<?

require_once($_SERVER["DOCUMENT_ROOT"]."/eaadmin/dbconnect.php");
require_once($_SERVER["DOCUMENT_ROOT"]."/eaadmin/class/euroart/util/Utility.php");

class Company
{
	var $companyid;
	var $companyname;
	var $companylogo;
	
	
	function equals($o)
	{
		if ($o->getCompanyID()==$this->companyid)
			return TRUE;
		else
			return FALSE;
	}
	
	function &Company($companyid = 0)
	{
		if ($companyid>0)
		{
			$connection = mysql_connect(HOST, USERNAME, PASSWORD) or exit("Could not connect");
			mysql_select_db(DATABASE, $connection);
			
			$rs = mysql_query("SELECT * FROM company WHERE COMPANYID=$companyid", $connection);
			if ($rs)
			{
				if ( ($array = mysql_fetch_assoc($rs))!=FALSE)
				{
					$this->companyid = $companyid;
					$this->companyname = $array["COMPANYNAME"];
					$this->companylogo = $array["COMPANYLOGO"];
				}
				else
				{
					$this->$companyid = 0;
					$this->companyname = "";
					$this->companylogo = "";
				}
			}
			mysql_close($connection);
		}
		else
		{
			$this->companyid = 0;
			$this->companyname = "";
			$this->companylogo = "";
		}
	}
	
	function insert()		// returns int COMPANYID of the last inserted row
	{
		$lastInserted = -1;
		$maxpos = 0;
		$ra = -1;
		$connection = mysql_connect(HOST, USERNAME, PASSWORD) or exit("Could not connect");
		mysql_select_db(DATABASE, $connection);
		
		mysql_query("INSERT INTO company (COMPANYID, COMPANYNAME, COMPANYLOGO) VALUES (0, '".Utility::replacewithprime($this->companyname)."', '".$this->companylogo."')", $connection);
		$ra = mysql_affected_rows($connection);
		if ($ra==1)
		{
			$rs = mysql_query("SELECT LAST_INSERT_ID() FROM company", $connection);
			if ($rs)
			{
				$array = mysql_fetch_row($rs);
				$lastInserted = $array[0];
				$this->companyid = $lastInserted;
			}
		}
		mysql_close($connection);
		return $lastInserted;
	}
	
	function update()
	{
		$ra = -1;
		$connection = mysql_connect(HOST, USERNAME, PASSWORD) or exit("Could not connect");
		mysql_select_db(DATABASE, $connection);
		mysql_query("UPDATE company SET COMPANYNAME='".Utility::replacewithprime($this->companyname)."', COMPANYLOGO='".$this->companylogo."' WHERE COMPANYID=".$this->companyid, $connection);
		$ra = mysql_affected_rows($connection);
		mysql_close($connection);
		return $ra;
	}
	
	function delete()
	{
		$vecUsers = User::getUsersForCompany($this->companyid);
		for ($i=0; $i<$vecUsers->size(); $i++)
		{
			$user = &$vecUsers->elementAt($i);
			$user->delete();
		}
		
		$ra = -1;
		$connection = mysql_connect(HOST, USERNAME, PASSWORD) or exit("Could not connect");
		mysql_select_db(DATABASE, $connection);
		mysql_query("DELETE FROM company WHERE COMPANYID=".$this->companyid, $connection);
		$ra = mysql_affected_rows($connection);
		mysql_close($connection);
		return $ra;
	}
	
	function toString()
	{
		return ("companyid=".$this->companyid.", companyname=".$this->companyname.", companylogo=".$this->companylogo);
	}
	
	function &getCompanyForUserName($username)
	{
		$company = &new Company();
		$connection = mysql_connect(HOST, USERNAME, PASSWORD) or exit("Could not connect");
		mysql_select_db(DATABASE, $connection);
		$rs = mysql_query("SELECT COMPANYID FROM users, usertocompany WHERE users.LOGIN=usertocompany.LOGIN AND usertocompany.LOGIN='".$username."'", $connection);
		if ($rs)
		{
			if (($array = mysql_fetch_assoc($rs))!=FALSE)
			{
				$company = &new Company($array["COMPANYID"]);
			}
		}
		return $company;
	}
	
	// returns Vector
	function &getAllCompanies()
	{
		$companies = &new Vector();
		$connection = mysql_connect(HOST, USERNAME, PASSWORD) or exit("Could not connect");
		mysql_select_db(DATABASE, $connection);
		$rs = mysql_query("SELECT COMPANYID FROM company", $connection);
		if ($rs)
		{
			while ( ($array = mysql_fetch_assoc($rs))!=FALSE)
			{
				$company = &new Company($array["COMPANYID"]);
				if ($company->getCompanyID()!=0) $companies->add($company);
			}
		}
		return $companies;
	}
	
	function getCompanyID()			{		return $this->companyid;		}
	function getCompanyName()		{		return $this->companyname;	}
	function getCompanyLogo()		{		return $this->companylogo;	}
	
	function setCompanyID($in)		{		$this->companyid = $in;		}
	function setCompanyName($in)	{		$this->companyname = $in;	}
	function setCompanyLogo($in)	{		$this->companylogo = $in;	}
	
}
?><?

require_once($_SERVER["DOCUMENT_ROOT"]."/eaadmin/dbconnect.php");
require_once($_SERVER["DOCUMENT_ROOT"]."/eaadmin/class/euroart/user/UserRole.php");
require_once($_SERVER["DOCUMENT_ROOT"]."/eaadmin/class/euroart/util/Utility.php");

class User
{

//	static void			changePassword($username, $old, $new)
//	static Vector		&getRolesForUser($userlogin)
//	static Vector		&getRolesForUserStartingWith($userlogin, $roleid)
//	boolean			passwordsAreEqual($first)
//	boolean			equals($object)
//	boolean			isAllowedTo($operation)
//	boolean			isRoot()
//	Vector			&getUsersForCompany($companyid)
//	Vector			&getUsersForCompany($companyid, $level)
//	Role				&login($username, $password)
//	void				forgottenPassword($login, $email)
//	string			generateNewPassword()
//	Vector			&getRoles()
//	string			toString()


	var $login;
	var $password;
	var $encoding;
	var $lastsucclogin;
	var $lastunsucclogin;
	
	var $permission = array(
		1 => array(										// SITEADMIN
			"ADDCOMPANY" => FALSE,
			"DELETECOMPANY" => FALSE,
			"EDITCOMPANY" => TRUE,
			
			"ADDUSER" => TRUE,
			"DELETEUSER" => TRUE,
			"EDITUSER" => TRUE,
			
			"ADDSITEUSER" => TRUE,
			"DELETESITEUSER" => TRUE,
			"EDITSITEUSER" => TRUE,
			
			"ADDCATALOGCATEGORY" => TRUE,
			"DELETECATALOGCATEGORY" => TRUE,
			"EDITCATALOGCATEGORY" => TRUE,
			"VIEWCATALOGCATEGORY" => TRUE,
			
			"ADDPRODUCT" => TRUE,
			"DELETEPRODUCT" => TRUE,
			"EDITPRODUCT" => TRUE,
			"UPPRODUCT" => TRUE,
			"DOWNPRODUCT" => TRUE,
			"PUBLISHPRODUCT" => FALSE,
			
			"ADDARTIST" => TRUE,
			"EDITARTIST" => TRUE,
			"DELETEARTIST" => TRUE,
			"VIEWARTIST" => TRUE,
			
			"ADDNEWSADMIN" => TRUE,
			"VIEWNEWSADMIN" => TRUE,
			"DELETENEWSADMIN" => TRUE,
			"EDITNEWSADMIN" => TRUE
			)  ,
		2 => array(										// SHOPOWNER
			"ADDCOMPANY" => FALSE,
			"DELETECOMPANY" => FALSE,
			"EDITCOMPANY" => TRUE,
			
			"ADDUSER" => FALSE,
			"DELETEUSER" => FALSE,
			"EDITUSER" => FALSE,
			
			"ADDSITEUSER" => FALSE,
			"DELETESITEUSER" => FALSE,
			"EDITSITEUSER" => FALSE,
			
			"ADDCATALOGCATEGORY" => TRUE,
			"DELETECATALOGCATEGORY" => TRUE,
			"EDITCATALOGCATEGORY" => TRUE,
			"VIEWCATALOGCATEGORY" => TRUE,
			
			"ADDPRODUCT" => TRUE,
			"DELETEPRODUCT" => TRUE,
			"EDITPRODUCT" => TRUE,
			"UPPRODUCT" => FALSE,
			"DOWNPRODUCT" => FALSE,
			"PUBLISHPRODUCT" => FALSE,
			
			"ADDNEWSADMIN" => FALSE,
			"VIEWNEWSADMIN" => FALSE,
			"DELETENEWSADMIN" => FALSE,
			"EDITNEWSADMIN" => FALSE
			) ,
		3 => array(										// NEWSADMIN
			"ADDCOMPANY" => FALSE,
			"DELETECOMPANY" => FALSE,
			"EDITCOMPANY" => FALSE,
			
