<script type="text/javascript">
$(document).ready(function(){
	$("#browser").treeview({
		collapsed: true,
		persist: "cookie",
		animated:"normal"
	});
});
</script>
<script type="text/javascript">
function MM_jumpMenu(targ,selObj,restore){ //v3.0
  eval(targ+".location='"+selObj.options[selObj.selectedIndex].value+"'");
  if (restore) selObj.selectedIndex=0;
}
</script>
<script type="text/javascript">
$(document).ready(function() {
	$('#check_all')
		.click(function() {
			if($(this).is(':checked')) {
				$(".checkbox").prop('checked', true);
			}	else	{
				$(".checkbox").prop('checked', false);
			}
	});
});
</script>
<?php
include 'config.php';

// Check if the user is logged in

if ((!isSet($_SESSION['loginname'])) || ($loggin <> '1'))
{
header("Location: login.php");
exit;
}
?>
<?php
$index = (int)$_GET["index"];
$pid = (int)$_GET['pid'];
$lv = (int)$_GET["lv"];

if($_SESSION['role'] == 'User'){
	$company_check_sql = "SELECT * FROM file_company_user Where userid=:userid";
	$company_check = Db::getDbh()->prepare($company_check_sql);
	$company_check->execute(array(":userid" => $_SESSION['loginid']));
	if( $error = $company_check->getError(array(":userid" => $_SESSION['loginid'])) ){
		var_dump($error);
	}
	$row_company_check = $company_check->fetch(PDO::FETCH_ASSOC);
	$companyid = $row_company_check{'companyid'};
}	else	{
	if(empty($_GET["companyid"])){
		$company_check_sql = "SELECT * FROM file_company Where status = '1' order by sort ASC Limit 1";
		$company_check = Db::getDbh()->prepare($company_check_sql);
		$company_check->execute();
		if( $error = $company_check->getError() ){
			var_dump($error);
		}
		$row_company_check = $company_check->fetch(PDO::FETCH_ASSOC);
		$companyid = $row_company_check{'companyid'};
	}	else	{
		$companyid = (int)$_GET["companyid"];
	}
}

$user_role_check_sql = "SELECT file_role.title FROM file_role_user INNER JOIN file_role ON file_role.roleid = file_role_user.roleid WHERE userid=:userid";
$user_role_check = Db::getDbh()->prepare($user_role_check_sql);
$user_role_check->execute(array(":userid" => $_SESSION['loginid']));
if( $error = $user_role_check->getError(array(":userid" => $_SESSION['loginid'])) ){
	var_dump($error);
}
$role_count = $user_role_check->rowCount();
if ($role_count > 0) {
	$row_user_role_check = $user_role_check->fetch(PDO::FETCH_ASSOC);
}

?>
<script type="text/javascript">
$(document).ready(function(e) {
	$('#cancel_btn')
		.click(function() {
			window.location.href = 'index.php?index=<?=$index;?>&companyid=<?=$companyid;?>&pid=<?=$pid;?>&lv=<?=getLevelNum($pid);?>';
	});
});
</script>
<?php
//print_r($_GET);
//exit;

if($_REQUEST["modifyfolder"] == "1"){
	$folderid = (int)$_GET["modifyfolderid"];
	$modify_folder_sql = "SELECT * FROM file_folder Where folderid=:folderid";
	$modify_folder = Db::getDbh()->prepare($modify_folder_sql);
	$modify_folder->execute(array(":folderid" => $folderid));
	if( $error = $modify_folder->getError(array(":folderid" => $folderid)) ){
		var_dump($error);
	}
	$row_modify_folder = $modify_folder->fetch(PDO::FETCH_ASSOC);
    echo"<form action='modify_folder.php' method='post' name='modifyfolder' enctype='multipart/form-data'>
			<input type='hidden' name='index' value='".$index."' />
			<input type='hidden' name='companyid' value='".$companyid."' />
			<input type='hidden' name='parentid' value='".$pid."' />
			<input type='hidden' name='levelnum' value='".$lv."' />
			<input type='hidden' name='folderid' value='".$row_modify_folder{'folderid'}."' />";
	echo"	<div class='tab_title'>Modify Folder</div>
			<div class='tab_content'>
				<div class='message'>Your maximum length : <b>50</b></div>
				<table class='tab_upload_table' width='400' border='0' cellspacing='0' cellpadding='0'>";
	if(($_SESSION['role'] == 'Superadmin') || ($_SESSION['role'] == 'Admin')){
		echo"	  <tr>
					<td width='100'>Company</td>
					<td width='300'>";
					echo"<select name='select_companyid' onChange=\"MM_jumpMenu('self',this,0)\">";
					$company_list_sql = "SELECT * FROM file_company Where status = '1' ORDER BY sort ASC";
					$company_list = Db::getDbh()->prepare($company_list_sql);
					$company_list->execute();
					if( $error = $company_list->getError() ){
						var_dump($error);
					}
					while ($row_company_list = $company_list->fetch(PDO::FETCH_ASSOC)){
						echo"<option value='index.php?index=".$index."&companyid=".$row_company_list{'companyid'}."&modifyfolder=1&modifyfolderid=".$row_modify_folder{'folderid'}."' ".getSelect($companyid, $row_company_list{'companyid'}).">".$row_company_list{'title'}."</option>";
					}
					echo"</select>
					</td>
				  </tr>";
	}
	echo"		  <tr>
					<td width='100'>Title</td>
					<td width='300'>
						<input type='text' name='title' value='".$row_modify_folder{'title'}."'>
