<?php
/******************************************************************************
 * YMS - Yacht Management Software
 * Copyright (C) 2024 Thomas Hooge
 * 
 * SPDX-License-Identifier: WTFPL
 ******************************************************************************/

require 'globals.inc';
$pagetitle = _('Documents');

$id = gpc_get_int($_REQUEST, 'id', 0);

// ========== ACTIONS START ===================================================

switch ($submit = form_get_action()) {

    case NULL: break;

    case 'add':    $action = ACT_ADD; break;
    case 'view':   $action = ACT_VIEW; break;
    case 'edit':   $action = ACT_EDIT; break;
    case 'del':    $action = ACT_DELETE; break;

    case 'insert':
        // WIP New standalone document
        $p[':title'] = gpc_get_string($_POST, 'title');
        $p[':remarks'] = gpc_get_string($_POST, 'remarks');
        $g_message->Add(print_r($_FILES, true));
        if (empty($_FILES['files']['tmp_name']) ) {
            $g_warning->Add(_('No file for upload submitted. Try again by selecting a file first.'));
            $action = ACT_ADD;
            break;
        }
        $mimetypes = ['image/png', 'image/jpeg', 'image/svg+xml', 'application/pdf'];
        $nerr = 0;
        $file_name = $_FILES['files']['name'];
        $file_tmp = $_FILES['files']['tmp_name'];
        $file_type = $_FILES['files']['type'];
        $file_size = $_FILES['files']['size'];
        $file_ext = strtolower(end(explode('.', $_FILES['files']['name'])));
        $file_mimetype = mime_content_type($file_tmp);
        if (!in_array($file_mimetype, $mimetypes)) {
            $g_error->Add(sprintf(_("Mimetype '%s' not allowed for upload."), $file_mimetype));
            $action = ACT_ADD;
            break;
        };
        if ($file_type != $file_mimetype) {
            $g_warning->Add(sprintf(_("Mimetype mismatch: '%s'."), $file_type));
        }
        // ok let's go
        $file_hash = md5_file($file_tmp);
        $file_timestamp = date('Y-m-d H:i:s', filemtime($file_tmp));

        // check if the file already exists, in which case issue
        // a notice and display the existing document
        $sth = $pdo->prepare("SELECT docid FROM document WHERE hash=?");
        $sth->execute([$file_hash]);
        $id = $sth->fetchColumn();
        if ($id) {
            $g_warning->Add(_('Document already exists!'));
            $action = ACT_VIEW;
            break;
        }
        switch ($file_mimetype) {
            case 'application/pdf':
                $file_techname = $g_doc_basepath . '/doc-'.$file_hash.'.'.$file_ext;
                $doctype = 'generic';
                break;
            case 'image/svg+xml':
                $file_techname = $g_doc_basepath . '/drw-'.$file_hash.'.'.$file_ext;
                $doctype = 'drawing';
                break;
            case 'image/png':
            case 'image/jpeg':
                $file_techname = $g_doc_basepath . '/pic-'.$file_hash.'.'.$file_ext;
                $doctype = 'picture';
                break;
        }
        $p[':doctype'] = $doctype;
        $p[':mimetype'] = $file_mimetype; 
        $p[':filename'] = $file_name; 
        $p[':extension'] = $file_ext; 
        $p[':hash'] = $file_hash; 
        $p[':doctime'] = $file_timestamp; 
        $p[':docsize'] = $file_size; 
        $p[':title'] = gpc_get_string($_POST, 'title');
        $p[':remarks'] = gpc_get_string($_POST, 'remarks');
/*        $sql = "INSERT INTO document"
             . "    (doctype, filename, extension, hash, doctime, docsize, mimetype) "
             . "VALUES"
             . "    (?, ?, ?, ?, ?, ?, ?)";
        $sth = $pdo->prepare($sql);
        try {
            $sth->execute([$doctype, $file_name, $file_ext, $file_hash, $file_timestamp, $file_size, $file_mimetype]);
        } catch (PDOException $e) {
            $g_error->Add('SQL-Error: '. $e->getMessage());
        }
        $id = $pdo->lastInsertId(); */
        $id = db_exec_insert('document', $p);
        move_uploaded_file($file_tmp, $file_techname);
        $action = ACT_VIEW;
        break;

