<?

//Translation-Array, used in translate-function, defined below
$en = array(
	"Willkommen"=>"Welcome",
	"Profil bearbeiten"=>"Edit Profile",
	"Profil löschen"=>"Delete Profile",
	"Profil ansehen"=>"View Profile",
	"Profil exportieren"=>"Export Profile",
	"Profil anzeigen"=>"Show Profile",
	"Profil verstecken"=>"Hide Profile",
	"Benutzername"=>"Username",
	"Passwort"=>"Password",
	"Ausbildung"=>"Education",
	"Zertifizierungen"=>"Certificates",
	"Jahrgang"=>"Year of birth",
	"nicht Verfügbar"=>"not available",
	"sofort Verfügbar"=>"available",
	"auf Anfrage"=>"on request",
	"Verfügbarkeit"=>"Availability",
	"Startseite"=>"Startpage",
	"Neuer Consultant"=>"New consultant",
	"Benutzerverwaltung"=>"User management",
	"Projektverwaltung"=>"Project management",
	"Projekt Management"=>"Project management",
	"Skill-Gruppen Management"=>"Skill-Group Management",
	"Anreden Management"=>"Salutations Management",
	"Abschlüsse Management"=>"Educations Management",
	"Positionen Management"=>"Positions Management",
	"Zertifizierungen Management"=>"Certificate Management",
	"Logs einsehen"=>"view Logs",
	"Copyright 2011 andagon GmbH - Alle hier befindlichen Informationen sind als vertraulich zu verstehen und dürfen nicht ohne unsere Zustimmung vervielfältigt oder veröffentlicht werden."=>"Copyright 2011 andagon GmbH - All information of this website have to be considered confidential and are not permitted to be copied or published in any way without our agreement.",
	"Online-Anfrage"=>"Online enquiry",
	"Anfragen"=>"Request consultant",
	"jeder consultant"=>"any consultant",
	"Ihr Name"=>"Your name",
	"Firma"=>"Company",
	"E-Mail Adresse"=>"E-Mail address",
	"Rufnummer"=>"Phone number",
	"Angefragter Consultant"=>"Requested Consultant",
	"Sicherheitscode"=>"Security code",
	"Ihre Anfrage"=>"Your request",
	"Geben Sie einen korrekten Namen ein"=>"Please enter a correct name",
	"Geben Sie eine korrekte EMail adresse an, oder keine"=>"Please enter a valid E-Mail, or none",
	"Geben Sie eine gültige Rufnummer ein"=>"please enter a valid phone number",
	"Bitte geben Sie den Code auf dem Bild ein"=>"please enter the code from the image",
	"Vielen Dank, Ihre Nachricht wurde gesendet und wird von uns bearbeitet."=>"Thank you, your message has been sent and will be processed soon.",
	"Sie werden in Kürze auf die Startseite geleitet"=>"You will be redirected to the homepage",
	"Schwerpunkt Management"=>"Focus Management",
	"Schwerpunkte"=>"Focus",
	"Branchen"=>"Industries",
	"Projektübersicht"=>"Projects",
	"Folgende Profile sind zur Zeit ausgeblendet und müssen überprüft werden:"=>"The following profiles are unpublished at the time and need to be checked",
	"Exportieren"=>"Export",
	"Details"=>"Details",
	"Falsche Logindaten!"=>"Wrong login credentials!",
	"Ihr Zugang wurde deaktiviert, bitte wenden Sie sich an Ihren Ansprechpartner!"=>"Your account has been disabled, please refer to your contact person."
	);
	
	
//to translate things, that may not be translated by the database.
//if a word cannot be found in the language-array, then the original input is also the output
function translate($word)
{
global $en;
	
	if ($_SESSION['lang']=='en')
	{
		if (isset($en[$word]))
			{
			//echo "1".$en[$word];
			return htmlspecialchars($en[$word], ENT_QUOTES);
			}
		else
			{
			//echo "2".$word;
			return htmlspecialchars($word, ENT_QUOTES);
			}
	}
	else
	{
		//echo "3".$word;
		return htmlspecialchars($word, ENT_QUOTES);
	}
}

//Session-Handling
session_start(); 