			"ADDUSER" => FALSE,
			"DELETEUSER" => FALSE,
			"EDITUSER" => FALSE,
			
			"ADDSITEUSER" => FALSE,
			"DELETESITEUSER" => FALSE,
			"EDITSITEUSER" => FALSE,
			
			"ADDCATALOGCATEGORY" => FALSE,
			"DELETECATALOGCATEGORY" => FALSE,
			"EDITCATALOGCATEGORY" => FALSE,
			"VIEWCATALOGCATEGORY" => FALSE,
			
			"ADDPRODUCT" => FALSE,
			"DELETEPRODUCT" => FALSE,
			"EDITPRODUCT" => FALSE,
			"UPPRODUCT" => FALSE,
			"DOWNPRODUCT" => FALSE,
			"PUBLISHPRODUCT" => FALSE,
			
			"ADDNEWSADMIN" => TRUE,
			"VIEWNEWSADMIN" => TRUE,
			"DELETENEWSADMIN" => TRUE,
			"EDITNEWSADMIN" => TRUE
			) /* ,
		99 => array(										// VISITOR
			"" => ,
			"" => ,
			"" => ,
			
			"" => ,
			"" => ,
			"" => ,
			)
			*/
	);
	
	function equals($o)
	{
		if ($o->getLogin()==$this->login)
			return TRUE;
		else
			return FALSE;
	}
	
	function &User($log="")
	{
		if ($log!="")
		{
			$connection = mysql_connect(HOST, USERNAME, PASSWORD) or exit("Could not connect");
			mysql_select_db(DATABASE, $connection);
			
			$rs = mysql_query("SELECT * FROM users WHERE LOGIN='".$log."'", $connection);
			if ($rs)
			{
				if ( ($array = mysql_fetch_assoc($rs))!=FALSE)
				{
					$this->login = $log;
					$this->password = $array["PASSWORD"];
					$this->encoding = $array["ENCODING"];
					$this->lastsucclogin = $array["LASTSUCCLOGIN"];
					$this->lastunsucclogin = $array["LASTUNSUCCLOGIN"];
				}
				else
				{
					$this->login = "";
					$this->password = "";
					$this->encoding = "";
					$this->lastsucclogin = 0;
					$this->lastunsucclogin = 0;
				}
			}
			mysql_close($connection);
		}
		else
		{
			$this->login = "";
			$this->password = "";
			$this->encoding = "";
			$this->lastsucclogin = 0;
			$this->lastunsucclogin = 0;
		}
	}
	
	// returns boolean
	function passwordsAreEqual($first)		// first is unencrypted, of course
	{
		/////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////
		//	bez hashiranja
		/////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////
		/* 
		if ($first==$this->password) return TRUE;
		else return FALSE;
		*/
		
		/////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////
		//	sa hashiranjem
		/////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////
		if (md5($first)==$this->password) return TRUE;
		else return FALSE;
	}
	
	// this is a new method, for new checking strategy, v 2.0
	function isAllowedTo($operation)
	{
		$userRole = &new UserRole($this->login);
		$vecRoles = $userRole->getRoles();
		
		$adminRole = &new Role(0);
		if ($vecRoles->contains($adminRole)) return TRUE;				// if it's the root, he is allowed to do everything
		
		for ($i=0; $i<$vecRoles->size(); $i++)
		{
			$role = &$vecRoles->elementAt($i);
			if ($this->permission[$role->roleid][$operation]) return TRUE;
		}
		return FALSE;
	}
	
	//returns boolean
	function isRoot()
	{
		$userRole = &new UserRole($this->login);
		$vecRoles = $userRole->getRoles();
		$rootRole = &new Role(0);
		
		if ($vecRoles->contains($rootRole)) return TRUE;
		else return FALSE;
	}
	
	//returns boolean
	function isShopOwner()
	{
		$userRole = &new UserRole($this->login);
		$vecRoles = $userRole->getRoles();
		$rootRole = &new Role(0);
		$ownerRole = &new Role(1);
		
		if ($vecRoles->contains($rootRole) || $vecRoles->contains($ownerRole)) return TRUE;
		else return FALSE;
	}
	
	//returns boolean
	function isNewsAdmin()
	{
		$userRole = &new UserRole($this->login);
		$vecRoles = $userRole->getRoles();
		$rootRole = &new Role(0);
		$newsAdminRole = &new Role(2);
		
		if ($vecRoles->contains($rootRole) || $vecRoles->contains($newsAdminRole)) return TRUE;
		else return FALSE;
	}
	
	// returns boolean (success if no username already exists)
	function insert($companyid)		// returns int QID of the last inserted row
	{
		$success = FALSE;
		
		if ($this->login!="")
		{
			$maxpos = 0;
			$ra = -1;
			$connection = mysql_connect(HOST, USERNAME, PASSWORD) or exit("Could not connect");
			mysql_select_db(DATABASE, $connection);
			
			$rs = mysql_query("SELECT PASSWORD FROM users WHERE LOGIN='".$this->login."'");
			if ($rs)
			{
				if (($array = mysql_fetch_assoc($rs))==FALSE)
				{
					/////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////
					//	bez hashiranja
					/////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////
					//mysql_query("INSERT INTO users (LOGIN, PASSWORD, ENCODING, LASTSUCCLOGIN, LASTUNSUCCLOGIN) VALUES ('".$this->login."', '".$this->password."', 'none', 0, 0)", $connection);
					
					/////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////
					//	sa hashiranjem
					/////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////
					mysql_query("INSERT INTO users (LOGIN, PASSWORD, ENCODING, LASTSUCCLOGIN, LASTUNSUCCLOGIN) VALUES ('".$this->login."', '".md5($this->password)."', 'MD5', 0, 0)", $connection);
					$ra = mysql_affected_rows($connection);
					if ($ra==1)
					{
						mysql_query("INSERT INTO usertocompany VALUES('".$this->login."', ".$companyid.")", $connection);
						$success = TRUE;
					}
				}
			}
			mysql_close($connection);
		}
		return $success;
	}
	
	function update()
	{
		$ra = -1;
		$connection = mysql_connect(HOST, USERNAME, PASSWORD) or exit("Could not connect");
		mysql_select_db(DATABASE, $connection);
		mysql_query("UPDATE users SET  ENCODING='".$this->encoding."' WHERE LOGIN='".$this->login."'", $connection);	// PASSWORD='".$this->password."',
		$ra = mysql_affected_rows($connection);
		mysql_close($connection);
		return $ra;
	}
	
	function delete()
	{
		$ra = -1;
		$connection = mysql_connect(HOST, USERNAME, PASSWORD) or exit("Could not connect");
		mysql_select_db(DATABASE, $connection);
		mysql_query("DELETE FROM users WHERE LOGIN='$this->login'", $connection);
		$ra = mysql_affected_rows($connection);
		if ($ra==1)
		{
			mysql_query("DELETE FROM usertocompany WHERE LOGIN='".$this->login."'", $connection);
			
			$userdetails = &new UserDetails($this->login);
			$userdetails->delete();
			
			$userrole = &new UserRole($this->login);
			$userrole->delete();
		}
		$el = error_reporting(E_ERROR);
		mysql_close($connection);
		$el = error_reporting($el);
		return $ra;
	}
	
	function changePassword($username, $old, $new)
	{
		/* 
		/////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////
		//	bez hashiranja
		/////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////
		$connection = mysql_connect(HOST, USERNAME, PASSWORD) or exit("Could not connect");
		mysql_select_db(DATABASE, $connection);
		mysql_query("UPDATE users SET PASSWORD='".$new."' WHERE LOGIN='".$username."' AND PASSWORD='".$old."'");
		$ra = mysql_affected_rows($connection);
		mysql_close($connection);
		return $ra;
		*/
		
		/////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////
		//	sa hashiranjem
		/////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////
		$connection = mysql_connect(HOST, USERNAME, PASSWORD) or exit("Could not connect");
		mysql_select_db(DATABASE, $connection);
		$q = "UPDATE users SET PASSWORD='".md5($new)."' WHERE LOGIN='".$username."' AND PASSWORD='".md5($old)."'";
		mysql_query($q);
		$ra = mysql_affected_rows($connection);
		$el = error_reporting(E_ERROR);
		mysql_close($connection);
		$el = error_reporting($el);
		return $ra;
	}
	
	function toString()
	{
		return ("login=".$this->login.", password=".$this->password.", encoding=".$this->encoding.", last successful login=".$this->lastsucclogin.", last unsuccessful login=".$this->lastunsucclogin);
	}
	
	// returns Vector
	function &getUsersForCompany($companyid)
	{
		$vecUsers = &new Vector();
		
