<?
if (!defined('CZEXWEB'))
	die('Access denied');

error_reporting(E_ALL ^ E_NOTICE ^ E_DEPRECATED ^ E_WARNING);
//error_reporting(E_ALL);

//ini_set('session.gc_maxlifetime', 2800);
//session_set_cookie_params(2800, "/");
date_default_timezone_set("America/Los_Angeles");

define('sql_insert', 1);
define('sql_update', 2);

//define('sec_deny', 128);
define('sec_none', 0);
define('sec_read', 1);
define('sec_edit', 2);
define('sec_add', 4);
define('sec_delete', 8);
define('sec_update', constant('sec_read') | constant('sec_edit') | constant('sec_add'));
define('sec_all', constant('sec_read') | constant('sec_edit') | constant('sec_add') | constant('sec_delete'));

$config['SYSTEM_USER'] = 1;
$config['COMPANY_NAME'] = 'Dong Shin Church';
$config['EMAIL_SEND_BY'] = 'webmaster@dongshincms.com';
$config['EMAIL_VIA_DEFAULT'] = array('NAME' => 'Dong Shin Church', 'EMAIL' => 'webmaster@dongshincms.com');
$config['EMAIL_DEFAULT'] = array('NAME' => 'Dong Shin Church', 'EMAIL' => 'webmaster@dongshincms.com');
$config['EMAIL_CONTACTUS'] = array('NAME' => 'Dong Shin Church', 'EMAIL' => 'webmaster@dongshincms.com');

$config['PAGE_TITLE_BASE'] = 'Dongshin CMS';
$config['PAGE_TITLE'] = '';
$config['PAGE_KEYWORDS'] = 'Dongshin CMS';
$config['PAGE_DESCRIPTION'] = 'Dongshin CMS';

$config['DB_TYPE'] = 'mysql';
$config['DB_HOST'] = 'localhost';
$config['DB_NAME'] = 'dongshincms_dev';
$config['DB_UID'] = 'dongshincms';
$config['DB_PWD'] = 'ds021801';
$config['DB_NAMESET'] = 'utf8';

$config['PROFILE_PWDMIN'] = 6;

$config['BBS_PWDMIN'] = 4;

$config['SECURITY_DEFAULT'] = array(
	'home' => constant('sec_read'),
	'signin' => constant('sec_update'),
	'signout' => constant('sec_read'),
	'upload' => constant('sec_update'),
	'forum_write' => constant('sec_none'),
	'register' => constant('sec_update'),
	'forgotpwd' => constant('sec_update'),
	'contactus' => constant('sec_update'),
	'calculator' => constant('sec_read'),
);

$config['SECURITY_MEMBER'] = array(
	'form' => constant('sec_read') | constant('sec_edit') | constant('sec_add'),
	'forum_write' => constant('sec_read') | constant('sec_edit') | constant('sec_add'),
	'forum_article' => constant('sec_read') | constant('sec_edit') | constant('sec_add') | constant('sec_delete'),
);

$config['USE_SITELOG'] = false;
?><?
	if ( !defined('CZEXWEB') ) die('Access denied');

	session_start();

	//$lifetime = 31536000; // one year
	//setcookie(session_name(),session_id(),time()+$lifetime);

	if (isset($_SESSION['HTTP_USER_AGENT'])){
		if ($_SESSION['HTTP_USER_AGENT'] != md5($_SERVER['HTTP_USER_AGENT'])){
			/* Prompt for password */
			//session_unset();
			//redirect_page('/');
			//exit;
		}
	} else {
		$_SESSION['HTTP_USER_AGENT'] = md5($_SERVER['HTTP_USER_AGENT']);
	}

	global $DB, $rqx, $rsx, $pgx;

	$DB=null;

	$rqx = array(
		'req'=>'',
		'exec'=>'',
		'act'=>'',
		'id'=>'',
		'qry'=>'',
		'filter'=>'',
		'menu_main'=>array(),
		'menu_top'=>array(),
	);

	$rsx = array(
		'ok'=>true,
		'id'=>'',
		'data'=>'',
		'code'=>0,
		'mst'=>'',  // message title
		'msg'=>'',	// message details
		'go'=>'',
		'go_type'=>0,  //0:no action, 1:go, 2:replace, 3:replace-mother-href & close current window
		'disp_type'=>0, // 0:normal, 1:off headers, 2:off framepage, 3:off headers & off framepage, 4:off_page
		'HTML'=>'',
	);

	$pgx = array(
		'no_cache'=>true,
		'title'=>'',
		'title_base'=>$config['PAGE_TITLE_BASE'],
		'keywords'=>$config['PAGE_KEYWORDS'],
		'description'=>$config['PAGE_DESCRIPTION'],
		'print'=>false,
		'extend'=>'extend_both',
		'menu_text'=>array(
			'menu_main'=>'%MENU%',
			'menu_top'=>'%MENU%',
			'menu_left'=>'%MENU%',
			'menu_right'=>'%MENU%',
			'menu_bottom'=>'%MENU%',
		),
	);

	if(profile('idx')){
		$pgx['menu_main'] = array(
			array('id'=>'home', 'text'=>'Home', 'link'=>'/'),
			array('id'=>'member_org', 'text'=>'Member & Organization', 'link'=>'/member_list.html',
				'items'=>array(
					array('id'=>'member_list', 'text'=>'Members'),
					array('id'=>'staff_list', 'text'=>'Staff Profile'),
					array('id'=>'organizations', 'text'=>'Organizations'),
					array('id'=>'attendance', 'text'=>'Attendance'),
					array('id'=>'visit_list', 'text'=>'Visiting Log'),
				),
			),
			array('id'=>'accounting', 'text'=>'Accounting',
				'items'=>array(
					array('id'=>'offering_list', 'text'=>'Offering'),
					array('id'=>'online_offering_list', 'text'=>'Online Offering'),
					array('id'=>'check_list', 'text'=>'Check Issuance'),
					array('id'=>'check_preset_list', 'text'=>'Check Preset List'),
					array('id'=>'preset_category', 'text'=>'Preset Category'),
					array('id'=>'adjustment_list', 'text'=>'Adjustment List'),
					array('id'=>'financial_statement_list', 'text'=>'Financial Statement'),
					array('id'=>'bank_cleared_check_list', 'text'=>'Bank Cleared Check'),
					array('id'=>'bank_reconciliation_list', 'text'=>'Account Reconciliation'),
				),
			),
			array('id'=>'acctbook', 'text'=>'Accout Book Management',
				'items'=>array(
					array('id'=>'acctbook_list', 'text'=>'Accout Book List'),
					array('id'=>'acctbook_close_list', 'text'=>'Accout Book Close'),
				),
			),
			array('id'=>'report', 'text'=>'Reports & Statistics',
				'items'=>array(
					array('id'=>'report_member_list', 'text'=>'Member List'),
					array('id'=>'report_offering_sm_bymember', 'text'=>'Offering Summary By Members'),
					array('id'=>'report_offering_dt_bymember', 'text'=>'Offering Detail By Members'),
					array('id'=>'report_offering_sm_byacct', 'text'=>'Offering Summary By Accounts'),
					array('id'=>'report_offering_dt_byacct', 'text'=>'Offering Detail By Accounts'),
					array('id'=>'report_check_list', 'text'=>'Check Deposit List'),
					array('id'=>'report_offering_list', 'text'=>'Offering Data List'),
					array('id'=>'report_annualoffertory', 'text'=>'Annual Offering by Member'),
					array('id'=>'report_daily_balance', 'text'=>'Daily Balance Sheet'),
				),
			),
			array('id'=>'setup', 'text'=>'Setup & Tools',
				'items'=>array(
					array('id'=>'vendor_list', 'text'=>'Vendor List'),
					array('id'=>'bank_list', 'text'=>'Bank List'),
					array('id'=>'acctchart', 'text'=>'Account Chart'),
					array('id'=>'settings', 'text'=>'Settings'),
					array('id'=>'user_list', 'text'=>'User List'),
					array('id'=>'orgduty_list', 'text'=>'Organization Duty List'),
				),
			),
			array('id'=>'help', 'text'=>'Help',
				'items'=>array(
					array('about_CZCM'=>'about_CZCM', 'text'=>'About DongShin CMS'),
				),
			),
			array('id'=>'signout', 'text'=>'Sign out', 'link'=>'/signout'),
		);
	} else {
		$pgx['menu_main'] = array(
			array('id'=>'home', 'text'=>'Home', 'link'=>'/'),
			array('id'=>'help', 'text'=>'Help', 'class'=>'help2nd',
				'items'=>array(
					array('about_CZCM'=>'about_CZCM', 'text'=>'About Crazy Church Management'),
				),
			),
		);
	}

	if(profile('idx')) {
		$tmp = array(
			array('id'=>'profile', 'text'=>'Profile'),
			array('id'=>'signout', 'text'=>'Sign out', 'link'=>'/signout'),
		);
	} else {
		$tmp = array(
			//array('id'=>'signin', 'text'=>'Sign In'),
		);
	}
	$pgx['menu_top'] = $tmp;

	$rqx['id'] = $_REQUEST['id'];

