<?php

/*

 * Enano - an open-source CMS capable of wiki functions, Drupal-like sidebar blocks, and everything in between

 * Version 1.1.4 (Caoineag alpha 4)

 * Copyright (C) 2006-2008 Dan Fuhry

 *

 * This program is Free Software; you can redistribute and/or modify it under the terms of the GNU General Public License

 * as published by the Free Software Foundation; either version 2 of the License, or (at your option) any later version.

 *

 * This program is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied

 * warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for details.

 */

class template

{

  var $tpl_strings, $tpl_bool, $vars_assign_history, $theme, $style, $no_headers, $additional_headers, $sidebar_extra, $sidebar_widgets, $toolbar_menu, $theme_list, $named_theme_list, $default_theme, $default_style, $plugin_blocks, $namespace_string, $style_list, $theme_loaded;

  /**

   * The list of themes that are critical for Enano operation. This doesn't include oxygen which

   * remains a user theme. By default this is admin and printable which have to be loaded on demand.

   * @var array

   */

  var $system_themes = array('admin', 'printable');

  /**

   * Set to true if the site is disabled and thus a message needs to be shown. This should ONLY be changed by common.php.

   * @var bool

   * @access private

   */

  var $site_disabled = false;

  /**

   * One of the absolute best parts of Enano :-P

   * @var string

   */

  var $fading_button = '';

  function __construct()

  {

    global $db, $session, $paths, $template, $plugins; // Common objects

    $this->tpl_bool    = Array();

    $this->tpl_strings = Array();

    $this->sidebar_extra = '';

    $this->toolbar_menu = '';

    $this->additional_headers = '';

    $this->plugin_blocks = Array();

    $this->theme_loaded = false;

    $this->fading_button = '<div style="background-image: url('.scriptPath.'/images/about-powered-enano-hover.png); background-repeat: no-repeat; width: 88px; height: 31px; margin: 0 auto 5px auto;">

                              <a style="background-image: none; padding-right: 0;" href="http://enanocms.org/" onclick="window.open(this.href); return false;"><img style="border-width: 0;" alt=" " src="'.scriptPath.'/images/about-powered-enano.png" onmouseover="domOpacity(this, 100, 0, 500);" onmouseout="domOpacity(this, 0, 100, 500);" /></a>

                            </div>';

    $this->theme_list = Array();

    $this->named_theme_list = Array();

    $this->vars_assign_history = array(

        'strings' => array(),

        'bool' => array()

      );

    if ( defined('IN_ENANO_UPGRADE') )

    {

      return $this->construct_compat();

    }

    $q = $db->sql_query('SELECT theme_id, theme_name, enabled, default_style, group_policy, group_list FROM ' . table_prefix . 'themes;');

    if ( !$q )

      $db->_die('template.php selecting theme list');

    $i = 0;

    while ( $row = $db->fetchrow() )

    {

      $this->theme_list[$i] = $row;

      $i++;

    }

    // List out all CSS files for this theme

    foreach ( $this->theme_list as $i => &$theme )

    {

      $theme['css'] = array();

      $dir = ENANO_ROOT . "/themes/{$theme['theme_id']}/css";

      if ( $dh = @opendir($dir) )

      {

        while ( ( $file = @readdir($dh) ) !== false )

        {

          if ( preg_match('/\.css$/', $file) )

            $theme['css'][] = preg_replace('/\.css$/', '', $file);

        }

        closedir($dh);

      }

      // No CSS files? If so, nuke it.

      if ( count($theme['css']) < 1 )

      {

        unset($this->theme_list[$i]);

      }

    }

    $this->theme_list = array_values($this->theme_list);

    // Create associative array of themes

    foreach ( $this->theme_list as $i => &$theme )

      $this->named_theme_list[ $theme['theme_id'] ] =& $this->theme_list[$i];

    $this->default_theme = ( $_ = getConfig('theme_default') ) ? $_ : $this->theme_list[0]['theme_id'];

    // Come up with the default style. If the CSS file specified in default_style exists, we're good, just

    // use that. Otherwise, use the first stylesheet that comes to mind.

    $df_data =& $this->named_theme_list[ $this->default_theme ];

    $this->default_style = ( in_array($df_data['default_style'], $df_data['css']) ) ? $df_data['default_style'] : $df_data['css'][0];

  }

  /**

   * Failsafe constructor for upgrades.

