diff --git a/lam/templates/3rdParty/pla/htdocs/add_attr_form.php b/lam/templates/3rdParty/pla/htdocs/add_attr_form.php
new file mode 100644
index 00000000..7f728413
--- /dev/null
+++ b/lam/templates/3rdParty/pla/htdocs/add_attr_form.php
@@ -0,0 +1,185 @@
+<?php
+/**
+ * Displays a form for adding an attribute/value to an LDAP entry.
+ *
+ * @package phpLDAPadmin
+ * @subpackage Page
+ */
+
+/**
+ */
+
+require './common.php';
+
+# The DN we are working with
+$request = array();
+$request['dn'] = get_request('dn','GET');
+
+# Check if the entry exists.
+if (! $request['dn'] || ! $app['server']->dnExists($request['dn']))
+	error(sprintf(_('The entry (%s) does not exist.'),$request['dn']),'error','index.php');
+
+$request['page'] = new TemplateRender($app['server']->getIndex(),get_request('template','REQUEST',false,null));
+$request['page']->setDN($request['dn']);
+$request['page']->accept(true);
+$request['template'] = $request['page']->getTemplate();
+
+# Render the form
+if (get_request('meth','REQUEST') != 'ajax') {
+	$request['page']->drawTitle(sprintf('%s <b>%s</b>',_('Add new attribute'),get_rdn($request['dn'])));
+	$request['page']->drawSubTitle();
+
+	echo '<div style="text-align: center;">';
+	if (count($request['template']->getAvailAttrs())) {
+		# If we have more than the configured entries, we'll separate our input to the old ways.
+		if (count($request['template']->getAvailAttrs()) > $_SESSION[APPCONFIG]->getValue('appearance','max_add_attrs')) {
+			$attr = array();
+			$attr['avail'] = array();
+			$attr['binary'] = array();
+
+			foreach ($request['template']->getAvailAttrs() as $attribute)
+				if ($app['server']->isAttrBinary($attribute->getName()))
+					array_push($attr['binary'],$attribute);
+				else
+					array_push($attr['avail'],$attribute);
+
+			if (count($attr['avail']) > 0) {
+				echo '<br />';
+				echo _('Add new attribute');
+				echo '<br />';
+				echo '<br />';
+
+				echo '<form action="cmd.php" method="post">';
+				echo '<div>';
+
+				if ($_SESSION[APPCONFIG]->getValue('confirm','update'))
+					echo '<input type="hidden" name="cmd" value="update_confirm" />';
+				else
+					echo '<input type="hidden" name="cmd" value="update" />';
+
+				printf('<input type="hidden" name="server_id" value="%s" />',$app['server']->getIndex());
+				printf('<input type="hidden" name="dn" value="%s" />',htmlspecialchars($request['dn']));
+
+				echo '<select name="single_item_attr">';
+
+				foreach ($attr['avail'] as $attribute) {
+					# Is there a user-friendly translation available for this attribute?
+					if ($attribute->haveFriendlyName())
+						$attr_display = sprintf('%s (%s)',$attribute->getFriendlyName(),$attribute->getName(false));
+					else
+						$attr_display = $attribute->getName(false);
+
+					printf('<option value="%s">%s</option>',htmlspecialchars($attribute->getName()),$attr_display);
+				}
+
+				echo '</select>';
+
+				echo '<input type="text" name="single_item_value" size="20" />';
+				printf('<input type="submit" name="submit" value="%s" class="update_dn" />',_('Add'));
+				echo '</div>';
+				echo '</form>';
+
+			} else {
+				echo '<br />';
+				printf('<small>(%s)</small>',_('no new attributes available for this entry'));
+			}
+
+			if (count($attr['binary']) > 0) {
+				echo '<br />';
+				echo _('Add new binary attribute');
+				echo '<br />';
+				echo '<br />';
+
+				echo '<!-- Form to add a new BINARY attribute to this entry -->';
+				echo '<form action="cmd.php" method="post" enctype="multipart/form-data">';
+				echo '<div>';
+
+				if ($_SESSION[APPCONFIG]->getValue('confirm','update'))
+					echo '<input type="hidden" name="cmd" value="update_confirm" />';
+				else
+					echo '<input type="hidden" name="cmd" value="update" />';
+
+				printf('<input type="hidden" name="server_id" value="%s" />',$app['server']->getIndex());
+				printf('<input type="hidden" name="dn" value="%s" />',$request['dn']);
+				echo '<input type="hidden" name="binary" value="true" />';
+
+				echo '<select name="single_item_attr">';
+
+				foreach ($attr['binary'] as $attribute) {
+					# Is there a user-friendly translation available for this attribute?
+					if ($attribute->haveFriendlyName())
+						$attr_display = sprintf('%s (%s)',$attribute->getFriendlyName(),$attribute->getName(false));
+					else
+						$attr_display = $attribute->getName(false);
+
+					printf('<option value="%s">%s</option>',htmlspecialchars($attribute->getName()),$attr_display);
+				}
+
+				echo '</select>';
+
+				echo '<input type="file" name="single_item_value" size="20" />';
+				printf('<input type="submit" name="submit" value="%s" class="update_dn" />',_('Add'));
+
+				if (! ini_get('file_uploads'))
+					printf('<br /><small><b>%s</b></small><br />',
+						_('Your PHP configuration has disabled file uploads. Please check php.ini before proceeding.'));
+
+				else
+					printf('<br /><small><b>%s: %s</b></small><br />',_('Maximum file size'),ini_get('upload_max_filesize'));
+
+				echo '</div>';
+				echo '</form>';
+
+			} else {
+				echo '<br />';
+				printf('<small>(%s)</small>',_('no new binary attributes available for this entry'));
+			}
+
+		} else {
+			echo '<br />';
+
+			$request['page']->drawFormStart();
+			printf('<input type="hidden" name="server_id" value="%s" />',$app['server']->getIndex());
+			printf('<input type="hidden" name="dn" value="%s" />',htmlspecialchars($request['dn']));
+
+			echo '<table class="entry" cellspacing="0" align="center" border="0">';
+
+			foreach ($request['template']->getAvailAttrs() as $attribute)
+				$request['page']->draw('Template',$attribute);
+
+			$request['page']->drawFormSubmitButton();
+			echo '</table>';
+
+			$request['page']->drawFormEnd();
+		}
+
+	} else {
+		printf('<small>(%s)</small>',_('no new attributes available for this entry'));
+	}
+
+	echo '</div>';
+
+# The ajax addition (it is going into an existing TemplateRendered page
+} else {
+	# Put our DIV there for the callback
+	echo '<fieldset>';
+	printf('<legend>%s</legend>',_('Add Attribute'));
+	echo '<div id="ajADDATTR">';
+	echo '<table class="entry" cellspacing="0" align="center" border="0">';
+	echo '<td valign="top" align="center">';
+
+	printf('<select name="attr" onchange="ajDISPLAY(\'%s\',\'cmd=add_value_form&server_id=%s&dn=%s&attr=\'+this.value,\'%s\',\'append\');">',
+		'ADDATTR',$app['server']->getIndex(),$request['template']->getDNEncode(),_('Please Wait'));
+
+	printf('<option value="%s">%s</option>','','');
+	foreach ($request['template']->getAvailAttrs() as $attribute)
+		printf('<option value="%s">%s</option>',htmlspecialchars($attribute->getName()),$attribute->getFriendlyName());
+
+	echo '</select>';
+
+	echo '</td>';
+	echo '</table>';
+	echo '</div>';
+	echo '</fieldset>';
+}
+?>
diff --git a/lam/templates/3rdParty/pla/htdocs/add_oclass_form.php b/lam/templates/3rdParty/pla/htdocs/add_oclass_form.php
new file mode 100644
index 00000000..d2353c9c
--- /dev/null
+++ b/lam/templates/3rdParty/pla/htdocs/add_oclass_form.php
@@ -0,0 +1,117 @@
+<?php
+/**
+ * This page will allow the adding of additional ObjectClasses to an item.
+ * + If the ObjectClass to be added requires additional MUST attributes to be
+ *   defined, then they will be prompted for.
+ * + If the ObjectClass doesnt need any additional MUST attributes, then it
+ *   will be silently added to the object.
+ *
+ * @package phpLDAPadmin
+ * @subpackage Page
+ */
+
+/**
+ */
+
+require './common.php';
+
+# The DN and OBJECTCLASS we are working with.
+$request = array();
+$request['dn'] = get_request('dn','REQUEST',true);
+
+# Check if the entry exists.
+if (! $request['dn'] || ! $app['server']->dnExists($request['dn']))
+	error(sprintf(_('The entry (%s) does not exist.'),$request['dn']),'error','index.php');
+
+$request['page'] = new TemplateRender($app['server']->getIndex(),get_request('template','REQUEST',false,null));
+$request['page']->setDN($request['dn']);
+$request['page']->accept(true);
+$request['template'] = $request['page']->getTemplate();
+
+$attribute_factory = new AttributeFactory();
+
+# Grab the required attributes for the new objectClass
+$ldap = array();
+$ldap['attrs']['must'] = array();
+
+foreach ($request['template']->getAttribute('objectclass')->getValues() as $oclass_name) {
+	# Exclude "top" if its there.
+	if (! strcasecmp('top',$oclass_name))
+		continue;
+
+	if ($soc = $app['server']->getSchemaObjectClass($oclass_name))
+		$ldap['attrs']['must'] = array_merge($ldap['attrs']['must'],$soc->getMustAttrNames(true));
+}
+
+$ldap['attrs']['must'] = array_unique($ldap['attrs']['must']);
+
+/* Build a list of the attributes that this new objectClass requires,
+ * but that the object does not currently contain */
+$ldap['attrs']['need'] = array();
+foreach ($ldap['attrs']['must'] as $attr)
+	if (is_null($request['template']->getAttribute($attr)))
+		array_push($ldap['attrs']['need'],$attribute_factory->newAttribute($attr,array('values'=>array()),$app['server']->getIndex()));
+
+# Mark all the need attributes as shown
+foreach ($ldap['attrs']['need'] as $index => $values)
+	$ldap['attrs']['need'][$index]->show();
+
+if (count($ldap['attrs']['need']) > 0) {
+	$request['page']->drawTitle(sprintf('%s <b>%s</b>',_('Add new objectClass to'),get_rdn($request['dn'])));
+	$request['page']->drawSubTitle();
+
+	echo '<div style="text-align: center">';
+	printf('<small><b>%s: </b>%s <b>%s</b> %s %s</small>',
+		_('Instructions'),
+		_('In order to add these objectClass(es) to this entry, you must specify'),
+		count($ldap['attrs']['need']),_('new attributes'),
+		_('that this objectClass requires.'));
+
+	echo '<br /><br />';
+
+	echo '<form action="cmd.php" method="post" id="entry_form">';
+	echo '<div>';
+
+	if ($_SESSION[APPCONFIG]->getValue('confirm','update'))
+		echo '<input type="hidden" name="cmd" value="update_confirm" />';
+	else
+		echo '<input type="hidden" name="cmd" value="update" />';
+
+	printf('<input type="hidden" name="server_id" value="%s" />',$app['server']->getIndex());
+	printf('<input type="hidden" name="dn" value="%s" />',htmlspecialchars($request['dn']));
+	echo '</div>';
+
+	echo '<table class="entry" cellspacing="0" border="0" style="margin-left: auto; margin-right: auto;">';
+	printf('<tr><th colspan="2">%s</th></tr>',_('New Required Attributes'));
+
+	$counter = 0;
+	echo '<tr><td colspan="2">';
+	foreach ($request['template']->getAttribute('objectclass')->getValues() as $value)
+		$request['page']->draw('HiddenValue',$request['template']->getAttribute('objectclass'),$counter++);
+	echo '</td></tr>';
+
+	foreach ($ldap['attrs']['need'] as $count => $attr)
+		$request['page']->draw('Template',$attr);
+
+	echo '</table>';
+
+	printf('<div style="text-align: center;"><br /><input type="submit" value="%s" /></div>',_('Add ObjectClass and Attributes'));
+	echo '</form>';
+	echo '</div>';
+
+# There are no other required attributes, so we just need to add the objectclass to the DN.
+} else {
+	$result = $app['server']->modify($request['dn'],$request['template']->getLDAPmodify());
+
+	if ($result) {
+		$href = sprintf('cmd.php?cmd=template_engine&server_id=%s&dn=%s&modified_attrs[]=objectclass',
+			$app['server']->getIndex(),rawurlencode($request['dn']));
+
+		if (get_request('meth','REQUEST') == 'ajax')
+			$href .= '&meth=ajax';
+
+		header(sprintf('Location: %s',$href));
+		die();
+	}
+}
+?>
diff --git a/lam/templates/3rdParty/pla/htdocs/add_value_form.php b/lam/templates/3rdParty/pla/htdocs/add_value_form.php
new file mode 100644
index 00000000..790b6392
--- /dev/null
+++ b/lam/templates/3rdParty/pla/htdocs/add_value_form.php
@@ -0,0 +1,173 @@
+<?php
+/**
+ * Displays a form to allow the user to enter a new value to add
+ * to the existing list of values for a multi-valued attribute.
+ *
+ * @package phpLDAPadmin
+ * @subpackage Page
+ */
+
+/**
+ */
+
+require './common.php';
+
+# The DN and ATTR we are working with.
+$request = array();
+$request['dn'] = get_request('dn','GET',true);
+$request['attr'] = get_request('attr','GET',true);
+
+# Check if the entry exists.
+if (! $request['dn'] || ! $app['server']->dnExists($request['dn']))
+	error(sprintf(_('The entry (%s) does not exist.'),$request['dn']),'error','index.php');
+
+$request['page'] = new TemplateRender($app['server']->getIndex(),get_request('template','REQUEST',false,null));
+$request['page']->setDN($request['dn']);
+$request['page']->accept(true);
+$request['template'] = $request['page']->getTemplate();
+
+/*
+if ($request['attribute']->isReadOnly())
+	error(sprintf(_('The attribute (%s) is in readonly mode.'),$request['attr']),'error','index.php');
+*/
+
+# Render the form
+if (! strcasecmp($request['attr'],'objectclass') || get_request('meth','REQUEST') != 'ajax') {
+	# Render the form.
+	$request['page']->drawTitle(sprintf('%s <b>%s</b> %s <b>%s</b>',_('Add new'),$request['attr'],_('value to'),get_rdn($request['dn'])));
+	$request['page']->drawSubTitle();
+
+	if (! strcasecmp($request['attr'],'objectclass')) {
+		echo '<form action="cmd.php" method="post" class="new_value" id="entry_form">';
+		echo '<div>';
+		echo '<input type="hidden" name="cmd" value="add_oclass_form" />';
+
+	} else {
+		echo '<form action="cmd.php" method="post" class="new_value" id="entry_form" enctype="multipart/form-data" onsubmit="return submitForm(this)">';
+		echo '<div>';
+		if ($_SESSION[APPCONFIG]->getValue('confirm','update'))
+			echo '<input type="hidden" name="cmd" value="update_confirm" />';
+		else
+			echo '<input type="hidden" name="cmd" value="update" />';
+	}
+
+	printf('<input type="hidden" name="server_id" value="%s" />',$app['server']->getIndex());
+	printf('<input type="hidden" name="dn" value="%s" />',htmlspecialchars($request['dn']));
+	echo '</div>';
+
+	echo '<table class="forminput" border="0" style="margin-left: auto; margin-right: auto;">';
+	echo '<tr>';
+
+	$request['attribute'] = $request['template']->getAttribute($request['attr']);
+	$request['count'] = $request['attribute']->getValueCount();
+
+	if ($request['count']) {
+		printf('<td class="top">%s <b>%s</b> %s <b>%s</b>:</td>',
+			_('Current list of'),$request['count'],_('values for attribute'),$request['attribute']->getFriendlyName());
+
+		echo '<td>';
+
+		# Display current attribute values
+		echo '<table border="0"><tr><td>';
+		for ($i=0;$i<$request['count'];$i++) {
+			if ($i > 0)
+				echo '<br/>';
+			$request['page']->draw('CurrentValue',$request['attribute'],$i);
+			$request['page']->draw('HiddenValue',$request['attribute'],$i);
+		}
+		echo '</td></tr></table>';
+
+		echo '</td>';
+
+	} else {
+		printf('<td>%s <b>%s</b>.</td>',
+			_('No current value for attribute'),$request['attribute']->getFriendlyName());
+		echo '<td><br /><br /></td>';
+	}
+
+	echo '</tr>';
+
+	echo '<tr>';
+	printf('<td class="top">%s</td>',_('Enter the value(s) you would like to add:'));
+	echo '<td>';
+
+	if (! strcasecmp($request['attr'],'objectclass')) {
+		# If our attr is an objectClass, fetch all available objectClasses and remove those from the list that are already defined in the entry
+		$socs = $app['server']->SchemaObjectClasses();
+
+		foreach ($request['attribute']->getValues() as $oclass)
+			unset($socs[strtolower($oclass)]);
+
+		# Draw objectClass selection
+		echo '<table border="0">';
+		echo '<tr><td>';
+		echo '<select name="new_values[objectclass][]" multiple="multiple" size="15">';
+		foreach ($socs as $name => $oclass) {
+			# Exclude any structural ones, that are not in the heirachy, as they'll only generate an LDAP_OBJECT_CLASS_VIOLATION
+			if (($oclass->getType() == 'structural') && ! $oclass->isRelated($request['attribute']->getValues()))
+				continue; 
+
+			printf('<option value="%s">%s</option>',$oclass->getName(false),$oclass->getName(false));
+		}
+		echo '</select>';
+		echo '</td></tr><tr><td>';
+
+		echo '<br />';
+		printf('<input id="save_button" type="submit" value="%s" %s />',
+			_('Add new ObjectClass'),
+			(isAjaxEnabled() ? sprintf('onclick="return ajSUBMIT(\'BODY\',document.getElementById(\'entry_form\'),\'%s\');"',_('Updating Object')) : ''));
+		echo '</td></tr></table>';
+		echo '</td>';
+		echo '</tr>';
+
+		if ($_SESSION[APPCONFIG]->getValue('appearance','show_hints'))
+			printf('<tr><td colspan="2"><small><br /><img src="%s/light.png" alt="Hint" /><span class="hint">%s</span></small></td></tr>',
+				IMGDIR,_('Note: You may be required to enter new attributes that these objectClass(es) require'));
+
+		echo '</table>';
+		echo '</form>';
+
+	} else {
+		# Draw a blank field
+		echo '<table border="0"><tr><td>';
+		$request['page']->draw('FormValue',$request['attribute'],$request['count']);
+		echo '</td></tr><tr><td>';
+
+		$sattr = $app['server']->getSchemaAttribute($request['attr']);
+
+		if ($sattr->getDescription())
+			printf('<small><b>%s:</b> %s</small><br />',_('Description'),$sattr->getDescription());
+
+		if ($sattr->getType())
+			printf('<small><b>%s:</b> %s</small><br />',_('Syntax'),$sattr->getType());
+
+		if ($sattr->getMaxLength())
+			printf('<small><b>%s:</b> %s %s</small><br />',
+				_('Maximum Length'),number_format($sattr->getMaxLength()),_('characters'));
+
+		echo '<br />';
+		printf('<input type="submit" id="save_button" name="submit" value="%s" />',_('Add New Value'));
+		echo '</td></tr></table>';
+
+		echo '</td></tr>';
+		echo '</table>';
+		echo '</form>';
+	}
+
+} else {
+	if (is_null($attribute = $request['template']->getAttribute($request['attr']))) {
+		$request['template']->addAttribute($request['attr'],array('values'=>array()));
+		$attribute = $request['template']->getAttribute($request['attr']);
+		$attribute->show();
+
+		echo '<table class="entry" cellspacing="0" align="center" border="0">';
+		$request['page']->draw('Template',$attribute);
+		$request['page']->draw('Javascript',$attribute);
+		echo '</table>';
+
+	} else {
+		$request['count'] = $attribute->getValueCount();
+		$request['page']->draw('FormReadWriteValue',$attribute,$request['count']);
+	}
+}
+?>
diff --git a/lam/templates/3rdParty/pla/htdocs/cmd.php b/lam/templates/3rdParty/pla/htdocs/cmd.php
new file mode 100644
index 00000000..34f3848f
--- /dev/null
+++ b/lam/templates/3rdParty/pla/htdocs/cmd.php
@@ -0,0 +1,83 @@
+<?php
+/**
+ * Main command page for phpLDAPadmin
+ * All pages are rendered through this script.
+ *
+ * @package phpLDAPadmin
+ * @subpackage Page
+ */
+
+/**
+ */
+
+require_once './common.php';
+
+$www = array();
+$www['cmd'] = get_request('cmd','REQUEST');
+$www['meth'] = get_request('meth','REQUEST');
+
+ob_start();
+
+switch ($www['cmd']) {
+	case '_debug':
+		debug_dump($_REQUEST,1);
+		break;
+
+	default:
+		if (defined('HOOKSDIR') && file_exists(HOOKSDIR.$www['cmd'].'.php'))
+			$app['script_cmd'] = HOOKSDIR.$www['cmd'].'.php';
+
+		elseif (defined('HTDOCDIR') && file_exists(HTDOCDIR.$www['cmd'].'.php'))
+			$app['script_cmd'] = HTDOCDIR.$www['cmd'].'.php';
+
+		elseif (file_exists('welcome.php'))
+			$app['script_cmd'] = 'welcome.php';
+
+		else
+			$app['script_cmd'] = null;
+}
+
+if (DEBUG_ENABLED)
+	debug_log('Ready to render page for command [%s,%s].',128,0,__FILE__,__LINE__,__METHOD__,$www['cmd'],$app['script_cmd']);
+
+# Create page.
+# Set the index so that we render the right server tree.
+$www['page'] = new page($app['server']->getIndex());
+
+# See if we can render the command
+if (trim($www['cmd'])) {
+	# If this is a READ-WRITE operation, the LDAP server must not be in READ-ONLY mode.
+	if ($app['server']->isReadOnly() && ! in_array(get_request('cmd','REQUEST'),$app['readwrite_cmds']))
+		error(_('You cannot perform updates while server is in read-only mode'),'error','index.php');
+
+	# If this command has been disabled by the config.
+	if (! $_SESSION[APPCONFIG]->isCommandAvailable('script',$www['cmd'])) {
+		system_message(array('title'=>_('Command disabled by the server configuration'),
+			_('Error'),'body'=>sprintf('%s: <b>%s</b>.',_('The command could not be run'),htmlspecialchars($www['cmd'])),'type'=>'error'),'index.php');
+
+		$app['script_cmd'] = null;
+	}
+}
+
+if ($app['script_cmd'])
+	include $app['script_cmd'];
+
+# Refresh a frame - this is so that one frame can trigger another frame to be refreshed.
+if (isAjaxEnabled() && get_request('refresh','REQUEST') && get_request('refresh','REQUEST') != get_request('frame','REQUEST')) {
+	echo '<script type="text/javascript" language="javascript">';
+	printf("ajDISPLAY('%s','cmd=refresh&server_id=%s&noheader=%s','%s');",
+		get_request('refresh','REQUEST'),$app['server']->getIndex(),get_request('noheader','REQUEST',false,0),_('Auto refresh'));
+	echo '</script>';
+}
+
+# Capture the output and put into the body of the page.
+$www['body'] = new block();
+$www['body']->SetBody(ob_get_contents());
+$www['page']->block_add('body',$www['body']);
+ob_end_clean();
+
+if ($www['meth'] == 'ajax')
+	$www['page']->show(get_request('frame','REQUEST',false,'BODY'),true,get_request('raw','REQUEST',false,false));
+else
+	$www['page']->display();
+?>
diff --git a/lam/templates/3rdParty/pla/htdocs/collapse.php b/lam/templates/3rdParty/pla/htdocs/collapse.php
new file mode 100644
index 00000000..1eb4ced4
--- /dev/null
+++ b/lam/templates/3rdParty/pla/htdocs/collapse.php
@@ -0,0 +1,27 @@
+<?php
+/**
+ * This script alters the session variable 'tree', collapsing it
+ * at the dn specified in the query string.
+ *
+ * Note: this script is equal and opposite to expand.php
+ *
+ * @package phpLDAPadmin
+ * @subpackage Tree
+ * @see expand.php
+ */
+
+/**
+ */
+
+require './common.php';
+
+$dn = get_request('dn','GET',true);
+$tree = get_cached_item($app['server']->getIndex(),'tree');
+$entry = $tree->getEntry($dn);
+$entry->close();
+set_cached_item($app['server']->getIndex(),'tree','null',$tree);
+
+header(sprintf('Location:index.php?server_id=%s&junk=%s#%s',
+	$app['server']->getIndex(),random_junk(),htmlid($app['server']->getIndex(),$dn)));
+die();
+?>
diff --git a/lam/templates/3rdParty/pla/htdocs/common.php b/lam/templates/3rdParty/pla/htdocs/common.php
new file mode 100644
index 00000000..de4122c5
--- /dev/null
+++ b/lam/templates/3rdParty/pla/htdocs/common.php
@@ -0,0 +1,14 @@
+<?php
+/**
+ * This script provides a convienent method to call the proper common.php
+ *
+ * @package phpLDAPadmin
+ */
+
+/**
+ */
+
+if (! defined('LIBDIR'))
+	define('LIBDIR',sprintf('%s/',realpath('../lib/')));
+require_once LIBDIR.'common.php';
+?>
diff --git a/lam/templates/3rdParty/pla/htdocs/compare.php b/lam/templates/3rdParty/pla/htdocs/compare.php
new file mode 100644
index 00000000..c874dec2
--- /dev/null
+++ b/lam/templates/3rdParty/pla/htdocs/compare.php
@@ -0,0 +1,188 @@
+<?php
+/**
+ * Compares two DN entries side by side.
+ *
+ * @package phpLDAPadmin
+ * @subpackage Page
+ */
+
+/**
+ */
+
+require './common.php';
+
+# The DNs we are working with
+$request = array();
+$request['dnSRC'] = get_request('dn_src');
+$request['dnDST'] = get_request('dn_dst');
+
+$ldap = array();
+$ldap['SRC'] = $_SESSION[APPCONFIG]->getServer(get_request('server_id_src'));
+$ldap['DST'] = $_SESSION[APPCONFIG]->getServer(get_request('server_id_dst'));
+
+if (! $ldap['SRC']->dnExists($request['dnSRC']))
+	error(sprintf('%s (%s)',_('No such entry.'),pretty_print_dn($request['dnSRC'])),'error','index.php');
+
+if (! $ldap['DST']->dnExists($request['dnDST']))
+	error(sprintf('%s (%s)',_('No such entry.'),pretty_print_dn($request['dnDST'])),'error','index.php');
+
+$request['pageSRC'] = new PageRender($ldap['SRC']->getIndex(),get_request('template','REQUEST',false,'none'));
+$request['pageSRC']->setDN($request['dnSRC']);
+$request['pageSRC']->accept();
+$request['templateSRC'] = $request['pageSRC']->getTemplate();
+
+$request['pageDST'] = new PageRender($ldap['DST']->getIndex(),get_request('template','REQUEST',false,'none'));
+$request['pageDST']->setDN($request['dnDST']);
+$request['pageDST']->accept();
+$request['templateDST'] = $request['pageDST']->getTemplate();
+
+# Get a list of all attributes.
+$attrs_all = array_unique(array_merge($request['templateSRC']->getAttributeNames(),$request['templateDST']->getAttributeNames()));
+
+$request['pageSRC']->drawTitle(_('Comparing the following DNs'));
+
+echo '<br/>';
+
+echo '<table class="entry" width="100%" border="0">';
+echo '<tr class="heading">';
+
+$href = sprintf('cmd.php?cmd=template_engine&server_id=%s&dn=%s',
+	$ldap['SRC']->getIndex(),rawurlencode($request['dnSRC']));
+printf('<td colspan="2" style="width: 40%%;">%s: <b><a href="%s">%s</a></b></td>',
+	_('DN'),
+	htmlspecialchars($href),$request['dnSRC']);
+
+$href = sprintf('cmd.php?cmd=template_engine&server_id=%s&dn=%s',
+	$ldap['DST']->getIndex(),rawurlencode($request['dnDST']));
+printf('<td colspan="2" style="width: 40%%;">%s: <b><a href="%s">%s</a></b></td>',
+	_('DN'),
+	htmlspecialchars($href),$request['dnDST']);
+
+echo '</tr>';
+
+echo '<tr>';
+echo '<td colspan="4" style="text-align: right;">';
+echo '<form action="cmd.php?cmd=compare" method="post">';
+echo '<div>';
+printf('<input type="hidden" name="server_id" value="%s" />',$app['server']->getIndex());
+printf('<input type="hidden" name="server_id_src" value="%s" />',$ldap['DST']->getIndex());
+printf('<input type="hidden" name="server_id_dst" value="%s" />',$ldap['SRC']->getIndex());
+printf('<input type="hidden" name="dn_src" value="%s" />',htmlspecialchars($request['dnDST']));
+printf('<input type="hidden" name="dn_dst" value="%s" />',htmlspecialchars($request['dnSRC']));
+printf('<input type="submit" value="%s" />',_('Switch Entry'));
+echo '</div>';
+echo '</form>';
+echo '</td>';
+echo '</tr>';
+
+if (! is_array($attrs_all) || ! count($attrs_all)) {
+	printf('<tr><td colspan="4">(%s)</td></tr>',_('This entry has no attributes'));
+	print '</table>';
+
+	return;
+}
+
+sort($attrs_all);
+
+# Work through each of the attributes.
+foreach ($attrs_all as $attr) {
+	# Has the config.php specified that this attribute is to be hidden or shown?
+	if ($ldap['SRC']->isAttrHidden($attr) || $ldap['DST']->isAttrHidden($attr))
+		continue;
+
+	$attributeSRC = $request['templateSRC']->getAttribute($attr);
+	$attributeDST = $request['templateDST']->getAttribute($attr);
+
+	# Get the values and see if they are the same.
+	if ($attributeSRC && $attributeDST && ($attributeSRC->getValues() == $attributeDST->getValues()))
+		echo '<tr>';
+	else
+		echo '<tr>';
+
+	foreach (array('src','dst') as $side) {
+		# If we are on the source side, show the attribute name.
+		switch ($side) {
+			case 'src':
+				if ($attributeSRC) {
+					echo '<td class="title">';
+					$request['pageSRC']->draw('Name',$attributeSRC);
+					echo '</td>';
+
+					if ($request['pageSRC']->getServerID() == $request['pageDST']->getServerID())
+						echo '<td class="title">&nbsp;</td>';
+
+					else {
+						echo '<td class="note" style="text-align: right;">';
+						$request['pageSRC']->draw('Notes',$attributeSRC);
+						echo '</td>';
+					}
+
+				} else {
+					echo '<td colspan="2">&nbsp;</td>';
+				}
+
+				break;
+
+			case 'dst':
+				if ($attributeDST) {
+					if ($attributeSRC && ($request['pageSRC']->getServerID() == $request['pageDST']->getServerID()))
+						echo '<td class="title">&nbsp;</td>';
+
+					else {
+						echo '<td class="title" >';
+						$request['pageDST']->draw('Name',$attributeDST);
+						echo '</td>';
+					}
+
+					echo '<td class="note" style="text-align: right;">';
+					$request['pageDST']->draw('Notes',$attributeDST);
+					echo '</td>';
+
+				} else {
+					echo '<td colspan="2">&nbsp;</td>';
+				}
+
+				break;
+		}
+	}
+
+	echo '</tr>';
+	echo "\n\n";
+
+	# Get the values and see if they are the same.
+	if ($attributeSRC && $attributeDST && ($attributeSRC->getValues() == $attributeDST->getValues()))
+		echo '<tr style="background-color: #F0F0F0;">';
+	else
+		echo '<tr>';
+
+	foreach (array('src','dst') as $side) {
+		echo '<td class="value" colspan="2"><table border="0">';
+		echo '<tr><td>';
+
+		switch ($side) {
+			case 'src':
+
+				if ($attributeSRC && count($attributeSRC->getValues()))
+					$request['pageSRC']->draw('CurrentValues',$attributeSRC);
+				else
+					echo '&nbsp;';
+
+				break;
+
+			case 'dst':
+				if ($attributeDST && count($attributeDST->getValues()))
+					$request['pageDST']->draw('CurrentValues',$attributeDST);
+				else
+					echo '&nbsp;';
+
+				break;
+		}
+
+		echo '</td></tr>';
+		echo '</table></td>';
+	}
+
+	echo '</tr>';
+}
+echo '</table>';
+?>
diff --git a/lam/templates/3rdParty/pla/htdocs/compare_form.php b/lam/templates/3rdParty/pla/htdocs/compare_form.php
new file mode 100644
index 00000000..d3292a72
--- /dev/null
+++ b/lam/templates/3rdParty/pla/htdocs/compare_form.php
@@ -0,0 +1,65 @@
+<?php
+/**
+ * Compares two DN entries side by side.
+ * This is the entry form to determine which DN to compare this DN with.
+ *
+ * @package phpLDAPadmin
+ * @subpackage Page
+ */
+
+/**
+ */
+
+require './common.php';
+
+# The DN we are working with
+$request = array();
+$request['dn'] = get_request('dn','GET');
+
+# Check if the entry exists.
+if (! $request['dn'] || ! $app['server']->dnExists($request['dn']))
+	error(sprintf(_('The entry (%s) does not exist.'),$request['dn']),'error','index.php');
+
+$request['page'] = new PageRender($app['server']->getIndex(),get_request('template','REQUEST',false,'none'));
+$request['page']->setDN($request['dn']);
+$request['page']->accept();
+
+# Render the form
+$request['page']->drawTitle(sprintf('%s <b>%s</b>',_('Compare another DN with'),get_rdn($request['dn'])));
+$request['page']->drawSubTitle();
+
+printf('<script type="text/javascript" src="%sdnChooserPopup.js"></script>',JSDIR);
+echo '<div style="text-align: center;">';
+printf('%s <b>%s</b> %s<br />',_('Compare'),get_rdn($request['dn']),_('with '));
+echo '</div>';
+
+echo '<form action="cmd.php" method="post" id="compare_form">';
+echo '<div>';
+echo '<input type="hidden" name="cmd" value="compare" />';
+printf('<input type="hidden" name="server_id" value="%s" />',$app['server']->getIndex());
+printf('<input type="hidden" name="server_id_src" value="%s" />',$app['server']->getIndex());
+printf('<input type="hidden" name="dn_src" value="%s" />',htmlspecialchars($request['dn']));
+echo '</div>';
+echo "\n";
+
+echo '<table border="0" style="border-spacing: 10px; margin-left: auto; margin-right: auto;">';
+
+echo '<tr>';
+printf('<td><acronym title="%s">%s</acronym>:</td>',
+	_('Compare this DN with another'),_('Destination DN'));
+echo '<td>';
+echo '<input type="text" name="dn_dst" size="45" value="" />';
+draw_chooser_link('compare_form','dn_dst','true','');
+echo '</td>';
+echo '</tr>';
+echo "\n";
+
+printf('<tr><td></td><td>%s</td></tr>',server_select_list($app['server']->getIndex(),true,'server_id_dst'));
+echo "\n";
+
+printf('<tr><td colspan="2" style="text-align: center;"><input type="submit" value="%s" /></td></tr>',_('Compare'));
+echo "\n";
+
+echo '</table>';
+echo '</form>';
+?>
diff --git a/lam/templates/3rdParty/pla/htdocs/copy.php b/lam/templates/3rdParty/pla/htdocs/copy.php
new file mode 100644
index 00000000..588a1e0d
--- /dev/null
+++ b/lam/templates/3rdParty/pla/htdocs/copy.php
@@ -0,0 +1,209 @@
+<?php
+/**
+ * Copies a given object to create a new one.
+ *
+ * @package phpLDAPadmin
+ * @subpackage Page
+ */
+
+/**
+ */
+
+require './common.php';
+
+# The DNs we are working with
+$request = array();
+$request['dnSRC'] = get_request('dn_src');
+$request['dnDST'] = get_request('dn_dst');
+
+$ldap = array();
+$ldap['SRC'] = $_SESSION[APPCONFIG]->getServer(get_request('server_id_src'));
+$ldap['DST'] = $_SESSION[APPCONFIG]->getServer(get_request('server_id_dst'));
+
+# Error checking
+if (! trim($request['dnDST']))
+	error(_('You left the destination DN blank.'),'error','index.php');
+
+if ($ldap['DST']->isReadOnly())
+	error(_('Destination server is currently READ-ONLY.'),'error','index.php');
+
+if ($ldap['DST']->dnExists($request['dnDST']))
+	error(sprintf(_('The destination entry (%s) already exists.'),pretty_print_dn($request['dnDST'])),'error','index.php');
+
+if (! $ldap['DST']->dnExists($ldap['DST']->getContainer($request['dnDST'])))
+	error(sprintf(_('The destination container (%s) does not exist.'),
+		pretty_print_dn($ldap['DST']->getContainer($request['dnDST']))),'error','index.php');
+
+if (pla_compare_dns($request['dnSRC'],$request['dnDST']) == 0 && $ldap['SRC']->getIndex() == $ldap['DST']->getIndex())
+	error(_('The source and destination DN are the same.'),'error','index.php');
+
+$request['recursive'] = (get_request('recursive') == 'on') ? true : false;
+$request['remove'] = (get_request('remove') == 'yes') ? true : false;
+
+if ($request['recursive']) {
+	$filter = get_request('filter','POST',false,'(objectClass=*)');
+
+	# Build a tree similar to that of the tree browser to give to r_copy_dn
+	$ldap['tree'] = array();
+	printf('<h3 class="title">%s%s</h3>',_('Copying '),$request['dnSRC']);
+	printf('<h3 class="subtitle">%s</h3>',_('Recursive copy progress'));
+	print '<br /><br />';
+
+	print '<small>';
+	printf ('%s...',_('Building snapshot of tree to copy'));
+
+	$ldap['tree'] = build_tree($ldap['SRC'],$request['dnSRC'],array(),$filter);
+	printf('<span style="color:green">%s</span><br />',_('Success'));
+
+	# Prevent script from bailing early on a long delete
+	@set_time_limit(0);
+
+	$copy_result = r_copy_dn($ldap['SRC'],$ldap['DST'],$ldap['tree'],$request['dnSRC'],$request['dnDST'],$request['remove']);
+	$copy_message = $copy_result;
+	print '</small>';
+
+} else {
+	if ($_SESSION[APPCONFIG]->getValue('confirm','copy')) {
+		$request['pageSRC'] = new TemplateRender($app['server']->getIndex(),get_request('template','REQUEST',false,null));
+		$request['pageSRC']->setDN($request['dnSRC']);
+		$request['pageSRC']->accept(true);
+
+		$request['pageDST'] = new TemplateRender($app['server']->getIndex(),get_request('template','REQUEST',false,'none'));
+		$request['pageDST']->setContainer($app['server']->getContainer($request['dnDST']));
+		$request['pageDST']->accept(true);
+
+		$request['templateSRC'] = $request['pageSRC']->getTemplate();
+		$request['templateDST'] = $request['pageDST']->getTemplate();
+
+		$request['templateDST']->copy($request['templateSRC'],get_rdn($request['dnDST']),true);
+
+		# Set all attributes with a values as shown, and remove the add value options
+		foreach ($request['templateDST']->getAttributes(true) as $sattribute)
+			if ($sattribute->getValues() && ! $sattribute->isInternal()) {
+				$sattribute->show();
+				$sattribute->setMaxValueCount(count($sattribute->getValues()));
+			}
+
+		$request['pageDST']->accept();
+
+		return;
+
+	} else {
+		$copy_result = copy_dn($ldap['SRC'],$ldap['DST'],$request['dnSRC'],$request['dnDST'],$request['remove']);
+
+		if ($copy_result)
+			$copy_message = sprintf('%s %s: <b>%s</b> %s',
+				$request['remove'] ? _('Move successful') : _('Copy successful'),
+				_('DN'),$request['dnDST'],_('has been created.'));
+		else
+			$copy_message = sprintf('%s %s: <b>%s</b> %s',
+				$request['remove'] ? _('Move NOT successful') : _('Copy NOT successful'),
+				_('DN'),$request['dnDST'],_('has NOT been created.'));
+	}
+}
+
+if ($copy_result) {
+	$redirect_url = sprintf('cmd.php?cmd=template_engine&server_id=%s&dn=%s&refresh=SID_%s_nodes&noheader=1',
+		$ldap['DST']->getIndex(),rawurlencode($request['dnDST']),$ldap['DST']->getIndex());
+
+	system_message(array(
+		'title'=>_('Copy Entry'),
+		'body'=>$copy_message,
+		'type'=>'info'),
+		$redirect_url);
+}
+
+function r_copy_dn($serverSRC,$serverDST,$snapshottree,$dnSRC,$dnDST,$remove) {
+	if (DEBUG_ENABLED && (($fargs=func_get_args())||$fargs='NOARGS'))
+		debug_log('Entered (%%)',1,0,__FILE__,__LINE__,__METHOD__,$fargs);
+
+	$copy_message = array();
+
+	$children = isset($snapshottree[$dnSRC]) ? $snapshottree[$dnSRC] : null;
+
+	# If we have children, then we need to copy, then delete for a move
+	if (is_array($children) && count($children)) {
+
+		$copy_result = copy_dn($serverSRC,$serverDST,$dnSRC,$dnDST,false);
+
+		if (! $copy_result)
+			return false;
+
+		array_push($copy_message,sprintf('%s %s: <b>%s</b> %s',_('Copy successful'),_('DN'),$dnDST,_('has been created.')));
+
+		$hadError = false;
+		foreach ($children as $child_dn) {
+			$dnDST_new = sprintf('%s,%s',get_rdn($child_dn),$dnDST);
+			$copy_result = r_copy_dn($serverSRC,$serverDST,$snapshottree,$child_dn,$dnDST_new,$remove);
+			$copy_message = array_merge($copy_message,array_values($copy_result));
+
+			if (! $copy_result)
+				$hadError = true;
+		}
+
+		if (! $hadError && $remove) {
+			$delete_result = $serverSRC->delete($dnSRC);
+
+			if ($delete_result)
+				array_push($copy_message,sprintf('%s %s: <b>%s</b> %s',_('Delete successful'),_('DN'),$dnDST,_('has been deleted.')));
+		}
+
+	} else {
+		$copy_result = copy_dn($serverSRC,$serverDST,$dnSRC,$dnDST,$remove);
+
+		if ($copy_result)
+			array_push($copy_message,sprintf('%s %s: <b>%s</b> %s',
+				$remove ? _('Move successful') : _('Copy successful'),
+				_('DN'),$dnDST,_('has been created.')));
+		else
+			array_push($copy_message,sprintf('%s %s: <b>%s</b> %s',
+				$remove ? _('Move NOT successful') : _('Copy NOT successful'),
+				_('DN'),$dnDST,_('has NOT been created.')));
+	}
+
+	return $copy_message;
+}
+
+function copy_dn($serverSRC,$serverDST,$dnSRC,$dnDST,$remove) {
+	if (DEBUG_ENABLED && (($fargs=func_get_args())||$fargs='NOARGS'))
+		debug_log('Entered (%%)',1,0,__FILE__,__LINE__,__METHOD__,$fargs);
+
+	$request = array();
+	$request['pageSRC'] = new PageRender($serverSRC->getIndex(),get_request('template','REQUEST',false,'none'));
+	$request['pageSRC']->setDN($dnSRC);
+	$request['pageSRC']->accept();
+
+	$request['pageDST'] = new PageRender($serverDST->getIndex(),get_request('template','REQUEST',false,'none'));
+	$request['pageDST']->setContainer($serverDST->getContainer($dnDST));
+	$request['pageDST']->accept();
+
+	$request['templateSRC'] = $request['pageSRC']->getTemplate();
+	$request['templateDST'] = $request['pageDST']->getTemplate();
+	$request['templateDST']->copy($request['pageSRC']->getTemplate(),get_rdn($dnDST,0));
+
+	# Create of move the entry
+	if ($remove)
+		return $serverDST->rename($request['templateSRC']->getDN(),$request['templateDST']->getRDN(),$serverDST->getContainer($dnDST),true);
+	else
+		return $serverDST->add($request['templateDST']->getDN(),$request['templateDST']->getLDAPadd());
+}
+
+function build_tree($server,$dn,$buildtree) {
+	if (DEBUG_ENABLED && (($fargs=func_get_args())||$fargs='NOARGS'))
+		debug_log('Entered (%%)',1,0,__FILE__,__LINE__,__METHOD__,$fargs);
+
+	# We search all children, not only the visible children in the tree
+	$children = $server->getContainerContents($dn,null,0);
+
+	if (count($children)) {
+		$buildtree[$dn] = $children;
+		foreach ($children as $child_dn)
+			$buildtree = build_tree($server,$child_dn,$buildtree);
+	}
+
+	if (DEBUG_ENABLED)
+		debug_log('Returning (%s)',1,0,__FILE__,__LINE__,__METHOD__,$buildtree);
+
+	return $buildtree;
+}
+?>
diff --git a/lam/templates/3rdParty/pla/htdocs/copy_form.php b/lam/templates/3rdParty/pla/htdocs/copy_form.php
new file mode 100644
index 00000000..749b78ec
--- /dev/null
+++ b/lam/templates/3rdParty/pla/htdocs/copy_form.php
@@ -0,0 +1,103 @@
+<?php
+/**
+ * Copies a given object to create a new one.
+ *
+ * @package phpLDAPadmin
+ * @subpackage Page
+ */
+
+/**
+ */
+
+require './common.php';
+
+# The DN we are working with
+$request = array();
+$request['dn'] = get_request('dn','GET');
+
+# Check if the entry exists.
+if (! $request['dn'] || ! $app['server']->dnExists($request['dn']))
+	error(sprintf(_('The entry (%s) does not exist.'),$request['dn']),'error','index.php');
+
+$request['page'] = new PageRender($app['server']->getIndex(),get_request('template','REQUEST',false,'none'));
+$request['page']->setDN($request['dn']);
+$request['page']->accept();
+
+# Render the form
+$request['page']->drawTitle(sprintf('%s <b>%s</b>',_('Copy'),get_rdn($request['dn'])));
+$request['page']->drawSubTitle();
+
+printf('<script type="text/javascript" src="%sdnChooserPopup.js"></script>',JSDIR);
+echo '<div style="text-align: center;">';
+printf('%s <b>%s</b> %s:<br /><br />',_('Copy'),get_rdn($request['dn']),_('to a new object'));
+echo '</div>';
+
+echo '<form action="cmd.php" method="post" id="copy_form">';
+echo '<div>';
+echo '<input type="hidden" name="cmd" value="copy" />';
+printf('<input type="hidden" name="server_id" value="%s" />',$app['server']->getIndex());
+printf('<input type="hidden" name="server_id_src" value="%s" />',$app['server']->getIndex());
+printf('<input type="hidden" name="dn_src" value="%s" />',htmlspecialchars($request['dn']));
+echo '</div>';
+echo "\n";
+
+echo '<table border="0" style="border-spacing: 10px; margin-left: auto; margin-right: auto;">';
+
+echo '<tr>';
+printf('<td><acronym title="%s">%s</acronym>:</td>',
+	_('The full DN of the new entry to be created when copying the source entry'),_('Destination DN'));
+echo '<td>';
+printf('<input type="text" name="dn_dst" size="45" value="%s" />',htmlspecialchars($request['dn']));
+draw_chooser_link('copy_form','dn_dst','true',get_rdn($request['dn']));
+echo '</td>';
+echo '</tr>';
+echo "\n";
+
+printf('<tr><td>%s:</td><td>%s</td></tr>',_('Destination Server'),server_select_list($app['server']->getIndex(),true,'server_id_dst'));
+echo "\n";
+
+# We search all children, not only the visible children in the tree
+$request['children'] = $app['server']->getContainerContents($request['dn']);
+
+if (count($request['children']) > 0) {
+	echo '<tr>';
+	printf('<td><label for="recursive">%s</label>:</td>',_('Recursive copy'));
+	echo '<td><input type="checkbox" id="recursive" name="recursive" onclick="copy_field_toggle(this)" />';
+	printf('<small>(%s)</small></td>',_('Recursively copy all children of this object as well.'));
+	echo '</tr>';
+	echo "\n";
+
+	echo '<tr>';
+	printf('<td><acronym title="%s">%s</acronym>:</td>',
+		_('When performing a recursive copy, only copy those entries which match this filter'),_('Filter'));
+	echo '<td><input type="text" name="filter" value="(objectClass=*)" size="45" disabled />';
+	echo '</tr>';
+	echo "\n";
+
+	echo '<tr>';
+	printf('<td>%s</td>',_('Delete after copy (move):'));
+	echo '<td><input type="checkbox" name="remove" value="yes" disabled />';
+	printf('<small>(%s)</small)</td>',_('Make sure your filter (above) will select all child records.'));
+	echo '</tr>';
+	echo "\n";
+
+} else {
+	printf('<tr><td>%s</td><td><input type="checkbox" name="remove" value="yes"/></td></tr>',_('Delete after copy (move):'));
+}
+echo "\n";
+
+printf('<tr><td colspan="2" style="text-align: center;"><input type="submit" value="%s" /></td></tr>',_('Copy '));
+echo "\n";
+
+echo '</table>';
+echo '</form>';
+
+if ($_SESSION[APPCONFIG]->getValue('appearance','show_hints'))
+	printf('<div style="text-align: center;"><small><img src="%s/light.png" alt="Light" /><span class="hint">%s</span></small></div>',
+		IMGDIR,_('Hint: Copying between different servers only works if there are no schema violations'));
+
+
+# Draw the javascrpt to enable/disable the filter field if this may be a recursive copy
+if (count($request['children']) > 0)
+	printf('<script type="text/javascript" src="%sform_field_toggle_enable.js"></script>',JSDIR);
+?>
diff --git a/lam/templates/3rdParty/pla/htdocs/create.php b/lam/templates/3rdParty/pla/htdocs/create.php
new file mode 100644
index 00000000..45944eb7
--- /dev/null
+++ b/lam/templates/3rdParty/pla/htdocs/create.php
@@ -0,0 +1,104 @@
+<?php
+/**
+ * Creates a new object in LDAP.
+ *
+ * @package phpLDAPadmin
+ * @subpackage Page
+ */
+
+/**
+ */
+
+require './common.php';
+
+# If cancel was selected, we'll redirect
+if (get_request('cancel','REQUEST')) {
+	header('Location: index.php');
+	die();
+}
+
+$request = array();
+$request['redirect'] = get_request('redirect','POST',false,false);
+
+$request['page'] = new PageRender($app['server']->getIndex(),get_request('template','REQUEST',false,'none'));
+$request['page']->setContainer(get_request('container','REQUEST',true));
+$request['page']->accept();
+$request['template'] = $request['page']->getTemplate();
+
+if ((! $request['template']->getContainer() || ! $app['server']->dnExists($request['template']->getContainer())) && ! get_request('create_base'))
+	error(sprintf(_('The container you specified (%s) does not exist. Please try again.'),$request['template']->getContainer()),'error','index.php');
+
+# Check if the container is a leaf - we shouldnt really return a hit here, the template engine shouldnt have allowed a user to attempt to create an entry...
+$tree = get_cached_item($app['server']->getIndex(),'tree');
+
+$request['container'] = $tree->getEntry($request['template']->getContainer());
+if (! $request['container'] && ! get_request('create_base')) {
+	$tree->addEntry($request['template']->getContainer());
+	$request['container'] = $tree->getEntry($request['template']->getContainer());
+}
+
+# Check our RDN
+if (! count($request['template']->getRDNAttrs()))
+	error(_('The were no attributes marked as an RDN attribute.'),'error','index.php');
+if (! $request['template']->getRDN())
+	error(_('The RDN field is empty?'),'error','index.php');
+
+# Some other attribute checking...
+foreach ($request['template']->getAttributes() as $attribute) {
+	# Check that our Required Attributes have a value - we shouldnt really return a hit here, the template engine shouldnt have allowed this to slip through.
+	# @todo this isIgnoredAttr() function is missing?
+	if ($attribute->isRequired() && ! count($attribute->getValues()) && ! $app['server']->isIgnoredAttr($attr->getName()))
+		error(sprintf(_('You left the value blank for required attribute (%s).'),
+			$attribute->getName(false)),'error','index.php');
+}
+
+# Create the entry
+$add_result = $app['server']->add($request['template']->getDN(),$request['template']->getLDAPadd());
+
+if ($add_result) {
+	$action_number = $_SESSION[APPCONFIG]->getValue('appearance','action_after_creation');
+	$href = sprintf('cmd=template_engine&server_id=%s',$app['server']->getIndex());
+
+	if ($request['redirect'])
+		$redirect_url = $request['redirect'];
+
+	else if ($action_number == 2)
+		$redirect_url = sprintf('cmd.php?%s&template=%s&container=%s',
+			$href,'default',$request['template']->getContainerEncode());
+
+	else
+		$redirect_url = sprintf('cmd.php?%s&template=%s&dn=%s',
+			$href,'default',$request['template']->getDNEncode());
+
+	if ($action_number == 1 || $action_number == 2)
+		printf('<meta http-equiv="refresh" content="0; url=%s" />',$redirect_url);
+
+	if ($action_number == 1 || $action_number == 2) {
+		$create_message = sprintf('%s %s: <b>%s</b> %s',
+			_('Creation successful!'),_('DN'),$request['template']->getDN(),_('has been created.'));
+
+		if (isAjaxEnabled())
+			$redirect_url .= sprintf('&refresh=SID_%s_nodes&noheader=1',$app['server']->getIndex());
+
+		system_message(array(
+			'title'=>_('Create Entry'),
+			'body'=>$create_message,
+			'type'=>'info'),
+			$redirect_url);
+
+	} else {
+		$request['page']->drawTitle(_('Entry created'));
+		$request['page']->drawSubTitle(sprintf('%s: <b>%s</b>',
+			_('DN'),$request['template']->getDN()));
+
+		echo '<br />';
+		echo '<center>';
+		printf('<a href="cmd.php?%s&amp;dn=%s">%s</a>.',
+			htmlspecialchars($href),rawurlencode($request['template']->getDN()),_('Display the new created entry'));
+		echo '<br />';
+		printf('<a href="cmd.php?%s&amp;container=%s">%s</a>.',
+			htmlspecialchars($href),rawurlencode($request['template']->getContainer()),_('Create another entry'));
+		echo '</center>';
+	}
+}
+?>
diff --git a/lam/templates/3rdParty/pla/htdocs/create_confirm.php b/lam/templates/3rdParty/pla/htdocs/create_confirm.php
new file mode 100644
index 00000000..6727fb15
--- /dev/null
+++ b/lam/templates/3rdParty/pla/htdocs/create_confirm.php
@@ -0,0 +1,143 @@
+<?php
+/**
+ * Creates a new object in LDAP.
+ *
+ * @package phpLDAPadmin
+ * @subpackage Page
+ */
+
+/**
+ */
+
+require './common.php';
+
+$request = array();
+$request['redirect'] = get_request('redirect','POST',false,false);
+
+$request['page'] = new PageRender($app['server']->getIndex(),get_request('template','REQUEST',false,'none'));
+$request['page']->setContainer(get_request('container','REQUEST',true));
+$request['page']->accept();
+$request['template'] = $request['page']->getTemplate();
+
+if (! $request['template']->getContainer() || ! $app['server']->dnExists($request['template']->getContainer()))
+	error(sprintf(_('The container you specified (%s) does not exist. Please try again.'),$request['template']->getContainer()),'error','index.php');
+
+# Check if the container is a leaf - we shouldnt really return a hit here, the template engine shouldnt have allowed a user to attempt to create an entry...
+$tree = get_cached_item($app['server']->getIndex(),'tree');
+
+$request['container'] = $tree->getEntry($request['template']->getContainer());
+if (! $request['container']) {
+	$tree->addEntry($request['template']->getContainer());
+	$request['container'] = $tree->getEntry($request['template']->getContainer());
+}
+
+# Check our RDN
+if (! count($request['template']->getRDNAttrs()))
+	error(_('The were no attributes marked as an RDN attribute.'),'error','index.php');
+if (! $request['template']->getRDN())
+	error(_('The RDN field is empty?'),'error','index.php');
+
+# Some other attribute checking...
+foreach ($request['template']->getAttributes() as $attribute) {
+	# Check that our Required Attributes have a value - we shouldnt really return a hit here, the template engine shouldnt have allowed this to slip through.
+	# @todo this isIgnoredAttr() function is missing?
+	if ($attribute->isRequired() && ! count($attribute->getValues()) && ! $app['server']->isIgnoredAttr($attr->getName()))
+		error(sprintf(_('You left the value blank for required attribute (%s).'),
+			$attribute->getName(false)),'error','index.php');
+}
+
+# Check for unique attributes
+$app['server']->checkUniqueAttrs($request['template']->getDN(),$request['template']->getLDAPadd());
+
+$request['page']->drawTitle(_('Create LDAP Entry'));
+$request['page']->drawSubTitle(sprintf('%s: <b>%s</b>&nbsp;&nbsp;&nbsp;%s: <b>%s</b>',
+	_('Server'),$app['server']->getName(),_('Container'),$request['template']->getContainer()));
+
+# Confirm the creation
+if (count($request['template']->getLDAPadd(true))) {
+	echo '<div style="text-align: center;">';
+	echo _('Do you want to create this entry?');
+	echo '<br /><br />';
+	echo '</div>';
+
+	echo "\n\n";
+	echo '<form action="cmd.php" method="post" id="create_form">';
+	echo '<div>';
+	echo '<input type="hidden" name="cmd" value="create" />';
+	printf('<input type="hidden" name="server_id" value="%s" />',$app['server']->getIndex());
+	printf('<input type="hidden" name="container" value="%s" />',$request['template']->getContainerEncode(false));
+	printf('<input type="hidden" name="template" value="%s" />',$request['template']->getID());
+	foreach ($request['template']->getRDNAttrs() as $rdn)
+		printf('<input type="hidden" name="rdn_attribute[]" value="%s" />',htmlspecialchars($rdn));
+	echo "\n";
+
+	$request['page']->drawHiddenAttributes();
+	echo '</div>';
+
+	echo '<table class="result_table" style="margin-left: auto; margin-right: auto;">';
+	echo "\n";
+
+	printf('<tr class="heading"><td>%s</td><td>%s</td><td>%s</td></tr>',
+		_('Attribute'),_('New Value'),_('Skip'));
+	echo "\n\n";
+
+	$counter = 0;
+	printf('<tr class="%s"><td colspan="3" style="text-align: center;"><b>%s</b></td></tr>',$counter%2 ? 'even' : 'odd',htmlspecialchars($request['template']->getDN()));
+
+	foreach ($request['template']->getLDAPadd(true) as $attribute) {
+		$counter++;
+
+		printf('<tr class="%s">',$counter%2 ? 'even' : 'odd');
+		printf('<td><b>%s</b></td>',$attribute->getFriendlyName());
+
+		# Show NEW Values
+		echo '<td><span style="white-space: nowrap;">';
+		$request['page']->draw('CurrentValues',$attribute);
+		echo '</span></td>';
+
+		# Show SKIP Option
+		$input_disabled = '';
+		$input_onclick = '';
+
+		if ($attribute->isRequired())
+			$input_disabled = 'disabled="disabled"';
+
+		printf('<td><input name="skip_array[%s]" id="skip_array_%s" type="checkbox" %s %s/></td>',
+			htmlspecialchars($attribute->getName()),htmlspecialchars($attribute->getName()),$input_disabled,$input_onclick);
+		echo '</tr>';
+		echo "\n\n";
+	}
+
+	echo '</table>';
+
+	echo '<div style="text-align: center;">';
+	echo '<br />';
+
+	printf('<input type="submit" value="%s" %s/>',
+		_('Commit'),
+		(isAjaxEnabled() ? sprintf('onclick="return ajSUBMIT(\'BODY\',document.getElementById(\'create_form\'),\'%s\');"',_('Updating Object')) : ''));
+
+	printf('<input type="submit" name="cancel" value="%s" %s/>',
+		_('Cancel'),
+		(isAjaxEnabled() ? sprintf('onclick="return ajDISPLAY(\'BODY\',\'cmd=template_engine&server_id=%s&container=%s\',\'%s\');"',$app['server']->getIndex(),$request['template']->getContainer(),_('Retrieving DN')) : ''));
+
+	echo '</div>';
+	echo '</form>';
+	echo '<br />';
+
+} else {
+	$href = sprintf('cmd=template_engine&server_id=%s&dn=%s',
+		$app['server']->getIndex(),$request['template']->getDNEncode());
+
+	echo '<div style="text-align: center;">';
+	echo _('You made no changes');
+
+	if (isAjaxEnabled())
+		printf(' <a href="cmd.php?%s" onclick="return ajDISPLAY(\'BODY\',\'%s\',\'%s\');">%s</a>.',
+			htmlspecialchars($href),htmlspecialchars($href),_('Retrieving DN'),_('Go back'));
+	else
+		printf(' <a href="cmd.php?%s">%s</a>.',htmlspecialchars($href),_('Go back'));
+
+	echo '</div>';
+}
+?>
diff --git a/lam/templates/3rdParty/pla/htdocs/css/default/style.css b/lam/templates/3rdParty/pla/htdocs/css/default/style.css
new file mode 100644
index 00000000..4cc37e50
--- /dev/null
+++ b/lam/templates/3rdParty/pla/htdocs/css/default/style.css
@@ -0,0 +1,915 @@
+/* $Header$ */
+
+/* Global Page */
+table.page {
+	font-weight: normal;
+	color: #000000;
+
+	font-family: "bitstream vera sans","luxi sans",verdana,geneva,arial,helvetica,sans-serif;
+	background-color: #F5F5F5;
+	font-size: 13px;
+	empty-cells: hide;
+}
+
+/* Global Page - Defaults */
+/* A HREF Links */
+table.page a {
+	color: #0000AA;
+	text-decoration: none;
+}
+
+table.page a:hover {
+	text-decoration: none;
+}
+
+table.page a img {
+	border: 0px;
+}
+
+/* Global Page - Logo & Title */
+table.page tr.head {
+	text-align: center;
+	color: #FFFFFF;
+	background-color: #001188;
+	font-weight: bold;
+	font-size: 11px;
+	height: 25px;
+}
+
+table.page tr.head img.logo {
+	vertical-align: middle;
+	text-align: center;
+
+	width: 100px;
+	height: 60px;
+}
+
+table.page tr.pagehead {
+}
+
+table.page tr.pagehead td.imagetop {
+	width: 100%;
+	vertical-align: bottom;
+	text-align: right;
+}
+
+/* Global Page - Control Line */
+table.page tr.control td {
+	border-top: 1px solid #AAAACC;
+	border-bottom: 1px solid #AAAACC;
+}
+
+/* Global Page - Control Line Menu Items */
+table.page table.control {
+	table-layout: fixed;
+	width: 100%;
+}
+
+table.page table.control td {
+	border-top: 0px;
+	border-bottom: 0px;
+	padding: 0px;
+	padding-top: 2px;
+	padding-bottom: 2px;
+	text-align: left;
+	vertical-align: top;
+	font-size: 11px;
+	font-weight: bold;
+}
+
+table.page table.control img {
+	width: 24px;
+	height: 24px;
+}
+
+table.page table.control a {
+	color: #000000;
+}
+
+table.page table.control a:hover {
+	text-decoration: none;
+	background-color: #FFFFFF;
+	color: #0000AA;
+}
+
+table.page table.control td.spacer {
+	width: 20%;
+}
+
+table.page table.control td.logo {
+	text-align: right;
+	width: 10%;
+}
+
+table.page table.control td.logo img.logo {
+	vertical-align: middle;
+	text-align: right;
+
+	width: 100px;
+	height: 50px;
+}
+
+/* Global Page - LDAP Tree */
+table.page td.tree {
+	border-right: 1px solid #AAAACC;
+	vertical-align: top;
+	background-color: #F5F5F5;
+	width: 10%;
+}
+
+/* Global Page - Main Body */
+table.page td.body {
+	vertical-align: top;
+	width: 100%;
+	background-color: #F5F5F5;
+}
+
+/* Global Page - Main Body System Message */
+table.page table.sysmsg {
+	border-bottom: 2px solid #AAAACC;
+	width: 100%;
+}
+
+table.page table.sysmsg td.head {
+	font-size: small;
+	text-align: left;
+	font-weight: bold;
+}
+
+table.page table.sysmsg td.body {
+	font-weight: normal;
+}
+
+table.page table.sysmsg td.icon {
+	text-align: center;
+	vertical-align: top;
+}
+
+/* Global Page - Main Body */
+table.page table.body {
+	font-weight: normal;
+	background-color: #F5F5F5;
+	width: 100%;
+}
+
+table.page table.body h3.title {
+	text-align: center;
+	margin: 0px;
+	padding: 10px;
+	color: #FFFFFF;
+	background-color: #000088;
+	border: 1px solid #000000;
+	font-weight: normal;
+	font-size: 150%;
+}
+
+table.page table.body h3.subtitle {
+	text-align: center;
+	margin: 0px;
+	margin-bottom: 15px;
+	font-size: 75%;
+	color: #FFFFFF;
+	border-bottom: 1px solid #000000;
+	border-left: 1px solid #000000;
+	border-right: 1px solid #000000;
+	background: #000088;
+	padding: 4px;
+	font-weight: normal;
+}
+
+table.page table.body td.spacer {
+	border-top: 2px solid #AAAACC;
+	padding: 0px;
+	font-size: 5px;
+}
+
+table.page table.body td.head {
+	font-weight: bold;
+}
+
+table.page table.body td.foot {
+	font-size: small;
+	border-top: 1px solid #AAAACC;
+	border-bottom: 1px solid #AAAACC;
+}
+
+/* Global Page Footer */
+table.page tr.foot td {
+	border-top: 1px solid #AAAACC;
+	font-weight: bold;
+	font-size: 12px;
+	text-align: right;
+}
+
+/* Global Page - Other Layouts */
+/* Server Select */
+table.page table.server_select {
+	font-weight: bold;
+	font-size: 13px;
+	color: #000000;
+}
+
+/* Individual table layouts */
+/* LDAP Tree */
+table.tree {
+}
+
+table.tree tr.server td.icon {
+	vertical-align: top;
+}
+
+table.tree tr.server td.name {
+	padding-right: 10px;
+	vertical-align: top;
+}
+
+table.tree tr.server td {
+	padding-top: 5px;
+	font-size: 18px;
+	text-align: left;
+	padding-right: 0px;
+	white-space: nowrap;
+}
+
+table.tree td {
+	white-space: nowrap;
+}
+
+table.tree td.server_links {
+	vertical-align: top;
+	text-align: center;
+	padding-top: 0px;
+	padding-bottom: 0px;
+	padding-left: 3px;
+	padding-right: 3px;
+}
+
+table.tree td.server_links a {
+	color: #000000;
+	text-decoration: none;
+	font-size: 11px;
+}
+
+table.tree td.server_links a:hover {
+	text-decoration: none;
+	background-color: #FFFFFF;
+	color: #000000;
+}
+
+table.tree tr.option td.expander {
+	text-align: center;
+	width: 22px;
+	max-width: 22px;
+	min-width: 22px;
+	white-space: nowrap;
+}
+
+table.tree tr.option td.icon {
+	text-align: center;
+	width: 22px;
+	max-width: 22px;
+	min-width: 22px;
+	white-space: nowrap;
+}
+
+table.tree td.rdn a {
+	font-size: 13px;
+	color: #000000;
+}
+
+table.tree td.rdn a:hover {
+	font-size: 13px;
+	color: #841212;
+	background-color: #FFF0C0;
+	text-decoration: none;
+}
+
+table.tree td.rdn span.count {
+	font-size: 13px;
+	color: #000000;
+}
+
+table.tree td.links a {
+	color: #0000AA;
+	text-align: center;
+}
+
+table.tree td.link a {
+	font-size: 13px;
+	color: #000000;
+}
+
+table.tree td.link a:hover {
+	font-size: 13px;
+	color: #841212;
+	background-color: #FFF0C0;
+	text-decoration: none;
+}
+
+table.tree td.links a:hover {
+	text-decoration: none;
+	color: blue;
+}
+
+table.tree td.blank {
+	font-size: 1px;
+}
+
+table.tree td.spacer {
+	width: 22px;
+}
+
+table.tree td.logged_in {
+	font-size: 10px;
+	white-space: nowrap;
+}
+
+table.tree td.logged_in a {
+	font-size: 11px;
+}
+
+table.tree td.logged_in a:hover {
+	color: #841212;
+	background-color: #FFF0C0;
+	text-decoration: none;
+}
+
+/* Tree Global Defaults */
+table.tree tr td {
+	padding: 0px;
+}
+
+table.tree a {
+	text-decoration: none;
+	color: #000000;
+}
+
+table.tree a:hover {
+	text-decoration: underline;
+	color: blue;
+}
+
+table.tree span.dnicon img {
+	width: 16px;
+	padding-bottom: 0px;
+}
+
+/* Tree */
+table.tree .treemenudiv {
+	display: block;
+	white-space: nowrap;
+	padding-top: 1px;
+	padding-bottom: 1px;
+}
+
+table.tree .phplmnormal {
+	font-family: bitstream vera sans, luxi sans, verdana, geneva, arial, helvetica, sans-serif;
+	font-size: 13px;
+	color: #000000;
+	text-decoration: none;
+}
+
+table.tree a.phplmnormal:hover {
+	font-family: bitstream vera sans, luxi sans, verdana, geneva, arial, helvetica, sans-serif;
+	font-size: 13px;
+	color: #000000;
+	background-color: #fff0c0;
+	text-decoration: none;
+}
+
+table.tree a.phplm:link {
+	font-family: bitstream vera sans, luxi sans, verdana, geneva, arial, helvetica, sans-serif;
+	font-size: 13px;
+	color: #000000;
+	text-decoration: none;
+}
+
+table.tree a.phplm:visited {
+	font-family: bitstream vera sans, luxi sans, verdana, geneva, arial, helvetica, sans-serif;
+	font-size: 13px;
+	color: #000000;
+	text-decoration: none;
+}
+
+table.tree a.phplm:hover {
+	font-family: bitstream vera sans, luxi sans, verdana, geneva, arial, helvetica, sans-serif;
+	font-size: 13px;
+	color: #841212;
+	background-color: #fff0c0;
+	text-decoration: none;
+}
+
+table.tree a.phplm:active {
+	font-family: bitstream vera sans, luxi sans, verdana, geneva, arial, helvetica, sans-serif;
+	font-size: 13px;
+	color: #ff0000;
+	text-decoration: none;
+}
+
+table.tree a.phplmselected:link {
+	font-family: bitstream vera sans, luxi sans, verdana, geneva, arial, helvetica, sans-serif;
+	font-size: 13px;
+	color: #dd0000;
+	background-color: #ffdd76;
+	text-decoration: none;
+}
+
+table.tree a.phplmselected:visited {
+	font-family: bitstream vera sans, luxi sans, verdana, geneva, arial, helvetica, sans-serif;
+	font-size: 13px;
+	color: #dd0000;
+	background-color: #ffdd76;
+	text-decoration: none;
+}
+
+table.tree a.phplmselected:hover {
+	font-family: bitstream vera sans, luxi sans, verdana, geneva, arial, helvetica, sans-serif;
+	font-size: 13px;
+	color: #841212;
+	background-color: #fff0c0;
+	text-decoration: none;
+}
+
+table.tree a.phplmselected:active {
+	font-family: bitstream vera sans, luxi sans, verdana, geneva, arial, helvetica, sans-serif;
+	font-size: 13px;
+	color: #ff0000;
+	text-decoration: none;
+}
+
+/* Standard Form */
+table.forminput {
+	background-color: #F9F9FA;
+	padding: 10px;
+	border: 1px solid #AAAACC;
+}
+
+table.forminput td.title {
+	text-align: center;
+	font-weight: bold;
+}
+
+table.forminput td.subtitle {
+	text-align: center;
+	font-weight: normal;
+	font-size: small;
+}
+
+table.forminput tr td.heading {
+	font-weight: bold;
+}
+
+table.forminput td.small {
+	font-size: 80%;
+}
+
+table.forminput td.top {
+	vertical-align: top;
+}
+
+table.forminput input.val {
+	width: 350px;
+	border: 1px solid #AAAACC;
+}
+
+table.forminput input.roval {
+	width: 350px;
+	border: none;
+}
+
+table.forminput td.icon {
+	width: 16px;
+	text-align: center;
+}
+
+table.forminput td.icon img {
+	border: 0px;
+}
+
+table.forminput td.label {
+	text-align: left;
+	font-size: 13px;
+}
+
+/* Menu on top of entry form */
+table.menu {
+	font-size: 14px;
+}
+
+table.menu td.icon {
+	width: 16px;
+	text-align: center;
+}
+
+/* Edit DN */
+div.add_value {
+	font-size: 12px;
+	margin: 0px;
+	padding: 0px;
+}
+
+/* Edit Entry */
+table.entry {
+	border-collapse: collapse;
+	border-spacing: 0px;
+	empty-cells: show;
+}
+
+table.entry input {
+	margin: 1px;
+}
+
+table.entry input.value {
+	color: #000000;
+	font-size: 14px;
+	width: 350px;
+	background-color: #FFFFFF;
+}
+
+table.entry div.helper {
+	text-align: left;
+	white-space: nowrap;
+	background-color: #FFFFFF;
+	color: #888;
+	font-size: 14px;
+	font-weight: normal;
+}
+
+table.entry input.roval {
+	font-size: 14px;
+	width: 350px;
+	background-color: #FFFFFF;
+	color: #000000;
+	border: none;
+}
+
+table.entry textarea.value {
+	font-size: 14px;
+	width: 350px;
+	background-color: #FFFFFF;
+	color: #000000;
+}
+
+table.entry textarea.roval {
+	font-size: 14px;
+	width: 350px;
+	background-color: #FFFFFF;
+	color: #000000;
+	border: none;
+}
+
+table.entry tr td {
+	padding: 4px;
+	padding-right: 0px;
+}
+
+table.entry tr td.heading {
+	border-top: 3px solid #C0C0C0;
+	font-weight: bold;
+}
+
+table.entry tr td.note {
+	text-align: right;
+	background-color: #E0E0E0;
+}
+
+table.entry tr td.title {
+	background-color: #E0E0E0;
+	vertical-align: top;
+	font-weight: bold;
+}
+
+table.entry tr td.title a {
+	text-decoration: none;
+	color: #000000;
+}
+
+table.entry tr td.title a:hover {
+	text-decoration: underline;
+	color: #016;
+}
+
+table.entry tr td.value {
+	text-align: left;
+	vertical-align: middle;
+	padding-bottom: 10px;
+	padding-left: 50px;
+}
+
+/** When an attr is updated, it is highlighted to indicate such */
+table.entry tr.updated td.title {
+	border-top: 1px dashed #AAAA88;
+	border-left: 1px dashed #AAAA88;
+	background-color: #999988;
+}
+
+table.entry tr.updated td.note {
+	border-top: 1px dashed #AAAA88;
+	border-right: 1px dashed #AAAA88;
+	background-color: #999988;
+}
+
+/** An extra row that sits at the bottom of recently modified attrs to encase them in dashes */
+table.entry tr.updated td.bottom {
+	border-top: 1px dashed #AAAA88;
+}
+
+/** Formatting for the value cell when it is the attribute that has been recently modified */
+table.entry tr.updated td.value {
+	border-left: 1px dashed #AAAA88;
+	border-right: 1px dashed #AAAA88;
+}
+
+/* Need to prevent sub-tables (like the one in which jpegPhotos are displayed)
+ * from drawing borders as well. */
+table.entry tr.updated td table td {
+	border: 0px;
+}
+
+table.entry tr.noinput {
+	background: #E0E0E0;
+}
+
+span.hint {
+	font-size: small;
+	font-weight: normal;
+	color: #888;
+}
+
+/* Login Box */
+#login {
+	background: url('../../images/default/ldap-uid.png') no-repeat 0 1px;
+	background-color: #FAFAFF;
+	color: #000000;
+	padding-left: 17px;
+}
+
+#login:focus {
+	background-color: #F0F0FF;
+	color: #000000;
+}
+
+#login:disabled {
+	background-color: #DDDDFF;
+	color: #000000;
+}
+
+#password {
+	background: url('../../images/default/key.png') no-repeat 0 1px;
+	background-color: #FAFAFF;
+	color: #000000;
+	padding-left: 17px;
+}
+
+#password:focus {
+	background-color: #F0F0FF;
+	color: #000000;
+}
+
+#password:disabled {
+	background-color: #DDDDFF;
+	color: #000000;
+}
+
+#generic {
+	background-color: #FAFAFF;
+	color: #000000;
+	padding-left: 17px;
+}
+#generic:focus {
+	background-color: #F0F0FF;
+	color: #000000;
+}
+
+#generic:disabled {
+	background-color: #DDDDFF;
+	color: #000000;
+}
+
+/* After input results */
+div.execution_time {
+	font-size: 75%;
+	font-weight: normal;
+	text-align: left;
+}
+
+table.result {
+	width: 100%;
+	vertical-align: top;
+	empty-cells: show;
+	border: 1px solid #AAAACC;
+	border-spacing: 0px;
+	background-color: #F2F2FF;
+}
+
+table.result tr.heading {
+	vertical-align: top;
+}
+
+table.result tr.list_title {
+	background-color: #FFFFFF;
+}
+
+table.result tr.list_title td.icon {
+	text-align: center;
+	vertical-align: top;
+}
+
+table.result tr.list_item {
+	background-color: #FFFFFF;
+}
+
+table.result tr.list_item td.blank {
+	width: 25px;
+}
+
+table.result tr.list_item td.heading {
+	vertical-align: top;
+	color: gray;
+	width: 10%;
+	font-size: 12px;
+}
+
+table.result tr.list_item td.value {
+	color: #000000;
+	font-size: 12px;
+}
+
+table.result_box {
+	border: 1px solid #AAAACC;
+	border-collapse: collapse;
+	empty-cells: show;
+}
+
+table.result_table {
+	border: 1px solid #AAAACC;
+	border-collapse: collapse;
+	empty-cells: show;
+}
+
+table.result_table td {
+	font-size: 12px;
+	vertical-align: top;
+	border: 1px solid #AAAACC;
+	padding: 4px;
+}
+
+table.result_table th {
+	border: 1px solid #AAAACC;
+	padding: 10px;
+	padding-left: 20px;
+	padding-right: 20px;
+}
+
+table.result_table tr.highlight {
+	background-color: #EEEBBB;
+}
+
+table.result_table tr.highlight td {
+	border: 1px solid #AAAACC;
+	font-weight: bold;
+	padding-top: 5px;
+	padding-bottom: 5px;
+	padding-left: 10px;
+	padding-right: 10px;
+}
+
+table.result_table td.heading {
+	color: #FFFFFF;
+	background-color: #000088;
+	font-size: 12px;
+}
+
+table.result_table td.value {
+	color: #000000;
+	background-color: #E0E0E0;
+}
+
+table.result_table tr.heading {
+	color: #FFFFFF;
+	background-color: #000088;
+	font-size: 12px;
+	font-weight: bold;
+}
+
+table.result_table tr.heading a {
+	color: #FFFFFF;
+	font-size: 12px;
+	font-weight: bold;
+}
+
+table.result_table tr.heading td {
+	border: 1px solid #AAAACC;
+	font-weight: normal;
+	padding-top: 5px;
+	padding-bottom: 5px;
+	padding-left: 10px;
+	padding-right: 10px;
+}
+
+table.result_table tr.even {
+	background-color: #E0E0E0;
+}
+
+table.result_table tr.even td {
+	border: 1px solid #AAAACC;
+	font-weight: normal;
+	padding-top: 5px;
+	padding-bottom: 5px;
+	padding-left: 10px;
+	padding-right: 10px;
+}
+
+table.result_table tr.even td.title {
+	font-weight: bold;
+}
+
+table.result_table tr.odd {
+	background-color: #F0F0F0;
+}
+
+table.result_table tr.odd td {
+	border: 1px solid #AAAACC;
+	font-weight: normal;
+	padding-top: 5px;
+	padding-bottom: 5px;
+	padding-left: 10px;
+	padding-right: 10px;
+}
+
+table.result_table tr.odd td.title {
+	font-weight: bold;
+}
+
+table.result_table ul.list {
+	margin: 5px;
+	margin-left: 0px;
+	padding-left: 20px;
+}
+
+table.result_table ul.list li {
+	margin-left: 0px;
+	padding-left: 0px;
+}
+
+table.result_table ul.list li small {
+	font-size: 75%;
+	color: #707070;
+}
+
+table.result_table ul.list li small a {
+	color: #7070C0;
+}
+
+/* Error Dialog Box */
+table.error {
+	width: 500px;
+	border: 1px solid #AA0000;
+	background-color: #FFF0F0;
+}
+
+table.error th {
+	background-color: #AA0000;
+	border: 0px;
+	color: #FFFFFF;
+	font-size: 14px;
+	font-weight: bold;
+	text-align: center;
+	vertical-align: middle;
+	width: 100%;
+}
+
+table.error th.img {
+	vertical-align: middle;
+	text-align: center;
+}
+
+table.error td {
+	border: 0px;
+	background-color: #FFF0F0;
+	padding: 2px;
+	text-align: left;
+	vertical-align: top;
+}
+
+/* Popup Window */
+div.popup h3.subtitle {
+	text-align: center;
+	margin: 0px;
+	margin-bottom: 15px;
+	color: #FFFFFF;
+	border-bottom: 1px solid #000000;
+	border-left: 1px solid #000000;
+	border-right: 1px solid #000000;
+	background: #000088;
+	padding: 4px;
+	font-weight: normal;
+}
+
+span.good {
+	color: green;
+}
+
+span.bad {
+	color: red;
+}
diff --git a/lam/templates/3rdParty/pla/htdocs/delete.php b/lam/templates/3rdParty/pla/htdocs/delete.php
new file mode 100644
index 00000000..137055ca
--- /dev/null
+++ b/lam/templates/3rdParty/pla/htdocs/delete.php
@@ -0,0 +1,40 @@
+<?php
+/**
+ * Deletes a DN and presents a "job's done" message.
+ *
+ * @package phpLDAPadmin
+ * @subpackage Page
+ */
+
+/**
+ */
+
+require './common.php';
+
+# The DNs we are working with
+$request = array();
+$request['dn'] = get_request('dn','REQUEST',true);
+
+if (! $app['server']->dnExists($request['dn']))
+	error(sprintf('%s (%s)',_('No such entry.'),'<b>'.pretty_print_dn($request['dn']).'</b>'),'error','index.php');
+
+# Delete the entry.
+$result = $app['server']->delete($request['dn']);
+
+if ($result) {
+	$redirect_url = '';
+
+	if (isAjaxEnabled())
+		$redirect_url .= sprintf('&refresh=SID_%s_nodes&noheader=1',$app['server']->getIndex());
+
+	system_message(array(
+		'title'=>_('Delete DN'),
+		'body'=>_('Successfully deleted DN ').sprintf('<b>%s</b>',$request['dn']),
+		'type'=>'info'),
+		sprintf('index.php?server_id=%s%s',$app['server']->getIndex(),$redirect_url));
+} else
+	system_message(array(
+		'title'=>_('Could not delete the entry.').sprintf(' (%s)',pretty_print_dn($request['dn'])),
+		'body'=>ldap_error_msg($app['server']->getErrorMessage(null),$app['server']->getErrorNum(null)),
+		'type'=>'error'));
+?>
diff --git a/lam/templates/3rdParty/pla/htdocs/delete_attr.php b/lam/templates/3rdParty/pla/htdocs/delete_attr.php
new file mode 100644
index 00000000..ad323fa1
--- /dev/null
+++ b/lam/templates/3rdParty/pla/htdocs/delete_attr.php
@@ -0,0 +1,49 @@
+<?php
+/**
+ *  Deletes an attribute from an entry with NO confirmation.
+ *
+ * @package phpLDAPadmin
+ * @subpackage Page
+ */
+
+/**
+ */
+
+require './common.php';
+
+$request = array();
+$request['dn'] = get_request('dn','REQUEST',true);
+$request['attr'] = get_request('attr','REQUEST',true);
+$request['index'] = get_request('index','REQUEST',true);
+
+if ($app['server']->isAttrReadOnly($request['attr']))
+	error(sprintf(_('The attribute "%s" is flagged as read-only in the phpLDAPadmin configuration.'),$request['attr']),'error','index.php');
+
+$update_array = array();
+$update_array[$request['attr']] = $app['server']->getDNAttrValue($request['dn'],$request['attr']);
+
+$redirect_url = sprintf('cmd.php?cmd=template_engine&server_id=%s&dn=%s',
+	$app['server']->getIndex(),rawurlencode($request['dn']));
+
+if (! isset($update_array[$request['attr']][$request['index']]))
+	system_message(array(
+		'title'=>_('Could not delete attribute value.'),
+		'body'=>sprintf('%s. %s/%s',_('The attribute value does not exist'),$request['attr'],$request['index']),
+		'type'=>'warn'),$redirect_url);
+
+else {
+	unset($update_array[$request['attr']][$request['index']]);
+	foreach ($update_array as $key => $values)
+		$update_array[$key] = array_values($values);
+
+	$result = $app['server']->modify($request['dn'],$update_array);
+
+	if ($result) {
+		foreach ($update_array as $attr => $junk)
+			$redirect_url .= sprintf('&modified_attrs[]=%s',$attr);
+
+		header("Location: $redirect_url");
+		die();
+	}
+}
+?>
diff --git a/lam/templates/3rdParty/pla/htdocs/delete_form.php b/lam/templates/3rdParty/pla/htdocs/delete_form.php
new file mode 100644
index 00000000..984f5bfe
--- /dev/null
+++ b/lam/templates/3rdParty/pla/htdocs/delete_form.php
@@ -0,0 +1,157 @@
+<?php
+/**
+ * Displays a last chance confirmation form to delete a DN.
+ *
+ * @package phpLDAPadmin
+ * @subpackage Page
+ */
+
+/**
+ */
+
+require './common.php';
+
+# The DN we are working with
+$request = array();
+$request['dn'] = get_request('dn','GET');
+
+$request['page'] = new PageRender($app['server']->getIndex(),get_request('template','REQUEST',false,'none'));
+$request['page']->setDN($request['dn']);
+$request['page']->accept();
+$request['template'] = $request['page']->getTemplate();
+
+# Check if the entry exists.
+if (! $request['dn'] || ! $app['server']->dnExists($request['dn']))
+	system_message(array(
+		'title'=>_('Entry does not exist'),
+		'body'=>sprintf('%s (%s)',_('The entry does not exist'),$request['dn']),
+		'type'=>'error'),'index.php');
+
+# We search all children, not only the visible children in the tree
+$request['children'] = $app['server']->getContainerContents($request['dn'],null,0,'(objectClass=*)',LDAP_DEREF_NEVER);
+
+printf('<h3 class="title">%s %s</h3>',_('Delete'),htmlspecialchars(get_rdn($request['dn'])));
+printf('<h3 class="subtitle">%s: <b>%s</b></h3>',
+	_('DN'),$request['dn']);
+echo "\n";
+
+echo '<center>';
+
+if (count($request['children'])) {
+	printf('<b>%s</b><br /><br />',_('Permanently delete all children also?'));
+
+	$search['href'] = htmlspecialchars(sprintf('cmd.php?cmd=query_engine&server_id=%s&filter=%s&base=%s&scope=sub&query=none&format=list',
+		$app['server']->getIndex(),rawurlencode('objectClass=*'),rawurlencode($request['dn'])));
+
+	$query = array();
+	$query['base'] = $request['dn'];
+	$query['scope'] = 'sub';
+	$query['attrs'] = array('dn');
+	$query['size_limit'] = 0;
+	$query['deref'] = LDAP_DEREF_NEVER;
+	$request['search'] = $app['server']->query($query,null);
+
+	echo '<table class="forminput" border="0">';
+	echo '<tr>';
+	echo '<td colspan="2">';
+	printf(_('This entry is the root of a sub-tree containing %s entries.'),count($request['search']));
+	printf(' <small>(<a href="%s">%s</a>)</small>',
+		$search['href'],_('view entries'));
+	echo '</td></tr>';
+
+	echo '<tr><td colspan="2">&nbsp;</td></tr>';
+
+	printf('<tr><td colspan="2">%s</td></tr>',
+		sprintf(_('phpLDAPadmin can recursively delete this entry and all %s of its children. See below for a list of all the entries that this action will delete. Do you want to do this?'),count($request['search'])));
+
+	echo '<tr><td colspan="2">&nbsp;</td></tr>';
+
+	printf('<tr><td colspan="2"><small>%s</small></td></tr>',
+		_('Note: this is potentially very dangerous and you do this at your own risk. This operation cannot be undone. Take into consideration aliases, referrals, and other things that may cause problems.'));
+	echo "\n";
+
+	echo '<tr>';
+	echo '<td style="width: 50%; text-align: center;">';
+	echo '<form action="cmd.php" method="post" id="delete_form">';
+	echo '<input type="hidden" name="cmd" value="rdelete" />';
+	printf('<input type="hidden" name="server_id" value="%s" />',$app['server']->getIndex());
+	printf('<input type="hidden" name="dn" value="%s" />',$request['template']->getDNEncode(false));
+	//@todo need to refresh the tree after a delete
+	printf('<input type="submit" value="%s" %s />',
+		sprintf(_('Delete all %s objects'),count($request['search'])),
+		(isAjaxEnabled() ? sprintf('onclick="return ajSUBMIT(\'BODY\',document.getElementById(\'delete_form\'),\'%s\');"',_('Deleting Object(s)')) : ''));
+	echo '</form>';
+	echo '</td>';
+
+	echo '<td style="width: 50%; text-align: center;">';
+	echo '<form action="cmd.php" method="get">';
+	echo '<input type="hidden" name="cmd" value="template_engine" />';
+	printf('<input type="hidden" name="server_id" value="%s" />',$app['server']->getIndex());
+	printf('<input type="hidden" name="dn" value="%s" />',$request['template']->getDNEncode(false));
+	printf('<input type="submit" name="submit" value="%s" %s />',
+		_('Cancel'),
+		(isAjaxEnabled() ? sprintf('onclick="return ajDISPLAY(\'BODY\',\'cmd=template_engine&server_id=%s&dn=%s\',\'%s\');"',$app['server']->getIndex(),$request['template']->getDNEncode(),_('Retrieving DN')) : ''));
+	echo '</form>';
+	echo '</td>';
+	echo '</tr>';
+	echo "\n";
+
+	echo '</table>';
+	echo "\n";
+
+	echo '<br /><br />';
+	echo _('List of entries to be deleted:');
+	echo '<br />';
+
+	$i = 0;
+	printf('<select size="%s" multiple disabled style="background:white; color:black;width:500px" >',min(10,count($request['search'])));
+	foreach ($request['search'] as $key => $value)
+		printf('<option>%s. %s</option>',++$i,dn_unescape($value['dn']));
+	echo '</select>';
+	echo "\n";
+
+} else {
+	echo '<table class="forminput" border="0">';
+
+	printf('<tr><td colspan="4">%s</td></tr>',_('Are you sure you want to permanently delete this object?'));
+	echo '<tr><td colspan="4">&nbsp;</td></tr>';
+
+	printf('<tr><td style="width: 10%%;">%s:</td><td colspan="3" style="width: 75%%;"><b>%s</b></td></tr>',_('Server'),$app['server']->getName());
+	printf('<tr><td style="width: 10%%;"><acronym title="%s">%s</acronym></td><td colspan="3" style="width: 75%%;"><b>%s</b></td></tr>',
+		_('DN'),_('DN'),$request['dn']);
+	echo '<tr><td colspan="4">&nbsp;</td></tr>';
+	echo "\n";
+
+	echo '<tr>';
+	echo '<td colspan="2" style="width: 50%; text-align: center;">';
+	echo '<form action="cmd.php" method="post" id="delete_form">';
+	echo '<input type="hidden" name="cmd" value="delete" />';
+	printf('<input type="hidden" name="server_id" value="%s" />',$app['server']->getIndex());
+	printf('<input type="hidden" name="dn" value="%s" />',$request['template']->getDNEncode(false));
+	//@todo need to refresh the tree after a delete
+	printf('<input type="submit" name="submit" value="%s" %s />',
+		_('Delete'),
+		(isAjaxEnabled() ? sprintf('onclick="return ajSUBMIT(\'BODY\',document.getElementById(\'delete_form\'),\'%s\');"',_('Deleting Object(s)')) : ''));
+	echo '</form>';
+
+	echo '</td>';
+	echo '<td colspan="2" style="width: 50%; text-align: center;">';
+
+	echo '<form action="cmd.php" method="get">';
+	echo '<input type="hidden" name="cmd" value="template_engine" />';
+	printf('<input type="hidden" name="server_id" value="%s" />',$app['server']->getIndex());
+	printf('<input type="hidden" name="dn" value="%s" />',$request['template']->getDNEncode(false));
+	printf('<input type="submit" name="submit" value="%s" %s />',
+		_('Cancel'),
+		(isAjaxEnabled() ? sprintf('onclick="return ajDISPLAY(\'BODY\',\'cmd=template_engine&server_id=%s&dn=%s\',\'%s\');"',$app['server']->getIndex(),$request['template']->getDNEncode(),_('Retrieving DN')) : ''));
+	echo '</form>';
+
+	echo '</td>';
+	echo '</tr>';
+	echo '</table>';
+	echo "\n";
+}
+
+echo '</center>';
+echo '<br />';
+?>
diff --git a/lam/templates/3rdParty/pla/htdocs/download_binary_attr.php b/lam/templates/3rdParty/pla/htdocs/download_binary_attr.php
new file mode 100644
index 00000000..251f2deb
--- /dev/null
+++ b/lam/templates/3rdParty/pla/htdocs/download_binary_attr.php
@@ -0,0 +1,49 @@
+<?php
+/**
+ * Download a binary value attribute to the user.
+ * A server ID, DN and Attribute must be provided in the GET attributes.
+ * Optionally an index, type and filename can be supplied.
+ *
+ * @package phpLDAPadmin
+ * @subpackage Page
+ */
+
+/**
+ */
+
+require './common.php';
+
+$request = array();
+$request['dn'] = get_request('dn','GET');
+$request['attr'] = strtolower(get_request('attr','GET',true));
+$request['index'] = get_request('index','GET',false,0);
+$request['type'] = get_request('type','GET',false,'octet-stream');
+$request['filename'] = get_request('filename','GET',false,sprintf('%s:%s.bin',get_rdn($request['dn'],true),$request['attr']));
+
+if (! $app['server']->dnExists($request['dn']))
+	error(sprintf(_('The entry (%s) does not exist.'),$request['dn']),'error','index.php');
+
+$search = $app['server']->getDNAttrValues($request['dn'],null,LDAP_DEREF_NEVER,array($request['attr']));
+
+# Dump the binary data to the browser
+$obStatus = ob_get_status();
+if (isset($obStatus['type']) && $obStatus['type'] && $obStatus['status']) 
+	ob_end_clean();
+
+if (! isset($search[$request['attr']][$request['index']])) {
+	# We cant display an error, but we can set a system message, which will be display on the next page render.
+	system_message(array(
+		'title'=>_('No binary data available'),
+		'body'=>sprintf(_('Could not fetch binary data from LDAP server for attribute [%s].'),$request['attr']),
+		'type'=>'warn'));
+
+	die();
+}
+
+header(sprintf('Content-type: %s',$request['type']));
+header(sprintf('Content-disposition: attachment; filename="%s"',$request['filename']));
+header(sprintf('Expires: Mon, 26 Jul 1997 05:00:00 GMT',gmdate('r')));
+header(sprintf('Last-Modified: %s',gmdate('r')));
+echo $search[$request['attr']][$request['index']];
+die();
+?>
diff --git a/lam/templates/3rdParty/pla/htdocs/draw_tree_node.php b/lam/templates/3rdParty/pla/htdocs/draw_tree_node.php
new file mode 100644
index 00000000..7311e2dc
--- /dev/null
+++ b/lam/templates/3rdParty/pla/htdocs/draw_tree_node.php
@@ -0,0 +1,61 @@
+<?php
+/**
+ * Draw a portion of the LDAP tree.
+ *
+ * @package phpLDAPadmin
+ * @subpackage Tree
+ */
+
+/**
+ */
+
+$request = array();
+$request['dn'] = get_request('dn','REQUEST');
+$request['server_id'] = get_request('server_id','REQUEST');
+$request['code'] = get_request('code','REQUEST');
+$request['action'] = get_request('action','REQUEST');
+$request['noheader'] = get_request('noheader','REQUEST',false,0);
+
+$tree = Tree::getInstance($request['server_id']);
+if (! $tree)
+	die();
+
+$treesave = false;
+
+if ($request['dn']) {
+	$dnentry = $tree->getEntry($request['dn']);
+
+	if (! $dnentry) {
+		$tree->addEntry($request['dn']);
+		$dnentry = $tree->getEntry($request['dn']);
+		$treesave = true;
+	}
+
+	switch ($request['action']) {
+		case 0:
+			$dnentry->close();
+
+			break;
+
+		case 2:
+		default:
+			if ($dnentry->isSizeLimited()) {
+				$tree->readChildren($request['dn'],true);
+
+				$treesave = true;
+			}
+
+			$dnentry->open();
+	}
+}
+
+if ($treesave)
+	set_cached_item($app['server']->getIndex(),'tree','null',$tree);
+
+if ($request['dn'])
+	echo $tree->draw_children($dnentry,$request['code']);
+else
+	$tree->draw($request['noheader']);
+
+die();
+?>
diff --git a/lam/templates/3rdParty/pla/htdocs/entry_chooser.php b/lam/templates/3rdParty/pla/htdocs/entry_chooser.php
new file mode 100644
index 00000000..1bde9ede
--- /dev/null
+++ b/lam/templates/3rdParty/pla/htdocs/entry_chooser.php
@@ -0,0 +1,123 @@
+<?php
+/**
+ * Display a selection (popup window) to pick a DN.
+ *
+ * @package phpLDAPadmin
+ * @subpackage Page
+ */
+
+/**
+ */
+
+include './common.php';
+
+$www['page'] = new page();
+
+$request = array();
+$request['container'] = get_request('container','GET');
+$request['form'] = get_request('form','GET');
+$request['element'] = get_request('element','GET');
+$request['rdn'] = get_request('rdn','GET');
+
+echo '<div class="popup">';
+printf('<h3 class="subtitle">%s</h3>',_('Entry Chooser'));
+
+echo '<script type="text/javascript">';
+echo '	function returnDN(dn) {';
+printf("	eval ('o = opener.document.getElementById(\"%s\").%s;');",$request['form'],$request['element']);
+echo '		o.value = dn;';
+echo '		close();';
+echo '	}';
+echo '</script>';
+
+echo '<table class="forminput" width="100%" border="0">';
+if ($request['container']) {
+	printf('<tr><td class="heading" colspan="3">%s:</td><td>%s</td></tr>',_('Server'),$app['server']->getName());
+	printf('<tr><td class="heading" colspan="3">%s:</td><td>%s</td></tr>',_('Looking in'),$request['container']);
+	echo '<tr><td class="blank" colspan="4">&nbsp;</td></tr>';
+}
+
+# Has the user already begun to descend into a specific server tree?
+if (isset($app['server']) && ! is_null($request['container'])) {
+
+	$request['children'] = $app['server']->getContainerContents($request['container'],null,0,'(objectClass=*)',$_SESSION[APPCONFIG]->getValue('deref','tree'));
+	sort($request['children']);
+
+	foreach ($app['server']->getBaseDN() as $base) {
+		if (DEBUG_ENABLED)
+			debug_log('Comparing BaseDN [%s] with container [%s]',64,0,__FILE__,__LINE__,__METHOD__,$base,$request['container']);
+
+		if (! pla_compare_dns($request['container'],$base)) {
+			$parent_container = false;
+			$href['up'] = sprintf('entry_chooser.php?form=%s&element=%s&rdn=%s',$request['form'],$request['element'],rawurlencode($request['rdn']));
+			break;
+
+		} else {
+			$parent_container = $app['server']->getContainer($request['container']);
+			$href['up'] = sprintf('entry_chooser.php?form=%s&element=%s&rdn=%s&server_id=%s&container=%s',
+				$request['form'],$request['element'],$request['rdn'],$app['server']->getIndex(),rawurlencode($parent_container));
+		}
+	}
+
+	echo '<tr>';
+	echo '<td class="blank">&nbsp;</td>';
+	printf('<td class="icon"><a href="%s"><img src="%s/up.png" alt="Up" /></a></td>',$href['up'],IMGDIR);
+	printf('<td colspan="2"><a href="%s">%s...</a></td>',$href['up'],_('Back Up'));
+	echo '</tr>';
+
+	if (! count($request['children']))
+		printf('<td class="blank" colspan="2">&nbsp;</td><td colspan="2">(%s)</td>',_('no entries'));
+
+	else
+		foreach ($request['children'] as $dn) {
+			$href['return'] = sprintf("javascript:returnDN('%s%s')",($request['rdn'] ? sprintf('%s,',$request['rdn']) : ''),str_replace('\\','\\\\',$dn));
+			$href['expand'] = sprintf('entry_chooser.php?server_id=%s&form=%s&element=%s&rdn=%s&container=%s',
+				$app['server']->getIndex(),$request['form'],$request['element'],$request['rdn'],rawurlencode($dn));
+
+			echo '<tr>';
+			echo '<td class="blank">&nbsp;</td>';
+			printf('<td class="icon"><a href="%s"><img src="%s/plus.png" alt="Plus" /></a></td>',$href['expand'],IMGDIR);
+
+			printf('<td colspan="2"><a href="%s">%s</a></td>',$href['return'],$dn);
+			echo '</tr>';
+			echo "\n\n";
+		}
+
+# Draw the root of the selection tree (ie, list all the servers)
+} else {
+	foreach ($_SESSION[APPCONFIG]->getServerList() as $index => $server) {
+		if ($server->isLoggedIn(null)) {
+			printf('<tr><td class="heading" colspan="3">%s:</td><td class="heading">%s</td></tr>',_('Server'),$server->getName());
+			foreach ($server->getBaseDN() as $dn) {
+				if (! $dn) {
+					printf('<tr><td class="blank">&nbsp;</td><td colspan="3">(%s)</td></tr>',_('Could not determine base DN'));
+
+				} else {
+					$href['return'] = sprintf("javascript:returnDN('%s%s')",($request['rdn'] ? sprintf('%s,',$request['rdn']) : ''),rawurlencode($dn));
+					$href['expand'] = htmlspecialchars(sprintf('entry_chooser.php?server_id=%s&form=%s&element=%s&rdn=%s&container=%s',
+							$server->getIndex(),$request['form'],$request['element'],$request['rdn'],rawurlencode($dn)));
+
+					echo '<tr>';
+					echo '<td class="blank">&nbsp;</td>';
+					printf('<td colspan="2" class="icon"><a href="%s"><img src="%s/plus.png" alt="Plus" /></a></td>',$href['expand'],IMGDIR);
+					printf('<td colspan="2"><a href="%s">%s</a></td>',$href['return'],$dn);
+				}
+			}
+
+			echo '<tr><td class="blank" colspan="4">&nbsp;</td></tr>';
+		}
+	}
+}
+
+echo '</table>';
+echo '</div>';
+
+# Capture the output and put into the body of the page.
+$www['body'] = new block();
+$www['body']->SetBody(ob_get_contents());
+$www['page']->block_add('body',$www['body']);
+ob_end_clean();
+
+# Render the popup.
+$www['page']->display(array('CONTROL'=>false,'FOOT'=>false,'HEAD'=>false,'TREE'=>false));
+?>
diff --git a/lam/templates/3rdParty/pla/htdocs/expand.php b/lam/templates/3rdParty/pla/htdocs/expand.php
new file mode 100644
index 00000000..0eed2422
--- /dev/null
+++ b/lam/templates/3rdParty/pla/htdocs/expand.php
@@ -0,0 +1,27 @@
+<?php
+/**
+ * This script alters the session variable 'tree', expanding it
+ * at the dn specified in the query string.
+ *
+ * Note: this script is equal and opposite to collapse.php
+ *
+ * @package phpLDAPadmin
+ * @subpackage Tree
+ * @see collapse.php
+ */
+
+/**
+ */
+
+require './common.php';
+
+$dn = get_request('dn','GET',true);
+$tree = get_cached_item($app['server']->getIndex(),'tree');
+$entry = $tree->getEntry($dn);
+$entry->open();
+set_cached_item($app['server']->getIndex(),'tree','null',$tree);
+
+header(sprintf('Location:index.php?server_id=%s&junk=%s#%s',
+	$app['server']->getIndex(),random_junk(),htmlid($app['server']->getIndex(),$dn)));
+die();
+?>
diff --git a/lam/templates/3rdParty/pla/htdocs/export.php b/lam/templates/3rdParty/pla/htdocs/export.php
new file mode 100644
index 00000000..ece7edf9
--- /dev/null
+++ b/lam/templates/3rdParty/pla/htdocs/export.php
@@ -0,0 +1,40 @@
+<?php
+/**
+ * Performs the export of data from the LDAP server
+ *
+ * @package phpLDAPadmin
+ * @subpackage Page
+ */
+
+/**
+ */
+
+require './common.php';
+require LIBDIR.'export_functions.php';
+
+# Prevent script from bailing early for long search
+@set_time_limit(0);
+
+$request = array();
+$request['file'] = get_request('save_as_file') ? true : false;
+$request['exporter'] = new Exporter($app['server']->getIndex(),get_request('exporter_id','REQUEST'));
+$request['export'] = $request['exporter']->getTemplate();
+$types = $request['export']->getType();
+
+# send the header
+if ($request['file']) {
+	$obStatus = ob_get_status();
+	if (isset($obStatus['type']) && $obStatus['type'] && $obStatus['status']) 
+		ob_end_clean();
+
+	header('Content-type: application/download');
+	header(sprintf('Content-Disposition: inline; filename="%s.%s"','export',$types['extension'].($request['export']->isCompressed() ? '.gz' : '')));
+	$request['export']->export();
+	die();
+
+} else {
+	print '<span style="font-size: 14px; font-family: courier;"><pre>';
+	$request['export']->export();
+	print '</pre></span>';
+}
+?>
diff --git a/lam/templates/3rdParty/pla/htdocs/export_form.php b/lam/templates/3rdParty/pla/htdocs/export_form.php
new file mode 100644
index 00000000..326184e7
--- /dev/null
+++ b/lam/templates/3rdParty/pla/htdocs/export_form.php
@@ -0,0 +1,213 @@
+<?php
+/**
+ * Export entries from the LDAP server.
+ *
+ * @package phpLDAPadmin
+ * @subpackage Page
+ */
+
+/**
+ */
+
+require './common.php';
+require LIBDIR.'export_functions.php';
+
+$request = array();
+$request['dn'] = get_request('dn','GET');
+$request['format'] = get_request('format','GET',false,get_line_end_format());
+$request['scope'] = get_request('scope','GET',false,'base');
+$request['exporter_id'] = get_request('exporter_id','GET',false,'LDIF');
+$request['filter'] = get_request('filter','GET',false,'(objectClass=*)');
+$request['attr'] = get_request('attributes','GET',false,'*');
+$request['sys_attr'] = get_request('sys_attr','GET') ? true: false;
+
+$available_formats = array(
+	'mac'  => 'Macintosh',
+	'unix' => 'UNIX (Linux, BSD)',
+	'win'  => 'Windows'
+);
+
+$available_scopes = array(
+	'base' => _('Base (base dn only)'),
+	'one' => _('One (one level beneath base)'),
+	'sub' => _('Sub (entire subtree)')
+);
+
+$request['page'] = new PageRender($app['server']->getIndex(),get_request('template','REQUEST',false,'none'));
+$request['page']->drawTitle(sprintf('<b>%s</b>',_('Export')));
+
+printf('<script type="text/javascript" src="%sdnChooserPopup.js"></script>',JSDIR);
+printf('<script type="text/javascript" src="%sform_field_toggle_enable.js"></script>',JSDIR);
+
+echo '<br />';
+echo '<form id="export_form" action="cmd.php" method="post">';
+echo '<div>';
+echo '<input type="hidden" name="cmd" value="export" />';
+printf('<input type="hidden" name="server_id" value="%s" />',$app['server']->getIndex());
+
+echo '<table class="forminput" style="margin-left: auto; margin-right: auto;">';
+echo '<tr>';
+echo '<td>';
+
+echo '<fieldset>';
+printf('<legend>%s</legend>',_('Export'));
+
+echo '<table>';
+printf('<tr><td>%s</td><td>%s</td></tr>',_('Server'),$app['server']->getName());
+
+echo '<tr>';
+printf('<td style="white-space:nowrap">%s</td>',_('Base DN'));
+echo '<td><span style="white-space: nowrap;">';
+printf('<input type="text" name="dn" id="dn" style="width:230px" value="%s" />&nbsp;',htmlspecialchars($request['dn']));
+draw_chooser_link('export_form','dn');
+echo '</span></td>';
+echo '</tr>';
+
+echo '<tr>';
+printf('<td><span style="white-space: nowrap">%s</span></td>',_('Search Scope'));
+
+echo '<td>';
+
+foreach ($available_scopes as $id => $desc)
+	printf('<input type="radio" name="scope" value="%s" id="%s"%s /><label for="%s">%s</label><br />',
+		htmlspecialchars($id),$id,($id == $request['scope']) ? 'checked="checked"' : '',
+		htmlspecialchars($id),$desc);
+
+echo '</td>';
+
+echo '</tr>';
+
+printf('<tr><td>%s</td><td><input type="text" name="filter" style="width:300px" value="%s" /></td></tr>',
+	_('Search Filter'),htmlspecialchars($request['filter']));
+
+printf('<tr><td>%s</td><td><input type="text" name="attributes" style="width:300px" value="%s" /></td></tr>',
+	_('Show Attributtes'),htmlspecialchars($request['attr']));
+
+printf('<tr><td>&nbsp;</td><td><input type="checkbox" name="sys_attr" id="sys_attr" %s/> <label for="sys_attr">%s</label></td></tr>',
+	$request['sys_attr'] ? 'checked="checked" ' : '',_('Include system attributes'));
+
+printf('<tr><td>&nbsp;</td><td><input type="checkbox" id="save_as_file" name="save_as_file" onclick="export_field_toggle(this)" /> <label for="save_as_file">%s</label></td></tr>',
+	_('Save as file'));
+
+printf('<tr><td>&nbsp;</td><td><input type="checkbox" id="compress" name="compress" disabled="disabled" /> <label for="compress">%s</label></td></tr>',
+	_('Compress'));
+
+echo '</table>';
+echo '</fieldset>';
+echo '</td>';
+echo '</tr>';
+echo '<tr>';
+echo '<td>';
+
+echo '<table style="width: 100%">';
+echo '<tr>';
+
+echo '<td style="width: 50%">';
+echo '<fieldset style="height: 100px">';
+
+printf('<legend>%s</legend>',_('Export format'));
+
+foreach (Exporter::types() as $index => $exporter) {
+	printf('<input type="radio" name="exporter_id" id="exporter_id_%s" value="%s"%s/>',
+		htmlspecialchars($exporter['type']),htmlspecialchars($exporter['type']),($exporter['type'] === $request['exporter_id']) ? ' checked="checked"' : '');
+
+	printf('<label for="exporter_id_%s">%s</label><br />',
+		htmlspecialchars($exporter['type']),$exporter['type']);
+}
+
+echo '</fieldset>';
+echo '</td>';
+
+echo '<td style="width: 50%">';
+echo '<fieldset style="height: 100px">';
+
+printf('<legend>%s</legend>',_('Line ends'));
+foreach ($available_formats as $id => $desc)
+	printf('<input type="radio" name="format" value="%s" id="%s"%s /><label for="%s">%s</label><br />',
+		htmlspecialchars($id),htmlspecialchars($id),($request['format']==$id) ? ' checked="checked"' : '',
+		htmlspecialchars($id),$desc);
+
+echo '</fieldset>';
+echo '</td></tr>';
+echo '</table>';
+echo '</td>';
+
+echo '</tr>';
+
+printf('<tr><td colspan="2" style="text-align: center;"><input type="submit" name="target" value="%s" /></td></tr>',
+	htmlspecialchars(_('Proceed >>')));
+
+echo '</table>';
+
+echo '</div>';
+echo '</form>';
+
+/**
+ * Helper function for fetching the line end format.
+ *
+ * @return String 'win', 'unix', or 'mac' based on the user's browser..
+ */
+function get_line_end_format() {
+	if (is_browser('win'))
+		return 'win';
+	elseif (is_browser('unix'))
+		return 'unix';
+	elseif (is_browser('mac'))
+		return 'mac';
+	else
+		return 'unix';
+}
+
+/**
+ * Gets the USER_AGENT string from the $_SERVER array, all in lower case in
+ * an E_NOTICE safe manner.
+ *
+ * @return string|false The user agent string as reported by the browser.