    case 'update':
        $filename = gpc_get_string($_POST, 'filename');
        $title = gpc_get_string($_POST, 'title', 40);
        $remarks = gpc_get_string($_POST, 'remarks', 150);
        $sql = "UPDATE document "
             . "SET filename=:filename,"
             . "    title=:title,"
             . "    remarks=:remarks "
             . "WHERE docid=:docid";
        $sth = $pdo->prepare($sql);
        $sth->bindValue(':docid', $id, PDO::PARAM_INT);
        $sth->bindValue(':filename', $filename, PDO::PARAM_STR);
        $sth->bindValue(':title', $title, PDO::PARAM_STR);
        $sth->bindValue(':remarks', $remarks, PDO::PARAM_STR);
        try {
            $sth->execute();
        } catch (PDOException $e) {
            $g_error->Add('SQL-Error: '. $e->getMessage());
        }
        $action = ACT_VIEW;
        break;

    case 'delete':
        // Security token needed!
        if (gpc_get_string($_POST, 'token', 16) != $_SESSION['token']) {
            $g_error->Add(_('Delete prohibited, invalid security token!'));
            $action = ACT_VIEW;
            break;
        }
        $action = ACT_DEFAULT;
        break;

    case 'addref':
        $eid = gpc_get_int($_POST, 'eid');
        $sql = "INSERT INTO docref "
             . "    (docid, refid, reftype) "
             . "VALUES "
             . "    (:docid, :refid, 'equipment')";
        $sth = $pdo->prepare($sql);
        $sth->bindValue(':docid', $id, PDO::PARAM_INT);
        $sth->bindValue(':refid', $eid, PDO::PARAM_INT);
        $sth->execute();
        $action = ACT_VIEW;
        break;

    case 'delref':
        // remove only link, not critical so get without token is ok
        $drid = gpc_get_int($_GET, 'drid');
        $sql = "DELETE FROM docref WHERE drid=?";
        $sth = $pdo->prepare($sql);
        $sth->execute([$drid]);
        $g_message->Add(_('Removed document reference'));
        $action = ACT_VIEW;
        break;
 
    default:
        $g_error->Add(sprintf(_('Unknown function!'), $submit));
        $valid = FALSE;

}

// ========== ACTIONS END =====================================================

require 'header.php';

// ========== PAGE CONTENT ====================================================

if ($action == ACT_DEFAULT):
// ========== VARIANT: default behavior =======================================

// All documents

/* TODO show all documents which
   - are completely unbound: no docref available
   - assigned to the current boat: docref with doctype vessel
   - are assigned to an equipment or project of current vesseö
   There can be multiple docref entries for a document,
   behavior still needs to be clarified. */

echo "<h1>$pagetitle</h1>\n";

$sql = "SELECT d.docid, d.doctype, d.filename, d.title, COUNT(r.drid) AS refcount "
     . "FROM document AS d LEFT OUTER JOIN docref AS r USING (docid) "
     . "GROUP BY d.docid, d.doctype, d.filename, d.title";
$sth = $pdo->query($sql);
$res = $sth->fetchAll();
echo '<table class="table table-striped">', "\n";
echo "<thead>\n";
echo "<tr>";
echo "<th>" . _('ID') . "</th>";
echo "<th>" . _('Type') . "</th>";
echo "<th>" . _('Filename') . "</th>";
echo "<th>" . _('Title') . "</th>";
echo "<th>" . _('Links') . "</th>";
echo "<th>&nbsp;</th>";
echo "</tr>\n";
echo "</thead>\n";
foreach ($res as $row) {
    echo "<tr>\n";
    echo "<td>". $row['docid'] ."</td>\n";
    echo "<td>". $row['doctype'] ."</td>\n";
    echo "<td>". $row['filename'] ."</td>\n";
    echo "<td>". $row['title'] ."</td>\n";
    echo "<td>". $row['refcount'] ."</td>\n";
    // Action buttons
    echo "<td>";
    echo '<a title="', _('View'), '" href="', $g_scriptname, '?f=view&id=', $row['docid'], '"><i class="bi-eye"></i></a>', "\n";
    echo '<a title="', _('Edit'), '" href="', $g_scriptname, '?f=edit&id=', $row['docid'], '"><i class="bi-pencil"></i></a>', "\n";
    echo "</td>\n";
    echo "</tr>\n";
}
// Table summary
echo "<tfoot>\n";
echo '<tr><td colspan="6">', sprintf(_('%d records'), count($res)), '</td></tr>', "\n";
echo "</tfoot>\n";
echo "</table>\n";

