<?php

function userlisttree( $PARENT_ID )
{
	global $LOGIN_USER_ID;
	global $MANAGE_FLAG;
	global $LOGIN_DEPT_ID;
	global $LOGIN_USER_PRIV;
	global $PRIV_NO_FLAG;
	global $PRIV_NO;
	global $PARA_URL1;
	global $PARA_URL2;
	global $PARA_TARGET;
	global $PARA_ID;
	global $PARA_VALUE;
	global $connection;
	if ( 0 < $PRIV_NO_FLAG )
	{
		$DEPT_PRIV = is_dept_priv( $PARENT_ID );
	}
	else
	{
		$DEPT_PRIV = 1;
	}
	if ( $DEPT_PRIV == 1 )
	{
		if ( $LOGIN_USER_PRIV != "1" && $PRIV_NO_FLAG == 2 )
		{
			$query1 = "SELECT * from USER,USER_PRIV where DEPT_ID!=0 and DEPT_ID={$PARENT_ID} and USER.USER_PRIV=USER_PRIV.USER_PRIV and USER_PRIV.PRIV_NO>{$PRIV_NO} and USER_PRIV.USER_PRIV!=1";
		}
		else
		{
			$query1 = "SELECT * from USER,USER_PRIV where DEPT_ID!=0 and DEPT_ID={$PARENT_ID} and USER.USER_PRIV=USER_PRIV.USER_PRIV";
		}
		if ( $MANAGE_FLAG != "1" )
		{
			$query1 .= " and NOT_LOGIN!='1'";
		}
		$query1 .= " order by PRIV_NO,USER_NO,USER_NAME";
		$cursor1 = exequery( $connection, $query1 );
		while ( $ROW = mysql_fetch_array( $cursor1 ) )
		{
			$USER_ID = $ROW['USER_ID'];
			$USER_NAME = $ROW['USER_NAME'];
			$USER_NAME = str_replace( "&", "&amp;", $USER_NAME );
			$USER_NAME = str_replace( "<", "&lt;", $USER_NAME );
			$USER_NAME = str_replace( ">", "&gt;", $USER_NAME );
			$USER_NAME = str_replace( "\"", "&quot;", $USER_NAME );
			$USER_NAME = stripslashes( $USER_NAME );
			if ( $PARA_ID == "" )
			{
				$URL = "{$PARA_URL2}?USER_ID={$USER_ID}";
			}
			else if ( $PARA_ID == "ISPIRIT" && $PARA_VALUE == "1" )
			{
				$query = "SELECT * from USER where USER_ID='{$LOGIN_USER_ID}'";
				$cursor = exequery( $connection, $query );
				if ( $ROW = mysql_fetch_array( $cursor ) )
				{
					$PWD = $ROW['PASSWORD'];
				}
				$URL = "/ispirit/go.php?LOGIN_USER_ID={$LOGIN_USER_ID}&amp;PWD={$PWD}&amp;URL={$PARA_URL2}?USER_ID={$USER_ID}";
			}
			else
			{
				$URL = "{$PARA_URL2}?USER_ID={$USER_ID}&amp;{$PARA_ID}={$PARA_VALUE}";
			}
			$XML_TEXT_USER .= "<TreeNode id=\"{$USER_ID}\" text=\"{$USER_NAME}\" href=\"{$URL}\" img_src=\"/images/node_user.gif\" title=\"{$USER_NAME}\" target=\"{$PARA_TARGET}\"/>\n";
		}
	}
	$query = "SELECT * from DEPARTMENT where DEPT_PARENT={$PARENT_ID} order by DEPT_NO";
	$cursor1 = exequery( $connection, $query );
	while ( $ROW = mysql_fetch_array( $cursor1 ) )
	{
		$DEPT_ID1 = $ROW['DEPT_ID'];
		$DEPT_NAME1 = $ROW['DEPT_NAME'];
		$DEPT_NAME1 = str_replace( "&", "&amp;", $DEPT_NAME1 );
