<?php

// Pandora FMS - https://pandorafms.com
// ==================================================
// Copyright (c) 2005-2023 Pandora FMS
// Please see https://pandorafms.com/community/ for full contribution list
// This program is free software; you can redistribute it and/or
// modify it under the terms of the GNU General Public License
// as published by the Free Software Foundation for version 2.
// This program is distributed in the hope that it will be useful,
// but WITHOUT ANY WARRANTY; without even the implied warranty of
// MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
// GNU General Public License for more details.
// Load global vars
global $config;

check_login();

if (! check_acl($config['id_user'], 0, 'PM')) {
    db_pandora_audit(
        AUDIT_LOG_ACL_VIOLATION,
        'Trying to access Link Management'
    );
    include 'general/noaccess.php';
    exit;
}

// Header.
ui_print_standard_header(
    __('Site news management'),
    'images/custom_field.png',
    false,
    '',
    true,
    [],
    [
        [
            'link'  => '',
            'label' => __('Admin tools'),
        ],
        [
            'link'  => '',
            'label' => __('Site news'),
        ],
    ]
);


if (isset($_POST['create'])) {
    // If create
    $subject = get_parameter('subject');
    $text = get_parameter('text');
    $timestamp = db_get_value('NOW()', 'tconfig_os', 'id_os', 1);
    $id_group = get_parameter('id_group');
    $modal = get_parameter('modal');
    $expire = get_parameter('expire');
    $expire_date = get_parameter('expire_date');
    $expire_time = get_parameter('expire_time');
    // Change the user's timezone to the system's timezone
    $expire_timestamp = (strtotime("$expire_date $expire_time") - get_fixed_offset());
    $expire_timestamp = date('Y-m-d H:i:s', $expire_timestamp);

    $values = [
        'subject'          => $subject,
        'text'             => $text,
        'author'           => $config['id_user'],
        'timestamp'        => $timestamp,
        'id_group'         => $id_group,
        'modal'            => $modal,
        'expire'           => $expire,
        'expire_timestamp' => $expire_timestamp,
    ];

    if ($subject === '') {
        $id_link = false;
    } else {
        $id_link = db_process_sql_insert('tnews', $values);
    }

    ui_print_result_message(
        $id_link,
        __('Successfully created'),
        __('Could not be created')
    );
}

if (isset($_POST['update'])) {
    // if update
    $id_news = (int) get_parameter('id_news', 0);
    $subject = get_parameter('subject');
    $text = get_parameter('text');
    $id_group = get_parameter('id_group');
    $modal = get_parameter('modal');
    $expire = get_parameter('expire');
    $expire_date = get_parameter('expire_date');
    $expire_time = get_parameter('expire_time');
    // Change the user's timezone to the system's timezone
    $expire_timestamp = (strtotime("$expire_date $expire_time") - get_fixed_offset());
    $expire_timestamp = date('Y-m-d H:i:s', $expire_timestamp);

    // NOW() column exists in any table and always displays the current date and time, so let's get the value from a row in a table which can't be deleted.
    // This way we prevent getting no value for this variable
    $timestamp = db_get_value('NOW()', 'tconfig_os', 'id_os', 1);

    $values = [
        'subject'          => $subject,
        'text'             => $text,
        'timestamp'        => $timestamp,
        'id_group'         => $id_group,
        'modal'            => $modal,
        'expire'           => $expire,
        'expire_timestamp' => $expire_timestamp,
    ];

    if ($subject === '') {
        $result = false;
    } else {
        $result = db_process_sql_update('tnews', $values, ['id_news' => $id_news]);
    }

    ui_print_result_message(
        $result,
        __('Successfully updated'),
        __('Not updated. Error updating data')
    );
}

if (isset($_GET['borrar'])) {
    // if delete
    $id_news = (int) get_parameter('borrar', 0);

    $result = db_process_sql_delete('tnews', ['id_news' => $id_news]);

    ui_print_result_message(
        $result,
        __('Successfully deleted'),
        __('Could not be deleted')
    );
}

