<?php
/*
 * JohnCMS NEXT Mobile Content Management System (http://johncms.com)
 *
 * For copyright and license information, please see the LICENSE.md
 * Installing the system or redistributions of files must retain the above copyright notice.
 *
 * @link        http://johncms.com JohnCMS Project
 * @copyright   Copyright (C) JohnCMS Community
 * @license     GPL-3
 */

define('_IN_JOHNCMS', 1);

$headmod = 'news';
require('../system/bootstrap.php');

$id = isset($_REQUEST['id']) ? abs(intval($_REQUEST['id'])) : 0;
$mod = isset($_GET['mod']) ? trim($_GET['mod']) : '';
$do = isset($_REQUEST['do']) ? trim($_REQUEST['do']) : false;

/** @var Psr\Container\ContainerInterface $container */
$container = App::getContainer();

/** @var PDO $db */
$db = $container->get(PDO::class);

/** @var Johncms\Api\UserInterface $systemUser */
$systemUser = $container->get(Johncms\Api\UserInterface::class);

/** @var Johncms\Api\ToolsInterface $tools */
$tools = $container->get(Johncms\Api\ToolsInterface::class);

/** @var Zend\I18n\Translator\Translator $translator */
$translator = $container->get(Zend\I18n\Translator\Translator::class);
$translator->addTranslationFilePattern('gettext', __DIR__ . '/locale', '/%s/default.mo');

$textl = _t('News');
require('../system/head.php');

switch ($do) {
    case 'add':
        // Добавление новости
        if ($systemUser->rights >= 6) {
            ?>
            <nav aria-label="breadcrumb">
                <ol class="breadcrumb">
                <li class="breadcrumb-item"><a href="index.php"><?php echo _t('News'); ?></a></li>
                <li class="breadcrumb-item active" aria-current="page"><?php echo _t('Add'); ?></li>
                </ol>
            </nav>
            <?php
            $old = 20;

            if (isset($_POST['submit'])) {
                $error = [];
                $name = isset($_POST['name']) ? htmlspecialchars(trim($_POST['name'])) : false;
                $text = isset($_POST['text']) ? trim($_POST['text']) : false;

                if (!$name) {
                    $error[] = _t('You have not entered news title');
                }

                if (!$text) {
                    $error[] = _t('You have not entered news text');
                }

                $flood = $tools->antiflood();

                if ($flood) {
                    $error[] = sprintf(_t('You cannot add the message so often. Please, wait %d seconds.'), $flood);
                }

                if (!$error) {
                    $rid = 0;

                    if (!empty($_POST['pf']) && ($_POST['pf'] != '0')) {
                        $pf = intval($_POST['pf']);
                        $rz = $_POST['rz'];
                        $pr = $db->query("SELECT * FROM `forum` WHERE `refid` = '$pf' AND `type` = 'r'");

                        while ($pr1 = $pr->fetch()) {
                            $arr[] = $pr1['id'];
                        }

                        foreach ($rz as $v) {
                            if (in_array($v, $arr)) {
                                $db->prepare('
                                  INSERT INTO `forum` SET
                                  `refid` = ?,
                                  `type` = \'t\',
                                  `time` = ?,
                                  `user_id` = ?,
                                  `from` = ?,
                                  `text` = ?,
                                  `soft` = \'\',
                                  `edit` = \'\',
                                  `curators` = \'\'
                                ')->execute([
                                    $v,
                                    time(),
                                    $systemUser->id,
                                    $systemUser->name,
                                    $name,
                                ]);

                                /** @var Johncms\Api\EnvironmentInterface $env */
                                $env = $container->get(Johncms\Api\EnvironmentInterface::class);
                                $rid = $db->lastInsertId();

                                $db->prepare('
                                  INSERT INTO `forum` SET
                                  `refid` = ?,
                                  `type` = \'m\',
                                  `time` = ?,
                                  `user_id` = ?,
                                  `from` = ?,
                                  `ip` = ?,
                                  `soft` = ?,
                                  `text` = ?,
                                  `edit` = \'\',
                                  `curators` = \'\'
                                ')->execute([
                                    $rid,
                                    time(),
                                    $systemUser->id,
                                    $systemUser->name,
                                    $env->getIp(),
                                    $env->getUserAgent(),
                                    $text,
                                ]);
                            }
                        }
                    }

                    $db->prepare('
                      INSERT INTO `news` SET
                      `time` = ?,
                      `avt` = ?,
                      `name` = ?,
                      `text` = ?,
                      `kom` = ?
                    ')->execute([
                        time(),
                        $systemUser->name,
                        $name,
                        $text,
                        $rid,
                    ]);

