<?php

if(!defined("MCR")){ exit("Hacking Attempt!"); }

class submodule{
	private $core, $db, $config, $user, $lng;

	public function __construct($core){
		$this->core = $core;
		$this->db	= $core->db;
		$this->config = $core->config;
		$this->user	= $core->user;
		$this->lng	= $core->lng_m;

		if(!$this->core->is_access('sys_adm_permissions')){ $this->core->notify($this->core->lng['403'], $this->core->lng['e_403']); }

		$bc = array(
			$this->lng['mod_name'] => BASE_URL."?mode=admin",
			$this->lng['permissions'] => BASE_URL."?mode=admin&do=permissions"
		);

		$this->core->bc = $this->core->gen_bc($bc);
	}

	private function permissions_array(){

		$start		= $this->core->pagination($this->config->pagin['adm_groups'], 0, 0); // Set start pagination
		$end		= $this->config->pagin['adm_groups']; // Set end pagination

		$where		= "";

		if(isset($_GET['search']) && !empty($_GET['search'])){
			$search = $this->db->safesql(urldecode($_GET['search']));
			$where = "WHERE title LIKE '%$search%'";
		}

		$query = $this->db->query("SELECT id, title, description, `value`, `system`, `data`
									FROM `mcr_permissions`
									$where
									ORDER BY `value` ASC
									LIMIT $start, $end");

		

		if(!$query || $this->db->num_rows($query)<=0){ return $this->core->sp(MCR_THEME_MOD."admin/permissions/perm-none.html"); }

		ob_start();

		while($ar = $this->db->fetch_assoc($query)){

			$data = json_decode($ar['data'], true);

			$page_data = array(
				"ID" => intval($ar['id']),
				"TITLE" => $this->db->HSC($ar['title']),
				"TEXT" => $this->db->HSC($ar['description']),
				"VALUE" => $this->db->HSC($ar['value']),
				"SYSTEM" => (intval($ar['system'])===1) ? $this->core->sp(MCR_THEME_MOD."admin/permissions/perm-system.html") : '',
				"DATA" => $data
			);
		
			echo $this->core->sp(MCR_THEME_MOD."admin/permissions/perm-id.html", $page_data);
		}

		return ob_get_clean();
	}

	private function permissions_list(){

		$sql = "SELECT COUNT(*) FROM `mcr_permissions`";
		$page = "?mode=admin&do=permissions&pid=";

		if(isset($_GET['search']) && !empty($_GET['search'])){
			$search = $this->db->safesql(urldecode($_GET['search']));
			$sql = "SELECT COUNT(*) FROM `mcr_permissions` WHERE title LIKE '%$search%'";
			$search = $this->db->HSC(urldecode($_GET['search']));
			$page = "?mode=admin&do=permissions&search=$search&pid=";
		}

		$query = $this->db->query($sql);

		if(!$query){ exit("SQL Error"); }

		$ar = $this->db->fetch_array($query);

		$data = array(
			"PAGINATION" => $this->core->pagination($this->config->pagin['adm_groups'], $page, $ar[0]),
			"PERMISSIONS" => $this->permissions_array()
		);

		return $this->core->sp(MCR_THEME_MOD."admin/permissions/perm-list.html", $data);
	}

	private function delete(){
		if(!$this->core->is_access('sys_adm_permissions_delete')){ $this->core->notify($this->core->lng["e_msg"], $this->core->lng['e_403'], 2, '?mode=admin&do=permissions'); }

		if($_SERVER['REQUEST_METHOD']!='POST'){ $this->core->notify($this->core->lng["e_msg"], $this->core->lng['e_hack'], 2, '?mode=admin&do=permissions'); }
			
		$list = @$_POST['id'];

		if(empty($list)){ $this->core->notify($this->core->lng["e_msg"], $this->lng['perm_not_selected'], 2, '?mode=admin&do=permissions'); }

		$list = $this->core->filter_int_array($list);

		$list = array_unique($list);

