<?php

function show( $conn, $authenticated, $authlevel )
{
	// $lrcnt = 4;
	$lrcnt = 3;
	$offset = 0;
	$tagwhere = "";
	$authwhere = "f.ff_state = 2 and f.ff_public = 1 ";
	$picid = 0;
	$baseUrl = "https://pics.borg.ch/fotolib";
	$url = "index.phtml?cmd=show";
	$sqloff = 0;
	$limit = 2*$lrcnt-1;
	$urlRight = "";
	$urlLeft = "";
	$urlDown = "";
	$urlUp = "";
    $alphatags = array();

	if( var_int( "R", "tag", $tag, 1, 999999 ) )
	{
		$tagwhere =	"and exists ( " .
						"select t.ft_id from fotolib_foto_tag t " .
						"where t.ff_id = f.ff_id and t.ft_id = $tag " .
					") ";
		$url .= "&amp;tag=$tag";
	}
	else if( var_string( "R", "tags", $tags_str ) )
	{
        /*
		if( !preg_match( "/^[1-9][0-9]*(,[1-9][0-9]*)*\$/", $tags_str ) )
		{
			return;
		}
        */
		$url .= "&amp;tags=$tags_str";
		$tagwhere =	"";
		foreach( explode( ",", $tags_str ) as $tag )
		{
            if( preg_match( "/^[1-9][0-9]*\$/", $tag ) )
            {
                $tagwhere .=	"and exists ( " .
                                "select t.ft_id from fotolib_foto_tag t " .
                                "where t.ff_id = f.ff_id and t.ft_id = $tag " .
                            ") ";
                
