<?

session_start();
$lockdownprivilege = 0;
require("db_connect.php");
include("inc_functions.php");
include("product_functions.php");


$creditcolor = array("white","black");
$sitewidth = 800;

if (isset($_GET['m'])){
$m = $_GET['m'];
}
else{
$m=1;
}
if (isset($_GET['s'])){
$s = $_GET['s'];
}

if (isset($_GET['id'])){
$id = $_GET['id'];
}

if(isset($_GET['page'])){
$page = $_GET['page'];
}
else{
$page = 1;
}

if(isset($_GET['tip'])){
$tip = $_GET['tip'];
}
if($_POST['tip']!=""){
$tip = $_POST['tip'];
}
if(is_null($tip)){
$tip = date('d');
}

if(isset($_GET['mode'])){
$mode = $_GET['mode'];
}

//if(isset($_GET['theme']) && $_GET['theme']<6){
//$_SESSION['theme']=$_GET['theme'];
//}

include("inc_updates.php");


//----------------------------  AUTHENTICATE -----------------------------------
if (isset($_SESSION['login']) && isset($_SESSION['pass'])){
$loginselect = mysql_query("SELECT * FROM users WHERE login='".$_SESSION['login']."' AND pass=OLD_PASSWORD('".$_SESSION['pass']."')");
if(mysql_num_rows($loginselect)>0){
$customer = mysql_fetch_array($loginselect);
//--------------------- is their expiration date up?? ----------------
//if($customer['exp']<time() && $customer[priv]<4){
//mysql_query("UPDATE users SET priv='1' WHERE id='".$customer[id]."'");
//$customer[priv]=1;
//}
$privilege=$customer[priv];
}
elseif(isset($_POST['login'])){
$error['login']="yes";
}
}

if($_GET['edit']=="yes" && $privilege>3){
$editmode="yes";
}

if (isset($_POST['pass'])){
if ($_POST['pass']==$thepass){
$_SESSION['edit']="yes";
$_GET['edit']="yes";
}
}

if($_SESSION['edit']=="yes"){
$priv=2;
}


//---------------------- 	SITE CONFIG -----------------------------------
/*
$siteconfig_select = mysql_query("SELECT * FROM site_config") or die(mysql_error());
while($siteconfig_fetch = mysql_fetch_array($siteconfig_select)){
$siteconfig[$siteconfig_fetch[name]] = $siteconfig_fetch[value];
}
*/
$siteconfig_fetch = runquery("SELECT * FROM site_config2 WHERE id='1'");
$siteconfig=$siteconfig_fetch[1];

$companyname=$siteconfig[site_name];
if($siteconfig['theme']>0){
$theme = runquery("SELECT * FROM themes WHERE id='".$siteconfig['theme']."'");
}
//------------------------------------------------------------------


//------------------------------------------BANNER-----------------------------------------------------

if($theme[1]['banner']!=""){
$bannerimage = $theme[1]['banner'];
}
else{
$activebanner_select = mysql_query("SELECT * FROM banners WHERE active='yes'");
if(mysql_num_rows($activebanner_select)>0){
$activebanner = mysql_fetch_array($activebanner_select);
$bannerimage = $activebanner[image];
}
else{
$bannerimage = "banner.jpg";
}
}
if(file_exists("images/".$bannerimage)){
$bannersize = getimagesize("images/".$bannerimage);
$bannerheight=$bannersize[1];
}


$nav_select_string = "SELECT * FROM nav  WHERE hidden != 'yes'  ORDER BY sequence ".$theme['1']['menu_sequence'];
$nav_select = mysql_query($nav_select_string) or die(mysql_error());
$navcount=1;
while($nav_fetch = mysql_fetch_array($nav_select)){
if (is_null($m) || $m==""){
$m = $nav_fetch[id];
}
$nav[$navcount] = $nav_fetch;

$getdisplay = runquery("SELECT display FROM content WHERE maincat = '".$nav_fetch['id']."' ORDER BY sequence");
$nav[$navcount]['content_display']=$getdisplay[1]['display'];
$navcount++;
}

