<?php

/**
 * @package tikiwiki
 */

// (c) Copyright by authors of the Tiki Wiki CMS Groupware Project
//
// All Rights Reserved. See copyright.txt for details and a complete list of authors.
// Licensed under the GNU LESSER GENERAL PUBLIC LICENSE. See license.txt for details.
// $Id$

/**
 * XML-RPC services
 * As of 2017-02-06, these services are all related to blogs.
 * These services implement part of the Blogger XML-RPC API (see https://codex.wordpress.org/XML-RPC_Blogger_API ).
 * As of 2017-02-06, Blogger currently supports Blogger API version 3 (see https://developers.google.com/blogger/ ), which is no longer based on XML. The API implemented here seems to predate Blogger API version 1 and is presumably no longer supported by Blogger.
 * One client of Blogger's XML-RPC API is wBloggar... which appears to be very close to death as of 2017-02-06. It may no longer implement this version of the API anyway. Is there any client still implementing this API? Chealer 2017-02-06
 * See https://doc.tiki.org/XMLRPC
 */

include_once('tiki-setup.php');
$bloglib = TikiLib::lib('blog');

if ($prefs['feature_xmlrpc'] != 'y') {
    die;
}

// Build map using webservices
$map = [
    'blogger.newPost' => ['function' => 'newPost'],
    'blogger.getUserInfo' => ['function' => 'getUserInfo'],
    'blogger.getPost' => ['function' => 'getPost'],
    'blogger.editPost' => ['function' => 'editPost'],
    'blogger.deletePost' => ['function' => 'deletePost'],
    'blogger.getRecentPosts' => ['function' => 'getRecentPosts'],
    'blogger.getUsersBlogs' => ['function' => 'getUserBlogs']
];

$s = new XML_RPC_Server($map);

/**
 * @param $user
 * @param $blogid
 * @param $permName
 * @return bool
 */
function check_individual($user, $blogId, $permName)
{
    $userlib = TikiLib::lib('user');

    // If the user is admin he can do everything
    if ($userlib->user_has_permission($user, 'tiki_p_blog_admin')) {
        return true;
    }

    // If no individual permissions for the object then ok
    if (! $userlib->object_has_one_permission($blogId, 'blog')) {
        return true;
    }

    // If the object has individual permissions then check
    // Now get all the permissions that are set for this type of permissions 'image gallery'
    if ($userlib->object_has_permission($user, $blogId, 'blog', $permName)) {
        return true;
    } else {
        return false;
    }
}

/* Validates the user and returns user information */
/**
 * @param $params
 * @return XML_RPC_Response
 */
function getUserInfo($params)
{
    $userlib = TikiLib::lib('user');
    $tikilib = TikiLib::lib('tiki');

    $appkeyp = $params->getParam(0);
    $appkey = $appkeyp->scalarval();
    $usernamep = $params->getParam(1);
    $username = $usernamep->scalarval();
    $passwordp = $params->getParam(2);
    $password = $passwordp->scalarval();
    list($ok, $username, $e) = $userlib->validate_user($username, $password);

    if ($ok) {
        $myStruct = new XML_RPC_Value(
            [
                'nickname' => new XML_RPC_Value($username),
                'firstname' => new XML_RPC_Value('none'),
                'lastname' => new XML_RPC_Value('none'),
                'email' => new XML_RPC_Value('none'),
                'userid' => new XML_RPC_Value('$username'),
                'url' => new XML_RPC_Value('none')
            ],
            'struct'
        );

        return new XML_RPC_Response($myStruct);
    } else {
        return new XML_RPC_Response(0, 101, 'Invalid username or password');
    }
}

/* Posts a new submission to the CMS */
/**
 * @param $params
 * @return XML_RPC_Response
 */
function newPost($params)
{
    $userlib = TikiLib::lib('user');
    $tikilib = TikiLib::lib('tiki');
    $bloglib = TikiLib::lib('blog');

