<?php

/*

 * Decir

 * Version 0.1

 * Copyright (C) 2007 Dan Fuhry

 * admin_forums.php - forum creation and management frontend

 *

 * This program is Free Software; you can redistribute and/or modify it under the terms of the GNU General Public License

 * as published by the Free Software Foundation; either version 2 of the License, or (at your option) any later version.

 *

 * This program is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied

 * warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for details.

 */

$decir_menu['DecirForums'] = 'Manage forums';

require( DECIR_ROOT . '/constants.php' );

function page_Admin_DecirForums()

{

  global $db, $session, $paths, $template, $plugins; // Common objects

  if ( $session->auth_level < USER_LEVEL_ADMIN || $session->user_level < USER_LEVEL_ADMIN )

  {

    echo '<h3>Error: Not authenticated</h3><p>It looks like your administration session is invalid or you are not authorized to access this administration page. Please <a href="' . makeUrlNS('Special', 'Login/' . $paths->nslist['Special'] . 'Administration', 'level=' . USER_LEVEL_ADMIN, true) . '">re-authenticate</a> to continue.</p>';

    return;

  }

  $show_main_menu = true;

  if ( isset($_POST['act']) )

  {

    $act = ( strpos($_POST['act'], ';') ) ? substr($_POST['act'], 0, strpos($_POST['act'], ';')) : $_POST['act'];

    if ( strpos($_POST['act'], ';') )

    {

      $parms = substr($_POST['act'], strpos($_POST['act'], ';') + 1);

      preg_match_all('/([a-z0-9_]+)=([^;]*)/', $parms, $matches);

      $parms = array();

      foreach ( $matches[2] as $id => $parmdata )

      {

        if ( preg_match('/^[0-9]+$/', $parmdata) )

          $parmdata = intval($parmdata);

        $parms[ $matches[1][$id] ] = $parmdata;

      }

    }

    switch ( $act )

    {

      case "create":

      case "create_finish":

        // Do we have any categories yet?

        $q = $db->sql_query('SELECT forum_id, forum_name FROM ' . table_prefix . 'decir_forums WHERE forum_type = ' . FORUM_CATEGORY . ';');

        if ( !$q )

          $db->_die('Decir admin_forums.php retrieving category count');

        $need_category = ( $db->numrows() < 1 );

        $cats = array();

        if ( !$need_category )

        {

          while ( list($cat_id, $cat_name) = $db->fetchrow_num() )

          {

            $cats[ $cat_id ] = $cat_name;

          }

        }

        $db->free_result();

        if ( $act == 'create_finish' )

        {

          $errors = array();

          $forum_type = intval($_POST['forum_type']);

          if ( $forum_type != FORUM_FORUM && $forum_type != FORUM_CATEGORY )

            $errors[] = 'Invalid forum type. <tt>X.X</tt>';

          $forum_name = trim($_POST['forum_name']);

          if ( empty($forum_name) )

            $errors[] = 'Please enter a name for this forum.';

          $forum_desc = '';

          $forum_parent = 0;

          if ( $forum_type == FORUM_FORUM )

          {

            $forum_desc = trim($_POST['forum_desc']);

            if ( empty($forum_desc) )

              $errors[] = 'Please enter a description for this forum.';

            $forum_parent = intval($_POST['forum_parent']);

            if ( !isset($cats[$forum_parent]) )

              $errors[] = 'Invalid parent category';

          }

          if ( count($errors) > 0 )

          {

            // Errors encountered - bounce form back to the user

            $show_main_menu = false;

            echo '<div class="error-box">The forum could not be created.<ul><li>' . implode("</li>\n      <li>", $errors) . '</li></ul></div>';

            $form = new Decir_Admin_SmartForm_Forum(DECIR_ADMIN_MODE_CREATE);

            $form->forum_name = $forum_name;

            $form->forum_desc = $forum_desc;

            $form->forum_type = $forum_type;

            $form->need_category = $need_category;

            $form->category_list = $cats;

            echo $form->html();

            break;

          }

          // All checks passed. Create forum.

          $forum_name_db = $db->escape($forum_name);

          $forum_desc_db = $db->escape($forum_desc);

          $sql = 'INSERT INTO ' . table_prefix . "decir_forums(forum_name, forum_desc, forum_type, parent, num_topics, num_posts) VALUES\n"

                 . "  ( '$forum_name_db', '$forum_desc_db', $forum_type, $forum_parent, 0, 0 );";

          if ( $db->sql_query($sql) )

          {

            $forum_name = htmlspecialchars($forum_name);

            $type = ( $forum_type == FORUM_FORUM ) ? 'forum' : 'category';

            echo "<div class=\"info-box\">The {$type} \"{$forum_name}\" has been created successfully.</div>";

          }

          break;

        }

        // Create a smartform

        $show_main_menu = false;

        $form = new Decir_Admin_SmartForm_Forum(DECIR_ADMIN_MODE_CREATE);