		$connection = mysql_connect(HOST, USERNAME, PASSWORD) or exit("Could not connect");
		mysql_select_db(DATABASE, $connection);
		$rs = mysql_query("SELECT LOGIN FROM usertocompany WHERE COMPANYID=".$companyid, $connection);
		if ($rs)
		{
			while ( ($array = mysql_fetch_assoc($rs))!=FALSE)
			{
				$user = &new User($array["LOGIN"]);
				
				if ($user->getLogin()!="")
				{
					$vecUsers->add($user);
				}
			}
		}
		return $vecUsers;
	}
	
	// returns Vector
	function &getUsersForCompanyAndLevel($companyid, $level)
	{
		$vecUsers = &new Vector();
		
		$connection = mysql_connect(HOST, USERNAME, PASSWORD) or exit("Could not connect");
		mysql_select_db(DATABASE, $connection);
		$query = "SELECT * FROM usertocompany, userroles WHERE COMPANYID=".$companyid." AND userroles.LOGIN=usertocompany.LOGIN AND ROLE>=".$level;
		$rs = mysql_query($query, $connection);
		if ($rs)
		{
			while ( ($array = mysql_fetch_assoc($rs))!=FALSE)
			{
				$user = &new User($array["LOGIN"]);
				
				if ($user->getLogin()!="")
				{
					$vecUsers->add($user);
				}
			}
		}
		return $vecUsers;
	}
	
	function &login($username, $password)
	{
		/* 
		/////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////
		//	bez hashiranja
		/////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////
		$role = &new Role();
		$connection = mysql_connect(HOST, USERNAME, PASSWORD) or exit("Could not connect");
		mysql_select_db(DATABASE, $connection);
		$rs = mysql_query("SELECT PASSWORD FROM users WHERE LOGIN='".$username."'");
		if ($rs)
		{
			if ( ($array = mysql_fetch_assoc($rs))!=FALSE)
			{
				$pw = $array["PASSWORD"];
				if ($pw==$password)									// password is correct
				{
					$userrole = &new UserRole($username);
					$vecRoles = $userrole->getRoles();
					$roleV = $vecRoles->elementAt(0);
					$role = &new Role($roleV->getRoleID());
					
					$q = "UPDATE users SET LASTSUCCLOGIN=".time()." WHERE LOGIN='".$username."'";
					mysql_query($q);
				}
				else												// password is incorrect
				{
					$q = "UPDATE users SET LASTUNSUCCLOGIN=".time()." WHERE LOGIN='".$username."'";
					mysql_query($q);
				}
			}
		}
		mysql_close($connection);
		return $role;
		*/
		
		/////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////
		//	sa hashiranjem
		/////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////
		$role = &new Role();
		$connection = mysql_connect(HOST, USERNAME, PASSWORD) or exit("Could not connect");
		mysql_select_db(DATABASE, $connection);
		$rs = mysql_query("SELECT PASSWORD FROM users WHERE LOGIN='".$username."'");
		if ($rs)
		{
			if ( ($array = mysql_fetch_assoc($rs))!=FALSE)
			{
				$pw = $array["PASSWORD"];
				if ($pw==md5($password))									// password is correct
				{
					$userrole = &new UserRole($username);
					$vecRoles = $userrole->getRoles();
					$roleV = $vecRoles->elementAt(0);
					$role = &new Role($roleV->getRoleID());
					
					$q = "UPDATE users SET LASTSUCCLOGIN=".time()." WHERE LOGIN='".$username."'";
					mysql_query($q);
				}
				else												// password is incorrect
				{
					$q = "UPDATE users SET LASTUNSUCCLOGIN=".time()." WHERE LOGIN='".$username."'";
					mysql_query($q);
				}
			}
		}
		$el = error_reporting(E_ERROR);
		mysql_close($connection);
		$el = error_reporting($el);
		return $role;
		
	}
	
	function forgottenPassword($login, $email)
	{
		/* 
		/////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////
		//	bez hashiranja
		/////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////
		$password = "";
		$connection = mysql_connect(HOST, USERNAME, PASSWORD) or exit("Could not connect");
		mysql_select_db(DATABASE, $connection);
		$sql = "SELECT PASSWORD FROM users, userdetails WHERE users.LOGIN='".$login."' AND userdetails.EMAIL='".$email."'";
		$rs = mysql_query($sql);
		if ($rs)
		{
			if ( ($array = mysql_fetch_assoc($rs))!=FALSE)
			{
				$password = $array["PASSWORD"];
			}
		}
		mysql_close($connection);
		return $password;
		*/
		
		/////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////
		//	sa hashiranjem
		/////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////
		$password = User::generateNewPassword();
		$connection = mysql_connect(HOST, USERNAME, PASSWORD) or exit("Could not connect");
		mysql_select_db(DATABASE, $connection);
		$sql = "SELECT PASSWORD FROM users, userdetails WHERE users.LOGIN='".$login."' AND userdetails.EMAIL='".$email."'";
		$rs = mysql_query($sql);
		if ($rs)
		{
			if ( ($array = mysql_fetch_assoc($rs))!=FALSE)
			{
				//$password = $array["PASSWORD"];
				$q = "UPDATE users SET PASSWORD = '".md5($password)."' WHERE LOGIN='".$login."'";
				$ra = mysql_query($q);
			}
		}
		$el = error_reporting(E_ERROR);
		mysql_close($connection);
		$el = error_reporting($el);
		return $password;
	}
	
	// private
	function generateNewPassword()
	{
		$pwd = "";
		
		for ($i=0; $i<10; $i++)
		{
			switch(rand(1,3))
			{
				case 1: $pwd = $pwd.chr(rand(48,57)); break;	// 0-9
				case 2: $pwd = $pwd.chr(rand(65,90)); break;	// A-Z
				case 3: $pwd = $pwd.chr(rand(97,122)); break;	// a-z
			}
		}
		
		return $pwd;
	}
	
	// static
	function &getRolesForUser($userlogin)
	{
		$vecRoles = &new Vector();
		
		$sql = "select ROLE from userroles where LOGIN='".$userlogin."' ORDER BY ROLE ASC";
		$connection = mysql_connect(HOST, USERNAME, PASSWORD) or exit("Could not connect");
		mysql_select_db(DATABASE, $connection);
		$rs = mysql_query($sql);
		if ($rs)
		{
			while(($array = mysql_fetch_assoc($rs))!=FALSE)
			{
				$role = &new Role($array["ROLE"]);
				$vecRoles->add($role);
			}
		}
		mysql_close($connection);
		return $vecRoles;
	}
	
	// static
	function &getRolesForUserStartingWith($userlogin, $roleid)
	{
		$vecRoles = &new Vector();
		
		$sql = "select ROLEID from roles, userroles where LOGIN='".$userlogin."' AND ROLEID>=".$roleid." ORDER BY ROLEID ASC";
		$connection = mysql_connect(HOST, USERNAME, PASSWORD) or exit("Could not connect");
		mysql_select_db(DATABASE, $connection);
		$rs = mysql_query($sql);
		if ($rs)
		{
			while(($array = mysql_fetch_assoc($rs))!=FALSE)
			{
				$role = &new Role($array["ROLEID"]);
				$vecRoles->add($role);
			}
		}
		mysql_close($connection);
		return $vecRoles;
	}
	
	function &getRoles()
	{
		$vecRoles = &new Vector();
		
		$sql = "select ROLE from userroles where LOGIN='".$this->login."' ORDER BY ROLE ASC";
		$connection = mysql_connect(HOST, USERNAME, PASSWORD) or exit("Could not connect");
		mysql_select_db(DATABASE, $connection);
		$rs = mysql_query($sql);
		if ($rs)
		{
			while(($array = mysql_fetch_assoc($rs))!=FALSE)
			{
				$role = &new Role($array["ROLE"]);
				$vecRoles->add($role);
			}
		}
		mysql_close($connection);
		return $vecRoles;
	}
	
	function getLogin()				{	return $this->login;			}
	function getPassword()			{	return $this->password;		}
	function getEncoding()			{	return $this->encoding;		}
	function getLastSuccLogin()		{	return $this->lastsucclogin;	}
	function getLastUnsuccLogin()	{	return $this->lastunsucclogin;	}
	
	function setLogin($in)			{	$this->login = $in;			}
	function setPassword($in)		{	$this->password = $in;		}
	function setEncoding($in)		{	$this->encoding = $in;		}
	function setLastSuccLogin($in)	{	$this->lastsucclogin = $in;	}
	function setLastUnsuccLogin($in)	{	$this->lastunsucclogin = $in;	}
}
?><?

require_once($_SERVER["DOCUMENT_ROOT"]."/eaadmin/dbconnect.php");
require_once($_SERVER["DOCUMENT_ROOT"]."/eaadmin/class/util/Vector.php");

class Role
{
	var $roleid;
	var $role;
	
	function equals($o)
	{
		if (/*$o->getRole()==$this->role &&*/ $o->getRoleID()==$this->roleid) return TRUE;
		else return FALSE;
	}
	var $permission = array(
		1 => array(
			"ADDCOMPANY" => FALSE,
			"DELETECOMPANY" => FALSE,
			"EDITCOMPANY" => TRUE,
			