    $appkeyp = $params->getParam(0);
    $appkey = $appkeyp->scalarval();
    $blogidp = $params->getParam(1);
    $blogid = $blogidp->scalarval();
    $usernamep = $params->getParam(2);
    $username = $usernamep->scalarval();
    $passwordp = $params->getParam(3);
    $password = $passwordp->scalarval();
    $passp = $params->getParam(4);
    $content = $passp->scalarval();
    $passp = $params->getParam(5);
    $publish = $passp->scalarval();

    // Fix for w.bloggar
    preg_match('/<title>(.*)</title>/', $content, $title);
    $title = $title[1];
    $content = preg_replace('#<title>(.*)</title>#', '', $content);

    // Now check if the user is valid and if the user can post a submission
    list($ok, $username, $e) = $userlib->validate_user($username, $password);
    if (! $ok) {
        return new XML_RPC_Response(0, 101, 'Invalid username or password');
    }

    // Get individual permissions for this weblog if they exist
    if (! check_individual($username, $blogid, 'tiki_p_blog_post')) {
        return new XML_RPC_Response(0, 101, 'User is not allowed to post to this weblog due to individual restrictions for this weblog');
    }

    // If the blog is not public then check if the user is the owner
    if (! $userlib->user_has_permission($username, 'tiki_p_blog_admin')) {
        if (! $userlib->user_has_permission($username, 'tiki_p_blog_post')) {
            return new XML_RPC_Response(0, 101, 'User is not allowed to post');
        }

        $bloglib = TikiLib::lib('blog');
        $blog_info = $bloglib->get_blog($blogid);

        if ($blog_info['public'] != 'y') {
            if ($username != $blog_info['user']) {
                return new XML_RPC_Response(0, 101, 'User is not allowed to post');
            }
        }
    }

    // User ok and can submit then submit the post
    $id = $bloglib->blog_post($blogid, $content, '', $username, $title);

    return new XML_RPC_Response(new XML_RPC_Value("$id"));
}

// :TODO: editPost
/**
 * @param $params
 * @return XML_RPC_Response
 */
function editPost($params)
{
    $userlib = TikiLib::lib('user');
    $tikilib = TikiLib::lib('tiki');
    $bloglib = TikiLib::lib('blog');

    $appkeyp = $params->getParam(0);
    $appkey = $appkeyp->scalarval();
    $blogidp = $params->getParam(1);
    $postid = $blogidp->scalarval();
    $usernamep = $params->getParam(2);
    $username = $usernamep->scalarval();
    $passwordp = $params->getParam(3);
    $password = $passwordp->scalarval();
    $passp = $params->getParam(4);
    $content = $passp->scalarval();
    $passp = $params->getParam(5);
    $publish = $passp->scalarval();

    // Fix for w.bloggar
    preg_match('/<title>(.*)</title>/', $content, $title);
    $title = $title[1];
    $content = preg_replace('#<title>(.*)</title>#', '', $content);

    // Now check if the user is valid and if the user can post a submission
    list($ok, $username, $e) = $userlib->validate_user($username, $password);
    if (! $ok) {
        return new XML_RPC_Response(0, 101, 'Invalid username or password');
    }

    if (! check_individual($username, $blogid, 'tiki_p_blog_post')) {
        return new XML_RPC_Response(
            0,
            101,
            'User is not allowed to post to this weblog due to individual restrictions for this weblog therefor the user cannot edit a post'
        );
    }

    if (! $userlib->user_has_permission($username, 'tiki_p_blog_post')) {
        return new XML_RPC_Response(0, 101, 'User is not allowed to post');
    }

    // Now get the post information
    $post_data = $bloglib->get_post($postid);

    if (! $post_data) {
        return new XML_RPC_Response(0, 101, 'Post not found');
    }

    if ($post_data['user'] != $username) {
        if (! $userlib->user_has_permission($username, 'tiki_p_blog_admin')) {
            return new XML_RPC_Response(0, 101, 'Permission denied to edit that post since the post does not belong to the user');
        }
    }

