<?
//
// FAPWEB - Demo Party Website System System
// (C) Copyright 2012 Matti 'ccr' Hamalainen <ccr@tnsp.org>
//

// Globals and definitions
$errorSet = FALSE;
$errorMsg = "";

define("VT_STR", 1);
define("VT_INT", 2);
define("VT_BOOL", 3);
define("VT_TEXT", 4);



function stError($msg)
{
  global $errorSet, $errorMsg;
  $errorSet = TRUE;
  $errorMsg .= "<li>".$msg."</li>\n";
}


function stCheckHTTPS()
{
  return isset($_SERVER["HTTPS"]) && ($_SERVER["HTTPS"] != "" && $_SERVER["HTTPS"] != "off");
}


function stSetupCacheControl()
{
  header("Cache-Control: must-revalidate, no-store, private");
  header("Expires: Sat, 26 Jul 1997 05:00:00 GMT"); // Date in the past
}


function stSessionExpire($type)
{
  // Check for session expiration
  if (!isset($_SESSION["expires"]))
  {
    if (stGetSetting("debug")) error_log("Session $type expires due to expire time not set.");
    return FALSE;
  }
  
  if ($_SESSION["expires"] < time())
  {
    if (stGetSetting("debug")) error_log("Session $type / ".session_id()." expires due to timeout ".$_SESSION["expires"]." < ".time());
    return FALSE;
  }

  // Add more time to expiration
  if (stGetSetting("debug")) error_log("Adding more time to $type session ".session_id()." :: ".stGetSetting($type));
  $_SESSION["expires"] = time() + stGetSetting($type) * 60;
  return TRUE;
}


function stSessionEnd($ok)
{
  if (stGetSetting("debug")) error_log("END session ".$_SESSION["type"]." / ".$_SESSION["expires"]." == ".$ok);
  $_SESSION = array();
  if (ini_get("session.use_cookies"))
  {
    $params = session_get_cookie_params();
    setcookie(session_name(), "", time() - 242000,
      $params["path"], $params["domain"],
      $params["secure"], $params["httponly"]
    );
  }
  @session_destroy();
  return $ok;
}


function stAdmSessionAuth()
{
  if (@session_start() === TRUE && isset($_SESSION["admPassword"]) &&
      $_SESSION["admPassword"] == stGetSetting("admPassword"))
  {
    if (stGetSetting("debug")) error_log("AUTH admin session.");
    return stSessionExpire("admTimeout");
  }
  else
    return FALSE;
}


function stAdmSessionStart()
{
  if (@session_start() === TRUE)
  {
    if (stGetSetting("debug")) error_log("START admin session OK.");
    $_SESSION["type"] = "admin";
    $_SESSION["admPassword"] = stGetSetting("admPassword");
    $_SESSION["expires"] = time() + stGetSetting("admTimeout") * 60;
    return TRUE;
  }
  else
  {
    if (stGetSetting("debug")) error_log("START admin session --FAILED--");
    return FALSE;
  }
}


function stVoteSessionAuth()
{
  if (@session_start() === TRUE && isset($_SESSION["key"]) && isset($_SESSION["votes"]))
    return stSessionExpire("voteTimeout");
  else
    return FALSE;
}


function stVoteSessionStart()
{
  if (@session_start() === TRUE)
  {
    $_SESSION["type"] = "vote";
    $_SESSION["expires"] = time() + stGetSetting("voteTimeout") * 60;
    return TRUE;
  }
  else
    return FALSE;
}


function stSetVoteStatus($st)
{
  $_SESSION["status"] = $st;
}


function stReloadSettings()
{
  global $siteSettings;
  $res = stExecSQL("SELECT * FROM settings");
  if ($res !== FALSE)
  {
    foreach ($res as $row)
    {
      switch ($row["vtype"])
      {
        case VT_INT:  $val = intval($row["vint"]); break;
        case VT_BOOL: $val = intval($row["vint"]) ? true : false; break;
        case VT_STR:  $val = $row["vstr"]; break;
        case VT_TEXT: $val = $row["vtext"]; break;
      }
      $siteSettings[$row["key"]] = $val;
    }
  }
  else
    die("Error fetching site settings.");
}


function stGetSetting($name)
{
  global $siteSettings;
  if (isset($siteSettings[$name]))
    return $siteSettings[$name];
  else
    die("No config value for '".$name."'.\n");
}


function stChkSetting($name)
{
  global $siteSettings;
  return isset($siteSettings[$name]) && $siteSettings[$name];
}


function stSpecURL($id)
{
  global $specURLs;
  if (isset($specURLs[$id]))
    return "<a href=\"".$specURLs[$id][0]."\">".$specURLs[$id][1]."</a>";
  else
    return "";
}


function stPrintSpecURL($id)
{
  echo stSpecURL($id);
}


function dhentities($str)
{
  return str_replace(array("&lt;","&gt;"), array("<", ">"), htmlentities($str, ENT_NOQUOTES, "UTF-8"));
}


