<?php
/**
* @package RSForm! Pro
* @copyright (C) 2007-2019 www.rsjoomla.com
* @license GPL, http://www.gnu.org/copyleft/gpl.html
*/

defined('_JEXEC') or die;

use Joomla\CMS\Factory;
use Joomla\CMS\Language\Text;

class RsformControllerComponents extends RsformController
{
	public function __construct($config = array())
	{
		parent::__construct($config);

		$this->registerTask('apply', 	 'save');
		$this->registerTask('new', 	 	 'add');
		$this->registerTask('publish',   'changestatus');
		$this->registerTask('unpublish', 'changestatus');

		$this->registerTask('setrequired',   'changerequired');
		$this->registerTask('unsetrequired', 'changerequired');
	}

	public function save()
	{
		$db 				= Factory::getDbo();
		$app               	= Factory::getApplication();
		$componentType 	   	= $app->input->getInt('COMPONENTTYPE');
		$componentIdToEdit 	= $app->input->getInt('componentIdToEdit');
		$formId 		   	= $app->input->getInt('formId');
		$published			= $app->input->getInt('Published');

        $params = $app->input->post->get('param', array(), 'raw');

		if (isset($params['VALIDATIONRULE']) && $params['VALIDATIONRULE'] == 'multiplerules') {
			$params['VALIDATIONMULTIPLE'] = !empty($params['VALIDATIONMULTIPLE']) ? implode(',',$params['VALIDATIONMULTIPLE']) : '';
			$params['VALIDATIONEXTRA'] = !empty($params['VALIDATIONEXTRA']) ? json_encode($params['VALIDATIONEXTRA']) : '';
		}
		
		if ($componentType == RSFORM_FIELD_FILEUPLOAD && !isset($params['EMAILATTACH']))
		{
			$params['EMAILATTACH'] = array();
		}

		$just_added = false;
		if ($componentIdToEdit < 1)
		{
		    $query = $db->getQuery(true)
                ->select('MAX( ' . $db->qn('Order') . ')')
                ->from($db->qn('#__rsform_components'))
                ->where($db->qn('FormId') . ' = ' . $db->q($formId));
		    $nextOrder = (int) $db->setQuery($query)->loadResult() + 1;

		    $component = (object) array(
		        'FormId'            => $formId,
                'ComponentTypeId'   => $componentType,
                'Order'             => $nextOrder,
				'Published'			=> $published
            );

		    $db->insertObject('#__rsform_components', $component, 'ComponentId');

			$componentIdToEdit = $component->ComponentId;
			$just_added = true;

			$rowIndex = $app->input->getInt('rowIndex');
			$columnIndex = $app->input->getInt('columnIndex');
			$session = Factory::getSession();

			if ($rowIndex !== null && $columnIndex !== null)
			{
				$session->set('com_rsform.grid.row', $rowIndex);
				$session->set('com_rsform.grid.column', $columnIndex);
			}
			else
			{
				$session->set('com_rsform.grid.row', null);
				$session->set('com_rsform.grid.column', null);
			}
		}
		else
		{
			$component = (object) array(
				'ComponentId'	=> $componentIdToEdit,
				'Published'		=> $published
			);

			$db->updateObject('#__rsform_components', $component, array('ComponentId'));
		}

		/* @var $model RsformModelForms */
		$model = $this->getModel('forms');
		$lang  = $model->getLang();

		if (!$just_added && isset($params['ITEMS']))
		{
			$query = $db->getQuery(true)
				->select('cd.*')
				->from($db->qn('#__rsform_condition_details', 'cd'))
				->join('left', $db->qn('#__rsform_conditions', 'c') . ' ON (' . $db->qn('cd.condition_id') . ' = ' . $db->qn('c.id') . ')')
				->where($db->qn('cd.component_id') . ' = ' . $db->q($componentIdToEdit))
				->where($db->qn('c.lang_code') . ' = ' . $db->q($lang));

			if ($conditions = $db->setQuery($query)->loadObjectList()) {
				$data 		= RSFormProHelper::getComponentProperties($componentIdToEdit);
				$oldvalues 	= RSFormProHelper::explode(RSFormProHelper::isCode($data['ITEMS']));
				$newvalues 	= RSFormProHelper::explode(RSFormProHelper::isCode($params['ITEMS']));

				foreach ($oldvalues as $i => $oldvalue) {
					$tmp = explode('|', $oldvalue, 2);
					$oldvalue = reset($tmp);
					$oldvalue = str_replace(array('[c]', '[g]'), '', $oldvalue);