$side_select_string = "SELECT id, display,inc,extra FROM content WHERE maincat = '$m' AND priv<='".$privilege."' ORDER BY sequence";
$side_select = mysql_query($side_select_string) or die(mysql_error());
$sidecount=1;
while($side_fetch = mysql_fetch_array($side_select)){
if (is_null($s)){
$s = $side_fetch[id];
}
$side[$sidecount] = $side_fetch;
//--------------- login page display exception (login -> Your Profile) ------
if($privilege>0  && $side_fetch[inc]=="inc_login.php"){
$side[$sidecount][display]=$side_fetch[extra];
}
//---------------------------------------------------------------------------

$sidecount++;
}
$content_select_string = "SELECT * FROM content WHERE id = '$s'";
$content_select = mysql_query($content_select_string) or die(mysql_error());
$content = mysql_fetch_array($content_select);


?><head>
<title><? 
if($content[title]!=""){
echo $content[title];
}
else{
echo $content[heading];
}
echo " | ".$companyname?></title>

<meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
<?
echo "<meta name=\"keywords\" content=\"";
if($content[keywords]!=""){
echo $content[keywords];
}
else{
echo $siteconfig['site_keywords'];
}
echo "\">\n";
echo "<meta name=\"description\" content=\"";
if($content[sitedescription]!=""){
echo $content[sitedescription];
}
else{
echo $siteconfig[sitedescription];
}
echo "\">\n";
?>
<script type="text/javascript" src="js/jscripts.js"></script>
<script type="text/javascript" src="js/swfobject.js"></script>
<link href="css/style.php?themeid=<? echo $siteconfig['theme'] ?>" rel="stylesheet" type="text/css">
<script type="text/javascript" src="js/wysiwyg.js"></script>
<script type="text/javascript" src="js/ddlevelsmenu.js"></script>
<script type="text/javascript" src="flowplayer-3.0.5.min.js"></script>
<script type="text/javascript" src="js/ajaxroutine.js"></script>
<? 


if($privilege>=$lockdownprivilege){


if($theme[1]['metabanner']!=""){
echo "<img src=\"images/".$theme[1]['metabanner']."\"><BR>";
}
?>

<TABLE BORDER=0 CELLPADDING=0 CELLSPACING=0 align="center" width=800
<?
if($theme[1]['border']!=""){
echo "border:1px solid ".$theme[1]['border'];
}

if($theme[1]['metabanner']!=""){
echo ";border-top:0px";
}

echo ";border-top:0px";
?>
"><TR><?
if($theme[1]['leftshadow']!=""){
echo "<td valign=\"top\"";
	if($theme[1]['leftshadow_repeat']!=""){
	echo " background=\"images/".$theme[1]['leftshadow_repeat']."\"";
	}
echo ">";
if($theme[1]['leftshadow']!=""){
echo "<img src=\"images/".$theme[1]['leftshadow']."\">";
}
else{
echo "<img src=\"images/spacer.gif\" width=1>";
}
echo "</td>";
}
?>
<td width=100% valign="top"><table cellpadding=0 cellspacing=0 border=0 >
<?
echo "<TR><TD>";
createbanner($bannerimage,$bannerheight,$sitewidth,"right",450,"#621903");
echo "</TD></TR>";

if($theme['1']['border_above_nav']=="yes"){
	echo "<tr><td bgcolor=\"".$theme[1]['nav_border_color']."\"><img src=\"images/spacer.gif\" height=1></td></tr>";
}
?>

		<TD><?
				createnav($theme['1']['menu_alignment']);
		?></TD>
	</TR>
<?
if($theme['1']['border_below_nav']=="yes"){
	echo "<tr><td bgcolor=\"".$theme[1]['nav_border_color']."\"><img src=\"images/spacer.gif\" height=1></td></tr>";
}
?>

	<TR>
		<TD valign="top" <?
		echo " style=\"";
		if($theme[1]['tablecolor']!=""){
echo ";background-color:".$theme[1]['tablecolor'];
}
echo "\"";
?>
>
<table cellpadding=0 cellspacing=0 width=100% border=0 >
<?

