<?php

/* Libre.fm -- a free network service for sharing your music listening habits

   Copyright (C) 2009 Libre.fm Project

   This program is free software: you can redistribute it and/or modify
   it under the terms of the GNU Affero General Public License as published by
   the Free Software Foundation, either version 3 of the License, or
   (at your option) any later version.

   This program is distributed in the hope that it will be useful,
   but WITHOUT ANY WARRANTY; without even the implied warranty of
   MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
   GNU Affero General Public License for more details.

   You should have received a copy of the GNU Affero General Public License
   along with this program.  If not, see <http://www.gnu.org/licenses/>.

*/

require_once('database.php');
require_once('templating.php');
require_once('data/User.php');
require_once('data/TagCloud.php');

if($logged_in == false)
{
	$smarty->assign('error', 'Error!');
	$smarty->assign('details', 'Not logged in! You shouldn\'t be here!');
	$smarty->display('error.tpl');
	die();
}

$errors = array();

if ($_POST['submit'])
{
	if (!empty($_POST['id']))
	{
		# Need better URI validation, but this will do for now. I think
		# PEAR has a suitable module to help out here.
		if ( !preg_match('/^[a-z0-9\+\.\-]+\:/i', $_POST['id']) )
			$errors[] = "WebID must be a URI.";
		if ( preg_match('/\s/', $_POST['id']) )
			$errors[] = "WebID must be a URI. Valid URIs cannot contain whitespace.";
	}

	if (!empty($_POST['homepage']))
	{
		# Need better URI validation, but this will do for now. I think
		# PEAR has a suitable module to help out here.
		if ( !preg_match('/^[a-z0-9\+\.\-]+\:/i', $_POST['homepage']) )
			$errors[] = "Homepage must be a URI.";
		if ( preg_match('/\s/', $_POST['homepage']) )
			$errors[] = "Homepage must be a URI. Valid URIs cannot contain whitespace.";
	}

	if (!empty($_POST['avatar_uri']))
	{
		# Need better URI validation, but this will do for now. I think
		# PEAR has a suitable module to help out here.
		if ( !preg_match('/^[a-z0-9\+\.\-]+\:/i', $_POST['avatar_uri']) )
			$errors[] = "Avatar must be a URI.";
		if ( preg_match('/\s/', $_POST['avatar_uri']) )
			$errors[] = "Avatar must be a URI. Valid URIs cannot contain whitespace.";
	}

	if (!empty($_POST['laconica_profile']))
	{
		# Need better URI validation, but this will do for now. I think
		# PEAR has a suitable module to help out here.
		if ( !preg_match('/^[a-z0-9\+\.\-]+\:/i', $_POST['laconica_profile']) )
			$errors[] = "Laconica profile must be a URI.";
		if ( preg_match('/\s/', $_POST['laconica_profile']) )
			$errors[] = "Laconica profile must be a URI. Valid URIs cannot contain whitespace.";
	}

	if (!empty($_POST['journal_rss']))
	{
		# Need better URI validation, but this will do for now. I think
		# PEAR has a suitable module to help out here.
		if ( !preg_match('/^[a-z0-9\+\.\-]+\:/i', $_POST['journal_rss']) )
			$errors[] = "Journal RSS must be a URI.";
		if ( preg_match('/\s/', $_POST['journal_rss']) )
			$errors[] = "Journal RSS must be a URI. Valid URIs cannot contain whitespace.";
	}

	if (!empty($_POST['password_1']))
	{
		if ($_POST['password_1'] != $_POST['password_2'])
			$errors[] = "Passwords do not match.";
	}

	if (!empty($_POST['location_uri']))
	{
		# Currently only allow geonames URIs, but there's no reason we can't accept
		# others at some point in the future. (e.g. dbpedia)
		if ( !preg_match('/^http:\/\/sws.geonames.org\/[0-9]+\/$/', $_POST['location_uri']) )
			$errors[] = "This should be a geonames.org semantic web service URI.";
	}

	if (!isset($errors[0]))
	{
		# Currently we don't allow them to change e-mail as we probably should
		# have some kind of confirmation login to do so.
		$this_user->id           = $_POST['id'];
		$this_user->fullname     = $_POST['fullname'];
		$this_user->homepage     = $_POST['homepage'];
		$this_user->bio          = $_POST['bio'];
		$this_user->location     = $_POST['location'];
		$this_user->location_uri = $_POST['location_uri'];
		$this_user->avatar_uri   = $_POST['avatar_uri'];
		$this_user->laconica_profile = $_POST['laconica_profile'];
		$this_user->journal_rss  = $_POST['journal_rss'];
		
		if (!empty( $_POST['password_1'] ))
			$user->password = md5($_POST['password_1']);
		
		$this_user->save();

		header("Location: " . $this_user->getURL());
		exit;
	}

	if (isset($errors[0]))
	{
		header("Content-Type: text/plain");
		print_r($errors);
		exit;
	}
}

if(isset($this_user->name))
{
	# Stuff which cannot be changed.
	$smarty->assign("acctid", $this_user->acctid);
	$smarty->assign('avatar', $this_user->getAvatar());
	$smarty->assign('user',   $this_user->name);

	# Stuff which cannot be changed *here*
	$smarty->assign('userlevel', $this_user->userlevel);
	
	# Stuff which cannot be changed *yet*
	$smarty->assign('email', $this_user->email);
	
	if ($_POST['submit'])
	{
		$smarty->assign("id",           $_POST['id']);
		$smarty->assign('fullname',     $_POST['fullname']);
		$smarty->assign('bio',          $_POST['bio']);
		$smarty->assign('homepage',     $_POST['homepage']);
		$smarty->assign('location',     $_POST['location']);
		$smarty->assign('location_uri', $_POST['location_uri']);
		$smarty->assign('avatar_uri',   $_POST['avatar_uri']);
		$smarty->assign('laconica_profile', $_POST['laconica_profile']);
		$smarty->assign('journal_rss',  $_POST['journal_rss']);
	}
	else
	{
		$smarty->assign("id",           ($this_user->webid_uri));
		$smarty->assign('fullname',     ($this_user->fullname));
		$smarty->assign('bio',          ($this_user->bio));
		$smarty->assign('homepage',     ($this_user->homepage));
		$smarty->assign('location',     ($this_user->location));
		$smarty->assign('location_uri', ($this_user->location_uri));
		$smarty->assign('avatar_uri',   ($this_user->avatar_uri));
		$smarty->assign('laconica_profile', ($this_user->laconica_profile));
		$smarty->assign('journal_rss',  ($this_user->journal_rss));
	}

	# And display the page.
	$aTagCloud = TagCloud::GenerateTagCloud('Scrobbles', 'artist');
	if (!PEAR::isError ($aTagCloud))
	{
		$smarty->assign('tagcloud', $aTagCloud);
	}
	$smarty->assign('errors', $errors);
	$smarty->display('user-edit.tpl');
}

else
{
	$smarty->assign('error', 'User not found');
	$smarty->assign('details', 'Shall I call in a missing persons report? This shouldn\'t happen.');
	$smarty->display('error.tpl');
}