	$rqx['req'] = $_GET['l'];

	if($_GET['qstr']){
		$path_tokens = explode('/', $_GET['qstr']);
		$last_token = $path_tokens[count($path_tokens)-1];
		if($last_token==''){
			array_pop($path_tokens);
			$last_token = $path_tokens[count($path_tokens)-1];
		}
		if(preg_match("/(.+).html/i", $last_token)){
			$rqx['req'] = substr($last_token, 0, strlen($last_token)-5);
		} else if(preg_match("/(.+).pdf/i", $last_token)){
			$rqx['req'] = substr($last_token, 0, strlen($last_token)-4);
		} else {
			if(count($path_tokens)>1){
				$rqx['req'] = $path_tokens[0];
				$rqx['id'] = $path_tokens[1];
			} else {
				$rqx['req'] = $last_token;
				//$rqx['id'] = '';
			}
		}

		switch($path_tokens[0]){
			case 'getdata':
				$rqx['req'] = 'getdata';
				$rqx['mod'] = $path_tokens[1];
				break;
			case 'member':
				if(''.$path_tokens[1]!=''){
					$rqx['req'] = $path_tokens[0];
					$rqx['id'] = $path_tokens[1];
					$rqx['id_family'] = isset($path_tokens[2])?$path_tokens[2]:'';
				} else {
					$rqx['req'] = $path_tokens[0].'_list';
				}
				break;
			case 'offering':
				$rqx['issuer'] = $path_tokens[2];
				if($path_tokens[1]=='0') $rsx['go'] = '/'.$path_tokens[0].'/'.GetDateFmt(date('m/d/Y'), 'Y-m-d').($rqx['issuer']?'/'.$rqx['issuer']:'');
				break;
			case 'attendance':
				$rqx['req'] = $path_tokens[0];
				$rqx['q_yeqr'] = $path_tokens[1];
				$rqx['id'] = $path_tokens[2];
				break;
				break;
		}

		if(count($path_tokens)>=1){
			switch($path_tokens[0]){
			}
		}
	}
	/* END: .htaccess:qstr to pageinfo */

	$rqx['act'] = $_POST['a'];

	$rsx['id'] = $rqx['id'];
	if(strlen($rqx['req'])==0) $rqx['req'] = 'home';
	$rqx['exec'] = $rqx['req'];

	if(strlen($rqx["act"])>3) die();
	if(stripos($rqx["req"], '://')) die();
	if(stripos($rqx["req"], '<')) die();
	if(stripos($rqx["req"], '>')) die();
	if(stripos($rqx["req"], '"')) die();

	if(strlen($rqx["act"]))  $rsx['disp_type'] = 7;


	$dont_read_filter = false;
	/* CLEAR PREVIOUS QRYSTR
	$tags = parse_url($_SERVER['HTTP_REFERER']);
	if($tags[query]){
		parse_str($tags[query], $tags);
		if($tags[l] != $exec_l && $exec_l){
			setcookie($exec_l, '', time()-3600, "/");
			$dont_read_filter = true;
		}
	}*/

	$rqx['filter'] = array();
	if(strlen($rqx['req']) && !$dont_read_filter){
		$rqx['filter'] = string_to_array($_COOKIE[$rqx['req']]);
	}

	switch($rqx['exec']){
		case 'home':
		case 'acctbook':
		case 'acctbook_list':
		case 'acctbook_close':
		case 'acctbook_close_list':
			$rqx['body_class'] .= ' mbl';
			break;
	}

?>
<?
	if ( !defined('CZEXWEB') ) die('Access denied');

	// Include this function on your pages
	function print_gzipped_page() {
		$HTTP_ACCEPT_ENCODING = $_SERVER['HTTP_ACCEPT_ENCODING'];

		if( headers_sent() ){
			$encoding = false;
		}elseif( strpos($HTTP_ACCEPT_ENCODING, 'x-gzip') !== false ){
			$encoding = 'x-gzip';
		}elseif( strpos($HTTP_ACCEPT_ENCODING,'gzip') !== false ){
			$encoding = 'gzip';
		}else{
			$encoding = false;
		}

		if($encoding && strpos($_SERVER['HTTP_USER_AGENT'], 'Safari') !== false){
			$encoding = false;
		}

		if( $encoding ){
			$contents = ob_get_contents();
			ob_end_clean();
			header('Content-Encoding: '.$encoding);
			echo("\x1f\x8b\x08\x00\x00\x00\x00\x00");
			$size = strlen($contents);
			$contents = gzcompress($contents, 9);
			$contents = substr($contents, 0, $size);
			echo($contents);
			exit();
		}else{
			ob_end_flush();
			exit();
		}
	}


	function get_library_info($key){
		$ret = null;
		$key= strtolower(trim($key));
		switch($key){
			case 'welcomefont': $ret = array('script'=>'', 'stylesheet'=>'https://fonts.googleapis.com/css?family=Italianno'); break;
			case 'nexustree': $ret = array('script'=>'nexusTree.js', 'stylesheet'=>'nexusTree.css'); break;
			case 'jquery': $ret = array('script'=>'jquery-3.1.1.min.js', 'stylesheet'=>''); break;
			case 'underscore': $ret = array('script'=>'underscore-min.js', 'stylesheet'=>''); break;
			case 'actb': $ret = array('script'=>'actb.js', 'stylesheet'=>'actb.css'); break;
			case 'check': $ret = array('script'=>'check.js', 'stylesheet'=>'check.css'); break;
			case 'check_preset': $ret = array('script'=>'check_preset.js', 'stylesheet'=>'check_preset.css'); break;
			case 'msgbox': $ret = array('script'=>'msgbox.js', 'stylesheet'=>'msgbox.css'); break;
			case 'tabber': $ret = array('script'=>'tabber.js', 'stylesheet'=>'tabber.css'); break;
			case 'shadowbox': $ret = array('script'=>'', 'stylesheet'=>'shadowbox.css'); break;
			case 'popuplayer': $ret = array('script'=>'popuplayer.js', 'stylesheet'=>'popuplayer.css'); break;
			case 'emu_popup': $ret = array('script'=>'emu_popup.js', 'stylesheet'=>'emu_popup.css'); break;
			case 'popupimage': $ret = array('script'=>'popupimage.js', 'stylesheet'=>''); break;
			case 'file_upload': $ret = array('script'=>'file_upload.js', 'stylesheet'=>'file_upload.css'); break;
			case 'flashembed': $ret = array('script'=>'flashembed.js', 'stylesheet'=>''); break;
			case 'swfobject': $ret = array('script'=>'swfobject.js', 'stylesheet'=>''); break;
			case 'popuplayer': $ret = array('script'=>'popuplayer.js', 'stylesheet'=>'popuplayer.css'); break;
			case 'common_form': $ret = array('script'=>'common_form.js', 'stylesheet'=>''); break;
			case 'datepicker': $ret = array('script'=>'datepicker.js', 'stylesheet'=>'datepicker.css'); break;
			case 'fileattach': $ret = array('script'=>'fileattach.js', 'stylesheet'=>'fileattach.css'); break;
			case 'fckeditor': $ret = array('script'=>'fckeditor/fckeditor.js', 'stylesheet'=>''); break;
			case 'ckeditor': $ret = array('script'=>'ckeditor/ckeditor.js', 'stylesheet'=>''); break;
			case 'swapimage': $ret = array('script'=>'swapimage.js', 'stylesheet'=>''); break;
			case 'sifr': $ret = array('script'=>'sifr.js,sifr-config.js', 'stylesheet'=>'sifr.css'); break;
			case 'virtualearth': $ret = array('script'=>'https://dev.virtualearth.net/mapcontrol/mapcontrol.ashx?v=6.2&mkt=en-us', 'stylesheet'=>''); break;
			case 'yahoomap': $ret = array('script'=>'https://api.maps.yahoo.com/ajaxymap?v=3.8&appid=Tq0cnyLV34F_GEfc8iQ4.IyKuEy77A4Hth3EK5t3f1TyeZW12EC2SHPWDmMvBKdv4g--', 'stylesheet'=>''); break;
			case 'domprint': $ret = array('script'=>'', 'stylesheet'=>'domprint.css'); break;
			case 'bootstrap': $ret = array('script'=>'bootstrap.js', 'stylesheet'=>'bootstrap.css'); break;
			case 'querybuilder': $ret = array('script'=>'query-builder.standalone.js', 'stylesheet'=>'query-builder.default.css'); break;
			case 'framework7': $ret = array('script'=>'framework7.js', 'stylesheet'=>array('framework7.ios.css','framework7.ios.colors.css', 'framework7-icons.css')); break;
			case 'ztree': $ret = array('script'=>'jquery.ztree.all.js', 'stylesheet'=>array('zTreeStyle.css')); break;
			case 'jstree': $ret = array('script'=>'jstree.js', 'stylesheet'=>array('jstree/style.css')); break;
			case 'fileupload': $ret = array('script'=>'jquery.fileupload.js', 'stylesheet'=>array('jquery.fileupload.css')); break;
			case 'dropzone': $ret = array('script'=>'exif.js,dropzone.js', 'stylesheet'=>array('dropzone.css')); break;
			case 'jqplot': $ret = array('script'=>'jquery.jqplot.js,plugins/jqplot.pieRenderer.js,plugins/jqplot.enhancedPieLegendRenderer.js', 'stylesheet'=>array('jquery.jqplot.css')); break;
			case 'tablednd': $ret = array('script'=>'jquery.tablednd.js', 'stylesheet'=>''); break;
			case 'jquery.datepicker': $ret = array('script'=>'jquery.datepicker.js', 'stylesheet'=>'jquery.datepicker.css'); break;
			case 'jquery.menu': $ret = array('script'=>'jquery-menu.js', 'stylesheet'=>'jquery-menu.css'); break;

			default: $ret = array('script'=>'', 'stylesheet'=>'');
		}
		return $ret;
	}

	function read_menu($HTML_menuitem='%MENU%', $menu_array=null, $header='mm_', $menupath='', $menulevel=0){
		$HTML = '';

