<?php

//////////////////////////
//						//
//	Section functions	//
//						//
//////////////////////////

function mk_sec($name)
{
	$link = mysql_connect($_SESSION['BD_server'], $_SESSION['BD_user'], $_SESSION['BD_pass']);
	mysql_select_db($_SESSION['BD_name'], $link);

	$name = strip_tags($name);
	mysql_query("INSERT INTO `$_SESSION[BD_name]`.`section` (`id` ,`name`) VALUES (NULL , '$name');", $link);
	mysql_close($link);

	echo "<META HTTP-EQUIV='Refresh' CONTENT='0; URL=./?sec=$name'>";
}

function del_sec($n_sec)
{
	$link = mysql_connect($_SESSION['BD_server'], $_SESSION['BD_user'], $_SESSION['BD_pass']);
	mysql_select_db($_SESSION['BD_name'], $link);

	for($sec = 1; $sec <= $_POST['n_sec']; $sec++)
	{
		if($_POST[$sec])
		{
			//id_sec
			$result1 = mysql_query("SELECT id FROM section  WHERE name = '$_POST[$sec]'", $link);
			$row1 = mysql_fetch_row($result1);
			//todas las sub_sec de id_sec
			$result2 = mysql_query("SELECT name FROM sub_section  WHERE id_sec = '$row1[0]'", $link );
	
			while($row2 = mysql_fetch_row($result2))
				del_sub_sec($row1[0], $row2[0]);

			mysql_query("DELETE FROM `section` WHERE `section`.`id` = $row1[0];", $link);
			
		}
	}
	
	echo "<META HTTP-EQUIV='Refresh' CONTENT='0; URL=./index.php'>";
}

//carga las sub-secciones acorde con la sección seleccionada
function load_section() 
{
	$link = mysql_connect($_SESSION['BD_server'], $_SESSION['BD_user'], $_SESSION['BD_pass']);
	mysql_select_db($_SESSION['BD_name'], $link);

	// obtiene la seccion a cargar
	$result1 = mysql_query("SELECT id FROM section WHERE name = '$_SESSION[sec]'", $link);
	$row1 = mysql_fetch_row($result1);

	// obtiene las sub-secciones relacionadas con la sección
	$result2 = mysql_query("SELECT name FROM sub_section WHERE id_sec = '$row1[0]'", $link);

	// carga las subsecciones
	while ( $row2 = mysql_fetch_row( $result2 ) ) 
		load_sub_section($row2[0]);
}

//////////////////////////////
//							//
//	Sub-Section functions	//
//							//
//////////////////////////////

function mk_sub_sec($name, $sec) // crear sub-sección
{
	$link = mysql_connect($_SESSION['BD_server'], $_SESSION['BD_user'], $_SESSION['BD_pass']);
	mysql_select_db($_SESSION['BD_name'], $link);

	$sec_id_query = mysql_query("SELECT * FROM section  WHERE name = '$sec'", $link);
	$row = mysql_fetch_row($sec_id_query);

	$name = strip_tags($name);
	mysql_query("INSERT INTO `$_SESSION[BD_name]`.`sub_section` (`id_sec` ,`name`) VALUES ('$row[0]' , '$name');", $link);
	mysql_close($link);

	echo "<META HTTP-EQUIV='Refresh' CONTENT='0; URL=./?sec=$_POST[sec]'>";
}

function del_sub_sec($id_sec, $sub_sec)
{
	$link = mysql_connect($_SESSION['BD_server'], $_SESSION['BD_user'], $_SESSION['BD_pass']);
	mysql_select_db($_SESSION['BD_name'], $link);

	$result1 = mysql_query("SELECT id FROM document  WHERE id_sec = '$id_sec' AND id_sub_sec = '$sub_sec'", $link );	
	while ($row1 = mysql_fetch_row($result1))
		mysql_query("DELETE FROM `document` WHERE `document`.`id` = $row1[0] LIMIT 1 ;", $link);

	mysql_query("DELETE FROM `sub_section` 
				WHERE `sub_section`.`id_sec` = $id_sec 
				AND CONVERT( `sub_section`.`name` USING utf8 ) = '$sub_sec' LIMIT 1 ;", $link);
}

function del_sub_secs($n_sub_sec, $id_sec)
{
	$link = mysql_connect($_SESSION['BD_server'], $_SESSION['BD_user'], $_SESSION['BD_pass']);
	mysql_select_db($_SESSION['BD_name'], $link);
	
