<?php
	require_once('configure.php');

	//functions

	if (!function_exists('validate_url')) {
		function validate_url()
		{
			$protocol = strpos(strtolower($_SERVER['SERVER_PROTOCOL']),'https')
			=== FALSE ? 'http' : 'https';
			$host     = $_SERVER['HTTP_HOST'];
			$script   = $_SERVER['SCRIPT_NAME'];
			$request_uri = $_SERVER['REQUEST_URI'];

			//$currentUrl = $protocol . '://' . $host . $request_uri;

			if (strpos($request_uri, ".php") !== FALSE){
				$token = explode(".php", $request_uri);

				//check unsafe url character, may add more here
				if ( preg_match ( "/\/|\"|\'|>|</", urldecode($token[1]) ) ) {
					header("Location: ".$protocol . '://' . $host . $script);
				}
			}else{
				//for index page
				if (strpos($request_uri, "?") !== FALSE){
					$token = explode("?", $request_uri);

					//check unsafe url character, may add more here
					if ( preg_match ( "/\/|\"|\'|>|</", urldecode($token[1]) ) ) {
						header("Location: ".$protocol . '://' . $host . $token[0]);
					}
				}
			}
		}
	}

	validate_url();

	if (!function_exists('random_string')) {
		function random_string($length = 8)
		{
			$chars         = "abcdefghijkmnpqrstuvwxyzABCDEFGHIJKLMNPQRSTUVWXYZ23456789abcdefghijkmnpqrstuvwxyzABCDEFGHIJKLMNPQRSTUVWXYZ23456789";
			$random_string = substr(str_shuffle($chars), 0, $length);
			return $random_string;
		}
	}

	if (!function_exists('rsa_crypt')) {
		function rsa_crypt($data, $encrypt_decrypt)
		{

			/*set_include_path(get_include_path() . PATH_SEPARATOR . 'phpseclib0.3.8');
			include('Net/SSH2.php');
			include('Crypt/RSA.php');*/

			set_include_path(get_include_path() . PATH_SEPARATOR . 'phpseclib0.3.8');

			if (!class_exists('Crypt_RSA')) {
				include('phpseclib0.3.8/Crypt/RSA.php');
				include('phpseclib0.3.8/Math/BigInteger.php');
			}

			if (!class_exists('Net_SSH2')) {
				include('phpseclib0.3.8/Net/SSH2.php');
			}


			if ($encrypt_decrypt == 1) {
				$rsa_encrypt = new Crypt_RSA();

				$public_key = "MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDInkMmWTd95fxI5UgXd1UGeTl1 DLSjXv/Z7CJ/y2xHKDpeboVevdko/un6cud4NtYG4iWwC/MXr717dyYA6/8xzFO2 hsgL0qkbEYJWIj0q4ctSZbuni6uim5Yic/MIinE6r43r2tpzkwnlFt+TMUpEapSm Ml3JbopfQcvMa5ANWQIDAQAB
";

				$rsa_encrypt->loadKey($public_key); // public key

				if (!empty($data)) {
					return base64_encode($rsa_encrypt->encrypt($data));
				} else {
					return;
				}
			}


			if ($encrypt_decrypt == 2) {
				$rsa_decrypt = new Crypt_RSA();

				$private_key = "MIICXAIBAAKBgQDInkMmWTd95fxI5UgXd1UGeTl1DLSjXv/Z7CJ/y2xHKDpeboVe vdko/un6cud4NtYG4iWwC/MXr717dyYA6/8xzFO2hsgL0qkbEYJWIj0q4ctSZbun i6uim5Yic/MIinE6r43r2tpzkwnlFt+TMUpEapSmMl3JbopfQcvMa5ANWQIDAQAB AoGAJtVrziqK8VXphfrL/67byIsCskOpW85x3C83ZmFsLkH9OnZOXs6FEMh3ZkGD yONkfqScAv3tKnKcTR/9PURxe0vwG6Hz05jI0bwl95BSt52ohuocB9oaxgxvdVg4 FfBe/ghi3WTQBhej9E9va4spiDEYaCE1Aw4mCXz+Lsoq+wECQQD+HqmFAPJ0XGHw i0K4F+B4hhQrRQiItSSEyAwvPDnzVHjhrHSKmdeeZT7F9Kn10JADRjTqGf1uC4q3 QwyEghrRAkEAyhpCw7c/NpPdy8W415hGpnPYwHpgFqVJRkcWzLJS63Hd8oJNjEdU ulz452ISoR6BYGSTO3z7HkyMuIzzjjpcCQJBAJlS+skrFx6qFtXB0JGupltR2p14 23tQgCY1ZVSiq/xq/Tx8hxyRUg1Z3RQnWNzd5+Zx179fyw84m4uTQtw4e+ECQGhG gGgm5jCsvmVjEOn8IYfEgfNdsLI+eb4O886Nu4bLa26ymHxmWWsGiU4pJd+Hs80e V3D8HT0W1gxqfUfHCLECQCz2fuK5O78W11GeHSzCKMym0TgUWrBwBBrld9oDJx8r TfZBVwLzHLKBoCBKixfhoMIKMcUvvhkF+wRN+IBJPaQ=";