		$DEPT_NAME1 = str_replace( "\"", "&quot;", $DEPT_NAME1 );
		$DEPT_NAME1 = str_replace( "<", "&lt;", $DEPT_NAME1 );
		$DEPT_NAME1 = str_replace( ">", "&gt;", $DEPT_NAME1 );
		$DEPT_NAME1 = stripslashes( $DEPT_NAME1 );
		$CHILD_TEXT = userlisttree( $DEPT_ID1 );
		if ( 0 < $PRIV_NO_FLAG )
		{
			$DEPT_PRIV1 = is_dept_priv( $DEPT_ID1 );
		}
		else
		{
			$DEPT_PRIV1 = 1;
		}
		if ( $DEPT_PRIV1 == 1 )
		{
			$XML_TEXT_DEPT .= "<TreeNode id=\"{$DEPT_ID1}\" text=\"[{$DEPT_NAME1}]\" ";
		}
		else
		{
			$XML_TEXT_DEPT .= "<TreeNode id=\"{$DEPT_ID1}\" text=\"{$DEPT_NAME1}\" ";
		}
		if ( $PARA_URL1 != "" && $DEPT_PRIV1 == 1 )
		{
			$XML_TEXT_DEPT .= "href=\"{$PARA_URL1}?DEPT_ID={$DEPT_ID1}&amp;{$PARA_ID}={$PARA_VALUE}\" target=\"{$PARA_TARGET}\"";
		}
		else
		{
			$XML_TEXT_DEPT .= "href=\"#\" target=\"_self\"";
		}
		$XML_TEXT_DEPT .= " img_src=\"/images/node_dept.gif\" title=\"{$DEPT_NAME1}\"";
		if ( $CHILD_TEXT != "" || $DEPT_PRIV == 1 )
		{
			$XML_TEXT_DEPT .= " Xml=\"/inc/user_list/tree.php?DEPT_ID={$DEPT_ID1}&amp;PARA_URL1={$PARA_URL1}&amp;PARA_URL2={$PARA_URL2}&amp;PARA_TARGET={$PARA_TARGET}&amp;PRIV_NO_FLAG={$PRIV_NO_FLAG}&amp;PARA_ID={$PARA_ID}&amp;PARA_VALUE={$PARA_VALUE}&amp;MANAGE_FLAG={$MANAGE_FLAG}\"";
		}
		$XML_TEXT_DEPT .= "/>\n";
	}
	return $XML_TEXT_USER.$XML_TEXT_DEPT;
}

include_once( "inc/auth.php" );
include_once( "inc/utility_all.php" );
ob_end_clean( );
header( "Content-type: text/xml" );
$PARENT_ID = $DEPT_ID;
if ( 0 < $PRIV_NO_FLAG )
{
	$query = "SELECT * from USER_PRIV where USER_PRIV={$LOGIN_USER_PRIV}";
	$cursor = exequery( $connection, $query );
	if ( $ROW = mysql_fetch_array( $cursor ) )
	{
		$PRIV_NO = $ROW['PRIV_NO'];
	}
}
echo "<?xml version=\"1.0\" encoding=\"gb2312\"?>\n";
echo "<TreeNode>\n";
if ( $PARENT_ID == 0 )
{
	$query = "SELECT * from UNIT";
	$cursor = exequery( $connection, $query );
	if ( $ROW = mysql_fetch_array( $cursor ) )
	{
		$UNIT_NAME = $ROW['UNIT_NAME'];
	}
	$UNIT_NAME = str_replace( "&", "&amp;", $UNIT_NAME );
	$UNIT_NAME = str_replace( "<", "&lt;", $UNIT_NAME );
	$UNIT_NAME = str_replace( ">", "&gt;", $UNIT_NAME );
	$UNIT_NAME = str_replace( "\"", "&quot;", $UNIT_NAME );
	$UNIT_NAME = stripslashes( $UNIT_NAME );
	echo "  <TreeNode id=\"0\" text=\"{$UNIT_NAME}\" Xml=\"\" img_src=\"/images/menu/system.gif\">\n";
	echo userlisttree( $PARENT_ID );
	echo "  </TreeNode>\n";
}
else
{
	echo userlisttree( $PARENT_ID );
}
echo "</TreeNode>\n";
?>