form_add_button($g_scriptname);

elseif ($action == ACT_ADD):
// ========== VARIANT: add record =============================================

echo '<h2>', _('Add Document'), "</h2>\n";
?>
<form method="post"  enctype="multipart/form-data" action="<?=$g_scriptname?>">
<div class="mb-3">
  <label for="title" class="form-label"><?=_('Title')?></label>
  <input type="text" class="form-control" id="title" name="title" value="<?=$title?>">
</div>
<div class="mb-3">
  <label for="remarks" class="form-label"><?=_('Remarks')?></label>
  <textarea class="form-control" id="remarks" name="remarks" rows="3"><?=$remarks?></textarea>
</div>
<div class="mb-3">
  <label for="files" class="form-label"><?=_('Document')?></label>
  <input class="form-control" type="file" id="files" name="files" onchange="preview()">
  <img id="frame" src="" class="img-fluid"> 
  <button class="btn btn-secondary" onclick="clearimg();return false;"><?=_('Clear')?></button>
  <script>
    function preview() {
      var images = ["image/png", "image/jpeg", "image/svg+xml"];
      console.log(event.target.files[0].type);
      if (images.indexOf(event.target.files[0].type) > -1) {
          frame.src = URL.createObjectURL(event.target.files[0]);
      } else {
          frame.src = "";
      }
    }
    function clearimg() {
      document.getElementById('file').value = null;
      frame.src = "";
    }
  </script>
</div>
<div class="container-fluid px-0 my-3">
  <button type="submit" name="submit[insert]" class="btn btn-primary"><?=_('Save')?></button>
  <a href="<?=$g_scriptname?>" class="btn btn-secondary"><?=_('Back')?></a>
</div>
</form>
<?php
elseif ($action == ACT_VIEW):
// ========== VARIANT: view single record =====================================

/* mutool: preview of page thumbs */

$sql = "SELECT docid, doctype, mimetype, filename, extension, hash,"
     . "    docsize, doctime, title, remarks "
     . "FROM document "
     . "WHERE docid=?";
$sth = $pdo->prepare($sql);
$sth->execute([$id]);
$document = $sth->fetch(PDO::FETCH_OBJ);

echo '<h2>', _('View Document'), "</h2>\n";

echo '<table class="table table-borderless">', "\n";
echo '<tr><th scope="row" style="width:20%">', _('Document type'),"</th><td>", $document->doctype, "</td></tr>\n";
if ($document->doctype == 'picture') {
    $techname = 'pic-' . $document->hash . '.' . $document->extension;
    echo '<tr><th scope="row">', _('Preview'), '</th><td>';
//    echo '<a href="doc/', $techname, '" target="_blank"><img width="', $g_thumb_size, '" src="doc/', $techname, '" alt="', $document->title, '"></a>';
    echo '<a href="dl.php?id=', $document->docid, '" target="_blank">';
    echo '<img width="', $g_thumb_size, '" src="dl.php?id=', $document->docid, '" alt="', $document->title, '">';
    echo '</a>';
    echo "</td></tr>\n";
} elseif (($document->doctype == 'drawing')) {
        echo '<tr><th scope="row">', _('Drawing'), '</th>';
        echo '<td><img src="dl.php?id=', $document->docid, '" alt="', $document->title, '"></td></tr>', "\n";
} elseif (($document->doctype == 'generic')) {
    $techname = 'doc-' . $document->hash . '.' . $document->extension;
    if ($document->mimetype == 'application/pdf') {
        // TODO show preview of previewpage, ctrate thumbnail if needed