   */

  function construct_compat()

  {

    global $db, $session, $paths, $template, $plugins; // Common objects

    $this->tpl_bool    = Array();

    $this->tpl_strings = Array();

    $this->sidebar_extra = '';

    $this->toolbar_menu = '';

    $this->additional_headers = '';

    $this->plugin_blocks = Array();

    $this->theme_loaded = false;

    $this->fading_button = '<div style="background-image: url('.scriptPath.'/images/about-powered-enano-hover.png); background-repeat: no-repeat; width: 88px; height: 31px; margin: 0 auto 5px auto;">

                              <a style="background-image: none; padding-right: 0;" href="http://enanocms.org/" onclick="window.open(this.href); return false;"><img style="border-width: 0;" alt=" " src="'.scriptPath.'/images/about-powered-enano.png" onmouseover="domOpacity(this, 100, 0, 500);" onmouseout="domOpacity(this, 0, 100, 500);" /></a>

                            </div>';

    $this->theme_list = Array();

    $this->named_theme_list = Array();

    $q = $db->sql_query('SELECT theme_id, theme_name, enabled, default_style FROM ' . table_prefix . 'themes;');

    if ( !$q )

      $db->_die('template.php selecting theme list');

    $i = 0;

    while ( $row = $db->fetchrow() )

    {

      $this->theme_list[$i] = $row;

      $i++;

    }

    // List out all CSS files for this theme

    foreach ( $this->theme_list as $i => &$theme )

    {

      $theme['css'] = array();

      $dir = ENANO_ROOT . "/themes/{$theme['theme_id']}/css";

      if ( $dh = @opendir($dir) )

      {

        while ( ( $file = @readdir($dh) ) !== false )

        {

          if ( preg_match('/\.css$/', $file) )

            $theme['css'][] = preg_replace('/\.css$/', '', $file);

        }

        closedir($dh);

      }

      // No CSS files? If so, nuke it.

      if ( count($theme['css']) < 1 )

      {

        unset($this->theme_list[$i]);

      }

    }

    $this->theme_list = array_values($this->theme_list);

    // Create associative array of themes

    foreach ( $this->theme_list as $i => &$theme )

      $this->named_theme_list[ $theme['theme_id'] ] =& $this->theme_list[$i];

    $this->default_theme = ( $_ = getConfig('theme_default') ) ? $_ : $this->theme_list[0]['theme_id'];

    // Come up with the default style. If the CSS file specified in default_style exists, we're good, just

    // use that. Otherwise, use the first stylesheet that comes to mind.

    $df_data =& $this->named_theme_list[ $this->default_theme ];

    $this->default_style = ( in_array($df_data['default_style'], $df_data['css']) ) ? $df_data['default_style'] : $df_data['css'][0];

  }

  /**

   * Systematically deletes themes if they're blocked by theme security settings. Called when session->start() finishes.

   */

  function process_theme_acls()

  {

    global $db, $session, $paths, $template, $plugins; // Common objects

    // For each theme, check ACLs and delete from RAM if not authorized

    foreach ( $this->theme_list as $i => $theme )

    {

      if ( !@$theme['group_list'] )

        continue;

      if ( $theme['theme_id'] === getConfig('theme_default') )

        continue;

      switch ( $theme['group_policy'] )

      {

        case 'allow_all':

          // Unconditionally allowed

          continue;

          break;

        case 'whitelist':

          // If we're not on the list, off to the left please

          $list = enano_json_decode($theme['group_list']);

          $allowed = false;

          foreach ( $list as $acl )

          {

            if ( !preg_match('/^(u|g):([0-9]+)$/', $acl, $match) )

              // Invalid list entry, silently allow (maybe not a good idea but

              // really, these things are checked before they're inserted)

              continue 2;

            $mode = $match[1];

            $id = intval($match[2]);

            switch ( $mode )

            {

              case 'u':

                $allowed = ( $id == $session->user_id );

                if ( $allowed )

                  break 2;

                break;

              case 'g':

                $allowed = ( isset($session->groups[$id]) );

                if ( $allowed )

                  break 2;

            }

          }

          if ( !$allowed )

          {

            unset($this->theme_list[$i]);

          }

          break;

        case 'blacklist':

          // If we're ON the list, off to the left please

          $list = enano_json_decode($theme['group_list']);

          $allowed = true;

          foreach ( $list as $acl )

          {

            if ( !preg_match('/^(u|g):([0-9]+)$/', $acl, $match) )

              // Invalid list entry, silently allow (maybe not a good idea but

              // really, these things are checked before they're inserted)

              continue 2;

            $mode = $match[1];

            $id = intval($match[2]);

            switch ( $mode )

            {

              case 'u':

                $allowed = ( $id != $session->user_id );

                if ( !$allowed )

                  break 2;

                break;

              case 'g':

                $allowed = ( !isset($session->groups[$id]) );

                if ( !$allowed )

                  break 2;