function chentities($str)
{
  return htmlentities($str, ENT_NOQUOTES, "UTF-8");
}


function stGetIDName($name, $id, $prefix = "")
{
  return
    ($id != "" ? "id=\"".$prefix.$name.$id."\" " : "").
    ($name != "" ? "name=\"".$prefix.$name.$id."\" " : "");
}


function stGetFormCheckBoxInput($name, $id, $prefix, $checked, $label, $extra = "")
{
  return
    "<input ".$extra." type=\"checkbox\" ".stGetIDName($name, $id, $prefix).
    ($checked ? "checked=\"checked\" " : "")." />".
    ($label != "" ? "<label for=\"".$name."\">".$label."</label>" : "");
}


function stGetFormButtonInput($name, $id, $prefix, $label, $onclick = "")
{
  return
    "<input type=\"button\" ".stGetIDName($name, $id, $prefix).
    "value=\"".$label."\" ".
    ($onclick != "" ? "onClick=\"".$onclick."\"" : "")." />";
}


function stGetFormTextArea($rows, $cols, $name, $id, $prefix, $value, $extra = "")
{
  return
    "<textarea ".$extra." ".stGetIDName($name, $id, $prefix).
    "rows=\"".$rows."\" cols=\"".$cols."\">".
    (isset($value) ? chentities($value) : "").
    "</textarea>";
}


function stGetFormTextInput($size, $len, $name, $id, $prefix, $value, $extra = "")
{
  return
    "<input ".$extra." type=\"text\" ".stGetIDName($name, $id, $prefix).
    "size=\"".$size."\" maxlength=\"".$len."\"".
    (isset($value) ? " value=\"".chentities($value)."\"" : "").
    " />";
}


function stGetFormPasswordInput($name, $id, $prefix)
{
  return
    "<input type=\"password\" ".stGetIDName($name, $id, $prefix)." />";
}


function stGetFormHiddenInput($name, $value)
{
  return
    "<input type=\"hidden\" name=\"".$name.
    "\" value=\"".chentities($value)."\" />";
}


function stGetTDEditTextItem($edit, $size, $len, $name, $id, $prefix, $value, $extra = "")
{
  return
    "<td class=\"".$name."\">".
    ($edit ? stGetFormTextInput($size, $len, $name, $id, $prefix, $value, $extra) : chentities($value)).
    "</td>";
}


function stPrintFormTextInput($text1, $text2, $size, $len, $name, $extra="")
{
  echo "  <tr><th>".chentities($text1)."</th><td>".
    stGetFormTextInput($size, $len, $name, "", "", stGetRequestItem($name), $extra).
    "</td><td>".chentities($text2)."</td></tr>\n";
}


function stPrintFormHiddenInput($name, $value)
{
  echo " ".stGetFormHiddenInput($name, $value)."\n";
}


function stPrintAttendee($item, $row, $edit, $eclass = "")
{
  $id = $item["id"];
  $prefix = "at";
  echo "  ".
    "<tr class=\"".($row % 2 == 1 ? "rodd" : "reven").$eclass."\" id=\"attendee".$id."\">".
    stGetTDEditTextItem(FALSE, 20, 40, "name", $id, $prefix, $item["name"]).
    stGetTDEditTextItem(FALSE, 20, 40, "groups", $id, $prefix, $item["groups"]).
    "<td class=\"regtime\">".date("d M Y / H:i", $item["regtime"])."</td>".
    stGetTDEditTextItem($edit, 30, 64, "oneliner", $id, $prefix, $item["oneliner"], "autocomplete=\"off\"");

  if ($edit)
  {
    echo
      stGetTDEditTextItem($edit, 20, 40, "email", $id, $prefix, $item["email"], "autocomplete=\"off\"").
      "<td>".
      "<button class=\"button\" id=\"atupd".$id."\" type=\"button\" onclick=\"updateAttendee(".$id.")\">Update</button>".
      "<button class=\"button\" id=\"atdel".$id."\" type=\"button\" onclick=\"deleteAttendee(".$id.")\">Delete</button>".
      "</td>";
  }

  echo "</tr>\n";
}


function stPrintNewsItem($item, $edit = "")
{
  echo
  "<div class=\"newsitem\" id=\"news".$item["id"]."\">\n".
  "  <h2>".chentities($item["title"])."</h2>\n".
  "  <div class=\"text\">".dhentities($item["text"])."</div>\n".
  "  <div class=\"sig\">-- ".chentities($item["author"])."<br />".
    date("d M Y / H:i", $item["utime"]).
    $edit."</div>\n".
  "</div>\n";
}


function stChkDataItem($name)
{
  return !isset($_REQUEST[$name]) || strlen(trim($_REQUEST[$name])) < 1;
}


