<?
/*
    HPACC Generic Site configuration
*/

    define("SITENAME" , "hulladekenergia");          // The name of the site MUST be unique because of security
    define("SITETITLE", "Hullladékból Energia");       // base title of pages
    define("SITEURL"  , "www.hulladekbol-energia.hu"); // Site url
    define("SITESIGN" , "Web Team");      // sign for letters
    define("SITEMAIL" , "info@hulladekbol-energia.hu");  // mail address for letters

// database settings for unified sql motor
    define("DBTYPE", "MY");			// Database type (MY|PG|HPA)
    define("DBNAME", "mvaenergia");		// Database name
    define("DBUSER", "mvaendb"); 		// Database user
    define("DBCODE", "7F9SIeHVQ");	// Database password

// security
    define("SESSION_SAVEPATH", "/home/inno/hullen/sessions"); // session savepath

// looks
    define("DEFAULTTHEME", "gray"); // Theme to use

    define("MODULE_WIDTH"      , "100"); // the width in unit that a module can use
    define("MODULE_WIDTH_UNIT" , "%"); // unit to use for module width
    define("MODULE_HEIGHT_UNIT", "px"); // unit to use for module height

// package
    define("VARIANTS","DEV,GEN,MOD,SKELETONS,TOOL,VIR,WEB,WEBADM"); // variants of packages - package sources - coma separated

// extras
    define("USEBOXES"  , true);   // wether to use sideboxes
    define("MENUHIDER" , true);  // wether to have MENUHIDER
    define("loginpage" , "");    // where to put user if login is correnct on login.php and not in profile mode, default to welcome page of login.php
    define("USEDEVNOTE", true); // system wide development warnings

    define("MOBILE_SUPPORT", true); // support mobile detection and layout

    define("USEREXTRAS", ""); // extra tables to use with sec_users eg: personal,webmail,vir,calendar
?><?
if (DBTYPE=="MY")
    require_once("include/db_my.php");
elseif (DBTYPE=="PG")
    require_once("include/db_pg.php");
?><?
    if (SESSION_SAVEPATH!="")
	session_save_path(SESSION_SAVEPATH.(SITEMODE?"_pub":""));
    session_start();
    if ($_SESSION["SITENAME"] != SITENAME.(SITEMODE?"_site":"")){
	session_unset(); session_destroy(); session_start();
	$_SESSION["SITENAME"] = SITENAME.(SITEMODE?"_site":"");
    }

    $SEC_BI_GROUPS = array(
	"authenticated"   , "bejelentkezettek",
	"notauthenticated", "nem bejelentkezettek",
	"anybody"	  , "bárki",
	"nobody"	  , "senki",
	);

// ---------

    function authenticate($cname,$ccode){

	$ip_login_count = hpa_field("sec_log", "count(id)"," 
		    cdate>'" . date("Y-m-d H:i:s",time() - 3600) . "' and location='".hpa_escape_string($_SERVER["REMOTE_ADDR"])."'".
		    " and (description='password fail' or description='card fail' or description='user fail' or description='workstation fail')");
//		    " group by location");
	if ($ip_login_count > 5){
	    if ($_SESSION["chk"] != $_REQUEST["chk"]){
		$_SESSION["auth"] = false;
		security_log($cname, "robot chk fail"); return "robot fail";
	    } else {
		security_log($cname, "robot fail"); return "robot fail";
	    }
	}


	$cname = hpa_escape_string($cname);
	if ( $t = hpa_fields("sec_users", "*", "username='".$cname."' and state=1") ){
	    if ($t["passwd"] == md5($ccode)){ // pass ok
		reload_userdata($t);
		if (!SITEMODE && canaccess("[webuser]", true)){ // lock out webusers from backend
		    $_SESSION["auth"]     = false;
		    $_SESSION["userdata"] = false;
		    security_log($cname, "off limits"); return "off limits";
		}
		security_log($cname, "login success"); return "ok";
	    } else { // password not ok
		$_SESSION["auth"] = false;
		security_log($cname, "password fail"); return "password fail";
	    }
	} else { // user not found
	    $_SESSION["auth"] = false;
	    security_log($cname, "user fail"); return "user not found";
	}
    }

