<?php

/*

 * Enano - an open-source CMS capable of wiki functions, Drupal-like sidebar blocks, and everything in between

 * Version 1.1.2 (Caoineag alpha 2)

 * Copyright (C) 2006-2007 Dan Fuhry

 *

 * This program is Free Software; you can redistribute and/or modify it under the terms of the GNU General Public License

 * as published by the Free Software Foundation; either version 2 of the License, or (at your option) any later version.

 *

 * This program is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied

 * warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for details.

 */

function page_Admin_ThemeManager()

{

  global $db, $session, $paths, $template, $plugins; // Common objects

  global $lang;

  if ( $session->auth_level < USER_LEVEL_ADMIN || $session->user_level < USER_LEVEL_ADMIN )

  {

    $login_link = makeUrlNS('Special', 'Login/' . $paths->nslist['Special'] . 'Administration', 'level=' . USER_LEVEL_ADMIN, true);

    echo '<h3>' . $lang->get('adm_err_not_auth_title') . '</h3>';

    echo '<p>' . $lang->get('adm_err_not_auth_body', array( 'login_link' => $login_link )) . '</p>';

    return;

  }

  $system_themes = array('admin', 'printable');

  // Obtain the list of themes (both available and already installed) and the styles available for each

  $dh = @opendir(ENANO_ROOT . '/themes');

  if ( !$dh )

    die('Couldn\'t open themes directory');

  $themes = array();

  while ( $dr = @readdir($dh) )

  {

    if ( $dr == '.' || $dr == '..' )

      continue;

    if ( !is_dir(ENANO_ROOT . "/themes/$dr") )

      continue;

    if ( !file_exists(ENANO_ROOT . "/themes/$dr/theme.cfg") || !is_dir(ENANO_ROOT . "/themes/$dr/css") )

      continue;

    $cdh = @opendir(ENANO_ROOT . "/themes/$dr/css");

    if ( !$cdh )

      continue;

    require(ENANO_ROOT . "/themes/$dr/theme.cfg");

    global $theme;

    $themes[$dr] = array(

        'css' => array(),

        'theme_name' => $theme['theme_name']

      );

    while ( $cdr = @readdir($cdh) )

    {

      if ( $cdr == '.' || $cdr == '..' )

        continue;

      if ( preg_match('/\.css$/i', $cdr) )

        $themes[$dr]['css'][] = substr($cdr, 0, -4);

    }

  }

  // Decide which themes are not installed

  $installable = array_flip(array_keys($themes));

  // FIXME: sanitize directory names or check with preg_match()

  $where_clause = 'theme_id = \'' . implode('\' OR theme_id = \'', array_flip($installable)) . '\'';

  $q = $db->sql_query('SELECT theme_id, theme_name, enabled FROM ' . table_prefix . "themes WHERE $where_clause;");

  if ( !$q )

    $db->_die();

  while ( $row = $db->fetchrow() )

  {

    $tid =& $row['theme_id'];

    unset($installable[$tid]);

    $themes[$tid]['theme_name'] = $row['theme_name'];

    $themes[$tid]['enabled'] = ( $row['enabled'] == 1 );

  }

  foreach ( $system_themes as $st )

  {

    unset($installable[$st]);

  }

  $installable = array_flip($installable);

  // AJAX code

  if ( $paths->getParam(0) === 'action.json' )

  {

    return ajaxServlet_Admin_ThemeManager($themes);

  }

  // List installed themes

  ?>

  <div style="float: right;">

    <a href="#" id="systheme_toggler" onclick="ajaxToggleSystemThemes(); return false;"><?php echo $lang->get('acptm_btn_system_themes_show'); ?></a>

  </div>

  <?php

  echo '<h3>' . $lang->get('acptm_heading_edit_themes') . '</h3>';

  echo '<div id="theme_list_edit">';

  foreach ( $themes as $theme_id => $theme_data )

  {

    if ( in_array($theme_id, $installable) )

      continue;

    if ( file_exists(ENANO_ROOT . "/themes/$theme_id/preview.png") )

