main.prg

<?php
// vim: tabstop=2 shiftwidth=2 expandtab syn=php
/* *****variables******
  ft -   this is the form type - describing which form it will show,
        each included form may also do more than one thing based on it settings

  frm_hdr - Form Header Caption
  frm_ttl - Form Title
  frm_inc - Form Include File
  frm_hcuonly - Form is only to homebanking clients, webonly clients see a marketing message
  frm_batonly - Form is only to batch clients, live clients see a 'not available' message
  show_menu - This will determine if the menu on the left side is shown
  frm_login - This value is used in the ck_ticket, if it is true it will not relocate the form after checking any possible ticket
  chk_perm - This flag defaults to True, when true the permissions for the script will be checked, when false no checking
  chome - This is the name of the home directory in the linux path, it is set by the return of check_perm
**** */

$sharedLibrary= dirname(__FILE__) . "/../../shared/library";
$bankingLibrary= dirname(__FILE__) . "/../../banking/library";
$admLibrary= dirname(__FILE__) . "/../library";

require_once("$sharedLibrary/logging.i");
require_once("$sharedLibrary/hcuEnv.i");
require_once("$sharedLibrary/hcuLogError.i");
require_once("$sharedLibrary/hcuCommon.i");
require_once("$sharedLibrary/dms_imp_val.i");
require_once("$admLibrary/Set_aTicket.i");
require_once("$sharedLibrary/hcuFunctions.i");
require_once("$bankingLibrary/hcuDispFunctions.i");
require_once("$sharedLibrary/errormail.i");
require_once("$sharedLibrary/cu_func.i");
require_once("$sharedLibrary/cu_flagconst.i");
require_once("$sharedLibrary/cu_data.i");
require_once("$sharedLibrary/commonJsFunctions.i");
require_once("$admLibrary/admFunctions.i");
require_once("$sharedLibrary/cuDataModel.i");
require_once("$admLibrary/admStaticForms.i");
require_once("$admLibrary/admJSCrossUseful.i");
// ** Feature Gate support
require_once("$sharedLibrary/FeatureGateConfig.i");
require_once("$sharedLibrary/CreditUnionGate.i");


/**
 * Load the system environment options
 */
$SYSENV = LoadSystemEnv('admin'); // From hcuEnv.i

// ** Create a sanitized version of the SERVER_NAME for google analytics usage
$currServerName = trim(filter_input(INPUT_SERVER, 'SERVER_NAME', FILTER_SANITIZE_STRING));

require_once ("$sharedLibrary/db." . $SYSENV['db']['platform'] . ".i");

$dbh= db_pconnect($SYSENV['db']); // Only call this once for admin

$logger = $SYSENV['logger'];
$inc_path = "../includes/";
$staticPath = "../static/html";

// Create the menu link so it optionally redirects to HTTPS.
$http_scheme = $SYSENV['require_encryption'] ? 'https' : 'http';
$menu_link = "{$http_scheme}://{$_SERVER['HTTP_HOST']}{$_SERVER['PHP_SELF']}";


// * SET the Kendo Versions on Amazon
$cloudfrontDomainName = GetCloudFrontDomainName();
$homecuKendoVersion   = GetHomecuKendoVersion();
$bootstrapVersion     = GetHomecuBootstrapVersion();
$fontawesomeVersion   = GetFontawesomeVersion();
$loadStyleSheet = GetAdminDefaultKendoStyle();
/**
 *  Setup the error handling class
 *
 */
$errHndlr = new CatchErrorHandler(HCU_PRODUCT_ADMIN, $SYSENV['logger'], $SYSENV['devmode']);
$excHndlr = new CatchExceptionHandler(HCU_PRODUCT_ADMIN, $SYSENV['logger'], $SYSENV['devmode']);

set_error_handler(array($errHndlr, "catchError"));
set_exception_handler(array($excHndlr, "catchException"));

$operation = null;
$ft = null;
$dms_ok = array('action'=>'string','csv'=>'string','ft'=>'digits','authretry'=>'digits','authval'=>'string','act'=>'string', "operation" => "string");
dms_import($dms_ok);
$ft = isset($ft) ? intval($ft) : 0;
$operation = isset($operation) ? trim($operation) : "";

$pbsu_menu = false;
$self= "$menu_link?ft=$ft";
$frm_hdr = "";
$frm_ttl = "";
$frm_inc = "";
$funcInc = "";
$frm_hcuonly = true; // When true, webonly clients see an ad instead of the script
$frm_webonly = "webonlyMsg.html";
$frm_batonly = false; // When true, live clients see a 'not available' message
$frm_batmsg = "batonlyMsg.html";
$show_menu = true;
$show_content_padding = true;   // ** Should the homecu-padding-top be visible .  {true, false}
$frm_login = false;
$just_script = false;
$chk_perm = true;
$master_only = false;       // When true, script requires master privileges
$print_hdr = true;          // When true, the header images print, when false no header prints
$skip_time = false;         // This variable will skip the time check in the cookie
$use_perm_of = "";          // When checking permissions, check the permissions from this script, use current file if not set
$panelGroup = "";           // group of left-hand menu to expand
$preventGaScript = ($SYSENV['devmode'] == 1 ? true : false);
                              // ** This is an override for Google Analytics.  If true, it will NOT include Javascript Google Analytics
                                // There is code included with the just_script to prevent the GA javascript code if the html returned sets
                                // the content-type.  If this check is not enough, this is when the preventGaSCript should be set
                              // -- by default do NOT print GA script if we are IN dev mode

