<?php
/**
 * @package     JohnCMS
 * @link        http://johncms.com
 * @copyright   Copyright (C) 2008-2015 JohnCMS Community
 * @license     LICENSE.txt (see attached file)
 * @version     VERSION.txt (see attached file)
 * @author      http://johncms.com/about
 */

defined('_IN_JOHNCMS') or die('Error: restricted access');
$lng_gal = core::load_lng('gallery');

if (($adm || (mysql_result(mysql_query("SELECT `user_add` FROM `library_cats` WHERE `id`=" . $id), 0) > 0) && isset($id) && $user_id)) {
    // Проверка на флуд
    $flood = functions::antiflood();
    if ($flood) {
        require('../incfiles/head.php');

        echo functions::display_error($lng['error_flood'] . ' ' . $flood . $lng['sec'], '<br /><a href="?do=dir&amp;id=' . $id . '">' . $lng['back'] . '</a>');
        require('../incfiles/end.php');
        exit;
    }

    $name = isset($_POST['name']) ? mb_substr(functions::checkin($_POST['name']), 0, 100) : '';
    $announce = isset($_POST['announce']) ? mb_substr(functions::checkin($_POST['announce']), 0, 500) : '';
    $text = isset($_POST['text']) ? functions::checkin($_POST['text']) : '';
    $tag = isset($_POST['tags']) ? functions::checkin($_POST['tags']) : '';

    if (isset($_POST['submit'])) {
        $err = array();

        if (empty($_POST['name'])) {
            $err[] = $lng['error_empty_title'];
        }

        if (!empty($_FILES['textfile']['name'])) {
            $ext = explode('.', $_FILES['textfile']['name']);
            if (mb_strtolower(end($ext)) == 'txt') {
                $newname = $_FILES['textfile']['name'];
                if (move_uploaded_file($_FILES['textfile']['tmp_name'], '../files/library/tmp/' . $newname)) {
                    $txt = file_get_contents('../files/library/tmp/' . $newname);
                    if (mb_check_encoding($txt, 'UTF-8')) {
                    } elseif (mb_check_encoding($txt, 'windows-1251')) {
                        $txt = iconv('windows-1251', 'UTF-8', $txt);
                    } elseif (mb_check_encoding($txt, 'KOI8-R')) {
                        $txt = iconv('KOI8-R', 'UTF-8', $txt);
                    } else {
                        echo functions::display_error($lng_lib['invalid_file_encoding'] . '<br /><a href="?act=addnew&amp;id=' . $id . '">' . $lng['repeat'] . '</a>');
                        require_once('../incfiles/end.php');
                        exit;
                    }

                    $text = trim($txt);
                    unlink('../files/library/tmp' . DIRECTORY_SEPARATOR . $newname);
                } else {
                    echo functions::display_error($lng_lib['error_uploading'] . '<br /><a href="?act=addnew&amp;id=' . $id . '">' . $lng['repeat'] . '</a>');
                    require_once('../incfiles/end.php');
                    exit;
                }
            } else {
                echo functions::display_error($lng_lib['invalid_file_format'] . '<br /><a href="?act=addnew&amp;id=' . $id . '">' . $lng['repeat'] . '</a>');
                require_once('../incfiles/end.php');
                exit;
            }
        } elseif (!empty($_POST['text'])) {
            $text = trim($_POST['text']);
        } else {
            $err[] = $lng['error_empty_text'];
        }

        if(empty($announce)){
            $announce = mb_substr($text, 0, 500);
        }

        $md = $adm ? 1 : 0;

        if (sizeof($err) > 0) {
            foreach ($err as $e) {
                echo functions::display_error($e);
            }
        } else {
            $sql = "
              INSERT INTO `library_texts`
              SET
                `cat_id` = $id,
                `name` = '" . mysql_real_escape_string($name) . "',
                `announce` = '" . mysql_real_escape_string($announce) . "',
                `text` = '" . mysql_real_escape_string($text) . "',
                `uploader` = '" . $login . "',
                `uploader_id` = " . core::$user_id . ",
                `premod` = $md,
                `comments` = " . (isset($_POST['comments']) ? 1 : 0) . ",
                `time` = " . time() . "
            ";

            if (mysql_query($sql)) {
                $cid = mysql_insert_id();
                require('../incfiles/lib/class.upload.php');