+ */
+function get_user_agent_string() {
+	if (isset($_SERVER['HTTP_USER_AGENT']))
+		return strtolower($_SERVER['HTTP_USER_AGENT']);
+	else
+		return '';
+}
+
+/**
+ * Determine the OS for the browser
+ */
+function is_browser($type) {
+	$agents = array();
+
+	$agents['unix'] = array(
+		'sunos','sunos 4','sunos 5',
+		'i86',
+		'irix','irix 5','irix 6','irix6',
+		'hp-ux','09.','10.',
+		'aix','aix 1','aix 2','aix 3','aix 4',
+		'inux',
+		'sco',
+		'unix_sv','unix_system_v','ncr','reliant','dec','osf1',
+		'dec_alpha','alphaserver','ultrix','alphastation',
+		'sinix',
+		'freebsd','bsd',
+		'x11','vax','openvms'
+	);
+
+	$agents['win'] = array(
+		'win','win95','windows 95',
+		'win16','windows 3.1','windows 16-bit','windows','win31','win16','winme',
+		'win2k','winxp',
+		'win98','windows 98','win9x',
+		'winnt','windows nt','win32',
+		'32bit'
+	);
+
+	$agents['mac'] = array(
+		'mac','68000','ppc','powerpc'
+	);
+
+	if (isset($agents[$type]))
+		return in_array(get_user_agent_string(),$agents[$type]);
+	else
+		return false;
+}
+?>
diff --git a/lam/templates/3rdParty/pla/htdocs/images/ajax-progress.gif b/lam/templates/3rdParty/pla/htdocs/images/ajax-progress.gif
new file mode 100644
index 00000000..994bfab6
Binary files /dev/null and b/lam/templates/3rdParty/pla/htdocs/images/ajax-progress.gif differ
diff --git a/lam/templates/3rdParty/pla/htdocs/images/ajax-spinner.gif b/lam/templates/3rdParty/pla/htdocs/images/ajax-spinner.gif
new file mode 100644
index 00000000..1ed786f2
Binary files /dev/null and b/lam/templates/3rdParty/pla/htdocs/images/ajax-spinner.gif differ
diff --git a/lam/templates/3rdParty/pla/htdocs/images/countries/af.png b/lam/templates/3rdParty/pla/htdocs/images/countries/af.png
new file mode 100644
index 00000000..cda88b08
Binary files /dev/null and b/lam/templates/3rdParty/pla/htdocs/images/countries/af.png differ
diff --git a/lam/templates/3rdParty/pla/htdocs/images/countries/al.png b/lam/templates/3rdParty/pla/htdocs/images/countries/al.png
new file mode 100644
index 00000000..5925b279
Binary files /dev/null and b/lam/templates/3rdParty/pla/htdocs/images/countries/al.png differ
diff --git a/lam/templates/3rdParty/pla/htdocs/images/countries/am.png b/lam/templates/3rdParty/pla/htdocs/images/countries/am.png
new file mode 100644
index 00000000..45cd7495
Binary files /dev/null and b/lam/templates/3rdParty/pla/htdocs/images/countries/am.png differ
diff --git a/lam/templates/3rdParty/pla/htdocs/images/countries/an.png b/lam/templates/3rdParty/pla/htdocs/images/countries/an.png
new file mode 100644
index 00000000..2d4d3a75
Binary files /dev/null and b/lam/templates/3rdParty/pla/htdocs/images/countries/an.png differ
diff --git a/lam/templates/3rdParty/pla/htdocs/images/countries/ao.png b/lam/templates/3rdParty/pla/htdocs/images/countries/ao.png
new file mode 100644
index 00000000..9463d243
Binary files /dev/null and b/lam/templates/3rdParty/pla/htdocs/images/countries/ao.png differ
diff --git a/lam/templates/3rdParty/pla/htdocs/images/countries/ar.png b/lam/templates/3rdParty/pla/htdocs/images/countries/ar.png
new file mode 100644
index 00000000..bd733826
Binary files /dev/null and b/lam/templates/3rdParty/pla/htdocs/images/countries/ar.png differ
diff --git a/lam/templates/3rdParty/pla/htdocs/images/countries/at.png b/lam/templates/3rdParty/pla/htdocs/images/countries/at.png
new file mode 100644
index 00000000..2a58c49b
Binary files /dev/null and b/lam/templates/3rdParty/pla/htdocs/images/countries/at.png differ
diff --git a/lam/templates/3rdParty/pla/htdocs/images/countries/au.png b/lam/templates/3rdParty/pla/htdocs/images/countries/au.png
new file mode 100644
index 00000000..b20b0480
Binary files /dev/null and b/lam/templates/3rdParty/pla/htdocs/images/countries/au.png differ
diff --git a/lam/templates/3rdParty/pla/htdocs/images/countries/aw.png b/lam/templates/3rdParty/pla/htdocs/images/countries/aw.png
new file mode 100644
index 00000000..411977eb
Binary files /dev/null and b/lam/templates/3rdParty/pla/htdocs/images/countries/aw.png differ
diff --git a/lam/templates/3rdParty/pla/htdocs/images/countries/az.png b/lam/templates/3rdParty/pla/htdocs/images/countries/az.png
new file mode 100644
index 00000000..ced5af01
Binary files /dev/null and b/lam/templates/3rdParty/pla/htdocs/images/countries/az.png differ
diff --git a/lam/templates/3rdParty/pla/htdocs/images/countries/ba.png b/lam/templates/3rdParty/pla/htdocs/images/countries/ba.png
new file mode 100644
index 00000000..fb7d1905
Binary files /dev/null and b/lam/templates/3rdParty/pla/htdocs/images/countries/ba.png differ
diff --git a/lam/templates/3rdParty/pla/htdocs/images/countries/bb.png b/lam/templates/3rdParty/pla/htdocs/images/countries/bb.png
new file mode 100644
index 00000000..9c07e144
Binary files /dev/null and b/lam/templates/3rdParty/pla/htdocs/images/countries/bb.png differ
diff --git a/lam/templates/3rdParty/pla/htdocs/images/countries/bd.png b/lam/templates/3rdParty/pla/htdocs/images/countries/bd.png
new file mode 100644
index 00000000..56bba0b9
Binary files /dev/null and b/lam/templates/3rdParty/pla/htdocs/images/countries/bd.png differ
diff --git a/lam/templates/3rdParty/pla/htdocs/images/countries/be.png b/lam/templates/3rdParty/pla/htdocs/images/countries/be.png
new file mode 100644
index 00000000..9312218f
Binary files /dev/null and b/lam/templates/3rdParty/pla/htdocs/images/countries/be.png differ
diff --git a/lam/templates/3rdParty/pla/htdocs/images/countries/bf.png b/lam/templates/3rdParty/pla/htdocs/images/countries/bf.png
new file mode 100644
index 00000000..1019379a
Binary files /dev/null and b/lam/templates/3rdParty/pla/htdocs/images/countries/bf.png differ
diff --git a/lam/templates/3rdParty/pla/htdocs/images/countries/bg.png b/lam/templates/3rdParty/pla/htdocs/images/countries/bg.png
new file mode 100644
index 00000000..0f64f7db
Binary files /dev/null and b/lam/templates/3rdParty/pla/htdocs/images/countries/bg.png differ
diff --git a/lam/templates/3rdParty/pla/htdocs/images/countries/bh.png b/lam/templates/3rdParty/pla/htdocs/images/countries/bh.png
new file mode 100644
index 00000000..236693dc
Binary files /dev/null and b/lam/templates/3rdParty/pla/htdocs/images/countries/bh.png differ
diff --git a/lam/templates/3rdParty/pla/htdocs/images/countries/bi.png b/lam/templates/3rdParty/pla/htdocs/images/countries/bi.png
new file mode 100644
index 00000000..7fa236af
Binary files /dev/null and b/lam/templates/3rdParty/pla/htdocs/images/countries/bi.png differ
diff --git a/lam/templates/3rdParty/pla/htdocs/images/countries/bj.png b/lam/templates/3rdParty/pla/htdocs/images/countries/bj.png
new file mode 100644
index 00000000..290016a5
Binary files /dev/null and b/lam/templates/3rdParty/pla/htdocs/images/countries/bj.png differ
diff --git a/lam/templates/3rdParty/pla/htdocs/images/countries/bm.png b/lam/templates/3rdParty/pla/htdocs/images/countries/bm.png
new file mode 100644
index 00000000..96fb4dcd
Binary files /dev/null and b/lam/templates/3rdParty/pla/htdocs/images/countries/bm.png differ
diff --git a/lam/templates/3rdParty/pla/htdocs/images/countries/bn.png b/lam/templates/3rdParty/pla/htdocs/images/countries/bn.png
new file mode 100644
index 00000000..53460dc3
Binary files /dev/null and b/lam/templates/3rdParty/pla/htdocs/images/countries/bn.png differ
diff --git a/lam/templates/3rdParty/pla/htdocs/images/countries/bo.png b/lam/templates/3rdParty/pla/htdocs/images/countries/bo.png
new file mode 100644
index 00000000..5025e7fb
Binary files /dev/null and b/lam/templates/3rdParty/pla/htdocs/images/countries/bo.png differ
diff --git a/lam/templates/3rdParty/pla/htdocs/images/countries/br.png b/lam/templates/3rdParty/pla/htdocs/images/countries/br.png
new file mode 100644
index 00000000..734ace94
Binary files /dev/null and b/lam/templates/3rdParty/pla/htdocs/images/countries/br.png differ
diff --git a/lam/templates/3rdParty/pla/htdocs/images/countries/bs.png b/lam/templates/3rdParty/pla/htdocs/images/countries/bs.png
new file mode 100644
index 00000000..36c4cbe0
Binary files /dev/null and b/lam/templates/3rdParty/pla/htdocs/images/countries/bs.png differ
diff --git a/lam/templates/3rdParty/pla/htdocs/images/countries/bt.png b/lam/templates/3rdParty/pla/htdocs/images/countries/bt.png
new file mode 100644
index 00000000..3e10663a
Binary files /dev/null and b/lam/templates/3rdParty/pla/htdocs/images/countries/bt.png differ
diff --git a/lam/templates/3rdParty/pla/htdocs/images/countries/bw.png b/lam/templates/3rdParty/pla/htdocs/images/countries/bw.png
new file mode 100644
index 00000000..bd8e2931
Binary files /dev/null and b/lam/templates/3rdParty/pla/htdocs/images/countries/bw.png differ
diff --git a/lam/templates/3rdParty/pla/htdocs/images/countries/by.png b/lam/templates/3rdParty/pla/htdocs/images/countries/by.png
new file mode 100644
index 00000000..8f5b8499
Binary files /dev/null and b/lam/templates/3rdParty/pla/htdocs/images/countries/by.png differ
diff --git a/lam/templates/3rdParty/pla/htdocs/images/countries/bz.png b/lam/templates/3rdParty/pla/htdocs/images/countries/bz.png
new file mode 100644
index 00000000..fb1bd5ae
Binary files /dev/null and b/lam/templates/3rdParty/pla/htdocs/images/countries/bz.png differ
diff --git a/lam/templates/3rdParty/pla/htdocs/images/countries/ca.png b/lam/templates/3rdParty/pla/htdocs/images/countries/ca.png
new file mode 100644
index 00000000..d06843f5
Binary files /dev/null and b/lam/templates/3rdParty/pla/htdocs/images/countries/ca.png differ
diff --git a/lam/templates/3rdParty/pla/htdocs/images/countries/cf.png b/lam/templates/3rdParty/pla/htdocs/images/countries/cf.png
new file mode 100644
index 00000000..35e6b47a
Binary files /dev/null and b/lam/templates/3rdParty/pla/htdocs/images/countries/cf.png differ
diff --git a/lam/templates/3rdParty/pla/htdocs/images/countries/cg.png b/lam/templates/3rdParty/pla/htdocs/images/countries/cg.png
new file mode 100644
index 00000000..f2db5185
Binary files /dev/null and b/lam/templates/3rdParty/pla/htdocs/images/countries/cg.png differ
diff --git a/lam/templates/3rdParty/pla/htdocs/images/countries/ch.png b/lam/templates/3rdParty/pla/htdocs/images/countries/ch.png
new file mode 100644
index 00000000..9899d788
Binary files /dev/null and b/lam/templates/3rdParty/pla/htdocs/images/countries/ch.png differ
diff --git a/lam/templates/3rdParty/pla/htdocs/images/countries/ci.png b/lam/templates/3rdParty/pla/htdocs/images/countries/ci.png
new file mode 100644
index 00000000..d536e9ba
Binary files /dev/null and b/lam/templates/3rdParty/pla/htdocs/images/countries/ci.png differ
diff --git a/lam/templates/3rdParty/pla/htdocs/images/countries/ck.png b/lam/templates/3rdParty/pla/htdocs/images/countries/ck.png
new file mode 100644
index 00000000..271f568b
Binary files /dev/null and b/lam/templates/3rdParty/pla/htdocs/images/countries/ck.png differ
diff --git a/lam/templates/3rdParty/pla/htdocs/images/countries/cl.png b/lam/templates/3rdParty/pla/htdocs/images/countries/cl.png
new file mode 100644
index 00000000..97db9ec0
Binary files /dev/null and b/lam/templates/3rdParty/pla/htdocs/images/countries/cl.png differ
diff --git a/lam/templates/3rdParty/pla/htdocs/images/countries/cm.png b/lam/templates/3rdParty/pla/htdocs/images/countries/cm.png
new file mode 100644
index 00000000..febecadf
Binary files /dev/null and b/lam/templates/3rdParty/pla/htdocs/images/countries/cm.png differ
diff --git a/lam/templates/3rdParty/pla/htdocs/images/countries/cn.png b/lam/templates/3rdParty/pla/htdocs/images/countries/cn.png
new file mode 100644
index 00000000..f3f36da7
Binary files /dev/null and b/lam/templates/3rdParty/pla/htdocs/images/countries/cn.png differ
diff --git a/lam/templates/3rdParty/pla/htdocs/images/countries/co.png b/lam/templates/3rdParty/pla/htdocs/images/countries/co.png
new file mode 100644
index 00000000..2781663b
Binary files /dev/null and b/lam/templates/3rdParty/pla/htdocs/images/countries/co.png differ
diff --git a/lam/templates/3rdParty/pla/htdocs/images/countries/cr.png b/lam/templates/3rdParty/pla/htdocs/images/countries/cr.png
new file mode 100644
index 00000000..09bb72dc
Binary files /dev/null and b/lam/templates/3rdParty/pla/htdocs/images/countries/cr.png differ
diff --git a/lam/templates/3rdParty/pla/htdocs/images/countries/cu.png b/lam/templates/3rdParty/pla/htdocs/images/countries/cu.png
new file mode 100644
index 00000000..9be2138e
Binary files /dev/null and b/lam/templates/3rdParty/pla/htdocs/images/countries/cu.png differ
diff --git a/lam/templates/3rdParty/pla/htdocs/images/countries/cv.png b/lam/templates/3rdParty/pla/htdocs/images/countries/cv.png
new file mode 100644
index 00000000..6204e60b
Binary files /dev/null and b/lam/templates/3rdParty/pla/htdocs/images/countries/cv.png differ
diff --git a/lam/templates/3rdParty/pla/htdocs/images/countries/cy.png b/lam/templates/3rdParty/pla/htdocs/images/countries/cy.png
new file mode 100644
index 00000000..14b2deb7
Binary files /dev/null and b/lam/templates/3rdParty/pla/htdocs/images/countries/cy.png differ
diff --git a/lam/templates/3rdParty/pla/htdocs/images/countries/cz.png b/lam/templates/3rdParty/pla/htdocs/images/countries/cz.png
new file mode 100644
index 00000000..36313b47
Binary files /dev/null and b/lam/templates/3rdParty/pla/htdocs/images/countries/cz.png differ
diff --git a/lam/templates/3rdParty/pla/htdocs/images/countries/de.png b/lam/templates/3rdParty/pla/htdocs/images/countries/de.png
new file mode 100644
index 00000000..67e1bd53
Binary files /dev/null and b/lam/templates/3rdParty/pla/htdocs/images/countries/de.png differ
diff --git a/lam/templates/3rdParty/pla/htdocs/images/countries/dk.png b/lam/templates/3rdParty/pla/htdocs/images/countries/dk.png
new file mode 100644
index 00000000..9404cf0b
Binary files /dev/null and b/lam/templates/3rdParty/pla/htdocs/images/countries/dk.png differ
diff --git a/lam/templates/3rdParty/pla/htdocs/images/countries/dz.png b/lam/templates/3rdParty/pla/htdocs/images/countries/dz.png
new file mode 100644
index 00000000..26919b18
Binary files /dev/null and b/lam/templates/3rdParty/pla/htdocs/images/countries/dz.png differ
diff --git a/lam/templates/3rdParty/pla/htdocs/images/countries/ec.png b/lam/templates/3rdParty/pla/htdocs/images/countries/ec.png
new file mode 100644
index 00000000..961e5cdc
Binary files /dev/null and b/lam/templates/3rdParty/pla/htdocs/images/countries/ec.png differ
diff --git a/lam/templates/3rdParty/pla/htdocs/images/countries/ee.png b/lam/templates/3rdParty/pla/htdocs/images/countries/ee.png
new file mode 100644
index 00000000..e0a902ee
Binary files /dev/null and b/lam/templates/3rdParty/pla/htdocs/images/countries/ee.png differ
diff --git a/lam/templates/3rdParty/pla/htdocs/images/countries/eg.png b/lam/templates/3rdParty/pla/htdocs/images/countries/eg.png
new file mode 100644
index 00000000..f81b2769
Binary files /dev/null and b/lam/templates/3rdParty/pla/htdocs/images/countries/eg.png differ
diff --git a/lam/templates/3rdParty/pla/htdocs/images/countries/er.png b/lam/templates/3rdParty/pla/htdocs/images/countries/er.png
new file mode 100644
index 00000000..f96b315c
Binary files /dev/null and b/lam/templates/3rdParty/pla/htdocs/images/countries/er.png differ
diff --git a/lam/templates/3rdParty/pla/htdocs/images/countries/es.png b/lam/templates/3rdParty/pla/htdocs/images/countries/es.png
new file mode 100644
index 00000000..c85447dc
Binary files /dev/null and b/lam/templates/3rdParty/pla/htdocs/images/countries/es.png differ
diff --git a/lam/templates/3rdParty/pla/htdocs/images/countries/et.png b/lam/templates/3rdParty/pla/htdocs/images/countries/et.png
new file mode 100644
index 00000000..48ff7b13
Binary files /dev/null and b/lam/templates/3rdParty/pla/htdocs/images/countries/et.png differ
diff --git a/lam/templates/3rdParty/pla/htdocs/images/countries/fi.png b/lam/templates/3rdParty/pla/htdocs/images/countries/fi.png
new file mode 100644
index 00000000..d408743d
Binary files /dev/null and b/lam/templates/3rdParty/pla/htdocs/images/countries/fi.png differ
diff --git a/lam/templates/3rdParty/pla/htdocs/images/countries/fj.png b/lam/templates/3rdParty/pla/htdocs/images/countries/fj.png
new file mode 100644
index 00000000..6818444f
Binary files /dev/null and b/lam/templates/3rdParty/pla/htdocs/images/countries/fj.png differ
diff --git a/lam/templates/3rdParty/pla/htdocs/images/countries/fo.png b/lam/templates/3rdParty/pla/htdocs/images/countries/fo.png
new file mode 100644
index 00000000..1e123760
Binary files /dev/null and b/lam/templates/3rdParty/pla/htdocs/images/countries/fo.png differ
diff --git a/lam/templates/3rdParty/pla/htdocs/images/countries/fr.png b/lam/templates/3rdParty/pla/htdocs/images/countries/fr.png
new file mode 100644
index 00000000..39bed1ab
Binary files /dev/null and b/lam/templates/3rdParty/pla/htdocs/images/countries/fr.png differ
diff --git a/lam/templates/3rdParty/pla/htdocs/images/countries/ga.png b/lam/templates/3rdParty/pla/htdocs/images/countries/ga.png
new file mode 100644
index 00000000..8337ab9e
Binary files /dev/null and b/lam/templates/3rdParty/pla/htdocs/images/countries/ga.png differ
diff --git a/lam/templates/3rdParty/pla/htdocs/images/countries/gb.png b/lam/templates/3rdParty/pla/htdocs/images/countries/gb.png
new file mode 100644
index 00000000..30035dd8
Binary files /dev/null and b/lam/templates/3rdParty/pla/htdocs/images/countries/gb.png differ
diff --git a/lam/templates/3rdParty/pla/htdocs/images/countries/ge.png b/lam/templates/3rdParty/pla/htdocs/images/countries/ge.png
new file mode 100644
index 00000000..da1ab413
Binary files /dev/null and b/lam/templates/3rdParty/pla/htdocs/images/countries/ge.png differ
diff --git a/lam/templates/3rdParty/pla/htdocs/images/countries/gi.png b/lam/templates/3rdParty/pla/htdocs/images/countries/gi.png
new file mode 100644
index 00000000..afb539b3
Binary files /dev/null and b/lam/templates/3rdParty/pla/htdocs/images/countries/gi.png differ
diff --git a/lam/templates/3rdParty/pla/htdocs/images/countries/gl.png b/lam/templates/3rdParty/pla/htdocs/images/countries/gl.png
new file mode 100644
index 00000000..66cd000e
Binary files /dev/null and b/lam/templates/3rdParty/pla/htdocs/images/countries/gl.png differ
diff --git a/lam/templates/3rdParty/pla/htdocs/images/countries/gp.png b/lam/templates/3rdParty/pla/htdocs/images/countries/gp.png
new file mode 100644
index 00000000..e4a6159d
Binary files /dev/null and b/lam/templates/3rdParty/pla/htdocs/images/countries/gp.png differ
diff --git a/lam/templates/3rdParty/pla/htdocs/images/countries/gr.png b/lam/templates/3rdParty/pla/htdocs/images/countries/gr.png
new file mode 100644
index 00000000..1fb9d523
Binary files /dev/null and b/lam/templates/3rdParty/pla/htdocs/images/countries/gr.png differ
diff --git a/lam/templates/3rdParty/pla/htdocs/images/countries/gt.png b/lam/templates/3rdParty/pla/htdocs/images/countries/gt.png
new file mode 100644
index 00000000..7d63cb83
Binary files /dev/null and b/lam/templates/3rdParty/pla/htdocs/images/countries/gt.png differ
diff --git a/lam/templates/3rdParty/pla/htdocs/images/countries/gu.png b/lam/templates/3rdParty/pla/htdocs/images/countries/gu.png
new file mode 100644
index 00000000..42824383
Binary files /dev/null and b/lam/templates/3rdParty/pla/htdocs/images/countries/gu.png differ
diff --git a/lam/templates/3rdParty/pla/htdocs/images/countries/gy.png b/lam/templates/3rdParty/pla/htdocs/images/countries/gy.png
new file mode 100644
index 00000000..a5d0e8e5
Binary files /dev/null and b/lam/templates/3rdParty/pla/htdocs/images/countries/gy.png differ
diff --git a/lam/templates/3rdParty/pla/htdocs/images/countries/hk.png b/lam/templates/3rdParty/pla/htdocs/images/countries/hk.png
new file mode 100644
index 00000000..e5fa24f6
Binary files /dev/null and b/lam/templates/3rdParty/pla/htdocs/images/countries/hk.png differ
diff --git a/lam/templates/3rdParty/pla/htdocs/images/countries/hr.png b/lam/templates/3rdParty/pla/htdocs/images/countries/hr.png
new file mode 100644
index 00000000..fda73281
Binary files /dev/null and b/lam/templates/3rdParty/pla/htdocs/images/countries/hr.png differ
diff --git a/lam/templates/3rdParty/pla/htdocs/images/countries/ht.png b/lam/templates/3rdParty/pla/htdocs/images/countries/ht.png
new file mode 100644
index 00000000..d058c3bc
Binary files /dev/null and b/lam/templates/3rdParty/pla/htdocs/images/countries/ht.png differ
diff --git a/lam/templates/3rdParty/pla/htdocs/images/countries/hu.png b/lam/templates/3rdParty/pla/htdocs/images/countries/hu.png
new file mode 100644
index 00000000..dc4eef1c
Binary files /dev/null and b/lam/templates/3rdParty/pla/htdocs/images/countries/hu.png differ
diff --git a/lam/templates/3rdParty/pla/htdocs/images/countries/id.png b/lam/templates/3rdParty/pla/htdocs/images/countries/id.png
new file mode 100644
index 00000000..95e9ce39
Binary files /dev/null and b/lam/templates/3rdParty/pla/htdocs/images/countries/id.png differ
diff --git a/lam/templates/3rdParty/pla/htdocs/images/countries/ie.png b/lam/templates/3rdParty/pla/htdocs/images/countries/ie.png
new file mode 100644
index 00000000..1943e6b8
Binary files /dev/null and b/lam/templates/3rdParty/pla/htdocs/images/countries/ie.png differ
diff --git a/lam/templates/3rdParty/pla/htdocs/images/countries/il.png b/lam/templates/3rdParty/pla/htdocs/images/countries/il.png
new file mode 100644
index 00000000..a9161bbb
Binary files /dev/null and b/lam/templates/3rdParty/pla/htdocs/images/countries/il.png differ
diff --git a/lam/templates/3rdParty/pla/htdocs/images/countries/in.png b/lam/templates/3rdParty/pla/htdocs/images/countries/in.png
new file mode 100644
index 00000000..1e404ac2
Binary files /dev/null and b/lam/templates/3rdParty/pla/htdocs/images/countries/in.png differ
diff --git a/lam/templates/3rdParty/pla/htdocs/images/countries/iq.png b/lam/templates/3rdParty/pla/htdocs/images/countries/iq.png
new file mode 100644
index 00000000..1374301a
Binary files /dev/null and b/lam/templates/3rdParty/pla/htdocs/images/countries/iq.png differ
diff --git a/lam/templates/3rdParty/pla/htdocs/images/countries/ir.png b/lam/templates/3rdParty/pla/htdocs/images/countries/ir.png
new file mode 100644
index 00000000..a6f49031
Binary files /dev/null and b/lam/templates/3rdParty/pla/htdocs/images/countries/ir.png differ
diff --git a/lam/templates/3rdParty/pla/htdocs/images/countries/is.png b/lam/templates/3rdParty/pla/htdocs/images/countries/is.png
new file mode 100644
index 00000000..9ce98644
Binary files /dev/null and b/lam/templates/3rdParty/pla/htdocs/images/countries/is.png differ
diff --git a/lam/templates/3rdParty/pla/htdocs/images/countries/it.png b/lam/templates/3rdParty/pla/htdocs/images/countries/it.png
new file mode 100644
index 00000000..4a4ba953
Binary files /dev/null and b/lam/templates/3rdParty/pla/htdocs/images/countries/it.png differ
diff --git a/lam/templates/3rdParty/pla/htdocs/images/countries/jm.png b/lam/templates/3rdParty/pla/htdocs/images/countries/jm.png
new file mode 100644
index 00000000..42741192
Binary files /dev/null and b/lam/templates/3rdParty/pla/htdocs/images/countries/jm.png differ
diff --git a/lam/templates/3rdParty/pla/htdocs/images/countries/jo.png b/lam/templates/3rdParty/pla/htdocs/images/countries/jo.png
new file mode 100644
index 00000000..17e44819
Binary files /dev/null and b/lam/templates/3rdParty/pla/htdocs/images/countries/jo.png differ
diff --git a/lam/templates/3rdParty/pla/htdocs/images/countries/jp.png b/lam/templates/3rdParty/pla/htdocs/images/countries/jp.png
new file mode 100644
index 00000000..8b52fa89
Binary files /dev/null and b/lam/templates/3rdParty/pla/htdocs/images/countries/jp.png differ
diff --git a/lam/templates/3rdParty/pla/htdocs/images/countries/ke.png b/lam/templates/3rdParty/pla/htdocs/images/countries/ke.png
new file mode 100644
index 00000000..7bc38588
Binary files /dev/null and b/lam/templates/3rdParty/pla/htdocs/images/countries/ke.png differ
diff --git a/lam/templates/3rdParty/pla/htdocs/images/countries/kg.png b/lam/templates/3rdParty/pla/htdocs/images/countries/kg.png
new file mode 100644
index 00000000..b176e4f6
Binary files /dev/null and b/lam/templates/3rdParty/pla/htdocs/images/countries/kg.png differ
diff --git a/lam/templates/3rdParty/pla/htdocs/images/countries/kh.png b/lam/templates/3rdParty/pla/htdocs/images/countries/kh.png
new file mode 100644
index 00000000..9c941931
Binary files /dev/null and b/lam/templates/3rdParty/pla/htdocs/images/countries/kh.png differ
diff --git a/lam/templates/3rdParty/pla/htdocs/images/countries/ki.png b/lam/templates/3rdParty/pla/htdocs/images/countries/ki.png
new file mode 100644
index 00000000..fdc58fe8
Binary files /dev/null and b/lam/templates/3rdParty/pla/htdocs/images/countries/ki.png differ
diff --git a/lam/templates/3rdParty/pla/htdocs/images/countries/kp.png b/lam/templates/3rdParty/pla/htdocs/images/countries/kp.png
new file mode 100644
index 00000000..405332c8
Binary files /dev/null and b/lam/templates/3rdParty/pla/htdocs/images/countries/kp.png differ
diff --git a/lam/templates/3rdParty/pla/htdocs/images/countries/kr.png b/lam/templates/3rdParty/pla/htdocs/images/countries/kr.png
new file mode 100644
index 00000000..0df561a9
Binary files /dev/null and b/lam/templates/3rdParty/pla/htdocs/images/countries/kr.png differ
diff --git a/lam/templates/3rdParty/pla/htdocs/images/countries/ky.png b/lam/templates/3rdParty/pla/htdocs/images/countries/ky.png
new file mode 100644
index 00000000..ae2ba3e0
Binary files /dev/null and b/lam/templates/3rdParty/pla/htdocs/images/countries/ky.png differ
diff --git a/lam/templates/3rdParty/pla/htdocs/images/countries/kz.png b/lam/templates/3rdParty/pla/htdocs/images/countries/kz.png
new file mode 100644
index 00000000..eb7b9bef
Binary files /dev/null and b/lam/templates/3rdParty/pla/htdocs/images/countries/kz.png differ
diff --git a/lam/templates/3rdParty/pla/htdocs/images/countries/lb.png b/lam/templates/3rdParty/pla/htdocs/images/countries/lb.png
new file mode 100644
index 00000000..44f9e1bf
Binary files /dev/null and b/lam/templates/3rdParty/pla/htdocs/images/countries/lb.png differ
diff --git a/lam/templates/3rdParty/pla/htdocs/images/countries/lc.png b/lam/templates/3rdParty/pla/htdocs/images/countries/lc.png
new file mode 100644
index 00000000..6b0389ae
Binary files /dev/null and b/lam/templates/3rdParty/pla/htdocs/images/countries/lc.png differ
diff --git a/lam/templates/3rdParty/pla/htdocs/images/countries/lk.png b/lam/templates/3rdParty/pla/htdocs/images/countries/lk.png
new file mode 100644
index 00000000..2f2c48bc
Binary files /dev/null and b/lam/templates/3rdParty/pla/htdocs/images/countries/lk.png differ
diff --git a/lam/templates/3rdParty/pla/htdocs/images/countries/lt.png b/lam/templates/3rdParty/pla/htdocs/images/countries/lt.png
new file mode 100644
index 00000000..c6252cea
Binary files /dev/null and b/lam/templates/3rdParty/pla/htdocs/images/countries/lt.png differ
diff --git a/lam/templates/3rdParty/pla/htdocs/images/countries/lu.png b/lam/templates/3rdParty/pla/htdocs/images/countries/lu.png
new file mode 100644
index 00000000..6a80e6ed
Binary files /dev/null and b/lam/templates/3rdParty/pla/htdocs/images/countries/lu.png differ
diff --git a/lam/templates/3rdParty/pla/htdocs/images/countries/lv.png b/lam/templates/3rdParty/pla/htdocs/images/countries/lv.png
new file mode 100644
index 00000000..925ae281
Binary files /dev/null and b/lam/templates/3rdParty/pla/htdocs/images/countries/lv.png differ
diff --git a/lam/templates/3rdParty/pla/htdocs/images/countries/ly.png b/lam/templates/3rdParty/pla/htdocs/images/countries/ly.png
new file mode 100644
index 00000000..8741c4c7
Binary files /dev/null and b/lam/templates/3rdParty/pla/htdocs/images/countries/ly.png differ
diff --git a/lam/templates/3rdParty/pla/htdocs/images/countries/ma.png b/lam/templates/3rdParty/pla/htdocs/images/countries/ma.png
new file mode 100644
index 00000000..a5d9234e
Binary files /dev/null and b/lam/templates/3rdParty/pla/htdocs/images/countries/ma.png differ
diff --git a/lam/templates/3rdParty/pla/htdocs/images/countries/mc.png b/lam/templates/3rdParty/pla/htdocs/images/countries/mc.png
new file mode 100644
index 00000000..8dd6d290
Binary files /dev/null and b/lam/templates/3rdParty/pla/htdocs/images/countries/mc.png differ
diff --git a/lam/templates/3rdParty/pla/htdocs/images/countries/md.png b/lam/templates/3rdParty/pla/htdocs/images/countries/md.png
new file mode 100644
index 00000000..9d9d2780
Binary files /dev/null and b/lam/templates/3rdParty/pla/htdocs/images/countries/md.png differ
diff --git a/lam/templates/3rdParty/pla/htdocs/images/countries/mg.png b/lam/templates/3rdParty/pla/htdocs/images/countries/mg.png
new file mode 100644
index 00000000..e93f20e0
Binary files /dev/null and b/lam/templates/3rdParty/pla/htdocs/images/countries/mg.png differ
diff --git a/lam/templates/3rdParty/pla/htdocs/images/countries/mn.png b/lam/templates/3rdParty/pla/htdocs/images/countries/mn.png
new file mode 100644
index 00000000..9ce7bc90
Binary files /dev/null and b/lam/templates/3rdParty/pla/htdocs/images/countries/mn.png differ
diff --git a/lam/templates/3rdParty/pla/htdocs/images/countries/mo.png b/lam/templates/3rdParty/pla/htdocs/images/countries/mo.png
new file mode 100644
index 00000000..21497e92
Binary files /dev/null and b/lam/templates/3rdParty/pla/htdocs/images/countries/mo.png differ
diff --git a/lam/templates/3rdParty/pla/htdocs/images/countries/mp.png b/lam/templates/3rdParty/pla/htdocs/images/countries/mp.png
new file mode 100644
index 00000000..9523df6e
Binary files /dev/null and b/lam/templates/3rdParty/pla/htdocs/images/countries/mp.png differ
diff --git a/lam/templates/3rdParty/pla/htdocs/images/countries/ms.png b/lam/templates/3rdParty/pla/htdocs/images/countries/ms.png
new file mode 100644
index 00000000..f92b84d5
Binary files /dev/null and b/lam/templates/3rdParty/pla/htdocs/images/countries/ms.png differ
diff --git a/lam/templates/3rdParty/pla/htdocs/images/countries/mt.png b/lam/templates/3rdParty/pla/htdocs/images/countries/mt.png
new file mode 100644
index 00000000..7f35e820
Binary files /dev/null and b/lam/templates/3rdParty/pla/htdocs/images/countries/mt.png differ
diff --git a/lam/templates/3rdParty/pla/htdocs/images/countries/mx.png b/lam/templates/3rdParty/pla/htdocs/images/countries/mx.png
new file mode 100644
index 00000000..5d481f06
Binary files /dev/null and b/lam/templates/3rdParty/pla/htdocs/images/countries/mx.png differ
diff --git a/lam/templates/3rdParty/pla/htdocs/images/countries/my.png b/lam/templates/3rdParty/pla/htdocs/images/countries/my.png
new file mode 100644
index 00000000..9fa6f816
Binary files /dev/null and b/lam/templates/3rdParty/pla/htdocs/images/countries/my.png differ
diff --git a/lam/templates/3rdParty/pla/htdocs/images/countries/mz.png b/lam/templates/3rdParty/pla/htdocs/images/countries/mz.png
new file mode 100644
index 00000000..5e6e87b4
Binary files /dev/null and b/lam/templates/3rdParty/pla/htdocs/images/countries/mz.png differ
diff --git a/lam/templates/3rdParty/pla/htdocs/images/countries/na.png b/lam/templates/3rdParty/pla/htdocs/images/countries/na.png
new file mode 100644
index 00000000..83d63cfc
Binary files /dev/null and b/lam/templates/3rdParty/pla/htdocs/images/countries/na.png differ
diff --git a/lam/templates/3rdParty/pla/htdocs/images/countries/nc.png b/lam/templates/3rdParty/pla/htdocs/images/countries/nc.png
new file mode 100644
index 00000000..32eb1906
Binary files /dev/null and b/lam/templates/3rdParty/pla/htdocs/images/countries/nc.png differ
diff --git a/lam/templates/3rdParty/pla/htdocs/images/countries/nf.png b/lam/templates/3rdParty/pla/htdocs/images/countries/nf.png
new file mode 100644
index 00000000..efdc438f
Binary files /dev/null and b/lam/templates/3rdParty/pla/htdocs/images/countries/nf.png differ
diff --git a/lam/templates/3rdParty/pla/htdocs/images/countries/nl.png b/lam/templates/3rdParty/pla/htdocs/images/countries/nl.png
new file mode 100644
index 00000000..99b5e139
Binary files /dev/null and b/lam/templates/3rdParty/pla/htdocs/images/countries/nl.png differ
diff --git a/lam/templates/3rdParty/pla/htdocs/images/countries/no.png b/lam/templates/3rdParty/pla/htdocs/images/countries/no.png
new file mode 100644
index 00000000..0199b306
Binary files /dev/null and b/lam/templates/3rdParty/pla/htdocs/images/countries/no.png differ
diff --git a/lam/templates/3rdParty/pla/htdocs/images/countries/np.png b/lam/templates/3rdParty/pla/htdocs/images/countries/np.png
new file mode 100644
index 00000000..254744a2
Binary files /dev/null and b/lam/templates/3rdParty/pla/htdocs/images/countries/np.png differ
diff --git a/lam/templates/3rdParty/pla/htdocs/images/countries/nr.png b/lam/templates/3rdParty/pla/htdocs/images/countries/nr.png
new file mode 100644
index 00000000..7f452297
Binary files /dev/null and b/lam/templates/3rdParty/pla/htdocs/images/countries/nr.png differ
diff --git a/lam/templates/3rdParty/pla/htdocs/images/countries/nz.png b/lam/templates/3rdParty/pla/htdocs/images/countries/nz.png
new file mode 100644
index 00000000..841bb973
Binary files /dev/null and b/lam/templates/3rdParty/pla/htdocs/images/countries/nz.png differ
diff --git a/lam/templates/3rdParty/pla/htdocs/images/countries/om.png b/lam/templates/3rdParty/pla/htdocs/images/countries/om.png
new file mode 100644
index 00000000..ad114e31
Binary files /dev/null and b/lam/templates/3rdParty/pla/htdocs/images/countries/om.png differ
diff --git a/lam/templates/3rdParty/pla/htdocs/images/countries/pa.png b/lam/templates/3rdParty/pla/htdocs/images/countries/pa.png
new file mode 100644
index 00000000..26d5b1a0
Binary files /dev/null and b/lam/templates/3rdParty/pla/htdocs/images/countries/pa.png differ
diff --git a/lam/templates/3rdParty/pla/htdocs/images/countries/pe.png b/lam/templates/3rdParty/pla/htdocs/images/countries/pe.png
new file mode 100644
index 00000000..41794a01
Binary files /dev/null and b/lam/templates/3rdParty/pla/htdocs/images/countries/pe.png differ
diff --git a/lam/templates/3rdParty/pla/htdocs/images/countries/pf.png b/lam/templates/3rdParty/pla/htdocs/images/countries/pf.png
new file mode 100644
index 00000000..cf744fae
Binary files /dev/null and b/lam/templates/3rdParty/pla/htdocs/images/countries/pf.png differ
diff --git a/lam/templates/3rdParty/pla/htdocs/images/countries/ph.png b/lam/templates/3rdParty/pla/htdocs/images/countries/ph.png
new file mode 100644
index 00000000..24007ab8
Binary files /dev/null and b/lam/templates/3rdParty/pla/htdocs/images/countries/ph.png differ
diff --git a/lam/templates/3rdParty/pla/htdocs/images/countries/pk.png b/lam/templates/3rdParty/pla/htdocs/images/countries/pk.png
new file mode 100644
index 00000000..ff220ee2
Binary files /dev/null and b/lam/templates/3rdParty/pla/htdocs/images/countries/pk.png differ
diff --git a/lam/templates/3rdParty/pla/htdocs/images/countries/pl.png b/lam/templates/3rdParty/pla/htdocs/images/countries/pl.png
new file mode 100644
index 00000000..e275d902
Binary files /dev/null and b/lam/templates/3rdParty/pla/htdocs/images/countries/pl.png differ
diff --git a/lam/templates/3rdParty/pla/htdocs/images/countries/pm.png b/lam/templates/3rdParty/pla/htdocs/images/countries/pm.png
new file mode 100644
index 00000000..6f9bf907
Binary files /dev/null and b/lam/templates/3rdParty/pla/htdocs/images/countries/pm.png differ
diff --git a/lam/templates/3rdParty/pla/htdocs/images/countries/pr.png b/lam/templates/3rdParty/pla/htdocs/images/countries/pr.png
new file mode 100644
index 00000000..0671638e
Binary files /dev/null and b/lam/templates/3rdParty/pla/htdocs/images/countries/pr.png differ
diff --git a/lam/templates/3rdParty/pla/htdocs/images/countries/pt.png b/lam/templates/3rdParty/pla/htdocs/images/countries/pt.png
new file mode 100644
index 00000000..8d32759e
Binary files /dev/null and b/lam/templates/3rdParty/pla/htdocs/images/countries/pt.png differ
diff --git a/lam/templates/3rdParty/pla/htdocs/images/countries/py.png b/lam/templates/3rdParty/pla/htdocs/images/countries/py.png
new file mode 100644
index 00000000..bac89487
Binary files /dev/null and b/lam/templates/3rdParty/pla/htdocs/images/countries/py.png differ
diff --git a/lam/templates/3rdParty/pla/htdocs/images/countries/qa.png b/lam/templates/3rdParty/pla/htdocs/images/countries/qa.png
new file mode 100644
index 00000000..6cf12f14
Binary files /dev/null and b/lam/templates/3rdParty/pla/htdocs/images/countries/qa.png differ
diff --git a/lam/templates/3rdParty/pla/htdocs/images/countries/ro.png b/lam/templates/3rdParty/pla/htdocs/images/countries/ro.png
new file mode 100644
index 00000000..8d36c045
Binary files /dev/null and b/lam/templates/3rdParty/pla/htdocs/images/countries/ro.png differ
diff --git a/lam/templates/3rdParty/pla/htdocs/images/countries/ru.png b/lam/templates/3rdParty/pla/htdocs/images/countries/ru.png
new file mode 100644
index 00000000..2b7093c1
Binary files /dev/null and b/lam/templates/3rdParty/pla/htdocs/images/countries/ru.png differ
diff --git a/lam/templates/3rdParty/pla/htdocs/images/countries/sa.png b/lam/templates/3rdParty/pla/htdocs/images/countries/sa.png
new file mode 100644
index 00000000..f7982cc0
Binary files /dev/null and b/lam/templates/3rdParty/pla/htdocs/images/countries/sa.png differ
diff --git a/lam/templates/3rdParty/pla/htdocs/images/countries/sb.png b/lam/templates/3rdParty/pla/htdocs/images/countries/sb.png
new file mode 100644
index 00000000..37f5c89a
Binary files /dev/null and b/lam/templates/3rdParty/pla/htdocs/images/countries/sb.png differ
diff --git a/lam/templates/3rdParty/pla/htdocs/images/countries/sd.png b/lam/templates/3rdParty/pla/htdocs/images/countries/sd.png
new file mode 100644
index 00000000..32398df2
Binary files /dev/null and b/lam/templates/3rdParty/pla/htdocs/images/countries/sd.png differ
diff --git a/lam/templates/3rdParty/pla/htdocs/images/countries/se.png b/lam/templates/3rdParty/pla/htdocs/images/countries/se.png
new file mode 100644
index 00000000..df1775d3
Binary files /dev/null and b/lam/templates/3rdParty/pla/htdocs/images/countries/se.png differ
diff --git a/lam/templates/3rdParty/pla/htdocs/images/countries/sg.png b/lam/templates/3rdParty/pla/htdocs/images/countries/sg.png
new file mode 100644
index 00000000..51dc5a83
Binary files /dev/null and b/lam/templates/3rdParty/pla/htdocs/images/countries/sg.png differ
diff --git a/lam/templates/3rdParty/pla/htdocs/images/countries/si.png b/lam/templates/3rdParty/pla/htdocs/images/countries/si.png
new file mode 100644
index 00000000..e8f87430
Binary files /dev/null and b/lam/templates/3rdParty/pla/htdocs/images/countries/si.png differ
diff --git a/lam/templates/3rdParty/pla/htdocs/images/countries/sk.png b/lam/templates/3rdParty/pla/htdocs/images/countries/sk.png
new file mode 100644
index 00000000..d6052718
Binary files /dev/null and b/lam/templates/3rdParty/pla/htdocs/images/countries/sk.png differ
diff --git a/lam/templates/3rdParty/pla/htdocs/images/countries/sl.png b/lam/templates/3rdParty/pla/htdocs/images/countries/sl.png
new file mode 100644
index 00000000..beafb9ff
Binary files /dev/null and b/lam/templates/3rdParty/pla/htdocs/images/countries/sl.png differ
diff --git a/lam/templates/3rdParty/pla/htdocs/images/countries/so.png b/lam/templates/3rdParty/pla/htdocs/images/countries/so.png
new file mode 100644
index 00000000..d0875126
Binary files /dev/null and b/lam/templates/3rdParty/pla/htdocs/images/countries/so.png differ
diff --git a/lam/templates/3rdParty/pla/htdocs/images/countries/sr.png b/lam/templates/3rdParty/pla/htdocs/images/countries/sr.png
new file mode 100644
index 00000000..e06354f7
Binary files /dev/null and b/lam/templates/3rdParty/pla/htdocs/images/countries/sr.png differ
diff --git a/lam/templates/3rdParty/pla/htdocs/images/countries/sy.png b/lam/templates/3rdParty/pla/htdocs/images/countries/sy.png
new file mode 100644
index 00000000..be08e92c
Binary files /dev/null and b/lam/templates/3rdParty/pla/htdocs/images/countries/sy.png differ
diff --git a/lam/templates/3rdParty/pla/htdocs/images/countries/tc.png b/lam/templates/3rdParty/pla/htdocs/images/countries/tc.png
new file mode 100644
index 00000000..e24e1ff8
Binary files /dev/null and b/lam/templates/3rdParty/pla/htdocs/images/countries/tc.png differ
diff --git a/lam/templates/3rdParty/pla/htdocs/images/countries/tg.png b/lam/templates/3rdParty/pla/htdocs/images/countries/tg.png
new file mode 100644
index 00000000..74ed93c6
Binary files /dev/null and b/lam/templates/3rdParty/pla/htdocs/images/countries/tg.png differ
diff --git a/lam/templates/3rdParty/pla/htdocs/images/countries/th.png b/lam/templates/3rdParty/pla/htdocs/images/countries/th.png
new file mode 100644
index 00000000..5e15d0e2
Binary files /dev/null and b/lam/templates/3rdParty/pla/htdocs/images/countries/th.png differ
diff --git a/lam/templates/3rdParty/pla/htdocs/images/countries/tn.png b/lam/templates/3rdParty/pla/htdocs/images/countries/tn.png
new file mode 100644
index 00000000..f05f1342
Binary files /dev/null and b/lam/templates/3rdParty/pla/htdocs/images/countries/tn.png differ
diff --git a/lam/templates/3rdParty/pla/htdocs/images/countries/to.png b/lam/templates/3rdParty/pla/htdocs/images/countries/to.png
new file mode 100644
index 00000000..b53e46f1
Binary files /dev/null and b/lam/templates/3rdParty/pla/htdocs/images/countries/to.png differ
diff --git a/lam/templates/3rdParty/pla/htdocs/images/countries/tp.png b/lam/templates/3rdParty/pla/htdocs/images/countries/tp.png
new file mode 100644
index 00000000..f8b4dca6
Binary files /dev/null and b/lam/templates/3rdParty/pla/htdocs/images/countries/tp.png differ
diff --git a/lam/templates/3rdParty/pla/htdocs/images/countries/tr.png b/lam/templates/3rdParty/pla/htdocs/images/countries/tr.png
new file mode 100644
index 00000000..0ecd06c9
Binary files /dev/null and b/lam/templates/3rdParty/pla/htdocs/images/countries/tr.png differ
diff --git a/lam/templates/3rdParty/pla/htdocs/images/countries/tt.png b/lam/templates/3rdParty/pla/htdocs/images/countries/tt.png
new file mode 100644
index 00000000..927700c0
Binary files /dev/null and b/lam/templates/3rdParty/pla/htdocs/images/countries/tt.png differ
diff --git a/lam/templates/3rdParty/pla/htdocs/images/countries/tv.png b/lam/templates/3rdParty/pla/htdocs/images/countries/tv.png
new file mode 100644
index 00000000..433deecc
Binary files /dev/null and b/lam/templates/3rdParty/pla/htdocs/images/countries/tv.png differ
diff --git a/lam/templates/3rdParty/pla/htdocs/images/countries/tw.png b/lam/templates/3rdParty/pla/htdocs/images/countries/tw.png
new file mode 100644
index 00000000..2e82e66c
Binary files /dev/null and b/lam/templates/3rdParty/pla/htdocs/images/countries/tw.png differ
diff --git a/lam/templates/3rdParty/pla/htdocs/images/countries/tz.png b/lam/templates/3rdParty/pla/htdocs/images/countries/tz.png
new file mode 100644
index 00000000..c6683356
Binary files /dev/null and b/lam/templates/3rdParty/pla/htdocs/images/countries/tz.png differ
diff --git a/lam/templates/3rdParty/pla/htdocs/images/countries/ua.png b/lam/templates/3rdParty/pla/htdocs/images/countries/ua.png
new file mode 100644
index 00000000..db85d97e
Binary files /dev/null and b/lam/templates/3rdParty/pla/htdocs/images/countries/ua.png differ
diff --git a/lam/templates/3rdParty/pla/htdocs/images/countries/ug.png b/lam/templates/3rdParty/pla/htdocs/images/countries/ug.png
new file mode 100644
index 00000000..5c87b921
Binary files /dev/null and b/lam/templates/3rdParty/pla/htdocs/images/countries/ug.png differ
diff --git a/lam/templates/3rdParty/pla/htdocs/images/countries/us.png b/lam/templates/3rdParty/pla/htdocs/images/countries/us.png
new file mode 100644
index 00000000..652cb3ec
Binary files /dev/null and b/lam/templates/3rdParty/pla/htdocs/images/countries/us.png differ
diff --git a/lam/templates/3rdParty/pla/htdocs/images/countries/uy.png b/lam/templates/3rdParty/pla/htdocs/images/countries/uy.png
new file mode 100644
index 00000000..aec19793
Binary files /dev/null and b/lam/templates/3rdParty/pla/htdocs/images/countries/uy.png differ
diff --git a/lam/templates/3rdParty/pla/htdocs/images/countries/va.png b/lam/templates/3rdParty/pla/htdocs/images/countries/va.png
new file mode 100644
index 00000000..0fc5b5fe
Binary files /dev/null and b/lam/templates/3rdParty/pla/htdocs/images/countries/va.png differ
diff --git a/lam/templates/3rdParty/pla/htdocs/images/countries/ve.png b/lam/templates/3rdParty/pla/htdocs/images/countries/ve.png
new file mode 100644
index 00000000..0a90e473
Binary files /dev/null and b/lam/templates/3rdParty/pla/htdocs/images/countries/ve.png differ
diff --git a/lam/templates/3rdParty/pla/htdocs/images/countries/vg.png b/lam/templates/3rdParty/pla/htdocs/images/countries/vg.png
new file mode 100644
index 00000000..1ff7ca11
Binary files /dev/null and b/lam/templates/3rdParty/pla/htdocs/images/countries/vg.png differ
diff --git a/lam/templates/3rdParty/pla/htdocs/images/countries/vi.png b/lam/templates/3rdParty/pla/htdocs/images/countries/vi.png
new file mode 100644
index 00000000..c7e85728
Binary files /dev/null and b/lam/templates/3rdParty/pla/htdocs/images/countries/vi.png differ
diff --git a/lam/templates/3rdParty/pla/htdocs/images/countries/vn.png b/lam/templates/3rdParty/pla/htdocs/images/countries/vn.png
new file mode 100644
index 00000000..31af3d54
Binary files /dev/null and b/lam/templates/3rdParty/pla/htdocs/images/countries/vn.png differ
diff --git a/lam/templates/3rdParty/pla/htdocs/images/countries/ws.png b/lam/templates/3rdParty/pla/htdocs/images/countries/ws.png
new file mode 100644
index 00000000..654b8420
Binary files /dev/null and b/lam/templates/3rdParty/pla/htdocs/images/countries/ws.png differ
diff --git a/lam/templates/3rdParty/pla/htdocs/images/countries/ye.png b/lam/templates/3rdParty/pla/htdocs/images/countries/ye.png
new file mode 100644
index 00000000..4c547ccc
Binary files /dev/null and b/lam/templates/3rdParty/pla/htdocs/images/countries/ye.png differ
diff --git a/lam/templates/3rdParty/pla/htdocs/images/countries/yu.png b/lam/templates/3rdParty/pla/htdocs/images/countries/yu.png
new file mode 100644
index 00000000..9947f62d
Binary files /dev/null and b/lam/templates/3rdParty/pla/htdocs/images/countries/yu.png differ
diff --git a/lam/templates/3rdParty/pla/htdocs/images/countries/za.png b/lam/templates/3rdParty/pla/htdocs/images/countries/za.png
new file mode 100644
index 00000000..f9745fa7
Binary files /dev/null and b/lam/templates/3rdParty/pla/htdocs/images/countries/za.png differ
diff --git a/lam/templates/3rdParty/pla/htdocs/images/countries/zw.png b/lam/templates/3rdParty/pla/htdocs/images/countries/zw.png
new file mode 100644
index 00000000..7e69c9e7
Binary files /dev/null and b/lam/templates/3rdParty/pla/htdocs/images/countries/zw.png differ
diff --git a/lam/templates/3rdParty/pla/htdocs/images/default/add.png b/lam/templates/3rdParty/pla/htdocs/images/default/add.png
new file mode 100644
index 00000000..fe07994c
Binary files /dev/null and b/lam/templates/3rdParty/pla/htdocs/images/default/add.png differ
diff --git a/lam/templates/3rdParty/pla/htdocs/images/default/address-book.png b/lam/templates/3rdParty/pla/htdocs/images/default/address-book.png
new file mode 100644
index 00000000..907d939a
Binary files /dev/null and b/lam/templates/3rdParty/pla/htdocs/images/default/address-book.png differ
diff --git a/lam/templates/3rdParty/pla/htdocs/images/default/calendar.png b/lam/templates/3rdParty/pla/htdocs/images/default/calendar.png
new file mode 100644
index 00000000..c3cdf73c
Binary files /dev/null and b/lam/templates/3rdParty/pla/htdocs/images/default/calendar.png differ
diff --git a/lam/templates/3rdParty/pla/htdocs/images/default/catalog.png b/lam/templates/3rdParty/pla/htdocs/images/default/catalog.png
new file mode 100644
index 00000000..907d939a
Binary files /dev/null and b/lam/templates/3rdParty/pla/htdocs/images/default/catalog.png differ
diff --git a/lam/templates/3rdParty/pla/htdocs/images/default/children.png b/lam/templates/3rdParty/pla/htdocs/images/default/children.png
new file mode 100644
index 00000000..6fdc8842
Binary files /dev/null and b/lam/templates/3rdParty/pla/htdocs/images/default/children.png differ
diff --git a/lam/templates/3rdParty/pla/htdocs/images/default/compare.png b/lam/templates/3rdParty/pla/htdocs/images/default/compare.png
new file mode 100644
index 00000000..7d199fcd
Binary files /dev/null and b/lam/templates/3rdParty/pla/htdocs/images/default/compare.png differ
diff --git a/lam/templates/3rdParty/pla/htdocs/images/default/country.png b/lam/templates/3rdParty/pla/htdocs/images/default/country.png
new file mode 100644
index 00000000..7640da3a
Binary files /dev/null and b/lam/templates/3rdParty/pla/htdocs/images/default/country.png differ
diff --git a/lam/templates/3rdParty/pla/htdocs/images/default/create.png b/lam/templates/3rdParty/pla/htdocs/images/default/create.png
new file mode 100644
index 00000000..458c7304
Binary files /dev/null and b/lam/templates/3rdParty/pla/htdocs/images/default/create.png differ
diff --git a/lam/templates/3rdParty/pla/htdocs/images/default/cut.png b/lam/templates/3rdParty/pla/htdocs/images/default/cut.png
new file mode 100644
index 00000000..3c21b9bd
Binary files /dev/null and b/lam/templates/3rdParty/pla/htdocs/images/default/cut.png differ
diff --git a/lam/templates/3rdParty/pla/htdocs/images/default/delete.gif b/lam/templates/3rdParty/pla/htdocs/images/default/delete.gif
new file mode 100644
index 00000000..82128aa4
Binary files /dev/null and b/lam/templates/3rdParty/pla/htdocs/images/default/delete.gif differ
diff --git a/lam/templates/3rdParty/pla/htdocs/images/default/device.png b/lam/templates/3rdParty/pla/htdocs/images/default/device.png
new file mode 100644
index 00000000..eb153a33
Binary files /dev/null and b/lam/templates/3rdParty/pla/htdocs/images/default/device.png differ
diff --git a/lam/templates/3rdParty/pla/htdocs/images/default/disabled.png b/lam/templates/3rdParty/pla/htdocs/images/default/disabled.png
new file mode 100644
index 00000000..1c427c04
Binary files /dev/null and b/lam/templates/3rdParty/pla/htdocs/images/default/disabled.png differ
diff --git a/lam/templates/3rdParty/pla/htdocs/images/default/document.png b/lam/templates/3rdParty/pla/htdocs/images/default/document.png
new file mode 100644
index 00000000..62ea2ee5
Binary files /dev/null and b/lam/templates/3rdParty/pla/htdocs/images/default/document.png differ
diff --git a/lam/templates/3rdParty/pla/htdocs/images/default/door.png b/lam/templates/3rdParty/pla/htdocs/images/default/door.png
new file mode 100644
index 00000000..67209657
Binary files /dev/null and b/lam/templates/3rdParty/pla/htdocs/images/default/door.png differ
diff --git a/lam/templates/3rdParty/pla/htdocs/images/default/error-big.png b/lam/templates/3rdParty/pla/htdocs/images/default/error-big.png
new file mode 100644
index 00000000..0539ce83
Binary files /dev/null and b/lam/templates/3rdParty/pla/htdocs/images/default/error-big.png differ
diff --git a/lam/templates/3rdParty/pla/htdocs/images/default/error.png b/lam/templates/3rdParty/pla/htdocs/images/default/error.png
new file mode 100644
index 00000000..a7cdbc71
Binary files /dev/null and b/lam/templates/3rdParty/pla/htdocs/images/default/error.png differ
diff --git a/lam/templates/3rdParty/pla/htdocs/images/default/export-big.png b/lam/templates/3rdParty/pla/htdocs/images/default/export-big.png
new file mode 100644
index 00000000..41b3f436
Binary files /dev/null and b/lam/templates/3rdParty/pla/htdocs/images/default/export-big.png differ
diff --git a/lam/templates/3rdParty/pla/htdocs/images/default/export.png b/lam/templates/3rdParty/pla/htdocs/images/default/export.png
new file mode 100644
index 00000000..41b3f436
Binary files /dev/null and b/lam/templates/3rdParty/pla/htdocs/images/default/export.png differ
diff --git a/lam/templates/3rdParty/pla/htdocs/images/default/files.png b/lam/templates/3rdParty/pla/htdocs/images/default/files.png
new file mode 100644
index 00000000..ccb1d321
Binary files /dev/null and b/lam/templates/3rdParty/pla/htdocs/images/default/files.png differ
diff --git a/lam/templates/3rdParty/pla/htdocs/images/default/find.png b/lam/templates/3rdParty/pla/htdocs/images/default/find.png
new file mode 100644
index 00000000..ed5c07eb
Binary files /dev/null and b/lam/templates/3rdParty/pla/htdocs/images/default/find.png differ
diff --git a/lam/templates/3rdParty/pla/htdocs/images/default/folder.png b/lam/templates/3rdParty/pla/htdocs/images/default/folder.png
new file mode 100644
index 00000000..cce6d342
Binary files /dev/null and b/lam/templates/3rdParty/pla/htdocs/images/default/folder.png differ
diff --git a/lam/templates/3rdParty/pla/htdocs/images/default/forum-big.png b/lam/templates/3rdParty/pla/htdocs/images/default/forum-big.png
new file mode 100644
index 00000000..674a8e92
Binary files /dev/null and b/lam/templates/3rdParty/pla/htdocs/images/default/forum-big.png differ
diff --git a/lam/templates/3rdParty/pla/htdocs/images/default/hard-drive.png b/lam/templates/3rdParty/pla/htdocs/images/default/hard-drive.png
new file mode 100644
index 00000000..f3da3d2c
Binary files /dev/null and b/lam/templates/3rdParty/pla/htdocs/images/default/hard-drive.png differ
diff --git a/lam/templates/3rdParty/pla/htdocs/images/default/help-big.png b/lam/templates/3rdParty/pla/htdocs/images/default/help-big.png
new file mode 100644
index 00000000..bbda895a
Binary files /dev/null and b/lam/templates/3rdParty/pla/htdocs/images/default/help-big.png differ
diff --git a/lam/templates/3rdParty/pla/htdocs/images/default/help.png b/lam/templates/3rdParty/pla/htdocs/images/default/help.png
new file mode 100644
index 00000000..674a8e92
Binary files /dev/null and b/lam/templates/3rdParty/pla/htdocs/images/default/help.png differ
diff --git a/lam/templates/3rdParty/pla/htdocs/images/default/home-big.png b/lam/templates/3rdParty/pla/htdocs/images/default/home-big.png
new file mode 100644
index 00000000..d40900d9
Binary files /dev/null and b/lam/templates/3rdParty/pla/htdocs/images/default/home-big.png differ
diff --git a/lam/templates/3rdParty/pla/htdocs/images/default/home.png b/lam/templates/3rdParty/pla/htdocs/images/default/home.png
new file mode 100644
index 00000000..aa6a5c82
Binary files /dev/null and b/lam/templates/3rdParty/pla/htdocs/images/default/home.png differ
diff --git a/lam/templates/3rdParty/pla/htdocs/images/default/host.png b/lam/templates/3rdParty/pla/htdocs/images/default/host.png
new file mode 100644
index 00000000..87426e70
Binary files /dev/null and b/lam/templates/3rdParty/pla/htdocs/images/default/host.png differ
diff --git a/lam/templates/3rdParty/pla/htdocs/images/default/import-big.png b/lam/templates/3rdParty/pla/htdocs/images/default/import-big.png
new file mode 100644
index 00000000..36e35b7d
Binary files /dev/null and b/lam/templates/3rdParty/pla/htdocs/images/default/import-big.png differ
diff --git a/lam/templates/3rdParty/pla/htdocs/images/default/info-big.png b/lam/templates/3rdParty/pla/htdocs/images/default/info-big.png
new file mode 100644
index 00000000..5a2cd965
Binary files /dev/null and b/lam/templates/3rdParty/pla/htdocs/images/default/info-big.png differ
diff --git a/lam/templates/3rdParty/pla/htdocs/images/default/invalid.png b/lam/templates/3rdParty/pla/htdocs/images/default/invalid.png
new file mode 100644
index 00000000..1c427c04
Binary files /dev/null and b/lam/templates/3rdParty/pla/htdocs/images/default/invalid.png differ
diff --git a/lam/templates/3rdParty/pla/htdocs/images/default/key.png b/lam/templates/3rdParty/pla/htdocs/images/default/key.png
new file mode 100644
index 00000000..2ecb08d7
Binary files /dev/null and b/lam/templates/3rdParty/pla/htdocs/images/default/key.png differ
diff --git a/lam/templates/3rdParty/pla/htdocs/images/default/ldap-alias.png b/lam/templates/3rdParty/pla/htdocs/images/default/ldap-alias.png
new file mode 100644
index 00000000..78dfcf83
Binary files /dev/null and b/lam/templates/3rdParty/pla/htdocs/images/default/ldap-alias.png differ
diff --git a/lam/templates/3rdParty/pla/htdocs/images/default/ldap-dc.png b/lam/templates/3rdParty/pla/htdocs/images/default/ldap-dc.png
new file mode 100644
index 00000000..2769a479
Binary files /dev/null and b/lam/templates/3rdParty/pla/htdocs/images/default/ldap-dc.png differ
diff --git a/lam/templates/3rdParty/pla/htdocs/images/default/ldap-default.png b/lam/templates/3rdParty/pla/htdocs/images/default/ldap-default.png
new file mode 100644
index 00000000..a77ff35c
Binary files /dev/null and b/lam/templates/3rdParty/pla/htdocs/images/default/ldap-default.png differ
diff --git a/lam/templates/3rdParty/pla/htdocs/images/default/ldap-o.png b/lam/templates/3rdParty/pla/htdocs/images/default/ldap-o.png
new file mode 100644
index 00000000..5acff48d
Binary files /dev/null and b/lam/templates/3rdParty/pla/htdocs/images/default/ldap-o.png differ
diff --git a/lam/templates/3rdParty/pla/htdocs/images/default/ldap-ou.png b/lam/templates/3rdParty/pla/htdocs/images/default/ldap-ou.png
new file mode 100644
index 00000000..3e767c7c
Binary files /dev/null and b/lam/templates/3rdParty/pla/htdocs/images/default/ldap-ou.png differ
diff --git a/lam/templates/3rdParty/pla/htdocs/images/default/ldap-server.png b/lam/templates/3rdParty/pla/htdocs/images/default/ldap-server.png
new file mode 100644
index 00000000..d40900d9
Binary files /dev/null and b/lam/templates/3rdParty/pla/htdocs/images/default/ldap-server.png differ
diff --git a/lam/templates/3rdParty/pla/htdocs/images/default/ldap-uid.png b/lam/templates/3rdParty/pla/htdocs/images/default/ldap-uid.png
new file mode 100644
index 00000000..7be48fb8
Binary files /dev/null and b/lam/templates/3rdParty/pla/htdocs/images/default/ldap-uid.png differ
diff --git a/lam/templates/3rdParty/pla/htdocs/images/default/ldap-uniquegroup.png b/lam/templates/3rdParty/pla/htdocs/images/default/ldap-uniquegroup.png
new file mode 100644
index 00000000..c86d4a13
Binary files /dev/null and b/lam/templates/3rdParty/pla/htdocs/images/default/ldap-uniquegroup.png differ
diff --git a/lam/templates/3rdParty/pla/htdocs/images/default/ldap-user.png b/lam/templates/3rdParty/pla/htdocs/images/default/ldap-user.png
new file mode 100644
index 00000000..647e4297
Binary files /dev/null and b/lam/templates/3rdParty/pla/htdocs/images/default/ldap-user.png differ
diff --git a/lam/templates/3rdParty/pla/htdocs/images/default/light-big.png b/lam/templates/3rdParty/pla/htdocs/images/default/light-big.png
new file mode 100644
index 00000000..d22f5e95
Binary files /dev/null and b/lam/templates/3rdParty/pla/htdocs/images/default/light-big.png differ
diff --git a/lam/templates/3rdParty/pla/htdocs/images/default/light.png b/lam/templates/3rdParty/pla/htdocs/images/default/light.png
new file mode 100644
index 00000000..88598999
Binary files /dev/null and b/lam/templates/3rdParty/pla/htdocs/images/default/light.png differ
diff --git a/lam/templates/3rdParty/pla/htdocs/images/default/locality.png b/lam/templates/3rdParty/pla/htdocs/images/default/locality.png
new file mode 100644
index 00000000..c80540b0
Binary files /dev/null and b/lam/templates/3rdParty/pla/htdocs/images/default/locality.png differ
diff --git a/lam/templates/3rdParty/pla/htdocs/images/default/lock.png b/lam/templates/3rdParty/pla/htdocs/images/default/lock.png
new file mode 100644
index 00000000..6af707ed
Binary files /dev/null and b/lam/templates/3rdParty/pla/htdocs/images/default/lock.png differ
diff --git a/lam/templates/3rdParty/pla/htdocs/images/default/mail.png b/lam/templates/3rdParty/pla/htdocs/images/default/mail.png
new file mode 100644
index 00000000..bd77affe
Binary files /dev/null and b/lam/templates/3rdParty/pla/htdocs/images/default/mail.png differ
diff --git a/lam/templates/3rdParty/pla/htdocs/images/default/mail_account.png b/lam/templates/3rdParty/pla/htdocs/images/default/mail_account.png
new file mode 100644
index 00000000..6d0dc922
Binary files /dev/null and b/lam/templates/3rdParty/pla/htdocs/images/default/mail_account.png differ
diff --git a/lam/templates/3rdParty/pla/htdocs/images/default/mail_alias.png b/lam/templates/3rdParty/pla/htdocs/images/default/mail_alias.png
new file mode 100644
index 00000000..4edbee45
Binary files /dev/null and b/lam/templates/3rdParty/pla/htdocs/images/default/mail_alias.png differ
diff --git a/lam/templates/3rdParty/pla/htdocs/images/default/minus.png b/lam/templates/3rdParty/pla/htdocs/images/default/minus.png
new file mode 100644
index 00000000..6ff90668
Binary files /dev/null and b/lam/templates/3rdParty/pla/htdocs/images/default/minus.png differ
diff --git a/lam/templates/3rdParty/pla/htdocs/images/default/monitorserver-big.png b/lam/templates/3rdParty/pla/htdocs/images/default/monitorserver-big.png
new file mode 100644
index 00000000..d40900d9
Binary files /dev/null and b/lam/templates/3rdParty/pla/htdocs/images/default/monitorserver-big.png differ
diff --git a/lam/templates/3rdParty/pla/htdocs/images/default/move.png b/lam/templates/3rdParty/pla/htdocs/images/default/move.png
new file mode 100644
index 00000000..9542d516
Binary files /dev/null and b/lam/templates/3rdParty/pla/htdocs/images/default/move.png differ
diff --git a/lam/templates/3rdParty/pla/htdocs/images/default/n.png b/lam/templates/3rdParty/pla/htdocs/images/default/n.png
new file mode 100644
index 00000000..a035c343
Binary files /dev/null and b/lam/templates/3rdParty/pla/htdocs/images/default/n.png differ
diff --git a/lam/templates/3rdParty/pla/htdocs/images/default/network.png b/lam/templates/3rdParty/pla/htdocs/images/default/network.png
new file mode 100644
index 00000000..008b03fb
Binary files /dev/null and b/lam/templates/3rdParty/pla/htdocs/images/default/network.png differ
diff --git a/lam/templates/3rdParty/pla/htdocs/images/default/nogo.png b/lam/templates/3rdParty/pla/htdocs/images/default/nogo.png
new file mode 100644
index 00000000..cf1a2034
Binary files /dev/null and b/lam/templates/3rdParty/pla/htdocs/images/default/nogo.png differ
diff --git a/lam/templates/3rdParty/pla/htdocs/images/default/nt_machine.png b/lam/templates/3rdParty/pla/htdocs/images/default/nt_machine.png
new file mode 100644
index 00000000..4d3737a7
Binary files /dev/null and b/lam/templates/3rdParty/pla/htdocs/images/default/nt_machine.png differ
diff --git a/lam/templates/3rdParty/pla/htdocs/images/default/nt_user.png b/lam/templates/3rdParty/pla/htdocs/images/default/nt_user.png
new file mode 100644
index 00000000..b69a641e
Binary files /dev/null and b/lam/templates/3rdParty/pla/htdocs/images/default/nt_user.png differ
diff --git a/lam/templates/3rdParty/pla/htdocs/images/default/phone.png b/lam/templates/3rdParty/pla/htdocs/images/default/phone.png
new file mode 100644
index 00000000..f319d1a6
Binary files /dev/null and b/lam/templates/3rdParty/pla/htdocs/images/default/phone.png differ
diff --git a/lam/templates/3rdParty/pla/htdocs/images/default/photo.png b/lam/templates/3rdParty/pla/htdocs/images/default/photo.png
new file mode 100644
index 00000000..f9574048
Binary files /dev/null and b/lam/templates/3rdParty/pla/htdocs/images/default/photo.png differ
diff --git a/lam/templates/3rdParty/pla/htdocs/images/default/plus.png b/lam/templates/3rdParty/pla/htdocs/images/default/plus.png
new file mode 100644
index 00000000..f66b1a80
Binary files /dev/null and b/lam/templates/3rdParty/pla/htdocs/images/default/plus.png differ
diff --git a/lam/templates/3rdParty/pla/htdocs/images/default/process.png b/lam/templates/3rdParty/pla/htdocs/images/default/process.png
new file mode 100644
index 00000000..e3495ebe
Binary files /dev/null and b/lam/templates/3rdParty/pla/htdocs/images/default/process.png differ
diff --git a/lam/templates/3rdParty/pla/htdocs/images/default/refresh-big.png b/lam/templates/3rdParty/pla/htdocs/images/default/refresh-big.png
new file mode 100644
index 00000000..e0021413
Binary files /dev/null and b/lam/templates/3rdParty/pla/htdocs/images/default/refresh-big.png differ
diff --git a/lam/templates/3rdParty/pla/htdocs/images/default/refresh.png b/lam/templates/3rdParty/pla/htdocs/images/default/refresh.png
new file mode 100644
index 00000000..e0021413
Binary files /dev/null and b/lam/templates/3rdParty/pla/htdocs/images/default/refresh.png differ
diff --git a/lam/templates/3rdParty/pla/htdocs/images/default/rename.png b/lam/templates/3rdParty/pla/htdocs/images/default/rename.png
new file mode 100644
index 00000000..320d2e5f
Binary files /dev/null and b/lam/templates/3rdParty/pla/htdocs/images/default/rename.png differ
diff --git a/lam/templates/3rdParty/pla/htdocs/images/default/rfc.png b/lam/templates/3rdParty/pla/htdocs/images/default/rfc.png
new file mode 100644
index 00000000..531caeef
Binary files /dev/null and b/lam/templates/3rdParty/pla/htdocs/images/default/rfc.png differ
diff --git a/lam/templates/3rdParty/pla/htdocs/images/default/save.png b/lam/templates/3rdParty/pla/htdocs/images/default/save.png
new file mode 100644
index 00000000..41b3f436
Binary files /dev/null and b/lam/templates/3rdParty/pla/htdocs/images/default/save.png differ
diff --git a/lam/templates/3rdParty/pla/htdocs/images/default/search-big.png b/lam/templates/3rdParty/pla/htdocs/images/default/search-big.png
new file mode 100644
index 00000000..bee286ab
Binary files /dev/null and b/lam/templates/3rdParty/pla/htdocs/images/default/search-big.png differ
diff --git a/lam/templates/3rdParty/pla/htdocs/images/default/server-settings.png b/lam/templates/3rdParty/pla/htdocs/images/default/server-settings.png
new file mode 100644
index 00000000..4d8f1a1e
Binary files /dev/null and b/lam/templates/3rdParty/pla/htdocs/images/default/server-settings.png differ
diff --git a/lam/templates/3rdParty/pla/htdocs/images/default/server-small.png b/lam/templates/3rdParty/pla/htdocs/images/default/server-small.png
new file mode 100644
index 00000000..3d1e0f6f
Binary files /dev/null and b/lam/templates/3rdParty/pla/htdocs/images/default/server-small.png differ
diff --git a/lam/templates/3rdParty/pla/htdocs/images/default/server.png b/lam/templates/3rdParty/pla/htdocs/images/default/server.png
new file mode 100644
index 00000000..4f6c2a4d
Binary files /dev/null and b/lam/templates/3rdParty/pla/htdocs/images/default/server.png differ
diff --git a/lam/templates/3rdParty/pla/htdocs/images/default/switch.png b/lam/templates/3rdParty/pla/htdocs/images/default/switch.png
new file mode 100644
index 00000000..907d939a
Binary files /dev/null and b/lam/templates/3rdParty/pla/htdocs/images/default/switch.png differ
diff --git a/lam/templates/3rdParty/pla/htdocs/images/default/terminal.png b/lam/templates/3rdParty/pla/htdocs/images/default/terminal.png
new file mode 100644
index 00000000..8f072967
Binary files /dev/null and b/lam/templates/3rdParty/pla/htdocs/images/default/terminal.png differ
diff --git a/lam/templates/3rdParty/pla/htdocs/images/default/tools-no.png b/lam/templates/3rdParty/pla/htdocs/images/default/tools-no.png
new file mode 100644
index 00000000..96a04d1c
Binary files /dev/null and b/lam/templates/3rdParty/pla/htdocs/images/default/tools-no.png differ
diff --git a/lam/templates/3rdParty/pla/htdocs/images/default/tools.png b/lam/templates/3rdParty/pla/htdocs/images/default/tools.png
new file mode 100644
index 00000000..b391a0e8
Binary files /dev/null and b/lam/templates/3rdParty/pla/htdocs/images/default/tools.png differ
diff --git a/lam/templates/3rdParty/pla/htdocs/images/default/trash.png b/lam/templates/3rdParty/pla/htdocs/images/default/trash.png
new file mode 100644
index 00000000..3b146e29
Binary files /dev/null and b/lam/templates/3rdParty/pla/htdocs/images/default/trash.png differ
diff --git a/lam/templates/3rdParty/pla/htdocs/images/default/tree_collapse.png b/lam/templates/3rdParty/pla/htdocs/images/default/tree_collapse.png
new file mode 100644
index 00000000..1c9be759
Binary files /dev/null and b/lam/templates/3rdParty/pla/htdocs/images/default/tree_collapse.png differ
diff --git a/lam/templates/3rdParty/pla/htdocs/images/default/tree_collapse_corner.png b/lam/templates/3rdParty/pla/htdocs/images/default/tree_collapse_corner.png
new file mode 100644
index 00000000..b3328adc
Binary files /dev/null and b/lam/templates/3rdParty/pla/htdocs/images/default/tree_collapse_corner.png differ
diff --git a/lam/templates/3rdParty/pla/htdocs/images/default/tree_collapse_corner_first.png b/lam/templates/3rdParty/pla/htdocs/images/default/tree_collapse_corner_first.png
new file mode 100644
index 00000000..122b980d
Binary files /dev/null and b/lam/templates/3rdParty/pla/htdocs/images/default/tree_collapse_corner_first.png differ
diff --git a/lam/templates/3rdParty/pla/htdocs/images/default/tree_collapse_first.png b/lam/templates/3rdParty/pla/htdocs/images/default/tree_collapse_first.png
new file mode 100644
index 00000000..5c438761
Binary files /dev/null and b/lam/templates/3rdParty/pla/htdocs/images/default/tree_collapse_first.png differ
diff --git a/lam/templates/3rdParty/pla/htdocs/images/default/tree_corner.png b/lam/templates/3rdParty/pla/htdocs/images/default/tree_corner.png
new file mode 100644
index 00000000..541c5b3b
Binary files /dev/null and b/lam/templates/3rdParty/pla/htdocs/images/default/tree_corner.png differ
diff --git a/lam/templates/3rdParty/pla/htdocs/images/default/tree_expand.png b/lam/templates/3rdParty/pla/htdocs/images/default/tree_expand.png
new file mode 100644
index 00000000..e94aecf5
Binary files /dev/null and b/lam/templates/3rdParty/pla/htdocs/images/default/tree_expand.png differ
diff --git a/lam/templates/3rdParty/pla/htdocs/images/default/tree_expand_corner.png b/lam/templates/3rdParty/pla/htdocs/images/default/tree_expand_corner.png
new file mode 100644
index 00000000..4293f768
Binary files /dev/null and b/lam/templates/3rdParty/pla/htdocs/images/default/tree_expand_corner.png differ
diff --git a/lam/templates/3rdParty/pla/htdocs/images/default/tree_expand_corner_first.png b/lam/templates/3rdParty/pla/htdocs/images/default/tree_expand_corner_first.png
new file mode 100644
index 00000000..5de11a6b
Binary files /dev/null and b/lam/templates/3rdParty/pla/htdocs/images/default/tree_expand_corner_first.png differ
diff --git a/lam/templates/3rdParty/pla/htdocs/images/default/tree_expand_first.png b/lam/templates/3rdParty/pla/htdocs/images/default/tree_expand_first.png
new file mode 100644
index 00000000..034b88ec
Binary files /dev/null and b/lam/templates/3rdParty/pla/htdocs/images/default/tree_expand_first.png differ
diff --git a/lam/templates/3rdParty/pla/htdocs/images/default/tree_folder_closed.png b/lam/templates/3rdParty/pla/htdocs/images/default/tree_folder_closed.png
new file mode 100644
index 00000000..f1bfd015
Binary files /dev/null and b/lam/templates/3rdParty/pla/htdocs/images/default/tree_folder_closed.png differ
diff --git a/lam/templates/3rdParty/pla/htdocs/images/default/tree_folder_open.png b/lam/templates/3rdParty/pla/htdocs/images/default/tree_folder_open.png
new file mode 100644
index 00000000..4190b969
Binary files /dev/null and b/lam/templates/3rdParty/pla/htdocs/images/default/tree_folder_open.png differ
diff --git a/lam/templates/3rdParty/pla/htdocs/images/default/tree_leaf.png b/lam/templates/3rdParty/pla/htdocs/images/default/tree_leaf.png
new file mode 100644
index 00000000..6f999fba
Binary files /dev/null and b/lam/templates/3rdParty/pla/htdocs/images/default/tree_leaf.png differ
diff --git a/lam/templates/3rdParty/pla/htdocs/images/default/tree_space.png b/lam/templates/3rdParty/pla/htdocs/images/default/tree_space.png
new file mode 100644
index 00000000..fbdfa6a8
Binary files /dev/null and b/lam/templates/3rdParty/pla/htdocs/images/default/tree_space.png differ
diff --git a/lam/templates/3rdParty/pla/htdocs/images/default/tree_split.png b/lam/templates/3rdParty/pla/htdocs/images/default/tree_split.png
new file mode 100644
index 00000000..1a49fab4
Binary files /dev/null and b/lam/templates/3rdParty/pla/htdocs/images/default/tree_split.png differ
diff --git a/lam/templates/3rdParty/pla/htdocs/images/default/tree_split_first.png b/lam/templates/3rdParty/pla/htdocs/images/default/tree_split_first.png
new file mode 100644
index 00000000..e915d03e
Binary files /dev/null and b/lam/templates/3rdParty/pla/htdocs/images/default/tree_split_first.png differ
diff --git a/lam/templates/3rdParty/pla/htdocs/images/default/tree_vertline.png b/lam/templates/3rdParty/pla/htdocs/images/default/tree_vertline.png
new file mode 100644
index 00000000..261ff13e
Binary files /dev/null and b/lam/templates/3rdParty/pla/htdocs/images/default/tree_vertline.png differ
diff --git a/lam/templates/3rdParty/pla/htdocs/images/default/unknown.png b/lam/templates/3rdParty/pla/htdocs/images/default/unknown.png
new file mode 100644
index 00000000..2164ac14
Binary files /dev/null and b/lam/templates/3rdParty/pla/htdocs/images/default/unknown.png differ
diff --git a/lam/templates/3rdParty/pla/htdocs/images/default/up.png b/lam/templates/3rdParty/pla/htdocs/images/default/up.png
new file mode 100644
index 00000000..865ec155
Binary files /dev/null and b/lam/templates/3rdParty/pla/htdocs/images/default/up.png differ
diff --git a/lam/templates/3rdParty/pla/htdocs/images/default/warn-big.png b/lam/templates/3rdParty/pla/htdocs/images/default/warn-big.png
new file mode 100644
index 00000000..070b9265
Binary files /dev/null and b/lam/templates/3rdParty/pla/htdocs/images/default/warn-big.png differ
diff --git a/lam/templates/3rdParty/pla/htdocs/images/favicon.ico b/lam/templates/3rdParty/pla/htdocs/images/favicon.ico
new file mode 100644
index 00000000..1134d0c2
Binary files /dev/null and b/lam/templates/3rdParty/pla/htdocs/images/favicon.ico differ
diff --git a/lam/templates/3rdParty/pla/htdocs/import.php b/lam/templates/3rdParty/pla/htdocs/import.php
new file mode 100644
index 00000000..22d7ee2d
--- /dev/null
+++ b/lam/templates/3rdParty/pla/htdocs/import.php
@@ -0,0 +1,111 @@
+<?php
+/**
+ * Imports an LDIF file to the specified LDAP server.
+ *
+ * @package phpLDAPadmin
+ * @subpackage Page
+ */
+
+/**
+ */
+
+require './common.php';
+require LIBDIR.'import_functions.php';
+
+$request = array();
+$request['importer'] = new Importer($app['server']->getIndex(),'LDIF');
+$request['import'] = $request['importer']->getTemplate();
+
+$request['continuous_mode'] = get_request('continuous_mode') ? true : false;
+
+$type = $request['import']->getType();
+
+# Set our timelimit in case we have a lot of importing to do
+@set_time_limit(0);
+
+# String associated to the operation on the ldap server
+$actionString = array(
+	'add' => _('Adding'),
+	'delete' => _('Deleting'),
+	'modrdn' => _('Renaming'),
+	'moddn' => _('Renaming'),
+	'modify' => _('Modifying')
+	);
+
+# String associated with error
+$actionErrorMsg = array(
+	'add' => _('Could not add object'),
+	'delete' => _('Could not delete object'),
+	'modrdn' => _('Could not rename object'),
+	'moddn' => _('Could not rename object'),
+	'modify' => _('Could not modify object')
+	);
+
+$request['page'] = new PageRender($app['server']->getIndex(),get_request('template','REQUEST',false,'none'));
+$request['page']->drawTitle(sprintf('<b>%s</b>',_('Import')));
+$request['page']->drawSubTitle(sprintf('%s: <b>%s</b> %s: <b>%s %s %s (%s)</b>',
+	_('Server'),$app['server']->getName(),
+	_('File'),$request['import']->getSource('name'),number_format($request['import']->getSource('size')),_('bytes'),$type['description']));
+
+echo '<br />';
+
+# @todo When renaming DNs, the hotlink should point to the new entry on success, or the old entry on failure.
+while (! $request['import']->eof()) {
+	while ($request['template'] = $request['import']->readEntry()) {
+
+		$edit_href = sprintf('cmd.php?cmd=template_engine&amp;server_id=%s&amp;dn=%s',$app['server']->getIndex(),
+			rawurlencode($request['template']->getDN()));
+
+		$changetype = $request['template']->getType();
+		printf('<small>%s <a href="%s">%s</a>',$actionString[$changetype],$edit_href,$request['template']->getDN());
+
+		if ($request['import']->LDAPimport())
+			printf(' <span style="color:green;">%s</span></small><br />',_('Success'));
+
+		else {
+			printf(' <span style="color:red;">%s</span></small><br /><br />',_('Failed'));
+			$errormsg = sprintf('%s <b>%s</b>',$actionErrorMsg[$changetype],$request['template']->getDN());
+			$errormsg .= ldap_error_msg($app['server']->getErrorMessage(null),$app['server']->getErrorNum(null));
+
+			system_message(array(
+				'title'=>_('LDIF text import'),
+				'body'=>$errormsg,
+				'type'=>'warn'));
+		}
+	}
+
+	if ($request['import']->error) {
+		printf('<small><span style="color:red;">%s: %s</span></small><br />',
+			_('Error'),$request['import']->error['message']);
+
+		echo '<br/>';
+
+		display_pla_parse_error($request['import']);
+	}
+
+	if (! $request['continuous_mode'])
+		break;
+}
+
+function display_pla_parse_error($request) {
+	$type = $request->getType();
+
+	echo '<center>';
+	echo '<table class="error">';
+	echo '<tr>';
+	printf('<td class="img"><img src="%s/%s" /></td>',IMGDIR,'error-big.png');
+
+	printf('<td><h2>%s %s</h2></td>',$type['description'],_('Parse Error'));
+	echo '</tr>';
+
+	printf('<tr><td><b>%s</b>:</td><td>%s</td></tr>',_('Description'),$request->error['message']);
+	printf('<tr><td><b>%s</b>:</td><td>%s</td></tr>',_('Line'),$request->error['line']);
+	printf('<tr><td colspan=2><b>%s</b>:</td></tr>',_('Data'));
+
+	foreach ($request->error['data'] as $line)
+		printf('<tr><td>&nbsp;</td><td>%s</td></tr>',$line);
+
+	echo '</table>';
+	echo '</center>';
+}
+?>
diff --git a/lam/templates/3rdParty/pla/htdocs/import_form.php b/lam/templates/3rdParty/pla/htdocs/import_form.php
new file mode 100644
index 00000000..9c6bbbb6
--- /dev/null
+++ b/lam/templates/3rdParty/pla/htdocs/import_form.php
@@ -0,0 +1,48 @@
+<?php
+/**
+ * Displays a form to allow the user to upload and import
+ * an LDIF file.
+ *
+ * @package phpLDAPadmin
+ * @subpackage Page
+ */
+
+/**
+ */
+
+require './common.php';
+
+if (! ini_get('file_uploads'))
+	error(_('Your PHP.INI does not have file_uploads = ON. Please enable file uploads in PHP.'),'error','index.php');
+
+$request['page'] = new PageRender($app['server']->getIndex(),get_request('template','REQUEST',false,'none'));
+$request['page']->drawTitle(sprintf('<b>%s</b>',_('Import')));
+$request['page']->drawSubTitle(sprintf('%s: <b>%s</b>',_('Server'),$app['server']->getName()));
+
+echo '<form action="cmd.php" method="post" class="new_value" enctype="multipart/form-data">';
+echo '<div>';
+printf('<input type="hidden" name="server_id" value="%s" />',$app['server']->getIndex());
+echo '<input type="hidden" name="cmd" value="import" />';
+echo '</div>';
+
+echo '<table class="forminput" border="0" style="margin-left: auto; margin-right: auto;">';
+
+echo '<tr><td colspan="2">&nbsp;</td></tr>';
+echo '<tr>';
+printf('<td>%s</td>',_('Select an LDIF file'));
+echo '<td>';
+echo '<input type="file" name="ldif_file" />';
+echo '</td></tr>';
+
+printf('<tr><td>&nbsp;</td><td class="small"><b>%s %s</b></td></tr>',_('Maximum file size'),ini_get('upload_max_filesize'));
+
+echo '<tr><td colspan="2">&nbsp;</td></tr>';
+printf('<tr><td>%s</td></tr>',_('Or paste your LDIF here'));
+echo '<tr><td colspan="2"><textarea name="ldif" rows="20" cols="100"></textarea></td></tr>';
+echo '<tr><td colspan="2">&nbsp;</td></tr>';
+printf('<tr><td>&nbsp;</td><td class="small"><input type="checkbox" name="continuous_mode" value="1" />%s</td></tr>',
+	_("Don't stop on errors"));
+printf('<tr><td>&nbsp;</td><td><input type="submit" value="%s" /></td></tr>',_('Proceed >>'));
+echo '</table>';
+echo '</form>';
+?>
diff --git a/lam/templates/3rdParty/pla/htdocs/index.php b/lam/templates/3rdParty/pla/htdocs/index.php
new file mode 100644
index 00000000..d2113b7c
--- /dev/null
+++ b/lam/templates/3rdParty/pla/htdocs/index.php
@@ -0,0 +1,147 @@
+<?php
+/**
+ * phpLDAPadmin Start Page
+ *
+ * @package phpLDAPadmin
+ * @subpackage Page
+ */
+
+/**
+ */
+
+/*******************************************
+<pre>
+
+If you are seeing this in your browser,
+PHP is not installed on your web server!!!
+
+</pre>
+*******************************************/
+
+/**
+ * We will perform some sanity checking here, since this file is normally loaded first when users
+ * first access the application.
+ */
+
+# The index we will store our config in $_SESSION
+define('APPCONFIG','plaConfig');
+
+define('LIBDIR',sprintf('%s/',realpath('../lib/')));
+ini_set('display_errors',1);
+error_reporting(E_ALL);
+
+# General functions needed to proceed.
+ob_start();
+if (! file_exists(LIBDIR.'functions.php')) {
+	if (ob_get_level()) ob_end_clean();
+	die(sprintf("Fatal error: Required file '<b>%sfunctions.php</b>' does not exist.",LIBDIR));
+}
+
+if (! is_readable(LIBDIR.'functions.php')) {
+	if (ob_get_level()) ob_end_clean();
+	die(sprintf("Cannot read the file '<b>%sfunctions.php</b>' its permissions may be too strict.",LIBDIR));
+}
+
+if (ob_get_level())
+	ob_end_clean();
+
+# Make sure this PHP install has pcre
+if (! extension_loaded('pcre'))
+	die('<p>Your install of PHP appears to be missing PCRE support.</p><p>Please install PCRE support before using phpLDAPadmin.<br /><small>(Dont forget to restart your web server afterwards)</small></p>');
+
+require LIBDIR.'functions.php';
+
+# Define the path to our configuration file.
+if (defined('CONFDIR'))
+	$app['config_file'] = CONFDIR.'config.php';
+else
+	$app['config_file'] = 'config.php';
+
+# Make sure this PHP install has session support
+if (! extension_loaded('session'))
+	error('<p>Your install of PHP appears to be missing php-session support.</p><p>Please install php-session support before using phpLDAPadmin.<br /><small>(Dont forget to restart your web server afterwards)</small></p>','error',null,true);
+
+# Make sure this PHP install has gettext, we use it for language translation
+if (! extension_loaded('gettext'))
+	system_message(array(
+		'title'=>_('Missing required extension'),
+		'body'=>'Your install of PHP appears to be missing GETTEXT support.</p><p>GETTEXT is used for language translation.</p><p>Please install GETTEXT support before using phpLDAPadmin.<br /><small>(Dont forget to restart your web server afterwards)</small>',
+		'type'=>'error'));
+
+# Make sure this PHP install has all our required extensions
+if (! extension_loaded('ldap'))
+	system_message(array(
+		'title'=>_('Missing required extension'),
+		'body'=>'Your install of PHP appears to be missing LDAP support.<br /><br />Please install LDAP support before using phpLDAPadmin.<br /><small>(Dont forget to restart your web server afterwards)</small>',
+		'type'=>'error'));
+
+# Make sure that we have php-xml loaded.
+if (! function_exists('xml_parser_create'))
+	system_message(array(
+		'title'=>_('Missing required extension'),
+		'body'=>'Your install of PHP appears to be missing XML support.<br /><br />Please install XML support before using phpLDAPadmin.<br /><small>(Dont forget to restart your web server afterwards)</small>',
+		'type'=>'error'));
+
+/**
+ * Helper functions.
+ * Our required helper functions are defined in functions.php
+ */
+if (isset($app['function_files']) && is_array($app['function_files']))
+	foreach ($app['function_files'] as $file_name ) {
+		if (! file_exists($file_name))
+			error(sprintf('Fatal error: Required file "%s" does not exist.',$file_name),'error',null,true);
+
+		if (! is_readable($file_name))
+			error(sprintf('Fatal error: Cannot read the file "%s", its permissions may be too strict.',$file_name),'error',null,true);
+
+		ob_start();
+		require $file_name;
+		if (ob_get_level()) ob_end_clean();
+	}
+
+# Configuration File check
+if (! file_exists($app['config_file'])) {
+	error(sprintf(_('You need to configure %s. Edit the file "%s" to do so. An example config file is provided in "%s.example".'),app_name(),$app['config_file'],$app['config_file']),'error',null,true);
+
+} elseif (! is_readable($app['config_file'])) {
+	error(sprintf('Fatal error: Cannot read your configuration file "%s", its permissions may be too strict.',$app['config_file']),'error',null,true);
+}
+
+# If our config file fails the sanity check, then stop now.
+if (! $config = check_config($app['config_file'])) {
+	$www['page'] = new page();
+	$www['body'] = new block();
+	$www['page']->block_add('body',$www['body']);
+	$www['page']->display();
+	exit;
+
+} else {
+	app_session_start();
+	$_SESSION[APPCONFIG] = $config;
+}
+
+if ($uri = get_request('URI','GET'))
+	header(sprintf('Location: cmd.php?%s',base64_decode($uri)));
+
+if (! preg_match('/^([0-9]+\.?)+/',app_version())) {
+	system_message(array(
+		'title'=>_('This is a development version of phpLDAPadmin'),
+		'body'=>'This is a development version of phpLDAPadmin! You should <b>NOT</b> use it in a production environment (although we dont think it should do any damage).',
+		'type'=>'info','special'=>true));
+
+	if (count($_SESSION[APPCONFIG]->untested()))
+		system_message(array(
+			'title'=>'Untested configuration paramaters',
+			'body'=>sprintf('The following parameters have not been tested. If you have configured these parameters, and they are working as expected, please let the developers know, so that they can be removed from this message.<br/><small>%s</small>',implode(', ',$_SESSION[APPCONFIG]->untested())),
+			'type'=>'info','special'=>true));
+
+	$server = $_SESSION[APPCONFIG]->getServer(get_request('server_id','REQUEST'));
+	if (count($server->untested()))
+		system_message(array(
+			'title'=>'Untested server configuration paramaters',
+			'body'=>sprintf('The following parameters have not been tested. If you have configured these parameters, and they are working as expected, please let the developers know, so that they can be removed from this message.<br/><small>%s</small>',implode(', ',$server->untested())),
+			'type'=>'info','special'=>true));
+}
+
+include './cmd.php';
+?>
diff --git a/lam/templates/3rdParty/pla/htdocs/mass_delete.php b/lam/templates/3rdParty/pla/htdocs/mass_delete.php
new file mode 100644
index 00000000..b2209f32
--- /dev/null
+++ b/lam/templates/3rdParty/pla/htdocs/mass_delete.php
@@ -0,0 +1,147 @@
+<?php
+/**
+ * Displays a last chance confirmation form to delete a DN.
+ *
+ * @package phpLDAPadmin
+ * @subpackage Page
+ */
+
+/**
+ */
+
+require './common.php';
+
+# The DN we are working with
+$request = array();
+$request['dn'] = get_request('dn','REQUEST');
+
+if (! $request['dn'])
+	system_message(array(
+		'title'=>_('No entry selected'),
+		'body'=>_('No entry was selected to delete'),
+		'type'=>'warn'),'index.php');
+
+if (! is_array($request['dn']))
+	$request['dn'] = array($request['dn']);
+
+$request['children'] = array();
+$request['parent'] = array();
+foreach ($request['dn'] as $dn) {
+	# Check if the entry exists.
+	if (! $dn || ! $app['server']->dnExists($dn))
+		system_message(array(
+			'title'=>_('Entry does not exist'),
+			'body'=>sprintf('%s (%s/%s)',_('The entry does not exist and will be ignored'),$dn),
+			'type'=>'error'));
+
+	# We search all children, not only the visible children in the tree
+	if (! in_array_ignore_case($dn,$request['children'])) {
+		$request['children'] = array_merge($request['children'],$app['server']->getContainerContents($dn,null,0,'(objectClass=*)',LDAP_DEREF_NEVER));
+		array_push($request['parent'],$dn);
+	}
+}
+
+printf('<h3 class="title">%s</h3>',_('Mass Delete'));
+printf('<h3 class="subtitle">%s: <b>%s</b></h3>',_('Server'),$app['server']->getName());
+echo "\n";
+
+echo '<center>';
+echo '<table class="forminput" border="0">';
+
+if (count($request['parent']) == 1)
+	printf('<tr><td colspan="4"><b>%s</b></td></tr>',_('Are you sure you want to permanently delete this object?'));
+else
+	printf('<tr><td colspan="4"><b>%s</b></td></tr>',_('Are you sure you want to permanently delete these objects?'));
+
+echo '<tr><td colspan="4">&nbsp;</td></tr>';
+printf('<tr><td style="width: 10%%;">%s:</td><td colspan="3" style="width: 75%%;"><b>%s</b></td></tr>',_('Server'),$app['server']->getName());
+
+foreach ($request['parent'] as $dn)
+	printf('<tr><td style="width: 10%%;"><acronym title="%s">%s</acronym></td><td colspan="3" style="width: 75%%;"><b>%s</b></td></tr>',
+		_('DN'),_('DN'),$dn);
+
+echo '<tr><td colspan="4">&nbsp;</td></tr>';
+
+$request['delete'] = $request['parent'];
+
+if (count($request['children'])) {
+	printf('<tr><td colspan="4"><b>%s</b></td></tr>',_('Permanently delete all children also?'));
+	echo '<tr><td colspan="4">&nbsp;</td></tr>';
+
+	# We need to see if the children have children
+	$query = array();
+	$query['scope'] = 'sub';
+	$query['attrs'] = array('dn');
+	$query['size_limit'] = 0;
+	$query['deref'] = LDAP_DEREF_NEVER;
+
+	$request['search'] = array();
+	foreach ($request['children'] as $dn) {
+		$query['base'] = $dn;
+		$request['search'] = array_merge($request['search'],$app['server']->query($query,null));
+	}
+
+	foreach ($request['search'] as $value)
+		array_push($request['delete'],$value['dn']);
+
+	echo '<tr>';
+	echo '<td colspan="4">';
+	printf(_('This request also includes %s children entries.'),count($request['children']));
+	echo '</td></tr>';
+
+	printf('<tr><td colspan="4">%s</td></tr>',
+		sprintf(_('phpLDAPadmin can also recursively delete all %s of the child entries. See below for a list of all the entries that this action will delete. Do you want to do this?'),count($request['children'])));
+
+	echo '<tr><td colspan="4">&nbsp;</td></tr>';
+
+	printf('<tr><td colspan="4"><small>%s</small></td></tr>',
+		_('Note: this is potentially very dangerous and you do this at your own risk. This operation cannot be undone. Take into consideration aliases, referrals, and other things that may cause problems.'));
+	echo "\n";
+
+	echo '<tr><td colspan="4">&nbsp;</td></tr>';
+
+	echo "\n";
+
+	printf('<tr><td colspan="4"><center><b>%s</b></center></td></tr>',_('List of entries to be deleted:'));
+	echo '<tr><td colspan="4">&nbsp;</td></tr>';
+
+	$i = 0;
+	echo '<tr><td colspan="4"><center>';
+	printf('<select size="%s" multiple disabled style="background:white; color:black;width:500px" >',min(10,count($request['delete'])));
+	foreach ($request['delete'] as $key => $value)
+		printf('<option>%s. %s</option>',++$i,htmlspecialchars(dn_unescape($value)));
+	echo '</select>';
+	echo '</center></td></tr>';
+	echo "\n";
+
+	echo '<tr><td colspan="4">&nbsp;</td></tr>';
+}
+
+echo '<tr>';
+echo '<td colspan="2" style="width: 50%; text-align: center;">';
+echo '<form action="cmd.php" method="post">';
+echo '<input type="hidden" name="cmd" value="rdelete" />';
+printf('<input type="hidden" name="server_id" value="%s" />',$app['server']->getIndex());
+foreach ($request['parent'] as $dn)
+	printf('<input type="hidden" name="dn[]" value="%s" />',htmlspecialchars($dn));
+printf('<input type="submit" value="%s" />',sprintf(_('Delete all %s objects'),count($request['delete'])));
+echo '</form>';
+echo '</center></td>';
+
+echo '<td colspan="2" style="width: 50%; text-align: center;">';
+
+echo '<form action="cmd.php" method="get">';
+echo '<input type="hidden" name="cmd" value="template_engine" />';
+printf('<input type="hidden" name="server_id" value="%s" />',$app['server']->getIndex());
+printf('<input type="submit" name="submit" value="%s" />',_('Cancel'));
+echo '</form>';
+
+echo '</center></td>';
+echo '</tr>';
+echo "\n";
+
+echo '</table>';
+echo '</center>';
+
+echo '<br />';
+?>
diff --git a/lam/templates/3rdParty/pla/htdocs/mass_edit.php b/lam/templates/3rdParty/pla/htdocs/mass_edit.php
new file mode 100644
index 00000000..1ea70013
--- /dev/null
+++ b/lam/templates/3rdParty/pla/htdocs/mass_edit.php
@@ -0,0 +1,133 @@
+<?php
+/**
+ * Main command page for phpLDAPadmin
+ * Enable mass editing of Attribute values from a list of DNs.
+ *
+ * @package phpLDAPadmin
+ * @subpackage Page
+ */
+
+/**
+ */
+
+require_once './common.php';
+
+# The DN we are working with
+$request = array();
+$request['dn'] = get_request('dn','REQUEST');
+$request['attrs'] = get_request('attrs','REQUEST');
+
+# Check if the entries exist.
+$counter = 0;
+$attrcols = array();
+foreach ($request['dn'] as $dn) {
+	# Check if the entry exists.
+	if (! $dn || ! $app['server']->dnExists($dn)) {
+		system_message(array(
+			'title'=>_('Entry does not exist'),
+			'body'=>sprintf('%s (%s/%s)',_('The entry does not exist and will be ignored'),$dn),
+			'type'=>'error'));
+
+		continue;
+	}
+
+	$request['page'][$counter] = new MassRender($app['server']->getIndex(),'none');
+	$request['page'][$counter]->setDN($dn);
+	$request['page'][$counter]->accept(true);
+
+	$template = $request['page'][$counter]->getTemplate();
+
+	# Mark our attributes to edit as shown.
+	foreach ($template->getAttributes(true) as $attribute) {
+		if ($attribute->isInternal())
+			continue;
+
+		if (in_array_ignore_case($attribute->getName(),$request['attrs']) || in_array('*',$request['attrs'])) {
+			$attribute->show();
+
+			# Get a list of our columns (we are not interested in these attribute values)
+			if (! isset($attrcols[$attribute->getName()]))
+				$attrcols[$attribute->getName()] = $attribute;
+		}
+	}
+
+	$counter++;
+}
+
+usort($attrcols,'sortAttrs');
+
+if (! count($request['page']))
+	header('Location: index.php');
+
+# We'll render this forms Title with the first DN's object.
+$request['page'][0]->drawTitle(_('Bulk edit the following DNs'));
+$request['page'][0]->drawSubTitle(sprintf('%s: <b>%s</b>',_('Server'),$app['server']->getName()));
+
+echo '<form action="cmd.php" method="post">';
+echo '<div>';
+echo '<input type="hidden" name="cmd" value="mass_update" />';
+printf('<input type="hidden" name="server_id" value="%s" />',$app['server']->getIndex());
+
+foreach ($request['page'] as $j => $page)
+	printf('<input type="hidden" name="dn[%s]" value="%s" />',$j,$page->getTemplate()->getDN());
+
+echo '</div>';
+
+echo '<table class="result_table" border="0">';
+echo '<tr class="heading">';
+echo '<td>DN</td>';
+
+foreach ($attrcols as $attribute) {
+	echo '<td>';
+	$request['page'][0]->draw('Name',$attribute);
+	echo '</td>';
+}
+
+echo '</tr>';
+
+$counter = 0;
+foreach ($request['page'] as $j => $page) {
+	$template = $page->getTemplate();
+
+	printf('<tr class="%s">',$counter++%2==0?'even':'odd');
+	printf('<td><span style="white-space: nowrap;"><acronym title="%s"><b>%s</b>...</acronym></span></td>',
+		$template->getDN(),substr($template->getDN(),0,20));
+
+	foreach ($attrcols as $attrcol) {
+		$attribute = $template->getAttribute($attrcol->getName());
+
+		echo '<td>';
+		if ($attribute) {
+			foreach ($attribute->getValues() as $i => $val)
+				$page->draw('MassFormReadWriteValue',$attribute,$i,$j);
+
+		# The attribute doesnt exist. If it is available by the shema, we can draw an empty input box.
+		} else {
+			$match = false;
+
+			foreach ($template->getAvailAttrs() as $attribute) {
+				if ($attrcol->getName() == $attribute->getName()) {
+					$page->draw('MassFormReadWriteValue',$attribute,0,$j);
+					$match = true;
+
+					break;
+				}
+			}
+
+			if (! $match)
+				printf('<center><small>%s</small></center>', _('Attribute not available'));
+		}
+
+		echo '</td>';
+	}
+
+	echo '</tr>';
+}
+
+echo '</table>';
+echo '<div>';
+echo '<br/>';
+printf('<input type="submit" id="save_button" name="submit" value="%s" />',_('Update Values'));
+echo '</div>';
+echo '</form>';
+?>
diff --git a/lam/templates/3rdParty/pla/htdocs/mass_update.php b/lam/templates/3rdParty/pla/htdocs/mass_update.php
new file mode 100644
index 00000000..8a9dd01e
--- /dev/null
+++ b/lam/templates/3rdParty/pla/htdocs/mass_update.php
@@ -0,0 +1,175 @@
+<?php
+/**
+ * Main command page for phpLDAPadmin
+ * This script will handle bulk updates.
+ *
+ * @package phpLDAPadmin
+ * @subpackage Page
+ */
+
+/**
+ */
+
+require_once './common.php';
+
+$request = array();
+$request['dn'] = get_request('dn','REQUEST',true);
+$request['mass_values'] = get_request('mass_values','REQUEST',true);
+
+# Check if the entries exist.
+$request['update'] = array();
+
+foreach ($request['dn'] as $index => $dn) {
+	# Check if the entry exists.
+	if (! $dn || ! $app['server']->dnExists($dn)) {
+		system_message(array(
+			'title'=>_('Entry does not exist'),
+			'body'=>sprintf('%s (%s/%s)',_('The entry does not exist and will be ignored'),$dn),
+			'type'=>'error'));
+
+		continue;
+	}
+
+	# Simulate the requirements for *Render->accept()
+	if (! isset($request['mass_values'][$index]))
+		continue;
+
+	$_REQUEST['new_values'] = $request['mass_values'][$index];
+
+	$render = new MassRender($app['server']->getIndex(),'none');
+	$render->setDN($dn);
+	$render->accept(true);
+
+	if ($render->getTemplate()->getLDAPmodify(false,$index))
+		$request['update'][$index] = $render;
+}
+
+# We can use the $render to give us a title
+$render->drawTitle(_('Bulk update the following DNs'));
+$render->drawSubTitle(sprintf('%s: <b>%s</b>',_('Server'),$app['server']->getName()));
+
+if (count($request['update'])) {
+	if (get_request('confirm','REQUEST')) {
+		foreach ($request['update'] as $index => $page) {
+			$template = $page->getTemplate();
+
+			# Perform the modification
+			$result = $app['server']->modify($template->getDN(),$template->getLDAPmodify(false,$index));
+
+			if ($result)
+				printf('%s: <b>%s</b><br>',$template->getDN(),_('Modification successful!'));
+			else
+				printf('%s: <b>%s</b><br>',$template->getDN(),_('Modification NOT successful!'));
+		}
+
+	} else {
+		echo '<form action="cmd.php" method="post">';
+		echo '<input type="hidden" name="cmd" value="mass_update" />';
+		printf('<input type="hidden" name="server_id" value="%s" />',$app['server']->getIndex());
+		echo '<input type="hidden" name="confirm" value="1" />';
+
+		foreach ($request['update'] as $j => $page)
+			printf('<input type="hidden" name="dn[%s]" value="%s" />',$j,$page->getTemplate()->getDN());
+
+		echo '<table class="result_box" width="100%" border="1">';
+		echo '<tr><td>';
+
+		echo '<br/>';
+
+		echo '<table class="result" border="0">';
+		echo '<tr><td>';
+		printf(_('There will be %s updates done with this mass update'),sprintf('<b>%s</b>',count($request['update'])));
+		echo '</td></tr>';
+		echo '</table>';
+
+		echo '<br/>';
+
+		foreach ($request['update'] as $index => $page) {
+			$template = $page->getTemplate();
+
+			echo '<table class="result" border="0">';
+			echo '<tr class="list_title">';
+			printf('<td class="icon"><img src="%s/%s" alt="icon" /></td>',IMGDIR,get_icon($app['server']->getIndex(),$template->getDN()));
+
+			printf('<td colspan="3"><a href="cmd.php?cmd=template_engine&amp;server_id=%s&amp;dn=%s">%s</a></td>',
+				$app['server']->getIndex(),rawurlencode(dn_unescape($template->getDN())),htmlspecialchars(get_rdn($template->getDN())));
+			echo '</tr>';
+
+			printf('<tr class="list_item"><td class="blank">&nbsp;</td><td class="heading">dn</td><td class="value" style="width: 45%%;">%s</td><td class="value" style="width: 45%%;"><b>%s</b></td></tr>',
+				htmlspecialchars(dn_unescape($template->getDN())),_('Old Value'));
+
+			foreach ($template->getLDAPmodify(true,$index) as $attribute) {
+				echo '<tr class="list_item">';
+				echo '<td class="blank">&nbsp;</td>';
+
+				echo '<td class="heading">';
+				$page->draw('Name',$attribute);
+				echo '</td>';
+
+				# Show NEW Values
+				echo '<td><span style="white-space: nowrap;">';
+
+				if (! $attribute->getValueCount() || $attribute->isForceDelete()) {
+					printf('<span style="color: red">[%s]</span>',_('attribute deleted'));
+					printf('<input type="hidden" name="mass_values[%s][%s][%s]" value="%s" />',$index,$attribute->getName(),0,'');
+				}
+
+				foreach ($attribute->getValues() as $key => $value) {
+					# For multiple values, we'll highlight the changed ones
+					if ((count($attribute->getValues()) > 5) && in_array($value,$attribute->getAddedValues()))
+						echo '<span style="color:#004400; background:#FFFFA0">';
+
+					$page->draw('CurrentValue',$attribute,$key);
+
+					# For multiple values, close the highlighting
+					if ((count($attribute->getValues()) > 5) && in_array($value,$attribute->getAddedValues()))
+						echo '</span>';
+
+					echo '<br />';
+					printf('<input type="hidden" name="mass_values[%s][%s][%s]" value="%s" />',$index,$attribute->getName(),$key,$value);
+				}
+
+				echo '</span></td>';
+
+				# Show OLD Values
+				echo '<td><span style="white-space: nowrap;">';
+
+				if (! $attribute->getOldValues())
+					printf('<span style="color: green">[%s]</span>',_('attribute doesnt exist'));
+
+					foreach ($attribute->getOldValues() as $key => $value) {
+					# For multiple values, we'll highlight the changed ones
+					if ((count($attribute->getOldValues()) > 5) && in_array($value,$attribute->getRemovedValues()) && count($attribute->getValues()))
+						echo '<span style="color:#880000; background:#FFFFA0">';
+
+					$page->draw('OldValue',$attribute,$key);
+
+					# For multiple values, close the highlighting
+					if ((count($attribute->getOldValues()) > 5) && in_array($value,$attribute->getRemovedValues()) && count($attribute->getValues()))
+						echo '</span>';
+
+					echo '<br />';
+				}
+
+				echo '</span></td>';
+
+				echo '</tr>';
+			}
+
+			echo '</table>';
+
+			echo '<br/>';
+		}
+
+		echo '</td></tr>';
+		echo '</table>';
+		printf('<input type="submit" id="save_button" name="submit" value="%s" />',_('Update Values'));
+		echo '</form>';
+	}
+
+} else {
+	echo '<center>';
+	echo _('You made no changes');
+	echo '</center>';
+}
+?>
diff --git a/lam/templates/3rdParty/pla/htdocs/modify_member_form.php b/lam/templates/3rdParty/pla/htdocs/modify_member_form.php
new file mode 100644
index 00000000..208b9efe
--- /dev/null
+++ b/lam/templates/3rdParty/pla/htdocs/modify_member_form.php
@@ -0,0 +1,178 @@
+<?php
+/**
+ * Displays a form to allow the user to modify group members.
+ *
+ * @package phpLDAPadmin
+ * @subpackage Page
+ */
+
+/**
+ */
+
+require './common.php';
+
+# The DN we are working with
+$request = array();
+$request['dn'] = get_request('dn','GET');
+$request['attr'] = get_request('attr','GET');
+
+$request['page'] = new TemplateRender($app['server']->getIndex(),get_request('template','REQUEST',false,null));
+$request['page']->setDN($request['dn']);
+$request['page']->accept(true);
+$request['template'] = $request['page']->getTemplate();
+
+if (! is_null($request['dn']))
+	$rdn = get_rdn($request['dn']);
+else
+	$rdn = null;
+
+# Get all current group members
+$current_members = $app['server']->getDNAttrValue($request['dn'],$request['attr']);
+usort($current_members,'pla_compare_dns');
+
+# Loop through all base dn's and search possible member entries
+$query = array();
+
+# Get all entries that can be added to the group
+if (preg_match("/^".$request['attr']."$/i",$_SESSION[APPCONFIG]->getValue('modify_member','posixgroupattr'))) {
+	$query['filter'] = $_SESSION[APPCONFIG]->getValue('modify_member','posixfilter');
+	$attr = $_SESSION[APPCONFIG]->getValue('modify_member','posixattr');
+
+} else {
+	$query['filter'] = $_SESSION[APPCONFIG]->getValue('modify_member','filter');
+	$attr = $_SESSION[APPCONFIG]->getValue('modify_member','attr');
+}
+
+$query['attrs'] = array($attr);
+
+$possible_values = array();
+foreach ($app['server']->getBaseDN() as $base) {
+	$query['base'] = $base;
+
+	$possible_values = array_merge($possible_values,$app['server']->query($query,null));
+}
+
+usort($possible_values,'pla_compare_dns');
+
+$request['page']->drawTitle(sprintf('%s <b>%s</b>',_('Modify group'),get_rdn($request['dn'])));
+$request['page']->drawSubTitle();
+
+printf('%s <b>%s</b> %s <b>%s</b>:',
+	_('There are'),count($current_members),_('members in group'),htmlspecialchars(get_rdn($request['dn'])));
+
+$possible_members = array();
+for ($i=0;$i<count($possible_values);$i++) {
+	if (preg_match("/^".$request['attr']."$/i",$_SESSION[APPCONFIG]->getValue('modify_member','posixgroupattr')))
+		$possible_members[$i] = $possible_values[$i][$_SESSION[APPCONFIG]->getValue('modify_member','posixattr')][0];
+	else
+		$possible_members[$i] = $possible_values[$i][$_SESSION[APPCONFIG]->getValue('modify_member','attr')];
+}
+
+# Show only user that are not already in group.
+$possible_members = array_diff($possible_members,$current_members);
+usort($possible_members,'pla_compare_dns');
+
+/* Draw form with select boxes, left for all possible members and
+ * right one for those that belong to group */
+
+# Modifications will be sent to update_confirm which takes care of rest of the processing
+echo '<br />';
+echo '<br />';
+
+echo '<form action="cmd.php" method="post" class="add_value" id="member">';
+echo '<div>';
+if ($_SESSION[APPCONFIG]->getValue('confirm','update'))
+	echo '<input type="hidden" name="cmd" value="update_confirm" />';
+else
+	echo '<input type="hidden" name="cmd" value="update" />';
+echo '</div>';
+
+echo '<table class="modify_members">';
+
+echo '<tr>';
+printf('<td><img src="%s/ldap-user.png" alt="Users" /> %s</td>',IMGDIR,_('Available members'));
+printf('<td><img src="%s/ldap-uniquegroup.png" alt="Members" /> %s</td>',IMGDIR,_('Group members'));
+echo '</tr>';
+
+# Generate select box from all possible members
+echo '<tr>';
+echo '<td>';
+echo '<select name="notmembers" size="10" multiple="multiple">';
+
+switch ($request['attr']) {
+	case 'nisnetgrouptriple':
+		foreach ($possible_members as $possible) {
+			// Added for output formating
+			$matches = preg_split('/[=,]/',$possible);
+			$possible = sprintf('(,%s,)',$matches[1]);
+
+			if (! in_array($possible,$current_members))
+				printf('<option>%s</option>',$possible);
+		}
+
+		break;
+
+	case ('memberuid' || 'member' || 'uniquemember'):
+		foreach ($possible_members as $possible) {
+			if (! in_array($possible,$current_members))
+				printf('<option>%s</option>',$possible);
+		}
+
+		break;
+}
+
+echo '</select>';
+echo '</td>';
+
+# Generate select box from all current members
+echo '<td>';
+echo '<select name="members" size="10" multiple="multiple">';
+
+foreach ($current_members as $current)
+	printf('<option>%s</option>',htmlspecialchars($current));
+
+echo '</select>';
+echo '</td>';
+
+echo '</tr>';
+
+# Show buttons which move users from left to right and vice versa
+echo '<tr>';
+echo '<td>';
+printf('<input type="button" onclick="one2two()" value="%s >>" />&nbsp;<input type="button" onclick="all2two()" value="%s >>" />',
+	_('Add selected'),_('Add all'));
+echo '</td>';
+echo '<td>';
+printf('<input type="button" onclick="two2one()" value="<< %s" />&nbsp;<input type="button" onclick="all2one()" value="<< %s" />',
+	_('Remove selected'),('Remove all'));
+echo '</td>';
+echo '</tr>';
+
+echo '<tr><td colspan="2">';
+
+# Hidden attributes for update_confirm.php
+printf('<input type="hidden" name="server_id" value="%s" />',$app['server']->getIndex());
+printf('<input type="hidden" name="dn" value="%s" />',rawurlencode($request['dn']));
+printf('<input type="hidden" name="attr" value="%s" />',$request['attr']);
+
+/* Generate array of input text boxes from current members.
+ * update_confirm.php will see this as old_values[member-attribute][item] */
+for ($i=0; $i<count($current_members); $i++)
+	printf('<input type="hidden" name="old_values[%s][%s]" value="%s" />',
+		htmlspecialchars($request['attr']),$i,htmlspecialchars($current_members[$i]));
+
+/* Javascript generates array of input text boxes from new members.
+ * update_confirm.php will see this as new_values[member-attribute][item]
+ * Input text boxes will be generated to div=dnu */
+echo '<div id="dnu">';
+printf('<input type="hidden" name="new_values[%s][]" value="" />',htmlspecialchars($request['attr']));
+echo '</div>';
+
+# Submit values to update_confirm.php and when clicked, run addSelected
+printf('<input type="submit" name="save" value="%s" onclick="update_new_values(\'%s\')" />',_('Save changes'),$request['attr']);
+echo '</td></tr>';
+
+echo '</table>';
+echo '</form>';
+printf('<script type="text/javascript" src="%smodify_member.js"></script>',JSDIR);
+?>
diff --git a/lam/templates/3rdParty/pla/htdocs/password_checker.php b/lam/templates/3rdParty/pla/htdocs/password_checker.php
new file mode 100644
index 00000000..c616e2e7
--- /dev/null
+++ b/lam/templates/3rdParty/pla/htdocs/password_checker.php
@@ -0,0 +1,88 @@
+<?php
+/**
+ * Check the password used by an entry.
+ *
+ * @package phpLDAPadmin
+ * @subpackage Page
+ */
+
+/**
+ */
+
+require './common.php';
+
+$www['page'] = new page();
+
+$request = array();
+$request['componentid'] = get_request('componentid','REQUEST');
+$request['hash'] = get_request('hash','REQUEST');
+$request['password'] = get_request('check_password','REQUEST');
+$request['action'] = get_request('action','REQUEST');
+$request['attribute'] = get_request('attr','REQUEST');
+
+if (get_request('base64','REQUEST')) {
+	$request['hash'] = base64_decode($request['hash']);
+	$request['password'] = base64_decode($request['password']);
+}
+
+$request['enc_type'] = get_enc_type($request['hash']);
+
+printf('<h3 class="subtitle">%s</h3>',_('Password Checker Tool'));
+
+echo '<form action="password_checker.php" method="post">';
+echo '<input type="hidden" name="action" value="compare" />';
+printf('<input type="hidden" name="attr" value="%s" />',$request['attribute']);
+
+echo '<table class="forminput" width="100%" border="0">';
+
+echo '<tr>';
+printf('<td class="heading">%s</td>',_('Compare'));
+printf('<td><input type="%s" name="hash" id="hash" value="%s" /></td>',
+	(obfuscate_password_display($request['enc_type']) ? 'password' : 'text'),htmlspecialchars($request['hash']));
+echo '</tr>';
+
+echo '<tr>';
+printf('<td class="heading">%s</td>',_('To'));
+printf('<td><input type="password" name="check_password" value="%s" /></td>',
+	htmlspecialchars($request['password']));
+echo '</tr>';
+
+echo '<tr>';
+echo '<td>&nbsp;</td>';
+
+echo '<td><input type="submit" value="Compare" />';
+
+if ($request['action'] == 'compare') {
+	echo '&nbsp;&nbsp;&nbsp;&nbsp;<b>';
+
+	if (password_check($request['hash'],$request['password'],$request['attribute']))
+		printf('<span class="good">%s</span>',_('Passwords match!'));
+	else
+		printf('<span class="bad">%s</span>',_('Passwords do not match!'));
+
+	echo '</b>';
+}
+
+echo '</td>';
+echo '</tr>';
+echo '</table>';
+echo '</form>';
+
+# Pull our password from the form that opened this window.
+if ($request['componentid']) {
+	echo '<script type="text/javascript">';
+	printf('var c = window.opener.document.getElementById("%s");',$request['componentid']);
+	printf('var h = document.getElementById("%s");','hash');
+	echo 'if (c && h) { h.value = c.value; }';
+	echo '</script>';
+}
+
+# Capture the output and put into the body of the page.
+$www['body'] = new block();
+$www['body']->SetBody(ob_get_contents());
+$www['page']->block_add('body',$www['body']);
+ob_end_clean();
+
+# Render the popup.
+$www['page']->display(array('CONTROL'=>false,'FOOT'=>false,'HEAD'=>false,'TREE'=>false));
+?>
diff --git a/lam/templates/3rdParty/pla/htdocs/query_engine.php b/lam/templates/3rdParty/pla/htdocs/query_engine.php
new file mode 100644
index 00000000..a94feddd
--- /dev/null
+++ b/lam/templates/3rdParty/pla/htdocs/query_engine.php
@@ -0,0 +1,19 @@
+<?php
+/**
+ * Query render engine.
+ *
+ * @package phpLDAPadmin
+ * @subpackage Page
+ * @author The phpLDAPadmin development team
+ */
+
+/**
+ */
+
+require './common.php';
+require LIBDIR.'query_functions.php';
+
+$request = array();
+$request['page'] = new QueryRender($app['server']->getIndex(),get_request('query','REQUEST',false,null));
+$request['page']->accept();
+?>
diff --git a/lam/templates/3rdParty/pla/htdocs/rdelete.php b/lam/templates/3rdParty/pla/htdocs/rdelete.php
new file mode 100644
index 00000000..bb864a9d
--- /dev/null
+++ b/lam/templates/3rdParty/pla/htdocs/rdelete.php
@@ -0,0 +1,89 @@
+<?php
+/**
+ * Recursively deletes the specified DN and all of its children
+ *
+ * @package phpLDAPadmin
+ * @subpackage Page
+ */
+
+/**
+ */
+
+require './common.php';
+
+$request = array();
+$request['dn'] = get_request('dn','REQUEST',true);
+
+if (! is_array($request['dn']))
+	$request['dn'] = array($request['dn']);
+
+$request['parent'] = array();
+foreach ($request['dn'] as $dn)
+	if (! $app['server']->dnExists($dn))
+		system_message(array(
+			'title'=>_('Entry does not exist'),
+			'body'=>sprintf('%s (%s)',_('Unable to delete entry, it does not exist'),$dn),
+			'type'=>'error'));
+	else
+		array_push($request['parent'],$dn);
+
+printf('<h3 class="title">%s</h3>',_('Delete LDAP entries'));
+printf('<h3 class="subtitle">%s</h3>',_('Recursive delete progress'));
+
+# Prevent script from bailing early on a long delete
+@set_time_limit(0);
+
+foreach ($request['parent'] as $dn) {
+	echo '<br /><br />';
+	echo '<small>';
+	$result = pla_rdelete($app['server'],$dn);
+	echo '</small><br />';
+
+	if ($result) {
+		printf(_('Entry %s and sub-tree deleted successfully.'),'<b>'.$dn.'</b>');
+
+	} else {
+		system_message(array(
+			'title'=>_('Could not delete the entry.').sprintf(' (%s)',pretty_print_dn($request['dn'])),
+			'body'=>ldap_error_msg($app['server']->getErrorMessage(null),$app['server']->getErrorNum(null)),
+			'type'=>'error'));
+	}
+}
+
+function pla_rdelete($server,$dn) {
+	# We delete all children, not only the visible children in the tree
+	$children = $server->getContainerContents($dn,null,0,'(objectClass=*)',LDAP_DEREF_NEVER);
+
+	if (! is_array($children) || count($children) == 0) {
+		printf('<span style="white-space: nowrap;">%s %s...',_('Deleting'),$dn);
+
+		if ($server->delete($dn)) {
+			printf(' <span style="color:green">%s</span></span><br />',_('Success'));
+			return true;
+
+		} else {
+			system_message(array(
+				'title'=>_('Could not delete the entry.').sprintf(' (%s)',pretty_print_dn($dn)),
+				'body'=>ldap_error_msg($server->getErrorMessage(null),$server->getErrorNum(null)),
+				'type'=>'error'));
+		}
+
+	} else {
+		foreach ($children as $child_dn)
+			pla_rdelete($server,$child_dn);
+
+		printf('<span style="white-space: nowrap;">%s %s...',_('Deleting'),$dn);
+
+		if ($server->delete($dn)) {
+			printf(' <span style="color:green">%s</span></span><br />',_('Success'));
+			return true;
+
+		} else {
+			system_message(array(
+				'title'=>_('Could not delete the entry.').sprintf(' (%s)',pretty_print_dn($dn)),
+				'body'=>ldap_error_msg($server->getErrorMessage(null),$server->getErrorNum(null)),
+				'type'=>'error'));
+		}
+	}
+}
+?>
diff --git a/lam/templates/3rdParty/pla/htdocs/refresh.php b/lam/templates/3rdParty/pla/htdocs/refresh.php
new file mode 100644
index 00000000..385c4c6e
--- /dev/null
+++ b/lam/templates/3rdParty/pla/htdocs/refresh.php
@@ -0,0 +1,46 @@
+<?php
+/**
+ * This script deletes the session variable 'tree', which will result in re-querying
+ * the LDAP server to grab the contents of all LDAP entries starting from the base.
+ *
+ * @package phpLDAPadmin
+ * @subpackage Page
+ */
+
+/**
+ */
+
+require './common.php';
+
+if (get_request('purge','REQUEST')) {
+	$tree = get_cached_item($app['server']->getIndex(),'tree');
+	del_cached_item($app['server']->getIndex(),'tree');
+
+	if ($tree)
+		$openDNs = $tree->listOpenItems();
+	else
+		$openDNs = array();
+
+	$tree = Tree::getInstance($app['server']->getIndex());
+
+	foreach ($openDNs as $value) {
+		$entry = $tree->getEntry($value);
+		if (! $entry) {
+			$tree->addEntry($value);
+			$entry = $tree->getEntry($value);
+		}
+
+		$tree->readChildren($value,true);
+		$entry->open();
+	}
+
+	set_cached_item($app['server']->getIndex(),'tree','null',$tree);
+}
+
+if (get_request('meth','REQUEST') == 'ajax') 
+	header(sprintf('Location: cmd.php?cmd=draw_tree_node&noheader=%s&server_id=%s&meth=ajax&frame=TREE',get_request('noheader','REQUEST',false,0),$app['server']->getIndex()));
+else
+	header(sprintf('Location: cmd.php?server_id=%s',$app['server']->getIndex()));
+
+die();
+?>
diff --git a/lam/templates/3rdParty/pla/htdocs/rename.php b/lam/templates/3rdParty/pla/htdocs/rename.php
new file mode 100644
index 00000000..96c2e33d
--- /dev/null
+++ b/lam/templates/3rdParty/pla/htdocs/rename.php
@@ -0,0 +1,64 @@
+<?php
+/**
+ * Renames a DN to a different name.
+ *
+ * @package phpLDAPadmin
+ * @subpackage Page
+ */
+
+/**
+ */
+
+require './common.php';
+
+# The DN we are working with
+$request = array();
+$request['dnSRC'] = get_request('dn','REQUEST');
+$request['rdnDST'] = get_request('new_rdn','REQUEST');
+$request['container'] = $app['server']->getContainer($request['dnSRC']);
+
+# Error checking
+if (! $app['server']->isBranchRenameEnabled()) {
+	# We search all children, not only the visible children in the tree
+	$children = $app['server']->getContainerContents($request['dnSRC'],null,0,'(objectClass=*)',LDAP_DEREF_NEVER);
+
+	if (count($children) > 0)
+		error(_('You cannot rename an entry which has children entries (eg, the rename operation is not allowed on non-leaf entries)'),'error','index.php');
+}
+
+$request['dnDST'] = sprintf('%s,%s',$request['rdnDST'],$request['container']);
+
+if ($request['dnDST'] == $request['dnSRC'])
+	error(_('You did not change the RDN'),'error','index.php');
+
+$rdnattr = array();
+$rdnattr['SRC'] = explode('=',$request['dnSRC']);
+$rdnattr['SRC'] = $rdnattr['SRC'][0];
+
+$new_dn_value = explode('=',$request['rdnDST'],2);
+$rdnattr['DST'] = $new_dn_value[0];
+
+if (count($new_dn_value) != 2 || ! isset($new_dn_value[1]))
+	error(_('Invalid RDN value'),'error','index.php');
+
+$deleteoldrdn = $rdnattr['SRC'] == $rdnattr['DST'];
+$success = $app['server']->rename($request['dnSRC'],$request['rdnDST'],$request['container'],$deleteoldrdn);
+
+if ($success) {
+	$rename_message = sprintf('%s',_('Rename successful!'));
+	$redirect_url = sprintf('cmd.php?cmd=template_engine&server_id=%s&dn=%s&template=%s',
+		$app['server']->getIndex(),rawurlencode($request['dnDST']),get_request('template','REQUEST'));
+
+	system_message(array(
+		'title'=>_('Rename Entry'),
+		'body'=>$rename_message,
+		'type'=>'info'),
+		$redirect_url);
+
+} else {
+	system_message(array(
+		'title'=>_('Could not rename the entry.'),
+		'body'=>ldap_error_msg($app['server']->getErrorMessage(null),$app['server']->getErrorNum(null)),
+		'type'=>'error'));
+}
+?>
diff --git a/lam/templates/3rdParty/pla/htdocs/rename_form.php b/lam/templates/3rdParty/pla/htdocs/rename_form.php
new file mode 100644
index 00000000..aebc5fb1
--- /dev/null
+++ b/lam/templates/3rdParty/pla/htdocs/rename_form.php
@@ -0,0 +1,40 @@
+<?php
+/**
+ * Displays a form for renaming an LDAP entry.
+ *
+ * @package phpLDAPadmin
+ * @subpackage Page
+ */
+
+/**
+ */
+
+require './common.php';
+
+# The DN we are working with
+$request = array();
+$request['dn'] = get_request('dn','GET');
+$request['template'] = get_request('template','GET');
+
+$request['page'] = new PageRender($app['server']->getIndex(),get_request('template','REQUEST',false,'none'));
+$request['page']->setDN($request['dn']);
+$request['page']->accept();
+
+# Render the form
+$request['page']->drawTitle(sprintf('%s <b>%s</b>',_('Rename'),get_rdn($request['dn'])));
+$request['page']->drawSubTitle();
+
+echo '<center>';
+printf('%s <b>%s</b> %s:<br /><br />',_('Rename'),get_rdn($request['dn']),_('to a new object'));
+
+echo '<form action="cmd.php?cmd=rename" method="post" />';
+printf('<input type="hidden" name="server_id" value="%s" />',$app['server']->getIndex());
+printf('<input type="hidden" name="dn" value="%s" />',rawurlencode($request['dn']));
+printf('<input type="hidden" name="template" value="%s" />',$request['template']);
+printf('<input type="text" name="new_rdn" size="30" value="%s" />',get_rdn($request['dn']));
+printf('<input type="submit" value="%s" />',_('Rename'));
+echo '</form>';
+
+echo '</center>';
+echo "\n";
+?>
diff --git a/lam/templates/3rdParty/pla/htdocs/template_engine.php b/lam/templates/3rdParty/pla/htdocs/template_engine.php
new file mode 100644
index 00000000..1cfaba98
--- /dev/null
+++ b/lam/templates/3rdParty/pla/htdocs/template_engine.php
@@ -0,0 +1,57 @@
+<?php
+/**
+ * Template render engine.
+ *
+ * @package phpLDAPadmin
+ * @subpackage Page
+ * @author The phpLDAPadmin development team
+ */
+
+/**
+The template engine has the following responsibilities:
+* If we are passed a DN, then we are editing an existing entry
+* If we are not passed a DN, then we are passed a container (and creating a new entry in that container)
+
+In both cases, we are optionally passed a template ID. 
+* If we have a template ID, then we'll render the creation/editing using that template
+* If we are not passed a template ID, then we'll either:
+	* Present a list of available templates,
+	* Present the default template, because there are non available (due to hidden,regexp or non-existant)
+	* Present the only template, if there is only one.
+
+Creating and editing entries use two objects:
+* A template object which describes how the template should be rendered (and what values should asked for, etc)
+* A page object, which is responsible for actually sending out the HTML to the browser.
+
+So:
+* we init a new TemplateRender object
+* we init a new Template object
+* set the DN or container on the template object
+	* If setting the DN, this in turn should read the "old values" from the LDAP server
+* If we are not on the first page (ie: 2nd, 3rd, 4th step, etc), we should accept the post values that we have obtained thus far
+
+* Finally submit the update to "update_confirm", or the create to "create", when complete.
+ */
+
+require './common.php';
+
+$request = array();
+$request['dn'] = get_request('dn','REQUEST');
+$request['page'] = new TemplateRender($app['server']->getIndex(),get_request('template','REQUEST',false,null));
+
+# If we have a DN, then this is to edit the entry.
+if ($request['dn']) {
+	$app['server']->dnExists($request['dn'])
+		or error(sprintf('%s (%s)',_('No such entry'),pretty_print_dn($request['dn'])),'error','index.php');
+
+	$request['page']->setDN($request['dn']);
+	$request['page']->accept();
+
+} else {
+	if ($app['server']->isReadOnly())
+		error(_('You cannot perform updates while server is in read-only mode'),'error','index.php');
+
+	$request['page']->setContainer(get_request('container','REQUEST'));
+	$request['page']->accept();
+}
+?>
diff --git a/lam/templates/3rdParty/pla/htdocs/update.php b/lam/templates/3rdParty/pla/htdocs/update.php
new file mode 100644
index 00000000..45762cfb
--- /dev/null
+++ b/lam/templates/3rdParty/pla/htdocs/update.php
@@ -0,0 +1,78 @@
+<?php
+/**
+ * Updates or deletes a value from a specified attribute for a specified dn.
+ *
+ * @package phpLDAPadmin
+ * @subpackage Page
+ * @see update_confirm.php
+ */
+
+/**
+ */
+
+require './common.php';
+
+$request = array();
+$request['dn'] = get_request('dn','REQUEST',true);
+
+# If cancel was submited, got back to the edit display.
+if (get_request('cancel','REQUEST')) {
+	header(sprintf('Location: cmd.php?cmd=template_engine&server_id=%s&dn=%s',
+		$app['server']->getIndex(),rawurlencode($request['dn'])));
+
+	die();
+}
+
+if (! $request['dn'] || ! $app['server']->dnExists($request['dn']))
+	error(sprintf(_('The entry (%s) does not exist.'),$request['dn']),'error','index.php');
+
+$request['page'] = new PageRender($app['server']->getIndex(),get_request('template','REQUEST',false,'none'));
+$request['page']->setDN($request['dn']);
+$request['page']->accept();
+$request['template'] = $request['page']->getTemplate();
+
+# Perform the modification
+$result = $app['server']->modify($request['dn'],$request['template']->getLDAPmodify());
+
+if ($result) {
+	# Fire the post modification event to the user's custom callback function.
+	$mustRelogin = false;
+
+	foreach ($request['template']->getLDAPmodify() as $attr_name => $val) {
+		/* Was this a user's password modification who is currently
+		 * logged in? If so, they need to logout and log back in
+		 * with the new password. */
+		if (($attr_name == 'userpassword') &&
+			in_array($app['server']->getValue('login','auth_type'),array('cookie','session')) &&
+			pla_compare_dns($app['server']->getLogin(),$request['dn']) === 0)
+
+			$mustRelogin = true;
+	}
+
+	# If the user password was changed, not tell the to relogin.
+	if ($mustRelogin) {
+			$app['server']->logout('user');
+			unset($_SESSION['ACTIVITY'][$app['server']->getIndex()]);
+
+			system_message(array(
+				'title'=>_('Modification successful!'),
+				'body'=>_('Since you changed your password, you must now login again with your new password.'),
+				'type'=>'info'),
+				sprintf('cmd.php?cmd=login_form&server_id=%s',$app['server']->getIndex()));
+
+				exit;
+	}
+
+	$redirect_url = sprintf('cmd.php?cmd=template_engine&server_id=%s&dn=%s',
+		$app['server']->getIndex(),$request['template']->getDNEncode());
+
+	foreach ($request['template']->getLDAPmodify() as $attr => $junk)
+		$redirect_url .= sprintf('&modified_attrs[]=%s',$attr);
+
+	if (get_request('meth','REQUEST') == 'ajax')
+		$redirect_url .= '&meth=ajax';
+
+	header("Location: $redirect_url");
+	die();
+}
+?>
diff --git a/lam/templates/3rdParty/pla/htdocs/update_confirm.php b/lam/templates/3rdParty/pla/htdocs/update_confirm.php
new file mode 100644
index 00000000..037b91d8
--- /dev/null
+++ b/lam/templates/3rdParty/pla/htdocs/update_confirm.php
@@ -0,0 +1,253 @@
+<?php
+/**
+ * Takes the results of clicking "Save" in template_engine.php and determines
+ * which attributes need to be updated (ie, which ones actually changed). Then,
+ * we present a confirmation table to the user outlining the changes they are
+ * about to make. That form submits directly to update.php, which makes the
+ * change.
+ *
+ * @package phpLDAPadmin
+ * @subpackage Page
+ * @see update.php
+ */
+
+/**
+ */
+
+require './common.php';
+
+$request = array();
+$request['dn'] = get_request('dn','REQUEST',true);
+
+if (! $request['dn'] || ! $app['server']->dnExists($request['dn']))
+	error(sprintf(_('The entry (%s) does not exist.'),$request['dn']),'error','index.php');
+
+$request['page'] = new PageRender($app['server']->getIndex(),get_request('template','REQUEST',false,'none'));
+$request['page']->setDN($request['dn']);
+$request['page']->accept();
+$request['template'] = $request['page']->getTemplate();
+
+$request['page']->drawTitle(get_rdn($request['template']->getDN()));
+$request['page']->drawSubTitle();
+
+# Confirm the updates
+if (count($request['template']->getLDAPmodify(true))) {
+	echo '<div style="text-align: center;">';
+	echo _('Do you want to make these changes?');
+	echo '<br /><br />';
+	echo '</div>';
+
+	echo "\n\n";
+	echo '<form action="cmd.php" method="post" id="update_form">';
+	echo '<div>';
+	echo '<input type="hidden" name="cmd" value="update" />';
+	printf('<input type="hidden" name="server_id" value="%s" />',$app['server']->getIndex());
+	printf('<input type="hidden" name="dn" value="%s" />',$request['template']->getDNEncode(false));
+	echo "\n";
+
+	$request['page']->drawHiddenAttributes();
+	echo '</div>';
+
+	echo '<table class="result_table" style="margin-left: auto; margin-right: auto;">';
+	echo "\n";
+
+	printf('<tr class="heading"><td>%s</td><td>%s</td><td>%s</td><td>%s</td></tr>',
+		_('Attribute'),_('Old Value'),_('New Value'),_('Skip'));
+	echo "\n\n";
+
+	# If we skip objectclass changes, but there are new must/may attrs provided by the new objectclass, they need to be skip.
+	$mustattrs = getMustAttrs($request['template']->getAttribute('objectclass')->getValues());
+
+	$counter = 0;
+	foreach ($request['template']->getLDAPmodify(true) as $attribute) {
+		$counter++;
+
+		printf('<tr class="%s">',$counter%2 ? 'even' : 'odd');
+		printf('<td><b>%s</b></td>',$attribute->getFriendlyName());
+
+		# Show OLD Values
+		echo '<td><span style="white-space: nowrap;">';
+
+		if (! $attribute->getOldValues())
+			printf('<span style="color: green">[%s]</span>',_('attribute doesnt exist'));
+
+		$dv = $attribute->getRemovedValues();
+		foreach ($attribute->getOldValues() as $key => $value) {
+			# For multiple values, we'll highlight the changed ones
+			if ($x = ((count($attribute->getOldValues()) > 5) && count($attribute->getValues()) && in_array($value,$dv)))
+				echo '<span style="color:#880000; background:#FFFFA0">';
+
+			$request['page']->draw('OldValue',$attribute,$key);
+
+			# For multiple values, close the highlighting
+			if ($x)
+				echo '</span>';
+
+			echo '<br />';
+		}
+
+		echo '</span></td>';
+
+		# Show NEW Values
+		echo '<td><span style="white-space: nowrap;">';
+
+		if (! $attribute->getValueCount() || $attribute->isForceDelete())
+			printf('<span style="color: red">[%s]</span>',_('attribute deleted'));
+
+		$dv = $attribute->getAddedValues();
+		foreach ($attribute->getValues() as $key => $value) {
+			# For multiple values, we'll highlight the changed ones
+			if ($x = ((count($attribute->getValues()) > 5) && count($attribute->getOldValues()) && in_array($value,$dv)))
+				echo '<span style="color:#004400; background:#FFFFA0">';
+
+			$request['page']->draw('CurrentValue',$attribute,$key);
+
+			# For multiple values, close the highlighting
+			if ($x)
+				echo '</span>';
+
+			echo '<br />';
+		}
+
+		echo '</span></td>';
+
+		# Show SKIP Option
+		$input_disabled = '';
+		$input_onclick = '';
+
+		if ($attribute->isForceDelete() || (in_array($attribute->getName(),$mustattrs)) && $request['template']->getAttribute('objectclass')->justModified())
+			$input_disabled = 'disabled="disabled"';
+
+		if ($attribute->getName() == 'objectclass') {
+			$input_onclick = '';
+
+			# If there are attributes being force deleted...
+			if (count($request['template']->getForceDeleteAttrs()) > 0) {
+				$input_onclick = 'onclick="if (this.checked) {';
+
+				# And this OC is being skipped, then these attributes can be optionally deleted.
+				foreach ($request['template']->getForceDeleteAttrs() as $ad_name) {
+					# Only if it is not a must attr by this objectclass now staying
+					if (! in_array($ad_name->getName(),getMustAttrs($attribute->getOldValues())))
+						$input_onclick .= sprintf("document.getElementById('skip_array_%s').disabled = false;",$ad_name->getName());
+
+					$input_onclick .= sprintf("document.getElementById('skip_array_%s').checked = true;",$ad_name->getName());
+					$input_onclick .= "\n";
+				}
+
+				$input_onclick .= '} else {';
+
+				# Otherwise the attributes must be deleted.
+				foreach ($request['template']->getForceDeleteAttrs() as $ad_name) {
+					$input_onclick .= sprintf("document.getElementById('skip_array_%s').checked = false;",$ad_name->getName());
+					$input_onclick .= sprintf("document.getElementById('skip_array_%s').disabled = true;",$ad_name->getName());
+					$input_onclick .= "\n";
+				}
+
+				$input_onclick .= '};';
+			}
+
+			# If the attributes arent force deleted...
+			if ($input_onclick)
+				$input_onclick .= 'if (this.checked) {';
+			else
+				$input_onclick = 'onclick="if (this.checked) {';
+
+			# IE: There are new objectclasses that result in new values.
+			foreach ($request['template']->getLDAPmodify(true) as $skipattr) {
+				if (! $skipattr->getOldValues()) {
+					if (! in_array($skipattr->getName(),$mustattrs))
+						$input_onclick .= sprintf("document.getElementById('skip_array_%s').disabled = true;",$skipattr->getName());
+
+					$input_onclick .= sprintf("document.getElementById('skip_array_%s').checked = true;",$skipattr->getName());
+					$input_onclick .= "\n";
+				}
+			}
+
+			$input_onclick .= '} else {';
+
+			foreach ($request['template']->getLDAPmodify(true) as $skipattr) {
+				if (! $skipattr->getOldValues()) {
+					if (! in_array($skipattr->getName(),$mustattrs))
+						$input_onclick .= sprintf("document.getElementById('skip_array_%s').disabled = false;",$skipattr->getName());
+
+					$input_onclick .= sprintf("document.getElementById('skip_array_%s').checked = false;",$skipattr->getName());
+					$input_onclick .= "\n";
+				}
+			}
+
+			$input_onclick .= '};"';
+		}
+
+		printf('<td><input name="skip_array[%s]" id="skip_array_%s" type="checkbox" %s %s/></td>',
+			htmlspecialchars($attribute->getName()),htmlspecialchars($attribute->getName()),$input_disabled,$input_onclick);
+		echo '</tr>';
+		echo "\n\n";
+	}
+
+	echo '</table>';
+
+	echo '<div style="text-align: center;">';
+	echo '<br />';
+	// @todo cant use AJAX here, it affects file uploads.
+	printf('<input type="submit" value="%s" />',
+		_('Update Object'));
+
+	printf('<input type="submit" name="cancel" value="%s" %s/>',
+		_('Cancel'),
+		(isAjaxEnabled() ? sprintf('onclick="return ajDISPLAY(\'BODY\',\'cmd=template_engine&dn=%s\',\'%s\');"',htmlspecialchars($request['dn']),_('Retrieving DN')) : ''));
+
+	echo '</div>';
+	echo '</form>';
+	echo '<br />';
+
+	if (count($request['template']->getForceDeleteAttrs()) > 0) {
+		echo '<table class="result_table" style="margin-left: auto; margin-right: auto;"><tr>';
+		printf('<td class="heading">%s:</td>',_('The deletion of objectClass(es)'));
+		printf('<td class="value"><b>%s</b></td>',implode('</b>, <b>',$request['template']->getAttribute('objectclass')->getRemovedValues()));
+		echo '</tr><tr>';
+		printf('<td class="heading">%s:</td>',_('will delete the attribute(s)'));
+		echo '<td class="value"><b>';
+
+		$i = 0;
+		foreach ($request['template']->getForceDeleteAttrs() as $attribute) {
+			if ($i++ != 0)
+				echo '</b>, <b>';
+
+			echo $_SESSION[APPCONFIG]->getFriendlyHTML($attribute);
+		}
+		echo '</b></td></tr></table>';
+	}
+
+} else {
+	$href = sprintf('cmd=template_engine&server_id=%s&dn=%s',
+		 $app['server']->getIndex(),$request['template']->getDNEncode());
+
+	echo '<div style="text-align: center;">';
+	echo _('You made no changes');
+
+	if (isAjaxEnabled())
+		printf(' <a href="cmd.php?%s" onclick="return ajDISPLAY(\'BODY\',\'%s\',\'%s\');">%s</a>.',
+			htmlspecialchars($href),htmlspecialchars($href),_('Retrieving DN'),_('Go back'));
+	else
+		printf(' <a href="cmd.php?%s">%s</a>.',htmlspecialchars($href),_('Go back'));
+
+	echo '</div>';
+}
+
+function getMustAttrs($oclasses) {
+	global $app;
+
+	$mustattrs = array();
+
+	foreach ($oclasses as $value) {
+		$soc = $app['server']->getSchemaObjectClass($value);
+
+		if ($soc)
+			foreach ($soc->getMustAttrs() as $sma)
+				array_push($mustattrs,$sma->getName());
+	}
+
+	return $mustattrs;
+}
+?>
diff --git a/lam/templates/3rdParty/pla/htdocs/view_jpeg_photo.php b/lam/templates/3rdParty/pla/htdocs/view_jpeg_photo.php
new file mode 100644
index 00000000..d52501cc
--- /dev/null
+++ b/lam/templates/3rdParty/pla/htdocs/view_jpeg_photo.php
@@ -0,0 +1,77 @@
+<?php
+/**
+ * This script will display the contents of the jpegPhoto attribute to the browser.
+ * A server ID and DN must be provided in the GET attributes.
+ * Optionally an attr name, index, type and filename can be supplied.
+ *
+ * @package phpLDAPadmin
+ * @subpackage Page
+ */
+
+/**
+ */
+
+require './common.php';
+
+$request = array();
+$request['dn'] = get_request('dn','GET');
+$request['attr'] = strtolower(get_request('attr','GET',false,'jpegphoto'));
+$request['index'] = get_request('index','GET',false,0);
+$request['type'] = get_request('type','GET',false,'image/jpeg');
+$request['filename'] = get_request('filename','GET',false,sprintf('%s.jpg',get_rdn($request['dn'],true)));
+$request['location'] = get_request('location','GET',false,'ldap');
+
+switch ($request['location']) {
+	case 'session':
+		if (isset($_SESSION['tmp'][$request['attr']][$request['index']])) {
+			$jpeg_data = $_SESSION['tmp'];
+			unset($_SESSION['tmp'][$request['attr']][$request['index']]);
+		}
+
+		break;
+
+	case 'ldap':
+	default:
+		$jpeg_data = $app['server']->getDNAttrValues($request['dn'],null,LDAP_DEREF_NEVER,array($request['attr']));
+
+		break;
+}
+
+if (! isset($jpeg_data[$request['attr']][$request['index']])) {
+	if (function_exists('imagecreate')) {
+		$im = imagecreate(160,30);
+		if (is_resource($im)) {
+			header('Content-type: image/png');
+
+			# Set the background
+			imagecolorallocatealpha($im,0xFC,0xFC,0xFE,127);
+			$text_color = imagecolorallocate($im,0,0,0);
+			imagestring($im,4,3,5,_('Image not available'),$text_color);
+			imagepng($im);
+			imagedestroy($im);
+
+			die();
+		}
+	}
+
+	# We cant display an error, but we can set a system message, which will be display on the next page render.
+	system_message(array(
+		'title'=>_('No image available'),
+		'body'=>sprintf(_('Could not fetch jpeg data from LDAP server for attribute [%s].'),$request['attr']),
+		'type'=>'warn'));
+
+	die();
+}
+
+if (! is_array($jpeg_data[$request['attr']]))
+	$jpeg_data[$request['attr']] = array($jpeg_data[$request['attr']]);
+
+$obStatus = ob_get_status();
+if (isset($obStatus['type']) && $obStatus['type'] && $obStatus['status'])
+	ob_end_clean();
+
+header(sprintf('Content-type: %s',$request['type']));
+header(sprintf('Content-disposition: inline; filename="%s"',$request['filename']));
+echo $jpeg_data[$request['attr']][$request['index']];
+die();
+?>
diff --git a/lam/templates/3rdParty/pla/index.php b/lam/templates/3rdParty/pla/index.php
new file mode 100644
index 00000000..716e6072
--- /dev/null
+++ b/lam/templates/3rdParty/pla/index.php
@@ -0,0 +1,11 @@
+<?php
+// $Header$
+
+/**
+ * @package phpLDAPadmin
+ */
+
+# You should secure your PLA by making the htdocs/ your docroot.
+header('Location: htdocs/index.php');
+die();
+?>
diff --git a/lam/templates/3rdParty/pla/lib/AJAXTree.php b/lam/templates/3rdParty/pla/lib/AJAXTree.php
new file mode 100644
index 00000000..300a9764
--- /dev/null
+++ b/lam/templates/3rdParty/pla/lib/AJAXTree.php
@@ -0,0 +1,307 @@
+<?php
+/**
+ * Classes and functions for the LDAP tree.
+ *
+ * @author The phpLDAPadmin development team
+ * @package phpLDAPadmin
+ */
+
+/**
+ * This class implements an AJAX based tree.
+ *
+ * @package phpLDAPadmin
+ * @subpackage Tree
+ * @see HTMLTree Tree
+ */
+class AJAXTree extends HTMLTree {
+	/**
+	 * Draw a node of the tree
+	 *
+	 * @param dn The Base DN to draw
+	 * @param string $level a string of 0 and 1 ; $level == "000101" will draw "   | |<node>"
+	 * @param boolean $first_child is the first child entry, which is normally the "Create New Entry" option
+	 * @param boolean $last_child is the last child entry, which is normally the "Create New Entry" option
+	 */
+	protected function draw_item($item,$level,$first_child=true,$last_child=true) {
+		if (DEBUG_ENABLED && (($fargs=func_get_args())||$fargs='NOARGS'))
+			debug_log('Entered (%%)',33,0,__FILE__,__LINE__,__METHOD__,$fargs);
+
+		$server = $this->getServer();
+
+		# Level pre-treatment
+		$code = '';
+		if (is_string($level)) {
+			for ($i=0; $i<strlen($level); $i++) {
+				if ($level[$i] == '0')
+					$code .= '0';
+				elseif ($level[$i] == '1')
+					$code .= '1';
+			}
+
+		} elseif ($level > 0)
+			$code = '0' * $level;
+
+		$level = strlen($code);
+
+		# Get entry to display as node
+		$entry = $this->getEntry($item);
+
+		# If the entry doesnt exist, we'll add it.
+		if (! $entry) {
+			$this->addEntry($item);
+			$entry = $this->getEntry($item);
+		}
+
+		# If the entry doesnt exist in the server, then return here with an empty string.
+		if (! $entry)
+			return '';
+
+		# Get our children.
+		$child_count = $this->readChildrenNumber($entry->getDN());
+
+		$nb = 0;
+		if ($first_child)
+			$nb += 1;
+		if ($last_child)
+			$nb += 2;
+
+		$imgs['expand'] = array('tree_expand.png','tree_expand.png','tree_expand_corner.png',
+			($level > 0) ? 'tree_expand_corner.png' : 'tree_expand_corner_first.png');
+
+		$imgs['collapse'] = array('tree_collapse.png','tree_collapse.png','tree_collapse_corner.png',
+			($level > 0) ? 'tree_collapse_corner.png' : 'tree_collapse_corner_first.png');
+
+		$imgs['tree'] = array('tree_split.png','tree_split.png','tree_corner.png','tree_corner.png');
+
+		/** Information on array[$nb]
+		 * nb == 1 => the node is the first child
+		 * nb == 2 => the node is the last child
+		 * nb == 3 => the node is the unique child
+		 * nb == 0 => the node is a child */
+		$new_code = array('1','1','0','0');
+
+		# Links
+		$parms['openclose'] = htmlspecialchars(sprintf('server_id=%s&dn=%s&code=%s%s',$this->getServerID(),$entry->getDNEncode(),$code,$new_code[$nb]));
+		$parms['edit'] = htmlspecialchars(sprintf('cmd=template_engine&server_id=%s&dn=%s',$this->getServerID(),$entry->getDNEncode()));
+		$href = sprintf('cmd.php?%s',$parms['edit']);
+
+		# Each node has a unique id based on dn
+		$node_id = sprintf('node%s',base64_encode(sprintf('%s-%s',$server->getIndex(),$entry->getDN())));
+		$node_id = str_replace('=','_',$node_id);
+
+		if ($level == 0)
+			printf('<tr><td class="spacer"></td><td colspan="%s">',$this->getDepth()+3-1);
+
+		printf('<div id="jt%s" class="treemenudiv">',$node_id);
+
+		echo $this->get_indentation($code);
+
+		if (! $child_count)
+			printf('<img id="jt%snode" src="%s/%s" alt="--" class="imgs" style="border: 0px; vertical-align:text-top;" />',$node_id,IMGDIR,$imgs['tree'][$nb]);
+
+		else {
+			printf('<a href="#" onclick="return opencloseTreeNode(\'%s\',\'%s\',\'%s\');">',$node_id,$parms['openclose'],IMGDIR);
+
+			if ($entry->isOpened())
+				printf('<img id="jt%snode" src="%s/%s" alt="+-" class="imgs" style="border: 0px; vertical-align:text-top;" />',$node_id,IMGDIR,$imgs['collapse'][$nb]);
+			else
+				printf('<img id="jt%snode" src="%s/%s" alt="+-" class="imgs" style="border: 0px; vertical-align:text-top;" />',$node_id,IMGDIR,$imgs['expand'][$nb]);
+
+			echo '</a>';
+		}
+
+		printf('<a href="%s" onclick="return ajDISPLAY(\'BODY\',\'%s\',\'%s\');" title="%s" >',$href,$parms['edit'],_('Retrieving DN'),htmlspecialchars($entry->getDN()));
+		printf('<span class="dnicon"><img id="jt%sfolder" src="%s/%s" alt="->" class="imgs" style="border: 0px; vertical-align:text-top;" /></span>',$node_id,IMGDIR,$entry->getIcon($server));
+		echo '</a>';
+
+		echo '&nbsp;';
+		printf('<a href="%s" onclick="return ajDISPLAY(\'BODY\',\'%s\',\'%s\');" title="%s" class="phplm">',$href,$parms['edit'],_('Retrieving DN'),htmlspecialchars($entry->getDN()));
+		echo $this->get_formatted_dn($entry,$level-1);
+		echo ($child_count ? (sprintf(' (%s%s)',$child_count,($entry->isSizeLimited() ? '+' : ''))) : '');
+		echo '</a>';
+
+		echo '</div>';
+
+		printf('<div id="jt%sson" style="display: %s" class="treemenudiv">',$node_id,($entry->isOpened() ? 'block' : 'none'));
+		if ($entry->isOpened())
+			$this->draw_children($entry,$code.$new_code[$nb]);
+
+		echo '</div>';
+
+		if ($level == 0)
+			echo '</td></tr>';
+	}
+
+	/**
+	 * Expand and draw a child entry, when it is clicked on. This is using AJAX just to render this section of the tree.
+	 */
+	public function draw_children($parent_entry,$code) {
+		if (DEBUG_ENABLED && (($fargs=func_get_args())||$fargs='NOARGS'))
+			debug_log('Entered (%%)',33,0,__FILE__,__LINE__,__METHOD__,$fargs);
+
+		$children = array();
+
+		foreach ($parent_entry->getChildren() as $child) {
+			if (! $this->getEntry($child))
+				$this->addEntry($child);
+
+			array_push($children,$this->getEntry($child));
+		}
+
+		$first_child = $this->create_before_child($parent_entry,$code);
+		$last_child = $this->create_after_child($parent_entry,$code);
+
+		# If compression is on, we need to compress this output - but only if called by draw_tree_node
+		if (function_exists('isCompress') && isCompress() && get_request('cmd','REQUEST') == 'draw_tree_node')
+			ob_start();
+
+		echo $first_child;
+
+		for ($i=0; $i<count($children); $i++) {
+			$first = ($i == 0) && (! $first_child);
+			$last = ($i == (count($children)-1)) && (! $last_child);
+
+			if (is_object($children[$i]))
+				$this->draw_item($children[$i]->getDN(),$code,$first,$last);
+			else
+				echo '<br/>problem getting DN entry from ldap';
+
+			echo "\n";
+		}
+
+		echo $last_child;
+
+		# If compression is on, we need to compress this output
+		if (function_exists('isCompress') && isCompress() && get_request('cmd','REQUEST') == 'draw_tree_node') {
+			$output = ob_get_clean();
+			echo gzencode($output);
+		}
+	}
+
+	/**
+	 * Return the indentation before a node
+	 *
+	 * @param $code a string of 0 and 1 ; $code == "000101" will return "   | |"
+	 */
+	protected function get_indentation($code) {
+		if (DEBUG_ENABLED && (($fargs=func_get_args())||$fargs='NOARGS'))
+			debug_log('Entered (%%)',33,0,__FILE__,__LINE__,__METHOD__,$fargs);
+
+		$indent = '';
+
+		for ($i=0; $i<strlen($code); $i++) {
+			switch ($code[$i]) {
+				case '0':
+					$indent .= sprintf('<img src="%s/tree_space.png" alt="  " class="imgs" style="border: 0px; vertical-align:text-top;" />',IMGDIR);
+					break;
+
+				case '1':
+					$indent .= sprintf('<img src="%s/tree_vertline.png" alt="| " class="imgs" style="border: 0px; vertical-align:text-top;" />',IMGDIR);
+					break;
+			}
+		}
+
+		return $indent;
+	}
+
+	/**
+	 * Draw the javascript to support the tree.
+	 */
+	protected function draw_javascript() {
+		if (DEBUG_ENABLED && (($fargs=func_get_args())||$fargs='NOARGS'))
+			debug_log('Entered (%%)',33,0,__FILE__,__LINE__,__METHOD__,$fargs);
+
+		parent::draw_javascript();
+		printf('<script type="text/javascript" src="%slayersmenu-browser_detection.js"></script>',JSDIR);
+		printf('<script type="text/javascript" src="%sajax_tree.js"></script>',JSDIR);
+	}
+
+	/**
+	 * Draw the "Create New Entry" item before the children.
+	 */
+	private function create_before_child($entry,$level) {
+		if (DEBUG_ENABLED && (($fargs=func_get_args())||$fargs='NOARGS'))
+			debug_log('Entered (%%)',33,0,__FILE__,__LINE__,__METHOD__,$fargs);
+
+		if (strlen($level) == 0)
+			return '';
+
+		$server = $this->getServer();
+		$output = '';
+
+		if (! $server->isReadOnly() && ! $entry->isLeaf() && (count($entry->getChildren()) > 10) && $this->getServer()->isShowCreateEnabled()
+			&& $_SESSION[APPCONFIG]->getValue('appearance','show_top_create'))
+			$output = $this->draw_create_new_entry($entry,$level,IMGDIR.'/tree_split.png');
+
+		return $output;
+	}
+
+	/**
+	 * Draw the "Create New Entry" item after the children.
+	 */
+	private function create_after_child($entry,$level) {
+		if (DEBUG_ENABLED && (($fargs=func_get_args())||$fargs='NOARGS'))
+			debug_log('Entered (%%)',33,0,__FILE__,__LINE__,__METHOD__,$fargs);
+
+		if (strlen($level) == 0)
+			return '';
+
+		$server = $this->getServer();
+		$output = '';
+
+		if (! $server->isReadOnly() && ! $entry->isLeaf() && $this->getServer()->isShowCreateEnabled())
+			$output = $this->draw_create_new_entry($entry,$level,IMGDIR.'/tree_corner.png');
+
+		return $output;
+	}
+
+	/**
+	 * Draw the "Create New Entry" item.
+	 */
+	private function draw_create_new_entry($entry,$level,$img) {
+		if (DEBUG_ENABLED && (($fargs=func_get_args())||$fargs='NOARGS'))
+			debug_log('Entered (%%)',33,0,__FILE__,__LINE__,__METHOD__,$fargs);
+
+		$output = '';
+
+		$href = sprintf('cmd=template_engine&server_id=%s&container=%s',$this->getServerID(),$entry->getDNEncode());
+
+		$output .= $this->get_indentation($level);
+		$output .= sprintf('<img src="%s" alt="--" class="imgs" style="border: 0px; vertical-align:text-top;" />',$img);
+		$output .= sprintf('<a href="%s" title="%s">',htmlspecialchars($href),$entry->getDN());
+		$output .= sprintf('<img src="%s/create.png" alt="->" class="imgs" style="border: 0px; vertical-align:text-top;" />',IMGDIR);
+		$output .= '</a>';
+		$output .= '&nbsp;';
+
+		if (isAjaxEnabled())
+			$output .= sprintf('<a href="cmd.php?%s" title="%s" class="phplm" onclick="return ajDISPLAY(\'BODY\',\'%s\',\'%s\');">',
+				htmlspecialchars($href),_('Create new entry here'),
+				htmlspecialchars($href),_('Loading'));
+		else
+			$output .= sprintf('<a href="cmd.php?%s" title="%s" class="phplm">',htmlspecialchars($href),_('Create new entry here'));
+
+		$output .= _('Create new entry here');
+		$output .= '</a>';
+
+		return $output;
+	}
+
+	/**
+	 * List the items in the tree that are open
+	 *
+	 * @return array List of open nodes
+	 */
+	public function listOpenItems() {
+		if (DEBUG_ENABLED && (($fargs=func_get_args())||$fargs='NOARGS'))
+			debug_log('Entered (%%)',33,0,__FILE__,__LINE__,__METHOD__,$fargs);
+
+		$result = array();
+
+		foreach ($this->entries as $dn => $value)
+			if ($value->isOpened())
+				array_push($result,$value->getDN());
+
+		return $result;
+	}
+}
+?>
diff --git a/lam/templates/3rdParty/pla/lib/Attribute.php b/lam/templates/3rdParty/pla/lib/Attribute.php
new file mode 100644
index 00000000..af134dff
--- /dev/null
+++ b/lam/templates/3rdParty/pla/lib/Attribute.php
@@ -0,0 +1,917 @@
+<?php
+/**
+ * Classes and functions for the template engine.
+ *
+ * @author The phpLDAPadmin development team
+ * @package phpLDAPadmin
+ */
+
+/**
+ * Represents an attribute of a template.
+ *
+ * @package phpLDAPadmin
+ * @subpackage Templates
+ */
+class Attribute {
+	# Attribute Name
+	public $name;
+	# Source of this attribute definition
+	protected $source;
+
+	# Current and Old Values
+	protected $oldvalues = array();
+	protected $values = array();
+
+	# MIN/MAX number of values
+	protected $min_value_count = -1;
+	protected $max_value_count = -1;
+
+	# Is the attribute internal
+	protected $internal = false;
+	# Has the attribute been modified
+	protected $modified = false;
+	# Is the attribute being deleted because of an object class removal
+	protected $forcedelete = false;
+	# Is the attribute visible
+	protected $visible = false;
+	protected $forcehide = false;
+	# Is the attribute modifiable
+	protected $readonly = false;
+	# LDAP attribute type MUST/MAY
+	protected $ldaptype = null;
+	# Attribute property type (eg password, select, multiselect)
+	protected $type = '';
+	# Attribute value to keep unique
+	protected $unique = false;
+
+	# Display parameters
+	protected $display = '';
+	protected $icon = '';
+	protected $hint = '';
+	# Helper details
+	protected $helper = array();
+	protected $helpervalue = array();
+	# Onchange details
+	protected $onchange = array();
+	# Show spacer after this attribute is rendered
+	protected $spacer = false;
+	protected $verify = false;
+
+	# Component size
+	protected $size = 0;
+	# Value max length
+	protected $maxlength = 0;
+	# Text Area sizings
+	protected $cols = 0;
+	protected $rows = 0;
+
+	# Public for sorting
+	public $page = 1;
+	public $order = 255;
+	public $ordersort = 255;
+	public $rdn = false;
+
+	# Schema Aliases for this attribute (stored in lowercase)
+	protected $aliases = array();
+
+	# Configuration for automatically generated values
+	protected $autovalue = array();
+	protected $postvalue = array();
+
+	public function __construct($name,$values,$server_id,$source=null) {
+		if (DEBUG_ENABLED && (($fargs=func_get_args())||$fargs='NOARGS'))
+			debug_log('Entered (%%)',5,0,__FILE__,__LINE__,__METHOD__,$fargs);
+
+		$server = $_SESSION[APPCONFIG]->getServer($server_id);
+
+		$sattr = $server->getSchemaAttribute($name);
+		if ($sattr) {
+			$this->name = $sattr->getName(false);
+			$this->setLDAPdetails($sattr);
+
+		} else
+			$this->name = $name;
+
+		$this->source = $source;
+
+		# XML attributes are shown by default
+		switch ($source) {
+			case 'XML': $this->show();
+				$this->setXML($values);
+
+				break;
+
+			default:
+				if (! isset($values['values']))
+					debug_dump_backtrace('no index "values"',1);
+
+				$this->initValue($values['values']);
+		}
+
+		# Should this attribute be hidden
+		if ($server->isAttrHidden($this->name))
+			$this->forcehide = true;
+
+		# Should this attribute value be read only
+		if ($server->isAttrReadOnly($this->name))
+			$this->readonly = true;
+
+		# Should this attribute value be unique
+		if ($server->isAttrUnique($this->name))
+			$this->unique = true;
+	}
+
+	/**
+	 * Return the name of the attribute.
+	 *
+	 * @param boolean $lower - Return the attribute in normal or lower case (default lower)
+	 * @param boolean $real - Return the real attribute name (with ;binary, or just the name)
+	 * @return string Attribute name
+	 */
+	public function getName($lower=true,$real=false) {
+		if (DEBUG_ENABLED && (($fargs=func_get_args())||$fargs='NOARGS'))
+			debug_log('Entered (%%)',5,0,__FILE__,__LINE__,__METHOD__,$fargs,$this->name);
+
+		if ($real)
+			return $lower ? strtolower($this->name) : $this->name;
+		else
+			return $lower ? strtolower($this->real_attr_name()) : $this->real_attr_name();
+	}
+
+	public function getValues() {
+		if (DEBUG_ENABLED && (($fargs=func_get_args())||$fargs='NOARGS'))
+			debug_log('Entered (%%)',5,1,__FILE__,__LINE__,__METHOD__,$fargs,$this->values);
+
+		return $this->values;
+	}
+
+	public function getOldValues() {
+		if (DEBUG_ENABLED && (($fargs=func_get_args())||$fargs='NOARGS'))
+			debug_log('Entered (%%)',5,1,__FILE__,__LINE__,__METHOD__,$fargs,$this->oldvalues);
+
+		return $this->oldvalues;
+	}
+
+	public function getValueCount() {
+		if (DEBUG_ENABLED && (($fargs=func_get_args())||$fargs='NOARGS'))
+			debug_log('Entered (%%)',5,0,__FILE__,__LINE__,__METHOD__,$fargs,$this->values);
+
+		return count($this->values);
+	}
+
+	public function getSource() {
+		if (DEBUG_ENABLED && (($fargs=func_get_args())||$fargs='NOARGS'))
+			debug_log('Entered (%%)',5,1,__FILE__,__LINE__,__METHOD__,$fargs,$this->source);
+
+		return $this->source;
+	}
+
+	/**
+	 * Autovalue is called after the attribute is initialised, and thus the values from the ldap server will be set.