		$class_level = 'mv_'.$menulevel;
		if(is_array($menu_array)){
			foreach($menu_array as $menu){
				$target= ($menu['target']?' target="'.$menu['target'].'"':'');
				$use_menupath = false;
				$menu_id = $menu['id'] ? $menu['id']: 'home';
				if($menu['link']){
					$link = $menu['link'];
				} else {
					$link = $menu['id'] ? $menupath.'/'.$menu['id'].'.html': '/';
				}
				$class = $header.$menu_id.' lv_'.$menulevel;
				$class .= $menu['selected'] ? ' selected': '';
				$class .= ($HTML? '': ' first');
				$class .= ($menu['class']?' '.$menu['class']:'');
				//onclick="menu_clicked(\''.$menu_id.'\', \''.$link.'\');"
				$items_HTML = '';
				if($menu['items']){
					$items_HTML = read_menu($HTML_menuitem, $menu['items'], $header, $menupath, $menulevel+1);
				}
				if($items_HTML || !$menu['id'] || check_security($menu['id'], constant('sec_read'))){
					$menu_text = str_replace('%MENU%', htmlentities2($menu['text']), $HTML_menuitem);
					$menu_text = (!$items_HTML)? '<a href="'.$link.'"'.$target.'>'.$menu_text.'</a>': '<label class="accordion-item-toggle">'.$menu_text.'</label>';
					$HTML .= ($HTML? '<li class="sep"></li>':'<li class="sep_first"></li>')
						.'<li class="accordion-item '.$class.'">'.$menu_text
						.$items_HTML;
					$HTML .= '</li>';
				}
			}
		}

		return $HTML?'<ul class="menu '.$class_level.($menulevel?' accordion-item-content':'').'">'.$HTML.'<li class="sep_last"></li></ul>':'';
	}

	function include_menu($HTML_menuitem='%MENU%', $menu_array=null, $header='mm_'){
		echo read_menu($HTML_menuitem, $menu_array);
	}

	function include_framepage($framepage, $with_header_footer=true, $with_framepage=true){
		global $pgx;
		$framepage=$framepage?$framepage:'framepage';
		if($with_header_footer) echo read_headers($framepage);
		$pgx[content_menu_top]=read_menu($pgx[menu_text][menu_top], $pgx[menu_top], 'mt_');
		$pgx[content_menu_left]=read_menu($pgx[menu_text][menu_left], $pgx[menu_left], 'ml_');
		$pgx[content_menu_right]=read_menu($pgx[menu_text][menu_right], $pgx[menu_right], 'mr_');
		$pgx[content_menu_main]=read_menu($pgx[menu_text][menu_main], $pgx[menu_main]);
		$pgx[content_menu_bottom]=read_menu($pgx[menu_text][menu_bottom], $pgx[menu_bottom], 'mb_');
		$pgx[directories] = get_directories();
		if($with_framepage) {
			include_page($framepage.'.php');
		} else {
			echo $pgx[content_page];
		}
		if($with_header_footer) echo read_footers();
	}

	function include_page($page=''){
		global $abs_path, $rqx, $pgx;
		$page = $page? $page: $rqx['exec'];
		$subpath = '/module/';
		include $abs_path.$subpath.$page;
	}

	function exec_page($page, $fullpath=false, $alt_content=false){
		global $rqx, $pgx, $abs_path, $config;
		$contents ='';
		$real_path = '';

		if($fullpath){
			$real_path = $page;
		} else {
			$base_path = $abs_path."/module/";
			$filename = $page;
			$filename_php = $filename.".php";
			$real_path = $base_path.$filename_php;
		}

		ob_start();
		if (@include $real_path) $contents = ob_get_contents();
		else $contents = ($alt_content===false? 'Unable to open file "'.$filename.'"':$alt_content);
		ob_end_clean();
		return $contents;
	}

	function read_headers($framepage){
		global $pgx, $rqx;

		if($pgx[no_cache]){
			header("Cache-Control: no-cache"); // HTTP/1.1
			header("PRAGMA: NO-CACHE");
			header("Expires: Sun, 19 Nov 1978 05:00:00 GMT");
			header("Last-Modified: " . gmdate("D, d M Y H:i:s") . " GMT");
			header("Cache-Control: no-store, no-cache, must-revalidate");
			header("Cache-Control: post-check=0, pre-check=0", FALSE);
		}

		$HTML_styles ='';
		$HTML_scripts ='';
		if($pgx[library]){
			foreach($pgx[library] as $key){
				$item = get_library_info($key);
				if(!$pgx['domprint'] || $key=='domprint'){
					if($item[script]){
						$scripts = explode(',', $item[script]);
						foreach($scripts as $script){
							if(substr($script, 0, 5)!='http:' && substr($script, 0, 6)!='https:') $script = '/js/'.$script;
							if($script) $HTML_scripts .='<script type="text/javascript" src="'.$script.'"></script>'."\n";
						}
					}
					if($item[stylesheet]) {
						if(is_array($item[stylesheet])){
							foreach($item[stylesheet] as $style){
								if(substr($style, 0, 5)!='http:' && substr($style, 0, 6)!='https:') $style = '/css/'.$style;
								if($style) $HTML_styles .='<link rel="stylesheet" type="text/css" href="'.$style.'" />'."\n";
							}
						} else {
							$style = $item[stylesheet];
							if(substr($style, 0, 5)!='http:' && substr($style, 0, 6)!='https:') $style = '/css/'.$style;
							$HTML_styles .= '<link rel="stylesheet" type="text/css" href="'.$style.'" />'."\n";
						}
					}
				}
			}
		}

		if(!$pgx['domprint'] && !$pgx['mobile']){
			$HTML_styles = '<link rel="stylesheet" type="text/css" href="/css/base.css" />'."\n"
				.'<link rel="stylesheet" type="text/css" href="https://code.ionicframework.com/ionicons/2.0.1/css/ionicons.min.css" />'."\n"
				.$HTML_styles
				.'<link rel="stylesheet" type="text/css" media="print" href="/css/print.css" />'."\n";

			$HTML_scripts = '<script type="text/javascript" src="/js/common.js"></script>'."\n"
				.$HTML_scripts
				.'<script type="text/javascript" src="/js/common-post.js"></script>'."\n";
		}

		if($pgx['mobile']){
			$HTML_styles = '<link rel="stylesheet" type="text/css" href="/css/base-mobile.css" />'."\n"
				.$HTML_styles
				.'<link rel="stylesheet" type="text/css" href="/css/main-mobile.css" />'."\n";

			$HTML_scripts = '<script type="text/javascript" src="/js/common.js"></script>'."\n"
				.'<script type="text/javascript" src="/js/base-mobile.js"></script>'."\n"
				.$HTML_scripts
				.'<script type="text/javascript" src="/js/main-mobile.js"></script>'."\n";
		}

		$HTML = '<!DOCTYPE html>'."\n"
			.'<html lang="en-US" xml:lang="en-US">'."\n"
			.'<head>'."\n"
				.'<title>'.(strlen($pgx[title])?$pgx[title]." - ":"").$pgx[title_base].'</title>'."\n"
			    .'<meta charset="utf-8">'."\n"
			    .'<meta name="viewport" content="width=device-width, initial-scale=1, maximum-scale=1, minimum-scale=1, user-scalable=no, minimal-ui" />'."\n"
			    .'<meta name="apple-mobile-web-app-capable" content="yes" />'."\n"
				.'<meta name="mobile-web-app-capable" content="yes" />'."\n"
			    .'<meta name="apple-mobile-web-app-status-bar-style" content="black" />'."\n"
			    //.'<meta name="apple-mobile-web-app-status-bar-style" content="black-translucent" />'."\n"
			    .'<meta name="application-name" content="CMS">'
				.'<meta name="apple-mobile-web-app-title" content="CMS" />'
			    .'<link rel="icon" type="image/png" href="/image/cms_32.png" />'
				.'<link rel="apple-touch-icon" sizes="57x57" href="/image/cms_57.png?v=2" />'
				.'<link rel="apple-touch-icon" sizes="72x72" href="/image/cms_72.png?v=2" />'
				.'<link rel="apple-touch-icon" sizes="114x114" href="/image/cms_114.png?v=2" />'
				.'<link rel="apple-touch-icon" sizes="144x144" href="/image/cms_144.png?v=2" />'
			    .'<meta name="viewport" content="width=device-width, initial-scale=1, maximum-scale=1" />'
				.'<meta http-equiv="content-type" content="text/html; charset=utf-8" />'."\n"
				.'<meta http-equiv="imagetoolbar" content="no" />'."\n"
				.'<meta name="Keywords" content="'.$pgx[keywords].'" />'."\n"
				.'<meta name="Description" content="'.$pgx[description].'" />'."\n"
				.'<meta name="Generator" content="EditPlus 3.1" />'."\n"
				.'<meta name="Author" content="crazycompany.com" />'."\n"
				.$HTML_styles
			.'</head>'."\n"
			.'<body class="f_'.$framepage.' page_'.$rqx['req'].' exec_'.$rqx['exec'].($rqx['body_class']?' '.$rqx['body_class']:'').'">'."\n"
			.$HTML_scripts
			.'<div id="frame_main" class="'.$pgx[extend].($pgx['print']?' print':'').'">';
		return $HTML;
	}

	function read_footers(){
		return "\n</div></body></html>\n";
	}

	function read_document($file){
		global $abs_path;
		ob_start();
		if (@include $abs_path."/doc/".$file) $contents = ob_get_contents();
		else $contents = ($err_off)? '':'Unable to open template file "'.$file.'"';
		ob_end_clean();
		return $contents;
	}

	function template ($file, $vars=array(), $eval=1, $err_off=false) {
		global $abs_path;

		// htmlspecialchars($utf8_string, ENT_COMPAT, 'UTF-8')

		ob_start();
		if (@include $abs_path."/template/".$file) $contents = ob_get_contents();
		else $contents = ($err_off)? '':'Unable to open template file "'.$file.'"';
		ob_end_clean();

		$_NOW_ = date('m/d/Y');
		foreach ($vars as $key => $val) ${$key} = $val;

		for ($i=0; $i<count($hide); $i++) {
			if (!$contents = @preg_replace('/(.*)(<!--\/\/ Start Hide '.$hide[$i].' \/\/-->)(.*)(<!--\/\/ End Hide '.$hide[$i].' \/\/-->)(.*)/sim', '\1\5', $contents)) {
				$contents = ($hide[$i]!='')?str_replace("Start Hide ".$hide[$i]." //-->", "", $contents):$contents;
				$contents = ($hide[$i]!='')?str_replace("<!--// End Hide ".$hide[$i], "", $contents):$contents;
			}
		}

		if($contents){
			if ($eval == 1) {
				if (!@eval("return \$out = \"".addslashes($contents)."\";")) $out = "Error parsing template $file";
			}
		}

		else $out = $contents;

		return stripslashes(stripslashes($out));
	}


	function extension ($type) {
		global $abs_path;

