<?php

class Page_Session extends Page
{

	protected function doPreprocess()
	{
		User::load();
		$action = Request::post('action');
		if ($action === 'login') {
			// Login - see if already logged in
			if (User::isLoggedIn()) // and then just redirect
				Util::redirect('?do=main');
			// Else, try to log in
			if (User::login(Request::post('user'),
					Request::post('pass'),
					Request::post('fixedip', false, 'bool'))) {
				Util::redirect('?do=main');
			}
			// Login credentials wrong - delay and show error message
			sleep(1);
			http_response_code(403);
			Message::addError('loginfail');
		} elseif ($action === 'logout') {
			// Log user out (or do nothing if not logged in)
			User::logout();
		} elseif ($action === 'changepw') {
			if (!User::isLoggedIn()) {
				Util::redirect('?do=main');
			}
			// Now check if the user supplied the current password, and the new password twice
			$old = Request::post('old', Request::REQUIRED, 'string');
			$new = Request::post('newpass1', Request::REQUIRED, 'string');
			if (!User::testPassword(User::getId(), $old)) {
				sleep(1);
				Message::addError('wrong-password');
				Util::redirect('?do=session', 403);
			}
			if (strlen($new) < 4) {
				Message::addError('pass-too-short');
				Util::redirect('?do=session', 400);
			}
			if ($new !== Request::post('newpass2', false, 'string')) {
				Message::addError('adduser.password-mismatch');
				Util::redirect('?do=session', 400);
			}
			if (Request::post('kill-other-sessions', false, 'bool')) {
				Session::deleteAllButCurrent();
			}
			if (User::updatePassword($new)) {
				Message::addSuccess('password-changed');
			} else {
				Message::addWarning('password-unchanged');
			}
			Util::redirect('?do=session', 200);
		} else {
			// No action, change title
			switch (Request::get('show', false, 'string')) {
				case 'audit':
					Render::setTitle(Dictionary::translate('page-title-audit-list'));;
					break;
			default:
				Render::setTitle(Dictionary::translate('page-title-session-list'));
			}
		}
	}

	protected function doRender()
	{
		if (User::isLoggedIn()) {
			$show = Request::get('show', false, 'string');
			if ($show === 'audit') {
				self::showAudit();
			} else {
				self::showSessions();
			}
		} else {
			Render::addTemplate('page-login');
		}
	}

	private static function showSessions()
	{
		$res = Database::simpleQuery("SELECT u.login, s.userid, s.dateline, s.lastip, s.fixedip
					FROM session s
					INNER JOIN user u USING (userid)
					ORDER BY dateline DESC");
		$sessions = [];
		$perm = User::hasPermission('.adduser.user.*');
		foreach ($res as $row) {
			if ($perm || $row['userid'] == User::getId()) {
				$row['dateline_s'] = Util::prettyTime($row['dateline']);
				$sessions[] = $row;
			}
		}
		Render::addTemplate('change-password', [
			'sessions' => $sessions,
			'link' => User::hasPermission('.adduser.user.edit'),
			'audit' => User::hasPermission('.adduser.audit.show'),
		]);
	}

	private static function showAudit()
	{
		User::assertPermission('.adduser.audit.show');
		$user = Request::get('user', 0, 'int');
		$args = [];
		$extra = '';
		$username = null;
		if ($user > 0) {
			$args['userid'] = $user;
			$extra .= ' WHERE a.userid = :userid';
			$row = Database::queryFirst("SELECT login FROM user WHERE userid = :userid", ['userid' => $user]);
			if ($row === false) {
				Message::addError('user-not-found', $user);
				Util::redirect('?do=session&show=audit', 404);
			}
			$username = $row['login'];
		}
		$lines = array();
		$paginate = new Paginate("SELECT u.userid, u.login,
       				a.action, a.dateline, a.ipaddr, a.data, a.module, a.response
					FROM audit a
					LEFT JOIN user u USING (userid)
					$extra
					ORDER BY dateline DESC", 50);
		$res = $paginate->exec($args);
		foreach ($res as $row) {
			$row['dateline_s'] = Util::prettyTime($row['dateline']);
			if ($row['response'] < 200 || $row['response'] >= 400) {
				$row['class'] = 'text-danger slx-bold';
			}
			if ($username !== null) {
				unset($row['login']);
			}
			$lines[] = $row;
		}
		$paginate->render('audit-list', ['list' => $lines, 'user' => $username]);
	}

}