+	 */
+	public function autoValue($new_val) {
+		if (DEBUG_ENABLED && (($fargs=func_get_args())||$fargs='NOARGS'))
+			debug_log('Entered (%%)',5,0,__FILE__,__LINE__,__METHOD__,$fargs);
+
+		if ($this->values)
+			return;
+
+		$this->values = $new_val;
+	}
+
+	public function initValue($new_val) {
+		if (DEBUG_ENABLED && (($fargs=func_get_args())||$fargs='NOARGS'))
+			debug_log('Entered (%%)',5,0,__FILE__,__LINE__,__METHOD__,$fargs);
+
+		if ($this->values || $this->oldvalues) {
+			debug_dump(array('new_val'=>$new_val,'this'=>$this));
+			debug_dump_backtrace('new and/or old values are set',1);
+		}
+
+		$this->values = $new_val;
+	}
+
+	public function clearValue() {
+		if (DEBUG_ENABLED && (($fargs=func_get_args())||$fargs='NOARGS'))
+			debug_log('Entered (%%)',5,0,__FILE__,__LINE__,__METHOD__,$fargs);
+
+		$this->values = array();
+	}
+
+	public function setOldValue($val) {
+		if (DEBUG_ENABLED && (($fargs=func_get_args())||$fargs='NOARGS'))
+			debug_log('Entered (%%)',5,1,__FILE__,__LINE__,__METHOD__,$fargs);
+
+		$this->oldvalues = $val;
+	}
+
+	public function setValue($new_val) {
+		if (DEBUG_ENABLED && (($fargs=func_get_args())||$fargs='NOARGS'))
+			debug_log('Entered (%%)',5,0,__FILE__,__LINE__,__METHOD__,$fargs);
+
+		if ($this->values) {
+			if ($this->values == $new_val)
+				return;
+
+			if ($this->oldvalues) {
+				debug_dump($this);
+				debug_dump_backtrace('old values are set',1);
+			} else
+				$this->oldvalues = $this->values;
+		}
+
+		if ($new_val == $this->values)
+			return;
+
+		$this->values = $new_val;
+		$this->justModified();
+	}
+
+	public function addValue($new_val,$i=-1) {
+		if (DEBUG_ENABLED && (($fargs=func_get_args())||$fargs='NOARGS'))
+			debug_log('Entered (%%)',5,0,__FILE__,__LINE__,__METHOD__,$fargs);
+
+		if ($i < 0)
+			$i = $this->getValueCount();
+
+		$old_val = $this->getValue($i);
+		if (is_null($old_val) || ($old_val != $new_val))
+			$this->justModified();
+
+		$this->values[$i] = $new_val;
+	}
+
+	public function delValue($i=-1) {
+		if (DEBUG_ENABLED && (($fargs=func_get_args())||$fargs='NOARGS'))
+			debug_log('Entered (%%)',5,0,__FILE__,__LINE__,__METHOD__,$fargs);
+
+		if ($i < 0)
+			$this->setValue(array());
+
+		if (! $this->hasBeenModified())
+			$this->oldvalues = $this->values;
+
+		if (isset($this->values[$i])) {
+			unset($this->values[$i]);
+			$this->values = array_values($this->values);
+			$this->justModified();
+		}
+	}
+
+	public function getValue($i) {
+		if (DEBUG_ENABLED && (($fargs=func_get_args())||$fargs='NOARGS'))
+			debug_log('Entered (%%)',5,0,__FILE__,__LINE__,__METHOD__,$fargs);
+
+		if (isset($this->values[$i]))
+			return $this->values[$i];
+		else
+			return null;
+	}
+
+	public function getOldValue($i) {
+		if (DEBUG_ENABLED && (($fargs=func_get_args())||$fargs='NOARGS'))
+			debug_log('Entered (%%)',5,0,__FILE__,__LINE__,__METHOD__,$fargs);
+
+		if (isset($this->oldvalues[$i]))
+			return $this->oldvalues[$i];
+		else
+			return null;
+	}
+
+	public function getMinValueCount() {
+		if (DEBUG_ENABLED && (($fargs=func_get_args())||$fargs='NOARGS'))
+			debug_log('Entered (%%)',5,1,__FILE__,__LINE__,__METHOD__,$fargs,$this->min_value_count);
+
+		return $this->min_value_count;
+	}
+
+	public function setMinValueCount($min) {
+		if (DEBUG_ENABLED && (($fargs=func_get_args())||$fargs='NOARGS'))
+			debug_log('Entered (%%)',5,1,__FILE__,__LINE__,__METHOD__,$fargs);
+
+		$this->min_value_count = $min;
+	}
+
+	public function getMaxValueCount() {
+		if (DEBUG_ENABLED && (($fargs=func_get_args())||$fargs='NOARGS'))
+			debug_log('Entered (%%)',5,1,__FILE__,__LINE__,__METHOD__,$fargs,$this->max_value_count);
+
+		return $this->max_value_count;
+	}
+
+	public function setMaxValueCount($max) {
+		if (DEBUG_ENABLED && (($fargs=func_get_args())||$fargs='NOARGS'))
+			debug_log('Entered (%%)',5,1,__FILE__,__LINE__,__METHOD__,$fargs);
+
+		$this->max_value_count = $max;
+	}
+
+	public function haveMoreValues() {
+		if (DEBUG_ENABLED && (($fargs=func_get_args())||$fargs='NOARGS'))
+			debug_log('Entered (%%)',5,0,__FILE__,__LINE__,__METHOD__,$fargs);
+
+		if ($this->getMaxValueCount() < 0 || ($this->getValueCount() < $this->getMaxValueCount()))
+			return true;
+		else
+			return false;
+	}
+
+	public function justModified() {
+		if (DEBUG_ENABLED && (($fargs=func_get_args())||$fargs='NOARGS'))
+			debug_log('Entered (%%)',5,0,__FILE__,__LINE__,__METHOD__,$fargs);
+
+		$this->modified = true;
+	}
+
+	public function hasBeenModified() {
+		if (DEBUG_ENABLED && (($fargs=func_get_args())||$fargs='NOARGS'))
+			debug_log('Entered (%%)',5,1,__FILE__,__LINE__,__METHOD__,$fargs,$this->modified);
+
+		return $this->modified;
+	}
+
+	public function isForceDelete() {
+		if (DEBUG_ENABLED && (($fargs=func_get_args())||$fargs='NOARGS'))
+			debug_log('Entered (%%)',5,1,__FILE__,__LINE__,__METHOD__,$fargs,$this->forcedelete);
+
+		return $this->forcedelete;
+	}
+
+	public function setForceDelete() {
+		if (DEBUG_ENABLED && (($fargs=func_get_args())||$fargs='NOARGS'))
+			debug_log('Entered (%%)',5,0,__FILE__,__LINE__,__METHOD__,$fargs);
+
+		$this->forcedelete = true;
+		$this->oldvalues = $this->values;
+		$this->values = array();
+		$this->justModified();
+	}
+
+	public function isInternal() {
+		if (DEBUG_ENABLED && (($fargs=func_get_args())||$fargs='NOARGS'))
+			debug_log('Entered (%%)',5,1,__FILE__,__LINE__,__METHOD__,$fargs,$this->internal);
+
+		return $this->internal;
+	}
+
+	public function setInternal() {
+		if (DEBUG_ENABLED && (($fargs=func_get_args())||$fargs='NOARGS'))
+			debug_log('Entered (%%)',5,1,__FILE__,__LINE__,__METHOD__,$fargs);
+
+		$this->internal = true;
+	}
+
+	public function isRequired() {
+		if (DEBUG_ENABLED && (($fargs=func_get_args())||$fargs='NOARGS'))
+			debug_log('Entered (%%)',5,0,__FILE__,__LINE__,__METHOD__,$fargs);
+
+		if ($this->getMinValueCount() > 0)
+			return true;
+		elseif ($this->ldaptype == 'must')
+			return true;
+		elseif ($this->isRDN())
+			return true;
+		else
+			return false;
+	}
+
+	public function isMay() {
+		if (DEBUG_ENABLED && (($fargs=func_get_args())||$fargs='NOARGS'))
+			debug_log('Entered (%%)',5,0,__FILE__,__LINE__,__METHOD__,$fargs);
+
+		if (($this->ldaptype == 'may') && ! $this->isRequired())
+			return true;
+		else
+			return false;
+	}
+
+	public function setType($type) {
+		if (DEBUG_ENABLED && (($fargs=func_get_args())||$fargs='NOARGS'))
+			debug_log('Entered (%%)',5,1,__FILE__,__LINE__,__METHOD__,$fargs);
+
+		$this->type = strtolower($type);
+	}
+
+	public function getType() {
+		if (DEBUG_ENABLED && (($fargs=func_get_args())||$fargs='NOARGS'))
+			debug_log('Entered (%%)',5,1,__FILE__,__LINE__,__METHOD__,$fargs,$this->type);
+
+		return $this->type;
+	}
+
+	public function setLDAPtype($type) {
+		if (DEBUG_ENABLED && (($fargs=func_get_args())||$fargs='NOARGS'))
+			debug_log('Entered (%%)',5,1,__FILE__,__LINE__,__METHOD__,$fargs);
+
+		$this->ldaptype = strtolower($type);
+	}
+
+	public function getLDAPtype() {
+		if (DEBUG_ENABLED && (($fargs=func_get_args())||$fargs='NOARGS'))
+			debug_log('Entered (%%)',5,1,__FILE__,__LINE__,__METHOD__,$fargs,$this->ldaptype);
+
+		return $this->ldaptype;
+	}
+
+	public function setProperties($properties) {
+		if (DEBUG_ENABLED && (($fargs=func_get_args())||$fargs='NOARGS'))
+			debug_log('Entered (%%)',5,0,__FILE__,__LINE__,__METHOD__,$fargs);
+
+		foreach ($properties as $index => $value) {
+			if ($index == 'maxvalnb') {
+				$this->setMaxValueCount($value);
+				continue;
+
+			} elseif ($index == 'minvalnb') {
+				$this->setMinValueCount($value);
+				continue;
+
+			} elseif ($index == 'maxlength') {
+				$this->setMinValueCount($value);
+				continue;
+
+			} elseif ($index == 'hidden') {
+				$this->visible = $value;
+				continue;
+
+			} elseif (in_array($index,array('cols','rows'))) {
+				# @todo To be implemented
+				continue;
+			}
+
+			if (isset($this->$index))
+				$this->$index = $value;
+			else {
+				debug_dump($this);
+				debug_dump_backtrace(sprintf('Unknown property (%s) with value (%s) for (%s)',$index,$value,$this->getName()),1);
+			}
+		}
+	}
+
+	public function setRequired() {
+		if (DEBUG_ENABLED && (($fargs=func_get_args())||$fargs='NOARGS'))
+			debug_log('Entered (%%)',5,0,__FILE__,__LINE__,__METHOD__,$fargs);
+
+		if ($this->getMinValueCount() <= 0)
+			$this->setMinValueCount(1);
+	}
+
+	public function setOptional() {
+		if (DEBUG_ENABLED && (($fargs=func_get_args())||$fargs='NOARGS'))
+			debug_log('Entered (%%)',5,1,__FILE__,__LINE__,__METHOD__,$fargs);
+
+		$this->setMinValueCount(0);
+	}
+
+	public function isReadOnly() {
+		if (DEBUG_ENABLED && (($fargs=func_get_args())||$fargs='NOARGS'))
+			debug_log('Entered (%%)',5,1,__FILE__,__LINE__,__METHOD__,$fargs,$this->readonly);
+
+		return $this->readonly;
+	}
+
+	public function setReadOnly() {
+		if (DEBUG_ENABLED && (($fargs=func_get_args())||$fargs='NOARGS'))
+			debug_log('Entered (%%)',5,0,__FILE__,__LINE__,__METHOD__,$fargs);
+
+		$this->readonly = true;
+	}
+
+	public function isMultiple() {
+		return false;
+	}
+
+	public function isVisible() {
+		if (DEBUG_ENABLED && (($fargs=func_get_args())||$fargs='NOARGS'))
+			debug_log('Entered (%%)',5,0,__FILE__,__LINE__,__METHOD__,$fargs);
+
+		return $this->visible && (! $this->forcehide);
+	}
+
+	public function hide() {
+		if (DEBUG_ENABLED && (($fargs=func_get_args())||$fargs='NOARGS'))
+			debug_log('Entered (%%)',5,0,__FILE__,__LINE__,__METHOD__,$fargs);
+
+		$this->visible = false;
+	}
+
+	public function show() {
+		if (DEBUG_ENABLED && (($fargs=func_get_args())||$fargs='NOARGS'))
+			debug_log('Entered (%%)',5,0,__FILE__,__LINE__,__METHOD__,$fargs);
+
+		$this->visible = true;
+	}
+
+	public function haveFriendlyName() {
+		if (DEBUG_ENABLED && (($fargs=func_get_args())||$fargs='NOARGS'))
+			debug_log('Entered (%%)',5,0,__FILE__,__LINE__,__METHOD__,$fargs);
+
+		return $_SESSION[APPCONFIG]->haveFriendlyName($this);
+	}
+
+	public function getFriendlyName() {
+		if (DEBUG_ENABLED && (($fargs=func_get_args())||$fargs='NOARGS'))
+			debug_log('Entered (%%)',5,1,__FILE__,__LINE__,__METHOD__,$fargs,$this->display);
+
+		if ($this->display)
+			return $this->display;
+		else
+			return $_SESSION[APPCONFIG]->getFriendlyName($this);
+	}
+
+	public function setDescription($description) {
+		if (DEBUG_ENABLED && (($fargs=func_get_args())||$fargs='NOARGS'))
+			debug_log('Entered (%%)',5,1,__FILE__,__LINE__,__METHOD__,$fargs);
+
+		$this->description = $description;
+	}
+
+	public function getDescription() {
+		if (DEBUG_ENABLED && (($fargs=func_get_args())||$fargs='NOARGS'))
+			debug_log('Entered (%%)',5,1,__FILE__,__LINE__,__METHOD__,$fargs,$this->description);
+
+		return $this->description;
+	}
+
+	public function setIcon($icon) {
+		if (DEBUG_ENABLED && (($fargs=func_get_args())||$fargs='NOARGS'))
+			debug_log('Entered (%%)',5,1,__FILE__,__LINE__,__METHOD__,$fargs);
+
+		$this->icon = $icon;
+	}
+
+	public function getIcon() {
+		if (DEBUG_ENABLED && (($fargs=func_get_args())||$fargs='NOARGS'))
+			debug_log('Entered (%%)',5,1,__FILE__,__LINE__,__METHOD__,$fargs,$this->icon);
+
+		return $this->icon ? sprintf('%s/%s',IMGDIR,$this->icon) : '';
+	}
+
+	public function getHint() {
+		if (DEBUG_ENABLED && (($fargs=func_get_args())||$fargs='NOARGS'))
+			debug_log('Entered (%%)',5,1,__FILE__,__LINE__,__METHOD__,$fargs,$this->hint);
+
+		return $this->hint;
+	}
+
+	public function setHint($hint) {
+		if (DEBUG_ENABLED && (($fargs=func_get_args())||$fargs='NOARGS'))
+			debug_log('Entered (%%)',5,1,__FILE__,__LINE__,__METHOD__,$fargs);
+
+		$this->hint = $hint;
+	}
+
+	public function getMaxLength() {
+		if (DEBUG_ENABLED && (($fargs=func_get_args())||$fargs='NOARGS'))
+			debug_log('Entered (%%)',5,1,__FILE__,__LINE__,__METHOD__,$fargs,$this->maxlength);
+
+		return $this->maxlength;
+	}
+
+	public function setMaxLength($maxlength) {
+		if (DEBUG_ENABLED && (($fargs=func_get_args())||$fargs='NOARGS'))
+			debug_log('Entered (%%)',5,1,__FILE__,__LINE__,__METHOD__,$fargs);
+
+		$this->maxlength = $maxlength;
+	}
+
+	public function getSize() {
+		if (DEBUG_ENABLED && (($fargs=func_get_args())||$fargs='NOARGS'))
+			debug_log('Entered (%%)',5,1,__FILE__,__LINE__,__METHOD__,$fargs,$this->size);
+
+		return $this->size;
+	}
+
+	public function setSize($size) {
+		if (DEBUG_ENABLED && (($fargs=func_get_args())||$fargs='NOARGS'))
+			debug_log('Entered (%%)',5,1,__FILE__,__LINE__,__METHOD__,$fargs);
+
+		$this->size = $size;
+	}
+
+	public function getSpacer() {
+		if (DEBUG_ENABLED && (($fargs=func_get_args())||$fargs='NOARGS'))
+			debug_log('Entered (%%)',5,1,__FILE__,__LINE__,__METHOD__,$fargs,$this->spacer);
+
+		return $this->spacer;
+	}
+
+	public function getPage() {
+		if (DEBUG_ENABLED && (($fargs=func_get_args())||$fargs='NOARGS'))
+			debug_log('Entered (%%)',5,1,__FILE__,__LINE__,__METHOD__,$fargs,$this->page);
+
+		return $this->page;
+	}
+	public function setPage($page) {
+		if (DEBUG_ENABLED && (($fargs=func_get_args())||$fargs='NOARGS'))
+			debug_log('Entered (%%)',5,1,__FILE__,__LINE__,__METHOD__,$fargs);
+
+		$this->page = $page;
+	}
+
+	public function getOnChange() {
+		if (DEBUG_ENABLED && (($fargs=func_get_args())||$fargs='NOARGS'))
+			debug_log('Entered (%%)',5,1,__FILE__,__LINE__,__METHOD__,$fargs,$this->onchange);
+
+		return $this->onchange;
+	}
+
+	public function getHelper() {
+		if (DEBUG_ENABLED && (($fargs=func_get_args())||$fargs='NOARGS'))
+			debug_log('Entered (%%)',5,1,__FILE__,__LINE__,__METHOD__,$fargs,$this->helper);
+
+		return $this->helper;
+	}
+
+	public function getHelperValue() {
+		if (DEBUG_ENABLED && (($fargs=func_get_args())||$fargs='NOARGS'))
+			debug_log('Entered (%%)',5,1,__FILE__,__LINE__,__METHOD__,$fargs,$this->helpervalue);
+
+		return $this->helpervalue;
+	}
+
+	public function getVerify() {
+		if (DEBUG_ENABLED && (($fargs=func_get_args())||$fargs='NOARGS'))
+			debug_log('Entered (%%)',5,1,__FILE__,__LINE__,__METHOD__,$fargs,$this->verify);
+
+		return $this->verify;
+	}
+
+	public function setRDN($rdn) {
+		if (DEBUG_ENABLED && (($fargs=func_get_args())||$fargs='NOARGS'))
+			debug_log('Entered (%%)',5,1,__FILE__,__LINE__,__METHOD__,$fargs);
+
+		$this->rdn = $rdn;
+	}
+
+	/**
+	 * Return if this attribute is an RDN attribute
+	 *
+	 * @return boolean
+	 */
+	public function isRDN() {
+		if (DEBUG_ENABLED && (($fargs=func_get_args())||$fargs='NOARGS'))
+			debug_log('Entered (%%)',5,0,__FILE__,__LINE__,__METHOD__,$fargs,$this->rdn);
+
+		return $this->rdn;
+	}
+
+	/**
+	 * Capture all the LDAP details we are interested in
+	 *
+	 * @param sattr Schema Attribute
+	 */
+	private function setLDAPdetails($sattr) {
+		if (DEBUG_ENABLED && (($fargs=func_get_args())||$fargs='NOARGS'))
+			debug_log('Entered (%%)',5,0,__FILE__,__LINE__,__METHOD__,$fargs);
+
+		# By default, set this as a MAY attribute, later processing should make it a MUST attribute if it is.
+		if (! $this->ldaptype)
+			$this->ldaptype = 'may';
+
+		# Store our Aliases
+		foreach ($sattr->getAliases() as $alias)
+			array_push($this->aliases,strtolower($alias));
+
+		if ($sattr->getIsSingleValue())
+			$this->setMaxValueCount(1);
+	}
+
+	/**
+	 * Return a list of aliases for this Attribute (as defined by the schema)
+	 * This list will be lowercase.
+	 */
+	public function getAliases() {
+		if (DEBUG_ENABLED && (($fargs=func_get_args())||$fargs='NOARGS'))
+			debug_log('Entered (%%)',5,1,__FILE__,__LINE__,__METHOD__,$fargs,$this->aliases);
+
+		return $this->aliases;
+	}
+
+	public function getAutoValue() {
+		if (DEBUG_ENABLED && (($fargs=func_get_args())||$fargs='NOARGS'))
+			debug_log('Entered (%%)',5,1,__FILE__,__LINE__,__METHOD__,$fargs,$this->autovalue);
+
+		return $this->autovalue;
+	}
+
+	public function getPostValue() {
+		if (DEBUG_ENABLED && (($fargs=func_get_args())||$fargs='NOARGS'))
+			debug_log('Entered (%%)',5,1,__FILE__,__LINE__,__METHOD__,$fargs,$this->postvalue);
+
+		return $this->postvalue;
+	}
+
+	public function setPostValue($postvalue) {
+		if (DEBUG_ENABLED && (($fargs=func_get_args())||$fargs='NOARGS'))
+			debug_log('Entered (%%)',5,1,__FILE__,__LINE__,__METHOD__,$fargs);
+
+		$this->postvalue = $postvalue;
+	}
+
+	public function setXML($values) {
+		if (DEBUG_ENABLED && (($fargs=func_get_args())||$fargs='NOARGS'))
+			debug_log('Entered (%%)',5,0,__FILE__,__LINE__,__METHOD__,$fargs);
+
+		# Mostly all the time, this should be an array
+		if (is_array($values))
+			foreach ($values as $index => $value)
+				switch ($index) {
+					# Helpers should be accompanied with a <post> attribute.
+					case 'helper':
+						if (! isset($values['post']) && ! $_SESSION[APPCONFIG]->getValue('appearance','hide_template_warning'))
+							system_message(array(
+								'title'=>sprintf('%s [<i>%s</i>]',_('Missing [post] setting in XML file'),$index),
+								'body'=>_('[helper] needs an accompanying [post] action.'),
+								'type'=>'warn'));
+
+						if (isset($value['value']) && ! is_array($value['value']) && preg_match('/^=php\.(\w+)\((.*)\)$/',$value['value'],$matches)) {
+							$this->helpervalue['function'] = $matches[1];
+							$this->helpervalue['args'] = $matches[2];
+
+							unset ($value['value']);
+						}
+
+						foreach ($value as $i => $detail) {
+							if (! in_array($i,array('default','display','id','value'))) {
+								if (! $_SESSION[APPCONFIG]->getValue('appearance','hide_template_warning'))
+									system_message(array(
+										'title'=>sprintf('%s [<i>%s</i>]',_('Unknown XML setting'),$i),
+										'body'=>sprintf('%s <small>[%s]</small>',_('Unknown XML type setting for helper will be ignored.'),$detail),
+										'type'=>'warn'));
+
+								unset($value[$i]);
+							}
+						}
+
+						$this->$index = $value;
+
+						break;
+
+					case 'hidden': $value ? $this->visible = false : $this->visible = true;
+						break;
+
+					case 'spacer': $value ? $this->$index = true : $this->$index = false;
+						break;
+
+					# Essentially, we ignore type, it is used to select an Attribute type in the Factory. But we'll generated a warning if there is an unknown type.
+					case 'type':
+						if (! in_array($value,array('password','multiselect','select','textarea')) && ! $_SESSION[APPCONFIG]->getValue('appearance','hide_template_warning'))
+							system_message(array(
+								'title'=>sprintf('%s [<i>%s</i>]',_('Unknown XML setting'),$index),
+								'body'=>sprintf('%s <small>[%s]</small>',_('Unknown XML type setting will be ignored.'),$value),
+								'type'=>'warn'));
+
+						break;
+
+					case 'post':
+						if (preg_match('/^=php\.(\w+)\((.*)\)$/',$value,$matches)) {
+							$this->postvalue['function'] = $matches[1];
+							$this->postvalue['args'] = $matches[2];
+
+						} else
+							if (! $_SESSION[APPCONFIG]->getValue('appearance','hide_template_warning'))
+								system_message(array(
+									'title'=>sprintf('%s [<i>%s</i>]',_('Unknown XML setting'),$index),
+									'body'=>sprintf('%s <small>[%s]</small>',_('Unknown XML type setting will be ignored.'),$value),
+									'type'=>'warn'));
+
+					case 'value':
+						if (is_array($value))
+							foreach ($value as $y) {
+								if (! $this->haveMoreValues()) {
+									system_message(array(
+									'title'=>_('Automatically removed attribute values from template'),
+										'body'=>sprintf('%s <small>[%s]</small>',_('Template defines more values than can be accepted by attribute.'),$this->getName(true)),
+										'type'=>'warn'));
+
+									$this->clearValue();
+
+									break;
+
+								} else
+									$this->addValue($y);
+							}
+
+						else
+							# Check to see if the value is auto generated.
+							if (preg_match('/^=php\.(\w+)\((.*)\)$/',$value,$matches)) {
+								$this->autovalue['function'] = $matches[1];
+								$this->autovalue['args'] = $matches[2];
+
+								# We'll add a hint too
+								if (! $this->hint)
+									$this->hint = _('Automatically determined');
+
+							} else
+								$this->addValue($value);
+
+						break;
+
+					# Queries
+					case 'ordersort':
+
+					# Creation/Editing Templates
+					case 'cols':
+					case 'default':
+					case 'display':
+					case 'hint':
+					case 'icon':
+					case 'maxlength':
+					case 'onchange':
+					case 'order':
+					case 'page':
+					case 'readonly':
+					case 'rows':
+					case 'size':
+					case 'values':
+					case 'verify': $this->$index = $value;
+						break;
+
+					case 'max':
+						if ($this->getMaxValueCount() == -1)
+							$this->setMaxValueCount($value);
+
+					default:
+						if (! $_SESSION[APPCONFIG]->getValue('appearance','hide_template_warning'))
+							system_message(array(
+								'title'=>sprintf('%s [<i>%s</i>]',_('Unknown XML setting'),$index),
+								'body'=>sprintf('%s <small>[%s]</small>',_('Unknown attribute setting will be ignored.'),serialize($value)),
+								'type'=>'warn'));
+				}
+
+		elseif (is_string($values) && (strlen($values) > 0))
+			$this->values = array($values);
+	}
+
+	/**
+	 * Display the values removed in an attribute.
+	 */
+	public function getRemovedValues() {
+		if (DEBUG_ENABLED && (($fargs=func_get_args())||$fargs='NOARGS'))
+			debug_log('Entered (%%)',5,0,__FILE__,__LINE__,__METHOD__,$fargs);
+
+		return array_diff($this->getOldValues(),$this->getValues());
+	}
+
+	/**
+	 * Display the values removed in an attribute.
+	 */
+	public function getAddedValues() {
+		if (DEBUG_ENABLED && (($fargs=func_get_args())||$fargs='NOARGS'))
+			debug_log('Entered (%%)',5,0,__FILE__,__LINE__,__METHOD__,$fargs);
+
+		return array_diff($this->getValues(),$this->getOldValues());
+	}
+
+	/**
+	 * Prunes off anything after the ";" in an attr name. This is useful for
+	 * attributes that may have ";binary" appended to their names. With
+	 * real_attr_name(), you can more easily fetch these attributes' schema
+	 * with their "real" attribute name.
+	 *
+	 * @param string $attr_name The name of the attribute to examine.
+	 * @return string
+	 */
+	private function real_attr_name() {
+		if (DEBUG_ENABLED && (($fargs=func_get_args())||$fargs='NOARGS'))
+			debug_log('Entered (%%)',5,1,__FILE__,__LINE__,__METHOD__,$fargs,$this->name);
+
+		return preg_replace('/;.*$/U','',$this->name);
+	}
+
+	/**
+	 * Does this attribute need supporting JS
+	 */
+	public function needJS($type=null) {
+		if (DEBUG_ENABLED && (($fargs=func_get_args())||$fargs='NOARGS'))
+			debug_log('Entered (%%)',5,0,__FILE__,__LINE__,__METHOD__,$fargs);
+
+		if (is_null($type)) {
+			foreach (array('focus','blur','validate') as $type)
+				if ($this->needJS($type))
+					return true;
+
+			return false;
+
+		} elseif ($type == 'focus') {
+			# We dont have any focus javascript routines.
+			return false;
+
+		} elseif ($type == 'blur') {
+			if ($this->onchange || $this->isRequired())
+				return true;
+			else
+				return false;
+
+		} elseif ($type == 'validate') {
+			if ($this->isRequired())
+				return true;
+			else
+				return false;
+
+		} else
+			debug_dump_backtrace(sprintf('Unknown JS request %s',$type),1);
+	}
+}
+?>
diff --git a/lam/templates/3rdParty/pla/lib/AttributeFactory.php b/lam/templates/3rdParty/pla/lib/AttributeFactory.php
new file mode 100644
index 00000000..82cf5627
--- /dev/null
+++ b/lam/templates/3rdParty/pla/lib/AttributeFactory.php
@@ -0,0 +1,188 @@
+<?php
+/**
+ * Allows to create new attributes
+ *
+ * @author The phpLDAPadmin development team
+ * @package phpLDAPadmin
+ */
+
+/**
+ * AttributeFactory Class
+ *
+ * @package phpLDAPadmin
+ * @subpackage Templates
+ */
+class AttributeFactory {
+	public function newAttribute($name,$values,$server_id,$source=null) {
+		global $app;
+
+		# Check to see if the value is auto generated, our attribute type is dependant on the function called.
+		if (isset($values['post']) && ! is_array($values['post'])) {
+			if (preg_match('/^=php\.(\w+)\((.*)\)$/',$values['post'],$matches)) {
+				switch ($matches[1]) {
+					case 'Join':
+					case 'PasswordEncrypt':
+						break;
+
+					default:
+						if (! $_SESSION[APPCONFIG]->getValue('appearance','hide_template_warning'))
+							system_message(array(
+								'title'=>sprintf('%s [<i>%s</i>]',_('Unknown template [post] function'),$matches[1]),
+								'body'=>sprintf('%s <small>[%s]</small>',_('The template function is not known and will be ignored.'),$values['post']),
+								'type'=>'warn'));
+
+						unset($values['post']);
+				}
+			}
+		}
+
+		# Check our helper functions exists
+		if (isset($values['helper']['value']) && ! is_array($values['helper']['value']))
+			if (preg_match('/^=php\.(\w+)\((.*)\)$/',$values['helper']['value'],$matches))
+				if (! in_array($matches[1],array('GetNextNumber','PasswordEncryptionTypes'))) {
+					if (! $_SESSION[APPCONFIG]->getValue('appearance','hide_template_warning'))
+						system_message(array(
+							'title'=>sprintf('%s [<i>%s</i>]',_('Unknown template helper function'),$matches[1]),
+							'body'=>sprintf('%s <small>[%s]</small>',_('The template helper function is not known and will be ignored.'),$values['helper']['value']),
+							'type'=>'warn'));
+
+					unset($values['helper']['value']);
+				}
+
+		# Check to see if the value is auto generated, our attribute type is dependant on the function called.
+		if (isset($values['value']) && ! is_array($values['value'])) {
+			if (preg_match('/^=php\.(\w+)\((.*)\)$/',$values['value'],$matches)) {
+				switch ($matches[1]) {
+					case 'MultiList':
+						if (! isset($values['type']))
+							$values['type'] = 'multiselect';
+
+					case 'PickList':
+						return $this->newSelectionAttribute($name,$values,$server_id,$source);
+
+					case 'RandomPassword':
+						return $this->newRandomPasswordAttribute($name,$values,$server_id,$source);
+
+					# Fall through and determine the attribute using other methods.
+					case 'GetNextNumber':
+					case 'Function' :
+						break;
+
+					default:
+						if (! $_SESSION[APPCONFIG]->getValue('appearance','hide_template_warning'))
+							system_message(array(
+								'title'=>sprintf('%s [<i>%s</i>]',_('Unknown template function'),$matches[1]),
+								'body'=>sprintf('%s <small>[%s]</small>',_('The template function is not known and will be ignored.'),$values['value']),
+								'type'=>'warn'));
+
+						unset($values['value']);
+				}
+			}
+		}
+
+		if (isset($values['type']))
+			switch ($values['type']) {
+				case 'password':
+					if (! strcasecmp($name,'sambaLMPassword') || ! strcasecmp($name,'sambaNTPassword'))
+						return $this->newSambaPasswordAttribute($name,$values,$server_id,$source);
+					else
+						return $this->newPasswordAttribute($name,$values,$server_id,$source);
+
+				case 'multiselect':
+				case 'select':
+					return $this->newSelectionAttribute($name,$values,$server_id,$source);
+
+				case 'textarea':
+					return $this->newMultiLineAttribute($name,$values,$server_id,$source);
+			}
+
+		if (! strcasecmp($name,'objectClass')) {
+			return $this->newObjectClassAttribute($name,$values,$server_id,$source);
+
+		} elseif ($app['server']->isJpegPhoto($name) || in_array($name,$app['server']->getValue('server','jpeg_attributes'))) {
+			return $this->newJpegAttribute($name,$values,$server_id,$source);
+
+		} elseif ($app['server']->isAttrBinary($name)) {
+			return $this->newBinaryAttribute($name,$values,$server_id,$source);
+
+		} elseif (! strcasecmp($name,'userPassword')) {
+			return $this->newPasswordAttribute($name,$values,$server_id,$source);
+
+		} elseif (! strcasecmp($name,'sambaLMPassword') || ! strcasecmp($name,'sambaNTPassword')) {
+			return $this->newSambaPasswordAttribute($name,$values,$server_id,$source);
+
+		} elseif (in_array(strtolower($name),array_keys(array_change_key_case($_SESSION[APPCONFIG]->getValue('appearance','date_attrs'))))) {
+			return $this->newDateAttribute($name,$values,$server_id,$source);
+
+		} elseif (in_array(strtolower($name),array('shadowlastchange','shadowmin','shadowmax','shadowexpire','shadowwarning','shadowinactive'))) {
+			return $this->newShadowAttribute($name,$values,$server_id,$source);
+
+		} elseif ($app['server']->isAttrBoolean($name)) {
+			$attribute = $this->newSelectionAttribute($name,$values,$server_id,$source);
+			$attribute->addOption('TRUE',_('true'));
+			$attribute->addOption('FALSE',_('false'));
+			return $attribute;
+
+		} elseif ($app['server']->isDNAttr($name)) {
+			return $this->newDnAttribute($name,$values,$server_id,$source);
+
+		} elseif ($app['server']->isMultiLineAttr($name)) {
+			return $this->newMultiLineAttribute($name,$values,$server_id,$source);
+
+		} elseif (! strcasecmp($name,'gidNumber')) {
+			return $this->newGidAttribute($name,$values,$server_id,$source);
+
+		} else {
+			return new Attribute($name,$values,$server_id,$source);
+		}
+	}
+
+	private function newJpegAttribute($name,$values,$server_id,$source) {
+		return new JpegAttribute($name,$values,$server_id,$source);
+	}
+
+	private function newBinaryAttribute($name,$values,$server_id,$source) {
+		return new BinaryAttribute($name,$values,$server_id,$source);
+	}
+
+	private function newPasswordAttribute($name,$values,$server_id,$source) {
+		return new PasswordAttribute($name,$values,$server_id,$source);
+	}
+
+	private function newSambaPasswordAttribute($name,$values,$server_id,$source) {
+		return new SambaPasswordAttribute($name,$values,$server_id,$source);
+	}
+
+	private function newRandomPasswordAttribute($name,$values,$server_id,$source) {
+		return new RandomPasswordAttribute($name,$values,$server_id,$source);
+	}
+
+	private function newShadowAttribute($name,$values,$server_id,$source) {
+		return new ShadowAttribute($name,$values,$server_id,$source);
+	}
+
+	private function newSelectionAttribute($name,$values,$server_id,$source) {
+		return new SelectionAttribute($name,$values,$server_id,$source);
+	}
+
+	private function newMultiLineAttribute($name,$values,$server_id,$source) {
+		return new MultiLineAttribute($name,$values,$server_id,$source);
+	}
+
+	private function newDateAttribute($name,$values,$server_id,$source) {
+		return new DateAttribute($name,$values,$server_id,$source);
+	}
+
+	private function newObjectClassAttribute($name,$values,$server_id,$source) {
+		return new ObjectClassAttribute($name,$values,$server_id,$source);
+	}
+
+	private function newDnAttribute($name,$values,$server_id,$source) {
+		return new DnAttribute($name,$values,$server_id,$source);
+	}
+
+	private function newGidAttribute($name,$values,$server_id,$source) {
+		return new GidAttribute($name,$values,$server_id,$source);
+	}
+}
+?>
diff --git a/lam/templates/3rdParty/pla/lib/BinaryAttribute.php b/lam/templates/3rdParty/pla/lib/BinaryAttribute.php
new file mode 100644
index 00000000..6b5053be
--- /dev/null
+++ b/lam/templates/3rdParty/pla/lib/BinaryAttribute.php
@@ -0,0 +1,60 @@
+<?php
+/**
+ * Classes and functions for the template engine.
+ *
+ * @author The phpLDAPadmin development team
+ * @package phpLDAPadmin
+ */
+
+/**
+ * Represents an attribute whose values are binary
+ *
+ * @package phpLDAPadmin
+ * @subpackage Templates
+ */
+class BinaryAttribute extends Attribute {
+	protected $filepaths;
+	protected $filenames;
+
+	public function __construct($name,$values,$server_id,$source=null) {
+		parent::__construct($name,$values,$server_id,$source);
+
+		$this->filepaths = array();
+		$this->filenames = array();
+	}
+
+	public function getFileNames() {
+		return $this->filenames;
+	}
+
+	public function getFileName($i) {
+		if (isset($this->filenames[$i])) return $this->filenames[$i];
+		else return null;
+	}
+
+	public function addFileName($name, $i = -1) {
+		if ($i < 0) {
+			$this->filenames[] = $name;
+		} else {
+			$this->filenames[$i] = $name;
+		}
+	}
+
+	public function getFilePaths() {
+		return $this->filepaths;
+	}
+
+	public function getFilePath($i) {
+		if (isset($this->filepaths[$i])) return $this->filepaths[$i];
+		else return null;
+	}
+
+	public function addFilePath($path, $i = -1) {
+		if ($i < 0) {
+			$this->filepaths[] = $path;
+		} else {
+			$this->filepaths[$i] = $path;
+		}
+	}
+}
+?>
diff --git a/lam/templates/3rdParty/pla/lib/DateAttribute.php b/lam/templates/3rdParty/pla/lib/DateAttribute.php
new file mode 100644
index 00000000..e1a687f2
--- /dev/null
+++ b/lam/templates/3rdParty/pla/lib/DateAttribute.php
@@ -0,0 +1,17 @@
+<?php
+/**
+ * Classes and functions for the template engine.
+ *
+ * @author The phpLDAPadmin development team
+ * @package phpLDAPadmin
+ */
+
+/**
+ * Represents an attribute whose values are dates
+ *
+ * @package phpLDAPadmin
+ * @subpackage Templates
+ */
+class DateAttribute extends Attribute {
+}
+?>
diff --git a/lam/templates/3rdParty/pla/lib/DnAttribute.php b/lam/templates/3rdParty/pla/lib/DnAttribute.php
new file mode 100644
index 00000000..1f5c02f4
--- /dev/null
+++ b/lam/templates/3rdParty/pla/lib/DnAttribute.php
@@ -0,0 +1,17 @@
+<?php
+/**
+ * Classes and functions for the template engine.
+ *
+ * @author The phpLDAPadmin development team
+ * @package phpLDAPadmin
+ */
+
+/**
+ * Represents an attribute whose values are DNs
+ *
+ * @package phpLDAPadmin
+ * @subpackage Templates
+ */
+class DnAttribute extends Attribute {
+}
+?>
diff --git a/lam/templates/3rdParty/pla/lib/GidAttribute.php b/lam/templates/3rdParty/pla/lib/GidAttribute.php
new file mode 100644
index 00000000..7442a079
--- /dev/null
+++ b/lam/templates/3rdParty/pla/lib/GidAttribute.php
@@ -0,0 +1,17 @@
+<?php
+/**
+ * Classes and functions for the template engine.
+ *
+ * @author The phpLDAPadmin development team
+ * @package phpLDAPadmin
+ */
+
+/**
+ * Represents a 'gidNumber' attribute
+ *
+ * @package phpLDAPadmin
+ * @subpackage Templates
+ */
+class GidAttribute extends Attribute {
+}
+?>
diff --git a/lam/templates/3rdParty/pla/lib/HTMLTree.php b/lam/templates/3rdParty/pla/lib/HTMLTree.php
new file mode 100644
index 00000000..dc870632
--- /dev/null
+++ b/lam/templates/3rdParty/pla/lib/HTMLTree.php
@@ -0,0 +1,588 @@
+<?php
+/**
+ * Classes and functions for the LDAP tree.
+ *
+ * @author The phpLDAPadmin development team
+ * @package phpLDAPadmin
+ */
+
+/**
+ * This class implements a straight HTML tree - no AJAX rendering is used.
+ *
+ * @package phpLDAPadmin
+ * @subpackage Tree
+ * @see AJAXTree Tree
+ */
+class HTMLTree extends Tree {
+	protected $javascript = '';
+
+	/**
+	 * Required ABSTRACT methods
+	 */
+	/**
+	 * Displays the tree in HTML
+	 *
+	 * @param boolean Only display the tree, or include the server name and menu items
+	 */
+	public function draw($onlytree=false) {
+		if (DEBUG_ENABLED && (($fargs=func_get_args())||$fargs='NOARGS'))
+			debug_log('Entered (%%)',33,0,__FILE__,__LINE__,__METHOD__,$fargs);
+
+		static $js_drawn = false;
+		$server = $this->getServer();
+
+		echo '<table class="tree" border="0">';
+		if (! $onlytree)
+			$this->draw_server_name();
+
+		$this->javascript = '';
+		$javascript_id = 0;
+
+		/* Do we have what it takes to authenticate here, or do we need to
+		 * present the user with a login link (for 'cookie' and 'session' auth_types)?
+		 */
+		if ($server->isLoggedIn(null)) {
+			if (! $onlytree) {
+				$this->draw_menu();
+
+				if ($server->getAuthType() != 'config')
+					$this->draw_logged_in_user();
+				else
+					printf('<tr><td class="blank" colspan="%s">&nbsp;</td></tr>',$this->getDepth()+3);
+
+				if ($server->isReadOnly())
+					printf('<tr><td class="spacer"></td><td class="logged_in" colspan="%s">(%s)</td></tr>',$this->getDepth()+3-1,_('read only'));
+				else
+					printf('<tr><td class="blank" colspan="%s">&nbsp;</td></tr>',$this->getDepth()+3);
+
+				printf('<tr><td>&nbsp;</td><td><div style="overflow: auto; %s%s" id="ajSID_%s_nodes">',
+					$_SESSION[APPCONFIG]->getValue('appearance','tree_width') ? sprintf('width: %spx; ',$_SESSION[APPCONFIG]->getValue('appearance','tree_width')) : '',
+					$_SESSION[APPCONFIG]->getValue('appearance','tree_height') ? sprintf('height: %spx; ',$_SESSION[APPCONFIG]->getValue('appearance','tree_height')) : '',
+					$server->getIndex());
+			}
+
+			echo '<table class="tree" border="0">';
+
+			if (! count($this->getBaseEntries())) {
+				# We didnt get any baseDN entries in our tree?
+				printf('<tr><td class="spacer"></td><td class="spacer"></td><td colspan="%s"><small>%s<br />%s<br /><b>%s</b></small></td></tr>',
+					$this->getDepth()+3-2,
+					_('Could not determine the root of your LDAP tree.'),
+					_('It appears that the LDAP server has been configured to not reveal its root.'),
+					_('Please specify it in config.php'));
+
+				echo '</table>';
+
+				if (! $onlytree)
+					echo '</div></td></tr>';
+
+				echo '</table>';
+				return;
+			}
+
+			/**
+			 * Check if the LDAP server is not yet initialized
+			 * (ie, the base DN configured in config.php does not exist)
+			 */
+			foreach ($this->getBaseEntries() as $base) {
+				if (! $base->isInLDAP()) {
+					$js_drawn = false;
+					$javascript_id++;
+
+					$rdn = explode('=',get_rdn($base->getDN()));
+					printf('<tr><td class="spacer"></td><td class="spacer"></td><td><img src="%s/unknown.png" alt="" /></td><td colspan="%s">%s</td></tr>',
+						IMGDIR,$this->getDepth()+3-3,pretty_print_dn($base->getDN()));
+
+					$this->javascript .= sprintf('<form id="create_base_form_%s_%s" method="post" action="cmd.php">',$server->getIndex(),$javascript_id);
+					$this->javascript .= '<div>';
+					$this->javascript .= '<input type="hidden" name="cmd" value="template_engine" />';
+					$this->javascript .= sprintf('<input type="hidden" name="server_id" value="%s" />',$server->getIndex());
+					$this->javascript .= sprintf('<input type="hidden" name="container" value="%s" />',htmlspecialchars($server->getContainer($base->getDN())));
+					$this->javascript .= sprintf('<input type="hidden" name="rdn" value="%s" />',get_rdn($base->getDN()));
+					$this->javascript .= sprintf('<input type="hidden" name="rdn_attribute[]" value="%s" />',$rdn[0]);
+					$this->javascript .= sprintf('<input type="hidden" name="new_values[%s][]" value="%s" />',$rdn[0],$rdn[1]);
+					$this->javascript .= '<input type="hidden" name="template" value="none" />';
+					$this->javascript .= '<input type="hidden" name="create_base" value="true" />';
+					$this->javascript .= '</div>';
+					$this->javascript .= sprintf('</form>');
+
+					if (preg_match('/,/',$base->getDN()))
+						printf('<tr><td class="spacer"></td><td class="spacer"></td><td class="spacer"></td><td colspan="%s"><small>%s</small></td></tr>',
+							$this->getDepth()+3-3,_('This base cannot be created with PLA.'));
+					else
+						printf('<tr><td class="spacer"></td><td class="spacer"></td><td class="spacer"></td><td colspan="%s"><small>%s <a href="javascript:document.getElementById(\'create_base_form_%s_%s\').submit()">%s</a></small></td></tr>',
+							$this->getDepth()+3-3,_('This base entry does not exist.'),$server->getIndex(),$javascript_id,_('Create it?'));
+
+				} else {
+					$this->draw_item($base->getDN(),-1);
+				}
+			}
+
+			echo '</table>';
+
+			if (! $onlytree)
+				echo '</div></td></tr>';
+
+		# We are not logged in, draw a login... link.
+		} else {
+			switch ($server->getAuthType()) {
+				case 'cookie':
+				case 'http':
+				case 'session':
+					$this->draw_login_link();
+					break;
+
+				case 'config':
+				case 'proxy':
+				case 'sasl':
+					break;
+
+				default:
+					die(sprintf('Error: %s hasnt been configured for auth_type %s',__METHOD__,$server->getAuthType()));
+			}
+		}
+
+		# Tree Footer.
+		echo '</table>';
+		echo "\n\n";
+
+		if (! $js_drawn) {
+			$this->draw_javascript();
+			$js_drawn = true;
+		}
+	}
+
+	/**
+	 * Draw the server name
+	 */
+	protected function draw_server_name() {
+		return;
+		if (DEBUG_ENABLED && (($fargs=func_get_args())||$fargs='NOARGS'))
+			debug_log('Entered (%%)',33,0,__FILE__,__LINE__,__METHOD__,$fargs);
+
+		$server = $this->getServer();
+
+		echo '<tr class="server">';
+		printf('<td class="icon"><img src="%s/server.png" alt="%s" /></td>',IMGDIR,_('Server'));
+		printf('<td class="name" colspan="%s">',$this->getDepth()+3-1);
+		printf('%s',$server->getName());
+
+		if (! is_null($server->inactivityTime())) {
+			$m = sprintf(_('Inactivity will log you off at %s'),
+				strftime('%H:%M',$server->inactivityTime()));
+			printf(' <img width="14" height="14" src="%s/timeout.png" title="%s" alt="%s"/>',IMGDIR,$m,'Timeout');
+		}
+		echo '</td></tr>';
+	}
+
+	/**
+	 * Draw the tree menu options
+	 */
+	protected function draw_menu() {
+		if (DEBUG_ENABLED && (($fargs=func_get_args())||$fargs='NOARGS'))
+			debug_log('Entered (%%)',33,0,__FILE__,__LINE__,__METHOD__,$fargs);
+
+		$links = '';
+
+		if (is_array($_SESSION[APPCONFIG]->getValue('menu','session')))
+			foreach ($_SESSION[APPCONFIG]->getValue('menu','session') as $link => $title) {
+				if ($this->get_menu_item($link))
+					$links .= sprintf('<td class="server_links">%s</td>',$this->get_menu_item($link));
+			}
+
+		# Finally add our logout link.
+		$links .= sprintf('<td class="server_links">%s</td>',$this->get_logout_menu_item());
+
+		# Draw the quick-links below the server name:
+		if ($links) {
+			printf('<tr><td class="spacer"></td><td colspan="%s" class="links">',$this->getDepth()+3-1);
+			printf('<table><tr>%s</tr></table>',$links);
+			echo '</td></tr>';
+		}
+	}
+
+	/**
+	 * Get the HTML for each tree menu option
+	 */
+	protected function get_menu_item($item) {
+		if (DEBUG_ENABLED && (($fargs=func_get_args())||$fargs='NOARGS'))
+			debug_log('Entered (%%)',33,0,__FILE__,__LINE__,__METHOD__,$fargs);
+
+		$server = $this->getServer();
+		$menu = array();
+
+		switch($item) {
+			case 'schema':
+				if (! $_SESSION[APPCONFIG]->isCommandAvailable('script','schema'))
+					return '';
+
+				$menu['cmd'] = 'schema';
+				$menu['ajax'] = _('Loading Schema');
+				$menu['div'] = 'BODY';
+				$menu['title'] = _('View schema for');
+				$menu['img'] = 'schema-big.png';
+				$menu['name'] = _('schema');
+
+				break;
+
+			case 'search':
+				if (! $_SESSION[APPCONFIG]->isCommandAvailable('script','query_engine'))
+					return '';
+
+				$menu['cmd'] = 'query_engine';
+				$menu['ajax'] = _('Loading Search');
+				$menu['div'] = 'BODY';
+				$menu['title'] = _('Search');
+				$menu['img'] = 'search-big.png';
+				$menu['name'] = _('search');
+
+				break;
+
+			case 'refresh':
+				if (! $_SESSION[APPCONFIG]->isCommandAvailable('script','refresh'))
+					return '';
+
+				$menu['cmd'] = 'refresh';
+				$menu['href'] = '&noheader=1&purge=1';
+				$menu['ajax'] = _('Refreshing Tree');
+				$menu['div'] = sprintf('SID_%s_nodes',$server->getIndex());
+				$menu['title'] = _('Refresh');
+				$menu['img'] = 'refresh-big.png';
+				$menu['name'] = _('refresh');
+
+				break;
+
+			case 'server_info':
+				if (! $_SESSION[APPCONFIG]->isCommandAvailable('script','server_info'))
+					return '';
+
+				$menu['cmd'] = 'server_info';
+				$menu['ajax'] = _('Loading Info');
+				$menu['div'] = 'BODY';
+				$menu['title'] = _('Info');
+				$menu['img'] = 'info-big.png';
+				$menu['name'] = _('info');
+
+				break;
+
+			case 'monitor':
+				if (! $_SESSION[APPCONFIG]->isCommandAvailable('script','monitor'))
+					return '';
+
+				$attrs = $server->getRootDSE();
+				if (! $attrs || ! isset($attrs['monitorcontext']))
+					return '';
+
+				$menu['cmd'] = 'monitor';
+				$menu['ajax'] = _('Loading Monitor Info');
+				$menu['div'] = 'BODY';
+				$menu['title'] = _('Monitor');
+				$menu['img'] = 'monitorserver-big.png';
+				$menu['name'] = _('monitor');
+
+				break;
+
+			case 'import':
+				if (! $_SESSION[APPCONFIG]->isCommandAvailable('script','import_form') || ! $_SESSION[APPCONFIG]->isCommandAvailable('script','import') || $server->isReadOnly())
+					return '';
+
+				$menu['cmd'] = 'import_form';
+				$menu['ajax'] = _('Loading Import');
+				$menu['div'] = 'BODY';
+				$menu['title'] = _('Import');
+				$menu['img'] = 'import-big.png';
+				$menu['name'] = _('import');
+
+				break;
+
+			case 'export':
+				if (! $_SESSION[APPCONFIG]->isCommandAvailable('script','export_form') || ! $_SESSION[APPCONFIG]->isCommandAvailable('script','export'))
+					return '';
+
+				$menu['cmd'] = 'export_form';
+				$menu['ajax'] = _('Loading Export');
+				$menu['div'] = 'BODY';
+				$menu['title'] = _('Export');
+				$menu['img'] = 'export-big.png';
+				$menu['name'] = _('export');
+
+				break;
+
+			default:
+				return false;
+		}
+
+		$href_parms = htmlspecialchars(sprintf('cmd=%s&server_id=%s%s',$menu['cmd'],$server->getIndex(),isset($menu['href']) ? $menu['href'] : ''));
+
+		if (isAjaxEnabled())
+			return sprintf('<a href="cmd.php?%s" onclick="return ajDISPLAY(\'%s\',\'%s\',\'%s\');" title="%s %s"><img src="%s/%s" alt="%s" /><br />%s</a>',
+				$href_parms,$menu['div'],$href_parms,$menu['ajax'],$menu['title'],$server->getName(),IMGDIR,$menu['img'],$menu['name'],$menu['name']);
+		else
+			return sprintf('<a href="cmd.php?%s" title="%s %s"><img src="%s/%s" alt="%s" /><br />%s</a>',
+				$href_parms,$menu['title'],$server->getName(),IMGDIR,$menu['img'],$menu['name'],$menu['name']);
+	}
+
+	protected function get_logout_menu_item() {
+		if (DEBUG_ENABLED && (($fargs=func_get_args())||$fargs='NOARGS'))
+			debug_log('Entered (%%)',33,0,__FILE__,__LINE__,__METHOD__,$fargs);
+
+		$server = $this->getServer();
+		$href = sprintf('cmd.php?cmd=logout&server_id=%s',$server->getIndex());
+
+		if (! $_SESSION[APPCONFIG]->isCommandAvailable('script','logout') || in_array($server->getAuthType(),array('config','http','proxy')))
+			return '';
+		else
+			return sprintf('<a href="%s" title="%s"><img src="%s/%s" alt="%s" /><br />%s</a>',
+				htmlspecialchars($href),_('Logout of this server'),IMGDIR,'logout-big.png',_('logout'),_('logout'));
+	}
+
+	/**
+	 * Draw the Logged in User
+	 */
+	protected function draw_logged_in_user() {
+		if (DEBUG_ENABLED && (($fargs=func_get_args())||$fargs='NOARGS'))
+			debug_log('Entered (%%)',33,0,__FILE__,__LINE__,__METHOD__,$fargs);
+
+		$server = $this->getServer();
+
+		$logged_in_dn = $server->getLogin(null);
+		echo '<tr>';
+		echo '<td class="spacer"></td>';
+		printf('<td class="logged_in" colspan="%s">%s: ',$this->getDepth()+3-1,_('Logged in as'));
+
+		if ($server->getContainerTop($logged_in_dn) == $logged_in_dn) {
+			$logged_in_branch = '';
+			$logged_in_dn_array = array();
+
+		} else {
+			$logged_in_branch = preg_replace('/,'.$server->getContainerTop($logged_in_dn).'$/','',$logged_in_dn);
+			$logged_in_dn_array = pla_explode_dn($logged_in_branch);
+		}
+
+		$bases = $server->getContainerTop($logged_in_dn);
+		if (is_array($bases) && count($bases))
+			array_push($logged_in_dn_array,$bases);
+
+		$rdn = $logged_in_dn;
+
+		# Some sanity checking here, in case our DN doesnt look like a DN
+		if (! is_array($logged_in_dn_array))
+			$logged_in_dn_array = array($logged_in_dn);
+
+		if (trim($logged_in_dn)) {
+			if ($server->dnExists($logged_in_dn))
+				foreach ($logged_in_dn_array as $rdn_piece) {
+					$href = sprintf('cmd.php?cmd=template_engine&server_id=%s&dn=%s',$server->getIndex(),rawurlencode($rdn));
+					printf('<a href="%s">%s</a>',htmlspecialchars($href),pretty_print_dn($rdn_piece));
+
+					if ($rdn_piece != end($logged_in_dn_array))
+						echo ',';
+
+					$rdn = substr($rdn,(1 + strpos($rdn,',')));
+				}
+
+			else
+				echo $logged_in_dn;
+
+		} else {
+			echo 'Anonymous';
+		}
+
+		echo '</td>';
+		echo '</tr>';
+	}
+
+	/**
+	 * Recursively descend on the given dn and draw the tree in html
+	 *
+	 * @param dn $dn Current dn.
+	 * @param int $level Level to start drawing (start to -1)
+	 */
+	protected function draw_item($item,$level) {
+		if (DEBUG_ENABLED && (($fargs=func_get_args())||$fargs='NOARGS'))
+			debug_log('Entered (%%)',33,0,__FILE__,__LINE__,__METHOD__,$fargs);
+
+		$server = $this->getServer();
+
+		# Get entry to display as node
+		$entry = $this->getEntry($item);
+
+		# If the entry doesnt exist, we'll add it.
+		if (! $entry) {
+			$this->addEntry($item);
+			$entry = $this->getEntry($item);
+		}
+
+		# If the entry doesnt exist in the server, then return here with an empty string.
+		if (! $entry)
+			return;
+
+		# Get our children.
+		$child_count = $this->readChildrenNumber($item);
+
+		$rdn = get_rdn($item);
+		$dnENCODE = rawurlencode($item);
+		$href['expand'] = htmlspecialchars(sprintf('cmd.php?cmd=expand&server_id=%s&dn=%s',$server->getIndex(),$dnENCODE));
+		$href['collapse'] = htmlspecialchars(sprintf('cmd.php?cmd=collapse&server_id=%s&dn=%s',$server->getIndex(),$dnENCODE));
+		$href['edit'] = htmlspecialchars(sprintf('cmd.php?cmd=template_engine&server_id=%s&dn=%s',$server->getIndex(),$dnENCODE));
+
+		echo '<tr class="option">';
+		printf('<td class="spacer" colspan="%s"></td>',$level+2);
+
+		# Is this node expanded? (deciding whether to draw "+" or "-")
+		if ($entry->isOpened())
+			if (! $child_count && ! $this->getServer()->isShowCreateEnabled())
+				printf('<td class="expander"><img src="%s/minus.png" alt="-" /></td>',IMGDIR);
+			else
+				printf('<td class="expander"><a href="%s"><img src="%s/minus.png" alt="-" /></a></td>',$href['collapse'],IMGDIR);
+		else
+			if (($child_count !== false) && (! $child_count) && (! $this->getServer()->isShowCreateEnabled()))
+				printf('<td class="expander"><img src="%s/minus.png" alt="-" /></td>',IMGDIR);
+			else
+				printf('<td class="expander"><a href="%s"><img src="%s/plus.png" alt="+" /></a></td>',$href['expand'],IMGDIR);
+
+		printf('<td class="icon"><a href="%s" id="node_%s_%s"><img src="%s/%s" alt="img" /></a></td>',
+			$href['edit'],$server->getIndex(),preg_replace('/=/','_',base64_encode($item)),IMGDIR,$entry->getIcon());
+
+		printf('<td class="phplm" colspan="%s" style="width: 100%%;"><span style="white-space: nowrap;">',$this->getDepth()+3-$level);
+		printf('<a href="%s">%s</a>',$href['edit'],$this->get_formatted_dn($entry,$level));
+
+		if ($child_count)
+			printf(' <span class="count">(%s)</span>',$child_count);
+
+		echo '</span></td></tr>';
+
+		if ($entry->isOpened()) {
+			/* Draw the "create new" link at the top of the tree list if there are more than 10
+			 * entries in the listing for this node.
+			 */
+			if (!$server->isReadOnly() && (count($entry->getChildren()) > 10)
+				&& $this->getServer()->isShowCreateEnabled()) {
+
+				$this->draw_create_link($rdn,$level,$dnENCODE);
+			}
+
+			foreach ($entry->getChildren() as $dnChildEntry)
+				$this->draw_item($dnChildEntry,$level+1);
+
+			# Always draw the "create new" link at the bottom of the listing
+			if (! $server->isReadOnly() && ! $entry->isLeaf() && $this->getServer()->isShowCreateEnabled()) {
+				$this->draw_create_link($rdn,$level,$dnENCODE);
+			}
+		}
+
+		if (DEBUG_ENABLED)
+			debug_log('Leaving (%s,%s)',33,0,__FILE__,__LINE__,__METHOD__,$item,$level);
+	}
+
+	protected function get_formatted_dn($entry,$level) {
+		if (DEBUG_ENABLED && (($fargs=func_get_args())||$fargs='NOARGS'))
+			debug_log('Entered (%%)',33,0,__FILE__,__LINE__,__METHOD__,$fargs);
+
+		if ($level < 0)
+			return pretty_print_dn($entry->getDN());
+		else
+			return draw_formatted_dn($this->getServer(),$entry);
+	}
+
+	/**
+	 * Print the HTML to show the "create new entry here".
+	 *
+	 * @param dn $rdn
+	 * @param int $level
+	 * @param dn $encoded_dn
+	 */
+	protected function draw_create_link($rdn,$level,$encoded_dn) {
+		if (DEBUG_ENABLED && (($fargs=func_get_args())||$fargs='NOARGS'))
+			debug_log('Entered (%%)',33,0,__FILE__,__LINE__,__METHOD__,$fargs);
+
+		# print the "Create New object" link.
+		$href = htmlspecialchars(sprintf('cmd.php?cmd=template_engine&server_id=%s&container=%s',$this->getServerID(),$encoded_dn));
+
+		echo '<tr>';
+		printf('<td class="spacer" colspan="%s"></td>',$level+3);
+		printf('<td class="icon"><a href="%s"><img src="%s/create.png" alt="%s" /></a></td>',$href,IMGDIR,_('new'));
+		printf('<td class="link" colspan="%s"><a href="%s" title="%s %s">%s</a></td>',
+			$this->getDepth()+3-$level,$href,_('Create a new entry in'),$rdn,_('Create new entry here'));
+		echo '</tr>';
+	}
+
+	/**
+	 * Draw login link
+	 */
+	protected function draw_login_link() {
+		if (DEBUG_ENABLED && (($fargs=func_get_args())||$fargs='NOARGS'))
+			debug_log('Entered (%%)',33,0,__FILE__,__LINE__,__METHOD__,$fargs);
+
+		$server = $this->getServer();
+		$href_parm = htmlspecialchars(sprintf('cmd=%s&server_id=%s',get_custom_file($server->getIndex(),'login_form',''),$server->getIndex()));
+
+		echo '<tr class="option"><td class="spacer"></td>';
+
+		if (isAjaxEnabled()) {
+			printf('<td class="icon"><a href="cmd.php?%s" onclick="return ajDISPLAY(\'BODY\',\'%s\',\'%s\');" title="%s %s"><img src="%s/%s" alt="%s" /></a></td>',
+				$href_parm,$href_parm,_('Loading Login'),_('Login to'),$server->getName(),IMGDIR,'login.png',_('login'));
+			printf('<td class="logged_in" colspan="%s"><a href="cmd.php?%s" onclick="return ajDISPLAY(\'BODY\',\'%s\',\'%s\');" title="%s %s">%s</a></td>',
+				$this->getDepth()+3-2,$href_parm,$href_parm,_('Loading Login'),_('Login to'),$server->getName(),_('login'));
+
+		} else {
+			printf('<td class="icon"><a href="cmd.php?%s"><img src="%s/%s" alt="%s" /></a></td>',$href_parm,IMGDIR,'login.png',_('login'));
+			printf('<td class="logged_in" colspan="%s"><a href="cmd.php?%s">%s...</a></td>',$this->getDepth()+3-2,$href_parm,_('Login'));
+		}
+
+		echo '</tr>';
+
+		printf('<tr><td class="blank" colspan="%s">&nbsp;</td></tr>',$this->getDepth()+3);
+		printf('<tr><td class="blank" colspan="%s">&nbsp;</td></tr>',$this->getDepth()+3);
+	}
+
+	/**
+	 * If there is javascript, draw it
+	 */
+	protected function draw_javascript() {
+		if (DEBUG_ENABLED && (($fargs=func_get_args())||$fargs='NOARGS'))
+			debug_log('Entered (%%)',33,0,__FILE__,__LINE__,__METHOD__,$fargs);
+
+		if ($this->javascript) {
+			echo "<!-- Forms for javascript submit to call to create base_dns -->\n";
+			echo $this->javascript;
+			echo "<!-- The end of the forms for javascript submit to call to create base_dns -->\n";
+			$this->javascript = '';
+		}
+	}
+
+	/**
+	 * Work out how deep the "opened" tree is.
+	 */
+	public function getDepth() {
+		if (DEBUG_ENABLED && (($fargs=func_get_args())||$fargs='NOARGS'))
+			debug_log('Entered (%%)',33,0,__FILE__,__LINE__,__METHOD__,$fargs);
+
+		$server = $this->getServer();
+
+		# If we are not logged in
+		if (! $server->isLoggedIn(null))
+			return 0;
+
+		static $depths = array();
+
+		if (! isset($depths[$server->getIndex()])) {
+			$max = 0; # BaseDN are open, so we start at 1.
+
+			foreach ($this->entries as $dn) {
+				$basedepth = count(pla_explode_dn($server->getContainerPath($dn->getDN(),'/')));
+				$depth = 0;
+
+				$depth = count(pla_explode_dn($dn->getDN()))+1-$basedepth;
+
+				if ($depth > $max)
+					$max = $depth;
+			}
+
+			$depths[$server->getIndex()] = $max;
+		}
+
+		return $depths[$server->getIndex()];
+	}
+}
+?>
diff --git a/lam/templates/3rdParty/pla/lib/JpegAttribute.php b/lam/templates/3rdParty/pla/lib/JpegAttribute.php
new file mode 100644
index 00000000..d4400480
--- /dev/null
+++ b/lam/templates/3rdParty/pla/lib/JpegAttribute.php
@@ -0,0 +1,17 @@
+<?php
+/**
+ * Classes and functions for the template engine.
+ *
+ * @author The phpLDAPadmin development team
+ * @package phpLDAPadmin
+ */
+
+/**
+ * Represents an attribute whose values are jpeg pictures
+ *
+ * @package phpLDAPadmin
+ * @subpackage Templates
+ */
+class JpegAttribute extends BinaryAttribute {
+}
+?>
diff --git a/lam/templates/3rdParty/pla/lib/MassRender.php b/lam/templates/3rdParty/pla/lib/MassRender.php
new file mode 100644
index 00000000..f0bf67e5
--- /dev/null
+++ b/lam/templates/3rdParty/pla/lib/MassRender.php
@@ -0,0 +1,48 @@
+<?php
+/**
+ * This class will render the editing of multiple LDAP entries.
+ *
+ * @author The phpLDAPadmin development team
+ * @package phpLDAPadmin
+ */
+
+/**
+ * TemplateRender class
+ *
+ * @package phpLDAPadmin
+ * @subpackage Templates
+ */
+class MassRender extends TemplateRender {
+	protected function drawMassFormReadWriteValueAttribute($attribute,$i,$j) {
+		if (DEBUGTMP) printf('<font size=-2>%s</font><br />',__METHOD__);
+
+		$val = $attribute->getValue($i);
+
+		if ($attribute->getHelper())
+			echo '<table cellspacing="0" cellpadding="0" border=1><tr><td valign="top">';
+
+		printf('<input type="text" class="value" name="mass_values[%s][%s][%s]" id="new_values_%s_%s_%s" value="%s" %s%s %s %s/>',
+			$j,htmlspecialchars($attribute->getName()),$i,
+			$j,htmlspecialchars($attribute->getName()),$i,
+			htmlspecialchars($val),
+			$attribute->needJS('focus') ? sprintf('onfocus="focus_%s(this);" ',$attribute->getName()) : '',
+			$attribute->needJS('blur') ? sprintf('onblur="blur_%s(this);" ',$attribute->getName()) : '',
+			($attribute->getSize() > 0) ? sprintf('size="%s"',$attribute->getSize()) : '',
+			($attribute->getMaxLength() > 0) ? sprintf('maxlength="%s"',$attribute->getMaxLength()) : '');
+
+		if ($attribute->getHelper()) {
+			echo '</td><td valign="top">';
+			$this->draw('AttributeHelper',$attribute,$i);
+			echo '</td></tr></table>';
+		}
+	}
+
+	protected function drawMassFormReadWriteValueBinaryAttribute($attribute,$i,$j) {
+		$this->drawFormReadWriteValueBinaryAttribute($attribute,$i);
+	}
+
+	protected function drawMassFormReadWriteValueJpegAttribute($attribute,$i,$j) {
+		$this->drawFormReadOnlyValueJpegAttribute($attribute,$i);
+	}
+}
+?>
diff --git a/lam/templates/3rdParty/pla/lib/MultiLineAttribute.php b/lam/templates/3rdParty/pla/lib/MultiLineAttribute.php
new file mode 100644
index 00000000..b6d0eb52
--- /dev/null
+++ b/lam/templates/3rdParty/pla/lib/MultiLineAttribute.php
@@ -0,0 +1,35 @@
+<?php
+/**
+ * Classes and functions for the template engine.
+ *
+ * @author The phpLDAPadmin development team
+ * @package phpLDAPadmin
+ */
+
+/**
+ * Represents a attribute whose values are multiline text
+ *
+ * @package phpLDAPadmin
+ * @subpackage Templates
+ */
+class MultiLineAttribute extends Attribute {
+	protected $rows = 0;
+	protected $cols = 0;
+
+	public function getRows() {
+		return $this->rows;
+	}
+
+	public function setRows($rows) {
+		$this->rows = $rows;
+	}
+
+	public function getCols() {
+		return $this->cols;
+	}
+
+	public function setCols($cols) {
+		$this->cols = $cols;
+	}
+}
+?>
diff --git a/lam/templates/3rdParty/pla/lib/ObjectClassAttribute.php b/lam/templates/3rdParty/pla/lib/ObjectClassAttribute.php
new file mode 100644
index 00000000..939094dc
--- /dev/null
+++ b/lam/templates/3rdParty/pla/lib/ObjectClassAttribute.php
@@ -0,0 +1,17 @@
+<?php
+/**
+ * Classes and functions for the template engine.
+ *
+ * @author The phpLDAPadmin development team
+ * @package phpLDAPadmin
+ */
+
+/**
+ * Represents an 'objectClass' attribute
+ *
+ * @package phpLDAPadmin
+ * @subpackage Templates
+ */
+class ObjectClassAttribute extends Attribute {
+}
+?>
diff --git a/lam/templates/3rdParty/pla/lib/PageRender.php b/lam/templates/3rdParty/pla/lib/PageRender.php
new file mode 100644
index 00000000..cad0e49a
--- /dev/null
+++ b/lam/templates/3rdParty/pla/lib/PageRender.php
@@ -0,0 +1,1225 @@
+<?php
+/**
+ * @author The phpLDAPadmin development team
+ * @package phpLDAPadmin
+ */
+
+/**
+ * PageRender class
+ *
+ * @package phpLDAPadmin
+ * @subpackage Templates
+ */
+class PageRender extends Visitor {
+	# Template ID
+	protected $template_id;
+	protected $template = null;
+	# Object Variables
+	protected $dn;
+	protected $container;
+	# Page number
+	protected $page;
+
+	public function __construct($server_id,$template_id) {
+		if (DEBUG_ENABLED && (($fargs=func_get_args())||$fargs='NOARGS'))
+			debug_log('Entered (%%)',129,0,__FILE__,__LINE__,__METHOD__,$fargs);
+
+		$this->server_id = $server_id;
+		$this->template_id = $template_id;
+	}
+
+	/**
+	 * Dummy method...
+	 */
+	protected function visitAttribute() {}
+
+	/**
+	 * Get our templates applicable for this object
+	 */
+	protected function getTemplates() {
+		if (DEBUG_ENABLED && (($fargs=func_get_args())||$fargs='NOARGS'))
+			debug_log('Entered (%%)',129,0,__FILE__,__LINE__,__METHOD__,$fargs);
+
+		return new Templates($this->server_id);
+	}
+
+	public function getTemplate() {
+		if (DEBUG_ENABLED && (($fargs=func_get_args())||$fargs='NOARGS'))
+			debug_log('Entered (%%)',129,0,__FILE__,__LINE__,__METHOD__,$fargs);
+
+		return $this->template;
+	}
+
+	public function getTemplateID() {
+		if (DEBUG_ENABLED && (($fargs=func_get_args())||$fargs='NOARGS'))
+			debug_log('Entered (%%)',129,0,__FILE__,__LINE__,__METHOD__,$fargs);
+
+		return $this->template->getID();
+	}
+
+	/**
+	 * Initialise the PageRender
+	 */
+	public function accept() {
+		if (DEBUG_ENABLED && (($fargs=func_get_args())||$fargs='NOARGS'))
+			debug_log('Entered (%%)',129,0,__FILE__,__LINE__,__METHOD__,$fargs);
+
+		if (DEBUGTMP) printf('<font size=-2>%s:%s</font><br />',time(),__METHOD__);
+
+		if ($this->template_id) {
+			$templates = $this->getTemplates();
+			$this->template = $templates->getTemplate($this->template_id);
+
+			if ($this->dn)
+				$this->template->setDN($this->dn);
+			elseif ($this->container)
+				$this->template->setContainer($this->container);
+
+			$this->template->accept();
+
+			# Process our <post> actions
+			if (get_request('post_value','REQUEST'))
+				foreach (get_request('post_value','REQUEST') as $attr => $values) {
+					$attribute = $this->template->getAttribute($attr);
+
+					if (! $attribute)
+						debug_dump_backtrace(sprintf('There was a post_value for an attribute [%s], but it doesnt exist?',$attr),1);
+
+					foreach ($values as $index)
+						if ($attribute->getPostValue())
+							$this->get('Post',$attribute,$index);
+						else
+							$this->get('AutoPost',$attribute,$index);
+				}
+
+			foreach ($this->template->getAttributes(true) as $attribute) {
+				if (DEBUGTMP||DEBUGTMPSUB) printf('<font size=-2>* %s [Accept:%s]</font><br />',__METHOD__,get_class($attribute));
+
+				$this->visit('',$attribute);
+			}
+		}
+	}
+
+	public function drawTitle($title='Title') {
+		printf('<h3 class="title">%s</h3>',$title);
+	}
+
+	public function drawSubTitle($subtitle=null) {
+		if (is_null($subtitle))
+			$subtitle = sprintf('%s: <b>%s</b>',
+				_('DN'),$this->dn);
+
+		printf('<h3 class="subtitle">%s</h3>',$subtitle);
+	}
+
+	public function setDN($dn) {
+		if (DEBUG_ENABLED && (($fargs=func_get_args())||$fargs='NOARGS'))
+			debug_log('Entered (%%)',129,0,__FILE__,__LINE__,__METHOD__,$fargs);
+
+		if ($this->container)
+			system_message(array(
+				'title'=>__METHOD__,
+				'body'=>'CONTAINER set while setting DN',
+				'type'=>'info'));
+
+		$this->dn = $dn;
+	}
+
+	public function setContainer($dn) {
+		if (DEBUG_ENABLED && (($fargs=func_get_args())||$fargs='NOARGS'))
+			debug_log('Entered (%%)',129,0,__FILE__,__LINE__,__METHOD__,$fargs);
+
+		if ($this->dn)
+			system_message(array(
+				'title'=>__METHOD__,
+				'body'=>'DN set while setting CONTAINER',
+				'type'=>'info'));
+
+		$this->container = $dn;
+	}
+
+	/**
+	 * May be overloaded in other classes
+	 */
+	protected function getMode() {}
+	protected function getModeContainer() {}
+
+	/**
+	 * Process our <post> arguments from the templates
+	 */
+	protected function getPostAttribute($attribute,$i) {
+		if (DEBUG_ENABLED && (($fargs=func_get_args())||$fargs='NOARGS'))
+			debug_log('Entered (%%)',129,0,__FILE__,__LINE__,__METHOD__,$fargs);
+
+		$autovalue = $attribute->getPostValue();
+		$args = explode(';',$autovalue['args']);
+		$server = $this->getServer();
+		$vals = $attribute->getValues();
+
+		switch ($autovalue['function']) {
+			/**
+			 * Join will concatenate values with a string, similiar to explode()
+			 * eg: =php.Join(-;%sambaSID%,%sidsuffix%)
+			 *
+			 * * arg 0
+			 *   - character to use when joining the attributes
+			 *
+			 * * arg 1
+			 *   - values to concatenate together. we'll explode %attr% values.
+			 */
+			case 'Join':
+				preg_match_all('/%(\w+)(\|.+)?(\/[lU])?%/U',$args[1],$matchall);
+				$matchattrs = $matchall[1];
+				$char = $args[0];
+
+				$values = array();
+				$blank = 0;
+				foreach ($matchattrs as $joinattr) {
+						$attribute2 = $this->template->getAttribute($joinattr);
+
+						if (! $attribute2) {
+							if (($pv = get_request(strtolower($joinattr),'REQUEST')) && isset($pv[$attribute->getName()][$i])) {
+								array_push($values,$pv[$attribute->getName()][$i]);
+
+								if (! $pv[$attribute->getName()][$i])
+									$blank++;
+
+							} else {
+								array_push($values,'');
+								$blank++;
+							}
+
+						} elseif (count($attribute2->getValues()) == 0) {
+							return;
+
+						} elseif (count($attribute2->getValues()) != 1) {
+							array_push($values,'');
+							$blank++;
+
+							system_message(array(
+								'title'=>_('Invalid value count for [post] processing'),
+								'body'=>sprintf('%s (<b>%s [%s]</b>)',_('Function() variable expansion can only handle 1 value'),
+									$attribute->getName(false),count($attribute->getValues())),
+								'type'=>'warn'));
+
+						} else
+							array_push($values,$attribute2->getValue(0));
+				}
+
+				# If all our value expansion results in blanks, we'll return no value
+				if (count($matchattrs) == $blank)
+					if (count($vals) > 1)
+						$vals[$i] = null;
+					else
+						$vals = null;
+
+				else
+					$vals[$i] = implode($char,$values);
+
+				break;
+
+			/**
+			 * PasswordEncrypt will encrypt a password
+			 * eg: =php.PasswordEncrypt(%enc%;%userPassword%)
+			 *
+			 * This function will encrypt the users password "userPassword" using the "enc" method.
+			 */
+			case 'PasswordEncrypt':
+				if (count($args) != 2) {
+					system_message(array(
+						'title'=>_('Invalid argument count for PasswordEncrypt'),
+						'body'=>sprintf('%s (<b>%s</b>)',_('PasswordEncrypt() only accepts two arguments'),$autovalue['args']),
+						'type'=>'warn'));
+
+					return;
+				}
+
+				if (! $attribute->hasBeenModified())
+					return;
+
+				# Get the attribute.
+				if (preg_match_all('/%(\w+)(\|.+)?(\/[lU])?%/U',strtolower($args[1]),$matchall)) {
+					if (count($matchall[1]) != 1)
+						system_message(array(
+							'title'=>_('Invalid value count for PasswordEncrypt'),
+							'body'=>sprintf('%s (<b>%s</b>)',_('Unable to get the attribute value for PasswordEncrypt()'),count($matchall[1])),
+							'type'=>'warn'));
+
+					$passwordattr = $matchall[1][0];
+					$passwordvalue = $_REQUEST['new_values'][$passwordattr][$i];
+
+				} else
+					$passwordvalue = $args[1];
+
+				if (! trim($passwordvalue) || in_array($passwordvalue,$attribute->getOldValues()))
+					return;
+
+				# Get the encoding
+				if ($passwordattr && preg_match_all('/%(\w+)(\|.+)?(\/[lU])?%/U',strtolower($args[0]),$matchall)) {
+					if (count($matchall[1]) != 1)
+						system_message(array(
+							'title'=>_('Invalid value count for PasswordEncrypt'),
+							'body'=>sprintf('%s (<b>%s</b>)',_('Unable to get the attribute value for PasswordEncrypt()'),count($matchall[1])),
+							'type'=>'warn'));
+
+					$enc = $_REQUEST[$matchall[1][0]][$passwordattr][$i];
+
+				} else
+					$enc = $args[0];
+
+				$enc = strtolower($enc);
+
+				switch ($enc) {
+					case 'lm':
+						$sambapassword = new smbHash;
+						$vals[$i] = $sambapassword->lmhash($passwordvalue);
+
+						break;
+
+					case 'nt':
+						$sambapassword = new smbHash;
+						$vals[$i] = $sambapassword->nthash($passwordvalue);
+
+						break;
+
+					default:
+						$vals[$i] = password_hash($passwordvalue,$enc);
+				}
+
+				$vals = array_unique($vals);
+
+				break;
+
+			default:
+				$vals = $this->get('AutoPost',$attribute,$i);
+		}
+
+		if (! $vals || $vals == $attribute->getValues())
+			return;
+
+		$attribute->clearValue();
+
+		if (! is_array($vals))
+			$attribute->setValue(array($vals));
+		else
+			$attribute->setValue($vals);
+	}
+
+	/**
+	 * This function is invoked if we dont know which template we should be using.
+	 *
+	 * @return string Template ID to be used or null if the user was presented with a list.
+	 */
+	protected function getTemplateChoice() {
+		if (DEBUG_ENABLED && (($fargs=func_get_args())||$fargs='NOARGS'))
+			debug_log('Entered (%%)',129,0,__FILE__,__LINE__,__METHOD__,$fargs);
+
+		if (DEBUGTMP) printf('<font size=-2>%s</font><br />',__METHOD__);
+
+		# First work out our template
+		$templates = $this->getTemplates();
+		$template = $templates->getTemplate($this->template_id);
+
+		# If the template we asked for is available
+		if ($this->template_id === $template->getID()) {
+			if (DEBUGTMP) printf('<font size=-2>%s:<u>%s</u></font><br />',__METHOD__,'Choosing the SELECTED template');
+
+			return $this->template_id;
+
+		# If there are no defined templates
+		} elseif (count($templates->getTemplates($this->getMode(),$this->getModeContainer(),false)) <= 0) {
+			if (DEBUGTMP) printf('<font size=-2>%s:<u>%s</u></font><br />',__METHOD__,'Choosing the DEFAULT template, no other template applicable');
+
+			# Since getTemplate() returns a default template if the one we want doesnt exist, we can return $templates->getID(), it should be the default.
+			return $template->getID();
+
+		# If there is only 1 defined template, and no default available, then that is our template.
+		} elseif ((count($templates->getTemplates($this->getMode(),$this->getModeContainer(),true)) == 1) && ! $this->haveDefaultTemplate()) {
+			if (DEBUGTMP) printf('<font size=-2>%s:<u>%s</u></font><br />',__METHOD__,'AUTOMATIC choosing a template, only 1 template applicable');
+
+			$template = $templates->getTemplates($this->getMode(),$this->getModeContainer(),true);
+			$template = array_shift($template);
+
+			# Dont render the only available template if it is invalid.
+			if (! $template->isInvalid())
+				return $template->getID();
+			else
+				$this->drawTemplateChoice();
+
+		} else {
+			if (DEBUGTMP) printf('<font size=-2>%s:<u>%s</u></font><br />',__METHOD__,'SELECT a template to use.');
+
+			# Propose the template choice
+			$this->drawTemplateChoice();
+		}
+
+		# If we got here, then there wasnt a template.
+		return null;
+	}
+
+	/** DRAW ATTRIBUTE NAME **/
+
+	final protected function drawNameAttribute($attribute) {
+		if (DEBUGTMP) printf('<font size=-2>%s</font><br />',__METHOD__);
+
+		$href = sprintf('cmd.php?cmd=schema&server_id=%s&view=attributes&viewvalue=%s',
+			$this->getServerID(),$attribute->getName());
+
+		if (! $_SESSION[APPCONFIG]->getValue('appearance','show_schema_link'))
+			printf('%s',_($attribute->getFriendlyName()));
+
+		elseif ($attribute->getLDAPtype())
+			printf('<a href="%s" title="%s: %s">%s</a>',
+				htmlspecialchars($href),
+				_('Click to view the schema definition for attribute type'),$attribute->getName(false),_($attribute->getFriendlyName()));
+		else
+			printf('<acronym title="%s">%s</acronym>',_('This attribute is not defined in the LDAP schema'),_($attribute->getFriendlyName()));
+
+		if (DEBUGTMPSUB) printf(' <small>[%s]</small>',get_class($attribute));
+	}
+
+	/** ATTRIBUTE NOTES */
+
+	protected function drawNotesAttribute($attribute) {
+		if (DEBUGTMP) printf('<font size=-2>%s</font><br />',__METHOD__);
+
+		$attr_note = '';
+
+		foreach (array('NoteAlias','NoteRequired','NoteRDN','NoteHint','NoteRO') as $note) {
+			$alias_note = $this->get($note,$attribute);
+
+			if ($alias_note) {
+				if (trim($attr_note))
+					$attr_note .= ', ';
+
+				$attr_note .= $alias_note;
+			}
+		}
+
+		if ($attr_note)
+			printf('<sup><small>%s</small></sup>',$attr_note);
+	}
+
+	protected function getNoteAliasAttribute($attribute) {
+		if (DEBUG_ENABLED && (($fargs=func_get_args())||$fargs='NOARGS'))
+			debug_log('Entered (%%)',129,0,__FILE__,__LINE__,__METHOD__,$fargs);
+
+		if (DEBUGTMP) printf('<font size=-2>%s</font><br />',__METHOD__);
+
+		# Is there a user-friendly translation available for this attribute?
+		$friendly_name = $attribute->getFriendlyName();
+
+		if (strtolower($friendly_name) != $attribute->getName())
+			return sprintf('<acronym title="%s: \'%s\' %s \'%s\'">%s</acronym>',
+				_('Note'),$friendly_name,_('is an alias for'),$attribute->getName(false),_('alias'));
+		else
+			return '';
+	}
+
+	#@todo this function shouldnt re-calculate requiredness, it should be known in the template already - need to set the ldaptype when initiating the attribute.
+	protected function getNoteRequiredAttribute($attribute) {
+		if (DEBUG_ENABLED && (($fargs=func_get_args())||$fargs='NOARGS'))
+			debug_log('Entered (%%)',129,0,__FILE__,__LINE__,__METHOD__,$fargs);
+
+		if (DEBUGTMP) printf('<font size=-2>%s</font><br />',__METHOD__);
+
+		$required_by = '';
+		$sattr_required = '';
+
+		# Is this attribute required by an objectClass ?
+		$sattr = $this->getServer()->getSchemaAttribute($attribute->getName());
+		if ($sattr)
+			$sattr_required = $sattr->getRequiredByObjectClasses();
+
+		if ($sattr_required) {
+			$oc = $this->template->getAttribute('objectclass');
+
+			if ($oc)
+				foreach ($oc->getValues() as $objectclass) {
+					# If this objectclass is in our required list
+					if (in_array_ignore_case($objectclass,$sattr_required)) {
+						$required_by .= sprintf('%s ',$objectclass);
+						continue;
+					}
+
+					# If not, see if it is in our parent.
+					$sattr = $this->getServer()->getSchemaObjectClass($objectclass);
+
+					if (array_intersect($sattr->getParents(),$sattr_required))
+						$required_by .= sprintf('%s ',$objectclass);
+				}
+
+			else
+				debug_dump_backtrace('How can there be no objectclasses?',1);
+		}
+
+		if ($required_by)
+			return sprintf('<acronym title="%s %s">%s</acronym>',_('Required attribute for objectClass(es)'),$required_by,_('required'));
+		else
+			return '';
+	}
+
+	protected function getNoteRDNAttribute($attribute) {
+		if (DEBUG_ENABLED && (($fargs=func_get_args())||$fargs='NOARGS'))
+			debug_log('Entered (%%)',129,0,__FILE__,__LINE__,__METHOD__,$fargs);
+
+		if (DEBUGTMP) printf('<font size=-2>%s</font><br />',__METHOD__);
+
+		# Is this attribute required because its the RDN
+		if ($attribute->isRDN())
+			return sprintf('<acronym title="%s">rdn</acronym>',_('This attribute is required for the RDN.'));
+		else
+			return '';
+	}
+
+	protected function getNoteHintAttribute($attribute) {
+		if (DEBUG_ENABLED && (($fargs=func_get_args())||$fargs='NOARGS'))
+			debug_log('Entered (%%)',129,0,__FILE__,__LINE__,__METHOD__,$fargs);
+
+		if (DEBUGTMP) printf('<font size=-2>%s</font><br />',__METHOD__);
+
+		# Is there a hint for this attribute
+		if ($attribute->getHint())
+			return sprintf('<acronym title="%s">%s</acronym>',_($attribute->getHint()),_('hint'));
+		else
+			return '';
+	}
+
+	protected function getNoteROAttribute($attribute) {
+		if (DEBUG_ENABLED && (($fargs=func_get_args())||$fargs='NOARGS'))
+			debug_log('Entered (%%)',129,0,__FILE__,__LINE__,__METHOD__,$fargs);
+
+		if (DEBUGTMP) printf('<font size=-2>%s</font><br />',__METHOD__);
+
+		# Is this attribute is readonly
+		if ($attribute->isReadOnly())
+			return sprintf('<acronym title="%s">ro</acronym>',_('This attribute has been marked as Read Only.'));
+		else
+			return '';
+	}
+	/** DRAW HIDDEN VALUES **/
+
+	/**
+	 * Draw all hidden attributes
+	 */
+	final public function drawHiddenAttributes() {
+		if (DEBUG_ENABLED && (($fargs=func_get_args())||$fargs='NOARGS'))
+			debug_log('Entered (%%)',129,0,__FILE__,__LINE__,__METHOD__,$fargs);
+
+		foreach ($this->template->getAttributes(true) as $attribute)
+			if ($attribute->hasbeenModified()) {
+				if ($attribute->getValues())
+					foreach ($attribute->getValues() as $index => $details)
+						$this->draw('HiddenValue',$attribute,$index);
+
+				# We are deleting this attribute, so we need to display an empty value
+				else
+					$this->draw('HiddenValue',$attribute,0);
+			}
+	}
+
+	/**
+	 * Draw specific hidden attribute
+	 */
+	final protected function drawHiddenValueAttribute($attribute,$i) {
+		if (DEBUGTMP) printf('<font size=-2>%s</font><br />',__METHOD__);
+
+		$val = $attribute->getValue($i);
+
+		printf('<input type="hidden" name="new_values[%s][%s]" id="new_values_%s_%s" value="%s" />',
+			htmlspecialchars($attribute->getName()),$i,htmlspecialchars($attribute->getName()),$i,
+			htmlspecialchars($val));
+	}
+
+	/** DRAW DISPLAYED OLD VALUES **/
+	protected function drawOldValuesAttribute($attribute) {
+		if (DEBUGTMP) printf('<font size=-2>%s</font><br />',__METHOD__);
+
+		foreach ($attribute->getValues() as $index => $details)
+			$this->draw('OldValue',$attribute,$index);
+	}
+
+	final protected function drawOldValueAttribute($attribute,$i) {
+		if (DEBUGTMP) printf('<font size=-2>%s</font><br />',__METHOD__);
+
+		echo $attribute->getOldValue($i);
+	}
+
+	/** DRAW DISPLAYED CURRENT VALUES **/
+
+	protected function drawCurrentValuesAttribute($attribute) {
+		if (DEBUGTMP) printf('<font size=-2>%s</font><br />',__METHOD__);
+
+		for ($i=0;$i<$attribute->getValueCount();$i++) {
+			if ($i > 0)
+				echo '<br/>';
+
+			$this->draw('CurrentValue',$attribute,$i);
+		}
+	}
+
+	/**
+	 * Draw the current specific value of an attribute
+	 */
+	final protected function drawCurrentValueAttribute($attribute,$i) {
+		if (DEBUGTMP) printf('<font size=-2>%s</font><br />',__METHOD__);
+		if (DEBUGTMPSUB) printf(' <small>[%s]</small>',__METHOD__);
+
+		echo htmlspecialchars($attribute->getValue($i));
+	}
+
+	/**
+	 * Draw a input value for an attribute - used in a form.
+	 */
+	protected function drawFormValueAttribute($attribute,$i) {
+		if (DEBUGTMP) printf('<font size=-2>%s</font><br />',__METHOD__);
+		if (DEBUGTMPSUB) printf(' <small>[%s]</small>',__METHOD__);
+
+		if ($this->getServer()->isReadOnly() || $attribute->isReadOnly()
+			|| ($attribute->isRDN() && $this->template->getType() != 'creation' && $i < count($attribute->getValues())))
+
+			$this->draw('FormReadOnlyValue',$attribute,$i);
+		else
+			$this->draw('FormReadWriteValue',$attribute,$i);
+
+		# Show the ADDVALUE DIV if the attribute can have more values, and we have rendered the last value
+		if ($attribute->haveMoreValues() && $attribute->getValueCount() == $i+1)
+			printf('<div id="ajADDVALUE%s"></div>',$attribute->getName());
+
+		if ($attribute->getPostValue())
+			printf('<input type="hidden" name="post_value[%s][]" value="%s"/>',$attribute->getName(),$i);
+	}
+
+	protected function drawFormReadOnlyValueAttribute($attribute,$i) {
+		if (DEBUGTMP) printf('<font size=-2>%s</font><br />',__METHOD__);
+
+		$val = $attribute->getValue($i);
+
+		printf('<input type="text" class="roval" name="new_values[%s][%s]" id="new_values_%s_%s" value="%s" readonly="readonly" />',
+			htmlspecialchars($attribute->getName()),$i,htmlspecialchars($attribute->getName()),$i,htmlspecialchars($val));
+	}
+
+	protected function drawFormReadWriteValueAttribute($attribute,$i) {
+		if (DEBUGTMP) printf('<font size=-2>%s</font><br />',__METHOD__);
+
+		$val = $attribute->getValue($i);
+
+		if ($attribute->getHelper() || $attribute->getVerify())
+			echo '<table cellspacing="0" cellpadding="0" border="0"><tr><td valign="top">';
+
+		printf('<input type="text" class="value" name="new_values[%s][%s]" id="new_values_%s_%s" value="%s" %s%s %s %s/>',
+			htmlspecialchars($attribute->getName()),$i,
+			htmlspecialchars($attribute->getName()),$i,
+			htmlspecialchars($val),
+			$attribute->needJS('focus') ? sprintf('onfocus="focus_%s(this);" ',$attribute->getName()) : '',
+			$attribute->needJS('blur') ? sprintf('onblur="blur_%s(this);" ',$attribute->getName()) : '',
+			($attribute->getSize() > 0) ? sprintf('size="%s"',$attribute->getSize()) : '',
+			($attribute->getMaxLength() > 0) ? sprintf('maxlength="%s"',$attribute->getMaxLength()) : '');
+
+		if ($attribute->getHelper()) {
+			echo '</td><td valign="top">';
+			$this->draw('AttributeHelper',$attribute,$i);
+			echo '</td></tr>';
+
+		} elseif ($attribute->getVerify())
+			echo '</td></tr>';
+
+		if ($attribute->getVerify()) {
+			printf('<tr><td><input type="text" class="value" name="new_values_verify[%s][%s]" id="new_values_verify_%s_%s" value="" %s %s/>',
+				htmlspecialchars($attribute->getName()),$i,
+				htmlspecialchars($attribute->getName()),$i,
+				($attribute->getSize() > 0) ? sprintf('size="%s"',$attribute->getSize()) : '',
+				($attribute->getMaxLength() > 0) ? sprintf('maxlength="%s"',$attribute->getMaxLength()) : '');
+
+			echo '</td><td valign="top">';
+			printf('(%s)',_('confirm'));
+			echo '</td></tr>';
+		}
+
+		if ($attribute->getHelper() || $attribute->getVerify())
+			echo '</table>';
+	}
+
+	/**
+	 * Draw specific hidden binary attribute
+	 */
+	final protected function drawHiddenValueBinaryAttribute($attribute,$i) {
+		if (DEBUGTMP) printf('<font size=-2>%s</font><br />',__METHOD__);
+
+		$val = $attribute->getValue($i);
+
+		printf('<input type="hidden" name="new_values[%s][%s]" value="%s" />',
+			htmlspecialchars($attribute->getName()),$i,base64_encode($val));
+	}
+
+	final protected function drawOldValueBinaryAttribute($attribute,$i) {
+		# If we dont have a value, we'll just return;
+		if (! $attribute->getOldValue($i))
+			return;
+
+		printf('<small>[%s]</small>',_('Binary Value'));
+	}
+
+	final protected function drawCurrentValueBinaryAttribute($attribute,$i) {
+		printf('<small>[%s]</small>',_('Binary Value'));
+
+		if (in_array($attribute->getName(),array('objectsid')))
+			printf('<small> (%s)</small>', binSIDtoText($attribute->getValue(0)));
+	}
+
+	protected function drawFormReadOnlyValueBinaryAttribute($attribute,$i) {
+		if (DEBUGTMP) printf('<font size=-2>%s</font><br />',__METHOD__);
+
+		$this->draw('CurrentValue',$attribute,$i);
+		echo '<br/><br/>';
+
+		$href = sprintf('download_binary_attr.php?server_id=%s&dn=%s&attr=%s&index=%s',
+		$this->getServerID(),rawurlencode($this->template->getDN()),$attribute->getName(),$i);
+
+		printf('<a href="%s"><img src="%s/save.png" alt="Save" /> %s</a>',
+			htmlspecialchars($href),IMGDIR,_('download value'));
+
+		echo '<br/>';
+	}
+
+	protected function drawFormReadWriteValueBinaryAttribute($attribute,$i) {
+		if (DEBUGTMP) printf('<font size=-2>%s</font><br />',__METHOD__);
+
+		if ($attribute->getValue($i)) {
+			$this->draw('FormReadOnlyValue',$attribute,$i);
+
+			if (! $attribute->isReadOnly() && $_SESSION[APPCONFIG]->isCommandAvailable('script','delete_attr'))
+				printf('<a href="javascript:deleteAttribute(\'%s\',\'%s\',\'%s\');" style="color:red;"><img src="%s/trash.png" alt="Trash" /> %s</a>',
+					$attribute->getName(),$attribute->getFriendlyName(),$i,IMGDIR,_('delete attribute'));
+
+		} else {
+			printf('<input type="file" class="value" name="new_values[%s][%s]" id="new_values_%s_%s" value="" %s%s %s %s/><br />',
+				htmlspecialchars($attribute->getName()),$i,
+				htmlspecialchars($attribute->getName()),$i,
+				$attribute->needJS('focus') ? sprintf('onfocus="focus_%s(this);" ',$attribute->getName()) : '',
+				$attribute->needJS('blur') ? sprintf('onblur="blur_%s(this);" ',$attribute->getName()) : '',
+				($attribute->getSize() > 0) ? 'size="'.$attribute->getSize().'"' : '',
+				($attribute->getMaxLength() > 0) ? 'maxlength="'.$attribute->getMaxLength().'"' : '');
+		}
+	}
+
+	protected function drawFormReadWriteValueDateAttribute($attribute,$i) {
+		if (DEBUGTMP) printf('<font size=-2>%s</font><br />',__METHOD__);
+
+		$val = $attribute->getValue($i);
+
+		echo '<span style="white-space: nowrap;">';
+		printf('<input type="text" class="value" id="new_values_%s_%s" name="new_values[%s][%s]" value="%s" %s%s %s %s/>&nbsp;',
+			$attribute->getName(),$i,
+			htmlspecialchars($attribute->getName()),$i,htmlspecialchars($val),
+			$attribute->needJS('focus') ? sprintf('onfocus="focus_%s(this);" ',$attribute->getName()) : '',
+			$attribute->needJS('blur') ? sprintf('onblur="blur_%s(this);" ',$attribute->getName()) : '',
+			($attribute->getSize() > 0) ? sprintf('size="%s"',$attribute->getSize()) : '',
+			($attribute->getMaxLength() > 0) ? sprintf('maxlength="%s"',$attribute->getMaxLength()) : '');
+
+		$this->draw('SelectorPopup',$attribute,$i);
+		echo '</span>'."\n";
+	}
+
+	protected function drawFormReadWriteValueDnAttribute($attribute,$i) {
+		if (DEBUGTMP) printf('<font size=-2>%s</font><br />',__METHOD__);
+
+		$val = $attribute->getValue($i);
+
+		if ($attribute->getHelper())
+			echo '<table cellspacing="0" cellpadding="0"><tr><td valign="top">';
+
+		$input_name = sprintf('new_values[%s][%s]',htmlspecialchars($attribute->getName()),$i);
+		$id = sprintf('new_values_%s_%s',htmlspecialchars($attribute->getName()),$i);
+
+		printf('<span style="white-space: nowrap;"><input type="text" class="value" name="%s" id="%s" value="%s" %s%s %s %s/>&nbsp;',
+			$input_name,$id,htmlspecialchars($val),
+			$attribute->needJS('focus') ? sprintf('onfocus="focus_%s(this);" ',$attribute->getName()) : '',
+			$attribute->needJS('blur') ? sprintf('onblur="blur_%s(this);" ',$attribute->getName()) : '',
+			($attribute->getSize() > 0) ? 'size="'.$attribute->getSize().'"' : '',
+			($attribute->getMaxLength() > 0) ? 'maxlength="'.$attribute->getMaxLength().'"' : '');
+
+		# Draw a link for popping up the entry browser if this is the type of attribute that houses DNs.
+		draw_chooser_link('entry_form',$id,false);
+		echo '</span>';
+
+		if ($attribute->getHelper()) {
+			echo '</td><td valign="top">';
+			$this->draw('Helper',$attribute,$i);
+			echo '</td></tr></table>';
+		}
+
+		echo "\n";
+	}
+
+	protected function drawFormReadWriteValueGidAttribute($attribute,$i) {
+		if (DEBUGTMP) printf('<font size=-2>%s</font><br />',__METHOD__);
+
+		$this->drawFormReadWriteValueAttribute($attribute,$i);
+
+		$server = $this->getServer();
+		$val = $attribute->getValue($i);
+
+		# If this is a gidNumber on a non-PosixGroup entry, lookup its name and description for convenience
+		if ($this->template->getDN() && ! in_array_ignore_case('posixGroup',$this->getServer()->getDNAttrValue($this->template->getDN(),'objectclass'))) {
+			$query['filter'] = sprintf('(&(objectClass=posixGroup)(gidNumber=%s))',$val);
+			$query['attrs'] = array('dn','description');
+
+			# Reorganise our base, so that our base is first
+			$bases = array_unique(array_merge(array($server->getContainerTop($this->template->getDN())),$server->getBaseDN()));
+
+			# Search our bases, until we find a match.
+			foreach ($bases as $base) {
+				$query['base'] = $base;
+				$group = $this->getServer()->query($query,null);
+
+				if (count($group) > 0) {
+					echo '<br />';
+
+					$group = array_pop($group);
+					$group_dn = $group['dn'];
+					$group_name = explode('=',get_rdn($group_dn));
+					$group_name = $group_name[1];
+					$href = sprintf('cmd.php?cmd=template_engine&server_id=%s&dn=%s',
+						$this->getServerID(),rawurlencode($group_dn));
+
+					echo '<small>';
+					printf('<a href="%s">%s</a>',htmlspecialchars($href),$group_name);
+
+					$description = isset($group['description']) ? $group['description'] : null;
+
+					if (is_array($description))
+						foreach ($description as $item)
+							printf(' (%s)',$item);
+					else
+						printf(' (%s)',$description);
+
+					echo '</small>';
+
+					break;
+				}
+			}
+		}
+	}
+
+	/**
+	 * Draw a Jpeg Attribute
+	 */
+	final protected function drawOldValueJpegAttribute($attribute,$i) {
+		if (DEBUGTMP) printf('<font size=-2>%s</font><br />',__METHOD__);
+		if (DEBUGTMPSUB) printf(' <small>[%s]</small>',__METHOD__);
+
+		# If we dont have a value, we'll just return;
+		if (! $attribute->getOldValue($i))
+			return;
+
+		draw_jpeg_photo($this->getServer(),$this->template->getDN(),$attribute->getName(),$i,false,false);
+	}
+
+	/**
+	 * Draw a Jpeg Attribute
+	 */
+	final protected function drawCurrentValueJpegAttribute($attribute,$i) {
+		if (DEBUGTMP) printf('<font size=-2>%s</font><br />',__METHOD__);
+		if (DEBUGTMPSUB) printf(' <small>[%s]</small>',__METHOD__);
+
+		# If we dont have a value, we'll just return;
+		if (! $attribute->getValue($i))
+			return;
+
+		# If the attribute is modified, the new value needs to be stored in a session variable for the draw_jpeg_photo callback.
+		if ($attribute->hasBeenModified()) {
+			$_SESSION['tmp'][$attribute->getName()][$i] = $attribute->getValue($i);
+			draw_jpeg_photo(null,$this->template->getDN(),$attribute->getName(),$i,false,false);
+		} else
+			draw_jpeg_photo($this->getServer(),$this->template->getDN(),$attribute->getName(),$i,false,false);
+	}
+
+	protected function drawFormReadOnlyValueJpegAttribute($attribute,$i) {
+		$this->draw('HiddenValue',$attribute,$i);
+		$_SESSION['tmp'][$attribute->getName()][$i] = $attribute->getValue($i);
+
+		draw_jpeg_photo(null,$this->template->getDN(),$attribute->getName(),$i,false,false);
+	}
+
+	protected function drawFormReadOnlyValueMultiLineAttribute($attribute,$i) {
+		if (DEBUGTMP) printf('<font size=-2>%s</font><br />',__METHOD__);
+
+		$val = $attribute->getValue($i);
+
+		printf('<textarea class="roval" rows="%s" cols="%s" name="new_values[%s][%s]" id="new_values_%s_%s" readonly="readonly">%s</textarea>',
+			($attribute->getRows() > 0) ? $attribute->getRows() : 5,
+			($attribute->getCols() > 0) ? $attribute->getCols() : 100,
+			htmlspecialchars($attribute->getName()),$i,
+			htmlspecialchars($attribute->getName()),$i,
+			$val);
+	}
+
+	protected function drawFormReadWriteValueMultiLineAttribute($attribute,$i) {
+		if (DEBUGTMP) printf('<font size=-2>%s</font><br />',__METHOD__);
+
+		$val = $attribute->getValue($i);
+
+		printf('<textarea class="value" rows="%s" cols="%s" name="new_values[%s][%s]" id="new_values_%s_%s" %s%s>%s</textarea>',
+			($attribute->getRows() > 0) ? $attribute->getRows() : 5,
+			($attribute->getCols() > 0) ? $attribute->getCols() : 100,
+			htmlspecialchars($attribute->getName()),$i,
+			htmlspecialchars($attribute->getName()),$i,
+			$attribute->needJS('focus') ? sprintf('onfocus="focus_%s(this);" ',$attribute->getName()) : '',
+			$attribute->needJS('blur') ? sprintf('onblur="blur_%s(this);" ',$attribute->getName()) : '',
+			$val);
+	}
+
+	protected function drawFormValueObjectClassAttribute($attribute,$i) {
+		if (DEBUGTMP) printf('<font size=-2>%s</font><br />',__METHOD__);
+
+		$val = $attribute->getValue($i);
+
+		/* It seems that openLDAP allows us to remove additional structural objectclasses
+		   however other LDAP servers, dont remove them (even if we ask them to). */
+		# Do we have our internal attributes.
+		$internal = $this->template->getAttribute('structuralobjectclass');
+
+		if ($internal) {
+			$structural = in_array_ignore_case($val,$internal->getValues());
+
+		# We'll work it out the traditional way.
+		} else {
+			# If this schema structural?
+			$schema_object = ($val) ? $this->getServer()->getSchemaObjectClass($val) : false;
+			$structural = (is_object($schema_object) && $schema_object->getType() == 'structural');
+		}
+
+		if ($structural) {
+			$this->draw('FormReadOnlyValue',$attribute,$i);
+
+			printf(' <small>(<acronym title="%s">%s</acronym>)</small>',
+				_('This is a structural ObjectClass and cannot be removed.'),
+				_('structural'));
+
+		} else
+			$this->draw('FormReadWriteValue',$attribute,$i);
+	}
+
+	protected function getAutoPostPasswordAttribute($attribute,$i) {
+		# If the password is already encoded, then we'll return
+		if (preg_match('/^\{.+\}.+/',$attribute->getValue($i)))
+			return;
+
+		$attribute->setPostValue(array('function'=>'PasswordEncrypt','args'=>sprintf('%%enc%%;%%%s%%',$attribute->getName())));
+		$this->get('Post',$attribute,$i);
+	}
+
+	protected function drawOldValuePasswordAttribute($attribute,$i) {
+		if (DEBUGTMP) printf('<font size=-2>%s</font><br />',__METHOD__);
+		if (DEBUGTMPSUB) printf(' <small>[%s]</small>',__METHOD__);
+
+		$val = $attribute->getOldValue($i);
+
+		if (obfuscate_password_display(get_enc_type($val)))
+			echo str_repeat('*',16);
+		else
+			echo nl2br(htmlspecialchars($attribute->getOldValue($i)));
+	}
+
+	final protected function drawCurrentValuePasswordAttribute($attribute,$i) {
+		if (DEBUGTMP) printf('<font size=-2>%s</font><br />',__METHOD__);
+		if (DEBUGTMPSUB) printf(' <small>[%s]</small>',__METHOD__);
+
+		$val = $attribute->getValue($i);
+
+		if (obfuscate_password_display(get_enc_type($val)))
+			echo str_repeat('*',16);
+		else
+			echo nl2br(htmlspecialchars($attribute->getValue($i)));
+	}
+
+	protected function drawFormReadOnlyValuePasswordAttribute($attribute,$i) {
+		if (DEBUGTMP) printf('<font size=-2>%s</font><br />',__METHOD__);
+
+		$server = $this->getServer();
+		$val = $attribute->getValue($i);
+
+		if (trim($val))
+			$enc_type = get_enc_type($val);
+		else
+			$enc_type = $server->getValue('appearance','password_hash');
+
+		$obfuscate_password = obfuscate_password_display($enc_type);
+
+		printf('<input type="%s" class="roval" name="new_values[%s][%s]" id="new_values_%s_%s" value="%s" %s readonly="readonly" /><br />',
+			($obfuscate_password ? 'password' : 'text'),
+			htmlspecialchars($attribute->getName()),$i,htmlspecialchars($attribute->getName()),
+			$i,htmlspecialchars($val),($attribute->getSize() > 0) ? 'size="'.$attribute->getSize().'"' : '');
+
+		if (trim($val))
+			$this->draw('CheckLink',$attribute,'new_values_'.htmlspecialchars($attribute->getName()).'_'.$i);
+	}
+
+	protected function drawFormReadWriteValuePasswordAttribute($attribute,$i) {
+		if (DEBUGTMP) printf('<font size=-2>%s</font><br />',__METHOD__);
+
+		$server = $this->getServer();
+		$val = $attribute->getValue($i);
+
+		$enc_type = get_enc_type($val);
+
+		# Set the default hashing type if the password is blank (must be newly created)
+		if (trim($val))
+			$enc_type = get_enc_type($val);
+		else
+			$enc_type = $server->getValue('appearance','password_hash');
+
+		echo '<table cellspacing="0" cellpadding="0"><tr><td valign="top">';
+
+		$obfuscate_password = obfuscate_password_display($enc_type);
+		$id = sprintf('new_values_%s_%s',htmlspecialchars($attribute->getName()),$i);
+
+		printf('<input type="%s" class="value" name="new_values[%s][%s]" id="%s" value="%s" %s%s %s %s/>',
+			($obfuscate_password ? 'password' : 'text'),
+			htmlspecialchars($attribute->getName()),$i,$id,
+			htmlspecialchars($val),
+			$attribute->needJS('focus') ? sprintf('onfocus="focus_%s(this);" ',$attribute->getName()) : '',
+			$attribute->needJS('blur') ? sprintf('onblur="blur_%s(this);" ',$attribute->getName()) : '',
+			($attribute->getSize() > 0) ? sprintf('size="%s"',$attribute->getSize()) : '',
+			($attribute->getMaxLength() > 0) ? sprintf('maxlength="%s"',$attribute->getMaxLength()) : '');
+
+		echo '</td><td valign="top">';
+
+		if ($attribute->getHelper())
+			$this->draw('Helper',$attribute,$i);
+		else
+			$this->draw('DefaultHelper',$attribute,$i);
+
+		echo '</td></tr><tr><td valign="top">';
+
+		if ($attribute->getVerify() && $obfuscate_password) {
+			printf('<input type="password" class="value" name="new_values_verify[%s][%s]" id="new_values_verify_%s_%s" value="" %s %s/>',
+				htmlspecialchars($attribute->getName()),$i,
+				htmlspecialchars($attribute->getName()),$i,
+				($attribute->getSize() > 0) ? sprintf('size="%s"',$attribute->getSize()) : '',
+				($attribute->getMaxLength() > 0) ? sprintf('maxlength="%s"',$attribute->getMaxLength()) : '');
+
+			echo '</td><td valign="top">';
+			printf('(%s)',_('confirm'));
+			echo '</td></tr><tr><td valign="top">';
+		}
+
+		$this->draw('CheckLink',$attribute,$id);
+		echo '</td></tr></table>';
+	}
+
+	protected function drawFormReadWriteValueSelectionAttribute($attribute,$i) {
+		if (DEBUGTMP) printf('<font size=-2>%s</font><br />',__METHOD__);
+
+		if ($attribute->isMultiple()) {
+			# For multiple selection, we draw the component only one time
+			if ($i > 0)
+				return;
+
+			$selected = array();
+			$vals = $attribute->getValues();
+			$j = 0;
+
+			if (! $vals && ! is_null($attribute->getDefault()) && ! is_array($vals = $attribute->getDefault()))
+				$vals = array($attribute->getDefault());
+
+			if (($attribute->getSize() > 0) && ($attribute->getSize() < $attribute->getOptionCount())) {
+
+				printf('<select name="new_values[%s][]" size="%s" multiple="multiple">',
+					htmlspecialchars($attribute->getName()),$attribute->getSize());
+
+				foreach ($attribute->getSelection() as $value => $description) {
+					if (in_array($value,$vals))
+						$selected[$value] = true;
+
+					printf('<option id="new_values_%s_%s" value="%s" onmouseDown="focus_%s(this);" onclick="blur_%s(this);" %s>%s</option>',
+						htmlspecialchars($attribute->getName()),$j++,
+						$value,htmlspecialchars($attribute->getName()),htmlspecialchars($attribute->getName()),
+						isset($selected[$value]) ? 'selected="selected"' : '',$description);
+
+					echo "\n";
+				}
+
+				foreach ($vals as $val) {
+					if (! isset($selected[$val]))
+						printf('<option id="new_values_%s_%s" value="%s" onmousedown="focus_%s(this);" onclick="blur_%s(this);" selected="selected">%s</option>',
+							htmlspecialchars($attribute->getName()),$j++,
+							$val,htmlspecialchars($attribute->getName()),
+							htmlspecialchars($attribute->getName()),$val);
+
+					echo "\n";
+				}
+
+				echo '</select>';
+
+			} else {
+				echo '<table cellspacing="0" cellpadding="0" border="0">';
+
+				foreach ($attribute->getSelection() as $value => $description) {
+					if (in_array($value,$vals))
+						$selected[$value] = true;
+
+					printf('<tr><td><input type="checkbox" id="new_values_%s_%s" name="new_values[%s][]" value="%s" %s%s %s/></td><td><span style="white-space: nowrap;">&nbsp;%s</span></td></tr>',
+						htmlspecialchars($attribute->getName()),$j++,
+						htmlspecialchars($attribute->getName()),$value,
+						$attribute->needJS('focus') ? sprintf('onfocus="focus_%s(this);" ',$attribute->getName()) : '',
+						$attribute->needJS('blur') ? sprintf('onblur="blur_%s(this);" ',$attribute->getName()) : '',
+						isset($selected[$value]) ? 'checked="checked"' : '',
+						$description);
+				}
+
+				foreach ($vals as $val)
+					if (! isset($selected[$val]))
+						printf('<tr><td><input type="checkbox" id="new_values_%s_%s" name="new_values[%s][]" value="%s" %s%s checked="checked"/></td><td><span style="white-space: nowrap;">&nbsp;%s</span></td></tr>',
+							htmlspecialchars($attribute->getName()),$j++,
+							htmlspecialchars($attribute->getName()),$val,
+							$attribute->needJS('focus') ? sprintf('onfocus="focus_%s(this);" ',$attribute->getName()) : '',
+							$attribute->needJS('blur') ? sprintf('onblur="blur_%s(this);" ',$attribute->getName()) : '',
+							$val);
+
+				echo '</table>';
+			}
+
+		# This is a single value attribute
+		} else {
+			$val = $attribute->getValue($i) ? $attribute->getValue($i) : $attribute->getDefault();
+
+			if ($attribute->getHelper())
+				echo '<table cellspacing="0" cellpadding="0"><tr><td valign="top">';
+
+			$found = false;
+			$empty_value = false;
+
+			# If we are a required attribute, and the selection is blank, then the user cannot submit this form.
+			if ($attribute->isRequired() && ! count($attribute->getSelection()))
+				system_message(array(
+					'title'=>_('Template Value Error'),
+					'body'=>sprintf('This template uses a selection list for attribute [<b>%s</b>], however the selection list is empty.<br />You may need to create some dependancy entries in your LDAP server so that this attribute renders with values. Alternatively, you may be able to define the appropriate selection values in the template file.',$attribute->getName(false)),
+					'type'=>'warn'));
+
+			printf('<select name="new_values[%s][]" id="new_values_%s_%s" %s%s>',
+				htmlspecialchars($attribute->getName()),
+				htmlspecialchars($attribute->getName()),$i,
+				$attribute->needJS('focus') ? sprintf('onfocus="focus_%s(this);" ',$attribute->getName()) : '',
+				$attribute->needJS('blur') ? sprintf('onblur="blur_%s(this);" ',$attribute->getName()) : '');
+
+			foreach ($attribute->getSelection() as $value => $description) {
+				printf('<option value="%s" %s>%s</option>',$value,
+					((strcasecmp($value,$val) == 0) && $found = true) ? 'selected="selected"' : '',$description);
+
+				if ($value == '')
+					$empty_value = true;
+
+				echo "\n";
+			}
+
+			if (!$found) {
+				printf('<option value="%s" selected="selected">%s</option>',$val,$val == '' ? '&nbsp;' : $val);
+				if ($val == '')
+					$empty_value = true;
+				echo "\n";
+			}
+
+			if ((strlen($val) > 0) && ! $empty_value && $this->template->getDN()) {
+				printf('<option value="">(%s)</option>',_('none, remove value'));
+				echo "\n";
+			}
+			echo '</select>';
+
+			if ($attribute->getHelper()) {
+				echo '</td><td valign="top">';
+				$this->draw('Helper',$attribute,$i);
+				echo '</td></tr></table>';
+			}
+		}
+	}
+
+	/**
+	 * Takes a shadow* attribute and returns the date as an integer.
+	 *
+	 * @param array Attribute objects
+	 * @param string A shadow attribute name
+	 */
+	private function shadow_date($attribute) {
+		if (DEBUG_ENABLED && (($fargs=func_get_args())||$fargs='NOARGS'))
+			debug_log('Entered (%%)',129,0,__FILE__,__LINE__,__METHOD__,$fargs);
+
+		$shadowattr = array();
+		$shadowattr['lastchange'] = $this->template->getAttribute('shadowlastchange');
+		$shadowattr['max'] = $this->template->getAttribute('shadowmax');
+
+		$shadow = array();
+		$shadow['lastchange'] = $shadowattr['lastchange'] ? $shadowattr['lastchange']->getValue(0) : null;
+		$shadow['max'] = $shadowattr['max'] ? $shadowattr['max']->getValue(0) : null;
+
+		if (($attribute->getName() == 'shadowlastchange') && $shadow['lastchange'])
+			$shadow_date = $shadow['lastchange'];
+
+		elseif (($attribute->getName() == 'shadowmax') && ($shadow['max'] > 0) && $shadow['lastchange'])
+			$shadow_date = $shadow['lastchange']+$shadow['max'];
+
+		elseif (($attribute->getName() == 'shadowwarning') && ($attribute->getValue(0) > 0)
+			&& $shadow['lastchange'] && $shadow['max'] && $shadow['max'] > 0)
+			$shadow_date = $shadow['lastchange']+$shadow['max']-$attribute->getValue(0);
+
+		elseif (($attribute->getName() == 'shadowinactive') && ($attribute->getValue(0) > 0)
+			&& $shadow['lastchange'] && $shadow['max'] && $shadow['max'] > 0)
+			$shadow_date = $shadow['lastchange']+$shadow['max']+$attribute->getValue(0);
+
+		elseif (($attribute->getName() == 'shadowmin') && ($attribute->getValue(0) > 0) && $shadow['lastchange'])
+			$shadow_date = $shadow['lastchange']+$attribute->getValue(0);
+
+		elseif (($attribute->getName() == 'shadowexpire') && ($attribute->getValue(0) > 0))
+			$shadow_date = $shadowattr->getValue(0);
+
+		# Couldn't interpret the shadow date (could be 0 or -1 or something)
+		else
+			return false;
+
+		return $shadow_date*24*3600;
+	}
+
+	protected function drawShadowDateShadowAttribute($attribute) {
+		if (DEBUGTMP) printf('<font size=-2>%s</font><br />',__METHOD__);
+
+		$shadow_before_today_attrs = arrayLower($attribute->shadow_before_today_attrs);
+		$shadow_after_today_attrs = arrayLower($attribute->shadow_after_today_attrs);
+		$shadow_date = $this->shadow_date($attribute);
+
+		if (! $shadow_date)
+			return;
+
+		$today = date('U');
+
+		echo '<br/><small>';
+		if (($today < $shadow_date) && in_array(strtolower($attribute->getName()),$shadow_before_today_attrs))
+			printf('<span style="color:red">(%s)</span>',
+				strftime($_SESSION[APPCONFIG]->getValue('appearance','date'),$shadow_date));
+
+		elseif (($today > $shadow_date) && in_array(strtolower($attribute->getName()),$shadow_after_today_attrs))
+			printf('<span style="color:red">(%s)</span>',
+				strftime($_SESSION[APPCONFIG]->getValue('appearance','date'),$shadow_date));
+
+		else
+			printf('(%s)',
+				strftime($_SESSION[APPCONFIG]->getValue('appearance','date'),$shadow_date));
+
+		echo '</small><br />';
+	}
+
+	protected function drawFormReadOnlyValueShadowAttribute($attribute,$i) {
+		if (DEBUGTMP) printf('<font size=-2>%s</font><br />',__METHOD__);
+
+		$this->drawFormReadOnlyValueAttribute($attribute,$i);
+		$this->draw('ShadowDate',$attribute);
+	}
+
+	protected function drawFormReadWriteValueShadowAttribute($attribute,$i) {
+		if (DEBUGTMP) printf('<font size=-2>%s</font><br />',__METHOD__);
+
+		$this->drawFormReadWriteValueAttribute($attribute,$i);
+		$this->draw('ShadowDate',$attribute);
+	}
+}
+?>
diff --git a/lam/templates/3rdParty/pla/lib/PasswordAttribute.php b/lam/templates/3rdParty/pla/lib/PasswordAttribute.php
new file mode 100644
index 00000000..2667197d
--- /dev/null
+++ b/lam/templates/3rdParty/pla/lib/PasswordAttribute.php
@@ -0,0 +1,17 @@
+<?php
+/**
+ * Classes and functions for the template engine.
+ *
+ * @author The phpLDAPadmin development team
+ * @package phpLDAPadmin
+ */
+
+/**
+ * Represents an attribute whose values are passwords
+ *
+ * @package phpLDAPadmin
+ * @subpackage Templates
+ */
+class PasswordAttribute extends Attribute {
+}
+?>
diff --git a/lam/templates/3rdParty/pla/lib/Query.php b/lam/templates/3rdParty/pla/lib/Query.php
new file mode 100644
index 00000000..a6941e50
--- /dev/null
+++ b/lam/templates/3rdParty/pla/lib/Query.php
@@ -0,0 +1,283 @@
+<?php
+/**
+ * Classes and functions for the query engine.
+ *
+ * @author The phpLDAPadmin development team
+ * @package phpLDAPadmin
+ */
+
+/**
+ * Query Class
+ *
+ * @package phpLDAPadmin
+ * @subpackage Queries
+ */
+class Query extends xmlTemplate {
+	protected $description = '';
+	public $results = array();
+
+	/**
+	 * Main processing to store the template.
+	 *
+	 * @param xmldata Parsed xmldata from xml2array object
+	 */
+	protected function storeTemplate($xmldata) {
+		if (DEBUG_ENABLED && (($fargs=func_get_args())||$fargs='NOARGS'))
+			debug_log('Entered (%%)',5,0,__FILE__,__LINE__,__METHOD__,$fargs);
+
+		$server = $this->getServer();
+
+		foreach ($xmldata['query'] as $xml_key => $xml_value) {
+			if (DEBUG_ENABLED)
+				debug_log('Foreach loop Key [%s] Value [%s]',4,0,__FILE__,__LINE__,__METHOD__,$xml_key,is_array($xml_value));
+
+			switch ($xml_key) {
+
+				# Build our attribute list from the DN and Template.
+				case ('attributes'):
+					if (DEBUG_ENABLED)
+						debug_log('Case [%s]',4,0,__FILE__,__LINE__,__METHOD__,$xml_key);
+
+					if (is_array($xmldata['query'][$xml_key])) {
+						foreach ($xmldata['query'][$xml_key] as $tattrs) {
+							foreach ($tattrs as $index => $details) {
+
+								if (DEBUG_ENABLED)
+									debug_log('Foreach tattrs Key [%s] Value [%s]',4,0,__FILE__,__LINE__,__METHOD__,
+										$index,$details);
+
+								# If there is no schema definition for the attribute, it will be ignored.
+								if ($sattr = $server->getSchemaAttribute($index)) {
+									if (is_null($attribute = $this->getAttribute($sattr->getName())))
+										$attribute = $this->addAttribute($sattr->getName(false),array('values'=>array()));
+
+									$attribute->show();
+									$attribute->setXML($details);
+								}
+							}
+						}
+					}
+
+					break;
+
+				# Build our bases list from the DN and Template.
+				case ('bases'):
+					if (isset($xmldata['query'][$xml_key]['base']))
+						if (is_array($xmldata['query'][$xml_key]['base']))
+							$this->base = $xmldata['query'][$xml_key]['base'];
+						else
+							$this->base = array($xmldata['query'][$xml_key]['base']);
+					else
+						error(sprintf(_('In the XML file (%s), [%s] contains an unknown key.'),
+							$this->filename,$xml_key),'error','index.php');
+
+					$this->base = array_unique($this->base);
+					break;
+
+				default:
+					if (DEBUG_ENABLED)
+						debug_log('Case [%s]',4,0,__FILE__,__LINE__,__METHOD__,$xml_key);
+
+					# Some key definitions need to be an array, some must not be:
+					$allowed_arrays = array('');
+					$storelower = array('');
+					$storearray = array('');
+
+					# Items that must be stored lowercase
+					if (in_array($xml_key,$storelower))
+						if (is_array($xml_value))
+							foreach ($xml_value as $index => $value)
+								$xml_value[$index] = strtolower($value);
+						else
+							$xml_value = strtolower($xml_value);
+
+					# Items that must be stored as arrays
+					if (in_array($xml_key,$storearray) && ! is_array($xml_value))
+						$xml_value = array($xml_value);
+
+					# Items that should not be an array
+					if (! in_array($xml_key,$allowed_arrays) && is_array($xml_value)) {
+						debug_dump(array(__METHOD__,'key'=>$xml_key,'value'=>$xml_value));
+						error(sprintf(_('In the XML file (%s), [%s] is an array, it must be a string.'),
+							$this->filename,$xml_key),'error');
+					}
+
+					$this->$xml_key = $xml_value;
+			}
+		}
+
+		# Check we have some manditory items.
+		foreach (array() as $key) {
+			if (! isset($this->$key)
+				|| (! is_array($this->$key) && ! trim($this->$key))) {
+
+				$this->setInvalid(sprintf(_('Missing %s in the XML file.'),$key));
+				break;
+			}
+		}
+	}
+
+	/**
+	 * Accept will run the query and store the results in results()
+	 */
+	public function accept() {
+		if (DEBUG_ENABLED && (($fargs=func_get_args())||$fargs='NOARGS'))
+			debug_log('Entered (%%)',5,0,__FILE__,__LINE__,__METHOD__,$fargs);
+
+		$server = $this->getServer();
+
+		$query = array();
+		$query['size_limit'] = get_request('size_limit','REQUEST',false,$_SESSION[APPCONFIG]->getValue('search','size_limit'));
+		$query['format'] = get_request('format','REQUEST',false,$_SESSION[APPCONFIG]->getValue('search','display'));
+		$query['orderby'] = get_request('orderby','REQUEST',false,'dn');
+
+		# If this is a custom search, we need to populate are paramters
+		if ($this->getID() == 'none') {
+			$bases = get_request('base','REQUEST',false,null);
+			$query['filter'] = get_request('filter','REQUEST',false,'objectClass=*');
+			$query['scope'] = get_request('scope','REQUEST',false,'sub');
+			$attrs = get_request('display_attrs','REQUEST');
+
+			$attrs = preg_replace('/\s+/','',$attrs);
+			if ($attrs)
+				$query['attrs'] = explode(',',$attrs);
+			else
+				$query['attrs'] = array('*');
+
+		} else {
+			$bases = $this->base;
+			$query['filter'] = $this->filter;
+			$query['scope'] = $this->scope;
+			$query['attrs'] = $this->getAttributeNames();
+		}
+
+		if (! $bases)
+			$bases = $server->getBaseDN();
+		elseif (! is_array($bases))
+			$bases = explode('|',$bases);
+
+		foreach ($bases as $base) {
+			$query['base'] = $base;
+
+			$time_start = utime();
+			$this->results[$base] = $server->query($query,null);
+			$time_end = utime();
+
+			$this->resultsdata[$base]['time'] = round($time_end-$time_start,2);
+			$this->resultsdata[$base]['scope'] = $query['scope'];
+			$this->resultsdata[$base]['filter'] = $query['filter'];
+			$this->resultsdata[$base]['attrs'] = $query['attrs'];
+
+			if ($this->getAttrSortOrder() == 'dn')
+				usort($this->results[$base],'pla_compare_dns');
+			elseif ($this->getAttrSortOrder())
+				masort($this->results[$base],$this->getAttrSortOrder());
+		}
+	}
+
+	/**
+	 * This is temporary to get around objects that use a DN for rendering, for example jpegPhoto
+	 */
+	public function setDN($dn) {
+		if (DEBUG_ENABLED && (($fargs=func_get_args())||$fargs='NOARGS'))
+			debug_log('Entered (%%)',5,1,__FILE__,__LINE__,__METHOD__,$fargs);
+
+		$this->dn = $dn;
+	}
+
+	/**
+	 * This is temporary to get around objects that use a DN for rendering, for example jpegPhoto
+	 */
+	public function getDN() {
+		if (DEBUG_ENABLED && (($fargs=func_get_args())||$fargs='NOARGS'))
+			debug_log('Entered (%%)',5,1,__FILE__,__LINE__,__METHOD__,$fargs,$this->dn);
+
+		return $this->dn;
+	}
+
+	public function getDNEncode($url=true) {
+		// @todo Be nice to do all this in 1 location
+		if ($url)
+			return urlencode(preg_replace('/%([0-9a-fA-F]+)/',"%25\\1",$this->dn));
+		else
+			return preg_replace('/%([0-9a-fA-F]+)/',"%25\\1",$this->dn);
+	}
+
+	public function getAttrSortOrder() {
+		if (DEBUG_ENABLED && (($fargs=func_get_args())||$fargs='NOARGS'))
+			debug_log('Entered (%%)',5,0,__FILE__,__LINE__,__METHOD__,$fargs);
+
+		$result = array();
+
+		if (count($this->attributes)) {
+			masort($this->attributes,'ordersort');
+
+			foreach ($this->attributes as $attribute)
+				array_push($result,$attribute->getName());
+
+		} else {
+			$display = preg_replace('/,\s+/',',',get_request('orderby','REQUEST',false,'dn'));
+
+			if (trim($display))
+				$result = explode(',',$display);
+		}
+
+		return implode(',',$result);
+	}
+
+	public function getAttrDisplayOrder() {
+		if (DEBUG_ENABLED && (($fargs=func_get_args())||$fargs='NOARGS'))
+			debug_log('Entered (%%)',5,0,__FILE__,__LINE__,__METHOD__,$fargs);
+
+		$result = array();
+
+		if (count($this->attributes)) {
+			masort($this->attributes,'order');
+
+			foreach ($this->attributes as $attribute)
+				array_push($result,$attribute->getName());
+
+		} else {
+			$display = preg_replace('/,\s+/',',',get_request('display_attrs','REQUEST',false,''));
+
+			if (trim($display))
+				$result = explode(',',$display);
+		}
+
+		# If our display order is empty, then dynamically build it
+		if (! count($result)) {
+			foreach ($this->results as $details)
+					foreach ($details as $attrs)
+						$result = array_merge($result,array_keys(array_change_key_case($attrs)));
+
+			$result = array_unique($result);
+			sort($result);
+		}
+
+		# Put the DN first
+		array_unshift($result,'dn');
+		$result = array_unique($result);
+
+		return implode(',',$result);
+	}
+
+	/**
+	 * Test if the template is visible
+	 *
+	 * @return boolean
+	 */
+	public function isVisible() {
+		if (DEBUG_ENABLED && (($fargs=func_get_args())||$fargs='NOARGS'))
+			debug_log('Entered (%%)',5,1,__FILE__,__LINE__,__METHOD__,$fargs,$this->visible);
+
+		return $this->visible;
+	}
+
+	public function getDescription() {
+		if (DEBUG_ENABLED && (($fargs=func_get_args())||$fargs='NOARGS'))
+			debug_log('Entered (%%)',5,1,__FILE__,__LINE__,__METHOD__,$fargs,$this->description);
+
+		return $this->description;
+	}
+}
+?>
diff --git a/lam/templates/3rdParty/pla/lib/QueryRender.php b/lam/templates/3rdParty/pla/lib/QueryRender.php
new file mode 100644
index 00000000..0e6d1300
--- /dev/null
+++ b/lam/templates/3rdParty/pla/lib/QueryRender.php
@@ -0,0 +1,552 @@
+<?php
+/**
+ * @author The phpLDAPadmin development team
+ * @package phpLDAPadmin
+ */
+
+/**
+ * QueryRender class
+ *
+ * @package phpLDAPadmin
+ * @subpackage Templates
+ * @todo need to add paging
+ */
+class QueryRender extends PageRender {
+	/** CORE FUNCTIONS **/
+
+	/**
+	 * Intialise and Render the QueryRender
+	 */
+	public function accept() {
+		if (DEBUG_ENABLED && (($fargs=func_get_args())||$fargs='NOARGS'))
+			debug_log('Entered (%%)',129,0,__FILE__,__LINE__,__METHOD__,$fargs);
+
+		if (DEBUGTMP) printf('<font size=-2>%s</font><br />',__METHOD__);
+		if (DEBUGTMP||DEBUGTMPSUB) printf('<font size=-2>* %s [GETquery:%s]</font><br />',__METHOD__,get_request('query','REQUEST'));
+		if (DEBUGTMP||DEBUGTMPSUB) printf('<font size=-2>* %s [Page:%s]</font><br />',__METHOD__,get_request('page','REQUEST'));
+
+		$this->template_id = $this->getTemplateChoice();
+		$this->page = get_request('page','REQUEST',false,1);
+
+		# If we are the default template, make sure we pressed search
+		if ($this->template_id == 'none' && ! get_request('search','REQUEST'))
+			$this->drawTemplateChoice();
+
+		elseif ($this->template_id) {
+			$templates = $this->getTemplates();
+			$this->template = $templates->getTemplate($this->template_id);
+			$this->template->accept();
+
+			$this->visitStart();
+			$this->visitEnd();
+		}
+	}
+
+	/**
+	 * Get our templates applicable for this object
+	 */
+	protected function getTemplates() {
+		if (DEBUG_ENABLED && (($fargs=func_get_args())||$fargs='NOARGS'))
+			debug_log('Entered (%%)',129,0,__FILE__,__LINE__,__METHOD__,$fargs);
+
+		return new Queries($this->server_id);
+	}
+
+	/**
+	 * Are default queries enabled?
+	 */
+	protected function haveDefaultTemplate() {
+		if (DEBUG_ENABLED && (($fargs=func_get_args())||$fargs='NOARGS'))
+			debug_log('Entered (%%)',129,0,__FILE__,__LINE__,__METHOD__,$fargs);
+
+		$server = $this->getServer();
+
+		if ($server->getValue('query','disable_default'))
+			return false;
+		else
+			return true;
+	}
+
+	protected function drawTemplateChoice() {
+		if (DEBUGTMP) printf('<font size=-2>%s</font><br />',__METHOD__);
+
+		$server = $this->getServer();
+
+		$this->drawTitle(_('Search'));
+		$this->drawSubTitle();
+
+		echo "\n";
+
+		$baseDNs = $server->getBaseDN();
+
+		printf('<script type="text/javascript" src="%sdnChooserPopup.js"></script>',JSDIR);
+		echo '<form action="cmd.php" id="advanced_search_form">';
+		echo '<div>';
+		echo '<input type="hidden" name="cmd" value="query_engine" />';
+		printf('<input type="hidden" name="server_id" value="%s" />',$server->getIndex());
+		echo '</div>';
+
+		echo '<table class="forminput" border="0" style="margin-left: auto; margin-right: auto;">';
+		echo '<tr><td colspan="2">&nbsp;</td></tr>';
+
+		$templates = $this->getTemplates();
+
+		if (count($templates->getTemplates())) {
+			echo '<tr>';
+			printf('<td><acronym title="%s">%s</acronym></td>',_('Run a predefined query'),_('Predefined Query'));
+			echo '<td>';
+			echo '<select name="query">';
+			if ($this->haveDefaultTemplate())
+				printf('<option value="%s" %s>%s</option>','none','',_('Custom Query'));
+
+			foreach ($templates->getTemplates() as $template)
+				printf('<option value="%s" %s>%s</option>',
+					$template->getID(),
+					($this->template_id == $template->getID() ? 'selected="selected"' : ''),
+					$template->getDescription());
+			echo '</select>';
+			echo '</td>';
+			echo '</tr>';
+		}
+
+		echo '<tr>';
+		printf('<td><acronym title="%s">%s</acronym></td>',_('The format to show the query results'),_('Display Format'));
+		echo '<td>';
+		echo '<select name="format" style="width: 200px">';
+
+		printf('<option value="list" %s>%s</option>',
+			$_SESSION[APPCONFIG]->getValue('search','display') == 'list' ? 'selected="selected"' : '',_('list'));
+		printf('<option value="table" %s>%s</option>',
+			$_SESSION[APPCONFIG]->getValue('search','display') == 'table' ? 'selected="selected"' : '',_('table'));
+
+		echo '</select>';
+		echo '</td>';
+		echo '</tr>';
+
+		echo '<tr>';
+		printf('<td><acronym title="%s"></acronym></td>',_('Entries to show per page'));
+		echo '<td>';
+		echo '</td>';
+		echo '</tr>';
+
+		echo '<tr>';
+
+		echo '<td colspan="2">';
+		printf('<div id="customquery" style="display: %s">','block');
+		echo '<br/>';
+		echo '<fieldset>';
+		printf('<legend>%s</legend>',_('Custom Query'));
+		echo '<table border="0"><tr>';
+
+		printf('<td>%s</td>',_('Base DN'));
+		printf('<td><input type="text" name="base" value="%s" style="width: 200px" id="base" />',count($baseDNs) == 1 ? $baseDNs[0] : '');
+
+		draw_chooser_link('advanced_search_form','base');
+
+		echo '</td>';
+		echo '</tr>';
+
+		echo '<tr>';
+		printf('<td><acronym title="%s">%s</acronym></td>',_('The scope in which to search'),_('Search Scope'));
+
+		echo '<td>';
+		echo '<select name="scope" style="width: 200px">';
+
+		printf('<option value="sub" %s>%s</option>',
+			'',_('Sub (entire subtree)'));
+
+		printf('<option value="one" %s>%s</option>',
+			'',_('One (one level beneath base)'));
+
+		printf('<option value="base" %s>%s</option>',
+			'',_('Base (base dn only)'));
+
+		echo '</select>';
+		echo '</td>';
+		echo '</tr>';
+
+		echo '<tr>';
+		printf('<td><acronym title="%s">%s</acronym></td>',
+			htmlspecialchars(_('Standard LDAP search filter. Example: (&(sn=Smith)(givenName=David))')),_('Search Filter'));
+
+		printf('<td><input type="text" name="filter" id="filter" style="width: 200px" value="%s" /></td>',
+			'objectClass=*');
+
+		echo '</tr>';
+
+		echo '<tr>';
+		printf('<td><acronym title="%s">%s</acronym></td>',
+			_('A list of attributes to display in the results (comma-separated)'),_('Show Attributes'));
+
+		printf('<td><input type="text" name="display_attrs" style="width: 200px" value="%s" /></td>',
+			implode(', ',$_SESSION[APPCONFIG]->getValue('search','result_attributes')));
+		echo '</tr>';
+
+		echo '<tr>';
+		printf('<td><acronym title="%s">%s</acronym></td>',_('Order by'),_('Order by'));
+		printf('<td><input type="text" name="orderby" id="orderby" style="width: 200px" value="%s" /></td>','');
+		echo '</tr>';
+
+		echo '<tr>';
+		printf('<td><acronym title="%s">%s</acronym></td>',_('Set the search results to 0 to retrieve all available records'),_('Search Results'));
+		printf('<td><input type="text" name="size_limit" id="size_limit" style="width: 200px" value="%s" /></td>',$_SESSION[APPCONFIG]->getValue('search','size_limit'));
+		echo '</tr>';
+
+		echo '</table>';
+		echo '</fieldset>';
+		echo '</div>';
+		echo '</td>';
+		echo '</tr>';
+
+		printf('<tr><td colspan="2" style="text-align: center;"><br /><input type="submit" name="search" value="%s" /></td></tr>',_('Search'));
+
+		echo '</table>';
+		echo '</form>';
+	}
+
+	private function visitStart() {
+		if (DEBUG_ENABLED && (($fargs=func_get_args())||$fargs='NOARGS'))
+			debug_log('Entered (%%)',129,0,__FILE__,__LINE__,__METHOD__,$fargs);
+
+		$this->drawTitle(_('Search Results'));
+		$this->drawSubTitle();
+		echo '<br/>';
+	}
+
+	private function visitEnd() {
+		if (DEBUG_ENABLED && (($fargs=func_get_args())||$fargs='NOARGS'))
+			debug_log('Entered (%%)',129,0,__FILE__,__LINE__,__METHOD__,$fargs);
+
+		$server = $this->getServer();
+		$afattrs = $this->getAFAttrs();
+
+		# If Mass Actions Enabled
+		if ($_SESSION[APPCONFIG]->getValue('mass','enabled')) {
+			$mass_actions = array(
+				'&nbsp;' => '',
+				_('delete') => 'mass_delete',
+				_('edit') => 'mass_edit'
+			);
+		}
+
+		$this->drawBaseTabs();
+		$ado = $this->template->getAttrDisplayOrder();
+		$counter = 0;
+		$j = 0;
+
+		foreach ($this->template->results as $base => $results) {
+			$counter++;
+
+			if (! $show = get_request('show','REQUEST'))
+				$show = ($counter === 1 ? $this->getAjaxRef($base) : null);
+
+			printf('<div id="DN%s" style="display: %s">',
+				$this->getAjaxRef($base), ($show == $this->getAjaxRef($base) ? 'block' : 'none'));
+
+			echo '<table class="result_box" border="0" width="100%">';
+			echo '<tr><td>';
+			echo '<br/>';
+			echo '<br/>';
+
+			$this->drawResultsTable($base,count($results));
+
+			echo '<br/>';
+			echo '<br/>';
+
+			switch(get_request('format','REQUEST',false,$_SESSION[APPCONFIG]->getValue('search','display'))) {
+				case 'list':
+					foreach ($results as $dndetails) {
+						$dndetails = array_change_key_case($dndetails);
+
+						# Temporarily set our DN, for rendering that leverages our DN (eg: JpegPhoto)
+						$this->template->setDN($dndetails['dn']);
+
+						echo '<table class="result" border="0">';
+
+						echo '<tr class="list_title">';
+						printf('<td class="icon"><img src="%s/%s" alt="icon" /></td>',IMGDIR,get_icon($server->getIndex(),$dndetails['dn']));
+
+						printf('<td colspan="2"><a href="cmd.php?cmd=template_engine&amp;server_id=%s&amp;dn=%s">%s</a></td>',
+							$server->getIndex(),$this->template->getDNEncode(),htmlspecialchars(get_rdn($dndetails['dn'])));
+						echo '</tr>';
+
+						printf('<tr class="list_item"><td class="blank">&nbsp;</td><td class="heading">dn</td><td class="value">%s</td></tr>',
+							htmlspecialchars(dn_unescape($dndetails['dn'])));
+
+						# Iterate over each attribute for this entry
+						foreach (explode(',',$ado) as $attr) {
+							# Ignore DN, we've already displayed it.
+							if ($attr == 'dn')
+								continue;
+
+							if (! isset($dndetails[$attr]))
+								continue;
+
+							# Set our object with our values
+							$afattrs[$attr]->clearValue();
+
+							if (is_array($dndetails[$attr]))
+								$afattrs[$attr]->initValue($dndetails[$attr]);
+							else
+								$afattrs[$attr]->initValue(array($dndetails[$attr]));
+
+							echo '<tr class="list_item">';
+							echo '<td class="blank">&nbsp;</td>';
+
+							echo '<td class="heading">';
+							$this->draw('Name',$afattrs[$attr]);
+							echo '</td>';
+
+							echo '<td>';
+							$this->draw('CurrentValues',$afattrs[$attr]);
+							echo '</td>';
+							echo '</tr>';
+						}
+
+						echo '</table>';
+						echo '<br/>';
+					}
+
+					break;
+
+				# Display the results.
+				case 'table':
+					if (! $results) {
+						echo _('Search returned no results');
+
+						continue;
+					}
+
+					printf('<form action="cmd.php" method="post" id="massform_%s">',$counter);
+					echo '<div>';
+					printf('<input type="hidden" name="server_id" value="%s" />',$server->getIndex());
+
+					foreach ($this->template->resultsdata[$base]['attrs'] as $attr)
+						printf('<input type="hidden" name="attrs[]" value="%s" />',$attr);
+
+					echo '</div>';
+
+					echo '<table class="result_table" border="0">';
+
+					echo '<thead class="fixheader">';
+					echo '<tr class="heading">';
+					echo '<td>&nbsp;</td>';
+					echo '<td>&nbsp;</td>';
+
+					foreach (explode(',',$ado) as $attr) {
+						echo '<td>';
+						$this->draw('Name',$afattrs[$attr]);
+						echo '</td>';
+					}
+
+					echo '</tr>';
+					echo '</thead>';
+
+					echo '<tbody class="scroll">';
+					foreach ($results as $dndetails) {
+						$j++;
+						$dndetails = array_change_key_case($dndetails);
+
+						# Temporarily set our DN, for rendering that leverages our DN (eg: JpegPhoto)
+						$this->template->setDN($dndetails['dn']);
+
+						printf('<tr class="%s" id="tr_ma_%s" onclick="var cb=document.getElementById(\'ma_%s\'); cb.checked=!cb.checked;">',
+							$j%2 ? 'even' : 'odd',$j,$j);
+
+						# Is mass action enabled.
+						if ($_SESSION[APPCONFIG]->getValue('mass','enabled'))
+							printf('<td><input type="checkbox" id="ma_%s" name="dn[]" value="%s" onclick="this.checked=!this.checked;" /></td>',$j,$dndetails['dn']);
+
+						$href = sprintf('cmd=template_engine&server_id=%s&dn=%s',$server->getIndex(),$this->template->getDNEncode());
+						printf('<td class="icon"><a href="cmd.php?%s"><img src="%s/%s" alt="icon" /></a></td>',
+							htmlspecialchars($href),
+							IMGDIR,get_icon($server->getIndex(),$dndetails['dn']));
+
+						# We'll clone our attribute factory attributes, since we need to add the values to them for rendering.
+						foreach (explode(',',$ado) as $attr) {
+							# If the entry is blank, we'll draw an empty box and continue.
+							if (! isset($dndetails[$attr])) {
+								echo '<td>&nbsp;</td>';
+								continue;
+							}
+
+							# Special case for DNs
+							if ($attr == 'dn') {
+								$dn_display = strlen($dndetails['dn']) > 40
+									? sprintf('<acronym title="%s">%s...</acronym>',htmlspecialchars($dndetails['dn']),htmlspecialchars(substr($dndetails['dn'],0,40)))
+									: htmlspecialchars($dndetails['dn']);
+
+								printf('<td><a href="cmd.php?%s">%s</a></td>',htmlspecialchars($href),$dn_display);
+								continue;
+							}
+
+							# Set our object with our values
+							$afattrs[$attr]->clearValue();
+							if (is_array($dndetails[$attr]))
+								$afattrs[$attr]->initValue($dndetails[$attr]);
+							else
+								$afattrs[$attr]->initValue(array($dndetails[$attr]));
+
+							echo '<td>';
+							$this->draw('CurrentValues',$afattrs[$attr]);
+							echo '</td>';
+						}
+
+						echo '</tr>';
+					}
+
+					# Is mass action enabled.
+					if ($_SESSION[APPCONFIG]->getValue('mass','enabled')) {
+						printf('<tr class="%s">',++$j%2 ? 'odd' : 'even');
+						printf('<td><input type="checkbox" name="allbox" value="1" onclick="CheckAll(1,\'massform_\',%s);" /></td>',$counter);
+						printf('<td colspan="%s">',2+count(explode(',',$ado)));
+						echo '<select name="cmd" onchange="if (this.value) submit();" style="font-size: 12px">';
+
+						foreach ($mass_actions as $action => $display)
+							printf('<option value="%s">%s</option>',$display,$action);
+
+						echo '</select>';
+						echo '</td>';
+						echo '</tr>';
+					}
+
+					echo '</tbody>';
+					echo '</table>';
+					echo '</form>';
+					echo "\n\n";
+
+					break;
+
+				default:
+					printf('Have ID [%s], run this query for page [%s]',$this->template_id,$this->page);
+			}
+
+			echo '</td></tr>';
+			echo '</table>';
+			echo '</div>';
+			echo "\n\n";
+		}
+
+		if (get_request('format','REQUEST',false,'table') == 'table')
+			printf('<script type="text/javascript" src="%sCheckAll.js"></script>',JSDIR);
+	}
+
+	public function drawSubTitle($subtitle=null) {
+		if (is_null($subtitle)) {
+			$server = $this->getServer();
+	
+			$subtitle = sprintf('%s: <b>%s</b>',_('Server'),$server->getName());
+
+			if ($this->template) {
+				$subtitle .= '<br />';
+				$subtitle .= sprintf('%s: <b>%s</b>',('Query'),$this->template->getID() != 'none' ? $this->template->getTitle() : _('Default'));
+				if ($this->template->getName())
+					$subtitle .= sprintf(' (<b>%s</b>)',$this->template->getName(false));
+			}
+		}
+
+		parent::drawSubTitle($subtitle);
+	}
+
+	private function getAFattrs() {
+		if (DEBUG_ENABLED && (($fargs=func_get_args())||$fargs='NOARGS'))
+			debug_log('Entered (%%)',129,0,__FILE__,__LINE__,__METHOD__,$fargs);
+
+		$attribute_factory = new AttributeFactory();
+		$results = array();
+
+		foreach (explode(',',$this->template->getAttrDisplayOrder()) as $attr)
+			$results[$attr] = $attribute_factory->newAttribute($attr,array('values'=>array()),$this->getServerID());
+
+		return $results;
+	}
+
+	private function getAjaxRef($dn) {
+		if (DEBUG_ENABLED && (($fargs=func_get_args())||$fargs='NOARGS'))
+			debug_log('Entered (%%)',129,0,__FILE__,__LINE__,__METHOD__,$fargs);
+
+		return preg_replace('/=/','.',base64_encode($dn));
+	}
+
+	private function drawBaseTabs() {
+		# Setup the Javascript to show/hide our DIVs.