    $id = $bloglib->update_post($postid, $blogid, $content, $username, $title);
    return new XML_RPC_Response(new XML_RPC_Value(1, 'boolean'));
}

// :TODO: deletePost
/**
 * @param $params
 * @return XML_RPC_Response
 */
function deletePost($params)
{
    $userlib = TikiLib::lib('user');
    $tikilib = TikiLib::lib('tiki');
    $bloglib = TikiLib::lib('blog');

    $appkeyp = $params->getParam(0);
    $appkey = $appkeyp->scalarval();
    $blogidp = $params->getParam(1);
    $postid = $blogidp->scalarval();
    $usernamep = $params->getParam(2);
    $username = $usernamep->scalarval();
    $passwordp = $params->getParam(3);
    $password = $passwordp->scalarval();
    $passp = $params->getParam(4);
    $publish = $passp->scalarval();

    // Now check if the user is valid and if the user can post a submission
    list($ok, $username, $e) = $userlib->validate_user($username, $password);
    if (! $ok) {
        return new XML_RPC_Response(0, 101, 'Invalid username or password');
    }

    // Now get the post information
    $post_data = $bloglib->get_post($postid);

    if (! $post_data) {
        return new XML_RPC_Response(0, 101, 'Post not found');
    }

    if ($post_data['user'] != $username) {
        if (! $userlib->user_has_permission($username, 'tiki_p_blog_admin')) {
            return new XML_RPC_Response(0, 101, 'Permission denied to edit that post');
        }
    }

    $id = $bloglib->remove_post($postid);
    return new XML_RPC_Response(new XML_RPC_Value(1, 'boolean'));
}

// :TODO: getTemplate

// :TODO: setTemplate

// :TODO: getPost
/**
 * @param $params
 * @return XML_RPC_Response
 */
function getPost($params)
{
    $userlib = TikiLib::lib('user');
    $tikilib = TikiLib::lib('tiki');
    $bloglib = TikiLib::lib('blog');

    $appkeyp = $params->getParam(0);
    $appkey = $appkeyp->scalarval();
    $blogidp = $params->getParam(1);
    $postid = $blogidp->scalarval();
    $usernamep = $params->getParam(2);
    $username = $usernamep->scalarval();
    $passwordp = $params->getParam(3);
    $password = $passwordp->scalarval();

    // Now check if the user is valid and if the user can post a submission
    list($ok, $username, $e) = $userlib->validate_user($username, $password);
    if (! $ok) {
        return new XML_RPC_Response(0, 101, 'Invalid username or password');
    }

    if (! check_individual($username, $blogid, 'tiki_p_blog_post')) {
        return new XML_RPC_Response(0, 101, 'User is not allowed to post to this weblog due to individual restrictions for this weblog');
    }

    if (! $userlib->user_has_permission($username, 'tiki_p_blog_post')) {
        return new XML_RPC_Response(0, 101, 'User is not allowed to post');
    }

    if (! $userlib->user_has_permission($username, 'tiki_p_read_blog')) {
        return new XML_RPC_Response(0, 101, 'Permission denied to read this blog');
    }

    // Now get the post information
    $post_data = $bloglib->get_post($postid);

    if (! $post_data) {
        return new XML_RPC_Response(0, 101, 'Post not found');
    }

    $dateCreated = $tikilib->get_iso8601_datetime($post_data['created']);
    // added dateTime type for blogger compliant xml tag Joerg Knobloch <joerg@happypenguins.net>
    $myStruct = new XML_RPC_Value(
        [
            'userid' => new XML_RPC_Value($username),
            'dateCreated' => new XML_RPC_Value($dateCreated, 'dateTime.iso8601'),
            // Fix for w.Bloggar
            'content' => new XML_RPC_Value('<title>' . $post_data['title'] . '</title>' . $post_data['data']),
            'postid' => new XML_RPC_Value($post_data['postId'])
        ],
        'struct'
    );