		$the_directory = @opendir ($abs_path . '/sys/extension/' . $type . '/');
		$i = 0;
		$out = array ();

		while ($FILE_NAME = @readdir ($the_directory)) {
			$filenamea = @explode ('.', $FILE_NAME);
			$temp = @count ($filenamea) - 1;
			$extension = @strtolower ($filenamea[$temp]);
			if ($extension == 'php') {
				$success = include_once $abs_path . '/sys/extension/' . $type . '/' . $FILE_NAME;
				$out[$i]['file_name'] = $FILE_NAME;
				if ($success) {
					$out[$i][class_name]='ups';
					$out[$i][module_name]='ups';
				}
				/*
				$out[$i]['file_name'] = $FILE_NAME;
				$out[$i]['module_name'] = ($success ? $ADDON_NAME : 'Error');
				$out[$i]['module_fullname'] = ($success ? $ADDON_FULLNAME : 'Error');
				$out[$i]['module_type'] = ($success ? $ADDON_TYPE : 'Error');
				$out[$i]['module_ver'] = ($success ? $ADDON_VERSION : 'Error');
				$out[$i]['class_name'] = ($success ? $CLASS_NAME : 'Error');
				$out[$i]['enabled'] = ($success ? $enabled[value] : 0);
				$out[$i]['installed'] = ($success ? (0 < $rows ? 1 : 0) : 0); */
				++$i;
			}
		}

		@closedir ($the_directory);
		return $out;
	}

	function add_library($library_list){
		global $pgx;
		$items = explode(',', $library_list);
		foreach($items as $item){
			$item = trim($item);
			if($item) $pgx[library][] = $item;
		}
	}

	function remove_library($library_list){
		global $pgx;
		$items = explode(',', $library_list);
		foreach($items as $item){
			$item = trim($item);
			if($item) {
				$i=0;
				while($i<count($pgx[library])){
					if($pgx[library][$i]==$item){
						array_splice($pgx[library], $i, 1);
					} else {
						$i++;
					}
				}
			}
		}
	}

	function add_directory($text, $link){
		global $pgx;
		$pgx[directory][] = array('text'=>$text, 'link'=>$link);
	}

	function get_directories($sep_text=' > '){
		global $pgx;
		if($pgx[directory] && count($pgx[directory])>0){
			$cnt = count($pgx[directory]);
			$directory = '<a href="/"><span class="item">Home</span></a>';
			for($i=0; $i<$cnt; $i++){
				$item = '<span class="item">'.$pgx[directory][$i][text].'</span>';
				if($i < $cnt-1){
					$item = '<a href="'.$pgx[directory][$i]['link'].'">'.$item.'</a>';
				}
				$directory .= htmlentities2($sep_text).$item;
			}
		} else {
			$directory = '<span class="item">Home</span>';
		}
		return '<span class="directory_begin"></span>'.$directory;
	}

    function md5_get_rnd_iv($iv_len){
		$iv = '';
		while ($iv_len-- > 0) {
			$iv .= chr(mt_rand() & 0xff);
		}
		return $iv;
    }

    function md5_encrypt($plain_text, $iv_len = 16){
		global $md5_sitekey;
		$plain_text .= "\x13";
		$n = strlen($plain_text);
		if ($n % 16) $plain_text .= str_repeat("\0", 16 - ($n % 16));
		$i = 0;
		//$enc_text = md5_get_rnd_iv($iv_len);
		//$iv = substr($md5_sitekey ^ $enc_text, 0, 512);
		$iv = substr($md5_sitekey, 0, 512);
		while ($i < $n) {
			$block = substr($plain_text, $i, 16) ^ pack('H*', md5($iv));
			$enc_text .= $block;
			$iv = substr($block . $iv, 0, 512) ^ $md5_sitekey;
			$i += 16;
		}
		return base64_encode($enc_text);
    }

    function md5_decrypt($enc_text, $iv_len = 16){
		global $md5_sitekey;
		$enc_text = base64_decode($enc_text);
		$n = strlen($enc_text);
		$i = $iv_len;
		$plain_text = '';
		$iv = substr($md5_sitekey ^ substr($enc_text, 0, $iv_len), 0, 512);
		while ($i < $n) {
			$block = substr($enc_text, $i, 16);
			$plain_text .= $block ^ pack('H*', md5($iv));
			$iv = substr($block . $iv, 0, 512) ^ $md5_sitekey;
			$i += 16;
		}
		return preg_replace('/\\x13\\x00*$/', '', $plain_text);
    }

	function md5_enc($data){
		global $md5_sitekey;
		$enc = new encdec();
		return $enc->encrypt($data,$md5_sitekey);
	}

	function md5_dec($data){
		global $md5_sitekey;
		$enc = new encdec();
		return $enc->decrypt($data,$md5_sitekey);
	}
	function GetAccountCloseDate($code='ACTCL') {
		$ret = null;
		$SQL = "select DATE_ADD(Date(max(dtClose)), INTERVAL 0 DAY)  as dtClose "
			. "from tbAcctClose where cTBCD=".CSS($code);
		$rs = db_select($SQL);
		if(!$rs) die($SQL);
		if($row = db_fetch($rs)) {
			$ret = getTime($row['dtClose']);
		}
		return $ret?$ret:getTime('1980-01-01');
	}
	function IsClosed($date, $code='ACTCL') {
		global $pgx;
		$date = getTime($date);
		$ret = false;
		if($date){
			if(!$pgx[acd]){
				$pgx[acd]=GetAccountCloseDate($code);
			}
			$ret = $date<$pgx[acd];
		}
		return $ret;
	}
	function GetNewAnonymous($dtPost) {
		$SQL = "select max(nAnonymous) as nLastAnonymous "
			. "from tbCheck "
			. "where dtPost=".CSD($dtPost)." ";
		$rs = db_select($SQL);
		if(!$rs) die($SQL);
		if($row = db_fetch($rs)) {
			return (CSN($row['nLastAnonymous'])+1);
		} else {
			return 1;
		}
	}

	function GetSettings($key_list=null) {
		$values = array();
		$SQL = "select cCode, sValue  "
			. "from tbSetting "
			. ($key_list?"where cCode in (".CSSM($key_list).") ":'');
		$rs = db_select($SQL);
		if(!$rs) die($SQL);
		while($row = db_fetch($rs)) {
			$values[$row[cCode]] = $row[sValue];
		}

		return $values;
	}

	function get_next_offer_no() {
		$ret = 1;
		$key = "OFFER_NO_LAST";

		db_connect(true);
		$SQL = "update tbSetting set sValue=cast((cast(sValue as UNSIGNED)+1) as char) where cCode=".CSS($key);
		$result = db_execute($SQL);
		if(!$result) die(db_error().$SQL);
		$SQL = "select sValue from tbSetting where cCode=".CSS($key);
		$rs = db_select($SQL);
		if(!$rs) die($SQL);
		if($row = db_fetch($rs)) $ret = CSN($row['sValue']);
		db_close(true);
		return $ret;
	}


	// History Object Functions

	function update_status_obj($iHtr,$cTBCD,$iLink,$sCodeList,$cCode,$cCodeDefault=''){
		global $DB;

		$result = true;
		$update = false;
		if(substr($sCodeList,0,1)=='@'){
			$item = explode(':', substr($sCodeList,1));
			$sCodeList = 'select cCode from tbCode where sTable='.CSS($item[0]).' and sField='.CSS($item[1]);
		} else {
			$sCodeList = CSSM($sCodeList);
		}
		$SQL = "update tbHtrLink set tmExpire=now() "
			. "where cCode<>".CSS($cCode)." and tmExpire is Null "
			. "and cCode in (".$sCodeList.") and cTBCD=".CSS($cTBCD)." and iLink=".$iLink;
		$result = db_execute($SQL);
		if(!$result) die($SQL);
		if($result){
			$SQL = "select * from tbHtrLink  "
				. "where cCode=".CSS($cCode)." and tmExpire is Null and cTBCD=".CSS($cTBCD)." and iLink=".$iLink;
			$result = db_select($SQL);
			if(!$result) die($SQL);
			if(db_fetch($result)){
			} else {
				$update=true;
			}
		}
		if($result && $update){
			if($cCode!=$cCodeDefault){
				$field_names = 'iHtr,cTBCD,iLink,cCode,tmExpire';
				$field_values = array($iHtr,CSS($cTBCD),$iLink,CSS($cCode),'NULL');
				$SQL = get_sql_string('tbHtrLink', $field_names, $field_values, constant('sql_insert'));
				if($result = db_execute($SQL, true)){
					$result = $DB[id_new];
				}
			}
		}
		return $result;
	}

	function create_history_obj($sName,$cAct,$LHTR='',$sub_list=null){
		global $DB, $rsx;
		$id_htr = 0;

		$result = true;
		$nErrCode = 0;
		$arr_TBIF = array();

		if(strlen($LHTR)) {
			// cTBCD-1:iLink-1:iLHTR-1|cTBCD-2:iLink-2:iLHTR-2|...
			$items = explode("|", $LHTR);

			foreach($items as $item){
				// cTBCD:iLink:iLHTR
				$subitems = explode(":", $item);
				if(count($subitems)>=3){
					$cTBCD = $subitems[0];
					$iLink = CSN($subitems[1]);
					$iLHTR = CSN($subitems[2]);
					$cNEWCODE = (count($subitems)>=4)?$subitems[3]:'';
					if(strlen($cTBCD)>0 && $iLink>0 && ($iLHTR>0 || $iLHTR==0)){
						if(strlen($cNEWCODE)) $arr_TBIF[] = array('cTBCD'=>$cTBCD, 'iLink'=>$iLink, 'cCode'=>$cNEWCODE, 'skip_D'=>false);
						$SQL = "select max(iHtr) as iLastHtr, "
							."max(case when cCode='D' and tmExpire is null then iHtr end) as iHtrD from tbHtrLink "
							."where cCode in ('C', 'M', 'D') and cTBCD=".CSS($subitems[0])." and iLink=".CSN($subitems[1]);
						$result = db_select($SQL);
						if($row = db_fetch($result)){
							$result = (!$row['iLastHtr'] || $row['iLastHtr'] == CSN($subitems[2])) ? true: false;
							if($cNEWCODE=='D' && CSN($row['iHtrD'])!=0) $arr_TBIF[count($arr_TBIF)-1]['skip_D'] = true;
						}
					}
				}
				if(!$result) break;
			}
		}

		if($result){
			$field_names = 'sName,cAct,iRecBy';
			$field_values = array(CSS($sName),CSS($cAct),profile("idx"));
			$SQL = get_sql_string('tbHtr', $field_names, $field_values, constant('sql_insert'));
			if($result = db_execute($SQL , true)){
				$id_htr = $DB[id_new];
			}
		} else {
			$nErrCode = -3;
		}
		if($result){
			if($sub_list){
				$field_names = 'iHtr,iTo,sToNo';
				foreach($sub_list as $item){
					$field_values = array($id_htr,CSN($item[iTo]),CSS($item[sToNo]));
					$SQL = get_sql_string('tbHtrTo', $field_names, $field_values, constant('sql_insert'));
					$result = db_execute($SQL);
					if(!$result){
						$nErrCode = -5;
						break;
					}
				}
			}
		}

		if($result && count($arr_TBIF)){
			$field_names = 'iLHTR';
			$field_names_h = 'iHtr,cTBCD,iLink,cCode,tmExpire';
			foreach($arr_TBIF as $item){
				if($item['skip_D']==false){
					$field_values = array($id_htr);
					$SQL = get_sql_string(GetTableNameByCode($item['cTBCD']), $field_names, $field_values, constant('sql_update'), "iRec=".$item[iLink]);
					$result = db_execute($SQL);
					if(!$result){
						$nErrCode = -6;
						break;
					}