+		echo '<script type="text/javascript">';
+		echo 'function items() {';
+		echo 'var $items = new Array();';
+		$counter = 0;
+		foreach ($this->template->results as $base => $results)
+			printf("items[%s] = '%s';",$counter++,$this->getAjaxRef($base));
+		echo 'return items;';
+		echo '}</script>';
+		echo "\n\n";
+
+		echo '<table class="result_table" border="0">';
+		echo '<tr>';
+		$counter = 0;
+		foreach ($this->template->results as $base => $results) {
+			if (! $show = get_request('show','REQUEST'))
+				$show = ($counter++ === 0 ? $this->getAjaxRef($base) : null);
+
+			printf('<td id="CTL%s" onclick="return ajSHOWTHIS(\'DN\',\'%s\',\'CTL\');" style="background-color: %s;">%s</td>',
+				$this->getAjaxRef($base),
+				$this->getAjaxRef($base),
+				($show == $this->getAjaxRef($base) ? '#F0F0F0' : '#E0E0E0'),
+				$base);
+		}
+		echo '</tr>';
+		echo '</table>';
+		echo "\n\n";
+	}
+
+	private function drawResultsTable($base,$results) {
+		$server = $this->getServer();
+
+		echo '<table class="result" border="0">';
+
+		echo '<tr>';
+		printf('<td>%s: <b>%s</b><br/><br/><div class="execution_time">(%s %s)</div></td>',_('Entries found'),
+			number_format($results),$this->template->resultsdata[$base]['time'],_('seconds'));
+
+		if ($_SESSION[APPCONFIG]->isCommandAvailable('script','export') && $_SESSION[APPCONFIG]->isCommandAvailable('script','export_form')) {
+			$href = htmlspecialchars(sprintf('cmd.php?cmd=export_form&server_id=%s&scope=%s&dn=%s&filter=%s&attributes=%s',
+				$server->getIndex(),$this->template->resultsdata[$base]['scope'],
+				$base,rawurlencode($this->template->resultsdata[$base]['filter']),
+				rawurlencode(implode(', ',$this->template->resultsdata[$base]['attrs']))));
+
+			printf('<td style="text-align: right; width: 85%%"><small>[ <a href="%s"><img src="%s/save.png" alt="Save" /> %s</a> ]</small>',
+				$href,IMGDIR,_('export results'));
+		}
+
+		printf('<small>[ <img src="%s/rename.png" alt="rename" /> %s:',IMGDIR,_('Format'));
+
+		foreach (array('list','table') as $f) {
+			echo '&nbsp;';
+
+			if (get_request('format','REQUEST',false,$_SESSION[APPCONFIG]->getValue('search','display')) == $f) {
+				printf('<b>%s</b>',_($f));
+
+			} else {
+				$query_string = htmlspecialchars(sprintf('%s&format=%s&show=%s&focusbase=%s',array_to_query_string($_GET,array('format','meth')),$f,$this->getAjaxRef($base),$base));
+
+				if (isAjaxEnabled())
+					printf('<a href="cmd.php?%s" onclick="return ajDISPLAY(\'BODY\',\'%s\',\'%s\');">%s</a>',
+						$query_string,$query_string,_('Loading Search'),_($f));
+				else
+					printf('<a href="cmd.php?%s">%s</a>',$query_string,_($f));
+			}
+		}
+
+		echo ' ]</small>';
+
+		echo '<br />';
+		printf('<small>%s: <b>%s</b></small>',_('Base DN'),$base);
+
+		echo '<br />';
+		printf('<small>%s: <b>%s</b></small>',_('Filter performed'),htmlspecialchars($this->template->resultsdata[$base]['filter']));
+
+		echo '</td>';
+		echo '</tr>';
+		echo '</table>';
+	}
+}
+?>
diff --git a/lam/templates/3rdParty/pla/lib/RandomPasswordAttribute.php b/lam/templates/3rdParty/pla/lib/RandomPasswordAttribute.php
new file mode 100644
index 00000000..ca11f8db
--- /dev/null
+++ b/lam/templates/3rdParty/pla/lib/RandomPasswordAttribute.php
@@ -0,0 +1,17 @@
+<?php
+/**
+ * Classes and functions for the template engine.
+ *
+ * @author The phpLDAPadmin development team
+ * @package phpLDAPadmin
+ */
+
+/**
+ * Represents an attribute whose values are random passwords
+ *
+ * @package phpLDAPadmin
+ * @subpackage Templates
+ */
+class RandomPasswordAttribute extends PasswordAttribute {
+}
+?>
diff --git a/lam/templates/3rdParty/pla/lib/SambaPasswordAttribute.php b/lam/templates/3rdParty/pla/lib/SambaPasswordAttribute.php
new file mode 100644
index 00000000..35c1a088
--- /dev/null
+++ b/lam/templates/3rdParty/pla/lib/SambaPasswordAttribute.php
@@ -0,0 +1,17 @@
+<?php
+/**
+ * Classes and functions for the template engine.
+ *
+ * @author The phpLDAPadmin development team
+ * @package phpLDAPadmin
+ */
+
+/**
+ * Represents an attribute whose values are SAMBA passwords
+ *
+ * @package phpLDAPadmin
+ * @subpackage Templates
+ */
+class SambaPasswordAttribute extends PasswordAttribute {
+}
+?>
diff --git a/lam/templates/3rdParty/pla/lib/SelectionAttribute.php b/lam/templates/3rdParty/pla/lib/SelectionAttribute.php
new file mode 100644
index 00000000..deb1f11d
--- /dev/null
+++ b/lam/templates/3rdParty/pla/lib/SelectionAttribute.php
@@ -0,0 +1,71 @@
+<?php
+/**
+ * Classes and functions for the template engine.
+ *
+ * @author The phpLDAPadmin development team
+ * @package phpLDAPadmin
+ */
+
+/**
+ * Represents an attribute whose values are in a predefined list
+ *
+ * @package phpLDAPadmin
+ * @subpackage Templates
+ */
+class SelectionAttribute extends Attribute {
+	protected $selection = array();
+	protected $multiple;
+	protected $default;
+
+	public function __construct($name,$values,$server_id,$source=null) {
+		# Call our parent constructor
+		parent::__construct($name,$values,$server_id,$source);
+
+		# Our values are set by parent(). If we do have values, and the source was XML, move them to our selection.
+		if ($this->source == 'XML' && $this->values) {
+			$this->selection = $this->values;
+			$this->values = array();
+		}
+
+		if (isset($values['type']) && $values['type'] == 'multiselect')
+			$this->multiple = true;
+		else
+			$this->multiple = false;
+	}
+
+	public function addOption($value,$description) {
+		$this->selection[$value] = $description;
+	}
+
+	public function addValue($new_val,$i=-1) {
+		if (DEBUG_ENABLED && (($fargs=func_get_args())||$fargs='NOARGS'))
+			debug_log('Entered (%%)',5,0,__FILE__,__LINE__,__METHOD__,$fargs);
+
+		$this->addOption($new_val,$new_val);
+	}
+
+	public function getOptionCount() {
+		return count($this->selection);
+	}
+
+	public function getSelection() {
+		return $this->selection;
+	}
+
+	public function autoValue($value) {
+		$this->selection = $value;
+	}
+
+	public function getDefault() {
+		return $this->default;
+	}
+
+	public function isMultiple() {
+		return $this->multiple;
+	}
+
+	public function setMultiple() {
+		$this->multiple = true;
+	}
+}
+?>
diff --git a/lam/templates/3rdParty/pla/lib/ShadowAttribute.php b/lam/templates/3rdParty/pla/lib/ShadowAttribute.php
new file mode 100644
index 00000000..eeb7cd18
--- /dev/null
+++ b/lam/templates/3rdParty/pla/lib/ShadowAttribute.php
@@ -0,0 +1,19 @@
+<?php
+/**
+ * Classes and functions for the template engine.
+ *
+ * @author The phpLDAPadmin development team
+ * @package phpLDAPadmin
+ */
+
+/**
+ * Represents a shadow date attribute
+ *
+ * @package phpLDAPadmin
+ * @subpackage Templates
+ */
+class ShadowAttribute extends Attribute {
+	public $shadow_before_today_attrs = array('shadowLastChange','shadowMin');
+	public $shadow_after_today_attrs = array('shadowMax','shadowExpire','shadowWarning','shadowInactive');
+}
+?>
diff --git a/lam/templates/3rdParty/pla/lib/Template.php b/lam/templates/3rdParty/pla/lib/Template.php
new file mode 100644
index 00000000..455baa11
--- /dev/null
+++ b/lam/templates/3rdParty/pla/lib/Template.php
@@ -0,0 +1,1567 @@
+<?php
+/**
+ * Classes and functions for the template engine.
+ *
+ * Templates are either:
+ * + Creating or Editing, (a Container or DN passed to the object)
+ * + A predefined template, or a default template (template ID passed to the object)
+ *
+ * The template object will know which attributes are mandatory (MUST
+ * attributes) and which attributes are optional (MAY attributes). It will also
+ * contain a list of optional attributes. These are attributes that the schema
+ * will allow data for (they are MAY attributes), but the template has not
+ * included a definition for them.
+ *
+ * The template object will be invalidated if it does contain the necessary
+ * items (objectClass, MUST attributes, etc) to make a successful LDAP update.
+ *
+ * @author The phpLDAPadmin development team
+ * @package phpLDAPadmin
+ */
+
+/**
+ * Template Class
+ *
+ * @package phpLDAPadmin
+ * @subpackage Templates
+ * @todo RDN attributes should be treated as MUST attributes even though the schema marks them as MAY
+ * @todo RDN attributes need to be checked that are included in the schema, otherwise mark it is invalid
+ * @todo askcontainer is no longer used?
+ */
+class Template extends xmlTemplate {
+	# If this template visible on the template choice list
+	private $visible = true;
+	# Is this template valid after parsing the XML file
+	private $invalid = false;
+	private $invalid_admin = false;
+	private $invalid_reason;
+	# The TEMPLATE structural objectclasses
+	protected $structural_oclass = array();
+	protected $description = '';
+	# Is this a read-only template (only valid in modification templates)
+	private $readonly = false;
+
+	# If this is set, it means we are editing an entry.
+	private $dn;
+	# Where this template will store its data
+	protected $container;
+	# Does this template prohibit children being created
+	private $noleaf = false;
+	# A regexp that determines if this template is valid in the container.
+	private $regexp;
+	# Template Title
+	public $title;
+	# Icon for the template
+	private $icon;
+	# Template RDN attributes
+	private $rdn;
+
+	public function __construct($server_id,$name=null,$filename=null,$type=null,$id=null) {
+		parent::__construct($server_id,$name,$filename,$type,$id);
+
+		# If this is the default template, we might disable leafs by default.
+		if (is_null($filename))
+			$this->noleaf = $_SESSION[APPCONFIG]->getValue('appearance','disable_default_leaf');
+	}
+
+	public function __clone() {
+		if (DEBUG_ENABLED && (($fargs=func_get_args())||$fargs='NOARGS'))
+			debug_log('Entered (%%)',5,0,__FILE__,__LINE__,__METHOD__,$fargs);
+
+		# We need to clone our attributes, when passing back a template with getTemplate
+		foreach ($this->attributes as $key => $value)
+			$this->attributes[$key] = clone $value;
+	}
+
+	/**
+	 * Main processing to store the template.
+	 *
+	 * @param xmldata Parsed xmldata from xml2array object
+	 */
+	protected function storeTemplate($xmldata) {
+		if (DEBUG_ENABLED && (($fargs=func_get_args())||$fargs='NOARGS'))
+			debug_log('Entered (%%)',5,0,__FILE__,__LINE__,__METHOD__,$fargs);
+
+		$server = $this->getServer();
+		$objectclasses = array();
+
+		foreach ($xmldata['template'] as $xml_key => $xml_value) {
+			if (DEBUG_ENABLED)
+				debug_log('Foreach loop Key [%s] Value [%s]',4,0,__FILE__,__LINE__,__METHOD__,$xml_key,is_array($xml_value));
+
+			switch ($xml_key) {
+				# Build our object Classes from the DN and Template.
+				case ('objectclasses'):
+					if (DEBUG_ENABLED)
+						debug_log('Case [%s]',4,0,__FILE__,__LINE__,__METHOD__,$xml_key);
+
+					if (isset($xmldata['template'][$xml_key]['objectclass']))
+						if (is_array($xmldata['template'][$xml_key]['objectclass'])) {
+							foreach ($xmldata['template'][$xml_key]['objectclass'] as $index => $details) {
+
+								# XML files with only 1 objectClass dont have a numeric index.
+								$soc = $server->getSchemaObjectClass(strtolower($details));
+
+								# If we havent recorded this objectclass already, do so now.
+								if (is_object($soc) && ! in_array($soc->getName(),$objectclasses))
+									array_push($objectclasses,$soc->getName(false));
+
+								elseif (! is_object($soc) && ! $_SESSION[APPCONFIG]->getValue('appearance','hide_template_warning'))
+									system_message(array(
+										'title'=>_('Automatically removed objectClass from template'),
+										'body'=>sprintf('%s: <b>%s</b> %s',$this->getTitle(),$details,_('removed from template as it is not defined in the schema')),
+										'type'=>'warn'));
+							}
+
+						} else {
+							# XML files with only 1 objectClass dont have a numeric index.
+							$soc = $server->getSchemaObjectClass(strtolower($xmldata['template'][$xml_key]['objectclass']));
+
+							# If we havent recorded this objectclass already, do so now.
+							if (is_object($soc) && ! in_array($soc->getName(),$objectclasses))
+								array_push($objectclasses,$soc->getName(false));
+						}
+
+					break;
+
+				# Build our attribute list from the DN and Template.
+				case ('attributes'):
+					if (DEBUG_ENABLED)
+						debug_log('Case [%s]',4,0,__FILE__,__LINE__,__METHOD__,$xml_key);
+
+					if (is_array($xmldata['template'][$xml_key])) {
+						foreach ($xmldata['template'][$xml_key] as $tattrs)
+							foreach ($tattrs as $index => $details) {
+								if (DEBUG_ENABLED)
+									debug_log('Foreach tattrs Key [%s] Value [%s]',4,0,__FILE__,__LINE__,__METHOD__,
+										$index,$details);
+
+								# If there is no schema definition for the attribute, it will be ignored.
+								if ($sattr = $server->getSchemaAttribute($index))
+									if (is_null($this->getAttribute($sattr->getName())))
+										$this->addAttribute($sattr->getName(),$details,'XML');
+							}
+
+						masort($this->attributes,'order');
+					}
+
+					break;
+
+				default:
+					if (DEBUG_ENABLED)
+						debug_log('Case [%s]',4,0,__FILE__,__LINE__,__METHOD__,$xml_key);
+
+					# Some key definitions need to be an array, some must not be:
+					$allowed_arrays = array('rdn');
+					$storelower = array('rdn');
+					$storearray = array('rdn');
+
+					# Items that must be stored lowercase
+					if (in_array($xml_key,$storelower))
+						if (is_array($xml_value))
+							foreach ($xml_value as $index => $value)
+								$xml_value[$index] = strtolower($value);
+						else
+							$xml_value = strtolower($xml_value);
+
+					# Items that must be stored as arrays
+					if (in_array($xml_key,$storearray) && ! is_array($xml_value))
+						$xml_value = array($xml_value);
+
+					# Items that should not be an array
+					if (! in_array($xml_key,$allowed_arrays) && is_array($xml_value)) {
+						debug_dump(array(__METHOD__,'key'=>$xml_key,'value'=>$xml_value));
+						error(sprintf(_('In the XML file (%s), [%s] is an array, it must be a string.'),
+							$this->filename,$xml_key),'error');
+					}
+
+					$this->$xml_key = $xml_value;
+
+					if ($xml_key == 'invalid' && $xml_value)
+						$this->setInvalid(_('Disabled by XML configuration'),true);
+			}
+		}
+
+		if (! count($objectclasses)) {
+			$this->setInvalid(_('ObjectClasses in XML dont exist in LDAP server.'));
+			return;
+
+		} else {
+			$attribute = $this->addAttribute('objectClass',array('values'=>$objectclasses),'XML');
+			$attribute->justModified();
+			$attribute->setRequired();
+			$attribute->hide();
+		}
+
+		$this->rebuildTemplateAttrs();
+
+		# Check we have some manditory items.
+		foreach (array('rdn','structural_oclass','visible') as $key) {
+			if (! isset($this->$key)
+				|| (! is_array($this->$key) && ! trim($this->$key))) {
+
+				$this->setInvalid(sprintf(_('Missing %s in the XML file.'),$key));
+				break;
+			}
+		}
+
+		# Mark our RDN attributes as RDN
+		$counter = 1;
+		foreach ($this->rdn as $key) {
+			if ((is_null($attribute = $this->getAttribute($key))) && (in_array_ignore_case('extensibleobject',$this->getObjectClasses()))) {
+				$attribute = $this->addAttribute($key,array('values'=>array()));
+				$attribute->show();
+			}
+
+			if (! is_null($attribute))
+				$attribute->setRDN($counter++);
+			elseif ($this->isType('creation'))
+				$this->setInvalid(sprintf(_('Missing RDN attribute %s in the XML file.'),$key));
+		}
+	}
+
+	/**
+	 * Is default templates enabled?
+	 * This will disable the default template from the engine.
+	 *
+	 * @return boolean
+	 */
+	protected function hasDefaultTemplate() {
+		if (DEBUG_ENABLED && (($fargs=func_get_args())||$fargs='NOARGS'))
+			debug_log('Entered (%%)',5,0,__FILE__,__LINE__,__METHOD__,$fargs);
+
+		if ($_SESSION[APPCONFIG]->getValue('appearance','disable_default_template'))
+			return false;
+		else
+			return true;
+	}
+
+	/**
+	 * Return the templates of type (creation/modification)
+	 *
+	 * @param $string type - creation/modification
+	 * @return array - Array of templates of that type
+	 */
+	protected function readTemplates($type) {
+		if (DEBUG_ENABLED && (($fargs=func_get_args())||$fargs='NOARGS'))
+			debug_log('Entered (%%)',5,0,__FILE__,__LINE__,__METHOD__,$fargs);
+
+		$template_xml = new Templates($this->server_id);
+		return $template_xml->getTemplates($type);
+	}
+
+	/**
+	 * This function will perform the following intialisation steps:
+	 * + If a DN is set, query the ldap and load the object
+	 * + Read our $_REQUEST variable and set the values
+	 * After this action, the template should self describe as to whether it is an update, create
+	 * or delete.
+	 * (OLD values are IGNORED, we will have got them when we build this object from the LDAP server DN.)
+	 */
+	public function accept($makeVisible=false) {
+		if (DEBUG_ENABLED && (($fargs=func_get_args())||$fargs='NOARGS'))
+			debug_log('Entered (%%)',5,0,__FILE__,__LINE__,__METHOD__,$fargs);
+
+		$server = $this->getServer();
+
+		# If a DN is set, then query the LDAP server for the details.
+		if ($this->dn) {
+			if (! $server->dnExists($this->dn))
+				system_message(array(
+					'title'=>__METHOD__,
+					'body'=>sprintf('DN (%s) didnt exist in LDAP?',$this->dn),
+					'type'=>'info'));
+
+			$rdnarray = rdn_explode(strtolower(get_rdn(dn_escape($this->dn))));
+
+			$counter = 1;
+			foreach ($server->getDNAttrValues($this->dn,null,LDAP_DEREF_NEVER,array_merge(array('*'),$server->getValue('server','custom_attrs'))) as $attr => $values) {
+				# We ignore DNs.
+				if ($attr == 'dn')
+					continue;
+
+				$attribute = $this->getAttribute($attr);
+
+				if (is_null($attribute))
+					$attribute = $this->addAttribute($attr,array('values'=>$values));
+				else
+					if ($attribute->getValues()) {
+						# Override values to those that are defined in the XML file.
+						if ($attribute->getSource() != 'XML')
+							$attribute->setValue(array_values($values));
+						else
+							$attribute->setOldValue(array_values($values));
+
+					} else
+						$attribute->initValue(array_values($values));
+
+				# Work out the RDN attributes
+				foreach ($attribute->getValues() as $index => $value)
+					if (in_array(sprintf('%s=%s',
+						$attribute->getName(),strtolower($attribute->getValue($index))),$rdnarray))
+						$attribute->setRDN($counter++);
+
+				if ($makeVisible)
+					$attribute->show();
+			}
+
+			# Get the Internal Attributes
+			foreach ($server->getDNAttrValues($this->dn,null,LDAP_DEREF_NEVER,array_merge(array('+'),$server->getValue('server','custom_sys_attrs'))) as $attr => $values) {
+				$attribute = $this->getAttribute($attr);
+
+				if (is_null($attribute))
+					$attribute = $this->addAttribute($attr,array('values'=>$values));
+				else
+					if ($attribute->getValues())
+						$attribute->setValue(array_values($values));
+					else
+						$attribute->initValue(array_values($values));
+
+				if (! in_array_ignore_case($attribute->getName(),$server->getValue('server','custom_attrs')))
+					$attribute->setInternal();
+			}
+
+		# If this is the default template, and our $_REQUEST has defined our objectclass, then query the schema to get the attributes
+		} elseif ($this->container) {
+			if ($this->isType('default') && ! count($this->getAttributes(true)) && isset($_REQUEST['new_values']['objectclass'])) {
+				$attribute = $this->addAttribute('objectclass',array('values'=>$_REQUEST['new_values']['objectclass']));
+				$attribute->justModified();
+				$this->rebuildTemplateAttrs();
+				unset($_REQUEST['new_values']['objectclass']);
+			}
+
+		} elseif (get_request('create_base')) {
+			if (get_request('rdn')) {
+				$rdn = explode('=',get_request('rdn'));
+				$attribute = $this->addAttribute($rdn[0],array('values'=>array($rdn[1])));
+				$attribute->setRDN(1);
+			}
+
+		} else {
+			debug_dump_backtrace('No DN or CONTAINER?',1);
+		}
+
+		# Read in our new values.
+		foreach (array('new_values') as $key) {
+			if (isset($_REQUEST[$key]))
+				foreach ($_REQUEST[$key] as $attr => $values) {
+					# If it isnt an array, silently ignore it.
+					if (! is_array($values))
+						continue;
+
+					# If _REQUEST['skip_array'] with this attr set, we'll ignore this new_value
+					if (isset($_REQUEST['skip_array'][$attr]) && $_REQUEST['skip_array'][$attr] == 'on')
+						continue;
+
+					# Prune out entries with a blank value.
+					foreach ($values as $index => $value)
+						if (! strlen(trim($value)))
+							unset($values[$index]);
+
+					$attribute = $this->getAttribute($attr);
+					# If the attribute is null, then no attribute exists, silently ignore it (unless this is the default template)
+					if (is_null($attribute) && (! $this->isType('default') && ! $this->isType(null)))
+						continue;
+
+					# If it is a binary attribute, the post should have base64 encoded the value, we'll need to reverse that
+					if ($server->isAttrBinary($attr))
+						foreach ($values as $index => $value)
+							$values[$index] = base64_decode($value);
+
+					if (is_null($attribute)) {
+						$attribute = $this->addAttribute($attr,array('values'=>$values));
+
+						if (count($values))
+							$attribute->justModified();
+
+					} else
+						$attribute->setValue(array_values($values));
+				}
+
+			# Read in our new binary values
+			if (isset($_FILES[$key]['name']))
+				foreach ($_FILES[$key]['name'] as $attr => $values) {
+					$new_values = array();
+
+					foreach ($values as $index => $details) {
+						# Ignore empty files
+						if (! $_FILES[$key]['size'][$attr][$index])
+							continue;
+
+						if (! is_uploaded_file($_FILES[$key]['tmp_name'][$attr][$index])) {
+							if (isset($_FILES[$key]['error'][$attr][$index]))
+								switch($_FILES[$key]['error'][$attr][$index]) {
+
+									# No error; possible file attack!
+									case 0:
+										$msg = _('Security error: The file being uploaded may be malicious.');
+										break;
+
+									# Uploaded file exceeds the upload_max_filesize directive in php.ini
+									case 1:
+										$msg = _('The file you uploaded is too large. Please check php.ini, upload_max_size setting');
+										break;
+
+									# Uploaded file exceeds the MAX_FILE_SIZE directive specified in the html form
+									case 2:
+										$msg = _('The file you uploaded is too large. Please check php.ini, upload_max_size setting');
+										break;
+
+									# Uploaded file was only partially uploaded
+									case 3:
+										$msg = _('The file you selected was only partially uploaded, likley due to a network error.');
+										break;
+
+									# No file was uploaded
+									case 4:
+										$msg = _('You left the attribute value blank. Please go back and try again.');
+										break;
+
+									# A default error, just in case! :)
+									default:
+										$msg = _('Security error: The file being uploaded may be malicious.');
+										break;
+								}
+
+							else
+								$msg = _('Security error: The file being uploaded may be malicious.');
+
+							system_message(array(
+								'title'=>_('Upload Binary Attribute Error'),'body'=>$msg,'type'=>'warn'));
+
+						} else {
+							$binaryfile = array();
+							$binaryfile['name'] = $_FILES[$key]['tmp_name'][$attr][$index];
+							$binaryfile['handle'] = fopen($binaryfile['name'],'r');
+							$binaryfile['data'] = fread($binaryfile['handle'],filesize($binaryfile['name']));
+							fclose($binaryfile['handle']);
+
+							$new_values[$index] = $binaryfile['data'];
+						}
+					}
+
+					if (count($new_values)) {
+						$attribute = $this->getAttribute($attr);
+
+						if (is_null($attribute))
+							$attribute = $this->addAttribute($attr,array('values'=>$new_values));
+						else
+							foreach ($new_values as $value)
+								$attribute->addValue($value);
+
+						$attribute->justModified();
+					}
+				}
+		}
+
+		# If there are any single item additions (from the add_attr form for example)
+		if (isset($_REQUEST['single_item_attr'])) {
+			if (isset($_REQUEST['single_item_value'])) {
+				if (! is_array($_REQUEST['single_item_value']))
+					$values = array($_REQUEST['single_item_value']);
+				else
+					$values = $_REQUEST['single_item_value'];
+
+			} elseif (isset($_REQUEST['binary'])) {
+				/* Special case for binary attributes (like jpegPhoto and userCertificate):
+				 * we must go read the data from the file and override $_REQUEST['single_item_value'] with the
+				 * binary data. Secondly, we must check if the ";binary" option has to be appended to the name
+				 * of the attribute. */
+
+				if ($_FILES['single_item_value']['size'] === 0)
+					system_message(array(
+						'title'=>_('Upload Binary Attribute Error'),
+						'body'=>sprintf('%s %s',_('The file you chose is either empty or does not exist.'),_('Please go back and try again.')),
+						'type'=>'warn'));
+
+				else {
+					if (! is_uploaded_file($_FILES['single_item_value']['tmp_name'])) {
+						if (isset($_FILES['single_item_value']['error']))
+							switch($_FILES['single_item_value']['error']) {
+
+								# No error; possible file attack!
+								case 0:
+									$msg = _('Security error: The file being uploaded may be malicious.');
+									break;
+
+								# Uploaded file exceeds the upload_max_filesize directive in php.ini
+								case 1:
+									$msg = _('The file you uploaded is too large. Please check php.ini, upload_max_size setting');
+									break;
+
+								# Uploaded file exceeds the MAX_FILE_SIZE directive specified in the html form
+								case 2:
+									$msg = _('The file you uploaded is too large. Please check php.ini, upload_max_size setting');
+									break;
+
+								# Uploaded file was only partially uploaded
+								case 3:
+									$msg = _('The file you selected was only partially uploaded, likley due to a network error.');
+									break;
+
+								# No file was uploaded
+								case 4:
+									$msg = _('You left the attribute value blank. Please go back and try again.');
+									break;
+
+								# A default error, just in case! :)
+								default:
+									$msg = _('Security error: The file being uploaded may be malicious.');
+									break;
+							}
+
+						else
+							$msg = _('Security error: The file being uploaded may be malicious.');
+
+						system_message(array(
+							'title'=>_('Upload Binary Attribute Error'),'body'=>$msg,'type'=>'warn'),'index.php');
+					}
+
+					$binaryfile = array();
+					$binaryfile['name'] = $_FILES['single_item_value']['tmp_name'];
+					$binaryfile['handle'] = fopen($binaryfile['name'],'r');
+					$binaryfile['data'] = fread($binaryfile['handle'],filesize($binaryfile['name']));
+					fclose($binaryfile['handle']);
+
+					$values = array($binaryfile['data']);
+				}
+			}
+
+			if (count($values)) {
+				$attribute = $this->getAttribute($_REQUEST['single_item_attr']);
+
+				if (is_null($attribute))
+					$attribute = $this->addAttribute($_REQUEST['single_item_attr'],array('values'=>$values));
+				else
+					$attribute->setValue(array_values($values));
+
+				$attribute->justModified();
+			}
+		}
+
+		# If this is the default creation template, we need to set some additional values
+		if ($this->isType('default') && $this->getContext() == 'create') {
+			# Load our schema, based on the objectclasses that may have already been defined.
+			if (! get_request('create_base'))
+				$this->rebuildTemplateAttrs();
+
+			# Set the RDN attribute
+			$counter = 1;
+			foreach (get_request('rdn_attribute','REQUEST',false,array()) as $key => $value) {
+				$attribute = $this->getAttribute($value);
+
+				if (! is_null($attribute))
+					$attribute->setRDN($counter++);
+
+				else {
+					system_message(array(
+						'title'=>_('No RDN attribute'),
+						'body'=>_('No RDN attribute was selected'),
+						'type'=>'warn'),'index.php');
+
+					die();
+				}
+			}
+		}
+	}
+
+	/**
+	 * Set the DN for this template, if we are editing entries
+	 *
+	 * @param dn The DN of the entry
+	 */
+	public function setDN($dn) {
+		if (DEBUG_ENABLED && (($fargs=func_get_args())||$fargs='NOARGS'))
+			debug_log('Entered (%%)',5,0,__FILE__,__LINE__,__METHOD__,$fargs);
+
+		if (isset($this->container))
+			system_message(array(
+				'title'=>__METHOD__,
+				'body'=>'CONTAINER set while setting DN',
+				'type'=>'info'));
+
+		$this->dn = $dn;
+	}
+
+	/**
+	 * Set the RDN attributes
+	 * Given an RDN, mark the attributes as RDN attributes. If there is no defined attribute,
+	 * then the remaining RDNs will be returned.
+	 *
+	 * @param RDN
+	 * @return RDN attributes not processed
+	 */
+	public function setRDNAttributes($rdn) {
+		if (DEBUG_ENABLED && (($fargs=func_get_args())||$fargs='NOARGS'))
+			debug_log('Entered (%%)',5,0,__FILE__,__LINE__,__METHOD__,$fargs);
+
+		# Setup to work out our RDN.
+		$rdnarray = rdn_explode($rdn);
+
+		$counter = 1;
+		foreach ($this->getAttributes(true) as $attribute)
+			foreach ($rdnarray as $index => $rdnattr) {
+				list($attr,$value) = explode('=',$rdnattr);
+
+				if (strtolower($attr) == $attribute->getName()) {
+					$attribute->setRDN($counter++);
+					unset($rdnarray[$index]);
+				}
+			}
+
+		return $rdnarray;
+	}
+
+	/**
+	 * Display the DN for this template entry. If the DN is not set (creating a new entry), then
+	 * a generated DN will be produced, taken from the RDN and the CONTAINER details.
+	 *
+	 * @return dn
+	 */
+	public function getDN() {
+		if (DEBUG_ENABLED && (($fargs=func_get_args())||$fargs='NOARGS'))
+			debug_log('Entered (%%)',5,0,__FILE__,__LINE__,__METHOD__,$fargs,$this->dn);
+
+		if ($this->dn)
+			return $this->dn;
+
+		# If DN is not set, our DN will be made from our RDN and Container.
+		elseif ($this->getRDN() && $this->getContainer())
+			return sprintf('%s,%s',$this->getRDN(),$this->GetContainer());
+
+		# If container is not set, we're probably creating the base
+		elseif ($this->getRDN() && get_request('create_base'))
+			return $this->getRDN();
+	}
+
+	public function getDNEncode($url=true) {
+		// @todo Be nice to do all this in 1 location
+		if ($url)
+			return urlencode(preg_replace('/%([0-9a-fA-F]+)/',"%25\\1",$this->getDN()));
+		else
+			return preg_replace('/%([0-9a-fA-F]+)/',"%25\\1",$this->getDN());
+	}
+
+	/**
+	 * Set the container for this template, if we are creating entries
+	 *
+	 * @param dn The DN of the container
+	 * @todo Trigger a query to the LDAP server and generate an error if the container doesnt exist
+	 */
+	public function setContainer($container) {
+		if (DEBUG_ENABLED && (($fargs=func_get_args())||$fargs='NOARGS'))
+			debug_log('Entered (%%)',5,0,__FILE__,__LINE__,__METHOD__,$fargs);
+
+		if (isset($this->dn))
+			system_message(array(
+				'title'=>__METHOD__,
+				'body'=>'DN set while setting CONTAINER',
+				'type'=>'info'));
+
+		$this->container = $container;
+	}
+
+	/**
+	 * Get the DN of the container for this entry
+	 *
+	 * @return dn DN of the container
+	 */
+	public function getContainer() {
+		if (DEBUG_ENABLED && (($fargs=func_get_args())||$fargs='NOARGS'))
+			debug_log('Entered (%%)',5,1,__FILE__,__LINE__,__METHOD__,$fargs,$this->container);
+
+		return $this->container;
+	}
+
+	public function getContainerEncode($url=true) {
+		// @todo Be nice to do all this in 1 location
+		if ($url)
+			return urlencode(preg_replace('/%([0-9a-fA-F]+)/',"%25\\1",$this->container));
+		else
+			return preg_replace('/%([0-9a-fA-F]+)/',"%25\\1",$this->container);
+	}
+
+	/**
+	 * Copy a DN
+	 */
+	public function copy($template,$rdn,$asnew=false) {
+		if (DEBUG_ENABLED && (($fargs=func_get_args())||$fargs='NOARGS'))
+			debug_log('Entered (%%)',5,0,__FILE__,__LINE__,__METHOD__,$fargs);
+
+		$rdnarray = rdn_explode($rdn);
+
+		$counter = 1;
+		foreach ($template->getAttributes(true) as $sattribute) {
+			$attribute = $this->addAttribute($sattribute->getName(false),array('values'=>$sattribute->getValues()));
+
+			# Set our new RDN, and its values
+			if (is_null($attribute)) {
+				debug_dump_backtrace('Attribute is null, it probably doesnt exist in the destination server?');
+
+			} else {
+
+				# Mark our internal attributes.
+				if ($sattribute->isInternal())
+					$attribute->setInternal();
+
+				$modified = false;
+				foreach ($rdnarray as $index => $rdnattr) {
+					list($attr,$value) = explode('=',$rdnattr);
+					if (strtolower($attr) == $attribute->getName()) {
+
+						# If this is already marked as an RDN, then this multivalue RDN was updated on a previous loop
+						if (! $modified) {
+							$attribute->setValue(array($value));
+							$attribute->setRDN($counter++);
+							$modified = true;
+
+						} else {
+							$attribute->addValue($value);
+						}
+
+						# This attribute has been taken care of, we'll drop it from our list.
+						unset($rdnarray[$index]);
+					}
+				}
+			}
+
+			// @todo If this is a Jpeg Attribute, we need to mark it read only, since it cant be deleted like text attributes can
+			if (strcasecmp(get_class($attribute),'jpegAttribute') == 0)
+				$attribute->setReadOnly();
+		}
+
+		# If we have any RDN values left over, there werent in the original entry and need to be added.
+		foreach ($rdnarray as $rdnattr) {
+			list($attr,$value) = explode('=',$rdnattr);
+
+			$attribute = $this->addAttribute($attr,array('values'=>array($value)));
+
+			if (is_null($attribute))
+				debug_dump_backtrace('Attribute is null, it probably doesnt exist in the destination server?');
+			else
+				$attribute->setRDN($counter++);
+		}
+
+		# If we are copying into a new entry, we need to discard all the "old values"
+		if ($asnew)
+			foreach ($this->getAttributes(true) as $sattribute)
+				$sattribute->setOldValue(array());
+	}
+
+	/**
+	 * Get Attributes by LDAP type
+	 * This function will return a list of attributes by LDAP type (MUST,MAY).
+	 *
+	 * @return array Array of attributes.
+	 */
+	function getAttrbyLdapType($type) {
+		if (DEBUG_ENABLED && (($fargs=func_get_args())||$fargs='NOARGS'))
+			debug_log('Entered (%%)',5,0,__FILE__,__LINE__,__METHOD__,$fargs);
+
+		$result = array();
+
+		foreach ($this->attributes as $index => $attribute) {
+			if ($attribute->getLDAPtype() == strtolower($type))
+				array_push($result,$attribute->getName());
+		}
+
+		return $result;
+	}
+
+	/**
+	 * Return true if this is a MUST,MAY attribute
+	 */
+	function isAttrType($attr,$type) {
+		if (DEBUG_ENABLED && (($fargs=func_get_args())||$fargs='NOARGS'))
+			debug_log('Entered (%%)',5,0,__FILE__,__LINE__,__METHOD__,$fargs);
+
+		if (in_array(strtolower($attr),$this->getAttrbyLdapType($type)))
+			return true;
+		else
+			return false;
+	}
+
+	/**
+	 * Return the attributes that comprise the RDN.
+	 *
+	 * @return array Array of RDN objects
+	 */
+	private function getRDNObjects() {
+		if (DEBUG_ENABLED && (($fargs=func_get_args())||$fargs='NOARGS'))
+			debug_log('Entered (%%)',5,0,__FILE__,__LINE__,__METHOD__,$fargs);
+
+		$return = array();
+
+		foreach ($this->attributes as $attribute)
+			if ($attribute->isRDN())
+				array_push($return,$attribute);
+
+		masort($return,'rdn');
+		return $return;
+	}
+
+	/**
+	 * Get all the RDNs for this template, in RDN order.
+	 *
+	 * @return array RDNs in order.
+	 */
+	public function getRDNAttrs() {
+		if (DEBUG_ENABLED && (($fargs=func_get_args())||$fargs='NOARGS'))
+			debug_log('Entered (%%)',5,0,__FILE__,__LINE__,__METHOD__,$fargs);
+
+		$return = array();
+
+		foreach ($this->getRDNObjects() as $attribute) {
+			# We'll test if two RDN's have the same number (we cant test anywhere else)
+			if (isset($return[$attribute->isRDN()]) && $this->getType() == 'creation')
+				system_message(array(
+					'title'=>_('RDN attribute sequence already defined'),
+					'body'=>sprintf('%s %s',
+						sprintf(_('There is a problem in template [%s].'),$this->getName()),
+						sprintf(_('RDN attribute sequence [%s] is already used by attribute [%s] and cant be used by attribute [%s] also.'),
+							$attribute->isRDN(),$return[$attribute->isRDN()],$attribute->getName())),
+					'type'=>'error'),'index.php');
+
+			$return[$attribute->isRDN()] = $attribute->getName();
+		}
+
+		return $return;
+	}
+
+	/**
+	 * Return the RDN for this template. If the DN is already defined, then the RDN will be calculated from it.
+	 * If the DN is not set, then the RDN will be calcuated from the template attribute definitions
+	 *
+	 * @return rdn RDN for this template
+	 */
+	public function getRDN() {
+		if (DEBUG_ENABLED && (($fargs=func_get_args())||$fargs='NOARGS'))
+			debug_log('Entered (%%)',5,0,__FILE__,__LINE__,__METHOD__,$fargs);
+
+		# If the DN is set, then the RDN will be calculated from it.
+		if ($this->dn)
+			return get_rdn($this->dn);
+
+		$rdn = '';
+
+		foreach ($this->getRDNObjects() as $attribute) {
+			$vals = $attribute->getValues();
+
+			# If an RDN attribute has no values, return with an empty string. The calling script should handle this.
+			if (! count($vals))
+				return '';
+
+			foreach ($vals as $val)
+				$rdn .= sprintf('%s=%s+',$attribute->getName(false),$val);
+		}
+
+		# Chop the last plus sign off when returning
+		return preg_replace('/\+$/','',$rdn);
+	}
+
+	/**
+	 * Return the attribute name part of the RDN
+	 */
+	public function getRDNAttributeName() {
+		if (DEBUG_ENABLED && (($fargs=func_get_args())||$fargs='NOARGS'))
+			debug_log('Entered (%%)',5,0,__FILE__,__LINE__,__METHOD__,$fargs);
+
+		$attr = array();
+
+		if ($this->getDN()) {
+			$i = strpos($this->getDN(),',');
+			if ($i !== false) {
+				$attrs = explode('\+',substr($this->getDN(),0,$i));
+				foreach ($attrs as $id => $attr) {
+					list ($name,$value) = explode('=',$attr);
+					$attrs[$id] = $name;
+				}
+
+				$attr = array_unique($attrs);
+			}
+		}
+
+		return $attr;
+	}
+
+	/**
+	 * Determine the type of template this is
+	 */
+	public function getContext() {
+		if (DEBUG_ENABLED && (($fargs=func_get_args())||$fargs='NOARGS'))
+			debug_log('Entered (%%)',5,0,__FILE__,__LINE__,__METHOD__,$fargs);
+
+		if ($this->getContainer() && get_request('cmd','REQUEST') == 'copy')
+			return 'copyasnew';
+		elseif ($this->getContainer() || get_request('create_base'))
+			return 'create';
+		elseif ($this->getDN())
+			return 'edit';
+		else
+			return 'unknown';
+	}
+
+	/**
+	 * Test if the template is visible
+	 *
+	 * @return boolean
+	 */
+	public function isVisible() {
+		if (DEBUG_ENABLED && (($fargs=func_get_args())||$fargs='NOARGS'))
+			debug_log('Entered (%%)',5,1,__FILE__,__LINE__,__METHOD__,$fargs,$this->visible);
+
+		return $this->visible;
+	}
+
+	public function setVisible() {
+		$this->visible = true;
+	}
+
+	public function setInvisible() {
+		$this->visible = false;
+	}
+
+	public function getRegExp() {
+		if (DEBUG_ENABLED && (($fargs=func_get_args())||$fargs='NOARGS'))
+			debug_log('Entered (%%)',5,1,__FILE__,__LINE__,__METHOD__,$fargs,$this->regexp);
+
+		return $this->regexp;
+	}
+
+	/**
+	 * Test if this template has been marked as a read-only template
+	 */
+	public function isReadOnly() {
+		if (DEBUG_ENABLED && (($fargs=func_get_args())||$fargs='NOARGS'))
+			debug_log('Entered (%%)',5,0,__FILE__,__LINE__,__METHOD__,$fargs);
+
+		if ((($this->getContext() == 'edit') && $this->readonly) || $this->getServer()->isReadOnly())
+			return true;
+		else
+			return false;
+	}
+
+	/**
+	 * Get the attribute entries
+	 *
+	 * @param boolean Include the optional attributes
+	 * @return array Array of attributes
+	 */
+	public function getAttributes($optional=false) {
+		if (DEBUG_ENABLED && (($fargs=func_get_args())||$fargs='NOARGS'))
+			debug_log('Entered (%%)',5,0,__FILE__,__LINE__,__METHOD__,$fargs);
+
+		if ($optional)
+			return $this->attributes;
+
+		$result = array();
+		foreach ($this->attributes as $attribute) {
+			if (! $attribute->isRequired())
+				continue;
+
+			array_push($result,$attribute);
+		}
+
+		return $result;
+	}
+
+	/**
+	 * Return a list of attributes that should be shown
+	 */
+	public function getAttributesShown() {
+		if (DEBUG_ENABLED && (($fargs=func_get_args())||$fargs='NOARGS'))
+			debug_log('Entered (%%)',5,0,__FILE__,__LINE__,__METHOD__,$fargs);
+
+		$result = array();
+
+		foreach ($this->attributes as $attribute)
+			if ($attribute->isVisible())
+				array_push($result,$attribute);
+
+		return $result;
+	}
+
+	/**
+	 * Return a list of the internal attributes
+	 */
+	public function getAttributesInternal() {
+		if (DEBUG_ENABLED && (($fargs=func_get_args())||$fargs='NOARGS'))
+			debug_log('Entered (%%)',5,0,__FILE__,__LINE__,__METHOD__,$fargs);
+
+		$result = array();
+
+		foreach ($this->attributes as $attribute)
+			if ($attribute->isInternal())
+				array_push($result,$attribute);
+
+		return $result;
+	}
+
+	/**
+	 * Return the objectclasses defined in this template
+	 *
+	 * @return array Array of Objects
+	 */
+	public function getObjectClasses() {
+		if (DEBUG_ENABLED && (($fargs=func_get_args())||$fargs='NOARGS'))
+			debug_log('Entered (%%)',5,0,__FILE__,__LINE__,__METHOD__,$fargs);
+
+		$attribute = $this->getAttribute('objectclass');
+		if ($attribute)
+			return $attribute->getValues();
+		else
+			return array();
+	}
+
+	/**
+	 * Get template icon
+	 */
+	public function getIcon() {
+		if (DEBUG_ENABLED && (($fargs=func_get_args())||$fargs='NOARGS'))
+			debug_log('Entered (%%)',5,1,__FILE__,__LINE__,__METHOD__,$fargs,$this->icon);
+
+		return isset($this->icon) ? sprintf('%s/%s',IMGDIR,$this->icon) : '';
+	}
+
+	/**
+	 * Return the template description
+	 *
+	 * @return string Description
+	 */
+	public function getDescription() {
+		if (DEBUG_ENABLED && (($fargs=func_get_args())||$fargs='NOARGS'))
+			debug_log('Entered (%%)',5,1,__FILE__,__LINE__,__METHOD__,$fargs,$this->description);
+
+		return $this->description;
+	}
+
+	/**
+	 * Set a template as invalid
+	 *
+	 * @param string Message indicating the reason the template has been invalidated
+	 */
+	public function setInvalid($msg,$admin=false) {
+		if (DEBUG_ENABLED && (($fargs=func_get_args())||$fargs='NOARGS'))
+			debug_log('Entered (%%)',5,0,__FILE__,__LINE__,__METHOD__,$fargs);
+
+		$this->invalid = true;
+		$this->invalid_reason = $msg;
+		$this->invalid_admin = $admin;
+	}
+
+	/**
+	 * Get the template validity or the reason it is invalid
+	 *
+	 * @return string Invalid reason, or false if not invalid
+	 */
+	public function isInValid() {
+		if (DEBUG_ENABLED && (($fargs=func_get_args())||$fargs='NOARGS'))
+			debug_log('Entered (%%)',5,0,__FILE__,__LINE__,__METHOD__,$fargs);
+
+		if ($this->invalid)
+			return $this->invalid_reason;
+		else
+			return false;
+	}
+
+	public function isAdminDisabled() {
+		if (DEBUG_ENABLED && (($fargs=func_get_args())||$fargs='NOARGS'))
+			debug_log('Entered (%%)',5,1,__FILE__,__LINE__,__METHOD__,$fargs,$this->invalid_admin);
+
+		return $this->invalid_admin;
+	}
+
+	/**
+	 * Set the minimum number of values for an attribute
+	 *
+	 * @param object Attribute
+	 * @param int
+	 */
+	private function setMinValueCount($attr,$value) {
+		if (DEBUG_ENABLED && (($fargs=func_get_args())||$fargs='NOARGS'))
+			debug_log('Entered (%%)',5,0,__FILE__,__LINE__,__METHOD__,$fargs);
+
+		$attribute = $this->getAttribute($attr);
+
+		if (! is_null($attribute))
+			$attribute->setMinValueCount($value);
+	}
+
+	/**
+	 * Set the LDAP type property for an attribute
+	 *
+	 * @param object Attribute
+	 * @param string (MUST,MAY,OPTIONAL)
+	 */
+	private function setAttrLDAPtype($attr,$value) {
+		if (DEBUG_ENABLED && (($fargs=func_get_args())||$fargs='NOARGS'))
+			debug_log('Entered (%%)',5,0,__FILE__,__LINE__,__METHOD__,$fargs);
+
+		$attribute = $this->getAttribute($attr);
+
+		if (is_null($attribute))
+			$attribute = $this->addAttribute($attr,array('values'=>array()));
+
+		$attribute->setLDAPtype($value);
+	}
+
+	/**
+	 * OnChangeAdd javascript processing
+	 */
+	public function OnChangeAdd($origin,$value) {
+		if (DEBUG_ENABLED && (($fargs=func_get_args())||$fargs='NOARGS'))
+			debug_log('Entered (%%)',5,0,__FILE__,__LINE__,__METHOD__,$fargs);
+
+		$attribute = $this->getAttribute($origin);
+
+		if (preg_match('/^=(\w+)\((.*)\)$/',$value,$matches)) {
+			$command = $matches[1];
+			$arg = $matches[2];
+		} else
+			return;
+
+		switch ($command) {
+			/*
+			autoFill:string
+			string is a literal string, and may contain many fields like %attr|start-end/flags%
+				to substitute values read from other fields.
+			|start-end is optional, but must be present if the k flag is used.
+			/flags is optional.
+
+			flags may be:
+			T:	Read display text from selection item (drop-down list), otherwise, read the value of the field
+				For fields that aren't selection items, /T shouldn't be used, and the field value will always be read.
+			k:	Tokenize:
+				If the "k" flag is not given:
+					A |start-end instruction will perform a sub-string operation upon
+					the value of the attr, passing character positions start-end through.
+					start can be 0 for first character, or any other integer.
+					end can be 0 for last character, or any other integer for a specific position.
+				If the "k" flag is given:
+					The string read will be split into fields, using : as a delimiter
+					"start" indicates which field number to pass through.
+			K:	The string read will be split into fields, using ' ' as a delimiter "start" indicates which field number to pass through.
+			l:	Make the result lower case.
+			U:	Make the result upper case.
+			*/
+			case 'autoFill':
+				if (! preg_match('/;/',$arg)) {
+					system_message(array(
+						'title'=>_('Problem with autoFill() in template'),
+						'body'=>sprintf('%s (<b>%s</b>)',_('There is only 1 argument, when there should be two'),$attribute->getName(false)),
+						'type'=>'warn'));
+
+					return;
+				}
+
+				list($attr,$string) = preg_split('(([^,]+);(.*))',$arg,-1,PREG_SPLIT_DELIM_CAPTURE | PREG_SPLIT_NO_EMPTY);
+				preg_match_all('/%(\w+)(\|[0-9]*-[0-9]*)?(\/[KklTUA]+)?%/U',$string,$matchall);
+				//print"<PRE>";print_r($matchall); //0 = highlevel match, 1 = attr, 2 = subst, 3 = mod
+
+				if (! isset($attribute->js['autoFill']))
+					$attribute->js['autoFill'] = '';
+
+				$formula = $string;
+				$formula = preg_replace('/^([^%])/','\'$1',$formula);
+				$formula = preg_replace('/([^%])$/','$1\'',$formula);
+
+				# Check that our attributes match our schema attributes.
+				foreach ($matchall[1] as $index => $checkattr) {
+					$sattr = $this->getServer()->getSchemaAttribute($checkattr);
+
+					# If the attribute is the same as in the XML file, then dont need to do anything.
+					if (! $sattr || ! strcasecmp($sattr->getName(),$checkattr))
+						continue;
+
+					$formula = preg_replace("/$checkattr/",$sattr->getName(),$formula);
+					$matchall[1][$index] = $sattr->getName();
+				}
+
+				$elem_id = 0;
+
+				foreach ($matchall[0] as $index => $null) {
+					$match_attr = strtolower($matchall[1][$index]);
+					$match_subst = $matchall[2][$index];
+					$match_mod = $matchall[3][$index];
+
+					$substrarray = array();
+
+					if (! isset($varcount[$match_attr]))
+						$varcount[$match_attr] = 0;
+					else
+						$varcount[$match_attr]++;
+
+					$js_match_attr = $match_attr;
+					$match_attr = $js_match_attr.'xx'.$varcount[$match_attr];
+
+					$formula = preg_replace('/%'.$js_match_attr.'([|\/%])/i','%'.$match_attr.'$1',$formula,1);
+
+					$attribute->js['autoFill'] .= sprintf("  var %s;\n",$match_attr);
+					$attribute->js['autoFill'] .= sprintf(
+							"  var elem$elem_id = document.getElementById(pre+'%s'+suf);\n".
+							"  if (!elem$elem_id) return;\n", $js_match_attr);
+
+					if (strstr($match_mod,'T')) {
+						$attribute->js['autoFill'] .= sprintf("  %s = elem$elem_id.options[elem$elem_id.selectedIndex].text;\n",
+							$match_attr);
+					} else {
+						$attribute->js['autoFill'] .= sprintf("  %s = elem$elem_id.value;\n",$match_attr);
+					}
+
+					$elem_id++;
+
+					if (strstr($match_mod,'k')) {
+						preg_match_all('/([0-9]+)/',trim($match_subst),$substrarray);
+						if (isset($substrarray[1][0])) {
+							$tok_idx = $substrarray[1][0];
+						} else {
+							$tok_idx = '0';
+						}
+						$attribute->js['autoFill'] .= sprintf("   %s = %s.split(':')[%s];\n",$match_attr,$match_attr,$tok_idx);
+
+					} elseif (strstr($match_mod,'K')) {
+						preg_match_all('/([0-9]+)/',trim($match_subst),$substrarray); 
+						if (isset($substrarray[1][0])) { 
+							$tok_idx = $substrarray[1][0]; 
+						} else { 
+							$tok_idx = '0'; 
+						} 
+						$attribute->js['autoFill'] .= sprintf("   %s = %s.split(' ')[%s];\n",$match_attr,$match_attr,$tok_idx); 
+
+					} else {
+						preg_match_all('/([0-9]*)-([0-9]*)/',trim($match_subst),$substrarray);
+						if ((isset($substrarray[1][0]) && $substrarray[1][0]) || (isset($substrarray[2][0]) && $substrarray[2][0])) {
+							$attribute->js['autoFill'] .= sprintf("   %s = %s.substr(%s,%s);\n",
+								$match_attr,$match_attr,
+								$substrarray[1][0] ? $substrarray[1][0] : '0',
+								$substrarray[2][0] ? $substrarray[2][0] : sprintf('%s.length',$match_attr));
+						}
+					}
+
+					if (strstr($match_mod,'l')) {
+						$attribute->js['autoFill'] .= sprintf("   %s = %s.toLowerCase();\n",$match_attr,$match_attr);
+					}
+					if (strstr($match_mod,'U')) {
+						$attribute->js['autoFill'] .= sprintf("   %s = %s.toUpperCase();\n",$match_attr,$match_attr);
+					}
+					if (strstr($match_mod,'A')) {
+						$attribute->js['autoFill'] .= sprintf("   %s = toAscii(%s);\n",$match_attr,$match_attr);
+					}
+
+					# Matchfor only entry without modifiers.
+					$formula = preg_replace('/^%('.$match_attr.')%$/U','$1 + \'\'',$formula);
+					# Matchfor only entry with modifiers.
+					$formula = preg_replace('/^%('.$match_attr.')(\|[0-9]*-[0-9]*)?(\/[KklTUA]+)?%$/U','$1 + \'\'',$formula);
+					# Matchfor begining entry.
+					$formula = preg_replace('/^%('.$match_attr.')(\|[0-9]*-[0-9]*)?(\/[KklTUA]+)?%/U','$1 + \'',$formula);
+					# Matchfor ending entry.
+					$formula = preg_replace('/%('.$match_attr.')(\|[0-9]*-[0-9]*)?(\/[KklTUA]+)?%$/U','\' + $1 ',$formula);
+					# Match for entries not at begin/end.
+					$formula = preg_replace('/%('.$match_attr.')(\|[0-9]*-[0-9]*)?(\/[:lTUA]+)?%/U','\' + $1 + \'',$formula);
+					$attribute->js['autoFill'] .= "\n";
+				}
+
+				$attribute->js['autoFill'] .= sprintf(" fillRec(pre+'%s'+suf, %s); // %s\n",strtolower($attr),$formula,$string);
+				$attribute->js['autoFill'] .= "\n";
+				break;
+
+			default: $return = '';
+		}
+	}
+
+	/**
+	 * This functions main purpose is to discover our MUST attributes based on objectclass
+	 * definitions in the template file and to discover which of the objectclasses are
+	 * STRUCTURAL - without one, creating an entry will just product an LDAP error.
+	 */
+	private function rebuildTemplateAttrs() {
+		if (DEBUG_ENABLED && (($fargs=func_get_args())||$fargs='NOARGS'))
+			debug_log('Entered (%%)',5,0,__FILE__,__LINE__,__METHOD__,$fargs);
+
+		$server = $this->getServer();
+
+		# Collect our structural, MUST & MAY attributes.
+		$oclass_processed = array();
+		$superclasslist = array();
+		$allattrs = array('objectclass');
+
+		foreach ($this->getObjectClasses() as $oclass) {
+			# If we get some superclasses - then we'll need to go through them too.
+			$supclass = true;
+			$inherited = false;
+
+			while ($supclass) {
+				$soc = $server->getSchemaObjectClass($oclass);
+
+				if ($soc->getType() == 'structural' && (! $inherited))
+					array_push($this->structural_oclass,$oclass);
+
+				# Make sure our MUST attributes are marked as such for this template.
+				if ($soc->getMustAttrs())
+					foreach ($soc->getMustAttrs() as $index => $details) {
+						$objectclassattr = $details->getName();
+
+						# We add the 'objectClass' attribute, only if it's explicitly in the template attribute list
+						if ((strcasecmp('objectClass',$objectclassattr) != 0) ||
+								((strcasecmp('objectClass',$objectclassattr) == 0) && (! is_null($this->getAttribute($objectclassattr))))) {
+
+							# Go through the aliases, and ignore any that are already defined.
+							$ignore = false;
+							$sattr = $server->getSchemaAttribute($objectclassattr);
+							foreach ($sattr->getAliases() as $alias) {
+								if ($this->isAttrType($alias,'must')) {
+									$ignore = true;
+									break;
+								}
+							}
+
+							if ($ignore)
+								continue;
+
+							$this->setAttrLDAPtype($sattr->getName(),'must');
+							$this->setMinValueCount($sattr->getName(),1);
+
+							# We need to mark the attributes as show, except for the objectclass attribute.
+							if (strcasecmp('objectClass',$objectclassattr) != 0) {
+								$attribute = $this->getAttribute($sattr->getName());
+								$attribute->show();
+							}
+						}
+
+						if (! in_array($objectclassattr,$allattrs))
+							array_push($allattrs,$objectclassattr);
+					}
+
+				if ($soc->getMayAttrs())
+					foreach ($soc->getMayAttrs() as $index => $details) {
+						$objectclassattr = $details->getName();
+						$sattr = $server->getSchemaAttribute($objectclassattr);
+
+						# If it is a MUST attribute, skip to the next one.
+						if ($this->isAttrType($objectclassattr,'must'))
+							continue;
+
+						if (! $this->isAttrType($objectclassattr,'may'))
+							$this->setAttrLDAPtype($sattr->getName(false),'optional');
+
+						if (! in_array($objectclassattr,$allattrs))
+							array_push($allattrs,$objectclassattr);
+					}
+
+				# Keep a list to objectclasses we have processed, so we dont get into a loop.
+				array_push($oclass_processed,$oclass);
+				$supoclasses = $soc->getSupClasses();
+
+				if (count($supoclasses) || count($superclasslist)) {
+					foreach ($supoclasses as $supoclass) {
+						if (! in_array($supoclass,$oclass_processed))
+							$superclasslist[] = $supoclass;
+					}
+
+					$oclass = array_shift($superclasslist);
+					if ($oclass)
+						$inherited = true;
+					else
+						$supclass = false;
+
+				} else {
+					$supclass = false;
+				}
+			}
+		}
+
+		# Check that attributes are defined by an ObjectClass
+		foreach ($this->getAttributes(true) as $index => $attribute)
+			if (! in_array($attribute->getName(),$allattrs) && (! array_intersect($attribute->getAliases(),$allattrs))
+				&& (! in_array_ignore_case('extensibleobject',$this->getObjectClasses()))
+				&& (! in_array_ignore_case($attribute->getName(),$server->getValue('server','custom_attrs')))) {
+				unset($this->attributes[$index]);
+
+				if (! $_SESSION[APPCONFIG]->getValue('appearance','hide_template_warning'))
+					system_message(array(
+						'title'=>_('Automatically removed attribute from template'),
+						'body'=>sprintf('%s: <b>%s</b> %s',$this->getTitle(),$attribute->getName(false),_('removed from template as it is not defined by an ObjectClass')),
+						'type'=>'warn'));
+			}
+	}
+
+	/**
+	 * Return an array, that can be passed to ldap_add().
+	 * Attributes with empty values will be excluded.
+	 */
+	public function getLDAPadd($attrsOnly=false) {
+		if (DEBUG_ENABLED && (($fargs=func_get_args())||$fargs='NOARGS'))
+			debug_log('Entered (%%)',5,0,__FILE__,__LINE__,__METHOD__,$fargs);
+
+		$return = array();
+		$returnattrs = array();
+
+		if ($attrsOnly && count($returnattrs))
+			return $returnattrs;
+
+		foreach ($this->getAttributes(true) as $attribute)
+			if (! $attribute->isInternal() && count($attribute->getValues())) {
+				$return[$attribute->getName()] = $attribute->getValues();
+				$returnattrs[$attribute->getName()] = $attribute;
+			}
+
+		# Ensure that our objectclasses has "top".
+		if (isset($return['objectclass']) && ! in_array('top',$return['objectclass']))
+			array_push($return['objectclass'],'top');
+
+		if ($attrsOnly)
+			return $returnattrs;
+
+		return $return;
+	}
+
+	/**
+	 * Return an array, that can be passed to ldap_mod_replace().
+	 * Only attributes that have changed their value will be returned.
+	 *
+	 * This function will cache its results, so that it can be called with count() to see
+	 * if there are changes, and if they are, the 2nd call will just return the results
+	 *
+	 * @param boolean Return the attribute objects (useful for a confirmation process), or the modification array for ldap_modify()
+	 */
+	public function getLDAPmodify($attrsOnly=false,$index=0) {
+		if (DEBUG_ENABLED && (($fargs=func_get_args())||$fargs='NOARGS'))
+			debug_log('Entered (%%)',5,0,__FILE__,__LINE__,__METHOD__,$fargs);
+
+		static $return = array();
+		static $returnattrs = array();
+
+		if ($attrsOnly && isset($returnattrs[$index]) && count($returnattrs[$index]))
+			return $returnattrs[$index];
+
+		$returnattrs[$index] = array();
+		$return[$index] = array();
+
+		# If an objectclass is being modified, we need to remove all the orphan attributes that would result.
+		if ($this->getAttribute('objectclass')->hasBeenModified()) {
+			$attr_to_keep = array();
+			$server = $this->getServer();
+
+			# Make sure that there will be a structural object class remaining.
+			$haveStructural = false;
+			foreach ($this->getAttribute('objectclass')->getValues() as $value) {
+				$soc = $server->getSchemaObjectClass($value);
+
+				if ($soc) {
+					if ($soc->isStructural())
+						$haveStructural = true;
+
+					# While we are looping, workout which attributes these objectclasses define.
+					foreach ($soc->getMustAttrs(true) as $value)
+						if (! in_array($value->getName(),$attr_to_keep))
+							array_push($attr_to_keep,$value->getName());
+
+					foreach ($soc->getMayAttrs(true) as $value)
+						if (! in_array($value->getName(),$attr_to_keep))
+							array_push($attr_to_keep,$value->getName());
+				}
+			}
+
+			if (! $haveStructural)
+				error(_('An entry should have one structural objectClass.'),'error','index.php');
+
+			# Work out the attributes to delete.
+			foreach ($this->getAttribute('objectclass')->getRemovedValues() as $value) {
+				$soc = $server->getSchemaObjectClass($value);
+
+				foreach ($soc->getMustAttrs() as $value) {
+					$attribute = $this->getAttribute($value->getName());
+
+					if ($attribute && (! in_array($value->getName(),$attr_to_keep)) && ($value->getName() != 'objectclass'))
+						#array_push($attr_to_delete,$value->getName(false));
+						$attribute->setForceDelete();
+				}
+
+				foreach ($soc->getMayAttrs() as $value) {
+					$attribute = $this->getAttribute($value->getName());
+
+					if ($attribute && (! in_array($value->getName(),$attr_to_keep)) && ($value->getName() != 'objectclass'))
+						$attribute->setForceDelete();
+				}
+			}
+		}
+
+		foreach ($this->getAttributes(true) as $attribute)
+			if ($attribute->hasBeenModified()
+				&& (count(array_diff($attribute->getValues(),$attribute->getOldValues())) || ! count($attribute->getValues())
+					|| $attribute->isForceDelete() || (count($attribute->getValues()) != count($attribute->getOldValues()))))
+				$returnattrs[$index][$attribute->getName()] = $attribute;
+
+		if ($attrsOnly)
+			return $returnattrs[$index];
+
+		foreach ($returnattrs[$index] as $attribute)
+			$return[$index][$attribute->getName()] = $attribute->getValues();
+
+		return $return[$index];
+	}
+
+	/**
+	 * Get the attributes that are marked as force delete
+	 * We'll cache this result in the event of multiple calls.
+	 */
+	public function getForceDeleteAttrs() {
+		if (DEBUG_ENABLED && (($fargs=func_get_args())||$fargs='NOARGS'))
+			debug_log('Entered (%%)',5,0,__FILE__,__LINE__,__METHOD__,$fargs);
+
+		static $result = array();
+
+		if (count($result))
+			return $result;
+
+		foreach ($this->attributes as $attribute)
+			if ($attribute->isForceDelete())
+				array_push($result,$attribute);
+
+		return $result;
+	}
+
+	/**
+	 * Get available attributes
+	 */
+	public function getAvailAttrs() {
+		if (DEBUG_ENABLED && (($fargs=func_get_args())||$fargs='NOARGS'))
+			debug_log('Entered (%%)',5,0,__FILE__,__LINE__,__METHOD__,$fargs);
+
+		$attributes = array();
+		$server = $this->getServer();
+
+		# Initialise the Attribute Factory.
+		$attribute_factory = new AttributeFactory();
+
+		if (in_array_ignore_case('extensibleobject',$this->getObjectClasses())) {
+			foreach ($server->SchemaAttributes() as $sattr) {
+				$attribute = $attribute_factory->newAttribute($sattr->getName(),array('values'=>array()),$server->getIndex(),null);
+				array_push($attributes,$attribute);
+			}
+
+		} else {
+			$attrs = array();
+
+			foreach ($this->getObjectClasses() as $oc) {
+				$soc = $server->getSchemaObjectClass($oc);
+				$attrs = array_merge($attrs,$soc->getMustAttrNames(true),$soc->getMayAttrNames(true));
+				$attrs = array_unique($attrs);
+			}
+
+			foreach ($attrs as $attr)
+				if (is_null($this->getAttribute($attr))) {
+					$attribute = $attribute_factory->newAttribute($attr,array('values'=>array()),$server->getIndex(),null);
+					array_push($attributes,$attribute);
+				}
+		}
+
+		masort($attributes,'name');
+		return $attributes;
+	}
+
+	public function isNoLeaf() {
+		return $this->noleaf;
+	}
+}
+?>
diff --git a/lam/templates/3rdParty/pla/lib/TemplateRender.php b/lam/templates/3rdParty/pla/lib/TemplateRender.php
new file mode 100644
index 00000000..06a38657
--- /dev/null
+++ b/lam/templates/3rdParty/pla/lib/TemplateRender.php
@@ -0,0 +1,2515 @@
+<?php
+/**
+ * This class will render the creation or editing of an LDAP entry.
+ *
+ * @author The phpLDAPadmin development team
+ * @package phpLDAPadmin
+ */
+
+/**
+ * TemplateRender class
+ *
+ * @package phpLDAPadmin
+ * @subpackage Templates
+ */
+class TemplateRender extends PageRender {
+	# Page number
+	private $pagelast;
+
+	/** CORE FUNCTIONS **/
+
+	/**
+	 * Initialise and Render the TemplateRender
+	 */
+	public function accept($norender=false) {
+		if (DEBUG_ENABLED && (($fargs=func_get_args())||$fargs='NOARGS'))
+			debug_log('Entered (%%)',129,0,__FILE__,__LINE__,__METHOD__,$fargs);
+
+		if (DEBUGTMP) printf('<font size=-2>%s:%s</font><br />',time(),__METHOD__);
+		if (DEBUGTMP||DEBUGTMPSUB) printf('<font size=-2>* %s [Visit-Start:%s]</font><br />',__METHOD__,get_class($this));
+
+		$tree = get_cached_item($this->server_id,'tree');
+		if (! $tree)
+			$tree = Tree::getInstance($this->server_id);
+
+		$treeitem = $tree->getEntry($this->dn);
+
+		# If we have a DN, and no template_id, see if the tree has one from last time
+		if ($this->dn && is_null($this->template_id) && $treeitem && $treeitem->getTemplate())
+			$this->template_id = $treeitem->getTemplate();
+
+		# Check that we have a valid template, or present a selection
+		# @todo change this so that the modification templates rendered are the ones for the objectclass of the dn.
+		if (! $this->template_id)
+			$this->template_id = $this->getTemplateChoice();
+
+		if ($treeitem)
+			$treeitem->setTemplate($this->template_id);
+
+		$this->page = get_request('page','REQUEST',false,1);
+
+		if ($this->template_id) {
+			if (! $this->template)
+				parent::accept();
+
+			$this->url_base = sprintf('server_id=%s&dn=%s',
+				$this->getServerID(),$this->template->getDNEncode());
+			$this->layout['hint'] = sprintf('<td class="icon"><img src="%s/light.png" alt="%s" /></td><td colspan="3"><span class="hint">%%s</span></td>',
+				IMGDIR,_('Hint'));
+			$this->layout['action'] = '<td class="icon"><img src="%s/%s" alt="%s" /></td><td><a href="cmd.php?%s" title="%s">%s</a></td>';
+			$this->layout['actionajax'] = '<td class="icon"><img src="%s/%s" alt="%s" /></td><td><a href="cmd.php?%s" title="%s" onclick="return ajDISPLAY(\'BODY\',\'%s\',\'%s\');">%s</a></td>';
+
+			# If we dont want to render this template automatically, we'll return here.
+			if ($norender)
+				return;
+
+			$this->visitStart();
+
+			foreach ($this->template->getAttributes(true) as $attribute) {
+				# Evaluate our defaults
+				if ($attribute->getAutoValue())
+					$this->get('Default',$attribute,
+						$this->template->getContainer() ? $this->template->getContainer() : $this->getServer()->getContainerPath($this->template->getDN()),
+						'autovalue');
+
+				# If this is the default template, we should mark all our attributes to show().
+				if (($this->template->getID() == 'none') && (! $attribute->isInternal())
+					&& (($this->template->getContext() == 'edit' && $this->template->getID() == 'none')
+						|| ($this->template->getContext() == 'create' && $attribute->getName() != 'objectclass')))
+					$attribute->show();
+			}
+
+			if (DEBUGTMP||DEBUGTMPSUB) printf('<font size=-2>* %s [Visit-End:%s]</font><br />',__METHOD__,get_class($this));
+
+			$this->visitEnd();
+		}
+	}
+
+	protected function getDefaultAttribute($attribute,$container,$type) {
+		if (DEBUG_ENABLED && (($fargs=func_get_args())||$fargs='NOARGS'))
+			debug_log('Entered (%%)',129,0,__FILE__,__LINE__,__METHOD__,$fargs);
+
+		switch ($type) {
+			case 'autovalue':
+				$autovalue = $attribute->getAutoValue();
+
+				break;
+
+			case 'helpervalue':
+				$autovalue = $attribute->getHelperValue();
+
+				break;
+
+			default:
+				system_message(array(
+					'title'=>_('Unknown Default Attribute context'),
+					'body'=>sprintf('%s (<b>%s</b>)',_('A call was made to getDefaultAttribute() with an unkown context'),$type),
+					'type'=>'warn'));
+
+				return;
+		}
+
+		$args = explode(';',$autovalue['args']);
+		$server = $this->getServer();
+		$vals = '';
+
+		switch ($autovalue['function']) {
+			/**
+			 * Function enables normal PHP functions to be called to evaluate a value.
+			 * eg: =php.Function(date;dmY)
+			 *
+			 * All arguments will be passed to the function, and its value returned.
+			 * If this used used in a POST context, the attribute values can be used as arguments.
+			 *
+			 * Mandatory Arguments:
+			 * * arg 0
+			 *   - php Function to call
+			 *
+			 * Additional arguments will be passed to the function.
+			 */
+			case 'Function':
+				$function = array_shift($args);
+
+				if (count($args) && count($args) > 1) {
+					system_message(array(
+						'title'=>_('Too many arguments'),
+						'body'=>sprintf('%s (<b>%s</b>)',_('Function() only takes two arguments and more than two were specified'),count($args)),
+						'type'=>'warn'));
+
+					return;
+				}
+
+				$function_args = explode(',',$args[0]);
+
+				if (function_exists($function))
+					$vals = call_user_func_array($function,$function_args);
+
+				else
+					system_message(array(
+						'title'=>_('Function doesnt exist'),
+						'body'=>sprintf('%s (<b>%s</b>)',_('An attempt was made to call a function that doesnt exist'),$function),
+						'type'=>'warn'));
+
+				break;
+
+			/**
+			 * GetNextNumber will query the LDAP server and calculate the next number based on the query
+			 * eg: <![CDATA[=php.GetNextNumber(/;gidNumber;false;(&(objectClass=posixGroup));*2,+1000)]]>
+			 *
+			 * Mandatory Arguments:
+			 * * arg 0
+			 *   - "$" => 'auto_number','search_base' in config file
+			 *   - "/",".",".." => get container parent as usual
+			 *
+			 * * arg 1
+			 *   - attribute to query for
+			 *
+			 * Optional Arguments:
+			 * * arg 2 (pool mechanism only)
+			 *   - "true" increments attribute by 1
+			 *   - "false" do nothing
+			 *
+			 * * arg 3 (pool mechanism only)
+			 *   - ldap filter (must match one entry only in container)
+			 *
+			 * * arg 4
+			 *   - calculus on number, eg:
+			 *   - *2,+1000 => number = (2*number) + 1000
+			 *
+			 * * arg 5
+			 *   - Min number
+			 */
+			case 'GetNextNumber':
+				# If the attribute already has values, we'll return
+				if ($type == 'autovalue' && $attribute->getValues())
+					return;
+
+				if ($args[0] == '$')
+					$args[0] = $server->getValue($this->server_id,'auto_number','search_base');
+
+				$container = $server->getContainerPath($container,$args[0]);
+
+				$vals = get_next_number($container,$args[1],
+					(! empty($args[2]) && ($args[2] == 'false')) ? false : true,
+					(! empty($args[3])) ? $args[3] : false,
+					(! empty($args[5])) ? $args[5] : null);
+
+				# Operate calculus on next number.
+				if (! empty($args[4])) {
+					$mod = explode(',',$args[4]);
+					$next_number = $vals;
+
+					foreach ($mod as $calc) {
+						$operand = $calc{0};
+						$operator = substr ($calc,1);
+
+						switch ($operand) {
+							case '*':
+								$next_number = $next_number * $operator;
+								break;
+
+							case '+':
+								$next_number = $next_number + $operator;
+								break;
+
+							case '-':
+								$next_number = $next_number - $operator;
+								break;
+
+							case '/':
+								$next_number = $next_number / $operator;
+								break;
+						}
+					}
+
+					$vals = $next_number;
+				}
+
+				break;
+
+			/**
+			 * PickList will query the LDAP server and provide a select list of values
+			 * MultiList will query the LDAP server and provide a multi select list of values
+			 * eg: <![CDATA[=php.MultiList(/;(objectClass=posixAccount);uid)]]>
+			 *
+			 * eg: <![CDATA[=php.MultiList(/;(&(objectClass=posixAccount)(uid=groupA*));uid;%cn/U% (%gidNumber%);memberUid;dmdName=users;root => cn=root,nobody => cn=nobody;gidNumber;10)]]>
+			 *
+			 * Mandatory Arguments:
+			 * * arg 0
+			 *   - container, to query from current position
+			 *   - "/",".",".." => get container parent as usual
+			 *
+			 * * arg 1
+			 *   - LDAP filter. May include '%attr%', it will be expanded.
+			 *
+			 * * arg2
+			 *   - list attribute key
+			 *
+			 * Optional Arguments:
+			 * * arg3
+			 *   - select display (plus modifier /C: Capitalize)
+			 *   - replaced by %arg 2% if not given
+			 *
+			 * * arg 4
+			 *   - the value furnished in output - must be attribute id. replaced by arg 2 if not given
+			 *
+			 * * arg 5
+			 *   - container override
+			 *
+			 * * arg 6
+			 *   - csv list (, separator) of added values. syntax: key => display_attribute=value, key...
+			 *
+			 * * arg 7
+			 *   - csv list (, separator) of sort attributes (less to more important)
+			 *
+			 * * arg 8 (for MultiList)
+			 *   - size of displayed list (default: 10 lines)
+			 */
+			case 'MultiList':
+			case 'PickList':
+				# arg5 overrides our container
+				if (empty($args[5]))
+					$container = $server->getContainerPath($container,$args[0]);
+				else
+					$container = $args[5];
+
+				# Process filter (arg 1), eventually replace %attr% by it's value set in a previous page.
+				preg_match_all('/%(\w+)(\|.+)?(\/[lUC])?%/U',$args[1],$filtermatchall);
+				//print_r($matchall); // -1 = highlevel match, 1 = attr, 2 = subst, 3 = mod
+
+				if (isset($_REQUEST['form'])) {
+					$formvalues = array_change_key_case($_REQUEST['form']);
+
+					foreach ($filtermatchall[1] as $arg) {
+						$value = $formvalues[strtolower($arg)];
+						$args[1] = preg_replace("/%($arg)(\|.+)?(\/[lU])?%/U",$value,$args[1]);
+					}
+				}
+
+				if (empty($args[3]))
+					$args[3] = "%{$args[2]}%";
+
+				preg_match_all('/%(\w+)(\|.+)?(\/[lUC])?%/U',$args[3],$matchall);
+				//print_r($matchall); // -1 = highlevel match, 1 = attr, 2 = subst, 3 = mod
+
+				$attrs = array_unique(array_merge($matchall[1],array($args[2])));
+
+				# arg7 is sort attributes
+				if (isset($args[7])) {
+					$sort_attrs = explode(',',$args[7]);
+					$attrs = array_unique(array_merge($attrs,$sort_attrs));
+				}
+
+				$picklistvalues = return_ldap_hash($container,$args[1],$args[2],$attrs,(isset($args[7]) && ($args[7])) ? $sort_attrs : false);
+
+				# arg6 is a set of fixed values to add to search result
+				if (isset($args[6])) {
+					$fixedvalues = explode(',',$args[6]);
+
+					foreach ($fixedvalues as $fixedvalue) {
+						if (empty($fixedvalue))
+							continue;
+
+						$fixedvalue = preg_split('/=\>/',$fixedvalue);
+						$displayvalue = explode('=',$fixedvalue[1]);
+
+						$newvalue[trim($fixedvalue[0])] = array($args[2]=>trim($fixedvalue[0]),trim($displayvalue[0])=>trim($displayvalue[1]));
+
+						$picklistvalues = array_merge($picklistvalues,$newvalue);
+					}
+				}
+
+				$vals = array();
+
+				foreach ($picklistvalues as $key => $values) {
+					$display = $args[3];
+
+					foreach ($matchall[1] as $key => $arg) {
+						if (isset($values[$arg]))
+							$disp_val = $values[$arg];
+						else
+							$disp_val = '';
+
+						if (is_array($disp_val))
+							$disp_val = $disp_val[0];
+
+						if ($matchall[3][$key])
+							switch ($matchall[3][$key]) {
+								case '/l':
+								# lowercase
+									if (function_exists('mb_convert_case'))
+										$disp_val = mb_convert_case($disp_val,MB_CASE_LOWER,'utf-8');
+									else
+										$disp_val = strtolower($disp_val);
+
+									break;
+
+								case '/U':
+								# uppercase
+									if (function_exists('mb_convert_case'))
+										$disp_val = mb_convert_case($disp_val,MB_CASE_UPPER,'utf-8');
+									else
+										$disp_val = strtoupper($disp_val);
+
+										break;
+
+								case '/C':
+								# capitalize
+									if (function_exists('mb_convert_case'))
+										$disp_val = mb_convert_case($disp_val,MB_CASE_TITLE,'utf-8');
+									else
+										$disp_val = ucfirst($disp_val);
+
+									break;
+
+								default:
+									break;
+							}
+
+						# make value a substring of
+						preg_match_all('/^\|([0-9]*)-([0-9]*)$/',trim($matchall[2][$key]),$substrarray);
+
+						if ((isset($substrarray[1][0]) && $substrarray[1][0]) || (isset($substrarray[2][0]) && $substrarray[2][0])) {
+							$begin = $substrarray[1][0] ? $substrarray[1][0] : '0';
+							$end = $substrarray[2][0] ? $substrarray[2][0] : strlen($disp_val);
+
+							if (function_exists('mb_substr'))
+								$disp_val = mb_substr($disp_val,$begin,$end,'utf-8');
+							else
+								$disp_val = substr($disp_val,$begin,$end);
+						}
+
+						$display = preg_replace("/%($arg)(\|.+)?(\/[lUC])?%/U",$disp_val,$display);
+					}
+
+					if (! isset($picklist[$values[$args[2]]])) {
+						$vals[$values[$args[2]]] = $display;
+						$picklist[$values[$args[2]]] = true;
+					}
+				}
+
+				break;
+
+			/**
+			 * PasswordEncryptionTypes will return a list of our support password encryption types
+			 * eg: =php.PasswordEncryptionTypes()
+			 *
+			 * This function doesnt use any arguments
+			 */
+			case 'PasswordEncryptionTypes':
+				$vals = password_types();
+
+				break;
+
+			/**
+			 * RandomPassword will create a random password for the value.
+			 * eg: =php.RandomPassword()
+			 *
+			 * When calling the attribute Javascript it will generate a random password.
+			 *
+			 * This function doesnt use any arguments
+			 */
+			case 'RandomPassword':
+				break;
+		}
+
+		switch ($type) {
+			case 'autovalue':
+				if (! is_array($vals))
+					$attribute->autoValue(array($vals));
+				else
+					$attribute->autoValue($vals);
+
+				break;
+
+			case 'helpervalue':
+				return $vals;
+		}
+	}
+
+	/**
+	 * Set the mode of the TemplateRender
+	 * Applicable modes are "create" or "edit"
+	 */
+	protected function getMode() {
+		if (DEBUG_ENABLED && (($fargs=func_get_args())||$fargs='NOARGS'))
+			debug_log('Entered (%%)',129,0,__FILE__,__LINE__,__METHOD__,$fargs);
+
+		if ($this->dn)
+			return 'modification';
+		elseif ($this->container)
+			return 'creation';
+		elseif (get_request('create_base'))
+			return 'creation';
+		else
+			debug_dump_backtrace(sprintf('Unknown mode for %s',__METHOD__),1);
+	}
+
+	/**
+	 * Return the container for this mode
+	 */
+	protected function getModeContainer() {
+		if (DEBUG_ENABLED && (($fargs=func_get_args())||$fargs='NOARGS'))
+			debug_log('Entered (%%)',129,0,__FILE__,__LINE__,__METHOD__,$fargs);
+
+		switch ($this->getMode()) {
+			case 'creation':
+				return $this->container;
+				break;
+
+			case 'modification':
+				return $this->dn;
+				break;
+
+			default:
+				return null;
+		}
+	}
+
+	/**
+	 * Is the default template enabled?
+	 */
+	protected function haveDefaultTemplate() {
+		if (DEBUG_ENABLED && (($fargs=func_get_args())||$fargs='NOARGS'))
+			debug_log('Entered (%%)',129,0,__FILE__,__LINE__,__METHOD__,$fargs);
+
+		if ($_SESSION[APPCONFIG]->getValue('appearance','disable_default_template'))
+			return false;
+		else
+			return true;
+	}
+
+	/**
+	 * Present a list of available templates for creating and editing LDAP entries
+	 */
+	protected function drawTemplateChoice() {
+		if (DEBUGTMP) printf('<font size=-2>%s</font><br />',__METHOD__);
+
+		$this->drawTitle();
+		$this->drawSubTitle();
+		echo "\n";
+
+		switch ($this->getMode()) {
+			case 'creation':
+				$msg = _('Select a template for the creation process');
+				break;
+
+			case 'modification':
+				$msg = _('Select a template to edit the entry');
+				break;
+		}
+
+		$avail_templates = $this->getTemplates();
+		$templates = $avail_templates->getTemplates($this->getMode(),$this->getModeContainer());
+		printf('<h3 style="text-align: center;">%s</h3>',$msg);
+
+		$href_parms = array_to_query_string($_GET,array('meth'));
+		printf('<form id="template_choice_form" action="cmd.php?%s" method="post">',htmlspecialchars($href_parms));
+		echo "\n\n";
+
+		if (count($_POST)) {
+			echo '<div>';
+			foreach ($_POST as $p => $v)
+				printf('<input type="hidden" name="%s" value="%s" />',$p,$v);
+			echo '</div>';
+			echo "\n\n";
+		}
+
+		echo '<table class="forminput" width="100%" border="0">';
+		echo '<tr>';
+		printf('<td class="heading" style="vertical-align: top">%s:</td>',_('Templates'));
+		echo '<td>';
+		echo '<table>';
+
+		$i = -1;
+		$nb_templates = count($templates);
+
+		if ($this->haveDefaultTemplate())
+			$nb_templates++;
+
+		foreach ($templates as $name => $details) {
+			$i++;
+
+			$isInValid = $details->isInValid();
+
+			# Balance the columns properly
+			if (($nb_templates % 2 == 0 && $i == intval($nb_templates / 2)) ||
+				($nb_templates % 2 == 1 && $i == intval($nb_templates / 2) + 1)) {
+				echo '</table></td><td><table>';
+			}
+
+			echo "\n";
+			echo '<tr>';
+
+			if ($isInValid)
+				printf('<td class="icon"><img src="%s/disabled.png" alt="Disabled" /></td>',IMGDIR);
+
+			else {
+				if (isAjaxEnabled())
+					printf('<td><input type="radio" name="template" value="%s" id="%s" onclick="return ajDISPLAY(\'BODY\',\'%s&amp;template=%s\',\'%s\');" /></td>',
+						htmlspecialchars($details->getID()),htmlspecialchars($details->getID()),htmlspecialchars($href_parms),$details->getID(),str_replace('\'','\\\'',_('Retrieving DN')));
+				else
+					printf('<td><input type="radio" name="template" value="%s" id="%s" onclick="document.getElementById(\'template_choice_form\').submit()" /></td>',
+						htmlspecialchars($details->getID()),htmlspecialchars($details->getID()));
+			}
+
+			printf('<td class="icon"><label for="%s"><img src="%s" alt="" /></label></td>',
+				htmlspecialchars($details->getID()),$details->getIcon());
+			printf('<td class="label"><label for="%s">',
+				htmlspecialchars($details->getID()));
+
+			if ($isInValid)
+				printf('<span id="%s" style="color: gray"><acronym title="%s">',htmlspecialchars($details->getID()),_($isInValid));
+
+			echo _($details->getTitle());
+
+			if ($isInValid)
+				echo '</acronym></span>';
+
+			echo '</label></td>';
+			echo '</tr>';
+		}
+		echo "\n";
+
+		# Default template
+		if ($this->haveDefaultTemplate()) {
+			$i++;
+
+			# Balance the columns properly
+			if (($nb_templates % 2 == 0 && $i == intval($nb_templates / 2)) ||
+				($nb_templates % 2 == 1 && $i == intval($nb_templates / 2) + 1)) {
+				echo '</table></td><td><table>';
+			}
+
+			echo '<tr>';
+			if (isAjaxEnabled())
+				printf('<td><input type="radio" name="template" value="none" id="none" onclick="return ajDISPLAY(\'BODY\',\'%s&amp;template=%s\',\'%s\');" /></td>',
+					htmlspecialchars($href_parms),'none',str_replace('\'','\\\'',_('Retrieving DN')));
+			else
+				echo '<td><input type="radio" name="template" value="none" id="none" onclick="document.getElementById(\'template_choice_form\').submit()" /></td>';
+
+			printf('<td class="icon"><label for="none"><img src="%s/ldap-default.png" alt="" /></label></td>',IMGDIR);
+			printf('<td class="label"><label for="none">%s</label></td>',_('Default'));
+			echo '</tr>';
+		}
+
+		echo '</table>';
+		echo '</td></tr>';
+
+		echo '</table>';
+		echo '</form>';
+	}
+
+	/** VISIT METHODS **/
+
+	/**
+	 * This function will setup our template object (read LDAP for current values, read $_REQUEST for new values, etc)
+	 * so that it can be rendered.
+	 */
+	private function visitStart() {
+		if (DEBUG_ENABLED && (($fargs=func_get_args())||$fargs='NOARGS'))
+			debug_log('Entered (%%)',129,0,__FILE__,__LINE__,__METHOD__,$fargs);
+
+		if (DEBUGTMP) printf('<font size=-2>%s</font><br />',__METHOD__);
+
+		# If we have a DN, then we are an editing template
+		if ($this->dn)
+			$this->template->setDN($this->dn);
+
+		# Else if we have a container, we are a creating template
+		elseif ($this->container || get_request('create_base'))
+			$this->template->setContainer($this->container);
+
+		else
+			debug_dump_backtrace('Dont know what type of template we are - no DN or CONTAINER?',1);
+
+		# Header
+		$this->drawHeader();
+	}
+
+	private function visitEnd() {
+		if (DEBUG_ENABLED && (($fargs=func_get_args())||$fargs='NOARGS'))
+			debug_log('Entered (%%)',129,0,__FILE__,__LINE__,__METHOD__,$fargs);
+
+		if (DEBUGTMP) printf('<font size=-2>%s</font><br />',__METHOD__);
+
+		foreach ($this->template->getAttributesShown() as $attribute)
+			if ($attribute->getPage() > $this->pagelast)
+				$this->pagelast = $attribute->getPage();
+		echo "\n\n";
+
+		if ($this->template->getContext() == 'create') {
+			$this->drawStepTitle($this->page);
+			$this->drawStepFormStart($this->page);
+			$this->drawStepForm($this->page);
+			$this->drawStepFormEnd();
+
+		} elseif ($this->template->getContext() == 'copyasnew') {
+			$this->drawStepFormStart($this->page);
+			printf('<input type="hidden" name="container" value="%s" />',$this->template->getContainer(false));
+			echo '<div><table>';
+			$this->drawRDNChooser();
+			echo '</table></div>';
+			$this->drawForm(true);
+			$this->drawStepFormSubmitButton($this->page);
+
+		} else {
+			# Draw internal attributes
+			if (get_request('show_internal_attrs','REQUEST')) {
+				echo '<table class="entry" cellspacing="0" border="0" style="margin-left: auto; margin-right: auto;">';
+				$this->drawInternalAttributes();
+				echo '</table><br/>';
+				echo "\n";
+			}
+
+			$this->drawFormStart();
+
+			# To support our AJAX add Attribute
+			printf('<div id="ajADD" style="display: %s"></div>','none');
+
+			$this->drawForm();
+			$this->drawStepFormEnd();
+		}
+	}
+
+	/** PAGE DRAWING METHODS **/
+
+	private function drawHeader() {
+		if (DEBUGTMP) printf('<font size=-2>%s</font><br />',__METHOD__);
+
+		# Title
+		$this->drawTitle();
+		if (get_request('create_base'))
+			$this->drawSubTitle(sprintf('<b>%s</b>: %s',_('Creating Base DN'),$this->template->getDN()));
+		else
+			$this->drawSubTitle();
+		echo "\n";
+
+		# Menu
+		$this->drawMenu();
+	}
+
+	public function drawTitle($title=null) {
+		if (DEBUGTMP) printf('<font size=-2>%s</font><br />',__METHOD__);
+
+		if (is_null($title))
+			switch ($this->getMode()) {
+				case 'creation':
+					$title = _('Create Object');
+					break;
+
+				case 'modification':
+					$title = htmlspecialchars(get_rdn($this->dn));
+					break;
+
+				default:
+					$title = 'Title';
+			}
+
+		parent::drawTitle($title);
+	}
+
+	public function drawSubTitle($subtitle=null) {
+		if (DEBUGTMP) printf('<font size=-2>%s</font><br />',__METHOD__);
+
+		if ($subtitle)
+			return parent::drawSubTitle($subtitle);
+
+		switch ($this->getMode()) {
+			case 'creation':
+				$subtitle = sprintf('%s: <b>%s</b>&nbsp;&nbsp;&nbsp;%s: <b>%s</b>',
+					_('Server'),$this->getServer()->getName(),
+					_('Container'),htmlspecialchars($this->container));
+
+				if ($this->template_id) {
+					$subtitle .= '<br />';
+					$subtitle .= sprintf('%s: <b>%s</b>',_('Template'),$this->template->getID() != 'none' ? $this->template->getTitle() : _('Default'));
+					if ($this->template->getName())
+						$subtitle .= sprintf(' (<b>%s</b>)',$this->template->getName(false));
+				}
+
+				break;
+
+			case 'modification':
+				$subtitle = sprintf('%s: <b>%s</b>',
+					_('DN'),htmlspecialchars($this->dn));
+
+				break;
+		}
+
+		parent::drawSubTitle($subtitle);
+	}
+
+	/** PAGE ENTRY MENU **/
+
+	private function drawMenu() {
+		if (DEBUGTMP) printf('<font size=-2>%s</font><br />',__METHOD__);
+
+		# We only have a menu for editing entries.
+		if ($this->template->getContext() == 'edit') {
+
+			echo '<table class="menu" width="100%" border="0">';
+			echo '<tr>';
+			$menuitem_number = 0;
+
+			foreach (array('entryrefresh','showinternal','switchtemplate','entryexport','entrycopy','entrydelete','entryrename','entrycompare','childcreate','addattr','msgdel','childview','childexport','msgschema','msgro','msgmodattr') as $item) {
+				$item = $this->getMenuItem($item);
+
+				if ($item) {
+					$endofrow = false;
+					$start = true;
+					$it = ''; // menu item
+					$ms = ''; // item message
+
+					if (is_array($item) && count($item) > 0) {
+						$it = $item[0];
+
+						if (count($item) > 1)
+							$ms = $item[1];
+
+					} else {
+						$it = $item;
+					}
+
+					if ($it) {
+						$menuitem_number++;
+						echo $it;
+
+						if ($ms) {
+							if (($menuitem_number % 2) == 1) {
+								$menuitem_number++;
+								echo '<td colspan="2">&nbsp;</td>';
+								$endofrow = false;
+								$start = false;
+							}
+
+							if ($endofrow)
+								print $ms;
+							else
+								echo "</tr><tr>$ms";
+
+							echo '</tr><tr>';
+							$endofrow = true;
+							$start = false;
+
+						} else {
+							if ($menuitem_number > 1 && ($menuitem_number % 2) == 0) {
+								echo '</tr><tr>';
+								$endofrow = true;
+								$start = false;
+							}
+						}
+
+					} elseif ($ms) {
+						if (($menuitem_number % 2) == 1) {
+							$menuitem_number++;
+							echo '<td colspan="2">&nbsp;</td>';
+							$endofrow = false;
+							$start = false;
+						}
+
+						if ($endofrow || $start)
+							print $ms;
+						else
+							echo "</tr><tr>$ms";
+
+						echo '</tr><tr>';
+						$endofrow = true;
+						$start = false;
+					}
+
+					echo "\n";
+				}
+			}
+
+			if (($menuitem_number % 2) == 1)
+				echo '<td>&nbsp;</td><td>&nbsp;</td>';
+			else
+				echo '<td>&nbsp;</td><td>&nbsp;</td><td>&nbsp;</td><td>&nbsp;</td>';
+
+			echo '</tr>';
+			echo '</table>';
+		}
+	}
+
+	/** PAGE ENTRY MENU ITEMS **/
+
+	private function getMenuItem($i) {
+		if (DEBUG_ENABLED && (($fargs=func_get_args())||$fargs='NOARGS'))
+			debug_log('Entered (%%)',129,0,__FILE__,__LINE__,__METHOD__,$fargs);
+
+		if (DEBUGTMP) printf('<font size=-2>%s (%s)</font><br />',__METHOD__,$i);
+
+		switch ($i) {
+			case 'entryrefresh':
+				if ($_SESSION[APPCONFIG]->isCommandAvailable('cmd','entry_refresh'))
+					return $this->getMenuItemRefresh();
+				else
+					return '';
+
+			case 'switchtemplate':
+				if ($_SESSION[APPCONFIG]->isCommandAvailable('cmd','switch_template'))
+					return $this->getMenuItemSwitchTemplate();
+				else
+					return '';
+
+			case 'entryexport':
+				if ($_SESSION[APPCONFIG]->isCommandAvailable('script','export_form') && $_SESSION[APPCONFIG]->isCommandAvailable('script','export'))
+					return $this->getMenuItemExportBase();
+				else
+					return '';
+
+			case 'entrycopy':
+				if ($_SESSION[APPCONFIG]->isCommandAvailable('script','copy_form') && $_SESSION[APPCONFIG]->isCommandAvailable('script','copy') && ! $this->template->isReadOnly())
+					return $this->getMenuItemMove();
+				else
+					return '';
+
+			case 'showinternal':
+				if ($_SESSION[APPCONFIG]->isCommandAvailable('cmd','entry_internal_attributes_show'))
+					return $this->getMenuItemInternalAttributes();
+				else
+					return '';
+
+			case 'entrydelete':
+				if ($_SESSION[APPCONFIG]->isCommandAvailable('script','delete_form') && $_SESSION[APPCONFIG]->isCommandAvailable('script','delete') && ! $this->template->isReadOnly())
+					return $this->getMenuItemDelete();
+				else
+					return '';
+
+			case 'entryrename':
+				if ($_SESSION[APPCONFIG]->isCommandAvailable('script','rename_form') && $_SESSION[APPCONFIG]->isCommandAvailable('script','rename') && ! $this->template->isReadOnly()) {
+
+					# Check if any of the RDN's are read only.
+					$rdnro = false;
+					foreach ($this->template->getRDNAttributeName() as $attr) {
+						$attribute = $this->template->getAttribute($attr);
+
+						if ($attribute && $attribute->isVisible() && ! $attribute->isReadOnly()) {
+							$rdnro = true;
+							break;
+						}
+					}
+
+					if (! $rdnro)
+						return $this->getMenuItemRename();
+				}
+
+				return '';
+
+			case 'msgdel':
+				if ($_SESSION[APPCONFIG]->getValue('appearance','show_hints')
+					&& $_SESSION[APPCONFIG]->isCommandAvailable('script','delete_form') && $_SESSION[APPCONFIG]->isCommandAvailable('script','delete') && ! $this->template->isReadOnly())
+					return array('',$this->getDeleteAttributeMessage());
+				else
+					return '';
+
+			case 'entrycompare':
+				if ($_SESSION[APPCONFIG]->isCommandAvailable('script','compare_form') && $_SESSION[APPCONFIG]->isCommandAvailable('script','compare') && ! $this->template->isReadOnly())
+					return $this->getMenuItemCompare();
+				else
+					return '';
+
+			case 'childcreate':
+				if ($_SESSION[APPCONFIG]->isCommandAvailable('script','create') && ! $this->template->isReadOnly() && ! $this->template->isNoLeaf())
+					return $this->getMenuItemCreate();
+				else
+					return '';
+
+			case 'addattr':
+				if ($_SESSION[APPCONFIG]->isCommandAvailable('script','add_attr_form') && ! $this->template->isReadOnly())
+					return $this->getMenuItemAddAttribute();
+				else
+					return '';
+
+			case 'childview':
+			case 'childexport':
+				static $children_count = false;
+				static $more_children = false;
+
+				$tree = get_cached_item($this->getServerID(),'tree');
+				$tree_item = $tree->getEntry($this->template->getDN());
+
+				if (! $tree_item) {
+					$tree->addEntry($this->template->getDN());
+					$tree_item = $tree->getEntry($this->template->getDN());
+				}
+
+				if ($children_count === false) {
+					# Visible children in the tree
+					$children_count = count($tree_item->getChildren());
+					# Is there filtered children ?
+					$more_children = $tree_item->isSizeLimited();
+
+					if (! $children_count || ! $more_children) {
+						# All children in ldap
+						$all_children = $this->getServer()->getContainerContents(
+							$this->template->getDN(),null,$children_count+1,'(objectClass=*)',$_SESSION[APPCONFIG]->getValue('deref','view'),null);
+
+						$more_children = (count($all_children) > $children_count);
+					}
+				}
+
+				if ($children_count > 0 || $more_children) {
+					if ($children_count <= 0)
+						$children_count = '';
+					if ($more_children)
+						$children_count .= '+';
+
+					if ($i == 'childview')
+						return $this->getMenuItemShowChildren($children_count);
+					elseif ($i == 'childexport' && $_SESSION[APPCONFIG]->isCommandAvailable('script','export_form') && $_SESSION[APPCONFIG]->isCommandAvailable('script','export'))
+						return $this->getMenuItemExportSub();
+					else
+						return '';
+
+				} else
+					return '';
+
+			case 'msgschema':
+				if ($_SESSION[APPCONFIG]->getValue('appearance','show_hints') && $_SESSION[APPCONFIG]->isCommandAvailable('script','schema'))
+					return array('',$this->getViewSchemaMessage());
+				else
+					return array();
+
+			case 'msgro':
+				if ($this->template->isReadOnly())
+					return array('',$this->getReadOnlyMessage());
+				else
+					return array();
+
+			case 'msgmodattr':
+				$modified_attrs = array();
+				$modified = get_request('modified_attrs','REQUEST',false,array());
+
+				foreach ($this->template->getAttributes(true) as $attribute)
+					if (in_array($attribute->getName(),$modified))
+						array_push($modified_attrs,$attribute->getFriendlyName());
+
+				if (count($modified_attrs))
+					return array('',$this->getModifiedAttributesMessage($modified_attrs));
+				else
+					return array();
+
+			default:
+				return false;
+		}
+	}
+
+	protected function getDeleteAttributeMessage() {
+		if (DEBUG_ENABLED && (($fargs=func_get_args())||$fargs='NOARGS'))
+			debug_log('Entered (%%)',129,0,__FILE__,__LINE__,__METHOD__,$fargs);
+
+		if (DEBUGTMP) printf('<font size=-2>%s</font><br />',__METHOD__);
+
+		if ($_SESSION[APPCONFIG]->isCommandAvailable('script','delete_attr') && ! $this->template->isReadOnly())
+			return sprintf($this->layout['hint'],_('Hint: To delete an attribute, empty the text field and click save.'));
+		else
+			return '';
+	}
+
+	protected function getModifiedAttributesMessage(&$modified_attributes) {
+		if (DEBUG_ENABLED && (($fargs=func_get_args())||$fargs='NOARGS'))
+			debug_log('Entered (%%)',129,0,__FILE__,__LINE__,__METHOD__,$fargs);
+
+		if (DEBUGTMP) printf('<font size=-2>%s</font><br />',__METHOD__);
+
+		return sprintf($this->layout['hint'],
+			(count($modified_attributes) == 1) ?
+			sprintf(_('An attribute (%s) was modified and is highlighted below.'),implode('',$modified_attributes)) :
+			sprintf(_('Some attributes (%s) were modified and are highlighted below.'),implode(', ',$modified_attributes)));
+	}
+
+	protected function getReadOnlyMessage() {
+		if (DEBUG_ENABLED && (($fargs=func_get_args())||$fargs='NOARGS'))
+			debug_log('Entered (%%)',129,0,__FILE__,__LINE__,__METHOD__,$fargs);
+
+		if (DEBUGTMP) printf('<font size=-2>%s</font><br />',__METHOD__);
+
+		return sprintf($this->layout['hint'],_('Viewing entry in read-only mode.'));
+	}
+
+	protected function getViewSchemaMessage() {
+		if (DEBUG_ENABLED && (($fargs=func_get_args())||$fargs='NOARGS'))
+			debug_log('Entered (%%)',129,0,__FILE__,__LINE__,__METHOD__,$fargs);
+
+		if (DEBUGTMP) printf('<font size=-2>%s</font><br />',__METHOD__);
+
+		return sprintf($this->layout['hint'],_('Hint: To view the schema for an attribute, click the attribute name.'));
+	}
+
+	/** PAGE ENTRY MENU ITEMS DETAILS **/
+
+	private function getMenuItemRefresh() {
+		if (DEBUG_ENABLED && (($fargs=func_get_args())||$fargs='NOARGS'))
+			debug_log('Entered (%%)',129,0,__FILE__,__LINE__,__METHOD__,$fargs);
+
+		if (DEBUGTMP) printf('<font size=-2>%s</font><br />',__METHOD__);
+
+		$href = sprintf('cmd=template_engine&%s&junk=%s',$this->url_base,random_junk());
+
+		if (isAjaxEnabled())
+			return sprintf($this->layout['actionajax'],IMGDIR,'refresh.png',_('Refresh'),
+				htmlspecialchars($href),_('Refresh this entry'),htmlspecialchars($href),str_replace('\'','\\\'',_('Reloading')),_('Refresh'));
+		else
+			return sprintf($this->layout['action'],IMGDIR,'refresh.png',_('Refresh'),
+				htmlspecialchars($href),_('Refresh this entry'),_('Refresh'));
+	}
+
+	protected function getMenuItemSwitchTemplate() {
+		if (DEBUG_ENABLED && (($fargs=func_get_args())||$fargs='NOARGS'))
+			debug_log('Entered (%%)',129,0,__FILE__,__LINE__,__METHOD__,$fargs);
+
+		$href = sprintf('cmd=template_engine&%s&template=',$this->url_base);
+
+		if (isAjaxEnabled())
+			return sprintf($this->layout['actionajax'],IMGDIR,'switch.png',_('Switch Template'),
+				htmlspecialchars($href),_('Change to another template'),htmlspecialchars($href),str_replace('\'','\\\'',_('Loading')),_('Switch Template'));
+		else
+			return sprintf($this->layout['action'],IMGDIR,'switch.png',_('Switch Template'),
+				htmlspecialchars($href),_('Change to another template'),_('Switch Template'));
+	}
+
+	protected function getMenuItemExportBase() {
+		if (DEBUG_ENABLED && (($fargs=func_get_args())||$fargs='NOARGS'))
+			debug_log('Entered (%%)',129,0,__FILE__,__LINE__,__METHOD__,$fargs);
+
+		if (DEBUGTMP) printf('<font size=-2>%s</font><br />',__METHOD__);
+
+		$href = sprintf('cmd=export_form&%s&scope=base',$this->url_base);
+
+		if (isAjaxEnabled())
+			return sprintf($this->layout['actionajax'],IMGDIR,'export.png',_('Export'),
+				htmlspecialchars($href),_('Save a dump of this object'),htmlspecialchars($href),str_replace('\'','\\\'',_('Loading')),_('Export'));
+		else
+			return sprintf($this->layout['action'],IMGDIR,'export.png',_('Export'),
+				htmlspecialchars($href),_('Save a dump of this object'),_('Export'));
+	}
+
+	private function getMenuItemMove() {
+		if (DEBUG_ENABLED && (($fargs=func_get_args())||$fargs='NOARGS'))
+			debug_log('Entered (%%)',129,0,__FILE__,__LINE__,__METHOD__,$fargs);
+
+		if (DEBUGTMP) printf('<font size=-2>%s</font><br />',__METHOD__);
+
+		$href = sprintf('cmd=copy_form&%s',$this->url_base);
+
+		if (isAjaxEnabled())
+			return sprintf($this->layout['actionajax'],IMGDIR,'cut.png',_('Cut'),
+				htmlspecialchars($href),_('Copy this object to another location, a new DN, or another server'),
+				htmlspecialchars($href),str_replace('\'','\\\'',_('Loading')),_('Copy or move this entry'));
+		else
+			return sprintf($this->layout['action'],IMGDIR,'cut.png',_('Cut'),
+				htmlspecialchars($href),_('Copy this object to another location, a new DN, or another server'),
+				_('Copy or move this entry'));
+	}
+
+	protected function getMenuItemInternalAttributes() {
+		if (DEBUG_ENABLED && (($fargs=func_get_args())||$fargs='NOARGS'))
+			debug_log('Entered (%%)',129,0,__FILE__,__LINE__,__METHOD__,$fargs);
+
+		if (DEBUGTMP) printf('<font size=-2>%s</font><br />',__METHOD__);
+
+		if (get_request('show_internal_attrs','REQUEST')) {
+			$href = sprintf('cmd=template_engine&%s&junk=',$this->url_base,random_junk());
+
+			return sprintf($this->layout['action'],IMGDIR,'tools-no.png',_('Hide'),
+				htmlspecialchars($href),'',_('Hide internal attributes'));
+
+		} else {
+			$href = sprintf('cmd=template_engine&show_internal_attrs=true&%s',$this->url_base);
+
+			return sprintf($this->layout['action'],IMGDIR,'tools.png',_('Show'),
+				htmlspecialchars($href),'',_('Show internal attributes'));
+		}
+	}
+
+	private function getMenuItemDelete() {
+		if (DEBUG_ENABLED && (($fargs=func_get_args())||$fargs='NOARGS'))
+			debug_log('Entered (%%)',129,0,__FILE__,__LINE__,__METHOD__,$fargs);
+
+		if (DEBUGTMP) printf('<font size=-2>%s</font><br />',__METHOD__);
+
+		$href = sprintf('cmd=delete_form&%s',$this->url_base);
+
+		if (isAjaxEnabled())
+			return sprintf($this->layout['actionajax'],IMGDIR,'trash.png',_('Trash'),
+				htmlspecialchars($href),_('You will be prompted to confirm this decision'),
+				htmlspecialchars($href),str_replace('\'','\\\'',_('Loading')),_('Delete this entry'));
+		else
+			return sprintf($this->layout['action'],IMGDIR,'trash.png',_('Trash'),
+				htmlspecialchars($href),_('You will be prompted to confirm this decision'),_('Delete this entry'));
+	}
+
+	protected function getMenuItemRename() {
+		if (DEBUG_ENABLED && (($fargs=func_get_args())||$fargs='NOARGS'))
+			debug_log('Entered (%%)',129,0,__FILE__,__LINE__,__METHOD__,$fargs);
+
+		if (DEBUGTMP) printf('<font size=-2>%s</font><br />',__METHOD__);
+
+		$href = sprintf('cmd=rename_form&%s&template=%s',$this->url_base,$this->template->getID());
+
+		if (isAjaxEnabled())
+			return sprintf($this->layout['actionajax'],IMGDIR,'rename.png',_('Rename'),
+				htmlspecialchars($href),_('Rename this entry'),htmlspecialchars($href),str_replace('\'','\\\'',_('Loading')),_('Rename'));
+		else
+			return sprintf($this->layout['action'],IMGDIR,'rename.png',_('Rename'),
+				htmlspecialchars($href),_('Rename this entry'),_('Rename'));
+	}
+
+	protected function getMenuItemCompare() {
+		if (DEBUG_ENABLED && (($fargs=func_get_args())||$fargs='NOARGS'))
+			debug_log('Entered (%%)',129,0,__FILE__,__LINE__,__METHOD__,$fargs);
+
+		if (DEBUGTMP) printf('<font size=-2>%s</font><br />',__METHOD__);
+
+		$href = sprintf('cmd=compare_form&%s',$this->url_base);
+
+		if (isAjaxEnabled())
+			return sprintf($this->layout['actionajax'],IMGDIR,'compare.png',_('Compare'),
+				htmlspecialchars($href),_('Compare this entry with another'),
+				htmlspecialchars($href),str_replace('\'','\\\'',_('Loading')),_('Compare with another entry'));
+		else
+			return sprintf($this->layout['action'],IMGDIR,'compare.png',_('Compare'),
+				htmlspecialchars($href),_('Compare this entry with another'),_('Compare with another entry'));
+	}
+
+	protected function getMenuItemCreate() {
+		if (DEBUG_ENABLED && (($fargs=func_get_args())||$fargs='NOARGS'))
+			debug_log('Entered (%%)',129,0,__FILE__,__LINE__,__METHOD__,$fargs);
+
+		if (DEBUGTMP) printf('<font size=-2>%s</font><br />',__METHOD__);
+
+		$href = sprintf('cmd=template_engine&server_id=%s&container=%s',$this->getServerID(),$this->template->getDNEncode());
+
+		if (isAjaxEnabled())
+			return sprintf($this->layout['actionajax'],IMGDIR,'create.png',_('Create'),
+				htmlspecialchars($href),_('Create a child entry'),
+				htmlspecialchars($href),str_replace('\'','\\\'',_('Loading')),_('Create a child entry'));
+		else
+			return sprintf($this->layout['action'],IMGDIR,'create.png',_('Create'),
+				htmlspecialchars($href),_('Create a child entry'),_('Create a child entry'));
+	}
+
+	protected function getMenuItemAddAttribute() {
+		if (DEBUG_ENABLED && (($fargs=func_get_args())||$fargs='NOARGS'))
+			debug_log('Entered (%%)',129,0,__FILE__,__LINE__,__METHOD__,$fargs);
+
+		if (DEBUGTMP) printf('<font size=-2>%s</font><br />',__METHOD__);
+
+		if (! $this->template->getAvailAttrs())
+			return '';
+
+		$href = sprintf('cmd=add_attr_form&%s',$this->url_base);
+		$layout = '<td class="icon"><img src="%s/%s" alt="%s" /></td><td><a href="cmd.php?%s" title="%s" onclick="getDiv(\'ADD\').style.display = \'block\';return ajDISPLAY(\'ADD\',\'%s\',\'%s\');">%s</a></td>';
+
+		if (isAjaxEnabled())
+			return sprintf($layout,IMGDIR,'add.png',_('Add'),
+				htmlspecialchars($href),_('Add new attribute to this object'),
+				htmlspecialchars($href),str_replace('\'','\\\'',_('Add new attribute')),_('Add new attribute'));
+		else
+			return sprintf($this->layout['action'],IMGDIR,'add.png',_('Add'),
+				htmlspecialchars($href),_('Add new attribute to this object'),_('Add new attribute'));
+	}
+
+	protected function getMenuItemShowChildren($children_count) {
+		if (DEBUG_ENABLED && (($fargs=func_get_args())||$fargs='NOARGS'))
+			debug_log('Entered (%%)',129,0,__FILE__,__LINE__,__METHOD__,$fargs);
+
+		if (DEBUGTMP) printf('<font size=-2>%s</font><br />',__METHOD__);
+
+		$href = sprintf('cmd=query_engine&server_id=%s&filter=%s&base=%s&scope=one&query=none&size_limit=0&search=true',
+			$this->getServerID(),rawurlencode('objectClass=*'),$this->template->getDNEncode());
+
+		if (isAjaxEnabled())
+			return sprintf($this->layout['actionajax'],IMGDIR,'children.png',_('Children'),
+				htmlspecialchars($href),_('View the children of this object'),
+				htmlspecialchars($href),str_replace('\'','\\\'',_('Loading')),
+				($children_count == 1) ? _('View 1 child') : sprintf(_('View %s children'),$children_count));
+		else
+			return sprintf($this->layout['action'],IMGDIR,'children.png',_('Children'),
+				htmlspecialchars($href),_('View the children of this object'),
+				($children_count == 1) ? _('View 1 child') : sprintf(_('View %s children'),$children_count));
+	}
+
+	protected function getMenuItemExportSub() {
+		if (DEBUG_ENABLED && (($fargs=func_get_args())||$fargs='NOARGS'))
+			debug_log('Entered (%%)',129,0,__FILE__,__LINE__,__METHOD__,$fargs);
+
+		if (DEBUGTMP) printf('<font size=-2>%s</font><br />',__METHOD__);
+
+		$href = sprintf('cmd=export_form&%s&scope=%s',$this->url_base,'sub');
+
+		if (isAjaxEnabled())
+			return sprintf($this->layout['actionajax'],IMGDIR,'export.png',_('Save'),
+				htmlspecialchars($href),_('Save a dump of this object and all of its children'),
+				htmlspecialchars($href),str_replace('\'','\\\'',_('Loading')),_('Export subtree'));
+		else
+			return sprintf($this->layout['action'],IMGDIR,'export.png',_('Save'),
+				htmlspecialchars($href),_('Save a dump of this object and all of its children'),_('Export subtree'));
+	}
+
+	/** CHOOSERS **/
+
+	/**
+	 * RDN Chooser
+	 */
+	protected function drawRDNChooser() {
+		if (DEBUGTMP) printf('<font size=-2>%s</font><br />',__METHOD__);
+
+		if (! count($this->template->getRDNAttrs())) {
+			printf('<tr><th colspan="2">%s</th></tr>','RDN');
+
+			echo '<tr><td class="value" colspan="2" style="text-align: center;"><select name="rdn_attribute[]" id="rdn_attribute" />';
+			printf('<option value="">%s</option>',_('select the rdn attribute'));
+
+			if ($_SESSION[APPCONFIG]->getValue('appearance','rdn_all_attrs'))
+				$allattrs = true;
+			else
+				$allattrs = false;
+
+			foreach ($this->template->getAttributes($allattrs) as $attr) {
+				$n = $attr->getName(false);
+
+				if ($attr->getName() != 'objectclass') {
+					$m = $attr->getFriendlyName();
+					$b = '&nbsp;';
+					printf('<option value="%s">%s%s(%s)</option>',$n,$m,$b,$n);
+				}
+			}
+
+			echo '</select></td></tr>';
+
+		} else {
+			echo '<tr><td colspan="2">';
+			foreach ($this->template->getRDNAttrs() as $rdn)
+				printf('<input type="hidden" name="rdn_attribute[]" value="%s" id="rdn_attribute"/>',htmlspecialchars($rdn));
+
+			if (get_request('create_base'))
+				echo '<input type="hidden" name="create_base" value="true" />';
+
+			echo '</td></tr>';
+		}
+	}
+
+	/**
+	 * Container Chooser
+	 */
+	protected function drawContainerChooser($default_container) {
+		if (DEBUGTMP) printf('<font size=-2>%s</font><br />',__METHOD__);
+
+		echo '<tr>';
+		printf('<td class="heading">%s</td>',_('Container'));
+		echo '<td>';
+		if (get_request('create_base'))
+			printf('%s<input type="hidden" name="container" size="40" value="%s" />',$default_container,htmlspecialchars($default_container));
+		else {
+			printf('<input type="text" name="container" size="40" value="%s" />',htmlspecialchars($default_container));
+			draw_chooser_link('entry_form','container');
+		}
+		echo '</td>';
+		echo '</tr>';
+	}
+
+	/**
+	 * Object Class Chooser
+	 */
+	protected function drawObjectClassChooser() {
+		if (DEBUGTMP) printf('<font size=-2>%s</font><br />',__METHOD__);
+
+		$socs = $this->getServer()->SchemaObjectClasses();
+		if (! $socs)
+			$socs = array();
+
+		echo '<tr>';
+		printf('<td class="heading">%s</td>',_('ObjectClasses'));
+		echo '<td><select name="new_values[objectclass][]" multiple="multiple" size="15">';
+
+		foreach ($socs as $name => $oclass) {
+			if (! strcasecmp('top',$name))
+				continue;
+
+			printf('<option %s value="%s">%s</option>',
+				($oclass->getType() == 'structural') ? 'style="font-weight: bold" ' : '',
+				htmlspecialchars($oclass->getName(false)),$oclass->getName(false));
+		}
+
+		echo '</select>';
+		echo '</td>';
+		echo '</tr>';
+
+		if ($_SESSION[APPCONFIG]->getValue('appearance','show_hints')) {
+			printf('<tr><td>&nbsp;</td><td><small><img src="%s/light.png" alt="Hint" /><span class="hint">',IMGDIR);
+			echo _('Hint: You must choose exactly one structural objectClass (shown in bold above)');
+			echo '</span></small><br /></td></tr>';
+		}
+	}
+
+	/** INTERNAL ATTRIBUTES **/
+
+	protected function drawInternalAttributes() {
+		if ($this->template->getAttributesInternal())
+			foreach ($this->template->getAttributesInternal() as $attribute)
+				$this->draw('Internal',$attribute);
+		else
+			printf('<tr><td>(%s)<br/></td></tr>',_('No internal attributes'));
+
+		echo "\n";
+	}
+
+	protected function drawInternalAttribute($attribute) {
+		if (DEBUGTMP) printf('<font size=-2>%s</font><br />',__METHOD__);
+
+		$this->draw('Template',$attribute);
+	}
+
+	/** FORM METHODS **/
+
+	public function drawFormStart() {
+		echo '<form action="cmd.php" method="post" enctype="multipart/form-data" id="entry_form" onsubmit="return submitForm(this)">';
+
+		echo '<div>';
+		if ($_SESSION[APPCONFIG]->getValue('confirm','update'))
+			echo '<input type="hidden" name="cmd" value="update_confirm" />';
+		else
+			echo '<input type="hidden" name="cmd" value="update" />';
+		echo '</div>';
+	}
+
+	protected function drawForm($nosubmit=false) {
+		if (DEBUGTMP) printf('<font size=-2>%s</font><br />',__METHOD__);
+
+		echo '<div>';
+		printf('<input type="hidden" name="server_id" value="%s" />',$this->getServerID());
+		printf('<input type="hidden" name="dn" value="%s" />',$this->template->getDNEncode(false));
+		printf('<input type="hidden" name="template" value="%s" />',$this->template->getID());
+		echo '</div>';
+
+		echo '<table class="entry" cellspacing="0" border="0" style="margin-left: auto; margin-right: auto;">';
+
+		$this->drawShownAttributes();
+		if (! $nosubmit)
+			$this->drawFormSubmitButton();
+
+		echo '</table>';
+
+		echo '<div>&nbsp;';
+		$this->drawHiddenAttributes();
+		echo '</div>';
+	}
+
+	public function drawFormEnd() {
+		if (DEBUGTMP) printf('<font size=-2>%s</font><br />',__METHOD__);
+
+		# Include the RDN details to support creating the base
+		if (get_request('create_base')) {
+			if (get_request('rdn')) {
+				$rdn = explode('=',get_request('rdn'));
+				echo '<div>';
+				printf('<input type="hidden" name="new_values[%s][]" value="%s" />',$rdn[0],$rdn[1]);
+				printf('<input type="hidden" name="rdn_attribute[]" value="%s" />',$rdn[0]);
+				echo '</div>';
+			}
+		}
+
+		echo '</form>';
+
+		# Javascript
+		$this->drawJavascript();
+
+		# For debugging, show the template object.
+		if (! $_SESSION[APPCONFIG]->getValue('appearance','hide_debug_info') && get_request('debug','GET')) {
+			echo "\n\n";
+			printf('<img src="%s/plus.png" alt="Plus" onclick="if (document.getElementById(\'DEBUGtemplate\').style.display == \'none\') { document.getElementById(\'DEBUGtemplate\').style.display = \'block\' } else { document.getElementById(\'DEBUGtemplate\').style.display = \'none\' };"/>',IMGDIR);
+			echo '<div id="DEBUGtemplate" style="display: none">';
+			echo '<fieldset>';
+			printf('<legend>DEBUG: %s</legend>',$this->template->getDescription());
+			echo '<textarea cols="120" rows="20">';
+			debug_dump($this);
+			echo '</textarea>';
+			echo '</fieldset>';
+			echo '</div>';
+		}
+	}
+
+	public function drawFormSubmitButton() {
+		if (DEBUGTMP) printf('<font size=-2>%s</font><br />',__METHOD__);
+
+		if (! $this->template->isReadOnly())
+			// @todo cant use AJAX here, it affects file uploads.
+			printf('<tr><td colspan="2" style="text-align: center;"><input type="submit" id="create_button" name="submit" value="%s" /></td></tr>',
+				_('Update Object'));
+	}
+
+	/** STEP FORM METHODS **/
+
+	private function drawStepTitle($page) {
+		if (DEBUGTMP) printf('<font size=-2>%s</font><br />',__METHOD__);
+		if (DEBUGTMP||DEBUGTMPSUB) printf('<font size=-2>* %s [templateNAME:%s]</font><br />',__METHOD__,$this->template->getName());
+
+		# The default template needs to ask the user for objectClasses.
+		if ($this->template->isType('default')) {
+			# The default template only uses 2 pages
+			$this->pagelast = 2;
+
+			echo '<h4 style="text-align: center;">';
+			printf('%s: ',sprintf(_('Step %s of %s'),$page,$this->pagelast));
+
+			if ($page == 1)
+				echo _('Container and ObjectClass(es)');
+			else
+				echo _('Specify attributes and values');
+
+			echo '</h4>';
+
+		} elseif ($this->template->getDescription())
+			printf('<h4 style="text-align: center;">%s (%s)</h4>',
+				_($this->template->getDescription()),
+				sprintf(_('Step %s of %s'),$page,$this->pagelast));
+	}
+
+	private function drawStepFormStart($page) {
+		if (DEBUGTMP) printf('<font size=-2>%s</font><br />',__METHOD__);
+
+		if (($this->template->isType('default') && $this->template->getContext() == 'create' && $page == 1) || $page < $this->pagelast) {
+			echo '<form action="cmd.php?cmd=template_engine" method="post" enctype="multipart/form-data" id="entry_form" onsubmit="return submitForm(this)">';
+			echo '<div>';
+
+		} else {
+			echo '<form action="cmd.php" method="post" enctype="multipart/form-data" id="entry_form" onsubmit="return submitForm(this)">';
+			echo '<div>';
+
+			if ($_SESSION[APPCONFIG]->getValue('confirm','create') && ! get_request('create_base'))
+				echo '<input type="hidden" name="cmd" value="create_confirm" />';
+			else
+				echo '<input type="hidden" name="cmd" value="create" />';
+		}
+	}
+
+	protected function drawStepForm($page) {
+		if (DEBUGTMP) printf('<font size=-2>%s</font><br />',__METHOD__);
+
+		printf('<input type="hidden" name="server_id" value="%s" />',$this->getServerID());
+		printf('<input type="hidden" name="template" value="%s" />',$this->template->getID());
+		printf('<input type="hidden" name="page" value="%s" />',$page+1);
+		if (get_request('create_base'))
+			echo '<input type="hidden" name="create_base" value="true" />';
+
+		$this->drawHiddenAttributes();
+
+		if ($this->template->isType('default') && $page == 1) {
+				echo '</div>';
+
+				echo '<table class="forminput" border="0" style="margin-left: auto; margin-right: auto;">';
+
+				$this->drawContainerChooser($this->template->getContainer());
+				$this->drawObjectClassChooser();
+
+		} else {
+			printf('<input type="hidden" name="container" value="%s" />',$this->template->getContainerEncode(false));
+			echo '</div>';
+
+			echo '<table class="entry" cellspacing="0" border="0" style="margin-left: auto; margin-right: auto;">';
+
+			$this->drawRDNChooser();
+
+			if ($this->template->isType('default') && $this->template->getContext() == 'create')
+				$this->drawStepFormDefaultAttributes();
+			else
+				$this->drawShownAttributes();
+		}
+
+		$this->drawStepFormSubmitButton($page);
+
+		echo '</table>';
+	}
+
+	private function drawStepFormEnd() {
+		if (DEBUGTMP) printf('<font size=-2>%s</font><br />',__METHOD__);
+
+		$this->drawFormEnd();
+	}
+
+	private function drawStepFormSubmitButton($page) {
+		if (DEBUGTMP) printf('<font size=-2>%s</font><br />',__METHOD__);
+
+		echo '<tr>';
+		if ($page < $this->pagelast)
+			printf('<td>&nbsp;</td><td><input type="submit" id="create_button" value="%s" /></td>',_('Proceed &gt;&gt;'));
+		else
+			// @todo cant use AJAX here, it affects file uploads.
+			printf('<td style="text-align: center;"><input type="submit" id="create_button" name="submit" value="%s" /></td>',
+				_('Create Object'));
+		echo '</tr>';
+	}
+
+	/**
+	 * Given our known objectClass in the template, this will render the required MAY and optional MUST attributes
+	 */
+	private function drawStepFormDefaultAttributes() {
+		if (DEBUGTMP) printf('<font size=-2>%s</font><br />',__METHOD__);
+
+		# Put required attributes first
+		$attrs = array();
+		$attrs['required'] = array();
+		$attrs['optional'] = array();
+		foreach ($this->template->getAttributes(true) as $attribute) {
+			# Skip the objectclass attribute, we already know it in a default creation form.
+			if ($attribute->getName() == 'objectclass')
+				continue;
+
+			if ($attribute->isRequired())
+				array_push($attrs['required'],$attribute);
+
+			elseif (! $attribute->getValues())
+				array_push($attrs['optional'],$attribute);
+		}
+
+		printf('<tr><th colspan="2">%s</th></tr>',_('Required Attributes'));
+		if (count($attrs['required']))
+			foreach ($attrs['required'] as $attribute)
+				$this->draw('Template',$attribute);
+
+		else
+			printf('<tr class="noinput"><td colspan="2" style="text-align: center;">(%s)</td></tr>',_('none'));
+
+		printf('<tr><th colspan="2">%s</th></tr>',_('Optional Attributes'));
+		if (count($attrs['optional']))
+			foreach ($attrs['optional'] as $attribute)
+				$this->draw('Template',$attribute);
+
+		else
+			printf('<tr class="noinput"><td colspan="2" style="text-align: center;">(%s)</td></tr>',_('none'));
+
+		echo "\n";
+	}
+
+	/** DRAW ATTRIBUTES **/
+
+	private function drawShownAttributes() {
+		if (DEBUGTMP) printf('<font size=-2>%s</font><br />',__METHOD__);
+
+		foreach ($this->template->getAttributesShown() as $attribute)
+			if (($attribute->getPage() == $this->page) && ($attribute->isRequired() || $attribute->isMay())) {
+				$this->draw('Template',$attribute);
+				echo "\n";
+			}
+	}
+
+	/** DRAW PAGE JAVACRIPT */
+
+	protected function drawJavascript() {
+		if (DEBUGTMP) printf('<font size=-2>%s</font><br />',__METHOD__);
+
+		echo "\n";
+		printf('<!-- START: %s -->',__METHOD__);
+		echo "\n";
+
+		printf('<script type="text/javascript" src="%sTemplateRender.js"></script>',JSDIR);
+		printf('<script type="text/javascript" src="%stoAscii.js"></script>',JSDIR);
+		printf('<script type="text/javascript" src="%sdnChooserPopup.js"></script>',JSDIR);
+		echo "\n";
+
+		printf('<!-- START: MAIN FORM VALIDATION: %s -->',__METHOD__);
+		echo '
+<script type="text/javascript">
+function validateForm(silence) {
+	var i = 0;
+	var valid = true;
+	var components = null;'."\n";
+
+		foreach ($this->template->getAttributes(true) as $attribute) {
+			if ($attribute->isVisible() && ($attribute->getOnchange()) || $attribute->isRequired()) {
+				echo '
+	components = getAttributeComponents("new","'.$attribute->getName().'");
+	for (i = 0; i < components.length; i++) {
+		if (window.validate_'.$attribute->getName().') {
+			valid = (!validate_'.$attribute->getName().'(components[i],silence) || !valid) ? false : true;
+		}
+	}';
+				echo "\n";
+			}
+		}
+
+		# If we displayed the RDN chooser...
+		if (! count($this->template->getRDNAttrs()))
+			echo '       valid = (!document.getElementById(\'rdn_attribute\').value || !valid) ? false : true;';
+
+		echo '
+	return valid;
+}
+</script>';
+		echo "\n";
+		printf('<!-- END: MAIN FORM VALIDATION: %s -->',__METHOD__);
+		echo "\n";
+
+		$this->drawTemplateJavascript();
+
+		# For DateAttributes, we need to set some defaults for the js_calendar.
+		echo '<!-- START: GLOBAL SETTINGS FOR THE js_calendar -->'."\n";
+		echo '<script type="text/javascript">'."\n";
+		echo 'var defaults = new Array();'."\n";
+		printf('var default_date_format = "%s";',$_SESSION[APPCONFIG]->getValue('appearance','date'));
+		echo "\n";
+		echo '</script>'."\n";
+		echo '<!-- END: GLOBAL SETTINGS FOR THE js_calendar -->'."\n";
+		echo "\n";
+
+		foreach ($this->template->getAttributesShown() as $attribute)
+			$this->draw('Javascript',$attribute);
+
+		// @todo We need to sleep here a little bit, because our JS may not have loaded yet.
+		echo '<script type="text/javascript">
+		if (typeof getAttributeComponents == "undefined")
+			setTimeout("isJSComplete()",1000);
+		else
+			validateForm(true);
+
+		function isJSComplete() {
+			if (typeof getAttributeComponents == "undefined") {
+				alert("Our Javascript didnt load in time, you may need to reload this page");
+
+				// Sometimes the alert gives us enough time!
+				if (typeof getAttributeComponents != "undefined")
+					alert("Dont bother, our JS is loaded now!");
+			}
+
+			validateForm(true);
+		}
+		</script>'."\n";
+		printf('<!-- END: %s -->',__METHOD__);
+		echo "\n";
+	}
+
+	/**
+	 * Javascript Functions
+	 */
+	private function drawTemplateJavascript() {
+		printf('<!-- START: ONCHANGE PROCESSING %s -->',__METHOD__);
+		echo "\n";
+		foreach ($this->template->getAttributes(true) as $attribute)
+			if ($onchange = $attribute->getOnChange())
+				if (is_array($onchange))
+					foreach ($onchange as $value)
+						$this->template->OnChangeAdd($attribute->getName(),$value);
+				else
+					$this->template->OnChangeAdd($attribute->getName(),$onchange);
+		printf('<!-- END: ONCHANGE PROCESSING %s -->',__METHOD__);
+		echo "\n";
+
+		printf('<!-- START: %s -->',__METHOD__);
+
+		echo '
+<script type="text/javascript">
+var attrTrace;
+function fill(id,value) {
+	attrTrace = new Array();
+	fillRec(id,value);
+}
+function fillRec(id,value) {
+	if (attrTrace[id] == 1) {
+		return;
+	} else {
+		var pre = "";
+		var suf = "";
+		var i;
+		attrTrace[id] = 1;
+
+		pla_setComponentValue(pla_getComponentById(id),value);
+
+		// here comes template-specific implementation,generated by php
+		if (false) {}';
+
+		foreach ($this->template->getAttributes(true) as $attribute) {
+			if ($attribute->isVisible() && ($attribute->getOnchange()) || $attribute->isRequired()) {
+				$attr = $attribute->getName();
+
+				printf("
+		else if ((i = id.indexOf('_%s_')) >= 0) {",$attr);
+				echo "
+			pre = id.substring(0,i+1);";
+				printf("
+			suf = id.substring(i + 1 + '%s'.length,id.length);\n",$attr);
+
+				$this->draw('FillJavascript',$attribute,'id','value');
+
+				if (isset($attribute->js['autoFill']))
+					echo $attribute->js['autoFill'];
+
+				echo "
+	}\n";
+			}
+		}
+
+		echo '}
+}
+</script>';
+		echo "\n";
+		printf('<!-- END: %s -->',__METHOD__);
+		echo "\n";
+	}
+
+	/** ATTRIBUTE TITLE **/
+
+	protected function drawTitleAttribute($attribute) {
+		if (DEBUGTMP) printf('<font size=-2>%s</font><br />',__METHOD__);
+
+		if (($this->template->getContext() == 'edit')
+			&& ($attribute->hasBeenModified() || in_array($attribute->getName(),get_request('modified_attrs','REQUEST',false,array()))))
+			echo '<tr class="updated">';
+		else
+			echo '<tr>';
+
+		echo '<td class="title">';
+		$this->draw('Name',$attribute);
+		echo '</td>';
+
+		echo '<td class="note">';
+
+		# Setup the $attr_note, which will be displayed to the right of the attr name (if any)
+		if ($_SESSION[APPCONFIG]->getValue('appearance','show_attribute_notes'))
+			$this->draw('Notes',$attribute);
+
+		echo '</td>';
+		echo '</tr>';
+	}
+
+	/** ATTRIBUTE LINE **/
+
+	protected function drawStartValueLineAttribute($attribute) {
+		if (DEBUGTMP) printf('<font size=-2>%s</font><br />',__METHOD__);
+
+		if (($this->template->getContext() == 'edit')
+			&& ($attribute->hasBeenModified() || in_array($attribute->getName(),get_request('modified_attrs','REQUEST',false,array()))))
+			echo '<tr class="updated">';
+		else
+			echo '<tr>';
+
+		echo '<td class="value" colspan="2">';
+	}
+
+	protected function drawEndValueLineAttribute($attribute) {
+		if (DEBUGTMP) printf('<font size=-2>%s</font><br />',__METHOD__);
+
+		echo '</td>';
+		echo '</tr>';
+
+		if ($attribute->getSpacer())
+			echo '<tr class="spacer"><td colspan="3">&nbsp;</td></tr>';
+
+		if (($this->template->getContext() == 'edit')
+			&& ($attribute->hasBeenModified() || in_array($attribute->getName(),get_request('modified_attrs','REQUEST',false,array()))))
+			echo '<tr class="updated"><td class="bottom" colspan="2"></td></tr>';
+	}
+
+	protected function drawTemplateAttribute($attribute) {
+		if (DEBUGTMP) printf('<font size=-2>%s</font><br />',__METHOD__);
+
+		$this->draw('Title',$attribute);
+		$this->draw('TemplateValues',$attribute);
+	}
+
+	protected function drawTemplateValuesAttribute($attribute) {
+		if (DEBUGTMP) printf('<font size=-2>%s:%s</font><br />',time(),__METHOD__);
+
+		$this->draw('StartValueLine',$attribute);
+
+		# Draws values
+		$value_count = $attribute->getValueCount();
+		for ($i=0;$i<$value_count;$i++)
+			$this->draw('Value',$attribute,$i);
+
+		if (! $attribute->isInternal()) {
+			$blankvalue_count = $attribute->getMaxValueCount();
+			if ($blankvalue_count < 0)
+				$blankvalue_count = 1;
+
+			$blankvalue_count -= $value_count;
+
+			for ($j=0;$j<$blankvalue_count;$j++)
+				$this->draw('Value',$attribute,$i+$j);
+
+			if (($value_count == $blankvalue_count) || ($value_count && $blankvalue_count < 1))
+				$this->draw('Menu',$attribute);
+		}
+
+		$this->draw('EndValueLine',$attribute);
+		echo "\n";
+	}
+
+	/** DRAW ICONS FOR ATTRIBUTES VALUES **/
+
+	protected function drawIconAttribute($attribute,$val) {
+		if (DEBUGTMP) printf('<font size=-2>%s</font><br />',__METHOD__);
+
+		if (is_dn_string($val) || $this->getServer()->isDNAttr($attribute->getName()))
+			$this->draw('DnValueIcon',$attribute,$val);
+		elseif (is_mail_string($val))
+			$this->draw('MailValueIcon',$attribute,$val);
+		elseif (is_url_string($val))
+			$this->draw('UrlValueIcon',$attribute,$val);
+
+		else {
+			if ($icon = $attribute->getIcon())
+				printf('<img src="%s" alt="Icon" style="float: right;" />&nbsp;',$icon);
+		}
+	}
+
+	protected function drawDnValueIconAttribute($attribute,$val) {
+		if (DEBUGTMP) printf('<font size=-2>%s</font><br />',__METHOD__);
+
+		if (strlen($val) <= 0)
+			printf('<img src="%s/ldap-alias.png" alt="Go" style="float: right;" />&nbsp;',IMGDIR);
+		elseif ($this->getServer()->dnExists($val))
+			printf('<a href="cmd.php?cmd=template_engine&amp;server_id=%s&amp;dn=%s" title="%s %s"><img src="%s/ldap-alias.png" alt="Go" /></a>&nbsp;',
+				$this->getServerID(),rawurlencode($val),_('Go to'),$val,IMGDIR);
+		else
+			printf('<a title="%s %s"><img src="%s/nogo.png" alt="Go" /></a>&nbsp;',_('DN not available'),$val,IMGDIR);
+	}
+
+	protected function drawMailValueIconAttribute($attribute,$val) {
+		if (DEBUGTMP) printf('<font size=-2>%s</font><br />',__METHOD__);
+
+		$img = sprintf('<img src="%s/mail.png" alt="%s" style="float: right;" />',IMGDIR,_('Mail'));
+		if (strlen($val) <= 0)
+			echo $img;
+		else
+			printf('<a href="mailto:%s">%s</a>',htmlspecialchars($val),$img);
+		echo '&nbsp;';
+	}
+
+	protected function drawUrlValueIconAttribute($attribute,$val) {
+		if (DEBUGTMP) printf('<font size=-2>%s</font><br />',__METHOD__);
+
+		$img = sprintf('<img src="%s/ldap-dc.png" alt="%s" style="float: right;" />',IMGDIR,_('URL'));
+		$url = explode(' +',$val,2);
+
+		if (strlen($val) <= 0)
+			echo $img;
+		else
+			printf('<a href="%s" onclick="target=\'new\';">%s</a>',htmlspecialchars($url[0]),$img);
+		echo '&nbsp;';
+	}
+
+	/** DEFAULT ATTRIBUTE RENDERING **/
+
+	/** javacript */
+
+	protected function drawJavascriptAttribute($attribute) {
+		if (! $attribute->needJS()) {
+			printf('<!-- NO JS REQUIRED FOR %s -->',$attribute->getName());
+			echo "\n";
+			return;
+		}
+
+		printf('<!-- START: ATTRIBUTE %s (%s)-->',__METHOD__,$attribute->getName());
+		echo "\n";
+
+		echo '<script type="text/javascript">'."\n";
+
+		echo '// focus'."\n";
+		if ($attribute->needJS('focus')) {
+			printf('function focus_%s(component) {',$attribute->getName());
+			echo "\n";
+			$this->draw('FocusJavascript',$attribute,'component');
+			echo "};\n";
+		}
+
+		echo '// blur'."\n";
+		if ($attribute->needJS('blur')) {
+			printf('function blur_%s(component) {',$attribute->getName());
+			echo "\n";
+			$this->draw('BlurJavascript',$attribute,'component');
+			echo "};\n";
+		}
+
+		echo '// validate'."\n";
+		printf('function validate_%s(component,silence) {',$attribute->getName());
+		echo "\n";
+
+		if ($attribute->needJS('validate')) {
+			echo '	var valid = true;';
+			echo "\n";
+			$this->draw('ValidateJavascript',$attribute,'component','silence','valid');
+			echo "\n";
+			echo '	if (valid) { component.style.backgroundColor = "white"; component.style.color = "black"; }';
+			echo '	else { component.style.backgroundColor = \'#FFFFA0\'; component.style.color = "black"; }';
+			echo '	return valid;';
+
+		} else {
+			echo '	return true;'."\n";
+		}
+
+		echo '}'."\n";
+
+		echo '</script>'."\n";
+
+		printf('<!-- END: ATTRIBUTE %s (%s)-->',__METHOD__,$attribute->getName());
+		echo "\n";
+	}
+
+	protected function getFocusJavascriptAttribute($attribute,$component) {
+		if (DEBUG_ENABLED && (($fargs=func_get_args())||$fargs='NOARGS'))
+			debug_log('Entered (%%)',129,0,__FILE__,__LINE__,__METHOD__,$fargs);
+
+		if (DEBUGTMP) printf('<font size=-2>%s</font><br />',__METHOD__);
+
+		return '';
+	}
+
+	protected function getBlurJavascriptAttribute($attribute,$component) {
+		if (DEBUG_ENABLED && (($fargs=func_get_args())||$fargs='NOARGS'))
+			debug_log('Entered (%%)',129,0,__FILE__,__LINE__,__METHOD__,$fargs);
+
+		if (DEBUGTMP) printf('<font size=-2>%s</font><br />',__METHOD__);
+
+		$j = "\t".'fill('.$component.'.id,pla_getComponentValue('.$component.'));'."\n";
+		$j .= "\t".'validate_'.$attribute->getName().'('.$component.',false);'."\n";
+
+		return $j;
+	}
+
+	protected function drawFocusJavascriptAttribute($attribute,$component) {
+		echo $this->get('FocusJavascript',$attribute,$component);
+	}
+
+	protected function drawBlurJavascriptAttribute($attribute,$component) {
+		echo $this->get('BlurJavascript',$attribute,$component);
+	}
+
+	protected function drawFillJavascriptAttribute($attribute,$component_id,$component_value) {
+		if ($attribute->needJS('validate'))
+			printf("\tvalidate_%s(pla_getComponentById(%s),true);\n",$attribute->getName(),$component_id);
+	}
+
+	protected function drawValidateJavascriptAttribute($attribute,$component,$silence,$var_valid) {
+		printf('var vals = getAttributeValues("new","%s");',$attribute->getName());
+		echo 'if (vals.length <= 0) {';
+		printf('%s = false;',$var_valid);
+		printf('alertError("%s: %s",%s);',_('This attribute is required'),$attribute->getFriendlyName(),$silence);
+		echo '}';
+		echo "\n";
+
+		printf('var comp = getAttributeComponents("new","%s");',$attribute->getName());
+		echo 'for (var i = 0; i < comp.length; i++) {';
+		printf('comp[i].style.backgroundColor = "%s";',$var_valid ? 'white' : '#FFFFA0');
+		echo '}';
+	}
+
+	/** ATTRIBUTE MENU **/
+
+	protected function drawMenuAttribute($attribute) {
+		if (DEBUGTMP) printf('<font size=-2>%s</font><br />',__METHOD__);
+
+		$result = '';
+		$item = '';
+
+		foreach (array('add','modify','rename') as $action)
+			if ($item = $this->get('MenuItem',$attribute,$action))
+				$result .= sprintf('<div class="add_value">%s</div>',$item);
+
+		if (! $result)
+			return;
+
+		echo '<table class="entry" border="0"><tr><td style="width: 25px;">&nbsp;</td>';
+		printf('<td>%s</td>',$result);
+		echo '</td>';
+		echo '</tr></table>';
+	}
+
+	protected function getMenuItemAttribute($attribute,$action) {
+		if (DEBUG_ENABLED && (($fargs=func_get_args())||$fargs='NOARGS'))
+			debug_log('Entered (%%)',129,0,__FILE__,__LINE__,__METHOD__,$fargs);
+
+		if (DEBUGTMP) printf('<font size=-2>%s</font><br />',__METHOD__);
+
+		# If there is no DN, then this is a creating entry.
