<?php
include_once("global.php");
include_once("../class/clsConnection.php");
include_once("../class/clsDB.php");
require_once("clsUmUser.php");
include_once("clsUmUserGroup.php");
include_once("clsUmPermission.php");
$oC = new clsConnection($GLOBALS['HOST'], $GLOBALS['DB'], $GLOBALS['USER'], $GLOBALS['PASSWORD']);
$obj = new umuser($oC);
$oUg = new umusergroup($oC);
$oUp = new umpermission($oC);
$oC->BeginTrans();
if($method=="add"){
    $obj->AddNew();
    $obj->UsID=$UsID;
    $obj->UsName=$UsName;
    $obj->UsLogin=$UsLogin;
    $obj->UsPassword=md5("O]O".$UsPassword."O[O");
    $obj->UsPsCode=$UsPsCode;
    $obj->UsWgID=$UsWgID;
    $obj->UsQsID=$UsQsID;
    $obj->UsAnswer=$UsAnswer;
    $obj->UsEmail=$UsEmail;
    $obj->UsActive= ($UsActive=="on")? 1 : 0 ;
    $obj->UsAdmin= ($UsAdmin=="on")? 1 : 0 ;
    $obj->UsDesc=$UsDesc;
    $obj->UsPwdExpDt=$UsPwdExpDt;
    $obj->UsUpdDt=$UsUpdDt;
    $obj->UsUpdUsID=$UsUpdUsID;
    $obj->Save();
    //save UserGroup
    $aBox = $GpID;
    foreach ($aBox as $v) {
        $oUg->AddNew();
        $oUg->UgGpID=$v;
        $oUg->UgUsID=$obj->UsID;
        $oUg->Save();
    }

}else if($method=="edit"){        
    $obj->SearchByKey($UsID);
    $obj->GetRecord();
    $obj->Edit();
    $obj->UsID=$UsID;
    $obj->UsName=$UsName;
    $obj->UsLogin=$UsLogin;
    if ($UsPassword=="PaSsWoRd"){ 
        $obj->UsPassword=$oldMd5UsPassword;
    }else{
        $obj->UsPassword=md5("O]O".$UsPassword."O[O");
    }
    $obj->UsPsCode=$UsPsCode;
    $obj->UsWgID=$UsWgID;
    $obj->UsQsID=$UsQsID;
    $obj->UsAnswer=$UsAnswer;
    $obj->UsEmail=$UsEmail;
    $obj->UsActive=($UsActive=="on")? 1 : 0 ;
    $obj->UsAdmin=($UsAdmin=="on")? 1 : 0 ;
    $obj->UsDesc=$UsDesc;
    $obj->UsPwdExpDt=$UsPwdExpDt;
    $obj->UsUpdDt=$UsUpdDt;
    $obj->UsUpdUsID=$UsUpdUsID;
    $obj->Save();

    //save UserGroup
    $oUg->DeleteByUsID($UsID);
    $aBox = $GpID;
    foreach ($aBox as $v) {
        $oUg->AddNew();
        $oUg->UgGpID=$v;
        $oUg->UgUsID=$obj->UsID;
        $oUg->Save();
    }
}else if($method=="delete"){
    $oC->BeginTrans();
    $oUg->DeleteByUsID($UsID);
    $oUp->DeleteByUs($UsID);
    $obj->SearchByKey($UsID);
    $obj->GetRecord();
    $obj->Delete();
    //don't foget to delete umlog
}
$oC->CommitTrans();
$obj->Close();
$oC->Disconnect();

echo "<meta http-equiv='refresh' content='0; URL=umShowUser.php'>";

?>