<?php

/*

 * Enano - an open-source CMS capable of wiki functions, Drupal-like sidebar blocks, and everything in between

 * Copyright (C) 2006-2009 Dan Fuhry

 *

 * This program is Free Software; you can redistribute and/or modify it under the terms of the GNU General Public License

 * as published by the Free Software Foundation; either version 2 of the License, or (at your option) any later version.

 *

 * This program is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied

 * warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for details.

 */

function page_Admin_PageGroups()

{

	global $db, $session, $paths, $template, $plugins; // Common objects

	global $lang;

	if ( $session->auth_level < USER_LEVEL_ADMIN || $session->user_level < USER_LEVEL_ADMIN )

	{

		$login_link = makeUrlNS('Special', 'Login/' . $paths->nslist['Special'] . 'Administration', 'level=' . USER_LEVEL_ADMIN, true);

		echo '<h3>' . $lang->get('adm_err_not_auth_title') . '</h3>';

		echo '<p>' . $lang->get('adm_err_not_auth_body', array( 'login_link' => $login_link )) . '</p>';

		return;

	}

	if ( isset($_POST['action']) )

	{

		if ( isset($_POST['action']['create']) || isset($_POST['action']['create_stage2']) )

		{

			switch ( isset($_POST['action']['create_stage2']) )

			{

				case true:

					if ( empty($_POST['pg_name']) || empty($_POST['group_type']) )

					{

						echo '<div class="error-box">' . $lang->get('acppg_err_need_name') . '</div>';

						return;

					}

					if ( $_POST['group_type'] == PAGE_GRP_TAGGED && empty($_POST['member_tag']) )

					{

						echo '<div class="error-box">' . $lang->get('acppg_err_need_tag') . '</div>';

						return;

					}

					if ( $_POST['group_type'] == PAGE_GRP_CATLINK && empty($_POST['member_cat']) )

					{

						echo '<div class="error-box">' . $lang->get('acppg_err_need_cat') . '</div>';

						return;

					}

					if ( $_POST['group_type'] == PAGE_GRP_NORMAL && empty($_POST['member_page_0']) )

					{

						echo '<div class="error-box">' . $lang->get('acppg_err_need_page') . '</div>';

						return;

					}

					if ( $_POST['group_type'] == PAGE_GRP_REGEX && empty($_POST['regex']) )

					{

						echo '<div class="error-box">' . $lang->get('acppg_err_need_regex') . '</div>';

						return;

					}

					if ( $_POST['group_type'] != PAGE_GRP_TAGGED && $_POST['group_type'] != PAGE_GRP_CATLINK && $_POST['group_type'] != PAGE_GRP_NORMAL && $_POST['group_type'] != PAGE_GRP_REGEX )

					{

						echo '<div class="error-box">Umm, you sent an invalid group type. I\'d put a real error message here but this will only be shown if you try to hack the system.</div>';

						return;

					}

					// All checks passed, create the group

					switch($_POST['group_type'])

					{

						case PAGE_GRP_TAGGED:

							$name = $db->escape($_POST['pg_name']);

							$tag  = $db->escape($_POST['member_tag']);

							$sql = 'INSERT INTO '.table_prefix.'page_groups(pg_type,pg_name,pg_target) VALUES(' . PAGE_GRP_TAGGED . ', \'' . $name . '\', \'' . $tag . '\');';

							$q = $db->sql_query($sql);

							if ( !$q )

								$db->_die();

							break;

						case PAGE_GRP_CATLINK:

							$name = $db->escape($_POST['pg_name']);

							$cat  = $db->escape($_POST['member_cat']);

							$sql = 'INSERT INTO '.table_prefix.'page_groups(pg_type,pg_name,pg_target) VALUES(' . PAGE_GRP_CATLINK . ', \'' . $name . '\', \'' . $cat . '\');';

							$q = $db->sql_query($sql);

							if ( !$q )

								$db->_die();

							break;

						case PAGE_GRP_NORMAL:

							$name = $db->escape($_POST['pg_name']);

							$sql = 'INSERT INTO '.table_prefix.'page_groups(pg_type,pg_name) VALUES(' . PAGE_GRP_NORMAL . ', \'' . $name . '\');';

							$q = $db->sql_query($sql);

							if ( !$q )

