<?php

$plugins->attachHook('session_started', 'ajim_page_init();');

function ajim_page_init()
{
  global $db, $session, $paths, $template, $plugins; // Common objects
  
  $paths->add_page(array(
      'name' => 'AjIM JSON handler',
      'urlname' => 'AjimJson',
      'namespace' => 'Special',
      'visible' => 0,
      'special' => 1,
      'comments_on' => 0,
      'protected' => 0
    ));
}

function page_Special_AjimJson()
{
  global $db, $session, $paths, $template, $plugins; // Common objects
  global $lang;
  
  header('Content-type: text/javascript');
  if ( !isset($_GET['r']) && !isset($_POST['r']) )
  {
    return print enano_json_encode(array(
        'mode' => 'error',
        'error' => 'No request specified.'
      ));
  }
  $request = enano_json_decode($_REQUEST['r']);
  if ( !isset($request['mode']) )
  {
    return print enano_json_encode(array(
        'mode' => 'error',
        'error' => 'No mode specified.'
      ));
  }
  switch($request['mode'])
  {
    case 'watch':
      @set_time_limit(0);
      $time = ( !empty($request['lastrefresh']) ) ? intval($request['lastrefresh']) : 0;
      $end = microtime_float() + 59;
      // run cron-ish stuff
      if ( intval(getConfig('ajim_last_cleanout', 0)) + 86400 < time() )
      {
        $q = $db->sql_query('SELECT COUNT(message_id) FROM ' . table_prefix . "ajim2;");
        if ( !$q )
          $db->die_json();
        
        list($count) = $db->fetchrow_num();
        $db->free_result();
        if ( intval($count) > 50 )
        {
          // if there are more than 50 messages in the database, clean it out
          $limit = $count - 15;
          $q = $db->sql_query('DELETE FROM ' . table_prefix . "ajim2 ORDER BY message_time ASC LIMIT $limit;");
          if ( !$q )
            $db->die_json();
        }
        
        setConfig('ajim_last_cleanout', time());
      }
      
      while ( microtime_float() < $end )
      {
        $q = $db->sql_query('SELECT * FROM ' . table_prefix . "ajim2 WHERE message_time >= $time OR message_update_time >= $time ORDER BY message_time DESC LIMIT 30;");
        if ( !$q )
          $db->die_json();
        if ( $db->numrows() > 0 || $time == 0 )
          break;
        $db->free_result();
        usleep(500000); // 0.5s
      }
      if ( $q )
      {
        $messages = array();
        while ( $row = $db->fetchrow() )
        {
          $row['rank_info'] = $session->get_user_rank($row['user_id']);
          $row['message_html'] = RenderMan::render($row['message']);
          $row['human_time'] = enano_date('n/j, g:ia', $row['message_time']);
          $messages[] = $row;
        }
        $response = array(
          'mode' => 'messages',
          'now' => time(),
          'messages' => $messages
        );
        return print enano_json_encode($response);
      }
      else
      {
        return print enano_json_encode(array(
            'mode' => 'messages',
            'now' => time(),
            'messages' => array()
          ));
      }
      break;
    case 'submit':
      if ( !$session->get_permissions('ajim_post') )
      {
        return print enano_json_encode(array(
            'mode' => 'error',
            'error' => $lang->get('ajim_err_post_denied')
          ));
      }
      $name = $session->user_logged_in ? $session->username : $request['user'];
      $content = trim($request['message']);
      if ( empty($content) )
      {
        return print enano_json_encode(array(
            'mode' => 'error',
            'error' => $lang->get('ajim_err_no_post')
          ));
      }
      
      $now = time();
      $content_db = $db->escape($content);
      $name_db = $db->escape($name);
      
      $sql = 'INSERT INTO ' . table_prefix . "ajim2(user_id, username, message, message_time, message_update_time) VALUES\n"
                        . "  ({$session->user_id}, '$name_db', '$content_db', $now, $now);";
      if ( !$db->sql_query($sql) )
        $db->die_json();
      