function stChkRequestItem($name)
{
  return isset($_REQUEST[$name]);
}


function stGetRequestItem($name, $default = "")
{
  return isset($_REQUEST[$name]) ? trim($_REQUEST[$name]) : $default;
}


function stGetDRequestItem($name, $default = "")
{
  return trim(urldecode(stGetRequestItem($name, $default)));
}


function stLogSQLError($sql)
{
  global $db;
  error_log("SQL error ".implode("; ", $db->errorInfo())." in statement \"".$sql."\"");
}


function stConnectSQLDB()
{
  global $db;
  try {
    $db = new PDO(stGetSetting("sqlDB"));
  }
  catch (PDOException $e) {
    error_log("Could not connect to SQL database: ".$e->getMessage().".");
    return FALSE;
  }
  return TRUE;
}


function stGetSQLParam($type, $value)
{
  global $db;
  switch ($type)
  {
    case "d":
      return intval($value);

    case "s":
      return $db->quote($value);

    case "D":
      return intval(stGetRequestItem($value));

    case "S":
      return $db->quote(stGetDRequestItem($value));

    case "Q":
      return $db->quote(stripslashes(stGetDRequestItem($value)));

    case "B":
      return intval(stGetRequestItem($value)) ? 1 : 0;
  }
}


function stPrepareSQL()
{
  $argc = func_num_args();
  $argv = func_get_args();
  if ($argc < 1)
  {
    error_log("Invalid stPrepareSQL() call, no arguments!");
    return FALSE;
  }
  
  $fmt = $argv[0];
  $len = strlen($fmt);
  $sql = "";
  $argn = 1;
  $pos = 0;
  while ($pos < $len)
  {
    if ($fmt[$pos] == "%")
    {
      if ($argn < $argc)
        $sql .= stGetSQLParam($fmt[++$pos], $argv[$argn++]);
      else
      {
        error_log("Invalid SQL statement format string '".$fmt.
          "', not enough parameters specified (".$argn." of ".$argc.")");
        return FALSE;
      }
    }
    else
      $sql .= $fmt[$pos];
    $pos++;
  }
  
  return $sql;
}


function stPrepareSQLUpdate($table, $cond, $pairs)
{
  $sql = array();
  foreach ($pairs as $name => $attr)
  {
    $sql[] = $name."=".stGetSQLParam($attr, $name);
  }
  return
    "UPDATE ".$table." SET ".implode(",", $sql).
    ($cond != "" ? " ".$cond : "");
}


function stExecSQL($sql)
{
  global $db;
  if (($res = $db->query($sql)) !== FALSE)
    return $res;
  else
  {
    stLogSQLError($sql);
    stError("Oh noes! SQL error #23!");
    return FALSE;
  }
}


function stFetchSQL($sql)
{
  global $db;
  if (($res = $db->query($sql)) !== FALSE)
  {
    return $res->fetch();
  }
  else
  {
    stLogSQLError($sql);
    stError("Oh noes! SQL error #31!");
    return FALSE;
  }
}


function stFetchSQLColumn($sql, $column = 0)
{
  global $db;
  if (($res = $db->query($sql)) !== FALSE)
  {
    return $res->fetchColumn($column);
  }
  else
  {
    stLogSQLError($sql);
    stError("Oh noes! SQL error #81!");
    return FALSE;
  }
}


function stGetCompoList($fvisible, $fvoting = FALSE)
{
  global $compos;

  // Get entries and competitions into an array structure
  $sql = "SELECT * FROM compos";
  if ($fvisible || $fvoting)
  {
    $sql .= " WHERE ".implode(" AND ", array($fvisible ? "visible<>0" : "", $fvoting ? "voting<>0" : ""));
  }
  foreach (stExecSQL($sql) as $compo)
  {
    $id = $compo["id"];

    $compos[$compo["id"]] = array(
      "name" => $compo["name"],
      "entries" => array()
    );

    $sql = stPrepareSQL("SELECT * FROM entries WHERE compo_id=%d", $id);
    foreach (stExecSQL($sql) as $entry)
    {
      $compos[$id]["entries"][$entry["id"]] = $entry;
    }
  }
}


//
// CLI utility helper functions
//
function stCArg($index)
{
  global $argc, $argv;
  if ($index < $argc)
    return $argv[$index];
  else
    return FALSE;
}

function stCArgLC($index)
{
  global $argc, $argv;
  if ($index < $argc)
    return strtolower($argv[$index]);
  else
    return FALSE;
}


function stCSQLError($sql)
{
  global $db;
  die("Error executing SQL query: ".implode("; ", $db->errorInfo())." in statement \"".$sql."\"\n");
  exit;
}


function stCheckCLIOrDie()
{
  if (php_sapi_name() != "cli" || !empty($_SERVER["REMOTE_ADDR"]))
  {
    header("Status: 404 Not Found");
    die();
  }
}

?>