				$rsa_decrypt->loadKey($private_key); // private key*/

				if (!empty($data)) {
					return $rsa_decrypt->decrypt(base64_decode($data));
				} else {
					return;
				}
			}
		}
	}

	if (!function_exists('bind_pdo')) {
		function bind_pdo($sql, $parameters = NULL, $action = NULL)
		{
			global $dbh;

			if ($action == "insert" || $action == "update" || $action == "delete" || empty($action)) {
				if (!($sth = $dbh->prepare($sql))) {
					throw new Exception('[' . $sth->errorCode() . ']: ' . print_r($sth->errorInfo()));
				}

				if (!$sth->execute($parameters)) {
					throw new Exception('[' . $sth->errorCode() . ']: ' . print_r($sth->errorInfo()));
				} else {
					return true;
				}
			}

			if ($action == "selectone") {
				if (!($sth = $dbh->prepare($sql))) {
					throw new Exception('[' . $sth->errorCode() . ']: ' . print_r($sth->errorInfo()));
				}

				if (!$sth->execute($parameters)) {
					throw new Exception('[' . $sth->errorCode() . ']: ' . print_r($sth->errorInfo()));
				}

				return $sth->fetch(PDO::FETCH_ASSOC);

			}

			if ($action == "selectall") {
				if (!($sth = $dbh->prepare($sql))) {
					throw new Exception('[' . $sth->errorCode() . ']: ' . print_r($sth->errorInfo()));
				}

				if (!$sth->execute($parameters)) {
					throw new Exception('[' . $sth->errorCode() . ']: ' . print_r($sth->errorInfo()));
				}

				return $sth->fetchAll(PDO::FETCH_ASSOC);

			}

			if ($action == "dump") {
				return dump_sql($sql, $parameters);
			}


		}
	}


	if (!function_exists('dump_sql')) {
		function dump_sql($sql, $parameters)
		{
			$keys = array();

			# build a regular expression for each parameter
			foreach ($parameters as $key => $value) {
				if (is_string($key)) {
					$keys[] = '/:' . $key . '/';
				} else {
					$keys[] = '/[?]/';
				}
			}

			foreach ($parameters as $key2 => $value) {
				$parameters[$key2] = "'" . $value . "'";
			}

			$sql = preg_replace($keys, $parameters, $sql, 1, $count);

			#trigger_error('replaced '.$count.' keys');

			return $sql;
		}
	}

	function matched_option($data1, $data2, $type)
	{
		if ($data1 == $data2) {
			if ($type == "checkbox" || $type == "radiobutton") {
				return "checked";
			} else if ($type == "select") {
				return "selected";
			} else {
			}

		}
	}

	if (!function_exists('startsWith')) {
		function startsWith($haystack, $needle)
		{
			$length = strlen($needle);
			return (substr($haystack, 0, $length) === $needle);
		}
	}

	if (!function_exists('check_upload_path')) {
		function check_upload_path($img_file)
		{
			$session_path_str  = "/uploader/" . $_SESSION['KCFINDER']['uploadURL'];
			$session_path_long = strlen($session_path_str);
			$path_error        = 0;
			foreach ($img_file as $key2 => $pathname) {
				if ($key2 && $pathname) {
					$submit_path_str  = substr($pathname, 0, $session_path_long);
					$submit_path_long = strlen($submit_path_str);
					$file             = str_replace('..', '', $pathname);
					if ($session_path_long <> $submit_path_long || $session_path_str <> $submit_path_str || !startsWith($file, $session_path_str)) {
						$path_error = 1;
					}
				}
			}
		}
	}