  $menu_ft = $ft; // copy $ft to use as a buffer to handle the corner cases

  switch ($ft) {
    case 1:
      $just_script = true;
      $frm_inc = "userSupportStatus.prg";
      $use_perm_of = "userSupport";
      $show_content_padding = false;
      break;
    case 2:
      $just_script = true;
      $frm_inc = "userSupportAudit.prg";
      $use_perm_of = "userSupport";
      $show_content_padding = false;
      break;
    case 3:
      $just_script = true;
      $frm_inc = "userSupportSecureMessages.prg";
      $use_perm_of = "userSupport";
      $show_content_padding = false;
      break;
    case 4:
      $just_script = true;
      $frm_inc = "userSupportRights.prg";
      $use_perm_of = "userSupportAdv";
      $show_content_padding = false;
      break;
    case 5:
      $just_script = true;
      $frm_inc = "aAccessControl.prg";
      $use_perm_of = "userSupportAdv";
      $show_content_padding = false;
      break;
    case 6:
      $just_script = true;
      $frm_inc = "userSupportShowRelated.prg";
      $use_perm_of = "userSupport";
      $show_content_padding = false;
      break;
    case 7:
      $just_script = true;
      $frm_inc = "userSupportDelete.prg";
      $use_perm_of = "userSupportAdv";
      $show_content_padding = false;
      break;
    case 8:
      $just_script = true;
      $frm_inc = "userSupportAlerts.prg";
      $use_perm_of = 'userSupport';
      $show_content_padding = false;
      break;
    case 9:
      $just_script = true;
      $frm_inc = "userSupportView.prg";
      $use_perm_of = 'MemAccount';
      $show_content_padding = false;
      break;
    case 10:     // Print PDF Doc
      $frm_hdr = "News";
      $frm_ttl = "";
      $frm_inc = "whatsnew.prg";
      $show_menu = false;
      $just_script = true;
      $chk_perm = false;
      $allowReadonly = true;
      $preventGaScript = true;
      break;
    case 11:    // Statement Banner Upload
      $frm_hdr = "Statement Banner Upload";
      $frm_ttl = "";
      $frm_inc = "stbanupload.prg";
      $use_perm_of = "stmtupload";
      $show_menu = true;
      if (isset($action)) {
        $skip_time = true;
      }
      $allowReadonly=true;
      break;
    case 12:
      $frm_inc = "admAudit.prg";
      $master_only = true;
      $frm_hcuonly = false;
      $just_script = $operation != "";
      $use_perm_of = "AuditMemChg";
      // Permission of "AuditAdmChg" doesn't exist (even on Mammoth) so tie the permission to the next best thing.
      break;
    case 13:
      $just_script = true;
      $frm_inc = "userSupportScheduledTransactions.prg";
      $use_perm_of = 'userSupport';
      $show_content_padding = false;
      break;
    case 14:     // Show Audit confidentiality statement
      $frm_hdr = "HomeCU Security Audit";
      $frm_ttl = "";
      $frm_inc = "audit.prg";
      $frm_hcuonly = false;
      $master_only = true;
      $allowReadonly = true;
      if ($operation != "") {
        // * *Try and view the due diligence report
        $show_menu = false;
        $just_script = true;
        $preventGaScript = true;   // Pass through scripts should not set this value
      } else {
        $panelGroup = "adm_maint";
        $show_menu = true;
        $just_script = false;
      }
      break;
    case 15:
      $just_script = true;
      $frm_inc = "userSupportAddUser.prg";
      $use_perm_of = "userSupportAdv";
      $show_content_padding = false;
      break;
    // User Search from the hub.
    case 16:
      $just_script = true;
      $show_menu = false;
      $frm_inc = "userSupportHub.prg";
      $use_perm_of = "userSupport";
      break;
    // Add User from the hub.
    case 17:
      $just_script = true;
      $show_menu = false;
      $frm_inc = "userSupportHub.prg";
      $use_perm_of = "userSupportAdv";
      break;
    case 18: // TODO loans.  Was pulled onto secureForms but probably should be a new script.
      $frm_hdr = "Secure Forms";
      $frm_ttl = "Secure Forms";
      $frm_inc = "secureForms.prg";
      $show_menu = true;
      $just_script = $operation != "";
      $preventGaScript = ($just_script ? true : $preventGaScript);
      $allowReadonly = true;
      $panelGroup = "secure_doc";
      $use_perm_of = "secureForms";
      break;
    case 19:    // combined pdf file upload
      $frm_hdr = "PDF File Upload";
      $frm_ttl = "";
      $frm_inc = "pdfupload.prg";
      $show_menu = true;
      $just_script = $operation != "";
      $preventGaScript = ($just_script ? true : $preventGaScript);
      $allowReadonly = true;
      $panelGroup = "file_trans";
      break;
    case 20:
      $frm_inc = "userSupportSecureMessages.prg";
      $just_script = $operation != "";
      $use_perm_of = "secureMessages";
      $show_content_padding = false;
      break;
    case 21:
      $frm_hdr = "Secure Forms";
      $frm_ttl = "Secure Forms";
      $frm_inc = "secureForms.prg";
      $frm_hcuonly = false;
      $show_menu = true;
      $just_script = $operation != "";
      $preventGaScript = ($just_script ? true : $preventGaScript);
      $allowReadonly = true;
      $panelGroup = "secure_doc";
      $use_perm_of = "secureForms";
      break;
    case 22:
      $frm_inc = "userSupportHub.prg";
      // Because the operations are user search and user add which are included files, do not allow them here.
      $use_perm_of = $operation != "" ? "NOTFOUND" : "userSupport";
      $show_content_padding = false;
      break;
    case 23:     // Survey Maintenance
      $frm_hdr = "Survey Maintenance";
      $frm_ttl = "Survey Maintenance";
      $frm_inc = "surveyMntc.prg";
      $show_menu = true;
      $just_script= $operation != "";
      $preventGaScript = ($just_script ? true : $preventGaScript);
      $allowReadonly = false;
      $panelGroup = "mbr_comm";
      break;
    case 24:     // Reset Pop-Up Messages
      $frm_hdr = "Reset Pop-Ups and Promos";
      $frm_ttl = "Reset Pop-Ups and Promos";
      $frm_inc = "aPromoList.prg";
      $show_menu = true;
      $just_script = $operation != "";
      $preventGaScript = ($just_script ? true : $preventGaScript);
      $allowReadonly = false;
      $panelGroup = "mbr_comm";
      $use_perm_of = "SetFlag";
      break;
    case 25:     // Private Directories
      $frm_hdr = "Private Directories";
      $frm_ttl = "Private Directories";
      $frm_inc = "DirMaint.prg";
      $show_menu = true;
      $allowReadonly = false;
      $just_script = $operation != "";
      $preventGaScript = ($just_script ? true : $preventGaScript);
      $panelGroup = "adm_maint";
      $use_perm_of = "DirMaint";
      break;
    case 26:     // Private Directories - User Maintenance
      $frm_hdr = "Private Directories - User Maintenance";
      $frm_ttl = "User Maintenance";
      $frm_inc = "UsrMaint.prg";
      $show_menu = true;
      $allowReadonly = false;
      $just_script = $operation != "";
      $preventGaScript = ($just_script ? true : $preventGaScript);
      $use_perm_of = "UsrMaint";
      break;
    case 27:     // Editable Pages
      $frm_hdr = "Editable Pages";
      $frm_ttl = "Editable Pages";
      $frm_inc = "Forms.prg";
      $show_menu = true;
      $allowReadonly = false;
      $just_script = $operation != "";
      $preventGaScript = ($just_script ? true : $preventGaScript);
      $use_perm_of = "Forms";
      $panelGroup = "adm_maint";
      break;
    case 28:     // My CU Contacts
      $frm_hdr = "My CU Contacts";
      $frm_ttl = "My CU Contacts";
      $frm_inc = "contMaint.prg";
      $frm_hcuonly = false;
      $just_script = $operation != "";
      $preventGaScript = ($just_script ? true : $preventGaScript);
      $show_menu = true;
      $allowReadonly = false;
      $panelGroup = "adm_maint";
      $use_perm_of= "contMaint";
      break;
    case 29:     // CU Admin Users
      $frm_hdr = "CU Admin Users";
      $frm_ttl = "CU Admin Users";
      $frm_inc = "admSecurity.prg";
      $frm_hcuonly = false;
      $just_script = $operation != "";
      $preventGaScript = ($just_script ? true : $preventGaScript);
      $show_menu = true;
      $master_only = false;
      $allowReadonly = false;
      $chk_perm = false;
      $panelGroup = "adm_maint";
      break;
    case 30:
      $frm_hdr = "CU Admin Users";
      $frm_ttl = "CU Admin Users";
      $frm_inc = "admUserMaint.prg";
      $just_script = $operation != "";
      $preventGaScript = ($just_script ? true : $preventGaScript);
      $show_menu = true;
      $master_only = true;
      $allowReadonly = false;
      $frm_hcuonly= false;
      $panelGroup = "adm_maint";
      $use_perm_of= "admSettings";
      break;
    case 31:
      $frm_hdr = "CU Admin Users";
      $frm_ttl = "CU Admin Users";
      $frm_inc = "admSecurity.prg";
      $just_script = $operation != "";
      $preventGaScript = ($just_script ? true : $preventGaScript);
      $show_menu = false;
      $master_only = false;
      $chk_perm = false;
      $frm_login = true;
      $frm_hcuonly = false;
      $panelGroup = "adm_maint";
      break;
    case 32:     // Email Setup
    case 33:
      $frm_hdr = "Email Setup";
      $frm_ttl = "Email Setup";
