASTSUCCLOGIN, LASTUNSUCCLOGIN) VALUES ('".$this->login."', '".$this->password."', '".$this->encoding."', 0, 0)", $connection);
					$ra = mysql_affected_rows($connection);
				}
			}
			mysql_close($connection);
		}
		return $ra;
	}
	
	function update()
	{
		$ra = -1;
		$connection = mysql_connect(HOST, USERNAME, PASSWORD) or exit("Could not connect");
		mysql_select_db(DATABASE, $connection);
		mysql_query("UPDATE siteusers SET PASSWORD='".$this->password."', ENCODING='".$this->encoding."' WHERE LOGIN='".$this->login."'", $connection);
		$ra = mysql_affected_rows($connection);
		mysql_close($connection);
		return $ra;
	}
	
	function delete()
	{
		$ra = -1;
		$connection = mysql_connect(HOST, USERNAME, PASSWORD) or exit("Could not connect");
		mysql_select_db(DATABASE, $connection);
		mysql_query("DELETE FROM siteusers WHERE LOGIN='$this->login'", $connection);
		$ra = mysql_affected_rows($connection);
		if ($ra==1)
		{
			mysql_query("DELETE FROM usertocompany WHERE LOGIN='".$this->login."'", $connection);
			
			$userdetails = &new UserDetails($this->login);
			$userdetails->delete();
			
			$userrole = &new UserRole($this->login);
			$userrole->delete();
		}
		//mysql_close($connection);	// --
		return $ra;
	}
	
	function changePassword($username, $old, $new)
	{
		$connection = mysql_connect(HOST, USERNAME, PASSWORD) or exit("Could not connect");
		mysql_select_db(DATABASE, $connection);
		mysql_query("UPDATE siteusers SET PASSWORD='".$new."' WHERE LOGIN='".$username."' AND PASSWORD='".$old."'");
		$ra = mysql_affected_rows($connection);
		mysql_close($connection);
		return $ra;
	}
	
	function toString()
	{
		return ("login=".$this->login.", password=".$this->password.", encoding=".$this->encoding.", last successful login=".$this->lastsucclogin.", last unsuccessful login=".$this->lastunsucclogin);
	}
	
	function &login($username, $password)
	{
		$loggedin = FALSE;
		$connection = mysql_connect(HOST, USERNAME, PASSWORD) or exit("Could not connect");
		mysql_select_db(DATABASE, $connection);
		$rs = mysql_query("SELECT PASSWORD FROM siteusers WHERE LOGIN='".$username."'");
		if ($rs)
		{
			if ( ($array = mysql_fetch_assoc($rs))!=FALSE)
			{
				$pw = $array["PASSWORD"];
				if ($pw==$password)
				{
					$loggedin = TRUE;
				}
			}
		}
		mysql_close($connection);
		return $loggedin;
	}
	
	function forgottenPassword($login, $email)
	{
		$password = "";
		$connection = mysql_connect(HOST, USERNAME, PASSWORD) or exit("Could not connect");
		mysql_select_db(DATABASE, $connection);
		$sql = "SELECT PASSWORD FROM siteusers, siteuserdetails WHERE siteusers.LOGIN='".$login."' AND siteuserdetails.EMAIL='".$email."'";
		$rs = mysql_query($sql);
		if ($rs)
		{
			if ( ($array = mysql_fetch_assoc($rs))!=FALSE)
			{
				$password = $array["PASSWORD"];
			}
		}
		mysql_close($connection);
		return $password;
	}
	
	/*********************************************************************************************/
	//											 I 	     Labud i Exco i Regio
	//											V
	function addEMail($inemail)	// ako vec ne postoji email, ubaci ga u DB tablicu "newsletter"
	{
		$connection = mysql_connect(HOST, USERNAME, PASSWORD) or exit("Could not connect");
		mysql_select_db(DATABASE, $connection);
		$sql = "SELECT * FROM newsletter WHERE email='".$inemail."'";
		$rs = mysql_query($sql);
		if ($rs)
		{
			if (($array = mysql_fetch_assoc($rs))==FALSE)
			{
				mysql_query("INSERT INTO newsletter VALUES (0, '".$inemail."')");
				$ra = mysql_affected_rows($connection);
			}
		}
		mysql_close($connection);
		return $ra;
	}
	
	function sendEMail()
	{
		mail($recipients, $subject, $message, "From: exco@exco.hr\n");
	}
	/*********************************************************************************************/
	function getLogin()				{	return $this->login;			}
	function getPassword()			{	return $this->password;		}
	function getEncoding()			{	return $this->encoding;		}
	function getLastSuccLogin()		{	return $this->lastsucclogin;	}
	function getLastUnsuccLogin()		{	return $this->lastunsucclogin;	}
	
	function setLogin($in)			{	$this->login = $in;			}
	function setPassword($in)		{	$this->password = $in;		}
	function setEncoding($in)			{	$this->encoding = $in;		}
	function setLastSuccLogin($in)		{	$this->lastsucclogin = $in;		}
	function setLastUnsuccLogin($in)	{	$this->lastunsucclogin = $in;	}
}
?><?