	if (!function_exists('get_site_info')) {
		function get_site_info()
		{
			$sql        = "SELECT * FROM site_info WHERE siteinfoid = ? ";
			$parameters = array(1);
			$site_info  = bind_pdo($sql, $parameters, "selectone");

			return $site_info;
		}
	}

	$site_info = get_site_info();

	if (!function_exists('clean_data')) {
		function clean_data($data = array())
		{
			foreach ($data as $data_name => $data_value) {
				if (is_array($data_value)) {
					clean_data($data_value);
				} else {
					$_REQUEST[$data_name] = htmlspecialchars($data_value, ENT_QUOTES);
				}
			}
		}
	}

	if (!function_exists('get_master_type_code')) {
		function get_master_type_code($typeid, $code = NULL)
		{
			if (!empty($code)) {
				$sql                   = "select * from master_type_code where typeid = ? and code = ? and deleted = ? order by sort ASC";
				$parameters            = array($typeid, $code, 0);
				$master_type_code_info = bind_pdo($sql, $parameters, "selectone");
			} else {
				$sql                   = "select * from master_type_code where typeid = ? and deleted = ? order by sort ASC";
				$parameters            = array($typeid, 0);
				$master_type_code_info = bind_pdo($sql, $parameters, "selectall");
			}

			return $master_type_code_info;
		}
	}


	if (!function_exists('validateDate')) {
		function validateDate($date, $format = 'Y-m-d H:i:s')
		{
			if(is_string($date)){
				$d = DateTime::createFromFormat($format, $date);
				return $d && $d->format($format) == $date;
			}else{
				return false;
			}
		}
	}


	if (!function_exists('insert_record')) {
		function insert_record($table_name, $data, $dump_sql = NULL)
		{
			$result = "";

			if (!empty($table_name) && !empty($data)) {
				$sql        = "insert into `" . $table_name . "` set ";
				$parameters = array();
				foreach ($data as $table_field => $value) {
					$sql .= "`" . $table_field . "` = ?, ";
					$parameters[] = $value;
				}

				$sql = substr_replace($sql, "", -2);
			}

			if (!empty($dump_sql)) {
				$result = dump_sql($sql, $parameters);
			} else {
				$result = bind_pdo($sql, $parameters);
			}

			return $result;
		}
	}

	if (!function_exists('update_record')) {
		function update_record($table_name, $data, $where, $dump_sql = NULL)
		{
			$result = "";

			if (!empty($table_name) && !empty($data)) {
				$sql        = "update `" . $table_name . "` set ";
				$parameters = array();
				foreach ($data as $table_field => $value) {
					$sql .= "`" . $table_field . "` = ?, ";
					$parameters[] = $value;
				}
				$sql = substr_replace($sql, "", -2);

				$sql .= " where " . $where["sql"];
				foreach ($where["parameters"] as $table_field => $value) {
					$parameters[] = $value;
				}

				if (!empty($dump_sql)) {
					$result = dump_sql($sql, $parameters);
				} else {
					$result = bind_pdo($sql, $parameters);
				}

			}

			return $result;
		}
	}


	if (!function_exists('call_curl')) {
		function call_curl($url, $postData, $post)
		{
			if (!empty($post)) {
				$ch = curl_init();
				curl_setopt($ch, CURLOPT_URL, $url);
				curl_setopt($ch, CURLOPT_RETURNTRANSFER, 1);
				curl_setopt($ch, CURLOPT_POST, 1);
				curl_setopt($ch, CURLOPT_IPRESOLVE, CURL_IPRESOLVE_V4);
				curl_setopt($ch, CURLOPT_HEADER, 0);
				curl_setopt($ch, CURLOPT_SSL_VERIFYPEER, 0);
				curl_setopt($ch, CURLOPT_POSTFIELDS, $postData);
				$result = curl_exec($ch);
				curl_close($ch);
			} else {
				$ch = curl_init();
				curl_setopt($ch, CURLOPT_URL, $url);
				curl_setopt($ch, CURLOPT_RETURNTRANSFER, 1);
				curl_setopt($ch, CURLOPT_IPRESOLVE, CURL_IPRESOLVE_V4);
				curl_setopt($ch, CURLOPT_HEADER, 0);
				curl_setopt($ch, CURLOPT_SSL_VERIFYPEER, 0);
				$result = curl_exec($ch);
				curl_close($ch);
			}

			return $result;
		}
	}


	if (!function_exists('numberformat')) {
		function numberformat($data, $decial_place = 2, $thousand = ",")
		{
			return number_format($data, $decial_place, ".", $thousand);
		}
	}


	if (!function_exists('get_index_url_parameter')) {
		function get_index_url_parameter()
		{
			$params                  = $_SERVER['QUERY_STRING'];
			$get_index_url_parameter = $params;

			return $get_index_url_parameter;
		}
	}

	/*if (!function_exists('get_langcode')) {
		function get_langcode()
		{
			if (strpos($_SERVER['REQUEST_URI'], "/en/") !== FALSE || strpos($_SERVER['REQUEST_URI'], "/tc/") !== FALSE){