      $frm_inc = $ft == 32 ? "aSendEmail.prg" : "flagBadEmails.prg";
      $just_script = $operation != "";
      $preventGaScript = ($just_script ? true : $preventGaScript);
      $show_menu = true;
      $allowReadonly = false;
      $panelGroup = "email";
      $use_perm_of = "setupMail";
      break;
    case 34:     // Get Transactions
      $frm_hdr = "Get Transactions";
      $frm_ttl = "Get Transactions";
      $frm_inc = "GetTrans.prg";
      $frm_batonly = true;
      $show_menu = true;
      $allowReadonly = true;
      $panelGroup = "file_trans";
      break;
    case 35:
      $frm_hdr = "CU Admin Users";
      $frm_ttl = "CU Admin Users";
      $frm_inc = "admSecurity.prg";
      $just_script = $operation != "";
      $preventGaScript = ($just_script ? true : $preventGaScript);
      $show_menu = false;
      $master_only = false;
      $chk_perm = false;
      $frm_login = true;
      $panelGroup = "adm_maint";
      $frm_hcuonly = false;
      break;
    case 36:     // Get Transactions -- Printable Version
      $frm_hdr = "Get Transactions";
      $frm_ttl = "Get Transactions";
      $frm_inc = "GetTrans.prg";
      $frm_batonly = true;
      $show_menu = false;
      $print_hdr = false;
      $allowReadonly = true;
      break;
    case 37:    // Member Messages - but calls the Survey Maintenance Screen
      $frm_hdr = "Marketing Messages Maintenance";
      $frm_ttl = "Marketing Messages Maintenance";
      $frm_inc = "surveyMntc.prg";
      $use_perm_of = "MarketMntc";
      $just_script = $operation != "";
      $show_menu = true;
      $allowReadonly = false;
      $panelGroup = "mbr_comm";
      $preventGaScript = ($just_script ? true : $preventGaScript);
      break;
    case 38:    // Alert Messages - calls it's own separate maintenace screen
      $frm_hdr = "Alert Messages Maintenance";
      $frm_ttl = "Alert Messages Maintenance";
      $frm_inc = "AlertMntc.prg";
      $show_menu = true;
      $allowReadonly = false;
      $panelGroup = "mbr_comm";
      break;
    case 39:
      $frm_inc = "aBankingAudit.prg";
      $master_only = true;
      $frm_hcuonly = false;
      $just_script = $operation != "";
      $use_perm_of = "AuditMemChg";
      // Permission of "AuditAdmChg" doesn't exist (even on Mammoth) so tie the permission to the next best thing.
      break;
    case 41:     // Reports
      $frm_hdr = "CU Reports";
      $frm_ttl = "CU Reports";
      $frm_inc = "cuReporting.prg";
      $use_perm_of = "cuReports";
      $show_menu = true;
      if (isset($operation) && trim($operation) != "") {
            $just_script = true;
      }
      if (isset($csv) && trim($csv) == "print") {
        $show_menu = false;
        $print_hdr = false;
      }
      $allowReadonly = true;
      $panelGroup = "reports";
      $preventGaScript = ($just_script ? true : $preventGaScript);
      break;
    case 45:     // Manual E-Statement Signup
      $frm_hdr = "E-Statement Signup";
      $frm_ttl = "E-Statement Signup";
      $frm_inc = "FlagEStmt.prg";
      $show_menu = true;
      $allowReadonly = false;
      break;
    case 46:     // Admin Notification EMails
      $frm_hdr = "Admin Notification Emails";
      $frm_ttl = "Admin Notification Emails";
      $frm_inc = "cu_notify.prg";
      $use_perm_of = "notificationEmails";
      $show_menu = true;
      $allowReadonly = false;
      $panelGroup = "adm_maint";
      $just_script = $operation != "";
      break;
    case 50:
      $frm_hdr = "Profile Maintenance";
      $frm_ttl = "Profile Maintenance";
      $frm_inc = "aProfileLst.prg";
      $show_menu = true;
      break;
    case 51:
      $frm_hdr = "Profile Maintenance";
      $frm_ttl = "Profile Maintenance";
      $frm_inc = "aProfile.data";
      $show_menu = false;
      $just_script = true;
      $preventGaScript = true;
      $use_perm_of = "aProfileLst";
      break;
    case 52:
      $frm_hdr = "Profile Maintenance";
      $frm_ttl = "Profile Maintenance";
      $frm_inc = "aBankingCalendar.prg";
      $use_perm_of = 'aBankingCalendar';
      $panelGroup = "adm_maint";
      $show_menu = true;
      $show_content_padding = false;
      $just_script = $operation != "";
      $preventGaScript = ($just_script ? true : $preventGaScript);
      break;
    case 53:    // External Keys
      $frm_hdr = "External Keys Maintenance";
      $frm_ttl = "External Keys Maintenance";
      $frm_inc = "MbrExtKey.prg";
      $use_perm_of = "userSupport";
      $dms_ok = array('trustid'=>'string');
      dms_import($dms_ok);
      $cu = $Cu;
      $allowReadonly = false;
      $panelGroup = "mbr_supp";
      break;
    case 54:
      $frm_hdr = "Banking Settings";
      $frm_ttl = "Banking Settings";
      $frm_inc = "aAdminSettings.prg";
      $use_perm_of = 'aAdminSettings';
      $panelGroup = "adm_maint";
      $show_menu = true;
      $show_content_padding = false;
      $just_script = $operation != "";
      $preventGaScript = ($just_script ? true : $preventGaScript);
      break;
    case 65:    // UPDATED VIEW Member Balances
      $frm_hdr = "View Member Account";
      $frm_inc = "viewMemberAcct.prg";
      $use_perm_of = "MemAccount";
      $show_menu = true;
      $chk_perm = true;
      $allowReadonly = true;
      $panelGroup = "mbr_supp";
      break;
    case 67:
      $frm_hdr = "View Member Account";
      $frm_inc = "viewMemberAcct.prg";
      $use_perm_of = "MemAccount";
      $show_menu = false;
      $chk_perm = true;
      $allowReadonly = true;
      $just_script = true;
      $panelGroup = "mbr_supp";
      break;
    case 67:    // View member Holds
      $frm_hdr = "View Member Holds";
      $frm_inc = "MemHolds.prg";
      $use_perm_of = "MemAccount";
      $show_menu = true;
      $chk_perm = true;
      $allowReadonly = true;
      $panelGroup = "mbr_supp";
      break;
    case 68:    // View member security
      $frm_hdr = "View Member Security";
      $frm_inc = "MemSecure.prg";
      $use_perm_of = "userSupport";
      $show_menu = false;
      $just_script = true;
      $chk_perm = true;
      $allowReadonly = true;
      break;
    case 70:    // Logout option
      $frm_hdr = "Logout";
      $frm_ttl = "User Logout";
      $frm_inc = "admLogout.prg";
      $frm_login = true;
      $show_menu = false;
      $chk_perm = false;
      $allowReadonly = true;
      $frm_hcuonly = false;
    break;
    case 71:    // Login form
      // Login - Form this is the default
      $frm_hdr = "User Login";
      $frm_ttl = "User Login";
      $frm_inc = "admLogin.prg";
      $show_menu = false;
      $frm_login = true;
      $chk_perm = false;
      $allowReadonly = true;
      $frm_hcuonly = false;
      break;
    case 72:    // Contact HomeCU
      // Contact HomeCU Support
      $frm_hdr = "Contact HomeCU";
      $frm_ttl = "Contact HomeCU";
      $frm_inc = "admContact.prg";
      $show_menu = true ;
      $chk_perm = false;
      $allowReadonly = true;
      $frm_hcuonly = false;
      break;
    case 73:    // Check Image for viewing online check images for a member
      $frm_hdr = "View Members Check Image";
      $frm_inc = "MemCheck.prg";
      $show_menu = true;
      $chk_perm = true;
      $allowReadonly = true;
      $panelGroup = "mbr_supp";
      break;
    case 74:    // Online Deposits
    case 741:   // Online Deposits --- PRINTER FRIENDLY
      $frm_hdr = "Online Deposits";
      $frm_ttl = "";
      $frm_inc = "AdmDeposits";
      $show_menu = $ft == 74;
      $print_hdr = $ft == 74;
      $allowReadonly = false;
      $panelGroup = "file_trans";
      break;
    case 75:    // View member E-Statement
      $frm_hdr = "View Members E-Statement";
      $frm_inc = "MemStatement.prg";
      $show_menu = true;
      $chk_perm = true;
      $allowReadonly = true;
      $panelGroup = "mbr_supp";
      break;
    case 80:     // Files Form, see if this URL works
      $frm_hdr = "Upload Status";
      $frm_ttl = "Upload Status";
      $frm_inc = "files.prg";
      $show_menu = true;
      $allowReadonly = true;
      $preventGaScript = true;   // Pass through scripts should not set this value
      break;
    case 81:    // cuapp file, used for mortgage loan applications
      $frm_hdr = "CU Application";
      $frm_ttl = "";
      $frm_inc = "cuapp.prg";
      $show_menu = false;
      $just_script = true;
      $chk_perm = false;
      $allowReadonly = true;
      break;
    case 82:     // Files Form, see if this URL works
      $frm_hdr = "View File";
      $frm_ttl = "";
      $frm_inc = "files.prg";
      $show_menu = false;
      $just_script = true;
      $allowReadonly = true;
      $preventGaScript = true;   // Pass through scripts should not set this value
      break;
    case 84:     // View Web Stats
      $frm_hdr = "Web Statistics";
      $frm_ttl = "";
      $frm_inc = "stats.prg";
      $show_menu = false;
      $just_script = true;
      $allowReadonly = true;
      $panelGroup = "reports";
      $preventGaScript = true;   // Pass through scripts should not set this value
      break;
    case 841:     // View Web Stats
      $frm_hdr = "Web Statistics";
      $frm_ttl = "";
      $frm_inc = "stats.prg";