require_once($_SERVER["DOCUMENT_ROOT"]."/eaadmin/dbconnect.php");
require_once($_SERVER["DOCUMENT_ROOT"]."/eaadmin/class/euroart/user/UserRole.php");
require_once($_SERVER["DOCUMENT_ROOT"]."/eaadmin/class/euroart/util/Utility.php");
require_once($_SERVER["DOCUMENT_ROOT"]."/eaadmin/class/lang/String.php");


	// static Vector getUnregisteredUserDetails()


class SiteuserDetails
{
	var $idx;
	var $login;
	var $first;
	var $last;
	var $email;
	var $phone;
	var $fax;
	var $org;
	var $addr;
	var $interests;
	var $published;
	var $datapublic;
	var $bio;
	
	function equals($o)
	{
		if ($o->getLogin()==$this->login)
			return TRUE;
		else
			return FALSE;
	}
	
	function &SiteuserDetails($log="")
	{
		if ($log!="")
		{
			$connection = mysql_connect(HOST, USERNAME, PASSWORD) or exit("Could not connect");
			mysql_select_db(DATABASE, $connection);
			
			$q = "SELECT * FROM siteuserdetails WHERE LOGIN='".$log."'";
			$str = &new String($log);
			if ($str->startsWith("idx="))
			{
				$sub = $str->substring(4);
				$q = "SELECT * FROM siteuserdetails WHERE IDX='".$sub."'";
			}
			$rs = mysql_query($q, $connection);
			if ($rs)
			{
				if ( ($array = mysql_fetch_assoc($rs))!=FALSE)
				{
					$this->idx = $array["IDX"];
					$this->login = $array["LOGIN"];
					$this->first = $array["FIRST"];
					$this->last = $array["LAST"];
					$this->email = $array["EMAIL"];
					$this->phone = $array["PHONE"];
					$this->fax = $array["FAX"];
					$this->org = $array["ORG"];
					$this->addr = $array["ADDR"];
					$this->interests = $array["INTERESTS"];
					$this->published = $array["PUBLISHED"];
					$this->datapublic = $array["DATAPUBLIC"];
					$this->bio = $array["BIO"];
				}
				else
				{
					$this->idx = 0;
					$this->login = "";
					$this->first = "";
					$this->last = "";
					$this->email = "";
					$this->phone = "";
					$this->fax = "";
					$this->org = "";
					$this->addr = "";
					$this->interests = "";
					$this->published = "";
					$this->datapublic = 0;
					$this->bio = "";
				}
			}
			mysql_close($connection);
		}
		else
		{
			$this->idx = 0;
			$this->login = "";
			$this->first = "";
			$this->last = "";
			$this->email = "";
			$this->phone = "";
			$this->fax = "";
			$this->org = "";
			$this->addr = "";
			$this->interests = "";
			$this->published = "";
			$this->datapublic = 0;
			$this->bio = "";
		}
	}
	
	// returns boolean (success if no username already exists)
	function insert()
	{
		$ra = -1;
		$connection = mysql_connect(HOST, USERNAME, PASSWORD) or exit("Could not connect");
		mysql_select_db(DATABASE, $connection);
		
		$q = "INSERT INTO siteuserdetails (IDX, LOGIN, FIRST, LAST, EMAIL, PHONE, FAX, ORG, ADDR, INTERESTS, PUBLISHED, DATAPUBLIC, BIO, APPROVED) VALUES (0, '".$this->login."', '".Utility::replacewithprime($this->first)."', '".Utility::replacewithprime($this->last)."', '".Utility::replacewithprime($this->email)."', '".Utility::replacewithprime($this->phone)."', '".Utility::replacewithprime($this->fax)."', '".Utility::replacewithprime($this->org)."', '".Utility::replacewithprime($this->addr)."', '".Utility::replacewithprime($this->interests)."', '".Utility::replacewithprime($this->published)."', '".$this->datapublic."', '".Utility::replacewithprime($this->bio)."',0)";
		//print($q."<BR>");
		mysql_query($q, $connection);
		$ra = mysql_affected_rows($connection);
		mysql_close($connection);
		return $ra;
	}
	
	function update()
	{
		$ra = -1;
		$connection = mysql_connect(HOST, USERNAME, PASSWORD) or exit("Could not connect");
		mysql_select_db(DATABASE, $connection);
		
