<?php // -*- mode:php; tab-width:4; indent-tabs-mode:t; c-basic-offset:4; -*-
#CMS - CMS Made Simple
#(c)2004-2008 by Ted Kulp (ted@cmsmadesimple.org)
#This project's homepage is: http://cmsmadesimple.org
#
#This program is free software; you can redistribute it and/or modify
#it under the terms of the GNU General Public License as published by
#the Free Software Foundation; either version 2 of the License, or
#(at your option) any later version.
#
#This program is distributed in the hope that it will be useful,
#but WITHOUT ANY WARRANTY; without even the implied warranty of
#MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
#GNU General Public License for more details.
#You should have received a copy of the GNU General Public License
#along with this program; if not, write to the Free Software
#Foundation, Inc., 59 Temple Place, Suite 330, Boston, MA  02111-1307  USA
 
/**
 * Extends the Smarty class for checking timestamps and rendering
 * content to the browser.
 *
 * @author Ted Kulp
 * @since 0.1
 * @version $Revision$
 * @modifiedby $LastChangedBy$
 * @lastmodified $Date$
 * @license GPL
 **/
require_once(cms_join_path(ROOT_DIR,'lib','smarty','Smarty.class.php'));
 
class CmsSmarty extends Smarty {
  
  static private $instance = NULL;
  
  function __construct($have_db = true)
  {
    parent::__construct();
 
    $config = cms_config();
    
    $this->template_dir = dirname(__FILE__).'/../../tmp/templates/';
    if (isset($GLOBALS['CMS_ADMIN_PAGE']))
    {
      $this->template_dir = dirname(__FILE__).'/../../admin/templates/';
    }
    $this->compile_dir = TMP_TEMPLATES_C_LOCATION;
    $this->config_dir = dirname(__FILE__).'/../../tmp/configs/';
    $this->cache_dir = TMP_CACHE_LOCATION;
    $this->plugins_dir = array(dirname(__FILE__).'/../smarty/plugins/', dirname(__FILE__).'/../../plugins/', dirname(__FILE__).'/../module_plugins/');
    if (isset($GLOBALS['CMS_ADMIN_PAGE']))
    {
      $this->plugins_dir[] = dirname(__FILE__).'/../../admin/plugins/';
    }
 
    $this->compiler_file = 'CMS_Compiler.class.php';
    $this->compiler_class = 'CMS_Compiler';
 
    $this->assign('app_name','CMS');
    $this->cache_plugins = false;
    
    if ($have_db)
    {
      #Setup the site name
      $this->assign('sitename', CmsApplication::get_preference('sitename', 'CMSMS Site'));
    }
 
    if ($config["debug"] == true)
    {
      $this->force_compile = true;
      //$this->debugging = true;
    }
 
    if ($have_db && CmsApplication::get_preference('enablesitedownmessage') == "1")
    {
      $this->caching = false;
      $this->force_compile = true;
    }
 
    global $CMS_ADMIN_PAGE;
    if (isset($CMS_ADMIN_PAGE) && $CMS_ADMIN_PAGE == 1)
    {
      $this->caching = false;
      $this->force_compile = true;
    }
    
    if (CmsConfig::get('smarty_security'))
    {
      $this->security = true;
        $this->security_settings  = array(
                                        'PHP_HANDLING'    => true,
                                        'INCLUDE_ANY'     => true,
                                        'PHP_TAGS'        => false,
                                        'ALLOW_CONSTANTS'  => true
                                       );
    }
    
    if ($have_db)
    {
      $this->load_plugins();
 
