<?php

/*

 * Snapr

 * Version 0.1 beta 1

 * Copyright (C) 2007 Dan Fuhry

 *

 * This program is Free Software; you can redistribute and/or modify it under the terms of the GNU General Public License

 * as published by the Free Software Foundation; either version 2 of the License, or (at your option) any later version.

 *

 * This program is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied

 * warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for details.

 */

##

## GALLERY NAMESPACE HANDLER

##

$plugins->attachHook('page_not_found', 'gallery_namespace_handler($this);');

$plugins->attachHook('page_type_string_set', 'if ( $local_namespace == "Gallery" ) $this->namespace_string = \'image\';');

function gallery_namespace_handler(&$page)

{

  global $db, $session, $paths, $template, $plugins; // Common objects

  if ( $page->namespace != 'Gallery' )

    return false;

  if ( $page->page_id == 'Root' )

  {

    page_Special_Gallery();

    return true;

  }

  $row =& $page->image_info;

  $db->free_result();

  $img_id = $row['img_id'];

  if ( !$row['folder_parent'] )

    $row['folder_parent'] = ' IS NULL';

  else

    $row['folder_parent'] = '=' . $row['folder_parent'];

  // Fetch image parent properties

  $q = $db->sql_query('SELECT img_id, img_title FROM '.table_prefix.'gallery WHERE folder_parent' . $row['folder_parent'] . ' AND is_folder!=1 ORDER BY img_title ASC;');

  if ( !$q )

    $db->_die();

  $folder_total = $db->numrows();

  $folder_this = 0;

  $prev = false;

  $next = false;

  $next_title = '';

  $prev_title = '';

  $i = 0;

  while ( $r = $db->fetchrow() )

  {

    $i++;

    if ( $i == $folder_total && $r['img_id'] == $img_id )

    {

      $folder_this = $i;

      $next = false;

    }

    else if ( $i < $folder_total && $r['img_id'] == $img_id )

    {

      $folder_this = $i;

      $next = true;

    }

    else

    {

      if ( $next )

      {

        $next = $r['img_id'];

        $next_title = $r['img_title'];

        break;

      }

      $prev = $r['img_id'];

      $prev_title = $r['img_title'];

    }

  }

  if ( $next )

  {

    $next_sanitized = sanitize_page_id($next_title);

    $next_url = ( isset($hier) ) ? makeUrlNS('Gallery', $hier . $next_sanitized ) : makeUrlNS('Gallery', $next);

  }

  if ( $prev )

  {

    $prev_sanitized = sanitize_page_id($prev_title);

    $prev_url = ( isset($hier) ) ? makeUrlNS('Gallery', $hier . $prev_sanitized ) : makeUrlNS('Gallery', $prev);

  }

  $db->free_result();

  $perms = $session->fetch_page_acl(strval($img_id), 'Gallery');

  if ( isset($_POST['ajax']) && @$_POST['ajax'] === 'true' && isset($_POST['act']) )

  {

    $mode =& $_POST['act'];

    $response = array();

    switch($mode)

    {

      case 'add_tag':

        if ( !$perms->get_permissions('snapr_add_tag') )

        {

          die(snapr_json_encode(array(

              'mode' => 'error',

              'error' => 'You don\'t have permission to add tags.'

            )));

        }

        if ( empty($row['img_tags']) )

        {

          $row['img_tags'] = '[]';

        }

        $row['img_tags'] = snapr_json_decode($row['img_tags']);

        $canvas_data = snapr_json_decode($_POST['canvas_params']);

        $tag_data = array(

            'tag' => sanitize_html($_POST['tag']),

            'canvas_data' => $canvas_data

          );

        $row['img_tags'][] = $tag_data;

        $tag_data['note_id'] = count($row['img_tags']) - 1;

        $tag_data['mode'] = 'add';

        $tag_data['initial_hide'] = false;

        $tag_data['auth_delete'] = true;

        $row['img_tags'] = snapr_json_encode($row['img_tags']);

        $row['img_tags'] = $db->escape($row['img_tags']);

        $q = $db->sql_query('UPDATE ' . table_prefix . "gallery SET img_tags = '{$row['img_tags']}' WHERE img_id = $img_id;");

        if ( !$q )

          $db->die_json();

        $response[] = $tag_data;

        break;

      case 'del_tag':

        if ( !$perms->get_permissions('snapr_add_tag') )

        {

          die(snapr_json_encode(array(

              'mode' => 'error',

              'error' => 'You don\'t have permission to add tags.'