					</td>
				  </tr>";
						  $i = 1;
						  $role_list_sql = "SELECT * FROM file_role WHERE status = '1' ORDER BY sort ASC";
						  $role_list = Db::getDbh()->prepare($role_list_sql);
						  $role_list->execute();
						  if( $error = $role_list->getError() ){
							  var_dump($error);
						  }
						  while ($row_role_list = $role_list->fetch(PDO::FETCH_ASSOC)){
							  $permission_check_sql = "SELECT * FROM file_folder_permission Where folderid=:folderid AND roleid=:roleid";
							  $permission_check = Db::getDbh()->prepare($permission_check_sql);
							  $permission_check->execute(array(":folderid" => $row_modify_folder{'folderid'}, ":roleid" => $row_role_list{'roleid'}));
							  if( $error = $permission_check->getError(array(":folderid" => $row_modify_folder{'folderid'}, ":roleid" => $row_role_list{'roleid'})) ){
								  var_dump($error);
							  }
							  $row_permission_check = $permission_check->fetch(PDO::FETCH_ASSOC);
							  echo"<input type='hidden' name='roleid[".$i."]' value='".$row_role_list{'roleid'}."'>
									<input type='hidden' name='read[".$i."]' ";
							  if ($row_permission_check{'p_read'} == 1){
								  echo"value='1'";
							  }
							  echo"/>
							  <input type='hidden' name='write[".$i."]' ";
							  if ($row_permission_check{'p_write'} == 1){
								  echo"value='1'";
							  }
							  echo"/>";
							  $i++;
						  }
	echo"		  <tr>
					<td colspan='2'>
						<a href='#' onclick='modifyfolder.submit()'><div class='tab_content_btn' style='width:50px; background:url(images/save_btn.png) center center no-repeat;'></div></a>
						<a href='#' id='cancel_btn'><div class='tab_content_btn' style='width:50px; background:url(images/cancel_btn.png) center center no-repeat;'></div></a>
					</td>
				  </tr>
				</table>
			</div>
		  </form>";

}	elseif($_REQUEST["modifyfile"] == "1"){
	$fileid = (int)$_GET["modifyfileid"];
	$modify_file_sql = "SELECT * FROM file_content Where fileid=:fileid";
	$modify_file = Db::getDbh()->prepare($modify_file_sql);
	$modify_file->execute(array(":fileid" => $fileid));
	if( $error = $modify_file->getError(array(":fileid" => $fileid)) ){
		var_dump($error);
	}
	$row_modify_file = $modify_file->fetch(PDO::FETCH_ASSOC);
    echo"<form action='modify_file.php' method='post' name='modifyfile' enctype='multipart/form-data'>
			<input type='hidden' name='index' value='".$index."' />
			<input type='hidden' name='companyid' value='".$companyid."' />
			<input type='hidden' name='parentid' value='".$pid."' />
			<input type='hidden' name='levelnum' value='".$lv."' />
			<input type='hidden' name='fileid' value='".$row_modify_file{'fileid'}."' />
			<input type='hidden' name='folderid' value='".$row_modify_file{'folderid'}."' />";
	echo"	<div class='tab_title'>Modify File</div>
			<div class='tab_content'>
				<div class='message'>Your maximum filesize : <b>10MB</b></div>
				<table class='tab_upload_table' width='400' border='0' cellspacing='0' cellpadding='0'>";
	if(($_SESSION['role'] == 'Superadmin') || ($_SESSION['role'] == 'Admin')){
		echo"	  <tr>
					<td width='100'>Company</td>
					<td width='300'>";
					echo"<select name='select_companyid' onChange=\"MM_jumpMenu('self',this,0)\">";
					$company_list_sql = "SELECT * FROM file_company Where status = '1' ORDER BY sort ASC";
					$company_list = Db::getDbh()->prepare($company_list_sql);
					$company_list->execute();
					if( $error = $company_list->getError() ){
						var_dump($error);
					}
					while ($row_company_list = $company_list->fetch(PDO::FETCH_ASSOC)){
						echo"<option value='index.php?index=".$index."&companyid=".$row_company_list{'companyid'}."&modifyfile=1&modifyfileid=".$row_modify_file{'fileid'}."' ".getSelect($companyid, $row_company_list{'companyid'}).">".$row_company_list{'title'}."</option>";
					}
					echo"</select>
					</td>
				  </tr>";
	}
	echo"		  <tr>
					<td width='100'>Switch Folder</td>
					<td width='300'>";
					echo"<select name='folderid'>";
					echo"<option value='0' ".getSelect('0', $pid).">Root</option>";
					$upload_folder_sql = "SELECT * FROM file_folder Where levelnum = '1' AND companyid=:companyid AND status = '1' ORDER BY sort ASC";
					$upload_folder = Db::getDbh()->prepare($upload_folder_sql);
					$upload_folder->execute(array(":companyid" => $companyid));
					if( $error = $upload_folder->getError(array(":companyid" => $companyid)) ){
						var_dump($error);
					}
					while ($row_upload_folder = $upload_folder->fetch(PDO::FETCH_ASSOC)){
						echo"<option value='".$row_upload_folder{'folderid'}."' ".getSelect($row_upload_folder{'folderid'}, $pid).">".$row_upload_folder{'title'}."</option>";
						$upload_subfolder_sql = "SELECT * FROM file_folder Where parentid=:parentid AND status = '1' ORDER BY sort ASC";