								$db->_die();

							$ins_id = $db->insert_id();

							// Page list

							$keys = array_keys($_POST);

							$arr_pages = array();

							foreach ( $keys as $val )

							{

								if ( preg_match('/^member_page_([0-9]+?)$/', $val) && !empty($_POST[$val]) && isPage($_POST[$val]) )

								{

									$arr_pages[] = $_POST[$val];

								}

							}

							$arr_sql = array();

							foreach ( $arr_pages as $page )

							{

								list($id, $ns) = RenderMan::strToPageID($page);

								$id = sanitize_page_id($id);

								$arr_sql[] = '(' . $ins_id . ',\'' . $db->escape($id) . '\', \'' . $ns . '\')';

							}

							$sql = 'INSERT INTO '.table_prefix.'page_group_members(pg_id,page_id,namespace) VALUES' . implode(',', $arr_sql) . ';';

							$q = $db->sql_query($sql);

							if ( !$q )

								$db->_die();

							break;

						case PAGE_GRP_REGEX:

							$name  = $db->escape($_POST['pg_name']);

							$regex = $db->escape($_POST['regex']);

							$sql = 'INSERT INTO '.table_prefix.'page_groups(pg_type,pg_name,pg_target) VALUES(' . PAGE_GRP_REGEX . ', \'' . $name . '\', \'' . $regex . '\');';

							$q = $db->sql_query($sql);

							if ( !$q )

								$db->_die();

							break;

					}

					echo '<div class="info-box">' . $lang->get('acppg_msg_create_success', array('group_name' => htmlspecialchars($_POST['pg_name']))) . '</div>';

					break;

			}

			// A little Javascript magic

			?>

			<script language="javascript" type="text/javascript">

				function pg_create_typeset(selector)

				{

					var pg_normal  = <?php echo PAGE_GRP_NORMAL; ?>;

					var pg_tagged  = <?php echo PAGE_GRP_TAGGED; ?>;

					var pg_catlink = <?php echo PAGE_GRP_CATLINK; ?>;

					var pg_regex   = <?php echo PAGE_GRP_REGEX; ?>;

					var selection = false;

					// Get selection

					for ( var i = 0; i < selector.childNodes.length; i++ )

					{

						var child = selector.childNodes[i];

						if ( !child || child.tagName != 'OPTION' )

						{

							continue;

						}

						if ( child.selected )

						{

							selection = child.value;

						}

					}

					if ( !selection )

					{

						alert('Cannot get field value');

						return true;

					}

					selection = parseInt(selection);

					if ( selection != pg_normal && selection != pg_tagged && selection != pg_catlink && selection != pg_regex )

					{

						alert('Invalid field value');

						return true;

					}

					// We have the selection and it's validated; show the appropriate field group

					if ( selection == pg_normal )

					{

						document.getElementById('pg_create_title_catlink').style.display = 'none';

						document.getElementById('pg_create_catlink_1').style.display = 'none';

						document.getElementById('pg_create_catlink_2').style.display = 'none';

						document.getElementById('pg_create_title_tagged').style.display = 'none';

						document.getElementById('pg_create_tagged_1').style.display = 'none';

						document.getElementById('pg_create_tagged_2').style.display = 'none';

						document.getElementById('pg_create_title_normal').style.display = 'inline';

						document.getElementById('pg_create_normal_1').style.display = 'block';

						document.getElementById('pg_create_normal_2').style.display = 'block';

						document.getElementById('pg_create_title_regex').style.display = 'none';

						document.getElementById('pg_create_regex_1').style.display = 'none';

						document.getElementById('pg_create_regex_2').style.display = 'none';

					}

					else if ( selection == pg_catlink )

					{

						document.getElementById('pg_create_title_catlink').style.display = 'inline';

						document.getElementById('pg_create_catlink_1').style.display = 'block';

						document.getElementById('pg_create_catlink_2').style.display = 'block';

						document.getElementById('pg_create_title_tagged').style.display = 'none';

						document.getElementById('pg_create_tagged_1').style.display = 'none';

						document.getElementById('pg_create_tagged_2').style.display = 'none';

						document.getElementById('pg_create_title_normal').style.display = 'none';

						document.getElementById('pg_create_normal_1').style.display = 'none';

						document.getElementById('pg_create_normal_2').style.display = 'none';

						document.getElementById('pg_create_title_regex').style.display = 'none';

						document.getElementById('pg_create_regex_1').style.display = 'none';

						document.getElementById('pg_create_regex_2').style.display = 'none';