    {

      $preview_path = scriptPath . "/themes/$theme_id/preview.png";

    }

    else

    {

      $preview_path = scriptPath . "/images/themepreview.png";

    }

    $d = ( @$theme_data['enabled'] ) ? '' : ' themebutton_theme_disabled';

    $st = ( in_array($theme_id, $system_themes) ) ? ' themebutton_theme_system' : '';

    echo '<div class="themebutton' . $st . '' . $d . '" id="themebtn_edit_' . $theme_id . '" style="background-image: url(' . $preview_path . ');">';

    if ( in_array($theme_id, $system_themes) )

    {

      echo   '<a class="tb-inner" href="#" onclick="return false;">

                ' . $lang->get('acptm_btn_theme_system') . '

                <span class="themename">' . htmlspecialchars($theme_data['theme_name']) . '</span>

              </a>';

    }

    else

    {

      echo   '<a class="tb-inner" href="#" onclick="ajaxEditTheme(\'' . $theme_id . '\'); return false;">

                ' . $lang->get('acptm_btn_theme_edit') . '

                <span class="themename">' . htmlspecialchars($theme_data['theme_name']) . '</span>

              </a>';

    }

    echo '</div>';

  }

  echo '</div>';

  echo '<span class="menuclear"></span>';

  if ( count($installable) > 0 )

  {

    echo '<h3>' . $lang->get('acptm_heading_install_themes') . '</h3>';

    echo '<div id="theme_list_install">';

    foreach ( $installable as $i => $theme_id )

    {

      if ( file_exists(ENANO_ROOT . "/themes/$theme_id/preview.png") )

      {

        $preview_path = scriptPath . "/themes/$theme_id/preview.png";

      }

      else

      {

        $preview_path = scriptPath . "/images/themepreview.png";

      }

      echo '<div class="themebutton" id="themebtn_install_' . $theme_id . '" enano:themename="' . htmlspecialchars($themes[$theme_id]['theme_name']) . '" style="background-image: url(' . $preview_path . ');">';

      echo   '<a class="tb-inner" href="#" onclick="ajaxInstallTheme(\'' . $theme_id . '\'); return false;">

                ' . $lang->get('acptm_btn_theme_install') . '

                <span class="themename">' . htmlspecialchars($themes[$theme_id]['theme_name']) . '</span>

              </a>';

      echo '</div>';

    }

    echo '</div>';

    echo '<span class="menuclear"></span>';

  }

}

function ajaxServlet_Admin_ThemeManager(&$themes)

{

  global $db, $session, $paths, $template, $plugins; // Common objects

  global $lang;

  if ( $session->auth_level < USER_LEVEL_ADMIN || $session->user_level < USER_LEVEL_ADMIN )

  {

    $login_link = makeUrlNS('Special', 'Login/' . $paths->nslist['Special'] . 'Administration', 'level=' . USER_LEVEL_ADMIN, true);

    echo '<h3>' . $lang->get('adm_err_not_auth_title') . '</h3>';

    echo '<p>' . $lang->get('adm_err_not_auth_body', array( 'login_link' => $login_link )) . '</p>';

    return;

  }

  if ( !isset($_POST['r']) )

    return false;

  try

  {

    $request = enano_json_decode($_POST['r']);

  }

  catch ( Exception $e )

  {

    die('Exception in JSON parser, probably invalid input.');

  }

  if ( !isset($request['mode']) )

  {

    die('No mode specified in JSON request.');

  }

  switch ( $request['mode'] )

  {

    case 'fetch_theme':

      $theme_id = $db->escape($request['theme_id']);

      if ( empty($theme_id) )

        die('Invalid theme_id');

      $q = $db->sql_query("SELECT theme_id, theme_name, default_style, enabled, group_policy, group_list FROM " . table_prefix . "themes WHERE theme_id = '$theme_id';");

      if ( !$q )

        $db->die_json();

      if ( $db->numrows() < 1 )

        die('BUG: no theme with that theme_id installed.');

      $row = $db->fetchrow();