            }
            else
            {
                $alphatags[$tag] = $tag;
            }
		}
	}
	else if( var_int( "R", "id", $picid, 1, 999999999 ) )
	{
		$tagwhere =	"and f.ff_id = $picid ";
	}
	else
	{
		logstr( "missing tags and id" );
		return;
	}
	if( $authlevel > 1 )
	{
        $authwhere = "";
        $tmp = "";
        $stcnt = 0;
        $state1 = 0;
        $state2 = 0;
        $state999 = 0;
        $stval = 0;
        if( $alphatags["state1"] == "state1" )
        {
            $state1 = 1;
            $stcnt += 1;
            $stval = 1;
        }
        if( $alphatags["state2"] == "state2" )
        {
            $state2 = 1;
            $stcnt += 1;
            $stval = 2;
        }
        if( $alphatags["state999"] == "state999" )
        {
            $state999 = 1;
            $stcnt += 1;
            $stval = 999;
        }
        if( $stcnt == 0 )
        {
            $authwhere .= "ff_state = 2 ";
        }
        else if( $stcnt == 1 )
        {
            $authwhere .= "ff_state = $stval ";
        }
        else
        {
            $authwhere .= "ff_state in( ";
            $pfx = "";
            if( $state1 )
            {
                $authwhere .= $pfx . "1";
                $pfx = ", ";
            }
            if( $state2 )
            {
                $authwhere .= $pfx . "2";
                $pfx = ", ";
            }
            if( $state999 )
            {
                $authwhere .= $pfx . "999";
                $pfx = ", ";
            }
            $authwhere .= ") ";
        }
        $val = 0;
        if( $alphatags["visible"] == "visible" )
        {
            $val += 1;
        }
        if( $alphatags["invisible"] == "invisible" )
        {
            $val += 2;
        }
        if( $val == 2 )
        {
            $authwhere .= "and ff_public = 0";
        }
        else if( $val != 3 )
        {
            $authwhere .= "and ff_public = 1";
        }
	}
    // echo "WHERE=$authwhere\n";
	if( $picid == 0 )
	{
		var_int( "R", "off", $offset, -1, 999999 );
		if( var_int( "R", "fromoff", $fromoffset, 0, 999999 ) )
		{
			$qry = "select " .
					pgts2str( "f.ff_disp_date", "ff_disp_date" ) . " " .
					"from fotolib_foto f  where ff_id = \$1";
			$qryval = array( 1 => $fromoffset );
			$date = sql_quick_fetch( $conn, $qry, $qryval );
			if( $date )
			{
				$qry =	"select " .
							"count(*) as cnt " .
						"from " .
							"fotolib_foto f " .
						"where " .
                            $authwhere . $tagwhere .
							"and ff_disp_date < " . str2pgts( "\$1" );
				$qryval = array( 1 => $date );
				$newoff = sql_quick_fetch( $conn, $qry, $qryval );
				if( $newoff )
				{
					$offset = $newoff;
				}
			}
		}
		else if( $offset < 0 )
		{
			$offset = 0;
			$qry =	"select " .
						"count(*) as cnt " .
					"from " .
						"fotolib_foto f " .
					"where " .
						// "ff_public = 1 " .
                        $authwhere . $tagwhere;
			$newoff = sql_quick_fetch( $conn, $qry );
			if( $newoff )
			{
				$offset = $newoff - 1;
			}
		}
		$sqloff = $offset - $lrcnt;
		$limit = 2 * $lrcnt + 2;
		if( $sqloff < 0 )
		{
			$sqloff = 0;
			$limit = $offset + 2 + $lrcnt;
		}
	}
	$sql =	"select " .
				"f.ff_id, " .
				pgts2str( "f.ff_disp_date", "ff_disp_date" ) . ", " .
				"ff_exif_latitude, ff_exif_longitude, " .
				"f.ff_comment " .
			"from " .
				"fotolib_foto f " .
			"where " .
				// "f.ff_state = " . FFS_ACTIVE . " and  " .
				// "f.ff_public = 1 " .
				$authwhere . $tagwhere .
			"order by " .
				"f.ff_disp_date " .
			"limit $limit offset $sqloff";
						// +++ hmm authwhere contains ff_public?
	// logstr( $sql );
	$ress = pg_query( $conn, $sql );
	// logstr( "pg_query returned" );
	if( !$ress )
	{
		return;
	}
	$row = pg_fetch_array( $ress, NULL, PGSQL_ASSOC );
	// logstr( "pg_fetch_array returned" );
	if( !$row )
	{
		return;
	}
	if( $offset > 1 )
	{
		$n = $offset - 1;
		$urlRight = "$baseUrl/$url&amp;off=$n";
	}	
	if( $picid == 0 )
	{
		echo "<table><tr>\n";
		if( $sqloff > 0 )
		{
			$n = $sqloff - $lrcnt - 1;
			if( $n < 0 ) $n = 0;
			$urlDown = "$baseUrl/$url&amp;off=$n";
			echo "<td>";
			echo "<a href=\"$url&amp;off=$n\">prev</a>";
			echo "<br />";
			echo "<a href=\"$url&amp;off=0\">first</a>";
			echo "</td>";
		}
		$currow = null;
		$lastrow = null;
		while( $row && $limit > 1 )
		{
			$limit--;
			$row["sqloff"] = $sqloff;
			$lastrow = $row;
			$lnkb = "<a href=\"$url&amp;off=$sqloff\">";
			$lnke = "</a>";
			$bgc = "";
			if( $sqloff == $offset )
			{
				$currow = $row;
				$lnkb = "&nbsp;";
				$lnke = "&nbsp;";
				$bgc = " bgcolor=\"blue\"";
			}
			$id = $row["ff_id"];
			if( 0 )
			{
			echo "<td$bgc>$lnkb<img" .
				" src=\"index.phtml?cmd=img&amp;id=$id&amp;sz=TH\"" .
				" />$lnke</td>\n";
			}
			else
			{
			echo "<td$bgc>$lnkb<img" .
				" src=\"pic/$id/TH\"" .
				" />$lnke</td>\n";
			}
			$row = pg_fetch_array( $ress, NULL, PGSQL_ASSOC );
			$sqloff++;
		}
		if( $row )
		{
			$n = $sqloff + $lrcnt;
			$urlUp = "$baseUrl/$url&amp;off=$n";
			echo "<td>";
			echo "<a href=\"$url&amp;off=$n\">next</a>";
			echo "<br />";
			echo "<a href=\"$url&amp;off=-1\">last</a>";
			echo "</td>";
		}
		echo "</tr></table>\n";
		if( $currow != null )
		{
			$row = $currow;
		}
		else
		{
			$row = $lastrow;
		}
	}
	if( $sqloff > $offset )
	{
		$n = $offset + 1;
		$urlLeft = "$baseUrl/$url&amp;off=$n";
	}	
	$id = $row["ff_id"];
	$date = $row["ff_disp_date"];
	$exiflat = $row["ff_exif_latitude"];
	$exiflong = $row["ff_exif_longitude"];
	$comment = $row["ff_comment"];
	$size = "sm";
	// $size = "ti";
	$linksize = "sm";
	if( 0 )
	{
	echo "<img src=\"index.phtml?cmd=img&amp;id=$id&amp;sz=$size\" />\n";
	}
	else
	{
	// echo "<img src=\"pic/$id/$size\" />\n";
	// echo "<a href=\"pic/$id/$linksize\">";
	echo "<img id=\"pic\" src=\"pic/$id/$size\" />";
	// echo "</a>\n";
	}
	echo "<p><b>Date:</b> $date</p>\n";
	if( $exiflat != "" && $exiflong != "" )
	{
        $mapurl = maps_url( $exif_latitude, $exif_longitude );
		echo "<p><b>Coordinates:</b> <a href=\"$mapurl\">$exiflat / $exiflong</a></p>\n";
	}
	if( $comment )
	{
		echo "<p><b>Comment:</b> " . markup2html( $comment, true ) . "</p>\n";
	}
	$sql =	"select " .
				"t.ft_id, " .
				"t.ft_kind, " .
				"t.ft_name, " .
				"t.ft_descr " .
			"from " .
				"fotolib_tag t, " .
				"fotolib_foto_tag f " .
			"where " .
				"t.ft_id = f.ft_id and " .
				"f.ff_id = $id " .
			"order by " .
				"t.ft_name, " .
				"t.ft_descr";
	$ress = pg_query( $conn, $sql );
	if( !$ress )
	{
		echo "<p>no cursor</p>\n";
		return;
	}
	$row = pg_fetch_array( $ress, NULL, PGSQL_ASSOC );
	if( !$row )
	{
		echo "<p>no row</p>\n";
		return;
	}
	echo "<p><b>Tags:</b>\n";
	$pfx = "";
	while( $row )
	{
		$tid = $row["ft_id"];
		$kind = $row["ft_kind"];
		$name = $row["ft_name"];
		$descr = htmlentities( $row["ft_descr"] );
		$url = "index.phtml?cmd=show&amp;tag=$tid&amp;fromoff=$id";
		echo "$pfx<a href=\"$url\" title=\"$descr\">$name</a>";