      $show_menu = false;
      $just_script = true;
      $allowReadonly = true;
      $panelGroup = "reports";
      $preventGaScript = true;   // Pass through scripts should not set this value
      break;
    case 842:     // View Web Stats
      $frm_hdr = "Web Statistics";
      $frm_ttl = "";
      $frm_inc = "stats.prg";
      $show_menu = false;
      $just_script = true;
      $allowReadonly = true;
      $panelGroup = "reports";
      $preventGaScript = true;   // Pass through scripts should not set this value
      break;
    case 843:  // Placeholder to pass in active menu
      break;
    case 844:
      break;
    case 85:    // Upload File
      $frm_hdr = "Upload File";
      $frm_ttl = "";
      $frm_inc = "upload.prg";
      $show_menu = true;
      if (isset($action)) {
        $skip_time = true;
      }
      $allowReadonly = false;
      $panelGroup = "file_trans";
      break;
    case 86:    // Statement Upload File
      $frm_hdr = "Statement Upload File";
      $frm_ttl = "";
      $frm_inc = "stmtupload.prg";
      $show_menu = true;
      if (isset($action)) {
        $skip_time = true;
        $just_script = true;
      }
      $allowReadonly = true;
      $panelGroup = "file_trans";
      break;
    case 87:    // View Report Magic Web Stats
      $frm_hdr = "Report Magic Web Statistics";
      $frm_ttl = "";
      $frm_inc = "magstats";
      $use_perm_of = "stats";
      $show_menu = false;
      $just_script = true;
      $allowReadonly = true;
      break;
    case 89:    // Upload File History
      $frm_hdr = "Upload Status";
      $frm_ttl = "";
      $frm_inc = "uploadHist.prg";
      $show_menu = true;
      $use_perm_of = "upload";
      $allowReadonly = true;
      $panelGroup = "file_trans";
      break;
    case 90:     // View Two-Factor Tour
      $frm_hdr = "Two-Factor Tour";
      $frm_ttl = "";
      $frm_inc = "demofiles.prg";
      $chk_perm = false;
      $show_menu = false;
      $just_script = true;
      $frm_hcuonly = true;
      $allowReadonly = true;
      $panelGroup = "mbr_supp";
      break;
    case 99:
    case 100:     // View ACH Transactions
      $frm_hdr = "ACH Transactions";
      $frm_ttl = "";
      $frm_inc = "aACH.prg";
      $just_script = $operation != "";
      $show_menu = !$just_script;
      $allowReadonly = true;
      $preventGaScript = ($just_script ? true : $preventGaScript);
      break;
    case 101:     // View ACH Transactions
      $frm_hdr = "ACH Report";
      $frm_ttl = "ACH Report";
      $frm_inc = "aACH.prg";
      $just_script = true;
      $show_menu = false;
      $allowReadonly = true;
      $preventGaScript = true;
      break;
    case 175:    // View member E-Statement
      $frm_hdr = "(forced) View Members E-Statement";
      $frm_inc = "ViewStatement.prg";
      $show_menu = true;
      $chk_perm = true;
      $allowReadonly = true;
      $panelGroup = "mbr_supp";
      break;
    case 200:     // Restrict Transactions Maintenance
      $frm_hdr = "Restrict Transactions";
      $frm_ttl = "Restrict Transactions";
      $frm_inc = "RestrictTran.prg";
      $show_menu = true;
      $allowReadonly = true;
      break;
    case 534:    // External Keys
      $frm_hdr = "External Keys Maintenance";
      $frm_ttl = "External Keys Maintenance";
      $frm_inc = "MbrExtKey.data";
      $use_perm_of = "userSupport";
      $dms_ok = array('trustid'=>'string');
      dms_import($dms_ok);
      $show_menu = false;
      $print_hdr = false;
      $just_script = true;
      $allowReadonly = false;
      break;
    case 751:    // show estatement without any menuing etc.
      $frm_hdr = "View Members E-Statement";
      $frm_inc = "MemStatement.prg";
      $show_menu = false;
      $just_script = true;
      $chk_perm = true;
      $allowReadonly = true;
      $panelGroup = "mbr_supp";
      break;
    case 801:   // Loan App Administration
      $frm_hdr = "Loan Apps";
      $frm_ttl = "Loan Apps";
      $frm_inc = "AppAdm.prg";
      $show_menu = true;
      $allowReadonly = true;
      $just_script = $operation != "";
      $panelGroup = "secure_doc";
      break;
    case 802:   // HomeCU Loan Application VIEW
      $frm_hdr = "Loan App View";
      $frm_ttl = "Loan App View";
      $frm_inc = "AppAdmView.prg";
      $use_perm_of = "AppAdm.prg";
      $show_menu = false;
      $just_script = true;
      $preventGaScript = true;
      $allowReadonly = true;
      break;
    case 901:    // Renumber e-statement file for changed member numbers
      $frm_hdr = "Renumber Statements";
      $frm_ttl = "Renumber Statements";
      $frm_inc = "RenumStmnt.prg";
      $use_perm_of = "userSupport";
      $show_menu = true;
      $allowReadonly = false;
      break;
    case 999: //  Rebake the cookie to extend the session
      $frm_hdr = "Extend Session";
      $frm_ttl = "ExtendSession";
      $frm_inc = "AppAdmView.prg";
      $use_perm_of = "";
      $chk_perm = false;
      $show_menu = false;
      $just_script = true;
      $preventGaScript = true;
      $allowReadonly = true;
      break;
    case 102101:
      $just_script = $operation != "";
      $frm_inc = "aGroupHub.prg";
      $use_perm_of = "userSupport";
      $preventGaScript = ($just_script ? true : $preventGaScript);
      $show_content_padding = false;
      break;
    case 102102:
      $just_script = true;
      $frm_inc = "aGroupSearch.prg";
      $use_perm_of = "userSupport";
      $preventGaScript = ($just_script ? true : $preventGaScript);
      $show_content_padding = false;
      break;
    case 102103:
      $just_script = true;
      $frm_inc = "aGroupRights.prg";
      $use_perm_of = "userSupportAdv";
      $preventGaScript = ($just_script ? true : $preventGaScript);
      $show_content_padding = false;
      break;
    case 102104:
      $just_script = true;
      $frm_inc = "aGroupSettings.prg";
      $use_perm_of = "userSupportAdv";
      $preventGaScript = ($just_script ? true : $preventGaScript);
      $show_content_padding = false;
      break;
    case 102105:
      $just_script = true;
      $frm_inc = "aGroupUsers.prg";
      $use_perm_of = "userSupport";
      $preventGaScript = ($just_script ? true : $preventGaScript);
      $show_content_padding = false;
      break;
    case 102106:
      $just_script = true;
      $frm_inc = "aGroupDelete.prg";
      $use_perm_of = "userSupport";
      $preventGaScript = ($just_script ? true : $preventGaScript);
      $show_content_padding = false;
      break;
    case 103101:
      $just_script = $operation != "";
      $frm_inc = "aMemberHub.prg";
      $use_perm_of = "userSupport";
      $preventGaScript = ($just_script ? true : $preventGaScript);
      $show_content_padding = false;
      break;
    case 103102:
      $just_script = true;
      $frm_inc = "aMemberSearch.prg";
      $use_perm_of = "userSupport";
      $preventGaScript = ($just_script ? true : $preventGaScript);
      $show_content_padding = false;
      break;
    case 103103:
      $just_script = true;
      $frm_inc = "aMemberUsers.prg";
      $use_perm_of = "userSupport";
      $preventGaScript = ($just_script ? true : $preventGaScript);
      $show_content_padding = false;
      break;
    case 103104:
      $just_script = true;
      $frm_inc = "aMemberSettings.prg";
      $use_perm_of = "userSupport";
      $preventGaScript = ($just_script ? true : $preventGaScript);
      $show_content_padding = false;
      break;
    case 103105:
      $just_script = true;
      $frm_inc = "aMemberAccounts.prg";
      $use_perm_of = "userSupport";
      $preventGaScript = ($just_script ? true : $preventGaScript);
      $show_content_padding = false;
      break;
    case 103106:
      $just_script = true;
      $frm_inc = "aMemberMicrs.prg";
      $use_perm_of = "userSupport";
      $preventGaScript = ($just_script ? true : $preventGaScript);
      $show_content_padding = false;
      break;
    case 103107:
      $just_script = true;
      $frm_inc = "aMemberDelete.prg";
      $use_perm_of = "userSupport";
      $preventGaScript = ($just_script ? true : $preventGaScript);
      $show_content_padding = false;
      break;
    case 103108:
      $just_script = true;
      $frm_inc = "aMemberEstmt.prg";
      $use_perm_of = "MemStatement";
      $preventGaScript = ($just_script ? true : $preventGaScript);
      $show_content_padding = false;
      break;
    case 103109:
      $just_script = true;
      $frm_inc = "aMemberImages.prg";
      $use_perm_of = "MemCheck";
      $preventGaScript = ($just_script ? true : $preventGaScript);
      $show_content_padding = false;
      break;
    case 103110:
      $just_script = true;
      $frm_inc = "aMemberPurge.prg";
      $use_perm_of = "userSupport";
      $preventGaScript = ($just_script ? true : $preventGaScript);
      $show_content_padding = false;
      break;
    default:    // Index form is the default
      $frm_hdr = "Welcome to Admin";
      $frm_ttl = "";
      $frm_inc = "welcome.prg";
      $show_menu = true;
      $chk_perm = false;
      $allowReadonly = true;
      $frm_hcuonly = false;
      $just_script = $operation != "";
      break;
  }