// Main form view for Links edit
if ((isset($_GET['form_add'])) || (isset($_GET['form_edit']))) {
    if (isset($_GET['form_edit'])) {
        $creation_mode = 0;
        $id_news = (int) get_parameter('id_news', 0);

        $result = db_get_row('tnews', 'id_news', $id_news);

        if ($result['text'] == '&amp;lt;p&#x20;style=&quot;text-align:&#x20;center;&#x20;font-size:&#x20;13px;&quot;&amp;gt;Hello,&#x20;congratulations,&#x20;if&#x20;you&apos;ve&#x20;arrived&#x20;here&#x20;you&#x20;already&#x20;have&#x20;an&#x20;operational&#x20;monitoring&#x20;console.&#x20;Remember&#x20;that&#x20;our&#x20;forums&#x20;and&#x20;online&#x20;documentation&#x20;are&#x20;available&#x20;24x7&#x20;to&#x20;get&#x20;you&#x20;out&#x20;of&#x20;any&#x20;trouble.&#x20;You&#x20;can&#x20;replace&#x20;this&#x20;message&#x20;with&#x20;a&#x20;personalized&#x20;one&#x20;at&#x20;Admin&#x20;tools&#x20;-&amp;amp;gt;&#x20;Site&#x20;news.&amp;lt;/p&amp;gt;&#x20;') {
            header('Location: '.ui_get_full_url('index.php?sec=gextensions&sec2=godmode/setup/news'));
        }

        if ($result !== false) {
            $subject = $result['subject'];
            $text = $result['text'];
            $author = $result['author'];
            $timestamp = $result['timestamp'];
            $id_group = $result['id_group'];
            $modal = $result['modal'];
            $expire = $result['expire'];

            if ($expire) {
                $expire_timestamp = $result['expire_timestamp'];
                $expire_utimestamp = time_w_fixed_tz($expire_timestamp);
            } else {
                $expire_utimestamp = (get_system_time() + SECONDS_1WEEK);
            }

            $expire_date = date('Y/m/d', $expire_utimestamp);
            $expire_time = date('H:i:s', $expire_utimestamp);
        } else {
            ui_print_error_message(__('Name error'));
        }
    } else {
        // form_add
        $creation_mode = 1;
        $text = '';
        $subject = '';
        $author = $config['id_user'];
        $id_group = 0;
        $modal = 0;
        $expire = 0;
        $expire_date = date('Y/m/d', (get_system_time() + SECONDS_1WEEK));
        $expire_time = date('H:i:s', get_system_time());
    }

    // Create news
    $table = new stdClass();
    $table->width = '100%';
    $table->id = 'news';
    $table->cellpadding = 4;
    $table->cellspacing = 4;
    $table->class = 'databox filters filter-table-adv';
    $table->head = [];
    $table->data = [];
    $table->size[0] = '33%';
    $table->size[1] = '33%';
    $table->colspan[2][0] = 2;
    $table->rowclass[2] = 'w100p';

    $data = [];
    $data[0] = html_print_label_input_block(
        __('Subject'),
        html_print_input_text(
            'subject',
            $subject,
            '',
            35,
            255,
            true
        )
    );

    $data[1] = html_print_label_input_block(
        __('Group'),
        html_print_select_groups(
            $config['id_user'],
            'ER',
            users_can_manage_group_all(),
            'id_group',
            $id_group,
            '',
            '',
            0,
            true,
            false,
            false,
            'w100p',
            false,
            'width: 100%;'
        )
    );
    $table->data[] = $data;

    $data = [];
    $data[0] = html_print_label_input_block(
        __('Modal screen'),
        html_print_checkbox_extended(
            'modal',
            1,
            $modal,
            false,
            '',
            'class="w100p"',
            true
        )
    );