// ---------

    function authenticate_barcard($barcard){
	if (hpa_field("vir_access", "loginmode", "idstring='".hpa_escape_string($_COOKIE["DEXTOP_".SITENAME."_ID"])."'") != "barcard")
	    return "loginmode error";
	if ($t = hpa_fields("sec_users_card", "*", "cardcode='".hpa_escape_string($_REQUEST["barcard"])."' and pin='".intval($_REQUEST["pin"])."'")){
	    if ($tt = hpa_fields("sec_users", "*", "id=".$t["users_id"]." and state=1")){
		reload_userdata($tt);
		$_SESSION["userdata"] = $tt;
		$_SESSION["auth"]     = true; // set login state
		security_log($cname, "login success"); return "ok";
	    } else {
		$_SESSION["auth"] = false;
		security_log($cname, "user fail"); return "user not found";
	    }
	} else
	    return "card fail";
    }

// ---------

    function reload_userdata($dat=false){
	if ($dat===false){
	    $sql = hpa_query("select * from sec_users where id='".$_SESSION["userdata"]["id"]."'");
	    if ( hpa_affected_rows($sql) > 0 )
		$dat = hpa_fetch_array($sql);
	    else
		return false;
	}

	$_SESSION["auth"]		= true; // set login state
	$_SESSION["userdata"]		= $dat;
	$_SESSION["userdata"]["passwd"] = "";
	$_SESSION["userdata"]["groups"] = sec_cache_groups($_SESSION["userdata"]["id"], 1);

	foreach(explode(",", USEREXTRAS) as $t){
	    if ($t!=""){
		$sql = hpa_query("select * from sec_users_".$t." where users_id='".$_SESSION["userdata"]["id"]."'");
		if ( hpa_affected_rows($sql) > 0 ){
		    $tt =  hpa_fetch_array($sql);
		    unset($tt["users_id"]);
		    $_SESSION["userdata"][$t] = $tt;
		}
	    }
	}
    }

// ---------

    function logout(){
	if ($_SESSION["auth"]==true){
	    security_log($_SESSION["userdata"]["username"],"logout success");
	    $_SESSION = array();
	    session_unset();
	    session_destroy();
	    session_write_close();
	    setcookie(session_name(),'',0,'/');
	    session_regenerate_id(true);
	    session_start();
	}
    }

// ---------

    function canaccess($access, $noadmin = false, $default = false) {
	if ($access=="!") return false; // all denied, for dev mods

	$access = trim($access,",");

	if ($access!="notauthenticated" && $access!="nem bejelentkezettek" && !$noadmin)
	    $access = "[admin],".$access; // admin group can access anything

	if (trim($access)=="") $access = $default!=""?$default:"nobody";

	$access = explode(",", trim($access, ","));

// negate access
	foreach($access as $v){
	    if (substr($v,0,1)=="!" && strlen($v) > 1){
		$v = substr($v, 1);
		if ($v==$_SESSION["userdata"]["username"]) return false;
		if (substr($v,0,1)=="["){
		    $v = substr($v, 1, strlen($v) - 2);
		    if (array_search($v, $_SESSION["userdata"]["groups"])!==false) return false;
		}
	    }
	}
// access
	foreach($access as $v){
	    if (trim($v)!="" && substr($v,0,1)!="!"){
		if ($v=="nobody" || $v=="senki") return false;
		if ($v=="anybody" || $v=="bárki") return true;
		if ($v=="authenticated" || $v=="bejelentkezettek") return $_SESSION["auth"];
		if ($v=="notauthenticated" || $v=="nem bejelentkezettek") return !$_SESSION["auth"];
		if ($v==$_SESSION["userdata"]["username"]) return $_SESSION["auth"];
		if (substr($v,0,1)=="[" && is_array($_SESSION["userdata"]["groups"])){
		    $v = substr($v, 1, strlen($v) - 2);
		    if (array_search($v, $_SESSION["userdata"]["groups"])!==false) return true;
		}
	    }
	}
	return false;
    } // /canaccess

// ---------

    function sec_cache_groups($uid, $mode = 0){ // extract all groups recursively
	$ki  = array();
	$tmp = hpa_fields_array("sec_groups", "id,name", "id in (select groups_id from sec_groups_con where target_id='".$uid."' and type='".$mode."')", "id");
	if (!is_array($tmp)) return false;
	while($g = array_shift($tmp)){
	    if (!array_key_exists($g["id"], $ki)){
		$t = hpa_fields_array("sec_groups", "id,name", "id in (select target_id from sec_groups_con where groups_id='".$g["id"]."' and type=0)", "id");
		if (is_array($t))
		    $tmp = array_merge($tmp, $t);
		$ki[$g["id"]] = $g["name"];
	    }
	}
	return $ki;
    }

