<?php
@define ( 'NO_PERSISTENT', 1 );
@define ( 'NO_AUTH_CHECK', 1 );
require 'includes/commons.inc.php';
require 'includes/messages_view.inc.php';
require 'includes/functions_userfiles.inc.php';

if ( $action == 'full' )
{
	$tpl_view = new Template ( TPL_DIR . 'tpl_view_image_full.php' );
	$file_id = (int)gpc ( 'file_id', 'G', 0 );
	$file_key = trim(gpc('file_key', 'G', ''));

	$result = $mysqlDB->query ( "SELECT * FROM uploader_userfiles WHERE file_id=$file_id;" );

	if( $result->numRows() )
	{
		$file = $result->fetchRow('assoc');
		$result->free();
		$folder = get_user_folders ( $file['userid'], $file['folder_id'], false );
		$user = get_user_info ( $file['userid'] );
		$folder['username'] = $user['username'];

		// check key first
		if($file['file_key'] != $file_key) exit(go_to(UPLOADER_URL));

		// is the owner of this image viewing it?
		$owner_viewing = ( $USER['logged_in'] && $USER['userid'] == $file['userid'] );

		// process
		processFile ( $file );
		processUser ( $user, false );
		processFolder ( $folder, true, false );

		// is file viewable? public?
		if( !$owner_viewing && $folder['permission']['access']=='private')
		{
			if ( !$USER['logged_in'] )
			{
				$msg = parse($lang_commons['not_logged_in'], array('{login_url}'=>UPLOADER_URL.(MOD_REWRITE?'login?':'account.php?action=login&amp;').'return_url='.rawurlencode(current_page()), '{register_url}'=>UPLOADER_URL.(MOD_REWRITE?'register':'account.php?action=register')));
				$tpl_message->set ( 'message', $msg );
				$tpl_uploader->set ( 'content', $tpl_message, 1 );
				exit;
			}

			$relationship = compute_contact_relationship ( $user['userid'], $USER['userid'] );
			$allowed = ( $folder['permission']['family'] && $relationship['is_family'] ) || ( $folder['permission']['friend'] && $relationship['is_friend'] );
			if ( !$allowed )
			{
				$tpl_message->set ( 'message', $lang_view['file_unavailable'] );
				$tpl_uploader->set ( 'content', $tpl_message, 1 );
				exit;
			}
		}

		// is file really an image?
		if(!$file['file_isimage'])exit(go_to($file['url']));

		$tpl_view->set ( 'folder', $folder );
		$tpl_view->set ( 'user', $user );
		$tpl_view->set ( 'file', $file, 1 );
	}
	else go_to(UPLOADER_URL);

}
else
{
	$tpl_view = new Template ( TPL_DIR . 'tpl_view_image.php' );

	$file_id = (int)gpc ( 'file_id', 'G', 0 );
	$file_key = trim(gpc('file_key', 'G', ''));

	$result = $mysqlDB->query ( "SELECT * FROM uploader_userfiles WHERE file_id=$file_id;" );

	if ( $result->numRows() )
	{
		$file = $result->fetchRow('assoc');
		$result->free();
		$folder = get_user_folders ( $file['userid'], $file['folder_id'], false );
		$user = get_user_info ( $file['userid'] );
		$folder['username'] = $user['username'];

		// check key first
		if($file['file_key'] != $file_key) exit(go_to(UPLOADER_URL));

		// is the owner of this image viewing it?
		$owner_viewing = ( $USER['logged_in'] && $USER['userid'] == $file['userid'] );

		// process
		processFile ( $file );
		processUser ( $user, false );
		processFolder ( $folder, true, false );