+		if (($this->template->getContext() == 'create') || $this->template->isReadOnly())
+			return false;
+
+		switch ($action) {
+			case 'add':
+				if ($attribute->isVisible() && ! $attribute->isReadOnly()
+					&& $_SESSION[APPCONFIG]->isCommandAvailable('script','add_value_form')) {
+
+					if ($attribute->haveMoreValues())
+						return $this->get('AddValueMenuItem',$attribute);
+				}
+
+				return '';
+
+			case 'modify':
+				if (in_array($attribute->getName(),arrayLower($_SESSION[APPCONFIG]->getValue('modify_member','groupattr')))) {
+					if ($attribute->isVisible() && ! $attribute->isReadOnly() && ! $attribute->isRDN()
+						&& $_SESSION[APPCONFIG]->isCommandAvailable('script','modify_member_form'))
+						return $this->get('ModifyMemberMenuItem',$attribute);
+				}
+
+				return '';
+
+			case 'rename':
+				if ($attribute->isVisible() && $attribute->isRDN() && ! $attribute->isReadOnly()
+					&& $_SESSION[APPCONFIG]->isCommandAvailable('script','rename_form')
+					&& $_SESSION[APPCONFIG]->isCommandAvailable('script','rename'))
+					return $this->get('RenameMenuItem',$attribute);
+
+				return '';
+
+			default:
+				return false;
+		}
+	}
+
+	protected function getAddValueMenuItemAttribute($attribute) {
+		if (DEBUG_ENABLED && (($fargs=func_get_args())||$fargs='NOARGS'))
+			debug_log('Entered (%%)',129,0,__FILE__,__LINE__,__METHOD__,$fargs);
+
+		if (DEBUGTMP) printf('<font size=-2>%s</font><br />',__METHOD__);
+
+		$href_parm = htmlspecialchars(sprintf('cmd=add_value_form&server_id=%s&dn=%s&attr=%s',
+			$this->getServerID(),$this->template->getDNEncode(),rawurlencode($attribute->getName(false))));
+
+		if (isAjaxEnabled())
+			return sprintf('(<a href="cmd.php?%s" title="%s %s" onclick="return ajDISPLAY(\'ADDVALUE%s\',\'%s&amp;raw=1\',\'%s\',1);">%s</a>)',
+				$href_parm,_('Add an additional value to attribute'),$attribute->getName(false),$attribute->getName(),
+				$href_parm,str_replace('\'','\\\'',_('Add Value to Attribute')),_('add value'));
+		else
+			return sprintf('(<a href="cmd.php?%s" title="%s %s">%s</a>)',
+				$href_parm,_('Add an additional value to attribute'),$attribute->getName(false),_('add value'));
+	}
+
+	protected function getAddValueMenuItemObjectClassAttribute($attribute) {
+		if (DEBUG_ENABLED && (($fargs=func_get_args())||$fargs='NOARGS'))
+			debug_log('Entered (%%)',129,0,__FILE__,__LINE__,__METHOD__,$fargs);
+
+		if (DEBUGTMP) printf('<font size=-2>%s</font><br />',__METHOD__);
+
+		$href_parm = htmlspecialchars(sprintf('cmd=add_value_form&server_id=%s&dn=%s&attr=%s',
+			$this->getServerID(),$this->template->getDNEncode(),rawurlencode($attribute->getName(false))));
+
+		if (isAjaxEnabled())
+			return sprintf('(<a href="cmd.php?%s" title="%s %s" onclick="return ajDISPLAY(\'BODY\',\'%s\',\'%s\');">%s</a>)',
+				$href_parm,_('Add an additional value to attribute'),$attribute->getName(false),
+				$href_parm,str_replace('\'','\\\'',_('Add Value to Attribute')),_('add value'));
+		else
+			return sprintf('(<a href="cmd.php?%s" title="%s %s">%s</a>)',
+				$href_parm,_('Add an additional value to attribute'),$attribute->getName(false),_('add value'));
+	}
+
+	protected function getModifyMemberMenuItemAttribute($attribute) {
+		if (DEBUG_ENABLED && (($fargs=func_get_args())||$fargs='NOARGS'))
+			debug_log('Entered (%%)',129,0,__FILE__,__LINE__,__METHOD__,$fargs);
+
+		if (DEBUGTMP) printf('<font size=-2>%s</font><br />',__METHOD__);
+
+		$href = sprintf('cmd=modify_member_form&server_id=%s&dn=%s&attr=%s',
+			$this->getServerID(),$this->template->getDNEncode(),rawurlencode($attribute->getName()));
+
+		if (isAjaxEnabled())
+			return sprintf('(<a href="cmd.php?%s" title="%s: %s" onclick="return ajDISPLAY(\'BODY\',\'%s\',\'%s\');">%s</a>)',
+				htmlspecialchars($href),_('Modify members for'),$this->template->getDN(),
+				htmlspecialchars($href),str_replace('\'','\\\'',_('Modify group membership')),
+				_('modify group members'));
+		else
+			return sprintf('(<a href="cmd.php?%s" title="%s: %s">%s</a>)',
+				htmlspecialchars($href),_('Modify members for'),$this->template->getDN(),_('modify group members'));
+	}
+
+	protected function getRenameMenuItemAttribute($attribute) {
+		if (DEBUG_ENABLED && (($fargs=func_get_args())||$fargs='NOARGS'))
+			debug_log('Entered (%%)',129,0,__FILE__,__LINE__,__METHOD__,$fargs);
+
+		if (DEBUGTMP) printf('<font size=-2>%s</font><br />',__METHOD__);
+
+		$href = sprintf('cmd.php?cmd=rename_form&server_id=%s&dn=%s&template=%s',
+			$this->getServerID(),$this->template->getDNEncode(),$this->template->getID());
+
+		return sprintf('<small>(<a href="%s">%s</a>)</small>',htmlspecialchars($href),_('rename'));
+	}
+
+	/** values **/
+
+	protected function drawValueAttribute($attribute,$i) {
+		if (DEBUGTMP) printf('<font size=-2>%s</font><br />',__METHOD__);
+
+		if ($attribute->isMultiple() && $i > 0)
+			return;
+
+		$val = $attribute->getValue($i);
+
+		if ($attribute->isVisible()) {
+			echo '<table cellspacing="0" cellpadding="0" width="100%" border="0"><tr><td class="icon" style="width: 25px;">';
+			$this->draw('Icon',$attribute,$val);
+			echo '</td>';
+
+			echo '<td valign="top">';
+		}
+
+		if ($attribute->isInternal())
+			$this->draw('FormReadOnlyValue',$attribute,$i);
+		else
+			$this->draw('FormValue',$attribute,$i);
+
+		if ($attribute->isVisible()) {
+			echo '</td>';
+
+			echo '<td valign="top" style="text-align: right;">';
+			$this->draw('RequiredSymbol',$attribute);
+			echo '</td></tr></table>';
+		}
+		echo "\n";
+	}
+
+	# @todo for userPasswords, we need to capture the default value of select lists, without specifying <default>
+	protected function drawHelperAttribute($attribute,$i) {
+		if (DEBUGTMP) printf('<font size=-2>%s</font><br />',__METHOD__);
+
+		$params = $attribute->getHelper();
+
+		# We take the first <id> only
+		$id = isset($params['id']) ? $params['id'] : '';
+		if (is_array($id)) {
+			system_message(array(
+				'title'=>_('Too many arguments'),
+				'body'=>sprintf('%s (<b>%s</b>)',_('Helper attribute has too many ID values, only the first one is used'),count($id)),
+				'type'=>'warn'));
+
+			$id = $id[0];
+		}
+
+		# We take the first <display> only
+		$display = isset($params['display']) ? $params['display'] : '';
+		if (is_array($display)) {
+			system_message(array(
+				'title'=>_('Too many arguments'),
+				'body'=>sprintf('%s (<b>%s</b>)',_('Helper attribute has too many DISPLAY values, only the first one is used'),count($display)),
+				'type'=>'warn'));
+
+			$display = $display[0];
+		}
+
+		# We take the first <default> only
+		$default = isset($params['default']) ? $params['default'] : '';
+		if (is_array($default)) {
+			system_message(array(
+				'title'=>_('Too many arguments'),
+				'body'=>sprintf('%s (<b>%s</b>)',_('Helper attribute has too many DISPLAY values, only the first one is used'),count($default)),
+				'type'=>'warn'));
+
+			$default = $default[0];
+		}
+
+		if ($attribute->getHelperValue())
+			$vals = $this->get('Default',$attribute,
+				$this->template->getContainer() ? $this->template->getContainer() : $this->getServer()->getContainerPath($this->template->getDN()),
+				'helpervalue');
+		else
+			$vals = isset($params['value']) ? $params['value'] : '';
+
+		if ($this->template->getContext() == 'create')
+			$dn = $this->template->getContainer();
+		else
+			$dn = $this->template->getDN();
+
+		if (is_array($vals) && count($vals) > 0) {
+			$found = false;
+
+			printf('<select name="%s[%s][%s]" id="%s_%s_%s">',
+				$id,htmlspecialchars($attribute->getName()),$i,
+				$id,htmlspecialchars($attribute->getName()),$i);
+
+			foreach ($vals as $v) {
+				printf('<option value="%s" %s>%s</option>',$v,($v == $default) ? 'selected="selected"' : '',$v);
+
+				if ($v == $default)
+					$found = true;
+			}
+
+			if (! $found)
+				printf('<option value="%s" selected="selected">%s</option>',$default,$default ? $default : '&nbsp;');
+
+			echo '</select>';
+
+		} else {
+			# Vals must be an empty array.
+			if (is_array($vals))
+				$vals = '';
+
+			printf('<input type="text" name="%s[%s][%s]" id="%s_%s_%s" value="%s" size="4" />',
+				$id,htmlspecialchars($attribute->getName()),$i,
+				$id,htmlspecialchars($attribute->getName()),$i,
+				htmlspecialchars($vals));
+		}
+
+		if ($display) {
+			echo '<div class="helper">';
+			printf('<span class="hint">%s</span>',$display);
+			echo '</div>';
+		}
+	}
+
+	protected function drawRequiredSymbolAttribute($attribute) {
+		if (DEBUGTMP) printf('<font size=-2>%s</font><br />',__METHOD__);
+
+		if ($attribute->isRequired() && ! $attribute->isReadOnly())
+			echo '*';
+	}
+
+	/** BINARY ATTRIBUTE RENDERING **/
+
+	#@todo do we need a $this->drawJavascriptAttribute($attribute) here too ?
+	protected function drawJavascriptBinaryAttribute($attribute) {
+		# If there are no values, then this javascript doesnt need to be drawn.
+		if (! $attribute->getValues())
+			return;
+
+		static $drawn = false;
+
+		# This JS may have been rendered by multiple Binary attributes
+		if ($drawn)
+			return;
+		else
+			$drawn = true;
+
+		printf('<!-- START: BINARY ATTRIBUTE %s (%s)-->',__METHOD__,$attribute->getName());
+		echo "\n";
+
+		echo '<!-- This form is submitted by JavaScript when the user clicks "Delete attribute" on a binary attribute -->';
+		echo '<form id="delete_attribute_form" action="cmd.php?cmd=delete_attr" method="post">';
+		printf('<input type="hidden" name="server_id" value="%s" />',$this->getServerID());
+		printf('<input type="hidden" name="dn" value="%s" />',$this->template->getDNEncode(false));
+		printf('<input type="hidden" name="template" value="%s" />',$this->template->getID());
+		echo '<input type="hidden" name="attr" value="FILLED IN BY JAVASCRIPT" />';
+		echo '<input type="hidden" name="index" value="FILLED IN BY JAVASCRIPT" />';
+		echo '</form>';
+
+		echo '
+<script type="text/javascript">
+function deleteAttribute(attrName,friendlyName,i)
+{
+	if (confirm("'._('Really delete value from attribute').' \'" + friendlyName + "\'?")) {
+		document.getElementById(\'delete_attribute_form\').attr.value = attrName;
+		document.getElementById(\'delete_attribute_form\').index.value = i;
+		document.getElementById(\'delete_attribute_form\').submit();
+	}
+}
+</script>';
+		echo "\n";
+
+		printf('<!-- END: BINARY ATTRIBUTE %s (%s)-->',__METHOD__,$attribute->getName());
+		echo "\n";
+	}
+
+	/** DATE ATTRIBUTE RENDERING **/
+
+	protected function drawJavaScriptDateAttribute($attribute) {
+		if (DEBUGTMP) printf('<font size=-2>%s</font><br />',__METHOD__);
+
+		printf('<!-- START: DATE ATTRIBUTE %s (%s)-->',__METHOD__,$attribute->getName());
+		echo "\n";
+
+		$this->drawJavaScriptAttribute($attribute);
+
+		static $drawn = false;
+
+		# This JS may have been rendered by multiple Date attributes
+		if (! $drawn) {
+			printf('<script type="text/javascript" src="%sjscalendar/lang/calendar-en.js"></script>',JSDIR);
+			printf('<script type="text/javascript" src="%sjscalendar/calendar-setup.js"></script>',JSDIR);
+			printf('<script type="text/javascript" src="%sdate_selector.js"></script>',JSDIR);
+
+			$drawn = true;
+		}
+
+		$config = array();
+		$config['date'] = array_change_key_case($_SESSION[APPCONFIG]->getValue('appearance','date_attrs'));
+		$config['time'] = array_change_key_case($_SESSION[APPCONFIG]->getValue('appearance','date_attrs_showtime'));
+		$config['format'] = $_SESSION[APPCONFIG]->getValue('appearance','date');
+
+		if (isset($config['date'][$attribute->getName()]))
+			$config['format'] = $config['date'][$attribute->getName()];
+
+		for ($i=0;$i<=$attribute->getValueCount();$i++) {
+			printf('<script type="text/javascript">defaults[\'new_values_%s_%s\'] = \'%s\';</script>',$attribute->getName(),$i,$config['format']);
+
+			if (in_array_ignore_case($attribute->getName(),array_keys($config['time'])) && ($config['time'][$attribute->getName()]))
+				printf('<script type="text/javascript">defaults[\'f_time_%s_%s\'] = \'%s\';</script>',$attribute->getName(),$i,'true');
+
+			echo "\n";
+		}
+
+		printf('<!-- END: DATE ATTRIBUTE %s (%s)-->',__METHOD__,$attribute->getName());
+		echo "\n";
+	}
+
+	/**
+	 * Draws an HTML date selector button which, when clicked, pops up a date selector dialog.
+	 */
+	protected function drawSelectorPopupDateAttribute($attribute,$i) {
+		printf('<a href="javascript:dateSelector(\'%s_%s\');" title="%s"><img src="%s/calendar.png" alt="Calendar" class="chooser" id="f_trigger_%s_%s" style="cursor: pointer;" /></a>',
+			$attribute->getName(),$i,_('Click to popup a dialog to select a date graphically'),IMGDIR,$attribute->getName(),$i);
+	}
+
+	/** DN ATTRIBUTES **/
+
+	protected function drawIconDnAttribute($attribute,$val) {
+		if (DEBUGTMP) printf('<font size=-2>%s</font><br />',__METHOD__);
+
+		$this->draw('DnValueIcon',$attribute,$val);
+	}
+
+	/** OBJECT CLASS ATTRIBUTE **/
+
+	protected function drawIconObjectClassAttribute($attribute,$val) {
+		return;
+	}
+
+	/** PASSWORD ATTRIBUTES **/
+
+	protected function drawJavascriptPasswordAttribute($attribute) {
+		static $drawn = array();
+
+		# This JS may have been rendered by multiple Binary attributes
+		if (isset($drawn[$attribute->getName()]) && $drawn[$attribute->getName()])
+			return;
+		else
+			$drawn[$attribute->getName()] = true;
+
+		printf('<!-- START: PASSWORD ATTRIBUTE %s (%s)-->',__METHOD__,$attribute->getName());
+		echo "\n";
+
+		$this->drawJavascriptAttribute($attribute);
+
+		# Add the javascript so we can call check password later.
+		echo '
+<script type="text/javascript">
+	function passwordComparePopup(component_id,attr) {
+		mywindow = open(\'password_checker.php\',\'myname\',\'resizable=no,width=500,height=200,scrollbars=1\');
+		mywindow.location.href = \'password_checker.php?componentid=\'+component_id+\'&attr=\'+attr;
+		if (mywindow.opener == null) mywindow.opener = self;
+	}
+</script>';
+		echo "\n";
+
+		printf('<!-- END: PASSWORD ATTRIBUTE %s (%s)-->',__METHOD__,$attribute->getName());
+		echo "\n";
+	}
+
+	protected function drawCheckLinkPasswordAttribute($attribute,$component_id) {
+		if (DEBUGTMP) printf('<font size=-2>%s</font><br />',__METHOD__);
+
+		printf('<small><a href="javascript:passwordComparePopup(\'%s\',\'%s\')">%s...</a></small><br />',
+			$component_id,$attribute->getName(),_('Check password'));
+	}
+
+	/** RANDOM PASSWORD **/
+
+	/**
+	 * This will draw the javascript that displays to the user the random password generated
+	 *
+	 * @todo This function doesnt work well if there are more than 1 RandomPasswordAttributes on the form for the same attribute (unlikely situation)
+	 */
+	protected function drawJavascriptRandomPasswordAttribute($attribute) {
+		if (DEBUGTMP) printf('<font size=-2>%s</font><br />',__METHOD__);
+
+		printf("\n<!-- START: %s -->\n",__METHOD__);
+		$this->drawJavascriptPasswordAttribute($attribute);
+
+		$pwd = password_generate();
+		$pwd = str_replace("\\","\\\\",$pwd);
+		$pwd = str_replace("'","\\'",$pwd);
+
+		printf("\n<!-- %s -->\n",__METHOD__);
+		echo '<script type="text/javascript">'."\n";
+		echo 'var i = 0;'."\n";
+		printf('var component = document.getElementById(\'new_values_%s_\'+i);',$attribute->getName());
+		echo "\n";
+		echo 'while (component) {'."\n";
+		echo '	if (!component.value) {'."\n";
+		printf('		component.value = \'%s\';',$pwd);
+		echo "\n";
+		printf('		alert(\'%s:\n%s\');',_('A random password was generated for you'),$pwd);
+		echo "\n";
+		echo '	};'."\n";
+		echo '	i++;'."\n";
+		printf('	component = document.getElementById(\'new_values_%s_\'+i);',$attribute->getName());
+		echo "\n";
+		# It seems that JS gets stuck in a loop if there isnt a command here? - normally this alert isnt shown.
+		printf('alert("It seems another element was found, PLA hasnt been configured for this situation Component: "+component.value+" I:"+i);',$attribute->getName());
+		echo "\n";
+		echo '}'."\n";
+		echo '</script>';
+		printf("\n<!-- END: %s -->\n",__METHOD__);
+	}
+
+	protected function drawDefaultHelperPasswordAttribute($attribute,$i) {
+		$id = 'enc';
+
+		if ($val = $attribute->getValue($i))
+			$default = get_enc_type($val);
+		else
+			$default = $this->getServer()->getValue('appearance','password_hash');
+
+		if (! $attribute->getPostValue())
+			printf('<input type="hidden" name="post_value[%s][]" value="%s" />',$attribute->getName(),$i);
+
+		printf('<select name="%s[%s][%s]" id="%s_%s_%s">',
+			$id,htmlspecialchars($attribute->getName()),$i,
+			$id,htmlspecialchars($attribute->getName()),$i);
+
+		foreach (password_types() as $v => $display)
+			printf('<option value="%s" %s>%s</option>',$v,($v == $default) ? 'selected="selected"' : '',$display);
+
+		echo '</select>';
+	}
+
+	protected function drawDefaultHelperSambaPasswordAttribute($attribute,$i) {
+		$id = 'enc';
+
+		if (! $attribute->getPostValue())
+			printf('<input type="hidden" name="post_value[%s][]" value="%s" />',$attribute->getName(),$i);
+
+		switch ($attribute->getName()) {
+			case 'sambalmpassword' : $enc = 'lm'; break;
+			case 'sambantpassword' : $enc = 'nt'; break;
+
+			default:
+				return '';
+		}
+
+		printf('<input type="hidden" name="%s[%s][%s]" id="%s_%s_%s" value="%s" />',
+			$id,htmlspecialchars($attribute->getName()),$i,
+			$id,htmlspecialchars($attribute->getName()),$i,$enc);
+	}
+
+	/** SELECTION ATTRIBUTE RENDERING **/
+
+	protected function drawIconSelectionAttribute($attribute,$val) {
+		if (DEBUGTMP) printf('<font size=-2>%s</font><br />',__METHOD__);
+
+		if (! $attribute->isMultiple() || $attribute->isReadOnly())
+			$this->drawIconAttribute($attribute,$val);
+	}
+
+	protected function getMenuItemSelectionAttribute($attribute,$i) {
+		if (DEBUG_ENABLED && (($fargs=func_get_args())||$fargs='NOARGS'))
+			debug_log('Entered (%%)',129,0,__FILE__,__LINE__,__METHOD__,$fargs);
+
+		if (DEBUGTMP) printf('<font size=-2>%s</font><br />',__METHOD__);
+
+		switch ($i) {
+			case 'add':
+				if (! $attribute->isMultiple())
+					return $this->getMenuItemAttribute($attribute,$i);
+				else
+					return '';
+
+			case 'modify':
+				return '';
+
+			default:
+				return $this->getMenuItemAttribute($attribute,$i);
+		}
+	}
+}
+?>
diff --git a/lam/templates/3rdParty/pla/lib/Tree.php b/lam/templates/3rdParty/pla/lib/Tree.php
new file mode 100644
index 00000000..b3efcf9a
--- /dev/null
+++ b/lam/templates/3rdParty/pla/lib/Tree.php
@@ -0,0 +1,344 @@
+<?php
+/**
+ * Classes and functions for the LDAP tree.
+ *
+ * @author The phpLDAPadmin development team
+ * @package phpLDAPadmin
+ */
+
+/**
+ * Abstract class which represents the LDAP tree view ; the draw() method
+ * must be implemented by subclasses
+ *
+ * @package phpLDAPadmin
+ * @subpackage Tree
+ * @see HTMLTree AJAXTree
+ */
+abstract class Tree {
+	# Server that this tree represents
+	private $server_id = null;
+	# List of entries in the tree view cache
+	protected $entries = array();
+
+	/**
+	 * Displays the LDAP tree
+	 */
+	abstract public function draw();
+
+	protected function __construct($server_id) {
+		if (DEBUG_ENABLED && (($fargs=func_get_args())||$fargs='NOARGS'))
+			debug_log('Entered (%%)',33,0,__FILE__,__LINE__,__METHOD__,$fargs);
+
+		$this->server_id = $server_id;
+	}
+
+	/**
+	 * Create an instance of the tree - this is used when we call this class directly
+	 * Tree::getInstance($index)
+	 *
+	 * @return object Tree
+	 */
+	static public function getInstance($server_id) {
+		if (DEBUG_ENABLED && (($fargs=func_get_args())||$fargs='NOARGS'))
+			debug_log('Entered (%%)',33,0,__FILE__,__LINE__,__METHOD__,$fargs);
+
+		$tree = get_cached_item($server_id,'tree');
+
+		if (! $tree) {
+			$server = $_SESSION[APPCONFIG]->getServer($server_id);
+
+			if (! $server)
+				return null;
+
+			$treeclass = $_SESSION[APPCONFIG]->getValue('appearance','tree');
+			eval('$tree = new '.$treeclass.'($server_id);');
+
+			# If we are not logged in, just return the empty tree.
+			if (is_null($server->getLogin(null)))
+				return $tree;
+
+			foreach ($server->getBaseDN(null) as $base)
+				if ($base)
+					$tree->addEntry($base);
+
+			set_cached_item($server_id,'tree','null',$tree);
+		}
+
+		return $tree;
+	}
+
+	/**
+	 * Get the Server ID for this tree
+	 *
+	 * @return int Server ID that this tree is for
+	 */
+	protected function getServerID() {
+		if (DEBUG_ENABLED && (($fargs=func_get_args())||$fargs='NOARGS'))
+			debug_log('Entered (%%)',33,1,__FILE__,__LINE__,__METHOD__,$fargs,$this->server_id);
+
+		return $this->server_id;
+	}
+
+	/**
+	 * Get the server Object for this tree
+	 *
+	 * @return object Server Object for this tree
+	 */
+	protected function getServer() {
+		if (DEBUG_ENABLED && (($fargs=func_get_args())||$fargs='NOARGS'))
+			debug_log('Entered (%%)',33,0,__FILE__,__LINE__,__METHOD__,$fargs);
+
+		return $_SESSION[APPCONFIG]->getServer($this->server_id);
+	}
+
+	/**
+	 * Get the entries that are BaseDN entries.
+	 *
+	 * @return array Base DN entries
+	 */
+	public function getBaseEntries() {
+		if (DEBUG_ENABLED && (($fargs=func_get_args())||$fargs='NOARGS'))
+			debug_log('Entered (%%)',33,0,__FILE__,__LINE__,__METHOD__,$fargs);
+
+		$return = array();
+
+		foreach ($this->entries as $details)
+			if ($details->isBaseDN())
+				array_push($return,$details);
+
+		return $return;
+	}
+
+	/**
+	 * This function will take the DN, convert it to lowercase and strip unnessary
+	 * commas. This result will be used as the index for the tree object.
+	 * Any display of a DN should use the object->dn entry, not the index.
+	 * The reason we need to do this is because:
+	 * uid=User A,ou=People,c=AU and
+	 * uid=User B, ou=PeOpLe, c=au
+	 * are infact in the same branch, but PLA will show them inconsistently.
+	 *
+	 * @param dn DN to clean
+	 * @return dn Lowercase clean DN
+	 */
+	private function indexDN($dn) {
+		if (DEBUG_ENABLED && (($fargs=func_get_args())||$fargs='NOARGS'))
+			debug_log('Entered (%%)',33,0,__FILE__,__LINE__,__METHOD__,$fargs);
+
+		$index = strtolower(implode(',',pla_explode_dn($dn)));
+
+		if (DEBUG_ENABLED)
+			debug_log('Result (%s)',1,0,__FILE__,__LINE__,__METHOD__,$index);
+
+		return $index;
+	}
+
+	/**
+	 * Get a tree entry
+	 *
+	 * @param dn DN to retrieve
+	 * @return object Tree DN object
+	 */
+	public function getEntry($dn) {
+		if (DEBUG_ENABLED && (($fargs=func_get_args())||$fargs='NOARGS'))
+			debug_log('Entered (%%)',33,0,__FILE__,__LINE__,__METHOD__,$fargs);
+
+		$dnlower = $this->indexDN($dn);
+
+		if (isset($this->entries[$dnlower]))
+			return $this->entries[$dnlower];
+		else
+			return null;
+	}
+
+	/**
+	 * Add an entry in the tree view ; the entry is added in the
+	 * children array of its parent
+	 *
+	 * @param dn DN to add
+	 * @param string $dn the dn of the entry to create
+	 */
+	public function addEntry($dn) {
+		if (DEBUG_ENABLED && (($fargs=func_get_args())||$fargs='NOARGS'))
+			debug_log('Entered (%%)',33,0,__FILE__,__LINE__,__METHOD__,$fargs);
+
+		$server = $this->getServer();
+		$dnlower = $this->indexDN($dn);
+
+		# @todo Temporarily removed, some non-ascii char DNs that do exist, fail here for some reason?
+		#if (! ($server->dnExists($dn)))
+		#	return;
+
+		if (isset($this->entries[$dnlower]))
+			debug_dump_backtrace('Calling add entry to an entry that ALREADY exists?',1);
+
+		if (DEBUG_ENABLED)
+			debug_log('New ENTRY (%s).',64,0,__FILE__,__LINE__,__METHOD__,$dn);
+
+		$tree_factory = new TreeItem($server->getIndex(),$dn);
+		$tree_factory->setObjectClasses($server->getDNAttrValue($dn,'objectClass'));
+
+		if ((($isleaf = $server->getDNAttrValue($dn,'hassubordinates')) && ! strcasecmp($isleaf[0],'false')))
+			$tree_factory->setLeaf();
+
+		$this->entries[$dnlower] = $tree_factory;
+
+		# Is this entry in a base entry?
+		if (in_array_ignore_case($dn,$server->getBaseDN(null))) {
+			$this->entries[$dnlower]->setBase();
+
+		# If the parent entry is not in the tree, we add it. This routine will in itself
+		# recall this method until we get to the top of the tree (the base).
+		} else {
+			$parent_dn = $server->getContainer($dn);
+
+			if (DEBUG_ENABLED)
+				debug_log('Parent DNs (%s)',64,0,__FILE__,__LINE__,__METHOD__,$parent_dn);
+
+			if ($parent_dn) {
+				$parent_entry = $this->getEntry($parent_dn);
+
+				if (! $parent_entry) {
+					$this->addEntry($parent_dn);
+					$parent_entry = $this->getEntry($parent_dn);
+				}
+
+				# Update this DN's parent's children list as well.
+				$parent_entry->addChild($dn);
+			}
+		}
+	}
+
+	/**
+	 * Delete an entry from the tree view ; the entry is deleted from the
+	 * children array of its parent
+	 *
+	 * @param dn DN to remote
+	 */
+	public function delEntry($dn) {
+		if (DEBUG_ENABLED && (($fargs=func_get_args())||$fargs='NOARGS'))
+			debug_log('Entered (%%)',33,0,__FILE__,__LINE__,__METHOD__,$fargs);
+
+		$server = $this->getServer();
+		$dnlower = $this->indexDN($dn);
+
+		if (isset($this->entries[$dnlower]))
+			unset($this->entries[$dnlower]);
+
+		# Delete entry from parent's children as well.
+		$parent_dn = $server->getContainer($dn);
+		$parent_entry = $this->getEntry($parent_dn);
+
+		if ($parent_entry)
+			$parent_entry->delChild($dn);
+	}
+
+	/**
+	 * Rename an entry in the tree
+	 *
+	 * @param dn Old DN
+	 * @param dn New DN
+	 */
+	public function renameEntry($dnOLD,$dnNEW) {
+		if (DEBUG_ENABLED && (($fargs=func_get_args())||$fargs='NOARGS'))
+			debug_log('Entered (%%)',33,0,__FILE__,__LINE__,__METHOD__,$fargs);
+
+		$server = $this->getServer();
+		$dnlowerOLD = $this->indexDN($dnOLD);
+		$dnlowerNEW = $this->indexDN($dnNEW);
+
+		$this->entries[$dnlowerNEW] = $this->entries[$dnlowerOLD];
+		if ($dnlowerOLD != $dnlowerNEW)
+			unset($this->entries[$dnlowerOLD]);
+		$this->entries[$dnlowerNEW]->rename($dnNEW);
+
+		# Update the parent's children
+		$parentNEW = $server->getContainer($dnNEW);
+		$parentOLD = $server->getContainer($dnOLD);
+
+		$parent_entry = $this->getEntry($parentNEW);
+		if ($parent_entry)
+			$parent_entry->addChild($dnNEW);
+
+		$parent_entry = $this->getEntry($parentOLD);
+		if ($parent_entry)
+			$parent_entry->delChild($dnOLD);
+	}
+
+	/**
+	 * Read the children of a tree entry
+	 *
+	 * @param dn DN of the entry
+	 * @param boolean LDAP Size Limit
+	 */
+	public function readChildren($dn,$nolimit=false) {
+		if (DEBUG_ENABLED && (($fargs=func_get_args())||$fargs='NOARGS'))
+			debug_log('Entered (%%)',33,0,__FILE__,__LINE__,__METHOD__,$fargs);
+
+		$server = $this->getServer();
+		$dnlower = $this->indexDN($dn);
+
+		if (! isset($this->entries[$dnlower]))
+			debug_dump_backtrace('Reading children on an entry that isnt set? '.$dnlower,true);
+
+		$ldap['child_limit'] = $nolimit ? 0 : $_SESSION[APPCONFIG]->getValue('search','size_limit');
+		$ldap['filter'] = $_SESSION[APPCONFIG]->getValue('appearance','tree_filter');
+		$ldap['deref'] = $_SESSION[APPCONFIG]->getValue('deref','tree');
+
+		# Perform the query to get the children.
+		$ldap['children'] = $server->getContainerContents($dn,null,$ldap['child_limit'],$ldap['filter'],$ldap['deref']);
+
+		if (! count($ldap['children'])) {
+			$this->entries[$dnlower]->unsetSizeLimited();
+
+			return;
+		}
+
+		if (DEBUG_ENABLED)
+			debug_log('Children of (%s) are (%s)',64,0,__FILE__,__LINE__,__METHOD__,$dn,$ldap['children']);
+
+		# Relax our execution time, it might take some time to load this
+		if ($nolimit)
+			@set_time_limit($_SESSION[APPCONFIG]->getValue('search','time_limit'));
+
+		$this->entries[$dnlower]->readingChildren(true);
+
+		foreach ($ldap['children'] as $child) {
+			if (DEBUG_ENABLED)
+				debug_log('Adding (%s)',64,0,__FILE__,__LINE__,__METHOD__,$child);
+
+			if (! in_array($child,$this->entries[$dnlower]->getChildren()))
+				$this->entries[$dnlower]->addChild($child);
+		}
+
+		$this->entries[$dnlower]->readingChildren(false);
+
+		if (count($this->entries[$dnlower]->getChildren()) == $ldap['child_limit'])
+			$this->entries[$dnlower]->setSizeLimited();
+		else
+			$this->entries[$dnlower]->unsetSizeLimited();
+	}
+
+	/**
+	 * Return the number of children an entry has. Optionally autoread the child entry.
+	 *
+	 * @param dn DN of the entry
+	 * @param boolean LDAP Size Limit
+	 */
+	protected function readChildrenNumber($dn,$nolimit=false) {
+		if (DEBUG_ENABLED && (($fargs=func_get_args())||$fargs='NOARGS'))
+			debug_log('Entered (%%)',33,0,__FILE__,__LINE__,__METHOD__,$fargs);
+
+		$dnlower = $this->indexDN($dn);
+
+		if (! isset($this->entries[$dnlower]))
+			debug_dump_backtrace('Reading children on an entry that isnt set?',true);
+
+		# Read the entry if we havent got it yet.
+		if (! $this->entries[$dnlower]->isLeaf() && ! $this->entries[$dnlower]->getChildren())
+			$this->readChildren($dn,$nolimit);
+
+		return count($this->entries[$dnlower]->getChildren());
+	}
+}
+?>
diff --git a/lam/templates/3rdParty/pla/lib/TreeItem.php b/lam/templates/3rdParty/pla/lib/TreeItem.php
new file mode 100644
index 00000000..8c95ad83
--- /dev/null
+++ b/lam/templates/3rdParty/pla/lib/TreeItem.php
@@ -0,0 +1,312 @@
+<?php
+/**
+ * Classes and functions for the LDAP tree.
+ *
+ * @author The phpLDAPadmin development team
+ * @package phpLDAPadmin
+ */
+
+/**
+ * Represents an item in the tree.
+ *
+ * @package phpLDAPadmin
+ * @subpackage Tree
+ */
+class TreeItem {
+	# This entry's DN
+	protected $dn;
+	# The server this entry belongs to.
+	private $server_id;
+	# The objectclasses in LDAP, used to deterimine the icon and template
+	protected $objectclasses = array();
+	# Is this a base entry?
+	private $base_entry = false;
+	# Array of dn - the children
+	private $children = array();
+	# An icon file path
+	protected $icon;
+	# Is the entry a leaf?
+	private $leaf = false;
+	# Is the node open?
+	private $open = false;
+	# Is the size of children limited?
+	private $size_limited = true;
+	# Last template used to edit this entry
+	private $template = null;
+	# Do we need to sort the children
+	private $childsort = true;
+	# Are we reading the children
+	private $reading_children = false;
+
+	public function __construct($server_id,$dn) {
+		if (DEBUG_ENABLED && (($fargs=func_get_args())||$fargs='NOARGS'))
+			debug_log('Entered (%%)',33,0,__FILE__,__LINE__,__METHOD__,$fargs);
+
+		$this->server_id = $server_id;
+		$this->dn = $dn;
+	}
+
+	/**
+	 * Get the DN of this tree item.
+	 *
+	 * @return DN The DN of this item.
+	 */
+	public function getDN() {
+		if (DEBUG_ENABLED && (($fargs=func_get_args())||$fargs='NOARGS'))
+			debug_log('Entered (%%)',33,1,__FILE__,__LINE__,__METHOD__,$fargs,$this->dn);
+
+		return $this->dn;
+	}
+
+	public function getDNEncode() {
+		return urlencode(preg_replace('/%([0-9a-fA-F]+)/',"%25\\1",$this->dn));
+	}
+
+	/**
+	 * Get the RDN of this tree items DN.
+	 *
+	 * @return RDN The RDN of this items DN.
+	 */
+	public function getRDN() {
+		if (DEBUG_ENABLED && (($fargs=func_get_args())||$fargs='NOARGS'))
+			debug_log('Entered (%%)',33,0,__FILE__,__LINE__,__METHOD__,$fargs);
+
+		return get_rdn($this->getDn(),0,true);
+	}
+
+	/**
+	 * Set this item as a LDAP base DN item.
+	 */
+	public function setBase() {
+		if (DEBUG_ENABLED && (($fargs=func_get_args())||$fargs='NOARGS'))
+			debug_log('Entered (%%)',33,1,__FILE__,__LINE__,__METHOD__,$fargs);
+
+		$this->base_entry = true;
+	}
+
+	/**
+	 * Return if this item is a base DN item.
+	 */
+	public function isBaseDN() {
+		if (DEBUG_ENABLED && (($fargs=func_get_args())||$fargs='NOARGS'))
+			debug_log('Entered (%%)',33,1,__FILE__,__LINE__,__METHOD__,$fargs,$this->base_entry);
+
+		return $this->base_entry;
+	}
+
+	public function setObjectClasses($oc) {
+		if (DEBUG_ENABLED && (($fargs=func_get_args())||$fargs='NOARGS'))
+			debug_log('Entered (%%)',33,1,__FILE__,__LINE__,__METHOD__,$fargs);
+
+		$this->objectclasses = $oc;
+	}
+
+	public function getObjectClasses() {
+		if (DEBUG_ENABLED && (($fargs=func_get_args())||$fargs='NOARGS'))
+			debug_log('Entered (%%)',33,1,__FILE__,__LINE__,__METHOD__,$fargs,$this->objectclasses);
+
+		return $this->objectclasses;
+	}
+
+	public function isInLDAP() {
+		if (DEBUG_ENABLED && (($fargs=func_get_args())||$fargs='NOARGS'))
+			debug_log('Entered (%%)',33,0,__FILE__,__LINE__,__METHOD__,$fargs);
+
+		return count($this->objectclasses) ? true : false;
+	}
+
+	/**
+	 * Returns null if the children have never be defined
+	 * or an array of the dn of the children
+	 */
+	public function getChildren() {
+		if (DEBUG_ENABLED && (($fargs=func_get_args())||$fargs='NOARGS'))
+			debug_log('Entered (%%)',33,1,__FILE__,__LINE__,__METHOD__,$fargs,$this->children);
+
+		if ($this->childsort && ! $this->reading_children) {
+			usort($this->children,'pla_compare_dns');
+			$this->childsort = false;
+		}
+
+		return $this->children;
+	}
+
+	public function readingChildren($bool) {
+		$this->reading_children = $bool;
+	}
+
+	/**
+	 * Do the children require resorting
+	 */
+	public function isChildSorted() {
+		if (DEBUG_ENABLED && (($fargs=func_get_args())||$fargs='NOARGS'))
+			debug_log('Entered (%%)',33,1,__FILE__,__LINE__,__METHOD__,$fargs,$this->childsort);
+
+		return $this->childsort;
+	}
+
+	/**
+	 * Mark the children as sorted
+	 */
+	public function childSorted() {
+		if (DEBUG_ENABLED && (($fargs=func_get_args())||$fargs='NOARGS'))
+			debug_log('Entered (%%)',33,1,__FILE__,__LINE__,__METHOD__,$fargs);
+
+		$this->childsort = false;
+	}
+
+	/**
+	 * Add a child to this DN entry.
+	 *
+	 * @param DN The DN to add.
+	 */
+	public function addChild($dn) {
+		if (DEBUG_ENABLED && (($fargs=func_get_args())||$fargs='NOARGS'))
+			debug_log('Entered (%%)',33,0,__FILE__,__LINE__,__METHOD__,$fargs);
+
+		if (in_array($dn,$this->children))
+			return;
+
+		array_push($this->children,$dn);
+		$this->childsort = true;
+	}
+
+	/**
+	 * Delete a child from this DN entry.
+	 *
+	 * @param DN The DN to add.
+	 */
+	public function delChild($dn) {
+		if (DEBUG_ENABLED && (($fargs=func_get_args())||$fargs='NOARGS'))
+			debug_log('Entered (%%)',33,0,__FILE__,__LINE__,__METHOD__,$fargs);
+
+		if ($this->children) {
+			# If the parent hasnt been opened in the tree, then there wont be any children.
+			$index = array_search($dn,$this->children);
+
+			if ($index !== false)
+				unset($this->children[$index]);
+		}
+	}
+
+	/**
+	 * Rename this DN.
+	 *
+	 * @param DN The DN to rename to.
+	 */
+	public function rename($dn) {
+		if (DEBUG_ENABLED && (($fargs=func_get_args())||$fargs='NOARGS'))
+			debug_log('Entered (%%)',33,0,__FILE__,__LINE__,__METHOD__,$fargs);
+
+		$this->dn = $dn;
+	}
+
+	/**
+	 * Return if this item has been opened.
+	 */
+	public function isOpened() {
+		if (DEBUG_ENABLED && (($fargs=func_get_args())||$fargs='NOARGS'))
+			debug_log('Entered (%%)',33,1,__FILE__,__LINE__,__METHOD__,$fargs,$this->open);
+
+		return $this->open;
+	}
+
+	/**
+	 * Mark this node as closed.
+	 */
+	public function close() {
+		if (DEBUG_ENABLED && (($fargs=func_get_args())||$fargs='NOARGS'))
+			debug_log('Entered (%%)',33,0,__FILE__,__LINE__,__METHOD__,$fargs);
+
+		$this->open = false;
+	}
+
+	/**
+	 * Opens the node ; the children of the node must have been defined
+	 */
+	public function open() {
+		if (DEBUG_ENABLED && (($fargs=func_get_args())||$fargs='NOARGS'))
+			debug_log('Entered (%%)',33,0,__FILE__,__LINE__,__METHOD__,$fargs);
+
+		$this->open = true;
+	}
+
+	/**
+	 * Mark this node as a leaf.
+	 */
+	public function setLeaf() {
+		if (DEBUG_ENABLED && (($fargs=func_get_args())||$fargs='NOARGS'))
+			debug_log('Entered (%%)',33,1,__FILE__,__LINE__,__METHOD__,$fargs);
+
+		$this->leaf = true;
+	}
+
+	/**
+	 * Return if this node is a leaf.
+	 */
+	public function isLeaf() {
+		if (DEBUG_ENABLED && (($fargs=func_get_args())||$fargs='NOARGS'))
+			debug_log('Entered (%%)',33,1,__FILE__,__LINE__,__METHOD__,$fargs,$this->leaf);
+
+		return $this->leaf;
+	}
+
+	/**
+	 * Returns the path of the icon file used to represent this node ;
+	 * If the icon hasnt been set, it will call get_icon()
+	 */
+	public function getIcon() {
+		if (DEBUG_ENABLED && (($fargs=func_get_args())||$fargs='NOARGS'))
+			debug_log('Entered (%%)',33,1,__FILE__,__LINE__,__METHOD__,$fargs,$this->icon);
+
+		if (! $this->icon)
+			$this->icon = get_icon($this->server_id,$this->dn,$this->objectclasses);
+
+		return $this->icon;
+	}
+
+	/**
+	 * Mark this node as a size limited (it wont have all its children).
+	 */
+	public function setSizeLimited() {
+		if (DEBUG_ENABLED && (($fargs=func_get_args())||$fargs='NOARGS'))
+			debug_log('Entered (%%)',33,1,__FILE__,__LINE__,__METHOD__,$fargs);
+
+		$this->size_limited = true;
+	}
+
+	/**
+	 * Clear the size limited flag.
+	 */
+	public function unsetSizeLimited() {
+		if (DEBUG_ENABLED && (($fargs=func_get_args())||$fargs='NOARGS'))
+			debug_log('Entered (%%)',33,0,__FILE__,__LINE__,__METHOD__,$fargs);
+
+		$this->size_limited = false;
+	}
+
+	/**
+	 * Return if this node has hit an LDAP size limit (and thus doesnt have all its children).
+	 */
+	public function isSizeLimited() {
+		if (DEBUG_ENABLED && (($fargs=func_get_args())||$fargs='NOARGS'))
+			debug_log('Entered (%%)',33,0,__FILE__,__LINE__,__METHOD__,$fargs);
+
+		return $this->size_limited;
+	}
+
+	public function setTemplate($template) {
+		if (DEBUG_ENABLED && (($fargs=func_get_args())||$fargs='NOARGS'))
+			debug_log('Entered (%%)',33,1,__FILE__,__LINE__,__METHOD__,$fargs);
+
+		$this->template = $template;
+	}
+
+	public function getTemplate() {
+		if (DEBUG_ENABLED && (($fargs=func_get_args())||$fargs='NOARGS'))
+			debug_log('Entered (%%)',33,0,__FILE__,__LINE__,__METHOD__,$fargs);
+
+		return $this->template;
+	}
+}
+?>
diff --git a/lam/templates/3rdParty/pla/lib/Visitor.php b/lam/templates/3rdParty/pla/lib/Visitor.php
new file mode 100644
index 00000000..b9affdbf
--- /dev/null
+++ b/lam/templates/3rdParty/pla/lib/Visitor.php
@@ -0,0 +1,112 @@
+<?php
+/**
+ * Classes and functions for the template engines.
+ *
+ * @author The phpLDAPadmin development team
+ * @package phpLDAPadmin
+ */
+
+/**/
+# To make it easier to debug this script, define these constants, which will add some __METHOD__ location displays to the rendered text.
+define('DEBUGTMP',0);
+define('DEBUGTMPSUB',0);
+
+/**
+ * Abstract Visitor class
+ *
+ * @package phpLDAPadmin
+ * @subpackage Templates
+ */
+abstract class Visitor {
+	# The server that was used to configure the templates
+	protected $server_id;
+
+	public function __call($method,$args) {
+		if (DEBUG_ENABLED && (($fargs=func_get_args())||$fargs='NOARGS'))
+			debug_log('Entered (%%)',129,0,__FILE__,__LINE__,__METHOD__,$fargs);
+
+		if (! in_array($method,array('get','visit','draw')))
+			debug_dump_backtrace(sprintf('Incorrect use of method loading [%s]',$method),1);
+
+		$methods = array();
+
+		$fnct = array_shift($args);
+
+		$object = $args[0];
+		$class = get_class($object);
+
+		$call = "$method$fnct$class";
+
+		array_push($methods,$call);
+
+		while ($class && ! method_exists($this,$call)) {
+			if (defined('DEBUGTMP') && DEBUGTMP)
+				printf('<font size=-2><i>Class (%s): Method doesnt exist (%s,%s)</i></font><br />',$class,get_class($this),$call);
+
+			$class = get_parent_class($class);
+			$call = "$method$fnct$class";
+			array_push($methods,$call);
+		}
+
+		if (defined('DEBUGTMP') && DEBUGTMP)
+			printf('<font size=-2><i>Calling Methods: %s</i></font><br />',implode('|',$methods));
+
+		if (defined('DEBUGTMP') && DEBUGTMP && method_exists($this,$call))
+			printf('<font size=-2>Method Exists: %s::%s (%s)</font><br />',get_class($this),$call,$args);
+
+		if (method_exists($this,$call)) {
+			$call .= '(';
+
+			for ($i = 0; $i < count($args); $i++)
+				if ($i == 0)
+					$call .= sprintf('$args[%s]',$i);
+				else
+					$call .= sprintf(',$args[%s]',$i);
+
+			$call .= ');';
+
+			if (defined('DEBUGTMP') && DEBUGTMP)
+				printf('<font size=-2><b>Invoking Method: $this->%s</b></font><br />',$call);
+
+			eval('$r = $this->'.$call);
+
+			if (isset($r))
+				return $r;
+			else
+				return;
+
+		} elseif (DEBUG_ENABLED) {
+			debug_log('Doesnt exist param (%s,%s)',1,0,__FILE__,__LINE__,__METHOD__,$method,$fnct);
+		}
+
+		printf('<font size=-2><i>NO Methods: %s</i></font><br />',implode('|',$methods));
+	}
+
+	/**
+	 * Return the LDAP server ID
+	 *
+	 * @return int Server ID
+	 */
+	public function getServerID() {
+		if (DEBUG_ENABLED && (($fargs=func_get_args())||$fargs='NOARGS'))
+			debug_log('Entered (%%)',129,1,__FILE__,__LINE__,__METHOD__,$fargs,$this->server_id);
+
+		if (isset($this->server_id))
+			return $this->server_id;
+		else
+			return null;
+	}
+
+	/**
+	 * Return this LDAP Server object
+	 *
+	 * @return object DataStore Server
+	 */
+	protected function getServer() {
+		if (DEBUG_ENABLED && (($fargs=func_get_args())||$fargs='NOARGS'))
+			debug_log('Entered (%%)',129,0,__FILE__,__LINE__,__METHOD__,$fargs);
+
+		return $_SESSION[APPCONFIG]->getServer($this->getServerID());
+	}
+}
+?>
diff --git a/lam/templates/3rdParty/pla/lib/blowfish.php b/lam/templates/3rdParty/pla/lib/blowfish.php
new file mode 100644
index 00000000..1c69aa9a
--- /dev/null
+++ b/lam/templates/3rdParty/pla/lib/blowfish.php
@@ -0,0 +1,480 @@
+<?php
+/**
+ * The Cipher_blowfish:: class implements the Cipher interface enryption data
+ * using the Blowfish algorithm.
+ *
+ * $Horde: horde/lib/Cipher/blowfish.php,v 1.2.2.3 2003/01/03 13:23:22 jan Exp $
+ *
+ * Copyright 2002-2003 Mike Cochrane <mike@graftonhall.co.nz>
+ *
+ * See the enclosed file COPYING for license information (LGPL). If you
+ * did not receive this file, see http://www.fsf.org/copyleft/lgpl.html.
+ *
+ * @author  Mike Cochrane <mike@graftonhall.co.nz>
+ * @version $Revision$
+ * @since   Horde 2.2
+ * @package horde.cipher
+ */
+/**
+ * @package horde.cipher
+ */
+
+// Change for phpMyAdmin by lem9:
+//class Horde_Cipher_blowfish extends Horde_Cipher {
+class Horde_Cipher_blowfish {
+
+    /* Pi Array */
+    public $p = array(
+            0x243F6A88, 0x85A308D3, 0x13198A2E, 0x03707344,
+            0xA4093822, 0x299F31D0, 0x082EFA98, 0xEC4E6C89,
+            0x452821E6, 0x38D01377, 0xBE5466CF, 0x34E90C6C,
+            0xC0AC29B7, 0xC97C50DD, 0x3F84D5B5, 0xB5470917,
+            0x9216D5D9, 0x8979FB1B);
+
+    /* S Boxes */
+    public $s1 = array(
+            0xD1310BA6, 0x98DFB5AC, 0x2FFD72DB, 0xD01ADFB7,
+            0xB8E1AFED, 0x6A267E96, 0xBA7C9045, 0xF12C7F99,
+            0x24A19947, 0xB3916CF7, 0x0801F2E2, 0x858EFC16,
+            0x636920D8, 0x71574E69, 0xA458FEA3, 0xF4933D7E,
+            0x0D95748F, 0x728EB658, 0x718BCD58, 0x82154AEE,
+            0x7B54A41D, 0xC25A59B5, 0x9C30D539, 0x2AF26013,
+            0xC5D1B023, 0x286085F0, 0xCA417918, 0xB8DB38EF,
+            0x8E79DCB0, 0x603A180E, 0x6C9E0E8B, 0xB01E8A3E,
+            0xD71577C1, 0xBD314B27, 0x78AF2FDA, 0x55605C60,
+            0xE65525F3, 0xAA55AB94, 0x57489862, 0x63E81440,
+            0x55CA396A, 0x2AAB10B6, 0xB4CC5C34, 0x1141E8CE,
+            0xA15486AF, 0x7C72E993, 0xB3EE1411, 0x636FBC2A,
+            0x2BA9C55D, 0x741831F6, 0xCE5C3E16, 0x9B87931E,
+            0xAFD6BA33, 0x6C24CF5C, 0x7A325381, 0x28958677,
+            0x3B8F4898, 0x6B4BB9AF, 0xC4BFE81B, 0x66282193,
+            0x61D809CC, 0xFB21A991, 0x487CAC60, 0x5DEC8032,
+            0xEF845D5D, 0xE98575B1, 0xDC262302, 0xEB651B88,
+            0x23893E81, 0xD396ACC5, 0x0F6D6FF3, 0x83F44239,
+            0x2E0B4482, 0xA4842004, 0x69C8F04A, 0x9E1F9B5E,
+            0x21C66842, 0xF6E96C9A, 0x670C9C61, 0xABD388F0,
+            0x6A51A0D2, 0xD8542F68, 0x960FA728, 0xAB5133A3,
+            0x6EEF0B6C, 0x137A3BE4, 0xBA3BF050, 0x7EFB2A98,
+            0xA1F1651D, 0x39AF0176, 0x66CA593E, 0x82430E88,
+            0x8CEE8619, 0x456F9FB4, 0x7D84A5C3, 0x3B8B5EBE,
+            0xE06F75D8, 0x85C12073, 0x401A449F, 0x56C16AA6,
+            0x4ED3AA62, 0x363F7706, 0x1BFEDF72, 0x429B023D,
+            0x37D0D724, 0xD00A1248, 0xDB0FEAD3, 0x49F1C09B,
+            0x075372C9, 0x80991B7B, 0x25D479D8, 0xF6E8DEF7,
+            0xE3FE501A, 0xB6794C3B, 0x976CE0BD, 0x04C006BA,
+            0xC1A94FB6, 0x409F60C4, 0x5E5C9EC2, 0x196A2463,
+            0x68FB6FAF, 0x3E6C53B5, 0x1339B2EB, 0x3B52EC6F,
+            0x6DFC511F, 0x9B30952C, 0xCC814544, 0xAF5EBD09,
+            0xBEE3D004, 0xDE334AFD, 0x660F2807, 0x192E4BB3,
+            0xC0CBA857, 0x45C8740F, 0xD20B5F39, 0xB9D3FBDB,
+            0x5579C0BD, 0x1A60320A, 0xD6A100C6, 0x402C7279,
+            0x679F25FE, 0xFB1FA3CC, 0x8EA5E9F8, 0xDB3222F8,
+            0x3C7516DF, 0xFD616B15, 0x2F501EC8, 0xAD0552AB,
+            0x323DB5FA, 0xFD238760, 0x53317B48, 0x3E00DF82,
+            0x9E5C57BB, 0xCA6F8CA0, 0x1A87562E, 0xDF1769DB,
+            0xD542A8F6, 0x287EFFC3, 0xAC6732C6, 0x8C4F5573,
+            0x695B27B0, 0xBBCA58C8, 0xE1FFA35D, 0xB8F011A0,
+            0x10FA3D98, 0xFD2183B8, 0x4AFCB56C, 0x2DD1D35B,
+            0x9A53E479, 0xB6F84565, 0xD28E49BC, 0x4BFB9790,
+            0xE1DDF2DA, 0xA4CB7E33, 0x62FB1341, 0xCEE4C6E8,
+            0xEF20CADA, 0x36774C01, 0xD07E9EFE, 0x2BF11FB4,
+            0x95DBDA4D, 0xAE909198, 0xEAAD8E71, 0x6B93D5A0,
+            0xD08ED1D0, 0xAFC725E0, 0x8E3C5B2F, 0x8E7594B7,
+            0x8FF6E2FB, 0xF2122B64, 0x8888B812, 0x900DF01C,
+            0x4FAD5EA0, 0x688FC31C, 0xD1CFF191, 0xB3A8C1AD,
+            0x2F2F2218, 0xBE0E1777, 0xEA752DFE, 0x8B021FA1,
+            0xE5A0CC0F, 0xB56F74E8, 0x18ACF3D6, 0xCE89E299,
+            0xB4A84FE0, 0xFD13E0B7, 0x7CC43B81, 0xD2ADA8D9,
+            0x165FA266, 0x80957705, 0x93CC7314, 0x211A1477,
+            0xE6AD2065, 0x77B5FA86, 0xC75442F5, 0xFB9D35CF,
+            0xEBCDAF0C, 0x7B3E89A0, 0xD6411BD3, 0xAE1E7E49,
+            0x00250E2D, 0x2071B35E, 0x226800BB, 0x57B8E0AF,
+            0x2464369B, 0xF009B91E, 0x5563911D, 0x59DFA6AA,
+            0x78C14389, 0xD95A537F, 0x207D5BA2, 0x02E5B9C5,
+            0x83260376, 0x6295CFA9, 0x11C81968, 0x4E734A41,
+            0xB3472DCA, 0x7B14A94A, 0x1B510052, 0x9A532915,
+            0xD60F573F, 0xBC9BC6E4, 0x2B60A476, 0x81E67400,
+            0x08BA6FB5, 0x571BE91F, 0xF296EC6B, 0x2A0DD915,
+            0xB6636521, 0xE7B9F9B6, 0xFF34052E, 0xC5855664,
+            0x53B02D5D, 0xA99F8FA1, 0x08BA4799, 0x6E85076A);
+    public $s2 = array(
+            0x4B7A70E9, 0xB5B32944, 0xDB75092E, 0xC4192623,
+            0xAD6EA6B0, 0x49A7DF7D, 0x9CEE60B8, 0x8FEDB266,
+            0xECAA8C71, 0x699A17FF, 0x5664526C, 0xC2B19EE1,
+            0x193602A5, 0x75094C29, 0xA0591340, 0xE4183A3E,
+            0x3F54989A, 0x5B429D65, 0x6B8FE4D6, 0x99F73FD6,
+            0xA1D29C07, 0xEFE830F5, 0x4D2D38E6, 0xF0255DC1,
+            0x4CDD2086, 0x8470EB26, 0x6382E9C6, 0x021ECC5E,
+            0x09686B3F, 0x3EBAEFC9, 0x3C971814, 0x6B6A70A1,
+            0x687F3584, 0x52A0E286, 0xB79C5305, 0xAA500737,
+            0x3E07841C, 0x7FDEAE5C, 0x8E7D44EC, 0x5716F2B8,
+            0xB03ADA37, 0xF0500C0D, 0xF01C1F04, 0x0200B3FF,
+            0xAE0CF51A, 0x3CB574B2, 0x25837A58, 0xDC0921BD,
+            0xD19113F9, 0x7CA92FF6, 0x94324773, 0x22F54701,
+            0x3AE5E581, 0x37C2DADC, 0xC8B57634, 0x9AF3DDA7,
+            0xA9446146, 0x0FD0030E, 0xECC8C73E, 0xA4751E41,
+            0xE238CD99, 0x3BEA0E2F, 0x3280BBA1, 0x183EB331,
+            0x4E548B38, 0x4F6DB908, 0x6F420D03, 0xF60A04BF,
+            0x2CB81290, 0x24977C79, 0x5679B072, 0xBCAF89AF,
+            0xDE9A771F, 0xD9930810, 0xB38BAE12, 0xDCCF3F2E,
+            0x5512721F, 0x2E6B7124, 0x501ADDE6, 0x9F84CD87,
+            0x7A584718, 0x7408DA17, 0xBC9F9ABC, 0xE94B7D8C,
+            0xEC7AEC3A, 0xDB851DFA, 0x63094366, 0xC464C3D2,
+            0xEF1C1847, 0x3215D908, 0xDD433B37, 0x24C2BA16,
+            0x12A14D43, 0x2A65C451, 0x50940002, 0x133AE4DD,
+            0x71DFF89E, 0x10314E55, 0x81AC77D6, 0x5F11199B,
+            0x043556F1, 0xD7A3C76B, 0x3C11183B, 0x5924A509,
+            0xF28FE6ED, 0x97F1FBFA, 0x9EBABF2C, 0x1E153C6E,
+            0x86E34570, 0xEAE96FB1, 0x860E5E0A, 0x5A3E2AB3,
+            0x771FE71C, 0x4E3D06FA, 0x2965DCB9, 0x99E71D0F,
+            0x803E89D6, 0x5266C825, 0x2E4CC978, 0x9C10B36A,
+            0xC6150EBA, 0x94E2EA78, 0xA5FC3C53, 0x1E0A2DF4,
+            0xF2F74EA7, 0x361D2B3D, 0x1939260F, 0x19C27960,
+            0x5223A708, 0xF71312B6, 0xEBADFE6E, 0xEAC31F66,
+            0xE3BC4595, 0xA67BC883, 0xB17F37D1, 0x018CFF28,
+            0xC332DDEF, 0xBE6C5AA5, 0x65582185, 0x68AB9802,
+            0xEECEA50F, 0xDB2F953B, 0x2AEF7DAD, 0x5B6E2F84,
+            0x1521B628, 0x29076170, 0xECDD4775, 0x619F1510,
+            0x13CCA830, 0xEB61BD96, 0x0334FE1E, 0xAA0363CF,
+            0xB5735C90, 0x4C70A239, 0xD59E9E0B, 0xCBAADE14,
+            0xEECC86BC, 0x60622CA7, 0x9CAB5CAB, 0xB2F3846E,
+            0x648B1EAF, 0x19BDF0CA, 0xA02369B9, 0x655ABB50,
+            0x40685A32, 0x3C2AB4B3, 0x319EE9D5, 0xC021B8F7,
+            0x9B540B19, 0x875FA099, 0x95F7997E, 0x623D7DA8,
+            0xF837889A, 0x97E32D77, 0x11ED935F, 0x16681281,
+            0x0E358829, 0xC7E61FD6, 0x96DEDFA1, 0x7858BA99,
+            0x57F584A5, 0x1B227263, 0x9B83C3FF, 0x1AC24696,
+            0xCDB30AEB, 0x532E3054, 0x8FD948E4, 0x6DBC3128,
+            0x58EBF2EF, 0x34C6FFEA, 0xFE28ED61, 0xEE7C3C73,
+            0x5D4A14D9, 0xE864B7E3, 0x42105D14, 0x203E13E0,
+            0x45EEE2B6, 0xA3AAABEA, 0xDB6C4F15, 0xFACB4FD0,
+            0xC742F442, 0xEF6ABBB5, 0x654F3B1D, 0x41CD2105,
+            0xD81E799E, 0x86854DC7, 0xE44B476A, 0x3D816250,
+            0xCF62A1F2, 0x5B8D2646, 0xFC8883A0, 0xC1C7B6A3,
+            0x7F1524C3, 0x69CB7492, 0x47848A0B, 0x5692B285,
+            0x095BBF00, 0xAD19489D, 0x1462B174, 0x23820E00,
+            0x58428D2A, 0x0C55F5EA, 0x1DADF43E, 0x233F7061,
+            0x3372F092, 0x8D937E41, 0xD65FECF1, 0x6C223BDB,
+            0x7CDE3759, 0xCBEE7460, 0x4085F2A7, 0xCE77326E,
+            0xA6078084, 0x19F8509E, 0xE8EFD855, 0x61D99735,
+            0xA969A7AA, 0xC50C06C2, 0x5A04ABFC, 0x800BCADC,
+            0x9E447A2E, 0xC3453484, 0xFDD56705, 0x0E1E9EC9,
+            0xDB73DBD3, 0x105588CD, 0x675FDA79, 0xE3674340,
+            0xC5C43465, 0x713E38D8, 0x3D28F89E, 0xF16DFF20,
+            0x153E21E7, 0x8FB03D4A, 0xE6E39F2B, 0xDB83ADF7);
+    public $s3 = array(
+            0xE93D5A68, 0x948140F7, 0xF64C261C, 0x94692934,
+            0x411520F7, 0x7602D4F7, 0xBCF46B2E, 0xD4A20068,
+            0xD4082471, 0x3320F46A, 0x43B7D4B7, 0x500061AF,
+            0x1E39F62E, 0x97244546, 0x14214F74, 0xBF8B8840,
+            0x4D95FC1D, 0x96B591AF, 0x70F4DDD3, 0x66A02F45,
+            0xBFBC09EC, 0x03BD9785, 0x7FAC6DD0, 0x31CB8504,
+            0x96EB27B3, 0x55FD3941, 0xDA2547E6, 0xABCA0A9A,
+            0x28507825, 0x530429F4, 0x0A2C86DA, 0xE9B66DFB,
+            0x68DC1462, 0xD7486900, 0x680EC0A4, 0x27A18DEE,
+            0x4F3FFEA2, 0xE887AD8C, 0xB58CE006, 0x7AF4D6B6,
+            0xAACE1E7C, 0xD3375FEC, 0xCE78A399, 0x406B2A42,
+            0x20FE9E35, 0xD9F385B9, 0xEE39D7AB, 0x3B124E8B,
+            0x1DC9FAF7, 0x4B6D1856, 0x26A36631, 0xEAE397B2,
+            0x3A6EFA74, 0xDD5B4332, 0x6841E7F7, 0xCA7820FB,
+            0xFB0AF54E, 0xD8FEB397, 0x454056AC, 0xBA489527,
+            0x55533A3A, 0x20838D87, 0xFE6BA9B7, 0xD096954B,
+            0x55A867BC, 0xA1159A58, 0xCCA92963, 0x99E1DB33,
+            0xA62A4A56, 0x3F3125F9, 0x5EF47E1C, 0x9029317C,
+            0xFDF8E802, 0x04272F70, 0x80BB155C, 0x05282CE3,
+            0x95C11548, 0xE4C66D22, 0x48C1133F, 0xC70F86DC,
+            0x07F9C9EE, 0x41041F0F, 0x404779A4, 0x5D886E17,
+            0x325F51EB, 0xD59BC0D1, 0xF2BCC18F, 0x41113564,
+            0x257B7834, 0x602A9C60, 0xDFF8E8A3, 0x1F636C1B,
+            0x0E12B4C2, 0x02E1329E, 0xAF664FD1, 0xCAD18115,
+            0x6B2395E0, 0x333E92E1, 0x3B240B62, 0xEEBEB922,
+            0x85B2A20E, 0xE6BA0D99, 0xDE720C8C, 0x2DA2F728,
+            0xD0127845, 0x95B794FD, 0x647D0862, 0xE7CCF5F0,
+            0x5449A36F, 0x877D48FA, 0xC39DFD27, 0xF33E8D1E,
+            0x0A476341, 0x992EFF74, 0x3A6F6EAB, 0xF4F8FD37,
+            0xA812DC60, 0xA1EBDDF8, 0x991BE14C, 0xDB6E6B0D,
+            0xC67B5510, 0x6D672C37, 0x2765D43B, 0xDCD0E804,
+            0xF1290DC7, 0xCC00FFA3, 0xB5390F92, 0x690FED0B,
+            0x667B9FFB, 0xCEDB7D9C, 0xA091CF0B, 0xD9155EA3,
+            0xBB132F88, 0x515BAD24, 0x7B9479BF, 0x763BD6EB,
+            0x37392EB3, 0xCC115979, 0x8026E297, 0xF42E312D,
+            0x6842ADA7, 0xC66A2B3B, 0x12754CCC, 0x782EF11C,
+            0x6A124237, 0xB79251E7, 0x06A1BBE6, 0x4BFB6350,
+            0x1A6B1018, 0x11CAEDFA, 0x3D25BDD8, 0xE2E1C3C9,
+            0x44421659, 0x0A121386, 0xD90CEC6E, 0xD5ABEA2A,
+            0x64AF674E, 0xDA86A85F, 0xBEBFE988, 0x64E4C3FE,
+            0x9DBC8057, 0xF0F7C086, 0x60787BF8, 0x6003604D,
+            0xD1FD8346, 0xF6381FB0, 0x7745AE04, 0xD736FCCC,
+            0x83426B33, 0xF01EAB71, 0xB0804187, 0x3C005E5F,
+            0x77A057BE, 0xBDE8AE24, 0x55464299, 0xBF582E61,
+            0x4E58F48F, 0xF2DDFDA2, 0xF474EF38, 0x8789BDC2,
+            0x5366F9C3, 0xC8B38E74, 0xB475F255, 0x46FCD9B9,
+            0x7AEB2661, 0x8B1DDF84, 0x846A0E79, 0x915F95E2,
+            0x466E598E, 0x20B45770, 0x8CD55591, 0xC902DE4C,
+            0xB90BACE1, 0xBB8205D0, 0x11A86248, 0x7574A99E,
+            0xB77F19B6, 0xE0A9DC09, 0x662D09A1, 0xC4324633,
+            0xE85A1F02, 0x09F0BE8C, 0x4A99A025, 0x1D6EFE10,
+            0x1AB93D1D, 0x0BA5A4DF, 0xA186F20F, 0x2868F169,
+            0xDCB7DA83, 0x573906FE, 0xA1E2CE9B, 0x4FCD7F52,
+            0x50115E01, 0xA70683FA, 0xA002B5C4, 0x0DE6D027,
+            0x9AF88C27, 0x773F8641, 0xC3604C06, 0x61A806B5,
+            0xF0177A28, 0xC0F586E0, 0x006058AA, 0x30DC7D62,
+            0x11E69ED7, 0x2338EA63, 0x53C2DD94, 0xC2C21634,
+            0xBBCBEE56, 0x90BCB6DE, 0xEBFC7DA1, 0xCE591D76,
+            0x6F05E409, 0x4B7C0188, 0x39720A3D, 0x7C927C24,
+            0x86E3725F, 0x724D9DB9, 0x1AC15BB4, 0xD39EB8FC,
+            0xED545578, 0x08FCA5B5, 0xD83D7CD3, 0x4DAD0FC4,
+            0x1E50EF5E, 0xB161E6F8, 0xA28514D9, 0x6C51133C,
+            0x6FD5C7E7, 0x56E14EC4, 0x362ABFCE, 0xDDC6C837,
+            0xD79A3234, 0x92638212, 0x670EFA8E, 0x406000E0);
+    public $s4 = array(
+            0x3A39CE37, 0xD3FAF5CF, 0xABC27737, 0x5AC52D1B,
+            0x5CB0679E, 0x4FA33742, 0xD3822740, 0x99BC9BBE,
+            0xD5118E9D, 0xBF0F7315, 0xD62D1C7E, 0xC700C47B,
+            0xB78C1B6B, 0x21A19045, 0xB26EB1BE, 0x6A366EB4,
+            0x5748AB2F, 0xBC946E79, 0xC6A376D2, 0x6549C2C8,
+            0x530FF8EE, 0x468DDE7D, 0xD5730A1D, 0x4CD04DC6,
+            0x2939BBDB, 0xA9BA4650, 0xAC9526E8, 0xBE5EE304,
+            0xA1FAD5F0, 0x6A2D519A, 0x63EF8CE2, 0x9A86EE22,
+            0xC089C2B8, 0x43242EF6, 0xA51E03AA, 0x9CF2D0A4,
+            0x83C061BA, 0x9BE96A4D, 0x8FE51550, 0xBA645BD6,
+            0x2826A2F9, 0xA73A3AE1, 0x4BA99586, 0xEF5562E9,
+            0xC72FEFD3, 0xF752F7DA, 0x3F046F69, 0x77FA0A59,
+            0x80E4A915, 0x87B08601, 0x9B09E6AD, 0x3B3EE593,
+            0xE990FD5A, 0x9E34D797, 0x2CF0B7D9, 0x022B8B51,
+            0x96D5AC3A, 0x017DA67D, 0xD1CF3ED6, 0x7C7D2D28,
+            0x1F9F25CF, 0xADF2B89B, 0x5AD6B472, 0x5A88F54C,
+            0xE029AC71, 0xE019A5E6, 0x47B0ACFD, 0xED93FA9B,
+            0xE8D3C48D, 0x283B57CC, 0xF8D56629, 0x79132E28,
+            0x785F0191, 0xED756055, 0xF7960E44, 0xE3D35E8C,
+            0x15056DD4, 0x88F46DBA, 0x03A16125, 0x0564F0BD,
+            0xC3EB9E15, 0x3C9057A2, 0x97271AEC, 0xA93A072A,
+            0x1B3F6D9B, 0x1E6321F5, 0xF59C66FB, 0x26DCF319,
+            0x7533D928, 0xB155FDF5, 0x03563482, 0x8ABA3CBB,
+            0x28517711, 0xC20AD9F8, 0xABCC5167, 0xCCAD925F,
+            0x4DE81751, 0x3830DC8E, 0x379D5862, 0x9320F991,
+            0xEA7A90C2, 0xFB3E7BCE, 0x5121CE64, 0x774FBE32,
+            0xA8B6E37E, 0xC3293D46, 0x48DE5369, 0x6413E680,
+            0xA2AE0810, 0xDD6DB224, 0x69852DFD, 0x09072166,
+            0xB39A460A, 0x6445C0DD, 0x586CDECF, 0x1C20C8AE,
+            0x5BBEF7DD, 0x1B588D40, 0xCCD2017F, 0x6BB4E3BB,
+            0xDDA26A7E, 0x3A59FF45, 0x3E350A44, 0xBCB4CDD5,
+            0x72EACEA8, 0xFA6484BB, 0x8D6612AE, 0xBF3C6F47,
+            0xD29BE463, 0x542F5D9E, 0xAEC2771B, 0xF64E6370,
+            0x740E0D8D, 0xE75B1357, 0xF8721671, 0xAF537D5D,
+            0x4040CB08, 0x4EB4E2CC, 0x34D2466A, 0x0115AF84,
+            0xE1B00428, 0x95983A1D, 0x06B89FB4, 0xCE6EA048,
+            0x6F3F3B82, 0x3520AB82, 0x011A1D4B, 0x277227F8,
+            0x611560B1, 0xE7933FDC, 0xBB3A792B, 0x344525BD,
+            0xA08839E1, 0x51CE794B, 0x2F32C9B7, 0xA01FBAC9,
+            0xE01CC87E, 0xBCC7D1F6, 0xCF0111C3, 0xA1E8AAC7,
+            0x1A908749, 0xD44FBD9A, 0xD0DADECB, 0xD50ADA38,
+            0x0339C32A, 0xC6913667, 0x8DF9317C, 0xE0B12B4F,
+            0xF79E59B7, 0x43F5BB3A, 0xF2D519FF, 0x27D9459C,
+            0xBF97222C, 0x15E6FC2A, 0x0F91FC71, 0x9B941525,
+            0xFAE59361, 0xCEB69CEB, 0xC2A86459, 0x12BAA8D1,
+            0xB6C1075E, 0xE3056A0C, 0x10D25065, 0xCB03A442,
+            0xE0EC6E0E, 0x1698DB3B, 0x4C98A0BE, 0x3278E964,
+            0x9F1F9532, 0xE0D392DF, 0xD3A0342B, 0x8971F21E,
+            0x1B0A7441, 0x4BA3348C, 0xC5BE7120, 0xC37632D8,
+            0xDF359F8D, 0x9B992F2E, 0xE60B6F47, 0x0FE3F11D,
+            0xE54CDA54, 0x1EDAD891, 0xCE6279CF, 0xCD3E7E6F,
+            0x1618B166, 0xFD2C1D05, 0x848FD2C5, 0xF6FB2299,
+            0xF523F357, 0xA6327623, 0x93A83531, 0x56CCCD02,
+            0xACF08162, 0x5A75EBB5, 0x6E163697, 0x88D273CC,
+            0xDE966292, 0x81B949D0, 0x4C50901B, 0x71C65614,
+            0xE6C6C7BD, 0x327A140A, 0x45E1D006, 0xC3F27B9A,
+            0xC9AA53FD, 0x62A80F00, 0xBB25BFE2, 0x35BDD2F6,
+            0x71126905, 0xB2040222, 0xB6CBCF7C, 0xCD769C2B,
+            0x53113EC0, 0x1640E3D3, 0x38ABBD60, 0x2547ADF0,
+            0xBA38209C, 0xF746CE76, 0x77AFA1C5, 0x20756060,
+            0x85CBFE4E, 0x8AE88DD8, 0x7AAAF9B0, 0x4CF9AA7E,
+            0x1948C25C, 0x02FB8A8C, 0x01C36AE4, 0xD6EBE1F9,
+            0x90D4F869, 0xA65CDEA0, 0x3F09252D, 0xC208E69F,
+            0xB74E6132, 0xCE77E25B, 0x578FDFE3, 0x3AC372E6);
+
+    /* The number of rounds to do */
+    public $_rounds = 16;
+
+    /* Constructor */
+    function Cipher_blowfish($params = null)
+    {
+    }
+
+    /**
+     * Set the key to be used for en/decryption
+     *
+     * @param String $key   The key to use
+     */
+    function setKey($key)
+    {
+        $key = $this->_formatKey($key);
+        $keyPos = $keyXor = 0;
+
+        $iMax = count($this->p);
+        $keyLen = count($key);
+        for ($i = 0; $i < $iMax; $i++) {
+            for ($t = 0; $t < 4; $t++) {
+                $keyXor = ($keyXor << 8) | (($key[$keyPos]) & 0x0ff);
+                if (++$keyPos == $keyLen) {
+                    $keyPos = 0;
+                }
+            }
+            $this->p[$i] = $this->p[$i] ^ $keyXor;
+        }
+
+        $encZero = array('L' => 0, 'R' => 0);
+        for ($i = 0; $i + 1 < $iMax; $i += 2) {
+          $encZero = $this->_encryptBlock($encZero['L'], $encZero['R']);
+          $this->p[$i] = $encZero['L'];
+          $this->p[$i + 1] = $encZero['R'];
+        }
+
+        $iMax = count($this->s1);
+        for ($i = 0; $i < $iMax; $i += 2) {
+          $encZero = $this->_encryptBlock($encZero['L'], $encZero['R']);
+          $this->s1[$i] = $encZero['L'];
+          $this->s1[$i + 1] = $encZero['R'];
+        }
+
+        $iMax = count($this->s2);
+        for ($i = 0; $i < $iMax; $i += 2) {
+          $encZero = $this->_encryptBlock($encZero['L'], $encZero['R']);
+          $this->s2[$i] = $encZero['L'];
+          $this->s2[$i + 1] = $encZero['R'];
+        }
+
+        $iMax = count($this->s3);
+        for ($i = 0; $i < $iMax; $i += 2) {
+          $encZero = $this->_encryptBlock($encZero['L'], $encZero['R']);
+          $this->s3[$i] = $encZero['L'];
+          $this->s3[$i + 1] = $encZero['R'];
+        }
+
+        $iMax = count($this->s4);
+        for ($i = 0; $i < $iMax; $i += 2) {
+          $encZero = $this->_encryptBlock($encZero['L'], $encZero['R']);
+          $this->s4[$i] = $encZero['L'];
+          $this->s4[$i + 1] = $encZero['R'];
+        }
+
+    }
+
+    /**
+     * Return the size of the blocks that this cipher needs
+     *
+     * @return Integer  The number of characters per block
+     */
+    function getBlockSize()
+    {
+        return 8;
+    }
+
+    /**
+     * Encrypt a block on data.
+     *
+     * @param String $block         The data to encrypt
+     * @param optional String $key  The key to use
+     *
+     * @return String the encrypted output
+     */
+    function encryptBlock($block, $key = null)
+    {
+        if (!is_null($key)) {
+            $this->setKey($key);
+        }
+
+        list($L, $R) = array_values(unpack('N*', $block));
+        $parts = $this->_encryptBlock($L, $R);
+        return pack("NN", $parts['L'], $parts['R']);
+    }
+
+    /**
+     * Encrypt a block on data.
+     *
+     * @param String $L  The data to encrypt.
+     * @param String $R  The data to encrypt.
+     *
+     * @return String  The encrypted output.
+     */
+    function _encryptBlock($L, $R)
+    {
+        $L ^= $this->p[0];
+        $R ^= ((($this->s1[($L >> 24) & 0xFF] + $this->s2[($L >> 16) & 0x0ff]) ^ $this->s3[($L >> 8) & 0x0ff]) + $this->s4[$L & 0x0ff]) ^ $this->p[1];
+        $L ^= ((($this->s1[($R >> 24) & 0xFF] + $this->s2[($R >> 16) & 0x0ff]) ^ $this->s3[($R >> 8) & 0x0ff]) + $this->s4[$R & 0x0ff]) ^ $this->p[2];
+        $R ^= ((($this->s1[($L >> 24) & 0xFF] + $this->s2[($L >> 16) & 0x0ff]) ^ $this->s3[($L >> 8) & 0x0ff]) + $this->s4[$L & 0x0ff]) ^ $this->p[3];
+        $L ^= ((($this->s1[($R >> 24) & 0xFF] + $this->s2[($R >> 16) & 0x0ff]) ^ $this->s3[($R >> 8) & 0x0ff]) + $this->s4[$R & 0x0ff]) ^ $this->p[4];
+        $R ^= ((($this->s1[($L >> 24) & 0xFF] + $this->s2[($L >> 16) & 0x0ff]) ^ $this->s3[($L >> 8) & 0x0ff]) + $this->s4[$L & 0x0ff]) ^ $this->p[5];
+        $L ^= ((($this->s1[($R >> 24) & 0xFF] + $this->s2[($R >> 16) & 0x0ff]) ^ $this->s3[($R >> 8) & 0x0ff]) + $this->s4[$R & 0x0ff]) ^ $this->p[6];
+        $R ^= ((($this->s1[($L >> 24) & 0xFF] + $this->s2[($L >> 16) & 0x0ff]) ^ $this->s3[($L >> 8) & 0x0ff]) + $this->s4[$L & 0x0ff]) ^ $this->p[7];
+        $L ^= ((($this->s1[($R >> 24) & 0xFF] + $this->s2[($R >> 16) & 0x0ff]) ^ $this->s3[($R >> 8) & 0x0ff]) + $this->s4[$R & 0x0ff]) ^ $this->p[8];
+        $R ^= ((($this->s1[($L >> 24) & 0xFF] + $this->s2[($L >> 16) & 0x0ff]) ^ $this->s3[($L >> 8) & 0x0ff]) + $this->s4[$L & 0x0ff]) ^ $this->p[9];
+        $L ^= ((($this->s1[($R >> 24) & 0xFF] + $this->s2[($R >> 16) & 0x0ff]) ^ $this->s3[($R >> 8) & 0x0ff]) + $this->s4[$R & 0x0ff]) ^ $this->p[10];
+        $R ^= ((($this->s1[($L >> 24) & 0xFF] + $this->s2[($L >> 16) & 0x0ff]) ^ $this->s3[($L >> 8) & 0x0ff]) + $this->s4[$L & 0x0ff]) ^ $this->p[11];
+        $L ^= ((($this->s1[($R >> 24) & 0xFF] + $this->s2[($R >> 16) & 0x0ff]) ^ $this->s3[($R >> 8) & 0x0ff]) + $this->s4[$R & 0x0ff]) ^ $this->p[12];
+        $R ^= ((($this->s1[($L >> 24) & 0xFF] + $this->s2[($L >> 16) & 0x0ff]) ^ $this->s3[($L >> 8) & 0x0ff]) + $this->s4[$L & 0x0ff]) ^ $this->p[13];
+        $L ^= ((($this->s1[($R >> 24) & 0xFF] + $this->s2[($R >> 16) & 0x0ff]) ^ $this->s3[($R >> 8) & 0x0ff]) + $this->s4[$R & 0x0ff]) ^ $this->p[14];
+        $R ^= ((($this->s1[($L >> 24) & 0xFF] + $this->s2[($L >> 16) & 0x0ff]) ^ $this->s3[($L >> 8) & 0x0ff]) + $this->s4[$L & 0x0ff]) ^ $this->p[15];
+        $L ^= ((($this->s1[($R >> 24) & 0xFF] + $this->s2[($R >> 16) & 0x0ff]) ^ $this->s3[($R >> 8) & 0x0ff]) + $this->s4[$R & 0x0ff]) ^ $this->p[16];
+        $R ^= $this->p[17];
+
+        return array('L' => $R, 'R' => $L);
+    }
+
+    /**
+     * Decrypt a block on data.
+     *
+     * @param String $block         The data to decrypt
+     * @param optional String $key  The key to use
+     *
+     * @return String the decrypted output
+     */
+    function decryptBlock($block, $key = null)
+    {
+        if (!is_null($key)) {
+            $this->setKey($key);
+        }
+
+	$unpack = unpack('N*', $block);
+
+	if (! is_array($unpack))
+		error(
+			sprintf('BLOWFISH: decryptBock()<br>We expected unpack to produce an array, but instead it produced [%s]. This function was entered with (%s,%s). If you think that this is a bug, then please tell the PLA developers how you got here. You are using PLA [%s,%s]',
+				serialize($unpack),$block,$key,app_version(),phpversion()),'error','index.php');
+
+        list($L, $R) = array_values($unpack);
+
+        $L ^= $this->p[17];
+        $R ^= ((($this->s1[($L >> 24) & 0xFF] + $this->s2[($L >> 16) & 0x0ff]) ^ $this->s3[($L >> 8) & 0x0ff]) + $this->s4[$L & 0x0ff]) ^ $this->p[16];
+        $L ^= ((($this->s1[($R >> 24) & 0xFF] + $this->s2[($R >> 16) & 0x0ff]) ^ $this->s3[($R >> 8) & 0x0ff]) + $this->s4[$R & 0x0ff]) ^ $this->p[15];
+        $R ^= ((($this->s1[($L >> 24) & 0xFF] + $this->s2[($L >> 16) & 0x0ff]) ^ $this->s3[($L >> 8) & 0x0ff]) + $this->s4[$L & 0x0ff]) ^ $this->p[14];
+        $L ^= ((($this->s1[($R >> 24) & 0xFF] + $this->s2[($R >> 16) & 0x0ff]) ^ $this->s3[($R >> 8) & 0x0ff]) + $this->s4[$R & 0x0ff]) ^ $this->p[13];
+        $R ^= ((($this->s1[($L >> 24) & 0xFF] + $this->s2[($L >> 16) & 0x0ff]) ^ $this->s3[($L >> 8) & 0x0ff]) + $this->s4[$L & 0x0ff]) ^ $this->p[12];
+        $L ^= ((($this->s1[($R >> 24) & 0xFF] + $this->s2[($R >> 16) & 0x0ff]) ^ $this->s3[($R >> 8) & 0x0ff]) + $this->s4[$R & 0x0ff]) ^ $this->p[11];
+        $R ^= ((($this->s1[($L >> 24) & 0xFF] + $this->s2[($L >> 16) & 0x0ff]) ^ $this->s3[($L >> 8) & 0x0ff]) + $this->s4[$L & 0x0ff]) ^ $this->p[10];
+        $L ^= ((($this->s1[($R >> 24) & 0xFF] + $this->s2[($R >> 16) & 0x0ff]) ^ $this->s3[($R >> 8) & 0x0ff]) + $this->s4[$R & 0x0ff]) ^ $this->p[9];
+        $R ^= ((($this->s1[($L >> 24) & 0xFF] + $this->s2[($L >> 16) & 0x0ff]) ^ $this->s3[($L >> 8) & 0x0ff]) + $this->s4[$L & 0x0ff]) ^ $this->p[8];
+        $L ^= ((($this->s1[($R >> 24) & 0xFF] + $this->s2[($R >> 16) & 0x0ff]) ^ $this->s3[($R >> 8) & 0x0ff]) + $this->s4[$R & 0x0ff]) ^ $this->p[7];
+        $R ^= ((($this->s1[($L >> 24) & 0xFF] + $this->s2[($L >> 16) & 0x0ff]) ^ $this->s3[($L >> 8) & 0x0ff]) + $this->s4[$L & 0x0ff]) ^ $this->p[6];
+        $L ^= ((($this->s1[($R >> 24) & 0xFF] + $this->s2[($R >> 16) & 0x0ff]) ^ $this->s3[($R >> 8) & 0x0ff]) + $this->s4[$R & 0x0ff]) ^ $this->p[5];
+        $R ^= ((($this->s1[($L >> 24) & 0xFF] + $this->s2[($L >> 16) & 0x0ff]) ^ $this->s3[($L >> 8) & 0x0ff]) + $this->s4[$L & 0x0ff]) ^ $this->p[4];
+        $L ^= ((($this->s1[($R >> 24) & 0xFF] + $this->s2[($R >> 16) & 0x0ff]) ^ $this->s3[($R >> 8) & 0x0ff]) + $this->s4[$R & 0x0ff]) ^ $this->p[3];
+        $R ^= ((($this->s1[($L >> 24) & 0xFF] + $this->s2[($L >> 16) & 0x0ff]) ^ $this->s3[($L >> 8) & 0x0ff]) + $this->s4[$L & 0x0ff]) ^ $this->p[2];
+        $L ^= ((($this->s1[($R >> 24) & 0xFF] + $this->s2[($R >> 16) & 0x0ff]) ^ $this->s3[($R >> 8) & 0x0ff]) + $this->s4[$R & 0x0ff]) ^ $this->p[1];
+
+        $decrypted = pack("NN", $R ^ $this->p[0], $L);
+        return $decrypted;
+    }
+
+    /**
+     * Converts a text key into an array.
+     *
+     * @return array  The key.
+     */
+    function _formatKey($key)
+    {
+        return array_values(unpack('C*', $key));
+    }
+
+}
+?>
diff --git a/lam/templates/3rdParty/pla/lib/common.php b/lam/templates/3rdParty/pla/lib/common.php
new file mode 100644
index 00000000..8304d31f
--- /dev/null
+++ b/lam/templates/3rdParty/pla/lib/common.php
@@ -0,0 +1,266 @@
+<?php
+/**
+ * Contains code to be executed at the top of each application page.
+ * include this file at the top of every PHP file.
+ *
+ * This file will "pre-initialise" an application environment so that any PHP file will have a consistent
+ * environment with other application PHP files.
+ *
+ * This code WILL NOT check that all required functions are usable/readable, etc. This process has
+ * been moved to index.php (which really is only called once when a browser hits the application for the first time).
+ *
+ * The list of ADDITIONAL function files is now defined in functions.php.
+ *
+ * @author The phpLDAPadmin development team
+ * @package phpLDAPadmin
+ */
+
+/**
+ * @package phpLDAPadmin
+ * @subpackage Functions
+ */
+
+/* Initialize the app array. The app array is initialised each invocation of a PLA script and therefore
+   has no state between invocations.*/
+$app = array();
+
+/** The index we will store our config in $_SESSION */
+if (! defined('APPCONFIG'))
+	define('APPCONFIG','plaConfig');
+
+/**
+ * Catch any scripts that are called directly.
+ * If they are called directly, then they should be routed back through index.php
+ */
+$app['direct_scripts'] = array('cmd.php','index.php',
+	'view_jpeg_photo.php','entry_chooser.php',
+	'password_checker.php','download_binary_attr.php',
+	'unserialize.php'
+	);
+
+# Which script was invoked.
+$app['script_running'] = $_SERVER['SCRIPT_NAME'];
+
+foreach ($app['direct_scripts'] as $script) {
+	$app['scriptOK'] = false;
+
+	if (preg_match('/'.$script.'$/',$app['script_running'])) {
+		$app['scriptOK'] = true;
+		break;
+	}
+}
+
+# Anything in the tools dir or cron dir can be executed directly.
+if ((! $app['scriptOK'] && preg_match('/^\/[cron|tools]/',$app['script_running'])) || ! isset($_SERVER['SERVER_SOFTWARE']))
+	$app['scriptOK'] = true;
+
+if (! $app['scriptOK']) {
+	if (isset($_REQUEST['server_id']))
+		header(sprintf('Location: index.php?server_id=%s',$_REQUEST['server_id']));
+	else
+		header('Location: index.php');
+	die();
+}
+
+/**
+ * All commands are disabled in read-only unless specified here
+ */
+$app['readwrite_cmds'] = array(
+	'collapse','draw_tree_node','expand',
+	'compare_form','compare',
+	'download_binary_attr','view_jpeg_photo',
+	'entry_chooser',
+	'export_form','export',
+	'login_form','login','logout',
+	'monitor',
+	'password_checker',
+	'purge_cache',
+	'refresh','schema','query_engine','server_info','show_cache','template_engine',
+	'welcome'
+	);
+
+/**
+ * Timer stopwatch, used to instrument the application
+ */
+if (! function_exists('stopwatch')) {
+	function stopwatch() {
+		static $mt_previous = 0;
+
+		list($usec,$sec) = explode(' ',microtime());
+		$mt_current = (float)$usec + (float)$sec;
+
+		if (! $mt_previous) {
+			$mt_previous = $mt_current;
+			return 0;
+
+		} else {
+			$mt_diff = ($mt_current - $mt_previous);
+			$mt_previous = $mt_current;
+			return sprintf('%.5f',$mt_diff);
+		}
+	}
+
+# For compatability - if common has been sourced a second time, then return to the calling script.
+} else {
+	return;
+}
+
+# Set the defualt time zone, if it isnt set in php.ini
+if (function_exists('date_default_timezone_set') && ! ini_get('date.timezone'))
+	date_default_timezone_set('UTC');
+
+# If we are called from index.php, LIBDIR will be set, all other calls to common.php dont need to set it.
+if (! defined('LIBDIR'))
+	define('LIBDIR','../lib/');
+
+# For PHP5 backward/forward compatibility
+if (! defined('E_STRICT'))
+	define('E_STRICT',2048);
+
+# General functions needed to proceed.
+ob_start();
+require_once realpath(LIBDIR.'functions.php');
+if (ob_get_level())
+	ob_end_clean();
+
+/**
+ * Turn on all notices and warnings. This helps us write cleaner code (we hope at least)
+ * Our custom error handler receives all error notices that pass the error_reporting()
+ * level set above.
+ */
+
+# Call our custom defined error handler, if it is defined in functions.php
+if (function_exists('app_error_handler'))
+	set_error_handler('app_error_handler');
+
+# Disable error reporting until all our required functions are loaded.
+error_reporting(0);
+
+/**
+ * functions.php should have defined our $app['function_files'] array, listing all our
+ * required functions (order IS important).
+ * index.php should have checked they exist and are usable - we'll assume that the user
+ * has been via index.php, and fixed any problems already.
+ */
+ob_start();
+if (isset($app['function_files']) && is_array($app['function_files']))
+	foreach ($app['function_files'] as $script)
+		require_once realpath($script);
+
+# Now read in config_default.php
+require_once realpath(LIBDIR.'config_default.php');
+if (ob_get_level())
+	ob_end_clean();
+
+# We are now ready for error reporting.
+error_reporting(E_ALL);
+
+# Start our session.
+app_session_start();
+
+# See if we have a session, we can then get our theme out
+$app['theme'] = 'default';
+if (isset($_SESSION[APPCONFIG]))
+	if (is_dir(realpath(sprintf('images/%s',$_SESSION[APPCONFIG]->getValue('appearance','theme'))))
+		&& is_file(realpath(sprintf('css/%s/%s',$_SESSION[APPCONFIG]->getValue('appearance','theme'),$_SESSION[APPCONFIG]->getValue('appearance','stylesheet')))))
+
+		$app['theme'] = $_SESSION[APPCONFIG]->getValue('appearance','theme');
+
+define('CSSDIR',sprintf('css/%s',$app['theme']));
+define('IMGDIR',sprintf('images/%s',$app['theme']));
+
+# Initialise the hooks
+if (file_exists(LIBDIR.'hooks.php'))
+	require_once LIBDIR.'hooks.php';
+
+# If we get here, and $_SESSION[APPCONFIG] is not set, then redirect the user to the index.
+if (isset($_SERVER['SERVER_SOFTWARE']) && ! isset($_SESSION[APPCONFIG])) {
+	if ($_SERVER['QUERY_STRING'])
+		header(sprintf('Location: index.php?URI=%s',base64_encode($_SERVER['QUERY_STRING'])));
+	else
+		header('Location: index.php');
+
+	die();
+
+} else {
+	# SF Bug #1903987
+	if (! method_exists($_SESSION[APPCONFIG],'CheckCustom'))
+		error('Unknown situation, $_SESSION[APPCONFIG] exists, but method CheckCustom() does not','error',null,true,true);
+
+	# Check our custom variables.
+	# @todo Change this so that we dont process a cached session.
+	$_SESSION[APPCONFIG]->CheckCustom();
+}
+
+# Check for safe mode.
+if (@ini_get('safe_mode') && ! get_request('cmd','GET'))
+	system_message(array(
+	'title'=>_('PHP Safe Mode'),
+	'body'=>_('You have PHP Safe Mode enabled. This application may work unexpectedly in Safe Mode.'),
+	'type'=>'info'));
+
+# Set our timezone, if it is specified in config.php
+if ($_SESSION[APPCONFIG]->getValue('appearance','timezone'))
+	date_default_timezone_set($_SESSION[APPCONFIG]->getValue('appearance','timezone'));
+
+# If we are here, $_SESSION is set - so enabled DEBUGing if it has been configured.
+if (($_SESSION[APPCONFIG]->getValue('debug','syslog') || $_SESSION[APPCONFIG]->getValue('debug','file'))
+	&& $_SESSION[APPCONFIG]->getValue('debug','level'))
+	define('DEBUG_ENABLED',1);
+else
+	define('DEBUG_ENABLED',0);
+
+if (DEBUG_ENABLED)
+	debug_log('Application (%s) initialised and starting with (%s).',1,0,__FILE__,__LINE__,__METHOD__,
+		app_version(),$_REQUEST);
+
+# Set our PHP timelimit.
+if ($_SESSION[APPCONFIG]->getValue('session','timelimit') && ! @ini_get('safe_mode'))
+	set_time_limit($_SESSION[APPCONFIG]->getValue('session','timelimit'));
+
+# If debug mode is set, increase the time_limit, since we probably need it.
+if (DEBUG_ENABLED && $_SESSION[APPCONFIG]->getValue('session','timelimit') && ! @ini_get('safe_mode'))
+	set_time_limit($_SESSION[APPCONFIG]->getValue('session','timelimit') * 5);
+
+setlanguage();
+
+/**
+ * Strip slashes from GET, POST, and COOKIE variables if this
+ * PHP install is configured to automatically addslashes()
+ */
+if (@get_magic_quotes_gpc() && (! isset($slashes_stripped) || ! $slashes_stripped)) {
+	array_stripslashes($_REQUEST);
+	array_stripslashes($_GET);
+	array_stripslashes($_POST);
+	array_stripslashes($_COOKIE);
+	$slashes_stripped = true;
+}
+
+# Create our application repository variable.
+$app['server'] = $_SESSION[APPCONFIG]->getServer(get_request('server_id','REQUEST'));
+
+/**
+ * Look/evaluate our timeout
+ */
+if (! $app['server']->isSessionValid()) {
+	system_message(array(
+		'title'=>_('Session Timed Out'),
+		'body'=>sprintf('%s %s %s',
+			_('Your Session timed out after'),$app['server']->getValue('login','timeout'),
+			_('min. of inactivity. You have been automatically logged out.')),
+		'type'=>'info'),sprintf('index.php?server_id=%s&refresh=SID_%s',$app['server']->getIndex(),$app['server']->getIndex()));
+
+	die();
+}
+
+# If syslog is enabled, we need to include the supporting file.
+if ($_SESSION[APPCONFIG]->getValue('debug','syslog'))
+	require LIBDIR.'syslog.php';
+
+/**
+ * At this point we have read all our additional function PHP files and our configuration.
+ * If we are using hooks, run the session_init hook.
+ */
+if (function_exists('run_hook'))
+	run_hook('post_session_init',array());
+?>
diff --git a/lam/templates/3rdParty/pla/lib/config_default.php b/lam/templates/3rdParty/pla/lib/config_default.php
new file mode 100644
index 00000000..b9633743
--- /dev/null
+++ b/lam/templates/3rdParty/pla/lib/config_default.php
@@ -0,0 +1,803 @@
+<?php
+/**
+ * Configuration processing and defaults.
+ *
+ * @author The phpLDAPadmin development team
+ * @package phpLDAPadmin
+ * @todo Add validation of set variables to enforce limits or particular values.
+ */
+
+/** The minimum version of PHP required to run phpLDAPadmin. */
+define('REQUIRED_PHP_VERSION','5.0.0');
+
+/**
+ * The config class contains all our configuration settings for a session.
+ *
+ * An instance of this class should be stored in $_SESSION to maintain state, and to avoid
+ * rebuilding/rereading it at the state of each page output.
+ *
+ * @package phpLDAPadmin
+ * @subpackage Tree
+ */
+class Config {
+	public $custom;
+	protected $default;
+	protected $servers = array();
+
+	public $hooks = array();
+
+	public function __construct() {
+		$this->custom = new stdClass;
+		$this->default = new stdClass;
+
+		/*
+		 * What to do after entry creation :
+		 * 2 : display the creation form again
+		 * 1 : display the new created entry
+		 * 0 : display the choice between 1 and 2
+		 */
+		$this->default->appearance['action_after_creation'] = array(
+			'desc'=>'Display the new created entry',
+			'default'=>1);
+
+		## Appearance Attributes
+		/** Anonymous implies read only
+		 * Set to true if you want LDAP data to be displayed read-only (without input fields)
+		 * when a user logs in to a server anonymously
+		 */
+		$this->default->appearance['anonymous_bind_implies_read_only'] = array(
+			'desc'=>'Display as read only if user logs in with anonymous bind',
+			'default'=>true);
+
+		$this->default->appearance['attr_display_order'] = array(
+			'desc'=>'Custom order to display attributes',
+			'default'=>array());
+
+		/*
+		* @todo Compression is not working,
+		* purge_cache shows blank,
+		* tree refresh shows blank - and if view_tree_node is modified to compress output, then previously opened items show up as compressed data.
+		*/
+		$this->default->appearance['compress'] = array(
+			'desc'=>'Compress Output',
+			'untested'=>true,
+			'default'=>false);
+
+		$this->default->appearance['control_icons'] = array(
+			'desc'=>'Show the control as icons or text',
+			'default'=>false);
+
+		$this->default->appearance['custom_templates_only'] = array(
+			'desc'=>'Only display the custom templates.',
+			'default'=>false);
+
+		$this->default->appearance['date'] = array(
+			'desc'=>'Date format whenever dates are shown',
+			'default'=>'%A %e %B %Y');
+
+		$this->default->appearance['date_attrs'] = array(
+			'desc'=>'Array of attributes that should show a jscalendar',
+			'default'=>array('shadowExpire'=>'%es','shadowLastChange'=>'%es'));
+
+		$this->default->appearance['date_attrs_showtime'] = array(
+			'desc'=>'Array of attributes that should show a the time when showing the jscalendar',
+			'default'=>array(''));
+
+		$this->default->appearance['disable_default_template'] = array(
+			'desc'=>'Disabled the Default Template',
+			'default'=>false);
+
+		$this->default->appearance['disable_default_leaf'] = array(
+			'desc'=>'Disabled creating leaf entries in the Default Template',
+			'default'=>false);
+
+		$this->default->appearance['friendly_attrs'] = array(
+			'desc'=>'Friendly names for attributes',
+			'default'=>array());
+
+		$this->default->appearance['hide_attrs'] = array(
+			'desc'=>'Hide attributes from display',
+			'default'=>array());
+
+		$this->default->appearance['hide_attrs_exempt'] = array(
+			'desc'=>'Group DN, where membership will exempt the users from hide_attrs',
+			'default'=>null);
+
+		$this->default->appearance['hide_debug_info'] = array(
+			'desc'=>'Hide the features that may provide sensitive debugging information to the browser',
+			'default'=>true);
+
+		$this->default->appearance['hide_template_regexp'] = array(
+			'desc'=>'Templates that are disabled by their regex are not shown',
+			'default'=>false);
+
+		$this->default->appearance['hide_template_warning'] = array(
+			'desc'=>'Hide template errors from being displayed',
+			'default'=>false);
+
+		/** Language
+		 * The language setting. If you set this to 'auto', phpLDAPadmin will
+		 * attempt to determine your language automatically. Otherwise, set
+		 * this to your applicable language in xx_XX format.
+		 * Localization is not complete yet, but most strings have been translated.
+		 * Please help by writing language files.
+		 */
+		$this->default->appearance['language'] = array(
+			'desc'=>'Language',
+			'default'=>'auto');
+
+		$this->default->appearance['max_add_attrs'] = array(
+			'desc'=>'Maximum number of attrs to show in the add attr form',
+			'default'=>10);
+
+		/**
+		 * If you want certain attributes to be editable as multi-line, include them in this list
+		 * A multi-line textarea will be drawn instead of a single-line text field
+		 */
+		$this->default->appearance['multi_line_attributes'] = array(
+			'desc'=>'Attributes to show as multiline attributes',
+			'default'=>array('postalAddress','homePostalAddress','personalSignature','description','mailReplyText'));
+
+		/**
+		 * A list of syntax OIDs which support multi-line attribute values:
+		 */
+		$this->default->appearance['multi_line_syntax_oids'] = array(
+			'desc'=>'Attributes to show as multiline attributes',
+			'default'=>array(
+				// octet string syntax OID:
+				'1.3.6.1.4.1.1466.115.121.1.40',
+				// postal address syntax OID:
+				'1.3.6.1.4.1.1466.115.121.1.41'));
+
+		/** Obfuscate Password
+		 * If true, display all password hash values as "******". Note that clear-text
+		 * passwords will always be displayed as "******", regardless of this setting.
+		 */
+		$this->default->appearance['obfuscate_password_display'] = array(
+			'desc'=>'Obfuscate the display of passwords',
+			'default'=>true);
+
+		$this->default->appearance['page_title'] = array(
+			'desc'=>'Change the page title to this text',
+			'default'=>'');
+
+		$this->default->appearance['rdn_all_attrs'] = array(
+			'desc'=>'Whether to show all attributes in the RDN chooser, or just the required ones',
+			'default'=>true);
+
+		$this->default->appearance['readonly_attrs'] = array(
+			'desc'=>'Mark these attributes as readonly',
+			'default'=>array());
+
+		$this->default->appearance['readonly_attrs_exempt'] = array(
+			'desc'=>'Group DN, where membership will exempt the users from readonly attrs',
+			'default'=>null);
+
+		$this->default->appearance['remoteurls'] = array(
+			'desc'=>'Whether to include renders for remote URLs',
+			'default'=>true);
+
+		$this->default->appearance['show_clear_password'] = array(
+			'desc'=>'Whether to show clear passwords if we dont obfuscate them',
+			'default'=>false);
+
+		$this->default->appearance['show_hints'] = array(
+			'desc'=>'Show helpful hints',
+			'default'=>true);
+
+		$this->default->appearance['show_top_create'] = array(
+			'desc'=>'Show a additional create link on the top of the list if there are more than 10 entries',
+			'default'=>true);
+
+		$this->default->appearance['show_schema_link'] = array(
+			'desc'=>'Show the schema link for each attribute',
+			'default'=>true);
+
+		$this->default->appearance['show_attribute_notes'] = array(
+			'desc'=>'Show notes for each attribute',
+			'default'=>true);
+
+		$this->default->appearance['stylesheet'] = array(
+			'desc'=>'Style sheet to use',
+			'default'=>'style.css');
+
+		$this->default->appearance['theme'] = array(
+			'desc'=>'Which theme to use',
+			'default'=>'default');
+
+		$this->default->appearance['timezone'] = array(
+			'desc'=>'Define our timezone, if not defined in php.ini',
+			'default'=>null);
+
+		$this->default->appearance['tree'] = array(
+			'desc'=>'Class name which inherits from Tree class and implements the draw() method',
+			'default'=>'AJAXTree');
+
+		/** Tree display
+		 * An array of format strings used to display enties in the 
+		 * tree viewer (left-hand side). The first format string that 
+		 * is completely defined (i.e., does not reference attributes 
+		 * that are not defined the object). If there is no format 
+		 * string that is completely defined, the last one is used. 
+		 * 
+		 * You can use special tokens to draw the entries as you wish. 
+		 * You can even mix in HTML to format the string. 
+		 * Here are all the tokens you can use:
+		 *	%rdn - draw the RDN of the entry (ie, "cn=Dave")
+		 *	%dn - draw the DN of the entry (ie, "cn=Dave,ou=People,dc=example,dc=com"
+		 *	%rdnValue - draw the value of the RDN (ie, instead of "cn=Dave", just draw "Dave")
+		 *	%[attrname]- draw the value (or values) of the specified attribute.
+		 *	 example: %gidNumber
+		 *
+		 * Any multivalued attributes will be displayed as a comma separated list.
+		 *
+		 * Examples:
+		 *
+		 * To draw the gidNumber and uidNumber to the right of the RDN in a small, gray font:
+		 *	'%rdn <small style="color:gray">( %gidNumber / %uidNumber )</small>'
+		 * To draw the full DN of each entry:
+		 *	'%dn'
+		 * To draw the objectClasses to the right in parenthesis:
+		 *	'%rdn <small style="color: gray">( %objectClass )</small>'
+		 * To draw the user-friendly RDN value (ie, instead of "cn=Dave", just draw "Dave"):
+		 *	'%rdnValue'
+		 */
+		$this->default->appearance['tree_display_format'] = array(
+			'desc'=>'LDAP attribute to show in the tree',
+			'default'=>array('%rdn'));
+
+		$this->default->appearance['tree_height'] = array(
+			'desc'=>'Pixel height of the tree browser',
+			'default'=>null);
+
+		$this->default->appearance['tree_width'] = array(
+			'desc'=>'Pixel width of the tree browser',
+			'default'=>null);
+
+		/** Tree display filter
+		 * LDAP filter used to search entries for the tree viewer (left-hand side)
+		 */
+		$this->default->appearance['tree_filter'] = array(
+			'desc'=>'LDAP search filter for the tree entries',
+			'default'=>'(objectClass=*)');
+
+		## Caching
+		$this->default->cache['schema'] = array(
+			'desc'=>'Cache Schema Activity',
+			'default'=>true);
+
+		$this->default->cache['query'] = array(
+			'desc'=>'Cache Query Configuration',
+			'default'=>true);
+
+		$this->default->cache['query_time'] = array(
+			'desc'=>'Cache the query configuration for atleast this amount of time in seconds',
+			'default'=>5);
+
+		$this->default->cache['template'] = array(
+			'desc'=>'Cache Template Configuration',
+			'default'=>true);
+
+		$this->default->cache['template_time'] = array(
+			'desc'=>'Cache the template configuration for atleast this amount of time in seconds',
+			'default'=>60);
+
+		$this->default->cache['tree'] = array(
+			'desc'=>'Cache Browser Tree',
+			'default'=>true);
+
+		/** Confirm actions
+		 */
+		$this->default->confirm['copy'] = array(
+			'desc'=>'Confirm copy actions',
+			'default'=>true);
+
+		$this->default->confirm['create'] = array(
+			'desc'=>'Confirm creation actions',
+			'default'=>true);
+
+		$this->default->confirm['update'] = array(
+			'desc'=>'Confirm update actions',
+			'default'=>true);
+
+		/** Commands
+		 * Define command availability ; if the value of a command is true,
+		 * the command will be available.
+		 */
+		$this->default->commands['cmd'] = array(
+			'desc'=>'Define command availability',
+			'default'=> array(
+				'entry_internal_attributes_show' => true,
+				'entry_refresh' => true,
+				'oslinks' => true,
+				'switch_template' => true
+			));
+
+		$this->default->commands['script'] = array(
+			'desc'=>'Define scripts availability',
+			'default'=> array(
+				'add_attr_form' => true,
+				'add_oclass_form' => true,
+				'add_value_form' => true,
+				'collapse' => true,
+				'compare' => true,
+				'compare_form' => true,
+				'copy' => true,
+				'copy_form' => true,
+				'create' => true,
+				'create_confirm' => true,
+				'delete' => true,
+				'delete_attr' => true,
+				'delete_form' => true,
+				'draw_tree_node' => true,
+				'expand' => true,
+				'export' => true,
+				'export_form' => true,
+				'import' => true,
+				'import_form' => true,
+				'login' => true,
+				'logout' => true,
+				'login_form' => true,
+				'mass_delete' => true,
+				'mass_edit' => true,
+				'mass_update' => true,
+				'modify_member_form' => true,
+				'monitor' => true,
+				'purge_cache' => true,
+				'query_engine' => true,
+				'rename' => true,
+				'rename_form' => true,
+				'rdelete' => true,
+				'refresh' => true,
+				'schema' => true,
+				'server_info' => true,
+				'show_cache' => true,
+				'template_engine' => true,
+				'update_confirm' => true,
+				'update' => true
+			));
+
+		/** Aliases and Referrrals
+		 * Similar to ldapsearch's -a option, the following options allow you to configure
+		 * how phpLDAPadmin will treat aliases and referrals in the LDAP tree.
+		 * For the following four settings, avaialable options include:
+		 *
+		 * LDAP_DEREF_NEVER	- aliases are never dereferenced (eg, the contents of
+		 *			the alias itself are shown and not the referenced entry).
+		 * LDAP_DEREF_SEARCHING	- aliases should be dereferenced during the search but
+		 *			not when locating the base object of the search.
+		 * LDAP_DEREF_FINDING	- aliases should be dereferenced when locating the base
+		 *			object but not during the search.
+		 * LDAP_DEREF_ALWAYS	- aliases should be dereferenced always (eg, the contents
+		 *			of the referenced entry is shown and not the aliasing entry)
+		 * We superceed these definitions with @ to suppress the error if php-ldap is
+		 * not installed.
+		 */
+		@$this->default->deref['export'] = array(
+			'desc'=>'',
+			'default'=>LDAP_DEREF_NEVER);
+
+		@$this->default->deref['search'] = array(
+			'desc'=>'',
+			'default'=>LDAP_DEREF_ALWAYS);
+
+		@$this->default->deref['tree'] = array(
+			'desc'=>'',
+			'default'=>LDAP_DEREF_NEVER);
+
+		@$this->default->deref['view'] = array(
+			'desc'=>'',
+			'default'=>LDAP_DEREF_NEVER);
+
+		## Debug Attributes
+		$this->default->debug['level'] = array(
+			'desc'=>'Debug level verbosity',
+			'default'=>0);
+
+		$this->default->debug['syslog'] = array(
+			'desc'=>'Whether to send debug messages to syslog',
+			'default'=>false);
+
+		$this->default->debug['file'] = array(
+			'desc'=>'Name of file to send debug output to',
+			'default'=>null);
+
+		$this->default->debug['addr'] = array(
+			'desc'=>'IP address of client to provide debugging info.',
+			'default'=>null);
+
+		$this->default->debug['append'] = array(
+			'desc'=>'Whether to append to the debug file, or create it fresh each time',
+			'default'=>true);
+
+		## Temp Directories
+		/** JPEG TMPDir
+		 * This directory must be readable and writable by your web server
+		 */
+		$this->default->jpeg['tmpdir'] = array(
+			'desc'=>'Temporary directory for jpegPhoto data',
+			'default'=>'/tmp');
+
+		## Mass update commands
+		$this->default->mass['enabled'] = array(
+			'desc'=>'Are mass update commands enabled',
+			'default'=>true);
+
+		## Modify members feature
+		/**
+		 * Search filter setting for new members. This is used to search possible members that can be added
+		 * to the group. See modify_member_form.php
+		 */
+		$this->default->modify_member['filter'] = array(
+			'desc'=>'Search filter for member searches',
+			'default'=>'(objectclass=Person)');
+
+		/**
+		 * Group attributes. When these attributes are seen in template_engine.php, add "modify group members"
+		 * link to the attribute
+		 * See template_engine.php
+		 */
+		$this->default->modify_member['groupattr'] = array(
+			'desc'=>'Group member attributes',
+			'default'=>array('member','uniqueMember','memberUid'));
+
+		/**
+		 * Attribute that is added to the group member attribute. For groupOfNames or groupOfUniqueNames this is dn,
+		 * for posixGroup it's uid. See modify_member_form.php
+		 */
+		$this->default->modify_member['attr'] = array(
+			'desc'=>'Default attribute that is added to the group member attribute',
+			'default'=>'dn');
+
+		/**
+		 * Attribute that is added to the group member attribute.
+		 * For posixGroup it's uid. See modify_member_form.php
+		 */
+		$this->default->modify_member['posixattr'] = array(
+			'desc'=>'Contents of the group member attribute',
+			'default'=>'uid');
+
+		/**
+		 * Search filter setting for new members to group. This is used to search possible members that can be added
+		 * to the posixGroup. See modify_member_form.php
+		 */
+		$this->default->modify_member['posixfilter'] = array(
+			'desc'=>'Search filter for posixmember searches',
+			'default'=>'(uid=*)');
+
+		/**
+		 * posixGroup attribute. When this attribute are seen in modify_member_form.php, only posixGroup members are shown
+		 * See modify_member_form.php
+		 */
+		$this->default->modify_member['posixgroupattr'] = array(
+			'desc'=>'posixGroup member attribute',
+			'default'=>'memberUid');
+
+		## Session Attributes
+		/** Cookie Encryption
+		 * phpLDAPadmin can encrypt the content of sensitive cookies if you set this to a big random string.
+		 */
+		$this->default->session['blowfish'] = array(
+			'desc'=>'Blowfish key to encrypt cookie details',
+			'default'=>null);
+
+		/** Cookie Time
+		 * If you used auth_type 'form' in the servers list, you can adjust how long the cookie will last
+		 * (default is 0 seconds, which expires when you close the browser)
+		 */
+		$this->default->session['cookie_time'] = array(
+			'desc'=>'Time in seconds for the life of cookies',
+			'default'=>0);
+
+		$this->default->session['http_realm'] = array(
+			'desc'=>'HTTP Authentication Realm',
+			'default'=>sprintf('%s %s',app_name(),_('login')));
+
+		$this->default->session['memorylimit'] = array(
+			'desc'=>'Set the PHP memorylimit warning threshold.',
+			'default'=>24);
+
+		$this->default->session['timelimit'] = array(
+			'desc'=>'Set the PHP timelimit.',
+			'default'=>30);
+
+		/**
+		 * Session Menu
+		 */
+		$this->default->menu['session'] = array(
+			'desc'=>'Menu items when logged in.',
+			'default'=>array(
+				'schema'=>true,
+				'search'=>true,
+				'refresh'=>true,
+				'server_info'=>true,
+				'monitor'=>true,
+				'import'=>true,
+				'export'=>true
+			));
+
+		## Password Generation
+		$this->default->password['length'] = array(
+			'desc'=>'Length of autogenerated password',
+			'default'=>8);
+
+		$this->default->password['numbers'] = array(
+			'desc'=>'Number of numbers required in the password',
+			'default'=>2);
+
+		$this->default->password['lowercase'] = array(
+			'desc'=>'Number of lowercase letters required in the password',
+			'default'=>2);
+
+		$this->default->password['uppercase'] = array(
+			'desc'=>'Number of uppercase letters required in the password',
+			'default'=>2);
+
+		$this->default->password['punctuation'] = array(
+			'desc'=>'Number of punctuation letters required in the password',
+			'default'=>2);
+
+		$this->default->password['use_similar'] = array(
+			'desc'=>'Whether to use similiar characters',
+			'default'=>true);
+
+		$this->default->password['no_random_crypt_salt'] = array(
+			'desc'=>'Disable random salt for crypt()',
+			'default'=>false);
+
+		/** Search display
+		 * By default, when searching you may display a list or a table of results.
+		 * Set this to 'table' to see table formatted results.
+		 * Set this to 'list' to see "Google" style formatted search results.
+		 */
+		$this->default->search['display'] = array(
+			'desc'=>'Display a list or table of search results',
+			'default'=>'list');
+
+		$this->default->search['size_limit'] = array(
+			'desc'=>'Limit the size of searchs on the search page',
+			'default'=>50);
+
+		/**
+		 * The list of attributes to display in each search result entry.
+		 * Note that you can add * to the list to display all attributes
+		 */
+		$this->default->search['result_attributes'] = array(
+			'desc'=>'List of attributes to display in each search result entry',
+			'default'=>array('cn','sn','uid','postalAddress','telephoneNumber'));
+
+		$this->default->search['time_limit'] = array(
+			'desc'=>'Maximum time to allow unlimited size_limit searches to the ldap server',
+			'default'=>120);
+	}
+
+	/**
+	 * Access the configuration, taking into account the defaults and the customisations
+	 */
+	private function getConfigArray($usecache=true) {
+		static $CACHE = array();
+
+		if ($usecache && count($CACHE))
+			return $CACHE;
+
+		foreach ($this->default as $key => $vals)
+			$CACHE[$key] = $vals;
+
+		foreach ($this->custom as $key => $vals)
+			foreach ($vals as $index => $val)
+				$CACHE[$key][$index]['value'] = $val;
+
+		return $CACHE;
+	}
+
+	/**
+	 * Get a configuration value.
+	 */
+	public function getValue($key,$index,$fatal=true) {
+		$config = $this->getConfigArray();
+
+		if (! isset($config[$key]))
+			if ($fatal)
+				error(sprintf('A call was made in [%s] to getValue requesting [%s] that isnt predefined.',
+					basename($_SERVER['PHP_SELF']),$key),'error',null,true);
+			else
+				return '';
+
+		if (! isset($config[$key][$index]))
+			if ($fatal)
+				error(sprintf('Requesting an index [%s] in key [%s] that isnt predefined.',$index,$key),'error',null,true);
+			else
+				return '';
+
+		return isset($config[$key][$index]['value']) ? $config[$key][$index]['value'] : $config[$key][$index]['default'];
+	}
+
+	/**
+	 * Return the untested config items
+	 */
+	public function untested() {
+		$result = array();
+
+		foreach ($this->default as $option => $details)
+			foreach ($details as $param => $values)
+				if (isset($values['untested']) && $values['untested'])
+					array_push($result,sprintf('%s.%s',$option,$param));
+
+		return $result;
+	}
+
+	/**
+	 * Function to check and warn about any unusual defined variables.
+	 */
+	public function CheckCustom() {
+		if (defined('DEBUG_ENABLED') && DEBUG_ENABLED && (($fargs=func_get_args())||$fargs='NOARGS'))
+			debug_log('Entered (%%)',3,0,__FILE__,__LINE__,__METHOD__,$fargs);
+
+		if (isset($this->custom)) {
+			foreach ($this->custom as $masterkey => $masterdetails) {
+
+				if (isset($this->default->$masterkey)) {
+
+					if (! is_array($masterdetails))
+						error(sprintf('Error in configuration file, [%s] should be an ARRAY.',$masterdetails),'error',null,true);
+
+					foreach ($masterdetails as $key => $value) {
+						# Test that the key is correct.
+						if (! in_array($key,array_keys($this->default->$masterkey)))
+							error(sprintf('Error in configuration file, [%s] has not been defined as a configurable variable.',$key),'error',null,true);
+
+						# Test if its should be an array or not.
+						if (is_array($this->default->{$masterkey}[$key]['default']) && ! is_array($value))
+							error(sprintf('Error in configuration file, %s[\'%s\'] SHOULD be an array of values.',$masterkey,$key),'error',null,true);
+
+						if (! is_array($this->default->{$masterkey}[$key]['default']) && is_array($value))
+							error(sprintf('Error in configuration file, %s[\'%s\'] should NOT be an array of values.',$masterkey,$key),'error',null,true);
+					}
+
+				} else {
+					error(sprintf('Error in configuration file, [%s] has not been defined as a MASTER configurable variable.',$masterkey),'error',null,true);
+				}
+			}
+		}
+	}
+
+	/**
+	 * Get a list of available commands.
+	 */
+	public function getCommandList() {
+		if (DEBUG_ENABLED && (($fargs=func_get_args())||$fargs='NOARGS'))
+			debug_log('Entered (%%)',3,0,__FILE__,__LINE__,__METHOD__,$fargs);
+
+		$config = $this->getConfigArray(false);
+
+		masort($config['command'],'summary');
+
+		if (isset($config['command']) && is_array($config['command']))
+			return $config['command'];
+		else
+			return array();
+	}
+
+	/**
+	 * Simple ACL to see if commands can be run
+	 */
+	public function isCommandAvailable($index='cmd') {
+		if (DEBUG_ENABLED && (($fargs=func_get_args())||$fargs='NOARGS'))
+			debug_log('Entered (%%)',3,0,__FILE__,__LINE__,__METHOD__,$fargs);
+
+		$a = func_get_args();
+		array_shift($a);
+		$a = $a[0];
+
+		# Command availability list
+		$cmd = $this->getValue('commands',$index);
+
+		if (! is_string($a) || ! isset($cmd[$a]))
+			return false;
+		else
+			return $cmd[$a];
+	}
+
+	public function configDefinition($key,$index,$config) {
+		if (defined('DEBUG_ENABLED') && DEBUG_ENABLED && (($fargs=func_get_args())||$fargs='NOARGS'))
+			debug_log('Entered (%%)',3,0,__FILE__,__LINE__,__METHOD__,$fargs);
+
+		if (! is_array($config) || ! array_key_exists('desc',$config) || ! array_key_exists('default',$config))
+			return;
+
+		if (isset($this->default->$key))
+			$definition = $this->default->$key;
+
+		$definition[$index] = $config;
+		$this->default->$key = $definition;
+	}
+
+	/**
+	 * Return the friendly attributes names
+	 */
+	private function getFriendlyAttrs() {
+		if (DEBUG_ENABLED && (($fargs=func_get_args())||$fargs='NOARGS'))
+			debug_log('Entered (%%)',3,0,__FILE__,__LINE__,__METHOD__,$fargs);
+
+		return array_change_key_case($this->getValue('appearance','friendly_attrs'));
+	}
+
+	/**
+	 * This function will return the friendly name of an attribute, if it exists.
+	 * If the friendly name doesnt exist, the attribute name will be returned.
+ 	 *
+	 * @param attribute
+	 * @return string friendly name|attribute
+	 */
+	public function getFriendlyName($attr) {
+		if (DEBUG_ENABLED && (($fargs=func_get_args())||$fargs='NOARGS'))
+			debug_log('Entered (%%)',3,0,__FILE__,__LINE__,__METHOD__,$fargs);
+
+		static $friendly_attrs;
+
+		if (! $friendly_attrs)
+			$friendly_attrs = $this->getFriendlyAttrs();
+
+		if (! is_object($attr))
+			if (isset($friendly_attrs[$attr]))
+				return $friendly_attrs[$attr];
+			else
+				return $attr;
+
+		if (isset($friendly_attrs[$attr->getName()]))
+			return $friendly_attrs[$attr->getName()];
+		else
+			return $attr->getName(false);
+	}
+
+	/**
+	 * This function will return true if a friendly name exists for an attribute.
+	 * If the friendly name doesnt exist, it will return false.
+ 	 *
+	 * @param attribute
+	 * @return boolean true|false
+	 */
+	public function haveFriendlyName($attr) {
+		if (DEBUG_ENABLED && (($fargs=func_get_args())||$fargs='NOARGS'))
+			debug_log('Entered (%%)',3,0,__FILE__,__LINE__,__METHOD__,$fargs);
+
+		return $attr->getName(false) != $this->getFriendlyName($attr);
+	}
+
+	/**
+	 * This function will return the <ancronym> html for a friendly name attribute.
+ 	 *
+	 * @param attribute
+	 * @return string html for the friendly name.
+	 */
+	public function getFriendlyHTML($attr) {
+		if (DEBUG_ENABLED && (($fargs=func_get_args())||$fargs='NOARGS'))
+			debug_log('Entered (%%)',3,0,__FILE__,__LINE__,__METHOD__,$fargs);
+
+		if ($this->haveFriendlyName($attr))
+			return sprintf('<acronym title="%s %s">%s</acronym>',
+				_('Alias for'),$attr->getName(false),$this->getFriendlyName($attr));
+		else
+			return $attr->getName(false);
+	}
+
+	public function setServers($servers) {
+		$this->servers = $servers;
+	}
+
+	public function getServer($index=null) {
+		return $this->servers->Instance($index);
+	}
+
+	/**
+	 * Return a list of our servers
+	 * @param boolean $visible - Only return visible servers
+	 */
+	public function getServerList($visible=true) {
+		if (DEBUG_ENABLED && (($fargs=func_get_args())||$fargs='NOARGS'))
+			debug_log('Entered (%%)',3,0,__FILE__,__LINE__,__METHOD__,$fargs);
+
+		return $this->servers->getServerList($visible);
+	}
+}
+?>
diff --git a/lam/templates/3rdParty/pla/lib/createlm.php b/lam/templates/3rdParty/pla/lib/createlm.php
new file mode 100644
index 00000000..3dc4bb18
--- /dev/null
+++ b/lam/templates/3rdParty/pla/lib/createlm.php
@@ -0,0 +1,381 @@
+<?php
+/*
+$Id$
+
+  This code is part of LDAP Account Manager (http://www.sourceforge.net/projects/lam)
+  Copyright (C) 2004 - 2006 Roland Gruber
+
+  This program is free software; you can redistribute it and/or modify
+  it under the terms of the GNU General Public License as published by
+  the Free Software Foundation; either version 2 of the License, or
+  (at your option) any later version.
+
+  This program is distributed in the hope that it will be useful,
+  but WITHOUT ANY WARRANTY; without even the implied warranty of
+  MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+  GNU General Public License for more details.
+
+  You should have received a copy of the GNU General Public License
+  along with this program; if not, write to the Free Software
+  Foundation, Inc., 59 Temple Place, Suite 330, Boston, MA  02111-1307  USA
+
+*/
+
+/**
+* This class provides functions to calculate Samba NT and LM hashes.
+*
+* The code is a conversion from createntlm.pl (Benjamin Kuit) and smbdes.c/md4.c (Andrew Tridgell).
+*
+* @author Roland Gruber
+* @package lam
+*/
+
+/**
+* Calculates NT and LM hashes.
+*
+* The important functions are lmhash($password) and nthash($password).
+*
+* @package lam
+*/
+class smbHash {
+
+# Contants used in lanlam hash calculations
+# Ported from SAMBA/source/libsmb/smbdes.c:perm1[56]
+private $perm1 = array(57, 49, 41, 33, 25, 17,  9,
+              1, 58, 50, 42, 34, 26, 18,
+             10,  2, 59, 51, 43, 35, 27,
+             19, 11,  3, 60, 52, 44, 36,
+             63, 55, 47, 39, 31, 23, 15,
+              7, 62, 54, 46, 38, 30, 22,
+             14,  6, 61, 53, 45, 37, 29,
+             21, 13,  5, 28, 20, 12,  4);
+# Ported from SAMBA/source/libsmb/smbdes.c:perm2[48]
+private $perm2 = array(14, 17, 11, 24,  1,  5,
+              3, 28, 15,  6, 21, 10,
+             23, 19, 12,  4, 26,  8,
+             16,  7, 27, 20, 13,  2,
+             41, 52, 31, 37, 47, 55,
+             30, 40, 51, 45, 33, 48,
+             44, 49, 39, 56, 34, 53,
+             46, 42, 50, 36, 29, 32);
+# Ported from SAMBA/source/libsmb/smbdes.c:perm3[64]
+private $perm3 = array(58, 50, 42, 34, 26, 18, 10,  2,
+             60, 52, 44, 36, 28, 20, 12,  4,
+             62, 54, 46, 38, 30, 22, 14,  6,
+             64, 56, 48, 40, 32, 24, 16,  8,
+             57, 49, 41, 33, 25, 17,  9,  1,
+             59, 51, 43, 35, 27, 19, 11,  3,
+             61, 53, 45, 37, 29, 21, 13,  5,
+             63, 55, 47, 39, 31, 23, 15,  7);
+# Ported from SAMBA/source/libsmb/smbdes.c:perm4[48]
+private $perm4 = array(32,  1,  2,  3,  4,  5,
+                 4,  5,  6,  7,  8,  9,
+                 8,  9, 10, 11, 12, 13,
+                12, 13, 14, 15, 16, 17,
+                16, 17, 18, 19, 20, 21,
+                20, 21, 22, 23, 24, 25,
+                24, 25, 26, 27, 28, 29,
+                28, 29, 30, 31, 32,  1);
+# Ported from SAMBA/source/libsmb/smbdes.c:perm5[32]
+private $perm5 = array(16,  7, 20, 21,
+                   29, 12, 28, 17,
+                    1, 15, 23, 26,
+                    5, 18, 31, 10,
+                    2,  8, 24, 14,
+                   32, 27,  3,  9,
+                   19, 13, 30,  6,
+                   22, 11,  4, 25);
+# Ported from SAMBA/source/libsmb/smbdes.c:perm6[64]
+private $perm6 = array(40,  8, 48, 16, 56, 24, 64, 32,
+             39,  7, 47, 15, 55, 23, 63, 31,
+             38,  6, 46, 14, 54, 22, 62, 30,
+             37,  5, 45, 13, 53, 21, 61, 29,
+             36,  4, 44, 12, 52, 20, 60, 28,
+             35,  3, 43, 11, 51, 19, 59, 27,
+             34,  2, 42, 10, 50, 18, 58, 26,
+             33,  1, 41,  9, 49, 17, 57, 25);
+# Ported from SAMBA/source/libsmb/smbdes.c:sc[16]
+private $sc = array(1, 1, 2, 2, 2, 2, 2, 2, 1, 2, 2, 2, 2, 2, 2, 1);
+# Ported from SAMBA/source/libsmb/smbdes.c:sbox[8][4][16]
+# Side note, I used cut and paste for all these numbers, I did NOT
+# type them all in =)
+private $sbox = array(array(array(14,  4, 13,  1,  2, 15, 11,  8,  3, 10,  6, 12,  5,  9,  0,  7),
+             array( 0, 15,  7,  4, 14,  2, 13,  1, 10,  6, 12, 11,  9,  5,  3,  8),
+             array( 4,  1, 14,  8, 13,  6,  2, 11, 15, 12,  9,  7,  3, 10,  5,  0),
+             array(15, 12,  8,  2,  4,  9,  1,  7,  5, 11,  3, 14, 10,  0,  6, 13)),
+            array(array(15,  1,  8, 14,  6, 11,  3,  4,  9,  7,  2, 13, 12,  0,  5, 10),
+             array( 3, 13,  4,  7, 15,  2,  8, 14, 12,  0,  1, 10,  6,  9, 11,  5),
+             array( 0, 14,  7, 11, 10,  4, 13,  1,  5,  8, 12,  6,  9,  3,  2, 15),
+             array(13,  8, 10,  1,  3, 15,  4,  2, 11,  6,  7, 12,  0,  5, 14,  9)),
+            array(array(10,  0,  9, 14,  6,  3, 15,  5,  1, 13, 12,  7, 11,  4,  2,  8),
+             array(13,  7,  0,  9,  3,  4,  6, 10,  2,  8,  5, 14, 12, 11, 15,  1),
+             array(13,  6,  4,  9,  8, 15,  3,  0, 11,  1,  2, 12,  5, 10, 14,  7),
+             array( 1, 10, 13,  0,  6,  9,  8,  7,  4, 15, 14,  3, 11,  5,  2, 12)),
+            array(array( 7, 13, 14,  3,  0,  6,  9, 10,  1,  2,  8,  5, 11, 12,  4, 15),
+             array(13,  8, 11,  5,  6, 15,  0,  3,  4,  7,  2, 12,  1, 10, 14,  9),
+             array(10,  6,  9,  0, 12, 11,  7, 13, 15,  1,  3, 14,  5,  2,  8,  4),
+             array( 3, 15,  0,  6, 10,  1, 13,  8,  9,  4,  5, 11, 12,  7,  2, 14)),
+            array(array( 2, 12,  4,  1,  7, 10, 11,  6,  8,  5,  3, 15, 13,  0, 14,  9),
+             array(14, 11,  2, 12,  4,  7, 13,  1,  5,  0, 15, 10,  3,  9,  8,  6),
+             array( 4,  2,  1, 11, 10, 13,  7,  8, 15,  9, 12,  5,  6,  3,  0, 14),
+             array(11,  8, 12,  7,  1, 14,  2, 13,  6, 15,  0,  9, 10,  4,  5,  3)),
+            array(array(12,  1, 10, 15,  9,  2,  6,  8,  0, 13,  3,  4, 14,  7,  5, 11),
+             array(10, 15,  4,  2,  7, 12,  9,  5,  6,  1, 13, 14,  0, 11,  3,  8),
+             array( 9, 14, 15,  5,  2,  8, 12,  3,  7,  0,  4, 10,  1, 13, 11,  6),
+             array( 4,  3,  2, 12,  9,  5, 15, 10, 11, 14,  1,  7,  6,  0,  8, 13)),
+            array(array( 4, 11,  2, 14, 15,  0,  8, 13,  3, 12,  9,  7,  5, 10,  6,  1),
+             array(13,  0, 11,  7,  4,  9,  1, 10, 14,  3,  5, 12,  2, 15,  8,  6),
+             array( 1,  4, 11, 13, 12,  3,  7, 14, 10, 15,  6,  8,  0,  5,  9,  2),
+             array( 6, 11, 13,  8,  1,  4, 10,  7,  9,  5,  0, 15, 14,  2,  3, 12)),
+            array(array(13,  2,  8,  4,  6, 15, 11,  1, 10,  9,  3, 14,  5,  0, 12,  7),
+             array( 1, 15, 13,  8, 10,  3,  7,  4, 12,  5,  6, 11,  0, 14,  9,  2),
+             array( 7, 11,  4,  1,  9, 12, 14,  2,  0,  6, 10, 13, 15,  3,  5,  8),
+             array( 2,  1, 14,  7,  4, 10,  8, 13, 15, 12,  9,  0,  3,  5,  6, 11)));
+
+	/**
+	* Fixes too large numbers
+	*/
+	private function x($i) {
+		if ($i < 0) return 4294967296 - $i;
+		else return $i;
+	}
+
+	/**
+	* @param integer count
+	* @param array $data
+	* @return array
+	*/
+	private function lshift($count, $data) {
+		$ret = array();
+		for ($i = 0; $i < sizeof($data); $i++) {
+			$ret[$i] = $data[($i + $count)%sizeof($data)];
+		}
+		return $ret;
+	}
+
+	/**
+	* @param array in input data
+	* @param array p permutation
+	* @return array
+	*/
+	private function permute($in, $p, $n) {
+		$ret = array();
+		for ($i = 0; $i < $n; $i++) {
+			$ret[$i] = $in[$p[$i] - 1]?1:0;
+		}
+		return $ret;
+	}
+
+	/**
+	* @param array $in1
+	* @param array $in2
+	* @return array
+	*/
+	private function mxor($in1, $in2) {
+		$ret = array();
+		for ($i = 0; $i < sizeof($in1); $i++) {
+			$ret[$i] = $in1[$i] ^ $in2[$i];
+		}
+		return $ret;
+	}
+
+	/**
+	* @param array $in
+	* @param array $key
+	* @param boolean $forw
+	* @return array
+	*/
+	function doHash($in, $key, $forw) {
+		$ki = array();
+	
+		$pk1 = $this->permute($key, $this->perm1, 56);
+		
+		$c = array();
+		$d = array();
+		for ($i = 0; $i < 28; $i++) {
+			$c[$i] = $pk1[$i];
+			$d[$i] = $pk1[28 + $i];
+		}
+		
+		for ($i = 0; $i < 16; $i++) {
+			$c = $this->lshift($this->sc[$i], $c);
+			$d = $this->lshift($this->sc[$i], $d);
+			
+			$cd = $c;
+			for ($k = 0; $k < sizeof($d); $k++) $cd[] = $d[$k];
+			$ki[$i] = $this->permute($cd, $this->perm2, 48);
+		}
+		
+		$pd1 = $this->permute($in, $this->perm3, 64);
+		
+		$l = array();
+		$r = array();
+		for ($i = 0; $i < 32; $i++) {
+			$l[$i] = $pd1[$i];
+			$r[$i] = $pd1[32 + $i];
+		}
+		
+		for ($i = 0; $i < 16; $i++) {
+			$er = $this->permute($r, $this->perm4, 48);
+			if ($forw) $erk = $this->mxor($er, $ki[$i]);
+			else $erk = $this->mxor($er, $ki[15 - $i]);
+			
+			for ($j = 0; $j < 8; $j++) {
+				for ($k = 0; $k < 6; $k++) {
+					$b[$j][$k] = $erk[($j * 6) + $k];
+				}
+			}
+			for ($j = 0; $j < 8; $j++) {
+				$m = array();
+				$n = array();
+				$m = ($b[$j][0] << 1) | $b[$j][5];
+				$n = ($b[$j][1] << 3) | ($b[$j][2] << 2) | ($b[$j][3] << 1) | $b[$j][4];
+				
+				for ($k = 0; $k < 4; $k++) {
+					$b[$j][$k]=($this->sbox[$j][$m][$n] & (1 << (3-$k)))?1:0;
+				}
+			}
+			
+			for ($j = 0; $j < 8; $j++) {
+				for ($k = 0; $k < 4; $k++) {
+					$cb[($j * 4) + $k] = $b[$j][$k];
+				}
+			}
+			$pcb = $this->permute($cb, $this->perm5, 32);
+			$r2 = $this->mxor($l, $pcb);
+			for ($k = 0; $k < 32; $k++) $l[$k] = $r[$k];
+			for ($k = 0; $k < 32; $k++) $r[$k] = $r2[$k];
+		}
+		$rl = $r;
+		for ($i = 0; $i < sizeof($l); $i++) $rl[] = $l[$i];
+		return $this->permute($rl, $this->perm6, 64);
+	}
+
+	/**
+	 * str_to_key
+	 *
+	 * @param string $str
+	 * @return string key
+	 */
+	private function str_to_key($str) {
+		$key[0] = $this->unsigned_shift_r($str[0], 1);
+		$key[1] = (($str[0]&0x01)<<6) | $this->unsigned_shift_r($str[1], 2);
+		$key[2] = (($str[1]&0x03)<<5) | $this->unsigned_shift_r($str[2], 3);
+		$key[3] = (($str[2]&0x07)<<4) | $this->unsigned_shift_r($str[3], 4);
+		$key[4] = (($str[3]&0x0F)<<3) | $this->unsigned_shift_r($str[4], 5);
+		$key[5] = (($str[4]&0x1F)<<2) | $this->unsigned_shift_r($str[5], 6);
+		$key[6] = (($str[5]&0x3F)<<1) | $this->unsigned_shift_r($str[6], 7);
+		$key[7] = $str[6]&0x7F;
+		for ($i = 0; $i < 8; $i++) {
+			$key[$i] = ($key[$i] << 1);
+		}
+		return $key;
+	}
+
+	/**
+	 * smb_hash
+	 *
+	 * @param unknown_type $in
+	 * @param unknown_type $key
+	 * @param unknown_type $forw
+	 * @return unknown
+	 */
+	private function smb_hash($in, $key, $forw){
+		$key2 = $this->str_to_key($key);
+	
+		for ($i = 0; $i < 64; $i++) {
+			$inb[$i] = ($in[$i/8] & (1<<(7-($i%8)))) ? 1:0;
+			$keyb[$i] = ($key2[$i/8] & (1<<(7-($i%8)))) ? 1:0;
+			$outb[$i] = 0;
+		}
+		$outb = $this->doHash($inb, $keyb, $forw);
+		for ($i = 0; $i < 8; $i++) {
+			$out[$i] = 0;
+		}
+		for ($i = 0; $i < 64; $i++) {
+			if ( $outb[$i] )  {
+				$out[$i/8] |= (1<<(7-($i%8)));
+			}
+		}
+		return $out;
+	}
+
+	/**
+	 * E_P16
+	 *
+	 * @param unknown_type $in
+	 * @return unknown
+	 */
+	private function E_P16($in) {
+		$p14 = array_values(unpack("C*",$in));
+		$sp8 = array(0x4b, 0x47, 0x53, 0x21, 0x40, 0x23, 0x24, 0x25);
+		$p14_1 = array();
+		$p14_2 = array();
+		for ($i = 0; $i < 7; $i++) {
+			$p14_1[$i] = $p14[$i];
+			$p14_2[$i] = $p14[$i + 7];
+		}
+		$p16_1 = $this->smb_hash($sp8, $p14_1, true);
+		$p16_2 = $this->smb_hash($sp8, $p14_2, true);
+		$p16 = $p16_1;
+		for ($i = 0; $i < sizeof($p16_2); $i++) {
+			$p16[] = $p16_2[$i];
+		}
+		return $p16;
+	}
+
+	/**
+	* Calculates the LM hash of a given password.
+	*
+	* @param string $password password
+	* @return string hash value
+	*/
+	public function lmhash($password = "") {
+		$password = strtoupper($password);
+		$password = substr($password,0,14);
+		$password = str_pad($password, 14, chr(0));
+		$p16 = $this->E_P16($password);
+		for ($i = 0; $i < sizeof($p16); $i++) {
+			$p16[$i] = sprintf("%02X", $p16[$i]);
+		}
+		return join("", $p16);
+	}
+
+	/**
+	* Calculates the NT hash of a given password.
+	*
+	* @param string $password password
+	* @return string hash value
+	*/
+	public function nthash($password = "") {
+		if (function_exists('mhash'))
+			if (defined('MHASH_MD4'))
+				return strtoupper(bin2hex(mhash(MHASH_MD4,iconv('UTF-8','UTF-16LE',$password))));
+			else
+				return strtoupper(hash('md4', iconv("UTF-8","UTF-16LE",$password)));
+		else
+			error(_('Your PHP install does not have the mhash() function. Cannot do hashes.'),'error','index.php');
+	}
+
+	/**
+	* Unsigned shift operation for 32bit values.
+	*
+	* PHP 4 only supports signed shifts by default.
+	*/
+	private function unsigned_shift_r($a, $b) { 
+		$z = 0x80000000; 
+		if ($z & $a) { 
+			$a = ($a >> 1); 
+			$a &= (~$z); 
+			$a |= 0x40000000; 
+			$a = ($a >> ($b - 1)); 
+		} 
+		else { 
+			$a = ($a >> $b); 
+		} 
+		return $a; 
+	} 
+
+}
+
+?>
diff --git a/lam/templates/3rdParty/pla/lib/ds.php b/lam/templates/3rdParty/pla/lib/ds.php
new file mode 100644
index 00000000..d5f0e041
--- /dev/null
+++ b/lam/templates/3rdParty/pla/lib/ds.php
@@ -0,0 +1,726 @@
+<?php
+/**
+ * Classes and functions for communication of Data Stores
+ *
+ * @author The phpLDAPadmin development team
+ * @package phpLDAPadmin
+ */
+
+/**
+ * This abstract class provides the basic variables and methods.
+ *
+ * @package phpLDAPadmin
+ * @subpackage DataStore
+ */
+abstract class DS {
+	# ID of this db.
+	protected $index;
+
+	# Configuration paramters.
+	protected $default;
+	protected $custom;
+	protected $type;
+
+	abstract function __construct($index);
+
+	/**
+	 * This will make the connection to the datasource
+	 */
+	abstract protected function connect($method,$debug=false);
+
+	/**
+	 * Login to the datastore
+	 *  method: default = anon, connect to ds using bind_id not auth_id.
+	 *  method: 'user', connect with auth_id
+	 *  method: '<freetext>', any custom extra connection to ds.
+	 */
+	abstract public function login($user=null,$pass=null,$method=null);
+
+	/**
+	 * Query the datasource
+	 */
+	abstract public function query($query,$method,$index=null,$debug=false);
+
+	/**
+	 * Return error details from previous operation
+	 */
+	abstract protected function getErrorMessage();
+	abstract protected function getErrorNum();
+
+	/**
+	 * Functions that set and verify object configuration details
+	 */
+	public function setDefaults($defaults) {
+		foreach ($defaults as $key => $details)
+			foreach ($details as $setting => $value)
+				$this->default->{$key}[$setting] = $value;
+	}
+
+	public function isDefaultKey($key) {
+		return isset($this->default->$key);
+	}
+
+	public function isDefaultSetting($key,$setting) {
+		return array_key_exists($setting,$this->default->{$key});
+	}
+
+	/**
+	 * Return a configuration value
+	 */
+	public function getValue($key,$setting,$fatal=true) {
+		if (defined('DEBUG_ENABLED') && DEBUG_ENABLED && (($fargs=func_get_args())||$fargs='NOARGS'))
+			debug_log('Entered (%%)',17,1,__FILE__,__LINE__,__METHOD__,$fargs);
+
+		if (isset($this->custom->{$key}[$setting]))
+			return $this->custom->{$key}[$setting];
+
+		elseif (isset($this->default->{$key}[$setting]) && array_key_exists('default',$this->default->{$key}[$setting]))
+			return $this->default->{$key}[$setting]['default'];
+
+		elseif ($fatal)
+			debug_dump_backtrace("Error trying to get a non-existant value ($key,$setting)",1);
+
+		else
+			return null;
+	}
+
+	/**
+	 * Set a configuration value
+	 */
+	public function setValue($key,$setting,$value) {
+		if (isset($this->custom->{$key}[$setting]))
+			system_message(array(
+				'title'=>_('Configuration setting already defined.'),
+				'body'=>sprintf('A call has been made to reset a configuration value (%s,%s,%s)',
+					$key,$setting,$value),
+				'type'=>'info'));
+
+		$this->custom->{$key}[$setting] = $value;
+	}
+
+	/**
+	 * Return the untested config items
+	 */
+	public function untested() {
+		$result = array();
+
+		foreach ($this->default as $option => $details)
+			foreach ($details as $param => $values)
+				if (isset($values['untested']) && $values['untested'])
+					array_push($result,sprintf('%s.%s',$option,$param));
+
+		return $result;
+	}
+
+	/**
+	 * Get the name of this datastore
+	 */
+	public function getName() {
+		if (DEBUG_ENABLED && (($fargs=func_get_args())||$fargs='NOARGS'))
+			debug_log('Entered (%%)',17,0,__FILE__,__LINE__,__METHOD__,$fargs);
+
+		return $this->getValue('server','name');
+	}
+
+	/**
+	 * Functions that enable login and logout of the application
+	 */
+	/**
+	 * Return the authentication type for this object
+	 */
+	public function getAuthType() {
+		if (DEBUG_ENABLED && (($fargs=func_get_args())||$fargs='NOARGS'))
+			debug_log('Entered (%%)',17,0,__FILE__,__LINE__,__METHOD__,$fargs);
+
+		switch ($this->getValue('login','auth_type')) {
+			case 'cookie':
+			case 'config':
+			case 'http':
+			case 'proxy':
+			case 'session':
+			case 'sasl':
+				return $this->getValue('login','auth_type');
+
+			default:
+				die(sprintf('Error: <b>%s</b> hasnt been configured for auth_type <b>%s</b>',__METHOD__,
+					$this->getValue('login','auth_type')));
+		}
+	}
+
+	/**
+	 * Get the login name of the user logged into this datastore's connection method
+	 * If this returns null, we are not logged in.