            }

          }

          if ( !$allowed )

          {

            unset($this->theme_list[$i]);

          }

          break;

      }

    }

    $this->theme_list = array_values($this->theme_list);

    // Rebuild associative theme list

    $this->named_theme_list = array();

    foreach ( $this->theme_list as $i => &$theme )

      $this->named_theme_list[ $theme['theme_id'] ] =& $this->theme_list[$i];

  }

  function sidebar_widget($t, $h, $use_normal_section = false)

  {

    global $db, $session, $paths, $template, $plugins; // Common objects

    if(!defined('ENANO_TEMPLATE_LOADED'))

    {

      $this->load_theme($session->theme, $session->style);

    }

    if(!$this->sidebar_widgets)

      $this->sidebar_widgets = '';

    $tplvars = $this->extract_vars('elements.tpl');

    if ( $use_normal_section )

    {

      $parser = $this->makeParserText($tplvars['sidebar_section']);

    }

    else

    {

      $parser = $this->makeParserText($tplvars['sidebar_section_raw']);

    }

    $parser->assign_vars(Array('TITLE' => '{TITLE}','CONTENT' => $h));

    $this->plugin_blocks[$t] = $parser->run();

    $this->sidebar_widgets .= $parser->run();

  }

  function add_header($html)

  {

    $this->additional_headers .= "\n" . $html;

  }

  function get_css($s = false)

  {

    global $db, $session, $paths, $template, $plugins; // Common objects

    if(!defined('ENANO_TEMPLATE_LOADED'))

      $this->load_theme($session->theme, $session->style);

    $path = ( $s ) ? 'css/'.$s : 'css/'.$this->style.'.css';

    if ( !file_exists(ENANO_ROOT . '/themes/' . $this->theme . '/' . $path) )

    {

      echo "/* WARNING: Falling back to default file because file $path does not exist */\n";

      $path = 'css/' . $this->style_list[0] . '.css';

    }

    return '<enano:no-opt>' . $this->process_template($path) . '</enano:no-opt>';

  }

  function load_theme($name = false, $css = false)

  {

    global $db, $session, $paths, $template, $plugins; // Common objects

    $this->theme = ( $name ) ? $name : $session->theme;

    $this->style = ( $css ) ? $css : $session->style;

    if ( !$this->theme )

    {

      $this->theme = $this->theme_list[0]['theme_id'];

      $this->style = preg_replace('/\.css$/', '', $this->theme_list[0]['default_style']);

    }

    // Make sure we're allowed to use this theme.

    if ( (

        // If it was removed, it's probably blocked by an ACL, or it was uninstalled

        !isset($this->named_theme_list[$this->theme]) ||

        // Check if the theme is disabled

        ( isset($this->named_theme_list[$this->theme]) && $this->named_theme_list[$this->theme]['enabled'] == 0 ) )

        // Above all, if it's a system theme, don't inhibit the loading process.

        && !in_array($this->theme, $this->system_themes)

      )

    {

      // No, something is preventing it - fall back to site default

      $this->theme = $this->default_theme;

      // Come up with the default style. If the CSS file specified in default_style exists, we're good, just

      // use that. Otherwise, use the first stylesheet that comes to mind.

      $df_data =& $this->named_theme_list[ $this->theme ];

      $this->style = ( in_array($df_data['default_style'], $df_data['css']) ) ? $df_data['default_style'] : $df_data['css'][0];

    }

    // The list of styles for the currently selected theme

    $this->style_list =& $this->named_theme_list[ $this->theme ]['css'];

    $this->theme_loaded = true;

  }

  /**

   * Initializes all variables related to on-page content. This includes sidebars and what have you.

   * @param object Optional PageProcessor object to use for passing metadata and permissions on. If omitted, uses information from $paths and $session.

   */

  function init_vars($page = false)

  {

    global $db, $session, $paths, $template, $plugins; // Common objects

    global $email;

    global $lang;

    profiler_log("template: starting var init");

    if(!$this->theme || !$this->style)

    {

      $this->load_theme();

    }

    if ( defined('ENANO_TEMPLATE_LOADED') )

    {

      // trigger_error("\$template->init_vars() called more than once", E_USER_WARNING);

      // die_semicritical('Illegal call', '<p>$template->init_vars() was called multiple times, this is not supposed to happen. Exiting with fatal error.</p>');

    }

    else

    {

      @define('ENANO_TEMPLATE_LOADED', '');

    }

    if ( is_object($page) && @get_class($page) == 'PageProcessor' )

    {

      $page_append = substr($paths->fullpage, strlen($paths->page));

      if ( isset($paths->nslist[$page->namespace]) )

