<?
	// mysql settings
	include('inc/settings.inc.php');
	session_name('overall');  // Set session name
	session_start();  // Start session

	$pageid = isset($_GET['pageid']) ? intval($_GET['pageid']) : -1;
	if($pageid < 1) // if page id is not set, get startpage index
	{
		$page_id = mysql_fetch_array(mysql_query('SELECT id FROM overall_pages ORDER BY page_order LIMIT 1'));
		$pageid = $page_id['id'];
	}
	// get the page
	$showPage = mysql_fetch_array(mysql_query("SELECT * FROM overall_pages where id = $pageid")); // Select current page
	// make sure this page exists
	if(!$showPage['id'])
	{
	?>
	<script>
	alert("Denna sida finns inte!");
	history.go(-1);
	</script>
	<?
		exit;
	}

	// if login is required for this page, include user.inc
	if (isset($_SESSION['sessUser'], $_SESSION['sessHash'], $_SESSION['sessExp'])) {
		include('inc/user.inc.php');
	}
	
	// check if user is authorized?
	if(($showPage['access'] == 1 && $access == 0) || ($showPage['access'] == 2 && $access < 2) || ($showPage['access'] == 3 && $access != 3))
	{
	?>
	<script>
	alert("Du har inte rättigheter att se denna sida!");
	history.go(-1);
	</script>
	<?
		exit;
	}
?>
<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<html>
<head>
<title>Overallens Vänner</title>
<SCRIPT LANGUAGE="JavaScript">
<!-- // Default status
defaultStatus = "Overallens Vänner"
// -->
</SCRIPT>
<!-- Confirm alert -->
<script>
function conf(msg)
{
	confbox = confirm(msg);
	if (confbox == true)
	return true;
	else
	return false;
}
</SCRIPT>
<style>
<!--
body,td{font-family:verdana;font-size:11px; color:black;}
a{color:#B92A2B}
a:visited,a:active{color:#B92A2B}
a:hover{color:black; text-decoration:none;}
.header{font-size:14px;}
hr{color:black;size:1 noshade; color:#B92A2B;}
.redBg{background-color:#B92A2B;}
.onRed{color: white;}
.alert{color:red}
.meny{color:#B92A2B; text-decoration:none;}
-->
</style>
<script>
<!--
// open new window (send url, height and width as parameters in function)
function ny_sida(url,width,height)
{
egenskaper="toolbar=no,location=no,directories=no,status=no,menubar=no,scrollbars=yes,resizable=no";
egenskaper+=",width="+width;
egenskaper+=",height="+height;
unik=new Date();
unik=unik.getSeconds()+"_"+unik.getMinutes()+"_"+unik.getHours();
window.open(url,unik,egenskaper);
}

// bookmark page script
function bookmark(url, description)
{
netscape="Click OK, then CTRL+D to bookmark this page."
if (navigator.appName=='Microsoft Internet Explorer')
window.external.AddFavorite(url, description);
else if (navigator.appName=='Netscape')
alert(netscape);
}

function ShowURL(URL)
{
location.href=URL
}

//-->
</SCRIPT>
</head>
<body bgcolor="white">
<table width="800" cellspacing="0" cellpadding="0" border="0">
<tr>
<td colspan="2" background="images/top.gif" height="120">&#160;</td>
</tr>
<tr>
<td background="images/leftbg.gif" width="164" valign="top">
<table width="164" cellspacing="0" cellpadding="0" border="0">
<tr>
<td width="30">&#160;</td>
<td>
<br>
<table width="98%" cellpadding="0" cellspacing="1" class="redBg">
<tr>
<td>
<table cellpadding="2" cellspacing="1" width="100%">
<tr>
<td height="15"><b class="onRed">Navigation</b></td>
</tr>
<?
	// if logged in we dont need "bli Medlem" in menu
	if (isset($_SESSION['sessUser'], $_SESSION['sessHash'], $_SESSION['sessExp']))
	$q = mysql_query("SELECT id, header FROM overall_pages WHERE access = 0 AND visible = 1 AND id != 19 ORDER BY page_order"); // get pages
	else
	$q = mysql_query("SELECT id, header FROM overall_pages WHERE access = 0 AND visible = 1 ORDER BY page_order"); // get pages
	while($r = mysql_fetch_array($q))
	{
		echo "<tr bgcolor='#FFFFFF' onMouseover=\"this.style.backgroundColor='$msOverTR';return true\" onMouseout=\"this.style.backgroundColor='FFFFFF';\" onClick=\"ShowURL('?pageid=${r['id']}')\" height=\"15\" style=\"cursor:hand\">";
		echo "<td><a href=\"?pageid=${r['id']}\" class=\"meny\">${r['header']}</a></td></tr>"; // print each header
	}
	// if user is logged in
	if (isset($_SESSION['sessUser'], $_SESSION['sessHash'], $_SESSION['sessExp']))
	{
		// access menu 1
		echo "<tr><td height=\"15\"><b class=\"onRed\"><b>Medlemmar</b></td></tr>";
		$q = mysql_query("SELECT id, header FROM overall_pages WHERE access = 1 AND visible = 1 ORDER BY page_order"); // get pages
		while($r = mysql_fetch_array($q))
		{
			echo "<tr bgcolor='#FFFFFF' onMouseover=\"this.style.backgroundColor='$msOverTR'; return true\" onMouseout=\"this.style.backgroundColor='FFFFFF';\" onClick=\"ShowURL('?pageid=${r['id']}')\" height=\"15\" style=\"cursor:hand\">";
			echo "<td><a href=\"?pageid=${r['id']}\" class=\"meny\">${r['header']}</a></td></tr>"; // print each header
		}
		// logout button
		echo "<tr bgcolor='#FFFFFF' onMouseover=\"this.style.backgroundColor='$msOverTR';return true\" onMouseout=\"this.style.backgroundColor='FFFFFF';\" onClick=\"ShowURL('logout.php')\" height=\"15\" style=\"cursor:hand\">";
		echo "<td><a href=\"logout.php\" class=\"meny\">Logga ut</a></td></tr>";