					$oldvalues[$i] = $oldvalue;
				}

				foreach ($newvalues as $i => $newvalue) {
					$tmp = explode('|', $newvalue, 2);
					$newvalue = reset($tmp);
					$newvalue = str_replace(array('[c]', '[g]', '[d]'), '', $newvalue);

					if (strpos($newvalue, '[p') !== false)
					{
						$newvalue = preg_replace('#\[p([0-9\.\-\+]+)\]#s', '', $newvalue);
					}

					$newvalues[$i] = $newvalue;
				}

				foreach ($conditions as $condition) {
					$oldPos = array_search($condition->value, $oldvalues);
					$newPos = array_search($condition->value, $newvalues);

					if ($newPos === false && $oldPos !== false && isset($newvalues[$oldPos])) {
						$newvalue = $newvalues[$oldPos];
						if ($condition->value != $newvalue) {

							$query = $db->getQuery(true)
								->update($db->qn('#__rsform_condition_details'))
								->set($db->qn('value') . ' = ' . $db->q($newvalue))
								->where($db->qn('id') . ' = ' . $db->q($condition->id));

							$db->setQuery($query);
							$db->execute();
						}
					}
				}
			}
		}

		$properties = array();
		if ($componentIdToEdit > 0)
		{
            $query = $db->getQuery(true);
            $query->select($db->qn('PropertyName'))
                ->from($db->qn('#__rsform_properties'))
                ->where($db->qn('ComponentId') . ' = ' . $db->q($componentIdToEdit))
                ->where($db->qn('PropertyName') . ' IN (' . implode(',', $db->q(array_keys($params))) . ')');
            $db->setQuery($query);
            $properties = $db->loadColumn();
        }

		if ($model->_form->Lang != $lang || (RSFormProHelper::getConfig('global.disable_multilanguage') && RSFormProHelper::getConfig('global.default_language') != 'en-GB'))
		{
            $model->saveFormPropertyTranslation($formId, $componentIdToEdit, $params, $lang, $just_added, $properties);
        }

		if ($componentIdToEdit > 0)
		{
			foreach ($params as $key => $val)
			{
				/**
				 * Sanitize the file extensions field
				 */
				if($key == 'ACCEPTEDFILES')
				{
					$sanitized = array();

					foreach (explode('\r\n', $val) as $extension)
					{
						$sanitized[] = ltrim($extension, '.');
					}

					$val = implode('\r\n', $sanitized);
				}
				if ($key === 'EMAILATTACH')
				{
					$val = implode(',', $val);
				}

				// No spaces for new fields
				if ($key === 'NAME' && $just_added)
				{
					$val = str_replace(' ', '_', $val);
				}

				$property = (object) array(
				    'PropertyValue' => $val,
                    'PropertyName'  => $key,
                    'ComponentId'   => $componentIdToEdit
                );

				if (in_array($key, $properties))
				{
                    $db->updateObject('#__rsform_properties', $property, array('PropertyName', 'ComponentId'));
				}
				else
				{
                    $db->insertObject('#__rsform_properties', $property);
				}
			}
		}

		$link = 'index.php?option=com_rsform&view=forms&layout=edit&formId='.$formId;
        if ($app->input->getInt('tabposition')) {
            $link .= '&tabposition=1';
            if ($tab = $app->input->getInt('tab')) {
                $link .= '&tab=' . $tab;
            }
        }
		if ($app->input->getCmd('tmpl') == 'component') {
            $link .= '&tmpl=component';
        }

		$this->setRedirect($link);
	}

    public function saveOrdering()
    {
        $db 	= Factory::getDbo();
        $query 	= $db->getQuery(true);
        $input 	= Factory::getApplication()->input;
        $keys 	= $input->post->get('cid', array(), 'array');

        foreach ($keys as $key => $val)
        {
            $query->update($db->qn('#__rsform_components'))
                ->set($db->qn('Order') . ' = ' . $db->q($val))
                ->where($db->qn('ComponentId') . ' = ' . $db->q($key));