  // Set the permission file to use here
  if ($use_perm_of == "") {
    $use_perm_of = $frm_inc;
  }
  $use_perm_of = explode(".", $use_perm_of)[0];

  if ($ft != 71) {
    require_once("$admLibrary/ck_aticket.i");
  }

  if ($ft == 999) {
    // ck_aticket will automatically 'warm' the cookie and
    // set it for longer.  by getting to this point I know it was successful
    // IF ck_aticket.i failed, then it means the function returned a 'Location'
    // header line to redirect to login. This will be ignored by the calling script
    print "OK";
    // * exit - no reason to go further
    exit;
  }


  $menuVariables = array();
  $Cu = isset($Cu) ? trim($Cu) : "";
  //$Cp= null; // product name for admin header
  getVariablesForMenu($dbh, $menuVariables, $Cu);
  extract($menuVariables);

  $live = (isset($Cl) && $Cl == 'L' ? 'Y' : 'N');
  $perm_pass = 0;

  /*
   * get Org name for home cu admin header display
   * this is to display the credit union's name instead of "HomeCU Admin"
   */
  $Cname = checkOrgName($Cu);
  $Cname = ($Cname == '' ? "" : trim($Cname));

/*
 * changed test w/o implementing -- admin ignores cu offline status,
 * just check for homebanking_status O (db down) */
  $homebanking_status = isset($homebanking_status) ? trim($homebanking_status) : "";
  if ($homebanking_status == "O") {
  // Check the status of the offline flag, when set to 'Y', the only show the homecu_down script
    $funcInc = "homecuDown";
  } else {
    if (!$dbh) {
      // If the database connection failed, then show a different script
      $funcInc = "serverBusy";
    } else {
      # if we haven't logged in yet, set default fail values
      if(isset($Cn) && isset($Cu)) {
          list ($chome, $perm_pass, $perm_su, $accessAllowed) = checkPerm($Cn, $use_perm_of, $Cu);
      } else {
          list ($chome, $perm_pass, $perm_su, $accessAllowed) = array("",0,0,0);
      }

      if ( !$accessAllowed && !$frm_login ) {
        $frm_hdr = "Additional Authentication";
        $frm_ttl = "";
        $frm_inc = "AdmAddAuth.prg";

      } else {
        $home_path = $SYSENV["file_path"] . "/$chome";

        if ($chk_perm == true) {

        // Check permissions, IF successful, the change the requested script name to the script that outputs the program access error
          if ($perm_pass == 0) {

            if ($perm_su != 0 && $master_only != 0){

              $authretry= isset($authretry) ? $authretry : 3;
                # script requires master privileges; user is allowed to be master
              if (!isset($authval) || $authval != md5($Cn . 'HomeCU4U' . $ft)) {
                if ($authretry > 0) {
                  $funcInc = "formSu";
                } else {
                  # insert cuauditadmin record for failed master password 3x
                  $sql = "insert into cuauditadmin (auditdate, auditsrcuser_name, auditaction, cu, user_name, auditsrcemail, auditsrctype)
                  select now(), '$Cn', 'MASTR_FAIL', '$Cu', u.user_name, u.email, 'A' from cuadminusers u where user_name = '$Cn'";
                  $sth = db_query($sql,$dbh);
                  $funcInc= "permErr";
                }
              }
            } else {
              # set the default error "You don't have permission" form
              $funcInc= "permErr";
            }
          }
        }

        // This is a file UPLOAD -- do this check to see if we they may do a FULL REFRESH
        if ($ft == 85) {
          // Check the security for uploading files -- see if this user may perform a FULL REFRESH
          list ($tmp_ch, $full_refresh, $perm_su, $ipAccess) = checkPerm ($Cn, "fullupload", $Cu);
          $full_refresh = ($full_refresh == 1 ? true : false);
        }
      }
    }
  }

  $local_query_str = $_SERVER['QUERY_STRING'];
header ("Pragma: no-cache");
header ("Last-Modified: " . gmdate("D, d M Y H:i:s") . " GMT");
header ("Cache-Control: no-cache, no-store, must-revalidate, max_age=0");
header ("Expires: 0");

  // here we will determine if we should only be viewing the output of the script, NOT any html capsule

    if (!(isset($Cl) && $Cl == 'W' && $frm_hcuonly) && $just_script == true) {

      if (isset($funcInc) && $funcInc != "") {
        getStaticForm($SYSENV, $dbh, $funcInc, $self, $Cn, $Cu);
      } else {
        include_once($inc_path . $frm_inc);
        /** ********
         *  GOOGLE ANALYTICS
         *
         * After script is printed,
         *  check to see any content-type header was set
         *  and $preventGaScript is false
         * ** **********
         */
        $contentHeader = FindHeaderSent("Content-Type");
        if (!$contentHeader && !$preventGaScript) {
          // ** INclude GA Script
          PrintGAScript($currServerName, $Cu, $frm_inc);
        } // ** NO ELSE --

      }
      exit;
    }
header('X-Frame-Options: sameorigin');

$serviceShowInfo = !$frm_login;
$serviceShowMenu = !$frm_login;



?><!DOCTYPE html>
<html>
  <head>
    <title>HomeCU Admin Portal</title>
    <meta http-equiv="Content-Type" content="text/html; charset=UTF-8"/>
    <meta name="robots" content="noindex,nofollow" />
    <meta http-equiv="X-UA-Compatible" content="IE=edge" />

    <meta name="viewport" content="width=device-width, initial-scale=1" />

    <?php if (!$preventGaScript): ?>
      <script>
        (function(i,s,o,g,r,a,m){i['GoogleAnalyticsObject']=r;i[r]=i[r]||function(){
        (i[r].q=i[r].q||[]).push(arguments)},i[r].l=1*new Date();a=s.createElement(o),
        m=s.getElementsByTagName(o)[0];a.async=1;a.src=g;m.parentNode.insertBefore(a,m)
        })(window,document,'script','https://www.google-analytics.com/analytics.js','ga');

        ga('create', 'UA-104297046-1', 'auto');

      </script>
    <?php endif; ?>

    <?php
    $useGZExt = isset($useGZExt) ? trim($useGZExt) : "";

      /* START PASTE */
      print <<< HTML_INCLUDES
        <link rel='stylesheet' media='all' type='text/css' href='https://{$cloudfrontDomainName}/homecu/css/reset.4085.min.css' />

