<?php

require_once "includes/inc_all_client.php";


//Initialize the HTML Purifier to prevent XSS
require "../libs/htmlpurifier/HTMLPurifier.standalone.php";

$purifier_config = HTMLPurifier_Config::createDefault();
$purifier_config->set('Cache.DefinitionImpl', null); // Disable cache by setting a non-existent directory or an invalid one
$purifier_config->set('URI.AllowedSchemes', ['data' => true, 'src' => true, 'http' => true, 'https' => true]);
$purifier = new HTMLPurifier($purifier_config);

if (isset($_GET['document_id'])) {
    $document_id = intval($_GET['document_id']);
}

$folder_location = 0;

$sql_document = mysqli_query($mysqli, "SELECT document_archived_at, document_client_visible, document_content, document_created_at,
    document_created_by, document_description, document_folder_id, document_name,
    document_updated_at, folder_name, user_name FROM documents
    LEFT JOIN folders ON document_folder_id = folder_id
    LEFT JOIN users ON document_created_by = user_id
    WHERE document_client_id = $client_id AND document_id = $document_id
    LIMIT 1"
);

if (mysqli_num_rows($sql_document) == 0) {
    echo "<center><h1 class='text-secondary mt-5'>Nothing to see here</h1><a class='btn btn-lg btn-secondary mt-3' href='javascript:history.back()'><i class='fa fa-fw fa-arrow-left'></i> Go Back</a></center>";
    require_once "../includes/footer.php";
    exit();
}

$row = mysqli_fetch_assoc($sql_document);

$folder_name = escapeHtml($row['folder_name']);
$document_name = escapeHtml($row['document_name']);
$document_description = escapeHtml($row['document_description']);
$document_content = $purifier->purify($row['document_content']);
$document_created_by_id = intval($row['document_created_by']);
$document_created_by_name = escapeHtml($row['user_name']);
$document_created_at = escapeHtml($row['document_created_at']);
$document_updated_at = escapeHtml($row['document_updated_at']);
$document_archived_at = escapeHtml($row['document_archived_at']);
$document_folder_id = intval($row['document_folder_id']);
$document_client_visible = intval($row['document_client_visible']);

// Override Tab Title // No Sanitizing needed as this var will opnly be used in the tab title
$page_title = $row['document_name'];

?>

<ol class="breadcrumb d-print-none">
    <li class="breadcrumb-item">
        <a href="client_overview.php?client_id=<?= $client_id ?>"><?= $client_name ?></a>
    </li>
    <li class="breadcrumb-item">
        <a href="files.php?client_id=<?= $client_id ?>">Files</a>
    </li>
    <?php
    // Build the full folder path
    $folder_id = $document_folder_id;
    $folder_path = array();

    while ($folder_id > 0) {
        $sql_folder = mysqli_query($mysqli, "SELECT folder_name, parent_folder FROM folders WHERE folder_id = $folder_id");
        if ($row_folder = mysqli_fetch_assoc($sql_folder)) {
            $folder_name = escapeHtml($row_folder['folder_name']);
            $parent_folder = intval($row_folder['parent_folder']);

            // Prepend the folder to the beginning of the array
            array_unshift($folder_path, array('folder_id' => $folder_id, 'folder_name' => $folder_name));

            // Move up to the parent folder
            $folder_id = $parent_folder;
        } else {
            // If the folder is not found, break the loop
            break;
        }
    }

    // Output breadcrumb items for each folder in the path
    foreach ($folder_path as $folder) {
        $bread_crumb_folder_id = $folder['folder_id']; // Sanitized before put in array
        $bread_crumb_folder_name = $folder['folder_name']; // Sanitized before put in array
        ?>
        <li class="breadcrumb-item">
            <a href="files.php?client_id=<?= $client_id ?>&folder_id=<?= $bread_crumb_folder_id ?>">
                <i class="fas fa-fw fa-folder-open me-2"></i><?= $bread_crumb_folder_name ?>
            </a>
        </li>
        <?php
    }
    ?>
    <li class="breadcrumb-item active">
        <i class="fas fa-file"></i> <?= $document_name ?>
        <?php if (!empty($document_archived_at)) {
            echo "<span class='text-danger ms-2'>(ARCHIVED on $document_archived_at)</span>";
        } ?>
    </li>
</ol>