		// access menu 2 if admin (access > 1)
		if($access > 1)
		{
			echo "<tr><td height=\"15\"><b class=\"onRed\"><b>Admin</b></td></tr>";
			$q = mysql_query("SELECT id, header FROM overall_pages WHERE access = 2 AND visible = 1 ORDER BY page_order"); // get pages
			while($r = mysql_fetch_array($q))
			{
				echo "<tr bgcolor='#FFFFFF' onMouseover=\"this.style.backgroundColor='$msOverTR';return true\" onMouseout=\"this.style.backgroundColor='FFFFFF';\" onClick=\"ShowURL('?pageid=${r['id']}')\" height=\"15\" style=\"cursor:hand\">";
				echo "<td><a href=\"?pageid=${r['id']}\" class=\"meny\">${r['header']}</a></td></tr>"; // print each header
			}
		}

		// access menu 3 if admin (access == 3)
		if($access == 3)
		{
			echo "<td height=\"15\"><b class=\"onRed\"><b>Superadmin</b></td></tr>";
			$q = mysql_query("SELECT id, header FROM overall_pages WHERE access = 3 AND visible = 1 ORDER BY page_order"); // get pages
			while($r = mysql_fetch_array($q))
			{
				echo "<tr bgcolor='#FFFFFF' onMouseover=\"this.style.backgroundColor='$msOverTR';return true\" onMouseout=\"this.style.backgroundColor='FFFFFF';\" onClick=\"ShowURL('?pageid=${r['id']}')\" height=\"15\" style=\"cursor:hand\">";
				echo "<td><a href=\"?pageid=${r['id']}\" class=\"meny\">${r['header']}</a></td></tr>"; // print each header
			}
		}
	}
	else // else, echo login form
	{
	?>
	<tr>
	<td bgcolor="white">
	<?=loginForm()?>
	</td>
	</tr>
	<?
	}
?>
</table>
</td>
</tr>
</table>
</td>
</tr>
</table>
</td>
<td background="images/mainbg.gif" width="636" valign="top">
<table width="636" cellspacing="0" cellpadding="0" border="0">
<tr>
<td>
<?
	// Error messages.
	if($pageid == 1)
	start_error($error);
?>
<div align="center"><b class="header"><?=nl2br($showPage['header'])?></b></div><br><br>
<?
	$showPage['content'] = stripSlashes($showPage['content']);
	eval ($showPage['content']);
?>
<hr>
</td>
<td width="15">&#160;</td>
</tr>
</table>
</td>
</tr>
<tr>
<td colspan="2" background="images/bottom.gif" height="34" valign="middle">
<table width="800" cellspacing="0" cellpadding="0" border="0">
<tr>
<td width="164">&#160;</td>
<td align="right">
<a href="mailto:<?php echo $ovvemail; ?>">Kontaktmail</a> |
<A HREF="#" onClick="javascript:bookmark('<?=$mainUrl?>/','Overallens Vänner');">Lägg till favorit</a> |
<a HREF="#" onClick="this.style.behavior='url(#default#homepage)';this.setHomePage('<?=$mainUrl?>/');">Som startsida</a>
&nbsp;&nbsp;
</td>
</tr>
</table>
</td>
</tr>
</table>
</body>
</html>
