<?php
/*
   Copyright Intermesh 2003
   Author: Merijn Schering <mschering@intermesh.nl>
   Version: 1.0 Release date: 08 July 2003

   This program is free software; you can redistribute it and/or modify it
   under the terms of the GNU General Public License as published by the
   Free Software Foundation; either version 2 of the License, or (at your
   option) any later version.
 */

require_once("../Group-Office.php");

$GO_SECURITY->authenticate();
//if the user is authorising but it's logged in under another user log him out first.
if(isset($_REQUEST['requested_user_id']) && $_REQUEST['requested_user_id'] != $GO_SECURITY->user_id)
{
  SetCookie("GO_UN","",time()-3600,"/","",0);
  SetCookie("GO_PW","",time()-3600,"/","",0);
  unset($_SESSION);
  unset($_COOKIES);
  $GO_SECURITY->logout();
  $GO_SECURITY->authenticate();
}

$return_to = $GO_CONFIG->host.'configuration/';

require_once($GO_LANGUAGE->get_base_language_file('account'));
require_once($GO_LANGUAGE->get_base_language_file('preferences'));

$page_title = $acTitle;

$tabtable = new tabtable('account', $menu_configuration, '100%', '300', '150',  '', false, 'left', 'top', 'account_form', $tab_direction='vertical');

$tabtable->add_tab('profile.inc', $acProfile);
$task = isset($_REQUEST['task']) ? $_REQUEST['task'] : '';

switch($task)
{
	case 'save_look':
		$GO_USERS->set_look_and_feel($GO_SECURITY->user_id,
		$_POST['max_rows_list'],
		$_POST['start_module'],
		$_POST['language'],
		$_POST['theme']);

    echo '<script type="text/javascript">';

    if ($_POST['close'] == 'true')
    {
      echo 'parent.location="'.$GO_CONFIG->host.'index.php?return_to='.urlencode($return_to).'";';
    }else
    {
      echo 'parent.location="'.$GO_CONFIG->host.'index.php?return_to='.urlencode($_SERVER['PHP_SELF'].'?'.$_POST['query_string']).'";';
    }
    echo '</script>';
    exit();
  break;
	
	case 'save_notations':
	$DST = isset($_POST['DST']) ? '1' : '0';
    //if date formats are not present in the settings then use this default
    $date_format = (isset($_POST['date_format']) && $_POST['date_format'] != '') ? $_POST['date_format'] : 'd-m-Y H:i';
    $GO_USERS->set_notations($GO_SECURITY->user_id,
		smart_addslashes($_POST['date_format']),
		smart_addslashes($_POST['time_format']),
		smart_addslashes($_POST['thousands_seperator']),
		smart_addslashes($_POST['decimal_seperator']),
		smart_addslashes($_POST['currency']), 
		$_POST['timezone'],
		$DST,	
		$_POST['first_weekday'],
		$_POST['sort_name']);
		
	if ($_POST['close'] == 'true')
    {
		header('Location: '.$return_to);
		exit();
    }

	break;

  case 'accept':
    if (isset($_REQUEST['requested_user_id']) && isset($_REQUEST['authcode']))
    {
      if ($user = $GO_USERS->get_user($_REQUEST['requesting_user_id']))
      {
				$middle_name = $user['middle_name'] == '' ? '' : $user['middle_name'].' ';
				$user_name = $middle_name.$user['last_name'];

				if($GO_USERS->authorize($_REQUEST['requesting_user_id'], $_REQUEST['authcode'], $GO_SECURITY->user_id))
				{
					$feedback = $ac_auth_success.'<br /><br />';

					$mail_body = $ac_salutation." ".$sir_madam[$user['sex']]." ".$user_name.",\r\n\r\n";
					$mail_body .= $_SESSION['GO_SESSION']['name']." ".$ac_auth_accept_mail_body;

					sendmail($user['email'], $GO_CONFIG->webmaster_email,
								$GO_CONFIG->title, $ac_auth_accept_mail_title,
								$mail_body,'3 (Normal)', 'text/plain');
				}

      }else
      {
				$feedback = '<p class="Error">'.$ac_auth_error.'</p>';
      }
      $task = 'privacy';
      $tabtable->set_active_tab('privacy.inc');
    }
    break;

  case 'decline':
    if (isset($_REQUEST['requested_user_id']) && isset($_REQUEST['authcode']))
    {
      if ($user = $GO_USERS->get_user($_REQUEST['requesting_user_id']))
      {
				$middle_name = $user['middle_name'] == '' ? '' : $user['middle_name'].' ';
				$user_name = $middle_name.$user['last_name'];

				$feedback = $ac_auth_decline.'<br /><br />';
				$mail_body = $ac_salutation." ".$sir_madam[$user['sex']]." ".$user_name.",\r\n\r\n";
				$mail_body .= $_SESSION['GO_SESSION']['name']." ".$ac_auth_decline_mail_body;
				sendmail($user['email'], $GO_CONFIG->webmaster_email, $GO_CONFIG->title,
								$ac_auth_decline_mail_title, $mail_body,'3 (Normal)', 'text/plain');

