function search_finduser()
{
    $design = new design('Finduser', '', 0);
    $design->header();
    $tpl = new tpl('search_finduser');
    $tpl->out(0);
    if (isset($_POST['sub']) and !empty($_POST['name'])) {
        $name = str_replace('*', "%", $_POST['name']);
        $name = escape($name, 'string');
        $q = "SELECT `name`,`name` FROM `prefix_user` WHERE `name` LIKE '" . $name . "'";
        $tpl->set('username', dbliste('', $tpl, 'username', $q));
        $tpl->out(1);
    }
    $tpl->out(2);
    $design->footer();
}

function check_forum_failure($ar)
{
    if (array_key_exists(0, $ar)) {
        $hmenu = '<a class="smalfont" href="?forum">Forum</a><b> &raquo; </b> Fehler aufgetreten';
        $title = 'Forum : Fehler aufgetreten';
        $design = new design($title, $hmenu);
        $design->header();
        echo '<b>Es ist/sind folgende(r) Fehler aufgetreten</b><br />';
        foreach ($ar as $v) {
            echo $v . '<br />';
        }
        echo '<br /><a href="javascript:history.back(-1)">zur&uuml;ck</a>';
        $design->footer();
        exit;
    }
    return true;
}

                 design::table_cell($TrCategoryShow, "");
             }
         }
         //AMOUNT
         $TrAmountShow = number_format($resultarray[$i]["Amount"], 2, ",", "");
         design::table_cell($TrAmountShow, "text_align_right td_size_5");
         //NOTES
         $TrNotesShow = $resultarray[$i]["Notes"];
         $NotesHTMLCode = "";
         if ($TrNotesShow != "" && $TrNotesShow != "None") {
             $NotesHTMLCode .= "<span class='glyphicon glyphicon-info-sign' data-toggle='tooltip' title='{$TrNotesShow}' id='tooltip_notes_{$lineid}'></span> ";
         }
         if (attachments::get_number_of_attachments($lineid) > 0) {
             $NotesHTMLCode .= "<span class='glyphicon glyphicon-paperclip'></span>";
         }
         design::table_cell($NotesHTMLCode, "text_align_center");
         //DELETE
         echo "<td class ='text_align_center'>";
         echo "<input type='checkbox' name='TrDelete[]' value='{$lineid}' />";
         echo "</td>";
         //EDIT
         echo "<td class ='text_align_center'>";
         echo "<input type='radio' name='TrEdit[]' value='{$lineid}' />";
         echo "</td>";
         echo "</tr>";
     }
 }
 echo "</tbody>";
 echo "</table>";
 echo "</div>\n";
 echo "<br />";

<?php

use_class('design');
$imgsize = '150';
$rowListReload = false;
if (isset($_GET['id']) && !isset($design)) {
    $id = tep_db_prepare_input($_GET['id']);
    $design = new design($id);
    $drafts = $design->retrieveDrafts("approve_status != 'R'");
}
if (is_null($design->id)) {
    $content .= '<h3 class="red">Can not found requested Design in database</h2>';
    $content .= '<a href="?open=designs-new">&raquo; Click here to Create New Design</a>';
} else {
    $img1 = webImage($design->image_1, $imgsize, $imgsize, 'Main Image', 'img-border', '');
    $img2 = webImage($design->image_2, $imgsize, $imgsize, 'Additional Image', 'img-border', '');
    $content .= '<form name="copydesign" method="post" action="?open=designs-detail">';
    $content .= '<input type="hidden" name="me_action" value="CREATENEWDESIGN" />';
    $content .= '<div style="float:left;margin-left:15px;">';
    //LEFT Part open
    $margin_left = 15;
    if (strpos($img1, 'color-pattern') === false) {
        $cbid = 'cb-img-1';
        $content .= '<div id="image_1" style="float:left;width:' . $imgsize . 'px;height:210px;text-align:center;">';
        $content .= '<label for="' . $cbid . '"><strong>Main Image</strong><br />';
        $content .= $img1 . '</label>';
        $content .= '<br /><input type="checkbox" id="' . $cbid . '" name="image_1" value="' . $design->image_1 . '" checked="checked" style="margin-top:2px;" /> <label for="' . $cbid . '">Copy Image</label>';
        $content .= '</div>';
        $margin_left += $imgsize;
    }
    if (strpos($img2, 'color-pattern') === false) {