      $row['enabled'] = ( $row['enabled'] == 1 );

      $row['css'] = @$themes[$theme_id]['css'];

      $row['default_style'] = preg_replace('/\.css$/', '', $row['default_style']);

      $row['is_default'] = ( getConfig('theme_default') === $theme_id );

      $row['group_list'] = ( empty($row['group_list']) ) ? array() : enano_json_decode($row['group_list']);

      // Build a list of group names

      $row['group_names'] = array();

      foreach ( $row['group_list'] as $group_id )

      {

        $row['group_names'][$group_id] = '';

      }

      if ( count($row['group_names']) > 0 )

      {

        $idlist = 'group_id = ' . implode(' OR group_id = ', array_keys($row['group_names']));

        $q = $db->sql_query('SELECT group_id, group_name FROM ' . table_prefix . "groups WHERE $idlist;");

        if ( !$q )

          $db->die_json();

        while ( $gr = $db->fetchrow_num() )

        {

          list($group_id, $group_name) = $gr;

          $row['group_names'][$group_id] = $group_name;

        }

      }

      echo enano_json_encode($row);

      break;

  }

}

function page_Admin_ThemeManagerOld() 

{

  global $db, $session, $paths, $template, $plugins; // Common objects

  global $lang;

  if ( $session->auth_level < USER_LEVEL_ADMIN || $session->user_level < USER_LEVEL_ADMIN )

  {

    $login_link = makeUrlNS('Special', 'Login/' . $paths->nslist['Special'] . 'Administration', 'level=' . USER_LEVEL_ADMIN, true);

    echo '<h3>' . $lang->get('adm_err_not_auth_title') . '</h3>';

    echo '<p>' . $lang->get('adm_err_not_auth_body', array( 'login_link' => $login_link )) . '</p>';

    return;

  }

  // Get the list of styles in the themes/ dir

  $h = opendir('./themes');

  $l = Array();

  if(!$h) die('Error opening directory "./themes" for reading.');

  while(false !== ($n = readdir($h))) {

    if($n != '.' && $n != '..' && is_dir('./themes/'.$n))

      $l[] = $n;

  }

  closedir($h);

  echo('

  <h3>Theme Management</h3>

   <p>Install, uninstall, and manage Enano themes.</p>

  ');

  if(isset($_POST['disenable'])) {

    $q = 'SELECT enabled FROM '.table_prefix.'themes WHERE theme_id=\'' . $db->escape($_POST['theme_id']) . '\'';

    $s = $db->sql_query($q);

    if(!$s) die('Error selecting enabled/disabled state value: '.$db->get_error().'<br /><u>SQL:</u><br />'.$q);

    $r = $db->fetchrow_num($s);

    $db->free_result();

    if($r[0] == 1) $e = 0;

    else $e = 1;

    $s=true;

    if($e==0)

    {

      $c = $db->sql_query('SELECT * FROM '.table_prefix.'themes WHERE enabled=1');

      if(!$c) $db->_die('The backup check for having at least on theme enabled failed.');

      if($db->numrows() <= 1) { echo '<div class="warning-box">You cannot disable the last remaining theme.</div>'; $s=false; }

    }

    $db->free_result();

    if($s) {

    $q = 'UPDATE '.table_prefix.'themes SET enabled='.$e.' WHERE theme_id=\'' . $db->escape($_POST['theme_id']) . '\'';

    $a = $db->sql_query($q);

    if(!$a) die('Error updating enabled/disabled state value: '.$db->get_error().'<br /><u>SQL:</u><br />'.$q);

    else echo('<div class="info-box">The theme "'.$_POST['theme_id'].'" has been  '. ( ( $e == '1' ) ? 'enabled' : 'disabled' ).'.</div>');

    }

  }

  elseif(isset($_POST['edit'])) {

    $dir = './themes/'.$_POST['theme_id'].'/css/';

    $list = Array();

    // Open a known directory, and proceed to read its contents

    if (is_dir($dir)) {

      if ($dh = opendir($dir)) {

        while (($file = readdir($dh)) !== false) {

          if(preg_match('#^(.*?)\.css$#is', $file) && $file != '_printable.css') {

            $list[$file] = capitalize_first_letter(substr($file, 0, strlen($file)-4));