			"ADDUSER" => TRUE,
			"DELETEUSER" => TRUE,
			"EDITUSER" => TRUE,
			
			"ADDCATALOGCATEGORY" => TRUE,
			"DELETECATALOGCATEGORY" => TRUE,
			"EDITCATALOGCATEGORY" => TRUE,
			
			"ADDPRODUCT" => TRUE,
			"DELETEPRODUCT" => TRUE,
			"EDITPRODUCT" => TRUE,
			"UPPRODUCT" => FALSE,
			"DOWNPRODUCT" => FALSE,
			"PUBLISHPRODUCT" => FALSE,
			
			"ADDNEWSADMIN" => FALSE,
			"VIEWNEWSADMIN" => FALSE,
			"DELETENEWSADMIN" => FALSE,
			"EDITNEWSADMIN" => FALSE
			) /* ,
		2 => array(
			"" => ,
			"" => ,
			"" => ,
			
			"" => ,
			"" => ,
			"" => ,
			) */
	);
	
	function getRoleID()			{	return $this->roleid;		}
	function getRole()			{	return $this->role;		}
	
	function setRoleID($in)		{	$this->roleid = $in;		}
	function setRole($in)		{	$this->role = $in;		}
	
	function &Role($level = 999)
	{
		$this->roleid = 999;
		$this->role = "";
		
		if ($level!=999)
		{
			$sql = "SELECT ROLE FROM roles WHERE ROLEID=".$level;
			$connection = mysql_connect(HOST, USERNAME, PASSWORD) or exit("Could not connect");
			mysql_select_db(DATABASE, $connection);
			$rs = mysql_query($sql);
			if ($rs)
			{
				if(($array = mysql_fetch_assoc($rs))!=FALSE)
				{
					$this->roleid = $level;
					$this->role = $array["ROLE"];
				}
			}
		}
	}
	
	function toString()
	{
		return "roleid=".$this->roleid.", role=".$this->role;
	}
	
	// DEPRECATED
	//returns boolean
	function isAllowedTo($operation)
	{
		if ($this->roleid==0) return TRUE;
		else return $this->permission[$this->roleid][$operation];
	}
	
	// DEPRECATED
	//returns boolean
	function isRoot()
	{
		if ($this->roleid==0) return TRUE;
		else return FALSE;
	}
	
	// DEPRECATED
	//returns boolean
	function isShopOwner()
	{
		if ($this->roleid==0 || $this->roleid==1) return TRUE;
		else return FALSE;
	}
	
	// DEPRECATED
	//returns boolean
	function isNewsAdmin()
	{
		if ($this->roleid==2 || $this->roleid==0) return TRUE;
		else return FALSE;
	}
}

?><?

require_once($_SERVER["DOCUMENT_ROOT"]."/eaadmin/dbconnect.php");
require_once($_SERVER["DOCUMENT_ROOT"]."/eaadmin/class/util/Vector.php");
require_once($_SERVER["DOCUMENT_ROOT"]."/eaadmin/class/euroart/user/Role.php");

class UserRole
{
	var $login;
	var $vecRoles;
	
	function equals($o)
	{
		if ($o->getLogin()==$this->login)
			return TRUE;
		else
			return FALSE;
	}
	
	function toString()
	{
		if ($this->vecRoles && $this->vecRoles->size()>0) $role = $this->vecRoles->elementAt(0);
		else $role = &new Role();
		return "login=".$this->login.", role=".$role->getRole();
	}
	
	function &UserRole($log = "")
	{
		$this->vecRoles = &new Vector();
		
		if ($log!="")
		{
			$sql = "select ROLE from userroles where LOGIN='".$log."' ORDER BY ROLE ASC";
			$connection = mysql_connect(HOST, USERNAME, PASSWORD) or exit("Could not connect");
			mysql_select_db(DATABASE, $connection);
			$rs = mysql_query($sql);
			if ($rs)
			{
				$this->login = $log;
				while(($array = mysql_fetch_assoc($rs))!=FALSE)
				{
					$role = &new Role($array["ROLE"]);
					$this->vecRoles->add($role);
				}
			}
		}
		else
		{
			$this->login = "";
		}
	}
	
	function setRoles($in)	{	$this->vecRoles = $in;	}
	function setLogin($in)	{	$this->login = $in;		}
	
	function getLogin()		{	return $this->login;		}
	function getRoles()		{	return $this->vecRoles;	}
	
	function insert()
	{
		if ($this->login!="")
		{
			if ($this->vecRoles)
			{
				$connection = mysql_connect(HOST, USERNAME, PASSWORD) or exit("Could not connect");
				mysql_select_db(DATABASE, $connection);
				
				for ($i=0; $i<$this->vecRoles->size(); $i++)
				{
					$role = $this->vecRoles->elementAt($i);
					$sql = "insert into userroles values('".$this->login."',".$role->getRoleID().")";
					mysql_query($sql);
				}
				
				mysql_close($connection);
			}
		}
	}
	
	function update()
	{
		if ($this->login!="")
		{
			if ($this->vecRoles)
			{
				$connection = mysql_connect(HOST, USERNAME, PASSWORD) or exit("Could not connect");
				mysql_select_db(DATABASE, $connection);
				
				for ($i=0; $i<$this->vecRoles->size(); $i++)
				{
					$role = $this->vecRoles->elementAt($i);
					$sql = "update userroles set ROLE=".$role->getRoleID()." where LOGIN='".$this->login."'";
					mysql_query($sql);
				}
				
				mysql_close($connection);
			}
		}
	}
	
	function delete()
	{
		if ($this->login!="")
		{
			$connection = mysql_connect(HOST, USERNAME, PASSWORD) or exit("Could not connect");
			mysql_select_db(DATABASE, $connection);
			mysql_query("delete from userroles where LOGIN='".$this->login."'");
			mysql_close($connection);
		}
	}
	
	// returns an array of roles
	function getRolesForLevel($level)
	{
		//$hashRoles = &new Hashtable();
		$sql = "select * from roles where ROLELEVEL>=".$level." order by ROLELEVEL asc";
		$vecRoles = &new Vector();
		$connection = mysql_connect(HOST, USERNAME, PASSWORD) or exit("Could not connect");
		mysql_select_db(DATABASE, $connection);
		
		$rs = mysql_query($sql);
		if ($rs)
		{
			while ( ($array = mysql_fetch_assoc($rs))!=FALSE)
			{
				$role = &new Role();
				$role->setRoleLevel($array["ROLELEVEL"]);
				$role->setRole($array["ROLE"]);
				$vecRoles->add($role);
			}
		}
		mysql_close($connection);
		
		return $vecRoles;
	}
	
}<?

require_once($_SERVER["DOCUMENT_ROOT"]."/eaadmin/dbconnect.php");
require_once($_SERVER["DOCUMENT_ROOT"]."/eaadmin/class/euroart/util/Utility.php");

class UserDetails
{
	var $login;
	var $firstname;
	var $lastname;
	var $email;
	var $phone;
	
	function equals($o)
	{
		if ($o->getLogin()==$this->login)
			return TRUE;
		else
			return FALSE;
	}
	
	function &UserDetails($log = "")
	{
		if ($log!="")
		{
			$connection = mysql_connect(HOST, USERNAME, PASSWORD) or exit("Could not connect");
			mysql_select_db(DATABASE, $connection);
			
			$rs = mysql_query("SELECT * FROM userdetails WHERE LOGIN='".$log."'", $connection);
			if ($rs)
			{
				if ( ($array = mysql_fetch_assoc($rs))!=FALSE)
				{
					$this->login = $log;
					$this->firstname = $array["FIRST"];
					$this->lastname = $array["LAST"];
					$this->email = $array["EMAIL"];
					$this->phone = $array["PHONE"];
				}
				else
				{
					$this->login = "";
					$this->firstname = "";
					$this->lastname = "";
					$this->email = "";
					$this->phone = "";
				}
			}
			mysql_close($connection);
		}
		else
		{
			$this->login = "";
			$this->firstname = "";
			$this->lastname = "";
			$this->email = "";
			$this->phone = "";
		}
	}
	
	function insert()		// returns int QID of the last inserted row
	{
		if ($this->login!="")
		{
			$maxpos = 0;
			$ra = -1;
			$connection = mysql_connect(HOST, USERNAME, PASSWORD) or exit("Could not connect");
			mysql_select_db(DATABASE, $connection);
			mysql_query("INSERT INTO userdetails (LOGIN, FIRST, LAST, EMAIL, PHONE) VALUES ('".$this->login."', '".Utility::replacewithprime($this->firstname)."', '".Utility::replacewithprime($this->lastname)."', '".$this->email."', '".$this->phone."')", $connection);
			$ra = mysql_affected_rows($connection);
			mysql_close($connection);
		}
	}
	