// Text der gesendet wird, wenn ein Eintrag bearbeitet wird
$message2 = $lang['awaycalchangedenquiry'];
// Text fuer den User wenn der Stutus geandert wurde
$message3 = $lang['awaycalstatuschanged'];
// function
function away_sendpmtoleaders($m, $uid, $a)
{
    $q = "SELECT\r\n    DISTINCT `prefix_user`.`id` as `uid`\r\n  FROM `prefix_user`\r\n    LEFT JOIN `prefix_groupusers` ON `prefix_groupusers`.`uid` = " . $uid . "\r\n    LEFT JOIN `prefix_groups` ON `prefix_groups`.`id` = `prefix_groupusers`.`gid`\r\n  WHERE `recht` <= -7\r\n     OR (`mod1` = `prefix_user`.`id` AND `uid` = " . $uid . ")\r\n     OR (`mod2` = `prefix_user`.`id` AND `uid` = " . $uid . ")\r\n     OR (`mod3` = `prefix_user`.`id` AND `uid` = " . $uid . ")\r\n     OR (`mod4` = `prefix_user`.`id` AND `uid` = " . $uid . ")";
    $erg = db_query($q);
    while ($r = db_fetch_assoc($erg)) {
        sendpm($_SESSION['authid'], $r['uid'], 'Away-Anfrage', $m, -1);
    }
}
$title = $allgAr['title'] . ' :: Awaycalender';
$hmenu = 'Awaycalender';
$design = new design($title, $hmenu);
$header = array('jquery/jquery.validate.js', 'forms/awaycal.js');
$design->header($header);
$tpl = new tpl('awaycal.htm');
if ($_SESSION['authright'] > -3) {
    // Pruefen ob der User ein TrialMember oder mehr ist
    echo $lang['nopermission'];
    $design->footer(1);
}
// status aendern
if ($menu->getA(1) == 'c' and is_numeric($menu->getE(1)) and is_numeric($menu->get(2)) and is_siteadmin('awaycal')) {
    $uid = db_result(db_query("SELECT `uid` FROM `prefix_awaycal` WHERE `id` = " . $menu->getE(1)), 0);
    db_query("UPDATE `prefix_awaycal` SET `pruef` = " . $menu->get(2) . " WHERE `id` = " . $menu->getE(1));
    sendpm($_SESSION['authid'], $uid, 'Away-Anfrage', $message3);
}
if ($menu->getA(1) == 'd' and is_numeric($menu->getE(1)) and is_siteadmin('awaycal')) {

