<?php
include('config.inc');
include('functions.inc');
//require('class.tender.php');
//require('classes/PHPMailerAutoload.php');
//require("classes/class.phpmailer.php");
//include "classes/tc_calendar.php"; 
//include "classes/editor.php"; 
//require 'classes/class.smtp.php';

date_default_timezone_set('Asia/Kolkata');
dbConnect("mm");

$statuss = array('Online','Offline');
$qstatuss = array('Qualified','Disqualified');
$roles = array('Admin','Officer','Staff','Guest');
$modes = array('Rupees','Units');
$patgps = array('Student','Employee','Others');
$heads = array('Institute','Department','Project');
$itemtypes = array('Consumable','Returnable','Fixture');
$units = array('No.','Ream','Piece','Packet','Set','Meter','Bottle','Bundle','Loose');
$weekdays = array('Monday','Tuesday','Wednesday','Thursday','Friday','Saturday','Sunday'); 
$accounts = array('Personal','Official'); 
$locations = array('','Admin Main','Admin Extn1','Admin Extn2','LT','CC1','CC2','CC3','Library','VH1','VH2','VH3','BH1','BH2','BH3','BH4','BH5','GH1','GH2','GH3','RSA1','RSA2','SAC','Health Center','Dormitory','Pool','Canteen','Shops','Gate1','Gate2','Gate3','Gate4'); 

$classifications = array('Enquiry','Single Bid','Two Bids','Others'); 
$objectives = array('Supply','Work','Installation','SITC','AMC','Others'); 

$remoteip = getIP(); 
$referer = $_SERVER['HTTP_REFERER'];
$url = $_SERVER['REQUEST_URI'];
//initialize session variables and session
session_start();

if (isset($_SESSION['sessionid'])) {
        //check session and session variables        
        $user = $_SESSION['user'];
        $role = $_SESSION['role'];
        $sessionid = $_SESSION['sessionid'];

} else if (isset($_POST['login']) && $_POST['txtID']) {
        //authenticate sign in
        $uid = trim($_POST['txtID']);
        $pwd = trim($_POST['txtPWD']);

        $role = strtolower((ldapAuth($uid, $pwd) ? localAuth($uid, $pwd) : 'public'));

        $sessionid = base64_encode($uid.'-'.$pwd);
        $_SESSION['user'] = "$uid";
        $_SESSION['role'] = "$role";
        $_SESSION['sessionid'] = "$sessionid";

        //session information
        //close previous unclosed sessions
	mysql_query("update websessions set logouttime=now() where timediff(now(),logintime)>'03:00:00'");
	mysql_query("update websessions set logouttime=now() where userid='$uid' and isnull(logouttime)");
	//start current session
        mysql_query("insert into websessions(sessionid,userid,remoteip,logintime) 
	values('$sessionid','$uid','$remoteip',now())");
        header("Location: .");
}

//check for singout signal
if ($_GET['logout'] == 1) {
        //close current session
        mysql_query("update websessions set logouttime=now(),duration=timediff(now(),logintime)
        where sessionid='$sessionid'");

        //abondon session
        session_unset();
        session_destroy();

        //reset session variables
        $HTTP_SESSION_VARS['user'] = '';
        $HTTP_SESSION_VARS['role'] = '';
        $HTTP_SESSION_VARS['sessionid'] = '';

        $user = '';
	$role = '';
	$sessionid = '';

        header("Location: .");
}

//log activity in access log database
accessLog($user, $referer, $url, $remoteip);

?>