+	 * If this returns '', we are logged in with anonymous
+	 */
+	public function getLogin($method=null) {
+		if (DEBUG_ENABLED && (($fargs=func_get_args())||$fargs='NOARGS'))
+			debug_log('Entered (%%)',17,0,__FILE__,__LINE__,__METHOD__,$fargs);
+
+		$method = $this->getMethod($method);
+
+		# For anonymous binds
+		if ($method == 'anon')
+			if (isset($_SESSION['USER'][$this->index][$method]['name']))
+				return '';
+			else
+				return null;
+
+		switch ($this->getAuthType()) {
+			case 'cookie':
+				if (! isset($_COOKIE[$method.'-USER']))
+					# If our bind_id is set, we'll pass that back for logins.
+					return (! is_null($this->getValue('login','bind_id')) && $method == 'login') ? $this->getValue('login','bind_id') : null;
+				else
+					return blowfish_decrypt($_COOKIE[$method.'-USER']);
+
+			case 'config':
+				if (! isset($_SESSION['USER'][$this->index][$method]['name']))
+					return $this->getValue('login','bind_id');
+				else
+					return blowfish_decrypt($_SESSION['USER'][$this->index][$method]['name']);
+
+			case 'proxy':
+				if (! isset($_SESSION['USER'][$this->index][$method]['proxy']))
+					return $this->getValue('login','bind_id');
+				else
+					return blowfish_decrypt($_SESSION['USER'][$this->index][$method]['proxy']);
+
+			case 'http':
+			case 'session':
+			case 'sasl':
+				if (! isset($_SESSION['USER'][$this->index][$method]['name']))
+					# If our bind_id is set, we'll pass that back for logins.
+					return (! is_null($this->getValue('login','bind_id')) && $method == 'login') ? $this->getValue('login','bind_id') : null;
+				else
+					return blowfish_decrypt($_SESSION['USER'][$this->index][$method]['name']);
+
+			default:
+				die(sprintf('Error: %s hasnt been configured for auth_type %s',__METHOD__,$this->getAuthType()));
+		}
+	}
+
+	/**
+	 * Set the login details of the user logged into this datastore's connection method
+	 */
+	protected function setLogin($user,$pass,$method=null) {
+		if (DEBUG_ENABLED && (($fargs=func_get_args())||$fargs='NOARGS'))
+			debug_log('Entered (%%)',17,0,__FILE__,__LINE__,__METHOD__,$fargs);
+
+		$method = $this->getMethod($method);
+
+		switch ($this->getAuthType()) {
+			case 'cookie':
+				set_cookie($method.'-USER',blowfish_encrypt($user),NULL,'/');
+				set_cookie($method.'-PASS',blowfish_encrypt($pass),NULL,'/');
+				return true;
+
+			case 'config':
+				return true;
+
+			case 'proxy':
+				if (isset($_SESSION['USER'][$this->index][$method]['proxy']))
+					unset($_SESSION['USER'][$this->index][$method]['proxy']);
+
+			case 'http':
+			case 'session':
+			case 'sasl':
+				$_SESSION['USER'][$this->index][$method]['name'] = blowfish_encrypt($user);
+				$_SESSION['USER'][$this->index][$method]['pass'] = blowfish_encrypt($pass);
+
+				return true;
+
+			default:
+				die(sprintf('Error: %s hasnt been configured for auth_type %s',__METHOD__,$this->getAuthType()));
+		}
+	}
+
+	/**
+	 * Get the login password of the user logged into this datastore's connection method
+	 */
+	protected function getPassword($method=null) {
+		if (DEBUG_ENABLED && (($fargs=func_get_args())||$fargs='NOARGS'))
+			debug_log('Entered (%%)',17,0,__FILE__,__LINE__,__METHOD__,$fargs);
+
+		$method = $this->getMethod($method);
+
+		# For anonymous binds
+		if ($method == 'anon')
+			if (isset($_SESSION['USER'][$this->index][$method]['name']))
+				return '';
+			else
+				return null;
+
+		switch ($this->getAuthType()) {
+			case 'cookie':
+				if (! isset($_COOKIE[$method.'-PASS']))
+					# If our bind_id is set, we'll pass that back for logins.
+					return (! is_null($this->getValue('login','bind_pass')) && $method == 'login') ? $this->getValue('login','bind_pass') : null;
+				else
+					return blowfish_decrypt($_COOKIE[$method.'-PASS']);
+
+			case 'config':
+			case 'proxy':
+				if (! isset($_SESSION['USER'][$this->index][$method]['pass']))
+					return $this->getValue('login','bind_pass');
+				else
+					return blowfish_decrypt($_SESSION['USER'][$this->index][$method]['pass']);
+
+			case 'http':
+			case 'session':
+			case 'sasl':
+				if (! isset($_SESSION['USER'][$this->index][$method]['pass']))
+					# If our bind_pass is set, we'll pass that back for logins.
+					return (! is_null($this->getValue('login','bind_pass')) && $method == 'login') ? $this->getValue('login','bind_pass') : null;
+				else
+					return blowfish_decrypt($_SESSION['USER'][$this->index][$method]['pass']);
+
+			default:
+				die(sprintf('Error: %s hasnt been configured for auth_type %s',__METHOD__,$this->getAuthType()));
+		}
+	}
+
+	/**
+	 * Return if this datastore's connection method has been logged into
+	 */
+	public function isLoggedIn($method=null) {
+		if (DEBUG_ENABLED && (($fargs=func_get_args())||$fargs='NOARGS'))
+			debug_log('Entered (%%)',17,0,__FILE__,__LINE__,__METHOD__,$fargs);
+
+		static $CACHE = array();
+
+		$method = $this->getMethod($method);
+
+		if (isset($CACHE[$this->index][$method]) && ! is_null($CACHE[$this->index][$method]))
+			return $CACHE[$this->index][$method];
+
+		$CACHE[$this->index][$method] = null;
+
+		# For some authentication types, we need to do the login here
+		switch ($this->getAuthType()) {
+			case 'config':
+				if (! $CACHE[$this->index][$method] = $this->login($this->getLogin($method),$this->getPassword($method),$method))
+					system_message(array(
+						'title'=>_('Unable to login.'),
+						'body'=>_('Your configuration file has authentication set to CONFIG based authentication, however, the userid/password failed to login'),
+						'type'=>'error'));
+
+				break;
+
+			case 'http':
+				# If our auth vars are not set, throw up a login box.
+				if (! isset($_SERVER['PHP_AUTH_USER'])) {
+					# If this server is not in focus, skip the basic auth prompt.
+					if (get_request('server_id','REQUEST') != $this->getIndex()) {
+						$CACHE[$this->index][$method] = false;
+						break;
+					}
+
+					header(sprintf('WWW-Authenticate: Basic realm="%s %s"',app_name(),_('login')));
+
+					if ($_SERVER['SERVER_PROTOCOL'] == 'HTTP/1.0')
+						header('HTTP/1.0 401 Unauthorized'); // http 1.0 method
+					else
+						header('Status: 401 Unauthorized'); // http 1.1 method
+
+					# If we still dont have login details...
+					if (! isset($_SERVER['PHP_AUTH_USER'])) {
+						system_message(array(
+							'title'=>_('Unable to login.'),
+							'body'=>_('Your configuration file has authentication set to HTTP based authentication, however, there was none presented'),
+							'type'=>'error'));
+
+						$CACHE[$this->index][$method] = false;
+					}
+
+				# Check our auth vars are valid.
+				} else {
+					if (! $this->login($_SERVER['PHP_AUTH_USER'],$_SERVER['PHP_AUTH_PW'],$method)) {
+						system_message(array(
+							'title'=>_('Unable to login.'),
+							'body'=>_('Your HTTP based authentication is not accepted by the LDAP server'),
+							'type'=>'error'));
+
+						$CACHE[$this->index][$method] = false;
+
+					} else
+						$CACHE[$this->index][$method] = true;
+				}
+
+				break;
+
+			case 'proxy':
+				$CACHE[$this->index][$method] = $this->login($this->getValue('login','bind_id'),$this->getValue('login','bind_pass'),$method);
+
+				break;
+
+			case 'sasl':
+				# Propogate any given Kerberos credential cache location
+				if (isset($_ENV['REDIRECT_KRB5CCNAME']))
+					putenv(sprintf('KRB5CCNAME=%s',$_ENV['REDIRECT_KRB5CCNAME']));
+				elseif (isset($_SERVER['KRB5CCNAME']))
+					putenv(sprintf('KRB5CCNAME=%s',$_SERVER['KRB5CCNAME']));
+
+				# Map the SASL auth ID to a DN
+				$regex = $this->getValue('login', 'sasl_dn_regex');
+				$replacement = $this->getValue('login', 'sasl_dn_replacement');
+
+				if ($regex && $replacement) {
+					$userDN = preg_replace($regex, $replacement, $_SERVER['REMOTE_USER']);
+
+					$CACHE[$this->index][$method] = $this->login($userDN, '', $method);
+				}
+				# Otherwise, use the user name as is
+				else {
+					$CACHE[$this->index][$method] = $this->login($_SERVER['REMOTE_USER'], '', $method);
+				}
+
+				break;
+
+			default:
+				$CACHE[$this->index][$method] = is_null($this->getLogin($method)) ? false : true;
+		}
+
+		return $CACHE[$this->index][$method];
+	}
+
+	/**
+	 * Logout of this datastore's connection method
+	 */
+	public function logout($method=null) {
+		if (DEBUG_ENABLED && (($fargs=func_get_args())||$fargs='NOARGS'))
+			debug_log('Entered (%%)',17,0,__FILE__,__LINE__,__METHOD__,$fargs);
+
+		$method = $this->getMethod($method);
+
+		unset ($_SESSION['cache'][$this->index]);
+
+		switch ($this->getAuthType()) {
+			case 'cookie':
+				set_cookie($method.'-USER','',time()-3600,'/');
+				set_cookie($method.'-PASS','',time()-3600,'/');
+
+			case 'config':
+				return true;
+
+			case 'http':
+			case 'proxy':
+			case 'session':
+			case 'sasl':
+				if (isset($_SESSION['USER'][$this->index][$method]))
+					unset($_SESSION['USER'][$this->index][$method]);
+
+				return true;
+
+			default:
+				die(sprintf('Error: %s hasnt been configured for auth_type %s',__METHOD__,$this->getAuthType()));
+		}
+	}
+
+	/**
+	 * Functions that return the condition of the datasource
+	 */
+	public function isVisible() {
+		if (DEBUG_ENABLED && (($fargs=func_get_args())||$fargs='NOARGS'))
+			debug_log('Entered (%%)',17,0,__FILE__,__LINE__,__METHOD__,$fargs);
+
+		return $this->getValue('server','visible');
+	}
+
+	public function isReadOnly() {
+		if (DEBUG_ENABLED && (($fargs=func_get_args())||$fargs='NOARGS'))
+			debug_log('Entered (%%)',17,0,__FILE__,__LINE__,__METHOD__,$fargs);
+
+		if (! trim($this->getLogin(null)) && $_SESSION[APPCONFIG]->getValue('appearance','anonymous_bind_implies_read_only'))
+			return true;
+		else
+			return $this->getValue('server','read_only');
+	}
+
+	public function getIndex() {
+		if (defined('DEBUG_ENABLED') && DEBUG_ENABLED && (($fargs=func_get_args())||$fargs='NOARGS'))
+			debug_log('Entered (%%)',17,1,__FILE__,__LINE__,__METHOD__,$fargs,$this->index);
+
+		return $this->index;
+	}
+
+	/** 
+	 * Work out which connection method to use.
+	 * If a method is passed, then it will be passed back. If no method is passed, then we'll
+	 * check to see if the user is logged in. If they are, then 'user' is used, otherwise
+	 * 'anon' is used.
+	 *
+	 * @param int Server ID
+	 * @return string Connection Method
+	 */
+	protected function getMethod($method=null) {
+		if (DEBUG_ENABLED && (($fargs=func_get_args())||$fargs='NOARGS'))
+			debug_log('Entered (%%)',17,0,__FILE__,__LINE__,__METHOD__,$fargs);
+
+		static $CACHE = array();
+
+		# Immediately return if method is set.
+		if (! is_null($method))
+			return $method;
+
+		# If we have been here already, then return our result
+		if (isset($CACHE[$this->index]) && ! is_null($CACHE))
+			return $CACHE[$this->index];
+
+		$CACHE[$this->index] = 'anon';
+
+		if ($this->isLoggedIn('user'))
+			$CACHE[$this->index] = 'user';
+
+		return $CACHE[$this->index];
+	}
+
+	/**
+	 * This method should be overridden in application specific ds files
+	 */
+	public function isSessionValid() {
+		if (DEBUG_ENABLED && (($fargs=func_get_args())||$fargs='NOARGS'))
+			debug_log('Entered (%%)',17,1,__FILE__,__LINE__,__METHOD__,$fargs,true);
+
+		return true;
+	}
+
+	/**
+	 * Return the time left in seconds until this connection times out. If there is not timeout,
+	 * this function will return null.
+	 */
+	public function inactivityTime() {
+		if (DEBUG_ENABLED && (($fargs=func_get_args())||$fargs='NOARGS'))
+			debug_log('Entered (%%)',17,0,__FILE__,__LINE__,__METHOD__,$fargs);
+
+		if ($this->isLoggedIn() && ! in_array($this->getAuthType(),array('config','http')))
+			return time()+($this->getValue('login','timeout')*60);
+		else
+			return null;
+	}
+}
+
+/**
+ * The list of database sources
+ *
+ * @package phpLDAPadmin
+ * @subpackage DataStore
+ */
+class Datastore {
+	# Out DS index id
+	private $index;
+	# List of all the objects
+	private $objects = array();
+	# Default settings
+	private $default;
+
+	public function __construct() {
+		$this->default = new StdClass;
+
+		$this->default->server['id'] = array(
+			'desc'=>'Server ID',
+			'default'=>null);
+
+		$this->default->server['name'] = array(
+			'desc'=>'Server name',
+			'default'=>null);
+
+		# Connectivity Info
+		$this->default->server['host'] = array(
+			'desc'=>'Host Name',
+			'default'=>'127.0.0.1');
+
+		$this->default->server['port'] = array(
+			'desc'=>'Port Number',
+			'default'=>null);
+
+		# Read or write only access
+		$this->default->server['read_only'] = array(
+			'desc'=>'Server is in READ ONLY mode',
+			'default'=>false);
+
+		$this->default->server['visible'] = array(
+			'desc'=>'Whether this server is visible',
+			'default'=>true);
+
+		# Authentication Information
+		$this->default->login['auth_type'] = array(
+			'desc'=>'Authentication Type',
+			'default'=>'session');
+
+/*
+		/* ID to login to this application, this assumes that there is
+		 * application authentication on top of authentication required to
+		 * access the data source **
+		$this->default->login['auth_id'] = array(
+			'desc'=>'User Login ID to login to this DS',
+			'untested'=>true,
+			'default'=>null);
+
+		$this->default->login['auth_pass'] = array(
+			'desc'=>'User Login Password to login to this DS',
+			'untested'=>true,
+			'default'=>null);
+*/
+
+		$this->default->login['auth_text'] = array(
+			'desc'=>'Text to show at the login prompt',
+			'default'=>null);
+
+		$this->default->login['bind_id'] = array(
+			'desc'=>'User Login ID to bind to this DS',
+			'default'=>null);
+
+		$this->default->login['bind_pass'] = array(
+			'desc'=>'User Login Password to bind to this DS',
+			'default'=>null);
+
+		$this->default->login['timeout'] = array(
+			'desc'=>'Session timout in seconds',
+			'default'=>session_cache_expire()-1);
+
+		$this->default->login['sasl_dn_regex'] = array(
+			'desc'=>'SASL authorization id to user dn PCRE regular expression',
+			'untested'=>true,
+			'default'=>null);
+
+		$this->default->login['sasl_dn_replacement'] = array(
+			'desc'=>'SASL authorization id to user dn PCRE regular expression replacement string',
+			'untested'=>true,
+			'default'=>null);
+
+		# Prefix for custom pages
+		$this->default->custom['pages_prefix'] = array(
+			'desc'=>'Prefix name for custom pages',
+			'default'=>'custom_');
+	}
+
+	/**
+	 * Create a new database object
+	 */
+	public function newServer($type) {
+		if (class_exists($type)) {
+			$this->index = count($this->objects)+1;
+			$this->objects[$this->index] = new $type($this->index);
+			$this->objects[$this->index]->setDefaults($this->default);
+			return $this->index;
+
+		} else {
+			printf('ERROR: Class [%s] doesnt exist',$type);
+			die();
+		}
+	}
+
+	/**
+	 * Set values for a database object.
+	 */
+	public function setValue($key,$setting,$value) {
+		if (! $this->objects[$this->index]->isDefaultKey($key))
+			error("ERROR: Setting a key [$key] that isnt predefined.",'error',true);
+
+		if (! $this->objects[$this->index]->isDefaultSetting($key,$setting))
+			error("ERROR: Setting a index [$key,$setting] that isnt predefined.",'error',true);
+
+		# Test if its should be an array or not.
+		if (is_array($this->objects[$this->index]->getValue($key,$setting)) && ! is_array($value))
+			error("Error in configuration file, {$key}['$setting'] SHOULD be an array of values.",'error',true);
+
+		if (! is_array($this->objects[$this->index]->getValue($key,$setting)) && is_array($value))
+			error("Error in configuration file, {$key}['$setting'] should NOT be an array of values.",'error',true);
+
+		# Store the value in the object.
+		$this->objects[$this->index]->setValue($key,$setting,$value);
+	}
+
+	/**
+	 * Get a list of all the configured servers.
+	 *
+	 * @param boolean Only show visible servers.
+	 * @return array list of all configured servers.
+	 */
+	public function getServerList($isVisible=true) {
+		if (defined('DEBUG_ENABLED') && DEBUG_ENABLED && (($fargs=func_get_args())||$fargs='NOARGS'))
+			debug_log('Entered (%%)',17,0,__FILE__,__LINE__,__METHOD__,$fargs);
+
+		static $CACHE;
+
+		if (isset($CACHE[$isVisible]))
+			return $CACHE[$isVisible];
+
+		$CACHE[$isVisible] = array();
+
+		# Debugging incase objects is not set.
+		if (! $this->objects) {
+			print "<PRE>";
+			debug_print_backtrace();
+			die();
+		}
+
+		foreach ($this->objects as $id => $server)
+			if (! $isVisible || ($isVisible && $server->getValue('server','visible')))
+				$CACHE[$isVisible][$id] = $server;
+
+		masort($CACHE[$isVisible],'name');
+
+		return $CACHE[$isVisible];
+	}
+
+	/**
+	 * Return an object Instance of a configured database.
+	 *
+	 * @param int Index
+	 * @return object Datastore instance object.
+	 */
+	public function Instance($index=null) {
+		if (defined('DEBUG_ENABLED') && DEBUG_ENABLED && (($fargs=func_get_args())||$fargs='NOARGS'))
+			debug_log('Entered (%%)',17,0,__FILE__,__LINE__,__METHOD__,$fargs);
+
+		# If no index defined, then pick the lowest one.
+		if (is_null($index) || ! trim($index) || ! is_numeric($index))
+			$index = min($this->GetServerList())->getIndex();
+
+		if (! isset($this->objects[$index]))
+			debug_dump_backtrace(sprintf('Error: Datastore instance [%s] doesnt exist?',htmlspecialchars($index)),1);
+
+		if (defined('DEBUG_ENABLED') && DEBUG_ENABLED)
+			debug_log('Returning instance of database (%s)',3,0,__FILE__,__LINE__,__METHOD__,$index);
+
+		return $this->objects[$index];
+	}
+
+	/**
+	 * Return an object Instance of a configured database.
+	 *
+	 * @param string Name of the instance to retrieve
+	 * @return object Datastore instance object.
+	 */
+	public function InstanceName($name=null) {
+		if (DEBUG_ENABLED && (($fargs=func_get_args())||$fargs='NOARGS'))
+			debug_log('Entered (%%)',17,0,__FILE__,__LINE__,__METHOD__,$fargs);
+
+		foreach ($this->getServerList(false) as $index)
+			if ($this->objects[$index]->getName() == $name)
+				return $this->objects[$index];
+
+		# If we get here, then no object with the name exists.
+		return null;
+	}
+
+	/**
+	 * Return an object Instance of a configured database.
+	 *
+	 * @param string ID of the instance to retrieve
+	 * @return object Datastore instance object.
+	 */
+	public function InstanceId($id=null) {
+		if (DEBUG_ENABLED && (($fargs=func_get_args())||$fargs='NOARGS'))
+			debug_log('Entered (%%)',17,0,__FILE__,__LINE__,__METHOD__,$fargs);
+
+		foreach ($this->getServerList(false) as $index)
+			if ($this->objects[$index->getIndex()]->getValue('server','id') == $id)
+				return $this->objects[$index->getIndex()];
+
+		# If we get here, then no object with the name exists.
+		return null;
+	}
+}
+?>
diff --git a/lam/templates/3rdParty/pla/lib/ds_ldap_pla.php b/lam/templates/3rdParty/pla/lib/ds_ldap_pla.php
new file mode 100644
index 00000000..e84f56c8
--- /dev/null
+++ b/lam/templates/3rdParty/pla/lib/ds_ldap_pla.php
@@ -0,0 +1,653 @@
+<?php
+/**
+ * Classes and functions for communication of Data Stores
+ *
+ * @author The phpLDAPadmin development team
+ * @package phpLDAPadmin
+ */
+
+/**
+ * This abstract class provides variables and methods for LDAP datastores for use by PLA.
+ *
+ * @package phpLDAPadmin
+ * @subpackage DataStore
+ */
+class ldap_pla extends myldap {
+	# Attributes that should be treated as MAY attributes, even though the scheme has them as MUST attributes.
+	private $force_may = array();
+
+	function __construct($index) {
+		parent::__construct($index);
+
+		$this->default->appearance['password_hash'] = array(
+			'desc'=>'Default HASH to use for passwords',
+			'default'=>'md5');
+
+		$this->default->appearance['show_create'] = array(
+			'desc'=>'Whether to show the "Create new Entry here" in the tree browser',
+			'default'=>true);
+
+		$this->default->login['fallback_dn'] = array(
+			'desc'=>'If the attribute base login fails, see if a DN was entered',
+			'default'=>false);
+
+		$this->default->query['disable_default'] = array(
+			'desc'=>'Configuration to disable the default query template',
+			'default'=>false);
+
+		$this->default->query['custom_only'] = array(
+			'desc'=>'Configuration to force the usage of custom query templates',
+			'default'=>false);
+
+		$this->default->server['branch_rename'] = array(
+			'desc'=>'Enable renaming of branches',
+			'default'=>false);
+
+		$this->default->server['custom_attrs'] = array(
+			'desc'=>'Custom operational attributes to be treated as regular attributes',
+			'default'=>array(''));
+
+		$this->default->server['custom_sys_attrs'] = array(
+			'desc'=>'Custom operational attributes to be treated as internal attributes',
+			'default'=>array('+'));
+
+		$this->default->server['jpeg_attributes'] = array(
+			'desc'=>'Additional attributes to treat as Jpeg Attributes',
+			'default'=>array());
+
+		# This was added in case the LDAP server doesnt provide them with a base +,* query.
+		$this->default->server['root_dse_attributes'] = array(
+			'desc'=>'RootDSE attributes for use when displaying server info',
+			'default'=>array(
+				'namingContexts',
+				'subschemaSubentry',
+				'altServer',
+				'supportedExtension',
+				'supportedControl',
+				'supportedSASLMechanisms',
+				'supportedLDAPVersion',
+				'currentTime',
+				'dsServiceName',
+				'defaultNamingContext',
+				'schemaNamingContext',
+				'configurationNamingContext',
+				'rootDomainNamingContext',
+				'supportedLDAPPolicies',
+				'highestCommittedUSN',
+				'dnsHostName',
+				'ldapServiceName',
+				'serverName',
+				'supportedCapabilities',
+				'changeLog',
+				'tlsAvailableCipherSuites',
+				'tlsImplementationVersion',
+				'supportedSASLMechanisms',
+				'dsaVersion',
+				'myAccessPoint',
+				'dseType',
+				'+',
+				'*'
+			));
+
+		# Settings for auto_number
+		$this->default->auto_number['enable'] = array(
+			'desc'=>'Enable the AUTO UID feature',
+			'default'=>true);
+
+		$this->default->auto_number['mechanism'] = array(
+			'desc'=>'Mechanism to use to search for automatic numbers',
+			'default'=>'search');
+
+		$this->default->auto_number['search_base'] = array(
+			'desc'=>'Base DN to use for search mechanisms',
+			'default'=>null);
+
+		$this->default->auto_number['min'] = array(
+			'desc'=>'Minimum number to start with',
+			'default'=>array('uidNumber'=>1000,'gidNumber'=>500));
+
+		$this->default->auto_number['dn'] = array(
+			'desc'=>'DN to use when evaluating numbers',
+			'default'=>null);
+
+		$this->default->auto_number['pass'] = array(
+			'desc'=>'Password for DN to use when evaluating numbers',
+			'default'=>null);
+
+		$this->default->unique['attrs'] = array(
+			'desc'=>'Attributes to check for uniqueness before allowing updates',
+			'default'=>array('mail','uid','uidNumber'));
+
+		$this->default->unique['dn'] = array(
+			'desc'=>'DN to use when evaluating attribute uniqueness',
+			'default'=>null);
+
+		$this->default->unique['pass'] = array(
+			'desc'=>'Password for DN to use when evaluating attribute uniqueness',
+			'default'=>null);
+	}
+
+	public function __get($key) {
+		switch ($key) {
+			case 'name':
+				return $this->getValue('server','name');
+
+			default:
+				system_message(array(
+					'title'=>_('Unknown request for Object value.'),
+					'body'=>sprintf(_('Attempt to obtain value %s from %s'),$key,get_class($this)),
+					'type'=>'error'));
+		}
+	}
+
+	/**
+	 * Gets whether the admin has configured phpLDAPadmin to show the "Create New" link in the tree viewer.
+	 * <code>
+	 *	$servers->setValue('appearance','show_create',true|false);
+	 * </code>
+	 * If NOT set, then default to show the Create New item.
+	 * If IS set, then return the value (it should be true or false).
+	 *
+	 * The entry creation command must be available.
+	 * <code>
+	 *	$config->custom->commands['script'] = array('create' => true);
+	 * </code>
+	 *
+	 * @return boolean true if the feature is enabled and false otherwise.
+	 */
+	function isShowCreateEnabled() {
+		if (DEBUG_ENABLED && (($fargs=func_get_args())||$fargs='NOARGS'))
+			debug_log('Entered (%%)',17,0,__FILE__,__LINE__,__METHOD__,$fargs);
+
+		if (! $_SESSION[APPCONFIG]->isCommandAvailable('script','create'))
+			return false;
+		else
+			return $this->getValue('appearance','show_create');
+	}
+
+	/**
+	 * Fetch whether the user has configured a certain server login to be non anonymous
+	 *
+	 * <code>
+	 *	$servers->setValue('login','anon_bind',true|false);
+	 * </code>
+	 *
+	 * @return boolean
+	 */
+	public function isAnonBindAllowed() {
+		if (DEBUG_ENABLED && (($fargs=func_get_args())||$fargs='NOARGS'))
+			debug_log('Entered (%%)',17,0,__FILE__,__LINE__,__METHOD__,$fargs);
+
+		# If only_login_allowed_dns is set, then we cant have anonymous.
+		if (count($this->getValue('login','allowed_dns')) > 0)
+			$return = false;
+		else
+			$return = $this->getValue('login','anon_bind');
+
+		if (DEBUG_ENABLED)
+			debug_log('Returning (%s)',17,0,__FILE__,__LINE__,__METHOD__,$return);
+
+		return $return;
+	}
+
+	/**
+	 * Returns true if the user has configured the specified server to enable branch (non-leaf) renames.
+	 *
+	 * This is configured in config.php thus:
+	 * <code>
+	 *	$servers->setValue('server','branch_rename',true|false);
+	 * </code>
+	 *
+	 * @return boolean
+	 */
+	function isBranchRenameEnabled() {
+		if (DEBUG_ENABLED && (($fargs=func_get_args())||$fargs='NOARGS'))
+			debug_log('Entered (%%)',17,0,__FILE__,__LINE__,__METHOD__,$fargs);
+
+ 		return $this->getValue('server','branch_rename');
+	}
+
+	/**
+	 * Determines if an attribute's value can contain multiple lines. Attributes that fall
+	 * in this multi-line category may be configured in config.php. Hence, this function
+	 * accesses the global variable $_SESSION[APPCONFIG]->custom->appearance['multi_line_attributes'];
+	 *
+	 * Usage example:
+	 * <code>
+	 *	if ($ldapserver->isMultiLineAttr('postalAddress'))
+	 *		echo '<textarea name="postalAddress"></textarea>';
+	 *	else
+	 *		echo '<input name="postalAddress" type="text">';
+	 * </code>
+	 *
+	 * @param string The name of the attribute of interested (case insensivite)
+	 * @param string (optional) The current value of the attribute (speeds up the process by searching for carriage returns already in the attribute value)
+	 * @return boolean
+	 */
+	function isMultiLineAttr($attr_name,$val=null) {
+		if (DEBUG_ENABLED && (($fargs=func_get_args())||$fargs='NOARGS'))
+			debug_log('Entered (%%)',17,0,__FILE__,__LINE__,__METHOD__,$fargs);
+
+		# Set default return
+		$return = false;
+
+		# First, check the optional val param for a \n or a \r
+		if (! is_null($val) && (strpos($val,"\n") || strpos($val,"\r")))
+			$return = true;
+
+		# Next, compare strictly by name first
+		else
+			foreach ($_SESSION[APPCONFIG]->getValue('appearance','multi_line_attributes') as $multi_line_attr_name)
+				if (strcasecmp($multi_line_attr_name,$attr_name) == 0) {
+					$return = true;
+					break;
+				}
+
+		# If unfound, compare by syntax OID
+		if (! $return) {
+			$sattr = $this->getSchemaAttribute($attr_name);
+
+			if ($sattr) {
+				$syntax_oid = $sattr->getSyntaxOID();
+
+				if ($syntax_oid)
+					foreach ($_SESSION[APPCONFIG]->getValue('appearance','multi_line_syntax_oids') as $multi_line_syntax_oid)
+						if ($multi_line_syntax_oid == $syntax_oid) {
+							$return = true;
+							break;
+						}
+			}
+		}
+
+		if (DEBUG_ENABLED)
+			debug_log('Returning (%s)',17,0,__FILE__,__LINE__,__METHOD__,$return);
+
+		return $return;
+	}
+
+	/**
+	 * Returns true if the specified attribute is configured according to
+	 * the test enabled in config.php
+	 *
+	 * @param string The name of the attribute to test.
+	 * @param array The attributes to test against.
+	 * @param dn A DN that is exempt from these tests.
+	 * @return boolean
+	 */
+	private function isAttrTest($attr,$attrs,$except_dn) {
+		$attr = trim($attr);
+		if (! trim($attr) || ! count($attrs))
+			return false;
+
+		# Is the user excluded?
+		if ($except_dn && $this->userIsMember($this->getLogin(),$except_dn))
+			return false;
+
+		foreach ($attrs as $attr_name)
+			if (strcasecmp($attr,trim($attr_name)) == 0)
+				return true;
+
+		return false;
+	}
+
+	/**
+	 * Returns true if the specified attribute is configured as read only
+	 * in config.php.
+	 * Attributes are configured as read-only in config.php thus:
+	 * <code>
+	 *	$config->custom->appearance['readonly_attrs'] = array('objectClass');
+	 * </code>
+	 *
+	 * @param string The name of the attribute to test.
+	 * @return boolean
+	 */
+	public function isAttrReadOnly($attr) {
+		if (DEBUG_ENABLED && (($fargs=func_get_args())||$fargs='NOARGS'))
+			debug_log('Entered (%%)',17,0,__FILE__,__LINE__,__METHOD__,$fargs);
+
+		$attrs = $_SESSION[APPCONFIG]->getValue('appearance','readonly_attrs');
+		$except_dn = $_SESSION[APPCONFIG]->getValue('appearance','readonly_attrs_exempt');
+
+		return $this->isAttrTest($attr,$attrs,$except_dn);
+	}
+
+	/**
+	 * Returns true if the specified attribute is configured as hidden
+	 * in config.php.
+	 * Attributes are configured as hidden in config.php thus:
+	 * <code>
+	 *	$config->custom->appearance['hide_attrs'] = array('objectClass');
+	 * </code>
+	 *
+	 * @param string The name of the attribute to test.
+	 * @return boolean
+	 */
+	public function isAttrHidden($attr) {
+		if (DEBUG_ENABLED && (($fargs=func_get_args())||$fargs='NOARGS'))
+			debug_log('Entered (%%)',17,0,__FILE__,__LINE__,__METHOD__,$fargs);
+
+		$attrs = $_SESSION[APPCONFIG]->getValue('appearance','hide_attrs');
+		$except_dn = $_SESSION[APPCONFIG]->getValue('appearance','hide_attrs_exempt');
+
+		return $this->isAttrTest($attr,$attrs,$except_dn);
+	}
+
+	/**
+	 * Add objects
+	 */
+	public function add($dn,$entry_array,$method=null) {
+		if (DEBUG_ENABLED && (($fargs=func_get_args())||$fargs='NOARGS'))
+			debug_log('Entered (%%)',17,0,__FILE__,__LINE__,__METHOD__,$fargs);
+
+		foreach ($entry_array as $attr => $val)
+			$entry_array[$attr] = dn_unescape($val);
+
+		$result = false;
+
+		# Check our unique attributes.
+		if (! $this->checkUniqueAttrs($dn,$entry_array))
+			return false;
+
+		if (run_hook('pre_entry_create',array('server_id'=>$this->index,'method'=>$method,'dn'=>$dn,'attrs'=>$entry_array))) {
+			$result = @ldap_add($this->connect($method),dn_escape($dn),$entry_array);
+
+			if ($result) {
+				# Update the tree
+				$tree = get_cached_item($this->index,'tree');
+
+				# If we created the base, delete it, then add it back
+				if (get_request('create_base'))
+					$tree->delEntry($dn);
+
+				$tree->addEntry($dn);
+
+				set_cached_item($this->index,'tree','null',$tree);
+
+				run_hook('post_entry_create',array('server_id'=>$this->index,'method'=>$method,'dn'=>$dn,'attrs'=>$entry_array));
+
+			} else {
+				system_message(array(
+					'title'=>_('Could not add the object to the LDAP server.'),
+					'body'=>ldap_error_msg($this->getErrorMessage(null),$this->getErrorNum(null)),
+					'type'=>'error'));
+			}
+		}
+
+		return $result;
+	}
+
+	/**
+	 * Delete objects
+	 */
+	public function delete($dn,$method=null) {
+		if (DEBUG_ENABLED && (($fargs=func_get_args())||$fargs='NOARGS'))
+			debug_log('Entered (%%)',17,0,__FILE__,__LINE__,__METHOD__,$fargs);
+
+		$result = false;
+
+		if (run_hook('pre_entry_delete',array('server_id'=>$this->index,'method'=>$method,'dn'=>$dn))) {
+			$result = @ldap_delete($this->connect($method),dn_escape($dn));
+
+			if ($result) {
+				# Update the tree
+				$tree = get_cached_item($this->index,'tree');
+				$tree->delEntry($dn);
+
+				set_cached_item($this->index,'tree','null',$tree);
+
+				run_hook('post_entry_delete',array('server_id'=>$this->index,'method'=>$method,'dn'=>$dn));
+			}
+		}
+
+		return $result;
+	}
+
+	/**
+	 * Rename objects
+	 */
+	public function rename($dn,$new_rdn,$container,$deleteoldrdn,$method=null) {
+		if (DEBUG_ENABLED && (($fargs=func_get_args())||$fargs='NOARGS'))
+			debug_log('Entered (%%)',17,0,__FILE__,__LINE__,__METHOD__,$fargs);
+
+		$result = false;
+
+		if (run_hook('pre_entry_rename',array('server_id'=>$this->index,'method'=>$method,'dn'=>$dn,'rdn'=>$new_rdn,'container'=>$container))) {
+			$result = @ldap_rename($this->connect($method),$dn,$new_rdn,$container,$deleteoldrdn);
+
+			if ($result) {
+				# Update the tree
+				$tree = get_cached_item($this->index,'tree');
+				$newdn = sprintf('%s,%s',$new_rdn,$container);
+				$tree->renameEntry($dn,$newdn);
+
+				set_cached_item($this->index,'tree','null',$tree);
+
+				run_hook('post_entry_rename',array('server_id'=>$this->index,'method'=>$method,'dn'=>$dn,'rdn'=>$new_rdn,'container'=>$container));
+			}
+		}
+
+		return $result;
+	}
+
+	/**
+	 * Modify objects
+	 */
+	public function modify($dn,$attrs,$method=null) {
+		if (DEBUG_ENABLED && (($fargs=func_get_args())||$fargs='NOARGS'))
+			debug_log('Entered (%%)',17,0,__FILE__,__LINE__,__METHOD__,$fargs);
+
+		# Check our unique attributes.
+		if (! $this->checkUniqueAttrs($dn,$attrs))
+			return false;
+
+		$result = false;
+		$summary = array();
+		$current_attrs = $this->getDNAttrValues($dn,$method,LDAP_DEREF_NEVER,array('*'));
+
+		# Go through our attributes and call our hooks for each attribute changing its value
+		foreach ($attrs as $attr => $values) {
+			# For new attributes
+			if (count($values) && ! isset($current_attrs[$attr])) {
+				if (! run_hook('pre_attr_add',
+					array('server_id'=>$this->index,'method'=>$method,'dn'=>$dn,'attr'=>$attr,'newvalue'=>$values))) {
+
+					unset($attrs[$attr]);
+					system_message(array(
+						'title'=>_('Attribute not added'),
+						'body'=>sprintf('%s (<b>%s</b>)',_('Hook pre_attr_add prevented attribute from being added'),$attr),
+						'type'=>'warn'));
+
+				} else
+					$summary['add'][$attr]['new'] = $values;
+
+			# For modify attributes
+			} elseif (count($values)) {
+				if (! run_hook('pre_attr_modify',
+					array('server_id'=>$this->index,'method'=>$method,'dn'=>$dn,'attr'=>$attr,'oldvalue'=>$current_attrs[$attr],'newvalue'=>$values))) {
+
+					unset($attrs[$attr]);
+					system_message(array(
+						'title'=>_('Attribute not modified'),
+						'body'=>sprintf('%s (<b>%s</b>)',_('Hook pre_attr_modify prevented attribute from being modified'),$attr),
+						'type'=>'warn'));
+
+				} else {
+					$summary['modify'][$attr]['new'] = $values;
+					$summary['modify'][$attr]['old'] = $current_attrs[$attr];
+				}
+
+			# For delete attributes
+			} else {
+				if (! run_hook('pre_attr_delete',
+					array('server_id'=>$this->index,'method'=>$method,'dn'=>$dn,'attr'=>$attr,'oldvalue'=>$current_attrs[$attr]))) {
+
+					unset($attrs[$attr]);
+					system_message(array(
+						'title'=>_('Attribute not deleted'),
+						'body'=>sprintf('%s (<b>%s</b>)',_('Hook pre_attr_delete prevented attribute from being deleted'),$attr),
+						'type'=>'warn'));
+
+				} else
+					$summary['delete'][$attr]['old'] = $current_attrs[$attr];
+			}
+		}
+
+		if (! count($attrs))
+			return false;
+
+		if (run_hook('pre_entry_modify',array('server_id'=>$this->index,'method'=>$method,'dn'=>$dn,'attrs'=>$attrs))) {
+			$result = @ldap_modify($this->connect($method),$dn,$attrs);
+
+			if ($result) {
+				run_hook('post_entry_modify',array('server_id'=>$this->index,'method'=>$method,'dn'=>$dn,'attrs'=>$attrs));
+
+				foreach (array('add','modify','delete') as $mode)
+					if (isset($summary[$mode]))
+						foreach ($summary[$mode] as $attr => $values)
+							switch ($mode) {
+								case 'add':
+									run_hook(sprintf('post_attr_%s',$mode),
+										array('server_id'=>$this->index,'method'=>$method,'dn'=>$dn,'attr'=>$attr,'newvalue'=>$values['new']));
+									break;
+
+								case 'modify':
+									run_hook(sprintf('post_attr_%s',$mode),
+										array('server_id'=>$this->index,'method'=>$method,'dn'=>$dn,'attr'=>$attr,'oldvalue'=>$values['old'],'newvalue'=>$values['new']));
+									break;
+
+								case 'delete':
+									run_hook(sprintf('post_attr_%s',$mode),
+										array('server_id'=>$this->index,'method'=>$method,'dn'=>$dn,'attr'=>$attr,'oldvalue'=>$values['old']));
+									break;
+
+								default:
+									debug_dump_backtrace(sprintf('Unkown mode %s',$mode),1);
+							}
+			} else {
+				system_message(array(
+					'title'=>_('Could not perform ldap_modify operation.'),
+					'body'=>ldap_error_msg($this->getErrorMessage($method),$this->getErrorNum($method)),
+					'type'=>'error'));
+			}
+		}
+
+		return $result;
+	}
+
+	/**
+	 * Returns true if the specified attribute is configured as unique
+	 * in config.php.
+	 * Attributes are configured as hidden in config.php thus:
+	 * <code>
+	 *	$servers->setValue('unique','attrs',array('mail','uid','uidNumber'));
+	 * </code>
+	 *
+	 * @param string $attr The name of the attribute to test.
+	 * @return boolean
+	 */
+	public function isAttrUnique($attr) {
+		if (DEBUG_ENABLED && (($fargs=func_get_args())||$fargs='NOARGS'))
+			debug_log('Entered (%%)',17,0,__FILE__,__LINE__,__METHOD__,$fargs);
+
+		# Should this attribute value be unique
+		if (in_array_ignore_case($attr,$this->getValue('unique','attrs')))
+			return true;
+		else
+			return false;
+	}
+
+	/**
+	 * This function will check whether the value for an attribute being changed
+	 * is already assigned to another DN.
+	 *
+	 * Returns the bad value, or null if all values are OK
+	 *
+	 * @param dn DN that is being changed
+	 * @param string Attribute being changed
+	 * @param string|array New values for the attribute
+	 */
+	public function checkUniqueAttrs($dn,$attrs) {
+		if (DEBUG_ENABLED && (($fargs=func_get_args())||$fargs='NOARGS'))
+			debug_log('Entered (%%)',17,0,__FILE__,__LINE__,__METHOD__,$fargs);
+
+		# If none of the attributes are defined unique, we'll return immediately;
+		if (! $checkattrs = array_intersect(arrayLower($this->getValue('unique','attrs')),array_keys(array_change_key_case($attrs))))
+			return true;
+
+		# Check see and use our alternate uid_dn and password if we have it.
+		if (! $this->login($this->getValue('unique','dn'),$this->getValue('unique','pass'),'unique')) {
+			system_message(array(
+				'title'=>_('UNIQUE invalid login/password'),
+				'body'=>sprintf('%s (<b>%s</b>)',_('Unable to connect to LDAP server with the unique login/password, please check your configuration.'),
+					$this->getName()),
+				'type'=>'warn'));
+
+			return false;
+		}
+
+		$query = array();
+
+		# Build our search filter to double check each attribute.
+		$query['filter'] = '(|';
+		foreach ($checkattrs as $attr)
+			foreach ($attrs[$attr] as $val)
+				if ($val)
+					$query['filter'] .= sprintf('(%s=%s)',$attr,$val);
+		$query['filter'] .= ')';
+
+		$query['attrs'] = $checkattrs;
+
+		# Search through our bases and see if we have match
+		foreach ($this->getBaseDN() as $base) {
+			$query['base'] = $base;
+
+			# Do the search
+			$results = $this->query($query,'unique');
+
+			# If we have a match.
+			if (count($results))
+				foreach ($results as $values)
+					# If one of the attributes is owned to somebody else, then we may as well die here.
+					if ($values['dn'] != $dn) {
+						$href = sprintf('cmd.php?cmd=query_engine&server_id=%s&filter=%s&scope=sub&query=none&format=list&search=true',$this->index,$query['filter']);
+
+						system_message(array(
+							'title'=>_('Attribute value would not be unique'),
+							'body'=>sprintf('%s (<b><a href="%s">%s</a></b>)',
+								_('This update has been or will be cancelled, it would result in an attribute value not being unique. You might like to search the LDAP server for the offending entry.'),
+								htmlspecialchars($href),
+								_('Search')),
+							'type'=>'warn'));
+
+						return false;
+					}
+		}
+
+		# If we get here, then it must be OK?
+		return true;
+	}
+
+	/**
+	 * Check if the session timeout has occured for this LDAP server.
+	 */
+	public function isSessionValid() {
+		if (DEBUG_ENABLED && (($fargs=func_get_args())||$fargs='NOARGS'))
+			debug_log('Entered (%%)',17,0,__FILE__,__LINE__,__METHOD__,$fargs);
+
+		# If inactiveTime() returns a value, we need to check that it has not expired.
+		if (is_null($this->inactivityTime()) || ! $this->isLoggedIn())
+			return true;
+
+		# If session has expired
+		if ((isset($_SESSION['ACTIVITY'][$this->getIndex()])) && ($_SESSION['ACTIVITY'][$this->getIndex()] < time())) {
+			$this->logout();
+			unset($_SESSION['ACTIVITY'][$this->getIndex()]);
+
+			return false;
+		}
+
+		$_SESSION['ACTIVITY'][$this->getIndex()] = $this->inactivityTime();
+		return true;
+	}
+}
+?>
diff --git a/lam/templates/3rdParty/pla/lib/ds_myldap.php b/lam/templates/3rdParty/pla/lib/ds_myldap.php
new file mode 100644
index 00000000..48b733a0
--- /dev/null
+++ b/lam/templates/3rdParty/pla/lib/ds_myldap.php
@@ -0,0 +1,2334 @@
+<?php
+/**
+ * Classes and functions for communication of Data Stores
+ *
+ * @author The phpLDAPadmin development team
+ * @package phpLDAPadmin
+ */
+
+/**
+ * This abstract class provides the basic variables and methods for LDAP datastores
+ *
+ * @package phpLDAPadmin
+ * @subpackage DataStore
+ */
+class myldap extends DS {
+	# If we fail to connect, set this to true
+	private $noconnect = false;
+	# Raw Schema entries
+	private $_schema_entries = null;
+	# Schema DN
+	private $_schemaDN = null;
+	# Attributes that should be treated as MAY attributes, even though the scheme has them as MUST attributes.
+	private $force_may = array();
+
+	public function __construct($index) {
+		if (defined('DEBUG_ENABLED') && DEBUG_ENABLED && (($fargs=func_get_args())||$fargs='NOARGS'))
+			debug_log('Entered (%%)',17,0,__FILE__,__LINE__,__METHOD__,$fargs);
+
+		$this->index = $index;
+		$this->type = 'ldap';
+
+		# Additional values that can go in our config.php
+		$this->custom = new StdClass;
+		$this->default = new StdClass;
+
+/*
+ * Not used by PLA
+		# Database Server Variables
+		$this->default->server['db'] = array(
+			'desc'=>'Database Name',
+			'untested'=>true,
+			'default'=>null);
+*/
+
+		/* This was created for IDS - since it doesnt present STRUCTURAL against objectClasses
+		 * definitions when reading the schema.*/
+		$this->default->server['schema_oclass_default'] = array(
+			'desc'=>'When reading the schema, and it doesnt specify objectClass type, default it to this',
+			'default'=>null);
+
+		$this->default->server['base'] = array(
+			'desc'=>'LDAP Base DNs',
+			'default'=>array());
+
+		$this->default->server['tls'] = array(
+			'desc'=>'Connect using TLS',
+			'default'=>false);
+
+		# Login Details
+		$this->default->login['attr'] = array(
+			'desc'=>'Attribute to use to find the users DN',
+			'default'=>'dn');
+
+		$this->default->login['anon_bind'] = array(
+			'desc'=>'Enable anonymous bind logins',
+			'default'=>true);
+
+		$this->default->login['allowed_dns'] = array(
+			'desc'=>'Limit logins to users who match any of the following LDAP filters',
+			'default'=>array());
+
+		$this->default->login['base'] = array(
+			'desc'=>'Limit logins to users who are in these base DNs',
+			'default'=>array());
+
+		$this->default->login['class'] = array(
+			'desc'=>'Strict login to users containing a specific objectClasses',
+			'default'=>array());
+
+		$this->default->proxy['attr'] = array(
+			'desc'=>'Attribute to use to find the users DN for proxy based authentication',
+			'default'=>array());
+
+		# SASL configuration
+		$this->default->server['sasl'] = array(
+			'desc'=>'Use SASL authentication when binding LDAP server',
+			'default'=>false);
+
+		$this->default->sasl['mech'] = array(
+			'desc'=>'SASL mechanism used while binding LDAP server',
+			'untested'=>true,
+			'default'=>'PLAIN');
+
+		$this->default->sasl['realm'] = array(
+			'desc'=>'SASL realm name',
+			'untested'=>true,
+			'default'=>null);
+
+		$this->default->sasl['authz_id'] = array(
+			'desc'=>'SASL authorization id',
+			'untested'=>true,
+			'default'=>null);
+
+		$this->default->sasl['authz_id_regex'] = array(
+			'desc'=>'SASL authorization id PCRE regular expression',
+			'untested'=>true,
+			'default'=>null);
+
+		$this->default->sasl['authz_id_replacement'] = array(
+			'desc'=>'SASL authorization id PCRE regular expression replacement string',
+			'untested'=>true,
+			'default'=>null);
+
+		$this->default->sasl['props'] = array(
+			'desc'=>'SASL properties',
+			'untested'=>true,
+			'default'=>null);
+	}
+
+	/**
+	 * Required ABSTRACT functions
+	 */
+	/**
+	 * Connect and Bind to the Database
+	 *
+	 * @param string Which connection method resource to use
+	 * @return resource|null Connection resource if successful, null if not.
+	 */
+	protected function connect($method,$debug=false,$new=false) {
+		if (DEBUG_ENABLED && (($fargs=func_get_args())||$fargs='NOARGS'))
+			debug_log('Entered (%%)',17,0,__FILE__,__LINE__,__METHOD__,$fargs);
+
+		static $CACHE = array();
+
+		$method = $this->getMethod($method);
+		$bind = array();
+
+		if (isset($CACHE[$this->index][$method]) && $CACHE[$this->index][$method])
+			return $CACHE[$this->index][$method];
+
+		# Check if we have logged in and therefore need to use those details as our bind.
+		$bind['id'] = is_null($this->getLogin($method)) && $method != 'anon' ? $this->getLogin('user') : $this->getLogin($method);
+		$bind['pass'] = is_null($this->getPassword($method)) && $method != 'anon' ? $this->getPassword('user') : $this->getPassword($method);
+
+		# If our bind id is still null, we are not logged in.
+		if (is_null($bind['id']) && ! in_array($method,array('anon','login')))
+			return null;
+
+		# If we bound to the LDAP server with these details for a different connection, return that resource
+		if (isset($CACHE[$this->index]) && ! $new)
+			foreach ($CACHE[$this->index] as $cachedmethod => $resource) {
+				if (($this->getLogin($cachedmethod) == $bind['id']) && ($this->getPassword($cachedmethod) == $bind['pass'])) {
+					$CACHE[$this->index][$method] = $resource;
+
+					return $CACHE[$this->index][$method];
+				}
+			}
+
+		$CACHE[$this->index][$method] = null;
+
+		# No identifiable connection exists, lets create a new one.
+		if (DEBUG_ENABLED)
+			debug_log('Creating NEW connection [%s] for index [%s]',16,0,__FILE__,__LINE__,__METHOD__,
+				$method,$this->index);
+
+		if (function_exists('run_hook'))
+			run_hook('pre_connect',array('server_id'=>$this->index,'method'=>$method));
+
+		if ($this->getValue('server','port'))
+			$resource = ldap_connect($this->getValue('server','host'),$this->getValue('server','port'));
+		else
+			$resource = ldap_connect($this->getValue('server','host'));
+
+		$CACHE[$this->index][$method] = $resource;
+
+		if (DEBUG_ENABLED)
+			debug_log('LDAP Resource [%s], Host [%s], Port [%s]',16,0,__FILE__,__LINE__,__METHOD__,
+				$resource,$this->getValue('server','host'),$this->getValue('server','port'));
+
+		if (! is_resource($resource))
+			debug_dump_backtrace('UNHANDLED, $resource is not a resource',1);
+
+		# Go with LDAP version 3 if possible (needed for renaming and Novell schema fetching)
+		ldap_set_option($resource,LDAP_OPT_PROTOCOL_VERSION,3);
+
+		/* Disabling this makes it possible to browse the tree for Active Directory, and seems
+		 * to not affect other LDAP servers (tested with OpenLDAP) as phpLDAPadmin explicitly
+		 * specifies deref behavior for each ldap_search operation. */
+		ldap_set_option($resource,LDAP_OPT_REFERRALS,0);
+
+		# Try to fire up TLS is specified in the config
+		if ($this->isTLSEnabled())
+			$this->startTLS($resource);
+
+		# If SASL has been configured for binding, then start it now.
+		if ($this->isSASLEnabled())
+			$bind['result'] = $this->startSASL($resource,$method);
+
+		# Normal bind...
+		else
+			$bind['result'] = @ldap_bind($resource,$bind['id'],$bind['pass']);
+
+		if ($debug)
+			debug_dump(array('method'=>$method,'bind'=>$bind,'USER'=>$_SESSION['USER']));
+
+		if (DEBUG_ENABLED)
+			debug_log('Resource [%s], Bind Result [%s]',16,0,__FILE__,__LINE__,__METHOD__,$resource,$bind);
+
+		if (! $bind['result']) {
+			if (DEBUG_ENABLED)
+				debug_log('Leaving with FALSE, bind FAILed',16,0,__FILE__,__LINE__,__METHOD__);
+
+			$this->noconnect = true;
+
+			system_message(array(
+				'title'=>sprintf('%s %s',_('Unable to connect to LDAP server'),$this->getName()),
+				'body'=>sprintf('<b>%s</b>: %s (%s) for <b>%s</b>',_('Error'),$this->getErrorMessage($method),$this->getErrorNum($method),$method),
+				'type'=>'error'));
+
+			$CACHE[$this->index][$method] = null;
+
+		} else {
+			$this->noconnect = false;
+
+			# If this is a proxy session, we need to switch to the proxy user
+			if ($this->isProxyEnabled() && $bind['id'] && $method != 'anon')
+				if (! $this->startProxy($resource,$method)) {
+					$this->noconnect = true;
+					$CACHE[$this->index][$method] = null;
+				}
+		}
+
+		if (function_exists('run_hook'))
+			run_hook('post_connect',array('server_id'=>$this->index,'method'=>$method,'id'=>$bind['id']));
+
+		if ($debug)
+			debug_dump(array($method=>$CACHE[$this->index][$method]));
+
+		return $CACHE[$this->index][$method];
+	}
+
+	/**
+	 * Login to the database with the application user/password
+	 *
+	 * @return boolean true|false for successful login.
+	 */
+	public function login($user=null,$pass=null,$method=null,$new=false) {
+		if (DEBUG_ENABLED && (($fargs=func_get_args())||$fargs='NOARGS'))
+			debug_log('Entered (%%)',17,0,__FILE__,__LINE__,__METHOD__,$fargs);
+
+		$userDN = null;
+
+		# Get the userDN from the username.
+		if (! is_null($user)) {
+			# If login,attr is set to DN, then user should be a DN
+			if (($this->getValue('login','attr') == 'dn') || $method != 'user')
+				$userDN = $user;
+			else
+				$userDN = $this->getLoginID($user,'login');
+
+			if (! $userDN && $this->getValue('login','fallback_dn'))
+				$userDN = $user;
+
+			if (! $userDN)
+				return false;
+
+		} else {
+			if (in_array($method,array('user','anon'))) {
+				$method = 'anon';
+				$userDN = '';
+				$pass = '';
+
+			} else {
+				$userDN = $this->getLogin('user');
+				$pass = $this->getPassword('user');
+			}
+		}
+
+		if (! $this->isAnonBindAllowed() && ! trim($userDN))
+			return false;
+
+		# Temporarily set our user details
+		$this->setLogin($userDN,$pass,$method);
+
+		$connect = $this->connect($method,false,$new);
+
+		# If we didnt log in...
+		if (! is_resource($connect) || $this->noconnect || ! $this->userIsAllowedLogin($userDN)) {
+			$this->logout($method);
+
+			return false;
+
+		} else
+			return true;
+	}
+
+	/**
+	 * Perform a query to the Database
+	 *
+	 * @param string query to perform
+	 *	$query['base']
+	 *	$query['filter']
+	 *	$query['scope']
+	 *	$query['attrs'] = array();
+	 *	$query['deref']
+	 * @param string Which connection method resource to use
+	 * @param string Index items according to this key
+	 * @param boolean Enable debugging output
+	 * @return array|null Results of query.
+	 */
+	public function query($query,$method,$index=null,$debug=false) {
+		if (DEBUG_ENABLED && (($fargs=func_get_args())||$fargs='NOARGS'))
+			debug_log('Entered (%%)',17,0,__FILE__,__LINE__,__METHOD__,$fargs);
+
+		$attrs_only = 0;
+
+		# Defaults
+		if (! isset($query['attrs']))
+			$query['attrs'] = array();
+		else
+			# Re-index the attrs, PHP throws an error if the keys are not sequential from 0.
+			$query['attrs'] = array_values($query['attrs']);
+
+		if (! isset($query['base'])) {
+			$bases = $this->getBaseDN();
+			$query['base'] = array_shift($bases);
+		}
+
+		if (! isset($query['deref']))
+			$query['deref'] = $_SESSION[APPCONFIG]->getValue('deref','search');
+		if (! isset($query['filter']))
+			$query['filter'] = '(&(objectClass=*))';
+		if (! isset($query['scope']))
+			$query['scope'] = 'sub';
+		if (! isset($query['size_limit']))
+			$query['size_limit'] = 0;
+		if (! isset($query['time_limit']))
+			$query['time_limit'] = 0;
+
+		if ($query['scope'] == 'base' && ! isset($query['baseok']))
+			system_message(array(
+				'title'=>sprintf('Dont call %s',__METHOD__),
+				'body'=>sprintf('Use getDNAttrValues for base queries [%s]',$query['base']),
+				'type'=>'info'));
+
+		if (is_array($query['base'])) {
+			system_message(array(
+				'title'=>_('Invalid BASE for query'),
+				'body'=>_('The query was cancelled because of an invalid base.'),
+				'type'=>'error'));
+
+			return array();
+		}
+
+		if (DEBUG_ENABLED)
+			debug_log('%s search PREPARE.',16,0,__FILE__,__LINE__,__METHOD__,$query['scope']);
+
+		if ($debug)
+			debug_dump(array('query'=>$query,'server'=>$this->getIndex(),'con'=>$this->connect($method)));
+
+		$resource = $this->connect($method,$debug);
+
+		switch ($query['scope']) {
+			case 'base':
+				$search = @ldap_read($resource,$query['base'],$query['filter'],$query['attrs'],$attrs_only,$query['size_limit'],$query['time_limit'],$query['deref']);
+				break;
+
+			case 'one':
+				$search = @ldap_list($resource,$query['base'],$query['filter'],$query['attrs'],$attrs_only,$query['size_limit'],$query['time_limit'],$query['deref']);
+				break;
+
+			case 'sub':
+			default:
+				$search = @ldap_search($resource,$query['base'],$query['filter'],$query['attrs'],$attrs_only,$query['size_limit'],$query['time_limit'],$query['deref']);
+				break;
+		}
+
+		if ($debug)
+			debug_dump(array('method'=>$method,'search'=>$search,'error'=>$this->getErrorMessage()));
+
+		if (DEBUG_ENABLED)
+			debug_log('Search scope [%s] base [%s] filter [%s] attrs [%s] COMPLETE (%s).',16,0,__FILE__,__LINE__,__METHOD__,
+				$query['scope'],$query['base'],$query['filter'],$query['attrs'],is_null($search));
+
+		if (! $search)
+			return array();
+
+		$return = array();
+
+		# Get the first entry identifier
+		if ($entries = ldap_get_entries($resource,$search)) {
+			# Remove the count
+			if (isset($entries['count']))
+				unset($entries['count']);
+
+			# Iterate over the entries
+			foreach ($entries as $a => $entry) {
+				if (! isset($entry['dn']))
+					debug_dump_backtrace('No DN?',1);
+
+				# Remove the none entry references.
+				if (! is_array($entry)) {
+					unset($entries[$a]);
+					continue;
+				}
+
+				$dn = $entry['dn'];
+				unset($entry['dn']);
+
+				# Iterate over the attributes
+				foreach ($entry as $b => $attrs) {
+					# Remove the none entry references.
+					if (! is_array($attrs)) {
+						unset($entry[$b]);
+						continue;
+					}
+
+					# Remove the count
+					if (isset($entry[$b]['count']))
+						unset($entry[$b]['count']);
+				}
+
+				# Our queries always include the DN (the only value not an array).
+				$entry['dn'] = $dn;
+				$return[$dn] = $entry;
+			}
+
+			# Sort our results
+			foreach ($return as $key=> $values)
+				ksort($return[$key]);
+		}
+
+		if (DEBUG_ENABLED)
+			debug_log('Returning (%s)',17,0,__FILE__,__LINE__,__METHOD__,$return);
+
+		return $return;
+	}
+
+	/**
+	 * Get the last error string
+	 *
+	 * @param string Which connection method resource to use
+	 */
+	public function getErrorMessage($method=null) {
+		if (DEBUG_ENABLED && (($fargs=func_get_args())||$fargs='NOARGS'))
+			debug_log('Entered (%%)',17,0,__FILE__,__LINE__,__METHOD__,$fargs);
+
+		return ldap_error($this->connect($method));
+	}
+
+	/**
+	 * Get the last error number
+	 *
+	 * @param string Which connection method resource to use
+	 */
+	public function getErrorNum($method=null) {
+		if (DEBUG_ENABLED && (($fargs=func_get_args())||$fargs='NOARGS'))
+			debug_log('Entered (%%)',17,0,__FILE__,__LINE__,__METHOD__,$fargs);
+
+		return ldap_errno($this->connect($method));
+	}
+
+	/**
+	 * Additional functions
+	 */
+	/**
+	 * Get a user ID
+	 *
+	 * @param string Which connection method resource to use
+	 */
+	public function getLoginID($user,$method=null) {
+		if (DEBUG_ENABLED && (($fargs=func_get_args())||$fargs='NOARGS'))
+			debug_log('Entered (%%)',17,0,__FILE__,__LINE__,__METHOD__,$fargs);
+
+		$query['filter'] = sprintf('(&(%s=%s)%s)',
+			$this->getValue('login','attr'),$user,
+			$this->getLoginClass() ? sprintf('(objectclass=%s)',join(')(objectclass=',$this->getLoginClass())) : '');
+		$query['attrs'] = array('dn');
+
+		$result = array();
+		foreach ($this->getLoginBaseDN() as $base) {
+			$query['base'] = $base;
+			$result = $this->query($query,$method);
+
+			if (count($result) == 1)
+				break;
+		}
+
+		if (count($result) != 1)
+			return null;
+
+		$detail = array_shift($result);
+
+		if (! isset($detail['dn']))
+			die('ERROR: DN missing?');
+		else
+			return $detail['dn'];
+	}
+
+	/**
+	 * Return the login base DNs
+	 * If no login base DNs are defined, then the LDAP server Base DNs are used.
+	 */
+	private function getLoginBaseDN() {
+		if (DEBUG_ENABLED && (($fargs=func_get_args())||$fargs='NOARGS'))
+			debug_log('Entered (%%)',17,1,__FILE__,__LINE__,__METHOD__,$fargs);
+
+		if ($this->getValue('login','base'))
+			return $this->getValue('login','base');
+		else
+			return $this->getBaseDN();
+	}
+
+	/**
+	 * Return the login classes that a user must have to login
+	 */
+	private function getLoginClass() {
+		if (DEBUG_ENABLED && (($fargs=func_get_args())||$fargs='NOARGS'))
+			debug_log('Entered (%%)',17,1,__FILE__,__LINE__,__METHOD__,$fargs);
+
+		return $this->getValue('login','class');
+	}
+
+	/**
+	 * Return if anonymous bind is allowed in the configuration
+	 */
+	public function isAnonBindAllowed() {
+		if (DEBUG_ENABLED && (($fargs=func_get_args())||$fargs='NOARGS'))
+			debug_log('Entered (%%)',17,0,__FILE__,__LINE__,__METHOD__,$fargs);
+
+		return $this->getValue('login','anon_bind');
+	}
+
+	/**
+	 * Fetches whether TLS has been configured for use with a certain server.
+	 *
+	 * Users may configure phpLDAPadmin to use TLS in config,php thus:
+	 * <code>
+	 *	$servers->setValue('server','tls',true|false);
+	 * </code>
+	 *
+	 * @return boolean
+	 */
+	private function isTLSEnabled() {
+		if (DEBUG_ENABLED && (($fargs=func_get_args())||$fargs='NOARGS'))
+			debug_log('Entered (%%)',17,0,__FILE__,__LINE__,__METHOD__,$fargs);
+
+		if ($this->getValue('server','tls') && ! function_exists('ldap_start_tls')) {
+				error(_('TLS has been enabled in your config, but your PHP install does not support TLS. TLS will be disabled.'),'warn');
+			return false;
+
+		} else
+			return $this->getValue('server','tls');
+	}
+
+	/**
+	 * If TLS is configured, then start it
+	 */
+	private function startTLS($resource) {
+		if (DEBUG_ENABLED && (($fargs=func_get_args())||$fargs='NOARGS'))
+			debug_log('Entered (%%)',17,0,__FILE__,__LINE__,__METHOD__,$fargs);
+
+		if (! $this->getValue('server','tls') || (function_exists('ldap_start_tls') && ! @ldap_start_tls($resource))) {
+			system_message(array(
+				'title'=>sprintf('%s (%s)',_('Could not start TLS.'),$this->getName()),
+				'body'=>sprintf('<b>%s</b>: %s',_('Error'),_('Could not start TLS. Please check your LDAP server configuration.')),
+				'type'=>'error'));
+
+			return false;
+
+		} else
+			return true;
+	}
+
+	/**
+	 * Fetches whether SASL has been configured for use with a certain server.
+	 *
+	 * Users may configure phpLDAPadmin to use SASL in config,php thus:
+	 * <code>
+	 *	$servers->setValue('server','sasl',true|false);
+	 * </code>
+	 *
+	 * @return boolean
+	 */
+	private function isSASLEnabled() {
+		if (DEBUG_ENABLED && (($fargs=func_get_args())||$fargs='NOARGS'))
+			debug_log('Entered (%%)',17,0,__FILE__,__LINE__,__METHOD__,$fargs);
+
+		if ($this->getValue('server','sasl') && ! function_exists('ldap_sasl_bind')) {
+				error(_('SASL has been enabled in your config, but your PHP install does not support SASL. SASL will be disabled.'),'warn');
+			return false;
+
+		} else
+			return $this->getValue('server','sasl');
+	}
+
+	/**
+	 * If SASL is configured, then start it
+	 * To be able to use SASL, PHP should have been compliled with --with-ldap-sasl=DIR
+	 *
+	 * @todo This has not been tested, please let the developers know if this function works as expected.
+	 */
+	private function startSASL($resource,$method) {
+		if (DEBUG_ENABLED && (($fargs=func_get_args())||$fargs='NOARGS'))
+			debug_log('Entered (%%)',17,0,__FILE__,__LINE__,__METHOD__,$fargs);
+
+		static $CACHE = array();
+
+		if (! $this->getValue('server','sasl') || ! function_exists('ldap_start_tls'))
+			return false;
+
+		if (! isset($CACHE['login_dn'])) {
+			$CACHE['login_dn'] = is_null($this->getLogin($method)) ? $this->getLogin('user') : $this->getLogin($method);
+			$CACHE['login_pass'] = is_null($this->getPassword($method)) ? $this->getPassword('user') : $this->getPassword($method);
+		}
+
+		$mech = strtolower($this->getValue('sasl','mech'));
+
+		# Do we need to rewrite authz_id?
+		if (! isset($CACHE['authz_id']))
+			if (! trim($this->getValue('sasl','authz_id')) && $mech != 'gssapi') {
+
+			if (DEBUG_ENABLED)
+				debug_log('Rewriting bind DN [%s] -> authz_id with regex [%s] and replacement [%s].',9,0,__FILE__,__LINE__,__METHOD__,
+					$CACHE['login_dn'],
+					$this->getValue('sasl','authz_id_regex'),
+					$this->getValue('sasl','authz_id_replacement'));
+
+			$CACHE['authz_id'] = @preg_replace($this->getValue('sasl','authz_id_regex'),
+				$this->getValue('sasl','authz_id_replacement'),$CACHE['login_dn']);
+
+			# Invalid regex?
+			if (is_null($CACHE['authz_id']))
+				error(sprintf(_('It seems that sasl_authz_id_regex "%s" contains invalid PCRE regular expression. The error is "%s".'),
+					$this->getValue('sasl','authz_id_regex'),(isset($php_errormsg) ? $php_errormsg : '')),
+					'error','index.php');
+
+			if (DEBUG_ENABLED)
+				debug_log('Resource [%s], SASL OPTIONS: mech [%s], realm [%s], authz_id [%s], props [%s]',9,0,__FILE__,__LINE__,__METHOD__,
+					$resource,
+					$this->getValue('sasl','mech'),
+					$this->getValue('sasl','realm'),
+					$CACHE['authz_id'],
+					$this->getValue('sasl','props'));
+
+			} else
+				$CACHE['authz_id'] = $this->getValue('sasl','authz_id');
+
+		# @todo this function is different in PHP5.1 and PHP5.2
+		return @ldap_sasl_bind($resource,$CACHE['login_dn'],$CACHE['login_pass'],
+			$this->getValue('sasl','mech'),
+			$this->getValue('sasl','realm'),
+			$CACHE['authz_id'],
+			$this->getValue('sasl','props'));
+	}
+
+	/**
+	 * Fetches whether PROXY AUTH has been configured for use with a certain server.
+	 *
+	 * Users may configure phpLDAPadmin to use PROXY AUTH in config,php thus:
+	 * <code>
+	 *	$servers->setValue('login','auth_type','proxy');
+	 * </code>
+	 *
+	 * @return boolean
+	 */
+	private function isProxyEnabled() {
+		if (DEBUG_ENABLED && (($fargs=func_get_args())||$fargs='NOARGS'))
+			debug_log('Entered (%%)',17,0,__FILE__,__LINE__,__METHOD__,$fargs);
+
+		return $this->getValue('login','auth_type') == 'proxy' ? true : false;
+	}
+
+	/**
+	 * If PROXY AUTH is configured, then start it
+	 */
+	private function startProxy($resource,$method) {
+		if (DEBUG_ENABLED && (($fargs=func_get_args())||$fargs='NOARGS'))
+			debug_log('Entered (%%)',17,0,__FILE__,__LINE__,__METHOD__,$fargs);
+
+		$rootdse = $this->getRootDSE();
+
+		if (! (isset($rootdse['supportedcontrol']) && in_array('2.16.840.1.113730.3.4.18',$rootdse['supportedcontrol']))) {
+			system_message(array(
+				'title'=>sprintf('%s %s',_('Unable to start proxy connection'),$this->getName()),
+				'body'=>sprintf('<b>%s</b>: %s',_('Error'),_('Your LDAP server doesnt seem to support this control')),
+				'type'=>'error'));
+
+			return false;
+		}
+
+		$filter = '(&';
+		$dn = '';
+
+		$missing = false;
+		foreach ($this->getValue('proxy','attr') as $attr => $var) {
+			if (! isset($_SERVER[$var])) {
+				system_message(array(
+					'title'=>sprintf('%s %s',_('Unable to start proxy connection'),$this->getName()),
+					'body'=>sprintf('<b>%s</b>: %s (%s)',_('Error'),_('Attribute doesnt exist'),$var),
+					'type'=>'error'));
+
+				$missing = true;
+
+			} else {
+				if ($attr == 'dn') {
+					$dn = $var;
+
+					break;
+
+				} else
+					$filter .= sprintf('(%s=%s)',$attr,$_SERVER[$var]);
+			}
+		}
+
+		if ($missing)
+			return false;
+
+		$filter .= ')';
+
+		if (! $dn) {
+			$query['filter'] = $filter;
+
+			foreach ($this->getBaseDN() as $base) {
+				$query['base'] = $base;
+
+				if ($search = $this->query($query,$method))
+					break;
+			}
+
+			if (count($search) != 1) {
+				system_message(array(
+					'title'=>sprintf('%s %s',_('Unable to start proxy connection'),$this->getName()),
+					'body'=>sprintf('<b>%s</b>: %s (%s)',_('Error'),_('Search for DN returned the incorrect number of results'),count($search)),
+					'type'=>'error'));
+
+				return false;
+			}
+
+			$search = array_pop($search);
+			$dn = $search['dn'];
+		}
+
+		$ctrl = array(
+			'oid'=>'2.16.840.1.113730.3.4.18',
+			'value'=>sprintf('dn:%s',$dn),
+			'iscritical' => true);
+
+		if (! ldap_set_option($resource,LDAP_OPT_SERVER_CONTROLS,array($ctrl))) {
+			system_message(array(
+				'title'=>sprintf('%s %s',_('Unable to start proxy connection'),$this->getName()),
+				'body'=>sprintf('<b>%s</b>: %s (%s) for <b>%s</b>',_('Error'),$this->getErrorMessage($method),$this->getErrorNum($method),$method),
+				'type'=>'error'));
+
+			return false;
+		}
+
+		$_SESSION['USER'][$this->index][$method]['proxy'] = blowfish_encrypt($dn);
+
+		return true;
+	}
+
+	/**
+	 * Modify attributes of a DN
+	 */
+	public function modify($dn,$attrs,$method=null) {
+		if (DEBUG_ENABLED && (($fargs=func_get_args())||$fargs='NOARGS'))
+			debug_log('Entered (%%)',17,0,__FILE__,__LINE__,__METHOD__,$fargs);
+
+		# We need to supress the error here - programming should detect and report it.
+		return @ldap_mod_replace($this->connect($method),$dn,$attrs);
+	}
+
+	/**
+	 * Gets the root DN of the specified LDAPServer, or null if it
+	 * can't find it (ie, the server won't give it to us, or it isnt
+	 * specified in the configuration file).
+	 *
+	 * Tested with OpenLDAP 2.0, Netscape iPlanet, and Novell eDirectory 8.7 (nldap.com)
+	 * Please report any and all bugs!!
+	 *
+	 * Please note: On FC systems, it seems that php_ldap uses /etc/openldap/ldap.conf in
+	 * the search base if it is blank - so edit that file and comment out the BASE line.
+	 *
+	 * @param string Which connection method resource to use
+	 * @return array dn|null The root DN of the server on success (string) or null on error.
+	 * @todo Sort the entries, so that they are in the correct DN order.
+	 */
+	public function getBaseDN($method=null) {
+		if (DEBUG_ENABLED && (($fargs=func_get_args())||$fargs='NOARGS'))
+			debug_log('Entered (%%)',17,0,__FILE__,__LINE__,__METHOD__,$fargs);
+
+		static $CACHE;
+
+		$method = $this->getMethod($method);
+		$result = array();
+
+		if (isset($CACHE[$this->index][$method]))
+			return $CACHE[$this->index][$method];
+
+		# If the base is set in the configuration file, then just return that.
+		if (count($this->getValue('server','base'))) {
+			if (DEBUG_ENABLED)
+				debug_log('Return BaseDN from Config [%s]',17,0,__FILE__,__LINE__,__METHOD__,implode('|',$this->getValue('server','base')));
+
+			$CACHE[$this->index][$method] = $this->getValue('server','base');
+
+		# We need to figure it out.
+		} else {
+			if (DEBUG_ENABLED)
+				debug_log('Connect to LDAP to find BaseDN',80,0,__FILE__,__LINE__,__METHOD__);
+
+			# Set this to empty, in case we loop back here looking for the baseDNs
+			$CACHE[$this->index][$method] = array();
+
+			$results = $this->getDNAttrValues('',$method);
+
+			if (isset($results['namingcontexts'])) {
+				if (DEBUG_ENABLED)
+					debug_log('LDAP Entries:%s',80,0,__FILE__,__LINE__,__METHOD__,implode('|',$results['namingcontexts']));
+
+				$result = $results['namingcontexts'];
+			}
+
+			$CACHE[$this->index][$method] = $result;
+		}
+
+		return $CACHE[$this->index][$method];
+	}
+
+	/**
+	 * Gets whether an entry exists based on its DN. If the entry exists,
+	 * returns true. Otherwise returns false.
+	 *
+	 * @param string The DN of the entry of interest.
+	 * @param string Which connection method resource to use
+	 * @return boolean
+	 */
+	public function dnExists($dn,$method=null) {
+		if (DEBUG_ENABLED && (($fargs=func_get_args())||$fargs='NOARGS'))
+			debug_log('Entered (%%)',17,0,__FILE__,__LINE__,__METHOD__,$fargs);
+
+		$results = $this->getDNAttrValues($dn,$method);
+
+		if ($results)
+			return $results;
+		else
+			return false;
+	}
+
+	/**
+	 * Given a DN string, this returns the top container portion of the string.
+	 *
+	 * @param string The DN whose container string to return.
+	 * @return string The container
+	 */
+	public function getContainerTop($dn) {
+		if (DEBUG_ENABLED && (($fargs=func_get_args())||$fargs='NOARGS'))
+			debug_log('Entered (%%)',17,0,__FILE__,__LINE__,__METHOD__,$fargs);
+
+		$return = $dn;
+
+		foreach ($this->getBaseDN() as $base) {
+			if (preg_match("/${base}$/i",$dn)) {
+				$return = $base;
+				break;
+			}
+		}
+
+		if (DEBUG_ENABLED)
+			debug_log('Returning (%s)',17,0,__FILE__,__LINE__,__METHOD__,$return);
+
+		return $return;
+	}
+
+	/**
+	 * Given a DN string and a path like syntax, this returns the parent container portion of the string.
+	 *
+	 * @param string The DN whose container string to return.
+	 * @param string Either '/', '.' or something like '../../<rdn>'
+	 * @return string The container
+	 */
+	public function getContainerPath($dn,$path='..') {
+		if (DEBUG_ENABLED && (($fargs=func_get_args())||$fargs='NOARGS'))
+			debug_log('Entered (%%)',17,0,__FILE__,__LINE__,__METHOD__,$fargs);
+
+		$top = $this->getContainerTop($dn);
+
+		if ($path[0] == '/') {
+			$dn = $top;
+			$path = substr($path,1);
+
+		} elseif ($path == '.') {
+			return $dn;
+		}
+
+		$parenttree = explode('/',$path);
+
+		foreach ($parenttree as $key => $value) {
+			if ($value == '..') {
+				if ($this->getContainer($dn))
+					$dn = $this->getContainer($dn);
+
+				if ($dn == $top)
+					break;
+
+			} elseif($value)
+				$dn = sprintf('%s,%s',$value,$dn);
+
+			else
+				break;
+		}
+
+		if (! $dn) {
+			debug_dump(array(__METHOD__,'dn'=>$dn,'path'=>$path));
+			debug_dump_backtrace('Container is empty?',1);
+		}
+
+		return $dn;
+	}
+
+	/**
+	 * Given a DN string, this returns the parent container portion of the string.
+	 * For example. given 'cn=Manager,dc=example,dc=com', this function returns
+	 * 'dc=example,dc=com'.
+	 *
+	 * @param string The DN whose container string to return.
+	 * @return string The container
+	 */
+	public function getContainer($dn) {
+		if (DEBUG_ENABLED && (($fargs=func_get_args())||$fargs='NOARGS'))
+			debug_log('Entered (%%)',17,0,__FILE__,__LINE__,__METHOD__,$fargs);
+
+		$parts = $this->explodeDN($dn);
+
+		if (count($parts) <= 1)
+			$return = null;
+
+		else {
+			$return = $parts[1];
+
+			for ($i=2;$i<count($parts);$i++)
+				$return .= sprintf(',%s',$parts[$i]);
+		}
+
+		if (DEBUG_ENABLED)
+			debug_log('Returning (%s)',17,0,__FILE__,__LINE__,__METHOD__,$return);
+
+		return $return;
+	}
+
+	/**
+	 * Gets a list of child entries for an entry. Given a DN, this function fetches the list of DNs of
+	 * child entries one level beneath the parent. For example, for the following tree:
+	 *
+	 * <code>
+	 *	dc=example,dc=com
+	 *		ou=People
+	 *			cn=Dave
+	 *			cn=Fred
+	 *			cn=Joe
+	 *		ou=More People
+	 *			cn=Mark
+	 *			cn=Bob
+	 * </code>
+	 *
+	 * Calling <code>getContainerContents("ou=people,dc=example,dc=com")</code>
+	 * would return the following list:
+	 *
+	 * <code>
+	 *	cn=Dave
+	 *	cn=Fred
+	 *	cn=Joe
+	 *	ou=More People
+	 * </code>
+	 *
+	 * @param string The DN of the entry whose children to return.
+	 * @param string Which connection method resource to use
+	 * @param int (optional) The maximum number of entries to return.
+	 *            If unspecified, no limit is applied to the number of entries in the returned.
+	 * @param string (optional) An LDAP filter to apply when fetching children, example: "(objectClass=inetOrgPerson)"
+	 * @param constant (optional) The LDAP deref setting to use in the query
+	 * @return array An array of DN strings listing the immediate children of the specified entry.
+	 */
+	public function getContainerContents($dn,$method=null,$size_limit=0,$filter='(objectClass=*)',$deref=LDAP_DEREF_NEVER) {
+		if (DEBUG_ENABLED && (($fargs=func_get_args())||$fargs='NOARGS'))
+			debug_log('Entered (%%)',17,0,__FILE__,__LINE__,__METHOD__,$fargs);
+
+		$return = array();
+
+		$query = array();
+		$query['base'] = $this->escapeDN($dn);
+		$query['attrs'] = array('dn');
+		$query['filter'] = $filter;
+		$query['deref'] = $deref;
+		$query['scope'] = 'one';
+		$query['size_limit'] = $size_limit;
+		$results = $this->query($query,$method);
+
+		if ($results) {
+			foreach ($results as $index => $entry) {
+				$child_dn = $entry['dn'];
+				array_push($return,$child_dn);
+			}
+		}
+
+		if (DEBUG_ENABLED)
+			debug_log('Returning (%s)',17,0,__FILE__,__LINE__,__METHOD__,$return);
+
+		# Sort the results
+		asort($return);
+
+		return $return;
+	}
+
+	/**
+	 * Explode a DN into an array of its RDN parts.
+	 *
+	 * @param string The DN to explode.
+	 * @param int (optional) Whether to include attribute names (see http://php.net/ldap_explode_dn for details)
+	 *
+	 * @return array An array of RDN parts of this format:
+	 * <code>
+	 *	Array
+	 *		(
+	 *			[0] => uid=ppratt
+	 *			[1] => ou=People
+	 *			[2] => dc=example
+	 *			[3] => dc=com
+	 *		)
+	 * </code>
+	 *
+	 * NOTE: When a multivalue RDN is passed to ldap_explode_dn, the results returns with 'value + value';
+	 */
+	private function explodeDN($dn,$with_attributes=0) {
+		if (DEBUG_ENABLED && (($fargs=func_get_args())||$fargs='NOARGS'))
+			debug_log('Entered (%%)',17,0,__FILE__,__LINE__,__METHOD__,$fargs);
+
+		static $CACHE;
+
+		if (isset($CACHE['explode'][$dn][$with_attributes])) {
+			if (DEBUG_ENABLED)
+				debug_log('Return CACHED result (%s) for (%s)',1,0,__FILE__,__LINE__,__METHOD__,
+					$CACHE['explode'][$dn][$with_attributes],$dn);
+
+			return $CACHE['explode'][$dn][$with_attributes];
+		}
+
+		$dn = addcslashes($dn,'<>+";');
+
+		# split the dn
+		$result[0] = ldap_explode_dn($this->escapeDN($dn),0);
+		$result[1] = ldap_explode_dn($this->escapeDN($dn),1);
+		if (! $result[$with_attributes]) {
+			if (DEBUG_ENABLED)
+				debug_log('Returning NULL - NO result.',1,0,__FILE__,__LINE__,__METHOD__);
+
+			return array();
+		}
+
+		# Remove our count value that ldap_explode_dn returns us.
+		unset($result[0]['count']);
+		unset($result[1]['count']);
+
+		# Record the forward and reverse entries in the cache.
+		foreach ($result as $key => $value) {
+			# translate hex code into ascii for display
+			$result[$key] = $this->unescapeDN($value);
+
+			$CACHE['explode'][implode(',',$result[0])][$key] = $result[$key];
+			$CACHE['explode'][implode(',',array_reverse($result[0]))][$key] = array_reverse($result[$key]);
+		}
+
+		if (DEBUG_ENABLED)
+			debug_log('Returning (%s)',17,0,__FILE__,__LINE__,__METHOD__,$result[$with_attributes]);
+
+		return $result[$with_attributes];
+	}
+
+	/**
+	 * Parse a DN and escape any special characters
+	 */
+	protected function escapeDN($dn) {
+		if (DEBUG_ENABLED && (($fargs=func_get_args())||$fargs='NOARGS'))
+			debug_log('Entered (%%)',17,0,__FILE__,__LINE__,__METHOD__,$fargs);
+
+		if (! trim($dn))
+			return $dn;
+
+		# Check if the RDN has a comma and escape it.
+		while (preg_match('/([^\\\\]),(\s*[^=]*\s*),/',$dn))
+			$dn = preg_replace('/([^\\\\]),(\s*[^=]*\s*),/','$1\\\\2C$2,',$dn);
+
+		$dn = preg_replace('/([^\\\\]),(\s*[^=]*\s*)([^,])$/','$1\\\\2C$2$3',$dn);
+
+		if (DEBUG_ENABLED)
+			debug_log('Returning (%s)',17,0,__FILE__,__LINE__,__METHOD__,$dn);
+
+		return $dn;
+	}
+
+	/**
+	 * Parse a DN and unescape any special characters
+	 */
+	private function unescapeDN($dn) {
+		if (DEBUG_ENABLED && (($fargs=func_get_args())||$fargs='NOARGS'))
+			debug_log('Entered (%%)',17,0,__FILE__,__LINE__,__METHOD__,$fargs);
+
+		if (is_array($dn)) {
+			$a = array();
+			foreach ($dn as $key => $rdn)
+				$a[$key] = preg_replace('/\\\([0-9A-Fa-f]{2})/e',"''.chr(hexdec('\\1')).''",$rdn);
+
+			return $a;
+
+		} else
+			return preg_replace('/\\\([0-9A-Fa-f]{2})/e',"''.chr(hexdec('\\1')).''",$dn);
+	}
+
+	public function getRootDSE($method=null) {
+		if (DEBUG_ENABLED && (($fargs=func_get_args())||$fargs='NOARGS'))
+			debug_log('Entered (%%)',17,0,__FILE__,__LINE__,__METHOD__,$fargs);
+
+		$query = array();
+		$query['base'] = '';
+		$query['scope'] = 'base';
+		$query['attrs'] = $this->getValue('server','root_dse_attributes');
+		$query['baseok'] = true;
+		$results = $this->query($query,$method);
+
+		if (is_array($results) && count($results) == 1)
+			return array_change_key_case(array_pop($results));
+		else
+			return array();
+	}
+
+	/** Schema Methods **/
+	/**
+	 * This function will query the ldap server and request the subSchemaSubEntry which should be the Schema DN.
+	 *
+	 * If we cant connect to the LDAP server, we'll return false.
+	 * If we can connect but cant get the entry, then we'll return null.
+	 *
+	 * @param string Which connection method resource to use
+	 * @param dn The DN to use to obtain the schema
+	 * @return array|false Schema if available, null if its not or false if we cant connect.
+	 */
+	private function getSchemaDN($method=null,$dn='') {
+		if (DEBUG_ENABLED && (($fargs=func_get_args())||$fargs='NOARGS'))
+			debug_log('Entered (%%)',25,0,__FILE__,__LINE__,__METHOD__,$fargs);
+
+		# If we already got the SchemaDN, then return it.
+		if ($this->_schemaDN)
+			return $this->_schemaDN;
+
+		if (! $this->connect($method))
+			return false;
+
+		$search = @ldap_read($this->connect($method),$dn,'objectclass=*',array('subschemaSubentry'),false,0,10,LDAP_DEREF_NEVER);
+
+		if (DEBUG_ENABLED)
+			debug_log('Search returned (%s)',24,0,__FILE__,__LINE__,__METHOD__,is_resource($search));
+
+		# Fix for broken ldap.conf configuration.
+		if (! $search && ! $dn) {
+			if (DEBUG_ENABLED)
+				debug_log('Trying to find the DN for "broken" ldap.conf',80,0,__FILE__,__LINE__,__METHOD__);
+
+			if (isset($this->_baseDN)) {
+				foreach ($this->_baseDN as $base) {
+					$search = @ldap_read($this->connect($method),$base,'objectclass=*',array('subschemaSubentry'),false,0,10,LDAP_DEREF_NEVER);
+
+					if (DEBUG_ENABLED)
+						debug_log('Search returned (%s) for base (%s)',24,0,__FILE__,__LINE__,__METHOD__,
+							is_resource($search),$base);
+
+					if ($search)
+						break;
+				}
+			}
+		}
+
+		if (! $search)
+			return null;
+
+		if (! @ldap_count_entries($this->connect($method),$search)) {
+			if (DEBUG_ENABLED)
+				debug_log('Search returned 0 entries. Returning NULL',25,0,__FILE__,__LINE__,__METHOD__);
+
+			return null;
+		}
+
+		$entries = @ldap_get_entries($this->connect($method),$search);
+
+		if (DEBUG_ENABLED)
+			debug_log('Search returned [%s]',24,0,__FILE__,__LINE__,__METHOD__,$entries);
+
+		if (! $entries || ! is_array($entries))
+			return null;
+
+		$entry = isset($entries[0]) ? $entries[0] : false;
+		if (! $entry) {
+			if (DEBUG_ENABLED)
+				debug_log('Entry is false, Returning NULL',80,0,__FILE__,__LINE__,__METHOD__);
+
+			return null;
+		}
+
+		$sub_schema_sub_entry = isset($entry[0]) ? $entry[0] : false;
+		if (! $sub_schema_sub_entry) {
+			if (DEBUG_ENABLED)
+				debug_log('Sub Entry is false, Returning NULL',80,0,__FILE__,__LINE__,__METHOD__);
+
+			return null;
+		}
+
+		$this->_schemaDN = isset($entry[$sub_schema_sub_entry][0]) ? $entry[$sub_schema_sub_entry][0] : false;
+
+		if (DEBUG_ENABLED)
+			debug_log('Returning (%s)',25,0,__FILE__,__LINE__,__METHOD__,$this->_schemaDN);
+
+		return $this->_schemaDN;
+	}
+
+	/**
+	 * Fetches the raw schema array for the subschemaSubentry of the server. Note,
+	 * this function has grown many hairs to accomodate more LDAP servers. It is
+	 * needfully complicated as it now supports many popular LDAP servers that
+	 * don't necessarily expose their schema "the right way".
+	 *
+	 * Please note: On FC systems, it seems that php_ldap uses /etc/openldap/ldap.conf in
+	 * the search base if it is blank - so edit that file and comment out the BASE line.
+	 *
+	 * @param string Which connection method resource to use
+	 * @param string A string indicating which type of schema to
+	 *		fetch. Five valid values: 'objectclasses', 'attributetypes',
+	 *		'ldapsyntaxes', 'matchingruleuse', or 'matchingrules'.
+	 *		Case insensitive.
+	 * @param dn (optional) This paremeter is the DN of the entry whose schema you
+	 * 		would like to fetch. Entries have the option of specifying
+	 * 		their own subschemaSubentry that points to the DN of the system
+	 * 		schema entry which applies to this attribute. If unspecified,
+	 *		this will try to retrieve the schema from the RootDSE subschemaSubentry.
+	 *		Failing that, we use some commonly known schema DNs. Default
+	 *		value is the Root DSE DN (zero-length string)
+	 * @return array an array of strings of this form:
+	 *	Array (
+	 *		[0] => "(1.3.6.1.4.1.7165.1.2.2.4 NAME 'gidPool' DESC 'Pool ...
+	 *		[1] => "(1.3.6.1.4.1.7165.2.2.3 NAME 'sambaAccount' DESC 'Sa ...
+	 *	etc.
+	 */
+	private function getRawSchema($method,$schema_to_fetch,$dn='') {
+		if (DEBUG_ENABLED && (($fargs=func_get_args())||$fargs='NOARGS'))
+			debug_log('Entered (%%)',25,0,__FILE__,__LINE__,__METHOD__,$fargs);
+
+		$valid_schema_to_fetch = array('objectclasses','attributetypes','ldapsyntaxes','matchingrules','matchingruleuse');
+
+		if (! $this->connect($method) || $this->noconnect)
+			return false;
+
+		# error checking
+		$schema_to_fetch = strtolower($schema_to_fetch);
+
+		if (! is_null($this->_schema_entries) && isset($this->_schema_entries[$schema_to_fetch])) {
+			$schema = $this->_schema_entries[$schema_to_fetch];
+
+			if (DEBUG_ENABLED)
+				debug_log('Returning CACHED (%s)',25,0,__FILE__,__LINE__,__METHOD__,$schema);
+
+			return $schema;
+		}
+
+		# This error message is not localized as only developers should ever see it
+		if (! in_array($schema_to_fetch,$valid_schema_to_fetch))
+			error(sprintf('Bad parameter provided to function to %s::getRawSchema(). "%s" is not valid for the schema_to_fetch parameter.',
+					get_class($this),$schema_to_fetch),'error','index.php');
+
+		# Try to get the schema DN from the specified entry.
+		$schema_dn = $this->getSchemaDN($method,$dn);
+
+		# Do we need to try again with the Root DSE?
+		if (! $schema_dn && trim($dn))
+			$schema_dn = $this->getSchemaDN($method,'');
+
+		# Store the eventual schema retrieval in $schema_search
+		$schema_search = null;
+
+		if ($schema_dn) {
+			if (DEBUG_ENABLED)
+				debug_log('Using Schema DN (%s)',24,0,__FILE__,__LINE__,__METHOD__,$schema_dn);
+
+			foreach (array('(objectClass=*)','(objectClass=subschema)') as $schema_filter) {
+				if (DEBUG_ENABLED)
+					debug_log('Looking for schema with Filter (%s)',24,0,__FILE__,__LINE__,__METHOD__,$schema_filter);
+
+				$schema_search = @ldap_read($this->connect($method),$schema_dn,$schema_filter,array($schema_to_fetch),false,0,10,LDAP_DEREF_NEVER);
+
+				if (is_null($schema_search))
+					continue;
+
+				$schema_entries = @ldap_get_entries($this->connect($method),$schema_search);
+
+				if (DEBUG_ENABLED)
+					debug_log('Search returned [%s]',24,0,__FILE__,__LINE__,__METHOD__,$schema_entries);
+
+				if (is_array($schema_entries) && isset($schema_entries['count']) && $schema_entries['count']) {
+					if (DEBUG_ENABLED)
+						debug_log('Found schema with (DN:%s) (FILTER:%s) (ATTR:%s)',24,0,__FILE__,__LINE__,__METHOD__,
+							$schema_dn,$schema_filter,$schema_to_fetch);
+
+					break;
+				}
+
+				if (DEBUG_ENABLED)
+					debug_log('Didnt find schema with filter (%s)',24,0,__FILE__,__LINE__,__METHOD__,$schema_filter);
+
+				unset($schema_entries);
+				$schema_search = null;
+			}
+		}
+
+		/* Second chance: If the DN or Root DSE didn't give us the subschemaSubentry, ie $schema_search
+		 * is still null, use some common subSchemaSubentry DNs as a work-around. */
+		if (is_null($schema_search)) {
+			if (DEBUG_ENABLED)
+				debug_log('Attempting work-arounds for "broken" LDAP servers...',24,0,__FILE__,__LINE__,__METHOD__);
+
+			foreach ($this->getBaseDN() as $base) {
+				$ldap['W2K3 AD'][expand_dn_with_base($base,'cn=Aggregate,cn=Schema,cn=configuration,')] = '(objectClass=*)';
+				$ldap['W2K AD'][expand_dn_with_base($base,'cn=Schema,cn=configuration,')] = '(objectClass=*)';
+				$ldap['W2K AD'][expand_dn_with_base($base,'cn=Schema,ou=Admin,')] = '(objectClass=*)';
+			}
+
+			# OpenLDAP and Novell
+			$ldap['OpenLDAP']['cn=subschema'] = '(objectClass=*)';
+
+			foreach ($ldap as $ldap_server_name => $ldap_options) {
+				foreach ($ldap_options as $ldap_dn => $ldap_filter) {
+					if (DEBUG_ENABLED)
+						debug_log('Attempting [%s] (%s) (%s)<BR>',24,0,__FILE__,__LINE__,__METHOD__,
+							$ldap_server_name,$ldap_dn,$ldap_filter);
+
+					$schema_search = @ldap_read($this->connect($method),$ldap_dn,$ldap_filter,array($schema_to_fetch),false,0,10,LDAP_DEREF_NEVER);
+					if (is_null($schema_search))
+						continue;
+
+					$schema_entries = @ldap_get_entries($this->connect($method),$schema_search);
+
+					if (DEBUG_ENABLED)
+						debug_log('Search returned [%s]',24,0,__FILE__,__LINE__,__METHOD__,$schema_entries);
+
+					if ($schema_entries && isset($schema_entries[0][$schema_to_fetch])) {
+						if (DEBUG_ENABLED)
+							debug_log('Found schema with filter of (%s)',24,0,__FILE__,__LINE__,__METHOD__,$ldap_filter);
+
+						break;
+					}
+
+					if (DEBUG_ENABLED)
+						debug_log('Didnt find schema with filter (%s)',24,0,__FILE__,__LINE__,__METHOD__,$ldap_filter);
+
+					unset($schema_entries);
+					$schema_search = null;
+				}
+				if ($schema_search)
+					break;
+			}
+		}
+
+		if (is_null($schema_search)) {
+			/* Still cant find the schema, try with the RootDSE
+			 * Attempt to pull schema from Root DSE with scope "base", or
+			 * Attempt to pull schema from Root DSE with scope "one" (work-around for Isode M-Vault X.500/LDAP) */
+			foreach (array('base','one') as $ldap_scope) {
+				if (DEBUG_ENABLED)
+					debug_log('Attempting to find schema with scope (%s), filter (objectClass=*) and a blank base.',24,0,__FILE__,__LINE__,__METHOD__,
+						$ldap_scope);
+
+				switch ($ldap_scope) {
+					case 'base':
+						$schema_search = @ldap_read($this->connect($method),'','(objectClass=*)',array($schema_to_fetch),false,0,10,LDAP_DEREF_NEVER);
+						break;
+
+					case 'one':
+						$schema_search = @ldap_list($this->connect($method),'','(objectClass=*)',array($schema_to_fetch),false,0,10,LDAP_DEREF_NEVER);
+						break;
+				}
+
+				if (is_null($schema_search))
+					continue;
+
+				$schema_entries = @ldap_get_entries($this->connect($method),$schema_search);
+				if (DEBUG_ENABLED)
+					debug_log('Search returned [%s]',24,0,__FILE__,__LINE__,__METHOD__,$schema_entries);
+
+				if ($schema_entries && isset($schema_entries[0][$schema_to_fetch])) {
+					if (DEBUG_ENABLED)
+						debug_log('Found schema with filter of (%s)',24,0,__FILE__,__LINE__,__METHOD__,'(objectClass=*)');
+
+					break;
+				}
+
+				if (DEBUG_ENABLED)
+					debug_log('Didnt find schema with filter (%s)',24,0,__FILE__,__LINE__,__METHOD__,'(objectClass=*)');
+
+				unset($schema_entries);
+				$schema_search = null;
+			}
+		}
+
+		$schema_error_message = 'Please contact the phpLDAPadmin developers and let them know:<ul><li>Which LDAP server you are running, including which version<li>What OS it is running on<li>Which version of PHP<li>As well as a link to some documentation that describes how to obtain the SCHEMA information</ul><br />We\'ll then add support for your LDAP server in an upcoming release.';
+		$schema_error_message_array = array('objectclasses','attributetypes');
+
+		# Shall we just give up?
+		if (is_null($schema_search)) {
+			# We need to have objectclasses and attribues, so display an error, asking the user to get us this information.
+			if (in_array($schema_to_fetch,$schema_error_message_array))
+				system_message(array(
+					'title'=>sprintf('%s (%s)',_('Our attempts to find your SCHEMA have failed'),$schema_to_fetch),
+					'body'=>sprintf('<b>%s</b>: %s',_('Error'),$schema_error_message),
+					'type'=>'error'));
+			else
+				if (DEBUG_ENABLED)
+					debug_log('Returning because schema_search is NULL ()',25,0,__FILE__,__LINE__,__METHOD__);
+
+			# We'll set this, so if we return here our cache will return the known false.
+			$this->_schema_entries[$schema_to_fetch] = false;
+			return false;
+		}
+
+		if (! $schema_entries) {
+			$return = false;
+			if (DEBUG_ENABLED)
+				debug_log('Returning false since ldap_get_entries() returned false.',25,0,__FILE__,__LINE__,__METHOD__,$return);
+
+			return $return;
+		}
+
+		if(! isset($schema_entries[0][$schema_to_fetch])) {
+			if (in_array($schema_to_fetch,$schema_error_message_array)) {
+				error(sprintf('Our attempts to find your SCHEMA for "%s" has return UNEXPECTED results.<br /><br /><small>(We expected a "%s" in the $schema array but it wasnt there.)</small><br /><br />%s<br /><br />Dump of $schema_search:<hr /><pre><small>%s</small></pre>',
+					$schema_to_fetch,gettype($schema_search),$schema_error_message,serialize($schema_entries)),'error','index.php');
+
+			} else {
+				$return = false;
+
+				if (DEBUG_ENABLED)
+					debug_log('Returning because (%s) isnt in the schema array. (%s)',25,0,__FILE__,__LINE__,__METHOD__,$schema_to_fetch,$return);
+
+				return $return;
+			}
+		}
+
+		/* Make a nice array of this form:
+			Array (
+				[0] => "(1.3.6.1.4.1.7165.1.2.2.4 NAME 'gidPool' DESC 'Pool ...)"
+				[1] => "(1.3.6.1.4.1.7165.2.2.3 NAME 'sambaAccount' DESC 'Sa ...)"
+			etc.) */
+
+		$schema = $schema_entries[0][$schema_to_fetch];
+		unset($schema['count']);
+		$this->_schema_entries[$schema_to_fetch] = $schema;
+
+		if (DEBUG_ENABLED)
+			debug_log('Returning (%s)',25,0,__FILE__,__LINE__,__METHOD__,$schema);
+
+		return $schema;
+	}
+
+	/**
+	 * Gets a single ObjectClass object specified by name.
+	 *
+	 * @param string $oclass_name The name of the objectClass to fetch.
+	 * @param string $dn (optional) It is easier to fetch schema if a DN is provided
+	 *               which defines the subschemaSubEntry attribute (all entries should).
+	 *
+	 * @return ObjectClass The specified ObjectClass object or false on error.
+	 *
+	 * @see ObjectClass
+	 * @see SchemaObjectClasses
+	 */
+	public function getSchemaObjectClass($oclass_name,$method=null,$dn='') {
+		if (DEBUG_ENABLED && (($fargs=func_get_args())||$fargs='NOARGS'))
+			debug_log('Entered (%%)',25,0,__FILE__,__LINE__,__METHOD__,$fargs);
+
+		$oclass_name = strtolower($oclass_name);
+		$socs = $this->SchemaObjectClasses($method,$dn);
+
+		# Default return value
+		$return = false;
+
+		if (isset($socs[$oclass_name]))
+			$return = $socs[$oclass_name];
+
+		if (DEBUG_ENABLED)
+			debug_log('Returning (%s)',25,0,__FILE__,__LINE__,__METHOD__,$return);
+
+		return $return;
+	}
+
+	/**
+	 * Gets a single AttributeType object specified by name.
+	 *
+	 * @param string $oclass_name The name of the AttributeType to fetch.
+	 * @param string $dn (optional) It is easier to fetch schema if a DN is provided
+	 *             which defines the subschemaSubEntry attribute (all entries should).
+	 *
+	 * @return AttributeType The specified AttributeType object or false on error.
+	 *
+	 * @see AttributeType
+	 * @see SchemaAttributes
+	 */
+	public function getSchemaAttribute($attr_name,$method=null,$dn='') {
+		if (DEBUG_ENABLED && (($fargs=func_get_args())||$fargs='NOARGS'))
+			debug_log('Entered (%%)',25,0,__FILE__,__LINE__,__METHOD__,$fargs);
+
+		$attr_name = strtolower($attr_name);
+		$sattrs = $this->SchemaAttributes($method,$dn);
+
+		# Default return value
+		$return = false;
+
+		if (isset($sattrs[$attr_name]))
+			$return = $sattrs[$attr_name];
+
+		if (DEBUG_ENABLED)
+			debug_log('Returning (%s)',25,0,__FILE__,__LINE__,__METHOD__,$return);
+
+		return $return;
+	}
+
+	/**
+	 * Gets an associative array of ObjectClass objects for the specified
+	 * server. Each array entry's key is the name of the objectClass
+	 * in lower-case and the value is an ObjectClass object.
+	 *
+	 * @param string $dn (optional) It is easier to fetch schema if a DN is provided
+	 *               which defines the subschemaSubEntry attribute (all entries should).
+	 *
+	 * @return array An array of ObjectClass objects.
+	 *
+	 * @see ObjectClass
+	 * @see getSchemaObjectClass
+	 */
+	public function SchemaObjectClasses($method=null,$dn='') {
+		if (DEBUG_ENABLED && (($fargs=func_get_args())||$fargs='NOARGS'))
+			debug_log('Entered (%%)',25,0,__FILE__,__LINE__,__METHOD__,$fargs);
+
+		# Set default return
+		$return = null;
+
+		if ($return = get_cached_item($this->index,'schema','objectclasses')) {
+			if (DEBUG_ENABLED)
+				debug_log('Returning CACHED [%s] (%s)',25,0,__FILE__,__LINE__,__METHOD__,$this->index,'objectclasses');
+
+			return $return;
+		}
+
+		$raw = $this->getRawSchema($method,'objectclasses',$dn);
+
+		if ($raw) {
+			# Build the array of objectClasses
+			$return = array();
+
+			foreach ($raw as $line) {
+				if (is_null($line) || ! strlen($line))
+					continue;
+
+				$object_class = new ObjectClass($line,$this);
+				$return[$object_class->getName()] = $object_class;
+			}
+
+			# Now go through and reference the parent/child relationships
+			foreach ($return as $oclass)
+				foreach ($oclass->getSupClasses() as $parent_name)
+					if (isset($return[strtolower($parent_name)]))
+						$return[strtolower($parent_name)]->addChildObjectClass($oclass->getName(false));
+
+			ksort($return);
+
+			# cache the schema to prevent multiple schema fetches from LDAP server
+			set_cached_item($this->index,'schema','objectclasses',$return);
+		}
+
+		if (DEBUG_ENABLED)
+			debug_log('Returning (%s)',25,0,__FILE__,__LINE__,__METHOD__,$return);
+
+		return $return;
+	}
+
+	/**
+	 * Gets an associative array of AttributeType objects for the specified
+	 * server. Each array entry's key is the name of the attributeType
+	 * in lower-case and the value is an AttributeType object.
+	 *
+	 * @param string $dn (optional) It is easier to fetch schema if a DN is provided
+	 *             which defines the subschemaSubEntry attribute (all entries should).
+	 *
+	 * @return array An array of AttributeType objects.
+	 */
+	public function SchemaAttributes($method=null,$dn='') {
+		if (DEBUG_ENABLED && (($fargs=func_get_args())||$fargs='NOARGS'))
+			debug_log('Entered (%%)',25,0,__FILE__,__LINE__,__METHOD__,$fargs);
+
+		# Set default return
+		$return = null;
+
+		if ($return = get_cached_item($this->index,'schema','attributes')) {
+			if (DEBUG_ENABLED)
+				debug_log('(): Returning CACHED [%s] (%s)',25,0,__FILE__,__LINE__,__METHOD__,$this->index,'attributes');
+
+			return $return;
+		}
+
+		$raw = $this->getRawSchema($method,'attributeTypes',$dn);
+
+		if ($raw) {
+			# build the array of attribueTypes
+			$syntaxes = $this->SchemaSyntaxes($method,$dn);
+			$attrs = array();
+
+			/**
+			 * bug 856832: create two arrays - one indexed by name (the standard
+			 * $attrs array above) and one indexed by oid (the new $attrs_oid array
+			 * below). This will help for directory servers, like IBM's, that use OIDs
+			 * in their attribute definitions of SUP, etc
+			 */
+			$attrs_oid = array();
+			foreach ($raw as $line) {
+				if (is_null($line) || ! strlen($line))
+					continue;
+
+				$attr = new AttributeType($line);
+				if (isset($syntaxes[$attr->getSyntaxOID()])) {
+					$syntax = $syntaxes[$attr->getSyntaxOID()];
+					$attr->setType($syntax->getDescription());
+				}
+				$attrs[$attr->getName()] = $attr;
+
+				/**
+				 * bug 856832: create an entry in the $attrs_oid array too. This
+				 * will be a ref to the $attrs entry for maintenance and performance
+				 * reasons
+				 */
+				$attrs_oid[$attr->getOID()] = &$attrs[$attr->getName()];
+			}
+
+			# go back and add data from aliased attributeTypes
+			foreach ($attrs as $name => $attr) {
+				$aliases = $attr->getAliases();
+
+				if (is_array($aliases) && count($aliases) > 0) {
+					/* foreach of the attribute's aliases, create a new entry in the attrs array
+					 * with its name set to the alias name, and all other data copied.*/
+					foreach ($aliases as $alias_attr_name) {
+						$new_attr = clone $attr;
+
+						$new_attr->setName($alias_attr_name);
+						$new_attr->addAlias($attr->getName(false));
+						$new_attr->removeAlias($alias_attr_name);
+						$new_attr_key = strtolower($alias_attr_name);
+						$attrs[$new_attr_key] = $new_attr;
+					}
+				}
+			}
+
+			# go back and add any inherited descriptions from parent attributes (ie, cn inherits name)
+			foreach ($attrs as $key => $attr) {
+				$sup_attr_name = $attr->getSupAttribute();
+				$sup_attr = null;
+
+				if (trim($sup_attr_name)) {
+
+					/* This loop really should traverse infinite levels of inheritance (SUP) for attributeTypes,
+					 * but just in case we get carried away, stop at 100. This shouldn't happen, but for
+					 * some weird reason, we have had someone report that it has happened. Oh well.*/
+					$i = 0;
+					while ($i++<100 /** 100 == INFINITY ;) */) {
+
+						if (isset($attrs_oid[$sup_attr_name])) {
+							$attr->setSupAttribute($attrs_oid[$sup_attr_name]->getName());
+							$sup_attr_name = $attr->getSupAttribute();
+						}
+
+						if (! isset($attrs[strtolower($sup_attr_name)])){
+							error(sprintf('Schema error: attributeType "%s" inherits from "%s", but attributeType "%s" does not exist.',
+								$attr->getName(),$sup_attr_name,$sup_attr_name),'error','index.php');
+							return;
+						}
+
+						$sup_attr = $attrs[strtolower($sup_attr_name)];
+						$sup_attr_name = $sup_attr->getSupAttribute();
+
+						# Does this superior attributeType not have a superior attributeType?
+						if (is_null($sup_attr_name) || strlen(trim($sup_attr_name)) == 0) {
+
+							/* Since this attribute's superior attribute does not have another superior
+							 * attribute, clone its properties for this attribute. Then, replace
+							 * those cloned values with those that can be explicitly set by the child
+							 * attribute attr). Save those few properties which the child can set here:*/
+							$tmp_name = $attr->getName(false);
+							$tmp_oid = $attr->getOID();
+							$tmp_sup = $attr->getSupAttribute();
+							$tmp_aliases = $attr->getAliases();
+							$tmp_single_val = $attr->getIsSingleValue();
+							$tmp_desc = $attr->getDescription();
+
+							/* clone the SUP attributeType and populate those values
+							 * that were set by the child attributeType */
+							$attr = clone $sup_attr;
+
+							$attr->setOID($tmp_oid);
+							$attr->setName($tmp_name);
+							$attr->setSupAttribute($tmp_sup);
+							$attr->setAliases($tmp_aliases);
+							$attr->setDescription($tmp_desc);
+
+							/* only overwrite the SINGLE-VALUE property if the child explicitly sets it
+							 * (note: All LDAP attributes default to multi-value if not explicitly set SINGLE-VALUE) */
+							if ($tmp_single_val)
+								$attr->setIsSingleValue(true);
+
+							/* replace this attribute in the attrs array now that we have populated
+								 new values therein */
+							$attrs[$key] = $attr;
+
+							# very important: break out after we are done with this attribute
+							$sup_attr_name = null;
+							$sup_attr = null;
+							break;
+						}
+					}
+				}
+			}
+
+			ksort($attrs);
+
+			# Add the used in and required_by values.
+			$socs = $this->SchemaObjectClasses($method);
+			if (! is_array($socs))
+				return array();
+
+			foreach ($socs as $object_class) {
+				$must_attrs = $object_class->getMustAttrNames();
+				$may_attrs = $object_class->getMayAttrNames();
+				$oclass_attrs = array_unique(array_merge($must_attrs,$may_attrs));
+
+				# Add Used In.
+				foreach ($oclass_attrs as $attr_name)
+					if (isset($attrs[strtolower($attr_name)]))
+						$attrs[strtolower($attr_name)]->addUsedInObjectClass($object_class->getName(false));
+
+				# Add Required By.
+				foreach ($must_attrs as $attr_name)
+					if (isset($attrs[strtolower($attr_name)]))
+						$attrs[strtolower($attr_name)]->addRequiredByObjectClass($object_class->getName(false));
+
+				# Force May
+				foreach ($object_class->getForceMayAttrs() as $attr_name)
+					if (isset($attrs[strtolower($attr_name->name)]))
+						$attrs[strtolower($attr_name->name)]->setForceMay();
+			}
+
+			$return = $attrs;
+
+			# cache the schema to prevent multiple schema fetches from LDAP server
+			set_cached_item($this->index,'schema','attributes',$return);
+		}
+
+		if (DEBUG_ENABLED)
+			debug_log('Returning (%s)',25,0,__FILE__,__LINE__,__METHOD__,$return);
+
+		return $return;
+	}
+
+	/**
+	 * Returns an array of MatchingRule objects for the specified server.
+	 * The key of each entry is the OID of the matching rule.
+	 */
+	public function MatchingRules($method=null,$dn='') {
+		if (DEBUG_ENABLED && (($fargs=func_get_args())||$fargs='NOARGS'))
+			debug_log('Entered (%%)',25,0,__FILE__,__LINE__,__METHOD__,$fargs);
+
+		# Set default return
+		$return = null;
+
+		if ($return = get_cached_item($this->index,'schema','matchingrules')) {
+			if (DEBUG_ENABLED)
+				debug_log('Returning CACHED [%s] (%s).',25,0,__FILE__,__LINE__,__METHOD__,$this->index,'matchingrules');
+
+			return $return;
+		}
+
+		# build the array of MatchingRule objects
+		$raw = $this->getRawSchema($method,'matchingRules',$dn);
+
+		if ($raw) {
+			$rules = array();
+
+			foreach ($raw as $line) {
+				if (is_null($line) || ! strlen($line))
+					continue;
+
+				$rule = new MatchingRule($line);
+				$key = $rule->getName();
+				$rules[$key] = $rule;
+			}
+
+			ksort($rules);
+
+			/* For each MatchingRuleUse entry, add the attributes who use it to the
+			 * MatchingRule in the $rules array.*/
+			$raw = $this->getRawSchema($method,'matchingRuleUse');
+
+			if ($raw != false) {
+				foreach ($raw as $line) {
+					if (is_null($line) || ! strlen($line))
+						continue;
+
+					$rule_use = new MatchingRuleUse($line);
+					$key = $rule_use->getName();
+
+					if (isset($rules[$key]))
+						$rules[$key]->setUsedByAttrs($rule_use->getUsedByAttrs());
+				}
+
+			} else {
+				/* No MatchingRuleUse entry in the subschema, so brute-forcing
+				 * the reverse-map for the "$rule->getUsedByAttrs()" data.*/
+				$sattrs = $this->SchemaAttributes($method,$dn);
+				if (is_array($sattrs))
+					foreach ($sattrs as $attr) {
+						$rule_key = strtolower($attr->getEquality());
+
+						if (isset($rules[$rule_key]))
+							$rules[$rule_key]->addUsedByAttr($attr->getName(false));
+					}
+			}
+
+			$return = $rules;
+
+			# cache the schema to prevent multiple schema fetches from LDAP server
+			set_cached_item($this->index,'schema','matchingrules',$return);
+		}
+
+		if (DEBUG_ENABLED)
+			debug_log('Returning (%s)',25,0,__FILE__,__LINE__,__METHOD__,$return);
+
+		return $return;
+	}
+
+	/**
+	 * Returns an array of Syntax objects that this LDAP server uses mapped to
+	 * their descriptions. The key of each entry is the OID of the Syntax.
+	 */
+	public function SchemaSyntaxes($method=null,$dn='') {
+		if (DEBUG_ENABLED && (($fargs=func_get_args())||$fargs='NOARGS'))
+			debug_log('Entered (%%)',25,0,__FILE__,__LINE__,__METHOD__,$fargs);
+
+		# Set default return
+		$return = null;
+
+		if ($return = get_cached_item($this->index,'schema','syntaxes')) {
+			if (DEBUG_ENABLED)
+				debug_log('Returning CACHED [%s] (%s).',25,0,__FILE__,__LINE__,__METHOD__,$this->index,'syntaxes');
+
+			return $return;
+		}
+
+		$raw = $this->getRawSchema($method,'ldapSyntaxes',$dn);
+
+		if ($raw) {
+			# build the array of attributes
+			$return = array();
+
+			foreach ($raw as $line) {
+				if (is_null($line) || ! strlen($line))
+					continue;
+
+				$syntax = new Syntax($line);
+				$key = strtolower(trim($syntax->getOID()));
+
+				if (! $key)
+					continue;
+
+				$return[$key] = $syntax;
+			}
+
+			ksort($return);
+
+			# cache the schema to prevent multiple schema fetches from LDAP server
+			set_cached_item($this->index,'schema','syntaxes',$return);
+		}
+
+		if (DEBUG_ENABLED)
+			debug_log('Returning (%s)',25,0,__FILE__,__LINE__,__METHOD__,$return);
+
+		return $return;
+	}
+
+	/**
+	 * This function determines if the specified attribute is contained in the force_may list
+	 * as configured in config.php.
+	 *
+	 * @return boolean True if the specified attribute is in the $force_may list and false
+	 *              otherwise.
+	 */
+	function isForceMay($attr_name) {
+		if (DEBUG_ENABLED && (($fargs=func_get_args())||$fargs='NOARGS'))
+			debug_log('Entered (%%)',17,0,__FILE__,__LINE__,__METHOD__,$fargs);
+
+		return in_array($attr_name,$this->force_may);
+	}
+
+	/**
+	 * Much like getDNAttrValues(), but only returns the values for
+	 * one attribute of an object. Example calls:
+	 *
+	 * <code>
+	 *	print_r(getDNAttrValue('cn=Bob,ou=people,dc=example,dc=com','sn'));
+	 *	Array (
+	 *		[0] => Smith
+	 *	)
+	 *
+	 * print_r(getDNAttrValue('cn=Bob,ou=people,dc=example,dc=com','objectClass'));
+	 *	Array (
+	 *		[0] => top
+	 *		[1] => person
+	 *	)
+	 * </code>
+	 *
+	 * @param string The distinguished name (DN) of the entry whose attributes/values to fetch.
+	 * @param string The attribute whose value(s) to return (ie, "objectClass", "cn", "userPassword")
+	 * @param string Which connection method resource to use
+	 * @param constant For aliases and referrals, this parameter specifies whether to
+	 *            follow references to the referenced DN or to fetch the attributes for
+	 *            the referencing DN. See http://php.net/ldap_search for the 4 valid
+	 *            options.
+	 * @return array
+	 * @see getDNAttrValues
+	 * @todo Caching these values may be problematic with multiple calls and different deref values.
+	 */
+	public function getDNAttrValue($dn,$attr,$method=null,$deref=LDAP_DEREF_NEVER) {
+		if (DEBUG_ENABLED && (($fargs=func_get_args())||$fargs='NOARGS'))
+			debug_log('Entered (%%)',17,0,__FILE__,__LINE__,__METHOD__,$fargs);
+
+		# Ensure our attr is in lowercase
+		$attr = strtolower($attr);
+
+		$values = $this->getDNAttrValues($dn,$method,$deref);
+
+		if (isset($values[$attr]))
+			return $values[$attr];
+		else
+			return array();
+	}
+
+	/**
+	 * Gets the attributes/values of an entry. Returns an associative array whose
+	 * keys are attribute value names and whose values are arrays of values for
+	 * said attribute.
+	 *
+	 * Optionally, callers may specify true for the parameter
+	 * $lower_case_attr_names to force all keys in the associate array (attribute
+	 * names) to be lower case.
+	 *
+	 * Example of its usage:
+	 * <code>
+	 * print_r(getDNAttrValues('cn=Bob,ou=pepole,dc=example,dc=com')
+	 *	Array (
+	 *		[objectClass] => Array (
+	 *			[0] => person
+	 *			[1] => top
+	 *		)
+	 *		[cn] => Array (
+	 *			[0] => Bob
+	 *		)
+	 *		[sn] => Array (
+	 *			[0] => Jones
+	 *		)
+	 *		[dn] => Array (
+	 *			[0] => cn=Bob,ou=pepole,dc=example,dc=com
+	 *		)
+	 *	)
+	 * </code>
+	 *
+	 * @param string The distinguished name (DN) of the entry whose attributes/values to fetch.
+	 * @param string Which connection method resource to use
+	 * @param constant For aliases and referrals, this parameter specifies whether to
+	 *            follow references to the referenced DN or to fetch the attributes for
+	 *            the referencing DN. See http://php.net/ldap_search for the 4 valid
+	 *            options.
+	 * @return array
+	 * @see getDNSysAttrs
+	 * @see getDNAttrValue
+	 */
+	public function getDNAttrValues($dn,$method=null,$deref=LDAP_DEREF_NEVER,$attrs=array('*','+')) {
+		if (DEBUG_ENABLED && (($fargs=func_get_args())||$fargs='NOARGS'))
+			debug_log('Entered (%%)',17,0,__FILE__,__LINE__,__METHOD__,$fargs);
+
+		static $CACHE;
+
+		$cacheindex = null;
+		$method = $this->getMethod($method);
+
+		if (in_array('*',$attrs) && in_array('+',$attrs))
+			$cacheindex = '&';
+		elseif (in_array('+',$attrs))
+			$cacheindex = '+';
+		elseif (in_array('*',$attrs))
+			$cacheindex = '*';
+
+		if (! is_null($cacheindex) && isset($CACHE[$this->index][$method][$dn][$cacheindex])) {
+			$results = $CACHE[$this->index][$method][$dn][$cacheindex];
+
+			if (DEBUG_ENABLED)
+				debug_log('Returning (%s)',17,0,__FILE__,__LINE__,__METHOD__,$results);
+
+		} else {
+			$query = array();
+			$query['base'] = $this->escapeDN($dn);
+			$query['scope'] = 'base';
+			$query['deref'] = $deref;
+			$query['attrs'] = $attrs;
+			$query['baseok'] = true;
+			$results = $this->query($query,$method);
+
+			if (count($results))
+				$results = array_pop($results);
+
+			$results = array_change_key_case($results);
+
+			# Covert all our result key values to an array
+			foreach ($results as $key => $values)
+				if (! is_array($results[$key]))
+					$results[$key] = array($results[$key]);
+
+			# Finally sort the results
+			ksort($results);
+
+			if (! is_null($cacheindex) && count($results))
+				$CACHE[$this->index][$method][$dn][$cacheindex] = $results;
+		}
+
+		return $results;
+	}
+
+	/**
+	 * Returns true if the attribute specified is required to take as input a DN.
+	 * Some examples include 'distinguishedName', 'member' and 'uniqueMember'.
+	 *
+	 * @param string $attr_name The name of the attribute of interest (case insensitive)
+	 * @return boolean
+	 */
+	function isDNAttr($attr_name,$method=null) {
+		if (DEBUG_ENABLED && (($fargs=func_get_args())||$fargs='NOARGS'))
+			debug_log('Entered (%%)',17,0,__FILE__,__LINE__,__METHOD__,$fargs);
+
+		# Simple test first
+		$dn_attrs = array('aliasedObjectName');
+		foreach ($dn_attrs as $dn_attr)
+			if (strcasecmp($attr_name,$dn_attr) == 0)
+				return true;
+
+		# Now look at the schema OID
+		$sattr = $this->getSchemaAttribute($attr_name);
+		if (! $sattr)
+			return false;
+
+		$syntax_oid = $sattr->getSyntaxOID();
+		if ('1.3.6.1.4.1.1466.115.121.1.12' == $syntax_oid)
+		 	return true;
+		if ('1.3.6.1.4.1.1466.115.121.1.34' == $syntax_oid)
+			return true;
+
+		$syntaxes = $this->SchemaSyntaxes($method);
+		if (! isset($syntaxes[$syntax_oid]))
+			return false;
+
+		$syntax_desc = $syntaxes[ $syntax_oid ]->getDescription();
+		if (strpos(strtolower($syntax_desc),'distinguished name'))
+			return true;
+
+		return false;
+	}
+
+	/**
+	 * Used to determine if the specified attribute is indeed a jpegPhoto. If the
+	 * specified attribute is one that houses jpeg data, true is returned. Otherwise
+	 * this function returns false.
+	 *
+	 * @param string $attr_name The name of the attribute to test.
+	 * @return boolean
+	 * @see draw_jpeg_photo
+	 */
+	function isJpegPhoto($attr_name) {
+		if (DEBUG_ENABLED && (($fargs=func_get_args())||$fargs='NOARGS'))
+			debug_log('Entered (%%)',17,0,__FILE__,__LINE__,__METHOD__,$fargs);
+
+		# easy quick check
+		if (! strcasecmp($attr_name,'jpegPhoto') || ! strcasecmp($attr_name,'photo'))
+			return true;
+
+		# go to the schema and get the Syntax OID
+		$sattr = $this->getSchemaAttribute($attr_name);
+		if (! $sattr)
+			return false;
+
+		$oid = $sattr->getSyntaxOID();
+		$type = $sattr->getType();
+
+		if (! strcasecmp($type,'JPEG') || ($oid == '1.3.6.1.4.1.1466.115.121.1.28'))
+			return true;
+
+		return false;
+	}
+
+	/**
+	 * Given an attribute name and server ID number, this function returns
+	 * whether the attrbiute contains boolean data. This is useful for
+	 * developers who wish to display the contents of a boolean attribute
+	 * with a drop-down.
+	 *
+	 * @param string $attr_name The name of the attribute to test.
+	 * @return boolean
+	 */
+	function isAttrBoolean($attr_name) {
+		if (DEBUG_ENABLED && (($fargs=func_get_args())||$fargs='NOARGS'))
+			debug_log('Entered (%%)',17,0,__FILE__,__LINE__,__METHOD__,$fargs);
+
+		$type = ($sattr = $this->getSchemaAttribute($attr_name)) ? $sattr->getType() : null;
+
+		if (! strcasecmp('boolean',$type) ||
+			! strcasecmp('isCriticalSystemObject',$attr_name) ||
+			! strcasecmp('showInAdvancedViewOnly',$attr_name))
+			return true;
+
+		else
+			return false;
+	}
+
+	/**
+	 * Given an attribute name and server ID number, this function returns
+	 * whether the attribute may contain binary data. This is useful for
+	 * developers who wish to display the contents of an arbitrary attribute
+	 * but don't want to dump binary data on the page.
+	 *
+	 * @param string $attr_name The name of the attribute to test.
+	 * @return boolean
+	 *
+	 * @see isJpegPhoto
+	 */
+	function isAttrBinary($attr_name) {
+		if (DEBUG_ENABLED && (($fargs=func_get_args())||$fargs='NOARGS'))
+			debug_log('Entered (%%)',17,0,__FILE__,__LINE__,__METHOD__,$fargs);
+
+		/**
+		 * Determining if an attribute is binary can be an expensive operation.
+		 * We cache the results for each attr name on each server in the $attr_cache
+		 * to speed up subsequent calls. The $attr_cache looks like this:
+		 *
+		 * Array
+		 * 0 => Array
+		 *	'objectclass' => false
+		 *	'cn' => false
+		 *	'usercertificate' => true
+		 * 1 => Array
+		 *	'jpegphoto' => true
+		 *	'cn' => false
+		 */
+
+		static $attr_cache;
+
+		$attr_name = strtolower($attr_name);
+
+		if (isset($attr_cache[$this->index][$attr_name]))
+			return $attr_cache[$this->index][$attr_name];
+
+		if ($attr_name == 'userpassword') {
+			$attr_cache[$this->index][$attr_name] = false;
+			return false;
+		}
+
+		# Quick check: If the attr name ends in ";binary", then it's binary.
+		if (strcasecmp(substr($attr_name,strlen($attr_name) - 7),';binary') == 0) {
+			$attr_cache[$this->index][$attr_name] = true;
+			return true;
+		}
+
+		# See what the server schema says about this attribute
+		$sattr = $this->getSchemaAttribute($attr_name);
+		if (! is_object($sattr)) {
+
+			/* Strangely, some attributeTypes may not show up in the server
+			 * schema. This behavior has been observed in MS Active Directory.*/
+			$type = null;
+			$syntax = null;
+
+		} else {
+			$type = $sattr->getType();
+			$syntax = $sattr->getSyntaxOID();
+		}
+
+		if (strcasecmp($type,'Certificate') == 0 ||
+			strcasecmp($type,'Binary') == 0 ||
+			strcasecmp($attr_name,'usercertificate') == 0 ||
+			strcasecmp($attr_name,'usersmimecertificate') == 0 ||
+			strcasecmp($attr_name,'networkaddress') == 0 ||
+			strcasecmp($attr_name,'objectGUID') == 0 ||
+			strcasecmp($attr_name,'objectSID') == 0 ||
+			strcasecmp($attr_name,'auditingPolicy') == 0 ||
+			strcasecmp($attr_name,'jpegPhoto') == 0 ||
+			$syntax == '1.3.6.1.4.1.1466.115.121.1.10' ||
+			$syntax == '1.3.6.1.4.1.1466.115.121.1.28' ||
+			$syntax == '1.3.6.1.4.1.1466.115.121.1.5' ||
+			$syntax == '1.3.6.1.4.1.1466.115.121.1.8' ||
+			$syntax == '1.3.6.1.4.1.1466.115.121.1.9'
+		) {
+
+			$attr_cache[$this->index][$attr_name] = true;
+			return true;
+
+		} else {
+			$attr_cache[$this->index][$attr_name] = false;
+			return false;
+		}
+	}
+
+	/**
+	 * This function will test if a user is a member of a group.
+	 *
+	 * Inputs:
+	 * @param string $user membership value that is being checked
+	 * @param dn $group DN to see if user is a member
+	 * @return bool true|false
+	 */
+	function userIsMember($user,$group) {
+		if (DEBUG_ENABLED && (($fargs=func_get_args())||$fargs='NOARGS'))
+			debug_log('Entered (%%)',17,0,__FILE__,__LINE__,__METHOD__,$fargs);
+
+		$user = strtolower($user);
+		$group = $this->getDNAttrValues($group);
+
+		# If you are using groupOfNames objectClass
+		if (array_key_exists('member',$group) && ! is_array($group['member']))
+			$group['member'] = array($group['member']);
+
+		if (array_key_exists('member',$group) &&
+			in_array($user,arrayLower($group['member'])))
+
+			return true;
+
+		# If you are using groupOfUniqueNames objectClass
+		if (array_key_exists('uniquemember',$group) && ! is_array($group['uniquemember']))
+			$group['uniquemember'] = array($group['uniquemember']);
+
+		if (array_key_exists('uniquemember',$group) &&
+			in_array($user,arrayLower($group['uniquemember'])))
+
+			return true;
+
+		return false;
+	}
+
+	/**
+	 * This function will determine if the user is allowed to login based on a filter
+	 */
+	protected function userIsAllowedLogin($dn) {
+		if (DEBUG_ENABLED && (($fargs=func_get_args())||$fargs='NOARGS'))
+			debug_log('Entered (%%)',17,0,__FILE__,__LINE__,__METHOD__,$fargs);
+
+		$dn = trim(strtolower($dn));
+
+		if (! $this->getValue('login','allowed_dns'))
+			return true;
+
+        foreach ($this->getValue('login','allowed_dns') as $login_allowed_dn) {
+            if (DEBUG_ENABLED)
+                debug_log('Working through (%s)',80,0,__FILE__,__LINE__,__METHOD__,$login_allowed_dn);
+
+            /* Check if $login_allowed_dn is an ldap search filter
+             * Is first occurence of 'filter=' (case ensitive) at position 0 ? */
+            if (preg_match('/^\([&|]\(/',$login_allowed_dn)) {
+				$query = array();
+                $query['filter'] = $login_allowed_dn;
+				$query['attrs'] = array('dn');
+
+                foreach($this->getBaseDN() as $base_dn) {
+					$query['base'] = $base_dn;
+
+                    $results = $this->query($query,null);
+
+                    if (DEBUG_ENABLED)
+                        debug_log('Search, Filter [%s], BaseDN [%s] Results [%s]',16,0,__FILE__,__LINE__,__METHOD__,
+                            $query['filter'],$query['base'],$results);
+
+                    if ($results) {
+                    	$dn_array = array();
+
+                        foreach ($results as $result)
+                            array_push($dn_array,$result['dn']);
+
+                        $dn_array = array_unique($dn_array);
+
+                        if (count($dn_array))
+                            foreach ($dn_array as $result_dn) {
+                                if (DEBUG_ENABLED)
+                                    debug_log('Comparing with [%s]',80,0,__FILE__,__LINE__,__METHOD__,$result_dn);
+
+                                # Check if $result_dn is a user DN
+                                if (strcasecmp($dn,trim(strtolower($result_dn))) == 0)
+                                    return true;
+
+                                # Check if $result_dn is a group DN
+                                if ($this->userIsMember($dn,$result_dn))
+                                    return true;
+                        }
+                    }
+                }
+            }
+
+            # Check if $login_allowed_dn is a user DN
+            if (strcasecmp($dn,trim(strtolower($login_allowed_dn))) == 0)
+                return true;
+
+            # Check if $login_allowed_dn is a group DN
+            if ($this->userIsMember($dn,$login_allowed_dn))
+                return true;
+        }
+
+        return false;
+	}
+}
+?>
diff --git a/lam/templates/3rdParty/pla/lib/emuhash_functions.php b/lam/templates/3rdParty/pla/lib/emuhash_functions.php
new file mode 100644
index 00000000..7818f7fb
--- /dev/null
+++ b/lam/templates/3rdParty/pla/lib/emuhash_functions.php
@@ -0,0 +1,112 @@
+<?php
+/*******************************************************************************
+ * @package default
+ * emuhash - partly emulates the php mhash functions
+ * version: 2004040701
+ *
+ * (c) 2004 - Simon Matter <simon.matter@invoca.ch>
+ *
+ * This program is free software; you can redistribute it and/or modify
+ * it under the terms of the GNU General Public License as published by
+ * the Free Software Foundation; either version 2 of the License, or
+ * (at your option) any later version.
+ *
+ * This program is distributed in the hope that it will be useful,
+ * but WITHOUT ANY WARRANTY; without even the implied warranty of
+ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+ * GNU General Public License for more details.
+ *
+ * You should have received a copy of the GNU General Public License
+ * along with this program; if not, write to the Free Software
+ * Foundation, Inc., 59 Temple Place, Suite 330, Boston, MA  02111-1307  USA
+ *
+ ******************************************************************************/
+
+/******************************************************************************/
+/* Do we have builtin mhash support in this PHP version ?                     */
+/******************************************************************************/
+
+if (! function_exists('mhash') && ! function_exists('mhash_keygen_s2k')) {
+	$emuhash_emu = array();
+
+	if (! isset($emuhash_emu['openssl']))
+		$emuhash_emu['openssl'] = '/usr/bin/openssl';
+
+	# Don't create mhash functions if we don't have a working openssl
+	if (! file_exists($emuhash_emu['openssl']))
+		unset($emuhash_emu['openssl']);
+
+	elseif (function_exists('is_executable') && ! is_executable($emuhash_emu['openssl']))
+		unset($emuhash_emu['openssl']);
+
+	else {
+		if (! isset($emuhash_emu['tmpdir']))
+			$emuhash_emu['tmpdir'] = '/tmp';
+
+/******************************************************************************/
+/* Define constants used in the mhash emulation code.                         */
+/******************************************************************************/
+
+		define('MHASH_MD5','md5');
+		define('MHASH_SHA1','sha1');
+		define('MHASH_RIPEMD160','rmd160');
+
+/******************************************************************************/
+/* Functions to emulate parts of php-mash.                                    */
+/******************************************************************************/
+
+		function openssl_hash($openssl_hash_id,$password_clear) {
+			global $emuhash_emu;
+
+			if (PHP_VERSION < 6) {
+				$current_magic_quotes = @get_magic_quotes_runtime();
+				@set_magic_quotes_runtime(0);
+			}
+
+			$tmpfile = tempnam($emuhash_emu['tmpdir'],'emuhash');
+			$pwhandle = fopen($tmpfile,'w');
+
+			if (! $pwhandle)
+				error(sprintf('Unable to create a temporary file %s to create hashed password',$tmpfile) ,'error','index.php');
+
+			fwrite($pwhandle,$password_clear);
+			fclose($pwhandle);
+			$cmd = sprintf('%s %s -binary <%s',$emuhash_emu['openssl'],$openssl_hash_id,$tmpfile);
+			$prog = popen($cmd,'r');
+			$pass = fread($prog,1024);
+			pclose($prog);
+			unlink($tmpfile);
+
+			if (PHP_VERSION < 6)
+				@set_magic_quotes_runtime($current_magic_quotes);
+
+			return $pass;
+		}
+
+		function mhash($hash_id,$password_clear) {
+			switch($hash_id) {
+				case MHASH_MD5:
+					$emuhash = openssl_hash(MHASH_MD5,$password_clear);
+					break;
+
+				case MHASH_SHA1:
+					$emuhash = openssl_hash(MHASH_SHA1,$password_clear);
+					break;
+
+				case MHASH_RIPEMD160:
+					$emuhash = openssl_hash(MHASH_RIPEMD160,$password_clear);
+					break;
+
+				default:
+					$emuhash = FALSE;
+			}
+
+			return $emuhash;
+		}
+
+		function mhash_keygen_s2k($hash_id,$password_clear,$salt,$bytes) {
+			return substr(pack('H*',bin2hex(mhash($hash_id,($salt.$password_clear)))),0,$bytes);
+		}
+	}
+}
+?>
diff --git a/lam/templates/3rdParty/pla/lib/export_functions.php b/lam/templates/3rdParty/pla/lib/export_functions.php
new file mode 100644
index 00000000..076b6a6f
--- /dev/null
+++ b/lam/templates/3rdParty/pla/lib/export_functions.php
@@ -0,0 +1,641 @@
+<?php
+/**
+ * Classes and functions for export data from LDAP
+ *
+ * These classes provide differnet export formats.
+ *
+ * @author The phpLDAPadmin development team
+ * @package phpLDAPadmin
+ * @see export.php and export_form.php
+ */
+
+/**
+ * Exporter Class
+ *
+ * This class serves as a top level exporter class, which will return
+ * the correct Export class.
+ *
+ * @package phpLDAPadmin
+ * @subpackage Export
+ */
+class Exporter {
+	# Server ID that the export is linked to
+	private $server_id;
+	# Exporter Type
+	private $template_id;
+	private $template;
+
+	public function __construct($server_id,$template_id) {
+		$this->server_id = $server_id;
+		$this->template_id = $template_id;
+
+		$this->accept();
+	}
+
+	static function types() {
+		$type = array();
+
+		$details = ExportCSV::getType();
+		$type[$details['type']] = $details;
+		$details = ExportDSML::getType();
+		$type[$details['type']] = $details;
+		$details = ExportLDIF::getType();
+		$type[$details['type']] = $details;
+		$details = ExportVCARD::getType();
+		$type[$details['type']] = $details;
+
+		return $type;
+	}
+
+	private function accept() {
+		switch($this->template_id) {
+			case 'CSV':
+				$this->template = new ExportCSV();
+				break;
+
+			case 'DSML':
+				$this->template = new ExportDSML();
+				break;
+
+			case 'LDIF':
+				$this->template = new ExportLDIF();
+				break;
+
+			case 'VCARD':
+				$this->template = new ExportVCARD();
+				break;
+
+			default:
+				system_message(array(
+					'title'=>sprintf('%s %s',_('Unknown Export Type'),$this->template_id),
+					'body'=>_('phpLDAPadmin has not been configured for that export type'),
+					'type'=>'warn'),'index.php');
+				die();
+		}
+
+		$this->template->accept();
+	}
+
+	public function getTemplate() {
+		return $this->template;
+	}
+}
+
+/**
+ * Export Class
+ *
+ * This abstract classes provides all the common methods and variables for the
+ * custom export classes.
+ *
+ * @package phpLDAPadmin
+ * @subpackage Export
+ */
+abstract class Export {
+	# Line Break
+	protected $br;
+	# Compress the output
+	protected $compress;
+	# Export Results
+	protected $results;
+	protected $resultsdata;
+	protected $items = 0;
+
+	/**
+	 * Return this LDAP Server object
+	 *
+	 * @return object DataStore Server
+	 */
+	protected function getServer() {
+		return $_SESSION[APPCONFIG]->getServer($this->getServerID());
+	}
+
+	/**
+	 * Return the LDAP server ID
+	 *
+	 * @return int Server ID
+	 */
+	protected function getServerID() {
+		return get_request('server_id','REQUEST');
+	}
+
+	public function accept() {
+		$server = $this->getServer();
+
+		# Get the data to be exported
+		$query = array();
+		$base = get_request('dn','REQUEST');
+		$query['baseok'] = true;
+		$query['filter'] = get_request('filter','REQUEST',false,'objectclass=*');
+		$query['scope'] = get_request('scope','REQUEST',false,'base');
+		$query['deref'] = $_SESSION[APPCONFIG]->getValue('deref','export');
+		$query['size_limit'] = 0;
+		$attrs = get_request('attributes','REQUEST');
+
+		$attrs = preg_replace('/\s+/','',$attrs);
+		if ($attrs)
+			$query['attrs'] = explode(',',$attrs);
+		else
+			$query['attrs'] = array('*');
+
+		if (get_request('sys_attr')) {
+			if (! in_array('*',$query['attrs']))
+				array_push($query['attrs'],'*');
+			array_push($query['attrs'],'+');
+		}
+
+		if (! $base)
+			$bases = $server->getBaseDN();
+		else
+			$bases = array($base);
+
+		foreach ($bases as $base) {
+			$query['base'] = $base;
+
+			$time_start = utime();
+			$this->results[$base] = $server->query($query,null);
+			$time_end = utime();
+
+			usort($this->results[$base],'pla_compare_dns');
+			$this->resultsdata[$base]['time'] = round($time_end-$time_start,2);
+
+			# If no result, there is a something wrong
+			if (! $this->results[$base] && $server->getErrorNum(null))
+				system_message(array(
+					'title'=>_('Encountered an error while performing search.'),
+					'body'=>ldap_error_msg($server->getErrorMessage(null),$server->getErrorNum(null)),
+					'type'=>'error'));
+
+			$this->items += count($this->results[$base]);
+		}
+
+		$this->resultsdata['scope'] = $query['scope'];
+		$this->resultsdata['filter'] = $query['filter'];
+		$this->resultsdata['attrs'] = $query['attrs'];
+
+		# Other settings
+		switch (get_request('format','POST',false,'unix')) {
+			case 'win':
+				$this->br = "\r\n";
+				break;
+
+			case 'mac':
+				$this->br = "\r";
+				break;
+
+			case 'unix':
+			default:
+				$this->br = "\n";
+		}
+
+		if (get_request('compress','REQUEST') == 'on')
+			$this->compress = true;
+	}
+
+	public function isCompressed() {
+		return $this->compress;
+	}
+
+	protected function getHeader() {
+		$server = $this->getServer();
+		$type = $this->getType();
+
+		$output = '';
+
+		$output .= sprintf('# %s %s %s%s',$type['description'],_('for'),implode('|',array_keys($this->results)),$this->br);
+		$output .= sprintf('# %s: %s (%s)%s',_('Server'),$server->getName(),$server->getValue('server','host'),$this->br);
+		$output .= sprintf('# %s: %s%s',_('Search Scope'),$this->resultsdata['scope'],$this->br);
+		$output .= sprintf('# %s: %s%s',_('Search Filter'),$this->resultsdata['filter'],$this->br);
+		$output .= sprintf('# %s: %s%s',_('Total Entries'),$this->items,$this->br);
+		$output .= sprintf('#%s',$this->br);
+		$output .= sprintf('# Generated by %s (%s) on %s%s',app_name(),get_href('web'),date('F j, Y g:i a'),$this->br);
+		$output .= sprintf('# Version: %s%s',app_version(),$this->br);
+
+		$output .= $this->br;
+
+		return $output;
+	}
+
+	/**
+	 * Helper method to check if the attribute value should be base 64 encoded.
+	 *
+	 * @param The string to check.
+	 * @return boolean true if the string is safe ascii, false otherwise.