/**
 * Construct KPI Leadtime Table
 * @param string $status
 * @param string $kpi_closing_date_start
 * @param string $kpi_closing_date_end
 * @return string
 */
function kpiLeadtimeLoad($kpi_status, $kpi_closing_date_start = '', $kpi_closing_date_end = '')
{
    use_class('jng_sp');
    use_class('design');
    $class_sp = new jng_sp();
    $sp_b2b = array_keys($class_sp->retrieveList('active_status = 1 AND use_amvd_logistic = 1'));
    $target_leadtime = load_config('kpi-leadtime');
    $design_categories = design::getDesignCategory();
    $initial = array('sourcing' => 0, 'depot-refill-orders' => 0, 'internal-levelling-orders' => 0, 'cust-order-mto-mmo' => 0, 'external-levelling-order' => 0, 'full-dso' => 0, 'mto' => 0);
    foreach ($design_categories as $des_cat_id => $des_cat_name) {
        $initial["design-{$des_cat_id}"] = 0;
    }
    $below_target = $initial;
    $on_target = $initial;
    $above_target_1to3d = $initial;
    $above_target_gt3d = $initial;
    $total = $initial;
    $kpi_leadtime_data_o = array();
    //open
    $kpi_leadtime_data_c = array();
    //closed
    //PREPARE KPI LEADTIME DATA
    if ($kpi_status == 'o') {
        //OPEN ORDERS
        //Sourcing
        $q = " SELECT sp_type, item_id, quantity, MIN(status_date) AS date_start FROM";
        $q .= " (";
        $q .= " SELECT 'sp' AS sp_type, joi.jng_sp_orders_items_id AS item_id" . ", joish.status_date, joi.order_quantity AS quantity";
        $q .= " FROM jng_sp_orders_items joi" . " INNER JOIN jng_sp_orders_items_status_history joish ON joish.jng_sp_orders_items_id = joi.jng_sp_orders_items_id" . " AND joish.status = 2";
        $q .= " WHERE joi.status = 2";
        $q .= " UNION";
        $q .= " SELECT 'jg' AS sp_type, op.orders_products_id AS item_id" . ", opsh.status_date, op.products_quantity AS quantity";
        $q .= " FROM orders_products op" . " INNER JOIN orders_products_status_history opsh ON opsh.orders_products_id = op.orders_products_id" . " AND opsh.status = 2";
        $q .= " WHERE op.status = 2";
        $q .= " UNION";
        $q .= " SELECT 'dp' AS sp_type, do.depot_orders_id AS item_id" . ", dosh.update_time AS status_date, do.quantity";
        $q .= " FROM depot_orders do" . " INNER JOIN depot_orders_status_history dosh ON dosh.depot_orders_id = do.depot_orders_id" . " AND dosh.status = 2";
        $q .= " WHERE do.status = 2";
        $q .= ") dt";
        $q .= " GROUP BY sp_type, item_id";
        $dbq = tep_db_query($q);
        while ($r = tep_db_fetch_array($dbq)) {
            //Sourcing Order Type
            $kpi_leadtime_data_o['sourcing'][] = $r;
        }
        //Production
        $q = " SELECT sp_type, item_id, quantity, MIN(status_date) AS date_start, mode, order_type, order_type_id, order_type_name";
        $q .= " FROM (";
        $q .= " SELECT 'sp' AS sp_type, joi.jng_sp_orders_items_id AS item_id" . ", joish.status_date, joi.order_quantity AS quantity, joi.mode" . ", '' AS order_type, '' AS order_type_id, '' AS order_type_name";
        $q .= " FROM jng_sp_orders_items joi" . " INNER JOIN jng_sp_orders_items_status_history joish ON joish.jng_sp_orders_items_id = joi.jng_sp_orders_items_id" . " AND joish.status = 4";
        $q .= " WHERE joi.status = 4";
        $q .= " UNION";
        $q .= " SELECT 'jg' AS sp_type, op.orders_products_id AS item_id" . ", opsh.status_date, op.products_quantity AS quantity, op.mode" . ", '' AS order_type, '' AS order_type_id, '' AS order_type_name";
        $q .= " FROM orders_products op" . " INNER JOIN orders_products_status_history opsh ON opsh.orders_products_id = op.orders_products_id" . " AND opsh.status = 4";
        $q .= " WHERE op.status = 4";
        $q .= " UNION";
        $q .= " SELECT 'dp' AS sp_type, do.depot_orders_id AS item_id" . ", dosh.update_time AS status_date, do.quantity, '' AS mode" . ", trans_type AS order_type, trans_id AS order_type_id, group_name AS order_type_name";
        $q .= " FROM depot_orders do" . " INNER JOIN depot_orders_status_history dosh ON dosh.depot_orders_id = do.depot_orders_id" . " AND dosh.status = 4";
        $q .= " WHERE do.status = 4";
        $q .= ") dt";
        $q .= " GROUP BY sp_type, item_id";
        $dbq = tep_db_query($q);
        while ($r = tep_db_fetch_array($dbq)) {
            if ($r['order_type'] == 'AR' || $r['order_type'] == '' && $r['order_type_id'] == depot_orders::MANUAL_REFILL_ID) {
                //Depot Refill Order Type
                $kpi_leadtime_data_o['depot-refill-orders'][] = $r;
            } elseif ($r['order_type_name'] == depot_orders::GROUP_NAME_LTF_INTERNAL) {
                //Internal Levelling Order Type
                $kpi_leadtime_data_o['internal-levelling-orders'][] = $r;
            } elseif ($r['mode'] == 2 || $r['mode'] == 4) {
                //Customer Orders (MTO/MMO) Order Type
                $kpi_leadtime_data_o['cust-order-mto-mmo'][] = $r;
            }
        }
        //Outsourcing
        $q = " SELECT do.depot_orders_id AS item_id, MIN(dosh.update_time) AS status_date, do.quantity";
        $q .= " FROM depot_orders do" . " INNER JOIN depot_orders_status_history dosh ON dosh.depot_orders_id = do.depot_orders_id" . " AND dosh.status = 22";
        $q .= " WHERE do.status = 22";
        $q .= " AND do.trans_type = '' && do.trans_id = " . depot_orders::MANUAL_REFILL_OUTSOURCED;
        $q .= " GROUP BY item_id";
        $dbq = tep_db_query($q);
        while ($r = tep_db_fetch_array($dbq)) {
            //External Levelling Order Type
            $kpi_leadtime_data_o['external-levelling-order'][] = $r;
        }
        //Customer Order
        $q = " SELECT sp_type, item_id, quantity, MIN(status_date) AS date_start, mode";
        $q .= " FROM (";
        $q .= " SELECT 'sp' AS sp_type, joi.jng_sp_orders_items_id AS item_id" . ", joish.status_date, joi.order_quantity AS quantity, joi.mode";
        $q .= " FROM jng_sp_orders jo " . " INNER JOIN jng_sp_orders_items joi ON joi.jng_sp_orders_id = jo.jng_sp_orders_id" . " INNER JOIN jng_sp_orders_items_status_history joish ON joish.jng_sp_orders_items_id = joi.jng_sp_orders_items_id" . " AND joish.status = 1";
        $q .= " WHERE joi.status < 9 AND jo.jng_sp_id NOT IN (" . implode(',', $sp_b2b) . ")";
        $q .= " UNION";
        $q .= " SELECT 'jg' AS sp_type, op.orders_products_id AS item_id" . ", opsh.status_date, op.products_quantity AS quantity, op.mode";
//.........这里部分代码省略.........

tep_db_connect();
$eao = 2;
//element adjust order
use_class('design');
use_class('elements_preorder');
use_class('elements_order');
use_class('elements_stock');
use_class('products_articles');
use_class('products_minierp');
$class_es = new elements_stock();
$class_pm = new products_minierp();
$class_pa = new products_articles();
$ean_eu_collection = array();
$max_el_per_article = 0;
$use_elements = array();
$class_d = new design($_GET['d']);
$products = $class_d->retrieveProducts();
foreach ($products as $p) {
    $query_products_categories = "SELECT * FROM products_to_categories ptc WHERE products_id={$p['products_id']}";
    $tpdbq_products_categories = tep_db_query($query_products_categories);
    $products_categories = tep_db_fetch_array($tpdbq_products_categories);
    // find what use element in this product
    $ean_eu_collection[$p['products_id'] . '-0'] = '';
    $tpdbq_products_use_elements = $class_pm->retrieveElementsUsage($p[products_id]);
    foreach ($tpdbq_products_use_elements as $row_pue) {
        $use_elements[] = array('elements_id' => $row_pue['elements_id'], 'quantity' => (int) $row_pue['quantity'] * $eao);
        $ean_eu_collection[$p['products_id'] . '-0'] .= $row_pue['elements_id'] . ' x ' . $row_pue['quantity'] . '|';
    }
    $mepa = count($tpdbq_products_use_elements);
    if ($mepa > $max_el_per_article) {
        $max_el_per_article = $mepa;