		$row = pg_fetch_array( $ress, NULL, PGSQL_ASSOC );
		$pfx = ",\n";
	}
	echo "</p>\n";
	if( $authlevel > 0 )
	{
		echo "<form action=\"index.phtml\">\n";
		echo "<input type=\"hidden\" name=\"cmd\" value=\"edit\" />\n";
		echo "<input type=\"hidden\" name=\"id\" value=\"$id\" />\n";
		echo "<input type=\"submit\" value=\"edit\" />\n";
		echo "</form>\n";
	}
	$urlRight = str_replace( "&amp;", "&", $urlRight );
	$urlLeft = str_replace( "&amp;", "&", $urlLeft );
	$urlDown = str_replace( "&amp;", "&", $urlDown );
	$urlUp = str_replace( "&amp;", "&", $urlUp );
	echo "<script language=\"JavaScript\">\n";
	echo "swipe.urlRight = \"$urlRight\";\n";
	echo "swipe.urlLeft = \"$urlLeft\";\n";
	echo "swipe.urlDown = \"$urlDown\";\n";
	echo "swipe.urlUp = \"$urlUp\";\n";
	if( $authlevel > 0 )
	{
		$bigimg = "pic/$id/bg";
		echo "function img_click()\n";
		echo "{\n";
		echo "\tvar pic = document.getElementById(\"pic\");\n";
		echo "\tpic.src = \"$bigimg\";\n";
		echo "\tswipe.urlClick = \"\";\n";
		echo "}\n";
		echo "swipe.urlClick = img_click;\n";
	}
	else
	{
		echo "swipe.urlClick = \"\";\n";
	}
	echo "swipe.init(document.getElementById(\"pic\"));";
	echo "</script>\n";
}

