<?php

/*

 * Enano - an open-source CMS capable of wiki functions, Drupal-like sidebar blocks, and everything in between

 *

 * This program is Free Software; you can redistribute and/or modify it under the terms of the GNU General Public License

 * as published by the Free Software Foundation; either version 2 of the License, or (at your option) any later version.

 *

 * This program is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied

 * warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for details.

 */

class template

{

  var $tpl_strings, $tpl_bool, $theme, $style, $no_headers, $additional_headers, $sidebar_extra, $sidebar_widgets, $toolbar_menu, $theme_list, $named_theme_list, $default_theme, $default_style, $plugin_blocks, $namespace_string, $style_list, $theme_loaded;

  /**

   * The list of themes that are critical for Enano operation. This doesn't include oxygen which

   * remains a user theme. By default this is admin and printable which have to be loaded on demand.

   * @var array

   */

  var $system_themes = array('admin', 'printable');

  /**

   * Set to true if the site is disabled and thus a message needs to be shown. This should ONLY be changed by common.php.

   * @var bool

   * @access private

   */

  var $site_disabled = false;

  /**

   * One of the absolute best parts of Enano :-P

   * @var string

   */

  var $fading_button = '';

  function __construct()

  {

    global $db, $session, $paths, $template, $plugins; // Common objects

    $this->tpl_bool    = Array();

    $this->tpl_strings = Array();

    $this->sidebar_extra = '';

    $this->toolbar_menu = '';

    $this->additional_headers = '';

    $this->plugin_blocks = Array();

    $this->theme_loaded = false;

    $this->fading_button = '<div style="background-image: url('.scriptPath.'/images/about-powered-enano-hover.png); background-repeat: no-repeat; width: 88px; height: 31px; margin: 0 auto 5px auto;">

                              <a style="background-image: none; padding-right: 0;" href="http://enanocms.org/" onclick="window.open(this.href); return false;"><img style="border-width: 0;" alt=" " src="'.scriptPath.'/images/about-powered-enano.png" onmouseover="domOpacity(this, 100, 0, 500);" onmouseout="domOpacity(this, 0, 100, 500);" /></a>

                            </div>';

    $this->theme_list = Array();

    $this->named_theme_list = Array();

    if ( defined('IN_ENANO_UPGRADE') )

    {

      return $this->construct_compat();

    }

    $q = $db->sql_query('SELECT theme_id, theme_name, enabled, default_style, group_policy, group_list FROM ' . table_prefix . 'themes;');

    if ( !$q )

      $db->_die('template.php selecting theme list');

    $i = 0;

    while ( $row = $db->fetchrow() )

    {

      $this->theme_list[$i] = $row;

      $i++;

    }

    // List out all CSS files for this theme

    foreach ( $this->theme_list as $i => &$theme )

    {

      $theme['css'] = array();

      $dir = ENANO_ROOT . "/themes/{$theme['theme_id']}/css";

      if ( $dh = @opendir($dir) )

      {

        while ( ( $file = @readdir($dh) ) !== false )

        {

          if ( preg_match('/\.css$/', $file) )

            $theme['css'][] = preg_replace('/\.css$/', '', $file);

        }

        closedir($dh);

      }

      // No CSS files? If so, nuke it.

      if ( count($theme['css']) < 1 )

      {

        unset($this->theme_list[$i]);

      }

    }

    $this->theme_list = array_values($this->theme_list);

    // Create associative array of themes

    foreach ( $this->theme_list as $i => &$theme )

      $this->named_theme_list[ $theme['theme_id'] ] =& $this->theme_list[$i];

    $this->default_theme = ( $_ = getConfig('theme_default') ) ? $_ : $this->theme_list[0]['theme_id'];

    // Come up with the default style. If the CSS file specified in default_style exists, we're good, just

    // use that. Otherwise, use the first stylesheet that comes to mind.

    $df_data =& $this->named_theme_list[ $this->default_theme ];

    $this->default_style = ( in_array($df_data['default_style'], $df_data['css']) ) ? $df_data['default_style'] : $df_data['css'][0];

  }

  /**

   * Failsafe constructor for upgrades.