	$result1 = mysql_query("SELECT name FROM section  WHERE id = '$_POST[id_sec]'", $link );
	$row1 = mysql_fetch_row($result1);

	if ( $n_sub_sec )
	{
		for($sub_sec = 1; $sub_sec <= $n_sub_sec; $sub_sec++)
		{
			if($_POST[$sub_sec])
			{
				del_sub_sec($id_sec, $_POST[$sub_sec]);
			}
		}
	}
	
	echo "<META HTTP-EQUIV='Refresh' CONTENT='0; URL=./?sec=$row1[0]'>";
}

//carga una sub-seccion acorde con la sección seleccionada
function load_sub_section($sub_sec) 
{
	$link = mysql_connect($_SESSION['BD_server'], $_SESSION['BD_user'], $_SESSION['BD_pass']);
	mysql_select_db($_SESSION['BD_name'], $link);

	$result1 = mysql_query("SELECT * FROM section WHERE name = '$_SESSION[sec]'", $link);
	$row1 = mysql_fetch_row($result1);

	$result2 = mysql_query("SELECT name FROM sub_section WHERE id_sec = '$row1[0]' AND name = '$sub_sec'", $link);
	$row2 = mysql_fetch_row( $result2 );

	$result3 = mysql_query("SELECT * FROM document WHERE id_sec = '$row1[0]' AND id_sub_sec = '$row2[0]'", $link);

	echo "<script language='JavaScript' type='text/javascript' src='javascript/create_doc.js'></script>";

	// título de la sección
	echo "<h2 class='main'>$row2[0]";
	// opción crear contenido solo disponible si el usuario esta activado
	if( $_SESSION["user"] && ($_SESSION["user_type"] >= 1))
		echo "<button onclick=\"mk_doc('$row1[1]', '$row2[0]')\"><img src='files/pics/file.png'></button>";

	if( $_SESSION["user"] && ($_SESSION["user_type"] >= 5))
		echo "<a href='index.php?form=del_doc&sec_ref=$row1[1]&sub_sec_ref=$row2[0]'><img src='files/pics/delete.png'></a>";

	echo "</h2>";

	load_sub_section_content($sub_sec);
}

function load_sub_section_content($sub_sec)
{
	$link = mysql_connect($_SESSION['BD_server'], $_SESSION['BD_user'], $_SESSION['BD_pass']);
	mysql_select_db($_SESSION['BD_name'], $link);

	$get_id_sec = mysql_query("SELECT id FROM section WHERE name = '$_SESSION[sec]'", $link);
	$id_sec = mysql_fetch_row($get_id_sec);

	$get_id_sub_sec = mysql_query("SELECT name FROM sub_section WHERE id_sec = '$id_sec[0]' AND name = '$sub_sec'", $link);
	$id_sub_sec = mysql_fetch_row( $get_id_sub_sec );

	$get_docs = mysql_query("SELECT * FROM document WHERE id_sec = '$id_sec[0]' AND id_sub_sec = '$id_sub_sec[0]'", $link);

	echo "<ol class='main'>";
	while ( $doc = mysql_fetch_assoc( $get_docs ) )
	{
		// si el documento esta aprobado es visible para todos los visitantes
		if($doc['state'] == 1)
			echo "<li><a href='?doc=$doc[id]'>$doc[title]</a></li>";
		// si no, mostramos su estado a los administradores y al autor
		else if(($_SESSION["user_type"] >= 3) || ($_SESSION["user"] == $doc['autor']))
		{
			echo "<li>";
			// borrador
			if ($doc['state'] == 0)
				echo "<a href='?doc=$doc[id]'>$doc[title]</a><img src='files/pics/file.png'>";
			// en espera de resolución
			else if ($doc['state'] == 2)
				echo "<a href='?doc=$doc[id]'>$doc[title]</a><img src='files/pics/away.png'>";			
			// rechazado
			else if ($doc['state'] == 3)
				echo "<a href='?doc=$doc[id]'>$doc[title]</a><img src='files/pics/busy.png'>";

			echo "</li>";			
		}			
	}
	echo "</ol>";

	mysql_close($link);
}

?>