      $this->register_resource("db", array(&$this, "template_get_template",
                     "template_get_timestamp",
                     "db_get_secure",
                     "db_get_trusted"));
      $this->register_resource("template", array(&$this, "template_get_template",
                     "template_get_timestamp",
                     "db_get_secure",
                     "db_get_trusted"));
      $this->register_resource("htmlblob", array(&$this, "global_content_get_template",
                     "global_content_get_timestamp",
                     "db_get_secure",
                     "db_get_trusted"));
      $this->register_resource("globalcontent", array(&$this, "global_content_get_template",
                     "global_content_get_timestamp",
                     "db_get_secure",
                     "db_get_trusted"));
      $this->register_resource("content", array(&$this, "content_get_template",
                     "content_get_timestamp",
                     "db_get_secure",
                     "db_get_trusted"));
      $this->register_resource("module", array(&$this, "module_get_template",
                     "module_get_timestamp",
                     "db_get_secure",
                     "db_get_trusted"));
      $this->register_resource("module_db_tpl", array(&$this, "module_db_template",
                     "module_db_timestamp",
                     "db_get_secure",
                     "db_get_trusted"));
      $this->register_resource("module_file_tpl", array(&$this, "module_file_template",
                     "module_file_timestamp",
                     "db_get_secure",
                     "db_get_trusted"));
    }
  }
  
  static public function get_instance($have_db = true)
  {
    if (self::$instance == NULL)
    {
      self::$instance = new CmsSmarty($have_db);
    }
    return self::$instance;
  }
  
  /**
   * Sets the internal id based on variables sent in from
   * the request.
   *
   * @return void
   * @author Ted Kulp
   **/
  public function set_id_from_request()
  {
    $this->id = CmsRequest::get_id_from_request();
  }
 
    /**
     * wrapper for include() retaining $this
     * @return mixed
     */
    function _include($filename, $once=false, $params=null)
    {
        if ($filename != '')
        {
      if ($once) {
        return include_once($filename);
      } else {
        return include($filename);
      }
        }
    }
 
    function trigger_error($error_msg, $error_type = E_USER_WARNING)
    {   
        var_dump("Smarty error: $error_msg");
    }
 
  function module_file_template($tpl_name, &$tpl_source, &$smarty_obj)
    {
        $params = split(';', $tpl_name);
        if (count($params) == 2 && file_exists(dirname(dirname(dirname(__FILE__))) . '/modules/' . $params[0] . '/templates/' . $params[1]))
        {
            $tpl_source = @file_get_contents(dirname(dirname(dirname(__FILE__))) . '/modules/' . $params[0] . '/templates/' . $params[1]);;
            return true;
        }
        return false;
    }
 
  function module_file_timestamp($tpl_name, &$tpl_timestamp, &$smarty_obj)
  {
    $params = split(';', $tpl_name);
    if (count($params) == 2 && file_exists(dirname(dirname(dirname(__FILE__))) . '/modules/' . $params[0] . '/templates/' . $params[1]))
    {
      $tpl_timestamp = filemtime(dirname(dirname(dirname(__FILE__))) . '/modules/' . $params[0] . '/templates/' . $params[1]);
      return true;
    }
    return false;
  }
 
    function module_db_template($tpl_name, &$tpl_source, &$smarty_obj)
    {
        $db = cms_db();
 
    list($module_name , $template_type, $template_name) = split(';', $tpl_name);
    
    $row = null;
 
    if ($template_name == '')
    {
          $query = "SELECT content from ".cms_db_prefix()."module_templates WHERE module_name = ? and template_type = ? and default_template = 1";
          $row = $db->GetRow($query, array($module_name , $template_type));      
    }
    else
    {
          $query = "SELECT content from ".cms_db_prefix()."module_templates WHERE module_name = ? and template_type = ? and template_name = ?";
          $row = $db->GetRow($query, array($module_name , $template_type, $template_name));
    }
 
        if ($row)
        {
            $tpl_source = $row['content'];
            return true;
        }
 
        return false;
    }
 
  function module_db_timestamp($tpl_name, &$tpl_timestamp, &$smarty_obj)
  {
    $db = cms_db();
 
    list($module_name , $template_type, $template_name) = split(';', $tpl_name);
    