		$list = $this->db->safesql(implode(", ", $list));

		if(!$this->db->remove_fast("mcr_permissions", "id IN ($list) AND `system`='0'")){ $this->core->notify($this->core->lng["e_msg"], $this->core->lng["e_sql_critical"], 2, '?mode=admin&do=permissions'); }

		$count = $this->db->affected_rows();

		@$this->user->update_default_permissions();

		// Последнее обновление пользователя
		$this->db->update_user($this->user);

		// Лог действия
		$this->db->actlog($this->lng['log_del_perm']." $list ".$this->lng['log_perm'], $this->user->id);

		$this->core->notify($this->core->lng["e_success"], $this->lng['perm_del_elements']." $count", 3, '?mode=admin&do=permissions');

	}

	private function switch_loop($group_perm, $perm){
		switch($perm['type']){
			case 'integer':
				$new_perm[$perm['value']] = (isset($group_perm[$perm['value']])) ? intval($group_perm[$perm['value']]) : intval($perm['default']);
			break;

			case 'float':
				$new_perm[$perm['value']] = (isset($group_perm[$perm['value']])) ? floatval($group_perm[$perm['value']]) : floatval($perm['default']);
			break;

			case 'string':
				$new_perm[$perm['value']] = (isset($group_perm[$perm['value']])) ? $this->db->safesql($group_perm[$perm['value']]) : $this->db->safesql($perm['default']);
			break;

			default:
				if(isset($group_perm[$perm['value']])){
					$new_perm[$perm['value']] = ($group_perm[$perm['value']]=='true' || $group_perm[$perm['value']]=='false') ? $group_perm[$perm['value']] : $perm['default'];
					$new_perm[$perm['value']] = ($new_perm[$perm['value']]=='true') ? true : false;
				}else{
					$new_perm[$perm['value']] = ($perm['default']=='true') ? true : false;
				}
			break;
		}

		return $new_perm[$perm['value']];
	}

	private function update_groups(){

		$def_perm = $this->get_permissions();

		$query = $this->db->query("SELECT id, `permissions` FROM `mcr_groups`");

		if(!$query || $this->db->num_rows($query)<=0){ $this->core->notify($this->core->lng["e_msg"], $this->core->lng["e_sql_critical"]); }

		$array = array();

		$return = true;

		while($ar = $this->db->fetch_assoc($query)){

			$group_perm = @json_decode($ar['permissions'], true);

			$id = intval($ar['id']);

			$new_perm = array();

			foreach($def_perm as $key => $perm){
				$new_perm[$perm['value']] = $this->switch_loop($group_perm, $perm);
			}

			$new_perm = $this->db->safesql(json_encode($new_perm));

			$update = $this->db->obj->query("UPDATE `mcr_groups`
										SET `permissions`='$new_perm'
										WHERE id='$id'");
			if(!$update){ $return = false; }
		}

		// Последнее обновление пользователя
		$this->db->update_user($this->user);

		return $return;
	}

	private function get_permissions(){
		$query = $this->db->query("SELECT `value`, `type`, `default` FROM `mcr_permissions`");

		if(!$query || $this->db->num_rows($query)<=0){ $this->core->notify($this->core->lng["e_msg"], $this->core->lng["e_sql_critical"]); }
		
		$array = array();

		while($ar = $this->db->fetch_assoc($query)){
			
			$array[] = array(
				"type" => $ar['type'],
				"value" => $ar['value'],
				"default" => $ar['default'],
			);

		}

		return $array;

	}

	private function add(){
		if(!$this->core->is_access('sys_adm_permissions_add')){ $this->core->notify($this->core->lng["e_msg"], $this->core->lng['e_403'], 2, '?mode=admin&do=permissions'); }

		$bc = array(
			$this->lng['mod_name'] => BASE_URL."?mode=admin",
			$this->lng['permissions'] => BASE_URL."?mode=admin&do=permissions",
			$this->lng['perm_add'] => BASE_URL."?mode=admin&do=permissions&op=add",
		);