	function update()
	{
		$ra = -1;
		$connection = mysql_connect(HOST, USERNAME, PASSWORD) or exit("Could not connect");
		mysql_select_db(DATABASE, $connection);
		mysql_query("UPDATE userdetails SET FIRST='".Utility::replacewithprime($this->firstname)."', LAST='".Utility::replacewithprime($this->lastname)."', EMAIL='".$this->email."', PHONE='".$this->phone."' WHERE LOGIN='".$this->login."'", $connection);
		$ra = mysql_affected_rows($connection);
		mysql_close($connection);
		return $ra;
	}
	
	function delete()
	{
		$ra = -1;
		$connection = mysql_connect(HOST, USERNAME, PASSWORD) or exit("Could not connect");
		mysql_select_db(DATABASE, $connection);
		mysql_query("DELETE FROM userdetails WHERE LOGIN='$this->login'", $connection);
		$ra = mysql_affected_rows($connection);
		mysql_close($connection);
		return $ra;
	}
	
	function toString()
	{
		return ("login=".$this->login.", firstname=".$this->firstname.", lastname=".$this->lastname.", email=".$this->email.", phone=".$this->phone);
	}
	
	function getLogin()			{	return $this->login;		}
	function getFirstName()		{	return $this->firstname;	}
	function getLastName()		{	return $this->lastname;	}
	function getEMail()			{	return $this->email;		}
	function getPhone()			{	return $this->phone;	}
	
	function setLogin($in)		{	$this->login = $in;		}
	function setFirstName($in)	{	$this->firstname = $in;	}
	function setLastName($in)	{	$this->lastname = $in;	}
	function setEMail($in)		{	$this->email = $in;		}
	function setPhone($in)		{	$this->phone = $in;		}
}
?><?

require_once($_SERVER["DOCUMENT_ROOT"]."/eaadmin/dbconnect.php");
require_once($_SERVER["DOCUMENT_ROOT"]."/eaadmin/class/euroart/user/UserRole.php");
require_once($_SERVER["DOCUMENT_ROOT"]."/eaadmin/class/euroart/util/Utility.php");

class Siteuser
{
	var $login;
	var $password;
	var $encoding;
	var $lastsucclogin;
	var $lastunsucclogin;
	
	function equals($o)
	{
		if ($o->getLogin()==$this->login)
			return TRUE;
		else
			return FALSE;
	}
	
	function &Siteuser($log="")
	{
		if ($log!="")
		{
			$connection = mysql_connect(HOST, USERNAME, PASSWORD) or exit("Could not connect");
			mysql_select_db(DATABASE, $connection);
			
			$rs = mysql_query("SELECT * FROM siteusers WHERE LOGIN='".$log."'", $connection);
			if ($rs)
			{
				if ( ($array = mysql_fetch_assoc($rs))!=FALSE)
				{
					$this->login = $log;
					$this->password = $array["PASSWORD"];
					$this->encoding = $array["ENCODING"];
					$this->lastsucclogin = $array["LASTSUCCLOGIN"];
					$this->lastunsucclogin = $array["LASTUNSUCCLOGIN"];
				}
				else
				{
					$this->login = "";
					$this->password = "";
					$this->encoding = "none";
					$this->lastsucclogin = 0;
					$this->lastunsucclogin = 0;
				}
			}
			mysql_close($connection);
		}
		else
		{
			$this->login = "";
			$this->password = "";
			$this->encoding = "none";
			$this->lastsucclogin = 0;
			$this->lastunsucclogin = 0;
		}
	}
	
	// returns ra
	function insert()		// returns int QID of the last inserted row
	{
		$success = FALSE;
		
		if ($this->login!="")
		{
			$maxpos = 0;
			$ra = -1;
			$connection = mysql_connect(HOST, USERNAME, PASSWORD) or exit("Could not connect");
			mysql_select_db(DATABASE, $connection);
			
			$rs = mysql_query("SELECT PASSWORD FROM siteusers WHERE LOGIN='".$this->login."'");
			if ($rs)
			{
				if (($array = mysql_fetch_assoc($rs))==FALSE)
				{
					mysql_query("INSERT INTO siteusers (LOGIN, PASSWORD, ENCODING, LASTSUCCLOGIN, LASTUNSUCCLOGIN) VALUES ('".$this->login."', '".$this->password."', '".$this->encoding."', 0, 0)", $connection);
					$ra = mysql_affected_rows($connection);
				}
			}
			mysql_close($connection);
		}
		return $ra;
	}
	
	function update()
	{
		$ra = -1;
		$connection = mysql_connect(HOST, USERNAME, PASSWORD) or exit("Could not connect");
		mysql_select_db(DATABASE, $connection);
		mysql_query("UPDATE siteusers SET PASSWORD='".$this->password."', ENCODING='".$this->encoding."' WHERE LOGIN='".$this->login."'", $connection);
		$ra = mysql_affected_rows($connection);
		mysql_close($connection);
		return $ra;
	}
	
	function delete()
	{
		$ra = -1;
		$connection = mysql_connect(HOST, USERNAME, PASSWORD) or exit("Could not connect");
		mysql_select_db(DATABASE, $connection);
		mysql_query("DELETE FROM siteusers WHERE LOGIN='$this->login'", $connection);
		$ra = mysql_affected_rows($connection);
		if ($ra==1)
		{
			mysql_query("DELETE FROM usertocompany WHERE LOGIN='".$this->login."'", $connection);
			
			$userdetails = &new UserDetails($this->login);
			$userdetails->delete();
			
			$userrole = &new UserRole($this->login);
			$userrole->delete();
		}
		//mysql_close($connection);	// --
		return $ra;
	}
	
	function changePassword($username, $old, $new)
	{
		$connection = mysql_connect(HOST, USERNAME, PASSWORD) or exit("Could not connect");
		mysql_select_db(DATABASE, $connection);
		mysql_query("UPDATE siteusers SET PASSWORD='".$new."' WHERE LOGIN='".$username."' AND PASSWORD='".$old."'");
		$ra = mysql_affected_rows($connection);
		mysql_close($connection);
		return $ra;
	}
	
	function toString()
	{
		return ("login=".$this->login.", password=".$this->password.", encoding=".$this->encoding.", last successful login=".$this->lastsucclogin.", last unsuccessful login=".$this->lastunsucclogin);
	}
	
	function &login($username, $password)
	{
		$loggedin = FALSE;
		$connection = mysql_connect(HOST, USERNAME, PASSWORD) or exit("Could not connect");
		mysql_select_db(DATABASE, $connection);
		$rs = mysql_query("SELECT PASSWORD FROM siteusers WHERE LOGIN='".$username."'");
		if ($rs)
		{
			if ( ($array = mysql_fetch_assoc($rs))!=FALSE)
			{
				$pw = $array["PASSWORD"];
				if ($pw==$password)
				{
					$loggedin = TRUE;
				}
			}
		}
		mysql_close($connection);
		return $loggedin;
	}
	
	function forgottenPassword($login, $email)
	{
		$password = "";
		$connection = mysql_connect(HOST, USERNAME, PASSWORD) or exit("Could not connect");
		mysql_select_db(DATABASE, $connection);
		$sql = "SELECT PASSWORD FROM siteusers, siteuserdetails WHERE siteusers.LOGIN='".$login."' AND siteuserdetails.EMAIL='".$email."'";
		$rs = mysql_query($sql);
		if ($rs)
		{
			if ( ($array = mysql_fetch_assoc($rs))!=FALSE)
			{
				$password = $array["PASSWORD"];
			}
		}
		mysql_close($connection);
		return $password;
	}
	
	/*********************************************************************************************/
	//											 I 	     Labud i Exco i Regio
	//											V
	function addEMail($inemail)	// ako vec ne postoji email, ubaci ga u DB tablicu "newsletter"
	{
		$connection = mysql_connect(HOST, USERNAME, PASSWORD) or exit("Could not connect");
		mysql_select_db(DATABASE, $connection);
		$sql = "SELECT * FROM newsletter WHERE email='".$inemail."'";
		$rs = mysql_query($sql);
		if ($rs)
		{
			if (($array = mysql_fetch_assoc($rs))==FALSE)
			{
				mysql_query("INSERT INTO newsletter VALUES (0, '".$inemail."')");
				$ra = mysql_affected_rows($connection);
			}
		}
		mysql_close($connection);
		return $ra;
	}
	
	function sendEMail()
	{
		mail($recipients, $subject, $message, "From: exco@exco.hr\n");
	}
	/*********************************************************************************************/
	function getLogin()				{	return $this->login;			}
	function getPassword()			{	return $this->password;		}
	function getEncoding()			{	return $this->encoding;		}
	function getLastSuccLogin()		{	return $this->lastsucclogin;	}
	function getLastUnsuccLogin()		{	return $this->lastunsucclogin;	}
	
	function setLogin($in)			{	$this->login = $in;			}
	function setPassword($in)		{	$this->password = $in;		}
	function setEncoding($in)			{	$this->encoding = $in;		}
	function setLastSuccLogin($in)		{	$this->lastsucclogin = $in;		}
	function setLastUnsuccLogin($in)	{	$this->lastunsucclogin = $in;	}
}
?><?