					}

					else if ( selection == pg_tagged )

					{

						document.getElementById('pg_create_title_catlink').style.display = 'none';

						document.getElementById('pg_create_catlink_1').style.display = 'none';

						document.getElementById('pg_create_catlink_2').style.display = 'none';

						document.getElementById('pg_create_title_tagged').style.display = 'inline';

						document.getElementById('pg_create_tagged_1').style.display = 'block';

						document.getElementById('pg_create_tagged_2').style.display = 'block';

						document.getElementById('pg_create_title_normal').style.display = 'none';

						document.getElementById('pg_create_normal_1').style.display = 'none';

						document.getElementById('pg_create_normal_2').style.display = 'none';

						document.getElementById('pg_create_title_regex').style.display = 'none';

						document.getElementById('pg_create_regex_1').style.display = 'none';

						document.getElementById('pg_create_regex_2').style.display = 'none';

					}

					else if ( selection == pg_regex )

					{

						document.getElementById('pg_create_title_catlink').style.display = 'none';

						document.getElementById('pg_create_catlink_1').style.display = 'none';

						document.getElementById('pg_create_catlink_2').style.display = 'none';

						document.getElementById('pg_create_title_tagged').style.display = 'none';

						document.getElementById('pg_create_tagged_1').style.display = 'none';

						document.getElementById('pg_create_tagged_2').style.display = 'none';

						document.getElementById('pg_create_title_normal').style.display = 'none';

						document.getElementById('pg_create_normal_1').style.display = 'none';

						document.getElementById('pg_create_normal_2').style.display = 'none';

						document.getElementById('pg_create_title_regex').style.display = 'inline';

						document.getElementById('pg_create_regex_1').style.display = 'block';

						document.getElementById('pg_create_regex_2').style.display = 'block';

					}

				}

				// Set to pg_normal on page load

				var pg_createform_init = function()

				{

					document.getElementById('pg_create_title_catlink').style.display = 'none';

					document.getElementById('pg_create_catlink_1').style.display = 'none';

					document.getElementById('pg_create_catlink_2').style.display = 'none';

					document.getElementById('pg_create_title_tagged').style.display = 'none';

					document.getElementById('pg_create_tagged_1').style.display = 'none';

					document.getElementById('pg_create_tagged_2').style.display = 'none';

					document.getElementById('pg_create_title_regex').style.display = 'none';

					document.getElementById('pg_create_regex_1').style.display = 'none';

					document.getElementById('pg_create_regex_2').style.display = 'none';

					document.getElementById('pg_create_title_normal').style.display = 'inline';

					document.getElementById('pg_create_normal_1').style.display = 'block';

					document.getElementById('pg_create_normal_2').style.display = 'block';

				}

				function pg_create_more_fields()

				{

					var targettd = document.getElementById('pg_create_normal_2');

					var id = 0;

					for ( var i = 0; i < targettd.childNodes.length; i++ )

					{

						var child = targettd.childNodes[i];

						if ( child.tagName == 'INPUT' )

						{

							if ( child.type == 'button' )

							{

								var newInp = document.createElement('input');

								// <input type="text" name="member_page_1" id="pg_create_member_1" onkeyup="return ajaxPageNameComplete(this);" size="30" /><br />

								newInp.type    = 'text';

								newInp.name    = 'member_page_' + id;

								newInp.id      = 'pg_create_member_' + id;

								newInp.onkeyup = function(e) { return ajaxPageNameComplete(this); };

								newInp.size    = '30';

								newInp.style.marginTop = '3px';

								targettd.insertBefore(newInp, child);

								targettd.insertBefore(document.createElement('br'), child);

								break;

							}

							else // if ( child.type == 'text' )

							{

								id++;

							}

						}

					}

				}

			</script>

			<?php

			// Build category list

			$q = $db->sql_query('SELECT name,urlname FROM '.table_prefix.'pages WHERE namespace=\'Category\';');

			if ( !$q )

				$db->_die();

			if ( $db->numrows() < 1 )

