<?php 
      session_start();
      include("style.inc");
      include("connect.php");      
      include("config.php");
      include("functions.php");
      include("eraser.php");
      $session_id=session_id();
      $user_mode=false;
      $workgroup_admin=false;
      $admin_mode=false;
      $doc_admin=false;
      $workgroup_operator=false;
      $action="about";
      $groups="0";
      $dirs=array();
      $user_id="";
      $workgroups="";
      $reader_mode=false;
       
      if(isset($_SESSION["registered"]))$registered=true;
      if(isset($_GET["logoff"]))
      {
        unset($registered);
        foreach($_SESSION as $key => $value)session_unregister("$key");
        session_destroy();
      }
      if(isset($_SESSION["user_mode"]))$user_mode=true;
      if(isset($_SESSION["action"]))$action=$_SESSION["action"];
      if(isset($_SESSION["workgroup_admin"]))$workgroup_admin=true;
      if(isset($_SESSION["workgroup_operator"]))$workgroup_operator=true;
      if(isset($_SESSION["admin_mode"]))$admin_mode=true;
      if(isset($_SESSION["reader_mode"]))$reader_mode=true;
      if(isset($_SESSION["groups"]))$groups=$_SESSION["groups"];
      if(isset($_SESSION["workgroups"]))$workgroups=$_SESSION["workgroups"];
      if(isset($_SESSION["dirs"]))$dirs=$_SESSION["dirs"];
      if(isset($_SESSION["doc_admin"]))$doc_admin=true;
      if(isset($_GET["action"]))$action=$_GET["action"];
      if(isset($_SESSION["user_id"]))$user_id=$_SESSION["user_id"];
       if(isset($_POST["login"]) && isset($_POST["password"]))
     {
         $login=$_POST["login"];
         $pass=$_POST["password"];
         
            $result = mysql_query(sprintf("SELECT * FROM server.user
                        WHERE login=\"%s\" AND password=\"%s\"",$login,$pass))
                    or die ("Invalid query");
         if(mysql_num_rows($result)==1)
         {
                $row=mysql_fetch_array($result);
                
                $login=$row["login"];
                $password=$row["password"];
                $user_id=$row["ID"];
                $_SESSION['user_id'];
                $_SESSION['count_files'];
                mysql_free_result($result);
                
                if($login=="admin")
                {
                    $_SESSION['admin_mode'];
                    $admin_mode=true;
                    $_SESSION['reader_mode'];
                    $reader_mode=true;
                    
                    $_SESSION['user_mode'];
                    $user_mode=true;
                    
                    $_SESSION['workgroup_operator'];
                    $workgroup_operator=true;
                    
                    $_SESSION['groups'];
                    $groups="1";
                    
                    $_SESSION['workgroups'];
                    $workgroups="1";
                    
                    $_SESSION['doc_admin'];
                    $doc_admin=true;
                }
                
                $result=mysql_query("SELECT gr_id
                                     FROM server.user_gr
                                     WHERE  user_id='$user_id'");
                if(mysql_num_rows($result))
                {
                    $user_mode=true;
                    $_SESSION['user_mode'];
                    $groups=" t1.gr_id = '";
                    $row1 = mysql_fetch_array($result);
                    $groups.=$row1["gr_id"];
                    while( $row1 = mysql_fetch_array($result) )
                    {
                        $groups.="' OR t1.gr_id='".$row1["gr_id"];
                    }
                    $groups.="' ";
                    
                    $_SESSION['groups'];
                    mysql_free_result($result);
                    $result=mysql_query("SELECT t1.ID FROM server.user_gr as t1, server.gr as t2
                                             WHERE ($groups) AND can_write='1' AND t1.gr_id=t2.ID");
                    
                    if(mysql_num_rows($result))
                    {
                        $doc_admin=true;
                        $_SESSION['doc_admin'];
                    }
                    mysql_free_result($result);
                    $result = mysql_query("SELECT DISTINCT t2.name FROM server.root as t2,
                                                                   server.gr_root as t1
                                                WHERE t2.ID = t1.root_id AND  ($groups)");
                        while($row=mysql_fetch_array($result))
                        {                        
                            array_push($dirs,$row["name"]);
                        }
                        mysql_free_result($result);
                        $_SESSION['dirs'];
                    