						$upload_subfolder = Db::getDbh()->prepare($upload_subfolder_sql);
						$upload_subfolder->execute(array(":parentid" => $row_upload_folder{'folderid'}));
						if( $error = $upload_subfolder->getError(array(":parentid" => $row_upload_folder{'folderid'})) ){
							var_dump($error);
						}
						while ($row_upload_subfolder = $upload_subfolder->fetch(PDO::FETCH_ASSOC)){
							echo"<option value='".$row_upload_subfolder{'folderid'}."' ".getSelect($row_upload_subfolder{'folderid'}, $pid).">--".$row_upload_subfolder{'title'}."</option>";
						}
					}
					echo"</select>";
	echo"				</td>
				  </tr>
				  <tr>
					<td width='100'>Title</td>
					<td width='300'>
						<input type='text' name='title' value='".$row_modify_file{'title'}."'>
					</td>
				  </tr>
				  <tr>
					<td colspan='2'>";
	if ($row_modify_file{'filename'} <> '' ){
		echo"<a href='getfile.php?id=".$row_modify_file{'hash'}."' target='_blank'><img src='images/icon_Search.jpg' border='0' align='absmiddle'>View file</a><br />";
	}
	echo"				<input type='file' name='filename' style='border:none;'>
					</td>
				  </tr>
				  <tr>
					<td colspan='2'>
						<a href='#' onclick='modifyfile.submit()'><div class='tab_content_btn' style='width:50px; background:url(images/save_btn.png) center center no-repeat;'></div></a>
						<a href='#' id='cancel_btn'><div class='tab_content_btn' style='width:50px; background:url(images/cancel_btn.png) center center no-repeat;'></div></a>
					</td>
				  </tr>
				</table>
			</div>
		</form>";

}	elseif($_REQUEST["upload"] == "1"){
    echo"<form action='add_file.php' method='post' name='addfile' enctype='multipart/form-data'>
			<input type='hidden' name='index' value='".$index."' />
			<input type='hidden' name='parentid' value='".$pid."' />
			<input type='hidden' name='levelnum' value='".$lv."' />
			<input type='hidden' name='companyid' value='".$companyid."' />";
	echo"	<div class='tab_title'>Upload File</div>
			<div class='tab_content'>
				<div class='message'>Your maximum filesize : <b>10MB</b></div>
				<table class='tab_upload_table' width='400' border='0' cellspacing='0' cellpadding='0'>";
	if(($_SESSION['role'] == 'Superadmin') || ($_SESSION['role'] == 'Admin')){
		echo"	  <tr>
					<td width='100'>Company</td>
					<td width='300'>";
					echo"<select name='select_companyid' onChange=\"MM_jumpMenu('self',this,0)\">";
					$company_list_sql = "SELECT * FROM file_company Where status = '1' ORDER BY sort ASC";
					$company_list = Db::getDbh()->prepare($company_list_sql);
					$company_list->execute();
					if( $error = $company_list->getError() ){
						var_dump($error);
					}
					while ($row_company_list = $company_list->fetch(PDO::FETCH_ASSOC)){
						echo"<option value='index.php?index=".$index."&companyid=".$row_company_list{'companyid'}."&upload=1' ".getSelect($companyid, $row_company_list{'companyid'}).">".$row_company_list{'title'}."</option>";
					}
					echo"</select>
					</td>
				  </tr>";
	}
	echo"		  <tr>
					<td width='100'>Switch Folder</td>
					<td width='300'>";
					echo"<select name='folderid'>";
					echo"<option value='0' ".getSelect('0', $pid).">Root</option>";
					$upload_folder_sql = "SELECT * FROM file_folder Where levelnum = '1' AND companyid=:companyid AND status = '1' ORDER BY sort ASC";
					$upload_folder = Db::getDbh()->prepare($upload_folder_sql);
					$upload_folder->execute(array(":companyid" => $companyid));
					if( $error = $upload_folder->getError(array(":companyid" => $companyid)) ){
						var_dump($error);
					}
					while ($row_upload_folder = $upload_folder->fetch(PDO::FETCH_ASSOC)){
						echo"<option value='".$row_upload_folder{'folderid'}."' ".getSelect($row_upload_folder{'folderid'}, $pid).">".$row_upload_folder{'title'}."</option>";
						$upload_subfolder_sql = "SELECT * FROM file_folder Where parentid=:parentid AND status = '1' ORDER BY sort ASC";
						$upload_subfolder = Db::getDbh()->prepare($upload_subfolder_sql);
						$upload_subfolder->execute(array(":parentid" => $row_upload_folder{'folderid'}));
						if( $error = $upload_subfolder->getError(array(":parentid" => $row_upload_folder{'folderid'})) ){
							var_dump($error);
						}
						while ($row_upload_subfolder = $upload_subfolder->fetch(PDO::FETCH_ASSOC)){
							echo"<option value='".$row_upload_subfolder{'folderid'}."' ".getSelect($row_upload_subfolder{'folderid'}, $pid).">--".$row_upload_subfolder{'title'}."</option>";
						}
					}
					echo"</select>";
	echo"				</td>
				  </tr>
				  <tr>
					<td width='100'>Title</td>
					<td width='300'>
						<input type='text' name='title'>
					</td>
				  </tr>
				  <tr>
					<td colspan='2'>
						<input type='file' name='filename' style='border:none;'>