		/* $rs = mysql_query("SELECT IDX FROM siteuserdetails WHERE LOGIN='".$this->login."'");
		if ($rs)
		{
			if (($array = mysql_fetch_assoc($rs))==FALSE)
			{ */
		mysql_query("UPDATE siteuserdetails SET FIRST='".Utility::replacewithprime($this->first)."', LAST='".Utility::replacewithprime($this->last)."', EMAIL='".Utility::replacewithprime($this->email)."', PHONE='".Utility::replacewithprime($this->phone)."', FAX='".Utility::replacewithprime($this->fax)."', ORG='".Utility::replacewithprime($this->org)."', ADDR='".Utility::replacewithprime($this->addr)."', INTERESTS='".Utility::replacewithprime($this->interests)."', PUBLISHED='".Utility::replacewithprime($this->published)."', DATAPUBLIC='".$this->datapublic."', BIO='".Utility::replacewithprime($this->bio)."' WHERE LOGIN='".$this->login."'", $connection);
		$ra = mysql_affected_rows($connection);
			/* }
			else
			{
				$ra = -99;
			}
		}
		else
		{
			$ra = -99;
		} */
		
		mysql_close($connection);
		return $ra;
	}
	
	function updateLogin()
	{
		$ra = -1;
		$connection = mysql_connect(HOST, USERNAME, PASSWORD) or exit("Could not connect");
		mysql_select_db(DATABASE, $connection);
		
		$rs = mysql_query("SELECT IDX FROM siteuserdetails WHERE LOGIN='".$this->login."'");
		if ($rs)
		{
			if (($array = mysql_fetch_assoc($rs))==FALSE)
			{
				mysql_query("UPDATE siteuserdetails SET LOGIN='".$this->login."', APPROVED=1 WHERE IDX='".$this->idx."'", $connection);
				$ra = mysql_affected_rows($connection);
			}
			else
			{
				$ra = -99;
			}
		}
		else
		{
			$ra = -99;
		}
		
		mysql_close($connection);
		return $ra;
	}
	
	function delete()
	{
		$ra = -1;
		$connection = mysql_connect(HOST, USERNAME, PASSWORD) or exit("Could not connect");
		mysql_select_db(DATABASE, $connection);
		mysql_query("DELETE FROM siteuserdetails WHERE IDX='".$this->idx."'", $connection);
		$ra = mysql_affected_rows($connection);
		mysql_close($connection);
		return $ra;
	}
	
	function toString()
	{
		return ("login=".$this->login.", first=".$this->first.", last=".$this->last.", phone=".$this->phone.", fax=".$this->fax.", org=".$this->org.", addr=".$this->addr.", interests=".$this->interests.", published=".$this->published.", datapublic=".$this->datapublic.", bio=".$this->bio);
	}
	
	// static
	function &getUnregisteredUserDetails()
	{
		$vec = &new Vector();
		$connection = mysql_connect(HOST, USERNAME, PASSWORD) or exit("Could not connect");
		mysql_select_db(DATABASE, $connection);
		$q = "SELECT IDX FROM siteuserdetails WHERE APPROVED=0";
		$rs = mysql_query($q, $connection);
		if ($rs)
		{
			while ( ($array = mysql_fetch_assoc($rs))!=FALSE)
			{
				$su = &new SiteuserDetails("idx=".$array["IDX"]);
				$vec->add($su);
			}
		}
		//mysql_close($connection);	// --
		return $vec;
	}
	
	function &getRegisteredUserDetails()
	{
		$vec = &new Vector();
		$connection = mysql_connect(HOST, USERNAME, PASSWORD) or exit("Could not connect");
		mysql_select_db(DATABASE, $connection);
		$q = "SELECT IDX FROM siteuserdetails WHERE APPROVED=1";
		$rs = mysql_query($q, $connection);
		if ($rs)
		{
			while ( ($array = mysql_fetch_assoc($rs))!=FALSE)
			{
				$su = &new SiteuserDetails("idx=".$array["IDX"]);
				$vec->add($su);
			}
		}
		//mysql_close($connection);
		return $vec;
	}
	