         }
         $draft->uploadImage($imgno, $image['tmp_name'], $image['name']);
         $result['result'] = webImage($draft->{'image_' . $imgno}, $thumbsize, $thumbsize, $draft_title, 'img-border');
     }
     $result['drafts_id'] = $draft->id;
     $result['draft_key'] = $draft_key;
     $result['prevdraft'] = count($drafts);
     $result['box_colors'] = drawBoxColor($draft->colors_request);
     $result['colors_added'] = getColorNumbers($draft->colors_request);
     echo ajaxReturn($result);
     exit;
 } elseif ($_POST['me_action'] == 'DELETEDRAFT') {
     $drafts_id = tep_db_prepare_input($_POST['drafts_id']);
     $draft_key = tep_db_prepare_input($_POST['draft_key']);
     $draft = new design_draft($drafts_id);
     $design = new design($draft->designs_id);
     $draft->delete();
     $drafts = $design->retrieveDrafts();
     $result = array();
     $result['drafts_id'] = $drafts_id;
     $result['draft_key'] = $draft_key;
     $result['total_drafts'] = count($drafts);
     $result['image'] = webImage($draft->image_1, $imgsize, $imgsize, $draft_title);
     echo ajaxReturn($result);
     exit;
 } elseif ($_POST['me_action'] == 'UPDATEDRAFTNAME') {
     $drafts_id = tep_db_prepare_input($_POST['drafts_id']);
     $draft_name = tep_db_prepare_input($_POST['draft_name']);
     $draft_namekey = tep_db_prepare_input($_POST['draft_namekey']);
     $draft = new design_draft($drafts_id);
     $draft->update($draft_name);

function user_has_admin_right(&$menu, $sl = true)
{
    if ($_SESSION['authright'] <= -8) {
        // co leader...
        return true;
    } else {
        $uri_to_check1 = $menu->get(0);
        $uri_to_check2 = $menu->get(1);
        if (count($_SESSION['authmod']) < 1 or !loggedin()) {
            if ($sl === true) {
                if (!loggedin()) {
                    $design = new design('', '', 0);
                    $menu->set_url(0, 'user');
                    load_modul_lang();
                    $tpl = new tpl('user/login.htm');
                    $design->addheader($tpl->get(0));
                    $design->header();
                    $tpl->set_out('WDLINK', 'admin.php', 1);
                    $design->footer();
                } else {
                    echo '<strong>Keine Berechtigung!</strong> <a href="index.php">Startseite</a>';
                }
            }
            return false;
        } elseif (isset($_SESSION['authmod'][$uri_to_check1]) and $_SESSION['authmod'][$uri_to_check1] == true or isset($_SESSION['authmod'][$uri_to_check1 . '-' . $uri_to_check2]) and $_SESSION['authmod'][$uri_to_check1 . '-' . $uri_to_check2] == true) {
            return true;
        } elseif (count($_SESSION['authmod']) > 0 and loggedin()) {
            if ($sl === true) {
                foreach ($_SESSION['authmod'] as $k => $v) {
                    $x = $k;
                    break;
                }
                $x = explode('-', $x);
                $menu->set_url(0, $x[0]);
                if (isset($x[1])) {
                    $menu->set_url(1, $x[1]);
                }
            }
            return true;
        }
    }
    return false;
}

                 case 'drafts':
                     $img_title = 'Draft ' . $row['designs_id'];
                     $des_title[] = 'Design ' . $row['designs_id'];
                     $des_title[] = $img_title;
                     $des_title[] = "";
                     $image = $row['draft_image'] == '' ? $row['designs_image_2'] == '' ? $row['designs_image_1'] : $row['designs_image_2'] : $row['draft_image'];
                     break;
                 case 'products':
                     $img_title = 'Product ' . $row['products_id'];
                     $des_title[] = 'Design ' . $row['designs_id'];
                     $des_title[] = 'Draft ' . $row['drafts_id'];
                     $des_title[] = $img_title;
                     $image = $row['products_image'] == '' ? $row['draft_image'] == '' ? $row['designs_image_2'] == '' ? $row['designs_image_1'] : $row['designs_image_2'] : $row['draft_image'] : $row['products_image'];
                     break;
             }
             $des_title[] = '<strong>"' . design::getDesignStatus($row['status']) . '"</strong>';
             $designs .= '<div class="pro-thumb" style="height:150px;">';
             $designs .= '<div>' . webImage($image, IMAGE_SIZE_THUMBNAIL_1, IMAGE_SIZE_THUMBNAIL_1, $img_title) . '</div>';
             //$designs .= '<div class="text">'.$img_title.'</div>';
             $designs .= '<div class="text">' . implode('<br />', $des_title) . '</div>';
             $designs .= '</div>';
         }
     }
 } else {
     $designs_total = 0;
 }
 $content .= '<div id="product-style">';
 $content .= '<ul>';
 $content .= '<li><a href="#prostyle-tab1"><span>Attribute Detail</span></a></li>';
 if ($styles_id != '0') {
     $content .= '<li><a href="#prostyle-tab2"><span>List of Products (' . $products_total . ')</span></a></li>';