   */

  function construct_compat()

  {

    global $db, $session, $paths, $template, $plugins; // Common objects

    $this->tpl_bool    = Array();

    $this->tpl_strings = Array();

    $this->sidebar_extra = '';

    $this->toolbar_menu = '';

    $this->additional_headers = '';

    $this->plugin_blocks = Array();

    $this->theme_loaded = false;

    $this->fading_button = '<div style="background-image: url('.scriptPath.'/images/about-powered-enano-hover.png); background-repeat: no-repeat; width: 88px; height: 31px; margin: 0 auto 5px auto;">

                              <a style="background-image: none; padding-right: 0;" href="http://enanocms.org/" onclick="window.open(this.href); return false;"><img style="border-width: 0;" alt=" " src="'.scriptPath.'/images/about-powered-enano.png" onmouseover="domOpacity(this, 100, 0, 500);" onmouseout="domOpacity(this, 0, 100, 500);" /></a>

                            </div>';

    $this->theme_list = Array();

    $this->named_theme_list = Array();

    $q = $db->sql_query('SELECT theme_id, theme_name, enabled, default_style FROM ' . table_prefix . 'themes;');

    if ( !$q )

      $db->_die('template.php selecting theme list');

    $i = 0;

    while ( $row = $db->fetchrow() )

    {

      $this->theme_list[$i] = $row;

      $i++;

    }

    // List out all CSS files for this theme

    foreach ( $this->theme_list as $i => &$theme )

    {

      $theme['css'] = array();

      $dir = ENANO_ROOT . "/themes/{$theme['theme_id']}/css";

      if ( $dh = @opendir($dir) )

      {

        while ( ( $file = @readdir($dh) ) !== false )

        {

          if ( preg_match('/\.css$/', $file) )

            $theme['css'][] = preg_replace('/\.css$/', '', $file);

        }

        closedir($dh);

      }

      // No CSS files? If so, nuke it.

      if ( count($theme['css']) < 1 )

      {

        unset($this->theme_list[$i]);

      }

    }

    $this->theme_list = array_values($this->theme_list);

    // Create associative array of themes

    foreach ( $this->theme_list as $i => &$theme )

      $this->named_theme_list[ $theme['theme_id'] ] =& $this->theme_list[$i];

    $this->default_theme = ( $_ = getConfig('theme_default') ) ? $_ : $this->theme_list[0]['theme_id'];

    // Come up with the default style. If the CSS file specified in default_style exists, we're good, just

    // use that. Otherwise, use the first stylesheet that comes to mind.

    $df_data =& $this->named_theme_list[ $this->default_theme ];

    $this->default_style = ( in_array($df_data['default_style'], $df_data['css']) ) ? $df_data['default_style'] : $df_data['css'][0];

  }

  /**

   * Systematically deletes themes if they're blocked by theme security settings. Called when session->start() finishes.

   */

  function process_theme_acls()

  {

    global $db, $session, $paths, $template, $plugins; // Common objects

    // For each theme, check ACLs and delete from RAM if not authorized

    foreach ( $this->theme_list as $i => $theme )

    {

      if ( !@$theme['group_list'] )

        continue;

      if ( $theme['theme_id'] === getConfig('theme_default') )

        continue;

      switch ( $theme['group_policy'] )

      {

        case 'allow_all':

          // Unconditionally allowed

          continue;

          break;

        case 'whitelist':

          // If we're not on the list, off to the left please

          $list = enano_json_decode($theme['group_list']);

          $allowed = false;

          foreach ( $list as $acl )

          {

            if ( !preg_match('/^(u|g):([0-9]+)$/', $acl, $match) )

              // Invalid list entry, silently allow (maybe not a good idea but

              // really, these things are checked before they're inserted)

              continue 2;

            $mode = $match[1];

            $id = intval($match[2]);

            switch ( $mode )

            {

              case 'u':

                $allowed = ( $id == $session->user_id );

                if ( $allowed )

                  break 2;

                break;

              case 'g':

                $allowed = ( isset($session->groups[$id]) );

                if ( $allowed )

                  break 2;

            }

          }

          if ( !$allowed )

          {

            unset($this->theme_list[$i]);

          }

          break;

        case 'blacklist':

          // If we're ON the list, off to the left please

          $list = enano_json_decode($theme['group_list']);

          $allowed = true;

          foreach ( $list as $acl )

          {

            if ( !preg_match('/^(u|g):([0-9]+)$/', $acl, $match) )

              // Invalid list entry, silently allow (maybe not a good idea but

              // really, these things are checked before they're inserted)

              continue 2;

            $mode = $match[1];

            $id = intval($match[2]);

            switch ( $mode )

            {

              case 'u':

                $allowed = ( $id != $session->user_id );

                if ( !$allowed )

                  break 2;

                break;

              case 'g':

                $allowed = ( !isset($session->groups[$id]) );

                if ( !$allowed )

                  break 2;

            }

          }

          if ( !$allowed )

          {

            unset($this->theme_list[$i]);

          }

          break;

      }

    }

    $this->theme_list = array_values($this->theme_list);