            )));

        }

        if ( empty($row['img_tags']) )

        {

          $row['img_tags'] = '[]';

        }

        $row['img_tags'] = snapr_json_decode($row['img_tags']);

        $tag_id = intval(@$_POST['tag_id']);

        if ( isset($row['img_tags'][$tag_id]) )

          unset($row['img_tags'][$tag_id]);

        $row['img_tags'] = snapr_json_encode($row['img_tags']);

        $row['img_tags'] = $db->escape($row['img_tags']);

        $q = $db->sql_query('UPDATE ' . table_prefix . "gallery SET img_tags = '{$row['img_tags']}' WHERE img_id = $img_id;");

        if ( !$q )

          $db->die_json();

        $response[] = array(

            'mode' => 'remove',

            'note_id' => $tag_id

          );

        break;

      case 'edit_tag':

        if ( !$perms->get_permissions('snapr_add_tag') )

        {

          die(snapr_json_encode(array(

              'mode' => 'error',

              'error' => 'You don\'t have permission to edit tags.'

            )));

        }

        if ( empty($row['img_tags']) )

        {

          $row['img_tags'] = '[]';

        }

        $row['img_tags'] = snapr_json_decode($row['img_tags']);

        $tag_id = intval(@$_POST['tag_id']);

        if ( isset($row['img_tags'][$tag_id]) )

        {

          $row['img_tags'][$tag_id]['tag'] = sanitize_html($_POST['tag']);

          // copy it

          $tag_return = $row['img_tags'][$tag_id];

          unset($tag);

        }

        else

        {

          die(snapr_json_encode(array(

              'mode' => 'error',

              'error' => 'That tag doesn\'t exist.'

            )));

        }

        $row['img_tags'] = snapr_json_encode($row['img_tags']);

        $row['img_tags'] = $db->escape($row['img_tags']);

        $q = $db->sql_query('UPDATE ' . table_prefix . "gallery SET img_tags = '{$row['img_tags']}' WHERE img_id = $img_id;");

        if ( !$q )

          $db->die_json();

        $tag_return['mode'] = 'add';

        $tag_return['canvas_data'] = snapr_json_decode($_POST['canvas_params']);

        $tag_return['auth_delete'] = $perms->get_permissions('snapr_add_tag');

        $tag_return['initial_hide'] = false;

        $tag_return['note_id'] = $tag_id;

        $response = array($tag_return);

        break;

      case 'get_tags':

        if ( empty($row['img_tags']) )

        {

          $row['img_tags'] = '[]';

        }

        $response = snapr_json_decode($row['img_tags']);

        foreach ( $response as $key => $_ )

        {

          unset($_);

          $tag = $response[$key];

          unset($response[$key]);

          $tag['note_id'] = intval($key);

          $tag['mode'] = 'add';

          $tag['initial_hide'] = true;

          $tag['auth_delete'] = $perms->get_permissions('snapr_add_tag');

          $response[intval($key)] = $tag;

        }

        $response = array_values($response);

        unset($tag);

        break;

    }

    $encoded = snapr_json_encode($response);

    header('Content-type: text/plain');

    echo $encoded;

    return true;

  }

  $have_notes = ( empty($row['img_tags']) ) ? false : ( count(snapr_json_decode($row['img_tags'])) > 0 );

  $template->add_header('<script type="text/javascript" src="' . scriptPath . '/plugins/gallery/canvas.js"></script>');

  $template->add_header('<script type="text/javascript" src="' . scriptPath . '/plugins/gallery/tagging.js"></script>');

  $template->tpl_strings['PAGE_NAME'] = 'Gallery image: ' . htmlspecialchars($row['img_title']);

  if ( is_object(@$GLOBALS['output']) )

  {

    global $output;

    $output->set_title('Gallery image: ' . $row['img_title']);

  }

  else if ( method_exists($template, 'assign_vars') )

  {

    $template->assign_vars(array(

        'PAGE_NAME' => 'Gallery image: ' . htmlspecialchars($row['img_title'])

      ));

  }

  $title_spacey = strtolower(htmlspecialchars($row['img_title']));

  $template->header();

  $img_id = intval($img_id);

  $bc_folders = gallery_imgid_to_folder($img_id);

  $bc_folders = array_reverse($bc_folders);

  $bc_url = '';

  $breadcrumbs = array();

  $breadcrumbs[] = '<a href="' . makeUrlNS('Special', 'Gallery') . '">Gallery index</a>';

  foreach ( $bc_folders as $folder )

  {

    $bc_url .= '/' . dirtify_page_id($folder);

    $breadcrumbs[] = '<a href="' . makeUrlNS('Special', 'Gallery' . $bc_url, false, true) . '">' . htmlspecialchars($folder) . '</a>';

  }

  $breadcrumbs[] = htmlspecialchars($row['img_title']);

  // From here, this breadcrumb stuff is a piece of... sourdough French bread :-) *smacks lips*

  echo '<div class="breadcrumbs" style="padding: 4px; margin-bottom: 7px;">';