// ---------

    function sec_extract_groups($uid){ // extract all groups recursively
	$ki  = array();
	$tmp = hpa_fields_array("sec_groups_con", "target_id as a", "groups_id='".$uid."' and type='0'", "target_id");
	if (!is_array($tmp)) return array();
	while($g = array_shift($tmp)){
	    if (!array_key_exists($g["a"], $ki)){
		$t = hpa_fields_array("sec_groups_con", "target_id as a", "groups_id='".$g["a"]."' and type=0", "target_id");
		if (is_array($t))
		    $tmp = array_merge($tmp, $t);
		$ki[$g["a"]] = $g["a"];
	    }
	}
	return $ki;
    }

// ---------

    function get_members($gid){
	$usrs = array();
	$t = hpa_fields_array("sec_groups_con", "target_id", "type=1 and groups_id=".intval($gid), "target_id");
	if (is_array($t)){
	    foreach($t as $i=>$tt)
		$usrs[] = $i;
	}
	return $usrs;
    }

// ---------

    function get_users($access){
	$grps = array(); $usrs = array(); $ngrps = array(); $nusrs = array();
	// separate negates
	foreach(explode(",", $access) as $e){
	    $e = trim($e);
	    if ($e=="") continue;
	    if (substr($e, 0, 1) != "!"){
		if (substr($e,0,1)=="["){
		    $i = hpa_field("sec_groups", "id", "name='".hpa_escape_string(substr($e, 1, strlen($e) - 2))."'");
		    $grps[$i] = $i;
		} else $usrs[]  = hpa_field("sec_users",  "id", "username='".hpa_escape_string($e)."'");
	    } else{
		$e = ltrim($e, "!");
		if (substr($e,0,1)=="["){
		    $i = hpa_field("sec_groups", "id", "name='".hpa_escape_string(substr($e, 1, strlen($e) - 2))."'");
		    $ngrps[$i] = $i;
		} else $nusrs[] = hpa_field("sec_users",  "id", "username='".hpa_escape_string($e)."'");
	    }
	} // foreach explode

	// extract groups
	$t = $grps;
	foreach($t as $g)	$grps  = array_merge($grps, sec_extract_groups($g));

	// extract negategroups
	$t = $ngrps;
	foreach($t as $g)	$ngrps = array_merge($ngrps, sec_extract_groups($g));

	// extract users
	foreach($grps as $g)	$usrs  = array_merge($usrs, get_members($g));

	// extract negategroups
	foreach($ngrps as $g)	$nusrs = array_merge($nusrs, get_members($g));

/*	$usrs = array_flip($usrs);
	foreach($nusrs as $v)	unset($usrs[$v]);
	return array_flip($usrs);
*/
	return array_diff($usrs,$nusrs);
    }

// ---------

    function user($idorname){
	if (is_numeric($idorname))
	    $u = hpa_fields("sec_users","id,username","id=".intval($idorname));
	else
	    $u = hpa_fields("sec_users","id,username","username='".hpa_escape_string($idorname)."'");
	if (is_array($u)){
	    if (canaccess("[admin],[user]"))
		return '<a href="'.BASEPATH.'modules/settings.group/security.group/users/module.php?id='.$u["id"].'" class="user_link">'.$u["username"].'</a>';
	    else
		return '<span class="user_link">'.$u["username"].'</span>';
	} else
	    return '<span class="user_link">Ismeretlen</span>';
    }

// ---------

    function getperson( $id = 0 ){
	if ($id==0) $id=$_SESSION["userdata"]["id"];
	$r = hpa_fields("users","*","id=".intval($id));
	foreach(explode(",", USEREXTRAS) as $t){
	    if ($t!=""){
		if ($tt = hpa_fields("sec_users_".$t, "*", "users_id='".$_SESSION["userdata"]["id"]."'")){
		    unset($tt["users_id"]);
		    $r[$t] = $tt;
		}
	    }
	}
	return $r;
    }

// ---------

    function codegen($len=10){
        $c="1234567890abcdefghijklmnoppqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYX";
        for($i=0;$i<$len;$i++)
            $acode.=substr($c,intval(rand(0,strlen($c)-1)),1);
        return $acode;
    }

