<?php
/*=====================================================================*\
|| ###################################################################
|| # Bugdar
|| # Copyright (c)2004-2009 Blue Static
|| #
|| # This program is free software; you can redistribute it and/or modify
|| # it under the terms of the GNU General Public License as published by
|| # the Free Software Foundation; version 2 of the License.
|| #
|| # This program is distributed in the hope that it will be useful, but
|| # WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY
|| # or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for
|| # more details.
|| #
|| # You should have received a copy of the GNU General Public License along
|| # with this program; if not, write to the Free Software Foundation, Inc.,
|| # 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301, USA
|| ###################################################################
\*=====================================================================*/

$fetchtemplates = array(
	'newattach',
	'editattach'
);


$focus['showreport'] = 'focus';

require_once('./global.php');
require_once('./includes/class_notification.php');
require_once('./includes/api_attachment.php');
require_once('./includes/api_comment.php');

if (isset($input->in['attachmentid']))
{
	$attachment = $db->queryFirst("SELECT * FROM " . TABLE_PREFIX . "attachment WHERE attachmentid = " . $input->inputClean('attachmentid', TYPE_UINT));
	if (!$attachment)
	{
		$message->error(L_INVALID_ID);
	}
}

$bug = $db->queryFirst("SELECT * FROM " . TABLE_PREFIX . "bug WHERE bugid = " . (($attachment['attachmentid']) ? $attachment['bugid'] : $input->inputClean('bugid', TYPE_UINT)));
if (!$bug)
{
	$message->error(L_INVALID_ID);
}

if (!check_bug_permissions($bug))
{
	$message->errorPermission();
}

require_once('./includes/class_logging.php');

$notif = new NotificationCenter();
$notif->setBugData($bug);

// ###################################################################

if ($_POST['do'] == 'insert')
{
	$attachapi = new AttachmentAPI();
	$attachapi->set('bugid',	$input->in['bugid']);
	
	if (!can_perform('canputattach', $bug['product']))
	{
		$message->errorPermission();
	}
	
	// max packet size
	$var = $db->queryFirst("SHOW VARIABLES LIKE 'max_allowed_packet'");
	BSApp::debug("max_allowed_packet = $var[Value]");
	
	// create alias
	$FILE = &$_FILES['attachment'];
	
	// PHP errors
	switch ($FILE['error'])
	{
		case 0: break;
		case 1: $message->addError(T('PHP said the file you uploaded was too big.')); break;
		case 2: $message->addError(T('The file exceeds the allowed upload size.')); break;
		case 3: $message->addError(T('The file was only partially uploaded.')); break;
		case 4: $message->addError(T('The file was not uploaded at all.')); break;
		case 6: $message->addError(T('PHP could not find the /tmp directory.')); break;
	}
	
	// did it upload?
	if (!is_uploaded_file($FILE['tmp_name']))
	{
		$message->addError(T('The file you specified did not upload.'));
	}
	
	// TODO - put some MIME-type validation here
	
	if (filesize($FILE['tmp_name']) > $var['Value'])
	{
		$message->addError(T('The file you specified exceeds MySQL\'s maximum allowed packet.'));
	}
	
	$attachapi->set('attachment',	file_get_contents($FILE['tmp_name']));
	$attachapi->set('filename',		$FILE['name']);
	$attachapi->set('mimetype',		$FILE['type']);
	$attachapi->set('filesize',		$FILE['size']);
	$attachapi->set('description',	$input->in['description']);
	$attachapi->set('userid',		bugdar::$userinfo['userid']);
		
	// insert an attachment
	if (!$message->hasErrors())
	{
		$attachapi->insert();
		
		$obsoletes = $input->inputClean('obsoletes', TYPE_UINT);
		
		$notif->sendNewAttachmentNotice($attachapi->values, $obsoletes, $attachapi->insertid);
		
		// mark obsoletes
		if (is_array($obsoletes) AND sizeof($obsoletes) > 0)
		{
			$db->query("UPDATE " . TABLE_PREFIX . "attachment SET obsolete = 1 WHERE attachmentid IN (" . implode(',', $obsoletes) . ") AND !obsolete AND bugid = $bug[bugid]");
			
			foreach ($obsoletes as $attachmentid)
			{
				$log = new Logging;
				$log->setBugId($bug['bugid']);
				$log->setAttachmentId($attachmentid);
				$log->addData(true, array('obsolete' => 0), array('obsolete'), false, 'attachment');
				$log->addData(false, array('obsolete' => 1), array('obsolete'), false, 'attachment'); 
				$log->updateHistory();
			}
		}
		