					</td>
				  </tr>
				  <tr>
					<td colspan='2'>
						<a href='#' onclick='addfile.submit()'><div class='tab_content_btn' style='width:100px; background:url(images/upload_file_btn.png) center center no-repeat;'></div></a>
						<a href='#' id='cancel_btn'><div class='tab_content_btn' style='width:50px; background:url(images/cancel_btn.png) center center no-repeat;'></div></a>
					</td>
				  </tr>
				</table>
			</div>
		</form>";

}	elseif($_REQUEST["addfolder"] == "1"){
    echo"<form action='add_folder.php' method='post' name='addfolder' enctype='multipart/form-data'>
			<input type='hidden' name='index' value='".$index."' />
			<input type='hidden' name='parentid' value='".$pid."' />
			<input type='hidden' name='levelnum' value='".$lv."' />
			<input type='hidden' name='companyid' value='".$companyid."' />";
	echo"	<div class='tab_title'>Add Folder</div>
			<div class='tab_content'>
				<div class='message'>Your maximum length : <b>50</b></div>
				<table class='tab_upload_table' width='400' border='0' cellspacing='0' cellpadding='0'>";
	if(($_SESSION['role'] == 'Superadmin') || ($_SESSION['role'] == 'Admin')){
		echo"	  <tr>
					<td width='100'>Company</td>
					<td width='300'>";
					echo"<select name='select_companyid' onChange=\"MM_jumpMenu('self',this,0)\">";
					$company_list_sql = "SELECT * FROM file_company Where status = '1' ORDER BY sort ASC";
					$company_list = Db::getDbh()->prepare($company_list_sql);
					$company_list->execute();
					if( $error = $company_list->getError() ){
						var_dump($error);
					}
					while ($row_company_list = $company_list->fetch(PDO::FETCH_ASSOC)){
						echo"<option value='index.php?index=".$index."&companyid=".$row_company_list{'companyid'}."&addfolder=1' ".getSelect($companyid, $row_company_list{'companyid'}).">".$row_company_list{'title'}."</option>";
					}
					echo"</select>
					</td>
				  </tr>";
	}
	echo"		  <tr>
					<td width='100'>Title</td>
					<td width='300'>
						<input type='text' name='title'>
					</td>
				  </tr>";
						  $i = 1;
						  $role_list_sql = "SELECT * FROM file_role WHERE status = '1' ORDER BY sort ASC";
						  $role_list = Db::getDbh()->prepare($role_list_sql);
						  $role_list->execute();
						  if( $error = $role_list->getError() ){
							  var_dump($error);
						  }
						  while ($row_role_list = $role_list->fetch(PDO::FETCH_ASSOC)){
							  echo"<input type='hidden' name='roleid[".$i."]' value='".$row_role_list{'roleid'}."'>
							  		<input type='hidden' name='read[".$i."]' value='1' />
									<input type='hidden' name='write[".$i."]' value='1' />";
							  $i++;
						  }
	echo"		  <tr>
					<td colspan='2'>
						<a href='#' onclick='addfolder.submit()'><div class='tab_content_btn' style='width:100px; background:url(images/add_folder_btn.png) center center no-repeat;'></div></a>
						<a href='#' id='cancel_btn'><div class='tab_content_btn' style='width:50px; background:url(images/cancel_btn.png) center center no-repeat;'></div></a>
					</td>
				  </tr>
				</table>
			</div>
		  </form>";
}	else	{
	$i=0;
	echo"<form action='delete_file.php' method='post' name='deletefile' enctype='multipart/form-data'>
			<input type='hidden' name='index' value='".$index."' />
			<input type='hidden' name='companyid' value='".$companyid."' />
			<input type='hidden' name='parentid' value='".$pid."' />";
	echo"<div class='tab_title'>File Management</div>
		<div class='tab_content'>";
	if(($_SESSION['role'] == 'Superadmin') || ($_SESSION['role'] == 'Admin')){
		echo"<select name='select_companyid' onChange=\"MM_jumpMenu('self',this,0)\">";
		$company_list_sql = "SELECT * FROM file_company Where status = '1' ORDER BY sort ASC";
		$company_list = Db::getDbh()->prepare($company_list_sql);
		$company_list->execute();
		if( $error = $company_list->getError() ){
			var_dump($error);
		}
		while ($row_company_list = $company_list->fetch(PDO::FETCH_ASSOC)){
			echo"<option value='index.php?index=".$index."&companyid=".$row_company_list{'companyid'}."' ".getSelect($companyid, $row_company_list{'companyid'}).">".$row_company_list{'title'}."</option>";
		}
		echo"</select>";
		echo"<br>";
		echo"<br>";
	}
    echo"	<div style='clear:both;'></div>";
    echo"	<div class='tab_content_left'>
				<div class='sidemenu_frame'>
					<ul id='browser' class='filetree'>";
	$folder_list_sql = "select * from file_folder where parentid=:parentid AND companyid=:companyid";
	$folder_list_param = array();
	$folder_list_param[':parentid'] = '0';
	$folder_list_param[':companyid'] = $companyid;
	if($_SESSION['role'] == 'Superadmin' || $_SESSION['role'] == 'Admin' || $row_user_role_check{'title'} == 'Admin'){
		$folder_list_sql .= "  AND deleted = '0'";
	}	else	{
		$folder_list_sql .= " AND status = '1'";
	}