// ---------

    function security_log($uname,$description){
	$sqle = hpa_query("insert into sec_log (cdate,uname,description,location) values ('".date("Y-m-d H:i:s")."','".hpa_escape_string($uname)."','".hpa_escape_string($description)."','".$_SERVER["REMOTE_ADDR"]."')");
    }

// ---------
    function validatename($uname){
	if ($uname=="" ||
	    is_numeric(strpos($uname,"[")) ||
	    is_numeric(strpos($uname,"]")) ||
	    is_numeric(strpos($uname,"!")) ||
	    is_numeric(strpos($uname,"*")) ||
	    is_numeric(strpos($uname,"&")) ||
	    is_numeric(strpos($uname,";")) ||
	    is_numeric(strpos($uname,"/")) ||
	    is_numeric(strpos($uname,"\\")) ||
	    array_search($uname,array("admin","system","application","master","administrator","root"))!==false ||
	    $uname!=strip_tags($uname) ||
	    $uname!=strip_tags(urldecode($uname))
	    )
	    return false;
	return true;
    }

?><?
    if ($_SESSION["visited"] != true){
	$sqle = hpa_query("insert into web_counter (datum,num) values ('".date("Y-m-d")."','1') on duplicate key update num=num+1");
	$sqle = hpa_query("insert into web_referer (datum,ref,num) values ('".date("Y-m-d")."','".hpa_escape_string($_SERVER["HTTP_REFERER"])."',1) on duplicate key update num=num+1");
	$_SESSION["visited"] = true;
    }
?><?
    function format_date($date,$dotime=false,$usetoday=false,$useday=true,$usemonthname=true){
	if ($date!="0000-00-00")
	    $date=date("Y-m-d H:i:s",strtotime($date));
	else
	    $date="0000-00-00 00:00:00";
	$time=substr($date,strpos($date," ")+1,5);
	
	if (substr($date,0,10)==date("Y-m-d") && $usetoday==true)
	    return "Ma ".($dotime==true?$time:"");

	$date=substr($date,0,strlen($date)-strlen($time)-3);
	$dp=explode("-",$date);
	$year  = $dp[0];
	$month = $dp[1];
	$day   = $dp[2];
	$dayn  = date("w",strtotime($date));
	
	if ($usemonthname){
	    switch($month){
		case "01": $month = "január";     break;
	        case "02": $month = "február";    break;
	        case "03": $month = "március";    break;
		case "04": $month = "április";    break;
	        case "05": $month = "május";      break;
		case "06": $month = "június";     break;
	        case "07": $month = "július";     break;
		case "08": $month = "augusztus";  break;
	        case "09": $month = "szeptember"; break;
		case "10": $month = "október";    break;
	        case "11": $month = "november";   break;
		case "12": $month = "december";   break;
	    }
	    switch($dayn){
		case "0": $dayn = "vasárnap";   break;
	        case "1": $dayn = "hétfõ";      break;
	        case "2": $dayn = "kedd";       break;
		case "3": $dayn = "szerda";     break;
	        case "4": $dayn = "csütörtök";  break;
		case "5": $dayn = "péntek";     break;
	        case "6": $dayn = "szombat";    break;
	    }
	}
	$date  = $year . ". " . $month . ($usemonthname?" ":".") . intval($day).".";
	if ($useday==true)
	    $date .= " (".$dayn.")";
	return $date." ".($dotime==true?$time:"");
    }

    function hpa_date_diff($a_date,$b_date){
	return (strtotime($b_date) - strtotime($a_date));
    }
?><?
    $module_conf=array();
    $module_conf["dir"] = "content"; // dir = (t) = content folder
//    $module_conf["url"] = """; // dir = (t) = content folder
    $module_conf["useviewauth"]    = true; // useviewauth = (b) = wether to use authentication
    $module_conf["useeditauth"]    = false; // useeditauth = (b) = wether to use per page editing auth
    $module_conf["useapproveauth"] = false; // useapproveauth = (b) = wether to use per page approve auth
    $module_conf["usemenuauth"]    = false; // usemenuauth = (b) = wether to use subtree editing auth
    $module_conf["defaultviewaccess"]    = "bárki"; // defaultviewaccess = (b) = default access string for viewing
    $module_conf["defaulteditaccess"]    = "senki"; // defaultviewaccess = (b) = default access string for editing
    $module_conf["defaultapproveaccess"] = "senki"; // defaultviewaccess = (b) = default access string for approveing
    $module_conf["defaultmenuaccess"]    = "senki"; // defaultviewaccess = (b) = default access string for menu structure editing

