<?php

/*

 * Enano - an open-source CMS capable of wiki functions, Drupal-like sidebar blocks, and everything in between

 * Version 1.1.6 (Caoineag beta 1)

 * Copyright (C) 2006-2008 Dan Fuhry

 *

 * This program is Free Software; you can redistribute and/or modify it under the terms of the GNU General Public License

 * as published by the Free Software Foundation; either version 2 of the License, or (at your option) any later version.

 *

 * This program is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied

 * warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for details.

 */

class template

{

  var $tpl_strings, $tpl_bool, $vars_assign_history, $theme, $style, $no_headers, $additional_headers, $sidebar_extra, $sidebar_widgets, $toolbar_menu, $theme_list, $named_theme_list, $default_theme, $default_style, $plugin_blocks, $plugin_blocks_content, $namespace_string, $style_list, $theme_loaded;

  var $theme_initted = false;

  var $page_initted = false;

  var $elements = false;

  var $page_id = false;

  var $namespace = false;

  /**

   * Page action conditions

   * @var array

   */

  var $conds = array();

  /**

   * The PageProcessor for the current page

   * @var object

   */

  var $page = false;

  /**

   * The list of themes that are critical for Enano operation. This doesn't include oxygen which

   * remains a user theme. By default this is admin and printable which have to be loaded on demand.

   * @var array

   */

  var $system_themes = array('admin', 'printable');

  /**

   * Set to true if the site is disabled and thus a message needs to be shown. This should ONLY be changed by common.php.

   * @var bool

   * @access private

   */

  var $site_disabled = false;

  /**

   * One of the absolute best parts of Enano :-P

   * @var string

   */

  var $fading_button = '';

  function __construct()

  {

    global $db, $session, $paths, $template, $plugins; // Common objects

    $this->tpl_bool    = Array();

    $this->tpl_strings = Array();

    $this->sidebar_extra = '';

    $this->toolbar_menu = '';

    $this->additional_headers = '';

    $this->plugin_blocks = Array();

    $this->plugin_blocks_content = array();

    $this->theme_loaded = false;

    $this->theme_list = Array();

    $this->named_theme_list = Array();

    $this->vars_assign_history = array(

        'strings' => array(),

        'bool' => array()

      );

    if ( defined('IN_ENANO_UPGRADE') )

    {

      return $this->construct_compat();

    }

    $q = $db->sql_query('SELECT theme_id, theme_name, enabled, default_style, group_policy, group_list FROM ' . table_prefix . 'themes;');

    if ( !$q )

      $db->_die('template.php selecting theme list');

    $i = 0;

    while ( $row = $db->fetchrow() )

    {

      $this->theme_list[$i] = $row;

      $i++;

    }

    unset($theme);

    $this->theme_list = array_values($this->theme_list);

    // Create associative array of themes

    foreach ( $this->theme_list as $i => &$theme )

      $this->named_theme_list[ $theme['theme_id'] ] =& $this->theme_list[$i];

    $this->default_theme = ( $_ = getConfig('theme_default') ) ? $_ : $this->theme_list[0]['theme_id'];

    $this->named_theme_list[ $this->default_theme ]['css'] = $this->get_theme_css_files($this->default_theme);

    // Come up with the default style. If the CSS file specified in default_style exists, we're good, just

    // use that. Otherwise, use the first stylesheet that comes to mind.

    $df_data =& $this->named_theme_list[ $this->default_theme ];

    $this->default_style = ( in_array($df_data['default_style'], $df_data['css']) ) ? $df_data['default_style'] : $df_data['css'][0];

  }

  /**

   * Gets the list of available CSS files (styles) for the specified theme.

   * @param string Theme ID

   * @return array

   */

  function get_theme_css_files($theme_id)

  {

    $css = array();

    $dir = ENANO_ROOT . "/themes/{$theme_id}/css";

    if ( $dh = @opendir($dir) )

    {

      while ( ( $file = @readdir($dh) ) !== false )

      {

        if ( preg_match('/\.css$/', $file) )

          $css[] = preg_replace('/\.css$/', '', $file);

      }

      closedir($dh);

    }

    // No CSS files? If so, nuke it.

    if ( count($css) < 1 )

    {

      unset($this->theme_list[$theme_id]);

    }

    return $css;

  }

  /**

   * Failsafe constructor for upgrades.