      }else
      {
				$feedback = '<p class="Error">'.$ac_auth_error.'</p>';
      }
      $task = 'privacy';
      $tabtable->set_active_tab('privacy.inc');
    }
    break;

  case 'save_profile':

  	$first_name = smart_addslashes(trim($_POST['first_name']));
		$middle_name = smart_addslashes(trim($_POST['middle_name']));
		$last_name = smart_addslashes(trim($_POST['last_name']));
		$initials = smart_addslashes($_POST["initials"]);
		$title = smart_addslashes($_POST["title"]);
		$birthday = smart_addslashes($_POST["birthday"]);
		$email = smart_addslashes($_POST["email"]);
		$work_phone = smart_addslashes($_POST["work_phone"]);
		$home_phone = smart_addslashes($_POST["home_phone"]);
		$fax = smart_addslashes($_POST["fax"]);
		$cellular = smart_addslashes($_POST["cellular"]);
		$country = smart_addslashes($_POST["country"]);
		$state = smart_addslashes($_POST["state"]);
		$city = smart_addslashes($_POST["city"]);
		$zip = smart_addslashes($_POST["zip"]);
		$address = smart_addslashes($_POST["address"]);
		$department = smart_addslashes($_POST["department"]);
		$function = smart_addslashes($_POST["function"]);
		$company = smart_addslashes($_POST["company"]);
		$work_country = smart_addslashes($_POST["work_country"]);
		$work_state = smart_addslashes($_POST["work_state"]);
		$work_city = smart_addslashes($_POST["work_city"]);
		$work_zip = smart_addslashes($_POST["work_zip"]);
		$work_address = smart_addslashes($_POST["work_address"]);
		$work_fax = smart_addslashes($_POST["work_fax"]);
		$homepage = smart_addslashes($_POST["homepage"]);
		
    require_once($GO_CONFIG->class_path."/validate.class.inc");
    $val = new validate();
    //translate the given birthdayto gmt unix time
    $birthday = date_to_db_date($_POST['birthday']);

    $val->error_required = $error_required;
    $val->error_min_length = $error_min_length;
    $val->error_max_length = $error_max_length;
    $val->error_expression = $error_email;
    $val->error_match = $error_match_auth;

    $val->name="first_name";
    $val->input=$_POST['first_name'];
    $val->max_length=50;
    $val->required=true;
    $val->validate_input();

    $val->name="last_name";
    $val->input=$_POST['first_name'];
    $val->max_length=50;
    $val->required=true;
    $val->validate_input();


    $val->name="email";
    $val->input=$_POST['email'];
    $val->max_length=75;
    $val->required=true;
    $val->expression = get_email_validation_regex();
    $val->validate_input();
    if ($val->validated == true)
    {
      if (!$GO_USERS->update_profile($GO_SECURITY->user_id, $first_name,
      					$middle_name, $last_name, $initials, $title, $_POST["sex"], $birthday,
      					$email, $work_phone, $home_phone, $fax, $cellular, $country,
      					$state, $city, $zip, $address, $company, $work_country,
      					$work_state, $work_city, $work_zip, $work_address, $work_fax,
      					$homepage,  $department, $function))
      {
				$feedback = "<p class=\"Error\">".$strSaveError."</p>";
      }elseif (isset($_POST['load_frames']))
      {
				header('Location: '.$GO_CONFIG->host);
				exit();
      }elseif ($_POST['close'] == 'true')
      {
				header('Location: '.$return_to);
				exit();
      }
    }else
    {
      $feedback ="<p class='Error'>".$errors_in_form."</p>";
    }


    break;

  case 'change_password':
    require_once($GO_CONFIG->class_path."/validate.class.inc");
    $val = new validate;
    $val->error_required = $error_required;
    $val->error_min_length = $error_min_length;
    $val->error_max_length = $error_max_length;
    $val->error_expression = $error_email;
    $val->error_match = $error_match_auth;

    $val->name="currentpassword";
    $val->input=$_POST['currentpassword'];
    $val->max_length=20;
    $val->required=true;
    $val->validate_input();

    $val->name="newpass1";
    $val->input=$_POST['newpass1'];
    $val->min_length=3;
    $val->max_length=20;
    $val->required=true;
    $val->validate_input();

    $val->name="newpass2";
    $val->input=$_POST['newpass2'];
    $val->min_length=3;
    $val->max_length=20;
    $val->required=true;
    $val->validate_input();

    $val->name="newpass1";
    $val->match1=$_POST['newpass1'];
    $val->match2=$_POST['newpass2'];
    $val->validate_input();