<div class="row">

    <div class="col-md-9">
        <div class="card">
            <div class="card-header bg-dark">
                <div class="row">
                    <div class="col">
                        <div class="h4 mb-0"><?= $document_name ?></div>
                        <?php if ($document_description) { ?>
                        <div class="text-light"><?= $document_description ?></div>
                        <?php } ?>
                    </div>
                    <div class="col">
                        <div class="float-end">
                            <div>
                                Date:
                                <strong><?= date('Y-m-d', strtotime($document_updated_at)); ?></strong>
                            </div>
                            <?php if($document_created_by_name) { ?>
                            <div>
                                Prepared By:
                                <strong><?= $document_created_by_name ?></strong>
                            </div>
                            <?php } ?>
                        </div>
                    </div>
                </div>
            </div>
            <div class="card-body prettyContent">
                <?= $document_content ?>
                <hr>
                <h4>Documentation Revision History</h4>

                <table class="table table-sm">
                    <thead class="table-light">
                        <th>Version</th>
                        <th>Date</th>
                        <th>Name</th>
                        <th>Description</th>
                        <th>Author</th>
                    </thead>
                    <tbody>
                        <?php
                        $sql_document_versions = mysqli_query($mysqli, "SELECT document_version_created_at, document_version_description, document_version_id,
                            document_version_name, user_name FROM document_versions
                            LEFT JOIN users ON document_version_created_by = user_id
                            WHERE document_version_document_id = $document_id
                            ORDER BY document_version_created_at ASC"
                        );

                        $document_version_count = 1; // Initialize the document version counter

                        while ($row = mysqli_fetch_assoc($sql_document_versions)) {
                            $document_version_id = intval($row['document_version_id']);
                            $document_version_name = escapeHtml($row['document_version_name']);
                            $document_version_description = escapeHtml($row['document_version_description']);
                            if ($document_version_description ) {
                                $document_version_description_display = $document_version_description;
                            } else {
                                $document_version_description_display = "-";
                            }
                            $document_version_author = escapeHtml($row['user_name']);
                            $document_version_created_date = date('Y-m-d', strtotime($row['document_version_created_at']));

                        ?>
                        <tr>
                            <td><?= $document_version_count ?></td>
                            <td><?= $document_version_created_date ?></td>
                            <td><?= $document_version_name ?></td>
                            <td><?= $document_version_description_display ?></td>
                            <td><?= $document_version_author ?></td>
                        </tr>
                        <?php
                        $document_version_count++; // Increment the counter
                        }
                        ?>
                    </tbody>
                </table>
            </div>
        </div>
    </div>

    <div class="col-md-3 d-print-none">
        <div class="row">
            <div class="col-12 mb-3">
                <button type="button" class="btn btn-primary ajax-modal me-1"
                    data-modal-size="lg"
                    data-modal-url="modals/document/document_edit.php?id=<?= $document_id ?>">
                    <i class="fas fa-fw fa-edit" title="Edit"></i>
                </button>
                <button type="button" class="btn btn-secondary me-1" data-bs-toggle="modal" data-bs-target="#shareModal"
                    onclick="populateShareModal(<?= "$client_id, 'Document', $document_id"; ?>)">
                    <i class="fas fa-fw fa-share" title="Share"></i>
                </button>
                <a class="btn btn-success me-1" href="post.php?export_document=<?= $document_id ?>&csrf_token=<?= $_SESSION['csrf_token'] ?>"><i class='fas fa-fw fa-file-pdf' title="PDF Export"></i></a>
                <button type="button" class="btn btn-secondary me-4" onclick="window.print();"><i class="fas fa-fw fa-print" title="Print"></i></button>
                <a class="btn btn-warning me-1 confirm-link" href="post.php?archive_document=<?= $document_id ?>&csrf_token=<?= $_SESSION['csrf_token'] ?>" title="Archive"><i class='fas fa-fw fa-archive'></i></a>
                <a class="btn btn-danger confirm-link" href="post.php?delete_document=<?= $document_id ?>&csrf_token=<?= $_SESSION['csrf_token'] ?>&from=document_details" title="Delete"><i class='fas fa-fw fa-trash-alt'></i></a>
            </div>
        </div>
        <div class="card card-body bg-light mb-3">
            <h5 class="mb-3"><i class="fas fa-tags me-2"></i>Related Items</h5>
            <h6>
                <i class="fas fa-fw fa-paperclip text-secondary me-2"></i>Files
                <button type="button" class="btn btn-link btn-sm ajax-modal"
                    data-modal-url="modals/document/document_link_file.php?document_id=<?= $document_id ?>">
                    <i class="fas fa-fw fa-plus"></i>
                </button>
            </h6>
            <?php
            $sql_files = mysqli_query($mysqli, "SELECT file_folder_id, files.file_id, file_name FROM files, document_files
                WHERE document_files.file_id = files.file_id
                AND document_files.document_id = $document_id
                ORDER BY file_name ASC"
            );