                }
                
                
                $result=mysql_query("SELECT workgroup_id,can_write,opr FROM server.operator_workgroup
                                      WHERE user_id='$user_id' ");
                if(mysql_num_rows($result))
                {
                    $reader_mode=true;
                    $_SESSION['reader_mode'];
                    $workgroups=" t1.workgroup_id = '";
                    $row1 = mysql_fetch_array($result);
                    if($row1["can_write"]==1){$workgroup_admin=true;$_SESSION['workgroup_admin'];}
                    if($row1["opr"]==1){$workgroup_operator=true;$_SESSION['workgroup_operator'];}
                    $workgroups.=$row1["workgroup_id"]."'";
                    while( $row1 = mysql_fetch_array($result) )
                    {
                        $workgroups.=" OR t1.workgroup_id='".$row1["workgroup_id"]."'" ;
                        if($row1["can_write"]==1){$workgroup_admin=true;$_SESSION['workgroup_admin'];}
                        if($row1["opr"]==1){$workgroup_operator=true;$_SESSION['workgroup_operator'];}
                    }
                    $_SESSION['workgroups'];
                }
                mysql_free_result($result);
            $registered=true;
             $_SESSION['registered'];
            }
         
     }
?>

<HTML>
<HEAD>
<META http-equiv="Content-Language" content="ru">
<META http-equiv="Content-Type" content="text/html; charset=windows-1251">
<Title>WEB сервер УС БоГЭС</title>
</HEAD>
<body bgcolor="black" alink="Lime" link="lime" vlink="lime" text="Yellow">

<table  border="0" width="100%" height="1">
    <TR>
        <TD width="25%" height="56">
        </TD>
    </TR>
    <TR>
        <TD width="25%" height="92" valign="top">
            <?php 
            if(isset($registered))
                {    
                include("user_options.php");
                if($workgroup_admin)include("operator_options.php");
                }
            else include ("login.php");
                  
            include("links.php");
            
            echo "<br>";
            if(isset($registered))
               echo "<a href='index.php?logoff=true'>Закончить работу</a>";
            ?><BR>
            
        </TD>
        <TD valign="top">
        
        
            <?php
                   
                   
                      if(isset($_SESSION['action']))unset($_SESSION['action']);
                      $_SESSION['action'];
                      switch($action)
                      {
########################################################################
                                                case "inform":include("inform.htm");break;
                        case "news":include("news.htm");break;
                        case "about":include("about.htm");break;
                        case "rasp":include("rasp.htm");break;
                        case "den stroit":include("den stroit.htm");break;
                        case "wea":include("wea.htm");break;
                        case "telephon":include("telephon.htm");break;
                        case "pogoda":include("pogoda.htm");break;
                        case "pic":include("pic.htm");break;
                        case "tv":include("tv.htm");break;
                        case "Guestbook":include("Guestbook.htm");break;
                        case "links":include("links.htm");break; 
                        case "1C":include("1C.htm");break;
                        case "1C":include("index.php");break;
                        ########################################################################
                      }
                      

                      
                      if($user_mode)
                          switch($action)
                          
                        
                        {
                            case "doc_admin":if($doc_admin==true)
                                include("doc_admin.php");break;
                            case "documents":include("documents.php");break;
              #              case "telephones":include("telephones.php");break;
                          }
                       if($workgroup_admin)
                       switch($action)
                          {
                            case "add_worker":include("add_worker.php");break;
                            case "del_worker":include("del_worker.php");break;
                            case "enter_time":include("enter_time.php");break;
                            case "enter_time_dop":include("enter_time_dop.php");break;
                            case "test_table":include("test_table.php");break;
                        }
                        if($reader_mode)
                        switch($action)
                          {
                              case "print_time":include("print_time.php");break;
                        }
                        if($workgroup_operator)
                        switch($action)
                          {
                              case "operate":include("operate.php");break;
                        }
        ?>
            
        </TD>
    </TR>
    <TR>
        <TD width="25%" height="1">
        </TD>
    </TR>
</TABLE>

</BODY>
</HTML>