    $row = null;
 
    if ($template_name == '')
    {
          $query = "SELECT modified_date from ".cms_db_prefix()."module_templates WHERE module_name = ? and template_type = ? and default_template = 1";
          $row = $db->GetRow($query, array($module_name , $template_type));      
    }
    else
    {
          $query = "SELECT modified_date from ".cms_db_prefix()."module_templates WHERE module_name = ? and template_type = ? and template_name = ?";
          $row = $db->GetRow($query, array($module_name , $template_type, $template_name));
    }
 
    if ($row)
    {
      $tpl_timestamp = $db->UnixTimeStamp($row['modified_date']);
      return true;
    }
 
    return false;
  }
 
  function global_content_get_template($tpl_name, &$tpl_source, &$smarty_obj)
  {
    debug_buffer('start global_content_get_template');
    $oneblob = CmsCache::get_instance()->call(array(cmsms()->global_content, 'find_by_name'), $tpl_name);
    if ($oneblob)
    {
      $tpl_source = $oneblob->get_multi_language_content('content', 'en_US');
    }
    else
    {
      $tpl_source = "<!-- Global content block named '" . $tpl_name . "' does not exist  -->";
    }
    debug_buffer('end global_content_get_template');
    return true;
  }
 
  function global_content_get_timestamp($tpl_name, &$tpl_timestamp, &$smarty_obj)
  {
    debug_buffer('start global_content_get_timestamp');
    $oneblob = CmsCache::get_instance()->call(array(cmsms()->global_content, 'find_by_name'), $tpl_name);
    if ($oneblob)
    {
      $tpl_timestamp = $oneblob->modified_date;
      debug_buffer('end global_content_get_timestamp');
      return true;
    }
    else
    {
      return false;
    }
  }
 
  function template_get_template($tpl_name, &$tpl_source, &$smarty_obj)
  {
    global $gCms;
    $config = cms_config();
 
    if (CmsApplication::get_preference('enablesitedownmessage') == "1")
    {
      $tpl_source = CmsApplication::get_preference('sitedownmessage');
      return true;
    }
    else
    {
      $pageinfo = $gCms->variables['pageinfo'];
 
      if ($tpl_name == 'notemplate')
      {
        $tpl_source = '{content}';
 
        return true;
      }
      else if (CmsPreview::has_preview())
      {
        $data = CmsPreview::get_preview();
 
        $tpl_source = '{content}';
        if (is_array($data) && count($data) == 2)
        {
          if ($data[0] instanceof CmsTemplate || $data[0] instanceof Template)
            $tpl_source = $data[0]->content;
        }
 
        return true;
      }
      else
      {
        global $gCms;
        $templateops = $gCms->GetTemplateOperations();
        $templateobj = $templateops->LoadTemplateByID($pageinfo->template_id);
        if (isset($templateobj) && $templateobj !== FALSE)
        {
          $tpl_source = $templateobj->content;
 
          #So no one can do anything nasty, take out the php smarty tags.  Use a user
          #defined plugin instead.
          /*
          if (!(isset($config["use_smarty_php_tags"]) && $config["use_smarty_php_tags"] == true))
          {
            $tpl_source = ereg_replace("\{\/?php\}", "", $tpl_source);
          }
          */
          
          //do_cross_reference($pageinfo->template_id, 'template', $tpl_source);
 
          return true;
        }
      }
      return false;
    }
  }
 
  function template_get_timestamp($tpl_name, &$tpl_timestamp, &$smarty_obj)
  {
    global $gCms;
 
    if (CmsApplication::get_preference('enablesitedownmessage') == "1" || $tpl_name == 'notemplate')
    {
      $tpl_timestamp = time();
      return true;
    }
    else if (isset($_GET['id']) && isset($_GET[$_GET['id'].'showtemplate']) && $_GET[$_GET['id'].'showtemplate'] == 'false')
    {
      $tpl_timestamp = time();
      return true;
    }
    else if (isset($_GET["tmpfile"]) && $_GET["tmpfile"] != "")
    {
      $tpl_timestamp = time();
      return true;
    }
    else
    {
      $pageinfo = &$gCms->variables['pageinfo'];
 
      $tpl_timestamp = $pageinfo->template_modified_date;
      return true;
    }
  }
 
  function content_get_template($tpl_name, &$tpl_source, &$smarty_obj)
  {
    global $gCms;
    $config = cms_config();
    $pageinfo = &$gCms->variables['pageinfo'];
 
    if (isset($pageinfo) && $pageinfo->content_id == -1)
    {
      #We've a custom error message...  return it here
      header("HTTP/1.0 404 Not Found");
      header("Status: 404 Not Found");
      if ($tpl_name == 'default')
        $tpl_source = CmsApplication::get_preference('custom404');
      else
        $tpl_source = '';
      return true;
    }
    else if (CmsPreview::has_preview())
    {
      $data = CmsPreview::get_preview();
 