    $module_conf["picture"] = array();
    $module_conf["picture"]["maxwidth"]  = 500; 
//    $module_conf["picture"]["maxheight"] = 500;
    $module_conf["picture"]["crop"]      = true;
    $module_conf["picture"]["canvasecolor"]       = "ffffff";
    $module_conf["picture"]["thumb_maxwidth"]     = 120;
    $module_conf["picture"]["thumb_maxheight"]	  = 120;
    $module_conf["picture"]["thumb_canvasecolor"] = "ffffff";
    $module_conf["picture"]["thumb_crop"] = true;
    $module_conf["picture"]["sizes"]      = "300x300xffffffxcrop";

    $module_conf["fixedpages"] = array(); // fixedpages = (at) = Fixed pages
    $module_conf["fixedpages"]["index.php"]		= "Kezdõlap";
    $module_conf["fixedpages"]["news.php"]		= "Hírek";
    $module_conf["fixedpages"]["news.archive.php"]	= "Hír archívum";
    $module_conf["fixedpages"]["gallery.php"]		= "Galéria";
    $module_conf["fixedpages"]["sitemap.php"]		= "Oldaltérkép";
    $module_conf["fixedpages"]["search.php"]		= "Keresés";
    $module_conf["fixedpages"]["register.php"]		= "Regisztráció";
    $module_conf["fixedpages"]["login.php"]		= "Bejelentkezés";
    $module_conf["fixedpages"]["logout.php"]		= "Kijelentkezés";
    $module_conf["fixedpages"]["login.php?profile="]	= "Profil";
    $module_conf["fixedpages"]["webshop.php"]		= "Webshop";
    $module_conf["fixedpages"]["calendar.php"]		= "Naptár";
    $module_conf["fixedpages"]["calendar.list.php"]	= "Naptár lista";
    $module_conf["fixedpages"]["newsletter.php"]	= "Hírlevél feliratkozás";
    $module_conf["fixedpages"]["test.php"]		= "Teszt oldal";

    $module_conf["submenus"] = array(); // fixedpages = (at) = Fixed pages
    $module_conf["submenus"]["webshop.php"] = "include/webshop/cmsmenu.php:wsmenu:wspath";
    $module_conf["submenus"]["news.archive.php"] = "news.cmsmenu.php:newsmenu:newspath";

    $module_conf["ultraadvanced"] = true; // ultraadvanced = (b) = very flexible content editing
//    $module_conf["css"]           = "style.css"; // css = (t) = the css to use for the content
    $module_conf["css"]           = "content.css"; // css = (t) = the css to use for the content
    $module_conf["pagewidth"]     = "800px"; // pagewidth = (n) = the width of the content on the site

    $module_conf["templates"] = array("alapoldal.html"=>"Alap template");

    $module_conf["usecommonfiles"]= true;
    $module_conf["enableiframes"] = true;
    $module_conf["styleclass"]    = true;
    $module_conf["cidedit"]       = true;

?><?
// function to declare for uniq menu display
// function menupoint($target,$title,$level,$sel,$class)
// must return not print

// load structure
    include($module_conf["dir"]."/menu.conf.php");


// -- draw submenu by path
    function draw_submenu_bypath($menupath){
	print _draw_menu(getsubmenu_bypath($menupath));
    }

// --- draw submenu
    function draw_submenu($levelfromtop=-1,&$top_target="",&$top_title="",$return=false){
	global $menu;
	if ($t=getsubmenu($menu,$levelfromtop,0,$top_target,$top_title)){
	    if ($return==false)
		print _draw_menu($t);
	    else
		return _draw_menu($t);
	}
    }

// fake function to use
    function draw_menu(){
	global $menu;
	print _draw_menu($menu);
    }

