<?php

if (!defined('PHPWG_ROOT_PATH'))
    die('Hacking attempt!');
global $template, $conf, $user;
include_once(PHPWG_ROOT_PATH . 'admin/include/tabsheet.class.php');
load_language('plugin.lang', ANTIASPI_PATH);
$my_base_url = PHPWG_ROOT_PATH.'admin.php?page=plugin-'; //get_admin_plugin_menu_link(__FILE__);

// +-----------------------------------------------------------------------+
// | Check Access and exit when user status is not ok                      |
// +-----------------------------------------------------------------------+
check_status(ACCESS_ADMINISTRATOR);

//-------------------------------------------------------- sections definitions
if (!isset($_GET['tab']))
    $page['tab'] = 'ipban';
else
    $page['tab'] = $_GET['tab'];
	$template->func_combine_css(array('id'=>'dst','path'=>ANTIASPI_PATH.'antiaspi.css'));


    $tabsheet = new tabsheet();
    $tabsheet->add('ipban', l10n('IP ban'), ANTIASPI_ADMIN . '-ipban');
	$tabsheet->add('ipconfig', l10n('Configuration '), ANTIASPI_ADMIN . '-ipconfig ');
    $tabsheet->select($page['tab']);
    $tabsheet->assign();

switch ($page['tab']) {
    case 'ipban':
	  $template->assign(
       'ipbangest', array(
       'A' => 'a'
    ));
	$ipban = pwg_query("SELECT * FROM " . ANTIASPI_TABLE . ";");
	
	$template->func_combine_css(array('id'=>'dst','path'=>ANTIASPI_PATH.'antiaspi.css'));
	
    $admin_base_url = ANTIASPI_ADMIN . '-ipban';
        if (pwg_db_num_rows($ipban)) {
            while ($ipban2 = pwg_db_fetch_assoc($ipban)) {
				
                $items = array(
                    'ID' => $ipban2['id'],
                    'IP' => $ipban2['ip'],
                    'DATE' => $ipban2['date'],
                    'U_DELETE' => $admin_base_url . '&amp;delete=' . $ipban2['id'],
                    'U_EDIT' => $admin_base_url . '&amp;edit=' . $ipban2['id'],
                );

                $template->append('ipban2', $items);
            }
        }
		
  if (isset($_GET['delete'])) {

    check_input_parameter('delete', $_GET, false, PATTERN_ID);
    $query = 'DELETE FROM ' . ANTIASPI_TABLE . ' WHERE id = ' . $_GET['delete'] . ';';
    pwg_query($query);

    $_SESSION['page_infos'] = array(l10n('IP ban deleted'));
    redirect($admin_base_url);
  }

if (isset($_GET['edit'])) {
    check_input_parameter('edit', $_GET, false, PATTERN_ID);
    $query = 'SELECT * FROM ' . ANTIASPI_TABLE . ' WHERE id = \'' . $_GET['edit'] . '\';';
		$result = pwg_query($query);
		$row = pwg_db_fetch_assoc($result);
		$template->assign(
			'ipban_edit', array(
			'ID' => $row['id'],
			'IP' => $row['ip'],
			'DATE' => $row['date'],
		));
}  

if (isset($_POST['submitaddipban2'])) {
	$query = 'UPDATE ' . ANTIASPI_TABLE .' SET ip= "'.$_POST['inserip'].'" , date = "'.$_POST['inserdate'].'" WHERE id = '.$_POST['invisibleID'].';';
	$result = pwg_query($query);
	$_SESSION['page_infos'] = array(l10n('Ip ban update'));
	redirect($admin_base_url);
}