      {

        $local_page = $paths->nslist[$page->namespace] . $page->page_id;

      }

      else

      {

        $local_page = $page->namespace . substr($paths->nslist['Special'], -1) . $page->page_id . $page_append;

      }

      $local_fullpage = $local_page . $page_append;

      $local_page_id =& $page->page_id;

      $local_namespace =& $page->namespace;

      $local_page_exists =& $page->page_exists;

      $perms =& $page->perms;

    }

    else

    {

      $local_page =& $paths->page;

      $local_page_id =& $paths->page_id;

      $local_fullpage =& $paths->fullpage;

      $local_namespace =& $paths->namespace;

      $local_page_exists =& $paths->page_exists;

      $local_page_protected =& $paths->page_protected;

      $perms =& $session;

    }

    if ( $local_page_exists && isset($paths->pages[$local_page]) )

    {

      $local_cdata =& $paths->pages[$local_page];

    }

    else

    {

      // if the page doesn't exist but we're trying to load it, it was requested manually and $paths->cpage should match it.

      if ( $paths->page_id == $local_page_id )

      {

        // load metadata from cpage

        $local_cdata =& $paths->cpage;

      }

      else

      {

        // generate our own failsafe metadata

        $local_cdata = array(

            'urlname' => $local_page,

            'urlname_nons' => $local_page_id,

            'namespace' => $local_namespace,

            'name' => get_page_title_ns($local_page_id, $local_namespace),

            'comments_on' => 0,

            'protected' => 0,

            'wiki_mode' => 2,

            'delvotes' => 0,

            'delvote_ips' => serialize(array())

          );

      }

    }

    // calculate protection

    if ( !isset($local_page_protected) )

    {

      if ( $local_cdata['protected'] == 0 )

      {

        $local_page_protected = false;

      }

      else if ( $local_cdata['protected'] == 1 )

      {

        $local_page_protected = true;

      }

      else if ( $local_cdata['protected'] == 2 )

      {

        if (

             ( !$session->user_logged_in || // Is the user logged in?

               ( $session->user_logged_in && $session->reg_time + ( 4 * 86400 ) >= time() ) ) // If so, have they been registered for 4 days?

             && !$perms->get_permissions('even_when_protected') ) // And of course, is there an ACL that overrides semi-protection?

        {

          $local_page_protected = true;

        }

        else

        {

          $local_page_protected = false;

        }

      }

    }

    $tplvars = $this->extract_vars('elements.tpl');

    if(isset($_SERVER['HTTP_USER_AGENT']) && strstr($_SERVER['HTTP_USER_AGENT'], 'MSIE'))

    {

      $this->add_header('

        <!--[if lt IE 7]>

        <script language="JavaScript">

        function correctPNG() // correctly handle PNG transparency in Win IE 5.5 & 6.

        {

           var arVersion = navigator.appVersion.split("MSIE");

           var version = parseFloat(arVersion[1]);

           if (version >= 5.5 && typeof(document.body.filters) == "object")

           {

              for(var i=0; i<document.images.length; i++)

              {

                 var img = document.images[i];

                 continue;

                 var imgName = img.src.toUpperCase();

                 if (imgName.substring(imgName.length-3, imgName.length) == "PNG")

                 {

                    var imgID = (img.id) ? "id=\'" + img.id + "\' " : "";

                    var imgClass = (img.className) ? "class=\'" + img.className + "\' " : "";

                    var imgTitle = (img.title) ? "title=\'" + img.title + "\' " : "title=\'" + img.alt + "\' ";

                    var imgStyle = "display:inline-block;" + img.style.cssText;

                    if (img.align == "left") imgStyle = "float:left;" + imgStyle;

                    if (img.align == "right") imgStyle = "float:right;" + imgStyle;

                    if (img.parentElement.href) imgStyle = "cursor:hand;" + imgStyle;

                    var strNewHTML = "<span " + imgID + imgClass + imgTitle + " style=\\"" + "width:" + img.width + "px; height:" + img.height + "px;" + imgStyle + ";" + "filter:progid:DXImageTransform.Microsoft.AlphaImageLoader" + "(src=\\\'" + img.src + "\\\', sizingMethod=\'scale\');\\"></span>";

                    img.outerHTML = strNewHTML;

                    i = i-1;

                 }

              }

           }   

        }

        window.attachEvent("onload", correctPNG);

        </script>

        <![endif]-->

        ');

    }

    // Get the "article" button text (depends on namespace)

    switch($local_namespace) {

      case "Article":

      default:

        $ns = $lang->get('onpage_lbl_page_article');

        break;