	//apply language change, because the _SESSION-var is the one that is used everywhere
	if (isset($_GET['lang']))
	{
		$_SESSION['lang']=$_GET['lang'];
	}
	
	
	if (isset($_SESSION['LAST_ACTIVITY']) && (time() - $_SESSION['LAST_ACTIVITY'] > 7200)) {
    // last request was more than 2 hours ago
    session_destroy();   // destroy session data in storage
    session_unset();     // unset $_SESSION variable for the runtime
	header('Location: login.php');
	exit;
	}
	$_SESSION['LAST_ACTIVITY'] = time(); // update last activity time stamp
	
	if (!isset($_SESSION['CREATED'])) {
		$_SESSION['CREATED'] = time();
	} else if (time() - $_SESSION['CREATED'] > 7200) {
    // session started more than 30 minates ago
		session_regenerate_id(true);    // change session ID for the current session an invalidate old session ID
		$_SESSION['CREATED'] = time();  // update creation time
	}


	

require_once 'include/dao.class.php';

	//check if the current session is logged in
	if(!isset($_SESSION['userid']))
	{	
		//if not, find the browser default language, and initialise userid to redirect to login
		$_SESSION['userid'] = -1;
		$_SESSION['lang'] = substr($_SERVER['HTTP_ACCEPT_LANGUAGE'], 0, 2);
	}
	
	//if not already on login (yes, the scriptheader is also used there) then redirect to login.
	if(($_SESSION['userid'] == -1) & (substr($_SERVER["SCRIPT_NAME"],strrpos($_SERVER["SCRIPT_NAME"],"/")+1)!="login.php"))
	{	
		//store the querystring, actually not used at the time
		$newQS = "";
		foreach ($_GET as $key=>$value)
		{
			if ($key != "lang")
				$newQS.=$key."=".$value."&";
		}
		//echo "will redirect to: ".'Location: login.php?forward='.$_SERVER['PHP_SELF']."%99".str_replace('?','%99',$newQS);
		//header('Location: login.php?forward='.$_SERVER['PHP_SELF']."%99".str_replace('?','%99',$newQS));
		header('Location: login.php');
	}

//put a log-message to the database
function writeLog($message,$detailmessage="")
{
	$dao = null;
	$dao = new dao();
	$dao->connect();
	$sql = "INSERT INTO logs (program,user,timestamp,message,detailmessage,ip) VALUES ('".$_SERVER['PHP_SELF']."','".$_SESSION['fullname']."','".date("Y-m-d H:i")."','".$message."','".$detailmessage."','".getenv('REMOTE_ADDR')."')";
	$dao->execSQL($sql);
	$dao->disconnect();
}		
		
?>
<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1" />
<title>andagon GmbH Consultant-Portal</title>
<link rel="stylesheet" href="css/style.css" type="text/css" />
<link rel="stylesheet" href="tinyeditor/style.css" type="text/css" />
<script type="text/javascript" src="tinyeditor/tinyeditor.js"></script>

<script type="text/javascript" src="include/jquery.js"></script>
<script type="text/javascript" src="jqueries/generic.js"></script>
<script type="text/javascript" src="jqueries/<? echo basename($_SERVER["SCRIPT_NAME"],".php");?>.js"></script>
<!--try to find a jquery rule for this page in jqueries folder and include it-->


<script language="javascript" type="text/javascript">

function findPosX(obj) {
    var curleft = 0;
    if (obj.offsetParent) {
        while (1) {
            curleft+=obj.offsetLeft;
            if (!obj.offsetParent) {
                break;
            }
            obj=obj.offsetParent;
        }
    } else if (obj.x) {
        curleft+=obj.x;
    }
    return curleft;
}

function findPosY(obj) {
    var curtop = 0;
    if (obj.offsetParent) {
        while (1) {
            curtop+=obj.offsetTop;
            if (!obj.offsetParent) {
                break;
            }
            obj=obj.offsetParent;
        }
    } else if (obj.y) {
        curtop+=obj.y;
    }
    return curtop;
}


function hidediv() {
if (document.getElementById) { // DOM3 = IE5, NS6
//document.getElementById('hideShow').style.visibility = 'hidden';
document.getElementById('hideShow').className = 'hide';
}
}

function showdiv() {
if (document.getElementById) { // DOM3 = IE5, NS6
var myDiv = document.getElementById("adminbutton");  
x = findPosX(myDiv);
y = findPosY(myDiv);
//alert( x + "," + y);  