			{

				$catlist = $lang->get('acppg_err_no_cats');

			}

			else

			{

				$catlist = '<select name="member_cat">';

				while ( $row = $db->fetchrow() )

				{

					$catlist .= '<option value="' . htmlspecialchars($row['urlname']) . '">' . htmlspecialchars($row['name']) . '</option>';

				}

				$catlist .= '</select>';

			}

			echo '<script type="text/javascript">

							var __pg_edit_submitAuthorized = true;

						</script>';

			echo '<form action="'.makeUrl($paths->nslist['Special'].'Administration', 'module='.$paths->cpage['module']).'" method="post" onsubmit="if(!submitAuthorized || !__pg_edit_submitAuthorized) return false;" enctype="multipart/form-data">';

			echo '<div class="tblholder">

						<table border="0" cellspacing="1" cellpadding="4">

							<tr>

							<th colspan="2">' . $lang->get('acppg_th_create') . '</th>

							</tr>';

			// Name

			echo '<tr>

							<td class="row2">

							' . $lang->get('acppg_field_group_name') . '<br />

							<small>' . $lang->get('acppg_field_group_name_hint') . '</small>

							</td>

							<td class="row1">

							<input type="text" name="pg_name" size="30" />

							</td>

						</tr>';

			// Group type

			echo '<tr>

							<td class="row2">

							' . $lang->get('acppg_field_group_type') . '

							</td>

							<td class="row1">

							<select name="group_type" onchange="pg_create_typeset(this);">

								<option value="' . PAGE_GRP_NORMAL  . '" selected="selected">' . $lang->get('acppg_gtype_static') . '</option>

								<option value="' . PAGE_GRP_TAGGED  . '">' . $lang->get('acppg_gtype_tagged') . '</option>

								<option value="' . PAGE_GRP_CATLINK . '">' . $lang->get('acppg_gtype_catlink') . '</option>

								<option value="' . PAGE_GRP_REGEX   . '">' . $lang->get('acppg_gtype_regex_long') . '</option>

							</select>

							</td>

						</tr>';

			// Titles

			echo '<tr>

							<th colspan="2">

								<span id="pg_create_title_normal">

									' . $lang->get('acppg_gtype_static') . '

								</span>

								<span id="pg_create_title_tagged">

									' . $lang->get('acppg_gtype_tagged') . '

								</span>

								<span id="pg_create_title_catlink">

									' . $lang->get('acppg_gtype_catlink') . '

								</span>

								<span id="pg_create_title_regex">

									' . $lang->get('acppg_gtype_regex') . '

								</span>

							</th>

						</tr>';

			echo '<tr>

							<td class="row2">

								<div id="pg_create_normal_1">

									' . $lang->get('acppg_field_member_pages') . '<br />

									<small>' . $lang->get('acppg_field_member_pages_hint') . '</small>

								</div>

								<div id="pg_create_catlink_1">

									' . $lang->get('acppg_field_target_category') . '<br />

									<small>' . $lang->get('acppg_field_target_category_hint') . '</small>

								</div>

								<div id="pg_create_tagged_1">

									' . $lang->get('acppg_field_target_tag') . '

								</div>

								<div id="pg_create_regex_1">

									' . $lang->get('acppg_field_target_regex') . '<br />

									<small>' . $lang->get('acppg_field_target_regex_hint') . '</small>

							</td>';

			echo '  <td class="row1">

								<div id="pg_create_normal_2" />

									<input type="text" style="margin-top: 3px;" name="member_page_0" id="pg_create_member_0" class="autofill page" size="30" /><br />

									<input type="text" style="margin-top: 3px;" name="member_page_1" id="pg_create_member_1" class="autofill page" size="30" /><br />

									<input type="text" style="margin-top: 3px;" name="member_page_2" id="pg_create_member_2" class="autofill page" size="30" /><br />

									<input type="text" style="margin-top: 3px;" name="member_page_3" id="pg_create_member_3" class="autofill page" size="30" /><br />

									<input type="text" style="margin-top: 3px;" name="member_page_4" id="pg_create_member_4" class="autofill page" size="30" /><br />

									<input type="button" onclick="pg_create_more_fields(); return false;" style="margin-top: 5px;" value="&nbsp;&nbsp;+&nbsp;&nbsp;" />