                $handle = new upload($_FILES['image']);
                if ($handle->uploaded) {
                    // Обрабатываем фото
                    $handle->file_new_name_body = $cid;
                    $handle->allowed = array(
                        'image/jpeg',
                        'image/gif',
                        'image/png'
                    );
                    $handle->file_max_size = 1024 * $set['flsz'];
                    $handle->file_overwrite = true;
                    $handle->image_x = $handle->image_src_x;
                    $handle->image_y = $handle->image_src_y;
                    $handle->image_convert = 'png';
                    $handle->process('../files/library/images/orig/');
                    $err_image = $handle->error;
                    $handle->file_new_name_body = $cid;
                    $handle->file_overwrite = true;

                    if ($handle->image_src_y > 240) {
                        $handle->image_resize = true;
                        $handle->image_x = 240;
                        $handle->image_y = $handle->image_src_y * (240 / $handle->image_src_x);
                    } else {
                        $handle->image_x = $handle->image_src_x;
                        $handle->image_y = $handle->image_src_y;
                    }

                    $handle->image_convert = 'png';
                    $handle->process('../files/library/images/big/');
                    $err_image = $handle->error;
                    $handle->file_new_name_body = $cid;
                    $handle->file_overwrite = true;
                    $handle->image_resize = true;
                    $handle->image_x = 32;
                    $handle->image_y = 32;
                    $handle->image_convert = 'png';
                    $handle->process('../files/library/images/small/');

                    if ($err_image) {
                        echo functions::display_error($lng_gal['error_uploading_photo'] . '<br /><a href="?act=addnew&amp;id=' . $id . '">' . $lng['repeat'] . '</a>');
                    }
                    $handle->clean();
                }

                if (!empty($_POST['tags'])) {
                    $tags = array_map('trim', explode(',', $_POST['tags']));
                    if (sizeof($tags > 0)) {
                        $obj = new Hashtags($cid);
                        $obj->add_tags($tags);
                        $obj->del_cache();
                    }
                }

                echo '<div>' . $lng_lib['article_added'] . '</div>' . ($md == 0 ? '<div>' . $lng_lib['article_added_thanks'] . '</div>' : '');
                mysql_query("UPDATE `users` SET `lastpost` = " . time() . " WHERE `id` = " . $user_id);
                echo $md == 1 ? '<div><a href="index.php?id=' . $cid . '">' . $lng_lib['to_article'] . '</a></div>' : '<div><a href="?do=dir&amp;id=' . $id . '">' . $lng_lib['to_category'] . '</a></div>';
                require_once('../incfiles/end.php');
                exit;
            } else {
                echo mysql_error();
//                exit;
            }
        }
    }
    echo '<div class="phdr"><strong><a href="?">' . $lng['library'] . '</a></strong> | ' . $lng_lib['write_article'] . '</div>'
        . '<form name="form" enctype="multipart/form-data" action="?act=addnew&amp;id=' . $id . '" method="post">'
        . '<div class="menu">'
        . '<p><h3>' . $lng['title'] . ' (max. 100):</h3>'
        . '<input type="text" name="name" value="' . $name . '" /></p>'
        . '<p><h3>' . $lng_lib['announce'] . ' (max. 500):</h3>'
        . '<textarea name="announce" rows="2" cols="20">' . $announce . '</textarea></p>'
        . '<p><h3>' . $lng['text'] . ':</h3>'
        . bbcode::auto_bb('form', 'text') . '<textarea name="text" rows="' . $set_user['field_h'] . '" cols="20">' . $text . '</textarea></p>'
        . '<p><input type="checkbox" name="comments" value="1" checked="checked" />' . $lng_lib['comment_article'] . '</p>'
        . '<p><h3>' . $lng_gal['upload_photo'] . '</h3>'
        . '<input type="file" name="image" accept="image/*" /></p>'
        . '<p><h3>' . $lng_lib['select_text_file'] . '</h3>'
        . '<input type="file" name="textfile" accept="text/plain" /><br/><small>' . $lng_lib['ignor_input'] . '</small></p>'
        . '<p><h3>' . $lng_lib['tags'] . '</h3>'
        . '<input name="tags" type="text" value="' . $tag . '" /><br/><small>' . $lng_lib['input_tags'] . '</small></p>'
        . '<p><input type="submit" name="submit" value="' . $lng['save'] . '" /></p>'
        . '</div></form>'
        . '<div class="phdr"><a href="?do=dir&amp;id=' . $id . '">' . $lng['back'] . '</a></div>';
} else {
    header('location: ?');
}