<?php

// (c) Copyright by authors of the Tiki Wiki CMS Groupware Project
//
// All Rights Reserved. See copyright.txt for details and a complete list of authors.
// Licensed under the GNU LESSER GENERAL PUBLIC LICENSE. See license.txt for details.
// $Id$

//this script may only be included - so its better to die if called directly.
if (strpos($_SERVER["SCRIPT_NAME"], basename(__FILE__)) !== false) {
    header("location: index.php");
    exit;
}

if ($_REQUEST['test_closed'] === 'y') {
    TikiLib::lib('access')->showSiteClosed('closed');
} else if ($_REQUEST['test_busy'] === 'y') {
    TikiLib::lib('access')->showSiteClosed('busy');
}

TikiLib::lib('smarty')->assign('sodium_available', extension_loaded('sodium'));
TikiLib::lib('smarty')->assign('openssl_available', extension_loaded('openssl'));

if ($prefs['feature_user_encryption'] == 'y') {
    $cryptlib = TikiLib::lib('crypt');
    $smarty->assign('show_user_encyption_stats', 'y');
    $smarty->assign('user_encryption_stat_mcrypt', $cryptlib->getUserCryptDataStats('mcrypt'));
    $smarty->assign('user_encryption_stat_openssl', $cryptlib->getUserCryptDataStats('openssl'));
    $smarty->assign('user_encryption_stat_sodium', $cryptlib->getUserCryptDataStats('sodium'));
}

if (TikiLib::lib('crypt')->isSupported()) {
    $servicelib = TikiLib::lib('service');
    if (! empty($_REQUEST['encryption_key'])) {
        $result = $servicelib->internal('encryption', 'get_key', ['keyId' => $_REQUEST['encryption_key']]);
        $encryption_key = $result['key'];
    } else {
        $encryption_key = ['algo' => 'aes-256-ctr', 'shares' => 1];
    }
    if ($_SERVER['REQUEST_METHOD'] == 'POST') {
        if (! empty($_REQUEST['key_delete'])) {
            $servicelib->internal('encryption', 'delete_key', ['keyId' => $_REQUEST['key_delete']]);
        } elseif (! empty($_REQUEST['name'])) {
            try {
                $result = $servicelib->internal('encryption', 'save_key', new JitFilter($_REQUEST));
                $smarty->assign('encryption_shares', $result['shares']);
            } catch (Services_Exception $e) {
                $smarty->assign('encryption_error', $e->getMessage());
                $encryption_key = $_REQUEST;
                $_REQUEST['encryption_key'] = $_REQUEST['keyId'];
            }
            $_POST['redirect'] = 0;
        }
    }
    $encryption_keys = $servicelib->internal('encryption', 'get_keys');
    $encrypted_fields = $servicelib->internal('encryption', 'get_encrypted_fields');
    if (! empty($encryption_key['keyId'])) {
        $share = $servicelib->internal('encryption', 'get_share_for_key', ['keyId' => $encryption_key['keyId']]);
        if ($share) {
            $smarty->assign('encryption_setup', 'y');
        } else {
            $smarty->assign('encryption_setup', 'n');
        }
    }
    $smarty->assign('encryption_enabled', 'y');
    $smarty->assign('encryption_algos', TikiLib::lib('crypt')->algorithms());
    $smarty->assign('encryption_key', $encryption_key);
    $smarty->assign('encryption_keys', $encryption_keys);
    $smarty->assign('encrypted_fields', $encrypted_fields);
}