	function &getRegisteredUserDetailsWhoAllow()
	{
		$vec = &new Vector();
		$connection = mysql_connect(HOST, USERNAME, PASSWORD) or exit("Could not connect");
		mysql_select_db(DATABASE, $connection);
		$q = "SELECT IDX FROM siteuserdetails WHERE APPROVED=1 AND DATAPUBLIC=1";
		$rs = mysql_query($q, $connection);
		if ($rs)
		{
			while ( ($array = mysql_fetch_assoc($rs))!=FALSE)
			{
				$su = &new SiteuserDetails("idx=".$array["IDX"]);
				$vec->add($su);
			}
		}
		//mysql_close($connection);
		return $vec;
	}
	
	function getIdx()				{	return $this->idx;			}
	function getLogin()				{	return $this->login;			}
	function getFirst()				{	return $this->first;			}
	function getLast()				{	return $this->last;			}
	function getPhone()				{	return $this->phone;		}
	function getFax()				{	return $this->fax;			}
	function getOrg()				{	return $this->org;			}
	function getAddr()				{	return $this->addr;			}
	function getInterests()			{	return $this->interests;		}
	function getPublished()			{	return $this->published;		}
	function getDataPublic()			{	return $this->datapublic;		}
	function getBio()				{	return $this->bio;			}
	function getEmail()				{	return $this->email;			}
	
	function setIdx($in)				{	$this->idx = $in;			}
	function setLogin($in)			{	$this->login = $in;			}
	function setFirst($in)			{	$this->first = $in;			}
	function setLast($in)			{	$this->last = $in;			}
	function setPhone($in)			{	$this->phone = $in;			}
	function setFax($in)				{	$this->fax = $in;			}
	function setOrg($in)				{	$this->org = $in;			}
	function setAddr($in)			{	$this->addr = $in;			}
	function setInterests($in)			{	$this->interests = $in;		}
	function setPublished($in)		{	$this->published = $in;		}
	function setDataPublic($in)		{	$this->datapublic = $in;		}
	function setBio($in)				{	$this->bio = $in;			}
	function setEmail($in)			{	$this->email = $in;			}
}
?><html>
<head>
<title>Panjan - informati�ki in�injering, Sisak, Croatia</title>
<meta http-equiv="Content-Type" content="text/html; charset=windows-1250">
<meta name="keywords" content="Panjan, Hrvatska, Croatia, Kroatien, web, www, partner, informatika, Sisak, Zagreb, centar, medicinski, medicina, sustav, euroart93, AIS, ambulantni, computer, system, medical">
<meta name="description" content="Panjan - informati�ki in�enjering">
<link href="panjan.css" rel="stylesheet" type="text/css">
<link href="sIFR-print.css" rel="stylesheet" type="text/css" media="print" />
<link href="sIFR-screen.css" rel="stylesheet" type="text/css" media="screen" />
<script src="sifr.js" type="text/javascript"></script>
<script language="JavaScript" type="text/JavaScript">
<!--
function MM_preloadImages() { //v3.0
  var d=document; if(d.images){ if(!d.MM_p) d.MM_p=new Array();
    var i,j=d.MM_p.length,a=MM_preloadImages.arguments; for(i=0; i<a.length; i++)
    if (a[i].indexOf("#")!=0){ d.MM_p[j]=new Image; d.MM_p[j++].src=a[i];}}
}

function MM_swapImgRestore() { //v3.0
  var i,x,a=document.MM_sr; for(i=0;a&&i<a.length&&(x=a[i])&&x.oSrc;i++) x.src=x.oSrc;
}

function MM_findObj(n, d) { //v4.01
  var p,i,x;  if(!d) d=document; if((p=n.indexOf("?"))>0&&parent.frames.length) {
    d=parent.frames[n.substring(p+1)].document; n=n.substring(0,p);}
  if(!(x=d[n])&&d.all) x=d.all[n]; for (i=0;!x&&i<d.forms.length;i++) x=d.forms[i][n];
  for(i=0;!x&&d.layers&&i<d.layers.length;i++) x=MM_findObj(n,d.layers[i].document);
  if(!x && d.getElementById) x=d.getElementById(n); return x;
}