   */

  function construct_compat()

  {

    global $db, $session, $paths, $template, $plugins; // Common objects

    $this->tpl_bool    = Array();

    $this->tpl_strings = Array();

    $this->sidebar_extra = '';

    $this->toolbar_menu = '';

    $this->additional_headers = '';

    $this->plugin_blocks = Array();

    $this->theme_loaded = false;

    $this->fading_button = '<div style="background-image: url('.scriptPath.'/images/about-powered-enano-hover.png); background-repeat: no-repeat; width: 88px; height: 31px; margin: 0 auto 5px auto;">

                              <a style="background-image: none; padding-right: 0;" href="http://enanocms.org/" onclick="window.open(this.href); return false;"><img style="border-width: 0;" alt=" " src="'.scriptPath.'/images/about-powered-enano.png" onmouseover="domOpacity(this, 100, 0, 500);" onmouseout="domOpacity(this, 0, 100, 500);" /></a>

                            </div>';

    $this->theme_list = Array();

    $this->named_theme_list = Array();

    $q = $db->sql_query('SELECT theme_id, theme_name, enabled, default_style FROM ' . table_prefix . 'themes;');

    if ( !$q )

      $db->_die('template.php selecting theme list');

    $i = 0;

    while ( $row = $db->fetchrow() )

    {

      $this->theme_list[$i] = $row;

      $i++;

    }

    // List out all CSS files for this theme

    foreach ( $this->theme_list as $i => &$theme )

    {

      $theme['css'] = array();

      $dir = ENANO_ROOT . "/themes/{$theme['theme_id']}/css";

      if ( $dh = @opendir($dir) )

      {

        while ( ( $file = @readdir($dh) ) !== false )

        {

          if ( preg_match('/\.css$/', $file) )

            $theme['css'][] = preg_replace('/\.css$/', '', $file);

        }

        closedir($dh);

      }

      // No CSS files? If so, nuke it.

      if ( count($theme['css']) < 1 )

      {

        unset($this->theme_list[$i]);

      }

    }

    $this->theme_list = array_values($this->theme_list);

    // Create associative array of themes

    foreach ( $this->theme_list as $i => &$theme )

      $this->named_theme_list[ $theme['theme_id'] ] =& $this->theme_list[$i];

    $this->default_theme = ( $_ = getConfig('theme_default') ) ? $_ : $this->theme_list[0]['theme_id'];

    // Come up with the default style. If the CSS file specified in default_style exists, we're good, just

    // use that. Otherwise, use the first stylesheet that comes to mind.

    $df_data =& $this->named_theme_list[ $this->default_theme ];

    $this->default_style = ( in_array($df_data['default_style'], $df_data['css']) ) ? $df_data['default_style'] : $df_data['css'][0];

  }

  /**

   * Systematically deletes themes from available list if they're blocked by theme security settings. Called when session->start() finishes.

   */

  function process_theme_acls()

  {

    global $db, $session, $paths, $template, $plugins; // Common objects

    global $lang;

    // generate the fading button - needs to be done after sessions are started

    $admintitle = ( $session->user_level >= USER_LEVEL_ADMIN && is_object(@$lang) ) ? ' title="' . $lang->get('sidebar_btn_enanopowered_admin_tip') . '"' : '';

    $this->fading_button = '<div style="background-image: url('.cdnPath.'/images/about-powered-enano-hover.png); background-repeat: no-repeat; width: 88px; height: 31px; margin: 0 auto 5px auto;">

                              <a style="background-image: none; padding-right: 0;" href="http://enanocms.org/" onclick="window.open(this.href); return false;"' . $admintitle . '><img style="border-width: 0;" alt=" " src="'.cdnPath.'/images/about-powered-enano.png" onmouseover="domOpacity(this, 100, 0, 500);" onmouseout="domOpacity(this, 0, 100, 500);" /></a>

                            </div>';

    // For each theme, check ACLs and delete from RAM if not authorized

    foreach ( $this->theme_list as $i => $theme )

    {

      if ( !@$theme['group_list'] )

        continue;

      if ( $theme['theme_id'] === getConfig('theme_default') )

        continue;

      switch ( $theme['group_policy'] )

      {

        case 'allow_all':

          // Unconditionally allowed

          continue;

          break;

        case 'whitelist':

          // If we're not on the list, off to the left please

          $list = enano_json_decode($theme['group_list']);

          $allowed = false;

          foreach ( $list as $acl )

          {

            if ( !preg_match('/^(u|g):([0-9]+)$/', $acl, $match) )

              // Invalid list entry, silently allow (maybe not a good idea but

              // really, these things are checked before they're inserted)

              continue 2;

            $mode = $match[1];

            $id = intval($match[2]);

            switch ( $mode )

            {

              case 'u':