    $data[1] = '<div style="display: inline-flex; flex-direction: row;">'.html_print_label_input_block(
        __('Expire'),
        html_print_checkbox_extended(
            'expire',
            1,
            $expire,
            false,
            '',
            'class="w100p"',
            true
        ),
        ['div_class' => 'display-grid']
    );
    $data[1] .= html_print_label_input_block(
        __('Expiration'),
        '<div>'.html_print_input_text(
            'expire_date',
            $expire_date,
            '',
            12,
            10,
            true
        ).' '.html_print_input_text(
            'expire_time',
            $expire_time,
            '',
            10,
            7,
            true
        ).'</div>',
        [
            'div_class' => 'display-grid mrgn_lft_20px',
            'div_id'    => 'news-0-4',
        ]
    ).'</div>';

    $table->rowclass[] = '';
    $table->data[] = $data;

    $data = [];
    $data[0] = html_print_label_input_block(
        __('Text'),
        html_print_textarea(
            'text',
            25,
            100,
            io_safe_output($text),
            '',
            true,
            'w100p'
        )
    );

    $table->data[] = $data;

    echo '<form name="ilink" method="post" action="index.php?sec=gsetup&sec2=godmode/setup/news" class="max_floating_element_size">';
    if ($creation_mode == 1) {
        echo "<input type='hidden' name='create' value='1'>";
    } else {
        echo "<input type='hidden' name='update' value='1'>";
    }

    echo "<input type='hidden' name='id_news' value='";
    if (isset($id_news)) {
        echo $id_news;
    }

    echo "'>";

    html_print_table($table);

    echo "<table width='".$table->width."'>";
    echo "<tr><td align='right'>";
    if (isset($_GET['form_add'])) {
        $submit_button = html_print_submit_button(
            __('Create'),
            'crtbutton',
            false,
            ['icon' => 'wand'],
            true
        );
    } else {
        $submit_button = html_print_submit_button(
            __('Update'),
            'crtbutton',
            false,
            ['icon' => 'wand'],
            true
        );
    }

    html_print_action_buttons($submit_button);

    echo '</form></td></tr></table>';
} else {
    $rows = db_get_all_rows_in_table('tnews', 'timestamp');
    if ($rows === false) {
        $rows = [];
        ui_print_info_message(['no_close' => true, 'message' => __('There are no defined news') ]);
    } else {
        // Main list view for Links editor
        echo "<table cellpadding='0' cellspacing='0' class='info_table' width=100%>";
        echo '<thead><tr>';
        echo '<th>'.__('Subject').'</th>';
        echo '<th>'.__('Type').'</th>';
        echo '<th>'.__('Author').'</th>';
        echo '<th>'.__('Timestamp').'</th>';
        echo '<th>'.__('Expiration').'</th>';
        echo '<th>'.__('Delete').'</th>';
        echo '</tr></thead>';


        foreach ($rows as $row) {
            if ($row['text'] == '&amp;lt;p&#x20;style=&quot;text-align:&#x20;center;&#x20;font-size:&#x20;13px;&quot;&amp;gt;Hello,&#x20;congratulations,&#x20;if&#x20;you&apos;ve&#x20;arrived&#x20;here&#x20;you&#x20;already&#x20;have&#x20;an&#x20;operational&#x20;monitoring&#x20;console.&#x20;Remember&#x20;that&#x20;our&#x20;forums&#x20;and&#x20;online&#x20;documentation&#x20;are&#x20;available&#x20;24x7&#x20;to&#x20;get&#x20;you&#x20;out&#x20;of&#x20;any&#x20;trouble.&#x20;You&#x20;can&#x20;replace&#x20;this&#x20;message&#x20;with&#x20;a&#x20;personalized&#x20;one&#x20;at&#x20;Admin&#x20;tools&#x20;-&amp;amp;gt;&#x20;Site&#x20;news.&amp;lt;/p&amp;gt;&#x20;') {
                echo '<tr><td><b>'.__('Welcome to Pandora FMS Console').'</b></td>';
            } else {
                echo "<tr><td><b><a href='index.php?sec=gsetup&sec2=godmode/setup/news&form_edit=1&id_news=".$row['id_news']."'>".$row['subject'].'</a></b></td>';
            }