		$this->core->bc = $this->core->gen_bc($bc);

		if($_SERVER['REQUEST_METHOD']=='POST'){
			$title			= $this->db->safesql(@$_POST['title']);
			$text			= $this->db->safesql(@$_POST['text']);
			$value			= $this->db->safesql(@$_POST['value']);

			$filter_type	= $this->filter_type(@$_POST['type'], @$_POST['default']);

			$default		= $filter_type['default'];
			$type			= $filter_type['type'];

			$new_data		= array(
				"time_create"	=> time(),
				"time_last"		=> time(),
				"login_create"	=> $this->user->login,
				"login_last"	=> $this->user->login,
			);

			$new_data = $this->db->safesql(json_encode($new_data));

			$insert = $this->db->query("INSERT INTO `mcr_permissions`
											(title, `description`, `value`, `default`, `type`, `data`)
										VALUES
											('$title', '$text', '$value', '$default', '$type', '$new_data')");

			if(!$insert){ $this->core->notify($this->core->lng["e_msg"], $this->core->lng["e_sql_critical"], 2, '?mode=admin&do=permissions'); }

			$id = $this->db->insert_id();
			
			if(!$this->update_groups()){ $this->core->notify($this->core->lng["e_msg"], $this->core->lng["e_sql_critical"].' #2', 2, '?mode=admin&do=permissions'); }

			@$this->user->update_default_permissions();

			// Лог действия
			$this->db->actlog($this->lng['log_add_perm']." #$id ".$this->lng['log_perm'], $this->user->id);

			$this->core->notify($this->core->lng["e_success"], $this->lng['perm_add_success'], 3, '?mode=admin&do=permissions');
		}

		$data = array(
			"PAGE" => $this->lng['perm_add_page_name'],
			"TITLE" => '',
			"TEXT" => '',
			"VALUE" => '',
			"DEFAULT" => $this->get_default_value(),
			"TYPES" => $this->get_types(),
			"BUTTON" => $this->lng['perm_add_btn']
		);

		return $this->core->sp(MCR_THEME_MOD."admin/permissions/perm-add.html", $data);
	}

	private function edit(){
		if(!$this->core->is_access('sys_adm_permissions_edit')){ $this->core->notify($this->core->lng["e_msg"], $this->core->lng['e_403'], 2, '?mode=admin&do=permissions'); }

		$id = intval($_GET['id']);

		$query = $this->db->query("SELECT title, description, `value`, `system`, `default`, `type`, `data`
									FROM `mcr_permissions`
									WHERE id='$id'");

		if(!$query || $this->db->num_rows($query)<=0){ $this->core->notify($this->core->lng["e_msg"], $this->core->lng["e_sql_critical"], 2, '?mode=admin&do=permissions'); }

		$ar = $this->db->fetch_assoc($query);

		$bc = array(
			$this->lng['mod_name'] => BASE_URL."?mode=admin",
			$this->lng['permissions'] => BASE_URL."?mode=admin&do=permissions",
			$this->lng['perm_edit'] => BASE_URL."?mode=admin&do=permissions&op=edit&id=$id",
		);

		$this->core->bc = $this->core->gen_bc($bc);

		$data = json_decode($ar['data']);

		if($_SERVER['REQUEST_METHOD']=='POST'){
			$title			= $this->db->safesql(@$_POST['title']);
			$text			= $this->db->safesql(@$_POST['text']);
			$value			= $this->db->safesql(@$_POST['value']);
			
			$filter_type	= $this->filter_type(@$_POST['type'], @$_POST['default']);
			$default		= $filter_type['default'];
			$type			= $filter_type['type'];

			if(intval($ar['system'])===1 && ($type!=$ar['type'] || $value!=$ar['value'])){
				$this->core->notify($this->core->lng["e_msg"], $this->lng['perm_change_system'], 2, '?mode=admin&do=permissions&op=edit&id='.$id);
			}

			$new_data		= array(
				"time_create"	=> $data->time_create,
				"time_last"		=> time(),
				"login_create"	=> $data->login_create,
				"login_last"	=> $this->user->login,
			);

			$new_data = $this->db->safesql(json_encode($new_data));