  // The actual breadcrumbs

  echo '<small>' . implode(' &raquo; ', $breadcrumbs) . '</small>';

  echo '</div>';

  echo '<div style="text-align: center; margin: 10px auto; border: 1px solid #DDDDDD; padding: 7px 10px; display: table;">';

  $img_url  = makeUrlNS('Special', 'GalleryFetcher/preview/' . $img_id);

  $img_href = makeUrlNS('Special', 'GalleryFetcher/full/' . $img_id);

  // The actual image

  $iehack = ( strstr(@$_SERVER['HTTP_USER_AGENT'], 'MSIE') ) ? ' style="width: 1px;"' : '';

  echo '<div snapr:imgid="' . $img_id . '"' . $iehack . '><img onload="snapr_lock_onload_img = false; snapr_tags_onload_real();" alt="Image preview (640px max width)" src="' . $img_url . '" id="snapr_preview_img" style="border-width: 0; margin-bottom: 5px; display: block;" /></div>';

  echo '<table border="0" width="100%"><tr><td style="text-align: left; width: 24px;">';

  // Prev button

  if ( $prev )

    echo '<a href="' . $prev_url . '"><img style="border-width: 0px;" alt="&lt; Previous" src="' . scriptPath . '/plugins/gallery/prev.gif" /></a>';

  //echo '</td><td style="text-align: left;">';

  // if ( $prev )

  //   echo '<a href="' . $prev_url . '">previous image</a>';

  echo '</td><td style="text-align: center; letter-spacing: 5px;">';

  // Image title

  echo $title_spacey;

  echo '</td><td style="text-align: right; width: 24px;">';

  // Next button

  if ( $next )

  //  echo '<a href="' . $next_url . '">next image</a>';

  //echo '</td><td style="text-align: right;">';

  if ( $next )

    echo '<a href="' . $next_url . '"><img style="border-width: 0px;" alt="&lt; Previous" src="' . scriptPath . '/plugins/gallery/next.gif" /></a>';

  echo '</td></tr>';

  echo '<tr><td colspan="3">' . "image $folder_this of $folder_total" . '</td></tr>';

  if ( $perms->get_permissions('gal_full_res') || $have_notes )

  {

    echo '<tr><td colspan="3"><small>';

    if ( $perms->get_permissions('gal_full_res') )

      echo "<a href=\"$img_href\" onclick=\"window.open(this.href, '', 'toolbar=no,address=no,menus=no,status=no,scrollbars=yes'); return false;\">View in original resolution</a>";

    if ( $perms->get_permissions('gal_full_res') && $have_notes )

      echo ' :: ';

    if ( $have_notes )

      echo 'Mouse over photo to view tags';

    echo '</small></td></tr>';

  }

  echo '</table>';

  echo '</div>';

  if ( $session->user_level >= USER_LEVEL_ADMIN || $perms->get_permissions('snapr_add_tag') )

  {

    echo '<div style="float: right;">';

    if ( $session->user_level >= USER_LEVEL_ADMIN )

      echo '[ <a href="' . makeUrlNS('Special', 'GalleryUpload', 'edit_img=' . $img_id, true) . '">edit image</a> ] ';

    if ( $perms->get_permissions('snapr_add_tag') )

      echo '[ <a href="#" onclick="snapr_add_tag(); return false;"><img alt=" " src="' . scriptPath . '/plugins/gallery/tag-image.gif" style="border-width: 0;" /> add a tag</a> ] ';

    echo '</div>';

  }

  if ( !empty($row['img_desc']) )

  {

    echo '<h2>Image description</h2>';

    $desc = RenderMan::render($row['img_desc']);

    echo $desc;

  }

  echo '<div class="tblholder" style="font-size: smaller; display: table;' . ( empty($row['img_desc']) ? '' : 'margin: 0 auto;' ) . '">

          <table border="0" cellspacing="1" cellpadding="3">';

  // By the time I got to this point, it was 1:32AM (I was on vacation) and my 5-hour playlist on my iPod had been around about 3 times today.

  // So I'm glad this is like the last thing on the list tonight.

  $ext = get_file_extension($row['img_filename']);

  $ext = strtoupper($ext);

  echo '<tr><th colspan="2">Image details</th></tr>';

  echo '<tr><td class="row2">Uploaded:</td><td class="row1">' . date('F d, Y h:i a', $row['img_time_upload']) . '</td></tr>';

  echo '<tr><td class="row2">Last modified:</td><td class="row1">' . date('F d, Y h:i a', $row['img_time_mod']) . '</td></tr>';

  echo '<tr><td class="row2">Original format:</td><td class="row1">' . $ext . '</td></tr>';

  echo '<tr><td class="row3" colspan="2" style="text-align: center;"><a href="' . makeUrlNS('Special', 'GalleryFetcher/full/' . $img_id, 'download', 'true') . '">Download image</a></td></tr>';

  echo '</table></div>';

  $template->footer();

}

/**

 * This is for Enano 1.1.6 and up.