+	 */
+	protected function isSafeAscii($str) {
+		for ($i=0;$i<strlen($str);$i++)
+			if (ord($str{$i}) < 32 || ord($str{$i}) > 127)
+				return false;
+
+		return true;
+	}
+}
+
+/**
+ * Export entries to CSV
+ *
+ * @package phpLDAPadmin
+ * @subpackage Export
+ */
+class ExportCSV extends Export {
+	private $separator = ',';
+	private $qualifier = '"';
+	private $multivalue_separator = ' | ';
+	private $escapeCode = '"';
+
+	static public function getType() {
+		return array('type'=>'CSV','description' => 'CSV (Spreadsheet)','extension'=>'csv');
+	}
+
+	function export() {
+		$server = $this->getServer();
+
+		/* Go thru and find all the attribute names first. This is needed, because, otherwise we have
+		 * no idea as to which search attributes were actually populated with data */
+		$headers = array('dn');
+		$entries = array();
+		foreach ($this->results as $base => $results) {
+			foreach ($results as $dndetails) {
+				array_push($entries,$dndetails);
+
+				unset($dndetails['dn']);
+				foreach (array_keys($dndetails) as $key)
+					if (! in_array($key,$headers))
+						array_push($headers,$key);
+
+			}
+		}
+
+		$output = '';
+		$num_headers = count($headers);
+
+		# Print out the headers
+		for ($i=0; $i<$num_headers; $i++) {
+			$output .= sprintf('%s%s%s',$this->qualifier,$headers[$i],$this->qualifier);
+
+			if ($i < $num_headers-1)
+				$output .= $this->separator;
+		}
+
+		# Drop out our DN header.
+		array_shift($headers);
+		$num_headers--;
+
+		$output .= $this->br;
+
+		# Loop on every entry
+		foreach ($entries as $index => $entry) {
+			$dn = $entry['dn'];
+			unset($entry['dn']);
+			$output .= sprintf('%s%s%s%s',$this->qualifier,$this->LdapEscape($dn),$this->qualifier,$this->separator);
+
+			# Print the attributes
+			for ($j=0; $j<$num_headers; $j++) {
+				$attr = $headers[$j];
+				$output .= $this->qualifier;
+
+				if (array_key_exists($attr,$entry)) {
+					$binary_attribute = $server->isAttrBinary($attr) ? 1 : 0;
+
+					if (! is_array($entry[$attr]))
+						$attr_values = array($entry[$attr]);
+					else
+						$attr_values = $entry[$attr];
+
+					$num_attr_values = count($attr_values);
+
+					for ($i=0; $i<$num_attr_values; $i++) {
+						if ($binary_attribute)
+							$output .= base64_encode($attr_values[$i]);
+						else
+							$output .= $this->LdapEscape($attr_values[$i]);
+
+						if ($i < $num_attr_values-1)
+							$output .= $this->multivalue_separator;
+					}
+				}
+
+				$output .= $this->qualifier;
+
+				if ($j < $num_headers-1)
+					$output .= $this->separator;
+			}
+
+			$output .= $this->br;
+		}
+
+		if ($this->compress)
+			echo gzencode($output);
+		else
+			echo $output;
+	}
+
+	/**
+	 * Function to escape data, where the qualifier happens to also
+	 * be in the data.
+	 */
+	private function LdapEscape ($var) {
+		return str_replace($this->qualifier,$this->escapeCode.$this->qualifier,$var);
+	}
+}
+
+/**
+ * Export entries to DSML v.1
+ *
+ * @package phpLDAPadmin
+ * @subpackage Export
+ */
+class ExportDSML extends Export {
+	static public function getType() {
+		return array('type'=>'DSML','description' => _('DSML V.1 Export'),'extension'=>'xml');
+	}
+
+	/**
+	 * Export entries to DSML format
+	 */
+	function export() {
+		$server = $this->getServer();
+
+		# Not very elegant, but do the job for the moment as we have just 4 level
+		$indent = array();
+		$indent['dir'] = '  ';
+		$indent['ent'] = '    ';
+		$indent['att'] = '      ';
+		$indent['val'] = '        ';
+
+		# Print declaration
+		$output = sprintf('<?xml version="1.0"?>%s',$this->br);
+
+		# Print root element
+		$output .= sprintf('<dsml>%s',$this->br);
+
+		# Print info related to this export
+		$output .= sprintf('<!--%s',$this->br);
+		$output .= $this->getHeader();
+		$output .= sprintf('-->%s',$this->br);
+		$output .= $this->br;
+
+		$output .= sprintf('%s<directory-entries>%s',$indent['dir'],$this->br);
+
+		# Sift through the entries.
+		$counter = 0;
+		foreach ($this->results as $base => $results) {
+			foreach ($results as $dndetails) {
+				$counter++;
+
+				$dn = $dndetails['dn'];
+				unset($dndetails['dn']);
+				ksort($dndetails);
+
+				# Display DN
+				$output .= sprintf('%s<entry dn="%s">%s',$indent['ent'],htmlspecialchars($dn),$this->br);
+
+				# Display the objectClass attributes first
+				if (isset($dndetails['objectClass'])) {
+					if (! is_array($dndetails['objectClass']))
+						$dndetails['objectClass'] = array($dndetails['objectClass']);
+
+					$output .= sprintf('%s<objectClass>%s',$indent['att'],$this->br);
+
+					foreach ($dndetails['objectClass'] as $ocValue)
+						$output .= sprintf('%s<oc-value>%s</oc-value>%s',$indent['val'],$ocValue,$this->br);
+
+					$output .= sprintf('%s</objectClass>%s',$indent['att'],$this->br);
+					unset($dndetails['objectClass']);
+				}
+
+				# Display the attributes
+				foreach ($dndetails as $key => $attr) {
+					if (! is_array($attr))
+						$attr = array($attr);
+
+					$output .= sprintf('%s<attr name="%s">%s',$indent['att'],$key,$this->br);
+
+					# If the attribute is binary, set the flag $binary_mode to true
+					$binary_mode = $server->isAttrBinary($key) ? 1 : 0;
+
+					foreach ($attr as $value)
+						$output .= sprintf('%s<value>%s</value>%s',
+							$indent['val'],($binary_mode ? base64_encode($value) : htmlspecialchars($value)),$this->br);
+
+					$output .= sprintf('%s</attr>%s',$indent['att'],$this->br);
+				}
+
+				$output .= sprintf('%s</entry>%s',$indent['ent'],$this->br);
+			}
+		}
+
+		$output .= sprintf('%s</directory-entries>%s',$indent['dir'],$this->br);
+		$output .= sprintf('</dsml>%s',$this->br);
+
+		if ($this->compress)
+			echo gzencode($output);
+		else
+			echo $output;
+	}
+}
+
+/**
+ * Export from LDAP using an LDIF format
+ *
+ * @package phpLDAPadmin
+ * @subpackage Export
+ */
+class ExportLDIF extends Export {
+	# The maximum length of the ldif line
+	private $line_length = 76;
+
+	static public function getType() {
+		return array('type'=>'LDIF','description' => _('LDIF Export'),'extension'=>'ldif');
+	}
+
+	/**
+	 * Export entries to LDIF format
+	 */
+	public function export() {
+		if (! $this->results) {
+			echo _('Nothing to export');
+			return;
+		}
+
+		$server = $this->getServer();
+
+		$output = $this->getHeader();
+
+		# Add our version.
+		$output .= 'version: 1';
+		$output .= $this->br;
+		$output .= $this->br;
+
+		# Sift through the entries.
+		$counter = 0;
+		foreach ($this->results as $base => $results) {
+			foreach ($results as $dndetails) {
+				$counter++;
+
+				$dn = $dndetails['dn'];
+				unset($dndetails['dn']);
+				ksort($dndetails);
+
+				$title_string = sprintf('# %s %s: %s%s',_('Entry'),$counter,$dn,$this->br);
+
+				if (strlen($title_string) > $this->line_length-3)
+					$title_string = substr($title_string,0,$this->line_length-3).'...'.$this->br;
+
+				$output .= $title_string;
+
+				# Display dn
+				if ($this->isSafeAscii($dn))
+					$output .= $this->multiLineDisplay(sprintf('dn: %s',$dn));
+				else
+					$output .= $this->multiLineDisplay(sprintf('dn:: %s',base64_encode($dn)));
+
+				# display the attributes
+				foreach ($dndetails as $key => $attr) {
+					if (! is_array($attr))
+						$attr = array($attr);
+
+					foreach ($attr as $value)
+						if (! $this->isSafeAscii($value) || $server->isAttrBinary($key))
+							$output .= $this->multiLineDisplay(sprintf('%s:: %s',$key,base64_encode($value)));
+						else
+							$output .= $this->multiLineDisplay(sprintf('%s: %s',$key,$value));
+				}
+
+				$output .= $this->br;
+			}
+		}
+
+		if ($this->compress)
+			echo gzencode($output);
+		else
+			echo $output;
+	}
+
+	/**
+	 * Helper method to wrap ldif lines
+	 *
+	 * @param The line to be wrapped if needed.
+	 */
+	private function multiLineDisplay($str) {
+		$length_string = strlen($str);
+		$length_max = $this->line_length;
+
+		$output = '';
+		while ($length_string > $length_max) {
+			$output .= substr($str,0,$length_max).$this->br.' ';
+			$str = substr($str,$length_max,$length_string);
+			$length_string = strlen($str);
+
+			/* Need to do minus one to align on the right
+			 * the first line with the possible following lines
+			 * as these will have an extra space. */
+			$length_max = $this->line_length-1;
+		}
+
+		$output .= $str.$this->br;
+
+		return $output;
+	}
+}
+
+/**
+ * Export entries to VCARD v2.1
+ *
+ * @package phpLDAPadmin
+ * @subpackage Export
+ */
+class ExportVCARD extends Export {
+	static public function getType() {
+		return array('type'=>'VCARD','description' => _('VCARD 2.1 Export'),'extension'=>'vcf');
+	}
+
+	# Mappping one to one attribute
+	private $mapping = array(
+		'cn' => 'FN',
+		'title' => 'TITLE',
+		'homephone' => 'TEL;HOME',
+		'mobile' => 'TEL;CELL',
+		'mail' => 'EMAIL;Internet',
+		'labeleduri' =>'URL',
+		'o' => 'ORG',
+		'audio' => 'SOUND',
+		'facsmiletelephoneNumber' =>'TEL;WORK;HOME;VOICE;FAX',
+		'jpegphoto' => 'PHOTO;ENCODING=BASE64',
+		'businesscategory' => 'ROLE',
+		'description' => 'NOTE'
+		);
+
+	private $deliveryAddress = array(
+		'postofficebox',
+		'street',
+		'l',
+		'st',
+		'postalcode',
+		'c');
+
+	/**
+	 * Export entries to VCARD format
+	 */
+	function export() {
+		$server = $this->getServer();
+
+		# Sift through the entries.
+		foreach ($this->results as $base => $results) {
+			foreach ($results as $dndetails) {
+				$dndetails = array_change_key_case($dndetails);
+
+				# Check the attributes needed for the delivery address field
+				$addr = 'ADR:';
+				foreach ($this->deliveryAddress as $attr) {
+					if (isset($dndetails[$attr])) {
+						$addr .= $dndetails[$attr];
+						unset($dndetails[$attr]);
+					}
+					$addr .= ';';
+				}
+
+				$output = sprintf('BEGIN:VCARD%s',$this->br);
+
+				# Loop for the attributes
+				foreach ($dndetails as $key => $attr) {
+					if (! is_array($attr))
+						$attr = array($attr);
+
+					# If an attribute of the ldap entry exist in the mapping array for vcard
+					if (isset($this->mapping[$key])) {
+
+						# Case of organisation. Need to append the possible ou attribute
+						if ($key == 'o') {
+							$output .= sprintf('%s:%s',$this->mapping[$key],$attr[0]);
+
+							if (isset($entry['ou']))
+								foreach ($entry['ou'] as $ou_value)
+									$output .= sprintf(';%s',$ou_value);
+
+						# The attribute is binary. (to do : need to fold the line)
+						} elseif (in_array($key,array('audio','jpegphoto'))) {
+							$output .= $this->mapping[$key].':'.$this->br;
+							$output .= ' '.base64_encode($attr[0]);
+
+						} else {
+							$output .= $this->mapping[$key].':'.$attr[0];
+						}
+
+						$output .= $this->br;
+					}
+				}
+
+				$output .= sprintf('UID:%s%s',isset($dndetails['entryUUID']) ? $dndetails['entryUUID'] : $dndetails['dn'],$this->br);
+				$output .= sprintf('VERSION:2.1%s',$this->br);
+				$output .= sprintf('%s%s',$addr,$this->br);
+				$output .= sprintf('END:VCARD%s',$this->br);
+			}
+		}
+
+		if ($this->compress)
+			echo gzencode($output);
+		else
+			echo $output;
+	}
+}
+?>
diff --git a/lam/templates/3rdParty/pla/lib/functions.php b/lam/templates/3rdParty/pla/lib/functions.php
new file mode 100644
index 00000000..47346935
--- /dev/null
+++ b/lam/templates/3rdParty/pla/lib/functions.php
@@ -0,0 +1,3076 @@
+<?php
+/**
+ * A collection of common generic functions used throughout the application.
+ *
+ * @author The phpLDAPadmin development team
+ * @package phpLDAPadmin
+ */
+
+/**
+ * @package phpLDAPadmin
+ * @subpackage Functions
+ */
+
+/**
+ */
+define('HTDOCDIR',sprintf('%s/',realpath(LIBDIR.'../htdocs/')));
+define('LANGDIR',sprintf('%s/',realpath(LIBDIR.'../locale/')));
+define('CONFDIR',sprintf('%s/',realpath(LIBDIR.'../config')));
+define('QUERYDIR',sprintf('%s/',realpath(LIBDIR.'../queries/')));
+define('TMPLDIR',sprintf('%s/',realpath(LIBDIR.'../templates/')));
+define('DOCDIR',sprintf('%s/',realpath(LIBDIR.'../doc/')));
+define('HOOKSDIR',sprintf('%s/',realpath(LIBDIR.'../hooks/')));
+define('JSDIR','js/');
+
+/**
+ * Supplimental functions
+ * This list is a list of supplimental functions that are used throughout
+ * PLA. The order here IS important - so that files that refer to
+ * functions defined in other files need to be listed after those files.
+ */
+$app['function_files'] = array(
+	# Functions for managing the session (app_session_start(), etc.)
+	LIBDIR.'session_functions.php',
+	# Functions for reading the server schema
+	LIBDIR.'schema_functions.php',
+	# Functions for template manipulation.
+	LIBDIR.'template_functions.php',
+	# Functions for hashing passwords with OpenSSL binary (only if mhash not present)
+	LIBDIR.'emuhash_functions.php',
+	# Functions for creating Samba passwords
+	LIBDIR.'createlm.php',
+	# Datasource functions
+	LIBDIR.'ds.php',
+	# Functions for rendering the page
+	LIBDIR.'page.php'
+);
+
+if (file_exists(LIBDIR.'functions.custom.php'))
+	array_push($app['function_files'],LIBDIR.'functions.custom.php');
+
+/**
+ * Loads class definition
+ */
+function __autoload($className) {
+	if (file_exists(HOOKSDIR."classes/$className.php"))
+		require_once(HOOKSDIR."classes/$className.php");
+	elseif (file_exists(LIBDIR."$className.php"))
+		require_once(LIBDIR."$className.php");
+	elseif (file_exists(LIBDIR."ds_$className.php"))
+		require_once(LIBDIR."ds_$className.php");
+	else
+		system_message(array(
+			'title'=>_('Generic Error'),
+			'body'=>sprintf('%s: %s [%s]',
+				__METHOD__,_('Called to load a class that cant be found'),$className),
+			'type'=>'error'));
+}
+
+/**
+ * Strips all slashes from the specified array in place (pass by ref).
+ * @param Array The array to strip slashes from, typically one of
+ *                     $_GET, $_POST, or $_COOKIE.
+ */
+function array_stripslashes(&$array) {
+	if (DEBUG_ENABLED && (($fargs=func_get_args())||$fargs='NOARGS'))
+		debug_log('Entered (%%)',1,0,__FILE__,__LINE__,__METHOD__,$fargs);
+
+	if (is_array($array))
+		while (list($key) = each($array))
+			if (is_array($array[$key]) && $key != $array)
+				array_stripslashes($array[$key]);
+			else
+				$array[$key] = stripslashes($array[$key]);
+}
+
+/**
+ * Compatibility Functions
+ * These functions exist, so that a standard function can be used in new applications, and they
+ * map to already defined functions in older applications.
+ */
+
+/**
+ * If gettext is not available in PHP, then this will provide compatibility for it.
+ */
+if (! function_exists('_')) {
+	function _($msg) {
+		return $msg;
+	}
+}
+
+/**
+ * Generic Utility Functions
+ */
+
+/**
+ * Custom error handling function.
+ * When a PHP error occurs, PHP will call this function rather than printing
+ * the typical PHP error string. This provides the application the ability to
+ * format an error message so that it looks better.
+ * Optionally, it can present a link so that a user can search/submit bugs.
+ * This function is not to be called directly. It is exclusively for the use of
+ * PHP internally. If this function is called by PHP from within a context
+ * where error handling has been disabled (ie, from within a function called
+ * with "@" prepended), then this function does nothing.
+ *
+ * @param int The PHP error number that occurred (ie, E_ERROR, E_WARNING, E_PARSE, etc).
+ * @param string The PHP error string provided (ie, "Warning index "foo" is undefined)
+ * @param string The file in which the PHP error ocurred.
+ * @param int The line number on which the PHP error ocurred
+ * @see set_error_handler
+ */
+function app_error_handler($errno,$errstr,$file,$lineno) {
+	if (defined('DEBUG_ENABLED') && DEBUG_ENABLED && (($fargs=func_get_args())||$fargs='NOARGS'))
+		debug_log('Entered (%%)',1,0,__FILE__,__LINE__,__METHOD__,$fargs);
+
+	/**
+	 * error_reporting will be 0 if the error context occurred
+	 * within a function call with '@' preprended (ie, @ldap_bind() );
+	 * So, don't report errors if the caller has specifically
+	 * disabled them with '@'
+	 */
+	if (ini_get('error_reporting') == 0 || error_reporting() == 0)
+		return;
+
+	$file = basename($file);
+	$caller = basename($_SERVER['PHP_SELF']);
+	$errtype = '';
+
+	switch ($errno) {
+		case E_STRICT: $errtype = 'E_STRICT'; break;
+		case E_ERROR: $errtype = 'E_ERROR'; break;
+		case E_WARNING: $errtype = 'E_WARNING'; break;
+		case E_PARSE: $errtype = 'E_PARSE'; break;
+		case E_NOTICE: $errtype = 'E_NOTICE'; break;
+		case E_CORE_ERROR: $errtype = 'E_CORE_ERROR'; break;
+		case E_CORE_WARNING: $errtype = 'E_CORE_WARNING'; break;
+		case E_COMPILE_ERROR: $errtype = 'E_COMPILE_ERROR'; break;
+		case E_COMPILE_WARNING: $errtype = 'E_COMPILE_WARNING'; break;
+		case E_USER_ERROR: $errtype = 'E_USER_ERROR'; break;
+		case E_USER_WARNING: $errtype = 'E_USER_WARNING'; break;
+		case E_USER_NOTICE: $errtype = 'E_USER_NOTICE'; break;
+		case E_ALL: $errtype = 'E_ALL'; break;
+
+		default: $errtype = sprintf('%s: %s',_('Unrecognized error number'),$errno);
+	}
+
+	# Take out extra spaces in error strings.
+	$errstr = preg_replace('/\s+/',' ',$errstr);
+
+	if ($errno == E_NOTICE) {
+		$body = '<table class="notice">';
+		$body .= sprintf('<tr><td>%s:</td><td><b>%s</b> (<b>%s</b>)</td></tr>',_('Error'),$errstr,$errtype);
+		$body .= sprintf('<tr><td>%s:</td><td><b>%s</b> %s <b>%s</b>, %s <b>%s</b></td></tr>',
+			_('File'),$file,_('line'),$lineno,_('caller'),$caller);
+		$body .= sprintf('<tr><td>Versions:</td><td>PLA: <b>%s</b>, PHP: <b>%s</b>, SAPI: <b>%s</b></td></tr>',
+			app_version(),phpversion(),php_sapi_name());
+		$body .= sprintf('<tr><td>Web server:</td><td><b>%s</b></td></tr>',isset($_SERVER['SERVER_SOFTWARE']) ? $_SERVER['SERVER_SOFTWARE'] : 'SCRIPT');
+
+		if (function_exists('get_href'))
+			$body .= sprintf('<tr><td colspan="2"><a href="%s" onclick="target=\'_blank\';"><center>%s.</center></a></td></tr>',
+				get_href('search_bug',"&summary_keyword=".rawurlencode($errstr)),
+				_('Please check and see if this bug has been reported'));
+		$body .= '</table>';
+
+		system_message(array(
+			'title'=>_('You found a non-fatal phpLDAPadmin bug!'),
+			'body'=>$body,
+			'type'=>'error'));
+
+		return;
+	}
+
+	# If this is a more serious error, call the error call.
+	error(sprintf('%s: %s',$errtype,$errstr),'error',null,true,true);
+}
+
+/**
+ * Returns the application name.
+ */
+function app_name() {
+	return 'phpLDAPadmin';
+}
+
+/**
+ * Returns the application version currently running. The version
+ * is read from the file named VERSION.
+ *
+ * @return string The current version as read from the VERSION file.
+ */
+function app_version() {
+	static $CACHE = null;
+
+	if ($CACHE)
+		return $CACHE;
+
+	$version_file = realpath(LIBDIR.'../VERSION');
+	if (! file_exists($version_file))
+		$CACHE = 'UNKNOWN';
+
+	else {
+		$version = rtrim(file_get_contents($version_file));
+
+		$CACHE = preg_replace('/^RELEASE-([0-9\.]+(-.*)*)$/','$1',$version);
+
+		# Check if we are a CVS copy.
+		if (preg_match('/^(DEVEL)?$/',$CACHE))
+			$CACHE = 'DEVEL';
+
+		# Check if we are special DEVEL version
+		elseif (preg_match('/^DEVEL-([0-9\.]+)+$/',$CACHE)) {}
+
+		# If return is still the same as version, then the tag is not one we expect.
+		elseif ($CACHE == $version)
+			$CACHE = 'UNKNOWN';
+	}
+
+	return $CACHE;
+}
+
+/**
+ * This function will convert the browser two character language into the
+ * default 5 character language, where the country portion should NOT be
+ * assumed to be upper case characters of the first two characters.
+ */
+function auto_lang($lang) {
+	switch ($lang) {
+		case 'ja': return 'ja_JP';
+		case 'cs': return 'cs_CZ';
+		default: return sprintf('%s_%s',$lang,strtoupper($lang));
+	}
+}
+
+/**
+ * Makes sure that the config file is properly setup.
+ */
+function check_config($config_file) {
+	# Read in config_default.php
+	require_once LIBDIR.'config_default.php';
+	
+	# Make sure their PHP version is current enough
+	if (strcmp(phpversion(),REQUIRED_PHP_VERSION) < 0)
+		system_message(array(
+			'title'=>_('Incorrect version of PHP'),
+			'body'=>sprintf('phpLDAPadmin requires PHP version %s or greater.<br /><small>(You are using %s)</small>',
+				REQUIRED_PHP_VERSION,phpversion()),
+			'type'=>'error'));
+
+	$config = new Config;
+
+	if (file_exists(LIBDIR.'config_custom.php') && is_readable(LIBDIR.'config_custom.php'))
+		include LIBDIR.'config_custom.php';
+
+	ob_start();
+	require $config_file;
+	$str = '';
+	if (ob_get_level()) {
+		$str = ob_get_contents();
+		ob_end_clean();
+	}
+
+	if ($str) {
+		$str = strip_tags($str);
+		$matches = array();
+		preg_match('/(.*):\s+(.*):.*\s+on line (\d+)/',$str,$matches);
+
+		if (isset($matches[1]) && isset($matches[2]) && isset($matches[3])) {
+			$error_type = $matches[1];
+			$error = $matches[2];
+			$line_num = $matches[3];
+
+			$file = file($config_file);
+
+			$body = '<h3 class="title">Config file ERROR</h3>';
+			$body .= sprintf('<h3 class="subtitle">%s (%s) on line %s</h3>',$error_type,$error,$line_num);
+
+			$body .= '<center>';
+			$body .= sprintf('Looks like your config file has an ERROR on line %s.<br />',$line_num);
+			$body .= 'Here is a snippet around that line <br />';
+			$body .= '<br />'."\n";
+
+			$body .= '<div style="text-align: left; font-family: monospace; margin-left: 80px; margin-right: 80px; border: 1px solid black; padding: 10px;">';
+
+			for ($i = $line_num-9; $i<$line_num+5; $i++) {
+				if ($i+1 == $line_num)
+					$body .= '<div style="color:red;background:#fdd">';
+
+				if ($i < 0)
+					continue;
+
+				$body .= sprintf('<b>%s</b>: %s<br />',$i+1,$file[$i]);
+
+				if ($i+1 == $line_num)
+					$body .= '</div>';
+			}
+
+			$body .= '</div>';
+			$body .= '<br />';
+			$body .= 'Hint: Sometimes these errors are caused by lines <b>preceding</b> the line reported.';
+			$body .= '</center>';
+
+			$block = new block();
+			$block->SetBody($body);
+			$www['page'] = new page();
+			$www['page']->block_add('body',$block);
+			$www['page']->display();
+
+			die();
+		}
+	}
+
+	# Check for server definitions.
+	if (! isset($servers) || count($servers->GetServerList()) == 0)
+		error(_('Your config.php is missing Server Definitions. Please see the sample file config/config.php.example.'),'error','index.php',true);
+
+	$config->setServers($servers);
+
+	# Check the memory limit parameter.
+	if ((ini_get('memory_limit') > -1) && ini_get('memory_limit') < $config->getValue('session','memorylimit'))
+		system_message(array(
+			'title'=>_('Memory Limit low.'),
+			'body'=>sprintf('Your php memory limit is low - currently %s, you should increase it to atleast %s. This is normally controlled in /etc/php.ini.',
+				ini_get('memory_limit'),$config->getValue('session','memorylimit')),
+			'type'=>'error'));
+
+	return $config;
+}
+
+/**
+ * Commands available in the control_panel of the page
+ *
+ * @return array
+ */
+function cmd_control_pane($type) {
+	if (defined('DEBUG_ENABLED') && DEBUG_ENABLED && (($fargs=func_get_args())||$fargs='NOARGS'))
+		debug_log('Entered (%%)',1,0,__FILE__,__LINE__,__METHOD__,$fargs);
+
+	switch ($type) {
+		case 'main' :
+			return array(
+				'home'=>array(
+					'title'=>_('Home'),
+					'enable'=>false,
+					'link'=>sprintf('href="index.php" title="%s"',_('Home')),
+					'image'=>sprintf('<img src="%s/home-big.png" alt="%s" />',IMGDIR,_('Home'))),
+
+				'purge'=>array(
+					'title'=>_('Purge caches'),
+					'enable'=>isset($_SESSION[APPCONFIG]) ? $_SESSION[APPCONFIG]->isCommandAvailable('script','purge_cache') : false,
+					'link'=>sprintf('href="cmd.php?cmd=purge_cache" onclick="return ajDISPLAY(\'BODY\',\'cmd=purge_cache\',\'%s\');" title="%s"',
+						_('Clearing cache'),_('Purge caches')),
+					'image'=>sprintf('<img src="%s/trash-big.png" alt="%s" />',IMGDIR,_('Purge caches'))),
+
+				'hide_debug_info'=>array(
+					'title'=>_('Show Cache'),
+					'enable'=>isset($_SESSION[APPCONFIG]) ? $_SESSION[APPCONFIG]->isCommandAvailable('script','show_cache') : false,
+					'link'=>sprintf('href="cmd.php?cmd=show_cache" onclick="return ajDISPLAY(\'BODY\',\'cmd=show_cache\',\'%s\');" title="%s"',
+						_('Loading'),_('Show Cache'),_('Show Cache')),
+					'image'=>sprintf('<img src="%s/debug-cache.png" alt="%s" />',IMGDIR,_('Show Cache'))),
+			);
+
+			break;
+
+		case 'top' :
+			return array(
+				'forum'=>array(
+					'title'=>_('Forum'),
+					'enable'=>isset($_SESSION[APPCONFIG]) ? $_SESSION[APPCONFIG]->isCommandAvailable('cmd','oslinks') : true,
+					'link'=>sprintf('href="%s" title="%s" onclick="target=\'_blank\';"',get_href('forum'),_('Forum')),
+					'image'=>sprintf('<img src="%s/forum-big.png" alt="%s" />',IMGDIR,_('Forum'))),
+
+				'feature'=>array(
+					'title'=>_('Request feature'),
+					'enable'=>isset($_SESSION[APPCONFIG]) ? $_SESSION[APPCONFIG]->isCommandAvailable('cmd','oslinks') : true,
+					'link'=>sprintf('href="%s" title="%s" onclick="target=\'_blank\';"',get_href('add_rfe'),_('Request feature')),
+					'image'=>sprintf('<img src="%s/request-feature-big.png" alt="%s" />',IMGDIR,_('Request feature'))),
+
+				'bug'=>array(
+					'title'=>_('Report a bug'),
+					'enable'=>isset($_SESSION[APPCONFIG]) ? $_SESSION[APPCONFIG]->isCommandAvailable('cmd','oslinks') : true,
+					'link'=>sprintf('href="%s" title="%s" onclick="target=\'_blank\';"',get_href('add_bug'),_('Report a bug')),
+					'image'=>sprintf('<img src="%s/bug-big.png" alt="%s" />',IMGDIR,_('Report a bug'))),
+
+				'donation'=>array(
+					'title'=>_('Donate'),
+					'enable'=>isset($_SESSION[APPCONFIG]) ? $_SESSION[APPCONFIG]->isCommandAvailable('cmd','oslinks') : true,
+					'link'=>sprintf('href="%s" title="%s" onclick="target=\'_blank\';"',get_href('donate'),_('Donate')),
+					'image'=>sprintf('<img src="%s/smile-big.png" alt="%s" />',IMGDIR,_('Donate'))),
+
+				'help'=>array(
+					'title'=>_('Help'),
+					'enable'=>isset($_SESSION[APPCONFIG]) ? $_SESSION[APPCONFIG]->isCommandAvailable('cmd','oslinks') : true,
+					'link'=>sprintf('href="%s" title="%s" onclick="target=\'_blank\';"',get_href('documentation'),_('Help')),
+					'image'=>sprintf('<img src="%s/help-big.png" alt="%s" />',IMGDIR,_('Help')))
+			);
+
+			break;
+	}
+}
+
+/**
+ * This function dumps the $variable for debugging purposes
+ *
+ * @param string|array Variable to dump
+ * @param boolean Whether to stop execution or not.
+ */
+function debug_dump($variable,$die=false,$onlydebugaddr=false) {
+	if ($onlydebugaddr &&
+		isset($_SESSION[APPCONFIG]) && $_SESSION[APPCONFIG]->getValue('debug','addr') &&
+		$_SERVER['HTTP_X_FORWARDED_FOR'] != $_SESSION[APPCONFIG]->getValue('debug','addr') &&
+		$_SERVER['REMOTE_ADDR'] != $_SESSION[APPCONFIG]->getValue('debug','addr'))
+		return;
+
+	$backtrace = debug_backtrace();
+	$caller['class'] = isset($backtrace[0]['class']) ? $backtrace[0]['class'] : 'N/A';
+	$caller['function'] = isset($backtrace[0]['function']) ? $backtrace[0]['function'] : 'N/A';
+	$caller['file'] = isset($backtrace[0]['file']) ? $backtrace[0]['file'] : 'N/A';
+	$caller['line'] = isset($backtrace[0]['line']) ? $backtrace[0]['line'] : 'N/A';
+	$caller['debug'] = $variable;
+
+	print '<PRE>';
+	print_r($caller);
+	print '</PRE>';
+
+	if ($die)
+		die();
+}
+
+/**
+ * This function generates a backtrace
+ *
+ * @param boolean Whether to stop execution or not.
+ */
+function debug_dump_backtrace($msg='Calling BackTrace',$die=false) {
+	error($msg,'note',null,$die,true);
+}
+
+/**
+ * Send a debug as a sys message
+ */
+function debug_sysmsg($msg) {
+	system_message(array('title'=>_('Debug'),'body'=>$msg,'type'=>'debug'));
+}
+
+/**
+ * Debug Logging
+ *
+ * The global debug level is turned on in your configuration file by setting:
+ * <code>
+ *	$config->custom->debug['level'] = 255;
+ * </code>
+ * together with atleast one output direction (currently file and syslog are supported).
+ * <code>
+ *	$config->custom->debug['file'] = '/tmp/app_debug.log';
+ *	$config->custom->debug['syslog'] = true;
+ * </code>
+ *
+ * The debug level is turned into binary, then if the message levels bit is on
+ * the message will be sent to the debug log. (Thus setting your debug level to 255,
+ * all bits on, will results in all messages being printed.)
+ *
+ * The message level bits are defined here.
+ *  0(  1) = Entry/Return results from function calls.
+ *  1(  2) = Configuration Processing
+ *  2(  4) = Template Processing
+ *  3(  8) = Schema Processing
+ *  4( 16) = LDAP Server Communication
+ *  5( 32) = Tree Processing
+ *  7( 64) = Other non generic messages
+ *  8(128) = Page Processing
+ *  9(256) = Hooks Processing
+ * @param string Message to send to syslog
+ * @param int Log bit number for this message.
+ * @see syslog.php
+ */
+function debug_log($msg,$level,$indent) {
+	static $debug_file;
+
+	# In case we are called before we are fully initialised or if debugging is not set.
+	if (! isset($_SESSION[APPCONFIG])
+		|| ! ($_SESSION[APPCONFIG]->getValue('debug','file') || $_SESSION[APPCONFIG]->getValue('debug','syslog')))
+		return;
+
+	$debug_level = $_SESSION[APPCONFIG]->getValue('debug','level');
+	if (! $debug_level || (! ($level & $debug_level)))
+		return;
+
+	if ($_SESSION[APPCONFIG]->getValue('debug','addr'))
+		if (isset($_SERVER['HTTP_X_FORWARDED_FOR']) && $_SERVER['HTTP_X_FORWARDED_FOR'] == $_SESSION[APPCONFIG]->getValue('debug','addr'))
+			$debugaddr = true;
+		elseif ($_SERVER['REMOTE_ADDR'] == $_SESSION[APPCONFIG]->getValue('debug','addr'))
+			$debugaddr = true;
+		else
+			$debugaddr = false;
+
+	else
+		$debugaddr = true;
+
+	if (! $debugaddr)
+		return;
+
+	# If we are limiting debug to a browser, then check that
+	$caller = basename($_SERVER['PHP_SELF']);
+
+	$args = func_get_args();
+	# Discard our first three arguments.
+	array_shift($args);
+	array_shift($args);
+	array_shift($args);
+
+	# Pull the file/line/method
+	if (is_string($args[0]) && preg_match('/.php$/',$args[0])) {
+		$file = preg_replace('/.php$/','',array_shift($args));
+		$line = array_shift($args);
+		$method = array_shift($args);
+
+	} else {
+		$file = 'UNKNOWN';
+		$line = 'UNKNOWN';
+		$method = 'UNKNOWN';
+	}
+
+	# TEMP: New debuglog format
+	if (preg_match('/%%/',$msg) && $args[0] != 'NOARGS')
+		$args = array_shift($args);
+
+	$fargs = array();
+	foreach ($args as $key) {
+		if (is_array($key))
+			array_push($fargs,serialize($key));
+		elseif (is_object($key))
+			array_push($fargs,sprintf('OBJECT:%s',get_class($key)));
+		else
+			array_push($fargs,$key);
+	}
+
+	if (preg_match('/%%/',$msg))
+		$msg = preg_replace('/%%/',join('|',$fargs),$msg);
+	else
+		$msg = vsprintf($msg,array_values($fargs));
+
+	if (function_exists('stopwatch'))
+		$timer = stopwatch();
+	else
+		$timer = null;
+
+	$debug_message = sprintf('[%2.3f] %15s(%04s-%03s): %s%s: %s',$timer,basename($file),$line,$level,str_repeat('.',$indent),$method,substr($msg,0,200));
+
+	if ($debug_file || $_SESSION[APPCONFIG]->getValue('debug','file')) {
+		if (! $debug_file)
+			$debug_file = fopen($_SESSION[APPCONFIG]->getValue('debug','file'),
+				$_SESSION[APPCONFIG]->getValue('debug','append') ? 'a' : 'w');
+
+		fwrite($debug_file,$debug_message."\n");
+	}
+
+	if ($_SESSION[APPCONFIG]->getValue('debug','syslog') && function_exists('syslog_notice'))
+		syslog_notice($debug_message);
+}
+
+/**
+ * Display an error message in the system message panel of the page.
+ */
+function error($msg,$type='note',$redirect=null,$fatal=false,$backtrace=false) {
+	global $www;
+	static $counter;
+
+	# Just a check to see that we are called right.
+	if (! isset($www['page']) && ! $fatal)
+		die("Function error called incorrectly [$msg]");
+
+	# If the error is fatal, we'll need to stop here.
+	if (! isset($www['page']))
+		$www['page'] = new page();
+
+	if ($fatal)
+		$www['page']->setsysmsg(array('title'=>_('Error'),'body'=>$msg,'type'=>$type));
+	else
+		system_message(array('title'=>_('Error'),'body'=>$msg,'type'=>$type),$redirect);
+
+	# Spin loop detection
+	if ($counter++ > 20) {
+		debug_dump('Spin loop detection.');
+		debug_dump(array('msg'=>$msg,'session'=>$_SESSION['sysmsg'],'www'=>$www),1);
+	}
+
+	# Do we have a backtrace to display?
+	if ($backtrace) {
+		$backtraceblock = new block();
+		$backtraceblock->SetTitle('PHP Debug Backtrace');
+
+		$body = '<table class="result_table">';
+		$body .= "\n";
+
+		foreach (debug_backtrace() as $error => $line) {
+			$_SESSION['backtrace'][$error]['file'] = isset($line['file']) ? $line['file'] : 'unknown';
+			$_SESSION['backtrace'][$error]['line'] = isset($line['line']) ? $line['line'] : 'unknown';
+			$body .= sprintf('<tr class="hightlight"><td colspan="2"><b><small>%s</small></b></td><td>%s (%s)</td></tr>',
+				_('File'),isset($line['file']) ? $line['file'] : $last['file'],isset($line['line']) ? $line['line'] : '');
+
+			$_SESSION['backtrace'][$error]['function'] = $line['function'];
+			$body .= sprintf('<tr><td>&nbsp;</td><td><b><small>%s</small></b></td><td><small>%s',
+				_('Function'),$line['function']);
+
+			if (isset($line['args'])) {
+				$display = strlen(serialize($line['args'])) < 50 ? htmlspecialchars(serialize($line['args'])) : htmlspecialchars(substr(serialize($line['args']),0,50)).'...<TRUNCATED>';
+				$_SESSION['backtrace'][$error]['args'] = $line['args'];
+				if (file_exists(LIBDIR.'../tools/unserialize.php'))
+					$body .= sprintf('&nbsp;(<a href="%s?index=%s" onclick="target=\'backtrace\';">%s</a>)',
+						'../tools/unserialize.php',$error,$display);
+				else
+					$body .= sprintf('&nbsp;(%s)',$display);
+			}
+			$body .= '</small></td></tr>';
+			$body .= "\n";
+
+			if (isset($line['file']))
+				$last['file'] = $line['file'];
+		}
+
+		$body .= '</table>';
+		$body .= "\n";
+		$backtraceblock->SetBody($body);
+
+		$www['page']->block_add('body',$backtraceblock);
+	}
+
+	if ($fatal) {
+		$www['page']->display(array('tree'=>false));
+		die();
+	}
+}
+
+/**
+ * Return the result of a form variable, with optional default
+ *
+ * @return The form GET/REQUEST/SESSION/POST variable value or its default
+ */
+function get_request($attr,$type='POST',$die=false,$default=null) {
+	switch($type) {
+		case 'GET':
+			$value = isset($_GET[$attr]) ? (is_array($_GET[$attr]) ? $_GET[$attr] : (trim(empty($_GET['nodecode'][$attr]) ? rawurldecode($_GET[$attr]) : $_GET[$attr]))) : $default;
+			break;
+
+		case 'REQUEST':
+			$value = isset($_REQUEST[$attr]) ? (is_array($_REQUEST[$attr]) ? $_REQUEST[$attr] : trim(empty($_REQUEST['nodecode'][$attr]) ? rawurldecode($_REQUEST[$attr]) : $_REQUEST[$attr])) : $default;
+			break;
+
+		case 'SESSION':
+			$value = isset($_SESSION[$attr]) ? (is_array($_SESSION[$attr]) ? $_SESSION[$attr] : (empty($_SESSION['nodecode'][$attr]) ? rawurldecode($_SESSION[$attr]) : $_SESSION[$attr])) : $default;
+			break;
+
+		case 'POST':
+		default:
+			$value = isset($_POST[$attr]) ? (is_array($_POST[$attr]) ? $_POST[$attr] : trim(empty($_POST['nodecode'][$attr]) ? rawurldecode($_POST[$attr]) : $_POST[$attr])) : $default;
+			break;
+	}
+
+	if ($die && is_null($value))
+		system_message(array(
+			'title'=>_('Generic Error'),
+			'body'=>sprintf('%s: Called "%s" without "%s" using "%s"',
+				basename($_SERVER['PHP_SELF']),get_request('cmd','REQUEST'),$attr,$type),
+			'type'=>'error'),
+			'index.php');
+
+	return $value;
+}
+
+/**
+ * Record a system message.
+ * This function can be used as an alternative to generate a system message, if page hasnt yet been defined.
+ */
+function system_message($msg,$redirect=null) {
+	if (! is_array($msg))
+		return null;
+
+	if (! isset($msg['title']) && ! isset($msg['body']))
+		return null;
+
+	if (! isset($msg['type']))
+		$msg['type'] = 'info';
+
+	if (! isset($_SESSION['sysmsg']) || ! is_array($_SESSION['sysmsg']))
+		$_SESSION['sysmsg'] = array();
+
+	# Try and detect if we are in a redirect loop
+	if (get_request('redirect','GET') && $msg['type'] != 'debug') {
+		foreach ($_SESSION['sysmsg'] as $detail) {
+			if ($msg == $detail && ! isset($detail['special'])) {
+				debug_dump(array('Incoming MSG'=>$msg,'existing'=>$_SESSION['sysmsg']));
+				debug_dump_backtrace('Redirect Loop Detected',true);
+			}
+		}
+	}
+
+	array_push($_SESSION['sysmsg'],$msg);
+
+	if ($redirect) {
+		if (preg_match('/\?/',$redirect))
+			$redirect .= '&';
+		else
+			$redirect .= '?';
+		$redirect .= 'redirect=true';
+
+		# Check if we were an ajax request, and only render the ajax message
+		if (get_request('meth','REQUEST') == 'ajax')
+			$redirect .= '&meth=ajax';
+
+		header("Location: $redirect");
+		die();
+	}
+}
+
+/**
+ * Other Functions
+ */
+
+/**
+ * Encryption using blowfish algorithm
+ *
+ * @param string Original data
+ * @param string The secret
+ * @return string The encrypted result
+ * @author lem9 (taken from the phpMyAdmin source)
+ */
+function blowfish_encrypt($data,$secret=null) {
+	if (DEBUG_ENABLED && (($fargs=func_get_args())||$fargs='NOARGS'))
+		debug_log('Entered (%%)',1,0,__FILE__,__LINE__,__METHOD__,$fargs);
+
+	# If our secret is null or blank, get the default.
+	if ($secret === null || ! trim($secret))
+		$secret = $_SESSION[APPCONFIG]->getValue('session','blowfish') ? $_SESSION[APPCONFIG]->getValue('session','blowfish') : session_id();
+
+	# If the secret isnt set, then just return the data.
+	if (! trim($secret))
+		return $data;
+
+	if (function_exists('mcrypt_module_open')) {
+		$td = mcrypt_module_open(MCRYPT_BLOWFISH,'',MCRYPT_MODE_ECB,'');
+		$iv = mcrypt_create_iv(mcrypt_enc_get_iv_size($td),MCRYPT_DEV_URANDOM);
+		mcrypt_generic_init($td,substr($secret,0,mcrypt_enc_get_key_size($td)),$iv);
+		$encrypted_data = base64_encode(mcrypt_generic($td,$data));
+		mcrypt_generic_deinit($td);
+
+		return $encrypted_data;
+	}
+
+	if (file_exists(LIBDIR.'blowfish.php'))
+		require_once LIBDIR.'blowfish.php';
+	else
+		return $data;
+
+	$pma_cipher = new Horde_Cipher_blowfish;
+	$encrypt = '';
+
+	for ($i=0; $i<strlen($data); $i+=8) {
+		$block = substr($data, $i, 8);
+
+		if (strlen($block) < 8)
+			$block = full_str_pad($block,8,"\0", 1);
+
+		$encrypt .= $pma_cipher->encryptBlock($block, $secret);
+	}
+	return base64_encode($encrypt);
+}
+
+/**
+ * Decryption using blowfish algorithm
+ *
+ * @param string Encrypted data
+ * @param string The secret
+ * @return string Original data
+ * @author lem9 (taken from the phpMyAdmin source)
+ */
+function blowfish_decrypt($encdata,$secret=null) {
+	if (DEBUG_ENABLED && (($fargs=func_get_args())||$fargs='NOARGS'))
+		debug_log('Entered (%%)',1,0,__FILE__,__LINE__,__METHOD__,$fargs);
+
+	# This cache gives major speed up for stupid callers :)
+	static $CACHE = array();
+
+	if (isset($CACHE[$encdata]))
+		return $CACHE[$encdata];
+
+	# If our secret is null or blank, get the default.
+	if ($secret === null || ! trim($secret))
+		$secret = $_SESSION[APPCONFIG]->getValue('session','blowfish') ? $_SESSION[APPCONFIG]->getValue('session','blowfish') : session_id();
+
+	# If the secret isnt set, then just return the data.
+	if (! trim($secret))
+		return $encdata;
+
+	if (function_exists('mcrypt_module_open')) {
+		$td = mcrypt_module_open(MCRYPT_BLOWFISH,'',MCRYPT_MODE_ECB,'');
+		$iv = mcrypt_create_iv(mcrypt_enc_get_iv_size($td),MCRYPT_DEV_URANDOM);
+		mcrypt_generic_init($td,substr($secret,0,mcrypt_enc_get_key_size($td)),$iv);
+		$decrypted_data = trim(mdecrypt_generic($td,base64_decode($encdata)));
+		mcrypt_generic_deinit($td);
+
+		return $decrypted_data;
+	}
+
+	if (file_exists(LIBDIR.'blowfish.php'))
+		require_once LIBDIR.'blowfish.php';
+	else
+		return $encdata;
+
+	$pma_cipher = new Horde_Cipher_blowfish;
+	$decrypt = '';
+	$data = base64_decode($encdata);
+
+	for ($i=0; $i<strlen($data); $i+=8)
+		$decrypt .= $pma_cipher->decryptBlock(substr($data, $i, 8), $secret);
+
+	$return = trim($decrypt);
+	$CACHE[$encdata] = $return;
+	return $return;
+}
+
+/**
+ * String padding
+ *
+ * @param string Input string
+ * @param integer Length of the result
+ * @param string The filling string
+ * @param integer Padding mode
+ * @return string The padded string
+ */
+function full_str_pad($input,$pad_length,$pad_string='',$pad_type=0) {
+	if (DEBUG_ENABLED && (($fargs=func_get_args())||$fargs='NOARGS'))
+		debug_log('Entered (%%)',1,0,__FILE__,__LINE__,__METHOD__,$fargs);
+
+	$str = '';
+	$length = $pad_length - strlen($input);
+
+	if ($length > 0) { // str_repeat doesn't like negatives
+		if ($pad_type == STR_PAD_RIGHT) { // STR_PAD_RIGHT == 1
+			$str = $input.str_repeat($pad_string, $length);
+		} elseif ($pad_type == STR_PAD_BOTH) { // STR_PAD_BOTH == 2
+			$str = str_repeat($pad_string, floor($length/2));
+			$str .= $input;
+			$str .= str_repeat($pad_string, ceil($length/2));
+		} else { // defaults to STR_PAD_LEFT == 0
+			$str = str_repeat($pad_string, $length).$input;
+		}
+
+	} else { // if $length is negative or zero we don't need to do anything
+		$str = $input;
+	}
+	return $str;
+}
+
+/**
+ * Returns the cached array of LDAP resources.
+ *
+ * Note that internally, this function utilizes a two-layer cache,
+ * one in memory using a static variable for multiple calls within
+ * the same page load, and one in a session for multiple calls within
+ * the same user session (spanning multiple page loads).
+ *
+ * @return Returns the cached attributed requested,
+ *         or null if there is nothing cached..
+ */
+function get_cached_item($index,$item,$subitem='null') {
+	if (DEBUG_ENABLED && (($fargs=func_get_args())||$fargs='NOARGS'))
+		debug_log('Entered (%%)',1,0,__FILE__,__LINE__,__METHOD__,$fargs);
+
+	# Set default return
+	$return = null;
+
+	# Check config to make sure session-based caching is enabled.
+	if ($_SESSION[APPCONFIG]->getValue('cache',$item) && isset($_SESSION['cache'][$index][$item][$subitem]))
+		$return = $_SESSION['cache'][$index][$item][$subitem];
+
+	if (DEBUG_ENABLED)
+		debug_log('Returning (%s)',1,0,__FILE__,__LINE__,__METHOD__,$return);
+
+	return $return;
+}
+
+/**
+ * Caches the specified $item for the specified $index.
+ *
+ * Returns true on success of false on failure.
+ */
+function set_cached_item($index,$item,$subitem='null',$data) {
+	if (DEBUG_ENABLED && (($fargs=func_get_args())||$fargs='NOARGS'))
+		debug_log('Entered (%%)',1,0,__FILE__,__LINE__,__METHOD__,$fargs);
+
+	# Check config to make sure session-based caching is enabled.
+	if ($_SESSION[APPCONFIG]->getValue('cache',$item)) {
+		global $CACHE;
+
+		$CACHE[$index][$item][$subitem] = $data;
+		$_SESSION['cache'][$index][$item][$subitem] = $data;
+
+		return true;
+
+	} else
+		return false;
+}
+
+/**
+ * Deletes the cache for a specified $item for the specified $index
+ */
+function del_cached_item($index,$item,$subitem='null') {
+	if (DEBUG_ENABLED && (($fargs=func_get_args())||$fargs='NOARGS'))
+		debug_log('Entered (%%)',1,0,__FILE__,__LINE__,__METHOD__,$fargs);
+
+	global $CACHE;
+
+	# Check config to make sure session-based caching is enabled.
+	if (isset($_SESSION['cache'][$index][$item][$subitem]))
+		unset($_SESSION['cache'][$index][$item][$subitem]);
+
+	if (isset($CACHE[$index][$item][$subitem]))
+		unset($CACHE[$index][$item][$subitem]);
+}
+
+/**
+ * Utility wrapper for setting cookies, which takes into consideration
+ * application configuration values. On success, true is returned. On
+ * failure, false is returned.
+ *
+ * @param string The name of the cookie to set.
+ * @param string The value of the cookie to set.
+ * @param int (optional) The duration in seconds of this cookie. If unspecified, $cookie_time is used from config.php
+ * @param string (optional) The directory value of this cookie (see php.net/setcookie)
+ * @return boolean
+ */
+function set_cookie($name,$val,$expire=null,$dir=null) {
+	if (DEBUG_ENABLED && (($fargs=func_get_args())||$fargs='NOARGS'))
+		debug_log('Entered (%%)',1,0,__FILE__,__LINE__,__METHOD__,$fargs);
+
+	# Set default return
+	$return = false;
+
+	if ($expire == null) {
+		$cookie_time = $_SESSION[APPCONFIG]->getValue('session','cookie_time');
+		$expire = $cookie_time == 0 ? null : time() + $cookie_time;
+	}
+
+	if ($dir == null)
+		$dir = dirname($_SERVER['PHP_SELF']);
+
+	if (@setcookie($name,$val,$expire,$dir)) {
+		$_COOKIE[$name] = $val;
+		$return = true;
+	}
+
+	if (DEBUG_ENABLED)
+		debug_log('Returning (%s)',1,0,__FILE__,__LINE__,__METHOD__,$return);
+
+	return $return;
+}
+
+/**
+ * Get a customized file for a server
+ * We don't need any caching, because it's done by PHP
+ *
+ * @param int The ID of the server
+ * @param string The requested filename
+ *
+ * @return string The customized filename, if exists, or the standard one
+ */
+function get_custom_file($index,$filename,$path) {
+	if (DEBUG_ENABLED && (($fargs=func_get_args())||$fargs='NOARGS'))
+		debug_log('Entered (%%)',1,0,__FILE__,__LINE__,__METHOD__,$fargs);
+
+	# Set default return
+	$return = $path.$filename;
+	$server = $_SESSION[APPCONFIG]->getServer($index);
+
+	$custom = $server->getValue('custom','pages_prefix');
+	if (! is_null($custom) && is_file(realpath($path.$custom.$filename)))
+		$return = $path.$custom.$filename;
+
+	if (DEBUG_ENABLED)
+		debug_log('Returning (%s)',1,0,__FILE__,__LINE__,__METHOD__,$return);
+
+	return $return;
+}
+
+/**
+ * Sort a multi dimensional array.
+ *
+ * @param array Multi demension array passed by reference
+ * @param string Comma delimited string of sort keys.
+ * @param boolean Whether to reverse sort.
+ * @return array Sorted multi demension array.
+ */
+function masort(&$data,$sortby,$rev=0) {
+	if (defined('DEBUG_ENABLED') && DEBUG_ENABLED && (($fargs=func_get_args())||$fargs='NOARGS'))
+		debug_log('Entered (%%)',1,0,__FILE__,__LINE__,__METHOD__,$fargs);
+
+	# if the array to sort is null or empty
+	if (! $data) return;
+
+	static $CACHE = array();
+
+	if (empty($CACHE[$sortby])) {
+		$code = "\$c=0;\n";
+
+		foreach (explode(',',$sortby) as $key) {
+			$code .= "if (is_object(\$a) || is_object(\$b)) {\n";
+
+			$code .= "	if (is_array(\$a->$key)) {\n";
+			$code .= "		asort(\$a->$key);\n";
+			$code .= "		\$aa = array_shift(\$a->$key);\n";
+			$code .= "	} else\n";
+			$code .= "		\$aa = \$a->$key;\n";
+
+			$code .= "	if (is_array(\$b->$key)) {\n";
+			$code .= "		asort(\$b->$key);\n";
+			$code .= "		\$bb = array_shift(\$b->$key);\n";
+			$code .= "	} else\n";
+			$code .= "		\$bb = \$b->$key;\n";
+
+			$code .= "	if (\$aa != \$bb)";
+			if ($rev)
+				$code .= "	return (\$aa < \$bb ? 1 : -1);\n";
+			else
+				$code .= "	return (\$aa > \$bb ? 1 : -1);\n";
+
+			$code .= "} else {\n";
+
+			$code .= "	\$a = array_change_key_case(\$a);\n";
+			$code .= "	\$b = array_change_key_case(\$b);\n";
+
+			$key = strtolower($key);
+
+			$code .= "	if ((! isset(\$a['$key'])) && isset(\$b['$key'])) return 1;\n";
+			$code .= "	if (isset(\$a['$key']) && (! isset(\$b['$key']))) return -1;\n";
+
+			$code .= "	if ((isset(\$a['$key'])) && (isset(\$b['$key']))) {\n";
+			$code .= "		if (is_array(\$a['$key'])) {\n";
+			$code .= "			asort(\$a['$key']);\n";
+			$code .= "			\$aa = array_shift(\$a['$key']);\n";
+			$code .= "		} else\n";
+			$code .= "			\$aa = \$a['$key'];\n";
+
+			$code .= "		if (is_array(\$b['$key'])) {\n";
+			$code .= "			asort(\$b['$key']);\n";
+			$code .= "			\$bb = array_shift(\$b['$key']);\n";
+			$code .= "		} else\n";
+			$code .= "			\$bb = \$b['$key'];\n";
+
+			$code .= "		if (\$aa != \$bb)\n";
+			$code .= "			if (is_numeric(\$aa) && is_numeric(\$bb)) {\n";
+
+			if ($rev)
+				$code .= "				return (\$aa < \$bb ? 1 : -1);\n";
+			else
+				$code .= "				return (\$aa > \$bb ? 1 : -1);\n";
+
+			$code .= "			} else {\n";
+
+			if ($rev)
+				$code .= "				if ( (\$c = strcasecmp(\$bb,\$aa)) != 0 ) return \$c;\n";
+			else
+				$code .= "				if ( (\$c = strcasecmp(\$aa,\$bb)) != 0 ) return \$c;\n";
+
+			$code .= "		}\n";
+			$code .= "	}\n";
+			$code .= "}\n";
+		}
+
+		$code .= 'return $c;';
+
+		$CACHE[$sortby] = create_function('$a, $b',$code);
+	}
+
+	uasort($data,$CACHE[$sortby]);
+}
+
+/**
+ * Is compression enabled for output
+ */
+function isCompress() {
+	return (isset($_SESSION[APPCONFIG]) && $_SESSION[APPCONFIG]->getValue('appearance','compress')
+		&& ! ini_get('zlib.output_compression')
+		&& preg_match('/gzip/',$_SERVER['HTTP_ACCEPT_ENCODING']));
+}
+
+/**
+ * PLA specific Functions
+ */
+
+/**
+ * Fetches whether the user has configured phpLDAPadmin to obfuscate passwords
+ * with "*********" when displaying them.
+ *
+ * This is configured in config.php thus:
+ * <code>
+ *  $config->custom->appearance['obfuscate_password_display'] = true;
+ * </code>
+ *
+ * Or if it is OK to show encrypted passwords but not clear text passwords
+ * <code>
+ *  $config->custom->appearance['show_clear_password'] = false;
+ * </code>
+ *
+ * @param string Password encoding type
+ * @return boolean
+ */
+function obfuscate_password_display($enc=null) {
+	if (DEBUG_ENABLED && (($fargs=func_get_args())||$fargs='NOARGS'))
+		debug_log('Entered (%%)',1,0,__FILE__,__LINE__,__METHOD__,$fargs);
+
+	if ($_SESSION[APPCONFIG]->getValue('appearance','obfuscate_password_display'))
+		$return = true;
+
+	elseif (! $_SESSION[APPCONFIG]->getValue('appearance','show_clear_password') && (is_null($enc) || $enc == 'clear'))
+		$return = true;
+
+	else
+		$return = false;
+
+	if (DEBUG_ENABLED)
+		debug_log('Returning (%s)',1,0,__FILE__,__LINE__,__METHOD__,$return);
+
+	return $return;
+}
+
+/**
+ * Returns an HTML-beautified version of a DN.
+ * Internally, this function makes use of pla_explode_dn() to break the
+ * the DN into its components. It then glues them back together with
+ * "pretty" HTML. The returned HTML is NOT to be used as a real DN, but
+ * simply displayed.
+ *
+ * @param string The DN to pretty-print.
+ * @return string
+ */
+function pretty_print_dn($dn) {
+	if (DEBUG_ENABLED && (($fargs=func_get_args())||$fargs='NOARGS'))
+		debug_log('Entered (%%)',1,0,__FILE__,__LINE__,__METHOD__,$fargs);
+
+	$dn_save = $dn;
+	$dn = pla_explode_dn($dn);
+
+	if (! $dn)
+		return $dn_save;
+
+	foreach ($dn as $i => $element) {
+		$element = htmlspecialchars($element);
+		$element = explode('=',$element,2);
+		$element = implode('<span style="color: blue; font-family: courier; font-weight: bold">=</span>',$element);
+		$dn[$i] = $element;
+	}
+
+	$dn = implode('<span style="color:red; font-family:courier; font-weight: bold;">,</span>',$dn);
+
+	return $dn;
+}
+
+/**
+ * Given a string, this function returns true if the string has the format
+ * of a DN (ie, looks like "cn=Foo,dc=example,dc=com"). Returns false otherwise.
+ * The purpose of this function is so that developers can examine a string and
+ * know if it looks like a DN, and draw a hyperlink as needed.
+ *
+ * (See unit_test.php for test cases)
+ *
+ * @param string The attribute to examine for "DNness"
+ * @return boolean
+ */
+function is_dn_string($str) {
+	if (DEBUG_ENABLED && (($fargs=func_get_args())||$fargs='NOARGS'))
+		debug_log('Entered (%%)',1,0,__FILE__,__LINE__,__METHOD__,$fargs);
+
+	/* Try to break the string into its component parts if it can be done
+	   ie, "uid=Manager" "dc=example" and "dc=com" */
+	$parts = pla_explode_dn($str);
+	if (! is_array($parts) || ! count($parts))
+		return false;
+
+	/* Foreach of the "parts", look for an "=" character,
+	   and make sure neither the left nor the right is empty */
+	foreach ($parts as $part) {
+		if (! strpos($part,"="))
+			return false;
+
+		$sub_parts = explode('=',$part,2);
+		$left = $sub_parts[0];
+		$right = $sub_parts[1];
+
+		if ( ! strlen(trim($left)) || ! strlen(trim($right)))
+			return false;
+
+		if (strpos($left,'#') !== false)
+			return false;
+	}
+
+	# We survived the above rigor. This is a bonified DN string.
+	return true;
+}
+
+/**
+ * Get whether a string looks like an email address (user@example.com).
+ *
+ * @param string The string to analyze.
+ * @return boolean Returns true if the specified string looks like an email address or false otherwise.
+ */
+function is_mail_string($str) {
+	if (DEBUG_ENABLED && (($fargs=func_get_args())||$fargs='NOARGS'))
+		debug_log('Entered (%%)',1,0,__FILE__,__LINE__,__METHOD__,$fargs);
+
+	$mail_regex = "/^[_A-Za-z0-9-]+(\\.[_A-Za-z0-9-]+)*@[A-Za-z0-9-]+(\\.[A-Za-z0-9-]+)*$/";
+
+	if (preg_match($mail_regex,$str))
+		return true;
+	else
+		return false;
+}
+
+/**
+ * Get whether a string looks like a web URL (http://www.example.com/)
+ *
+ * @param string The string to analyze.
+ * @return boolean Returns true if the specified string looks like a web URL or false otherwise.
+ */
+function is_url_string($str) {
+	if (DEBUG_ENABLED && (($fargs=func_get_args())||$fargs='NOARGS'))
+		debug_log('Entered (%%)',1,0,__FILE__,__LINE__,__METHOD__,$fargs);
+
+	$url_regex = '/^(ftp|https?):\/\/+[\w\.\-\/\?\=\&]*\w+/';
+
+	if (preg_match($url_regex,$str))
+		return true;
+	else
+		return false;
+}
+
+/**
+ * Compares 2 DNs. If they are equivelant, returns 0, otherwise,
+ * returns their sorting order (similar to strcmp()):
+ *      Returns < 0 if dn1 is less than dn2.
+ *      Returns > 0 if dn1 is greater than dn2.
+ *
+ * The comparison is performed starting with the top-most element
+ * of the DN. Thus, the following list:
+ *    <code>
+ *       ou=people,dc=example,dc=com
+ *       cn=Admin,ou=People,dc=example,dc=com
+ *       cn=Joe,ou=people,dc=example,dc=com
+ *       dc=example,dc=com
+ *       cn=Fred,ou=people,dc=example,dc=org
+ *       cn=Dave,ou=people,dc=example,dc=org
+ *    </code>
+ * Will be sorted thus using usort( $list, "pla_compare_dns" ):
+ *    <code>
+ *       dc=com
+ *       dc=example,dc=com
+ *       ou=people,dc=example,dc=com
+ *       cn=Admin,ou=People,dc=example,dc=com
+ *       cn=Joe,ou=people,dc=example,dc=com
+ *       cn=Dave,ou=people,dc=example,dc=org
+ *       cn=Fred,ou=people,dc=example,dc=org
+ *    </code>
+ *
+ * @param string The first of two DNs to compare
+ * @param string The second of two DNs to compare
+ * @return int
+ */
+function pla_compare_dns($dn1,$dn2) {
+	if (DEBUG_ENABLED && (($fargs=func_get_args())||$fargs='NOARGS'))
+		debug_log('Entered (%%)',1,0,__FILE__,__LINE__,__METHOD__,$fargs);
+
+	# If pla_compare_dns is passed via a tree, then we'll just get the DN part.
+	if (is_array($dn1))
+		if (isset($dn1['dn']))
+			$dn1 = $dn1['dn'];
+		else
+			$dn1 = implode('+',$dn1);
+	if (is_array($dn2))
+		if (isset($dn2['dn']))
+			$dn2 = $dn2['dn'];
+		else
+			$dn2 = implode('+',$dn2);
+
+	# If they are obviously the same, return immediately
+	if (! strcasecmp($dn1,$dn2))
+		return 0;
+
+	$dn1_parts = pla_explode_dn(pla_reverse_dn($dn1));
+	$dn2_parts = pla_explode_dn(pla_reverse_dn($dn2));
+	assert(is_array($dn1_parts));
+	assert(is_array($dn2_parts));
+
+	# Foreach of the "parts" of the smaller DN
+	for ($i=0; $i < count($dn1_parts) && $i < count($dn2_parts); $i++) {
+		/* dnX_part is of the form: "cn=joe" or "cn = joe" or "dc=example"
+		   ie, one part of a multi-part DN. */
+		$dn1_part = $dn1_parts[$i];
+		$dn2_part = $dn2_parts[$i];
+
+		/* Each "part" consists of two sub-parts:
+		   1. the attribute (ie, "cn" or "o")
+		   2. the value (ie, "joe" or "example") */
+		$dn1_sub_parts = explode('=',$dn1_part,2);
+		$dn2_sub_parts = explode('=',$dn2_part,2);
+
+		$dn1_sub_part_attr = trim($dn1_sub_parts[0]);
+		$dn2_sub_part_attr = trim($dn2_sub_parts[0]);
+
+		if (0 != ($cmp = strcasecmp($dn1_sub_part_attr,$dn2_sub_part_attr)))
+			return $cmp;
+
+		$dn1_sub_part_val = trim($dn1_sub_parts[1]);
+		$dn2_sub_part_val = trim($dn2_sub_parts[1]);
+		if (0 != ($cmp = strcasecmp($dn1_sub_part_val,$dn2_sub_part_val)))
+			return $cmp;
+	}
+
+	/* If we iterated through all entries in the smaller of the two DNs
+	   (ie, the one with fewer parts), and the entries are different sized,
+	   then, the smaller of the two must be "less than" than the larger. */
+	if (count($dn1_parts) > count($dn2_parts)) {
+		return 1;
+
+	} elseif (count($dn2_parts) > count($dn1_parts)) {
+		return -1;
+
+	} else {
+		return 0;
+	}
+}
+
+/**
+ * For LDAP servers with auto_number enabled, this function will get the next
+ * available number using the host's preferred mechanism (pool or search).
+ *
+ * This is configured in config.php by server:
+ *
+ * <code>
+ *   $servers->setValue('auto_number','enable',true|false);
+ * </code>
+ *
+ * The available mechanisms are:
+ * pool:
+ *   The pool mechanism uses a user-configured entry in the LDAP server to
+ *   store the last used "number". This mechanism simply fetches and increments
+ *   and returns that value.
+ *
+ * search:
+ *   The search mechanism will search the LDAP server that has the attribute
+ *   set. It will then find the smallest value and "fills in the gaps" by
+ *   incrementing the smallest attribute until an unused value is found.
+ *
+ * NOTE: Both mechanisms do NOT prevent race conditions or toe-stomping, so
+ * care must be taken when actually creating the entry to check that the number
+ * returned here has not been used in the mean time. Note that the two different
+ * mechanisms may (will!) return different values as they use different algorithms
+ * to arrive at their result. Do not be alarmed if (when!) this is the case.
+ *
+ * See config.php.example for more notes on the two mechanisms.
+ *
+ * @param string Base to start the search from
+ * @param string Attribute to query
+ * @param boolean Increment the result (for pool searches)
+ * @param string LDAP filter to use (for pool searches)
+ * @return int
+ */
+function get_next_number($base,$attr,$increment=false,$filter=false,$startmin=null) {
+	if (DEBUG_ENABLED && (($fargs=func_get_args())||$fargs='NOARGS'))
+		debug_log('Entered (%%)',1,0,__FILE__,__LINE__,__METHOD__,$fargs);
+
+	$server = $_SESSION[APPCONFIG]->getServer(get_request('server_id','REQUEST'));
+	$attr = strtolower($attr);
+	$query = array();
+
+	if (! $server->getValue('auto_number','enable')) {
+		system_message(array(
+			'title'=>_('AUTO_NUMBER is disabled for this server'),
+			'body'=>sprintf('%s (<b>%s</b>)',_('A call was made to get_next_number(), however, it is disabled for this server'),$attr),
+			'type'=>'warn'));
+
+		return false;
+	}
+
+	# Check see and use our alternate uid_dn and password if we have it.
+	if (! $server->login($server->getValue('auto_number','dn'),$server->getValue('auto_number','pass'),'auto_number')) {
+		system_message(array(
+			'title'=>_('AUTO_NUMBER invalid login/password'),
+			'body'=>sprintf('%s (<b>%s</b>)',_('Unable to connect to LDAP server with the auto_number login/password, please check your configuration.'),
+				$server->getName()),
+			'type'=>'warn'));
+
+		return false;
+	}
+
+	# Some error checking
+	if (! $base) {
+		$query['base'] = $server->getValue('auto_number','search_base');
+
+		if (! trim($query['base'])) {
+			system_message(array(
+				'title'=>_('No AUTO_NUMBER search_base configured for this server'),
+				'body'=>_('A call was made to get_next_number(), however, the base to search is empty.'),
+				'type'=>'warn'));
+
+			return false;
+		}
+
+	} else
+		$query['base'] = $base;
+
+	if (! $server->dnExists($query['base'])) {
+		system_message(array(
+			'title'=>_('No AUTO_NUMBER search_base exists for this server'),
+			'body'=>sprintf('%s (<b>%s</b>)',_('A call was made to get_next_number(), however, the base to search does not exist for this server.'),$query['base']),
+			'type'=>'warn'));
+
+		return false;
+	}
+
+	if (! is_string($attr) || ! $server->getSchemaAttribute($attr)) {
+		system_message(array(
+			'title'=>_('AUTO_NUMBER search attribute invalid'),
+			'body'=>sprintf('%s (<b>%s</b>)',_('The search attribute for AUTO_NUMBER is invalid, expecting a single valid attribute.'),$attr),
+			'type'=>'warn'));
+
+		return false;
+	}
+
+	$query['attrs'] = array($attr);
+
+	# Based on the configured mechanism, go get the next available uidNumber!
+	switch ($server->getValue('auto_number','mechanism')) {
+		case 'search':
+			$query['filter'] = sprintf('(%s=*)',$attr);
+			$search = $server->query($query,'auto_number');
+
+			# Construct a list of used numbers
+			$autonum = array(0);
+
+			foreach ($search as $dn => $values) {
+				$values = array_change_key_case($values);
+				foreach ($values[$attr] as $value)
+					array_push($autonum,$value);
+			}
+
+			$autonum = array_unique($autonum);
+			sort($autonum);
+
+			# Start with the least existing autoNumber and add 1
+			$minNumber = is_null($startmin) ? intval($autonum[0])+1 : $startmin;
+
+			# Override our minNumber by the configuration if it exists.
+			if (count($server->getValue('auto_number','min'))) {
+				$min = array_change_key_case($server->getValue('auto_number','min'));
+
+				if (isset($min[$attr]))
+					$minNumber = $min[$attr] > $minNumber ? $min[$attr] : $minNumber;
+			}
+
+			for ($i=0;$i<count($autonum);$i++) {
+				$num = $autonum[$i] < $minNumber ? $minNumber : $autonum[$i];
+
+				/* If we're at the end of the list, or we've found a gap between this number and the 
+				   following, use the next available number in the gap. */ 
+				if ($i+1 == count($autonum) || $autonum[$i+1] > $num+1) 
+					return $autonum[$i] >= $num ? $num+1 : $num; 
+			}
+
+			# If we didnt find a suitable gap and are all above the minNumber, we'll just return the $minNumber
+			return $minNumber;
+
+			break;
+
+		case 'pool':
+			switch ($attr) {
+				case 'gidnumber':
+					$query['filter'] = '(objectClass=gidPool)';
+
+					break;
+
+				case 'uidnumber':
+					$query['filter'] = '(objectClass=uidPool)';
+
+					break;
+			}
+
+			# If we are called with a filter, we'll use the one from the configuration.
+			if (! empty($filter))
+				$query['filter'] = $filter;
+
+			$search = $server->query($query,'auto_number');
+
+			switch (count($search)) {
+				case '1':
+					break;
+
+				case '0':
+					system_message(array(
+						'title'=>_('AUTO_NUMBER pool filter didnt return any DNs'),
+						'body'=>sprintf('%s (<b>%s</b>)',_('Please change your filter parameter, or check your auto_number,search_base configuration'),$query['filter']),
+						'type'=>'warn'));
+
+					return false;
+
+				default:
+					system_message(array(
+					'title'=>_('AUTO_NUMBER pool filter returned too many DNs'),
+						'body'=>sprintf('%s (<b>%s</b>)',_('Please change your filter parameter, or check your auto_number,search_base configuration'),$query['filter']),
+						'type'=>'warn'));
+
+					return false;
+			}
+
+			# This should only iterate once.
+			foreach ($search as $dn => $values) {
+				$values = array_change_key_case($values);
+
+				$autonum = $values[$attr][0];
+				$poolDN = $values['dn'];
+			}
+
+			if ($increment) {
+				$updatedattr = array($attr=>$autonum+1);
+				$server->modify($poolDN,$updatedattr);
+			}
+
+			return $autonum;
+
+		# No other cases allowed. The user has an error in the configuration
+		default:
+			system_message(array(
+				'title'=>_('Invalid AUTO_NUMBER mechanism'),
+				'body'=>sprintf('%s (<b>%s</b>)',_('Your config file specifies an unknown AUTO_NUMBER search mechanism.'),$server->getValue('auto_number','mechanism')),
+				'type'=>'warn'));
+
+			return false;
+	}
+}
+
+/**
+ * Given a DN and server ID, this function reads the DN's objectClasses and
+ * determines which icon best represents the entry. The results of this query
+ * are cached in a session variable so it is not run every time the tree
+ * browser changes, just when exposing new DNs that were not displayed
+ * previously. That means we can afford a little bit of inefficiency here
+ * in favor of coolness. :)
+ *
+ * This function returns a string like "country.png". All icon files are assumed
+ * to be contained in the /images/ directory of phpLDAPadmin.
+ *
+ * Developers are encouraged to add new icons to the images directory and modify
+ * this function as needed to suit their types of LDAP entries. If the modifications
+ * are general to an LDAP audience, the phpLDAPadmin team will gladly accept them
+ * as a patch.
+ *
+ * @param string The DN of the entry whose icon you wish to fetch.
+ * @return string
+ */
+function get_icon($server_id,$dn,$object_classes=array()) {
+	if (DEBUG_ENABLED && (($fargs=func_get_args())||$fargs='NOARGS'))
+		debug_log('Entered (%%)',1,0,__FILE__,__LINE__,__METHOD__,$fargs);
+
+	$server = $_SESSION[APPCONFIG]->getServer($server_id);
+
+	# Fetch and lowercase all the objectClasses in an array
+	if (! count($object_classes))
+		$object_classes = $server->getDNAttrValue($dn,'objectClass');
+
+	foreach ($object_classes as $index => $value)
+		$object_classes[$index] = strtolower($value);
+
+	$rdn = get_rdn($dn);
+	$rdn_parts = explode('=',$rdn,2);
+	$rdn_value = isset($rdn_parts[0]) ? $rdn_parts[0] : null;
+	$rdn_attr = isset($rdn_parts[1]) ? $rdn_parts[1] : null;
+	unset($rdn_parts);
+
+	# Return icon filename based upon objectClass value
+	if (in_array('sambaaccount',$object_classes) &&
+		'$' == $rdn{ strlen($rdn) - 1 })
+		return 'nt_machine.png';
+
+	if (in_array('sambaaccount',$object_classes))
+		return 'nt_user.png';
+
+	elseif (in_array('person',$object_classes) ||
+		in_array('organizationalperson',$object_classes) ||
+		in_array('inetorgperson',$object_classes) ||
+		in_array('account',$object_classes) ||
+		in_array('posixaccount',$object_classes))
+
+		return 'ldap-user.png';
+
+	elseif (in_array('organization',$object_classes))
+		return 'ldap-o.png';
+
+	elseif (in_array('organizationalunit',$object_classes))
+		return 'ldap-ou.png';
+
+	elseif (in_array('organizationalrole',$object_classes))
+		return 'ldap-uid.png';
+
+	elseif (in_array('dcobject',$object_classes) ||
+		in_array('domainrelatedobject',$object_classes) ||
+		in_array('domain',$object_classes) ||
+		in_array('builtindomain',$object_classes))
+
+		return 'ldap-dc.png';
+
+	elseif (in_array('alias',$object_classes))
+		return 'ldap-alias.png';
+
+	elseif (in_array('room',$object_classes))
+		return 'door.png';
+
+	elseif (in_array('device',$object_classes))
+		return 'device.png';
+
+	elseif (in_array('document',$object_classes))
+		return 'document.png';
+
+	elseif (in_array('country',$object_classes)) {
+		$tmp = pla_explode_dn($dn);
+		$cval = explode('=',$tmp[0],2);
+		$cval = isset($cval[1]) ? $cval[1] : false;
+		if ($cval && false === strpos($cval,'..') &&
+			file_exists(realpath(sprintf('%s/../countries/%s.png',IMGDIR,strtolower($cval)))))
+
+			return sprintf('../countries/%s.png',strtolower($cval));
+
+		else
+			return 'country.png';
+	}
+
+	elseif (in_array('jammvirtualdomain',$object_classes))
+		return 'mail.png';
+
+	elseif (in_array('locality',$object_classes))
+		return 'locality.png';
+
+	elseif (in_array('posixgroup',$object_classes) ||
+		in_array('groupofnames',$object_classes) ||
+		in_array('group',$object_classes))
+
+		return 'ldap-ou.png';
+
+	elseif (in_array('applicationprocess',$object_classes))
+		return 'process.png';
+
+	elseif (in_array('groupofuniquenames',$object_classes))
+		return 'ldap-uniquegroup.png';
+
+	elseif (in_array('iphost',$object_classes))
+		return 'host.png';
+
+	elseif (in_array('nlsproductcontainer',$object_classes))
+		return 'n.png';
+
+	elseif (in_array('ndspkikeymaterial',$object_classes))
+		return 'lock.png';
+
+	elseif (in_array('server',$object_classes))
+		return 'server-small.png';
+
+	elseif (in_array('volume',$object_classes))
+		return 'hard-drive.png';
+
+	elseif (in_array('ndscatcatalog',$object_classes))
+		return 'catalog.png';
+
+	elseif (in_array('resource',$object_classes))
+		return 'n.png';
+
+	elseif (in_array('ldapgroup',$object_classes))
+		return 'ldap-server.png';
+
+	elseif (in_array('ldapserver',$object_classes))
+		return 'ldap-server.png';
+
+	elseif (in_array('nisserver',$object_classes))
+		return 'ldap-server.png';
+
+	elseif (in_array('rbscollection',$object_classes))
+		return 'ldap-ou.png';
+
+	elseif (in_array('dfsconfiguration',$object_classes))
+		return 'nt_machine.png';
+
+	elseif (in_array('applicationsettings',$object_classes))
+		return 'server-settings.png';
+
+	elseif (in_array('aspenalias',$object_classes))
+		return 'mail.png';
+
+	elseif (in_array('container',$object_classes))
+		return 'folder.png';
+
+	elseif (in_array('ipnetwork',$object_classes))
+		return 'network.png';
+
+	elseif (in_array('samserver',$object_classes))
+		return 'server-small.png';
+
+	elseif (in_array('lostandfound',$object_classes))
+		return 'find.png';
+
+	elseif (in_array('infrastructureupdate',$object_classes))
+		return 'server-small.png';
+
+	elseif (in_array('filelinktracking',$object_classes))
+		return 'files.png';
+
+	elseif (in_array('automountmap',$object_classes) ||
+		in_array('automount',$object_classes))
+
+		return 'hard-drive.png';
+
+	elseif (strpos($rdn_value,'ipsec') === 0 ||
+		strcasecmp($rdn_value,'IP Security') == 0||
+		strcasecmp($rdn_value,'MSRADIUSPRIVKEY Secret') == 0 ||
+		strpos($rdn_value,'BCKUPKEY_') === 0)
+
+		return 'lock.png';
+
+	elseif (strcasecmp($rdn_value,'MicrosoftDNS') == 0)
+		return 'ldap-dc.png';
+
+	# Oh well, I don't know what it is. Use a generic icon.
+	else
+		return 'ldap-default.png';
+}
+
+/**
+ * Appends a servers base to a "sub" dn or returns the base.
+ *
+ * @param string The baseDN to be added if the DN is relative
+ * @param string The DN to be made absolute
+ * @return string|null Returns null if both base is null and sub_dn is null or empty
+ */
+function expand_dn_with_base($base,$sub_dn) {
+	if (DEBUG_ENABLED && (($fargs=func_get_args())||$fargs='NOARGS'))
+		debug_log('Entered (%%)',1,0,__FILE__,__LINE__,__METHOD__,$fargs);
+
+	$empty_str = (is_null($sub_dn) || (($len=strlen(trim($sub_dn))) == 0));
+
+	if ($empty_str)
+		return $base;
+
+	# If we have a string which doesn't need a base
+	elseif ($sub_dn[$len-1] != ',')
+		return $sub_dn;
+
+	else
+		return sprintf('%s%s',$sub_dn,$base);
+}
+
+/**
+ * Used to generate a random salt for crypt-style passwords. Salt strings are used
+ * to make pre-built hash cracking dictionaries difficult to use as the hash algorithm uses
+ * not only the user's password but also a randomly generated string. The string is
+ * stored as the first N characters of the hash for reference of hashing algorithms later.
+ *
+ * @param int The length of the salt string to generate.
+ * @return string The generated salt string.
+ */
+function random_salt($length) {
+	if (DEBUG_ENABLED && (($fargs=func_get_args())||$fargs='NOARGS'))
+		debug_log('Entered (%%)',1,0,__FILE__,__LINE__,__METHOD__,$fargs);
+
+	$possible = '0123456789'.
+		'abcdefghijklmnopqrstuvwxyz'.
+		'ABCDEFGHIJKLMNOPQRSTUVWXYZ'.
+		'./';
+	$str = '';
+	mt_srand((double)microtime() * 1000000);
+
+	while (strlen($str) < $length)
+		$str .= substr($possible,(rand()%strlen($possible)),1);
+
+	return $str;
+}
+
+/**
+ * Given a DN string, this returns the 'RDN' portion of the string.
+ * For example. given 'cn=Manager,dc=example,dc=com', this function returns
+ * 'cn=Manager' (it is really the exact opposite of ds_ldap::getContainer()).
+ *
+ * @param string The DN whose RDN to return.
+ * @param boolean If true, include attributes in the RDN string. See http://php.net/ldap_explode_dn for details
+ * @return string The RDN
+ */
+function get_rdn($dn,$include_attrs=0,$decode=false) {
+	if (DEBUG_ENABLED && (($fargs=func_get_args())||$fargs='NOARGS'))
+		debug_log('Entered (%%)',1,0,__FILE__,__LINE__,__METHOD__,$fargs);
+
+	if (is_null($dn))
+		return null;
+
+	$rdn = pla_explode_dn($dn,$include_attrs);
+	if (! count($rdn) || ! isset($rdn[0]))
+		return $dn;
+
+	if ($decode)
+		$rdn = dn_unescape($rdn[0]);
+	else
+		$rdn = $rdn[0];
+
+	return $rdn;
+}
+
+/**
+ * Split an RDN into its attributes
+ */
+function rdn_explode($rdn) {
+	if (DEBUG_ENABLED && (($fargs=func_get_args())||$fargs='NOARGS'))
+		debug_log('Entered (%%)',1,0,__FILE__,__LINE__,__METHOD__,$fargs);
+
+	# Setup to work out our RDN.
+	$rdnarray = explode('\+',$rdn);
+
+	# Capture items that have +, but are not an attribute
+	foreach ($rdnarray as $index => $val) {
+		if (preg_match('/=/',$val))
+			$validindex = $index;
+
+		if (! preg_match('/=/',$val)) {
+			$rdnarray[$validindex] .= '+'.$val;
+			unset($rdnarray[$index]);
+		}
+	}
+
+	return $rdnarray;
+}
+
+/**
+ * Given an LDAP error number, returns a verbose description of the error.
+ * This function parses ldap_error_codes.txt and looks up the specified
+ * ldap error number, and returns the verbose message defined in that file.
+ *
+ * <code>
+ *  Array (
+ *    [title] => "Invalid Credentials"
+ *    [description] => "An invalid username and/or password was supplied to the LDAP server."
+ *  )
+ * </code>
+ *
+ * @param string The hex error number (ie, "0x42") of the LDAP error of interest.
+ * @return array An associative array contianing the error title and description like so:
+ */
+function pla_verbose_error($key) {
+	if (DEBUG_ENABLED && (($fargs=func_get_args())||$fargs='NOARGS'))
+		debug_log('Entered (%%)',1,0,__FILE__,__LINE__,__METHOD__,$fargs);
+
+	static $CACHE = array();
+
+	if (! count($CACHE)) {
+		$source_file = LIBDIR.'ldap_error_codes.txt';
+
+		if (! file_exists($source_file) || ! is_readable($source_file) || ! ($f = fopen($source_file,'r')))
+			return false;
+
+		$contents = fread($f,filesize($source_file));
+		fclose($f);
+		$entries = array();
+		preg_match_all("/0x[A-Fa-f0-9][A-Za-z0-9]\s+[0-9A-Za-z_]+\s+\"[^\"]*\"\n/",
+				$contents,$entries);
+
+		foreach ($entries[0] as $values) {
+			$entry = array();
+			preg_match("/(0x[A-Za-z0-9][A-Za-z0-9])\s+([0-9A-Za-z_]+)\s+\"([^\"]*)\"/",$values,$entry);
+
+			$hex_code = isset($entry[1]) ? $entry[1] : null;
+			$title = isset($entry[2]) ? $entry[2] : null;
+			$desc = isset($entry[3]) ? $entry[3] : null;
+			$desc = preg_replace('/\s+/',' ',$desc);
+			$CACHE[$hex_code] = array('title'=>$title,'desc'=>$desc);
+		}
+	}
+
+	if (isset($CACHE[$key]))
+		return $CACHE[$key];
+	else
+		return array('title' => null,'desc' => null);
+}
+
+/**
+ * Given an LDAP OID number, returns a verbose description of the OID.
+ * This function parses ldap_supported_oids.txt and looks up the specified
+ * OID, and returns the verbose message defined in that file.
+ *
+ * <code>
+ *  Array (
+ *    [title] => All Operational Attribute
+ *    [ref] => RFC 3673
+ *    [desc] => An LDAP extension which clients may use to request the return of all operational attributes.
+ *  )
+ * </code>
+ *
+ * @param string The OID number (ie, "1.3.6.1.4.1.4203.1.5.1") of the OID of interest.
+ * @return array An associative array contianing the OID title and description like so:
+ */
+function support_oid_to_text($key) {
+	if (DEBUG_ENABLED && (($fargs=func_get_args())||$fargs='NOARGS'))
+		debug_log('Entered (%%)',1,0,__FILE__,__LINE__,__METHOD__,$fargs);
+
+	static $CACHE = array();
+
+	$unknown = array();
+	$unknown['desc'] = 'We have no description for this OID, if you know what this OID provides, please let us know. Please also include an RFC reference if it is available.';
+	$unknown['title'] = 'Can you help with this OID info?';
+
+	if (! count($CACHE)) {
+		$source_file = LIBDIR.'ldap_supported_oids.txt';
+
+		if (! file_exists($source_file) || ! is_readable($source_file) || ! ($f = fopen($source_file,'r')))
+			return false;
+
+		$contents = fread($f,filesize($source_file));
+		fclose($f);
+		$entries = array();
+		preg_match_all("/[0-9]\..+\s+\"[^\"]*\"\n/",$contents,$entries);
+
+		foreach ($entries[0] as $values) {
+			$entry = array();
+			preg_match("/([0-9]\.([0-9]+\.)*[0-9]+)(\s+\"([^\"]*)\")?(\s+\"([^\"]*)\")?(\s+\"([^\"]*)\")?/",$values,$entry);
+			$oid_id = isset($entry[1]) ? $entry[1] : null;
+
+			if ($oid_id) {
+				$CACHE[$oid_id]['title'] = isset($entry[4]) ? $entry[4] : null;
+				$CACHE[$oid_id]['ref'] = isset($entry[6]) ? $entry[6] : null;
+				$desc = isset($entry[8]) ? $entry[8] : sprintf('<acronym title="%s">%s</acronym>',$unknown['desc'],$unknown['title']);
+				$CACHE[$oid_id]['desc'] = preg_replace('/\s+/',' ',$desc);
+			}
+		}
+	}
+
+	if (isset($CACHE[$key]))
+		return $CACHE[$key];
+	else
+		return array(
+			'title'=>$key,
+			'ref'=>null,
+			'desc'=>sprintf('<acronym title="%s">%s</acronym>',$unknown['desc'],$unknown['title']));
+}
+
+/**
+ * Print an LDAP error message
+ */
+function ldap_error_msg($msg,$errnum) {
+	if (DEBUG_ENABLED && (($fargs=func_get_args())||$fargs='NOARGS'))
+		debug_log('Entered (%%)',1,0,__FILE__,__LINE__,__METHOD__,$fargs);
+
+	$body = '<table border="0">';
+
+	$errnum = ('0x'.str_pad(dechex($errnum),2,0,STR_PAD_LEFT));
+	$verbose_error = pla_verbose_error($errnum);
+
+	$body .= sprintf('<tr><td><b>%s</b>:</td><td>%s</td></tr>',_('LDAP said'),$msg);
+
+	if ($verbose_error) {
+		$body .= sprintf('<tr><td><b>%s</b>:</td><td>%s (%s)</td></tr>',_('Error number'),$errnum,$verbose_error['title']);
+		$body .= sprintf('<tr><td><b>%s</b>:</td><td>%s</td></tr>',_('Description'),$verbose_error['desc']);
+
+	} else {
+		$body .= sprintf('<tr><td><b>%s</b>:</td><td>%s</td></tr>',_('Error number'),$errnum);
+		$body .= sprintf('<tr><td><b>%s</b>:</td><td>(%s)</td></tr>',_('Description'),_('no description available'));
+	}
+
+	$body .= '</table>';
+
+	return $body;
+}
+
+/**
+ * Draw the jpegPhoto image(s) for an entry wrapped in HTML. Many options are available to
+ * specify how the images are to be displayed.
+ *
+ * Usage Examples:
+ *  <code>
+ *   draw_jpeg_photo(0,'cn=Bob,ou=People,dc=example,dc=com',"jpegPhoto",0,true,array('img_opts'=>"border: 1px; width: 150px"));
+ *   draw_jpeg_photo(1,'cn=Fred,ou=People,dc=example,dc=com',null,1);
+ *  </code>
+ *
+ * @param object The Server to get the image from.
+ * @param string The DN of the entry that contains the jpeg attribute you want to draw.
+ * @param string The name of the attribute containing the jpeg data (usually 'jpegPhoto').
+ * @param int Index of the attribute to draw
+ * @param boolean If true, draws a button beneath the image titled 'Delete' allowing the user
+ *                to delete the jpeg attribute by calling JavaScript function deleteAttribute() provided
+ *                in the default modification template.
+ * @param array Specifies optional image and CSS style attributes for the table tag. Supported keys are
+ *                fixed_width, fixed_height, img_opts.
+ */
+function draw_jpeg_photo($server,$dn,$attr_name='jpegphoto',$index,$draw_delete_buttons=false,$options=array()) {
+	if (DEBUG_ENABLED && (($fargs=func_get_args())||$fargs='NOARGS'))
+		debug_log('Entered (%%)',1,0,__FILE__,__LINE__,__METHOD__,$fargs);
+
+	$fixed = array();
+	$fixed['width'] = isset($options['fixed_width']) ? $options['fixed_width'] : false;
+	$fixed['height'] = isset($options['fixed_height']) ? $options['fixed_height'] : false;
+
+	if (is_null($server))
+		$jpeg_data = $_SESSION['tmp'];
+	else
+		$jpeg_data = $server->getDNAttrValues($dn,null,LDAP_DEREF_NEVER,array($attr_name));
+
+	if (! isset($jpeg_data[$attr_name][$index]) || ! $jpeg_data[$attr_name][$index]) {
+		system_message(array(
+			'title'=>_('Unable to retrieve image'),
+			'body'=>sprintf('%s %s',
+				_('Could not fetch jpeg data for attribute'),$attr_name),
+			'type'=>'warn'));
+
+		# This should atleast generate some text that says "Image not available"
+		printf('<img src="view_jpeg_photo.php?location=session&attr=%s" alt="Photo" />',$attr_name);
+
+		return;
+	}
+
+	$width = 0;
+	$height = 0;
+
+	if (function_exists('getimagesize')) {
+		$jpeg_temp_dir = realpath($_SESSION[APPCONFIG]->getValue('jpeg','tmpdir').'/');
+		if (! is_writable($jpeg_temp_dir))
+			system_message(array(
+				'title'=>_('Unable to write to jpeg tmp directory'),
+				'body'=>_('Please set jpeg,tmpdir to a writable directory in the phpLDAPadmin config.php'),
+				'type'=>'warn'));
+
+		else {
+			# We have an image to display
+			$jpeg_filename = tempnam($jpeg_temp_dir.'/','pla');
+			$outjpeg = @file_put_contents($jpeg_filename,$jpeg_data[$attr_name][$index]);
+
+			if (! $outjpeg) {
+				system_message(array(
+					'title'=>_('Error writing to jpeg tmp directory'),
+					'body'=>sprintf(_('Please check jpeg,tmpdir is a writable directory in the phpLDAPadmin config.php'),$jpeg_temp_dir),
+					'type'=>'warn'));
+
+			} elseif ($outjpeg < 6) {
+				system_message(array(
+					'title'=>sprintf('%s %s',$attr_name,_('contains errors')),
+					'body'=>_('It appears that the jpeg image may not be a jpeg image'),
+					'type'=>'warn'));
+
+			} else {
+				$jpeg_dimensions = getimagesize($jpeg_filename);
+				$width = $jpeg_dimensions[0];
+				$height = $jpeg_dimensions[1];
+			}
+
+			unlink($jpeg_filename);
+		}
+	}
+
+	if ($width > 300) {
+		$scale_factor = 300 / $width;
+		$img_width = 300;
+		$img_height = intval($height * $scale_factor);
+
+	} else {
+		$img_width = $width;
+		$img_height = $height;
+	}
+
+	$href = sprintf('view_jpeg_photo.php?dn=%s&index=%s&attr=%s',rawurlencode($dn),$index,$attr_name);
+
+	printf('<acronym title="%s %s. %s x %s %s.">',number_format($outjpeg),_('bytes'),$width,$height,_('pixels'));
+
+	printf('<img src="%s&amp;%s" alt="Photo" %s%s%s />',
+		htmlspecialchars($href),
+		is_null($server) ? 'location=session' : sprintf('server_id=%s',$server->getIndex()),
+		(! $img_width || $fixed['width'] ? '' : sprintf('width="%s"',$img_width)),
+		(! $img_height || $fixed['height'] ? '' : sprintf('height="%s"',$img_height)),
+		(isset($options['img_opts']) ? $options['img_opts'] : ''));
+
+	echo '</acronym>';
+
+	if ($draw_delete_buttons)
+		# <!-- JavaScript function deleteJpegPhoto() to be defined later by calling script -->
+		printf('<br/><a href="javascript:deleteAttribute(\'%s\');" style="color:red; font-size: 75%%">%s</a>',
+			$attr_name,_('Delete photo'));
+}
+
+/**
+ * Return the list of available password types
+ *
+ * @todo Dynamically work this list out so we only present hashes that we can encrypt
+ */
+function password_types() {
+	if (DEBUG_ENABLED && (($fargs=func_get_args())||$fargs='NOARGS'))
+		debug_log('Entered (%%)',1,0,__FILE__,__LINE__,__METHOD__,$fargs);
+
+	return array(
+		''=>'clear',
+		'blowfish'=>'blowfish',
+		'crypt'=>'crypt',
+		'ext_des'=>'ext_des',
+		'md5'=>'md5',
+		'k5key'=>'k5key',
+		'md5crypt'=>'md5crypt',
+		'sha'=>'sha',
+		'smd5'=>'smd5',
+		'ssha'=>'ssha'
+	);
+}
+
+/**
+ * Hashes a password and returns the hash based on the specified enc_type.
+ *
+ * @param string The password to hash in clear text.
+ * @param string Standard LDAP encryption type which must be one of
+ *        crypt, ext_des, md5crypt, blowfish, md5, sha, smd5, ssha, or clear.
+ * @return string The hashed password.
+ */
+function password_hash($password_clear,$enc_type) {
+	if (DEBUG_ENABLED && (($fargs=func_get_args())||$fargs='NOARGS'))
+		debug_log('Entered (%%)',1,0,__FILE__,__LINE__,__METHOD__,$fargs);
+
+	$enc_type = strtolower($enc_type);
+
+	switch($enc_type) {
+		case 'blowfish':
+			if (! defined('CRYPT_BLOWFISH') || CRYPT_BLOWFISH == 0)
+				error(_('Your system crypt library does not support blowfish encryption.'),'error','index.php');
+
+			# Hardcoded to second blowfish version and set number of rounds
+			$new_value = sprintf('{CRYPT}%s',crypt($password_clear,'$2a$12$'.random_salt(13)));
+
+			break;
+
+		case 'crypt':
+			if ($_SESSION[APPCONFIG]->getValue('password', 'no_random_crypt_salt'))
+				$new_value = sprintf('{CRYPT}%s',crypt($password_clear,substr($password_clear,0,2)));
+			else
+				$new_value = sprintf('{CRYPT}%s',crypt($password_clear,random_salt(2)));
+
+			break;
+
+		case 'ext_des':
+			# Extended des crypt. see OpenBSD crypt man page.
+			if (! defined('CRYPT_EXT_DES') || CRYPT_EXT_DES == 0)
+				error(_('Your system crypt library does not support extended DES encryption.'),'error','index.php');
+
+			$new_value = sprintf('{CRYPT}%s',crypt($password_clear,'_'.random_salt(8)));
+
+			break;
+
+		case 'k5key':
+			$new_value = sprintf('{K5KEY}%s',$password_clear);
+
+			system_message(array(
+				'title'=>_('Unable to Encrypt Password'),
+				'body'=>'phpLDAPadmin cannot encrypt K5KEY passwords',
+				'type'=>'warn'));
+
+			break;
+
+		case 'md5':
+			$new_value = sprintf('{MD5}%s',base64_encode(pack('H*',md5($password_clear))));
+			break;
+
+		case 'md5crypt':
+			if (! defined('CRYPT_MD5') || CRYPT_MD5 == 0)
+				error(_('Your system crypt library does not support md5crypt encryption.'),'error','index.php');
+
+			$new_value = sprintf('{CRYPT}%s',crypt($password_clear,'$1$'.random_salt(9)));
+
+			break;
+
+		case 'sha':
+			# Use php 4.3.0+ sha1 function, if it is available.
+			if (function_exists('sha1'))
+				$new_value = sprintf('{SHA}%s',base64_encode(pack('H*',sha1($password_clear))));
+			elseif (function_exists('mhash'))
+				$new_value = sprintf('{SHA}%s',base64_encode(mhash(MHASH_SHA1,$password_clear)));
+			else
+				error(_('Your PHP install does not have the mhash() function. Cannot do SHA hashes.'),'error','index.php');
+
+			break;
+
+		case 'ssha':
+			if (function_exists('mhash') && function_exists('mhash_keygen_s2k')) {
+				mt_srand((double)microtime()*1000000);
+				$salt = mhash_keygen_s2k(MHASH_SHA1,$password_clear,substr(pack('h*',md5(mt_rand())),0,8),4);
+				$new_value = sprintf('{SSHA}%s',base64_encode(mhash(MHASH_SHA1,$password_clear.$salt).$salt));
+
+			} else {
+				error(_('Your PHP install does not have the mhash() or mhash_keygen_s2k() function. Cannot do S2K hashes.'),'error','index.php');
+			}
+
+			break;
+
+		case 'smd5':
+			if (function_exists('mhash') && function_exists('mhash_keygen_s2k')) {
+				mt_srand((double)microtime()*1000000);
+				$salt = mhash_keygen_s2k(MHASH_MD5,$password_clear,substr(pack('h*',md5(mt_rand())),0,8),4);
+				$new_value = sprintf('{SMD5}%s',base64_encode(mhash(MHASH_MD5,$password_clear.$salt).$salt));
+
+			} else {
+				error(_('Your PHP install does not have the mhash() or mhash_keygen_s2k() function. Cannot do S2K hashes.'),'error','index.php');
+			}
+
+			break;
+
+		case 'clear':
+		default:
+			$new_value = $password_clear;
+	}
+
+	return $new_value;
+}
+
+/**
+ * Given a clear-text password and a hash, this function determines if the clear-text password
+ * is the password that was used to generate the hash. This is handy to verify a user's password
+ * when all that is given is the hash and a "guess".
+ * @param String The hash.
+ * @param String The password in clear text to test.
+ * @return Boolean True if the clear password matches the hash, and false otherwise.
+ */
+function password_check($cryptedpassword,$plainpassword,$attribute='userpassword') {
+	if (DEBUG_ENABLED && (($fargs=func_get_args())||$fargs='NOARGS'))
+		debug_log('Entered (%%)',1,0,__FILE__,__LINE__,__METHOD__,$fargs);
+
+	if (in_array($attribute,array('sambalmpassword','sambantpassword'))) {
+		$smb = new smbHash;
+
+		switch($attribute) {
+			case 'sambalmpassword':
+				if (strcmp($smb->lmhash($plainpassword),$cryptedpassword) == 0)
+					return true;
+				else
+					return false;
+
+			case 'sambantpassword':
+				if (strcmp($smb->nthash($plainpassword),$cryptedpassword) == 0)
+					return true;
+				else
+					return false;
+		}
+
+		return false;
+	}
+
+	if (preg_match('/{([^}]+)}(.*)/',$cryptedpassword,$matches)) {
+		$cryptedpassword = $matches[2];
+		$cypher = strtolower($matches[1]);
+
+	} else {
+		$cypher = null;
+	}
+
+	switch($cypher) {
+		# SSHA crypted passwords
+		case 'ssha':
+			# Check php mhash support before using it
+			if (function_exists('mhash')) {
+				$hash = base64_decode($cryptedpassword);
+
+				# OpenLDAP uses a 4 byte salt, SunDS uses an 8 byte salt - both from char 20.
+				$salt = substr($hash,20);
+				$new_hash = base64_encode(mhash(MHASH_SHA1,$plainpassword.$salt).$salt);
+
+				if (strcmp($cryptedpassword,$new_hash) == 0)
+					return true;
+				else
+					return false;
+
+			} else {
+				error(_('Your PHP install does not have the mhash() function. Cannot do SHA hashes.'),'error','index.php');
+			}
+
+			break;
+
+		# Salted MD5
+		case 'smd5':
+			# Check php mhash support before using it
+			if (function_exists('mhash')) {
+				$hash = base64_decode($cryptedpassword);
+				$salt = substr($hash,16);
+				$new_hash = base64_encode(mhash(MHASH_MD5,$plainpassword.$salt).$salt);
+
+				if (strcmp($cryptedpassword,$new_hash) == 0)
+					return true;
+				else
+					return false;
+
+			} else {
+				error(_('Your PHP install does not have the mhash() function. Cannot do SHA hashes.'),'error','index.php');
+			}
+
+			break;
+
+		# SHA crypted passwords
+		case 'sha':
+			if (strcasecmp(password_hash($plainpassword,'sha'),'{SHA}'.$cryptedpassword) == 0)
+				return true;
+			else
+				return false;
+
+			break;
+
+		# MD5 crypted passwords
+		case 'md5':
+			if( strcasecmp(password_hash($plainpassword,'md5'),'{MD5}'.$cryptedpassword) == 0)
+				return true;
+			else
+				return false;
+
+			break;
+
+		# Crypt passwords
+		case 'crypt':
+			# Check if it's blowfish crypt
+			if (preg_match('/^\\$2+/',$cryptedpassword)) {
+
+				# Make sure that web server supports blowfish crypt
+				if (! defined('CRYPT_BLOWFISH') || CRYPT_BLOWFISH == 0)
+					error(_('Your system crypt library does not support blowfish encryption.'),'error','index.php');
+
+				list($version,$rounds,$salt_hash) = explode('$',$cryptedpassword);
+
+				if (crypt($plainpassword,'$'.$version.'$'.$rounds.'$'.$salt_hash) == $cryptedpassword)
+					return true;
+				else
+					return false;
+			}
+
+			# Check if it's an crypted md5
+			elseif (strstr($cryptedpassword,'$1$')) {
+
+				# Make sure that web server supports md5 crypt
+				if (! defined('CRYPT_MD5') || CRYPT_MD5 == 0)
+					error(_('Your system crypt library does not support md5crypt encryption.'),'error','index.php');
+
+				list($dummy,$type,$salt,$hash) = explode('$',$cryptedpassword);
+
+				if (crypt($plainpassword,'$1$'.$salt) == $cryptedpassword)
+					return true;
+				else
+					return false;
+			}
+
+			# Check if it's extended des crypt
+			elseif (strstr($cryptedpassword,'_')) {
+
+				# Make sure that web server supports ext_des
+				if (! defined('CRYPT_EXT_DES') || CRYPT_EXT_DES == 0)
+					error(_('Your system crypt library does not support extended DES encryption.'),'error','index.php');
+
+				if (crypt($plainpassword,$cryptedpassword) == $cryptedpassword)
+					return true;
+				else
+					return false;
+			}
+
+			# Password is plain crypt
+			else {
+
+				if (crypt($plainpassword,$cryptedpassword) == $cryptedpassword)
+					return true;
+				else
+					return false;
+			}
+
+			break;
+
+		# No crypt is given assume plaintext passwords are used
+		default:
+			if ($plainpassword == $cryptedpassword)
+				return true;
+			else
+				return false;
+	}
+}
+
+/**
+ * Detects password encryption type
+ *
+ * Returns crypto string listed in braces. If it is 'crypt' password,
+ * returns crypto detected in password hash. Function should detect
+ * md5crypt, blowfish and extended DES crypt. If function fails to detect
+ * encryption type, it returns NULL.
+ * @param string Hashed password
+ * @return string
+ */
+function get_enc_type($user_password) {
+	if (DEBUG_ENABLED && (($fargs=func_get_args())||$fargs='NOARGS'))
+		debug_log('Entered (%%)',1,0,__FILE__,__LINE__,__METHOD__,$fargs);
+
+	# Capture the stuff in the { } to determine if this is crypt, md5, etc.
+	$enc_type = null;
+
+	if (preg_match('/{([^}]+)}/',$user_password,$enc_type))
+		$enc_type = strtolower($enc_type[1]);
+	else
+		return null;
+
+	# Handle crypt types
+	if (strcasecmp($enc_type,'crypt') == 0) {
+
+		# No need to check for standard crypt, because enc_type is already equal to 'crypt'.
+		if (preg_match('/{[^}]+}\\$1\\$+/',$user_password))
+			$enc_type = 'md5crypt';
+
+		elseif (preg_match('/{[^}]+}\\$2+/',$user_password))
+			$enc_type = 'blowfish';
+
+		elseif (preg_match('/{[^}]+}_+/',$user_password))
+			$enc_type = 'ext_des';
+	}
+
+	return $enc_type;
+}
+
+/**
+ * Draws an HTML browse button which, when clicked, pops up a DN chooser dialog.
+ * @param string The name of the form element to which this chooser
+ *         dialog will publish the user's choice. The form element must be a member
+ *         of a form with the "name" or "id" attribute set in the form tag, and the element
+ *         must also define "name" or "id" for JavaScript to uniquely identify it.
+ *         Example $form_element values may include "creation_form.container" or
+ *         "edit_form.member_uid". See /templates/modification/default.php for example usage.
+ * @param boolean (optional) If true, the function draws the localized text "choose" to the right of the button.
+ */
+function draw_chooser_link($form,$element,$include_choose_text=true,$rdn='none') {
+	if (DEBUG_ENABLED && (($fargs=func_get_args())||$fargs='NOARGS'))
+		debug_log('Entered (%%)',1,0,__FILE__,__LINE__,__METHOD__,$fargs);
+
+	$href = sprintf("javascript:dnChooserPopup('%s','%s','%s');",$form,$element,$rdn == 'none' ? '' : rawurlencode($rdn));
+	$title = _('Click to popup a dialog to select an entry (DN) graphically');
+
+	printf('<a href="%s" title="%s"><img class="chooser" src="%s/find.png" alt="Find" /></a>',$href,$title,IMGDIR);
+
+	if ($include_choose_text)
+		printf('<span class="x-small"><a href="%s" title="%s">%s</a></span>',$href,$title,_('browse'));
+}
+
+/**
+ * Explode a DN into an array of its RDN parts.
+ *
+ * NOTE: When a multivalue RDN is passed to ldap_explode_dn, the results returns with 'value + value';
+ *
+ * <code>
+ *  Array (
+ *    [0] => uid=ppratt
+ *    [1] => ou=People
+ *    [2] => dc=example
+ *    [3] => dc=com
+ *  )
+ * </code>
+ *
+ * @param string The DN to explode.
+ * @param int (optional) Whether to include attribute names (see http://php.net/ldap_explode_dn for details)
+ * @return array An array of RDN parts of this format:
+ */
+function pla_explode_dn($dn,$with_attributes=0) {
+	if (DEBUG_ENABLED && (($fargs=func_get_args())||$fargs='NOARGS'))
+		debug_log('Entered (%%)',1,0,__FILE__,__LINE__,__METHOD__,$fargs);
+
+	global $CACHE;
+
+	if (isset($CACHE['explode'][$dn][$with_attributes])) {
+		if (DEBUG_ENABLED)
+			debug_log('Return CACHED result (%s) for (%s)',1,0,__FILE__,__LINE__,__METHOD__,
+				$CACHE['explode'][$dn][$with_attributes],$dn);
+
+		return $CACHE['explode'][$dn][$with_attributes];
+	}
+
+	$dn = addcslashes($dn,'<>+";');
+
+	# split the dn
+	$result[0] = ldap_explode_dn(dn_escape($dn),0);
+	$result[1] = ldap_explode_dn(dn_escape($dn),1);
+	if (! $result[$with_attributes]) {
+		if (DEBUG_ENABLED)
+			debug_log('Returning NULL - NO result.',1,0,__FILE__,__LINE__,__METHOD__);
+
+		return array();
+	}
+
+	# Remove our count value that ldap_explode_dn returns us.
+	unset($result[0]['count']);
+	unset($result[1]['count']);
+
+	# Record the forward and reverse entries in the cache.
+	foreach ($result as $key => $value) {
+		# translate hex code into ascii for display
+		$result[$key] = dn_unescape($value);
+
+		$CACHE['explode'][implode(',',$result[0])][$key] = $result[$key];
+		$CACHE['explode'][implode(',',array_reverse($result[0]))][$key] = array_reverse($result[$key]);
+	}
+
+	if (DEBUG_ENABLED)
+		debug_log('Returning (%s)',1,0,__FILE__,__LINE__,__METHOD__,$result[$with_attributes]);
+
+	return $result[$with_attributes];
+}
+
+/**
+ * Parse a DN and escape any special characters
+ */
+function dn_escape($dn) {
+	if (DEBUG_ENABLED && (($fargs=func_get_args())||$fargs='NOARGS'))
+		debug_log('Entered (%%)',1,0,__FILE__,__LINE__,__METHOD__,$fargs);
+
+	$olddn = $dn;
+
+	# Check if the RDN has a comma and escape it.
+	while (preg_match('/([^\\\\]),(\s*[^=]*\s*),/',$dn))
+		$dn = preg_replace('/([^\\\\]),(\s*[^=]*\s*),/','$1\\\\2C$2,',$dn);
+
+	$dn = preg_replace('/([^\\\\]),(\s*[^=]*\s*)([^,])$/','$1\\\\2C$2$3',$dn);
+
+	if (DEBUG_ENABLED)
+		debug_log('Returning (%s)',1,0,__FILE__,__LINE__,__METHOD__,$dn);
+
+	return $dn;
+}
+
+/**
+ * Parse a DN and unescape any special characters
+ */
+function dn_unescape($dn) {
+	if (DEBUG_ENABLED && (($fargs=func_get_args())||$fargs='NOARGS'))
+		debug_log('Entered (%%)',1,0,__FILE__,__LINE__,__METHOD__,$fargs);
+
+	if (is_array($dn)) {
+		$a = array();
+
+		foreach ($dn as $key => $rdn)
+			$a[$key] = preg_replace('/\\\([0-9A-Fa-f]{2})/e',"''.chr(hexdec('\\1')).''",$rdn);
+
+		return $a;
+
+	} else {
+		return preg_replace('/\\\([0-9A-Fa-f]{2})/e',"''.chr(hexdec('\\1')).''",$dn);
+	}
+}
+
+/**
+ * Fetches the URL for the specified item. This is a convenience function for
+ * fetching project HREFs (like bugs)
+ *
+ * @param string One of "open_bugs", "add_bug", "donate", or "add_rfe"
+ *               (rfe = request for enhancement)
+ * @return string The URL to the requested item.
+ */
+function get_href($type,$extra_info='') {
+	$sf = 'https://sourceforge.net';
+	$pla = 'http://phpldapadmin.sourceforge.net';
+	$group_id = '61828';
+	$bug_atid = '498546';
+	$rfe_atid = '498549';
+	$forum_id = 'phpldapadmin-users';
+
+	switch($type) {
+		case 'add_bug':
+			return sprintf('%s/tracker/?func=add&amp;group_id=%s&amp;atid=%s',$sf,$group_id,$bug_atid);
+		case 'add_rfe':
+			return sprintf('%s/tracker/?func=add&amp;group_id=%s&amp;atid=%s',$sf,$group_id,$rfe_atid);
+		case 'credits':
+			return sprintf('%s/Credits',$pla);
+		case 'documentation':
+			return sprintf('%s/Documentation',$pla);
+		case 'donate':
+			return sprintf('%s/donate/index.php?group_id=%s',$sf,$group_id);
+		case 'forum':
+			return sprintf('%s/mailarchive/forum.php?forum_name=%s',$sf,$forum_id);
+		case 'logo':
+			if (! isset($_SERVER['HTTPS']) || strtolower($_SERVER['HTTPS']) != 'on')
+				$proto = 'http';
+			else
+				$proto = 'https';
+
+			return isset($_SESSION) && ! $_SESSION[APPCONFIG]->getValue('appearance','remoteurls') ? '' : sprintf('%s://sflogo.sourceforge.net/sflogo.php?group_id=%s&amp;type=10',$proto,$group_id);
+		case 'sf':
+			return sprintf('%s/projects/phpldapadmin',$sf);
+		case 'web':
+			return sprintf('%s',$pla);
+		default:
+			return null;
+	}
+}
+
+/**
+ * Returns the current time as a double (including micro-seconds).
+ *
+ * @return double The current time in seconds since the beginning of the UNIX epoch (Midnight Jan. 1, 1970)
+ */
+function utime() {
+	$time = explode(' ',microtime());
+	$usec = (double)$time[0];
+	$sec = (double)$time[1];
+	return $sec + $usec;
+}
+
+/**
+ * Converts an array to a query-string with the option to exclude certain variables
+ * from the returned query string. This is convenient if callers want to convert the
+ * current GET query string or POST array into a string and replace certain
+ * variables with their own.
+ *
+ * @param array The associate array to convert whose form is such that the keys are the
+ *              names of the variables and the values are said variables' values like this:
+ *              <code>
+ *               Array (
+ *                 [server_id] = 0,
+ *                 [dn] = "dc=example,dc=com",
+ *                 [attr] = "sn"
+ *               )
+ *              </code>
+ *              This will produce a string like this: "server_id=0&dn=dc=example,dc=com&attr=sn"
+ * @param array (optional) An array of variables to exclude in the resulting string
+ * @return string The string created from the array.
+ */
+function array_to_query_string($array,$exclude_vars=array()) {
+	if (DEBUG_ENABLED && (($fargs=func_get_args())||$fargs='NOARGS'))
+		debug_log('Entered (%%)',1,0,__FILE__,__LINE__,__METHOD__,$fargs);
+
+	if (! is_array($array) || ! count($array))
+		return '';
+
+	$str = '';
+	$i = 0;
+	foreach ($array as $name => $val)
+		if (! in_array($name,$exclude_vars))
+			if (is_array($val))
+				foreach ($val as $v) {
+					if ($i++ > 0)
+						$str .= '&';
+
+					$str .= sprintf('%s[]=%s',rawurlencode($name),rawurlencode($v));
+				}
+
+			else {
+				if ($i++ > 0)
+					$str .= '&';
+
+				$str .= sprintf('%s=%s',rawurlencode($name),rawurlencode($val));
+			}
+
+	return $str;
+}
+
+/**
+ * Reverses a DN such that the top-level RDN is first and the bottom-level RDN is last
+ * For example:
+ * <code>
+ *   cn=Brigham,ou=People,dc=example,dc=com
+ * </code>
+ * Becomes:
+ * <code>
+ *   dc=com,dc=example,ou=People,cn=Brigham
+ * </code>
+ * This makes it possible to sort lists of DNs such that they are grouped by container.
+ *
+ * @param string The DN to reverse
+ * @return string The reversed DN
+ *
+ * @see pla_compare_dns
+ * @see pla_explode_dns
+ */
+function pla_reverse_dn($dn) {
+	if (DEBUG_ENABLED && (($fargs=func_get_args())||$fargs='NOARGS'))
+		debug_log('Entered (%%)',1,0,__FILE__,__LINE__,__METHOD__,$fargs);
+
+	return (implode(',',array_reverse(pla_explode_dn($dn))));
+}
+
+/**
+ * Attribute sorting
+ */
+function sortAttrs($a,$b) {
+	if (DEBUG_ENABLED && (($fargs=func_get_args())||$fargs='NOARGS'))
+		debug_log('Entered (%%)',1,0,__FILE__,__LINE__,__METHOD__,$fargs);
+
+	if ($a == $b)
+		return 0;
+
+	$server = $_SESSION[APPCONFIG]->getServer(get_request('server_id','REQUEST'));
+	$attrs_display_order = arrayLower($_SESSION[APPCONFIG]->getValue('appearance','attr_display_order'));
+
+	# Check if $a is in $attrs_display_order, get its key
+	$a_key = array_search($a->getName(),$attrs_display_order);
+	$b_key = array_search($b->getName(),$attrs_display_order);
+
+	if ((! $a_key) && ($a_key !== 0))
+		if ((! $a_key = array_search(strtolower($a->getFriendlyName()),$attrs_display_order)) && ($a_key !== 0))
+			$a_key = count($attrs_display_order)+1;
+
+	if ((! $b_key) && ($b_key !== 0))
+		if ((! $b_key = array_search(strtolower($b->getFriendlyName()),$attrs_display_order)) && ($b_key !== 0))
+			$b_key = count($attrs_display_order)+1;
+
+	# Case where neither $a, nor $b are in $attrs_display_order, $a_key = $b_key = one greater than num elements.
+	# So we sort them alphabetically
+	if ($a_key === $b_key)
+		return strcasecmp($a->getFriendlyName(),$b->getFriendlyName());
+
+	# Case where at least one attribute or its friendly name is in $attrs_display_order
+	# return -1 if $a before $b in $attrs_display_order
+	return ($a_key < $b_key) ? -1 : 1;
+}
+
+/**
+ * Reads an array and returns the array values back in lower case
+ *
+ * @param array $array The array to convert the values to lowercase.
+ * @returns array Array with values converted to lowercase.
+ */
+function arrayLower($array) {
+	if (DEBUG_ENABLED && (($fargs=func_get_args())||$fargs='NOARGS'))
+		debug_log('Entered (%%)',1,0,__FILE__,__LINE__,__METHOD__,$fargs);
+
+	if (! is_array($array))
+		return $array;
+
+	$newarray = array();
+	foreach ($array as $key => $value)
+		$newarray[$key] = strtolower($value);
+
+	return $newarray;
+}
+
+/**
+ * Gets a DN string using the user-configured tree_display_format string to format it.
+ */
+function draw_formatted_dn($server,$entry) {
+	if (DEBUG_ENABLED && (($fargs=func_get_args())||$fargs='NOARGS'))
+		debug_log('Entered (%%)',1,0,__FILE__,__LINE__,__METHOD__,$fargs);
+
+	$dn = $entry->getDn();
+
+	$formats = $_SESSION[APPCONFIG]->getValue('appearance','tree_display_format');
+
+	foreach ($formats as $format) { 
+		$has_none = false;
+		preg_match_all('/%[a-zA-Z_0-9]+/',$format,$tokens);
+		$tokens = $tokens[0];
+
+		if (DEBUG_ENABLED)
+			debug_log('The tokens are (%s)',1,0,__FILE__,__LINE__,__METHOD__,$tokens);
+
+		foreach ($tokens as $token) {
+			if (strcasecmp($token,'%dn') == 0)
+				$format = str_replace($token,pretty_print_dn($dn),$format);
+
+			elseif (strcasecmp($token,'%rdn') == 0)
+				$format = str_replace($token,pretty_print_dn($entry->getRDN()),$format);
+
+			elseif (strcasecmp($token,'%rdnvalue') == 0) {
+				$rdn = get_rdn($dn,0,true);
+				$rdn_value = explode('=',$rdn,2);
+				$rdn_value = $rdn_value[1];
+				$format = str_replace($token,$rdn_value,$format);
+
+			} else {
+				$attr_name = str_replace('%','',$token);
+				$attr_values = $server->getDNAttrValue($dn,$attr_name);
+
+				if (is_null($attr_values) || (count($attr_values) <= 0)) {
+					$display = '&lt;'._('none').'&gt;';
+					$has_none = true;
+
+				} elseif (is_array($attr_values))
+					$display = implode(', ',$attr_values);
+
+				else
+					$display = $attr_values;
+
+				$format = str_replace($token,$display,$format);
+			}
+		}
+
+		# If this format has all values available, use it. Otherwise, try the next one
+		if (!$has_none)
+			return $format;
+	}
+
+	return $format;
+}
+
+/**
+ * Server html select list
+ */
+function server_select_list($selected=null,$logged_on=false,$name='index',$isVisible=true,$js=null) {
+	if (DEBUG_ENABLED && (($fargs=func_get_args())||$fargs='NOARGS'))
+		debug_log('Entered (%%)',1,0,__FILE__,__LINE__,__METHOD__,$fargs);
+
+	$count = 0;
+	$server_menu_html = sprintf('<select name="%s" id="%s" %s>',$name,$name,$js);
+
+	foreach ($_SESSION[APPCONFIG]->getServerList($isVisible) as $index => $server) {
+		if ($server->isVisible()) {
+
+			if ($logged_on && ! $server->isLoggedIn())
+				continue;
+
+			$count++;
+			$server_menu_html .= sprintf('<option value="%s" %s>%s</option>',
+				$server->getIndex(),($server->getIndex() == $selected ? 'selected="selected"' : ''),$server->getName());
+
+			# We will set this variable, in case there is only 1 hit.
+			$selected_server = $server;
+		}
+	}
+
+	$server_menu_html .= '</select>';
+
+	if ($count > 1)
+		return $server_menu_html;
+
+	elseif ($count)
+		return sprintf('%s <input type="hidden" name="%s" value="%s" />',
+			$selected_server->getName(),$name,$selected_server->getIndex());
+
+	else
+		return '';
+}
+
+/**
+ * Converts a little-endian hex-number to one, that 'hexdec' can convert
+ */
+function littleEndian($hex) {
+	if (DEBUG_ENABLED && (($fargs=func_get_args())||$fargs='NOARGS'))
+		debug_log('Entered (%%)',1,0,__FILE__,__LINE__,__METHOD__,$fargs);
+
+	$result = '';
+
+	for ($x=strlen($hex)-2;$x>= 0;$x=$x-2)
+		$result .= substr($hex,$x,2);
+
+	return $result;
+}
+
+function binSIDtoText($binsid) {
+	if (DEBUG_ENABLED && (($fargs=func_get_args())||$fargs='NOARGS'))
+		debug_log('Entered (%%)',1,0,__FILE__,__LINE__,__METHOD__,$fargs);
+
+	$hex_sid = bin2hex($binsid);
+	$rev = hexdec(substr($hex_sid,0,2)); // Get revision-part of SID
+	$subcount = hexdec(substr($hex_sid,2,2)); // Get count of sub-auth entries
+	$auth = hexdec(substr($hex_sid,4,12)); // SECURITY_NT_AUTHORITY
+
+	$result = "$rev-$auth";
+
+	for ($x=0;$x<$subcount;$x++) {
+		$subauth[$x] = hexdec(littleEndian(substr($hex_sid,16+($x*8),8))); // get all SECURITY_NT_AUTHORITY
+		$result .= sprintf('-%s',$subauth[$x]);
+	}
+
+	return $result;
+}
+
+/**
+ * Query LDAP and return a hash.
+ *
+ * @param string The base DN to use.
+ * @param string LDAP Query filter.
+ * @param string LDAP attribute to use as key.
+ * @param array Attributes to use as values.
+ * @param boolean Specify false to not sort results by DN
+ *                or true to have the returned array sorted by DN (uses ksort)
+ *                or an array of attribute names to sort by attribute values
+ * @return array Array of values keyed by $key.
+ */
+function return_ldap_hash($base,$filter,$key,$attrs,$sort=true) {
+	if (DEBUG_ENABLED && (($fargs=func_get_args())||$fargs='NOARGS'))
+		debug_log('Entered (%%)',1,0,__FILE__,__LINE__,__METHOD__,$fargs);
+
+	$server = $_SESSION[APPCONFIG]->getServer(get_request('server_id','REQUEST'));
+	$key = strtolower($key);
+
+	$query = array();
+	$query['base'] = $base;
+	$query['filter'] = $filter;
+	$query['attrs'] = $attrs;
+	$search = $server->query($query,null);
+
+	$results = array();
+
+	foreach ($search as $dn => $values)
+		if (isset($values[$key]))
+			if (is_array($values[$key]))
+				foreach ($values[$key] as $i => $k)
+					foreach ($attrs as $attr) {
+						$lattr = strtolower($attr);
+						if (isset($values[$lattr])) {
+							$v = '';
+
+							if (is_array($values[$lattr]) && isset($values[$lattr][$i]))
+								$v = $values[$lattr][$i];
+
+							if (is_string($v) && (strlen($v) > 0))
+								$results[$k][$attr] = $v;
+						}
+					}
+
+			else
+				foreach ($attrs as $attr) {
+					$lattr = strtolower($attr);
+					if (isset($values[$lattr]))
+						$results[$values[$key]][$attr] = $values[$lattr];
+				}
+
+	if ($sort)
+		masort($results,is_array($sort) ? implode(',',$sort) : 'dn');
+
+	return $results;
+}
+
+/**
+ * This function returns a string automatically generated
+ * based on the criteria defined in the array $criteria in config.php
+ */
+function password_generate() {
+	if (DEBUG_ENABLED && (($fargs=func_get_args())||$fargs='NOARGS'))
+		debug_log('Entered (%%)',1,0,__FILE__,__LINE__,__METHOD__,$fargs);
+
+	$no_use_similiar = ! $_SESSION[APPCONFIG]->getValue('password','use_similar');
+	$lowercase = $_SESSION[APPCONFIG]->getValue('password','lowercase');
+	$uppercase = $_SESSION[APPCONFIG]->getValue('password','uppercase');
+	$digits = $_SESSION[APPCONFIG]->getValue('password','numbers');
+	$punctuation = $_SESSION[APPCONFIG]->getValue('password','punctuation');
+	$length = $_SESSION[APPCONFIG]->getValue('password','length');
+
+	$outarray = array();
+
+	if ($no_use_similiar) {
+		$raw_lower = 'a b c d e f g h k m n p q r s t u v w x y z';
+		$raw_numbers = '2 3 4 5 6 7 8 9';
+		$raw_punc = '# $ % ^ & * ( ) _ - + = . , [ ] { } :';
+
+	} else {
+		$raw_lower = 'a b c d e f g h i j k l m n o p q r s t u v w x y z';
+		$raw_numbers = '1 2 3 4 5 6 7 8 9 0';
+		$raw_punc = '# $ % ^ & * ( ) _ - + = . , [ ] { } : |';
+	}
+
+	$llower = explode(' ',$raw_lower);
+	shuffle($llower);
+	$lupper = explode(' ',strtoupper($raw_lower));
+	shuffle($lupper);
+	$numbers = explode(' ',$raw_numbers);
+	shuffle($numbers);
+	$punc = explode(' ',$raw_punc);
+	shuffle($punc);
+
+	if ($lowercase > 0)
+		$outarray = array_merge($outarray,a_array_rand($llower,$lowercase));
+
+	if ($uppercase > 0)
+		$outarray = array_merge($outarray,a_array_rand($lupper,$uppercase));
+
+	if ($digits > 0)
+		$outarray = array_merge($outarray,a_array_rand($numbers,$digits));
+
+	if ($punctuation > 0)
+		$outarray = array_merge($outarray,a_array_rand($punc,$punctuation));
+
+	$num_spec = $lowercase + $uppercase + $digits + $punctuation;
+
+	if ($num_spec < $length) {
+		$leftover = array();
+		if ($lowercase > 0)
+			$leftover = array_merge($leftover,$llower);
+		if ($uppercase > 0)
+			$leftover = array_merge($leftover,$lupper);
+		if ($digits > 0)
+			$leftover = array_merge($leftover,$numbers);
+		if ($punctuation > 0)
+			$leftover = array_merge($leftover,$punc);
+
+		if (count($leftover) == 0)
+			$leftover = array_merge($leftover,$llower,$lupper,$numbers,$punc);
+
+		shuffle($leftover);
+		$outarray = array_merge($outarray,a_array_rand($leftover,$length-$num_spec));
+	}
+
+	shuffle($outarray);
+	$return = implode('',$outarray);
+
+	if (DEBUG_ENABLED)
+		debug_log('Returning (%s)',1,0,__FILE__,__LINE__,__METHOD__,$return);
+
+	return $return;
+}
+
+/**
+ * This function returns an array of $num_req values
+ * randomly picked from the $input array
+ *
+ * @param array Array of values
+ * @param integer Number of values in returned array
+ * @return string The padded string
+ */
+function a_array_rand($input,$num_req) {
+	if (DEBUG_ENABLED && (($fargs=func_get_args())||$fargs='NOARGS'))
+		debug_log('Entered (%%)',1,0,__FILE__,__LINE__,__METHOD__,$fargs);
+
+	if (count($input) == 0)
+		return array();
+
+	if ($num_req < 1)
+		return array();
+
+	$return = array();
+	if ($num_req > count($input)) {
+		for($i = 0; $i < $num_req; $i++) {
+			$idx = array_rand($input,1);
+			$return[] = $input[$idx];
+		}
+
+	} else {
+		$idxlist = array_rand($input,$num_req);
+		if ($num_req == 1)
+			$idxlist = array($idxlist);
+
+		for($i = 0; $i < count($idxlist); $i++)
+			$return[] = $input[$idxlist[$i]];
+	}
+
+	if (DEBUG_ENABLED)
+		debug_log('Returning (%s)',1,0,__FILE__,__LINE__,__METHOD__,$return);
+
+	return $return;
+}
+
+/**
+ * This is for Opera. By putting "random junk" in the query string, it thinks
+ * that it does not have a cached version of the page, and will thus
+ * fetch the page rather than display the cached version
+ */
+function random_junk() {
+	$time = gettimeofday();
+	return md5(strtotime('now').$time['usec']);
+}
+
+/**
+ * Returns a HTML id that can be used in the URL after the #.
+ *
+ * @param string The DN to pretty-print.
+ * @return string
+ */
+function htmlid($sid,$dn) {
+	return sprintf('SID%s:%s',$sid,preg_replace('/[\ =,]/','_',$dn));
+}
+
+/**
+ * Is PLA configured for AJAX display
+ */
+function isAjaxEnabled() {
+	if (DEBUG_ENABLED && (($fargs=func_get_args())||$fargs='NOARGS'))
+		debug_log('Entered (%%)',1,0,__FILE__,__LINE__,__METHOD__,$fargs);
+
+	if (isset($_SESSION[APPCONFIG]))
+		return ($_SESSION[APPCONFIG]->getValue('appearance','tree') == 'AJAXTree');
+	else
+		return false;
+}
+?>
diff --git a/lam/templates/3rdParty/pla/lib/hooks.php b/lam/templates/3rdParty/pla/lib/hooks.php
new file mode 100644
index 00000000..57066ed1
--- /dev/null
+++ b/lam/templates/3rdParty/pla/lib/hooks.php
@@ -0,0 +1,201 @@
+<?php
+/**
+ * Functions related to hooks management.
+ *
+ * This program is free software; you can redistribute it and/or
+ * modify it under the terms of the GNU General Public License as
+ * published by the Free Software Foundation; either version 2 of the
+ * License, or (at your option) any later version.
+ *
+ * This program is distributed in the hope that it will be useful, but
+ * WITHOUT ANY WARRANTY; without even the implied warranty of
+ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU
+ * General Public License for more details.
+ *
+ * You should have received a copy of the GNU General Public License
+ * along with this program; if not, write to the Free Software
+ * Foundation, Inc., 59 Temple Place, Suite 330, Boston, MA 02111-1307
+ * USA
+ *
+ * @author Benjamin Drieu <benjamin.drieu@fr.alcove.com> and AlcĂ?ve
+ * @package phpLDAPadmin
+ */
+
+/**
+ * Compares two arrays by numerically comparing their 'prority'
+ * value. Standard `cmp-like' function.
+ *
+ * @param a First element to compare.
+ * @param b Second element to compare.
+ *
+ * @return -1 if priority of first element is smaller than second
+ * element priority. 1 otherwise.
+ */
+function sort_array_by_priority($a,$b) {
+	if (DEBUG_ENABLED && (($fargs=func_get_args())||$fargs='NOARGS'))
+		debug_log('Entered (%%)',257,0,__FILE__,__LINE__,__METHOD__,$fargs);
+
+	return (($a['priority'] < $b['priority']) ? -1 : 1 );
+}
+
+/**
+ * Runs procedures attached to a hook.
+ *
+ * @param hook_name Name of hook to run.
+ * @param args Array of optional arguments set by phpldapadmin. It is normally in a form known by call_user_func_array() :
+ *
+ * <pre>[ 'server_id' => 0,
+ * 'dn' => 'uid=epoussa,ou=tech,o=corp,o=fr' ]</pre>
+ *
+ * @return true if all procedures returned true, false otherwise.
+ */
+function run_hook($hook_name,$args) {
+	if (DEBUG_ENABLED && (($fargs=func_get_args())||$fargs='NOARGS'))
+		debug_log('Entered (%%)',257,0,__FILE__,__LINE__,__METHOD__,$fargs);
+
+	$hooks = isset($_SESSION[APPCONFIG]) ? $_SESSION[APPCONFIG]->hooks : array();
+
+	if (! count($hooks) || ! array_key_exists($hook_name,$hooks)) {
+		if (DEBUG_ENABLED)
+			debug_log('Returning, HOOK not defined (%s)',257,0,__FILE__,__LINE__,__METHOD__,$hook_name);
+
+		return true;
+	}
+
+	$rollbacks = array();
+	reset($hooks[$hook_name]);
+
+	/* Execution of procedures attached is done using a numeric order
+	 * since all procedures have been attached to the hook with a
+	 * numerical weight. */
+	while (list($key,$hook) = each($hooks[$hook_name])) {
+		if (DEBUG_ENABLED)
+			debug_log('Calling HOOK Function (%s)(%s)',257,0,__FILE__,__LINE__,__METHOD__,
+				$hook['hook_function'],$args);
+
+		array_push($rollbacks,$hook['rollback_function']);
+
+		$result = call_user_func_array($hook['hook_function'],$args);
+		if (DEBUG_ENABLED)
+			debug_log('Called HOOK Function (%s)',257,0,__FILE__,__LINE__,__METHOD__,
+				$hook['hook_function']);
+
+		/* If a procedure fails (identified by a false return), its optional rollback is executed with
+		 * the same arguments. After that, all rollbacks from
+		 * previously executed procedures are executed in the reverse
+		 * order. */
+		if (! is_null($result) && $result == false) {
+			if (DEBUG_ENABLED)
+				debug_log('HOOK Function [%s] return (%s)',257,0,__FILE__,__LINE__,__METHOD__,
+					$hook['hook_function'],$result);
+
+			while ($rollbacks) {
+				$rollback = array_pop($rollbacks);
+
+				if ($rollback != false) {
+					if (DEBUG_ENABLED)
+						debug_log('HOOK Function Rollback (%s)',257,0,__FILE__,__LINE__,__METHOD__,
+							$rollback);
+
+					call_user_func_array($rollback,$args);
+				}
+			}
+
+			return false;
+		}
+	}
+
+	return true;
+}
+
+/**
+ * Adds a procedure to a hook for later execution.
+ *
+ * @param hook_name Name of the hook.
+ * @param hook_function	Name of the php function called upon hook trigger.
+ * @param priority Numeric priority. Lowest means procedure will be executed before.
+ * @param rollback_function	Name of the php rollback function called upon failure.
+ */
+function add_hook($hook_name,$hook_function,$priority=0,$rollback_function=null) {
+	if (defined('DEBUG_ENABLED') && DEBUG_ENABLED && (($fargs=func_get_args())||$fargs='NOARGS'))
+		debug_log('Entered (%%)',257,0,__FILE__,__LINE__,__METHOD__,$fargs);
+
+	# First, see if the hook function exists.
+	if (! function_exists($hook_function)) {
+		system_message(array(
+			'title'=>_('Hook function does not exist'),
+			'body'=>sprintf('Hook name: %s<br/>Hook function: %s',$hook_name,$hook_function),
+			'type'=>'warn'));
+
+		return;
+	}
+
+	if (! array_key_exists($hook_name,$_SESSION[APPCONFIG]->hooks))
+		$_SESSION[APPCONFIG]->hooks[$hook_name] = array();
+
+	remove_hook($hook_name,$hook_function,-1,null);
+
+	array_push($_SESSION[APPCONFIG]->hooks[$hook_name],array(
+		'priority' => $priority,
+		'hook_function' => $hook_function,
+		'rollback_function' => $rollback_function));
+
+	uasort($_SESSION[APPCONFIG]->hooks[$hook_name],'sort_array_by_priority');
+}
+
+/**
+ * Removes a procedure from a hook, based on a filter.
+ *
+ * @param hook_name	Name of the hook.
+ * @param priority Numeric priority. If set, all procedures of that priority will be removed.
+ * @param hook_function Name of the procedure function. If set, all procedures that call this function will be removed.
+ * @param rollback_function	Name of the php rollback function called upon failure. If set, all
+ *			procedures that call this function as a rollback will be removed.
+ */
+function remove_hook($hook_name,$hook_function,$priority,$rollback_function) {
+	if (defined('DEBUG_ENABLED') && DEBUG_ENABLED && (($fargs=func_get_args())||$fargs='NOARGS'))
+		debug_log('Entered (%%)',257,0,__FILE__,__LINE__,__METHOD__,$fargs);
+
+	if (array_key_exists($hook_name,$_SESSION[APPCONFIG]->hooks)) {
+		reset($_SESSION[APPCONFIG]->hooks[$hook_name]);
+
+		while (list($key,$hook) = each($_SESSION[APPCONFIG]->hooks[$hook_name])) {
+			if (($priority >= 0 && $priority == $hook['priority']) ||
+				($hook_function && $hook_function == $hook['hook_function']) ||
+				($rollback_function && $rollback_function == $hook['rollback_function'])) {
+
+				unset($_SESSION[APPCONFIG]->hooks[$hook_name][$key]);
+			}
+		}
+	}
+}
+
+/**
+ * Removes all procedures from a hook.
+ *
+ * @param hook_name	Name of hook to clear.
+ */
+function clear_hooks($hook_name) {
+	if (DEBUG_ENABLED && (($fargs=func_get_args())||$fargs='NOARGS'))
+		debug_log('Entered (%%)',257,0,__FILE__,__LINE__,__METHOD__,$fargs);
+
+	if (array_key_exists($hook_name,$_SESSION[APPCONFIG]->hooks))
+		unset($_SESSION[APPCONFIG]->hooks[$hook_name]);
+}
+
+$hooks = array();
+
+# Evaluating user-made hooks
+if (is_dir(HOOKSDIR.'functions')) {
+	$hooks['dir'] = dir(HOOKSDIR.'functions');
+
+	while ($hooks['file'] = $hooks['dir']->read()) {
+		$script = sprintf('%s/%s/%s',HOOKSDIR,'functions',$hooks['file']);
+
+		if (is_file($script) && preg_match('/php[0-9]?$/',$hooks['file']))
+			require_once $script;
+	}
+
+	$hooks['dir']->close();
+}
+?>
diff --git a/lam/templates/3rdParty/pla/lib/import_functions.php b/lam/templates/3rdParty/pla/lib/import_functions.php
new file mode 100644
index 00000000..8ef40bed
--- /dev/null
+++ b/lam/templates/3rdParty/pla/lib/import_functions.php
@@ -0,0 +1,609 @@
+<?php
+/**
+ * Classes and functions for importing data to LDAP
+ *
+ * These classes provide differnet import formats.
+ *
+ * @author The phpLDAPadmin development team
+ * @package phpLDAPadmin
+ * @see import.php and import_form.php
+ */
+
+/**
+ * Importer Class
+ *
+ * This class serves as a top level importer class, which will return
+ * the correct Import class.
+ *
+ * @package phpLDAPadmin
+ * @subpackage Import
+ */
+class Importer {
+	# Server ID that the export is linked to
+	private $server_id;
+	# Import Type
+	private $template_id;
+	private $template;
+
+	public function __construct($server_id,$template_id) {
+		$this->server_id = $server_id;
+		$this->template_id = $template_id;
+
+		$this->accept();
+	}
+
+	static function types() {
+		$type = array();
+
+		$details = ImportLDIF::getType();
+		$type[$details['type']] = $details;
+
+		return $type;
+	}
+
+	private function accept() {
+		switch($this->template_id) {
+			case 'LDIF':
+				$this->template = new ImportLDIF($this->server_id);
+				break;
+
+			default:
+				system_message(array(
+					'title'=>sprintf('%s %s',_('Unknown Import Type'),$this->template_id),
+					'body'=>_('phpLDAPadmin has not been configured for that import type'),
+					'type'=>'warn'),'index.php');
+
+				die();
+		}
+
+		$this->template->accept();
+	}
+
+	public function getTemplate() {
+		return $this->template;
+	}
+}
+
+/**
+ * Import Class
+ *
+ * This abstract classes provides all the common methods and variables for the
+ * custom import classes.
+ *
+ * @package phpLDAPadmin
+ * @subpackage Import
+ */
+abstract class Import {
+	protected $server_id = null;
+	protected $input = null;
+	protected $source = array();
+
+	public function __construct($server_id) {
+		$this->server_id = $server_id;
+	}
+
+	public function accept() {
+		if (get_request('ldif','REQUEST')) {
+			$this->input = explode("\n",get_request('ldif','REQUEST'));
+			$this->source['name'] = 'STDIN';
+			$this->source['size'] = strlen(get_request('ldif','REQUEST'));
+
+		} elseif (isset($_FILES['ldif_file']) && is_array($_FILES['ldif_file']) && ! $_FILES['ldif_file']['error']) {
+			$input = file_get_contents($_FILES['ldif_file']['tmp_name']);
+			$this->input = preg_split("/\n|\r\n|\r/",$input);
+			$this->source['name'] = $_FILES['ldif_file']['name'];
+			$this->source['size'] = $_FILES['ldif_file']['size'];
+
+		} else {
+			system_message(array(
+				'title'=>_('No import input'),
+				'body'=>_('You must either upload a file or provide an import in the text box.'),
+				'type'=>'error'),sprintf('cmd.php?cmd=import_form&server_id=%s',get_request('server_id','REQUEST')));
+
+			die();
+		}
+	}
+
+	public function getSource($attr) {
+		if (isset($this->source[$attr]))
+			return $this->source[$attr];
+		else
+			return null;
+	}
+
+	# @todo integrate hooks
+	public function LDAPimport() {
+		$template = $this->getTemplate();
+		$server = $this->getServer();
+
+		switch ($template->getType()) {
+			case 'add': 
+				return $server->add($template->getDN(),$template->getLDAPadd());
+
+			case 'modify':
+				return $server->modify($template->getDN(),$template->getLDAPmodify());
+
+			case 'moddn':
+			case 'modrdn':
+				return $server->rename($template->getDN(),$template->modrdn['newrdn'],$template->modrdn['newsuperior'],$template->modrdn['deleteoldrdn']);
+
+			default:
+				debug_dump_backtrace(sprintf('Unknown template type %s',$template->getType()),1);
+		}
+
+		return true;
+	}
+}
+
+/**
+ * Import entries from LDIF
+ *
+ * The LDIF spec is described by RFC2849
+ * http://www.ietf.org/rfc/rfc2849.txt
+ *
+ * @package phpLDAPadmin
+ * @subpackage Import
+ */
+class ImportLDIF extends Import {
+	private $_currentLineNumber = 0;
+	private $_currentLine = '';
+	private $template;
+	public $error = array();
+
+	static public function getType() {
+		return array('type'=>'LDIF','description' => _('LDIF Import'),'extension'=>'ldif');
+	}
+
+	protected function getTemplate() {
+		return $this->template;
+	}
+
+	protected function getServer() {
+		return $_SESSION[APPCONFIG]->getServer($this->server_id);
+	}
+
+	public function readEntry() {
+		static $haveVersion = false;
+
+		if ($lines = $this->nextLines()) {
+
+			# If we have a version line.