	$folder_list_sql .= " order by sort ASC";
	$folder_list = Db::getDbh()->prepare($folder_list_sql);
	$folder_list->execute($folder_list_param);
	if( $error = $folder_list->getError($folder_list_param) ){
		var_dump($error);
	}
	while ($row_folder_list = $folder_list->fetch(PDO::FETCH_ASSOC)) {
		echo"			<li><span class='folder'><a href='index.php?index=".$index."&companyid=".$companyid."&pid=".$row_folder_list{'folderid'}."'>".$row_folder_list{'title'}."</a></span>";
		$subfolder_list_sql = "SELECT * FROM file_folder Where parentid=:parentid AND status = '1' ORDER BY sort ASC";
		$subfolder_list = Db::getDbh()->prepare($subfolder_list_sql);
		$subfolder_list->execute(array(":parentid" => $row_folder_list{'folderid'}));
		if( $error = $subfolder_list->getError(array(":parentid" => $row_folder_list{'folderid'})) ){
			var_dump($error);
		}
		$subfolder_list_count = $subfolder_list->rowCount();
		if ($subfolder_list_count > 0 ) {
			echo"			<ul>";
			while ($row_subfolder_list = $subfolder_list->fetch(PDO::FETCH_ASSOC)){
				echo"			<li><span class='folder'><a href='index.php?index=".$index."&companyid=".$companyid."&pid=".$row_subfolder_list{'folderid'}."'>".$row_subfolder_list{'title'}."</a></span>";
				$subsubfolder_list_sql = "SELECT * FROM file_folder Where parentid=:parentid AND status = '1' ORDER BY sort ASC";
				$subsubfolder_list = Db::getDbh()->prepare($subsubfolder_list_sql);
				$subsubfolder_list->execute(array(":parentid" => $row_subfolder_list{'folderid'}));
				if( $error = $subsubfolder_list->getError(array(":parentid" => $row_subfolder_list{'folderid'})) ){
					var_dump($error);
				}
				$subsubfolder_list_count = $subsubfolder_list->rowCount();
				if ($subsubfolder_list_count > 0 ) {
				echo"		<ul>";
					while ($row_subsubfolder_list = $subsubfolder_list->fetch(PDO::FETCH_ASSOC)){
						echo"		<li><span class='folder'><a href='index.php?index=".$index."&companyid=".$companyid."&pid=".$row_subsubfolder_list{'folderid'}."'>".$row_subsubfolder_list{'title'}."</a></span></li>";
					}
					echo"		</ul>";
				}
			}
			echo"			</ul>";
		}
		echo"			</li>";
	}
	echo"			</ul>
				</div>
			</div>";
    echo"	<div class='tab_content_right'>";
				echo"<div class='file_path'><a href='index.php'>Home</a>".getLevel($pid)."</div>";
				if($_SESSION['role'] == 'Superadmin' || $_SESSION['role'] == 'Admin' || $row_user_role_check{'title'} == 'Admin' ){
					if (getLevelNum($pid) > 0) {
						echo"<a href='index.php?index=".$index."&companyid=".$companyid."&addfolder=1&pid=".$pid."&lv=".getLevelNum($pid)."'><div class='tab_content_btn' style='width:100px; background:url(images/add_folder_btn.png) center center no-repeat;'></div></a>";
					}
					echo"<a href='index.php?index=".$index."&companyid=".$companyid."&upload=1&pid=".$pid."&lv=".getLevelNum($pid)."'><div class='tab_content_btn' style='width:100px; background:url(images/upload_file_btn.png) center center no-repeat;'></div></a>";
					echo"<a href='#' onclick='deletefile.submit()'><div class='tab_content_btn' style='width: 80px; background: url(images/delete_btn.png) center center no-repeat; float: right; margin-right: 0px;'></div></a>";
				}
				echo"	<div style='clear:both;'></div>";
				echo"	<table class='tab_content_table' width='100%' border='0' cellspacing='0' cellpadding='0'>
						  <tr>
							<td class='title' width='40' align='center'>ID</td>
							<td colspan='2' class='title'>Title</td>
							<td class='title' width='50'>Format</td>
							<td class='title' width='80'>Size</td>
							<td class='title' width='200'>File Name</td>
							<td class='title' width='100'>Uploader</td>
							<td class='title' width='120'>Date Uploaded</td>
							<td class='title' width='20'></td>
							<td class='title' width='20'></td>
							<td class='title' width='20' align='center'>";
				if($_SESSION['role'] == 'Superadmin' || $_SESSION['role'] == 'Admin' || $row_user_role_check{'title'} == 'Admin'){
					echo"		<input type='checkbox' class='check_all' id='check_all'>";
				}
				echo"		</td>
						  </tr>";
				if($_SESSION['role'] == 'Superadmin' || $_SESSION['role'] == 'Admin' || $row_user_role_check{'title'} == 'Admin'){
					if (getLevelNum($pid) <= 1) {
						$folder_list_sql = "select * from file_folder where parentid=:parentid AND companyid=:companyid";
						$folder_list_param = array();
						$folder_list_param[':parentid'] = $pid;
						$folder_list_param[':companyid'] = $companyid;
						if($_SESSION['role'] == 'Superadmin' || $_SESSION['role'] == 'Admin' || $row_user_role_check{'title'} == 'Admin'){
							$folder_list_sql .= "  AND deleted = '0'";
						}	else	{
							$folder_list_sql .= " AND status = '1'";
						}
						$folder_list_sql .= " order by sort ASC";
						$folder_list = Db::getDbh()->prepare($folder_list_sql);