					$field_values = array($id_htr,CSS($item[cTBCD]),$item[iLink],CSS($item[cCode]),'NULL');
					$SQL = get_sql_string('tbHtrLink', $field_names_h, $field_values, constant('sql_insert'));
					$result = db_execute($SQL);
					if(!$result){
						$rsx['msg'] = db_error();
						$nErrCode = -7;
						break;
					}
				}
			}
		}

		if($result){
			$DB['id_htr']= $id_htr;
		} else {
			$rsx['code'] = 40000 + $nErrCode;
			//$rsx['msg'] = 'This record modified by somebody.';
		}

		return ($result) ? $id_htr: 0;
	}

	function add_history_link($cCode, $cTBCD, $iLink, $iHtr=0){
		global $DB;
		if($iHtr==0) $iHtr = $DB['id_htr'];
		$DB['htr_group'][] = array('cCode'=>$cCode, 'cTBCD'=>$cTBCD, 'iLink'=>$iLink, 'iHtr'=>$iHtr);
	}

	function set_history_links($link_arr, $iHtr=0){
		global $DB;

		$result=true;

		if($link_arr && count($link_arr)>0){
			// $item { 'cCode', 'cTBCD', 'iLink' }
			if(!$iHtr) $iHtr = $DB['id_htr'];
			$field_names = 'iHtr,cTBCD,iLink,cCode,tmExpire';
			foreach($link_arr as $item){
				$field_values = array($iHtr,CSS($item[cTBCD]),$item[iLink],CSS($item[cCode]),'NULL');
				$SQL = get_sql_string('tbHtrLink', $field_names, $field_values, constant('sql_insert'));
				$result = db_execute($SQL);
				if(!$result) break;
			}
		}
		return $result;
	}

	function set_history_link($cCode, $cTBCD, $iLink, $iHtr=0){
		return set_history_links(array('cCode'=>$cCode, 'cTBCD'=>$cTBCD, 'iLink'=>$iLink), $iHtr);
	}

	function set_history_recby($iRecBy,$iHtr=0){
		$result=false;
		if(!$iHtr) $iHtr = $DB['id_htr'];
		if($iHtr){
			$SQL = "update tbHtr set "
				. "iRecBy=".$iRecBy." "
				. "where iRec=".$iHtr;
			$result = db_execute($SQL);
		}
		return $result;
	}

	function delete_objlist($sName, $cTBCD_default, $item_array){
		$id = 0;
		$iLHTR = 0;
		$check_list = '';
		$result = true;
		$id_list = '';
		if(!is_array($item_array)) $item_array = explode('|', $item_array);
		for($i=0; $result && $i<count($item_array); $i++){
			$skip = false;
			$cTBCD = $cTBCD_default;
			$item_elm = explode(":",$item_array[$i]);
			switch(count($item_elm)){
				case 3:
					$cTBCD = $item_elm[0];
					$id = CSN($item_elm[1]);
					$iLHTR = CSN($item_elm[2]);
					break;
				case 2:
					$id = CSN($item_elm[0]);
					$iLHTR = CSN($item_elm[1]);
					break;
				case 1:
					$id = CSN($item_elm[0]);
					$iLHTR = 0;
					$result = false;
					break;
				default:
					$id = 0;
					$iLHTR = 0;
					$result = false;
					$skip = true;
					break;
			}
			if(!$skip) {
				$check_list .= '|'.$cTBCD.':'.$id.':'.$iLHTR.':'.'D';
				if($id) $id_list .= ','.$id;
			}
		}

		$check_list = substr($check_list,1);

		$id_list = substr($id_list,1);
		if(strlen($check_list)){
			$result = create_history_obj($sName, 'D', $check_list);
		}

		return $result;
	}
/*  End : History Object functions */


/*  Begin : Entity Object functions */

	function create_entity_obj($tbName,$cClass,$sName,$bAutoUpdate=true,$id=0){
		global $DB;
		$field_config = array('#iRec'=>0, 'cClass'=>$cClass, 'uidEntity'=>'%%GUID%%',
			'uidOwner'=>'', 'uidSystem'=>'', 'uidCheck'=>'', 'sName'=>$sName, 'iHtrUpdate'=>$DB['id_htr']);
		$field_struct = get_sql_struct($field_config, '#iRec');
		$SQL = get_action_sql($field_struct, 'tbEntity', array(), '', 0, true);
		if($result = db_execute($SQL , true)){
			$id_entity = $DB[id_new];
			if($bAutoUpdate && $id>0){
				$SQL = "update ".$tbName." set iEntity=".$id_entity." where iRec=".$id;
				$result = db_execute($SQL);
			}
		}

		return ($result) ? $id_entity: 0;
	}

/*  End : Entity Object functions */


	// attach files
	function exec_upload_files(){
		global $DB, $rsx;
		$result = true;

		$ret = array();

		foreach($_FILES as $key => $file){
			$nErrCode = $file["error"];

			if($nErrCode == 4) continue;    //UPLOAD_ERR_NO_FILE

			if ($nErrCode){
				$result = false;
				$rsx['msg'] = 'upload error ('.$nErrCode.')';
				break;
			}

			// $file["name"], $file["type"] "image/gif":"image/jpeg":"image/pjpeg", $file["size"], $file["tmp_name"]

			if($result) $result = db_connect(true);

			if($result){
				$SQL = "insert into tbDatafile (sFilename, sContentType, nSize, sLKU, iLHTR) values ("
					.CSS($file["name"]).", "
					.CSS($file["type"]).", "
					.CSN($file["size"]).", "
					.CSS('').", "
					.CSN($DB['id_htr']).")";
				if($result = db_execute($SQL , true)){
					$iDatafile = $DB[id_new];
					if(!$iDatafile) {
						$result = false;
						$rsx['msg'] = 'db update error - cannot retrieve new file id';
						break;
					}
				}

				if($result){
					//$abs_path."/"
					$sPath = GetDataFilePathByID($iDatafile);
					if(!is_dir($sPath)) mkdir($sPath);
					if(!move_uploaded_file($file["tmp_name"], $sPath."/".GetDataFilename($iDatafile))){
						$result = false;
						$rsx['msg'] = 'tmp file copy error - '.$file["tmp_name"].'-'.$sPath;
						break;
					}
				}

				if($result){
					$ret[$key] = array('id'=>$iDatafile, 'filename'=>$file["name"], 'type'=>$file["type"], 'size'=>$file["size"]);
				}
			}
		}

		return ($result? $ret: false);
	}

	function upload_files_to_attach_files($files){
		$attach = array();
		foreach($files as $file){
			$sPath = GetDataFilePathByID($file[id])."/".GetDataFilename($file[id]);
			$attach[] = array('path'=>$sPath, 'id'=>$file["id"], 'filename'=>$file["filename"], 'type'=>$file["type"], 'size'=>$file["size"]);
		}
		return $attach;
	}

	function link_upload_files_to_table($files, $cTBCD, $iLink, $auto_convert=false, $clear_previous_type=''){
		global $DB, $rsx;

		$result = true;

		$data = array();
		if($auto_convert){
			foreach($files as $key=>$file){
				$data[$key] = array('iDataFile'=>$file[id], 'nOrder'=>$file[nOrder], 'nPrimary'=>$file[nPrimary], 'cCode'=>$file[cCode], 'sTitle'=>$file[sTitle], 'cType'=>$file[cType], 'iDataFileSub'=>$file[iDataFileSub], 'cCodeSub'=>$file[cCodeSub]);
			}
		} else {
			$data = $files;
		}

		if($clear_previous_type){
			if($iLink){
				$SQL = "delete from tbDataLink where cTBCD=".CSS($cTBCD)." and iLink=".$iLink." and cType=".CSS($clear_previous_type);
				if(!($result = db_execute($SQL))) {
					$result = 0;
					$rsx['msg'] = 'db update error - '.db_error();
				}
			}
		}

		if($result){
			//iRec, iLHTR, iDataFile, cTBCD, iLink, nOrder, nPrimary, cCode, sTitle, cType, iDataFileSub, cCodeSub
			$field_names = 'iLHTR,iDataFile,cTBCD,iLink,nOrder,nPrimary,cCode,sTitle,cType,iDataFileSub,cCodeSub';
			foreach($files as $file){
				$field_values = array(CSN($DB['id_htr']),CSN($file[iDataFile]),CSS($cTBCD),CSN($iLink),CSN($file[nOrder]),CSN($file[nPrimary]),
					CSS($file[cCode]),CSS($file[sTitle]),CSS($file[cType]),CSN($file[iDataFileSub]),CSS($file[cCodeSub]));
				$SQL = get_sql_string('tbDataLink', $field_names, $field_values, constant('sql_insert'));
				if(!($result = db_execute($SQL))) {
					$rsx['msg'] = 'Could not update datafilelink file'.db_error();
					break;
				}
			}
		}

		return $result;
	}

		/*
		   0:id : ignore
		   1:name : ignore
		   2:date : ignore
		   3:size : ignore
		   4:staus : ignore