                $allowed = ( $id == $session->user_id );

                if ( $allowed )

                  break 2;

                break;

              case 'g':

                $allowed = ( isset($session->groups[$id]) );

                if ( $allowed )

                  break 2;

            }

          }

          if ( !$allowed )

          {

            unset($this->theme_list[$i]);

          }

          break;

        case 'blacklist':

          // If we're ON the list, off to the left please

          $list = enano_json_decode($theme['group_list']);

          $allowed = true;

          foreach ( $list as $acl )

          {

            if ( !preg_match('/^(u|g):([0-9]+)$/', $acl, $match) )

              // Invalid list entry, silently allow (maybe not a good idea but

              // really, these things are checked before they're inserted)

              continue 2;

            $mode = $match[1];

            $id = intval($match[2]);

            switch ( $mode )

            {

              case 'u':

                $allowed = ( $id != $session->user_id );

                if ( !$allowed )

                  break 2;

                break;

              case 'g':

                $allowed = ( !isset($session->groups[$id]) );

                if ( !$allowed )

                  break 2;

            }

          }

          if ( !$allowed )

          {

            unset($this->theme_list[$i]);

          }

          break;

      }

    }

    $this->theme_list = array_values($this->theme_list);

    // Rebuild associative theme list

    $this->named_theme_list = array();

    foreach ( $this->theme_list as $i => &$theme )

      $this->named_theme_list[ $theme['theme_id'] ] =& $this->theme_list[$i];

  }

  function sidebar_widget($t, $h, $use_normal_section = false)

  {

    global $db, $session, $paths, $template, $plugins; // Common objects

    if ( !$this->theme_loaded )

    {

      $this->load_theme($session->theme, $session->style);

    }

    if(!$this->sidebar_widgets)

      $this->sidebar_widgets = '';

    $tplvars = $this->extract_vars('elements.tpl');

    if ( $use_normal_section )

    {

      $parser = $this->makeParserText($tplvars['sidebar_section']);

    }

    else

    {

      $parser = $this->makeParserText($tplvars['sidebar_section_raw']);

    }

    $parser->assign_vars(Array('TITLE' => '{TITLE}','CONTENT' => $h));

    $this->plugin_blocks[$t] = $parser->run();

    $this->plugin_blocks_content[$t] = $h;

    $this->sidebar_widgets .= $parser->run();

  }

  function add_header($html)

  {

    /* debug only **

    $bt = debug_backtrace();

    $bt = $bt[1];

    $this->additional_headers .= "\n    <!-- {$bt['file']}:{$bt['line']} -->\n    " . $html;

    */

    $this->additional_headers .= "\n   " . $html;

  }

  function get_css($s = false)

  {

    global $db, $session, $paths, $template, $plugins; // Common objects

    $path = ( $s ) ? 'css/'.$s : 'css/'.$this->style.'.css';

    if ( !file_exists(ENANO_ROOT . '/themes/' . $this->theme . '/' . $path) )

    {

      echo "/* WARNING: Falling back to default file because file $path does not exist */\n";

      $path = 'css/' . $this->style_list[0] . '.css';

    }

  }

  function load_theme($name = false, $css = false)

  {

    global $db, $session, $paths, $template, $plugins; // Common objects

    $this->theme = ( $name ) ? $name : $session->theme;

    $this->style = ( $css ) ? $css : $session->style;

    if ( !$this->theme )

    {

      $this->theme = $this->theme_list[0]['theme_id'];

      $this->style = preg_replace('/\.css$/', '', $this->theme_list[0]['default_style']);

    }

    // Make sure we're allowed to use this theme.

    if ( (

        // If it was removed, it's probably blocked by an ACL, or it was uninstalled

        !isset($this->named_theme_list[$this->theme]) ||

        // Check if the theme is disabled

        ( isset($this->named_theme_list[$this->theme]) && isset($this->named_theme_list[$this->theme]['enabled']) && $this->named_theme_list[$this->theme]['enabled'] == 0 ) )

        // Above all, if it's a system theme, don't inhibit the loading process.

        && !in_array($this->theme, $this->system_themes)

      )

    {

      // No, something is preventing it - fall back to site default

      $this->theme = $this->default_theme;

      // Come up with the default style. If the CSS file specified in default_style exists, we're good, just

      // use that. Otherwise, use the first stylesheet that comes to mind.

      $df_data =& $this->named_theme_list[ $this->theme ];

      $this->style = ( in_array($df_data['default_style'], $df_data['css']) ) ? $df_data['default_style'] : $df_data['css'][0];

    }

    // The list of styles for the currently selected theme

    $this->style_list =& $this->named_theme_list[ $this->theme ]['css'];

    $this->theme_loaded = true;

  }

  /**

   * Change the theme we're supposed to display.