function search( $conn, $authenticated, $authlevel )
{
	global $FTK_NAMES;
	global $FTK_ORDER;

?>
<script language="JavaScript">
function s()
{
	var elems = document.getElementsByClassName( "tag" );
	var i;
	var tags = "";
	if( elems.length == 0 )
	{
		alert( "please select at least one tag" );
		return;
	}
	for( i=0; i<elems.length; i++ )
	{
		if( elems[i].checked )
		{
			tags += "," + elems[i].value;
		}
	}
	document.getElementById( "tags" ).value = tags.substr( 1 );
	document.forms["search"].submit();
}
</script>
<?php
	echo "<form name=\"search\" method=\"GET\">\n";
	echo "<input type=\"hidden\" name=\"cmd\" value=\"show\" />\n";
	echo "<input id=\"tags\" type=\"hidden\" name=\"tags\" />\n";
	echo "</form>\n";
	echo "<form name=\"tags\">\n";
	echo "<table>\n";
    if( $authlevel > 1 )
    {
        echo "<tr><td colspan=\"2\"><b>State</b></td></tr>\n";
        echo "<tr><td>&nbsp;</td><td>" .
            "<input class=\"tag\" type=\"checkbox\" name=\"state1\" " .
            "value=\"state1\"/>State Incoming</td></tr>\n";
        echo "<tr><td>&nbsp;</td><td>" .
            "<input class=\"tag\" type=\"checkbox\" name=\"state2\" " .
            "value=\"state2\"/>State Active</td></tr>\n";
        echo "<tr><td>&nbsp;</td><td>" .
            "<input class=\"tag\" type=\"checkbox\" name=\"state999\" " .
            "value=\"state999\"/>State Special</td></tr>\n";

        echo "<tr><td colspan=\"2\"><b>Visibility</b></td></tr>\n";
        echo "<tr><td>&nbsp;</td><td>" .
            "<input class=\"tag\" type=\"checkbox\" name=\"visible\" " .
            "value=\"visible\"/>Visible</td></tr>\n";
        echo "<tr><td>&nbsp;</td><td>" .
            "<input class=\"tag\" type=\"checkbox\" name=\"invisible\" " .
            "value=\"invisible\"/>Invisible</td></tr>\n";
    }
	tags_read_all( $conn, $tags );
	foreach( $FTK_ORDER as $kind )
	{
		if( isset( $tags[$kind] ) )
		{
			echo "<tr><td colspan=\"2\"><b>" .
				htmlentities($FTK_NAMES[$kind]) .  "</b></td></tr>\n";
			foreach( $tags[$kind] as $tag )
			{
				list( $ftid, $name, $descr, $bsel ) = $tag;
				$name = htmlentities($name);
				if( $descr != "" )
				{
					$descr = ": " . htmlentities($descr);
				}
				$url = "index.phtml?cmd=show&amp;tag=$ftid";
				echo "<tr><td>&nbsp;</td><td>" .
					"<input class=\"tag\" type=\"checkbox\" name=\"t$ftid\" " .
					"value=\"$ftid\"/><a href=\"$url&amp;off=-1\">" .
					htmlentities($name) . "</a>$descr (" .
					"<a href=\"$url\">first</a>)</td></tr>\n";
			}
		}
	}
	echo "<tr><td colspan=\"2\">";
	echo "<input type=\"button\" value=\"search\" onclick=\"s()\" />\n";
	echo "</td></tr>";
	echo "</table>\n";
	echo "</form>\n";
}

?>