// real drawmenu
    function _draw_menu($menu, $level=0, $forcedraw=false){
	global $page;
	$ki   = "";
	$draw = false;
	foreach($menu as $n=>$v){
	    if (canaccess($v["access"])){
		$vis    = (!isset($v["visible"]) || ($v["visible"] && isset($v["visible"])));
	        $sel    = "";
		$target = $v["target"]=="-"?$v["target_url"]:$v["target"];
		$mp	= "";
		if ($target!=""){ // fixed page
		    $sel = ($target==$page?"sel":"");
		    if ($vis)
			$mp = (function_exists("menupoint")?menupoint($target, $v["title"], $level, $target==$page, $v["class"]!=""?$v["class"]:""):
			    '<a href="'.$target.'" class="menu'.$sel.$level.($v["class"]!=""?" ".$v["class"]:"").' [class]" '.(substr($target,0,7)=="http://"?'target="_blank"':"").'>'.$v["title"]."</a>");
		    else
			$mp = " ";
		} else { // static-cms data
		    $sel = ("content.php?cid=".$v["id"]==$page?"sel":"");
		    if ($vis)
			$mp = (function_exists("menupoint")? menupoint("content.php?cid=" . $v["id"], $v["title"], $level, "content.php?cid=".$v["id"]==$page, $v["class"]!=""?$v["class"]:""):
			    '<a href="content.php?cid=' . $v["id"] . '" class="menu' . $sel . $level .($v["class"]!=""?" ".$v["class"]:""). ' [class]">' . $v["title"] . "</a>");
		    else
			$mp = " ";
		}
		$draw = ($sel!="" && $vis)?true:$draw;

		if (is_array($v["elements"]) && $vis){ // draw submenu
		    $t = _draw_menu($v["elements"], $level+1, ($sel!=""?true:false));
		    if ($t != ""){
			$ki  .= str_replace("[class]", "menu_open", $mp).$t;
			$draw = true;
			$mp   = "";
		    } else {
			$ki .= str_replace("[class]", "", $mp);
			$mp  = "";
		    }
		}
		if ($v["submenufunction"]!="" && $vis){ // draw submenu
		    @include_once($v["submenuinclude"]);
		    $tt = $v["submenufunction"];
		    if (function_exists($tt)){
			$t = $tt($page, $level+1, $sel, $class, $v["target"]);
			if ($t != ""){
			    $ki  .= str_replace("[class]", "menu_open", $mp).$t;
			    $mp   = "";
			    $draw = true;
			} else {
			    $ki .= str_replace("[class]", "", $mp);
			    $mp  = "";
			}
		    }
		}
		$ki .= str_replace(" [class]", "", $mp); // else case
	    }
	}
	if ($draw || $level==0 || $forcedraw)
	    return $ki;
    }


// drawpath
    function drawpath($menu,$delim,$page,$level=0){
	global $PAGEPATH;
	    $ki   = "";
	    foreach($menu as $n=>$v){
	      if (canaccess($v["access"])){
	    	if (is_array($v["elements"])) // draw submenu
		    $t = drawpath($v["elements"], $delim, $page, $level+1);

		if ($v["submenufunction"]!=""){ // draw submenu
		    @include_once($v["submenuinclude"]);
		    $tt = $v["pathfunction"];
		    if (function_exists($tt))
			$t = $tt($delim, $page, $level+1, $v["target"]);
		}

		$target = $v["target"]=="-"?$v["target_url"]:$v["target"];
		if ($target!="" && ($t!="" || $page==$target)) // fixed page
		    $ki .= '<a href="'.$target.'" class="path">'.$v["title"]."</a>";
		elseif ("content.php?cid=".$v["id"]==$page || $t!="" ) // static-cms data
		    $ki .= '<a href="content.php?cid=' . $v["id"] . '" class="path">' . $v["title"] . "</a>";
		
		if ($t!="")
		    return $ki .$delim. $t;
	      } // /access
	    } // /foreach
	if ($PAGEPATH != "" && $ki!="")
	    $ki .= $delim . str_replace("<delim>", $delim, $PAGEPATH);
	return $ki;
    }


// ------- draw title

    function drawtitle($menu, $delim, $page){
	global $PAGEPATH;
	    $ki   = "";
	    foreach($menu as $n=>$v){
	      if (canaccess($v["access"])){
		if (is_array($v["elements"])) // draw submenu
		    $t = drawtitle($v["elements"], $delim, $page );
		$target = $v["target"]=="-"?$v["target_url"]:$v["target"];
		if ($target!="" && ($t!="" || $page==$target)) // fixed page
		    $ki .= $v["title"];
		elseif ("content.php?cid=".$v["id"]==$page || $t!="" ) // static-cms data
		    $ki .= $v["title"];
		
		if ($t!="")
		    return $ki .$delim. $t;
	      } // /access
	    } // /foreach
	if ($PAGEPATH != "" && $ki !="")
	    $ki .= str_replace("<delim>", $delim, strip_tags($PAGEPATH));
	return $ki;
    }