        $form->need_category = $need_category;

        $form->category_list = $cats;

        echo $form->html();

        break;

      case 'edit':

      case 'edit_finish':

        if ( !isset($parms['fid']) || ( isset($parms['fid']) && !is_int($parms['fid']) ) )

        {

          echo '<div class="error-box">Invalid forum ID passed to editor.</div>';

          break;

        }

        // Fetch category list

        $q = $db->sql_query('SELECT forum_id, forum_name FROM ' . table_prefix . 'decir_forums WHERE forum_type = ' . FORUM_CATEGORY . ';');

        if ( !$q )

          $db->_die('Decir admin_forums.php retrieving category count');

        $need_category = ( $db->numrows() < 1 );

        $cats = array();

        if ( !$need_category )

        {

          while ( list($cat_id, $cat_name) = $db->fetchrow_num() )

          {

            $cats[ $cat_id ] = $cat_name;

          }

        }

        $db->free_result();

        // $fid is safe (validated as an integer).

        $fid =& $parms['fid'];

        $q = $db->sql_query('SELECT forum_id, forum_name, forum_desc, parent, forum_type FROM ' . table_prefix . 'decir_forums WHERE forum_id = ' . $fid . ';');

        if ( !$q )

          $db->_die('Decir admin_forums.php selecting forum data for edit');

        $row = $db->fetchrow();

        $db->free_result();

        if ( $act == 'edit_finish' )

        {

          $errors = array();

          // Validate and update

          if ( $row['forum_type'] == FORUM_FORUM )

          {

            $forum_name = trim($_POST['forum_name']);

            if ( empty($forum_name) )

              $errors[] = 'Please enter a name for this forum.';

            $forum_desc = trim($_POST['forum_desc']);

            if ( empty($forum_desc) )

              $errors[] = 'Please enter a description for this forum.';

            $forum_parent = intval($_POST['forum_parent']);

            if ( !isset($cats[$forum_parent]) )

              $errors[] = 'Invalid parent category';

            $forum_name_db = $db->escape($forum_name);

            $forum_desc_db = $db->escape($forum_desc);

            $sql = 'UPDATE ' . table_prefix . "decir_forums SET forum_name='$forum_name_db',forum_desc='$forum_desc_db',parent=$forum_parent WHERE forum_id = $fid;";

          }

          else if ( $row['forum_type'] == FORUM_CATEGORY )

          {

            $forum_name = trim($_POST['forum_name']);

            if ( empty($forum_name) )

              $errors[] = 'Please enter a name for this forum.';

            $forum_name_db = $db->escape($forum_name);

            $sql = 'UPDATE ' . table_prefix . "decir_forums SET forum_name='$forum_name_db' WHERE forum_id = $fid;";

          }

          else

          {

            $db->_die('Mom, I feel sick. Can I lay down for a while? ' . __FILE__ . ':' . __LINE__);

          }

          if ( count($errors) < 1 )

          {

            if ( $db->sql_query($sql) )

            {

              $show_main_menu = true;

              echo '<div class="info-box">The forum or category was updated.</div>';

              break;

            }

            else

            {

              $db->_die('Decir admin_forums.php update forum main SQL query');

            }

          }

          else

          {

            echo '<div class="error-box">The forum was not updated because you entered something invalid.<ul><li>' . implode("</li>\n      <li>", $errors) . '</li></ul></div>';

          }

        }

        // This is the amazing part. We'll let the smart form do the work for us.

        $form = new Decir_Admin_SmartForm_Forum(DECIR_ADMIN_MODE_EDIT);

        $form->forum_name = $row['forum_name'];

        $form->forum_desc = $row['forum_desc'];

        $form->forum_type = $row['forum_type'];

        $form->forum_parent = $row['parent'];

        $form->forum_id = $row['forum_id'];

        $form->category_list = $cats;

        echo $form->html();

        $show_main_menu = false;

        break;

      case 'save_order':

        $order = explode(',', $_POST['forum_order']);

        $i = 0;

        $sql = array();

        foreach ( $order as $forum_id )

        {

          $i++;

          if ( strval(intval($forum_id)) != $forum_id )

          {

            echo '<p>Hacking attempt</p>';

            break;

          }

          $sql[] = 'UPDATE ' . table_prefix . "decir_forums SET forum_order = $i WHERE forum_id = $forum_id;";

        }

        foreach ( $sql as $s )

        {

          if ( !$db->sql_query($s) )

            $db->_die('Decir admin_forums.php updating forum order');

        }

        echo '<div class="info-box">The forum order was updated.</div>';

        break;

    }

  }

  if ( $show_main_menu )

  {

    // Display the main forum admin interface

    $form_url = makeUrlNS('Special', 'DecirAdmin', "module={$paths->nslist['Admin']}DecirForums", true);

    echo "<form action=\"$form_url\" method=\"post\" enctype=\"multipart/form-data\">";

    echo '<div class="tblholder">

            <table border="0" cellspacing="1" cellpadding="4">

              <tr>

                <th colspan="4">Forum administration</th>

              </tr>';