          }

        }

        closedir($dh);

      }

    }

    $lk = array_keys($list);

    $q = 'SELECT theme_name,default_style FROM '.table_prefix.'themes WHERE theme_id=\''.$db->escape($_POST['theme_id']).'\'';

    $s = $db->sql_query($q);

    if(!$s) die('Error selecting name value: '.$db->get_error().'<br /><u>SQL:</u><br />'.$q);

    $r = $db->fetchrow_num($s);

    $db->free_result();

    acp_start_form();

    echo('<div class="question-box">

          Theme name displayed to users: <input type="text" name="name" value="'.$r[0].'" /><br /><br />

          Default stylesheet: <select name="defaultcss">');

    foreach ($lk as $l)

    {

      if($r[1] == $l) $v = ' selected="selected"';

      else $v = '';

      echo "<option value='{$l}'$v>{$list[$l]}</option>";

    }

    echo('</select><br /><br />

          <input type="submit" name="editsave" value="OK" /><input type="hidden" name="theme_id" value="'.$_POST['theme_id'].'" />

          </div>');

    echo('</form>');

  }

  elseif(isset($_POST['editsave'])) {

    $q = 'UPDATE '.table_prefix.'themes SET theme_name=\'' . $db->escape($_POST['name']) . '\',default_style=\''.$db->escape($_POST['defaultcss']).'\' WHERE theme_id=\'' . $db->escape($_POST['theme_id']) . '\'';

    $s = $db->sql_query($q);

    if(!$s) die('Error updating name value: '.$db->get_error().'<br /><u>SQL:</u><br />'.$q);

    else echo('<div class="info-box">Theme data updated.</div>');

  }

  elseif(isset($_POST['up'])) {

    // If there is only one theme or if the selected theme is already at the top, do nothing

    $q = 'SELECT theme_order FROM '.table_prefix.'themes ORDER BY theme_order;';

    $s = $db->sql_query($q);

    if(!$s) die('Error selecting order information: '.$db->get_error().'<br /><u>SQL:</u><br />'.$q);

    $q = 'SELECT theme_order FROM '.table_prefix.'themes WHERE theme_id=\''.$db->escape($_POST['theme_id']).'\'';

    $sn = $db->sql_query($q);

    if(!$sn) die('Error selecting order information: '.$db->get_error().'<br /><u>SQL:</u><br />'.$q);

    $r = $db->fetchrow_num($sn);

    if( /* check for only one theme... */ $db->numrows($s) < 2 || $r[0] == 1 /* ...and check if this theme is already at the top */ ) { echo('<div class="warning-box">This theme is already at the top of the list, or there is only one theme installed.</div>'); } else {

      // Get the order IDs of the selected theme and the theme before it

      $q = 'SELECT theme_order FROM '.table_prefix.'themes WHERE theme_id=\'' . $db->escape($_POST['theme_id']) . '\'';

      $s = $db->sql_query($q);

      if(!$s) die('Error selecting order information: '.$db->get_error().'<br /><u>SQL:</u><br />'.$q);

      $r = $db->fetchrow_num($s);

      $r = $r[0];

      $rb = $r - 1;

      // Thank God for jEdit's rectangular selection and the ablity to edit multiple lines at the same time ;)

      $q = 'UPDATE '.table_prefix.'themes SET theme_order=0 WHERE theme_order='.$rb.'';      /* Check for errors... <sigh> */ $s = $db->sql_query($q); if(!$s) die('Error updating order information: '.$db->get_error().'<br /><u>SQL:</u><br />'.$q);

      $q = 'UPDATE '.table_prefix.'themes SET theme_order='.$rb.' WHERE theme_order='.$r.''; /* Check for errors... <sigh> */ $s = $db->sql_query($q); if(!$s) die('Error updating order information: '.$db->get_error().'<br /><u>SQL:</u><br />'.$q);