// ------- get title

    function gettitle($menu, $page){
	$ki   = "";
	foreach($menu as $n=>$v){
		if (is_array($v["elements"])) // draw submenu
		    $t = gettitle($v["elements"], $page );
		if ($v["submenufunction"]!=""){ // draw submenu
		    @include_once($v["menuinclude"]);
		    $tt = $v["pathfunction"];
		    if (function_exists($tt)){
			$t = $tt("|", $page, $level+1,$v["target"]);
			if (substr_count($t,"|")>0)
			    $t = substr($t,strrpos($t,"|")+1);
		    }
		}
		$target = $v["target"]=="-"?$v["target_url"]:$v["target"];
		if ($target!="" && $t=="" && $page==$target) // fixed page
		    $t = $v["title"];
		elseif ("content.php?cid=".$v["id"]==$page && $t=="" ) // static-cms data
		    $t = $v["title"];
		
		if ($t!="")
		    return $t;
		
	}
	return $ki;
    }

// ----- get submenu by path

    function getsubmenu_bypath($menupath){
	global $menu;
	$path = explode("/",$menupath);
	$t = array("elements"=>$menu);
	foreach($path as $p){
	    $t = $t["elements"][$p];
	}
	return $t["elements"];
    }


// ----- get submenu
    function getsubmenu($menu,$levelfromtop=-1,$level=0,&$top_target="",&$top_title=""){
	global $page;
	foreach($menu as $n=>$v){
	  if (canaccess($v["access"])){
	    $target = ($v["target"]=="-"?$v["target_url"]:$v["target"]);
	    if ($target==$page || $page=="content.php?cid=".$v["id"]){
		$top_target = "content.php?cid=".$v["id"];
		$top_title = $v["title"];
		return $v["elements"];
	    }
	    if (is_array($v["elements"])){
		$t = getsubmenu($v["elements"], $levelfromtop, $level + 1, $top_target, $top_title);
		if ($t !== false){
		    $top_target = "content.php?cid=".$v["id"];
		    $top_title = $v["title"];
		    if ($levelfromtop!=-1 && $levelfromtop==$level)
			return $v["elements"];
		    else
			return $t;
		}
	    } // id elements
	  } // canaccess
	}// foreach
	return false;
    }


// ----- get latest modified content elements
    function content_getmods($path="",$field="mdate",$doutime=false,$level=0){
	global $module_conf;
	$ki=array();
	if ($path != "")
	    $menu = getsubmenu_bypath($path);
	else
	    global $menu;

	if (!is_array($menu))
	    return $ki;

	foreach ($menu as $n=>$v){
	  if (canaccess($v["access"])){
	    if ($v["target"]==""){
		if (file_exists($module_conf["dir"]."/". $v["id"] ."/content.data.php")){
		    include($module_conf["dir"]."/". $v["id"] ."/content.data.php");
		    if (is_array($content_data["versions"])){
		        foreach($content_data["versions"] as $nb=>$vb){
			    if ($vb["approved"] == true)
		    	        $ki[$v["id"]] = array(
						    "title"    => $v["title"], 
						    $field     => ($doutime?strtotime($vb[$field]):$vb[$field]),
						    "childnum" => (is_array($v["elements"])?count($v["elements"]):0),
						    "level"    => $level
						    );
			}
		    }
		}
	    }
	    if (is_array($v["elements"]))
		$ki = array_merge($ki, content_getmods(trim($path."/".$n,"/"), $field, $doutime,$level+1));
	  } // canaccess
	} // foreach
	return $ki;
    }


// -----  get page
if ($page==""){
    if (isset($_REQUEST["cid"]) && basename($_SERVER["PHP_SELF"])=="content.php")
	$page = "content.php?cid=" . basename($_REQUEST["cid"]);
    else
	$page = basename($_SERVER["PHP_SELF"]);
}
?><!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
<html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en">
<head>
    <meta http-equiv="Content-Type" content="text/html; charset=UTF-8" />
    <link rel="icon" href="images/favicon.ico" type="image/x-icon" />
    <link rel="shortcut icon" href="images/favicon.ico" type="image/x-icon" />
    <meta name="copyright" content="DeXeF Kft." />
    <meta name="robots" content="index,follow" />
    <meta http-equiv="X-UA-Compatible" content="chrome=1" />
    <meta name="keywords" content="" />    <meta name="SKYPE_TOOLBAR" content="SKYPE_TOOLBAR_PARSER_COMPATIBLE" />
    <title>