require_once($_SERVER["DOCUMENT_ROOT"]."/eaadmin/dbconnect.php");
require_once($_SERVER["DOCUMENT_ROOT"]."/eaadmin/class/euroart/user/UserRole.php");
require_once($_SERVER["DOCUMENT_ROOT"]."/eaadmin/class/euroart/util/Utility.php");
require_once($_SERVER["DOCUMENT_ROOT"]."/eaadmin/class/lang/String.php");


	// static Vector getUnregisteredUserDetails()


class SiteuserDetails
{
	var $idx;
	var $login;
	var $first;
	var $last;
	var $email;
	var $phone;
	var $fax;
	var $org;
	var $addr;
	var $interests;
	var $published;
	var $datapublic;
	var $bio;
	
	function equals($o)
	{
		if ($o->getLogin()==$this->login)
			return TRUE;
		else
			return FALSE;
	}
	
	function &SiteuserDetails($log="")
	{
		if ($log!="")
		{
			$connection = mysql_connect(HOST, USERNAME, PASSWORD) or exit("Could not connect");
			mysql_select_db(DATABASE, $connection);
			
			$q = "SELECT * FROM siteuserdetails WHERE LOGIN='".$log."'";
			$str = &new String($log);
			if ($str->startsWith("idx="))
			{
				$sub = $str->substring(4);
				$q = "SELECT * FROM siteuserdetails WHERE IDX='".$sub."'";
			}
			$rs = mysql_query($q, $connection);
			if ($rs)
			{
				if ( ($array = mysql_fetch_assoc($rs))!=FALSE)
				{
					$this->idx = $array["IDX"];
					$this->login = $array["LOGIN"];
					$this->first = $array["FIRST"];
					$this->last = $array["LAST"];
					$this->email = $array["EMAIL"];
					$this->phone = $array["PHONE"];
					$this->fax = $array["FAX"];
					$this->org = $array["ORG"];
					$this->addr = $array["ADDR"];
					$this->interests = $array["INTERESTS"];
					$this->published = $array["PUBLISHED"];
					$this->datapublic = $array["DATAPUBLIC"];
					$this->bio = $array["BIO"];
				}
				else
				{
					$this->idx = 0;
					$this->login = "";
					$this->first = "";
					$this->last = "";
					$this->email = "";
					$this->phone = "";
					$this->fax = "";
					$this->org = "";
					$this->addr = "";
					$this->interests = "";
					$this->published = "";
					$this->datapublic = 0;
					$this->bio = "";
				}
			}
			mysql_close($connection);
		}
		else
		{
			$this->idx = 0;
			$this->login = "";
			$this->first = "";
			$this->last = "";
			$this->email = "";
			$this->phone = "";
			$this->fax = "";
			$this->org = "";
			$this->addr = "";
			$this->interests = "";
			$this->published = "";
			$this->datapublic = 0;
			$this->bio = "";
		}
	}
	
	// returns boolean (success if no username already exists)
	function insert()
	{
		$ra = -1;
		$connection = mysql_connect(HOST, USERNAME, PASSWORD) or exit("Could not connect");
		mysql_select_db(DATABASE, $connection);
		
		$q = "INSERT INTO siteuserdetails (IDX, LOGIN, FIRST, LAST, EMAIL, PHONE, FAX, ORG, ADDR, INTERESTS, PUBLISHED, DATAPUBLIC, BIO, APPROVED) VALUES (0, '".$this->login."', '".Utility::replacewithprime($this->first)."', '".Utility::replacewithprime($this->last)."', '".Utility::replacewithprime($this->email)."', '".Utility::replacewithprime($this->phone)."', '".Utility::replacewithprime($this->fax)."', '".Utility::replacewithprime($this->org)."', '".Utility::replacewithprime($this->addr)."', '".Utility::replacewithprime($this->interests)."', '".Utility::replacewithprime($this->published)."', '".$this->datapublic."', '".Utility::replacewithprime($this->bio)."',0)";
		//print($q."<BR>");
		mysql_query($q, $connection);
		$ra = mysql_affected_rows($connection);
		mysql_close($connection);
		return $ra;
	}
	
	function update()
	{
		$ra = -1;
		$connection = mysql_connect(HOST, USERNAME, PASSWORD) or exit("Could not connect");
		mysql_select_db(DATABASE, $connection);
		
		/* $rs = mysql_query("SELECT IDX FROM siteuserdetails WHERE LOGIN='".$this->login."'");
		if ($rs)
		{
			if (($array = mysql_fetch_assoc($rs))==FALSE)
			{ */
		mysql_query("UPDATE siteuserdetails SET FIRST='".Utility::replacewithprime($this->first)."', LAST='".Utility::replacewithprime($this->last)."', EMAIL='".Utility::replacewithprime($this->email)."', PHONE='".Utility::replacewithprime($this->phone)."', FAX='".Utility::replacewithprime($this->fax)."', ORG='".Utility::replacewithprime($this->org)."', ADDR='".Utility::replacewithprime($this->addr)."', INTERESTS='".Utility::replacewithprime($this->interests)."', PUBLISHED='".Utility::replacewithprime($this->published)."', DATAPUBLIC='".$this->datapublic."', BIO='".Utility::replacewithprime($this->bio)."' WHERE LOGIN='".$this->login."'", $connection);
		$ra = mysql_affected_rows($connection);
			/* }
			else
			{
				$ra = -99;
			}
		}
		else
		{
			$ra = -99;
		} */
		
		mysql_close($connection);
		return $ra;
	}
	
	function updateLogin()
	{
		$ra = -1;
		$connection = mysql_connect(HOST, USERNAME, PASSWORD) or exit("Could not connect");
		mysql_select_db(DATABASE, $connection);
		
		$rs = mysql_query("SELECT IDX FROM siteuserdetails WHERE LOGIN='".$this->login."'");
		if ($rs)
		{
			if (($array = mysql_fetch_assoc($rs))==FALSE)
			{
				mysql_query("UPDATE siteuserdetails SET LOGIN='".$this->login."', APPROVED=1 WHERE IDX='".$this->idx."'", $connection);
				$ra = mysql_affected_rows($connection);
			}
			else
			{
				$ra = -99;
			}
		}
		else
		{
			$ra = -99;
		}
		
		mysql_close($connection);
		return $ra;
	}
	
	function delete()
	{
		$ra = -1;
		$connection = mysql_connect(HOST, USERNAME, PASSWORD) or exit("Could not connect");
		mysql_select_db(DATABASE, $connection);
		mysql_query("DELETE FROM siteuserdetails WHERE IDX='".$this->idx."'", $connection);
		$ra = mysql_affected_rows($connection);
		mysql_close($connection);
		return $ra;
	}
	
	function toString()
	{
		return ("login=".$this->login.", first=".$this->first.", last=".$this->last.", phone=".$this->phone.", fax=".$this->fax.", org=".$this->org.", addr=".$this->addr.", interests=".$this->interests.", published=".$this->published.", datapublic=".$this->datapublic.", bio=".$this->bio);
	}
	
	// static
	function &getUnregisteredUserDetails()
	{
		$vec = &new Vector();
		$connection = mysql_connect(HOST, USERNAME, PASSWORD) or exit("Could not connect");
		mysql_select_db(DATABASE, $connection);
		$q = "SELECT IDX FROM siteuserdetails WHERE APPROVED=0";
		$rs = mysql_query($q, $connection);
		if ($rs)
		{
			while ( ($array = mysql_fetch_assoc($rs))!=FALSE)
			{
				$su = &new SiteuserDetails("idx=".$array["IDX"]);
				$vec->add($su);
			}
		}
		//mysql_close($connection);	// --
		return $vec;
	}
	
	function &getRegisteredUserDetails()
	{
		$vec = &new Vector();
		$connection = mysql_connect(HOST, USERNAME, PASSWORD) or exit("Could not connect");
		mysql_select_db(DATABASE, $connection);
		$q = "SELECT IDX FROM siteuserdetails WHERE APPROVED=1";
		$rs = mysql_query($q, $connection);
		if ($rs)
		{
			while ( ($array = mysql_fetch_assoc($rs))!=FALSE)
			{
				$su = &new SiteuserDetails("idx=".$array["IDX"]);
				$vec->add($su);
			}
		}
		//mysql_close($connection);
		return $vec;
	}
	
	function &getRegisteredUserDetailsWhoAllow()
	{
		$vec = &new Vector();
		$connection = mysql_connect(HOST, USERNAME, PASSWORD) or exit("Could not connect");
		mysql_select_db(DATABASE, $connection);
		$q = "SELECT IDX FROM siteuserdetails WHERE APPROVED=1 AND DATAPUBLIC=1";
		$rs = mysql_query($q, $connection);
		if ($rs)
		{
			while ( ($array = mysql_fetch_assoc($rs))!=FALSE)
			{
				$su = &new SiteuserDetails("idx=".$array["IDX"]);
				$vec->add($su);
			}
		}
		//mysql_close($connection);
		return $vec;
	}
	