    public function get_url($w = '')
    {
        global $allgAr;
        if ($w != '') {
            $this->type = $w;
        }
        // startwert und pfad zum pruefen raustuefteln.
        if ($this->type == 'contents') {
            $pfad = 'include/contents';
            $smod = $allgAr['smodul'];
        } elseif ($this->type == 'box') {
            $file = 'include/boxes/' . $this->get(0) . '.php';
            return (file_exists($file) and $this->check_rights()) ? $file : false;
        } else {
            $pfad = 'include/admin';
            $smod = 'admin';
        }
        // wennes also leer is wird das startmodul genommen
        if (empty($this->menu_ar[0])) {
            $this->set_url(0, $smod);
        }
        // diverse sachen geprueft zum zurueck geben,
        // is halt so dings wegen selfpages usw...
        if (!file_exists($pfad . '/' . $this->get(0) . '.php') and file_exists($pfad . '/selfbp/selfp/' . $this->get(0) . '.php')) {
            $this->set_url(1, $this->get(0));
            $this->set_url(0, 'self');
        } elseif (!file_exists($pfad . '/' . $this->get(0) . '.php')) {
            if (substr($smod, 0, 5) == 'self-') {
                $this->set_url(1, substr($smod, 5));
                $this->set_url(0, 'self');
            } elseif (file_exists($pfad . '/selfbp/selfp/' . $smod . '.php')) {
                $this->set_url(1, $smod);
                $this->set_url(0, 'self');
            } else {
                $this->set_url(0, $smod);
            }
        }
        // pruefen ob der client die noetigen rechte hat
        // das modul zu sehen.. bzw. den menupunkt zu sehen
        $exit = !$this->check_rights();
        // das usermodul kann aus eigener sicherheit nicht
        // gesperrt werden, sonst koennen sich member
        // usw. nicht mehr einloggen, bzw. es kann
        // sich sonst keiner registrieren. deshalb is das
        // user modul immer frei geschaltet
        $alwaysallowed = array('regist', 'login', '1', '2', 'confirm', 'remind', '13', '3', 'logout');
        if ($exit === true and $this->get(0) == 'user' and in_array($this->get(1), $alwaysallowed)) {
            $exit = false;
            debug('o');
        }
        if ($exit) {
            $title = $allgAr['title'] . ' :: Keine Berechtigung';
            $hmenu = 'Keine Berechtigung';
            $design = new design($title, $hmenu);
            if (loggedin()) {
                $design->header();
                if (is_coadmin()) {
                    echo 'Entweder diese Seite ist nicht in der Navigation verlinkt und die Option
<strong>Zugriff auf nicht im Menü verlinkte Module für alle?</strong> steht auf <strong>nein</strong> oder aber du hast kein Recht sie zu betrachten, deswegen kommt diese Meldung.<br />
Also entweder die Seite <strong>' . $this->get(0) . '</strong> in der <a href="admin.php?menu">Navigation</a> verlinken, oder die Option umstellen, ersteres wird empfohlen.';
                } else {
                    echo 'Du hast leider nicht die n&ouml;tigen Rechte, um diese Seite zu betrachten.';
                }
            } else {
                $tpl = new tpl('user/login');
                $design->addheader($tpl->get(0));
                $design->header();
                $tpl->set_out('WDLINK', 'index.php', 1);
            }
            $design->footer();
            exit;
        }
        return $this->get(0) . '.php';
    }