+			if (! $haveVersion && preg_match('/^version:/',$lines[0])) {
+				list($text,$version) = $this->getAttrValue(array_shift($lines));
+
+				if ($version != 1)
+					return $this->error(sprintf('%s %s',_('LDIF import only suppports version 1'),$version),$lines);
+
+				$haveVersion = true;
+				$lines = $this->nextLines();
+			}
+
+			$server = $this->getServer();
+
+			# The first line should be the DN
+			if (preg_match('/^dn:/',$lines[0])) {
+				list($text,$dn) = $this->getAttrValue(array_shift($lines));
+
+				# The second line should be our changetype
+				if (preg_match('/^changetype:[ ]*(delete|add|modrdn|moddn|modify)/i',$lines[0])) {
+					$attrvalue = $this->getAttrValue($lines[0]);
+					$changetype = $attrvalue[1];
+					array_shift($lines);
+
+				} else
+					$changetype = 'add';
+
+				$this->template = new Template($this->server_id,null,null,$changetype);
+
+				switch ($changetype) {
+					case 'add':
+						$rdn = get_rdn($dn);
+						$container = $server->getContainer($dn);
+
+						$this->template->setContainer($container);
+						$this->template->accept();
+
+						$this->getAddDetails($lines);
+						$this->template->setRDNAttributes($rdn);
+
+						return $this->template;
+
+						break;
+
+					case 'modify':
+						if (! $server->dnExists($dn))
+							return $this->error(sprintf('%s %s',_('DN does not exist'),$dn),$lines);
+
+						$this->template->setDN($dn);
+						$this->template->accept();
+
+						return $this->getModifyDetails($lines);
+
+						break;
+
+					case 'moddn':
+					case 'modrdn':
+						if (! $server->dnExists($dn))
+							return $this->error(sprintf('%s %s',_('DN does not exist'),$dn),$lines);
+
+						$this->template->setDN($dn);
+						$this->template->accept();
+
+						return $this->getModRDNAttributes($lines);
+
+						break;
+
+					default:
+						if (! $server->dnExists($dn))
+							return $this->error(_('Unkown change type'),$lines);
+				}
+
+			} else
+				return $this->error(_('A valid dn line is required'),$lines);
+
+		} else
+			return false;
+	}
+
+	/**
+	 * Get the Attribute and Decoded Value
+	 */
+	private function getAttrValue($line) {
+		list($attr,$value) = explode(':',$line,2);
+
+		# Get the DN
+		if (substr($value,0,1) == ':')
+			$value = base64_decode(trim(substr($value,1)));
+		else
+			$value = trim($value);
+
+		return array($attr,$value);
+	}
+
+	/**
+	 * Get the lines of the next entry
+	 *
+	 * @return The lines (unfolded) of the next entry
+	 */
+	private function nextLines() {
+		$current = array();
+		$endEntryFound = false;
+
+		if ($this->hasMoreEntries() && ! $this->eof()) {
+			# The first line is the DN one
+			$current[0]= trim($this->_currentLine);
+
+			# While we end on a blank line, fetch the attribute lines
+			$count = 0;
+			while (! $this->eof() && ! $endEntryFound) {
+				# Fetch the next line
+				$this->nextLine();
+
+				/* If the next line begin with a space, we append it to the current row
+				 * else we push it into the array (unwrap)*/
+				if ($this->isWrappedLine())
+					$current[$count] .= trim($this->_currentLine);
+				elseif ($this->isCommentLine()) {}
+				# Do nothing
+				elseif (! $this->isBlankLine())
+					$current[++$count] = trim($this->_currentLine);
+				else
+					$endEntryFound = true;
+			}
+
+			# Return the LDIF entry array
+			return $current;
+
+		} else
+			return array();
+	}
+
+	/**
+	 * Private method to check if there is more entries in the input.
+	 *
+	 * @return boolean true if an entry was found, false otherwise.
+	 */
+	private function hasMoreEntries() {
+		$entry_found = false;
+
+		while (! $this->eof() && ! $entry_found) {
+			# If it's a comment or blank line, switch to the next line
+			if ($this->isCommentLine() || $this->isBlankLine()) {
+				# Do nothing
+				$this->nextLine();
+
+			} else {
+				$this->_currentDnLine = $this->_currentLine;
+				$this->dnLineNumber = $this->_currentLineNumber;
+				$entry_found = true;
+			}
+		}
+
+		return $entry_found;
+	}
+
+	/**
+	 * Helper method to switch to the next line
+	 */
+	private function nextLine() {
+		$this->_currentLineNumber++;
+		$this->_currentLine = array_shift($this->input);
+	}
+
+	/**
+	 * Check if it's a comment line.
+	 *
+	 * @return boolean true if it's a comment line,false otherwise
+	 */
+	private function isCommentLine() {
+		return substr(trim($this->_currentLine),0,1) == '#' ? true : false;
+	}
+
+	/**
+	 * Check if it's a wrapped line.
+	 *
+	 * @return boolean true if it's a wrapped line,false otherwise
+	 */
+	private function isWrappedLine() {
+		return substr($this->_currentLine,0,1) == ' ' ? true : false;
+	}
+
+	/**
+	 * Check if is the current line is a blank line.
+	 *
+	 * @return boolean if it is a blank line,false otherwise.
+	 */
+	private function isBlankLine() {
+		return(trim($this->_currentLine) == '') ? true : false;
+	}
+
+	/**
+	 * Returns true if we reached the end of the input.
+	 *
+	 * @return boolean true if it's the end of file, false otherwise.
+	 */
+	public function eof() {
+		return count($this->input) > 0 ? false : true;
+	}
+
+	private function error($msg,$data) {
+		$this->error['message'] = sprintf('%s [%s]',$msg,$this->template ? $this->template->getDN() : '');
+		$this->error['line'] = $this->_currentLineNumber;
+		$this->error['data'] = $data;
+		$this->error['changetype'] = $this->template ? $this->template->getType() : 'Not set';
+
+		return false;
+	}
+
+	/**
+	 * Method to retrieve the attribute value of a ldif line,
+	 * and get the base 64 decoded value if it is encoded
+	 */
+	private function getAttributeValue($value) {
+		$return = '';
+
+		if (substr($value,0,1) == '<') {
+			$url = trim(substr($value,1));
+
+			if (preg_match('^file://',$url)) {
+				$filename = substr(trim($url),7);
+
+				if ($fh = @fopen($filename,'rb')) {
+					if (! $return = @fread($fh,filesize($filename)))
+						return $this->error(_('Unable to read file for'),$value);
+
+					@fclose($fh);
+
+				} else
+					return $this->error(_('Unable to open file for'),$value);
+
+			} else
+				return $this->error(_('The url attribute value should begin with file:// for'),$value);
+
+		# It's a string
+		} else
+			$return = $value;
+
+		return trim($return);
+	}
+
+	/**
+	 * Build the attributes array when the change type is add.
+	 */
+	private function getAddDetails($lines) {
+		foreach ($lines as $line) {
+			list($attr,$value) = $this->getAttrValue($line);
+
+			if (is_null($attribute = $this->template->getAttribute($attr))) {
+				$attribute = $this->template->addAttribute($attr,array('values'=>array($value)));
+				$attribute->justModified();
+
+			} else
+				if ($attribute->hasBeenModified())
+					$attribute->addValue($value);
+				else
+					$attribute->setValue(array($value));
+		}
+	}
+
+	/**
+	 * Build the attributes array for the entry when the change type is modify
+	 */
+	private function getModifyDetails($lines) {
+		if (! count($lines))
+			return $this->error(_('Missing attributes for'),$lines);
+
+		# While the array is not empty
+		while (count($lines)) {
+			$processline = false;
+			$deleteattr = false;
+
+			# Get the current line with the action
+			$currentLine = array_shift($lines);
+			$attrvalue = $this->getAttrValue($currentLine);
+			$action_attribute = $attrvalue[0];
+			$action_attribute_value = $attrvalue[1];
+
+			if (! in_array($action_attribute,array('add','delete','replace')))
+				return $this->error(_('Missing modify command add, delete or replace'),array_merge(array($currentLine),$lines));
+
+			$processline = true;
+			switch ($action_attribute) {
+				case 'add':
+
+					break;
+
+				case 'delete':
+					$attribute = $this->template->getAttribute($action_attribute_value);
+
+					if (is_null($attribute))
+						return $this->error(sprintf('%s %s',_('Attempting to delete a non existant attribute'),$action_attribute_value),
+							array_merge(array($currentLine),$lines));
+
+					$deleteattr = true;
+
+					break;
+
+				case 'replace':
+					$attribute = $this->template->getAttribute($action_attribute_value);
+
+					if (is_null($attribute))
+						return $this->error(sprintf('%s %s',_('Attempting to replace a non existant attribute'),$action_attribute_value),
+							array_merge(array($currentLine),$lines));
+
+					break;
+
+				default:
+					debug_dump_backtrace(sprintf('Unknown action %s',$action_attribute),1);
+			}
+
+			# Fetch the attribute for the following line
+			$currentLine = array_shift($lines);
+
+			while ($processline && trim($currentLine) && (trim($currentLine) != '-')) {
+				$processline = false;
+
+				# If there is a valid line
+				if (preg_match('/:/',$currentLine)) {
+					$attrvalue = $this->getAttrValue($currentLine);
+					$attr = $attrvalue[0];
+					$attribute_value_part = $attrvalue[1];
+
+					# Check that it correspond to the one specified before
+					if ($attr == $action_attribute_value) {
+						# Get the value part of the attribute
+						$attribute_value = $this->getAttributeValue($attribute_value_part);
+
+						$attribute = $this->template->getAttribute($attr);
+
+						# This should be a add/replace operation
+						switch ($action_attribute) {
+							case 'add':
+								if (is_null($attribute))
+									$attribute = $this->template->addAttribute($attr,array('values'=>array($attribute_value_part)));
+								else
+									$attribute->addValue($attribute_value_part,-1);
+
+								$attribute->justModified();
+
+								break;
+
+							case 'delete':
+								$deleteattr = false;
+
+								if ($key = array_search($attribute_value_part,$attribute->getValues()))
+									$attribute->delValue($key);
+								else
+									return $this->error(sprintf('%s %s',_('Delete value doesnt exist in DN'),$attribute_value_part),
+										array_merge(array($currentLine),$lines));
+
+
+								break;
+
+							case 'replace':
+								if ($attribute->hasBeenModified())
+									$attribute->addValue($attribute_value_part,-1);
+								else
+									$attribute->setValue(array($attribute_value_part));
+
+								break;
+
+							default:
+								debug_dump_backtrace(sprintf('Unexpected operation %s',$action_attribute));
+						}
+
+					} else
+						return $this->error(sprintf('%s %s',_('The attribute to modify doesnt match the one specified by'),$action_attribute),
+							array_merge(array($currentLine),$lines));
+
+				} else
+					return $this->error(sprintf('%s %s',_('Attribute not valid'),$currentLine),
+						array_merge(array($currentLine),$lines));
+
+				$currentLine = array_shift($lines);
+				if (trim($currentLine))
+					$processline = true;
+			}
+
+			if ($action_attribute == 'delete' && $deleteattr)
+				$attribute->setValue(array());
+
+		}
+
+		return $this->template;
+	}
+
+	/**
+	 * Build the attributes for the entry when the change type is modrdn
+	 */
+	function getModRDNAttributes($lines) {
+		$server = $this->getServer();
+		$attrs = array();
+
+		# MODRDN MODDN should only be 2 or 3 lines.
+		if (count($lines) != 2 && count($lines) !=3)
+			return $this->error(_('Invalid entry'),$lines);
+
+		else {
+			$currentLine = array_shift($lines);
+
+			# First we need to check if there is an new rdn specified
+			if (preg_match('/^newrdn:(:?)/',$currentLine)) {
+
+				$attrvalue = $this->getAttrValue($currentLine);
+				$attrs['newrdn'] = $attrvalue[1];
+
+				$currentLine = array_shift($lines);
+
+				if (preg_match('/^deleteoldrdn:[ ]*(0|1)/',$currentLine)) {
+					$attrvalue = $this->getAttrValue($currentLine);
+					$attrs['deleteoldrdn'] = $attrvalue[1];
+
+					# Switch to the possible new superior attribute
+					if (count($lines)) {
+						$currentLine = array_shift($lines);
+
+						# then the possible new superior attribute
+						if (preg_match('/^newsuperior:/',$currentLine)) {
+							$attrvalue = $this->getAttrValue($currentLine);
+							$attrs['newsuperior'] = $attrvalue[1];
+
+						} else
+							return $this->error(_('A valid newsuperier attribute should be specified'),$lines);
+
+					} else
+						$attrs['newsuperior'] = $server->getContainer($this->template->getDN());
+
+				} else
+					return $this->error(_('A valid deleteoldrdn attribute should be specified'),$lines);
+
+			} else
+				return $this->error(_('A valid newrdn attribute should be specified'),$lines);
+		}
+
+		# Well do something out of the ordinary here, since our template doesnt handle mod[r]dn yet.
+		$this->template->modrdn = $attrs;
+		return $this->template;
+	}
+}
+?>
diff --git a/lam/templates/3rdParty/pla/lib/ldap_error_codes.txt b/lam/templates/3rdParty/pla/lib/ldap_error_codes.txt
new file mode 100644
index 00000000..8d4a2cce
--- /dev/null
+++ b/lam/templates/3rdParty/pla/lib/ldap_error_codes.txt
@@ -0,0 +1,94 @@
+0x00	LDAP_SUCCESS			"The operation completed successfully."
+0x01	LDAP_OPERATIONS_ERROR	"An operations error occurred. This is
+                                typically the result of an internal error on your LDAP server."
+0x02	LDAP_PROTOCOL_ERROR		"A protocol violation was detected."		
+0x03	LDAP_TIMELIMIT_EXCEEDED		"The operation timed out waiting to complete."
+0x04	LDAP_SIZELIMIT_EXCEEDED		"The LDAP server refused to serve such a large result set."
+0x05	LDAP_COMPARE_FALSE		"A compare operation returned false."
+0x06	LDAP_COMPARE_TRUE		"A compare operation returned true."
+0x07	LDAP_AUTH_METHOD_NOT_SUPPORTED	"The authentication method you specified is not supported by
+					the LDAP server."
+0x08	LDAP_STRONG_AUTH_REQUIRED	"This LDAP server requires strong (encrypted) authentication,
+					not clear text."
+0x09	LDAP_PARTIAL_RESULTS		"The result set received is a partial result set."
+0x0a	LDAP_REFERRAL			""
+0x0b	LDAP_ADMINLIMIT_EXCEEDED	""
+0x0c	LDAP_UNAVAILABLE_CRITICAL_EXTENSION	""
+0x0d	LDAP_CONFIDENTIALITY_REQUIRED	""
+0x0e	LDAP_SASL_BIND_INPROGRESS	""
+0x10	LDAP_NO_SUCH_ATTRIBUTE		"That entry does not contain the attribute specified."
+0x11	LDAP_UNDEFINED_TYPE		"The attribute type specified is invalid."
+0x12	LDAP_INAPPROPRIATE_MATCHING	"This usually means that your LDAP server has not defined an equality rule
+					for the attribute you are trying to alter. This is not phpLDAPadmin's fault as the
+					LDAP server has refused to perform the operation (as well it should if there is
+					no equality rule for it to use for the operation). This generally applies when
+					adding a new value to a binary attribute, or removing a single value from a 
+					multi-valued binary attribute."
+0x13	LDAP_CONSTRAINT_VIOLATION	"Some constraint would be violated by performing the action. This can happen when
+					you try to add a second value to a single-valued attribute, for example."
+0x14	LDAP_TYPE_OR_VALUE_EXISTS	"An  attribute  type or attribute value
+					specified already exists in the entry"
+0x15	LDAP_INVALID_SYNTAX		"An  invalid attribute value was specified."
+0x20	LDAP_NO_SUCH_OBJECT		"That object does not exist."
+0x21	LDAP_ALIAS_PROBLEM		"An alias in the directory points to a
+					non-existent entry."
+0x22	LDAP_INVALID_DN_SYNTAX		"You used an invalid syntax in the specified DN."
+0x23	LDAP_IS_LEAF			"The object specified is a leaf"
+0x24	LDAP_ALIAS_DEREF_PROBLEM	"A problem was encountereed when
+					dereferencing an alias"
+0x30	LDAP_INAPPROPRIATE_AUTH		"Inappropriate authentication was
+					specified (e.g. LDAP_AUTH_SIMPLE was
+					specified and the entry does not have
+					a userPassword attribute)."
+0x31	LDAP_INVALID_CREDENTIALS	"Incorrect login DN and/or password."
+0x32	LDAP_INSUFFICIENT_ACCESS	"You do not have sufficient permissions
+					to perform that operation."
+0x33	LDAP_BUSY			"The LDAP server is busy."
+0x34	LDAP_UNAVAILABLE		"The LDAP server is unavailable."
+0x35	LDAP_UNWILLING_TO_PERFORM	"The LDAP server refused to perform the operation."
+0x36	LDAP_LOOP_DETECT		"A loop was detected."
+0x3C	LDAP_SORT_CONTROL_MISSING	""
+0x3D	LDAP_INDEX_RANGE_ERROR		""
+0x40	LDAP_NAMING_VIOLATION		"A naming violation occurred. This usually
+                    means that you tried to change the value of an attribute that is used in the
+                    DN. For example, if you change the 'cn' value of an entry whose DN is 'cn=Bob
+                    Jones,dc=example,dc=com', you must also rename the entry to reflect the
+                    change."
+0x41	LDAP_OBJECT_CLASS_VIOLATION	"You tried to perform an operation that would cause an undefined attribute
+					to exist or that would remove a required attribute, given the current list
+					of ObjectClasses. This can also occur if you do not
+                    specify a structural objectClass when creating an entry, or if you specify
+                    more than one structural objectClass."
+0x42	LDAP_NOT_ALLOWED_ON_NONLEAF	"The entry you tried to operate on has children. Usually this means you
+					tried to delete or rename the entry, which you cannot do to an entry 
+					with children."
+0x43	LDAP_NOT_ALLOWED_ON_RDN		"You cannot preform that operation on a the relative distinguished name
+					(RDN) of an object."
+0x44	LDAP_ALREADY_EXISTS		"The object already exists. Usually you are trying to create a new object
+					on top of an existing one."
+0x45	LDAP_NO_OBJECT_CLASS_MODS	"ObjectClass modifications are not allowed."
+0x46	LDAP_RESULTS_TOO_LARGE		""
+0x47	LDAP_AFFECTS_MULTIPLE_DSAS	""
+0x50	LDAP_OTHER			""
+0x51	LDAP_SERVER_DOWN		"The LDAP server is down."
+0x52	LDAP_LOCAL_ERROR		""
+0x53	LDAP_ENCODING_ERROR		""
+0x54	LDAP_DECODING_ERROR		""
+0x55	LDAP_TIMEOUT			""
+0x56	LDAP_AUTH_UNKNOWN		""
+0x57	LDAP_FILTER_ERROR		"The LDAP search filter specified is inavlid."
+0x58	LDAP_USER_CANCELLED		"The user cancelled the LDAP operation."
+0x59	LDAP_PARAM_ERROR		"An  ldap routine was called with a bad
+					parameter."
+0x5a	LDAP_NO_MEMORY			"A memory allocation (e.g., malloc(3)
+					or  other  dynamic  memory  allocator)
+					call failed in an  ldap  library  rou-
+					tine."
+0x5b	LDAP_CONNECT_ERROR		""
+0x5c	LDAP_NOT_SUPPORTED		"The requested operation is not supported by the LDAP server."
+0x5d	LDAP_CONTROL_NOT_FOUND		""
+0x5e	LDAP_NO_RESULTS_RETURNED	"The search came back empty."
+0x5f	LDAP_MORE_RESULTS_TO_RETURN	"The LDAP server has more results that it would like to return."
+0x60	LDAP_CLIENT_LOOP		""
+0x61	LDAP_REFERRAL_LIMIT_EXCEEDED	"This means that a search was performed that required the LDAP 
+					server to follow a chain of referrals that was too lengthy."
diff --git a/lam/templates/3rdParty/pla/lib/ldap_supported_oids.txt b/lam/templates/3rdParty/pla/lib/ldap_supported_oids.txt
new file mode 100644
index 00000000..9fc5a661
--- /dev/null
+++ b/lam/templates/3rdParty/pla/lib/ldap_supported_oids.txt
@@ -0,0 +1,187 @@
+# If you find some reliable and more meaningful descriptions to this OIDS,
+# then please let the phpldapadmin development know so that this file can be
+# more descriptive.
+
+1.2.826.0.1.334810.2.3		"LDAP_CONTROL_VALUESRETURNFILTER"
+1.2.826.0.1.3344810.2.3		"Matched Values Control" "RFC 3876" "Describes a control for the LDAP v3 that is used to return a subset of attribute values from an entry. Specifically, only those values that match a 'values return' filter. Without support for this control, a client must retrieve all of an attribute's values and search for specific values locally."
+1.2.826.0.1050.11.1.1		"Read-Only LDAP Server"
+1.2.826.0.1050.11.2.1		"Read-Write LDAP Server"
+1.2.826.0.1050.11.3.1		"White Pages Application LDAP Server"
+1.2.826.0.1050.11.4.1		"Certificate Application LDAP Server"
+1.2.826.0.1050.11.5.1		"Single Sign On Application LDAP Server"
+1.2.840.113549.6.0.0		"Signed Operation"
+1.2.840.113549.6.0.1		"Demand Signed Result"
+1.2.840.113549.6.0.2		"Signed Result RFC 2649"
+1.2.840.113556.1.4.319		"Simple Paged Results Manipulation Control Extension" "RFC 2696" "This control extension allows a client to control the rate at which an LDAP server returns the results of an LDAP search operation. This control may be useful when the LDAP client has limited resources and may not be able to process the entire result set from a given LDAP query, or when the LDAP client is connected over a low-bandwidth connection."
+1.2.840.113556.1.4.417		"Show deleted control" "" "The LDAP_SERVER_SHOW_DELETED_OID control is used with an extended LDAP search function to specify that the search results include any deleted objects that match the search filter."
+1.2.840.113556.1.4.473		"LDAP Server Sort Result extension" "draft-ietf-ldapext-sorting-01" "This control is included in the searchRequest message as part of the controls field of the LDAPMessage."
+1.2.840.113556.1.4.474		"LDAP Server Sort Result extension response control" "" "This control is included in the searchResultDone message as part of the controls field of the LDAPMessage"
+1.2.840.113556.1.4.521		"Cross-domain move control" "" "The LDAP_SERVER_CROSSDOM_MOVE_TARGET_OID control is used with an extended LDAP rename function to move an LDAP object from one domain to another. The control specifies the DNS hostname of the domain controller in the destination domain."
+1.2.840.113556.1.4.528		"Server search notification control" "" "The LDAP_SERVER_NOTIFICATION_OID control is used with an extended LDAP asynchronous search function to register the client to be notified when changes are made to an object in Active Directory."
+1.2.840.113556.1.4.529		"Extended DN control" "" "The LDAP_SERVER_EXTENDED_DN_OID control is used with an extended LDAP search function to request an extended form of an Active Directory object distinguished name. The extended form includes a string representation of the object objectGUID property. For security principal objects such as users, groups, and computers, the extended form also includes a string representation of the object objectSID property."
+1.2.840.113556.1.4.616		"LDAP_CONTROL_REFERRALS"
+1.2.840.113556.1.4.619		"Lazy commit control" "" "The LDAP_SERVER_LAZY_COMMIT_OID control is used to instruct the server to return the results of a DS modification command, such as add, delete, or replace, after it has been completed in memory, but before it has been committed to disk. The server can then return results quickly, and save the data to disk without holding the client."
+1.2.840.113556.1.4.800		"LDAP_CAP_ACTIVE_DIRECTORY_OID" "" "This is an Actrive Directory Server (Win2k and later)."
+1.2.840.113556.1.4.801		"Security descriptor flags control" "" "The LDAP_SERVER_SD_FLAGS_OID control is used to pass flags to the server to control various security descriptor results."
+1.2.840.113556.1.4.802		"Attribute Range Option" "" "Server supports the Range property enabling clients to incremental retrieve values from multivalue attributes."
+1.2.840.113556.1.4.803		"LDAP_MATCHING_RULE_BIT_AND"
+1.2.840.113556.1.4.804		"LDAP_MATCHING_RULE_BIT_OR"
+1.2.840.113556.1.4.805		"Tree Delete" "" "The LDAP_SERVER_TREE_DELETE_OID control is used with an extended LDAP delete function to delete an entire subtree in the directory."
+1.2.840.113556.1.4.841		"Directory synchronization control" "" "The LDAP_SERVER_DIRSYNC_OID control enables an application to search the directory for objects changed from a previous state. It is also used with the extended LDAP search functions such as ldap_search_ext."
+1.2.840.113556.1.4.906		"Microsoft Large Integer"
+1.2.840.113556.1.4.970		"Get stats control (Stateless)"
+1.2.840.113556.1.4.1302		"Microsoft OID used with DEN Attributes"
+1.2.840.113556.1.4.1338		"Verify name control" "" "The LDAP_SERVER_VERIFY_NAME_OID control is used with extended LDAP add and modify requests to instruct the DC accepting the update which DC it should verify with, the existence of any DN attribute values."
+1.2.840.113556.1.4.1339		"LDAP_SERVER_DOMAIN_SCOPE_OID" "" "The LDAP_SERVER_DOMAIN_SCOPE_OID control is used to instruct the LDAP server not to generate any referrals when completing a request. This control also limits any search using it to a single naming context."
+1.2.840.113556.1.4.1340		"Search options control" "" " The LDAP_SERVER_SEARCH_OPTIONS_OID control is used to pass flags to the server to control various search behaviors."
+1.2.840.113556.1.4.1413		"LDAP ease modify restrictions" "" "Allows an LDAP modify to work under less restrictive conditions. Without it, a delete will fail if an attribute does not exist, and an add will fail if an attribute already exists."
+1.2.840.113556.1.4.1504		"Attribute scoped query control" "" "The LDAP_SERVER_ASQ_OID control is used with an extended LDAP search function to force the query to be based on a specific DN-valued attribute. Only one source attribute can be specified with this control and the search request is limited to base object scoped queries."
+1.2.840.113556.1.4.1670		"LDAP_CAP_ACTIVE_DIRECTORY_V51_OID" "" "This server is a Whistler Active Directory server (Win2k3 and later)."
+1.2.840.113556.1.4.1781		"Fast concurrent bind extended operation" "" "The Microsoft LDAP API will send an extended request with this name to Active Directory to request that all binds on this connection be processed as 'fast' binds."
+1.2.840.113556.1.4.1791		"LDAP_CAP_ACTIVE_DIRECTORY_LDAP_INTEG_OID" "" "LDAP server is capable of doing signing and sealing on an NTLM authenticated connection, and that the server is capable of performing subsequent binds on a signed or sealed connection."
+1.2.840.113556.1.4.1852		"LDAP_SERVER_QUOTA_CONTROL_OID" "" "The LDAP_SERVER_QUOTA_CONTROL_OID control is used to pass the SID of a security principal, whose quota is being queried, to the server in a LDAP search operation."
+1.3.6.1.1.7.1			"LCUP Sync Request Control. RFC 3928 control"
+1.3.6.1.1.7.2			"LCUP Sync Update Control. RFC 3928 control"
+1.3.6.1.1.7.3			"LCUP Sync Done Control. RFC 3928 control"
+1.3.6.1.1.8			"Cancel Operation. RFC 3909 extension"
+1.3.6.1.1.12		"Assertion Control" "RFC 4511" "The assertion control allows the client to specify a condition that must be true for the operation to be processed normally."
+1.3.6.1.1.13.1					"Pre-Read Controls" "" "The Pre-Read request control, indicates that a copy of the entry before application of update is to be returned."
+1.3.6.1.1.13.2					"Post-Read Controls" "" "The Pre-Read request control, indicates that a copy of the entry before application of update is to be returned."
+1.3.6.1.1.14		"Modify-Increment Extension" "RFC 4525" "An extension to the Lightweight Directory Access Protocol (LDAP) Modify operation to support an increment capability."
+1.3.6.1.4.1.42.2.27.8.5.1	"passwordPolicyRequest"
+1.3.6.1.4.1.42.2.27.9.5.2	"GetEffectiveRights control" "" "May be used to determine what operations a given user may perform on a specified entry."
+1.3.6.1.4.1.1466.101.119.1	"Dynamic Directory Services Refresh Request" "RFC 2589"
+1.3.6.1.4.1.1466.20036		"LDAP_NOTICE_OF_DISCONNECTION"
+1.3.6.1.4.1.1466.20037		"Transport Layer Security Extension" "RFC 2830" "This operation provides for TLS establishment in an LDAP association and is defined in terms of an LDAP extended request."
+1.3.6.1.4.1.1466.29539.1	"LDAP_CONTROL_ATTR_SIZELIMIT"
+1.3.6.1.4.1.1466.29539.2	"LDAP_CONTROL_NO_COPY"
+1.3.6.1.4.1.1466.29539.3	"LDAP_CONTROL_PARTIAL_COPY"
+1.3.6.1.4.1.1466.29539.5	"LDAP_CONTROL_NO_CHAINING"
+1.3.6.1.4.1.1466.29539.7	"LDAP_CONTROL_ALIAS_ON_UPDATE"
+1.3.6.1.4.1.1466.29539.10	"LDAP_CONTROL_TRIGGER"
+1.3.6.1.4.1.1466.29539.12	"nsTransmittedControl"
+1.3.6.1.4.1.4203.1.5.1		"All Operational Attribute" "RFC 3673" "An LDAP extension which clients may use to request the return of all operational attributes."
+1.3.6.1.4.1.4203.1.5.2		"Requesting Attributes by Object Class" "draft-zeilenga-ldap-adlist-10.txt" "Extends LDAP to support a mechanism that LDAP clients may use to request the return of all attributes of an object class."
+1.3.6.1.4.1.4203.1.5.3		"LDAP Absolute True and False Filters" "draft-zeilenga-ldap-t-f-10.txt" "Implementations of this extension SHALL allow 'and' and 'or' choices with zero filter elements."
+1.3.6.1.4.1.4203.1.5.4		"Language Tags" "RFC 3866" "Supports storing attributes with language tag options in the DIT"
+1.3.6.1.4.1.4203.1.5.5		"Language Ranges" "RFC 3866" "Supports language range matching of attributes with language tag options stored in the DIT"
+1.3.6.1.4.1.4203.1.9.1.1	"LDAP Content Synchronization Control" "draft=zeilenga-ldup-sync-06.txt" "The operation allows a client to maintain a copy of a fragment of directory information tree.  It supports both polling for changes and listening for changes.  The operation is defined as an extension of the LDAP Search Operation."
+1.3.6.1.4.1.4203.1.10.1		"Subentries in LDAP" "RFC 3672" "The subentries control MAY be sent with a searchRequest to control the visibility of entries and subentries which are within scope. Non-visible entries or subentries are not returned in response to the request."
+1.3.6.1.4.1.4203.1.10.2		"LDAP No-Op Control" "draft-zeilenga-ldap-noop-02.txt" "The No-Op control can be used to disable the normal effect of an operation. The control can be used to discover how a server might react to a particular update request without updating the directory."
+1.3.6.1.4.1.4203.1.11.1		"LDAP Password Modify Extended Operation" "RFC 3062" "An LDAP extended operation to allow modification of user passwords which is not dependent upon the form of the authentication identity nor the password storage mechanism used."
+1.3.6.1.4.1.4203.1.11.2		"LDAP Cancel Extended Operation"
+1.3.6.1.4.1.4203.1.11.3		"Who Am I? Extended Operation" "draft-zeilenga-ldap-authzid-10.txt" "This specification provides a mechanism for Lightweight Directory Access Protocol (LDAP) clients to obtain the authorization identity which the server has associated with the user or application entity."
+1.3.6.1.4.1.4203.666.5.1	"Subentries Control"
+1.3.6.1.4.1.4203.666.5.2	"NO OP Control"
+1.3.18.0.2.12.1			"The ACL credential controls provide a method to flow a subject's credentials associated with a bind."
+1.3.18.0.2.12.5			"tranExtOpInit"
+1.3.18.0.2.12.6			"tranExtOpInit"
+2.16.840.1.113531.18.2.1	"LDAP_C_SETOPTIONS_OID"
+2.16.840.1.113531.18.2.2	"LDAP_C_SETDONTUSECOPY_OID"
+2.16.840.1.113531.18.2.3	"LDAP_C_SETLOCALSCOPE_OID"
+2.16.840.1.113531.18.2.4	"Return operational attributes as well as user attributes"
+2.16.840.1.113531.18.2.5	"Return only subentries"
+2.16.840.1.113531.18.2.6	"LDAP_C_SETUSEALIAS_OID"
+2.16.840.1.113531.18.2.7	"LDAP_C_SETPREFERCHAIN_OID"
+2.16.840.1.113531.18.2.8	"LDAP_C_SETX500DN_OID"
+2.16.840.1.113531.18.2.9	"LDAP_C_SETCOPYSHALLDO_OID"
+2.16.840.1.113531.18.2.10	"LDAP_C_SETDONTMAPATTRS_OID"
+2.16.840.1.113531.18.2.11	"Return normal entries as well as sub-entries"
+2.16.840.1.113719.1.27.99.1	"Superior References"
+2.16.840.1.113719.1.27.100.1	"ndsToLdapResponse"
+2.16.840.1.113719.1.27.100.2	"ndsToLdapRequest"
+2.16.840.1.113719.1.27.100.3	"createNamingContextRequest"
+2.16.840.1.113719.1.27.100.4	"createNamingContextResponse"
+2.16.840.1.113719.1.27.100.5	"mergeNamingContextRequest"
+2.16.840.1.113719.1.27.100.6	"mergeNamingContextResponse"
+2.16.840.1.113719.1.27.100.7	"addReplicaRequest"
+2.16.840.1.113719.1.27.100.8	"addReplicaResponse"
+2.16.840.1.113719.1.27.100.9	"refreshLDAPServerRequest"
+2.16.840.1.113719.1.27.100.10	"refreshLDAPServerResponse"
+2.16.840.1.113719.1.27.100.11	"removeReplicaRequest"
+2.16.840.1.113719.1.27.100.12	"removeReplicaResponse"
+2.16.840.1.113719.1.27.100.13	"namingContextEntryCountRequest"
+2.16.840.1.113719.1.27.100.14	"namingContextEntryCountResponse"
+2.16.840.1.113719.1.27.100.15	"changeReplicaTypeRequest"
+2.16.840.1.113719.1.27.100.16	"changeReplicaTypeResponse"
+2.16.840.1.113719.1.27.100.17	"getReplicaInfoRequest"
+2.16.840.1.113719.1.27.100.18	"getReplicaInfoResponse"
+2.16.840.1.113719.1.27.100.19	"listReplicaRequest"
+2.16.840.1.113719.1.27.100.20	"listReplicaResponse"
+2.16.840.1.113719.1.27.100.21	"receiveAllUpdatesRequest"
+2.16.840.1.113719.1.27.100.22	"receiveAllUpdatesResponse"
+2.16.840.1.113719.1.27.100.23	"sendAllUpdatesRequest"
+2.16.840.1.113719.1.27.100.24	"sendAllUpdatesResponse"
+2.16.840.1.113719.1.27.100.25	"requestNamingContextSyncRequest"
+2.16.840.1.113719.1.27.100.26	"requestNamingContextSyncResponse"
+2.16.840.1.113719.1.27.100.27	"requestSchemaSyncRequest"
+2.16.840.1.113719.1.27.100.28	"requestSchemaSyncResponse"
+2.16.840.1.113719.1.27.100.29	"abortNamingContextOperationRequest"
+2.16.840.1.113719.1.27.100.30	"abortNamingContextOperationResponse"
+2.16.840.1.113719.1.27.100.31	"Get Bind DN Request"
+2.16.840.1.113719.1.27.100.32	"Get Bind DN Response"
+2.16.840.1.113719.1.27.100.33	"Get Effective Privileges Request"
+2.16.840.1.113719.1.27.100.34	"Get Effective Privileges Response"
+2.16.840.1.113719.1.27.100.35	"Set Replication Filter Request"
+2.16.840.1.113719.1.27.100.36	"Set Replication Filter Response"
+2.16.840.1.113719.1.27.100.37	"Get Replication Filter Request"
+2.16.840.1.113719.1.27.100.38	"Get Replication Filter Response"
+2.16.840.1.113719.1.27.100.39	"Create Orphan Partition Request"
+2.16.840.1.113719.1.27.100.40	"Create Orphan Partition Response"
+2.16.840.1.113719.1.27.100.41	"Remove Orphan Partition Request"
+2.16.840.1.113719.1.27.100.42	"Remove Orphan Partition Response"
+2.16.840.1.113719.1.27.100.43	"Trigger Backlinker Request"
+2.16.840.1.113719.1.27.100.44	"Trigger Backlinker Response"
+2.16.840.1.113719.1.27.100.47	"Trigger Janitor Request"
+2.16.840.1.113719.1.27.100.48	"Trigger Janitor Response"
+2.16.840.1.113719.1.27.100.49	"Trigger Limber Request"
+2.16.840.1.113719.1.27.100.50	"Trigger Limber Response"
+2.16.840.1.113719.1.27.100.51	"Trigger Skulker Request"
+2.16.840.1.113719.1.27.100.52	"Trigger Skulker Response"
+2.16.840.1.113719.1.27.100.53	"Trigger Schema Synch Request"
+2.16.840.1.113719.1.27.100.54	"Trigger Schema Synch Response"
+2.16.840.1.113719.1.27.100.55	"Trigger Partition Purge Request"
+2.16.840.1.113719.1.27.100.56	"Trigger Partition Purge Response"
+2.16.840.1.113719.1.27.100.79	"Monitor Events Request"
+2.16.840.1.113719.1.27.100.80	"Monitor Events Response"
+2.16.840.1.113719.1.27.100.81	"Event Notification"
+2.16.840.1.113719.1.27.101.1	"Duplicate Entry Request"
+2.16.840.1.113719.1.27.101.2	"DuplicateSearchResult"
+2.16.840.1.113719.1.27.101.3	"DuplicateEntryResponseDone"
+2.16.840.1.113719.1.27.101.5	"Simple Password"
+2.16.840.1.113719.1.27.101.6	"Forward Reference"
+2.16.840.1.113719.1.142.100.1	"startFramedProtocolRequest"
+2.16.840.1.113719.1.142.100.2	"startFramedProtocolResponse"
+2.16.840.1.113719.1.142.100.3	"ReplicationUpdate"
+2.16.840.1.113719.1.142.100.4	"endFramedProtocolRequest"
+2.16.840.1.113719.1.142.100.5	"endFramedProtocolResponse"
+2.16.840.1.113719.1.142.100.6	"lburpOperationRequest"
+2.16.840.1.113719.1.142.100.7	"lburpOperationResponse"
+2.16.840.1.113730.3.4		"Netscape LDAPv3 controls"
+2.16.840.1.113730.3.4.2		"ManageDsaIT Control" "RFC 3296" "The client may provide the ManageDsaIT control with an operation to indicate that the operation is intended to manage objects within the DSA (server) Information Tree. The control causes Directory-specific entries (DSEs), regardless of type, to be treated as normal entries allowing clients to interrogate and update these entries using LDAP operations."
+2.16.840.1.113730.3.4.3		"Persistent Search LDAPv3 control"
+2.16.840.1.113730.3.4.4		"Netscape Password Expired LDAPv3 control"
+2.16.840.1.113730.3.4.5		"Netscape Password Expiring LDAPv3 control"
+2.16.840.1.113730.3.4.6		"Netscape NT Synchronization Client LDAPv3 control"
+2.16.840.1.113730.3.4.7		"Entry Change Notification LDAPv3 control"
+2.16.840.1.113730.3.4.8		"Transaction ID Request Control"
+2.16.840.1.113730.3.4.9		"VLV Request LDAPv3 control" "" "As defined in the 'LDAPv3 Extensions for Virtual List View' IETF document."
+2.16.840.1.113730.3.4.10	"VLV Response LDAPv3 control" "" "As defined in the 'LDAPv3 Extensions for Virtual List View' IETF document."
+2.16.840.1.113730.3.4.11	"Transaction ID Response Control"
+2.16.840.1.113730.3.4.12	"Proxied Authorization (version 1) control" "draft-weltman-ldapv3-proxy-05" "For assuming the identity of another entry for the duration of a request. This has been replaced by a new 'version 2' Proxied Authorization control."
+2.16.840.1.113730.3.4.13	"iPlanet Directory Server Replication Update Information Control"
+2.16.840.1.113730.3.4.14	"iPlanet Directory Server 'search on specific backend' control"
+2.16.840.1.113730.3.4.15	"Authentication Response Control"
+2.16.840.1.113730.3.4.16	"Authentication Request Control"
+2.16.840.1.113730.3.4.17	"Real Attributes Only Request Control"
+2.16.840.1.113730.3.4.18	"LDAP Proxied Authorization Control" "draft-weltman-ldapv3-proxy-06.txt" "The Proxied Authorization Control allows a client to request that an operation be processed under a provided authorization identity [AUTH] instead of as the current authorization identity associated with the connection."
+2.16.840.1.113730.3.4.19	"Virtual Attributes Only Request Control"
+2.16.840.1.113730.3.4.20	"Use One Backend"
+2.16.840.1.113730.3.4.999	"iPlanet Replication Modrdn Extra Mods Control"
+2.16.840.1.113730.3.5.3		"iPlanet Start Replication Request Extended Operation"
+2.16.840.1.113730.3.5.4		"iPlanet Replication Response Extended Operation"
+2.16.840.1.113730.3.5.5		"iPlanet End Replication Request Extended Operation"
+2.16.840.1.113730.3.5.6		"iPlanet Replication Entry Request Extended Operation"
+2.16.840.1.113730.3.5.7		"iPlanet Bulk Import Start Extended Operation"
+2.16.840.1.113730.3.5.8		"iPlanet Bulk Import Finished Extended Operation"
+2.16.840.1.113730.3.5.9		"iPlanet Digest authentication calculation"
diff --git a/lam/templates/3rdParty/pla/lib/page.php b/lam/templates/3rdParty/pla/lib/page.php
new file mode 100644
index 00000000..3d7c1cd9
--- /dev/null
+++ b/lam/templates/3rdParty/pla/lib/page.php
@@ -0,0 +1,510 @@
+<?php
+/**
+ * Page Rendering Functions
+ *
+ * @author The phpLDAPadmin development team
+ * @package phpLDAPadmin
+ */
+
+/**
+ * This class controls the final output to the browser.
+ *
+ * @package phpLDAPadmin
+ * @subpackage Page
+ */
+class page {
+	# pre-HTML headers
+	protected $_pageheader;
+
+	# Items to get into the <head>
+	protected $_head;
+
+	# Settings for this application
+	protected $_app;
+
+	# Default values array.
+	protected $_default;
+
+	public function __construct($index=null) {
+		if (defined('DEBUG_ENABLED') && DEBUG_ENABLED && (($fargs=func_get_args())||$fargs='NOARGS'))
+			debug_log('Entered (%%)',129,0,__FILE__,__LINE__,__METHOD__,$fargs);
+
+		# If we done have a configuration, then our IMGDIR and CSS are not defined
+		if (! defined('IMGDIR'))
+			define('IMGDIR','images/default');
+		if (! defined('CSSDIR'))
+			define('CSSDIR','css/default');
+
+		$this->index = $index;
+
+		# To be defined in a configuration file.
+		$this->_app['title'] = app_name();
+		$this->_app['logo'] = IMGDIR.'/logo-small.png';
+
+		if (! is_null($index))
+			$this->_app['urlcss'] = sprintf('%s/%s',CSSDIR,$_SESSION[APPCONFIG]->getValue('appearance','stylesheet'));
+		else
+			$this->_app['urlcss'] = sprintf('%s/%s',CSSDIR,'style.css');
+
+		# Default Values for configurable items.
+		$this->_default['sysmsg']['error'] = IMGDIR.'/error-big.png';
+		$this->_default['sysmsg']['warn'] = IMGDIR.'/warn-big.png';
+		$this->_default['sysmsg']['info'] = IMGDIR.'/info-big.png';
+
+		# Capture any output so far (in case we send some headers below) - there shouldnt be any output anyway.
+		$preOutput = '';
+
+		# Try and work around if php compression is on, or the user has set compression in the config.
+		# type = 1 for user gzip, 0 for php.ini gzip.
+		$obStatus = ob_get_status();
+		if (isset($obStatus['type']) && $obStatus['type'] && $obStatus['status']) {
+			$preOutput = ob_get_contents();
+			ob_end_clean();
+		}
+
+		header('Content-type: text/html; charset="UTF-8"');
+		if (isCompress()) {
+			header('Content-Encoding: gzip');
+
+			if (defined('DEBUG_ENABLED') && DEBUG_ENABLED)
+				debug_log('Sent COMPRESSED header to browser and discarded (%s)',129,0,__FILE__,__LINE__,__METHOD__,$preOutput);
+		}
+
+		if (isset($_SESSION[APPCONFIG])
+			&& $_SESSION[APPCONFIG]->getValue('appearance','compress')
+			&& ini_get('zlib.output_compression'))
+				$this->setsysmsg(array('title'=>_('Warning'),'body'=>_('WARNING: You cannot have PHP compression and application compression enabled at the same time. Please unset zlib.output_compression or set $config->custom->appearance[\'compress\']=false'),'type'=>'warn'));
+
+		# Turn back on output buffering.
+		ob_start();
+
+		# Initial Values
+		$this->_pageheader[] = '<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">';
+		$this->_pageheader[] .= '<html xmlns="http://www.w3.org/1999/xhtml" xml:lang="auto">'."\n";
+	}
+
+	/* Add to the HTML Header */
+	public function head_add($html) {
+		if (defined('DEBUG_ENABLED') && DEBUG_ENABLED && (($fargs=func_get_args())||$fargs='NOARGS'))
+			debug_log('Entered (%%)',129,0,__FILE__,__LINE__,__METHOD__,$fargs);
+
+		$this->_head[] .= $html;
+	}
+
+	/* Print out the HTML header */
+	private function pageheader_print() {
+		if (defined('DEBUG_ENABLED') && DEBUG_ENABLED && (($fargs=func_get_args())||$fargs='NOARGS'))
+			debug_log('Entered (%%)',129,0,__FILE__,__LINE__,__METHOD__,$fargs);
+
+		# HTML prepage requirements.
+		foreach ($this->_pageheader as $line)
+			echo $line."\n";
+
+		# Page Title
+		echo '<head>';
+		printf('<meta http-equiv="Content-Type" content="text/html; charset=utf-8" />');
+
+		$DNs = get_request('dn','REQUEST');
+		if (is_array($DNs))
+			$DNs = '';
+
+		if (isset($_SESSION[APPCONFIG]))
+			printf('<title>%s (%s) - %s%s</title>',
+				$this->_app['title'],
+				app_version(),
+				$DNs ? htmlspecialchars($DNs).' ' : '',
+				$_SESSION[APPCONFIG]->getValue('appearance','page_title'));
+		else
+			printf('<title>%s - %s</title>',$this->_app['title'],app_version());
+
+		echo '<link rel="shortcut icon" href="images/favicon.ico" type="image/vnd.microsoft.icon" />';
+		# Style sheet.
+		printf('<link type="text/css" rel="stylesheet" href="%s" />',$this->_app['urlcss']);
+
+		if (defined('JSDIR')) {
+			printf('<link type="text/css" rel="stylesheet" media="all" href="%sjscalendar/calendar-blue.css" title="blue" />',JSDIR);
+			echo "\n";
+			printf('<script type="text/javascript" src="%sajax_functions.js"></script>',JSDIR);
+			printf('<script type="text/javascript" src="%sjscalendar/calendar.js"></script>',JSDIR);
+			echo "\n";
+		}
+
+		# HTML head requirements.
+		if (is_array($this->_head) && count($this->_head))
+			foreach ($this->_head as $line)
+				echo $line."\n";
+
+		echo '</head>';
+		echo "\n";
+	}
+
+	private function head_print() {
+		if (defined('DEBUG_ENABLED') && DEBUG_ENABLED && (($fargs=func_get_args())||$fargs='NOARGS'))
+			debug_log('Entered (%%)',129,0,__FILE__,__LINE__,__METHOD__,$fargs);
+
+		if (isset($_SESSION[APPCONFIG]))
+			$pagetitle = $_SESSION[APPCONFIG]->getValue('appearance','page_title') ? ' - '.$_SESSION[APPCONFIG]->getValue('appearance','page_title') : '';
+		else
+			$pagetitle = '';
+
+		echo '<tr class="pagehead">';
+
+		echo '<td colspan="3"><div id="ajHEAD"><table width="100%" border="0"><tr>';
+		printf('<td style="text-align: left;"><a href="%s" onclick="target=\'_blank\';"><img src="%s" alt="Logo" class="logo" /></a></td>',get_href('sf'),$this->_app['logo']);
+
+		echo '<td class="imagetop">';
+		$empty = true;
+		if (function_exists('cmd_control_pane'))
+			foreach (cmd_control_pane('top') as $cmddetails)
+				if ((isset($cmddetails['enable']) && $cmddetails['enable']) || ! isset($cmddetails['enable'])) {
+					if (! $empty)
+						echo ' ';
+
+					printf('<a %s>%s</a>',$cmddetails['link'],$cmddetails['image']);
+
+					$empty = false;
+				}
+
+		if ($empty)
+			echo '&nbsp;';
+
+		echo '</td>';
+		echo '</tr></table></div></td>';
+		echo '</tr>';
+		echo "\n";
+	}
+
+	private function control_print() {
+		if (defined('DEBUG_ENABLED') && DEBUG_ENABLED && (($fargs=func_get_args())||$fargs='NOARGS'))
+			debug_log('Entered (%%)',129,0,__FILE__,__LINE__,__METHOD__,$fargs);
+
+		echo '<table class="control" width="100%" border="0">';
+		echo '<tr><td>';
+
+		$empty = true;
+		if (function_exists('cmd_control_pane'))
+			foreach (cmd_control_pane('main') as $cmddetails)
+				if ((isset($cmddetails['enable']) && trim($cmddetails['enable'])) || ! isset($cmddetails['enable'])) {
+					if (! $empty)
+						echo ' | ';
+
+					printf('<a %s>%s</a>',$cmddetails['link'],
+						(isset($_SESSION[APPCONFIG]) && $_SESSION[APPCONFIG]->getValue('appearance','control_icons')) ? $cmddetails['image'] : $cmddetails['title']);
+
+					$empty = false;
+				}
+
+		echo '</td>';
+		if ($empty)
+			echo '<td>&nbsp;</td>';
+
+		echo '</tr>';
+		echo '</table>';
+	}
+
+	protected function tree() {
+		if (defined('DEBUG_ENABLED') && DEBUG_ENABLED && (($fargs=func_get_args())||$fargs='NOARGS'))
+			debug_log('Entered (%%)',129,0,__FILE__,__LINE__,__METHOD__,$fargs);
+
+		if (! isset($_SESSION[APPCONFIG]))
+			return;
+
+		if (is_null($this->index))
+			$this->index = min(array_keys($_SESSION[APPCONFIG]->getServerList()));
+
+		if (count($_SESSION[APPCONFIG]->getServerList()) > 1) {
+			echo '<form id="server_select" action="cmd.php" method="post">';
+			echo '<table class="server_select"><tr><td>';
+			printf('%s:<br />%s',_('Server Select'),
+				server_select_list($this->index,false,'index',true,sprintf("onchange=\"tree_unhide('index',%s)\"",$this->index)));
+			echo '</td></tr></table>';
+			echo '</form>';
+			echo "\n\n";
+		}
+
+		foreach ($_SESSION[APPCONFIG]->getServerList() as $index => $server) {
+			printf('<div id="ajSID_%s" style="display: %s">',$server->getIndex(),($server->getIndex() == $this->index) ? 'block' : 'none');
+			$tree = Tree::getInstance($server->getIndex());
+			$tree->draw();
+			echo '</div>';
+			echo "\n\n";
+		}
+	}
+
+	public function block_add($side,$object) {
+		if (defined('DEBUG_ENABLED') && DEBUG_ENABLED && (($fargs=func_get_args())||$fargs='NOARGS'))
+			debug_log('Entered (%%)',129,0,__FILE__,__LINE__,__METHOD__,$fargs);
+
+		if (! is_object($object))
+			error(sprintf('block_add called with [%s], but it is not an object',serialize($object)));
+
+		$this->_block[$side][] = $object;
+	}
+
+	private function block_print($side) {
+		if (defined('DEBUG_ENABLED') && DEBUG_ENABLED && (($fargs=func_get_args())||$fargs='NOARGS'))
+			debug_log('Entered (%%)',129,0,__FILE__,__LINE__,__METHOD__,$fargs);
+
+		if (! isset($this->_block[$side]))
+			return;
+
+		printf('<td class="%s" colspan="2">',$side);
+		foreach ($this->_block[$side] as $object)
+			echo $object->draw($side);
+		echo '</td>';
+	}
+
+	private function sysmsg() {
+		if (defined('DEBUG_ENABLED') && DEBUG_ENABLED && (($fargs=func_get_args())||$fargs='NOARGS'))
+			debug_log('Entered (%%)',129,0,__FILE__,__LINE__,__METHOD__,$fargs);
+
+		if (isset($this->sysmsg)) {
+			foreach ($this->sysmsg as $index => $details) {
+				switch ($details['type']) {
+					case 'error':
+						$icon = $this->_default['sysmsg']['error'];
+						break;
+
+					case 'warn':
+						$icon = $this->_default['sysmsg']['warn'];
+						break;
+
+					case 'info':
+					default:
+						$icon = $this->_default['sysmsg']['info'];
+						break;
+				}
+
+				if (isset($details['title']))
+					printf('<tr><td class="icon" rowspan="2"><img src="%s" alt="%s" /></td><td class="head">%s</td></tr>',
+						$icon,$details['type'],$details['title']);
+
+				if (isset($details['body']))
+					if (is_array($details['body'])) {
+						echo '<tr><td class="body">';
+						foreach ($details['body'] as $line)
+							printf('%s<br />',$line);
+						echo '</td></tr>';
+
+					} else
+						printf('<tr><td class="body">%s</td></tr>',$details['body']);
+			}
+		}
+	}
+
+	private function body($raw=false) {
+		if (defined('DEBUG_ENABLED') && DEBUG_ENABLED && (($fargs=func_get_args())||$fargs='NOARGS'))
+			debug_log('Entered (%%)',129,0,__FILE__,__LINE__,__METHOD__,$fargs);
+
+		# Add the Session System Messages
+		if (isset($_SESSION['sysmsg']) && is_array($_SESSION['sysmsg'])) {
+			foreach ($_SESSION['sysmsg'] as $msg) 
+				$this->setsysmsg($msg);
+
+			unset($_SESSION['sysmsg']);
+		}
+
+		if (isset($this->sysmsg)) {
+			echo '<table class="sysmsg">';
+			$this->sysmsg();
+			echo '</table>';
+			echo "\n";
+		}
+
+		if (isset($this->_block['body']))
+			foreach ($this->_block['body'] as $object)
+				echo $object->draw('body',$raw);
+	}
+
+	private function footer_print() {
+		if (defined('DEBUG_ENABLED') && DEBUG_ENABLED && (($fargs=func_get_args())||$fargs='NOARGS'))
+			debug_log('Entered (%%)',129,0,__FILE__,__LINE__,__METHOD__,$fargs);
+
+		printf('<tr class="foot"><td><small>%s</small></td><td colspan="2"><div id="ajFOOT">%s</div>%s</td></tr>',
+			isCompress() ? '[C]' : '&nbsp;',
+			app_version(),
+			get_href('logo') ? sprintf('<a href="%s"><img src="%s" alt="SourceForge.net Logo" style="border: 0px;" /></a>',get_href('sf'),get_href('logo')) : '&nbsp;');
+	}
+
+	/**
+	 * Only show a particular page frame - used by an AJAX call
+	 */
+	public function show($frame,$compress=false,$raw=false) {
+		if (defined('DEBUG_ENABLED') && DEBUG_ENABLED && (($fargs=func_get_args())||$fargs='NOARGS'))
+			debug_log('Entered (%%)',129,0,__FILE__,__LINE__,__METHOD__,$fargs);
+
+		# If the body is called via AJAX, and compression is enable, we need to compress the output
+		if ($compress && ob_get_level() && isCompress()) {
+			ob_end_clean();
+			ob_start();
+		}
+
+		switch ($frame) {
+			case 'BODY':
+				$this->body($raw);
+				break;
+
+			case 'TREE':
+				$this->tree();
+				break;
+
+			default:
+				error(sprintf('show called with unknown frame [%s]',$frame),'error','index.php');
+		}
+
+		if ($compress && ob_get_level() && isCompress()) {
+			$output = ob_get_contents();
+			ob_end_clean();
+
+			if (defined('DEBUG_ENABLED') && DEBUG_ENABLED)
+				debug_log('Sending COMPRESSED output to browser[(%s),%s]',129,0,__FILE__,__LINE__,__METHOD__,
+					strlen($output),$output);
+
+			print gzencode($output);
+		}
+	}
+
+	public function display($filter=array()) {
+		if (defined('DEBUG_ENABLED') && DEBUG_ENABLED && (($fargs=func_get_args())||$fargs='NOARGS'))
+			debug_log('Entered (%%)',129,0,__FILE__,__LINE__,__METHOD__,$fargs);
+
+		# Control what is displayed.
+		$display = array(
+			'HEAD'=>false,
+			'CONTROL'=>false,
+			'TREE'=>true,
+			'FOOT'=>false
+		);
+
+		$display = array_merge($display,$filter);
+
+		# HTML Header
+		$this->pageheader_print();
+
+		# Start of body
+		# Page Header
+		echo '<body>';
+		echo "\n";
+		echo '<table class="page" border="0" width="100%">';
+
+		if ($display['HEAD'])
+			$this->head_print();
+
+		# Control Line
+		if ($display['CONTROL']) {
+			echo '<tr class="control"><td colspan="3">';
+			echo '<div id="ajCONTROL">';
+			$this->control_print();
+			echo '</div></td></tr>';
+			echo "\n";
+		}
+
+		# Left Block
+		echo '<tr>';
+
+		if ($display['TREE']) {
+			echo '<td class="tree" colspan="2">';
+			printf('<acronym title="%s"><img src="%s/plus.png" alt="" style="float: right;" onclick="if (document.getElementById(\'ajTREE\').style.display == \'none\') { document.getElementById(\'ajTREE\').style.display = \'block\' } else { document.getElementById(\'ajTREE\').style.display = \'none\' };"/></acronym>',_('Hide/Unhide the tree'),IMGDIR);
+			echo '<div id="ajTREE">';
+			$this->tree();
+			echo '</div>';
+			echo '</td>';
+		}
+
+		echo '<td class="body" style="width: 80%;">';
+		echo '<div id="ajBODY">';
+		echo "\n";
+		$this->body();
+		echo '</div>';
+		echo '</td>';
+		echo '</tr>';
+		echo "\n";
+
+		# Page Footer
+		if ($display['FOOT'])
+			$this->footer_print();
+
+		# Finish HTML
+		echo '</table>';
+		echo '</body>';
+		echo '</html>';
+
+		# compress output
+		if (ob_get_level() && isCompress()) {
+			$output = ob_get_contents();
+			ob_end_clean();
+
+			if (defined('DEBUG_ENABLED') && DEBUG_ENABLED)
+				debug_log('Sending COMPRESSED output to browser[(%s),%s]',129,0,__FILE__,__LINE__,__METHOD__,
+					strlen($output),$output);
+
+			print gzencode($output);
+		}
+	}
+
+	public function setsysmsg($data) {
+		if (defined('DEBUG_ENABLED') && DEBUG_ENABLED && (($fargs=func_get_args())||$fargs='NOARGS'))
+			debug_log('Entered (%%)',129,0,__FILE__,__LINE__,__METHOD__,$fargs);
+
+		if (! is_array($data))
+			return;
+
+		if (isset($this->sysmsg))
+			$msgnum = count($this->sysmsg) + 1;
+		else
+			$msgnum = 1;
+
+		foreach (array('title','body','type') as $index)
+			if (isset($data[$index]))
+				$this->sysmsg[$msgnum][$index] = $data[$index];
+	}
+}
+
+/**
+ * This class draws a block.
+ *
+ * @package phpLDAPadmin
+ * @subpackage Page
+ */
+class block {
+	private $title;
+	private $body;
+	private $foot;
+
+	public function setTitle($html) {
+		$this->title = $html;
+	}
+
+	public function setBody($html) {
+		$this->body = $html;
+	}
+
+	public function setFooter($html) {
+		$this->foot = $html;
+	}
+
+	public function draw($side,$raw=false) {
+		$output = '';
+
+		if ($raw)
+			$output .= $this->body;
+
+		else {
+			$output .= sprintf('<table class="%s">',$side);
+
+			if (isset($this->title))
+				$output .= sprintf('<tr><td class="head">%s</td></tr>',$this->title);
+
+			if (isset($this->body))
+				$output .= sprintf('<tr><td>%s</td></tr>',$this->body);
+
+			if (isset($this->footer))
+				$output .= sprintf('<tr><td class="foot">%s</td></tr>',$this->foot);
+
+			$output .= '</table>';
+		}
+
+		return $output;
+	}
+}
+?>
diff --git a/lam/templates/3rdParty/pla/lib/query_functions.php b/lam/templates/3rdParty/pla/lib/query_functions.php
new file mode 100644
index 00000000..de47630f
--- /dev/null
+++ b/lam/templates/3rdParty/pla/lib/query_functions.php
@@ -0,0 +1,22 @@
+<?php
+/**
+ * Classes and functions for searching the LDAP server
+ *
+ * These classes and functions will read our XML search files, for defined
+ * search reports.
+ *
+ * @author The phpLDAPadmin development team
+ * @package phpLDAPadmin
+ */
+
+/**
+ * Query Class
+ *
+ * This class will store all our pre-defined search definitions.
+ *
+ * @package phpLDAPadmin
+ * @subpackage Queries
+ */
+class Queries extends xmlTemplates {
+}
+?>
diff --git a/lam/templates/3rdParty/pla/lib/schema_functions.php b/lam/templates/3rdParty/pla/lib/schema_functions.php
new file mode 100644
index 00000000..efa0cbc2
--- /dev/null
+++ b/lam/templates/3rdParty/pla/lib/schema_functions.php
@@ -0,0 +1,1539 @@
+<?php
+/**
+ * Classes and functions for fetching and parsing schema from an LDAP server.
+ *
+ * @author The phpLDAPadmin development team
+ * @package phpLDAPadmin
+ */
+
+/**
+ * Generic parent class for all schema items. A schema item is
+ * an ObjectClass, an AttributeBype, a MatchingRule, or a Syntax.
+ * All schema items have at least two things in common: An OID
+ * and a description. This class provides an implementation for
+ * these two data.
+ *
+ * @package phpLDAPadmin
+ * @subpackage Schema
+ */
+abstract class SchemaItem {
+	# The schema item's name.
+	protected $name = null;
+	# The OID of this schema item.
+	private $oid = null;
+	# The description of this schema item.
+	protected $description = null;
+	# Boolean value indicating whether this objectClass is obsolete
+	private $is_obsolete = false;
+
+	public function setOID($oid) {
+		if (DEBUG_ENABLED && (($fargs=func_get_args())||$fargs='NOARGS'))
+			debug_log('Entered (%%)',9,1,__FILE__,__LINE__,__METHOD__,$fargs);
+
+		$this->oid = $oid;
+	}
+
+	public function setDescription($desc) {
+		if (DEBUG_ENABLED && (($fargs=func_get_args())||$fargs='NOARGS'))
+			debug_log('Entered (%%)',9,1,__FILE__,__LINE__,__METHOD__,$fargs);
+
+		$this->description = $desc;
+	}
+
+	public function getOID() {
+		if (DEBUG_ENABLED && (($fargs=func_get_args())||$fargs='NOARGS'))
+			debug_log('Entered (%%)',9,1,__FILE__,__LINE__,__METHOD__,$fargs,$this->oid);
+
+		return $this->oid;
+	}
+
+	public function getDescription() {
+		if (DEBUG_ENABLED && (($fargs=func_get_args())||$fargs='NOARGS'))
+			debug_log('Entered (%%)',9,1,__FILE__,__LINE__,__METHOD__,$fargs,$this->description);
+
+		return $this->description;
+	}
+
+	/**
+	 * Gets whether this objectClass is flagged as obsolete by the LDAP server.
+	 */
+	public function getIsObsolete() {
+		if (DEBUG_ENABLED && (($fargs=func_get_args())||$fargs='NOARGS'))
+			debug_log('Entered (%%)',9,1,__FILE__,__LINE__,__METHOD__,$fargs,$this->is_obsolete);
+
+		return $this->is_obsolete;
+	}
+
+	/**
+	 * Return the objects name.
+	 *
+	 * param boolean $lower Return the name in lower case (default)
+	 * @return string The name
+	 */
+	public function getName($lower=true) {
+		if (DEBUG_ENABLED && (($fargs=func_get_args())||$fargs='NOARGS'))
+			debug_log('Entered (%%)',9,1,__FILE__,__LINE__,__METHOD__,$fargs,$this->name);
+
+		return $lower ? strtolower($this->name) : $this->name;
+	}
+}
+
+/**
+ * Represents an LDAP objectClass
+ *
+ * @package phpLDAPadmin
+ * @subpackage Schema
+ */
+class ObjectClass extends SchemaItem {
+	# The server ID that this objectclass belongs to.
+	private $server_id = null;
+	# Array of objectClass names from which this objectClass inherits
+	private $sup_classes = array();
+	# One of STRUCTURAL, ABSTRACT, or AUXILIARY
+	private $type;
+	# Arrays of attribute names that this objectClass requires
+	private $must_attrs = array();
+	# Arrays of attribute names that this objectClass allows, but does not require
+	private $may_attrs = array();
+	# Arrays of attribute names that this objectClass has been forced to MAY attrs, due to configuration
+	private $force_may = array();
+	# Array of objectClasses which inherit from this one (must be set at runtime explicitly by the caller)
+	private $children_objectclasses = array();
+	# The objectclass hierarchy
+	private $hierarchy = array();
+
+	/**
+	 * Creates a new ObjectClass object given a raw LDAP objectClass string.
+	 */
+	public function __construct($class,$server) {
+		if (DEBUG_ENABLED && (($fargs=func_get_args())||$fargs='NOARGS'))
+			debug_log('Entered (%%)',9,0,__FILE__,__LINE__,__METHOD__,$fargs);
+
+		$this->server_id = $server->getIndex();
+		$this->type = $server->getValue('server','schema_oclass_default');
+
+		$strings = preg_split('/[\s,]+/',$class,-1,PREG_SPLIT_DELIM_CAPTURE);
+		$str_count = count($strings);
+
+		for ($i=0; $i < $str_count; $i++) {
+
+			switch ($strings[$i]) {
+				case '(':
+					break;
+
+				case 'NAME':
+					if ($strings[$i+1]!='(') {
+						do {
+							$i++;
+							if (strlen($this->name) == 0)
+								$this->name = $strings[$i];
+							else
+								$this->name .= ' '.$strings[$i];
+
+						} while (! preg_match('/\'$/s',$strings[$i]));
+
+					} else {
+						$i++;
+						do {
+							$i++;
+							if (strlen($this->name) == 0)
+								$this->name = $strings[$i];
+							else
+								$this->name .= ' '.$strings[$i];
+
+						} while (! preg_match('/\'$/s',$strings[$i]));
+
+						do {
+							$i++;
+						} while (! preg_match('/\)+\)?/',$strings[$i]));
+					}
+
+					$this->name = preg_replace('/^\'/','',$this->name);
+					$this->name = preg_replace('/\'$/','',$this->name);
+
+					if (DEBUG_ENABLED)
+						debug_log('Case NAME returned (%s)',8,0,__FILE__,__LINE__,__METHOD__,$this->name);
+					break;
+
+				case 'DESC':
+					do {
+						$i++;
+						if (strlen($this->description) == 0)
+							$this->description=$this->description.$strings[$i];
+						else
+							$this->description=$this->description.' '.$strings[$i];
+
+					} while (! preg_match('/\'$/s',$strings[$i]));
+
+					if (DEBUG_ENABLED)
+						debug_log('Case DESC returned (%s)',8,0,__FILE__,__LINE__,__METHOD__,$this->description);
+					break;
+
+				case 'OBSOLETE':
+					$this->is_obsolete = TRUE;
+
+					if (DEBUG_ENABLED)
+						debug_log('Case OBSOLETE returned (%s)',8,0,__FILE__,__LINE__,__METHOD__,$this->is_obsolete);
+					break;
+
+				case 'SUP':
+					if ($strings[$i+1] != '(') {
+						$i++;
+						array_push($this->sup_classes,preg_replace("/'/",'',$strings[$i]));
+
+					} else {
+						$i++;
+						do {
+							$i++;
+							if ($strings[$i] != '$')
+								array_push($this->sup_classes,preg_replace("/'/",'',$strings[$i]));
+
+						} while (! preg_match('/\)+\)?/',$strings[$i+1]));
+					}
+
+					if (DEBUG_ENABLED)
+						debug_log('Case SUP returned (%s)',8,0,__FILE__,__LINE__,__METHOD__,$this->sup_classes);
+					break;
+
+				case 'ABSTRACT':
+					$this->type = 'abstract';
+
+					if (DEBUG_ENABLED)
+						debug_log('Case ABSTRACT returned (%s)',8,0,__FILE__,__LINE__,__METHOD__,$this->type);
+					break;
+
+				case 'STRUCTURAL':
+					$this->type = 'structural';
+
+					if (DEBUG_ENABLED)
+						debug_log('Case STRUCTURAL returned (%s)',8,0,__FILE__,__LINE__,__METHOD__,$this->type);
+					break;
+
+				case 'AUXILIARY':
+					$this->type = 'auxiliary';
+
+					if (DEBUG_ENABLED)
+						debug_log('Case AUXILIARY returned (%s)',8,0,__FILE__,__LINE__,__METHOD__,$this->type);
+					break;
+
+				case 'MUST':
+					$attrs = array();
+
+					$i = $this->parseList(++$i,$strings,$attrs);
+
+					if (DEBUG_ENABLED)
+						debug_log('parseList returned %d (%s)',8,0,__FILE__,__LINE__,__METHOD__,$i,$attrs);
+
+					foreach ($attrs as $string) {
+						$attr = new ObjectClass_ObjectClassAttribute($string,$this->name);
+
+						if ($server->isForceMay($attr->getName())) {
+							array_push($this->force_may,$attr);
+							array_push($this->may_attrs,$attr);
+
+						} else
+							array_push($this->must_attrs,$attr);
+					}
+
+					if (DEBUG_ENABLED)
+						debug_log('Case MUST returned (%s) (%s)',8,0,__FILE__,__LINE__,__METHOD__,$this->must_attrs,$this->force_may);
+					break;
+
+				case 'MAY':
+					$attrs = array();
+
+					$i = $this->parseList(++$i,$strings,$attrs);
+
+					if (DEBUG_ENABLED)
+						debug_log('parseList returned %d (%s)',8,0,__FILE__,__LINE__,__METHOD__,$i,$attrs);
+
+					foreach ($attrs as $string) {
+						$attr = new ObjectClass_ObjectClassAttribute($string,$this->name);
+						array_push($this->may_attrs,$attr);
+					}
+
+					if (DEBUG_ENABLED)
+						debug_log('Case MAY returned (%s)',8,0,__FILE__,__LINE__,__METHOD__,$this->may_attrs);
+					break;
+
+				default:
+					if (preg_match('/[\d\.]+/i',$strings[$i]) && $i == 1) {
+						$this->setOID($strings[$i]);
+
+						if (DEBUG_ENABLED)
+							debug_log('Case default returned (%s)',8,0,__FILE__,__LINE__,__METHOD__,$this->getOID());
+					}
+					break;
+			}
+		}
+
+		$this->description = preg_replace("/^\'/",'',$this->description);
+		$this->description = preg_replace("/\'$/",'',$this->description);
+
+		if (DEBUG_ENABLED)
+			debug_log('Returning () - NAME (%s), DESCRIPTION (%s), MUST (%s), MAY (%s), FORCE MAY (%s)',9,0,__FILE__,__LINE__,__METHOD__,
+				$this->name,$this->description,$this->must_attrs,$this->may_attrs,$this->force_may);
+	}
+
+	/**
+	 * Parse an LDAP schema list
+	 */
+	private function parseList($i,$strings,&$attrs) {
+		if (DEBUG_ENABLED && (($fargs=func_get_args())||$fargs='NOARGS'))
+			debug_log('Entered (%%)',9,0,__FILE__,__LINE__,__METHOD__,$fargs);
+
+		/*
+		 * A list starts with a ( followed by a list of attributes separated by $ terminated by )
+		 * The first token can therefore be a ( or a (NAME or a (NAME)
+		 * The last token can therefore be a ) or NAME)
+		 * The last token may be terminate by more than one bracket
+		 */
+
+		$string = $strings[$i];
+		if (! preg_match('/^\(/',$string)) {
+			# A bareword only - can be terminated by a ) if the last item
+			if (preg_match('/\)+$/',$string))
+				$string = preg_replace('/\)+$/','',$string);
+
+			array_push($attrs,$string);
+
+		} elseif (preg_match('/^\(.*\)$/',$string)) {
+			$string = preg_replace('/^\(/','',$string);
+			$string = preg_replace('/\)+$/','',$string);
+			array_push($attrs,$string);
+
+		} else {
+			# Handle the opening cases first
+			if ($string == '(') {
+				$i++;
+
+			} elseif (preg_match('/^\(./',$string)) {
+				$string = preg_replace('/^\(/','',$string);
+				array_push($attrs,$string);
+				$i++;
+			}
+
+			# Token is either a name, a $ or a ')'
+			# NAME can be terminated by one or more ')'
+			while (! preg_match('/\)+$/',$strings[$i])) {
+				$string = $strings[$i];
+				if ($string == '$') {
+					$i++;
+					continue;
+				}
+
+				if (preg_match('/\)$/',$string))
+					$string = preg_replace('/\)+$/','',$string);
+				else
+					$i++;
+
+				array_push($attrs,$string);
+			}
+		}
+
+		sort($attrs);
+
+		if (DEBUG_ENABLED)
+			debug_log('Returning (%d,[%s],[%s])',9,0,__FILE__,__LINE__,__METHOD__,$i,$strings,$attrs);
+
+		return $i;
+	}
+
+	/**
+	 * This will return all our parent ObjectClass Objects
+	 */
+	public function getParents() {
+		if (DEBUG_ENABLED && (($fargs=func_get_args())||$fargs='NOARGS'))
+			debug_log('Entered (%%)',9,0,__FILE__,__LINE__,__METHOD__,$fargs);
+
+		if ((count($this->sup_classes) == 1) && ($this->sup_classes[0] == 'top'))
+			return array();
+
+		$server = $_SESSION[APPCONFIG]->getServer($this->server_id);
+		$return = array();
+
+		foreach ($this->sup_classes as $object_class) {
+			array_push($return,$object_class);
+
+			$oc = $server->getSchemaObjectClass($object_class);
+
+			if ($oc)
+				$return = array_merge($return,$oc->getParents());
+		}
+
+		return $return;
+	}
+
+	/**
+	 * Gets an array of AttributeType objects that entries of this ObjectClass must define.
+	 * This differs from getMustAttrNames in that it returns an array of AttributeType objects
+	 *
+	 * @param array $parents An array of ObjectClass objects to use when traversing
+	 *             the inheritance tree. This presents some what of a bootstrapping problem
+	 *             as we must fetch all objectClasses to determine through inheritance which
+	 *             attributes this objectClass requires.
+	 * @return array The array of required AttributeType objects.
+	 *
+	 * @see getMustAttrNames
+	 * @see getMayAttrs
+	 * @see getMayAttrNames
+	 */
+	public function getMustAttrs($parents=false) {
+		if (DEBUG_ENABLED && (($fargs=func_get_args())||$fargs='NOARGS'))
+			debug_log('Entered (%%)',9,0,__FILE__,__LINE__,__METHOD__,$fargs);
+
+		if (! $parents)
+			return $this->must_attrs;
+
+		$server = $_SESSION[APPCONFIG]->getServer($this->server_id);
+		$attrs = $this->must_attrs;
+
+		foreach ($this->getParents() as $sup_class) {
+			$sc = $server->getSchemaObjectClass($sup_class);
+			$attrs = array_merge($attrs,$sc->getMustAttrs());
+		}
+
+		masort($attrs,'name,source');
+
+		# Remove any duplicates
+		foreach ($attrs as $index => $attr)
+			if (isset($allattr[$attr->getName()]))
+				unset($attrs[$index]);
+			else
+				$allattr[$attr->getName()] = 1;
+
+		return $attrs;
+	}
+
+	/**
+	 * Gets an array of AttributeType objects that entries of this ObjectClass may define.
+	 * This differs from getMayAttrNames in that it returns an array of AttributeType objects
+	 *
+	 * @param array $parents An array of ObjectClass objects to use when traversing
+	 *             the inheritance tree. This presents some what of a bootstrapping problem
+	 *             as we must fetch all objectClasses to determine through inheritance which
+	 *             attributes this objectClass provides.
+	 * @return array The array of allowed AttributeType objects.
+	 *
+	 * @see getMustAttrNames
+	 * @see getMustAttrs
+	 * @see getMayAttrNames
+	 * @see AttributeType
+	 */
+	public function getMayAttrs($parents=false) {
+		if (DEBUG_ENABLED && (($fargs=func_get_args())||$fargs='NOARGS'))
+			debug_log('Entered (%%)',9,0,__FILE__,__LINE__,__METHOD__,$fargs);
+
+		if (! $parents)
+			return $this->may_attrs;
+
+		$server = $_SESSION[APPCONFIG]->getServer($this->server_id);
+		$attrs = $this->may_attrs;
+
+		foreach ($this->getParents() as $sup_class) {
+			$sc = $server->getSchemaObjectClass($sup_class);
+			$attrs = array_merge($attrs,$sc->getMayAttrs());
+		}
+
+		masort($attrs,'name,source');
+
+		# Remove any duplicates
+		foreach ($attrs as $index => $attr)
+			if (isset($allattr[$attr->name]))
+				unset($attrs[$index]);
+			else
+				$allattr[$attr->name] = 1;
+
+		return $attrs;
+	}
+
+	public function getForceMayAttrs() {
+		if (DEBUG_ENABLED && (($fargs=func_get_args())||$fargs='NOARGS'))
+			debug_log('Entered (%%)',9,0,__FILE__,__LINE__,__METHOD__,$fargs);
+
+		return $this->force_may;
+	}
+
+	/**
+	 * Gets an array of attribute names (strings) that entries of this ObjectClass must define.
+	 * This differs from getMustAttrs in that it returns an array of strings rather than
+	 * array of AttributeType objects
+	 *
+	 * @param array $parents An array of ObjectClass objects to use when traversing
+	 *             the inheritance tree. This presents some what of a bootstrapping problem
+	 *             as we must fetch all objectClasses to determine through inheritance which
+	 *             attributes this objectClass provides.
+	 * @return array The array of allowed attribute names (strings).
+	 *
+	 * @see getMustAttrs
+	 * @see getMayAttrs
+	 * @see getMayAttrNames
+	 */
+	public function getMustAttrNames($parents=false) {
+		if (DEBUG_ENABLED && (($fargs=func_get_args())||$fargs='NOARGS'))
+			debug_log('Entered (%%)',9,0,__FILE__,__LINE__,__METHOD__,$fargs);
+
+		$attr_names = array();
+
+		foreach ($this->getMustAttrs($parents) as $attr)
+			array_push($attr_names,$attr->getName());
+
+		return $attr_names;
+	}
+
+	/**
+	 * Gets an array of attribute names (strings) that entries of this ObjectClass must define.
+	 * This differs from getMayAttrs in that it returns an array of strings rather than
+	 * array of AttributeType objects
+	 *
+	 * @param array $parents An array of ObjectClass objects to use when traversing
+	 *             the inheritance tree. This presents some what of a bootstrapping problem
+	 *             as we must fetch all objectClasses to determine through inheritance which
+	 *             attributes this objectClass provides.
+	 * @return array The array of allowed attribute names (strings).
+	 *
+	 * @see getMustAttrs
+	 * @see getMayAttrs
+	 * @see getMustAttrNames
+	 */
+	public function getMayAttrNames($parents=false) {
+		if (DEBUG_ENABLED && (($fargs=func_get_args())||$fargs='NOARGS'))
+			debug_log('Entered (%%)',9,0,__FILE__,__LINE__,__METHOD__,$fargs);
+
+		$attr_names = array();
+
+		foreach ($this->getMayAttrs($parents) as $attr)
+			array_push($attr_names,$attr->getName());
+
+		return $attr_names;
+	}
+
+	/**
+	 * Adds an objectClass to the list of objectClasses that inherit
+	 * from this objectClass.
+	 *
+	 * @param String $name The name of the objectClass to add
+	 * @return boolean Returns true on success or false on failure (objectclass already existed for example)
+	 */
+	public function addChildObjectClass($name) {
+		if (DEBUG_ENABLED && (($fargs=func_get_args())||$fargs='NOARGS'))
+			debug_log('Entered (%%)',9,0,__FILE__,__LINE__,__METHOD__,$fargs);
+
+		$name = trim($name);
+
+		foreach ($this->children_objectclasses as $existing_objectclass)
+			if (strcasecmp($name,$existing_objectclass) == 0)
+				return false;
+
+		array_push($this->children_objectclasses,$name);
+	}
+
+	/**
+	 * Returns the array of objectClass names which inherit from this objectClass.
+	 *
+	 * @return Array Names of objectClasses which inherit from this objectClass.
+	 */
+	public function getChildObjectClasses() {
+		if (DEBUG_ENABLED && (($fargs=func_get_args())||$fargs='NOARGS'))
+			debug_log('Entered (%%)',9,0,__FILE__,__LINE__,__METHOD__,$fargs);
+
+		return $this->children_objectclasses;
+	}
+
+	/**
+	 * Gets the objectClass names from which this objectClass inherits.
+	 *
+	 * @return array An array of objectClass names (strings)
+	 */
+	public function getSupClasses() {
+		if (DEBUG_ENABLED && (($fargs=func_get_args())||$fargs='NOARGS'))
+			debug_log('Entered (%%)',9,0,__FILE__,__LINE__,__METHOD__,$fargs);
+
+		return $this->sup_classes;
+	}
+
+	/**
+	 * Return if this objectClass is related to $oclass
+	 *
+	 * @param array ObjectClasses that this attribute may be related to
+	 */
+	public function isRelated($oclass) {
+		if (DEBUG_ENABLED && (($fargs=func_get_args())||$fargs='NOARGS'))
+			debug_log('Entered (%%)',9,0,__FILE__,__LINE__,__METHOD__,$fargs);
+
+		# If I am in the array, we'll just return false
+		if (in_array_ignore_case($this->name,$oclass))
+			return false;
+
+		$server = $_SESSION[APPCONFIG]->getServer($this->server_id);
+
+		foreach ($oclass as $object_class) {
+			$oc = $server->getSchemaObjectClass($object_class);
+
+			if ($oc->isStructural() && in_array_ignore_case($this->getName(),$oc->getParents()))
+				return true;
+		}
+
+		return false;
+	}
+
+	/**
+	 * Gets the type of this objectClass: STRUCTURAL, ABSTRACT, or AUXILIARY.
+	 */
+	public function getType() {
+		if (DEBUG_ENABLED && (($fargs=func_get_args())||$fargs='NOARGS'))
+			debug_log('Entered (%%)',9,1,__FILE__,__LINE__,__METHOD__,$fargs,$this->type);
+
+		return $this->type;
+	}
+
+	/**
+	 * Adds the specified array of attributes to this objectClass' list of
+	 * MUST attributes. The resulting array of must attributes will contain
+	 * unique members.
+	 *
+	 * @param array $attr An array of attribute names (strings) to add.
+	 */
+	private function addMustAttrs($attr) {
+		if (DEBUG_ENABLED && (($fargs=func_get_args())||$fargs='NOARGS'))
+			debug_log('Entered (%%)',9,0,__FILE__,__LINE__,__METHOD__,$fargs);
+
+		if (! is_array($attr) || ! count($attr))
+			return;
+
+		$this->must_attrs = array_values(array_unique(array_merge($this->must_attrs,$attr)));
+	}
+
+	/**
+	 * Behaves identically to addMustAttrs, but it operates on the MAY
+	 * attributes of this objectClass.
+	 *
+	 * @param array $attr An array of attribute names (strings) to add.
+	 */
+	private function addMayAttrs($attr) {
+		if (DEBUG_ENABLED && (($fargs=func_get_args())||$fargs='NOARGS'))
+			debug_log('Entered (%%)',9,0,__FILE__,__LINE__,__METHOD__,$fargs);
+
+		if (! is_array($attr) || ! count($attr))
+			return;
+
+		$this->may_attrs = array_values(array_unique(array_merge($this->may_attrs,$attr)));
+	}
+
+	/**
+	 * Determine if an array is listed in the force_may attrs
+	 */
+	public function isForceMay($attr) {
+		if (DEBUG_ENABLED && (($fargs=func_get_args())||$fargs='NOARGS'))
+			debug_log('Entered (%%)',9,0,__FILE__,__LINE__,__METHOD__,$fargs);
+
+		foreach ($this->force_may as $forcemay)
+			if ($forcemay->getName() == $attr)
+				return true;
+
+		return false;
+	}
+
+	public function isStructural() {
+		if (DEBUG_ENABLED && (($fargs=func_get_args())||$fargs='NOARGS'))
+			debug_log('Entered (%%)',9,0,__FILE__,__LINE__,__METHOD__,$fargs);
+
+		if ($this->type == 'structural')
+			return true;
+		else
+			return false;
+	}
+}
+
+/**
+ * A simple class for representing AttributeTypes used only by the ObjectClass class.
+ * Users should never instantiate this class. It represents an attribute internal to
+ * an ObjectClass. If PHP supported inner-classes and variable permissions, this would
+ * be interior to class ObjectClass and flagged private. The reason this class is used
+ * and not the "real" class AttributeType is because this class supports the notion of
+ * a "source" objectClass, meaning that it keeps track of which objectClass originally
+ * specified it. This class is therefore used by the class ObjectClass to determine
+ * inheritance.
+ *
+ * @package phpLDAPadmin
+ * @subpackage Schema
+ */
+class ObjectClass_ObjectClassAttribute {
+ 	# This Attribute's name (needs to be public, as we sort on it with masort).
+	public $name;
+	# This Attribute's root (needs to be public, as we sort on it with masort).
+	public $source;
+
+	/**
+	 * Creates a new ObjectClass_ObjectClassAttribute with specified name and source objectClass.
+	 *
+	 * @param string $name the name of the new attribute.
+	 * @param string $source the name of the ObjectClass which specifies this attribute.
+	 */
+	public function __construct($name,$source) {
+		if (DEBUG_ENABLED && (($fargs=func_get_args())||$fargs='NOARGS'))
+			debug_log('Entered (%%)',9,0,__FILE__,__LINE__,__METHOD__,$fargs);
+
+		$this->name = $name;
+		$this->source = $source;
+	}
+
+	# Gets this attribute's name
+	public function getName($lower=true) {
+		if (DEBUG_ENABLED && (($fargs=func_get_args())||$fargs='NOARGS'))
+			debug_log('Entered (%%)',9,1,__FILE__,__LINE__,__METHOD__,$fargs,$this->name);
+
+		return $lower ? strtolower($this->name) : $this->name;
+	}
+
+	# Gets the name of the ObjectClass which originally specified this attribute.
+	public function getSource() {
+		if (DEBUG_ENABLED && (($fargs=func_get_args())||$fargs='NOARGS'))
+			debug_log('Entered (%%)',9,1,__FILE__,__LINE__,__METHOD__,$fargs,$this->source);
+
+		return $this->source;
+	}
+}
+
+/**
+ * Represents an LDAP AttributeType
+ *
+ * @package phpLDAPadmin
+ * @subpackage Schema
+ */
+class AttributeType extends SchemaItem {
+	# The attribute from which this attribute inherits (if any)
+	private $sup_attribute = null;
+	# The equality rule used
+	private $equality = null;
+	# The ordering of the attributeType
+	private $ordering = null;
+	# Boolean: supports substring matching?
+	private $sub_str = null;
+	# The full syntax string, ie 1.2.3.4{16}
+	private $syntax = null;
+	private $syntax_oid = null;
+	# boolean: is single valued only?
+	private $is_single_value = false;
+	# boolean: is collective?
+	private $is_collective = false;
+	# boolean: can use modify?
+	private $is_no_user_modification = false;
+	# The usage string set by the LDAP schema
+	private $usage = null;
+	# An array of alias attribute names, strings
+	private $aliases = array();
+	# The max number of characters this attribute can be
+	private $max_length = null;
+	# A string description of the syntax type (taken from the LDAPSyntaxes)
+	private $type = null;
+	# An array of objectClasses which use this attributeType (must be set by caller)
+	private $used_in_object_classes = array();
+	# A list of object class names that require this attribute type.
+	private $required_by_object_classes = array();
+	# This attribute has been forced a MAY attribute by the configuration.
+	private $forced_as_may = false;
+
+	/**
+	 * Creates a new AttributeType object from a raw LDAP AttributeType string.
+	 */
+	public function __construct($attr) {
+		if (DEBUG_ENABLED && (($fargs=func_get_args())||$fargs='NOARGS'))
+			debug_log('Entered (%%)',9,0,__FILE__,__LINE__,__METHOD__,$fargs);
+
+		$strings = preg_split('/[\s,]+/',$attr,-1,PREG_SPLIT_DELIM_CAPTURE);
+
+		for($i=0; $i<count($strings); $i++) {
+
+			switch($strings[$i]) {
+				case '(':
+					break;
+
+				case 'NAME':
+					# Some schema's return a (' instead of a ( '
+					if ($strings[$i+1] != '(' && ! preg_match('/^\(/',$strings[$i+1])) {
+						do {
+							$i++;
+							if (strlen($this->name)==0)
+								$this->name = $strings[$i];
+							else
+								$this->name .= ' '.$strings[$i];
+
+						} while (! preg_match("/\'$/s",$strings[$i]));
+
+						# This attribute has no aliases
+						$this->aliases = array();
+
+					} else {
+						$i++;
+						do {
+							# In case we came here becaues of a ('
+							if (preg_match('/^\(/',$strings[$i]))
+								$strings[$i] = preg_replace('/^\(/','',$strings[$i]);
+							else
+								$i++;
+
+							if (strlen($this->name) == 0)
+ 								$this->name = $strings[$i];
+							else
+								$this->name .= ' '.$strings[$i];
+
+						} while (! preg_match("/\'$/s",$strings[$i]));
+
+						# Add alias names for this attribute
+						while ($strings[++$i] != ')') {
+							$alias = $strings[$i];
+							$alias = preg_replace("/^\'/",'',$alias);
+							$alias = preg_replace("/\'$/",'',$alias);
+							$this->addAlias($alias);
+						}
+					}
+
+					if (DEBUG_ENABLED)
+						debug_log('Case NAME returned (%s) (%s)',8,0,__FILE__,__LINE__,__METHOD__,$this->name,$this->aliases);
+					break;
+
+				case 'DESC':
+					do {
+						$i++;
+						if (strlen($this->description)==0)
+							$this->description=$this->description.$strings[$i];
+						else
+							$this->description=$this->description.' '.$strings[$i];
+					} while (! preg_match("/\'$/s",$strings[$i]));
+
+					if (DEBUG_ENABLED)
+						debug_log('Case DESC returned (%s)',8,0,__FILE__,__LINE__,__METHOD__,$this->description);
+					break;
+
+				case 'OBSOLETE':
+					$this->is_obsolete = TRUE;
+
+					if (DEBUG_ENABLED)
+						debug_log('Case OBSOLETE returned (%s)',8,0,__FILE__,__LINE__,__METHOD__,$this->is_obsolete);
+					break;
+
+				case 'SUP':
+					$i++;
+					$this->sup_attribute = $strings[$i];
+
+					if (DEBUG_ENABLED)
+						debug_log('Case SUP returned (%s)',8,0,__FILE__,__LINE__,__METHOD__,$this->sup_attribute);
+					break;
+
+				case 'EQUALITY':
+					$i++;
+					$this->equality = $strings[$i];
+
+					if (DEBUG_ENABLED)
+						debug_log('Case EQUALITY returned (%s)',8,0,__FILE__,__LINE__,__METHOD__,$this->equality);
+					break;
+
+				case 'ORDERING':
+					$i++;
+					$this->ordering = $strings[$i];
+
+					if (DEBUG_ENABLED)
+						debug_log('Case ORDERING returned (%s)',8,0,__FILE__,__LINE__,__METHOD__,$this->ordering);
+					break;
+
+				case 'SUBSTR':
+					$i++;
+					$this->sub_str = $strings[$i];
+
+					if (DEBUG_ENABLED)
+						debug_log('Case SUBSTR returned (%s)',8,0,__FILE__,__LINE__,__METHOD__,$this->sub_str);
+					break;
+
+				case 'SYNTAX':
+					$i++;
+					$this->syntax = $strings[$i];
+					$this->syntax_oid = preg_replace('/{\d+}$/','',$this->syntax);
+
+					# Does this SYNTAX string specify a max length (ie, 1.2.3.4{16})
+					if (preg_match('/{(\d+)}$/',$this->syntax,$this->max_length))
+						$this->max_length = $this->max_length[1];
+					else
+						$this->max_length = null;
+
+					if ($i < count($strings) - 1 && $strings[$i+1] == '{') {
+						do {
+							$i++;
+							$this->name .= ' '.$strings[$i];
+						} while ($strings[$i] != '}');
+					}
+
+					if (DEBUG_ENABLED)
+						debug_log('Case SYNTAX returned (%s) (%s) (%s)',8,0,__FILE__,__LINE__,__METHOD__,
+							$this->syntax,$this->syntax_oid,$this->max_length);
+					break;
+
+				case 'SINGLE-VALUE':
+					$this->is_single_value = TRUE;
+					if (DEBUG_ENABLED)
+						debug_log('Case SINGLE-VALUE returned (%s)',8,0,__FILE__,__LINE__,__METHOD__,$this->is_single_value);
+					break;
+
+				case 'COLLECTIVE':
+					$this->is_collective = TRUE;
+
+					if (DEBUG_ENABLED)
+						debug_log('Case COLLECTIVE returned (%s)',8,0,__FILE__,__LINE__,__METHOD__,$this->is_collective);
+					break;
+
+				case 'NO-USER-MODIFICATION':
+					$this->is_no_user_modification = TRUE;
+
+					if (DEBUG_ENABLED)
+						debug_log('Case NO-USER-MODIFICATION returned (%s)',8,0,__FILE__,__LINE__,__METHOD__,$this->is_no_user_modification);
+					break;
+
+				case 'USAGE':
+					$i++;
+					$this->usage = $strings[$i];
+
+					if (DEBUG_ENABLED)
+						debug_log('Case USAGE returned (%s)',8,0,__FILE__,__LINE__,__METHOD__,$this->usage);
+					break;
+
+				default:
+					if (preg_match('/[\d\.]+/i',$strings[$i]) && $i == 1) {
+						$this->setOID($strings[$i]);
+
+						if (DEBUG_ENABLED)
+							debug_log('Case default returned (%s)',8,0,__FILE__,__LINE__,__METHOD__,$this->getOID());
+					}
+			}
+		}
+
+		$this->name = preg_replace("/^\'/",'',$this->name);
+		$this->name = preg_replace("/\'$/",'',$this->name);
+		$this->description = preg_replace("/^\'/",'',$this->description);
+		$this->description = preg_replace("/\'$/",'',$this->description);
+		$this->syntax = preg_replace("/^\'/",'',$this->syntax);
+		$this->syntax = preg_replace("/\'$/",'',$this->syntax);
+		$this->syntax_oid = preg_replace("/^\'/",'',$this->syntax_oid);
+		$this->syntax_oid = preg_replace("/\'$/",'',$this->syntax_oid);
+		$this->sup_attribute = preg_replace("/^\'/",'',$this->sup_attribute);
+		$this->sup_attribute = preg_replace("/\'$/",'',$this->sup_attribute);
+
+		if (DEBUG_ENABLED)
+			debug_log('Returning ()',9,0,__FILE__,__LINE__,__METHOD__);
+	}
+
+	/**
+	 * Gets this attribute's usage string as defined by the LDAP server
+	 *
+	 * @return string
+	 */
+	public function getUsage() {
+		if (DEBUG_ENABLED && (($fargs=func_get_args())||$fargs='NOARGS'))
+			debug_log('Entered (%%)',9,1,__FILE__,__LINE__,__METHOD__,$fargs,$this->usage);
+
+		return $this->usage;
+	}
+
+	/**
+	 * Gets this attribute's parent attribute (if any). If this attribute does not
+	 * inherit from another attribute, null is returned.
+	 *
+	 * @return string
+	 */
+	public function getSupAttribute() {
+		if (DEBUG_ENABLED && (($fargs=func_get_args())||$fargs='NOARGS'))
+			debug_log('Entered (%%)',9,1,__FILE__,__LINE__,__METHOD__,$fargs,$this->sup_attribute);
+
+		return $this->sup_attribute;
+	}
+
+	/**
+	 * Gets this attribute's equality string
+	 *
+	 * @return string
+	 */
+	public function getEquality() {
+		if (DEBUG_ENABLED && (($fargs=func_get_args())||$fargs='NOARGS'))
+			debug_log('Entered (%%)',9,1,__FILE__,__LINE__,__METHOD__,$fargs,$this->equality);
+
+		return $this->equality;
+	}
+
+	/**
+	 * Gets this attribute's ordering specification.
+	 *
+	 * @return string
+	 */
+	public function getOrdering() {
+		if (DEBUG_ENABLED && (($fargs=func_get_args())||$fargs='NOARGS'))
+			debug_log('Entered (%%)',9,1,__FILE__,__LINE__,__METHOD__,$fargs,$this->ordering);
+
+		return $this->ordering;
+	}
+
+	/**
+	 * Gets this attribute's substring matching specification
+	 *
+	 * @return string
+	 */
+	public function getSubstr() {
+		if (DEBUG_ENABLED && (($fargs=func_get_args())||$fargs='NOARGS'))
+			debug_log('Entered (%%)',9,1,__FILE__,__LINE__,__METHOD__,$fargs,$this->sub_str);
+
+		return $this->sub_str;
+	}
+
+	/**
+	 * Gets the names of attributes that are an alias for this attribute (if any).
+	 *
+	 * @return array An array of names of attributes which alias this attribute or
+	 *          an empty array if no attribute aliases this object.
+	 */
+	public function getAliases() {
+		if (DEBUG_ENABLED && (($fargs=func_get_args())||$fargs='NOARGS'))
+			debug_log('Entered (%%)',9,1,__FILE__,__LINE__,__METHOD__,$fargs,$this->aliases);
+
+		return $this->aliases;
+	}
+
+	/**
+	 * Returns whether the specified attribute is an alias for this one (based on this attribute's alias list).
+	 *
+	 * @param string $attr_name The name of the attribute to check.
+	 * @return boolean True if the specified attribute is an alias for this one, or false otherwise.
+	 */
+	public function isAliasFor($attr_name) {
+		if (DEBUG_ENABLED && (($fargs=func_get_args())||$fargs='NOARGS'))
+			debug_log('Entered (%%)',9,0,__FILE__,__LINE__,__METHOD__,$fargs);
+
+		foreach ($this->aliases as $alias_attr_name)
+			if (strcasecmp($alias_attr_name,$attr_name) == 0)
+				return true;
+
+		return false;
+	}
+
+	/**
+	 * Gets this attribute's raw syntax string (ie: "1.2.3.4{16}").
+	 *
+	 * @return string The raw syntax string
+	 */
+	public function getSyntaxString() {
+		if (DEBUG_ENABLED && (($fargs=func_get_args())||$fargs='NOARGS'))
+			debug_log('Entered (%%)',9,1,__FILE__,__LINE__,__METHOD__,$fargs,$this->syntax);
+
+		return $this->syntax;
+	}
+
+	/**
+	 * Gets this attribute's syntax OID. Differs from getSyntaxString() in that this
+	 * function only returns the actual OID with any length specification removed.
+	 * Ie, if the syntax string is "1.2.3.4{16}", this function only retruns
+	 * "1.2.3.4".
+	 *
+	 * @return string The syntax OID string.
+	 */
+	public function getSyntaxOID() {
+		if (DEBUG_ENABLED && (($fargs=func_get_args())||$fargs='NOARGS'))
+			debug_log('Entered (%%)',9,1,__FILE__,__LINE__,__METHOD__,$fargs,$this->syntax_oid);
+
+		return $this->syntax_oid;
+	}
+
+	/**
+	 * Gets this attribute's the maximum length. If no maximum is defined by the LDAP server, null is returned.
+	 *
+	 * @return int The maximum length (in characters) of this attribute or null if no maximum is specified.
+	 */
+	public function getMaxLength() {
+		if (DEBUG_ENABLED && (($fargs=func_get_args())||$fargs='NOARGS'))
+			debug_log('Entered (%%)',9,1,__FILE__,__LINE__,__METHOD__,$fargs,$this->max_length);
+
+		return $this->max_length;
+	}
+
+	/**
+	 * Gets whether this attribute is single-valued. If this attribute only supports single values, true
+	 * is returned. If this attribute supports multiple values, false is returned.
+	 *
+	 * @return boolean Returns true if this attribute is single-valued or false otherwise.
+	 */
+	public function getIsSingleValue() {
+		if (DEBUG_ENABLED && (($fargs=func_get_args())||$fargs='NOARGS'))
+			debug_log('Entered (%%)',9,1,__FILE__,__LINE__,__METHOD__,$fargs,$this->is_single_value);
+
+		return $this->is_single_value;
+	}
+
+	/**
+	 * Sets whether this attribute is single-valued.
+	 *
+	 * @param boolean $is
+	 */
+	public function setIsSingleValue($is) {
+		if (DEBUG_ENABLED && (($fargs=func_get_args())||$fargs='NOARGS'))
+			debug_log('Entered (%%)',9,1,__FILE__,__LINE__,__METHOD__,$fargs);
+
+		$this->is_single_value = $is;
+	}
+
+	/**
+	 * Gets whether this attribute is collective.
+	 *
+	 * @return boolean Returns true if this attribute is collective and false otherwise.
+	 */
+	public function getIsCollective() {
+		if (DEBUG_ENABLED && (($fargs=func_get_args())||$fargs='NOARGS'))
+			debug_log('Entered (%%)',9,1,__FILE__,__LINE__,__METHOD__,$fargs,$this->is_collective);
+
+		return $this->is_collective;
+	}
+
+	/**
+	 * Gets whether this attribute is not modifiable by users.
+	 *
+	 * @return boolean Returns true if this attribute is not modifiable by users.
+	 */
+	public function getIsNoUserModification() {
+		if (DEBUG_ENABLED && (($fargs=func_get_args())||$fargs='NOARGS'))
+			debug_log('Entered (%%)',9,1,__FILE__,__LINE__,__METHOD__,$fargs,$this->is_no_user_modification);
+
+		return $this->is_no_user_modification;
+	}
+
+	/**
+	 * Gets this attribute's type
+	 *
+	 * @return string The attribute's type.
+	 */
+	public function getType() {
+		if (DEBUG_ENABLED && (($fargs=func_get_args())||$fargs='NOARGS'))
+			debug_log('Entered (%%)',9,1,__FILE__,__LINE__,__METHOD__,$fargs,$this->type);
+
+		return $this->type;
+	}
+
+	/**
+	 * Removes an attribute name from this attribute's alias array.
+	 *
+	 * @param string $remove_alias_name The name of the attribute to remove.
+	 * @return boolean true on success or false on failure (ie, if the specified
+	 *           attribute name is not found in this attribute's list of aliases)
+	 */
+	public function removeAlias($remove_alias_name) {
+		if (DEBUG_ENABLED && (($fargs=func_get_args())||$fargs='NOARGS'))
+			debug_log('Entered (%%)',9,0,__FILE__,__LINE__,__METHOD__,$fargs);
+
+		foreach ($this->aliases as $i => $alias_name) {
+
+			if (strcasecmp($alias_name,$remove_alias_name) == 0) {
+				unset($this->aliases[$i]);
+
+				$this->aliases = array_values($this->aliases);
+				return true;
+			}
+		}
+		return false;
+	}
+
+	/**
+	 * Adds an attribute name to the alias array.
+	 *
+	 * @param string $alias The name of a new attribute to add to this attribute's list of aliases.
+	 */
+	public function addAlias($alias) {
+		if (DEBUG_ENABLED && (($fargs=func_get_args())||$fargs='NOARGS'))
+			debug_log('Entered (%%)',9,0,__FILE__,__LINE__,__METHOD__,$fargs);
+
+		array_push($this->aliases,$alias);
+	}
+
+	/**
+	 * Sets this attriute's name.
+	 *
+	 * @param string $name The new name to give this attribute.
+	 */
+	public function setName($name) {
+		if (DEBUG_ENABLED && (($fargs=func_get_args())||$fargs='NOARGS'))
+			debug_log('Entered (%%)',9,1,__FILE__,__LINE__,__METHOD__,$fargs);
+
+		$this->name = $name;
+	}
+
+	/**
+	 * Sets this attriute's SUP attribute (ie, the attribute from which this attribute inherits).
+	 *
+	 * @param string $attr The name of the new parent (SUP) attribute
+	 */
+	public function setSupAttribute($attr) {
+		if (DEBUG_ENABLED && (($fargs=func_get_args())||$fargs='NOARGS'))
+			debug_log('Entered (%%)',9,1,__FILE__,__LINE__,__METHOD__,$fargs);
+
+		$this->sup_attribute = $attr;
+	}
+
+	/**
+	 * Sets this attribute's list of aliases.
+	 *
+	 * @param array $aliases The array of alias names (strings)
+	 */
+	public function setAliases($aliases) {
+		if (DEBUG_ENABLED && (($fargs=func_get_args())||$fargs='NOARGS'))
+			debug_log('Entered (%%)',9,1,__FILE__,__LINE__,__METHOD__,$fargs);
+
+		$this->aliases = $aliases;
+	}
+
+	/**
+	 * Sets this attribute's type.
+	 *
+	 * @param string $type The new type.
+	 */
+	public function setType($type) {
+		if (DEBUG_ENABLED && (($fargs=func_get_args())||$fargs='NOARGS'))
+			debug_log('Entered (%%)',9,1,__FILE__,__LINE__,__METHOD__,$fargs);
+
+		$this->type = $type;
+	}
+
+	/**
+	 * Adds an objectClass name to this attribute's list of "used in" objectClasses,
+	 * that is the list of objectClasses which provide this attribute.
+	 *
+	 * @param string $name The name of the objectClass to add.
+	 */
+	public function addUsedInObjectClass($name) {
+		if (DEBUG_ENABLED && (($fargs=func_get_args())||$fargs='NOARGS'))
+			debug_log('Entered (%%)',9,0,__FILE__,__LINE__,__METHOD__,$fargs);
+
+		foreach ($this->used_in_object_classes as $used_in_object_class) {
+			if (DEBUG_ENABLED)
+				debug_log('Checking (%s) with (%s)',8,0,__FILE__,__LINE__,__METHOD__,$used_in_object_class,$name);
+
+			if (strcasecmp($used_in_object_class,$name) == 0)
+				return false;
+		}
+
+		array_push($this->used_in_object_classes,$name);
+	}
+
+	/**
+	 * Gets the list of "used in" objectClasses, that is the list of objectClasses
+	 * which provide this attribute.
+	 *
+	 * @return array An array of names of objectclasses (strings) which provide this attribute
+	 */
+	public function getUsedInObjectClasses() {
+		if (DEBUG_ENABLED && (($fargs=func_get_args())||$fargs='NOARGS'))
+			debug_log('Entered (%%)',9,1,__FILE__,__LINE__,__METHOD__,$fargs,$this->used_in_object_classes);
+
+		return $this->used_in_object_classes;
+	}
+
+	/**
+	 * Adds an objectClass name to this attribute's list of "required by" objectClasses,
+	 * that is the list of objectClasses which must have this attribute.
+	 *
+	 * @param string $name The name of the objectClass to add.
+	 */
+	public function addRequiredByObjectClass($name) {
+		if (DEBUG_ENABLED && (($fargs=func_get_args())||$fargs='NOARGS'))
+			debug_log('Entered (%%)',9,0,__FILE__,__LINE__,__METHOD__,$fargs);
+
+		foreach ($this->required_by_object_classes as $required_by_object_class)
+			if (strcasecmp($required_by_object_class,$name) == 0)
+				return false;
+
+		array_push($this->required_by_object_classes,$name);
+	}
+
+	/**
+	 * Gets the list of "required by" objectClasses, that is the list of objectClasses
+	 * which provide must have attribute.
+	 *
+	 * @return array An array of names of objectclasses (strings) which provide this attribute
+	 */
+	public function getRequiredByObjectClasses() {
+		if (DEBUG_ENABLED && (($fargs=func_get_args())||$fargs='NOARGS'))
+			debug_log('Entered (%%)',9,1,__FILE__,__LINE__,__METHOD__,$fargs,$this->required_by_object_classes);
+
+		return $this->required_by_object_classes;
+	}
+
+	/**
+	 * This function will mark this attribute as a forced MAY attribute
+	 */
+	public function setForceMay() {
+		if (DEBUG_ENABLED && (($fargs=func_get_args())||$fargs='NOARGS'))
+			debug_log('Entered (%%)',9,1,__FILE__,__LINE__,__METHOD__,$fargs);
+
+		$this->forced_as_may = true;
+	}
+
+	public function isForceMay() {
+		if (DEBUG_ENABLED && (($fargs=func_get_args())||$fargs='NOARGS'))
+			debug_log('Entered (%%)',9,1,__FILE__,__LINE__,__METHOD__,$fargs,$this->forced_as_may);
+
+		return $this->forced_as_may;
+	}
+}
+
+/**
+ * Represents an LDAP Syntax
+ *
+ * @package phpLDAPadmin
+ * @subpackage Schema
+ */
+class Syntax extends SchemaItem {
+	/**
+	 * Creates a new Syntax object from a raw LDAP syntax string.
+	 */
+	public function __construct($class) {
+		if (DEBUG_ENABLED && (($fargs=func_get_args())||$fargs='NOARGS'))
+			debug_log('Entered (%%)',9,0,__FILE__,__LINE__,__METHOD__,$fargs);
+
+		$strings = preg_split('/[\s,]+/',$class,-1,PREG_SPLIT_DELIM_CAPTURE);
+
+		for($i=0; $i<count($strings); $i++) {
+			switch($strings[$i]) {
+				case '(':
+					break;
+
+				case 'DESC':
+					do {
+						$i++;
+						if (strlen($this->description) == 0)
+							$this->description=$this->description.$strings[$i];
+						else
+							$this->description=$this->description.' '.$strings[$i];
+					} while (! preg_match("/\'$/s",$strings[$i]));
+					break;
+
+				default:
+					if (preg_match('/[\d\.]+/i',$strings[$i]) && $i == 1)
+						$this->setOID($strings[$i]);
+			}
+		}
+
+		$this->description = preg_replace("/^\'/",'',$this->description);
+		$this->description = preg_replace("/\'$/",'',$this->description);
+	}
+}
+
+/**
+ * Represents an LDAP MatchingRule
+ *
+ * @package phpLDAPadmin
+ * @subpackage Schema
+ */
+class MatchingRule extends SchemaItem {
+	# This rule's syntax OID
+	private $syntax = null;
+	# An array of attribute names who use this MatchingRule
+	private $used_by_attrs = array();
+
+	/**
+	 * Creates a new MatchingRule object from a raw LDAP MatchingRule string.
+	 */
+	function __construct($strings) {
+		if (DEBUG_ENABLED && (($fargs=func_get_args())||$fargs='NOARGS'))
+			debug_log('Entered (%%)',9,0,__FILE__,__LINE__,__METHOD__,$fargs);
+
+		$strings = preg_split('/[\s,]+/',$strings,-1,PREG_SPLIT_DELIM_CAPTURE);
+
+		for ($i=0; $i<count($strings); $i++) {
+			switch($strings[$i]) {
+				case '(':
+					break;
+
+				case 'NAME':
+					if ($strings[$i+1] != '(') {
+						do {
+							$i++;
+							if (strlen($this->name) == 0)
+								$this->name = $strings[$i];
+						else
+								$this->name .= ' '.$strings[$i];
+						} while (! preg_match("/\'$/s",$strings[$i]));
+
+					} else {
+						$i++;
+						do {
+							$i++;
+							if (strlen($this->name) == 0)
+								$this->name = $strings[$i];
+							else
+								$this->name .= ' '.$strings[$i];
+						} while (! preg_match("/\'$/s",$strings[$i]));
+
+						do {
+							$i++;
+						} while (! preg_match('/\)+\)?/',$strings[$i]));
+					}
+
+					$this->name = preg_replace("/^\'/",'',$this->name);
+					$this->name = preg_replace("/\'$/",'',$this->name);
+					break;
+
+				case 'DESC':
+					do {
+						$i++;
+						if (strlen($this->description)==0)
+							$this->description=$this->description.$strings[$i];
+						else
+							$this->description=$this->description.' '.$strings[$i];
+					} while (! preg_match("/\'$/s",$strings[$i]));
+					break;
+
+				case 'OBSOLETE':
+					$this->is_obsolete = TRUE;
+					break;
+
+				case 'SYNTAX':
+					$this->syntax = $strings[++$i];
+					break;
+
+				default:
+					if (preg_match('/[\d\.]+/i',$strings[$i]) && $i == 1)
+						$this->setOID($strings[$i]);
+			}
+		}
+		$this->description = preg_replace("/^\'/",'',$this->description);
+		$this->description = preg_replace("/\'$/",'',$this->description);
+	}
+
+	/**
+	 * Sets the list of used_by_attrs to the array specified by $attrs;
+	 *
+	 * @param array $attrs The array of attribute names (strings) which use this MatchingRule
+	 */
+	public function setUsedByAttrs($attrs) {
+		if (DEBUG_ENABLED && (($fargs=func_get_args())||$fargs='NOARGS'))
+			debug_log('Entered (%%)',9,1,__FILE__,__LINE__,__METHOD__,$fargs);
+
+		$this->used_by_attrs = $attrs;
+	}
+
+	/**
+	 * Adds an attribute name to the list of attributes who use this MatchingRule
+	 *
+	 * @return true if the attribute was added and false otherwise (already in the list)
+	 */
+	public function addUsedByAttr($attr) {
+		if (DEBUG_ENABLED && (($fargs=func_get_args())||$fargs='NOARGS'))
+			debug_log('Entered (%%)',9,0,__FILE__,__LINE__,__METHOD__,$fargs);
+
+		foreach ($this->used_by_attrs as $attr_name)
+			if (strcasecmp($attr_name,$attr) == 0)
+				return false;
+
+		array_push($this->used_by_attrs,$attr);
+
+		return true;
+	}
+
+	/**
+	 * Gets an array of attribute names (strings) which use this MatchingRule
+	 *
+	 * @return array The array of attribute names (strings).
+	 */
+	public function getUsedByAttrs() {
+		if (DEBUG_ENABLED && (($fargs=func_get_args())||$fargs='NOARGS'))
+			debug_log('Entered (%%)',9,1,__FILE__,__LINE__,__METHOD__,$fargs,$this->used_by_attrs);
+
+		return $this->used_by_attrs;
+	}
+}
+
+/**
+ * Represents an LDAP schema matchingRuleUse entry
+ *
+ * @package phpLDAPadmin
+ * @subpackage Schema
+ */
+class MatchingRuleUse extends SchemaItem {
+	# An array of attribute names who use this MatchingRule
+	private $used_by_attrs = array();
+
+	function __construct($strings) {
+		if (DEBUG_ENABLED && (($fargs=func_get_args())||$fargs='NOARGS'))
+			debug_log('Entered (%%)',9,0,__FILE__,__LINE__,__METHOD__,$fargs);
+
+		$strings = preg_split('/[\s,]+/',$strings,-1,PREG_SPLIT_DELIM_CAPTURE);
+
+		for($i=0; $i<count($strings); $i++) {
+			switch($strings[$i]) {
+				case '(':
+					break;
+
+				case 'NAME':
+					if ($strings[$i+1] != '(') {
+						do {
+							$i++;
+							if (! isset($this->name) || strlen($this->name) == 0)
+								$this->name = $strings[$i];
+							else
+								$this->name .= ' '.$strings[$i];
+
+						} while (! preg_match("/\'$/s",$strings[$i]));
+
+					} else {
+						$i++;
+						do {
+							$i++;
+							if (strlen($this->name) == 0)
+								$this->name = $strings[$i];
+							else
+								$this->name .= ' '.$strings[$i];
+						} while (! preg_match("/\'$/s",$strings[$i]));
+
+						do {
+							$i++;
+						} while (! preg_match('/\)+\)?/',$strings[$i]));
+					}
+
+					$this->name = preg_replace("/^\'/",'',$this->name);
+					$this->name = preg_replace("/\'$/",'',$this->name);
+					break;
+
+				case 'APPLIES':
+					if ($strings[$i+1] != '(') {
+						# Has a single attribute name
+						$i++;
+						$this->used_by_attrs = array($strings[$i]);
+
+					} else {
+						# Has multiple attribute names
+						$i++;
+						while ($strings[$i] != ')') {
+							$i++;
+							$new_attr = $strings[$i];
+							$new_attr = preg_replace("/^\'/",'',$new_attr);
+							$new_attr = preg_replace("/\'$/",'',$new_attr);
+							array_push($this->used_by_attrs,$new_attr);
+							$i++;
+						}
+					}
+					break;
+
+				default:
+					if (preg_match('/[\d\.]+/i',$strings[$i]) && $i == 1)
+						$this->setOID($strings[$i]);
+			}
+		}
+
+		sort($this->used_by_attrs);
+	}
+
+	/**
+	 * Gets an array of attribute names (strings) which use this MatchingRuleUse object.
+	 *
+	 * @return array The array of attribute names (strings).
+	 */
+	public function getUsedByAttrs() {
+		if (DEBUG_ENABLED && (($fargs=func_get_args())||$fargs='NOARGS'))
+			debug_log('Entered (%%)',9,1,__FILE__,__LINE__,__METHOD__,$fargs,$this->used_by_attrs);
+
+		return $this->used_by_attrs;
+	}
+}
+?>
diff --git a/lam/templates/3rdParty/pla/lib/session_functions.php b/lam/templates/3rdParty/pla/lib/session_functions.php
new file mode 100644
index 00000000..809d8893
--- /dev/null
+++ b/lam/templates/3rdParty/pla/lib/session_functions.php
@@ -0,0 +1,31 @@
+<?php
+/**
+ * A collection of functions to handle sessions.
+ *
+ * @author The phpLDAPadmin development team
+ * @package phpLDAPadmin
+ * @subpackage Session
+ */
+
+include_once '../../../../lib/security.inc';
+
+/**
+ * The only function which should be called by a user
+ *
+ * @see common.php
+ * @see APP_SESSION_ID
+ * @return boolean Returns true if the session was started the first time
+ */
+function app_session_start() {
+	if (session_id() != null) return;
+	include_once '../../../../lib/config.inc';
+	include_once '../../../../lib/ldap.inc';
+	startSecureSession();
+	$config_file = CONFDIR.'config.php';
+	$config = check_config($config_file);
+	# If we came via index.php, then set our $config.
+	if (! isset($_SESSION[APPCONFIG]) && isset($config))
+		$_SESSION[APPCONFIG] = $config;
+}
+
+?>
diff --git a/lam/templates/3rdParty/pla/lib/syslog.php b/lam/templates/3rdParty/pla/lib/syslog.php
new file mode 100644
index 00000000..25ca16c1
--- /dev/null
+++ b/lam/templates/3rdParty/pla/lib/syslog.php
@@ -0,0 +1,88 @@
+<?php
+/**
+ * Functions related to syslog logging.
+ *
+ * This program is free software; you can redistribute it and/or
+ * modify it under the terms of the GNU General Public License as
+ * published by the Free Software Foundation; either version 2 of the
+ * License, or (at your option) any later version.
+ *
+ * This program is distributed in the hope that it will be useful, but
+ * WITHOUT ANY WARRANTY; without even the implied warranty of
+ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the GNU
+ * General Public License for more details.
+ *
+ * You should have received a copy of the GNU General Public License
+ * along with this program; if not, write to the Free Software
+ * Foundation, Inc., 59 Temple Place, Suite 330, Boston, MA 02111-1307
+ * USA
+ *
+ * @author Benjamin Drieu <benjamin.drieu@fr.alcove.com> and AlcĂ´ve
+ * @package phpLDAPadmin
+ */
+
+# If config_default.php hasnt been called yet, then return.
+if (! defined('APPCONFIG') || ! isset($_SESSION[APPCONFIG]))
+	return;
+
+# Initialize syslog
+if ($_SESSION[APPCONFIG]->getValue('debug','syslog') && function_exists('syslog')) {
+	openlog('phpldapadmin',LOG_ODELAY,LOG_DAEMON);
+}
+
+/**
+ * Verify that syslog logging is activated in the config via the
+ * debug->syslog variable and does a call to the syslog() function is it
+ * is true.
+ *
+ * @param emergency	Syslog emergency.
+ * @param log_string String to log.
+ */
+function syslog_msg($emergency,$log_string) {
+	if (! function_exists('syslog') || ! isset($_SESSION[APPCONFIG]) || ! $_SESSION[APPCONFIG]->getValue('debug','syslog'))
+		return;
+
+	return syslog($emergency,$log_string);
+}
+
+/**
+ * Issue an error message via syslog.
+ *
+ * @param log_string Log message to send to syslog.
+ * @return true on success.
+ */
+function syslog_err($log_string) {
+	return syslog_msg(LOG_ERR,$log_string);
+}
+
+/**
+ * Issue a warning message via syslog.
+ *
+ * @param log_string Log message to send to syslog.
+ * @return true on success.
+ */
+function syslog_warning($log_string) {
+	return syslog_msg(LOG_WARNING,$log_string);
+}
+
+/**
+ * Issue a notice message via syslog.
+ *
+ * @param log_string Log message to send to syslog.
+ * @return true on success.
+ */
+function syslog_notice($log_string) {
+	return syslog_msg(LOG_NOTICE,$log_string);
+}
+
+/**
+ * Issue a debug message via syslog, only if $log_level is set to
+ * 'debug' from the config file.
+ *
+ * @param log_string Log message to send to syslog.
+ * @return true on success or if debug log is not activated.
+ */
+function syslog_debug($log_string) {
+	return syslog_msg(LOG_DEBUG,$log_string);
+}
+?>
diff --git a/lam/templates/3rdParty/pla/lib/template_functions.php b/lam/templates/3rdParty/pla/lib/template_functions.php
new file mode 100644
index 00000000..bb3b6069
--- /dev/null
+++ b/lam/templates/3rdParty/pla/lib/template_functions.php
@@ -0,0 +1,23 @@
+<?php
+/**
+ * Classes and functions for the template engine.
+ *
+ * These classes and functions will read our XML template files, as well as
+ * query the LDAP server and build a template object that can be used for user
+ * input.
+ *
+ * @author The phpLDAPadmin development team
+ * @package phpLDAPadmin
+ */
+
+/**
+ * Templates Class
+ *
+ * This class will store all our templates.
+ *
+ * @package phpLDAPadmin
+ * @subpackage Templates
+ */
+class Templates extends xmlTemplates {
+}
+?>
diff --git a/lam/templates/3rdParty/pla/lib/xml2array.php b/lam/templates/3rdParty/pla/lib/xml2array.php
new file mode 100644
index 00000000..d260c9e4
--- /dev/null
+++ b/lam/templates/3rdParty/pla/lib/xml2array.php
@@ -0,0 +1,144 @@
+<?php
+/**
+ * Classes and functions for manipulating XML templates.
+ *
+ * @author The phpLDAPadmin development team
+ * @package phpLDAPadmin
+ */
+
+/**
+ * XML Parser
+ *
+ * This will read our XML file and convert it into variables for us to parse.
+ *
+ * @package phpLDAPadmin
+ * @subpackage XML
+ */
+class xml2array {
+	var $stack = array();
+	var $stack_ref;
+	var $arrOutput = array();
+	var $resParser;
+	var $strXmlData;
+
+	private function push_pos(&$pos) {
+		$this->stack[count($this->stack)] = &$pos;
+		$this->stack_ref = &$pos;
+	}
+
+	private function pop_pos() {
+		unset($this->stack[count($this->stack) - 1]);
+		$this->stack_ref = &$this->stack[count($this->stack) - 1];
+	}
+
+	public function parseXML($strInputXML,$filename) {
+		$this->resParser = xml_parser_create();
+		xml_set_object($this->resParser,$this);
+		xml_set_element_handler($this->resParser,'tagOpen','tagClosed');
+
+		xml_set_character_data_handler($this->resParser,'tagData');
+
+		$this->push_pos($this->arrOutput);
+
+		$this->strXmlData = xml_parse($this->resParser,$strInputXML);
+
+		if (! $this->strXmlData)
+			die(sprintf('XML error: %s at line %d in file %s',
+				xml_error_string(xml_get_error_code($this->resParser)),
+				xml_get_current_line_number($this->resParser),
+				$filename));
+
+		xml_parser_free($this->resParser);
+
+		$output = array();
+		foreach ($this->arrOutput as $key => $values)
+			$output[$key] = $this->cleanXML($values);
+
+		#return $this->arrOutput;
+		return $output;
+	}
+
+	private function tagOpen($parser,$name,$attrs) {
+		$name = strtolower($name);
+
+		if (isset($this->stack_ref[$name])) {
+			if (! isset($this->stack_ref[$name][0])) {
+				$tmp = $this->stack_ref[$name];
+				unset($this->stack_ref[$name]);
+				$this->stack_ref[$name][0] = $tmp;
+			}
+
+			$cnt = count($this->stack_ref[$name]);
+			$this->stack_ref[$name][$cnt] = array();
+			if (isset($attrs))
+				$this->stack_ref[$name][$cnt] = $attrs;
+
+			$this->push_pos($this->stack_ref[$name][$cnt]);
+
+		} else {
+			$this->stack_ref[$name]=array();
+
+			if (isset($attrs))
+				$this->stack_ref[$name]=$attrs;
+
+			$this->push_pos($this->stack_ref[$name]);
+		}
+	}
+
+	private function tagData($parser,$tagData) {
+		if (trim($tagData) != '') {
+
+			if (isset($this->stack_ref['#text']))
+				$this->stack_ref['#text'] .= $tagData;
+			else
+				$this->stack_ref['#text'] = $tagData;
+		}
+	}
+
+	private function tagClosed($parser,$name) {
+		$this->pop_pos();
+	}
+
+	/**
+	 * This function will parse an XML array and make a normal array.
+	 *
+	 * @return array - Clean XML data
+	 */
+	private function cleanXML($details) {
+		# Quick processing for the final branch of the XML array.
+		if (is_array($details) && isset($details['#text']))
+			return $details['#text'];
+
+		elseif (is_array($details) && isset($details['ID']) && count($details) == 1)
+			return $details['ID'];
+
+		$cleanXML = array();
+
+		# Quick processing for the final branch, when it holds the ID and values.
+		if (is_array($details) && isset($details['ID']) && count($details) > 1) {
+				$key = $details['ID'];
+				unset($details['ID']);
+				$cleanXML[$key] = $this->cleanXML($details);
+				$details = array();
+		}
+
+		# More detailed processing...
+		if (is_array($details))
+			foreach ($details as $key => $values)
+				if (is_numeric($key) && isset($values['ID']) && count($values) > 1) {
+					$key = $values['ID'];
+					unset($values['ID']);
+					$cleanXML[$key] = $this->cleanXML($values);
+
+				} elseif (isset($values['#text']))
+					$cleanXML[$key] = $this->cleanXML($values);
+
+				elseif (is_array($values))
+					$cleanXML[$key] = $this->cleanXML($values);
+
+		if (! $cleanXML)
+			return $details;
+		else
+			return $cleanXML;
+	}
+}
diff --git a/lam/templates/3rdParty/pla/lib/xmlTemplates.php b/lam/templates/3rdParty/pla/lib/xmlTemplates.php
new file mode 100644
index 00000000..08389de5
--- /dev/null
+++ b/lam/templates/3rdParty/pla/lib/xmlTemplates.php
@@ -0,0 +1,495 @@
+<?php
+/**
+ * Classes and functions for XML based templates.
+ *
+ * @author The phpLDAPadmin development team
+ * @package phpLDAPadmin
+ */
+
+/**
+ * XML Templates Class
+ *
+ * @package phpLDAPadmin
+ * @subpackage Templates
+ */
+abstract class xmlTemplates {
+	# The server ID that these templates are configured for.
+	protected $server_id;
+	# Our array of the available templates.
+	protected $templates = array();
+
+	function __construct($server_id) {
+		if (DEBUG_ENABLED && (($fargs=func_get_args())||$fargs='NOARGS'))
+			debug_log('Entered (%%)',5,0,__FILE__,__LINE__,__METHOD__,$fargs);
+
+		$this->server_id = $server_id;
+		$server = $_SESSION[APPCONFIG]->getServer($this->server_id);
+		$custom_prefix = $server->getValue('custom','pages_prefix');
+		$class = $this->getClassVars();
+		$changed = false;
+
+		# Try to get the templates from our CACHE.
+		if ($this->templates = get_cached_item($server_id,$class['item'])) {
+			if (DEBUG_ENABLED)
+				debug_log('Using CACHED templates',4,0,__FILE__,__LINE__,__METHOD__);
+
+			# See if the template_time has expired to see if we should reload the templates.
+			foreach ($this->templates as $index => $template) {
+				# If the file no longer exists, we'll delete the template.
+				if (! file_exists($template->getFileName())) {
+					unset($this->templates[$index]);
+					$changed = true;
+
+					system_message(array(
+						'title'=>_('Template XML file removed.'),
+						'body'=>sprintf('%s %s (%s)',_('Template XML file has removed'),$template->getName(false),$template->getType()),
+						'type'=>'info','special'=>true));
+
+					continue;
+				}
+
+				if (($template->getReadTime() < (time()-$class['cachetime']))
+					&& (filectime($template->getFileName()) > $template->getReadTime())) {
+
+					system_message(array(
+						'title'=>_('Template XML file changed.'),
+						'body'=>sprintf('%s %s (%s)',_('Template XML file has changed and been reread'),$template->getName(false),$template->getType()),
+						'type'=>'info','special'=>true));
+
+					$changed = true;
+					eval(sprintf('$this->templates[$index] = new %s($this->server_id,$template->getName(false),$template->getFileName(),$template->getType(),$index);',$class['name']));
+				}
+			}
+
+			if (DEBUG_ENABLED)
+				debug_log('Templates refreshed',4,0,__FILE__,__LINE__,__METHOD__);
+
+			# See if there are any new template files
+			$index = max(array_keys($this->templates))+1;
+			foreach ($class['types'] as $type) {
+				$dir = $class['dir'].$type;
+				$dh = opendir($dir);
+				if (! $type)
+					$type = 'template';
+
+				while ($file = readdir($dh)) {
+					# Ignore any files that are not XML files.
+					if (! preg_match('/.xml$/',$file))
+						continue;
+
+					# Ignore any files that are not the predefined custom files.
+					if ($_SESSION[APPCONFIG]->getValue('appearance','custom_templates_only')
+						&& ! preg_match("/^${custom_prefix}/",$file))
+						continue;
+
+					$filename = sprintf('%s/%s',$dir,$file);
+
+					if (! in_array($filename,$this->getTemplateFiles())) {
+						$templatename = preg_replace('/.xml$/','',$file);
+	
+						eval(sprintf('$this->templates[$index] = new %s($this->server_id,$templatename,$filename,$type,$index);',$class['name']));
+						$index++;
+
+						$changed = true;
+
+						system_message(array(
+							'title'=>_('New Template XML found.'),
+							'body'=>sprintf('%s %s (%s)',_('A new template XML file has been loaded'),$file,$type),
+							'type'=>'info','special'=>true));
+					}
+				}
+			}
+
+		} else {
+			if (DEBUG_ENABLED)
+				debug_log('Parsing templates',4,0,__FILE__,__LINE__,__METHOD__);
+
+			# Need to reset this, as get_cached_item() returns null if nothing cached.
+			$this->templates = array();
+			$changed = true;
+
+			$counter = 0;
+			foreach ($class['types'] as $type) {
+				$dir = $class['dir'].$type;
+				$dh = opendir($class['dir'].$type);
+				if (! $type)
+					$type = 'template';
+
+				while ($file = readdir($dh)) {
+					# Ignore any files that are not XML files.
+					if (! preg_match('/.xml$/',$file))
+						continue;
+
+					# Ignore any files that are not the predefined custom files.
+					if ($_SESSION[APPCONFIG]->getValue('appearance','custom_templates_only')
+						&& ! preg_match("/^${custom_prefix}/",$file))
+						continue;
+
+					$filename = sprintf('%s/%s',$dir,$file);
+
+					# Store the template
+					$templatename = preg_replace('/.xml$/','',$file);
+					eval(sprintf('$this->templates[$counter] = new %s($this->server_id,$templatename,$filename,$type,$counter);',$class['name']));
+					$counter++;
+				}
+			}
+		}
+
+		if (DEBUG_ENABLED)
+			debug_log('Templates loaded',4,0,__FILE__,__LINE__,__METHOD__);
+
+		if ($changed) {
+			masort($this->templates,'title');
+			set_cached_item($server_id,$class['item'],'null',$this->templates);
+		}
+	}
+
+	/**
+	 * This will return our custom class variables, used by the parent to create objects.
+	 */
+	private function getClassVars() {
+		if (DEBUG_ENABLED && (($fargs=func_get_args())||$fargs='NOARGS'))
+			debug_log('Entered (%%)',5,0,__FILE__,__LINE__,__METHOD__,$fargs);
+
+		$class = array();
+
+		switch (get_class($this)) {
+			case 'Queries':
+				$class['item'] = 'query';
+				$class['name'] = 'Query';
+				$class['cachetime'] = $_SESSION[APPCONFIG]->getValue('cache','query_time');
+				$class['types'] = array('');
+				$class['dir'] = QUERYDIR;
+
+				break;
+
+			case 'Templates':
+				$class['item'] = 'template';
+				$class['name'] = 'Template';
+				$class['cachetime'] = $_SESSION[APPCONFIG]->getValue('cache','template_time');
+				$class['types'] = array('creation','modification');
+				$class['dir'] = TMPLDIR;
+
+				break;
+
+			default:
+				debug_dump_backtrace(sprintf('Unknown class %s',get_class($this)),1);
+		}
+
+		return $class;
+	}
+
+	/**
+	 * Return a list of templates by their type
+	 * This function should return a sorted list, as the array is built sorted.
+	 *
+	 * @param string Type of template, eg: creation, modification
+	 * @param boolean Exclude templates purposely disabled.
+	 * @return array List of templates of the type
+	 */
+	public function getTemplates($type=null,$container=null,$disabled=false) {
+		if (DEBUG_ENABLED && (($fargs=func_get_args())||$fargs='NOARGS'))
+			debug_log('Entered (%%)',5,0,__FILE__,__LINE__,__METHOD__,$fargs);
+
+		$result = array();
+
+		if (is_array($this->templates))
+			foreach ($this->templates as $details) {
+
+				# Clone this, as we'll disable some templates, as a result of the container being requested.
+				$template = clone $details;
+				if (! is_null($container) && ($regexp = $template->getRegExp()) && (! @preg_match('/'.$regexp.'/i',$container))) {
+					$template->setInvalid(_('This template is not valid in this container'),true);
+
+					if ($_SESSION[APPCONFIG]->getValue('appearance','hide_template_regexp'))
+						$template->setInvisible();
+				}
+
+				if ($template->isVisible() && (! $disabled || ! $template->isAdminDisabled()))
+					if (is_null($type) || (! is_null($type) && $template->isType($type)))
+						array_push($result,$template);
+			}
+
+		return $result;
+	}
+
+	/**
+	 * Return a template by its ID
+	 *
+	 * @param string The template ID as it was when it was generated (normally used in $_REQUEST vars).
+	 * @return object Template (or default template if the ID doesnt exist)
+	 */
+	function getTemplate($templateid) {
+		if (DEBUG_ENABLED && (($fargs=func_get_args())||$fargs='NOARGS'))
+			debug_log('Entered (%%)',5,0,__FILE__,__LINE__,__METHOD__,$fargs);
+
+		$class = $this->getClassVars();
+
+		foreach ($this->templates as $template)
+			if ($template->getID() === $templateid)
+				return clone $template;
+
+		# If we get here, the template ID didnt exist, so return a blank template, which be interpreted as the default template
+		eval(sprintf('$object = new %s($this->server_id,null,null,"default");',$class['name']));
+		return $object;
+	}
+
+	/**
+	 * Get a list of template filenames.
+	 */
+	private function getTemplateFiles() {
+		if (DEBUG_ENABLED && (($fargs=func_get_args())||$fargs='NOARGS'))
+			debug_log('Entered (%%)',5,0,__FILE__,__LINE__,__METHOD__,$fargs);
+
+		$result = array();
+
+		foreach ($this->templates as $template)
+			array_push($result,$template->getFileName());
+
+		return $result;
+	}
+}
+
+/**
+ * XML Template Class
+ *
+ * @package phpLDAPadmin
+ * @subpackage Templates
+ */
+abstract class xmlTemplate {
+	# Server ID that the template is linked to
+	protected $server_id;
+	# Template unique ID
+	protected $id;
+	# Template name - as extracted from the filename
+	protected $name;
+	# Template type - creation/modification
+	protected $type;
+	# Time this object was created
+	protected $readtime;
+	# Template file name
+	protected $filename;
+	# The TEMPLATE attributes as per the template definition, or the DN entry
+	protected $attributes = array();
+
+	public function __construct($server_id,$name=null,$filename=null,$type=null,$id=null) {
+		if (DEBUG_ENABLED && (($fargs=func_get_args())||$fargs='NOARGS'))
+			debug_log('Entered (%%)',5,0,__FILE__,__LINE__,__METHOD__,$fargs);
+
+		$this->server_id = $server_id;
+		$this->name = $name;
+		$this->type = $type;
+		$this->filename = $filename;
+		$this->readtime = time();
+		$this->id = $id;
+
+		# If there is no filename, then this template is a default template.
+		if (is_null($filename))
+			return;
+
+		# If we have a filename, parse the template file and build the object.
+		$objXML = new xml2array();
+		$xmldata = $objXML->parseXML(file_get_contents($filename),$filename);
+		$this->storeTemplate($xmldata);
+	}
+
+	/**
+	 * Get an attribute ID
+	 *
+	 * @param string The Attribute being searched.
+	 * @return int Attribute ID in the array
+	 */
+	protected function getAttrID($attr) {
+		if (DEBUG_ENABLED && (($fargs=func_get_args())||$fargs='NOARGS'))
+			debug_log('Entered (%%)',5,0,__FILE__,__LINE__,__METHOD__,$fargs);
+
+		foreach ($this->attributes as $index => $attribute)
+			if (strtolower($attr) == $attribute->getName() || in_array(strtolower($attr),$attribute->getAliases()))
+				return $index;
+
+		return null;
+	}
+
+	/**
+	 * Get the Template filename.
+	 */
+	public function getFileName() {
+		if (DEBUG_ENABLED && (($fargs=func_get_args())||$fargs='NOARGS'))
+			debug_log('Entered (%%)',5,1,__FILE__,__LINE__,__METHOD__,$fargs,$this->filename);
+
+		return $this->filename;
+	}
+
+	/**
+	 * Return the template by ID
+	 */
+	public function getID() {
+		if (DEBUG_ENABLED && (($fargs=func_get_args())||$fargs='NOARGS'))
+			debug_log('Entered (%%)',5,0,__FILE__,__LINE__,__METHOD__,$fargs,$this->id);
+
+		if ($this->name)
+			return sprintf('%s:%s',$this->getName(false),$this->id);
+		else
+			return 'none';
+	}
+
+	/**
+	 * Return the template name
+	 *
+	 * @param boolean Force the name to be lowercase (default)
+	 */
+	public function getName($lower=true) {
+		if (DEBUG_ENABLED && (($fargs=func_get_args())||$fargs='NOARGS'))
+			debug_log('Entered (%%)',5,1,__FILE__,__LINE__,__METHOD__,$fargs,$this->name);
+
+		if ($lower)
+			return strtolower($this->name);
+		else
+			return $this->name;
+	}
+
+	/**
+	 * Get the Template read time.
+	 */
+	public function getReadTime() {
+		if (DEBUG_ENABLED && (($fargs=func_get_args())||$fargs='NOARGS'))
+			debug_log('Entered (%%)',5,1,__FILE__,__LINE__,__METHOD__,$fargs,$this->readtime);
+
+		return $this->readtime;
+	}
+
+	/**
+	 * Return this LDAP Server object
+	 *
+	 * @return object DataStore Server
+	 */
+	protected function getServer() {
+		if (DEBUG_ENABLED && (($fargs=func_get_args())||$fargs='NOARGS'))
+			debug_log('Entered (%%)',5,1,__FILE__,__LINE__,__METHOD__,$fargs);
+
+		return $_SESSION[APPCONFIG]->getServer($this->getServerID());
+	}
+
+	/**
+	 * Return the LDAP server ID
+	 *
+	 * @return int Server ID
+	 */
+	protected function getServerID() {
+		if (DEBUG_ENABLED && (($fargs=func_get_args())||$fargs='NOARGS'))
+			debug_log('Entered (%%)',5,1,__FILE__,__LINE__,__METHOD__,$fargs,$this->server_id);
+
+		return $this->server_id;
+	}
+
+	/**
+	 * Test if a template is of a type
+	 *
+	 * @return boolean
+	 */
+	public function isType($type) {
+		if (DEBUG_ENABLED && (($fargs=func_get_args())||$fargs='NOARGS'))
+			debug_log('Entered (%%)',5,0,__FILE__,__LINE__,__METHOD__,$fargs,$this->type);
+
+		if ($this->type == $type)
+			return true;
+		else
+			return false;
+	}
+
+	/**
+	 * Return the template type
+	 */
+	public function getType() {
+		if (DEBUG_ENABLED && (($fargs=func_get_args())||$fargs='NOARGS'))
+			debug_log('Entered (%%)',5,1,__FILE__,__LINE__,__METHOD__,$fargs,$this->type);
+
+		return $this->type;
+	}
+
+	/**
+	 * Get template title
+	 */
+	public function getTitle() {
+		if (DEBUG_ENABLED && (($fargs=func_get_args())||$fargs='NOARGS'))
+			debug_log('Entered (%%)',5,0,__FILE__,__LINE__,__METHOD__,$fargs);
+
+		if (! isset($this->title) && ! isset($this->description))
+			return '';
+
+		return isset($this->title) ? $this->title : $this->description;
+	}
+
+	/**
+	 * Add another attribute to this template
+	 *
+	 * @return int Attribute ID
+	 */
+	public function addAttribute($name,$value,$source=null) {
+		if (DEBUG_ENABLED && (($fargs=func_get_args())||$fargs='NOARGS'))
+			debug_log('Entered (%%)',5,0,__FILE__,__LINE__,__METHOD__,$fargs);
+
+		if (! is_array($value))
+			debug_dump_backtrace('Value should be an array()',1);
+
+		$server = $this->getServer();
+
+		# Initialise the Attribute Factory.
+		$attribute_factory = new AttributeFactory();
+
+		# If there isnt a schema item for this attribute
+		$attribute = $attribute_factory->newAttribute($name,$value,$server->getIndex(),$source);
+
+		$attrid = $this->getAttrID($attribute->getName());
+
+		if (is_null($attrid))
+			array_push($this->attributes,$attribute);
+		else
+			debug_dump_backtrace(sprintf('There was a request to add an attribute (%s), but it was already defined? (%s)',$attrid,__METHOD__),true);
+
+		if ($this->getID() == 'none')
+			usort($this->attributes,'sortAttrs');
+
+		return $attribute;
+	}
+
+	/**
+	 * Get the attribute names
+	 *
+	 * @return array Array of attributes Names
+	 */
+	public function getAttributeNames() {
+		if (DEBUG_ENABLED && (($fargs=func_get_args())||$fargs='NOARGS'))
+			debug_log('Entered (%%)',5,0,__FILE__,__LINE__,__METHOD__,$fargs);
+
+		$result = array();
+
+		foreach ($this->attributes as $attribute)
+			array_push($result,$attribute->getName());
+
+		return $result;
+	}
+
+	/**
+	 * Get a specific Attribute
+	 *
+	 * @param string Name of attribute to retrieve
+	 * @return object Attribute
+	 */
+	public function getAttribute($name) {
+		if (DEBUG_ENABLED && (($fargs=func_get_args())||$fargs='NOARGS'))
+			debug_log('Entered (%%)',5,0,__FILE__,__LINE__,__METHOD__,$fargs);
+
+		foreach ($this->attributes as $attribute)
+			if (($attribute->getName() == strtolower($name)) || in_array(strtolower($name),$attribute->getAliases()))
+				return $attribute;
+
+		return null;
+	}
+
+	/**
+	 * May be overloaded in other classes
+	 */
+	public function isAdminDisabled() {}
+}
+?>
diff --git a/lam/templates/3rdParty/pla/templates/creation/ou.xml b/lam/templates/3rdParty/pla/templates/creation/ou.xml
new file mode 100644
index 00000000..6e0f45ac
--- /dev/null
+++ b/lam/templates/3rdParty/pla/templates/creation/ou.xml
@@ -0,0 +1,27 @@
+<?xml version="1.0" encoding="UTF-8" standalone="no"?>
+<!DOCTYPE template SYSTEM "template.dtd">
+
+<template>
+<askcontainer>1</askcontainer>
+<description>New Organisational Unit</description>
+<icon>ldap-ou.png</icon>
+<invalid>0</invalid>
+<rdn>ou</rdn>
+<!-- <regexp>^o=.*,</regexp> -->
+<title>Generic: Organisational Unit</title>
+<visible>1</visible>
+
+<objectClasses>
+<objectClass id="organizationalUnit"></objectClass>
+</objectClasses>
+
+<attributes>
+<attribute id="ou">
+	<display>Organisational Unit</display>
+	<hint>don't include "ou="</hint>
+	<order>1</order>
+	<page>1</page>
+</attribute>
+</attributes>
+
+</template>
diff --git a/lam/templates/3rdParty/pla/templates/modification/.placeholder b/lam/templates/3rdParty/pla/templates/modification/.placeholder
new file mode 100644
index 00000000..8d1c8b69
--- /dev/null
+++ b/lam/templates/3rdParty/pla/templates/modification/.placeholder
@@ -0,0 +1 @@
+ 
diff --git a/lam/templates/3rdParty/pla/tools/unserialize.php b/lam/templates/3rdParty/pla/tools/unserialize.php
new file mode 100644
index 00000000..2a35e609
--- /dev/null
+++ b/lam/templates/3rdParty/pla/tools/unserialize.php
@@ -0,0 +1,26 @@
+<?php
+
+require '../lib/common.php';
+
+echo '<head><link type="text/css" rel="stylesheet" href="../htdocs/css/style.css" /></head>';
+echo '<body>'."\n";
+$index = get_request('index','REQUEST');
+if (! isset($_SESSION['backtrace'][$index]))
+	die('No backtrace available...?');
+
+$line = $_SESSION['backtrace'][$index];
+echo '<table class="result_table">';
+printf('<tr class="hightlight"><td colspan="2"><b><small>%s</small></b></td><td>%s (%s)</td></tr>',
+	_('File'),isset($line['file']) ? $line['file'] : $last['file'],isset($line['line']) ? $line['line'] : '');
+
+printf('<tr><td>&nbsp;</td><td><b><small>%s</small></b></td>',
+	_('Function'),$line['function']);
+
+echo '<td><small><pre>';
+print_r($line['args']);
+echo '</pre></small></td>';
+
+echo '</tr>';
+echo '</table>';
+echo '</body>';
+?>