    // Select and display all forums

    $q = $db->sql_unbuffered_query('SELECT forum_id, forum_name, forum_desc, forum_type, num_topics, num_posts FROM ' . table_prefix . 'decir_forums GROUP BY parent, forum_id ORDER BY forum_order;');

    if ( !$q )

      $db->_die('Decir admin_forums.php selecting main forum datum');

    $order_forums = array();

    $order_cats = array();

    if ( $row = $db->fetchrow() )

    {

      $cat_open = false;

      echo '<tr>

              <th class="subhead">Forum</th>

              <th class="subhead" style="max-width: 50px;">Topics</th>

              <th class="subhead" style="max-width: 50px;">Posts</th>

              <th class="subhead">Admin tasks</th>

            </tr>';

      do

      {

        switch ( $row['forum_type'] )

        {

          case FORUM_FORUM:

            // Forum

            echo '<tr>

                    <td class="row2 decir_forum"><input type="hidden" value="' . $row['forum_id'] . '" />

                      <b><a href="' . makeUrlNS('DecirForum', $row['forum_id']) . '">'

                      . $row['forum_name'] . '</a></b><br />' . $row['forum_desc'].'

                    </td>

                   <td class="row3" style="text-align: center;">' . $row['num_topics'] . '</td>

                   <td class="row3" style="text-align: center;">' . $row['num_posts'] . '</td>

                   <td class="row1" style="text-align: center;">';

            echo '<button name="act" value="edit;fid=' . $row['forum_id'] . '">Edit</button>&nbsp;';

            echo '<button name="act" value="delete;fid=' . $row['forum_id'] . '">Delete</button>';

            echo '</td>

                 </tr>';

            $order_forums[] = $row['forum_id'];

            break;

          case FORUM_CATEGORY:

            // Category

            if ( $cat_open )

              echo '</tbody>';

            echo '<tr>

                    <td class="row1 decir_category" colspan="1"><input type="hidden" value="' . $row['forum_id'] . '" />

                      <h3 style="margin: 0; padding: 0;">' . $row['forum_name'] . '</h3>

                    </td>

                    <td class="row2" colspan="2"></td>';

            echo '<td class="row1" style="text-align: center;">';

            echo '<button name="act" value="edit;fid=' . $row['forum_id'] . '">Edit</button>&nbsp;';

            echo '<button name="act" value="delete;fid=' . $row['forum_id'] . '">Delete</button>';

            echo '</td>';

            echo '</tr>

                  <tbody id="forum_cat_' . $row['forum_id'] . '">';

            $cat_open = true;

            $order_cats[] = $row['forum_id'];

            break;

        }

      }

      while ( $row = $db->fetchrow($q) );

    }

    else

    {

      echo '<td colspan="4" class="row3">There are no forums on this board.</td>';

    }

    // Create forum button

    echo '    <tr>

                <th class="subhead" colspan="4">

                  <button name="act" value="create">Create new forum</button>

                  <button name="act" value="save_order">Save forum order</button>

                </th>

              </tr>';

    echo '  </table>

          </div>';

    $order = /* implode(',', $order_cats) . ';' . */ implode(',', $order_forums);

    echo "</form>";

  }

}

/**

 * Smart form for creating and editing Decir forums.

 * @package Decir

 * @subpackage Administration

 * @copyright 2007 Dan Fuhry

 * @license GPL

 */

class Decir_Admin_SmartForm_Forum

{

  /**

   * Whether we are creating or editing a forum.

   * @var int

   */

  var $form_mode;

  /**

   * The unique ID of the forum - only used in edit mode.

   * @var int

   */

  var $forum_id = 0;

  /**

   * The name of the forum - only used in edit mode or if performing a bounceback from a failed form validation.

   * @var string

   */

  var $forum_name = '';

  /**

   * The description of the forum - only used in edit mode or if performing a bounceback from a failed form validation.

   * @var string

   */

  var $forum_desc = '';

  /**

   * The type of entry this is (forum or category)

   * @var int

   */

  var $forum_type = -1;

  /**

   * Track if we need to make the user create a category as opposed to a forum.

   * @var bool

   */

  var $need_category = false;

  /**

   * The list of categories on the site.

   * @var array

   */

  var $category_list = array();

  /**

   * The parent category of the forum we're editing.

   * @var int

   */

  var $forum_parent = -1;

  /**

   * Instance ID for javascripting

   * @var string

   */

  var $instance_id;

  /**

   * Constructor

   * @param int Form type - should be DECIR_ADMIN_MODE_CREATE or DECIR_ADMIN_MODE_EDIT

   */

  function __construct($form_mode)

  {

    global $db, $session, $paths, $template, $plugins; // Common objects

    $form_mode = intval($form_mode);