						$folder_list->execute($folder_list_param);
						if( $error = $folder_list->getError($folder_list_param) ){
							var_dump($error);
						}
						while ($row_folder_list = $folder_list->fetch(PDO::FETCH_ASSOC)) {
							$folder_uploader_sql = "select * from sys_login where loginid=:loginid";
							$folder_uploader = Db::getDbh()->prepare($folder_uploader_sql);
							$folder_uploader->execute(array(":loginid" => $row_folder_list{'lastupby'}));
							if( $error = $folder_uploader->getError(array(":loginid" => $row_folder_list{'lastupby'})) ){
								var_dump($error);
							}
							$row_folder_uploader = $folder_uploader->fetch(PDO::FETCH_ASSOC);
							$folder_size_sql = "SELECT SUM(filesize) from file_content where folderid=:folderid AND status = '1'";
							$folder_size = Db::getDbh()->prepare($folder_size_sql);
							$folder_size->execute(array(":folderid" => $row_folder_list{'folderid'}));
							if( $error = $folder_size->getError(array(":folderid" => $row_folder_list{'folderid'})) ){
								var_dump($error);
							}
							$row_folder_size = $folder_size->fetch(PDO::FETCH_ASSOC);
							if ($row_folder_size{'SUM(filesize)'} >= 1073741824){
								$folder_size_display = round($row_folder_size{'SUM(filesize)'}/1024/1024/1024, 2)." GB";
							}	elseif ($row_folder_size{'SUM(filesize)'} >= 1048576){
								$folder_size_display = round($row_folder_size{'SUM(filesize)'}/1024/1024, 2)." MB";
							}	else	{
								$folder_size_display = round($row_folder_size{'SUM(filesize)'}/1024, 2)." KB";
							}
							echo "<tr>
									<td align='center'>-</td>
									<td width='30'><div class='file_type_icon' style='background:url(images/file_icon_folder.png) center center no-repeat;'></div></td>
									<td width='240'><div class='file_title'><a href='index.php?index=".$index."&companyid=".$companyid."&pid=".$row_folder_list{'folderid'}."'>".$row_folder_list{'title'}."</a></div></td>
									<td>Folder</td>
									<td>".$folder_size_display."</td>
									<td>-</td>
									<td>".$row_folder_uploader{'username'}."</td>
									<td>".$row_folder_list{'lastupdate'}."</td>
									<td align='center'>";
							if($_SESSION['role'] == 'Superadmin' || $_SESSION['role'] == 'Admin' || $row_user_role_check{'title'} == 'Admin'){
								if($row_folder_list{'status'} == '1'){
									echo"<a href='status_folder.php?index=".$index."&companyid=".$companyid."&folderid=".$row_folder_list{'folderid'}."&pid=".$pid."&lv=".$lv."'><img src='images/status_tick.png' alt='Enable'></a>";
								}	else	{
									echo"<a href='status_folder.php?index=".$index."&companyid=".$companyid."&folderid=".$row_folder_list{'folderid'}."&pid=".$pid."&lv=".$lv."'><img src='images/status_cross.png' alt='Disable'></a>";
								}
							}
							echo"	</td>
									<td align='center'>";
							if($_SESSION['role'] == 'Superadmin' || $_SESSION['role'] == 'Admin' || $row_user_role_check{'title'} == 'Admin'){
								echo"	<a href='index.php?index=".$index."&companyid=".$companyid."&modifyfolder=1&modifyfolderid=".$row_folder_list{'folderid'}."&pid=".$pid."&lv=".$lv."'><img src='images/modify_icon.png' alt='Modify'></a>";
							}
							echo"	</td>
									<td align='center'>";
							if($_SESSION['role'] == 'Superadmin' || $_SESSION['role'] == 'Admin' || $row_user_role_check{'title'} == 'Admin'){
								if ($row_folder_list{'locked'} <> '1'){
									echo"<input type='checkbox' class='checkbox' name='folderid[".$i."]' value='".$row_folder_list{'folderid'}."'>";
								}
							}
							echo"	</td>
								  </tr>";
							$i++;
						}
					}
					if (getLevelNum($pid) > 1) {
						$folder_target_sql = "select * from file_folder where folderid=:folderid AND companyid=:companyid AND status = '1' order by sort ASC";
						$folder_target = Db::getDbh()->prepare($folder_target_sql);
						$folder_target->execute(array(":folderid" => $pid, ":companyid" => $companyid));
						if( $error = $folder_target->getError(array(":folderid" => $pid, ":companyid" => $companyid)) ){
							var_dump($error);
						}
						$row_folder_target = $folder_target->fetch(PDO::FETCH_ASSOC);

						$folder_list_sql = "select * from file_folder where parentid=:parentid AND companyid=:companyid";
						$folder_list_sql_param = array();
						$folder_list_sql_param[':parentid'] = $row_folder_target{'folderid'};
						$folder_list_sql_param[':companyid'] = $companyid;
						if($_SESSION['role'] == 'Superadmin' || $_SESSION['role'] == 'Admin' || $row_user_role_check{'title'} == 'Admin'){
							$folder_list_sql .= "  AND deleted = '0'";
						}	else	{
							$folder_list_sql .= " AND status = '1'";
						}
						$folder_list_sql .= " order by sort ASC";
						$folder_list = Db::getDbh()->prepare($folder_list_sql);