	function getIdx()				{	return $this->idx;			}
	function getLogin()				{	return $this->login;			}
	function getFirst()				{	return $this->first;			}
	function getLast()				{	return $this->last;			}
	function getPhone()				{	return $this->phone;		}
	function getFax()				{	return $this->fax;			}
	function getOrg()				{	return $this->org;			}
	function getAddr()				{	return $this->addr;			}
	function getInterests()			{	return $this->interests;		}
	function getPublished()			{	return $this->published;		}
	function getDataPublic()			{	return $this->datapublic;		}
	function getBio()				{	return $this->bio;			}
	function getEmail()				{	return $this->email;			}
	
	function setIdx($in)				{	$this->idx = $in;			}
	function setLogin($in)			{	$this->login = $in;			}
	function setFirst($in)			{	$this->first = $in;			}
	function setLast($in)			{	$this->last = $in;			}
	function setPhone($in)			{	$this->phone = $in;			}
	function setFax($in)				{	$this->fax = $in;			}
	function setOrg($in)				{	$this->org = $in;			}
	function setAddr($in)			{	$this->addr = $in;			}
	function setInterests($in)			{	$this->interests = $in;		}
	function setPublished($in)		{	$this->published = $in;		}
	function setDataPublic($in)		{	$this->datapublic = $in;		}
	function setBio($in)				{	$this->bio = $in;			}
	function setEmail($in)			{	$this->email = $in;			}
}
?><html>
<head>
<title>Panjan - informati�ki in�injering, Sisak, Croatia</title>
<meta http-equiv="Content-Type" content="text/html; charset=windows-1250">
<meta name="keywords" content="Panjan, Hrvatska, Croatia, Kroatien, web, www, partner, informatika, Sisak, Zagreb, centar, medicinski, medicina, sustav, euroart93, AIS, ambulantni, computer, system, medical">
<meta name="description" content="Panjan - informati�ki in�enjering">
<link href="panjan.css" rel="stylesheet" type="text/css">
<link href="sIFR-print.css" rel="stylesheet" type="text/css" media="print" />
<link href="sIFR-screen.css" rel="stylesheet" type="text/css" media="screen" />
<script src="sifr.js" type="text/javascript"></script>
<script language="JavaScript" type="text/JavaScript">
<!--
function MM_preloadImages() { //v3.0
  var d=document; if(d.images){ if(!d.MM_p) d.MM_p=new Array();
    var i,j=d.MM_p.length,a=MM_preloadImages.arguments; for(i=0; i<a.length; i++)
    if (a[i].indexOf("#")!=0){ d.MM_p[j]=new Image; d.MM_p[j++].src=a[i];}}
}

function MM_swapImgRestore() { //v3.0
  var i,x,a=document.MM_sr; for(i=0;a&&i<a.length&&(x=a[i])&&x.oSrc;i++) x.src=x.oSrc;
}

function MM_findObj(n, d) { //v4.01
  var p,i,x;  if(!d) d=document; if((p=n.indexOf("?"))>0&&parent.frames.length) {
    d=parent.frames[n.substring(p+1)].document; n=n.substring(0,p);}
  if(!(x=d[n])&&d.all) x=d.all[n]; for (i=0;!x&&i<d.forms.length;i++) x=d.forms[i][n];
  for(i=0;!x&&d.layers&&i<d.layers.length;i++) x=MM_findObj(n,d.layers[i].document);
  if(!x && d.getElementById) x=d.getElementById(n); return x;
}