		   5:snapshot : ignore

	   6:title    : FUP_title_(index)
	   7:code     : txtFilePCode_(index)
	   8:subcode  : txtFilePCodeSub_(index)
		*/


	function link_upload_files_to_table_rawdata($rawdata, $cTBCD, $iLink, $type='P'){
		$files = array();
		$item = is_array($rawdata)?$rawdata:explode("\x7f", $rawdata);
		for($i=0; $i < count($item); $i++) {
			$item[$i] = trim($item[$i]);
			if(strlen($item[$i])){
				$item_attr = explode("\x08", $item[$i]);
				$files[] = array('iDataFile'=>CSN($item_attr[0]), 'nOrder'=>$i, 'nPrimary'=>($i==0)?1:0, 'cType'=>$type,
					'iDataFileSub'=>CSN($item_attr[5]), 'sTitle'=>($item_attr[6]?$item_attr[6]:''),
					'cCode'=>($item_attr[7]?$item_attr[7]:''), 'cCodeSub'=>($item_attr[8]?$item_attr[8]:''));
			}
		}

		return link_upload_files_to_table($files, $cTBCD, $iLink, false, $type);
	}


		/*
		   0:id : ignore
		   1:name : ignore
		   2:date : ignore
		   3:size : ignore
		   4:staus : ignore
		   5:snapshot : ignore

	   6:title    : FUP_title_(index)
	   7:code     : txtFilePCode_(index)
	   8:subcode  : txtFilePCodeSub_(index)
		*/

	function get_attach_files($TBCD, $iLink, $cType='', $status='uploaded'){
		$ret = array();
		$SQL = "select t1.iRec as iDataLink, t1.iDataFile, t2.sfilename, t3.tsRec, t2.nSize, t1.iDataFileSub, "
			."t1.sTitle, t1.cCode, t1.cCodeSub, t1.cType "
			."from tbDataLink t1 "
			."inner join tbDatafile t2 on t1.iDatafile=t2.iRec "
			."left join tbHtr t3 on t1.iLHTR=t3.iRec "
			."where t1.cTBCD=".CSS($TBCD)." and t1.cCode='' and t1.iLink=".$iLink." ".($cType?" and t1.cType=".CSS($cType)." ":"")
			."order by t1.cType, t1.cCode, t1.nPrimary desc, t1.nOrder";
		$rs	= db_select($SQL);
		if(!$rs) die(db_error().$SQL);
		if($rs){
			$row = db_fetch($rs);
			$filelist_data = '';
			$filelist_html = '';
			while($row) {
				$cur_type = $row['cType'];
				$filelist_data .= "\x7f".$row["iDataFile"]."\x08".$row["sfilename"]
					."\x08".GetDateFmt($row["tsRec"])."\x08".$row["nSize"]."\x08".$status."\x08".$row["iDataFileSub"]
					."\x08".$row["sTitle"]."\x08".$row["cCode"]."\x08".$row["cCodeSub"];
				$filelist_html .= '<li><label>'.$row["sfilename"].'</label><var><a href="'
					.get_datafile_path($row["iDataFile"],$row["sfilename"]).'">Download</a></var></li>';
				$row = db_fetch($rs);
				if(!$row || $cur_type != $row['cType']){
					$ret[$cur_type]= array('data'=>substr($filelist_data, 1), 'html'=>$filelist_html);
				}
			}
		}
		return $ret;
	}

	function get_next_checkno($bank){
		$ret_data = null;

		if(CSN($bank)){
			$SQL = "select max(cast((case when t1.sCheckNo='' then '0' else t1.sCheckNo end) as UNSIGNED)) as M_sCheckNo "
				."from tbCheck t1 "
				."where t1.cIO='O' and t1.iBank=".CSN($bank);
			$rs = db_select($SQL);
			if($row = db_fetch($rs)) {
				$ret_data = CSN($row['M_sCheckNo']);
				$ret_data ++;
			}
		}

		return $ret_data;
	}

	function get_next_checknos($ids){
		$checknos = null;

		if($ids){
			$checknos = array();
			$SQL = "select iBank, max(cast((case when t1.sCheckNo='' then '0' else t1.sCheckNo end) as UNSIGNED)) as M_sCheckNo "
				."from tbCheck t1 "
				."where t1.cIO='O' and t1.iBank in ("
					."select iBank from tbCheck where iRec in (".$ids.") "
					.") "
				."group by t1.iBank";
			$rs = db_select($SQL);
			if($row = db_fetch($rs)) {
				$checknos[$row['iBank']] = CSN($row['M_sCheckNo']);
			}
		}

		return $checknos;
	}


	function renderReconItemsHTML(&$rs, $rowP){
		$HTML = '';
		$amountParent = 0;
		if($rowP) {
			$category = $rowP['nCategory'];
			$level = $rowP['nLevel'];
			do {
				$item_id = $rowP['item_id'];
				$name = $rowP['sName'];
				$desc = $rowP['sDesc'];
				if(!$desc) {
					$desc = $name;
					$name = null;
				}
				if($name) $name = ' name="'.$name.'"';
				$dupType = $rowP['nDuplicate'];
				$multiple = '';
				$sub = $rowP['cSubItem'];
				$subname = $rowP['sSubItem'];
				$subdesc = $rowP['dtSubItem'];
				$sign = $rowP['cSign'];
				$html_sign = $sign?' sign="'.$sign.'"':'';
				if($subdesc) $desc = $subdesc;
				if($dupType && $code == $rowP['cCode']) $multiple = ' mp="1"';
				$code = $rowP['cCode'];
				$parent = $rowP['cParent'];
				$childCnt = $rowP['nChildCnt'];
				$linkId = $rowP['iLink']; // linked check id
				$html_linkId = $linkId?' linkId="'.$linkId.'"':'';
				$linkDesc = $rowP['sLinkDesc'];
				$html_linkDesc = $linkDesc?'<dfn>'.$linkDesc.'</dfn>':'';
				$amountEx = $rowP['cyAmountEx'];
				$amount = $rowP['cyAmount']?$rowP['cyAmount']:$amountEx;
				if(!$amount) $amount = 0;
				$row = db_fetch($rs);
				$valueSign = $amount>0?"+":($amount<0?"-":"");
				$rowType = 0;
				if($childCnt){
					if($row){
						if($level>$row['nLevel'] || ($parent == $row['cParent'] && $code != $row['cCode'])){
							$rowType = 2;
						} else if($level<$row['nLevel']){
							$rowType = 1;
						}
					} else {
						$rowType = 2;
					}
				}
				switch(true){
					case $rowType > 0:
						if($rowType==2){
							$items = array(
								'HTML' => '',
								'amount' => 0,
								'row' => $row
							);
						} else {
							$items = renderReconItemsHTML($rs, $row);
						}
						$amount = $items['amount'];
						$HTML .= '<li xid="'.$item_id.'" code="'.$code.'" sub="'.$sub.'" subname="'.$subname.'" dup="'.$dupType.'"'.$html_sign.'><label>'.$desc.'<span></span></label><ul>'
							.$items['HTML']
							.'</ul>'
							.'<div class="total"><label>Total '.$desc.'</label><var valueSign="'.$valueSign.'">'.CSNF($amount,2,'0.00').'</var></div>'
							.'</li>';
						$row = $items['row'];
						break;
					case !$row || $level>$row['nLevel']:
					case $level==$row['nLevel']:
						$attrs = '';
						if($amountEx != null) $attrs .= ' amountex="'.$amountEx.'"';
						$HTML .= '<li xid="'.$item_id.'" code="'.$code.'" sub="'.$sub.'" subname="'.$subname.'" dup="'.$dupType.'"'.$html_sign.$multiple.$html_linkId.$attrs.'>'
							.'<label'.$name.'>'.$desc.'<span></span>'.$html_linkDesc.'</label><var valueSign="'.$valueSign.'">'.CSNF($amount, 2, '0.00').'</var></li>';
						//if($level>$row['nLevel']) $amount = 0 ;
						break;
				}
				$amountParent += ($sign=='-'?-1:($sign=='='?0:1)) * $amount;
				$rowP = $row;
			} while($row && $level==$row['nLevel'] && $row['nCategory']==$category);
		}
		return array(
			'HTML' => $HTML,
			'amount' => $amountParent,
			'row' => $row
		);
	}


	function getFinancialStatementDataByDate($date1, $date2){
		$dateY = GetDateFmt($date1, 'Y');
		$date0 = '01/01/'.$dateY;
		$settings = GetSettings("");
		$GL_INCOME = $settings[GL_INCOME];
		$GL_EXPENSE = $settings[GL_EXPENSE];
		$GL_ADJUSTMENT = $settings[GL_ADJUSTMENT];
		$NOGL_DIFFERENCE = "차액";
		$NOGL_PREV = "전기 이월금";
		$NOGL_NEXT = "차기 이월금";

		$days = (strtotime($date2)-strtotime($date1)) / 24 / 3600;
		$week_total = 52;
		$week_begin = CSN(GetDateFmt($date1, 'w'));
		$week_gap = 0; // $form[week_begin]?($form[week_begin]-7):0;
		$week_count = floor(($days+$week_gap+1) / 7);
		$sundays_count = getSundays($date1,$date2);
		$month_total = 12;
		$month_count = CSN(GetDateFmt($date2, 'm'))-CSN(GetDateFmt($date1, 'm'))+1;

		$max_level = 0;

		// privat functions
		$get_item_data =
			function ($id, $code, $desc, $cnt, $type, $budgetY, $amount, $amountY, $memo='') use ($week_count, $sundays_count, $week_total, $month_count, $month_total)  {
				$budget = 0;
				$budget = $budgetY * $sundays_count / $week_total;