<?php

use_class('design');
if (isset($_GET['imagelimit'])) {
    $messagebox->add('File is too big, max width/height allowed is ' . $_GET['imagelimit'] . 'px');
}
if (isset($_GET['imageupload']) && $_GET['imageupload'] == 'none') {
    $messagebox->add('Please upload an image to create New Design');
}
$design = new design();
if (isset($_GET['cat']) && $_GET['cat'] == 'R') {
    $design->category = 'R';
    $content .= '<form name="newdesign" method="post" action="?open=designs-detail" enctype="multipart/form-data">';
    $content .= '<input type="hidden" name="me_action" value="CREATENEWDESIGN" />';
    $content .= '<input type="hidden" name="status" value="5" />';
    $messagebox->add('<strong>This Design will be created directly in SAMPLINGS Tab</strong>');
    $content .= $design->drawDetailTable();
    $submit = '<input id="create" type="button" value="Create Design" />';
    $content .= '<div class="buttons" style="width:390px;">' . $submit . '</div>';
    $content .= '</form>';
    $javscript .= $design->drawDetailTableJSRule('create', 'newdesign');
} else {
    $content .= '<div class="box ui-corner-all" style="margin-bottom:20px;">';
    $content .= '<h2>Any Design Categories with New Image</h2>';
    $content .= '<form name="newdesign" method="post" action="?open=designs-detail" enctype="multipart/form-data">';
    $content .= '<input type="hidden" name="me_action" value="CREATENEWDESIGN" />';
    $content .= '<div><table class="form" border="0" cellpadding="0" cellspacing="0">';
    $content .= '<tr><td class="label">Design Image</td><td><input type="file" name="image_1" /></td></tr>';
    $content .= '<tr><td class="label">Source of Idea</td><td><input type="text" id="source_of_ideas" name="source_of_ideas" style="width:100%;" disabled="disabled"/></td></tr>';
    $content .= '</table></div>';
    $content .= '<div class="buttons" style="width:410px;"><input type="submit" value="Create Design" /></div>';

function drawKPItable($kpi_title, $kpi_date = '', $hidetable = false)
{
    global $design;
    use_class('products_minierp');
    $class_pm = new products_minierp();
    $bgst = $class_pm->retrieveBestGoodSettings();
    $kpi_data = array();
    $kpi_target = array();
    $descats = array();
    $descat_count = array();
    $descat_percent = array();
    $kpi_type1 = in_array($kpi_title, array('WIP', 'FIN'));
    //WIP: Work In Progress, FIN: Designs Finalized
    $kpi_type2 = in_array($kpi_title, array('PCATIP', 'PCATF'));
    //PCAT:Products Category >> IP:in Progress, F:Finalized
    $kpi_type3 = in_array($kpi_title, array('PPRIP', 'PPRF'));
    //PPR:Products Price >> IP:in Progress, F:Finalized
    $kpi_type4 = in_array($kpi_title, array('WIPT', 'FINT'));
    //WIPT: Work In Progress Type, FIN: Designs Finalized Type
    $ksd = generateKPISupportData($kpi_title, $kpi_date);
    $q = $ksd['q'];
    $kpi_id = $ksd['kpi_id'];
    $kpi_header = $ksd['kpi_header'];
    $r = tep_db_query($q);
    if ($kpi_type1) {
        $kpi_target['W'] = $bgst['kpides_catnw'];
        $kpi_target['R'] = $bgst['kpides_catr'];
        while ($row = tep_db_fetch_array($r)) {
            $kpi_data[$row['designs_category']] = $row['total_designs'];
        }
        $descats = design::getDesignCategory();
        if (array_key_exists('', $kpi_data)) {
            $descats[''] = '<span class="red">Unset</span>';
        }
    } elseif ($kpi_type2) {
        $kpi_target[2] = $bgst['kpides_prodnl'];
        $kpi_target[3] = $bgst['kpides_prodbl'];
        $kpi_target[4] = $bgst['kpides_proder'];
        $kpi_target[9] = $bgst['kpides_prodch'];
        $kpi_target[28] = $bgst['kpides_prodpn'];
        $kpi_target[29] = $bgst['kpides_prodrg'];
        $kpi_target[30] = $bgst['kpides_prodset'];
        $kpi_target[33] = $bgst['kpides_prodan'];
        while ($row = tep_db_fetch_array($r)) {
            $kpi_data[$row['products_category_id']] = $row['total_designs'];
        }
        $pcs = getProductsCategorySupportData();
        $q = "SELECT {$pcs['field_id']} AS id, {$pcs['field_name']} AS name FROM {$pcs['tables']} WHERE {$pcs['filter']}";
        $dbq = tep_db_query($q);
        while ($r = tep_db_fetch_array($dbq)) {
            $descats_temp[$r['id']] = $r['name'];
        }
        //SORT Product Category as Requested by user
        $descats_sorts = array(4 => 1, 2 => 2, 3 => 3, 29 => 4, 30 => 5, 9 => 6, 28 => 7, 33 => 8, 35 => 9);
        foreach ($descats_temp as $key => $val) {
            $descats_temp2[$descats_sorts[$key]] = $key;
        }
        ksort($descats_temp2);
        foreach ($descats_temp2 as $val) {
            $descats[$val] = $descats_temp[$val];
        }
    } elseif ($kpi_type3) {
        $kpi_target[1] = $bgst['kpides_pr1target'];
        $kpi_target[2] = $bgst['kpides_pr2target'];
        $kpi_target[3] = $bgst['kpides_pr3target'];
        $kpi_target[4] = $bgst['kpides_pr4target'];
        $kpi_target[5] = $bgst['kpides_pr5target'];
        $kpi_target[6] = $bgst['kpides_pr6target'];
        $kpi_target[7] = $bgst['kpides_pr7target'];
        $kpi_target[8] = $bgst['kpides_pr8target'];
        while ($row = tep_db_fetch_array($r)) {
            if ($row['target_price'] >= $bgst['kpides_pr1bgn'] && $row['target_price'] <= $bgst['kpides_pr1end']) {
                $kpi_data[1] += $row['total_designs'];
            } elseif ($row['target_price'] >= $bgst['kpides_pr2bgn'] && $row['target_price'] <= $bgst['kpides_pr2end']) {
                $kpi_data[2] += $row['total_designs'];
            } elseif ($row['target_price'] >= $bgst['kpides_pr3bgn'] && $row['target_price'] <= $bgst['kpides_pr3end']) {
                $kpi_data[3] += $row['total_designs'];
            } elseif ($row['target_price'] >= $bgst['kpides_pr4bgn'] && $row['target_price'] <= $bgst['kpides_pr4end']) {
                $kpi_data[4] += $row['total_designs'];
            } elseif ($row['target_price'] >= $bgst['kpides_pr5bgn'] && $row['target_price'] <= $bgst['kpides_pr5end']) {
                $kpi_data[5] += $row['total_designs'];
            } elseif ($row['target_price'] >= $bgst['kpides_pr6bgn'] && $row['target_price'] <= $bgst['kpides_pr6end']) {
                $kpi_data[6] += $row['total_designs'];
            } elseif ($row['target_price'] >= $bgst['kpides_pr7bgn'] && $row['target_price'] <= $bgst['kpides_pr7end']) {
                $kpi_data[7] += $row['total_designs'];
            } elseif ($row['target_price'] > $bgst['kpides_pr8bgn']) {
                $kpi_data[8] += $row['total_designs'];
            }
        }
        $descats[1] = "{$bgst['kpides_pr1bgn']} - {$bgst['kpides_pr1end']}";
        $descats[2] = "{$bgst['kpides_pr2bgn']} - {$bgst['kpides_pr2end']}";
        $descats[3] = "{$bgst['kpides_pr3bgn']} - {$bgst['kpides_pr3end']}";
        $descats[4] = "{$bgst['kpides_pr4bgn']} - {$bgst['kpides_pr4end']}";
        $descats[5] = "{$bgst['kpides_pr5bgn']} - {$bgst['kpides_pr5end']}";
        $descats[6] = "{$bgst['kpides_pr6bgn']} - {$bgst['kpides_pr6end']}";
        $descats[7] = "{$bgst['kpides_pr7bgn']} - {$bgst['kpides_pr7end']}";
        $descats[8] = "&gt;&nbsp;{$bgst['kpides_pr8ge']}";
    } elseif ($kpi_type4) {
        $kpi_target['I'] = $bgst['kpides_typib'];
        $kpi_target['E'] = $bgst['kpides_typeb'];
//.........这里部分代码省略.........