        <!-- BASE BOOTSTRAP  -->
        <link href='https://{$cloudfrontDomainName}/homecu/css/bootstrap/{$bootstrapVersion}/css/bootstrap.css' rel='stylesheet'/>

        <!-- KENDO BOOTSTRAP COMMON STYLES - - - REPLACES kendo.common.css -->
        <link href='https://{$cloudfrontDomainName}/homecu/css/KendoUI/{$homecuKendoVersion}/kendo.common-bootstrap.min.css' rel='stylesheet'/>

        <!--  KENDO BOOTSTRAP THEME */ -->
        <link href='https://{$cloudfrontDomainName}/homecu/css/KendoUI/{$homecuKendoVersion}/kendo.{$loadStyleSheet}.min.css' rel='stylesheet'/>

        <!-- METIS MENU  -->
        <link href='/static/css/metisMenu.css' rel='stylesheet'/>

        <!-- /* CUSTOM KENDO BOOTSTRAP STYLING */ -->
        <link rel='stylesheet' media='all' type='text/css' href='/shared/static/css/homecu-custom-kendo-boot.css' />

        <!-- /* HOMECU BASE LAYOUT */ -->
        <link rel='stylesheet' media='all' type='text/css' href='/shared/static/css/hcuLayout.css?v=201912161430' />
        <link rel='stylesheet' media='all' type='text/css' href='/admbin/static/css/layout.css?v=201912161430' />

        <!-- /* FONT AWESOME */ -->
        <link href='https://{$cloudfrontDomainName}/homecu/css/font-awesome/{$fontawesomeVersion}/css/font-awesome.css' rel='stylesheet'/>

        <!-- /* CREDIT UNION BRANDING CUSTOM STYLES */ -->
        <link rel='stylesheet' media='all' type='text/css' href='/admbin/static/css/brand.css' />

        <!-- /* CREDIT UNION BRANDING CUSTOM STYLES */ -->
        <link rel='stylesheet' media='all' type='text/css' href='/admbin/static/css/admin_master.css' />

        <!-- /**
         *  JAVASCRIPT INCLUDES
         */
        /* JQUERY BASE */     -->
        <script type='text/javascript' src='https://{$cloudfrontDomainName}/jquery/js/jquery-1.10.2.min.js{$useGZExt}'></script>

        <!-- /* KENDO FULL WIDGET INCLUDE - - CREATE CUSTOM FOR PRODUCTION */ -->
        <script src='https://{$cloudfrontDomainName}/homecu/js/KendoUI/{$homecuKendoVersion}/kendo.web.min.js'></script>
        <!-- /* BOOTSTRAP JAVASCRIPT */ -->
        <script src='https://{$cloudfrontDomainName}/homecu/js/bootstrap/{$bootstrapVersion}/js/bootstrap.js'></script>

        <!-- /* CUSTOM JQUERY TIMEOUT DIALOG SCRIPT */ -->
        <script type='text/javascript' src='/static/js/jquery-timeout-dialog.js'></script>
        <!-- /* JQUERY COOKIE */ -->
        <script type='text/javascript' src='https://{$cloudfrontDomainName}/homecu/js/jquery.cookie.js'></script>

        <!-- /* HOMECU CUSTOM ERRORS FOR FORMS */ -->
        <script type='text/javascript' src='/shared/static/js/hcuFormError.js'></script>

        <!-- /* HOMECU CUSTOM KENDO SETTINGS */ -->
        <script type='text/javascript' src='https://{$cloudfrontDomainName}/homecu/js/kendo.homecu.custom.4385.min.js'></script>

        <!-- /* metisMenu */ -->
        <script type='text/javascript' src='/static/js/metisMenu.js'></script>

        <script type='text/javascript' src='/shared/static/js/kendo.homecu.custom.js'></script>

HTML_INCLUDES;



      /* END PASTE */
    ?>
    <script>
      /* Set the width of the side navigation to 250px and the left margin of the page content to 250px and add a black background color to body */
      function openNav() {
          $('#body-wrapper').addClass('collapse');
          $('#body-wrapper').addClass('in');
      }

      /* Set the width of the side navigation to 0 and the left margin of the page content to 0, and the background color of body to white */
      function closeNav() {
          $('#body-wrapper').removeClass('collapse');
          $('#body-wrapper').removeClass('in');
      }
      function toggleNav() {
        var menuVisible = ($('#sidebar-nav:visible').length > 0);
        if (menuVisible) {
          closeNav();
        } else {
          openNav();
        }
      }

    <?php $menuVars = array();
    getVariablesForMenu($dbh, $menuVars, $Cu);
    extract($menuVars);
    ?>

    </script>

  </head>
  <body >
    <div id="body-wrapper" class="<?php echo (!$show_menu ? ' no-show-info ' : '') . (!$show_menu ? ' no-show-menu ' : '') . ($show_content_padding ? '' : ' no-homecu-padding '); ?> ">
      <!-- top navbar -->

      <nav id="header" class="navbar navbar-default navbar-fixed-top" role="navigation" style="margin-bottom: 0px">

          <div class="navbar-header">
            <button id="hcu-nav-toggle" onclick="toggleNav()" type="button" class="navbar-toggle collapsed" aria-expanded="false">
              <span class="sr-only">Toggle navigation</span>
              <span class="icon-bar"></span>
              <span class="icon-bar"></span>
              <span class="icon-bar"></span>
            </button>
            <div id="logo-bar">
              <a class="navbar-brand" href="#">
                <img alt="Digital Banking Logo" class="logo" src="https://d1kryjpwpzirc7.cloudfront.net/homecu/images/logo.png"/>
              </a>
              <p class="navbar-title"><?php echo ($Cname == '' ? '&nbsp;' : hcu_displayHtml($Cname)); ?></p>
            </div>
          </div>
          <div class="hcu-quick-nav-links navbar-nav nav navbar-top-links navbar-right">
            <ul class="x-hcu-quick-nav-links" id="hcu-navbar-collapse"></ul>
          </div>
      </nav>