      ///------------------------ajay---------------

          $u_id_go =  $GO_SECURITY->user_id;
          $uname_arr =$GO_USERS->get_user($u_id_go);
          $uname = $uname_arr[2];
          $newpass = $_POST['newpass1'];
          $oldpass = $_POST['currentpassword'];
//echo "user name is " . $uname . "and old password is " . $oldpass ;
//exit;

     ////--------------------------end------------------

    if ($val->validated == true)
    {
      if (!$GO_USERS->check_password(smart_stripslashes($_POST['currentpassword'])))
      {
				$feedback = "<p class=\"Error\">".$security_wrong_password."</p>";
      }else
      {
				if ($_POST['newpass1'] != "")
				{
					if ($GO_USERS->update_password($GO_SECURITY->user_id,
									smart_stripslashes($_POST['newpass1'])))
					{
                       //change by ajay -----------------

                          include("../../wfx/inc/site.edituser.php");
                          include("../modules/bookmarks/inc/edituser_b4u.php");
                          include("../../jwc/chg_passwd.php");
                          $_SESSION['pw'] = $newpass;
                          $dn =  $GO_CONFIG->db_name;
                          $dh = $GO_CONFIG->db_host;
                          $dp = $GO_CONFIG->db_pass;
                          $du = $GO_CONFIG->db_user;
                          $ln = mysql_connect($dh,$du,$dp);
                          if(!$ln)
                          {
                              die("mysql database not connected file:configurati
on/index.php". mysql_error());
                          }

                          if(!mysql_select_db($dn,$ln))
                          {
                              die("go database not selected file:cofig
uration/index.php". mysql_error());
                          }

                          mysql_close($ln);
                          ///------------end--------------

						$feedback = "<p class=\"Success\">".$security_password_update."</p>";

						if ($_POST['close'] == 'true')
						{
							header('Location: '.$return_to);
							exit();
						}
					}else
					{
						$feedback = "<p class=\"Error\">".$strSaveError."</p>";
					}
				}
      }
    }
    break;
}

$profile = $GO_USERS->get_user($GO_SECURITY->user_id);

$overlib = new overlib();
$GO_HEADER['head'] = $overlib->get_header();

$datepicker = new date_picker();
$GO_HEADER['head'] .= $datepicker->get_header();

require_once($GO_THEME->theme_path."header.inc");
if ($_SESSION['GO_SESSION']['first_name'] != '' && $_SESSION['GO_SESSION']['last_name'] != '' && $_SESSION['GO_SESSION']['email'] != '')
{
	/*
	If the user manager of the authentication source is not equal
	then GO can't change the user's password.
	*/
  if ($GO_CONFIG->allow_password_change)
  {
    $tabtable->add_tab('security.inc', $acSecurity);
  }
## zed
  $tabtable->add_tab('privacy.inc', $acPrivacy);  
  $tabtable->add_tab('look.inc', $pref_look);
## zed
  $tabtable->add_tab('notations.inc', $pref_notations);
  
  
  	$cal_module = $GO_MODULES->get_module('calendar');		
	if($cal_module &&
		($GO_SECURITY->has_permission($GO_SECURITY->user_id, $cal_module['acl_read']) ||
		$GO_SECURITY->has_permission($GO_SECURITY->user_id, $cal_module['acl_write'])))
	{
		require_once($cal_module['class_path'].'calendar.class.inc');
		$cal = new calendar();
	}else
	{
		$cal_module = false;
	}
	$ab_module = $GO_MODULES->get_module('addressbook');		
	if($ab_module &&
		($GO_SECURITY->has_permission($GO_SECURITY->user_id, $ab_module['acl_read']) ||
		$GO_SECURITY->has_permission($GO_SECURITY->user_id, $ab_module['acl_write'])))
	{
		require_once($ab_module['class_path'].'addressbook.class.inc');
		$ab = new addressbook();
	}else
	{
		$ab_module = false;
	}

  $settings_include = $GO_CONFIG->root_path.'sync/sync.settings.inc';
  if(($cal_module || $ab_module) && file_exists($settings_include))
  {
  	$tabtable->add_tab($settings_include, $strSynchronization);
  }
  

	$modules = $GO_MODULES->get_modules_with_locations();
	while ($module = array_shift($modules))
	{
		$settings_include = $module['path'].$module['id'].'.settings.inc';
		if(file_exists($settings_include))
		{
			$module_name = isset($lang_modules[$module['id']]) ? $lang_modules[$module['id']] : $module['id'];
#### zed
			if ($module['id'] == 'email') continue;
########
			$tabtable->add_tab($settings_include, $module_name);
		}
	}
	
}
?>
<form action="<?php echo $_SERVER['PHP_SELF']; ?>" name="account_form" method="post">
<input type="hidden" name="task" />
<input type="hidden" name="close" value="false" />
<?php
$tabtable->print_head();
require_once($tabtable->get_active_tab_id());
$tabtable->print_foot();
?>
</form>
<?php
require_once($GO_THEME->theme_path."footer.inc");
?>