<?php

if ($_GET["op"] == "mk") // crear documento
{
	session_start();
	mk_doc($_GET['sec_ref'], $_GET['sub_sec_ref'], $_SESSION['user'], $_GET['title']);
}


////////////////////////////////
//							  //
// funciones sobre DOCUMENTOS //
//							  //	
////////////////////////////////

// convierte etiquetas aceptadas, y elimina el resto de ellas
function parse_text_to_html($text)
{
	// remove tags
	$text = strip_tags($text);
	// convert tags:
	// bold
	$text = ereg_replace("(\[b\])", "<b>", $text);
	$text = ereg_replace("(\[\/b\])", "</b>", $text);
	// italic
	$text = ereg_replace("(\[i\])", "<i>", $text);
	$text = ereg_replace("(\[\/i\])", "</i>", $text);
	// header
	$text = ereg_replace("(\[h2\])", "<h2>", $text);
	$text = ereg_replace("(\[\/h2\])", "</h2>", $text);
	// align
	$text = ereg_replace("(\[align=center\])", "<p class=\"a_center\">", $text);
	$text = ereg_replace("(\[align=left\])", "<p class=\"a_left\">", $text);
	$text = ereg_replace("(\[\/align\])", "</p>", $text);
	//img
	$text = ereg_replace("(\[img\])", "<img src=\"", $text);
	$text = ereg_replace("(\[\/img\])", "\">", $text);

	return $text;
}

// crear documento
function mk_doc($sec, $sub_sec, $autor, $title) 
{
	session_start();

	$link = mysql_connect($_SESSION['BD_server'], $_SESSION['BD_user'], $_SESSION['BD_pass']);
	mysql_select_db($_SESSION['BD_name'], $link);

	$result1 = mysql_query("SELECT id FROM section WHERE name = '$sec'", $link);
	$row1 = mysql_fetch_row($result1);

	$doc_title = $title;
	$body = "Sin contenido";

	$state = 0;

	$query = "INSERT INTO `$_SESSION[BD_name]`.`document` (`id` ,`id_sec` ,`id_sub_sec` ,`title` ,`body` ,`autor`,`state`) 
			  VALUES (NULL , '$row1[0]', '$sub_sec', '$doc_title', '$body', '$autor', '$state');";

	mysql_query($query, $link);
	mysql_close($link);

	echo "<META HTTP-EQUIV='Refresh' CONTENT='0; URL=./?sec=$sec'>";
}

// editar documento
function edit_doc($id, $title, $body) 
{
	session_start();

	$date = date("d/m/Y"); 				// obtenemos fecha de modificacion
	$body = parse_text_to_html($body); 	// parseamos el body
	$title = strip_tags($title); 		// parseamos el title

	$link = mysql_connect($_SESSION['BD_server'], $_SESSION['BD_user'], $_SESSION['BD_pass']);
	mysql_select_db($_SESSION['BD_name'], $link);

	$query = 	"UPDATE `$_SESSION[BD_name]`.`document` 
				SET `title` = '$title',
				`body` = '$body', 
				`last_revision` = '$date' 
				WHERE `document`.`id` = $id LIMIT 1;";

	mysql_query($query, $link);
	mysql_close($link);

	echo "<META HTTP-EQUIV='Refresh' CONTENT='0; URL=./?doc=$_POST[id]'>";
}

function delete_doc($id)
{
	$link = mysql_connect($_SESSION['BD_server'], $_SESSION['BD_user'], $_SESSION['BD_pass']);
	mysql_select_db($_SESSION['BD_name'], $link);

	$query = "DELETE FROM `document` WHERE `document`.`id` = $id LIMIT 1;";

	mysql_query($query, $link);
	mysql_close($link);
}

function delete_docs()
{
	$link = mysql_connect($_SESSION['BD_server'], $_SESSION['BD_user'], $_SESSION['BD_pass']);
	mysql_select_db($_SESSION['BD_name'], $link);
	