				$tokens   = explode('/', $_SERVER['REQUEST_URI']);
				$langcode = $tokens[sizeof($tokens) - 2];


				if($langcode != "en" && $langcode != "tc"){
					$langcode = "en";
				}

				return $langcode;

			}else{
				if(isset($_SESSION["langcode"]))
					return $_SESSION["langcode"];
				else
					return "en";
			}
		}
	}

	$langcode = get_langcode();*/


	/*if (!empty($langcode)) {
		$_SESSION["langcode"] = $langcode;
	} else {
		$_SESSION["langcode"] = "en";
		$langcode             = "en";
	}*/

	$langcode             = "en";

	if (!function_exists('change_langcode_url')) {
		function change_langcode_url()
		{
			$tokens   = explode('/', $_SERVER['REQUEST_URI']);
			$langcode_url = $tokens[sizeof($tokens) - 1];

			return htmlspecialchars($langcode_url, ENT_QUOTES);
		}
	}


	if(!function_exists('sorting_by_price')){
		function sorting_by_price($a, $b)
		{
			if ($a["lowest_price"] == $b["lowest_price"]) {
				return 0;
			}
			return ($a["lowest_price"] < $b["lowest_price"]) ? -1 : 1;
		}
	}

	if (!function_exists('_log')) {
		function _log($page, $log_id, $log_sql, $log_para)
		{
			$data = array(
				"page"       => $page,
				"log_id"     => $log_id,
				"log_sql"    => $log_sql,
				"log_para"   => json_encode($log_para),
				"log_query"  => dump_sql($log_sql, $log_para),
				"createdate" => date("Y-m-d H:i:s"),
			);

			insert_record("log", $data);

		}
	}

	if(!function_exists('get_valid_course_category')){
		function get_valid_course_category()
		{
			//course category at least has a valid course

			$valid_course_category_info = array();
			$sql                  = "select * from course_category where status = ? and deleted = ?";
			$parameters           = array(1, 0);
			$course_category_info = bind_pdo($sql, $parameters, "selectall");

			foreach($course_category_info as $course_category){
				$sql         = "select * from course where course_category_id = ? and status = ? and deleted = ?";
				$parameters  = array($course_category["id"], 1, 0);
				$course_info = bind_pdo($sql, $parameters, "selectall");

				if(!empty($course_info)){
					$valid_course_category_info[] = $course_category;
				}
			}

			return $valid_course_category_info;

		}
	}

	if(!function_exists('get_menu_info')){
		function get_menu_info($menu_id)
		{
			global $langcode;

			$sql = "select * from menu where id = ?";
			$parameters = array($menu_id);
			$this_menu_info = bind_pdo($sql, $parameters, "selectone");

			$this_menu_info["desc_".$langcode] = str_replace("../", "", $this_menu_info["desc_".$langcode]);

			return $this_menu_info;

		}
	}

	if(!function_exists('get_news_list')){
		function get_news_list($type_id, $start=NULL, $limit=NULL)
		{
			if(isset($start) && isset($limit)){
				$limit = "limit ".$start.",".$limit;
			}else{
				$limit = "";
			}

			if($type_id == "SPECIAL_OFFERS"){
				$sql = "select * from news where typeid = ? and status = ? and deleted = ? order by posted_date DESC ".$limit;
				$parameters = array($type_id, 1, 0);
				$result = bind_pdo($sql, $parameters, "selectall");
			}else{
				$sql = "select * from news where typeid = ? and status = ? and deleted = ? and ? between published_from and published_to order by posted_date DESC ".$limit;
				$parameters = array($type_id, 1, 0, date("Y-m-d"));
				$result = bind_pdo($sql, $parameters, "selectall");
			}