				$data = array(
					'id'=>$id,
					'code'=>$code,
					'desc'=>$desc,
					'cnt'=>$cnt,
					'type'=>$type,
					'budget'=>($budget?$budget:0),
					'budgetY'=>($budgetY?$budgetY:0),
					'amount'=>($amount?$amount:0),
					'amountY'=>($amountY?$amountY:0),
					'memo'=>$memo
				);
				return $data;
            };

		$bind_item =
      function (&$rs, $row, $type=null, $level=0) use (&$max_level, &$bind_item, $get_item_data) {
				if(!$row) return null;

				$level++;
				if($level>$max_level) $max_level = $level;

				$id = $row[iRec];
				$data = $get_item_data($id, $row[cGLCode], $row[sDesc], 1, $type, $row[cyBudget], $row[cyAmount], $row[cyAmountY], null);
				$row_n = db_fetch($rs);
				$items = array();
				$idx=0;
				while($row_n && $id==$row_n[iParent]){
					$rawdata = $bind_item($rs, $row_n, $type, $level);
					$itemdata = $rawdata[item];
					$items[$idx] = $itemdata;
					$data[budget] += $itemdata[budget];
					$data[budgetY] += $itemdata[budgetY];
					$data[amount] += $itemdata[amount];
					$data[amountY] += $itemdata[amountY];
					$data[cnt] += $itemdata[cnt];
					$row_n = $rawdata[row_n];
					$idx++;
				}
				$data[items] = $items;
				return array('item'=>$data, 'row_n'=>$row_n, 'level'=>$level);
      };

		$SQL = "select "
			."t1.cyIncome, t1.cyExpense, t1.cyAdjust, t2.cyPrevious, (t1.cyIncome-t1.cyExpense) as cyDifference, "
			."(t1.cyIncome-t1.cyExpense+t1.cyAdjust+coalesce(t2.cyPrevious, 0)) as cyBalance, "
			."t3.cyIncomeY, t3.cyExpenseY, t3.cyAdjustY, t4.cyPreviousY, (t3.cyIncomeY-t3.cyExpenseY) as cyDifferenceY, "
			."(t3.cyIncomeY-t3.cyExpenseY+t3.cyAdjustY+coalesce(t4.cyPreviousY, 0)) as cyBalanceY, "
			."cyIncomeB, cyExpenseB "
			."from "
				."(select sum(case cIO when 'I' then cyAmount else 0 end) as cyIncome, "
				."sum(case when cIO='O' and not (cType='C' and sCheckNo='') then cyAmount else 0 end) as cyExpense, "
				."sum(case cIO when 'A' then cyAmount else 0 end) as cyAdjust "
				."from tbCheck where dtVoid is null and cType<>'P' and iCCS=0 "
					."and dtPost>=".CSD($date1)." and dtPost<=".CSDL($date2).") t1 "
			."cross join "
				."(select sum(case cIO when 'O' then -cyAmount else cyAmount end) as cyPrevious "
				."from tbCheck where dtVoid is null and cType<>'P' and iCCS=0 and dtPost<".CSD($date1).") t2 "
			."cross join "
				."(select sum(case cIO when 'I' then cyAmount else 0 end) as cyIncomeY, "
				."sum(case cIO when 'O' then cyAmount else 0 end) as cyExpenseY, "
				."sum(case cIO when 'A' then cyAmount else 0 end) as cyAdjustY "
				."from tbCheck where dtVoid is null and cType<>'P' and iCCS=0 "
					."and dtPost>=".CSD($date0)." and dtPost<=".CSDL($date2).") t3 "
			."cross join "
				."(select sum(case cIO when 'O' then -cyAmount else cyAmount end) as cyPreviousY "
				."from tbCheck where dtVoid is null and cType<>'P' and iCCS=0 and dtPost<".CSD($date0).") t4 "
			."cross join "
				."(select sum(x2.cyAmount) as cyIncomeB "
				."from tbAcctChart x1 "
				."inner join tbAcctChart x2 on x1.nYear=x2.nYear and x1.nLft<=x2.nLft and x1.nRgt>=x2.nRgt "
				."where x1.cGLCode=".CSS($GL_INCOME)." and x1.nYear=".CSN($dateY).") t5 "
			."cross join "
				."(select sum(x2.cyAmount) as cyExpenseB "
				."from tbAcctChart x1 "
				."inner join tbAcctChart x2 on x1.nYear=x2.nYear and x1.nLft<=x2.nLft and x1.nRgt>=x2.nRgt "
				."where x1.cGLCode=".CSS($GL_EXPENSE)." and x1.nYear=".CSN($dateY).") t6 ";

		if(!($rs = db_select($SQL))){
			die( db_error().$SQL);
		}
		$row = db_fetch($rs);
		$treedata0 = array(
			'items'=>array(
				$get_item_data(0, $GL_INCOME, 'GL_INCOME', 1, 'I', $row[cyIncomeB], $row[cyIncome], $row[cyIncomeY], $sundays_count),
				$get_item_data(0, $GL_EXPENSE, 'GL_EXPENSE', 1, 'E', $row[cyExpenseB], $row[cyExpense], $row[cyExpenseY], $sundays_count),
				$get_item_data(0, $NOGL_DIFFERENCE, 'NOGL_DIFFERENCE', 1, 'DIF', 0, $row[cyDifference], $row[cyDifferenceY]),
				$get_item_data(0, $GL_ADJUSTMENT, 'GL_ADJUSTMENT', 1, 'A', 0, $row[cyAdjust], $row[cyAdjustY]),
				$get_item_data(0, $NOGL_PREV, 'NOGL_PREV', 1, 'PREV', 0, $row[cyPrevious], $row[cyPreviousY]),
				$get_item_data(0, $NOGL_NEXT, 'NOGL_NEXT', 1, 'NEXT', 0, $row[cyBalance], $row[cyBalanceY])
			),
			'row_n'=>null,
			'level'=>0,
			'max_level'=>1,
			'code'=>'root'
		);

		$SQL = "select t1.iRec as iRoot, "
			."t2.iRec, t2.cGLCode, t2.sDesc, t2.nPrintGroup, "
			."t6.iRec as iParent, t2.cyAmount as cyBudget, t3.cyIncome, t3.cyExpense, t4.cyIncomeY, t4.cyExpenseY, "
			."t3.cyIncome as cyAmount, t4.cyIncomeY as cyAmountY "
			."from tbAcctChart t1 "
			."inner join tbAcctChart t2 on t1.nYear=t2.nYear and t1.nLft<=t2.nLft and t1.nRgt>=t2.nRgt "
			."left join ("
				."select x1.iRec as iGL, max(x2.nLft) as nParentLft "
				."from tbAcctChart x1 "
				."inner join tbAcctChart x2 on x1.nYear=x2.nYear and x1.nLft>x2.nLft and x1.nLft<x2.nRgt "
				."group by x1.iRec) t5 on t2.iRec=t5.iGL "
			."left join tbAcctChart t6 on t1.nYear=t6.nYear and t5.nParentLft=t6.nLft "
			."left join "
				."(select x2.iGL, sum(case x1.cIO when 'I' then x2.cyAmount else 0 end) as cyIncome, "
				."sum(case x1.cIO when 'O' then x2.cyAmount else 0 end) as cyExpense "
				."from tbCheck x1 "
				."inner join tbCheckItem x2 on x1.iRec=x2.iCheck "
					."where x1.dtVoid is null and x1.cType<>'P' "
					."and x1.dtPost>=".CSD($date1)." and x1.dtPost<=".CSDL($date2)." "
				."group by x2.iGL) t3 on t2.iRec=t3.iGL "
			."left join "
				."(select x2.iGL, sum(case x1.cIO when 'I' then x2.cyAmount else 0 end) as cyIncomeY, "
				."sum(case x1.cIO when 'O' then x2.cyAmount else 0 end) as cyExpenseY "
				."from tbCheck x1 "
				."inner join tbCheckItem x2 on x1.iRec=x2.iCheck "
					."where x1.dtVoid is null and x1.cType<>'P' "
					."and x1.dtPost<=".CSDL($date2)." "
				."group by x2.iGL) t4 on t2.iRec=t4.iGL "
			."where t1.cGLCode=".CSS($GL_INCOME)." and t1.nYear=".CSN($dateY)." "
			."order by t2.nLft";
		if(!($rs_tree = db_select($SQL))){
			die( db_error().$SQL);
		}

		$SQL = "select t1.iRec as iRoot, "
			."t2.iRec, t2.cGLCode, t2.sDesc, "
			."t6.iRec as iParent, t2.cyAmount as cyBudget, t3.cyIncome, t3.cyExpense, t4.cyIncomeY, t4.cyExpenseY, "
			."t3.cyExpense as cyAmount, t4.cyExpenseY as cyAmountY "
			."from tbAcctChart t1 "
			."inner join tbAcctChart t2 on t1.nYear=t2.nYear and t1.nLft<=t2.nLft and t1.nRgt>=t2.nRgt "
			."left join ("
				."select x1.iRec as iGL, max(x2.nLft) as nParentLft "
				."from tbAcctChart x1 "
				."inner join tbAcctChart x2 on x1.nYear=x2.nYear and x1.nLft>x2.nLft and x1.nLft<x2.nRgt "
				."group by x1.iRec) t5 on t2.iRec=t5.iGL "
			."left join tbAcctChart t6 on t1.nYear=t6.nYear and t5.nParentLft=t6.nLft "
			."left join "
				."(select x2.iGL, sum(case x1.cIO when 'O' then x2.cyAmount else 0 end) as cyIncome, "
				."sum(case x1.cIO when 'O' then x2.cyAmount else 0 end) as cyExpense "
				."from tbCheck x1 "
				."inner join tbCheckItem x2 on x1.iRec=x2.iCheck "
					."where x1.dtVoid is null and x1.cType<>'P' "
					."and x1.dtPost>=".CSD($date1)." and x1.dtPost<=".CSDL($date2)." "
				."group by x2.iGL) t3 on t2.iRec=t3.iGL "
			."left join "
				."(select x2.iGL, sum(case x1.cIO when 'O' then x2.cyAmount else 0 end) as cyIncomeY, "
				."sum(case x1.cIO when 'O' then x2.cyAmount else 0 end) as cyExpenseY "
				."from tbCheck x1 "
				."inner join tbCheckItem x2 on x1.iRec=x2.iCheck "
					."where x1.dtVoid is null and x1.cType<>'P' "
					."and x1.dtPost<=".CSDL($date2)." "
				."group by x2.iGL) t4 on t2.iRec=t4.iGL "
			."where t1.cGLCode=".CSS($GL_EXPENSE)." and t1.nYear=".CSN($dateY)." "
			."order by t2.nLft";
		if(!($rs_tree2 = db_select($SQL))){
			die( db_error().$SQL);
		}