    // User ok and can submit then submit an article
    return new XML_RPC_Response($myStruct);
}

// :TODO: getRecentPosts
/**
 * @param $params
 * @return XML_RPC_Response
 */
function getRecentPosts($params)
{
    $userlib = TikiLib::lib('user');
    $tikilib = TikiLib::lib('tiki');
    $bloglib = TikiLib::lib('blog');

    $appkeyp = $params->getParam(0);
    $appkey = $appkeyp->scalarval();
    $blogidp = $params->getParam(1);
    $blogid = $blogidp->scalarval();
    $usernamep = $params->getParam(2);
    $username = $usernamep->scalarval();
    $passwordp = $params->getParam(3);
    $password = $passwordp->scalarval();
    $passp = $params->getParam(4);
    $number = $passp->scalarval();

    // Now check if the user is valid and if the user can post a submission
    list($ok, $username, $e) = $userlib->validate_user($username, $password);
    if (! $ok) {
        return new XML_RPC_Response(0, 101, 'Invalid username or password');
    }

    if (! check_individual($username, $blogid, 'tiki_p_blog_post')) {
        return new XML_RPC_Response(
            0,
            101,
            'User is not allowed to post to this weblog due to individual restrictions for this weblog therefore the user cannot edit a post'
        );
    }

    if (! $userlib->user_has_permission($username, 'tiki_p_blog_post')) {
        return new XML_RPC_Response(0, 101, 'User is not allowed to post');
    }

    // Now get the post information
    $posts = $bloglib->list_blog_posts($blogid, false, 0, $number, 'created_desc', '', '');

    if (count($posts) == 0) {
        return new XML_RPC_Response(0, 101, 'No posts');
    }

    $arrayval = [];

    foreach ($posts['data'] as $post) {
        $dateCreated = $tikilib->get_iso8601_datetime($post['created']);

        $myStruct = new XML_RPC_Value(
            [
                'userid' => new XML_RPC_Value($username),
                'dateCreated' => new XML_RPC_Value($dateCreated, 'dateTime.iso8601'),
                // Fix for w.Bloggar
                'content' => new XML_RPC_Value('<title>' . $post['title'] . '</title>' . $post['data']),
                'postid' => new XML_RPC_Value($post['postId'])
            ],
            'struct'
        );

        $arrayval[] = $myStruct;
    }

    // User ok and can submit then submit an article
    $myVal = new XML_RPC_Value($arrayval, 'array');
    return new XML_RPC_Response($myVal);
}

// :TODO: tiki.tikiPost

/* Get the topics where the user can post a new */
/**
 * @param $params
 * @return XML_RPC_Response
 */
function getUserBlogs($params)
{
    $userlib = TikiLib::lib('user');
    $tikilib = TikiLib::lib('tiki');
    $bloglib = TikiLib::lib('blog');

    $appkeyp = $params->getParam(0);
    $appkey = $appkeyp->scalarval();
    $usernamep = $params->getParam(1);
    $username = $usernamep->scalarval();
    $passwordp = $params->getParam(2);
    $password = $passwordp->scalarval();

    $arrayVal = [];

    $blogs = $bloglib->list_user_blogs($username, true);
    $foo = parse_url($_SERVER['REQUEST_URI']);
    $foo1 = $tikilib->httpPrefix() . str_replace('xmlrpc', 'tiki-view_blog', $foo['path']);

    foreach ($blogs as $blog) {
        $myStruct = new XML_RPC_Value(
            [
                'blogName' => new XML_RPC_Value($blog['title']),
                'url' => new XML_RPC_Value($foo1 . '?blogId=' . $blog['blogId']),
                'blogid' => new XML_RPC_Value($blog['blogId'])
            ],
            'struct'
        );

        $arrayVal[] = $myStruct;
    }

    $myVal = new XML_RPC_Value($arrayVal, 'array');
    return new XML_RPC_Response($myVal);
}