                    $db->exec('UPDATE `users` SET `lastpost` = ' . time() . ' WHERE `id` = ' . $systemUser->id);
                    echo '<div class="alert alert-success" role="alert">' . _t('News added') . '<br /><a href="index.php">' . _t('Back to news') . '</a></div>';
                } else {
                    echo $tools->displayError($error, '<a href="index.php">' . _t('Back to news') . '</a>');
                }
            } else {
                ?>
                <div class="box">
                    <div class="menu">
                        <form action="index.php?do=add" method="post">
                          <div class="form-group">
                            <label for="exampleInputTitle1"><?php echo _t('Title'); ?></label>
                            <input name="name" class="form-control" id="exampleInputTitle1">
                          </div>
                          <div class="form-group">
                            <label for="exampleFormControlTextarea1"><?php echo _t('Text'); ?></label>
                            <textarea rows="<?php echo $systemUser->getConfig()->fieldHeight; ?>" name="text" class="form-control" id="exampleFormControlTextarea1"></textarea>
                          </div>
                          <?php $fr = $db->query("SELECT * FROM `forum` WHERE `type` = 'f'"); ?>
                          <div class="form-check">
                            <label class="form-check-label" for="exampleCheck1"><?php echo _t('Discussion'); ?></label><br />
                            <div class="list2">
                                <input type="radio" name="pf" value="0" checked="checked" /> <?php echo _t('Do not discuss'); ?>
                            </div>
                            
                            <?php
                            while ($fr1 = $fr->fetch()) {
                                echo '<div class="list1">';
                                echo '<input type="radio" name="pf" value="' . $fr1['id'] . '"/> ' . $fr1['text'] . ' <select name="rz[]" class="form-control">';
                                $pr = $db->query("SELECT * FROM `forum` WHERE `type` = 'r' AND `refid` = '" . $fr1['id'] . "'");

                                while ($pr1 = $pr->fetch()) {
                                    echo '<option value="' . $pr1['id'] . '"> ' . $pr1['text'] . '</option><br>';
                                }
                                echo '</select><br>
                            </div>';
                            }

                            ?>
                          </div>
                          <input type="submit" class="btn btn-primary" name="submit" value="<?php echo _t('Save'); ?>" />
                        </form>
                    </div>
                </div>
                <?php
                
            }
        } else {
            header("location: index.php");
        }
        break;

    case 'edit':
        // Редактирование новости
        if ($systemUser->rights >= 6) {
            echo '<div class="phdr"><a href="index.php"><b>' . _t('News') . '</b></a> | ' . _t('Edit') . '</div>';

            if (!$id) {
                echo $tools->displayError(_t('Wrong data'), '<a href="index.php">' . _t('Back to news') . '</a>');
                require('../system/end.php');
                exit;
            }

            if (isset($_POST['submit'])) {
                $error = [];

                if (empty($_POST['name'])) {
                    $error[] = _t('You have not entered news title');
                }

                if (empty($_POST['text'])) {
                    $error[] = _t('You have not entered news text');
                }

                $name = htmlspecialchars(trim($_POST['name']));
                $text = trim($_POST['text']);

                if (!$error) {
                    $db->prepare('
                      UPDATE `news` SET
                      `name` = ?,
                      `text` = ?
                      WHERE `id` = ?
                    ')->execute([
                        $name,
                        $text,
                        $id,
                    ]);
                } else {
                    echo $tools->displayError($error, '<a href="index.php?act=edit&amp;id=' . $id . '">' . _t('Repeat') . '</a>');
                }
                echo '<p>' . _t('Article changed') . '<br /><a href="index.php">' . _t('Continue') . '</a></p>';
            } else {
                $res = $db->query("SELECT * FROM `news` WHERE `id` = '$id'")->fetch();

                echo '<div class="menu"><form action="index.php?do=edit&amp;id=' . $id . '" method="post">' .
                    '<p><h3>' . _t('Title') . '</h3>' .
                    '<input type="text" name="name" value="' . $res['name'] . '"/></p>' .
                    '<p><h3>' . _t('Text') . '</h3>' .
                    '<textarea rows="' . $systemUser->getConfig()->fieldHeight . '" name="text">' . htmlentities($res['text'], ENT_QUOTES, 'UTF-8') . '</textarea></p>' .
                    '<p><input type="submit" name="submit" value="' . _t('Save') . '"/></p>' .
                    '</form></div>' .
                    '<div class="phdr"><a href="index.php">' . _t('Back to news') . '</a></div>';
            }
        } else {
            header('location: index.php');
        }
        break;

    case 'clean':
        // Чистка новостей
        if ($systemUser->rights >= 7) {
            echo '<div class="phdr"><a href="index.php"><b>' . _t('News') . '</b></a> | ' . _t('Clear') . '</div>';

            if (isset($_POST['submit'])) {
                $cl = isset($_POST['cl']) ? intval($_POST['cl']) : '';

                switch ($cl) {
                    case '1':
                        // Чистим новости, старше 1 недели
                        $db->query("DELETE FROM `news` WHERE `time` <= " . (time() - 604800));
                        $db->query("OPTIMIZE TABLE `news`");