						$folder_list->execute($folder_list_sql_param);
						if( $error = $folder_list->getError($folder_list_sql_param) ){
							var_dump($error);
						}
						while ($row_folder_list = $folder_list->fetch(PDO::FETCH_ASSOC)) {
							$folder_uploader_sql = "select * from sys_login where loginid=:loginid";
							$folder_uploader = Db::getDbh()->prepare($folder_uploader_sql);
							$folder_uploader->execute(array(":loginid" => $row_folder_list{'lastupby'}));
							if( $error = $folder_uploader->getError(array(":loginid" => $row_folder_list{'lastupby'})) ){
								var_dump($error);
							}
							$row_folder_uploader = $folder_uploader->fetch(PDO::FETCH_ASSOC);
							$folder_size_sql = "SELECT SUM(filesize) from file_content where folderid=:folderid AND status = '1'";
							$folder_size = Db::getDbh()->prepare($folder_size_sql);
							$folder_size->execute(array(":folderid" => $row_folder_list{'folderid'}));
							if( $error = $folder_size->getError(array(":folderid" => $row_folder_list{'folderid'})) ){
								var_dump($error);
							}
							$row_folder_size = $folder_size->fetch(PDO::FETCH_ASSOC);
							if ($row_folder_size{'SUM(filesize)'} >= 1073741824){
								$folder_size_display = round($row_folder_size{'SUM(filesize)'}/1024/1024/1024, 2)." GB";
							}	elseif ($row_folder_size{'SUM(filesize)'} >= 1048576){
								$folder_size_display = round($row_folder_size{'SUM(filesize)'}/1024/1024, 2)." MB";
							}	else	{
								$folder_size_display = round($row_folder_size{'SUM(filesize)'}/1024, 2)." KB";
							}
							echo "<tr>
									<td align='center'>-</td>
									<td width='30'><div class='file_type_icon' style='background:url(images/file_icon_folder.png) center center no-repeat;'></div></td>
									<td width='240'><div class='file_title'><a href='index.php?index=".$index."&companyid=".$companyid."&pid=".$row_folder_list{'folderid'}."'>".$row_folder_list{'title'}."</a></div></td>
									<td>Folder</td>
									<td>".$folder_size_display."</td>
									<td>-</td>
									<td>".$row_folder_uploader{'username'}."</td>
									<td>".$row_folder_list{'lastupdate'}."</td>
									<td align='center'>";
							if($_SESSION['role'] == 'Superadmin' || $_SESSION['role'] == 'Admin' || $row_user_role_check{'title'} == 'Admin'){
								if($row_folder_list{'status'} == '1'){
									echo"<a href='status_folder.php?index=".$index."&companyid=".$companyid."&folderid=".$row_folder_list{'folderid'}."&pid=".$pid."&lv=".$lv."'><img src='images/status_tick.png' alt='Enable'></a>";
								}	else	{
									echo"<a href='status_folder.php?index=".$index."&companyid=".$companyid."&folderid=".$row_folder_list{'folderid'}."&pid=".$pid."&lv=".$lv."'><img src='images/status_cross.png' alt='Disable'></a>";
								}
							}
							echo"	</td>
									<td align='center'>";
							if($_SESSION['role'] == 'Superadmin' || $_SESSION['role'] == 'Admin' || $row_user_role_check{'title'} == 'Admin'){
								echo"	<a href='index.php?index=".$index."&companyid=".$companyid."&modifyfolder=1&modifyfolderid=".$row_folder_list{'folderid'}."&pid=".$pid."&lv=".$lv."'><img src='images/modify_icon.png' alt='Modify'></a>";
							}
							echo"	</td>
									<td align='center'>";
							if($_SESSION['role'] == 'Superadmin' || $_SESSION['role'] == 'Admin' || $row_user_role_check{'title'} == 'Admin'){
								if ($row_folder_list{'locked'} <> '1'){
									echo"<input type='checkbox' class='checkbox' name='folderid[".$i."]' value='".$row_folder_list{'folderid'}."'>";
								}
							}
							echo"	</td>
								  </tr>";
							$i++;
						}
					}
				}
				$file_list_sql = "select * from file_content where folderid=:folderid AND refid = '0' AND companyid=:companyid";
				$file_list_sql_param = array();
				$file_list_sql_param[':folderid'] = $pid;
				$file_list_sql_param[':companyid'] = $companyid;
				if($_SESSION['role'] == 'Superadmin' || $_SESSION['role'] == 'Admin' || $row_user_role_check{'title'} == 'Admin'){
					$file_list_sql .= "  AND deleted = '0'";
				}	else	{
					$file_list_sql .= " AND status = '1'";
				}
				$file_list_sql .= " order by sort ASC";
				$file_list = Db::getDbh()->prepare($file_list_sql);
				$file_list->execute($file_list_sql_param);
				if( $error = $file_list->getError($file_list_sql_param) ){
					var_dump($error);
				}
				while ($row_file_list = $file_list->fetch(PDO::FETCH_ASSOC)) {
					$file_uploader_sql = "select * from sys_login where loginid=:loginid";
					$file_uploader = Db::getDbh()->prepare($file_uploader_sql);
					$file_uploader->execute(array(":loginid" => $row_file_list{'lastupby'}));
					if( $error = $file_uploader->getError(array(":loginid" => $row_file_list{'lastupby'})) ){
						var_dump($error);
					}