    // Rebuild associative theme list

    $this->named_theme_list = array();

    foreach ( $this->theme_list as $i => &$theme )

      $this->named_theme_list[ $theme['theme_id'] ] =& $this->theme_list[$i];

  }

  function sidebar_widget($t, $h, $use_normal_section = false)

  {

    global $db, $session, $paths, $template, $plugins; // Common objects

    if(!defined('ENANO_TEMPLATE_LOADED'))

    {

      $this->load_theme($session->theme, $session->style);

    }

    if(!$this->sidebar_widgets)

      $this->sidebar_widgets = '';

    $tplvars = $this->extract_vars('elements.tpl');

    if ( $use_normal_section )

    {

      $parser = $this->makeParserText($tplvars['sidebar_section']);

    }

    else

    {

      $parser = $this->makeParserText($tplvars['sidebar_section_raw']);

    }

    $parser->assign_vars(Array('TITLE' => '{TITLE}','CONTENT' => $h));

    $this->plugin_blocks[$t] = $parser->run();

    $this->sidebar_widgets .= $parser->run();

  }

  function add_header($html)

  {

    $this->additional_headers .= "\n" . $html;

  }

  function get_css($s = false)

  {

    global $db, $session, $paths, $template, $plugins; // Common objects

    if(!defined('ENANO_TEMPLATE_LOADED'))

      $this->load_theme($session->theme, $session->style);

    $path = ( $s ) ? 'css/'.$s : 'css/'.$this->style.'.css';

    if ( !file_exists(ENANO_ROOT . '/themes/' . $this->theme . '/' . $path) )

    {

      echo "/* WARNING: Falling back to default file because file $path does not exist */\n";

      $path = 'css/' . $this->style_list[0] . '.css';

    }

    return '<enano:no-opt>' . $this->process_template($path) . '</enano:no-opt>';

  }

  function load_theme($name = false, $css = false)

  {

    global $db, $session, $paths, $template, $plugins; // Common objects

    $this->theme = ( $name ) ? $name : $session->theme;

    $this->style = ( $css ) ? $css : $session->style;

    if ( !$this->theme )

    {

      $this->theme = $this->theme_list[0]['theme_id'];

      $this->style = preg_replace('/\.css$/', '', $this->theme_list[0]['default_style']);

    }

    // Make sure we're allowed to use this theme.

    if ( (

        // If it was removed, it's probably blocked by an ACL, or it was uninstalled

        !isset($this->named_theme_list[$this->theme]) ||

        // Check if the theme is disabled

        ( isset($this->named_theme_list[$this->theme]) && $this->named_theme_list[$this->theme]['enabled'] == 0 ) )

        // Above all, if it's a system theme, don't inhibit the loading process.

        && !in_array($this->theme, $this->system_themes)

      )

    {

      // No, something is preventing it - fall back to site default

      $this->theme = $this->default_theme;

      // Come up with the default style. If the CSS file specified in default_style exists, we're good, just

      // use that. Otherwise, use the first stylesheet that comes to mind.

      $df_data =& $this->named_theme_list[ $this->theme ];

      $this->style = ( in_array($df_data['default_style'], $df_data['css']) ) ? $df_data['default_style'] : $df_data['css'][0];

    }

    // The list of styles for the currently selected theme

    $this->style_list =& $this->named_theme_list[ $this->theme ]['css'];

    $this->theme_loaded = true;

  }

  function init_vars()

  {

    global $db, $session, $paths, $template, $plugins; // Common objects

    global $email;

    global $lang;

    profiler_log("template: starting var init");

    if(!$this->theme || !$this->style)

    {

      $this->load_theme();

    }

    if(defined('ENANO_TEMPLATE_LOADED'))

    {

      die_semicritical('Illegal call', '<p>$template->load_theme was called multiple times, this is not supposed to happen. Exiting with fatal error.</p>');

    }

    define('ENANO_TEMPLATE_LOADED', '');

    $tplvars = $this->extract_vars('elements.tpl');

    if(isset($_SERVER['HTTP_USER_AGENT']) && strstr($_SERVER['HTTP_USER_AGENT'], 'MSIE'))

    {

      $this->add_header('

        <!--[if lt IE 7]>

        <script language="JavaScript">

        function correctPNG() // correctly handle PNG transparency in Win IE 5.5 & 6.