function MM_swapImage() { //v3.0
  var i,j=0,x,a=MM_swapImage.arguments; document.MM_sr=new Array; for(i=0;i<(a.length-2);i+=3)
   if ((x=MM_findObj(a[i]))!=null){document.MM_sr[j++]=x; if(!x.oSrc) x.oSrc=x.src; x.src=a[i+2];}
}
//-->
</script>
</head>
<body bgcolor="#EAEBEB" leftmargin="0" topmargin="0" marginwidth="0" marginheight="0" class="back1" onLoad="MM_preloadImages('images/heade/index_02eng_on.gif','images/heade/index_02cro_on.gif')">
<a name="vrh"></a>
<table id="Table_01" width="769" border="0" cellpadding="0" cellspacing="0">
  <tr>
    <td colspan="2" valign="top"> <img src="images/engimages/panjanlogo2.jpg" width="623" height="181" border="0" usemap="#Map2"></td>
    <td> <map name="MapMap">
      <area shape="rect" coords="48,39,132,58" href="indexeng.php" alt="Swich to english language" onMouseOver="MM_swapImage('head','','images/heade/index_02eng_on.gif',1)" onMouseOut="MM_swapImgRestore()">
      <area shape="rect" coords="46,58,135,72" href="index.php" alt="Croatian language" onMouseOver="MM_swapImage('head','','images/heade/index_02cro_on.gif',1)" onMouseOut="MM_swapImgRestore()">
    </map>
      <img src="images/heade/index_02eng.gif" alt="" name="head" width="146" height="181" border="0" usemap="#Map" id="head">
      <map name="Map">
        <area shape="rect" coords="3,16,30,38" href="indexeng.php" alt="Back to home">
        <area shape="rect" coords="3,39,30,59" href="mailto:info@panjan.hr" alt="Kontakt">
        <area shape="rect" coords="48,39,132,58" href="indexeng.php" alt="Swich to english language" onMouseOver="MM_swapImage('head','','images/heade/index_02eng_on.gif',1)" onMouseOut="MM_swapImgRestore()">
        <area shape="rect" coords="46,58,135,72" href="index.php" alt="Croatian language" onMouseOver="MM_swapImage('head','','images/heade/index_02cro_on.gif',1)" onMouseOut="MM_swapImgRestore()">
      </map></td>
  </tr>
  <tr>
    <td valign="top" bgcolor="#FFFFFF"> <object classid="clsid:D27CDB6E-AE6D-11cf-96B8-444553540000" codebase="http://download.macromedia.com/pub/shockwave/cabs/flash/swflash.cab#version=6,0,29,0" width="202" height="331">
      <param name="movie" value="flash/eng_navigation.swf">
      <param name="quality" value="high">
      <param name="menu" value="false">
      <embed src="flash/eng_navigation.swf" width="202" height="331" quality="high" pluginspage="http://www.macromedia.com/go/getflashplayer" type="application/x-shockwave-flash" menu="false"></embed> </object><script type="text/javascript" src="javascript/ieupdate.js"></script></td>
    <td width="420" valign="top" background="images/heade/index_04.gif">      <table width="408" height="18" border="0" align="center">
      <tr>
        <td width="380"></td>
      </tr>
    </table>
      <table width="394" border="0" align="center" cellpadding="0" cellspacing="0">
        <tr>
          <td width="394" class="newstitle">Products</td>
    </tr>
      </table>      
      <table width="394" border="0" align="center" cellpadding="0" cellspacing="0">
        <tr>
          <td width="394" class="newsbody">Keeping in mind the need of user to control integrated informatics system and
            considering organisational structure of company or institution we have developed a model of building informatics
          system on principles of decomposition withing informatics subsystems:</td>
        </tr>
</table> 
<br>


		<table width="394" border="0" align="center" cellpadding="0" cellspacing="0">
			<tr>
				<td height="13" colspan="2" valign="top">
					<img src="images/ostalo/bulb_ikonica.gif" width="23" height="40" align="bottom">
					<STRONG class="newstitle3">
					<a href="aplikacija_glavna_eng.php?catid=<?=$category->getCatID()?>"><?=$category->getCatName()?></a><br>
					</STRONG>
				</td>
			</tr>
			<tr>
				<td width="94" height="13" valign="top">&nbsp;</td>
				<td width="300" valign="top" class="date">
										<a href="aplikacija_podsustav_eng.php?catid=<?=$category->getCatID()?>&pid=<?=$product->getPID()?>"><?=$product->getName()?></a>
										</td>
			</tr>
		</table>
		<br>
		    