      $tpl_source = 'No Content Found in Preview File';
      if (is_array($data) && count($data) == 2)
      {
        $tpl_source = $data[1]->show($tpl_name, CmsMultiLanguage::get_client_language());
      }
      return true;
    }
    else
    {
      $manager = $gCms->GetHierarchyManager();
      $node = $manager->get_node_by_id($pageinfo->content_id);
 
      if (isset($node) && $node !== FALSE)
      {
        $tpl_source = $node->show($tpl_name, CmsMultiLanguage::get_client_language());
        
        //do_cross_reference($pageinfo->content_id, 'content', $tpl_source);
 
        return true;
      }
    }
    return false;
  }
 
  function content_get_timestamp($tpl_name, &$tpl_timestamp, &$smarty_obj)
  {
    global $gCms;
 
    $pageinfo =& $gCms->variables['pageinfo'];
 
    if (isset($pageinfo) && $pageinfo->content_id == -1)
    {
      #We've a custom error message...  set a current timestamp
      $tpl_timestamp = time();
    }
    else if (isset($_GET["tmpfile"]) && $_GET["tmpfile"] != "")
    {
      $tpl_timestamp = time();
      return true;
    }
    else
    {
      if ($pageinfo->cachable)
      {
        $tpl_timestamp = $pageinfo->content_modified_date;
      }
      else
      {
        $tpl_timestamp = time();
      }
    }
    return true;
  }
  
  function module_get_template ($tpl_name, &$tpl_source, &$smarty_obj)
  {
    global $gCms;
    $pageinfo =& $gCms->variables['pageinfo'];
    $config = cms_config;
 
    #Run the execute_user function and replace {content} with it's output 
    if (isset($gCms->modules[$tpl_name]))
    {
      @ob_start();
 
      $id = $smarty_obj->id;
 
      $params = GetModuleParameters($id);
      $action = 'default';
      if (isset($params['action']))
      {
        $action = $params['action'];
      }
      echo $gCms->modules[$tpl_name]['object']->DoActionBase($action, $id, $params, isset($pageinfo)?$pageinfo->content_id:'');
      $modoutput = @ob_get_contents();
      @ob_end_clean();
 
      $tpl_source = $modoutput;
    }
    
    header("Content-Type: ".$gCms->variables['content-type']."; charset=" . CmsResponse::get_encoding());
    if (isset($gCms->variables['content-filename']) && $gCms->variables['content-filename'] != '')
    {
      header('Content-Disposition: attachment; filename="'.$gCms->variables['content-filename'].'"');
      header("Pragma: public");
    }
 
    return true;
  }
 
  function module_get_timestamp($tpl_name, &$tpl_timestamp, &$smarty_obj)
  {
    $tpl_timestamp = time();
    return true;
  }
 
  function db_get_secure($tpl_name, &$smarty_obj)
  {
    // assume all templates are secure
    return true;
  }
 
  function db_get_trusted($tpl_name, &$smarty_obj)
  {
    // not used for templates
  }
  
  /**
   * Loads all plugins into the system
   *
   * @since 0.5
   */
  function load_plugins()
  {
    $gCms = cmsms();
    $plugins = &$gCms->cmsplugins;
    $userplugins = &$gCms->userplugins;
    $userpluginfunctions = &$gCms->userpluginfunctions;
    $db = cms_db();
 
    #if (@is_dir(dirname(dirname(__FILE__))."/plugins/cache"))
    #{
    #  search_plugins($smarty, $plugins, dirname(dirname(__FILE__))."/plugins/cache", true);
    #}
    $this->search_plugins($plugins, cms_join_path(dirname(dirname(dirname(__FILE__))),"plugins"), false);
    $this->search_plugins($plugins, cms_join_path(dirname(dirname(__FILE__)),'module_plugins'), false);
 
    $query = "SELECT * FROM ".cms_db_prefix()."userplugins";
    $result = &$db->Execute($query);
    while ($result && !$result->EOF)