        {

           var arVersion = navigator.appVersion.split("MSIE");

           var version = parseFloat(arVersion[1]);

           if (version >= 5.5 && typeof(document.body.filters) == "object")

           {

              for(var i=0; i<document.images.length; i++)

              {

                 var img = document.images[i];

                 continue;

                 var imgName = img.src.toUpperCase();

                 if (imgName.substring(imgName.length-3, imgName.length) == "PNG")

                 {

                    var imgID = (img.id) ? "id=\'" + img.id + "\' " : "";

                    var imgClass = (img.className) ? "class=\'" + img.className + "\' " : "";

                    var imgTitle = (img.title) ? "title=\'" + img.title + "\' " : "title=\'" + img.alt + "\' ";

                    var imgStyle = "display:inline-block;" + img.style.cssText;

                    if (img.align == "left") imgStyle = "float:left;" + imgStyle;

                    if (img.align == "right") imgStyle = "float:right;" + imgStyle;

                    if (img.parentElement.href) imgStyle = "cursor:hand;" + imgStyle;

                    var strNewHTML = "<span " + imgID + imgClass + imgTitle + " style=\\"" + "width:" + img.width + "px; height:" + img.height + "px;" + imgStyle + ";" + "filter:progid:DXImageTransform.Microsoft.AlphaImageLoader" + "(src=\\\'" + img.src + "\\\', sizingMethod=\'scale\');\\"></span>";

                    img.outerHTML = strNewHTML;

                    i = i-1;

                 }

              }

           }   

        }

        window.attachEvent("onload", correctPNG);

        </script>

        <![endif]-->

        ');

    }

    // Get the "article" button text (depends on namespace)

    switch($paths->namespace) {

      case "Article":

      default:

        $ns = $lang->get('onpage_lbl_page_article');

        break;

      case "Admin":

        $ns = $lang->get('onpage_lbl_page_admin');

        break;

      case "System":

        $ns = $lang->get('onpage_lbl_page_system');

        break;

      case "File":

        $ns = $lang->get('onpage_lbl_page_file');

        break;

      case "Help":

        $ns = $lang->get('onpage_lbl_page_help');

        break;

      case "User":

        $ns = $lang->get('onpage_lbl_page_user');

        break;

      case "Special":

        $ns = $lang->get('onpage_lbl_page_special');

        break;

      case "Template":

        $ns = $lang->get('onpage_lbl_page_template');

        break;

      case "Project":

        $ns = $lang->get('onpage_lbl_page_project');

        break;

      case "Category":

        $ns = $lang->get('onpage_lbl_page_category');

        break;

      case "Anonymous":

        $ns = 'external page';

        break;

    }

    $this->namespace_string = $ns;

    unset($ns);

    $code = $plugins->setHook('page_type_string_set');

    foreach ( $code as $cmd )

    {

      eval($cmd);

    }

    $ns =& $this->namespace_string;

    // Initialize the toolbar

    $tb = '';

    // Create "xx page" button

    $btn_selected = ( isset($tplvars['toolbar_button_selected'])) ? $tplvars['toolbar_button_selected'] : $tplvars['toolbar_button'];

    $parser = $this->makeParserText($btn_selected);

    if ( true || !$paths->anonymous_page )

    {

      $parser->assign_vars(array(

          'FLAGS' => 'onclick="if ( !KILL_SWITCH ) { void(ajaxReset()); return false; }" title="' . $lang->get('onpage_tip_article') . '" accesskey="a"',

          'PARENTFLAGS' => 'id="mdgToolbar_article"',

          'HREF' => makeUrl($paths->page, null, true),

          'TEXT' => $this->namespace_string

        ));

      $tb .= $parser->run();

    }

    $button = $this->makeParserText($tplvars['toolbar_button']);

    // Page toolbar

    // Comments button

    if ( $session->get_permissions('read') && getConfig('enable_comments')=='1' && $paths->namespace != 'Special' && $paths->namespace != 'Admin' && $paths->cpage['comments_on'] == 1 )

    {

      $e = $db->sql_query('SELECT approved FROM '.table_prefix.'comments WHERE page_id=\''.$paths->page_id.'\' AND namespace=\''.$paths->namespace.'\';');

      if ( !$e )

      {

        $db->_die();

      }

      $nc = $db->numrows();

      $nu = 0;

      $na = 0;

      while ( $r = $db->fetchrow() )

      {  

        if ( !$r['approved'] )

        {

          $nu++;

        }

        else

        {

          $na++;

        }

      }

      $db->free_result();

      $n = ( $session->get_permissions('mod_comments') ) ? (string)$nc : (string)$na;

      if ( $session->get_permissions('mod_comments') && $nu > 0 )

      {

        $subst = array(

            'num_comments' => $nc,

            'num_unapp' => $nu

          );

        $btn_text = $lang->get('onpage_btn_discussion_unapp', $subst);

      }

      else

      {

        $subst = array(