					$row_file_uploader = $file_uploader->fetch(PDO::FETCH_ASSOC);
					if ($row_file_list{'filesize'} >= 1073741824){
						$file_size_display = round($row_file_list{'filesize'}/1024/1024/1024, 2)." GB";
					}	elseif ($row_file_list{'filesize'} >= 1048576){
						$file_size_display = round($row_file_list{'filesize'}/1024/1024, 2)." MB";
					}	else	{
						$file_size_display = round($row_file_list{'filesize'}/1024, 2)." KB";
					}
					switch ($row_file_list{'extension'}) {
						case 'doc':
							$icon_url = 'file_icon_word.png';
							break;
						case 'docx':
							$icon_url = 'file_icon_word.png';
							break;
						case 'xls':
							$icon_url = 'file_icon_excel.png';
							break;
						case 'xlsx':
							$icon_url = 'file_icon_excel.png';
							break;
						case 'pdf':
							$icon_url = 'file_icon_pdf.png';
							break;
						case 'jpg':
							$icon_url = 'file_icon_image.png';
							break;
						case 'jpeg':
							$icon_url = 'file_icon_image.png';
							break;
						case 'png':
							$icon_url = 'file_icon_image.png';
							break;
						case 'gif':
							$icon_url = 'file_icon_image.png';
							break;
						default:
							$icon_url = 'file_icon_other.png';
					}
					echo "<tr>
							<td align='center'>".$row_file_list{'fileid'}."</td>
							<td width='30'><div class='file_type_icon' style='background:url(images/".$icon_url.") center center no-repeat;'></div></td>
							<td width='240'><div class='file_title'><a href='getfile.php?id=".$row_file_list{'hash'}."'>".$row_file_list{'title'}."</a></div></td>
							<td>".$row_file_list{'extension'}."</td>
							<td>".$file_size_display."</td>
							<td>".$row_file_list{'filename'}."</td>
							<td>".$row_file_uploader{'username'}."</td>
							<td>".$row_file_list{'lastupdate'}."</td>
							<td align='center'>";
					if($_SESSION['role'] == 'Superadmin' || $_SESSION['role'] == 'Admin' || $row_user_role_check{'title'} == 'Admin'){
						if($row_file_list{'status'} == '1'){
							echo"<a href='status_file.php?index=".$index."&companyid=".$companyid."&fileid=".$row_file_list{'fileid'}."&pid=".$pid."&lv=".$lv."'><img src='images/status_tick.png' alt='Enable'></a>";
						}	else	{
							echo"<a href='status_file.php?index=".$index."&companyid=".$companyid."&fileid=".$row_file_list{'fileid'}."&pid=".$pid."&lv=".$lv."'><img src='images/status_cross.png' alt='Disable'></a>";
						}
					}
					echo"	</td>
							<td align='center'>";
					if($_SESSION['role'] == 'Superadmin' || $_SESSION['role'] == 'Admin' || $row_user_role_check{'title'} == 'Admin'){
						echo"<a href='index.php?index=".$index."&companyid=".$companyid."&modifyfile=1&modifyfileid=".$row_file_list{'fileid'}."&pid=".$pid."&lv=".$lv."'><img src='images/modify_icon.png' alt='Modify'></a>";
					}
					echo"	</td>
							<td align='center'>";
					if($_SESSION['role'] == 'Superadmin' || $_SESSION['role'] == 'Admin' || $row_user_role_check{'title'} == 'Admin'){
						echo"	<input type='checkbox' class='checkbox' name='fileid[".$i."]' value='".$row_file_list{'fileid'}."'>";
					}
					echo"	</td>
						  </tr>";
					$i++;
				}
				echo"	</table>";
				echo"</div>";
    echo"			<div style='clear:both;'></div>";
	echo"</div>";
	echo"</form>";
}

// echo path
function getLevel($p){
	$sql = "select * from file_folder where folderid=:folderid";
	$sth = Db::getDbh()->prepare($sql);
	$sth->execute(array(":folderid" => $p));
	if( $error = $sth->getError(array(":folderid" => $p)) ){
		var_dump($error);
	}
	while ($row1 = $sth->fetch(PDO::FETCH_ASSOC))	{
		if ($row1{'parentid'} <> 0){
			if ($row1{'title'} <> '') {
				$n =  $n . getLevel($row1{'parentid'}) ." > <a href='index.php?pid=". $row1{'folderid'} ."'>". $row1{'title'} ."</a>";
			}
		}	else	{
			if ($row1{'title'} <> '') {
				$n = " > <a href='index.php?pid=". $row1{'folderid'} ."'>". $row1{'title'} ."</a>";
			}
		}
	}
	return $n;
}

function getLevelNum($p)
{
	$i_lv =1;
	$sql = "select * from file_folder where folderid=:folderid";
	$sth = Db::getDbh()->prepare($sql);
	$sth->execute(array(":folderid" => $p));
	if( $error = $sth->getError(array(":folderid" => $p)) ){
		var_dump($error);
	}
	$result1_count = $sth->rowCount();
	if($result1_count == 0){
		return $i_lv;
	}
	$i_lv++;
	while($row1 = $sth->fetch(PDO::FETCH_ASSOC)){
		if(strlen($row1["parentid"]) == 0 || $row1["parentid"] == 0 ){
			return $i_lv;
		}
		$sql2 = "select * from file_folder where folderid=:folderid";
		$sth2 = Db::getDbh()->prepare($sql2);
		$sth2->execute(array(":folderid" => $row1["parentid"]));
		if( $error = $sth2->getError(array(":folderid" => $row1["parentid"])) ){
			var_dump($error);
		}
		$i_lv++;
	}
}

function getSelect($field1, $field2)
{
	if ($field1 == $field2)
	{
		return "selected";
	}
	else
	{
		return "";
	}
}
?>