 function get_url($w = 'contents')
 {
     global $allgAr;
     # startwert und pfad zum pruefen raustuefteln.
     if ($w == 'contents') {
         $pfad = 'include/contents';
         $smod = $allgAr['smodul'];
     } else {
         $pfad = 'include/admin';
         $smod = 'admin';
     }
     # wennes also leer is wird das startmodul genommen
     if (empty($this->menu_ar[0])) {
         $this->set_url(0, $smod);
     }
     # diverse sachen geprueft zum zurueck geben,
     # is halt so dings wegen selfpages usw...
     if (!file_exists($pfad . '/' . $this->get(0) . '.php') and file_exists($pfad . '/selfbp/selfp/' . $this->get(0) . '.php')) {
         $this->set_url(1, $this->get(0));
         $this->set_url(0, 'self');
     } elseif (!file_exists($pfad . '/' . $this->get(0) . '.php')) {
         if (substr($smod, 0, 5) == 'self-') {
             $this->set_url(1, substr($smod, 5));
             $this->set_url(0, 'self');
         } elseif (file_exists($pfad . '/selfbp/selfp/' . $smod . '.php')) {
             $this->set_url(1, $smod);
             $this->set_url(0, 'self');
         } else {
             $this->set_url(0, $smod);
         }
     }
     # pruefen ob der client die noetigen rechte hat
     # das modul zu sehen.. bzw. den menupunkt zu sehen
     $exit = false;
     if ($w == 'contents') {
         $where = "(path = '" . $this->get(0) . "' OR path = '" . $this->get(0) . "-" . $this->get(1) . "')";
         if ($this->get(0) == 'self') {
             $where = "(path = '" . $this->get(0) . "-" . $this->get(1) . "' OR path = '" . $this->get(1) . "')";
         }
         $r = @db_result(@db_query("SELECT recht FROM prefix_menu WHERE " . $where . " ORDER BY LENGTH(path) DESC"), 0);
         if ($r != '' and !has_right($r) or $r == '' and $allgAr['allg_menupoint_access'] == 0) {
             $exit = true;
         }
     }
     # das usermodul kann aus eigener sicherheit nicht
     # gesperrt werden, sonst koennen sich member
     # usw. nicht mehr einloggen, bzw. es kann
     # sich sonst keiner registrieren. deshalb is das
     # user modul immer frei geschaltet
     $alwaysallowed = array('regist', 'login', '1', '2', 'confirm', 'remind', '13', '3', 'logout');
     if ($exit === true and $this->get(0) == 'user' and in_array($this->get(1), $alwaysallowed)) {
         $exit = false;
         debug('o');
     }
     if ($exit) {
         $title = $allgAr['title'] . ' :: Keine Berechtigung';
         $hmenu = 'Keine Berechtigung';
         $design = new design($title, $hmenu);
         $design->header();
         if (loggedin()) {
             echo 'Du hast leider nicht die nötigen Rechte... :-S';
         } else {
             $tpl = new tpl('user/login');
             $tpl->set_out('WDLINK', 'index.php', 0);
         }
         $design->footer();
         exit;
     }
     return $this->get(0) . '.php';
 }