            $db->setQuery($query)->execute();

            $query->clear();
        }

        echo 'Ok';

        exit();
    }

	public function validateName()
	{
		try {
			$input = Factory::getApplication()->input;

			// Make sure field name doesn't contain invalid characters
			$name = $input->get('componentName', '', 'raw');

			if (empty($name)) {
				throw new Exception(Text::_('RSFP_SAVE_FIELD_EMPTY_NAME'), 0);
			}

			if (preg_match('#[^a-zA-Z0-9_\- ]#', $name)) {
				throw new Exception(Text::_('RSFP_SAVE_FIELD_NOT_VALID_NAME'), 0);
			}

			if ($name == 'elements' || $name == 'formId') {
				throw new Exception(Text::sprintf('RSFP_SAVE_FIELD_RESERVED_NAME', $name), 0);
			}

			if (substr($name, 0, 2) === 'if')
			{
				throw new Exception(Text::_('RSFP_SAVE_FIELD_IF_NAME'), 0);
			}

			if (is_numeric(substr($name, 0, 1)))
			{
				throw new Exception(Text::_('RSFP_SAVE_FIELD_NAME_STARTS_WITH_NUMBER'), 0);
			}

			$componentType 		= $input->post->getInt('componentType');
			$currentComponentId = $input->getInt('currentComponentId');
			$formId				= $input->getInt('formId');

			if (RSFormProHelper::componentNameExists($name, $formId, $currentComponentId))
			{
				throw new Exception(Text::_('RSFP_SAVE_FIELD_ALREADY_EXISTS'), 0);
			}

			// No spaces for new fields
			$name = str_replace(' ', '_', $name);
			if (RSFormProHelper::componentNameExists($name, $formId, $currentComponentId))
			{
				throw new Exception(Text::_('RSFP_SAVE_FIELD_ALREADY_EXISTS'), 0);
			}

			// On File upload field, check destination
			if ($componentType == RSFORM_FIELD_FILEUPLOAD) {
				$destination = RSFormProHelper::getRelativeUploadPath($input->get('destination', '', 'raw'));

				if (empty($destination)) {
					throw new Exception(Text::_('RSFP_ERROR_DESTINATION_MSG'), 2);
				} elseif (!is_dir($destination)) {
					throw new Exception(Text::_('RSFP_ERROR_DESTINATION_MSG'), 2);
				} elseif (!is_writable($destination)) {
					throw new Exception(Text::_('RSFP_ERROR_DESTINATION_WRITABLE_MSG'), 2);
				}
			}

			if ($componentType == RSFORM_FIELD_PREVIEW)
			{
				$data = $input->get('param', array(), 'array');
				if (empty($data['SELECTFIELD']))
				{
					throw new Exception(Text::_('RSFP_SAVE_FIELD_PREVIEW_PLEASE_SELECT_FIELD'), 2);
				}
			}

			Factory::getApplication()->triggerEvent('onRsformBackendValidateName', array($name, $componentType, $formId, $currentComponentId));

			echo json_encode(array(
				'result' => true
			));

		} catch (Exception $e) {
			echo json_encode(array(
				'message' => $e->getMessage(),
				'result'  => false,
				'tab'	  => (int) $e->getCode()
			));
		}

		$this->close();
	}

	protected function close() {
		Factory::getApplication()->close();
	}

	public function display($cachable = false, $urlparams = false)
	{
		Factory::getApplication()->input->set('view', 	'formajax');
		Factory::getApplication()->input->set('layout', 	'component');
		Factory::getApplication()->input->set('format', 	'raw');

		parent::display($cachable, $urlparams);
	}

    public function copyProcess()
	{
		$toFormId 	= Factory::getApplication()->input->getInt('toFormId');
		$cids 		= Factory::getApplication()->input->get('cid', array(), 'array');

		/* @var $model RsformModelForms */
		$model 		= $this->getModel('forms');

		$cids = array_map('intval', $cids);

