<?php
	define('thisscript','adminusergroupdetail');

	require_once 'globalad.php';
	$userupdate = new UserGroup();
		
	if (empty($userid)){
		redirecting("adminusergroup.php");
	}
	
	if (empty($useraccess['manage_usergroup_list'])){
		redirecting('index.php');
	}
	
	$restricted = array('3388', '3398', '88', '3397');
	
	/* sanitize post, get, request */
	$_REQUEST['id'] = ((empty($_REQUEST['id']))?"":$_REQUEST['id']);
	$_GET['act'] = ((empty($_GET['act']))?"":$_GET['act']);
	$_GET['add'] = ((empty($_GET['add']))?"":$_GET['add']);
	$_POST['do'] = ((empty($_POST['do']))?"":$_POST['do']);
	$_POST['accessp'] = ((empty($_POST['accessp']))?array():$_POST['accessp']);
	$_COOKIE['group'] = ((empty($_COOKIE['group']))?"":$_COOKIE['group']);
	/* end sanitize */
	
	$loc = '';
	$locationtype = '';
	$arrpricetype = '';
	$locationtype = '';
	$curstatus = array();

	$curstatus = $db->fetch_one("SELECT * FROM usergroup WHERE usergroupid='".$db->clean($_REQUEST['id'])."'");
	
	$curstatus['title'] = empty($curstatus['title'])?'':$curstatus['title'];
	$curstatus['usertitle'] = empty($curstatus['usertitle'])?'':$curstatus['usertitle'];
	$curstatus['adminaccess'] = empty($curstatus['adminaccess'])?'':$curstatus['adminaccess'];
	$curstatus['status'] = empty($curstatus['status'])?'':$curstatus['status'];
	$locationtype = empty($curstatus['location_id'])?'':$curstatus['location_id'];	
		
	$aarlocationid = array();
	$aarlocationid = explode(",",$locationtype);
	
	$loc = '';
	/* $detaillocation = $db->fetch_all("SELECT * FROM location ORDER BY sort");
	if (sizeof($detaillocation) > 0){
		$i = 1;
		foreach ($detaillocation as $aug){
			$loc .= '
				<div align="left">
				<input type="checkbox" name="cek[]" id="locationtype_'.$aug['location_id'].'" value="'.htmlspecialchars($aug['location_id']).'"'.((in_array($aug['location_id'],$aarlocationid))?'checked':'').'> '.htmlspecialchars($aug['location_name']).'</div>
			';
			$i++;	
		}
	} */
	
	if ($_GET['act'] == 'delete'){
		if (!in_array($_REQUEST['id'], $restricted)){
			$userupdate->setId($_REQUEST['id']);
			$userupdate->deleteUserGroup($_REQUEST['id']);
		}
		redirecting("adminusergroup.php");
	}
		
	if (!empty($_POST)){
		$do = $_POST['do'];		
		if ($do == "adduser"){
			$title = $_POST['title'];
			$usertitle= $_POST['title'];
			$adminaccess= $_POST['admin_access'];
			$status = $_POST['status'];
			$locationtype = ((empty($_POST['cek']))?array():$_POST['cek']);	
			
			$accessed = '';
			if (sizeof($_POST['accessp']) > 0){
				$accessed = implode(",",$_POST['accessp']);
			}
			$userupdate->saveUserGroup($title,$usertitle,$adminaccess,$accessed,implode($locationtype,","),$status,$userid);
			redirecting("adminusergroup.php");
		}
	
		else if ($do == "edituser"){
			$userupdate->setId($_REQUEST['id']);
			$title = $_POST['title'];
			$usertitle = $_POST['title'];
			$admin_access= $_POST['admin_access'];
			$status = $_POST['status'];
			$locationtype = ((empty($_POST['cek']))?array():$_POST['cek']);	
			$accessed = '';
			if (sizeof($_POST['accessp']) > 0){
				$accessed = implode(",",$_POST['accessp']);
			}
			$userupdate->updateUserGroup($title,$usertitle,$admin_access,$accessed,implode($locationtype,","),$status,$userid);
			
			redirecting("adminusergroup.php");
		}
	}
	
	$thisugaccess = array();
	if (!empty($_REQUEST['id'])){
		$userupdate->setId($_REQUEST['id']);		
		$detailusergroup = array_map("htmlspecialchars",$userupdate->getUserGroupDetail());
		$thisugaccess = explode(",",$detailusergroup['accessed']);
	}
	
	/* get all access */
	$accesslist = $uaccess->generateParentMenuOnUserGroup();
			
	require_once 'incl/global_template.php';
	
	$theme = gettemplate('adminusergroupdetail');
	eval("\$theme = \"$theme\";");
	echo $theme;
		
?>