	$result1 = mysql_query("SELECT name FROM section  WHERE id = '$_POST[id_sec]'", $link );
	$row1 = mysql_fetch_row($result1);

	if ( $_POST['n_docs'])
	{
		for($doc = 1; $doc <= $_POST['n_docs']; $doc++)
		{
			if($_POST[$doc])
				delete_doc($_POST[$doc]);
		}
	}
	
	echo "<META HTTP-EQUIV='Refresh' CONTENT='0; URL=./?sec=$_POST[sec]'>";
}

// publicar documento (lo hace visible a los administradores)
function publicate_doc($id) 
{
	session_start();

	$link = mysql_connect($_SESSION['BD_server'], $_SESSION['BD_user'], $_SESSION['BD_pass']);
	mysql_select_db($_SESSION['BD_name'], $link);
	mysql_query("UPDATE `$_SESSION[BD_name]`.`document` SET `state` = '2'  WHERE `document`.`id` = $id LIMIT 1;", $link);
	mysql_close($link);

	echo "<META HTTP-EQUIV='Refresh' CONTENT='0; URL=./?doc=$_POST[id]'>";
}

// activar documento (lo hace visible a todos los usuarios)
function activate_doc($id) 
{
	session_start();

	$link = mysql_connect($_SESSION['BD_server'], $_SESSION['BD_user'], $_SESSION['BD_pass']);
	mysql_select_db($_SESSION['BD_name'], $link);
	mysql_query("UPDATE `$_SESSION[BD_name]`.`document` SET `state` = '1'  WHERE `document`.`id` = $id LIMIT 1;", $link);
	mysql_close($link);

	echo "<META HTTP-EQUIV='Refresh' CONTENT='0; URL=./?doc=$_POST[id]'>";
}

// rechazar documento (se eliminara cuando cumpla un plazo)
function decline_doc($id) 
{
	session_start();

	$link = mysql_connect($_SESSION['BD_server'], $_SESSION['BD_user'], $_SESSION['BD_pass']);
	mysql_select_db($_SESSION['BD_name'], $link);
	mysql_query("UPDATE `$_SESSION[BD_name]`.`document` SET `state` = '3'  WHERE `document`.`id` = $id LIMIT 1;", $link);
	mysql_close($link);

	echo "<META HTTP-EQUIV='Refresh' CONTENT='0; URL=./?doc=$_POST[id]'>";
}

// cargar documento
function load_doc($id)
{
	session_start();

	$link = mysql_connect($_SESSION['BD_server'], $_SESSION['BD_user'], $_SESSION['BD_pass']);
	mysql_select_db($_SESSION['BD_name'], $link);

	$get_doc = mysql_query("SELECT * FROM document WHERE id = '$id'", $link);
	$doc = mysql_fetch_assoc($get_doc);

	// aprobable o rechazable, si el documento esta en espera y se tiene permisos
	if(($_SESSION["user_type"] >= 3) && ($doc["state"] == 2))
	{ 
		echo "<FORM method='post' ACTION='form_action.php'>";
		echo "<FIELDSET>";
		echo "<label></label>";
		echo "<input type='submit' value='Aceptar documento' name='active_doc'>";
		echo "<input type='submit' value='Rechazar documento' name='decline_doc'>";
    	echo "<input type='hidden' name='id' value='$id'>";
		echo "</FIELDSET>";
		echo "</FORM>";
	}

	// titulo del fichero
	echo "<h1 class='doc'>$doc[title]";
	// editable si el usuario es administrador, o el autor del documento
	if(($_SESSION["user_type"] >= 3) || ($_SESSION["user"] == $doc["autor"]))
		echo "<a href='?form=edit_doc&id=$id'><img src='files/pics/file.png' alt='Editar'></a>";
	echo "</h1>";
	// carga el cuerpo
    echo "<div class='doc_body'>$doc[body]</div>";
	// carga el autor
	echo "<div class='autor'>Publicado por $doc[autor].</div><br>";
	// si ha sido editado:
	if ($doc["last_revision"] != "0000-00-00")
		// carga la ultima revision
		echo "<div class='autor'> Ultima revision $doc[last_revision].</div><br>";

	mysql_close($link);	
}

?>