		// Remove duplicates
		$cids = array_unique($cids);

		$count = count($cids);
		foreach ($cids as $cid)
		{
			try
			{
				$model->copyComponent($cid, $toFormId);
			}
			catch (Exception $e)
			{
				Factory::getApplication()->enqueueMessage($e->getMessage(), 'warning');

				$count--;
			}
		}

		$this->setRedirect('index.php?option=com_rsform&view=forms&layout=edit&formId='.$toFormId, Text::sprintf('RSFP_COMPONENTS_COPIED', $count));
	}

    public function copy()
	{
		$formId = Factory::getApplication()->input->getInt('formId');
		$db = Factory::getDbo();
		$query = $db->getQuery(true)
			->select($db->qn('FormId'))
			->from($db->qn('#__rsform_forms'))
			->where($db->qn('FormId') . ' != ' . $db->q($formId));
		$db->setQuery($query);
		if (!$db->loadResult())
			return $this->setRedirect('index.php?option=com_rsform&view=forms&layout=edit&formId='.$formId, Text::_('RSFP_NEED_MORE_FORMS'));

		Factory::getApplication()->input->set('view', 'forms');
		Factory::getApplication()->input->set('layout', 'component_copy');

		parent::display();
	}

    public function copyCancel()
	{
		$formId = Factory::getApplication()->input->getInt('formId');
		$this->setRedirect('index.php?option=com_rsform&view=forms&layout=edit&formId='.$formId);
	}

    public function duplicate()
	{
		$formId = Factory::getApplication()->input->getInt('formId');
        $cids 	= Factory::getApplication()->input->get('cid', array(), 'array');

		/* @var $model RsformModelForms */
		$model 	= $this->getModel('forms');

		$cids = array_map('intval', $cids);

		// Remove duplicates
		$cids = array_unique($cids);

		$count = count($cids);
		foreach ($cids as $cid)
		{
			try
			{
				$model->copyComponent($cid, $formId);
			}
			catch (Exception $e)
			{
				Factory::getApplication()->enqueueMessage($e->getMessage(), 'warning');

				$count--;
			}
		}

		$this->setRedirect('index.php?option=com_rsform&view=forms&layout=edit&formId='.$formId, Text::sprintf('RSFP_COMPONENTS_COPIED', $count));
	}

    public function changeStatus()
	{
		/* @var $model RsformModelFormajax */
		$model = $this->getModel('formajax');
		$model->componentsChangeStatus();
		$componentId = $model->getComponentId();

		$ajax = Factory::getApplication()->input->getInt('ajax');
		if (is_array($componentId))
		{
			$formId = Factory::getApplication()->input->getInt('formId');

			$task = $this->getTask();
			$msg = 'RSFP_ITEMS_UNPUBLISHED';
			if ($task == 'publish')
				$msg = 'RSFP_ITEMS_PUBLISHED';

			$this->setRedirect('index.php?option=com_rsform&view=forms&layout=edit&formId='.$formId, Text::sprintf($msg, count($componentId)));
		}
		// Legacy ajax request
		elseif (!$ajax)
		{
			Factory::getApplication()->input->set('view', 'formajax');
			Factory::getApplication()->input->set('layout', 'component_published');
			Factory::getApplication()->input->set('format', 'raw');

			parent::display();
		}
	}

    public function changeRequired()
	{
		/* @var $model RsformModelFormajax */
		$model = $this->getModel('formajax');
		$model->componentsChangeRequired();

		$ajax = Factory::getApplication()->input->getInt('ajax');

		if (!$ajax)
		{
			Factory::getApplication()->input->set('view', 'formajax');
			Factory::getApplication()->input->set('layout', 'component_required');
			Factory::getApplication()->input->set('format', 'raw');

			parent::display();
		}
		else
		{
			Factory::getApplication()->close();
		}
	}

	public function remove()
	{
		$app	= Factory::getApplication();
		$db 	= Factory::getDbo();
		$formId = $app->input->getInt('formId');
		$ajax 	= $app->input->getInt('ajax');
		$cids 	= $app->input->get('cid', array(), 'array');

		$cids = array_map('intval', $cids);