      $q = 'UPDATE '.table_prefix.'themes SET theme_order='.$r.' WHERE theme_order=0';       /* Check for errors... <sigh> */ $s = $db->sql_query($q); if(!$s) die('Error updating order information: '.$db->get_error().'<br /><u>SQL:</u><br />'.$q);

      echo('<div class="info-box">Theme moved up.</div>');

    }

    $db->free_result($s);

    $db->free_result($sn);

  }

  elseif(isset($_POST['down'])) {

    // If there is only one theme or if the selected theme is already at the top, do nothing

    $q = 'SELECT theme_order FROM '.table_prefix.'themes ORDER BY theme_order;';

    $s = $db->sql_query($q);

    if(!$s) die('Error selecting order information: '.$db->get_error().'<br /><u>SQL:</u><br />'.$q);

    $r = $db->fetchrow_num($s);

    if( /* check for only one theme... */ $db->numrows($s) < 2 || $r[0] == $db->numrows($s) /* ...and check if this theme is already at the bottom */ ) { echo('<div class="warning-box">This theme is already at the bottom of the list, or there is only one theme installed.</div>'); } else {

      // Get the order IDs of the selected theme and the theme before it

      $q = 'SELECT theme_order FROM '.table_prefix.'themes WHERE theme_id=\''.$db->escape($_POST['theme_id']).'\'';

      $s = $db->sql_query($q);

      if(!$s) die('Error selecting order information: '.$db->get_error().'<br /><u>SQL:</u><br />'.$q);

      $r = $db->fetchrow_num($s);

      $r = $r[0];

      $rb = $r + 1;

      // Thank God for jEdit's rectangular selection and the ablity to edit multiple lines at the same time ;)

      $q = 'UPDATE '.table_prefix.'themes SET theme_order=0 WHERE theme_order='.$rb.'';      /* Check for errors... <sigh> */ $s = $db->sql_query($q); if(!$s) die('Error updating order information: '.$db->get_error().'<br /><u>SQL:</u><br />'.$q);

      $q = 'UPDATE '.table_prefix.'themes SET theme_order='.$rb.' WHERE theme_order='.$r.''; /* Check for errors... <sigh> */ $s = $db->sql_query($q); if(!$s) die('Error updating order information: '.$db->get_error().'<br /><u>SQL:</u><br />'.$q);

      $q = 'UPDATE '.table_prefix.'themes SET theme_order='.$r.' WHERE theme_order=0';       /* Check for errors... <sigh> */ $s = $db->sql_query($q); if(!$s) die('Error updating order information: '.$db->get_error().'<br /><u>SQL:</u><br />'.$q);

      echo('<div class="info-box">Theme moved down.</div>');

    }

  }

  else if(isset($_POST['uninstall'])) 

  {

    $q = 'SELECT * FROM '.table_prefix.'themes;';

    $s = $db->sql_query($q);

    if ( !$s )

    {

      die('Error getting theme count: '.$db->get_error().'<br /><u>SQL:</u><br />'.$q);

    }

    $n = $db->numrows($s);

    $db->free_result();

    if ( $_POST['theme_id'] == 'oxygen' )

    {

      echo '<div class="error-box">The Oxygen theme is used by Enano for installation, upgrades, and error messages, and cannot be uninstalled.</div>';

    }

    else

    {

      if($n < 2)

      {

        echo '<div class="error-box">The theme could not be uninstalled because it is the only theme left.</div>';

      }

      else

      {

        $q = 'DELETE FROM '.table_prefix.'themes WHERE theme_id=\''.$db->escape($_POST['theme_id']).'\' LIMIT 1;';

        $s = $db->sql_query($q);

        if ( !$s )

        {

          die('Error deleting theme data: '.$db->get_error().'<br /><u>SQL:</u><br />'.$q);

        }

        else

        {

          echo('<div class="info-box">Theme uninstalled.</div>');

        }

      }

    }

  }

  elseif(isset($_POST['install'])) {

    $q = 'SELECT theme_id FROM '.table_prefix.'themes;';