function MM_swapImage() { //v3.0
  var i,j=0,x,a=MM_swapImage.arguments; document.MM_sr=new Array; for(i=0;i<(a.length-2);i+=3)
   if ((x=MM_findObj(a[i]))!=null){document.MM_sr[j++]=x; if(!x.oSrc) x.oSrc=x.src; x.src=a[i+2];}
}
//-->
</script>
</head>
<body bgcolor="#EAEBEB" leftmargin="0" topmargin="0" marginwidth="0" marginheight="0" class="back1" onLoad="MM_preloadImages('images/heade/index_02eng_on.gif','images/heade/index_02cro_on.gif')">
<a name="vrh"></a>
<table id="Table_01" width="769" border="0" cellpadding="0" cellspacing="0">
  <tr>
    <td colspan="2"><img src="images/engimages/panjanlogo3.jpg" width="623" height="181" border="0" usemap="#Map2"></td>
    <td><div id="maska" style="position:absolute;z-index:1"><img src="images/heade/index_02maskk.gif"></div>
      <img src="images/heade/index_02eng.gif" alt="" name="head" width="146" height="181" border="0" usemap="#Map" id="head">
      <map name="Map">
        <area shape="rect" coords="3,16,30,38" href="indexeng.php" alt="Back to home">
        <area shape="rect" coords="3,39,30,59" href="mailto:info@panjan.hr" alt="Kontakt">
        <area shape="rect" coords="48,39,132,58" href="indexeng.php" alt="Swich to english language" onMouseOver="MM_swapImage('head','','images/heade/index_02eng_on.gif',1)" onMouseOut="MM_swapImgRestore()">
        <area shape="rect" coords="46,58,135,72" href="index.php" alt="Croatian language" onMouseOver="MM_swapImage('head','','images/heade/index_02cro_on.gif',1)" onMouseOut="MM_swapImgRestore()">
      </map></td>
  </tr>
  <tr>
    <td valign="top" bgcolor="#FFFFFF"> <object classid="clsid:D27CDB6E-AE6D-11cf-96B8-444553540000" codebase="http://download.macromedia.com/pub/shockwave/cabs/flash/swflash.cab#version=6,0,29,0" width="202" height="331">
      <param name="movie" value="flash/eng_navigation.swf">
      <param name="quality" value="high">
      <param name="menu" value="false">
      <embed src="flash/eng_navigation.swf" width="202" height="331" quality="high" pluginspage="http://www.macromedia.com/go/getflashplayer" type="application/x-shockwave-flash" menu="false"></embed> </object><script type="text/javascript" src="javascript/ieupdate.js"></script></td>
    <td width="420" valign="top" background="images/heade/index_04.gif">      <table width="408" height="18" border="0" align="center">
      <tr>
        <td width="380"></td>
      </tr>
    </table>
      <table width="394" border="0" align="center" cellpadding="0" cellspacing="0">
        <tr>
          <td width="394" class="newstitle">Partners</td>
    </tr>
      </table>      
      <table width="394" border="0" align="center" cellpadding="0" cellspacing="0">
        <tr>
          <td width="394" class="newsbody"> Our partners are primarily users of our applications. To mention just a few:</td>
        </tr>
    </table> 
    <br>
      <table width="373" border="0" align="center" cellpadding="2" cellspacing="2">
      		        <tr>
		          <td width="394" height="13" valign="top">
		          	<span class="date">
		          	<img src="images/ostalo/pip_gray.gif" width="11" height="11" hspace="5" border="0" align="absmiddle">
		          			          	<a href="<?=$partner->getURL()?>" target="_blank">
		          					          	<?=$partner->getLinkDesc()?>
		          				          	</a>
		          						          	</span>
		          </td>
		        </tr>
        		        <!-- 
        <tr>
          <td height="13" valign="top"><span class="date"><img src="images/ostalo/pip_gray.gif" width="11" height="11" hspace="5" border="0" align="absmiddle"> <a href="http://www.sisak.hr">Grad
          Sisak</a> </span></td>
        </tr>
        <tr>
          <td height="13" valign="top"><span class="date"><img src="images/ostalo/pip_gray.gif" width="11" height="11" hspace="5" border="0" align="absmiddle"> Grad
              Petrinja
</span></td>
        </tr>
        <tr>
          <td height="13" valign="top"><span class="date"><img src="images/ostalo/pip_gray.gif" width="11" height="11" hspace="5" border="0" align="absmiddle"> Op�ina
          Pako�tane</span></td>
        </tr>
        <tr>
          <td height="13" valign="top"><span class="date"><img src="images/ostalo/pip_gray.gif" width="11" height="11" hspace="5" border="0" align="absmiddle"> Pamu�na
          predionica Glina</span></td>
        </tr>
        <tr>
          <td height="13" valign="top"><span class="date"><img src="images/ostalo/pip_gray.gif" width="11" height="11" hspace="5" border="0" align="absmiddle"> Dom
          zdravlja Petrinja</span></td>
        </tr>
        <tr>
          <td height="13" valign="top"><span class="date"><img src="images/ostalo/pip_gray.gif" width="11" height="11" hspace="5" border="0" align="absmiddle"> Dom
          zdravlja Dvor</span></td>
        </tr>
        <tr>
          <td height="13" valign="top"><span class="date"><img src="images/ostalo/pip_gray.gif" width="11" height="11" hspace="5" border="0" align="absmiddle"> Fima
          Novo Mesto d.o.o., Slovenija</span></td>
        </tr>
        <tr>
          <td height="13" valign="top"><span class="date"><img src="images/ostalo/pip_gray.gif" width="11" height="11" hspace="5" border="0" align="absmiddle"> <A href="http://www.danfoss-cmpr.si/">Danfoss
          compressors d.o.o.</A>, �rnomelj, Slovenija</span></td>
        </tr>
        <tr>
          <td height="13" valign="top"><span class="date"><img src="images/ostalo/pip_gray.gif" width="11" height="11" hspace="5" border="0" align="absmiddle"> <A href="http://www.litostroj.com/">Litostroj
          ulitki d.o.o.</A>, Ljubljana, Slovenija</span></td>
        </tr>
        <tr>
          <td height="13" valign="top"><span class="date"><img src="images/ostalo/pip_gray.gif" width="11" height="11" hspace="5" border="0" align="absmiddle"> Mlinopek
          d.d., Murska Sobota, Slovenija</span></td>
        </tr>
        <tr>
          <td height="13" valign="top"><span class="date"><img src="images/ostalo/pip_gray.gif" width="11" height="11" hspace="5" border="0" align="absmiddle"> <A href="http://www.in-informatika.si/">In
          informatika d.o.o.</A>, Ljubljana, Slovenija</span></td>
        </tr>
        <tr>
          <td height="13" valign="top"><span class="date"><img src="images/ostalo/pip_gray.gif" width="11" height="11" hspace="5" border="0" align="absmiddle"> Zdravstveni
          dom �rnomelj, Slovenija</span></td>
        </tr>
        <tr>
          <td height="13" valign="top"><span class="date"><img src="images/ostalo/pip_gray.gif" width="11" height="11" hspace="5" border="0" align="absmiddle"> Zdravstveni
          dom Metlika, Slovenija</span></td>
        </tr>
        -->
      </table>
    <br>
      <table width="394" border="0" align="center" cellpadding="0" cellspacing="0">
        <tr>
          <td width="394" class="newsbody">Complete insight to users of our services is on <a href="reflista_eng.php">our
              users referral list</a>.<br>
          <br>
            Our partners are also leading makers of programming tools for data proccessing such as Progress Software Corporation
          and programming houses we work with or those that represent us on Slovenian market: </td>
        </tr>
      </table>
      <hr align="center" width="394" size="2" noshade color="#e0e0e0">
      <table width="394"  border="0" align="center" cellpadding="0" cellspacing="0" class="newsbody">
        <tr>
          <td width="156" valign="top"><div align="center"><a name="partnerprogres"></a><img src="images/ostalo/progress2.gif" width="139" height="96" border="0" class="newsbody"></div></td>
          <td width="238"><p><a href="http://www.progress.com/index.ssp" target="_blank">Progress Software Corporation</a> is
              a leading developer of user/server app solutions, language of fourth generation (4GL) and relational databases
              management systems (RDBMS). Company resides in Bedford, Massachusetts, USA, with presence all around the globe,
              with over 50 offices and 35 distributers. It employes over a thousand od employees. With total income of 200
              mil. $ per year and annual growth of over 30% it's withing 50 world's largest software companies. So far over
              a 250.000 Progres licenses were sold in over 60 countries. Great contribution to the sale of the producs is
              made by over a 2.500 application partners so overall turnover of Progres aplications exceedes 2 billion dollars
              per year.</p></td>
        </tr>
      </table>
      <hr align="center" width="394" size="2" noshade color="#e0e0e0">
      <table width="394"  border="0" align="center" cellpadding="0" cellspacing="0" class="newsbody">
      <tr>
        <td width="156" valign="top"><div align="center"><a name="partnerin"></a><img src="images/ostalo/in2.gif" width="139" height="96" border="0"></div></td>
        <td width="238"><p><A href="http://www.in-informatika.si/" target="_blank">IN Group </A> is a group od several
            software companies in conjunction to act and present several programming solutions together. Leader of In group
            is  In-informatika ltd. from Ljubljana as leading and certified distributor of complete solutions for informatics
            systems (ERP II) and B2B solutions for e-commerce, distribution and manufacturers in concordance with Fronstep
            (former Symix)</p>
          </td>
      </tr>
    </table>
    <hr align="center" width="394" size="2" noshade color="#e0e0e0">
    <table width="394"  border="0" align="center" cellpadding="0" cellspacing="0" class="newsbody">
      <tr>
        <td width="156" valign="top">&nbsp;</td>
        <td width="238"><p><strong> Novo Mesto ltd.</strong> is our major bussiness partner in Slovenia - distributor and
            installer of several software products by PANJAN ltd. - some of most important are "ZIS - Zdravstveni
              Informacijski Sustav", "Pla�e in kadrovska evidenca" i "Financijsko
          knjigovodstvo".</p>
          </td>
      </tr>
    </table>
  <br></td>
    <td valign="top" background="images/heade/index_05.gif"><div align="center">    <img src="images/ostalo/predstavljamo2.gif" width="139" height="4">    
      <table width="134" border="0" align="center" cellpadding="0" cellspacing="0">
        <tr>
          <td height="13" colspan="2"><p class="newsbodyCopy"><strong><font color="#1443A4">We
                  present:<br>
          </font></strong></p></td>
        </tr>
        <tr>
                    <td height="26" colspan="2"><p class="newsbodyCopy"><strong><font color="#1443A4"> <a href="aplikacija_glavna_eng.php?catid=<?=$cat->getCatID()?>"><?=$cat->getCatName()?>
              </a> <br>
              <br>
          </font></strong></p></td>
        </tr>
        <tr>
          <td width="27" class="newsbodyC2">&nbsp;</td>
          <td width="113" class="newsbodyC2"><?=Utility::trimTextRight($cat->getCatDesc(), 150)?>
              <a href="aplikacija_glavna_eng.php?catid=<?=$cat->getCatID()?>"><img src="images/ostalo/arrow.gif" width="11" height="11" vspace="0" border="0" align="absmiddle"></a> </td>
        </tr>
      </table>
      <div align="right"><img src="images/ostalo/predstavljamo2.gif" width="139" height="4" vspace="2"><br>
            <a href="reflista_eng.php"><img src="images/engimages/engreference.gif" width="139" height="104" hspace="0" vspace="0" border="0"></a><a href="kontakt.php"><br>
            </a><a href="kontakt_eng.php"><img src="images/engimages/engkakodonas.gif" width="139" height="96" border="0"></a><br>
            <img src="images/ostalo/phone.gif" width="139" height="104"><br>
          <img src="images/ostalo/predstavljamo2.gif" width="139" height="4" vspace="4"><br> <a href="http://www.generalturist.com/AffiliateWiz/aw.aspx?B=231&A=383&Task=Click" Target="_Blank"><img src="http://www.generalturist.com/AffiliateWiz/aw.aspx?B=231&A=383&Task=Get" alt="Hoteli na Jadranu" width="125" height="125" border="0"></a><br>
<br>         
   
        </div>
    </div></td>
  </tr>
  <tr>
    <td width="203" bgcolor="#FFFFFF">&nbsp; </td>
    <td background="images/heade/index_04.gif">&nbsp;  </td>
    <td width="146" background="images/heade/index_05.gif">&nbsp; </td>
</tr></table>
<table width="100%" border="0" cellspacing="0" cellpadding="0">
  <tr>
    <td height="38" valign="top" class="back2"><table width="769" border="0" cellspacing="0" cellpadding="0">
      <tr>
        <td> <a href="mailto:info@panjan.hr"><img src="images/heade/panjan.gif" alt="Na� kontakt" width="202" height="38" border="0"></a></td>
        <td> <a href="#vrh"><img src="images/engimages/topvrh.gif" alt="" width="138" height="38" border="0"></a></td>
        <td> <img src="images/heade/index_08.gif" width="283" height="38" alt=""></td>
        <td> <a href="http://www.euroart93.hr" target="_blank"><img src="images/heade/euroart93.gif" alt="Developed &amp; designed: EuroART93" width="146" height="38" border="0"></a></td>
      </tr>
    </table>
</td>
  </tr>
</table>
      <map name="Map2">
        <area shape="rect" coords="28,28,190,160" href="index.php">
      </map>
	        
<SCRIPT language=Javascript type=text/javascript>
/* 
Replacement calls. Please see readme.txt for more information. 
sIFR.replaceElement(sSelector, sFlashSrc, sColor, sLinkColor, sHoverColor, sBgColor, nPaddingTop, nPaddingRight, nPaddingBottom, nPaddingLeft, sFlashVars, sCase, sWmode);
*/
if(typeof sIFR == "function"){
	sIFR.replaceElement(".newstitle", "dax.swf", "#003399", null, null, "#F2F2FA", 0, 0, 0, 0);
	sIFR.replaceElement(".newstitle2", "dax.swf", "#444444", null, null, "#F2F2FA", 0, 0, 0, 1);
	sIFR.replaceElement(".newstitle3", "dax.swf", "#444444", null, "#003399", "#F2F2FA", 0, 0, 0, 0);
};
</SCRIPT>

</body>
</html>