		// is file viewable? public?
		if( !$owner_viewing && $folder['permission']['access']=='private')
		{
			if ( !$USER['logged_in'] )
			{
				$msg = parse($lang_commons['not_logged_in'], array('{login_url}'=>UPLOADER_URL.(MOD_REWRITE?'login?':'account.php?action=login&amp;').'return_url='.rawurlencode(current_page()), '{register_url}'=>UPLOADER_URL.(MOD_REWRITE?'register':'account.php?action=register')));
				$tpl_message->set ( 'message', $msg );
				$tpl_uploader->set ( 'content', $tpl_message, 1 );
				exit;
			}
			$relationship = compute_contact_relationship ( $user['userid'], $USER['userid'] );
			$allowed = ( $folder['permission']['family'] && $relationship['is_family'] ) || ( $folder['permission']['friend'] && $relationship['is_friend'] );
			if ( !$allowed )
			{
				$tpl_message->set ( 'message', $lang_view['file_unavailable'] );
				$tpl_uploader->set ( 'content', $tpl_message, 1 );
				exit;
			}
		}

		// is file really an image?
		if(!$file['file_isimage'])exit(go_to($file['url']));

		// get total images in this folder
		$folder['total_images'] = 0;
		$result = $mysqlDB->query ( "SELECT COUNT(file_id) AS total_images FROM uploader_userfiles WHERE folder_id={$file['folder_id']} AND file_isimage=1" );
		if ( $result->numRows() )
		{
			$row = $result->fetchRow('assoc');
			$folder['total_images'] = $row['total_images'];
			$result->free();
		}

		// get position
		$file['position'] = 0;
		$result = $mysqlDB->query ( "SELECT COUNT(file_id) AS position FROM uploader_userfiles WHERE folder_id={$file['folder_id']} AND file_isimage=1 AND file_id<{$file['file_id']}");
		if ( $result->numRows() )
		{
			$row = $result->fetchRow('assoc');
			$file['position'] = $row['position']+1;
			$result->free();
		}

		$previous_file = array();
		$next_file = array();

		// previous
		$result = $mysqlDB->query ( "SELECT * FROM uploader_userfiles WHERE file_id < {$file['file_id']} AND folder_id={$file['folder_id']} AND file_isimage=1 ORDER BY file_id DESC LIMIT 1");
		if ( $result->numRows() )
		{
			$previous_file = $result->fetchRow('assoc');
			$result->free();
			processFile($previous_file);
		}
		// next
		$result = $mysqlDB->query ( "SELECT * FROM uploader_userfiles WHERE file_id > {$file['file_id']} AND folder_id={$file['folder_id']} AND file_isimage=1 ORDER BY file_id ASC LIMIT 1");
		if ( $result->numRows() )
		{
			$next_file = $result->fetchRow('assoc');
			$result->free();
			processFile($next_file);
		}

		// get comments
		$comments = array();
		$result = $mysqlDB->query ( "SELECT comment.*, user.username FROM uploader_usercomments AS comment LEFT JOIN uploader_users AS user USING(userid) WHERE object_id={$file['file_id']} AND comment_type=" . COMMENT_FILE . " ORDER BY comment_id ASC");
		if ( !$result->error() )
		{
			if ( $result->numRows() )
			{
				while ( false !== ( $comment = $result->fetchRow('assoc') ) )
				{
					processUser ( $comment, false );
					$comment['is_mine'] = ( $comment['userid'] == $USER['userid'] );
					$comment['delete_url'] = UPLOADER_URL . ( MOD_REWRITE ? 'comment' : 'comment.php' ) . '?action=delete_image_comment&amp;comment_id=' . $comment['comment_id'];
					$comments[] = $comment;
				}
			}
			$result->free();
		}
		else exit ( $mysqlDB->error ( __LINE__, __FILE__ ) );

		$tpl_view->setr ( 'comments', $comments );
		$tpl_view->set ( 'owner_viewing', $owner_viewing );
		$tpl_view->set ( 'next_file', $next_file );
		$tpl_view->set ( 'previous_file', $previous_file );
		$tpl_view->set ( 'folder', $folder );
		$tpl_view->set ( 'user', $user );
		$tpl_view->set ( 'file', $file, 1 );
	}
	else go_to(UPLOADER_URL);
}
?>