   * @param string Theme name

   * @param string Style name; optional

   */

  function set_theme($theme = false, $style = false)

  {

    $this->theme_initted = false;

    $this->load_theme($theme, $style);

  }

  /**

   * Change the page we're supposed to generate for

   * @param mixed Page ID *or* PageProcessor. If a PageProcessor, pulls permission info and such from that; if not, starts a PageProcessor. YOU SHOULD USE A PageProcessor WHENEVER POSSIBLE! It improves efficiency.

   * @param string Namespace; not required if including a PageProcessor.

   */

  function set_page($page_id_or_pp, $namespace = false)

  {

    if ( is_object($page_id_or_pp) && get_class($page_id_or_pp) === 'PageProcessor' )

    {

      $this->page_initted = false;

      $page =& $page_id_or_pp;

      $this->page = $page;

      $this->page_id = $page->page_id;

      $this->namespace = $page->namespace;

    }

    else if ( is_string($page_id_or_pp) )

    {

      if ( !is_string($namespace) )

        return false;

      if ( $page_id_or_pp === $this->page_id && $namespace === $this->namespace )

        return true;

      $this->page_initted = false;

      $this->page = false;

      $this->page_id = sanitize_page_id($page_id_or_pp);

      $this->namespace = $namespace;

    }

    else

    {

      return false;

    }

    return true;

  }

  /**

   * Global, only-called-once init. Goes to all themes.

   */

  function init_global_vars()

  {

    global $db, $session, $paths, $template, $plugins; // Common objects

    global $lang;

    global $email;

    // IE PNG fixing code

    if ( isset($_SERVER['HTTP_USER_AGENT']) && strstr($_SERVER['HTTP_USER_AGENT'], 'MSIE') )

    {

      $this->add_header('

        <!--[if lt IE 7]>

        <script language="JavaScript">

        function correctPNG() // correctly handle PNG transparency in Win IE 5.5 & 6.

        {

           var arVersion = navigator.appVersion.split("MSIE");

           var version = parseFloat(arVersion[1]);

           if (version >= 5.5 && typeof(document.body.filters) == "object")

           {

              for(var i=0; i<document.images.length; i++)

              {

                 var img = document.images[i];

                 continue;

                 var imgName = img.src.toUpperCase();

                 if (imgName.substring(imgName.length-3, imgName.length) == "PNG")

                 {

                    var imgID = (img.id) ? "id=\'" + img.id + "\' " : "";

                    var imgClass = (img.className) ? "class=\'" + img.className + "\' " : "";

                    var imgTitle = (img.title) ? "title=\'" + img.title + "\' " : "title=\'" + img.alt + "\' ";

                    var imgStyle = "display:inline-block;" + img.style.cssText;

                    if (img.align == "left") imgStyle = "float:left;" + imgStyle;

                    if (img.align == "right") imgStyle = "float:right;" + imgStyle;

                    if (img.parentElement.href) imgStyle = "cursor:hand;" + imgStyle;

                    var strNewHTML = "<span " + imgID + imgClass + imgTitle + " style=\\"" + "width:" + img.width + "px; height:" + img.height + "px;" + imgStyle + ";" + "filter:progid:DXImageTransform.Microsoft.AlphaImageLoader" + "(src=\\\'" + img.src + "\\\', sizingMethod=\'scale\');\\"></span>";

                    img.outerHTML = strNewHTML;

                    i = i-1;

                 }

              }

           }   

        }

        window.attachEvent("onload", correctPNG);

        </script>

        <![endif]-->

        ');

    }

    $is_opera = (isset($_SERVER['HTTP_USER_AGENT']) && strstr($_SERVER['HTTP_USER_AGENT'], 'Opera')) ? true : false;

    $is_msie = (isset($_SERVER['HTTP_USER_AGENT']) && strstr($_SERVER['HTTP_USER_AGENT'], 'MSIE')) ? true : false;

    $this->assign_bool(array(

        'auth_admin' => $session->user_level >= USER_LEVEL_ADMIN ? true : false,

        'user_logged_in' => $session->user_logged_in,

        'opera' => $is_opera,

        'msie' => $is_msie

      ));

    if ( $session->sid_super )

    {

      $ash = '&auth=' . $session->sid_super;

      $asq = "?auth=" . $session->sid_super;

      $asa = "&auth=" . $session->sid_super;

      $as2 = htmlspecialchars(urlSeparator) . 'auth='.$session->sid_super;