/*left = document.getElementById('adminbutton').style.left;
height = document.getElementById('adminbutton').style.height;
top = document.getElementById('adminbutton').style.top + height;*/

popup = document.getElementById('hideShow');
popup.className = 'show';
popup.style.position="absolute";
popup.style.left=(x+20) + "px";
popup.style.top=(y+30)+"px";
}
}
</script> 

</head>

<body>
<div id="header" class="header">
&nbsp;
</div>
<div id="topmenu" class="topmenu">

<?
//Build the Top-Menu

	//Start-seite link, if not already there	
	//if (substr($_SERVER["SCRIPT_NAME"],strrpos($_SERVER["SCRIPT_NAME"],"/")+1)!="index.php")
	echo "<a href=\"index.php\">".translate("Startseite")."</a>";
	
	if ($_SESSION['admin']==1 | $_SESSION['editconsultants']==1)
		echo "<a href=\"editprofile.php?action=add\">".translate("Neuer Consultant")."</a>";
		
	if ($_SESSION['admin']==1)
		echo "<a href=\"editusers.php\">".translate("Benutzerverwaltung")."</a>";

	if ($_SESSION['admin']==1)
	{
		echo "<a href=\"admin.php\" id=\"adminbutton\"  onmouseover=\"javascript:showdiv()\" onmouseout=\"javascript:hidediv()\">&darr;&nbsp;Administration</a>";

		echo "<a href=\"editprojects.php\">".translate("Projektverwaltung")."</a>";
	}
			
	
	
if ($_SESSION['userid']!=-1)
	{
	echo "<a href=\"request.php\">".translate("Online-Anfrage")."</a>";
	echo "<a href=\"login.php?action=logout\"><strong>Logout</strong></a>";
	
	}
	
	//Store querystring in order to reuse it with a language-change below
	$newQS = "";
	foreach ($_GET as $key=>$value)
	{
		if ($key != "lang")
			$newQS.=$key."=".$value."&";
	}
	
	//language switch buttons
	//if ($_SESSION['lang']=='en')
		echo "<a href=\"".$_SERVER["PHP_SELF"]."?lang=de&".$newQS."\"><img src=\"images/de_flag.gif\" border=\"0\" alt=\"Deutsch\" /></a>";
	//else
		echo "<a href=\"".$_SERVER["PHP_SELF"]."?lang=en&".$newQS."\"><img src=\"images/en_flag.gif\" border=\"0\" alt=\"English\"/></a>";
?>

</div>

<div id="hideShow" class="hide" onmouseover="javascript:showdiv()" onmouseout="javascript:hidediv()">
<?
echo "<a href=\"editusers.php\" class=\"simple\">".translate("Benutzerverwaltung")."</a>";
echo "<a href=\"editskillgroups.php\" class=\"simple\">".translate("Skill-Gruppen Management")."</a>";
echo "<a href=\"editskills.php\" class=\"simple\">".translate("Skill Management")."</a>";
echo "<a href=\"editprojects.php\" class=\"simple\">".translate("Projektverwaltung")."</a>";
echo "<a href=\"editsalutations.php\" class=\"simple\">".translate("Anreden Management")."</a>";
echo "<a href=\"editeducations.php\" class=\"simple\">".translate("Abschlüsse Management")."</a>";
echo "<a href=\"editpositions.php\" class=\"simple\">".translate("Positionen Management")."</a>";
echo "<a href=\"editcertificates.php\" class=\"simple\">".translate("Zertifizierungen Management")."</a>";
echo "<a href=\"editfocuses.php\" class=\"simple\">".translate("Schwerpunkt Management")."</a>";
echo "<a href=\"editexportroles.php\" class=\"simple\">".translate("Exportrollen Management")."</a>";
echo "<a href=\"backup.php\" class=\"simple\">".translate("Datenbank sichern")."</a>";
echo "<a href=\"viewlog.php\" class=\"simple\">".translate("Logs einsehen")."</a>";
?>
</div>

<div id="main" class="main">


<div id="resultlist" class="resultlist"><div id="consultant" class="consultant"><a class="nostyle" name="top"> </a>