      <hr align="center" width="394" size="2" noshade color="#e0e0e0">
      <table width="394" border="0" align="center" cellpadding="0" cellspacing="0">
        <tr>
          <td colspan="2" valign="top" class="newsbody"><p>All those informatics subsystems are structured in such fashion
              that together they present a single integral informatics system of a company or instituition they're implemented
              in, and on the other side, each of them is build with several independent segmets (applications) that can be
              installed separately from other segments and can be a complete product by itself. In total there is over sixty
              (60) applicational subsystems in over 30 different companies and instituitions.</p>
            <p>Every application is developed with most advances tool available at the present:<br>
              <br>
            </p>
          </td>
        </tr>
        <tr class="newsbody">
          <td valign="top"><strong><a href="partneri.php#partnerprogres">PROGRESS</a></strong><br>
          (relational database) </td>
          <td valign="top"><strong>Visual Basic</strong><br>
          (application development) </td>
        </tr>
        <tr class="newsbody">
          <td valign="top"><strong><br>
            ACCESS</strong><br>
          (relational database) </td>
          <td valign="top"class="newsbody"><strong><br>
            CLIPPER</strong><br>
          (translator)</td>
        </tr>
      </table>
      
      <p>&nbsp;</p>
    </td>
    <td valign="top" background="images/heade/index_05.gif">    
        <div align="center"><a href="reflista_eng.php"><img src="images/engimages/engreference.gif" width="139" height="104" hspace="0" vspace="0" border="0"></a><a href="kontakt.php"><br>
              </a><a href="kontakt_eng.php"><img src="images/engimages/engkakodonas.gif" width="139" height="96" border="0"></a><br>
              <img src="images/ostalo/phone.gif" width="139" height="104"><br>
            <img src="images/ostalo/predstavljamo2.gif" width="139" height="4" vspace="4"><br>          
            <a href="partneri_eng.php#partnerprogres"><img src="images/ostalo/progress.gif" width="139" height="96" border="0"></a><br>
            <a href="partneri_eng.php#partnerin"><img src="images/ostalo/in.gif" width="139" height="96" border="0"></a>
            <img src="images/ostalo/predstavljamo2.gif" width="139" height="4" vspace="4"><br>
            
                <a href="http://www.generalturist.com/AffiliateWiz/aw.aspx?B=231&A=383&Task=Click" Target="_Blank"><img src="http://www.generalturist.com/AffiliateWiz/aw.aspx?B=231&A=383&Task=Get" alt="Hoteli na Jadranu" width="125" height="125" border="0"></a><br>
                <br> 
        </div></td></tr>
  <tr>
    <td width="203" bgcolor="#FFFFFF">&nbsp; </td>
    <td background="images/heade/index_04.gif">&nbsp;  </td>
    <td width="146" background="images/heade/index_05.gif">&nbsp; </td>
</tr></table>
<table width="100%" border="0" cellspacing="0" cellpadding="0">
  <tr>
    <td height="38" valign="top" class="back2"><table width="769" border="0" cellspacing="0" cellpadding="0">
      <tr>
        <td> <a href="mailto:info@panjan.hr"><img src="images/heade/panjan.gif" alt="Na� kontakt" width="202" height="38" border="0"></a></td>
        <td> <a href="#vrh"><img src="images/engimages/topvrh.gif" alt="" width="138" height="38" border="0"></a></td>
        <td> <img src="images/heade/index_08.gif" width="283" height="38" alt=""></td>
        <td> <a href="http://www.euroart93.hr" target="_blank"><img src="images/heade/euroart93.gif" alt="Developed &amp; designed: EuroART93" width="146" height="38" border="0"></a></td>
      </tr>
    </table>
</td>
  </tr>
</table>
<SCRIPT language=Javascript type=text/javascript>
/* 
Replacement calls. Please see readme.txt for more information. 
sIFR.replaceElement(sSelector, sFlashSrc, sColor, sLinkColor, sHoverColor, sBgColor, nPaddingTop, nPaddingRight, nPaddingBottom, nPaddingLeft, sFlashVars, sCase, sWmode);
*/
if(typeof sIFR == "function"){
	sIFR.replaceElement(".newstitle", "dax.swf", "#003399", null, null, "#F2F2FA", 0, 0, 0, 0);
	sIFR.replaceElement(".newstitle2", "dax.swf", "#444444", null, null, "#F2F2FA", 0, 0, 0, 1);
	sIFR.replaceElement(".newstitle3", "dax.swf", "#444444", null, "#003399", "#F2F2FA", 0, 0, 0, 0);
};
</SCRIPT>

<map name="Map2">
  <area shape="rect" coords="28,28,190,160" href="index.php">
</map>
</body>
</html>