 */

class Namespace_Gallery extends Namespace_Default

{

  public $image_info;

  function __construct($page_id, $namespace, $revision_id = 0)

  {

    global $db, $session, $paths, $template, $plugins; // Common objects

    $this->page_id = sanitize_page_id($page_id);

    $this->namespace = $namespace;

    $this->revision_id = intval($revision_id);

    // only do this if calling from the (very heavily feature filled) abstract

    // this will still be called if you're using your own handler but not replacing the constructor

    if ( __CLASS__ == 'Namespace_Gallery' )

    {

      $this->exists = false;

      // NOTE! These should already be WELL sanitized before we reach this stage.

      if ( preg_match('/^[0-9]+$/', $this->page_id) )

      {

        $img_id = intval($this->page_id);

        if ( !$img_id )

        {

          $this->exists = false;

          return;

        }

        $q = $db->sql_query('SELECT img_id, img_title, img_desc, print_sizes, img_time_upload, img_time_mod, img_filename, folder_parent, img_tags FROM '.table_prefix.'gallery WHERE img_id=' . $img_id . ';');

        if ( !$q )

          $db->_die();

      }

      else

      {

        // Ech... he sent us a string... parse it and see what we get

        if ( strstr($this->page_id, '/') )

        {

          $folders = explode('/', $this->page_id);

        }

        else

        {

          $folders = array($this->page_id);

        }

        foreach ( $folders as $i => $_crap )

        {

          $folder =& $folders[$i];

          $folder = dirtify_page_id($folder);

          $folder = str_replace('_', ' ', $folder);

        }

        unset($folder);

        $folders = array_reverse($folders);

        // This is one of the best MySQL tricks on the market. We're going to reverse-travel a folder path using LEFT JOIN and the incredible power of metacoded SQL

        $sql = 'SELECT g0.img_id, g0.img_title, g0.img_desc, g0.print_sizes, g0.img_time_upload, g0.img_time_mod, g0.img_filename, g0.folder_parent, g0.img_tags FROM '.table_prefix.'gallery AS g0';

        $where = "\n  " . 'WHERE g0.img_title=\'' . $db->escape($folders[0]) . '\'';

        foreach ( $folders as $i => $folder )

        {

          if ( $i == 0 )

            continue;

          $i_dec = $i - 1;

          $folder = $db->escape($folder);

          $sql .= "\n  LEFT JOIN ".table_prefix."gallery AS g{$i}\n    ON ( g{$i}.img_id=g{$i_dec}.folder_parent AND g{$i}.img_title='$folder' )";

          $where .= "\n    ".'AND g'.$i.'.img_id IS NOT NULL';

        }

        $where .= "\n    AND g{$i}.folder_parent IS NULL";

        $sql .= $where . ';';

        if ( !$db->sql_query($sql) )

        {

          $db->_die('The image metadata could not be loaded.');

        }

        // Now that the folder data is no longer needed, we can fool around with it a little

        $folders = $this->page_id;

        if ( !strstr($folders, '/') )

        {

          $hier = '/';

        }

        else

        {

          $hier = preg_replace('/\/([^\/]+)$/', '/', $folders);

          $hier = sanitize_page_id($hier);

        }

      }

      if ( $db->numrows() < 1 )

      {

        // Image not found

        $this->exists = false;

        $this->cdata = array(

            'urlname' => $this->page_id,

            'namespace' => $this->namespace,

            'name' => 'Image not found',

            'special' => 0,

            'visible' => 0,

            'comments_on' => 0,

            'protected' => 0,

            'delvotes' => 0,

            'delvote_ips' => '',

            'wiki_mode' => 0,

            'page_exists' => false,

            'page_format' => getConfig('default_page_format', 'wikitext')

          );

      }

      else

      {

        $this->image_info = $db->fetchrow();

        $this->exists = true;

        $this->cdata = array(

            'urlname' => $this->page_id,

            'namespace' => $this->namespace,

            'name' => $this->image_info['img_title'],

            'special' => 1,

            'visible' => 1,

            'comments_on' => 1,

            'protected' => 0,

            'delvotes' => 0,

            'delvote_ips' => '',

            'wiki_mode' => 0,

            'page_exists' => true,

            'page_format' => getConfig('default_page_format', 'wikitext')

          );

      }

      $this->title =& $this->cdata['name'];

      $this->cdata = Namespace_Default::bake_cdata($this->cdata);

      $db->free_result();

    }

  }