		$max_level = 0;
		$treedata1 = null;
		$row = db_fetch($rs_tree);
		if($row) {
			$rawdata = $bind_item($rs_tree, $row, 'I');
			$treedata1 = $rawdata[item];
			$treedata1[max_level] = $max_level;
		}

		$max_level = 0;
		$treedata2 = null;
		$row = db_fetch($rs_tree2);
		if($row) {
			$rawdata = $bind_item($rs_tree2, $row, 'E');
			$treedata2 = $rawdata[item];
			$treedata2[max_level] = $max_level;
		}

		return array(
			'dateOptions'=>array(
				'days'=>$days,
				'week_total'=>$week_total,
				'week_begin'=>$week_begin,
				'week_gap'=>$week_gap,
				'week_count'=>$week_count,
				'sundays_count'=>$sundays_count,
				'month_total'=>$month_total,
				'month_count'=>$month_count
			),
			'summary'=>$treedata0,
			'income'=>$treedata1,
			'expense'=>$treedata2
		);
	}


	function getFinancialStatementDataById($id){
		$settings = GetSettings("");
		$GL_INCOME = $settings[GL_INCOME];
		$GL_EXPENSE = $settings[GL_EXPENSE];
		$GL_ADJUSTMENT = $settings[GL_ADJUSTMENT];
		$NOGL_DIFFERENCE = "차액";
		$NOGL_PREV = "전기 이월금";
		$NOGL_NEXT = "차기 이월금";

		$SQL = "select t1.dtPost, t1.dtClose, t1.iCloseBy, t1.dtDateFrom, t1.dtDateTo, t1.sRemark, t2.iRec, t2.nType, t2.iParent, "
			."t2.cCode, t2.sDesc, t2.cyYearBudget, t2.cyBudget, t2.cyActual, t2.cyActualYTD, t2.sMemo, t3.nPrintGroup "
			."from tbFinancialStatement t1 "
			."inner join tbFinancialStatementItem t2 on t1.iRec=t2.iFinancialStatement "
			."left join tbAcctChart t3 on t2.cCode = t3.cGLCode and year(t1.dtDateFrom) = t3.nYear "
			."where t1.iRec=".$id." "
			."order by t2.nType, t2.iRec";

		if(!($rs = db_select($SQL))){
			die( db_error().$SQL);
		}
		$row = db_fetch($rs);

		$memo = $row[sRemark];
		$closeDate = GetDateFmt($row[dtClose]);
		$closeBy = CSN($row[iCloseBy]);
		$date1 = GetDateFmt($row[dtDateFrom]);
		$date2 = GetDateFmt($row[dtDateTo]);
		$dateY = GetDateFmt($date1, 'Y');
		$date0 = '01/01/'.$dateY;
		$days = (strtotime($date2)-strtotime($date1)) / 24 / 3600;
		$week_total = 52;
		$week_begin = CSN(GetDateFmt($date1, 'w'));
		$week_gap = 0; // $form[week_begin]?($form[week_begin]-7):0;
		$week_count = floor(($days+$week_gap+1) / 7);
		$sundays_count = getSundays($date1,$date2);
		$month_total = 12;
		$month_count = CSN(GetDateFmt($date2, 'm'))-CSN(GetDateFmt($date1, 'm'))+1;

		$max_level = 0;

		$bind_item =
      function (&$rs, $row, $type=null, $level=0, $is_group=false) use (&$max_level, &$bind_item, $get_item_data) {
				if(!$row) return null;

				$level++;
				if($level>$max_level) $max_level = $level;

				$id = $row[iRec];
				$data = array(
					'id'=>$id,
					'code'=>$row[cCode],
					'desc'=>$row[sDesc],
					'cnt'=>1,
					'cntgroup'=>1,
					'type'=>$type,
					'group'=>$row[nPrintGroup],
					'budget'=>$row[cyBudget],
					'budgetY'=>$row[cyYearBudget],
					'amount'=>$row[cyActual],
					'amountY'=>$row[cyActualYTD],
					'memo'=>$row[sMemo]
				);
				if($row[nPrintGroup]) $is_group = true;
				$row_n = db_fetch($rs);
				$items = array();
				$idx=0;
				while($row_n && $row_n[iParent] && $id==$row_n[iParent]){
					$rawdata = $bind_item($rs, $row_n, $type, $level, $is_group);
					$itemdata = $rawdata[item];
					$items[$idx] = $itemdata;
					//$data[budget] += $itemdata[budget];
					//$data[budgetY] += $itemdata[budgetY];
					//$data[amount] += $itemdata[amount];
					//$data[amountY] += $itemdata[amountY];
					$data[cntgroup] += $is_group? 0: $itemdata[cntgroup];
					$data[cnt] += $itemdata[cnt];
					$row_n = $rawdata[row_n];
					$idx++;
				}
				$data[items] = $items;
				return array('item'=>$data, 'row_n'=>$row_n, 'level'=>$level);
      };

		$treedata = array();
		while($row) {
			$max_level = 0;
			$type = $row[nType];
			$rawdata = $bind_item($rs, $row);
			$treedata[$type] = $rawdata[item];
			$treedata[$type][max_level] = $max_level;
			$row = $rawdata[row_n];
		}

    return array(
					'dateOptions'=>array(
						'days'=>$days,
						'week_total'=>$week_total,
						'week_begin'=>$week_begin,
						'week_gap'=>$week_gap,
						'week_count'=>$week_count,
						'sundays_count'=>$sundays_count,
						'month_total'=>$month_total,
						'month_count'=>$month_count
					),
        	'summary'=>$treedata[0],
        	'income'=>$treedata[1],
        	'expense'=>$treedata[2],
        	'memo'=>$memo,
        	'date1'=>$date1,
        	'date2'=>$date2,
        	'closeDate'=>$closeDate,
        	'closeBy'=>$closeBy
        );
	}

	function getOrgAcctDataByGLCode($year, $code) {
		$bind_item =
	            function (&$rs, $row, $expand = false) use (&$bind_item) {
					if(!$row) return null;

					$data = array(
						'text' => $row[cGLCode]=='지출'?'계정합계':$row[cGLCode],
						'id' => $row[iRec],
						'code' => $row[cGLCode],
						'budget_income' => $row[budget_income],
						'budget_expense' => $row[budget_expense],
						'budget_balance' => $row[budget_balance],
						'income' => $row[income],
						'expense' => $row[expense],
						'balance' => $row[balance],
						'state' => array ('opened' => $expand )
					);
					$row_n = db_fetch($rs);
					$items = array();
					while($row_n && $row_n[nLft] > $row[nLft] && $row_n[nLft] < $row[nRgt] ){
						$rawdata = $bind_item($rs, $row_n);
						$itemdata = $rawdata[item];
						$items[] = $itemdata;
						$row_n = $rawdata[row_n];
					}
					if(!count($items)) $data[type] ='file';
					$data[children] = $items;
					return array('item'=>$data, 'row_n'=>$row_n);
	            };

		$SQL = "select t2.cGLCode, t2.iRec, t2.nLft, t2.nRgt, "
				."sum(t1.cyAmount) as budget, "
				."sum(t3.income) as income, "
				."sum(t3.expense) as expense, "
				."sum(t3.balance) as balance "
			."from `tbAcctChart` t1 "
			."inner join `tbAcctChart` t2 on t1.nYear=t2.nYear and t2.nLft between t1.nLft and t1.nRgt "
			."left join ("
				."select x1.iGL, sum(case x1.cIO when 'I' then x1.cyAmount end) as income, "
				."sum(case x1.cIO when 'O' then -x1.cyAmount end) as expense, "
				."sum(x1.cyAmount) as balance "
				."from `tbOrgAcct` x1 "
				."where x1.dtVoid is null and year(x1.dtPay)=".CSN($year)." "
				."group by x1.iGL "
			.") t3 on t3.iGL=t2.iRec "
			."where t1.nYear=".CSN($year)." and t1.cGLCode=".CSS($code)." "
			."group by t2.cGLCode, t2.iRec, t2.nLft, t2.nRgt "
			."order by t2.nLft";
		$rs = db_select($SQL, true);
		$data = array();
		while($row = db_fetch($rs)){
			$rawdata = $bind_item($rs, $row);
			$data[] = $rawdata[item];
		}
		return $data;
	}

	function updateFSD($treedata, $id, $type, $level=0, $pid=0) {
		global $DB, $rsx;

		$rid = 0;
		$ret = true;
		$level++;
		$update_type = constant('sql_insert');
		$condition = "";
		$field_names = 'iFinancialStatement,iParent,nType,cCode,sDesc,cyYearBudget,cyBudget,cyActual,cyActualYTD,sMemo';
		$field_values = array($id, CSN($pid), CSN($type), CSS($treedata[code]), CSS($treedata[desc]),
			CSF($treedata[budgetY]), CSF($treedata[budget]), CSF($treedata[amount]), CSF($treedata[amountY]), CSS($treedata[memo]));
		$SQL = get_sql_string('tbFinancialStatementItem', $field_names, $field_values, $update_type, $condition);
		$rsx['ok'] = db_execute($SQL, true);
		if ($rsx['ok']) {
			$rid = $DB[id_new];
		} else {
			$rsx['msg'] = $SQL.'could not update financial statement item data';
			$ret = false;
		}

		if($ret) {
			for($i=0;$i<count($treedata[items]);$i++){
				$ret = updateFSD($treedata[items][$i], $id, $type, $level, $rid);
				if(!$ret) break;
			}
		}

		return $ret;
	};

?>