			$update = $this->db->query("UPDATE `mcr_permissions`
										SET title='$title', description='$text', `value`='$value',
											`default`='$default', `type`='$type', `data`='$new_data'
										WHERE id='$id'");

			if(!$update){ $this->core->notify($this->core->lng["e_msg"], $this->core->lng["e_sql_critical"], 2, '?mode=admin&do=permissions&op=edit&id='.$id); }
			
			if(!$this->update_groups()){ $this->core->notify($this->core->lng["e_msg"], $this->core->lng["e_sql_critical"].' #2', 2, '?mode=admin&do=permissions&op=edit&id='.$id); }

			@$this->user->update_default_permissions();

			// Лог действия
			$this->db->actlog($this->lng['log_edit_perm']." #$id ".$this->lng['log_perm'], $this->user->id);

			$this->core->notify($this->core->lng["e_success"], $this->lng['perm_edit_success'], 3, '?mode=admin&do=permissions&op=edit&id='.$id);
		}

		$data = array(
			"PAGE"			=> $this->lng['perm_edit_page_name'],
			"TITLE"			=> $this->db->HSC($ar['title']),
			"TEXT"			=> $this->db->HSC($ar['description']),
			"VALUE"			=> $this->db->HSC($ar['value']),
			"DEFAULT"		=> $this->get_default_value($ar['default'], $ar['type']),
			"TYPES"			=> $this->get_types($ar['type']),
			"BUTTON"		=> $this->lng['perm_edit_btn']
		);

		return $this->core->sp(MCR_THEME_MOD."admin/permissions/perm-add.html", $data);
	}

	private function filter_type($type='boolean', $default='false'){
		switch($type){
			case 'integer':
				$default = intval($default);
			break;

			case 'float':
				$default = floatval($default);
			break;

			case 'string':
				$default = $this->db->safesql($default);
			break;

			default:
				$type = 'boolean';
				$default = ($default=='true') ? 'true' : 'false';
				
			break;
		}

		return array("type" => $type, "default" => $default);
	}

	private function get_default_value($value='false', $type='boolean'){
		switch($type){
			case 'integer':
				$value = intval($value);
				$input = '<input type="text" class="span8" name="default" value="'.$value.'" id="inputDefault" placeholder="'.$this->lng['perm_def_value'].'">';
			break;

			case 'float':
				$value = floatval($value);
				$input = '<input type="text" class="span8" name="default" value="'.$value.'" id="inputDefault" placeholder="'.$this->lng['perm_def_value'].'">';
			break;

			case 'string':
				$value = $this->db->HSC($value);
				$input = '<input type="text" class="span8" name="default" value="'.$value.'" id="inputDefault" placeholder="'.$this->lng['perm_def_value'].'">';
			break;

			default:
				$select = ($value=='true') ? 'selected' : '';
				$input = '<select name="default" class="span8"><option value="false">FALSE</option><option value="true" '.$select.'>TRUE</option></select>';
			break;
		}

		return $input;
	}

	private function get_types($selected='boolean', $check=false){
		$array = array(
			"boolean" => $this->lng['perm_boolean'],
			"integer" => $this->lng['perm_integer'],
			"float" => $this->lng['perm_float'],
			"string" => $this->lng['perm_string'],
		);

		if($check){ return (isset($array[$selected])) ? true : false; }

		ob_start();

		foreach($array as $value => $title){
			$select = ($selected==$value) ? 'selected' : '';

			echo "<option value=\"$value\" $select>$title</option>";
		}

		return ob_get_clean();
	}

	public function content(){

		$op = (isset($_GET['op'])) ? $_GET['op'] : 'list';

		$this->core->header .= '<script src="'.LANG_URL.'js/modules/permissions.js"></script>';
		$this->core->header .= '<script src="'.STYLE_URL.'js/admin/permissions.js"></script>';

		switch($op){
			case 'add':		$content = $this->add(); break;
			case 'edit':	$content = $this->edit(); break;
			case 'delete':	$this->delete(); break;

			default:		$content = $this->permissions_list(); break;
		}

		return $content;
	}
}

?>