    $s = $db->sql_query($q);

    if(!$s) die('Error getting theme count: '.$db->get_error().'<br /><u>SQL:</u><br />'.$q);

    $n = $db->numrows($s);

    $n++;

    $theme_id = $_POST['theme_id'];

    $theme = Array();

    include('./themes/'.$theme_id.'/theme.cfg');

    if ( !isset($theme['theme_id']) )

    {

      echo '<div class="error-box">Could not load theme.cfg (theme metadata file)</div>';

    }

    else

    {

      $default_style = false;

      if ( $dh = opendir('./themes/' . $theme_id . '/css') )

      {

        while ( $file = readdir($dh) )

        {

          if ( $file != '_printable.css' && preg_match('/\.css$/i', $file) )

          {

            $default_style = $file;

            break;

          }

        }

        closedir($dh);

      }

      else

      {

        die('The /css subdirectory could not be located in the theme\'s directory');

      }

      if ( $default_style )

      {

        $q = 'INSERT INTO '.table_prefix.'themes(theme_id,theme_name,theme_order,enabled,default_style) VALUES(\''.$db->escape($theme['theme_id']).'\', \''.$db->escape($theme['theme_name']).'\', '.$n.', 1, \'' . $db->escape($default_style) . '\')';

        $s = $db->sql_query($q);

        if(!$s) die('Error inserting theme data: '.$db->get_error().'<br /><u>SQL:</u><br />'.$q);

        else echo('<div class="info-box">Theme "'.$theme['theme_name'].'" installed.</div>');

      }

      else

      {

        echo '<div class="error-box">Could not determine the default style for the theme.</div>';

      }

    }

  }

  echo('

  <h3>Currently installed themes</h3>

    <form action="'.makeUrl($paths->nslist['Special'].'Administration', 'module='.$paths->cpage['module']).'" method="post">

    <p>

      <select name="theme_id">

        ');

        $q = 'SELECT theme_id,theme_name,enabled FROM '.table_prefix.'themes ORDER BY theme_order';

        $s = $db->sql_query($q);

        if(!$s) die('Error selecting theme data: '.$db->get_error().'<br /><u>Attempted SQL:</u><br />'.$q);

        while ( $r = $db->fetchrow_num($s) ) {

          if($r[2] < 1) $r[1] .= ' (disabled)';

          echo('<option value="'.$r[0].'">'.$r[1].'</option>');

        }

        $db->free_result();

        echo('

        </select> <input type="submit" name="disenable" value="Enable/Disable" /> <input type="submit" name="edit" value="Change settings" /> <input type="submit" name="up" value="Move up" /> <input type="submit" name="down" value="Move down" /> <input type="submit" name="uninstall" value="Uninstall" style="color: #DD3300; font-weight: bold;" />

      </p>

    </form>

    <h3>Install a new theme</h3>

  ');

    $theme = Array();

    $obb = '';

    for($i=0;$i<sizeof($l);$i++) {

      if(is_file('./themes/'.$l[$i].'/theme.cfg') && file_exists('./themes/'.$l[$i].'/theme.cfg')) {

        include('./themes/'.$l[$i].'/theme.cfg');

        $q = 'SELECT * FROM '.table_prefix.'themes WHERE theme_id=\''.$theme['theme_id'].'\'';

        $s = $db->sql_query($q);

        if(!$s) die('Error selecting list of currently installed themes: '.$db->get_error().'<br /><u>Attempted SQL:</u><br />'.$q);

        if($db->numrows($s) < 1) {

          $obb .= '<option value="'.$theme['theme_id'].'">'.$theme['theme_name'].'</option>';

        }

        $db->free_result();

      }

    }

    if($obb != '') {

      echo('<form action="'.makeUrl($paths->nslist['Special'].'Administration', 'module='.$paths->cpage['module']).'" method="post"><p>');

      echo('<select name="theme_id">');

      echo($obb);

      echo('</select>');

      echo('

      <input type="submit" name="install" value="Install this theme" />

      </p></form>');

    } else echo('<p>All themes are currently installed.</p>');

}