            if ($row['modal']) {
                echo '<td>'.__('Modal').'</b></td>';
            } else {
                echo '<td>'.__('Board').'</b></td>';
            }

            echo '<td>'.$row['author'].'</b></td>';
            $utimestamp = time_w_fixed_tz($row['timestamp']);
            echo '<td>'.date($config['date_format'], $utimestamp).'</b></td>';
            if ($row['expire']) {
                $expire_utimestamp = time_w_fixed_tz($row['expire_timestamp']);
                $expire_in_secs = ($expire_utimestamp - $utimestamp);

                if ($expire_in_secs <= 0) {
                    echo '<td>'.__('Expired').'</b></td>';
                } else {
                    $expire_in = human_time_description_raw($expire_in_secs, false, 'large');
                    echo '<td>'.$expire_in.'</b></td>';
                }
            } else {
                echo '<td>'.__('No').'</b></td>';
            }

            if (isset($tdcolor) === false) {
                $tdcolor = '';
            }

            echo '<td class="'.$tdcolor.' table_action_buttons"><a href="index.php?sec=gsetup&sec2=godmode/setup/news&id_news='.$row['id_news'].'&borrar='.$row['id_news'].'" onClick="if (!confirm(\' '.__('Are you sure?').'\')) return false;">'.html_print_image('images/delete.svg', true, ['border' => '0', 'class' => 'invert_filter main_menu_icon']).'</a></td></tr>';
        }

        echo '</table>';
    }

    echo "<form method='post' action='index.php?sec=gsetup&sec2=godmode/setup/news&form_add=1'>";
    html_print_action_buttons(
        html_print_submit_button(
            __('Add'),
            'form_add',
            false,
            ['icon' => 'wand'],
            true
        )
    );
    echo '</form>';
}

/*
 * We must add javascript here. Otherwise, the date picker won't
 * work if the date is not correct because php is returning.
 */
ui_include_time_picker();

ui_require_jquery_file('ui.datepicker-'.get_user_language(), 'include/javascript/i18n/');

// Include tiny for wysiwyg editor.
ui_require_javascript_file('tinymce', 'vendor/tinymce/tinymce/');
ui_require_javascript_file('pandora');
if ($config['style'] === 'pandora_black') {
    html_print_input_hidden('selected_style_theme', 'pandora_black');
}

?>
<script language="javascript" type="text/javascript">

    $(document).ready (function () {
        $("#text-expire_time").timepicker({
                showSecond: true,
                timeFormat: '<?php echo TIME_FORMAT_JS; ?>',
                timeOnlyTitle: '<?php echo __('Choose time'); ?>',
                timeText: '<?php echo __('Time'); ?>',
                hourText: '<?php echo __('Hour'); ?>',
                minuteText: '<?php echo __('Minute'); ?>',
                secondText: '<?php echo __('Second'); ?>',
                currentText: '<?php echo __('Now'); ?>',
                closeText: '<?php echo __('Close'); ?>'});

        $.datepicker.setDefaults($.datepicker.regional[ "<?php echo get_user_language(); ?>"]);

        $("#text-expire_date").datepicker({
            dateFormat: "<?php echo DATE_FORMAT_JS; ?>",
            changeMonth: true,
            changeYear: true,
            showAnim: "slideDown"}
        );
        var consoleStyle = $("#hidden-selected_style_theme").val();
        if (consoleStyle == "pandora_black") {
            defineTinyMCEDark('#textarea_text');
        } else {
            defineTinyMCE('#textarea_text');
        }

        $("#checkbox-expire").click(function() {
            check_expire();
        });

    });

    check_expire();

    function check_expire() {
        if ($("#checkbox-expire").is(":checked")) {
            $('#news-0-4').css('visibility', '');
        }
        else {
            $('#news-0-4').css('visibility', 'hidden');
        }
    }
</script>