//add ban
if (isset($_POST['submitipban'])) {
	$template->assign(
		'ipban_add', array(
		'nada' => l10n('nada'),
	));
	$template->clear_assign(
		'ipban_edit', array(
	));
}

if (isset($_POST['submitaddipban'])) {
	$query = 'INSERT INTO ' . ANTIASPI_TABLE .'(ip,date) VALUES ("' . $_POST['inserip'] . '","' . $_POST['inserdate'].'");';
	$result = pwg_query($query);
	$_SESSION['page_infos'] = array(l10n('Ip ban insert'));
	redirect($admin_base_url);
}
		
	
	break;
	case 'ipconfig':
  global $conf, $template;
  $admin_base_url = ANTIASPI_ADMIN . '-ipconfig';
  $antiaspi = safe_unserialize($conf['antiaspi']);	
/*
$conf['antiaspi'] = array(
  'diff' => '20 pages in 00:00:10' , // IP banned if 20 different pages viewed in 10 seconds
  'same' => '15 pages in 00:00:30' , // IP banned if same 15 pages viewed in 30 seconds
  'banned during' => '23:59:59' ,    // IP banned during hh:mm:ss
  'only guest' => true ,             // If true, don't ban registered users
  'only picture' => false ,          // If true, apply antiaspi only on picture page
  'allowed ip' => array()            // Autorized IP (robots for example)
);
*/
$diff = explode(" pages in ", $antiaspi['diff']);
$tempsdiff= explode(":", $diff[1]);
$tempsdiffsec=$tempsdiff[2]+($tempsdiff[1]*60)+($tempsdiff[0]*60*60);

$same = explode(" pages in ", $antiaspi['same']);
$tempssame= explode(":", $same[1]);
$tempssamesec=$tempssame[2]+($tempssame[1]*60)+($tempssame[0]*60*60);

$onlyguest = array(
l10n('yes'),
l10n('no'),
);
$onlyguestv = array(
true,
false,
);
$onlypicture = array(
l10n('yes'),
l10n('no'),
);
$onlypicturev = array(
true,
false,
); 
  $template->assign(
   'ipconfiggest', array(
	  'DIFFA' => $diff[0],
	  'DIFFB' => $tempsdiffsec,
	  'SAMEA' => $same[0],
	  'SAMEB' => $tempssamesec,
	  'ONLYGUEST' => $onlyguest,
	  'ONLYGUESTV' => $onlyguestv,
	  'ONLYGUESTSELECT' => $antiaspi['only guest'],
	  'ONLYPICTURE' => $onlypicture,
	  'ONLYPICTUREV' => $onlypicturev,
	  'ONLYPICTURESELECT' => $antiaspi['only picture'],
  ));
  $i = 0;
  while ($i < count($antiaspi['allowed ip'])) {

	$items = array(
		'IP' => $antiaspi['allowed ip'][$i],
		'U_DELETE' => $admin_base_url . '&amp;delete='.$i ,
	);

	$template->append('allowip', $items);
	$i++;
  }
  
  
	/*$time = '7000';
echo date('h:i:s', $time);
*/

if (isset($_POST['submitconfban'])) {
	/*$time = date('h:i:s', $_POST['insdiffb']);  revoir fonction date HS ?*/
	$antiaspi['diff']=$_POST['insdiffa'].' pages in '.date('00:i:s', ($_POST['insdiffb']));
	$antiaspi['same']=$_POST['inssamea'].' pages in '.date('00:i:s', ($_POST['inssameb']));
	$antiaspi['only guest']=$_POST['insonlyguest'];
	$antiaspi['only picture']=$_POST['insonlypicturet'];
	
	conf_update_param('antiaspi', $antiaspi);
	redirect($admin_base_url);
}

if (isset($_POST['submitaddipallowed'])) {
	 $i = 0;
	while ($i < count($antiaspi['allowed ip'])) {
		if($_POST['insipallowed']==$antiaspi['allowed ip'][$i])
		{
			$_SESSION['page_errors'] = array(l10n('IP already allowed'));
			redirect($admin_base_url);
		}
		$i++;
	};

	$antiaspi['allowed ip'][]=$_POST['insipallowed'];
	conf_update_param('antiaspi', $antiaspi);
	redirect($admin_base_url);
}

  if (isset($_GET['delete'])) {
    check_input_parameter('delete', $_GET, false, PATTERN_ID);
	unset($antiaspi['allowed ip'][($_GET['delete'])]);
	$antiaspi['allowed ip'] = array_values($antiaspi['allowed ip']);
    conf_update_param('antiaspi', $antiaspi);
	redirect($admin_base_url);
  }


	break;
}
	

$template->set_filenames(array('plugin_admin_content' => dirname(__FILE__) . '/admin.tpl'));
$template->assign_var_from_handle('ADMIN_CONTENT', 'plugin_admin_content');
?>