			return $result;
		}
	}

	if(!function_exists('get_news_detail')){
		function get_news_detail($id)
		{
			$sql = "select * from news where id = ? and status = ? and deleted = ? order by posted_date DESC";
			$parameters = array($id, 1, 0);
			$result = bind_pdo($sql, $parameters, "selectone");

			return $result;
		}
	}

	if(!function_exists('get_enrollment')){
		function get_enrollment($id=NULL)
		{
			if(!empty($id)){
				$sql = "select * from enrollment where deleted = ? and id = ? order by enrollment_date DESC, ref_code DESC";
				$parameters = array(0, $id);
				$result = bind_pdo($sql, $parameters, "selectone");
			}else{
				$sql = "select * from enrollment where deleted = ? order by enrollment_date DESC, ref_code DESC";
				$parameters = array(0);
				$result = bind_pdo($sql, $parameters, "selectall");
			}
			
			return $result;
		}
	}

	if (!function_exists('get_enrollment_by_email')) {
		function get_enrollment_by_email($email)
		{
			$all_enrollment_info = get_enrollment();
			$result = array();

			foreach ($all_enrollment_info as $row) {
				$decrypt_email = rsa_crypt($row["email"], 2);

				if ($email == $decrypt_email) {
					$result[] = $row;
				}
			}

			return $result;
		}
	}

	if(!function_exists('get_enrollment_email_list')){
		function get_enrollment_email_list()
		{
			$all_enrollment_info = get_enrollment();

			$email_list = array();
			foreach($all_enrollment_info as $row){
				$exist = false;
				$decrypt_email = rsa_crypt($row["email"], 2);
				foreach($email_list as $email){
					if($email == $decrypt_email){
						$exist = true;
					}
				}

				if(!$exist){
					$email_list[] = $decrypt_email;
				}
			}

			return $email_list;
		}
	}

	if(!function_exists('get_course')){
		function get_course($id=NULL)
		{
			if(!empty($id)){
				$sql = "select * from course where deleted = ? and id = ? order by code ASC";
				$parameters = array(0, $id);
				$result = bind_pdo($sql, $parameters, "selectone");
			}else{
				$sql = "select * from course where deleted = ? order by code ASC";
				$parameters = array(0);
				$result = bind_pdo($sql, $parameters, "selectall");
			}

			return $result;
		}
	}

	if (!function_exists('get_ref_code')) {
		function get_ref_code()
		{
			$d                = new DateTime();
			$first_date_month = date("Y-m" . "-01");
			$last_date_month  = $d->format('Y-m-t');

			$sql        = "select count(*) as total_num from enrollment where enrollment_date between ? and ?";
			$parameters = array($first_date_month, $last_date_month);
			$result     = bind_pdo($sql, $parameters, "selectone");

			$ref_code = "E" . date("y") . date("m") . str_pad(($result["total_num"] + 1), 4, '0', STR_PAD_LEFT);

			return $ref_code;
		}
	}

	if(!function_exists('get_company_name')){
		function get_company_name($company_name=NULL)
		{
			if(!empty($company_name)){
				$sql = "select * from ra_code where deleted = ? and (company_name_en like ? || company_name_tc like ? ) order by company_name_en ASC";
				$parameters = array(0, $company_name);
				$result = bind_pdo($sql, $parameters, "selectone");
			}else{
				$sql = "select * from ra_code where deleted = ? order by company_name_en ASC";
				$parameters = array(0);
				$result = bind_pdo($sql, $parameters, "selectall");
			}

			return $result;
		}
	}

	if (!function_exists('check_course_valid_apply')) {
		function check_course_valid_apply($course_id)
		{
			$course_info = get_course($course_id);

			$start_date = new DateTime();
			$end_date = new DateTime($course_info["end_date"]);

			if($start_date->format("Y-m-d") <= $end_date->format("Y-m-d")){
				$since_start = $start_date->diff(new DateTime($course_info["end_date"]));
				//echo $since_start->days.' days total<br>';
				//echo $since_start->d.' days<br>';
				if($since_start->d >= 6){ //7 day before
					return true;
				}else{
					return false;
				}
			}else{
				return false;
			}
		}
	}

	$sql             = "SELECT * FROM sys_lang WHERE langstatus = '1' ORDER BY langsort ASC ";
	$lang_array_info = bind_pdo($sql, NULL, "selectall");
	foreach ($lang_array_info as $lang_info) {
		$arraylangcode[$lang_info{'langcode'}] = $lang_info{'langname'};
	}


	clean_data($_REQUEST);