<?php

function deptlisttree( $PARENT_ID )
{
	global $LOGIN_USER_ID;
	global $LOGIN_DEPT_ID;
	global $LOGIN_USER_PRIV;
	global $PRIV_NO_FLAG;
	global $PARA_URL;
	global $PARA_TARGET;
	global $PARA_ID;
	global $PARA_VALUE;
	$connection = openconnection( );
	if ( $PRIV_NO_FLAG )
	{
		$DEPT_PRIV = is_dept_priv( $PARENT_ID );
	}
	else
	{
		$DEPT_PRIV = 1;
	}
	$query = "SELECT * from DEPARTMENT where DEPT_PARENT={$PARENT_ID} order by DEPT_NO";
	$cursor1 = exequery( $connection, $query );
	while ( $ROW = mysql_fetch_array( $cursor1 ) )
	{
		$DEPT_ID1 = $ROW['DEPT_ID'];
		$DEPT_NAME1 = $ROW['DEPT_NAME'];
		$DEPT_NAME1 = str_replace( "&", "&amp;", $DEPT_NAME1 );
		$DEPT_NAME1 = str_replace( "\"", "&quot;", $DEPT_NAME1 );
		$DEPT_NAME1 = str_replace( "<", "&lt;", $DEPT_NAME1 );
		$DEPT_NAME1 = str_replace( ">", "&gt;", $DEPT_NAME1 );
		$DEPT_NAME1 = stripslashes( $DEPT_NAME1 );
		$CHILD_TEXT = deptlisttree( $DEPT_ID1 );
		if ( $PRIV_NO_FLAG )
		{
			$DEPT_PRIV1 = is_dept_priv( $DEPT_ID1 );
		}
		else
		{
			$DEPT_PRIV1 = 1;
		}
		if ( $DEPT_PRIV1 == 1 )
		{
			$XML_TEXT_DEPT .= "<TreeNode id=\"{$DEPT_ID1}\" text=\"[{$DEPT_NAME1}]\" ";
		}
		else
		{
			$XML_TEXT_DEPT .= "<TreeNode id=\"{$DEPT_ID1}\" text=\"{$DEPT_NAME1}\" ";
		}
		if ( $PARA_URL != "" && $DEPT_PRIV1 == 1 )
		{
			if ( $PARA_ID == "" )
			{
				$URL = "{$PARA_URL}?DEPT_ID={$DEPT_ID1}";
			}
			else
			{
				$URL = "{$PARA_URL}?DEPT_ID={$DEPT_ID1}&amp;{$PARA_ID}={$PARA_VALUE}";
			}
			$XML_TEXT_DEPT .= "href=\"{$URL}\" target=\"{$PARA_TARGET}\"";
		}
		else
		{
			$XML_TEXT_DEPT .= "href=\"#\" target=\"_self\"";
		}
		$XML_TEXT_DEPT .= " img_src=\"/images/node_dept.gif\" title=\"{$DEPT_NAME1}\"";
		if ( $CHILD_TEXT != "" )
		{
			$XML_TEXT_DEPT .= " Xml=\"/inc/dept_list/tree.php?DEPT_ID={$DEPT_ID1}&amp;PARA_URL={$PARA_URL}&amp;PARA_TARGET={$PARA_TARGET}&amp;PRIV_NO_FLAG={$PRIV_NO_FLAG}&amp;PARA_ID={$PARA_ID}&amp;PARA_VALUE={$PARA_VALUE}\"";
		}
		$XML_TEXT_DEPT .= "/>\n";
	}
	return $XML_TEXT_DEPT;
}

include_once( "inc/auth.php" );
include_once( "inc/utility_all.php" );
ob_end_clean( );
header( "Content-type: text/xml" );
$PARENT_ID = $DEPT_ID;
echo "<?xml version=\"1.0\" encoding=\"gb2312\"?>\n";
echo "<TreeNode>\n";
if ( $PARENT_ID == 0 )
{
	$query = "SELECT * from UNIT";
	$cursor = exequery( $connection, $query );
	if ( $ROW = mysql_fetch_array( $cursor ) )
	{
		$UNIT_NAME = $ROW['UNIT_NAME'];
	}
	$UNIT_NAME = str_replace( "&", "&amp;", $UNIT_NAME );
	$UNIT_NAME = str_replace( "<", "&lt;", $UNIT_NAME );
	$UNIT_NAME = str_replace( ">", "&gt;", $UNIT_NAME );
	$UNIT_NAME = str_replace( "\"", "&quot;", $UNIT_NAME );
	$UNIT_NAME = stripslashes( $UNIT_NAME );
	echo "  <TreeNode id=\"0\" text=\"{$UNIT_NAME}\" Xml=\"\" img_src=\"/images/menu/system.gif\">\n";
	echo deptlisttree( $PARENT_ID );
	echo "  </TreeNode>\n";
}
else
{
	echo deptlisttree( $PARENT_ID );
}
echo "</TreeNode>\n";
?>