session_name('sid');
session_start();
// Datenbankverbindung aufbauen und Funktionen und Klassen laden
require_once 'include/includes/config.php';
require_once 'include/includes/loader.php';
// Allgemeiner Konfig-Array
$allgAr = getAllgAr();
// Menu, Nutzerverwaltung und Seitenstatistik laden
$menu = new menu();
$m = $menu->get_complete();
user_identification($m);
// Sprachdateien oeffnen
load_global_lang();
load_modul_lang();
//Ajaxreload für Boxen
design::ajax_boxload();
site_statistic();
// Wartungsmodus
if ($allgAr['wartung'] == 1) {
    if (is_admin()) {
        @define('DEBUG', true);
        debug('Wartungsmodus aktiv !');
    } else {
        die($allgAr['wartungstext']);
    }
}
/* ENTWICKLUNGSVERSION SQL UPDATES */
require_once 'update/update.php';
// Modul oeffnen
require_once 'include/contents/' . $menu->get_url();
// Datenbank schließen

    $design->header($load);
    $tpl = new tpl('forum/newtopic');
    $name = '';
    if (!loggedin()) {
        $name = '<tr><td class="Cmite"0><b>' . $lang['name'] . '</b></td>';
        $name .= '<td class="Cnorm"><input type="text" value="' . unescape($xnn) . '" maxlength="15" name="Gname"></td></tr>';
    }
    if (isset($_POST['priview'])) {
        $tpl->set_out('txt', bbcode(unescape($txt)), 0);
    }
    $ar = array('name' => $name, 'txt' => escape_for_fields(unescape($txt)), 'topic' => escape_for_fields(unescape($topic)), 'fid' => $fid, 'SMILIES' => getsmilies(), 'antispam' => get_antispam('newtopic', 1));
    $tpl->set_ar_out($ar, 1);
} else {
    // save toipc
    $_SESSION['klicktime'] = $dppk_time;
    $design = new design($title, $hmenu, 0);
    $design->header($load);
    if (loggedin()) {
        $uid = $_SESSION['authid'];
        $erst = escape($_SESSION['authname'], 'string');
        db_query("UPDATE `prefix_user` SET `posts` = `posts`+1 WHERE `id` = " . $uid);
    } else {
        $erst = $xnn;
        $uid = 0;
    }
    db_query("INSERT INTO `prefix_topics` (`fid`, `name`, `erst`, `stat`) VALUES ( " . $fid . ", '" . $topic . "', '" . $erst . "', 1 )");
    $tid = db_last_id();
    // topic alert
    if (!empty($_POST['topic_alert']) and $_POST['topic_alert'] == 'yes' and loggedin()) {
        if (0 == db_result(db_query("SELECT COUNT(*) FROM `prefix_topic_alerts` WHERE `uid` = " . $_SESSION['authid'] . " AND `tid` = " . $tid), 0)) {
            db_query("INSERT INTO `prefix_topic_alerts` (`tid`,`uid`) VALUES (" . $tid . ", " . $_SESSION['authid'] . ")");

<?php

#########################################
#  Author  : D3W4 & SAHAT               #
#  Created : Mar 29, 2011 11:00:49 AM    #
#########################################
use_class('products_minierp');
use_class('design');
$design = new design();
$class_pm = new products_minierp();
$pid = tep_db_prepare_input($_GET['pid']);
$d_cat = tep_db_prepare_input($_GET['dcat']);
$d_cat_text = $design->getDesignCategory($d_cat);
$imgsize = '150';
$products = $class_pm->retrieveDetail($pid, 'p');
$design->original_products_id = $pid;
$design->category = $d_cat;
$content .= '<form name="copydesign" method="post" action="?open=designs-detail">';
$content .= '<input type="hidden" name="me_action" value="CREATENEWDESIGN" />';
$content .= '<div style="float:left;margin-left:15px;">';
//LEFT Part open
$margin_left = 15;
$content .= '<div id="image_1" style="float:left;width:' . $imgsize . 'px;height:210px;text-align:center;">';
$content .= '<label><strong>Main Image</strong><br />';
$content .= webImage($products['p']['products_image'], $imgsize, $imgsize, 'Main Image', 'img-border', '') . '</label>';
$content .= '<input type="hidden" name="image_1" value="' . $products['p']['products_image'] . '" />';
$content .= '</div>';
$margin_left += $imgsize;
$margin_left += 30;
$content .= '</div>';
//LEFT Part close