      <aside id="side-menu" class="navbar-default sidebar sidenav" role="navigation">
        <div id="sidebar-nav" class="sidebar-nav navbar-collapse ">
          <?php if ($show_menu): ?>
            <ul id='list-menu' class="metismenu nav root-nav-categories">
             <li<?php chkIfActiveFt('0') ?>><a href="<?php echo $menu_link; ?>?ft=0"><i class="fa fa-home fa-fw"></i> Admin Home</a></li>
             <li<?php chkIfActiveFt(':22:103101:102101:') ?> class="" id='user_management'><a href="#" ><i class="fa fa-address-book fa-fw"></i>&nbsp;User Management<span class="fa arrow"></span></a>
              <ul class="nav nav-second-level">
                <li<?php chkIfActiveFt('22') ?>><a href="<?php echo $menu_link; ?>?ft=22"><i class="fa fa-user fa-fw"></i> User Hub</a></li>
                <li<?php chkIfActiveFt('103101') ?>><a href="<?php echo $menu_link; ?>?ft=103101"><i class="fa fa-book fa-fw"></i> Account Hub</a></li>
                <li<?php chkIfActiveFt('102101') ?>><a href="<?php echo $menu_link; ?>?ft=102101"><i class="fa fa-users fa-fw"></i> Group Hub</a></li>
              </ul>
              </li>
              <li<?php chkIfActiveFt(':100:99:') ?> id="zeACH"><a href="#"><i class="fa fa-university fa-fw"></i>&nbsp;ACH<span class="fa arrow"></span></a>
                <ul class="nav nav-second-level">
                  <li<?php chkIfActiveFt('99') ?>><a href="<?php echo $menu_link; ?>?ft=99&page=show_items"><i class="fa fa-book fa-fw"></i>Actions</a></li>
                  <li<?php chkIfActiveFt('100') ?>><a href="<?php echo $menu_link; ?>?ft=100"><i class="fa fa-user fa-fw"></i>History</a></li>
                </ul>
              </li>
              <li<?php chkIfActiveFt(':85:89:34:86:19:74:') ?> id='file_trans'><a href="#" aria-expanded="false"><i class="fa fa-upload fa-fw"></i> File Transfers<span class="fa arrow"></span></a>
                <ul class="nav nav-second-level<?php echo $class_in_a_bottle ?>" aria-expanded="false">
                  <?php // if ($live != 'Y'):
                    //<li<php chkIfActiveFt('85') >><a href="<php echo $menu_link; >?ft=85" class="link">Upload File</a></li>
                   // <li<php chkIfActiveFt('89') >><a href="<php echo $menu_link; >?ft=89" class="link">Upload Status</a></li>
                   // <li<php chkIfActiveFt('34') >><a href="<php echo $menu_link; >?ft=34" class="link">Get Transactions</a></li>
                  // <php endif; ?>
                  <li<?php chkIfActiveFt('86') ?>><a href="<?php echo $menu_link; ?>?ft=86" class="link">eStatement Upload</a></li>
                  <li<?php chkIfActiveFt('19') ?>><a href="<?php echo $menu_link; ?>?ft=19" class="link">PDF File Upload</a></li>
                  <?php if (isset($Fset2) && ($Fset2 & $CU2_USEONLDEP) == $CU2_USEONLDEP): ?>
                    <li<?php chkIfActiveFt('74') ?>><a href="<?php echo $menu_link; ?>?ft=74" class="link">Online Deposits</a></li>
                  <?php endif; ?>
                </ul>
              </li>
              <li<?php chkIfActiveFt(':21:20:801:') ?> id='secure_doc'><a href="#" ><i class="fa fa-envelope fa-fw"></i><?php echo $secureDocumentsText; ?><span class="fa arrow"></span></a>
                <ul class="nav nav-second-level<?php echo $class_in_a_bottle ?>">
                  <li<?php chkIfActiveFt('21') ?>><a href="<?php echo $menu_link; ?>?ft=21" class="link"><?php echo $secureFormText; ?></a></li>
                  <li<?php chkIfActiveFt('20') ?>><a href="<?php echo $menu_link; ?>?ft=20" class="link"><?php echo $messageText; ?></a></li>
                  <?php if ($loanCount > 0) { ?>
                    <li<?php chkIfActiveFt('801') ?>><a href="<?php echo $menu_link; ?>?ft=801" class="link">Online Loan Applications</a></li>
                  <?php } ?>
                </ul>
              </li><!--
              <li<?php chkIfActiveFt(':65:75:73:') ?> id='mbr_supp'><a href="#" ><i class="fa fa-user fa-fw"></i> Member Support<span class="fa arrow"></span></a>
                <ul class="nav nav-second-level<?php echo $class_in_a_bottle ?>">
                  <li<?php chkIfActiveFt('65') ?>><a href="<?php echo $menu_link; ?>?ft=65" class="link">View Member's Account</a></li>
                  <li<?php chkIfActiveFt('75') ?>><a href="<?php echo $menu_link; ?>?ft=75" class="link">View Member's E-Statement</a></li>
                  <li<?php chkIfActiveFt('73') ?>><a href="<?php echo $menu_link; ?>?ft=73" class="link">View Check Image</a></li>
                  <?php if ($hasEZ) { ?>
                    <li<?php chkIfActiveFt('53') ?>><a href="<?php echo $menu_link; ?>?ft=53&trustid=HcuEZCARD" class="link">EZCardInfo Settings</a></li>
                  <?php }
                  if ($hasDMI) { ?>
                    <li<?php chkIfActiveFt('53') ?>><a href="<?php echo $menu_link; ?>?ft=53&trustid=HcuDMI" class="link">DMI Settings</a></li>
                  <?php }
                  if ($hasMIR) { ?>
                    <li<?php chkIfActiveFt('53') ?>><a href="<?php echo $menu_link; ?>?ft=53&trustid=HcuMIR" class="link">MIR Settings</a></li>
                  <?php } ?>
                  <li<?php chkIfActiveFt('90') ?>><a target="_blank" href="<?php echo $menu_link; ?>/2factordemo?ft=90" ><i class="fa fa-bank fa-fw"></i> Two-Factor Tour&nbsp;&nbsp;<span style='font-size:x-small; font-style:italic;'>Requires Flash</span></a></li>
                </ul>
              </li> -->
              <li<?php chkIfActiveFt(':23:37:38:24:') ?> id='mbr_comm'><a href="#" ><i class="fa fa-newspaper-o fa-fw"></i> Member Communications<span class="fa arrow"></span></a>
                <ul class="nav nav-second-level<?php echo $class_in_a_bottle ?>">
                  <li<?php chkIfActiveFt('23') ?>><a href="<?php echo $menu_link; ?>?ft=23" class="link">Survey Maintenance</a></li>
                  <li<?php chkIfActiveFt('37') ?>><a href="<?php echo $menu_link; ?>?ft=37" class="link">Marketing Messages</a></li>
                  <!--<li<?php chkIfActiveFt('38') ?>><a href="<?php echo $menu_link; ?>?ft=38" class="link">Alert Messages</a></li>-->
                  <!-- <li class="admin-disabled-item"><span>Alert Messages</span></li> -->
                  <li<?php chkIfActiveFt('24') ?>><a href="<?php echo $menu_link; ?>?ft=24" class="link">Reset Pop-Ups and Promos</a></li>
                  <!--<li class="admin-disabled-item"><span>Reset Pop-Ups and Promos</span></li>-->
                </ul>
              </li>
              <li<?php chkIfActiveFt('41') ?>><a href="<?php echo $menu_link; ?>?ft=41" class="link"><i class="fa fa-area-chart fa-fw"></i> Reports</a></li>
              <?php /*
              <li<?php chkIfActiveFt(':411:411:52:84:84:84:') ?> id='reports'><a href="#" ><i class="fa fa-area-chart fa-fw"></i> Reports<span class="fa arrow"></span></a>
                <ul class="nav nav-second-level<?php echo $class_in_a_bottle ?>">
                  <li><a href="<\?php echo $menu_link; ?>?ft=411" class="link">Digital Banking Reports</a></li>
                  <li><a href="<\?php echo $menu_link; ?>?ft=411&which=mobile'" >Mobile Reports</a></li>
                  <li><a href="<\?php echo $menu_link; ?>?ft=42&report=lockedRpt" class="link">Locked Out Members</a></li>
                  <li><a href="<\?php echo $menu_link; ?>/WEBLOG?ft=84" class="link" target="stats">Statistics</a></li>
                  <li><a href="<\?php echo $menu_link; ?>/WEBLOG?ft=841&report=C" class="link" target="stats">Current Month MTD Statistics</a></li>
                  <li><a href="<\?php echo $menu_link; ?>/WEBLOG?ft=842&report=P" class="link" target="stats">Prior Month Statistics</a></li>
                </ul>
              </li>*/ ?>
              <li<?php chkIfActiveFt(':32:33:') ?> id='email'><a href="#" ><i class="fa fa-share fa-fw"></i> Broadcast Emails<span class="fa arrow"></span></a>
                <ul class="nav nav-second-level<?php echo $class_in_a_bottle ?>">
                    <li<?php chkIfActiveFt('32') ?>><a href="<?php echo $menu_link; ?>?ft=32" class="link">Send Email</a></li>
                    <li<?php chkIfActiveFt('33') ?>><a href="<?php echo $menu_link; ?>?ft=33" class="link">Flag Bad Emails</a></li>
                </ul>
              </li>
              <li<?php chkIfActiveFt(':30:12:39:50:52:54:46:28:29:25:27:843:844:14:') ?> id='adm_maint'><a href="#" ><i class="fa fa-lock fa-fw"></i> Administrative Maintenance<span class="fa arrow"></span></a>
                <ul class="nav nav-second-level<?php echo $class_in_a_bottle ?>">
                  <li<?php chkIfActiveFt('30') ?>><a href="<?php echo $menu_link; ?>?ft=30" class="link">CU Admin User Maintenance</a></li>
                  <li<?php chkIfActiveFt('12') ?>><a href="<?php echo $menu_link; ?>?ft=12" class="link">Audit Admin Users</a></li>
                  <li<?php chkIfActiveFt('39') ?>><a href="<?php echo $menu_link; ?>?ft=39" class="link">View User Events</a></li>
                  <li<?php chkIfActiveFt('50') ?>><a href="<?php echo $menu_link; ?>?ft=50" class="link">Banking Profiles</a></li>
                  <li<?php chkIfActiveFt('52') ?>><a href="<?php echo $menu_link; ?>?ft=52" class="link">Banking Calendar</a></li>
                  <li<?php chkIfActiveFt('54') ?>><a href="<?php echo $menu_link; ?>?ft=54" class="link">Banking Settings</a></li>
                  <li<?php chkIfActiveFt('46') ?>><a href="<?php echo $menu_link; ?>?ft=46" class="link">CU Email Notifications</a></li>
                  <?php if ($live == 'Y'): ?>
                    <li<?php chkIfActiveFt('28') ?>><a href="<?php echo $menu_link; ?>?ft=28" class="link">My CU Contacts</a></li>
                  <?php endif; ?>
                  <li<?php chkIfActiveFt('29') ?>><a href="<?php echo $menu_link; ?>?ft=29" class="link">Change Security Settings</a></li>
                  <li<?php chkIfActiveFt('25') ?>><a href="<?php echo $menu_link; ?>?ft=25" class="link">Private Directories</a></li>
<!--                   <li class="admin-disabled-item"><span>Private Directories</span></li>
                  <li class="admin-disabled-item"><span>Editable Website Pages</span></li> -->
                  <li<?php chkIfActiveFt('27') ?>><a href="<?php echo $menu_link; ?>?ft=27" class="link">Editable Website Pages</a></li><!--<?php
                  // <li><a href="http://mailcontrolcenter.com" class="link" target="mail">Domain Mail Setup</a></li>
                  // <li><a href="http://www.everyone.net/support/online_guides.html" class="link" target="mail">Domain Mail PC Help</a></li> ?>-->
                  <li<?php chkIfActiveFt('14') ?>><a href="<?php echo $menu_link; ?>?ft=14" class="link">Due Diligence</a></li>
                </ul>
              </li>
              <li><a href="/admcom/static/html/HomeCU_Admin_Manual.pdf?verson=1" target="_blank"><i class="fa fa-file-pdf-o fa-fw"></i>
                HomeCU Admin Manual&nbsp;<span style='font-size:x-small; font-style: italic;'>(PDF)</span></a></li>
              <li<?php chkIfActiveFt('72') ?>><a href="<?php echo $menu_link; ?>?ft=72"><i class="fa fa-question fa-fw"></i> Contact HomeCU</a></li>
              <li<?php chkIfActiveFt('70') ?>><a href="<?php echo $menu_link; ?>?ft=70"><i class="fa fa-power-off fa-fw"></i> Log Out</a></li>
            </ul>