if($content[showbanner]=="yes" && ($theme[1]['content_back_pos']=="Beneath Ads" || $theme[1]['content_back_pos']=="")){
 echo "<TR><TD>";
 contentslideshow("0","no");
 echo "</td></tr>";
}
 
?><TR><td valign="top" align="left"
<?
if($theme['1']['content_shadow']!=""){
echo " style=\"background-image:url(images/".$theme['1']['content_shadow'].");";
if($theme[1]['content_repeat']!=""){
echo "background-repeat:".$theme[1]['content_repeat'];
}
echo "\"";
}
?>
class="content" >
<?
	if($content[priv]>0 && ($content[priv]>$customer[priv])){
echo "<BR><BR><center><B>This is a member's only page.</b><BR>";
echo "<BR><form action=\"".$_SERVER['PHP_SELF']."?m=$m&s=$s\" method=\"POST\" class=\"login\" style=\"display:inline\">login <input type=\"text\" size=20 name=\"login\" id=\"login\">&nbsp;&nbsp;&nbsp;password <input type=\"password\" name=\"pass\" size=20>";
	echo "&nbsp;&nbsp;&nbsp;<input type=\"submit\" name=\"submitlogin\" value=\"submit\"></form></center><BR><BR>";
}
else{
//echo "<BR><BR>";
if($content[showbanner]=="yes" && $theme[1]['content_back_pos']=="Always on top"){
contentslideshow("0","no");
}
include("inc_content.php");	


echo "<img src=\"images/spacer.gif\" width=".$sitewidth." height=1>";

}
//echo "<BR>";
?>
<TR><td valign="top" align="left"
<?
if($theme['1']['content_shadow']!="" && $theme[1]['content_repeat']=="repeat"){
echo " style=\"background-image:url(images/".$theme['1']['content_shadow'].");";
if($theme[1]['content_repeat']!=""){
echo "background-repeat:".$theme[1]['content_repeat'];
}
echo "\"";
}
?>
class="content">
<?
sitefooter($sitewidth-90);

echo "</td></tr></table></td></TR></table></TD>";

if($theme[1]['rightshadow']!=""){
	echo "<TD valign=\"top\"";
		if($theme[1]['rightshadow_repeat']!=""){
		echo " background=\"images/".$theme[1]['rightshadow_repeat']."\"";
		}
	echo ">";
	if($theme[1]['rightshadow']!=""){
		echo "<img src=\"images/".$theme[1]['rightshadow']."\">";
	}
	else{
		echo "<img src=\"images/spacer.gif\" width=1>";
	}
echo "</TD>";
}
?></TR>
    <?
    if($theme[1]['footerimage']!=""){
$footerimageheight = getimagesize("images/".$theme[1]['footerimage']);
echo "<tr><td colspan=3 height=".$footerimageheight[1]." valign=\"top\"><img src=\"images/".$theme[1]['footerimage']."\"></td></tr>";
}
?>
</TABLE>
<?


}
	else{
		echo "<center><br>
<br>
<br>
<br>
<br>
<br><div style=\"color:white;font-family:tahoma,arial;font-size:22px;letter-spacing:-1\">Authentication required</div>
<br>
<form action=\"".$_SERVER['PHP_SELF']."?m=$m&s=$s\" method=\"POST\" class=\"login\" style=\"display:inline\">login <input type=\"text\" size=20 name=\"login\" id=\"login\">&nbsp;&nbsp;&nbsp;password <input type=\"password\" name=\"pass\" size=20>";
	echo "&nbsp;&nbsp;&nbsp;<input type=\"submit\" name=\"submitlogin\" value=\"submit\"></form></center>";
	
	}

//print_r($siteconfig);

?>
</center><script type="text/javascript">

  var _gaq = _gaq || [];
  _gaq.push(['_setAccount', 'UA-3129482-7']);
  _gaq.push(['_trackPageview']);

  (function() {
    var ga = document.createElement('script'); ga.type = 'text/javascript'; ga.async = true;
    ga.src = ('https:' == document.location.protocol ? 'https://ssl' : 'http://www') + '.google-analytics.com/ga.js';
    var s = document.getElementsByTagName('script')[0]; s.parentNode.insertBefore(ga, s);
  })();

</script>