                        echo '<p>' . _t('Delete all news older than 1 week') . '</p><p><a href="index.php">' . _t('Back to news') . '</a></p>';
                        break;

                    case '2':
                        // Проводим полную очистку
                        $db->query("TRUNCATE TABLE `news`");

                        echo '<p>' . _t('Delete all news') . '</p><p><a href="index.php">' . _t('Back to news') . '</a></p>';
                        break;
                    default :
                        // Чистим сообщения, старше 1 месяца
                        $db->query("DELETE FROM `news` WHERE `time` <= " . (time() - 2592000));
                        $db->query("OPTIMIZE TABLE `news`;");

                        echo '<p>' . _t('Delete all news older than 1 month') . '</p><p><a href="index.php">' . _t('Back to news') . '</a></p>';
                }
            } else {
                echo '<div class="menu"><form id="clean" method="post" action="index.php?do=clean">' .
                    '<p><h3>' . _t('Clearing parameters') . '</h3>' .
                    '<input type="radio" name="cl" value="0" checked="checked" />' . _t('Older than 1 month') . '<br />' .
                    '<input type="radio" name="cl" value="1" />' . _t('Older than 1 week') . '<br />' .
                    '<input type="radio" name="cl" value="2" />' . _t('Clear all') . '</p>' .
                    '<p><input type="submit" name="submit" value="' . _t('Clear') . '" /></p>' .
                    '</form></div>' .
                    '<div class="phdr"><a href="index.php">' . _t('Cancel') . '</a></div>';
            }
        } else {
            header("location: index.php");
        }
        break;

    case 'del':
        // Удаление новости
        if ($systemUser->rights >= 6) {
            echo '<div class="phdr"><a href="index.php"><b>' . _t('News') . '</b></a> | ' . _t('Delete') . '</div>';

            if (isset($_GET['yes'])) {
                $db->query("DELETE FROM `news` WHERE `id` = '$id'");

                echo '<p>' . _t('Article deleted') . '<br><a href="index.php">' . _t('Back to news') . '</a></p>';
            } else {
                echo '<p>' . _t('Do you really want to delete?') . '<br>' .
                    '<a href="index.php?do=del&amp;id=' . $id . '&amp;yes">' . _t('Delete') . '</a> | <a href="index.php">' . _t('Cancel') . '</a></p>';
            }
        } else {
            header("location: index.php");
        }
        break;

    default:
        // Вывод списка новостей
        echo '<div class="phdr"><b>' . _t('News') . '</b></div>';

        if ($systemUser->rights >= 6) {
            echo '<div class="topmenu"><a href="index.php?do=add">' . _t('Add') . '</a> | <a href="index.php?do=clean">' . _t('Clear') . '</a></div>';
        }

        $total = $db->query("SELECT COUNT(*) FROM `news`")->fetchColumn();
        $req = $db->query("SELECT * FROM `news` ORDER BY `time` DESC LIMIT $start, $kmess");
        $i = 0;

        while ($res = $req->fetch()) {
            echo $i % 2 ? '<div class="list2">' : '<div class="list1">';
            $text = $tools->checkout($res['text'], 1, 1);
            $text = $tools->smilies($text, 1);
            echo '<h3>' . $res['name'] . '</h3>' .
                '<span class="gray"><small>' . _t('Author') . ': ' . $res['avt'] . ' (' . $tools->displayDate($res['time']) . ')</small></span>' .
                '<br />' . $text . '<div class="sub">';

            if ($res['kom'] != 0 && $res['kom'] != "") {
                $komm = $db->query("SELECT COUNT(*) FROM `forum` WHERE `type` = 'm' AND `refid` = '" . $res['kom'] . "'")->fetchColumn();

                if ($komm >= 0) {
                    echo '<a href="../forum/?id=' . $res['kom'] . '">' . _t('Discuss in Forum') . ' (' . $komm . ')</a><br>';
                }
            }

            if ($systemUser->rights >= 6) {
                echo '<a href="index.php?do=edit&amp;id=' . $res['id'] . '">' . _t('Edit') . '</a> | ' .
                    '<a href="index.php?do=del&amp;id=' . $res['id'] . '">' . _t('Delete') . '</a>';
            }

            echo '</div></div>';
            ++$i;
        }
        echo '<div class="phdr">' . _t('Total') . ':&#160;' . $total . '</div>';

        if ($total > $kmess) {
            echo '<div class="topmenu">' . $tools->displayPagination('index.php?', $start, $total, $kmess) . '</div>' .
                '<p><form action="index.php" method="post">' .
                '<input type="text" name="page" size="2"/>' .
                '<input type="submit" value="' . _t('To Page') . ' &gt;&gt;"/></form></p>';
        }
}

require('../system/end.php');