          <?php endif; ?>
        </div>
      </aside>
      <div id="content-wrapper">
        <div id="formStatus" class="homecu-formStatus k-block k-error-colored" style='display:none; margin-bottom:10px;max-width:800px;'></div>
        <div id='hideSubmitWait' style='position:relative; left:-2000px;top:-2000px;'>
          <div id='homecuSubmitWait' class='k-block' >
            <div class='k-loading-image'></div>
          </div>
        </div>
        <a href="javascript:void(0)" onclick="closeNav()" x-href="#content-wrapper" class="overlay-close" x-data-toggle="collapse" >&nbsp;</a>
        <div id="main-container">
          <div id="homecu-container">
            <div id="homecu-padding-top" class=""></div> <!-- homecu-padding -->

          <!-- ** SCRIPT INCLUDE START ** -->

          <?php
            if (isset($Cl) && $Cl == 'W' && $frm_hcuonly && isset($frm_webonly) && strlen($frm_webonly) > 0)
              $funcInc= "webOnly";
            elseif (isset($Cl) && $Cl == 'L' && $frm_batonly && isset($frm_batmsg) && strlen($frm_batmsg) > 0)
              $funcInc= "batMsg";

            // Include the file if it is set
            // mws 3/17/2004 -- also check for the existence of the file
            if ($funcInc != "") {
              getStaticForm($SYSENV, $dbh, $funcInc, $self, $Cn, $Cu);
            } else {
              $exists = isset($frm_inc) && strlen($frm_inc) > 0 ? file_exists($inc_path . $frm_inc) : false;
              if ($exists) {

                $fullInclude = require_once($inc_path . $frm_inc);

                if (!$preventGaScript) {
                  // ** INclude GA Script
                  // * Under some circumstances 'cu' is set, but NOT 'Cu'
                  $gaCu = (!empty($cu) && $Cu == '' ? $cu : $Cu);
                  PrintGAScript($currServerName, $gaCu, $frm_inc);
                }

              } else {
                $fullInclude = getStaticForm($SYSENV, $dbh, "notFound", $self, $Cn, $Cu);
              }
            }
          ?>

          <!-- ** SCRIPT INCLUDE END ** -->
            <div id="homecu-padding-bottom" class=""></div> <!-- homecu-padding -->
          </div><!-- homecu-container -->
        </div><!-- main-container -->
        <footer class="footer">
          <div class="footer-container">
            <?php $copyrightYear = date( "Y" ); ?>
            <p class="text-muted">&copy; <?php echo $copyrightYear ?> HomeCU LLC. All rights reserved.</p>
          </div>
        </footer>
      </div>
    </div>

    <script>
      $(function() {

        $('#list-menu').metisMenu();

        <?php if (!$frm_login): ?>
          $.timeoutDialog({
            timeout: <?php echo intval($SYSENV["ticket"]["inactive"]) - 60;?>,
            countdown: 60,
            title : 'Your session is about to expire!',
            message : 'You will be logged out in {0} seconds.',
            question: 'Do you want to stay signed in?',
            keep_alive_button_text: 'Yes, Keep me signed in',
            sign_out_button_text: 'No, Sign me out',

            logout_redirect_url: '<?php echo $menu_link; ?>?ft=70',
            keep_alive_url: '<?php echo $menu_link; ?>?ft=999',
            restart_on_yes: true,
            cookie_name: 'aTicket',
            dialog_width: 350
          });

        <?php endif;
         /**
         *  @uses Check if feature is active.
         *
         *  @param $p_ft: feature id to check against active feature.
         **/

        function chkIfActiveFt($p_ft='') {
          global $menu_ft; // "copy" of global $ft [declared at top of script in global namespace/scope as a snapshop of current MVC state and the actively selected "feature"].
          global $logger;
          global $class_in_a_bottle; // dependant on group test, used to send a class into nested ul

          $class_in_a_bottle = ''; // reset everytime function is called
          $is_active = false;
          $class_payload = "active";

          if (strpos($p_ft, ":") >-1) { // test if haystack, if so evaluate as if a group of features
              if (strpos($p_ft, ":" . trim($menu_ft . ":")) >-1) { // group format = features serialized as a string, seperated with periods.
                 $is_active = true;
                 $class_in_a_bottle = " in";
              }
           } else {
            if ($menu_ft==$p_ft) {
              $class_payload .= " hcu-active-nav-link";
              $is_active = true;
            }
          }
          if ($is_active) { print " class='" . $class_payload . "'"; }
        } ?>

        <?php
          // * Only lookup the realname if we are going to show the menu. This should only happen when authenticated
          if ($show_menu && isset($Cn)) {
            $sql= "select realname from cuadminusers where cu='$Cu' and user_name='$Cn'";
            $sth= db_query($sql, $dbh);
            $realname= $sth ? db_fetch_row($sth, 0)[0] : $Cn;
          }
          $realname= isset($realname) ? trim($realname) : "";
        ?>

        $("#hcu-navbar-collapse").kendoMenu({
          closeOnClick: false,
          direction: "bottom",
          scrollable: true,
          dataSource: [
            {text: "<i class='fa fa-power-off fa-fw'></i>Log Out",
            encoded: false,
            content: "text",
            url: "<?php echo $menu_link; ?>?ft=70",
            items: [
              {text: "<i class='fa fa-user fa-fw'></i> <?php echo $realname; ?>", encoded: false, cssClass: "showNotClickable"},
              {text: "<i class='fa fa-cog fa-fw'></i> Settings", encoded: false, url: "<?php echo $menu_link; ?>?ft=29&page=securityBasic"},
              {text: "<i class='fa fa-power-off fa-fw'></i> Log Out", encoded: false, url: "<?php echo $menu_link; ?>?ft=70"}
            ]}
          ]
        });
      });
      $(window).unload(function(){}); // Does nothing but break the bfcache [Not sure what this is]

    </script>
  </body>
</html>