		// handle comment stuff
		if (can_perform('canpostcomments', $bug['product']) AND trim($input->in['comment']))
		{
			$comment = new CommentAPI();
			$comment->set('bugid',		$input->in['bugid']);
			$comment->set('userid',		bugdar::$userinfo['userid']);
			$comment->set('comment',	$input->in['comment']);
			$comment->set('dateline',	$attachapi->values['dateline']);
			$comment->insert();
			
			$notif->sendNewCommentNotice($comment->values);
		}
		
		// update the last post data
		$db->query("UPDATE " . TABLE_PREFIX . "bug SET lastposttime = " . $attachapi->values['dateline'] . ", hiddenlastposttime = " . $attachapi->values['dateline'] . ", lastpostby = " . bugdar::$userinfo['userid'] . ", hiddenlastpostby = " . bugdar::$userinfo['userid'] . " WHERE bugid = $bug[bugid]");
		
		$notif->finalize();
		
		$message->redirect(T('The attachment has been added to the bug.'), "showreport.php?bugid=$bug[bugid]");
	}
	else
	{
		$show['errors'] = true;
		$_REQUEST['do'] = 'add';
	}
}

// ###################################################################

if ($_REQUEST['do'] == 'add')
{
	if (!can_perform('canputattach', $bug['product']))
	{
		$message->errorPermission();
	}
	
	$MAXFILESIZE = BSFunctions::fetch_max_php_file_size();
	
	$show['addcomment'] = ((can_perform('canpostcomments', $bug['product'])) ? true : false);
	$show['obsoletes'] = false;
	
	$obsoletes_fetch = $db->query("SELECT * FROM " . TABLE_PREFIX . "attachment WHERE bugid = $bug[bugid] AND !obsolete");
	$obsoletes = '';
	foreach ($obsoletes_fetch as $obsolete)
	{
		$show['obsoletes'] = true;
		$obsoletes .= "<div><input name=\"obsoletes[]\" type=\"checkbox\" value=\"$obsolete[attachmentid]\"" . (is_array($input->in['obsoletes']) AND in_array($obsolete['attachmentid'], $input->in['obsoletes']) ? ' checked="checked"' : '') . " /> $obsolete[filename]" . ($obsolete['description'] ? " [$obsolete[description]]" : '') . "</div>\n";
	}
	
	$tpl = new BSTemplate('newattach');
	$tpl->vars = array(
		'bug'			=> $bug,
		'message'		=> $message,
		'MAXFILESIZE'	=> $MAXFILESIZE,
		'obsoletes'		=> $obsoletes,
		'input'			=> $input
	);
	$tpl->evaluate()->flush();
}

// ###################################################################

if ($_POST['do'] == 'update')
{
	if (!(can_perform('caneditattach', $bug['product']) OR ($attachment['userid'] == bugdar::$userinfo['userid'] AND can_perform('canputattach', $bug['product']))))
	{
		$message->errorPermission();
	}
	
	$attachapi = new AttachmentAPI();
	$attachapi->set('attachmentid',	$input->in['attachmentid']);
	
	if ($input->in['__delete__'] != '')
	{
		if (!(can_perform('caneditattach', $bug['product']) AND can_perform('candeletedata', $bug['productid'])))
		{
			$message->errorPermission();
		}
		
		$attachapi->remove();
		
		$message->redirect(T('The attachment was successfully deleted.'), "showreport.php?bugid=$bug[bugid]");
	}
	else
	{
		$log = new Logging();
		$log->setBugId($bug['bugid']);
		$log->setAttachmentId($input->in['attachmentid']);
		
		$attachapi->fetch();
		
		$log->addData(true, $attachapi->record, array('attachment'), true, 'attachment');
		
		$attachapi->set('description',	$input->in['description']);
		$attachapi->set('obsolete',		$input->in['obsolete']);
		$attachapi->update();
		
		$log->addData(false, $attachapi->values, array('attachment'), true, 'attachment');
		
		$log->updateHistory();
		
		$message->redirect(T('The attachment was successfully modified.'), "showreport.php?bugid=$bug[bugid]");
	}
}

// ###################################################################

if ($_REQUEST['do'] == 'edit')
{
	if (!(can_perform('caneditattach', $bug['product']) OR ($attachment['userid'] == bugdar::$userinfo['userid'] AND can_perform('canputattach', $bug['product']))))
	{
		$message->errorPermission();
	}
	
	$show['delete'] = (can_perform('caneditattach', $bug['product']) AND can_perform('candeletedata', $bug['productid']));
	
	$tpl = new BSTemplate('editattach');
	$tpl->vars = array(
		'attachment'	=> $attachment,
		'bug'			=> $bug
	);
	$tpl->evaluate()->flush();
}

?>