								</div>

								<div id="pg_create_tagged_2">

									<input type="text" name="member_tag" size="30" />

								</div>

								<div id="pg_create_catlink_2">

									' . $catlist . '

								</div>

								<div id="pg_create_regex_2">

									<input type="text" name="regex" size="60" /> 

								</div>

							</td>

						</tr>';

			// Submit button

			echo '<tr>

							<th class="subhead" colspan="2"><input type="submit" name="action[create_stage2]" value="' . $lang->get('acppg_btn_create_finish') . '" style="font-weight: bold;" /> <input type="submit" name="action[noop]" value="' . $lang->get('etc_cancel') . '" style="font-weight: normal;" /></th>

						</tr>';

			echo '</table>

						</div>';

			echo '</form>';

			echo '<script type="text/javascript">pg_createform_init();</script>';

			return;

		}

		else if ( isset($_POST['action']['del']) )

		{

			// Confirmation to delete a group (this is really only a stub)

			$delete_id = array_keys($_POST['action']['del']);

			$delete_id = intval($delete_id[0]);

			if ( !empty($delete_id) )

			{

				echo '<form action="'.makeUrl($paths->nslist['Special'].'Administration', 'module='.$paths->cpage['module']).'" method="post" onsubmit="if(!submitAuthorized) return false;" enctype="multipart/form-data">' . "\n";

				echo '<input type="hidden" name="delete_id" value="' . $delete_id . '" />' . "\n";

				echo '<div class="tblholder">' . "\n";

				echo '  <table border="0" cellspacing="1" cellpadding="4">' . "\n";

				echo '    <tr><th>' . $lang->get('acppg_th_delete_confirm') . '</th></tr>' . "\n";

				echo '    <tr><td class="row2" style="text-align: center; padding: 20px 0;">' . $lang->get('acppg_msg_delete_confirm') . '</td></tr>' . "\n";

				echo '    <tr><td class="row1" style="text-align: center;">' . "\n";

				echo '        <input type="submit" name="action[del_confirm]" value="' . $lang->get('acppg_btn_delete_confirm') . '" style="font-weight: bold;" />' . "\n";

				echo '        <input type="submit" name="action[noop]" value="' . $lang->get('etc_cancel') . '" style="font-weight: normal;" />' . "\n";

				echo '        </td></tr>' . "\n";

				echo '  </table>' . "\n";

				echo '</form>' . "\n";

				return;

			}

		}

		else if ( isset($_POST['action']['del_confirm']) )

		{

			$delete_id = intval($_POST['delete_id']);

			if ( empty($delete_id) )

			{

				echo 'Hack attempt';

				return;

			}

			// Obtain group name

			$q = $db->sql_query('SELECT pg_name FROM '.table_prefix.'page_groups WHERE pg_id=' . $delete_id . ';');

			if ( !$q )

				$db->_die();

			if ( $db->numrows() < 1 )

			{

				echo 'Page group dun exist.';

				return;

			}

			$row = $db->fetchrow();

			$db->free_result();

			$pg_name = $row['pg_name'];

			unset($row);

			// Delete the group

			$q = $db->sql_query('DELETE FROM '.table_prefix.'page_groups WHERE pg_id=' . $delete_id . ';');

			if ( !$q )

				$db->_die();

			$q = $db->sql_query('DELETE FROM '.table_prefix.'page_group_members WHERE pg_id=' . $delete_id . ';');

			if ( !$q )

				$db->_die();

			$del_msg = $lang->get('acppg_msg_delete_success', array('pg_name' => htmlspecialchars($pg_name)));

			echo "<div class=\"info-box\">$del_msg</div>";

		}

		else if ( isset($_POST['action']['edit']) && !isset($_POST['action']['noop']) )

		{

			if ( isset($_POST['action']['edit_save']) )

			{

			}

			if ( isset($_POST['action']['edit']['add_page']) && isset($_GET['src']) && $_GET['src'] == 'ajax' )

			{

				$return = array('successful' => false);

				//

				// Add the specified page to the group

				//

				// Get ID of the group

				$edit_id = intval($_POST['pg_id']);

				if ( !$edit_id )

				{

					$return = array('mode' => 'error', 'text' => 'Hack attempt');

					echo enano_json_encode($return);

					return;

				}