      // workaround for no insert_id() on postgresql
      $q = $db->sql_query('SELECT message_id FROM ' . table_prefix . "ajim2 WHERE username = '$name_db' AND message = '$content_db' AND message_time = $now ORDER BY message_id DESC LIMIT 1;");
      if ( !$q )
        $db->die_json();
      
      list($message_id) = $db->fetchrow_num();
      $db->free_result();
      
      return print enano_json_encode(array(
          'mode' => 'messages',
          'messages' => array(array(
            'rank_info' => $session->get_user_rank($session->user_id),
            'human_time' => enano_date('n/j, g:ia'),
            'message' => $content,
            'username' => $name,
            'user_id' => $session->user_id,
            'message_time' => time(),
            'message_update_time' => time(),
            'message_id' => $message_id,
            'message_html' => RenderMan::render($content)
            ))
        ));
      break;
    case 'delete':
      if ( empty($request['message_id']) )
      {
        return print enano_json_encode(array(
            'mode' => 'error',
            'error' => 'No message_id specified.'
          ));
      }
      
      $message_id = intval($request['message_id']);
      
      if ( ( !$session->get_permissions('ajim_mod') || $session->auth_level < USER_LEVEL_CHPREF ) )
      {
        // we don't have permission according to ACLs, but try to see if we can edit our
        // own posts. if so, we can allow this to continue.
        $perm_override = false;
        if ( $session->get_permissions('ajim_edit') && $session->user_logged_in )
        {
          $q = $db->sql_query('SELECT user_id FROM ' . table_prefix . "ajim2 WHERE message_id = $message_id;");
          if ( !$q )
            $db->die_json();
          
          list($user_id) = $db->fetchrow_num();
          $db->free_result();
          if ( $user_id === $session->user_id )
          {
            $perm_override = true;
          }
        }
        if ( !$perm_override )
        {
          return print enano_json_encode(array(
              'mode' => 'error',
              'error' => $lang->get('ajim_err_access_denied')
            ));
        }
      }
      
      $now = time();
      $q = $db->sql_query('UPDATE ' . table_prefix . "ajim2 SET message = '', message_update_time = $now WHERE message_id = $message_id;");
      if ( !$q )
        $db->die_json();
      
      return print enano_json_encode(array(
          'mode' => 'delete',
          'message_id' => $message_id
        ));
      break;
    case 'update':
      if ( empty($request['message_id']) )
      {
        return print enano_json_encode(array(
            'mode' => 'error',
            'error' => 'No message_id specified.'
          ));
      }
      
      $message_id = intval($request['message_id']);
      
      if ( ( !$session->get_permissions('ajim_mod') || $session->auth_level < USER_LEVEL_CHPREF ) )
      {
        // we don't have permission according to ACLs, but try to see if we can edit our
        // own posts. if so, we can allow this to continue.
        $perm_override = false;
        if ( $session->get_permissions('ajim_edit') && $session->user_logged_in )
        {
          $q = $db->sql_query('SELECT user_id FROM ' . table_prefix . "ajim2 WHERE message_id = $message_id;");
          if ( !$q )
            $db->die_json();
          
          list($user_id) = $db->fetchrow_num();
          $db->free_result();
          if ( $user_id === $session->user_id )
          {
            $perm_override = true;
          }
        }
        if ( !$perm_override )
        {
          return print enano_json_encode(array(
              'mode' => 'error',
              'error' => $lang->get('ajim_err_access_denied')
            ));
        }
      }
      
      $message = trim(@$request['message']);
      if ( empty($message) )
      {
        return print enano_json_encode(array(
            'mode' => 'error',
            'error' => $lang->get('ajim_err_no_post')
          ));
      }
      
      $message_db = $db->escape($message);
      $now = time();
      $q = $db->sql_query('UPDATE ' . table_prefix . "ajim2 SET message = '{$message_db}', message_update_time = $now WHERE message_id = $message_id;");
      if ( !$q )
        $db->die_json();
      
      return print enano_json_encode(array(
          'mode' => 'update',
          'message_id' => $message_id,
          'message' => $message,
          'message_html' => RenderMan::render($message)
        ));
      break;
  }
}