<?php
# MantisBT - A PHP based bugtracking system

# MantisBT is free software: you can redistribute it and/or modify
# it under the terms of the GNU General Public License as published by
# the Free Software Foundation, either version 2 of the License, or
# (at your option) any later version.
#
# MantisBT is distributed in the hope that it will be useful,
# but WITHOUT ANY WARRANTY; without even the implied warranty of
# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
# GNU General Public License for more details.
#
# You should have received a copy of the GNU General Public License
# along with MantisBT.  If not, see <http://www.gnu.org/licenses/>.

/**
 * Project Document Page
 *
 * @package MantisBT
 * @copyright Copyright 2000 - 2002  Kenzaburo Ito - kenito@300baud.org
 * @copyright Copyright 2002  MantisBT Team - mantisbt-dev@lists.sourceforge.net
 * @link http://www.mantisbt.org
 *
 * @uses core.php
 * @uses access_api.php
 * @uses authentication_api.php
 * @uses config_api.php
 * @uses constant_inc.php
 * @uses database_api.php
 * @uses file_api.php
 * @uses gpc_api.php
 * @uses helper_api.php
 * @uses html_api.php
 * @uses lang_api.php
 * @uses print_api.php
 * @uses project_api.php
 * @uses string_api.php
 * @uses user_api.php
 */

require_once( 'core.php' );
require_api( 'access_api.php' );
require_api( 'authentication_api.php' );
require_api( 'config_api.php' );
require_api( 'constant_inc.php' );
require_api( 'database_api.php' );
require_api( 'file_api.php' );
require_api( 'gpc_api.php' );
require_api( 'helper_api.php' );
require_api( 'html_api.php' );
require_api( 'lang_api.php' );
require_api( 'print_api.php' );
require_api( 'project_api.php' );
require_api( 'string_api.php' );
require_api( 'user_api.php' );

$f_project_id = gpc_get_int( 'project_id', helper_get_current_project() );

# Check if project documentation feature is enabled.
if( OFF == config_get( 'enable_project_documentation' ) || !file_is_uploading_enabled() ) {
	access_denied();
}

# Override the current page to make sure we get the appropriate project-specific configuration
$g_project_override = $f_project_id;

$t_user_id = auth_get_current_user_id();
$t_pub = VS_PUBLIC;
$t_priv = VS_PRIVATE;
$t_admin = config_get_global( 'admin_site_threshold' );

if( $f_project_id == ALL_PROJECTS ) {
	# Select all the projects that the user has access to
	$t_projects = user_get_accessible_projects( $t_user_id );
} else {
	# Select the specific project
	$t_projects = array( $f_project_id );
}

$t_projects[] = ALL_PROJECTS; # add "ALL_PROJECTS to the list of projects to fetch

$t_reqd_access = config_get( 'view_proj_doc_threshold' );
if( is_array( $t_reqd_access ) ) {
	if( 1 == count( $t_reqd_access ) ) {
		$t_access_clause = '= ' . array_shift( $t_reqd_access ) . ' ';
	} else {
		$t_access_clause = 'IN (' . implode( ',', $t_reqd_access ) . ')';
	}
} else {
	$t_access_clause = '>= ' . $t_reqd_access . ' ';
}

$t_query = 'SELECT pft.id, pft.project_id, pft.filename, pft.filesize, pft.title, pft.description, pft.date_added
			FROM {project_file} pft
				LEFT JOIN {project} pt ON pft.project_id = pt.id
				LEFT JOIN {project_user_list} pult
					ON pft.project_id = pult.project_id AND pult.user_id = ' . db_param() . '
				LEFT JOIN {user} ut ON ut.id = ' . db_param() . '
			WHERE pft.project_id in (' . implode( ',', $t_projects ) . ') AND
				( ( ( pt.view_state = ' . db_param() . ' OR pt.view_state is null ) AND pult.user_id is null AND ut.access_level ' . $t_access_clause . ' ) OR
					( ( pult.user_id = ' . db_param() . ' ) AND ( pult.access_level ' . $t_access_clause . ' ) ) OR
					( ut.access_level >= ' . db_param() . ' ) )
			ORDER BY pt.name ASC, pft.title ASC';
$t_result = db_query( $t_query, array( $t_user_id, $t_user_id, $t_pub, $t_user_id, $t_admin ) );

layout_page_header( lang_get( 'docs_link' ) );

layout_page_begin( 'proj_doc_page.php' );

print_doc_menu( 'proj_doc_page.php' );
?>

<div class="col-md-12 col-xs-12">
<div class="space-10"></div>

<div class="widget-box widget-color-blue2">
<div class="widget-header widget-header-small">
	<h4 class="widget-title lighter">
		<?php print_icon( 'fa-file', 'ace-icon' ); ?>
		<?php echo lang_get('project_documentation_title') ?>
	</h4>
</div>

<div class="widget-body">
<div class="widget-main no-padding">
<div class="table-responsive">
<table class="table table-bordered table-condensed table-striped">
	<thead>
		<tr>
			<th><?php echo lang_get( 'filename' ); ?></th>
			<th><?php echo lang_get( 'description' ); ?></th>
			<th><?php echo lang_get( 'project_name' ); ?></th>
			<th><?php echo lang_get( 'date_created' ); ?></th>
			<th><?php echo lang_get( 'actions' ); ?></th>
		</tr>
	</thead>
<?php
$t_form_token_delete = form_security_token( 'proj_doc_delete' );

$i = 0;
while( $t_row = db_fetch_array( $t_result ) ) {
	$i++;
	extract( $t_row, EXTR_PREFIX_ALL, 'v' );
	$t_download_url = "file_download.php?file_id=$v_id&amp;type=doc";
	$t_filesize = number_format( $v_filesize ) . ' ' . lang_get( 'bytes' );
	$t_date_added = date( config_get( 'normal_date_format' ), $v_date_added );
?>
<tr>
	<td>
		<a href="<?php echo $t_download_url ?>">
			<?php print_file_icon( $v_filename ); ?>
		</a>
		<?php
			/** @noinspection HtmlUnknownTarget */
			printf( '<a href="%s">%s</a> (%s)',
				$t_download_url,
				string_display_line( $v_title ),
				$t_filesize
			);
		?>
	</td>
	<td>
		<?php echo string_display_links( $v_description ); ?>
	</td>
	<td>
		<?php
			if( $v_project_id == ALL_PROJECTS ) {
				echo lang_get( 'all_projects' );
			} elseif( $v_project_id != $f_project_id ) {
				echo string_attribute( project_get_name( $v_project_id ) );
			}
		?>
	</td>
	<td>
		<?php echo $t_date_added; ?>
	</td>
	<td class="center">
<?php
		if( access_has_project_level( config_get( 'upload_project_file_threshold', null, null, $v_project_id ), $v_project_id ) ) {
			print_link_button( 'proj_doc_edit_page.php?file_id=' . $v_id, lang_get( 'edit' ), 'btn-xs' );
			echo '&#160;';
			print_form_button( 'proj_doc_delete.php',
				lang_get( 'delete' ),
				['file_id' => $v_id],
				$t_form_token_delete
			);
		}
?>
	</td>
</tr>
<?php
} # end for loop
?>
</table>
</div>
</div>
</div>
</div>
</div>

<?php
layout_page_end();