		// Remove duplicates
		$cids = array_unique($cids);

		// Escape IDs and implode them so they can be used in the queries below
		$componentIds = $cids;

		if ($cids) {
			// Delete form fields
			$query = $db->getQuery(true)
				->delete($db->qn('#__rsform_components'))
				->where($db->qn('ComponentId').' IN ('.implode(',', $db->q($componentIds)).')');
			$db->setQuery($query)
				->execute();

			// Delete leftover properties
			$query->clear()
				->delete($db->qn('#__rsform_properties'))
				->where($db->qn('ComponentId').' IN ('.implode(',', $db->q($componentIds)).')');
			$db->setQuery($query)
				->execute();

			// Delete translations
			$query->clear()
				->delete($db->qn('#__rsform_translations'));
			foreach ($cids as $cid) {
				$query->where($db->qn('reference_id').' LIKE '.$db->q((int) $cid.'.%'), 'OR');
			}
			$db->setQuery($query)
				->execute();
			
			// Delete conditions
			foreach ($componentIds as $componentId)
			{
				$query->clear()
					->select($db->qn('id'))
					->select($db->qn('component_id'))
					->from($db->qn('#__rsform_conditions'))
					->where($db->qn('form_id') . ' = ' . $db->q($formId))
					->where($db->qn('component_id') . ' LIKE ' . $db->q('%' . $componentId . '%'));
				if ($conditions = $db->setQuery($query)->loadObjectList())
				{
					$conditionsToDelete = array();
					require_once JPATH_ADMINISTRATOR . '/components/com_rsform/helpers/conditions.php';

					foreach ($conditions as $condition)
					{
						$condition->component_id = RSFormProConditions::parseComponentIds($condition->component_id);

						if (($pos = array_search($componentId, $condition->component_id)) !== false)
						{
							unset($condition->component_id[$pos]);

							if (empty($condition->component_id))
							{
								$conditionsToDelete[] = $condition->id;
							}
							else
							{
								// Update condition with new values
								$query->clear()
									->update($db->qn('#__rsform_conditions'))
									->set($db->qn('component_id') . ' = ' . $db->q(json_encode(array_values($condition->component_id))))
									->where($db->qn('id') . ' = ' . $db->q($condition->id));
								$db->setQuery($query)->execute();
							}
						}
					}

					if ($conditionsToDelete)
					{
						$query->clear()
							->delete($db->qn('#__rsform_condition_details'))
							->where($db->qn('condition_id').' IN ('.implode(',', $conditionsToDelete).')');
						$db->setQuery($query)
							->execute();

						$query->clear()
							->delete($db->qn('#__rsform_conditions'))
							->where($db->qn('id').' IN ('.implode(',', $db->q($conditionsToDelete)).')');
						$db->setQuery($query)
							->execute();
					}
				}
			}

			$query->clear()
				->delete($db->qn('#__rsform_condition_details'))
				->where($db->qn('component_id').' IN ('.implode(',', $db->q($componentIds)).')');
			$db->setQuery($query)
				->execute();
			
			// Reorder
			$query->clear()
				->select($db->qn('ComponentId'))
				->from($db->qn('#__rsform_components'))
				->where($db->qn('FormId').'='.$db->q($formId))
				->order($db->qn('Order'));
			$components = $db->setQuery($query)->loadColumn();

			$i = 1;
			foreach ($components as $componentId) {
				$query->clear()
					->update($db->qn('#__rsform_components'))
					->set($db->qn('Order').'='.$db->q($i))
					->where($db->qn('ComponentId').'='.$db->q($componentId));
				$db->setQuery($query)
					->execute();
				$i++;
			}
		}

		$app->triggerEvent('onRsformBackendAfterComponentDeleted', array($componentIds, $formId));

		if ($ajax)
		{
			echo json_encode(array(
				'result' 	=> true,
				'submit' 	=> $this->getModel('forms')->getHasSubmitButton()
			));

			$app->close();
		}

		$this->setRedirect('index.php?option=com_rsform&view=forms&layout=edit&formId='.$formId, Text::sprintf('COM_RSFORM_FIELDS_REMOVED', count($cids)));
	}
}