        // Download link
        echo '<tr><th scope="row">', _('PDF'), '</th><td><a href="dl.php?id=', $document->docid, '">', $document->title ?? _('Download'), "</a></td></tr>\n";
    }
}
echo '<tr><th scope="row">', _('Mimetype'),"</th><td>", $document->mimetype, "</td></tr>\n";
echo '<tr><th scope="row">', _('Filename'),"</th><td>", $document->filename, "</td></tr>\n";
echo '<tr><th scope="row">', _('File size'),"</th><td>", $document->docsize, "</td></tr>\n";
echo '<tr><th scope="row">', _('Upload date'),"</th><td>", $document->doctime, "</td></tr>\n";
echo '<tr><th scope="row">', _('Title'),"</th><td>", $document->title, "</td></tr>\n";
echo '<tr><th scope="row">', _('Remarks'),"</th><td>", $document->remarks, "</td></tr>\n";
echo "</table>\n";

form_view_buttons($g_scriptname, $id);


echo '<h3>', _('Document references'), "</h3>\n";
$sql = "SELECT drid, reftype, ename AS name, eid "
     . "FROM docref INNER JOIN equipment ON (docref.reftype='equipment' AND docref.refid=equipment.eid) "
     . "WHERE docid=?";
$sth = $pdo->prepare($sql);
$sth->execute([$id]);
echo '<table class="table table-sm">', "\n";
echo "<thead>\n";
echo "<tr>";
echo '<th style="width:20%">' . _('Type') . "</th>";
echo "<th>" . _('Used by') . "</th>";
echo "<td></td>";
echo "</tr>\n";
echo "</thead>\n";
$eids = array();
foreach ($sth->fetchAll() as $row) {
    $eids[] = $row['eid'];
    echo "<tr>";
    echo "<td>", $row['reftype'], "</td>";
    echo "<td>", $row['name'], "</td>";
    echo "<td>";
    echo '<a title="', _('Remove'), '" href="', $script, '?f=delref&id=', $id, '&drid=', $row['drid'], '"><i class="bi-trash"></i></a>';
    echo "</td>";
    echo "</tr>\n";
}
echo "</table>\n";

// Equipment options
// Do not include equipment that has already been referenced in the list!
$opt_equipment = array();
$sql = "SELECT eid, ename FROM equipment WHERE vid=? ORDER BY ename";
$sth = $pdo->prepare($sql);
$sth->execute([$user->vid]);
foreach ($sth->fetchAll() as $row) {
    if (!in_array($row['eid'], $eids)) {
        $opt_equipment[$row['eid']] = $row['ename'];
    }
}
?>
<form method="post" action="<?=$g_scriptname?>">
  <input type="hidden" name="id" value="<?=$id?>">
  <select name="eid">
<?php
foreach ($opt_equipment as $k => $v) {
    echo '<option value="', $k, '">', $v, "</option>\n"; 
}
?>
  </select>
  <button class="btn btn-secondary" name="submit[addref]">Referenzieren</button>
</form>

<?php

elseif ($action == ACT_EDIT):
// ========== VARIANT: edit single record =====================================

echo '<h2>', _('Edit Document'), "</h2>\n";

$sql = "SELECT docid, doctype, filename, extension, hash, title, remarks "
     . "FROM document "
     . "WHERE docid=?";
$sth = $pdo->prepare($sql);
$sth->execute([$id]);
$document = $sth->fetch(PDO::FETCH_OBJ);

if ($document->doctype == 'picture') {
    echo '<img width="', $g_thumb_size, '" src="dl.php?id=', $document->docid, '">';
}

?>
<form method="post" action="<?=$g_scriptname?>">
<input type="hidden" name="id" value="<?=$id?>">
<div class="mb-3">
  <label for="title" class="form-label"><?=_('Filename')?></label>
  <input type="text" class="form-control" id="filename" name="filename" value="<?=$document->filename ?>">
</div>
<div class="mb-3">
  <label for="title" class="form-label"><?=_('Title')?></label>
  <input type="text" class="form-control" id="title" name="title" value="<?=$document->title ?>">
</div>
<div class="mb-3">
  <label for="remarks" class="form-label"><?=_('Remarks')?></label>
  <textarea class="form-control" id="remarks" name="remarks" rows="3"><?=$document->remarks ?></textarea>
</div>
<button type="submit" name="submit[update]" class="btn btn-primary"><?=_('Save')?></button>
<a href="<?=$g_scriptname?>?f=view&id=<?=$id?>" class="btn btn-secondary"><?=_('Back')?></a>
</form>
<?php

elseif ($action == ACT_DELETE):
// ========== VARIANT: delete record ==========================================

echo '<h2>', _('Delete Document'), "</h2>\n";

else:
// ========== ERROR UNKNOWN VARIANT ===========================================

echo '<p>', _('Unknown function call: Please report to system development!'), "</p>\n";

endif; // $action == ...
// ========== END OF VARIANTS =================================================

include 'footer.php';