<?php

/* * ******************************************************************************* 
 *   spacial
 *   top list menu define in english alphabet a,b,c,d,e,f in sequence
 *   else get id_top
 * 	@author PanDaRianZ
 * 	pandarianz@gmail.com
 * ******************************************************************************** */


/* * **************************************************************
  function id_top_permission
  INPUT : id_top
  ACTION : check if id_top exists in permission
  OUTPUT : TRUE , FALSE

 * ************************************************************** */

function id_top_permission($id_top) {
  if ($_SESSION['admin_web'] == "admin")
    return true;

  $id_user = $_SESSION["id_user_admin"];
  $array_permission = select_query_data("module_access", "cms_main_user", "id_user", $id_user);
  if ($array_permission != "") {
    $array_module = explode(",", $array_permission);
    if (in_array($id_top, $array_module))
      return true;
    else
      return false;
  }
  return false; // default
}

/* * **************************************************************
  function id_sub_permission
  INPUT : id_sub
  ACTION : select id_sub from menu table and check if id_top exists in permission
  OUTPUT : TRUE , FALSE

 * ************************************************************** */

function id_sub_permission($id_sub) {
  if ($_SESSION['admin_web'] == "admin")
    return true;

  $id_user = $_SESSION["id_user_admin"];
  $array_permission = select_query_data("module_access", "cms_main_user", "id_user", $id_user);
  if ($array_permission != "") {
    $array_module = explode(",", $array_permission);

    $sql_get_sub = "SELECT id_top FROM cms_menu_sub WHERE id_sub = $id_sub";
    $result_id_sub = select_result_query("id_top", "cms_menu_sub", "id_sub", $id_sub);

    $flag = 0;
    while ($data_sub = mysql_fetch_array($result_id_sub)) {
      if (in_array($data_sub[id_top], $array_module))
        return true;
    }
  }
  return false; // default
}

/* * **************************************************************
  function id_sub_permission
  INPUT : id_top , URL to redirec
  ACTION : check if id_top exists in permission then redirec
  OUTPUT : TRUE if have permission, Refresh page to login if don't have permission
 * ************************************************************** */

function check_page_permission($id_top, $url = NULL) {
  if ($_SESSION['admin_web'] == "admin")
    return true;

  $id_user = $_SESSION["id_user_admin"];
  $array_permission = select_query_data("module_access", "cms_main_user", "id_user", $id_user);
  if ($array_permission != "") {

    $array_module = explode(",", $array_permission);

    if (in_array($id_top, $array_module))
      return true;
    else {
      if ($url != NULL)
        echo "<meta http-equiv='refresh' content='0; url=$url'>";
      else
        echo "<meta http-equiv='refresh' content='0; url=index.php?mod=login&path=login&case_=1'>";
    }
  }
  return false; // default
}

?>