            $linked_files = array();

            while ($row = mysqli_fetch_assoc($sql_files)) {
                $file_id = intval($row['file_id']);
                $folder_id = intval($row['file_folder_id']);
                $file_name = escapeHtml($row['file_name']);

                $linked_files[] = $file_id;

                ?>
                <div class="ms-2">
                    <a href="file.php?file_id=<?= $file_id ?>&action=view" target="_blank"><?= $file_name ?></a>
                    <a class="confirm-link" href="post.php?unlink_file_from_document&file_id=<?= $file_id ?>&document_id=<?= $document_id ?>&csrf_token=<?= $_SESSION['csrf_token'] ?>">
                        <i class="fas fa-fw fa-unlink text-secondary float-end" title="Unlink File"></i>
                    </a>
                </div>
                <?php
                }
                ?>
            <h6>
                <i class="fas fa-fw fa-users text-secondary mt-3 me-2"></i>Contacts
                <button type="button" class="btn btn-link btn-sm ajax-modal"
                    data-modal-url="modals/document/document_link_contact.php?document_id=<?= $document_id ?>">
                    <i class="fas fa-fw fa-plus"></i>
                </button>
            </h6>
            <?php
            $sql_contacts = mysqli_query($mysqli, "SELECT contacts.contact_id, contact_name FROM contacts, contact_documents
                WHERE contacts.contact_id = contact_documents.contact_id
                AND contact_documents.document_id = $document_id
                ORDER BY contact_name ASC"
            );

            $linked_contacts = array();

            while ($row = mysqli_fetch_assoc($sql_contacts)) {
                $contact_id = intval($row['contact_id']);
                $contact_name = escapeHtml($row['contact_name']);

                $linked_contacts[] = $contact_id;

                ?>
                <div class="ms-2">
                    <a class="ajax-modal" href="#"
                        data-modal-size="lg"
                        data-modal-url="modals/contact/contact.php?id=<?= $contact_id ?>">
                        <?= $contact_name ?></a>
                    <a class="confirm-link float-end" href="post.php?unlink_contact_from_document&contact_id=<?= $contact_id ?>&document_id=<?= $document_id ?>&csrf_token=<?= $_SESSION['csrf_token'] ?>">
                        <i class="fas fa-fw fa-unlink text-secondary" title="Unlink Contact"></i>
                    </a>
                </div>
                <?php
                }
                ?>
            <h6>
                <i class="fas fa-fw fa-laptop text-secondary me-2 mt-3"></i>Assets
                <button type="button" class="btn btn-link btn-sm ajax-modal" data-modal-url="modals/document/document_link_asset.php?document_id=<?= $document_id ?>">
                    <i class="fas fa-fw fa-plus"></i>
                </button>
            </h6>
            <?php
            $sql_assets = mysqli_query($mysqli, "SELECT assets.asset_id, asset_name FROM assets, asset_documents
                WHERE assets.asset_id = asset_documents.asset_id
                AND asset_documents.document_id = $document_id
                ORDER BY asset_name ASC"
            );

            $linked_assets = array();

            while ($row = mysqli_fetch_assoc($sql_assets)) {
                $asset_id = intval($row['asset_id']);
                $asset_name = escapeHtml($row['asset_name']);

                $linked_assets[] = $asset_id;

                ?>
                <div class="ms-2">
                    <a class="ajax-modal" href="#"
                        data-modal-size="lg"
                        data-modal-url="modals/asset/asset.php?id=<?= $asset_id ?>">
                        <?= $asset_name ?>
                    </a>
                    <a class="confirm-link float-end" href="post.php?unlink_asset_from_document&asset_id=<?= $asset_id ?>&document_id=<?= $document_id ?>&csrf_token=<?= $_SESSION['csrf_token'] ?>">
                        <i class="fas fa-fw fa-unlink text-secondary" title="Unlink Asset"></i>
                    </a>
                </div>
            <?php
            }
            ?>
            <h6>
                <i class="fas fa-fw fa-cube text-secondary me-2 mt-3"></i>Licenses
                <button type="button" class="btn btn-link btn-sm ajax-modal"
                    data-modal-url="modals/document/document_link_software.php?document_id=<?= $document_id ?>">
                    <i class="fas fa-fw fa-plus"></i>
                </button>
            </h6>
            <?php
            $sql_software = mysqli_query($mysqli, "SELECT software.software_id, software_name FROM software, software_documents
                WHERE software.software_id = software_documents.software_id
                AND software_documents.document_id = $document_id
                ORDER BY software_name ASC"
            );

            $linked_software = array();

            while ($row = mysqli_fetch_assoc($sql_software)) {
                $software_id = intval($row['software_id']);
                $software_name = escapeHtml($row['software_name']);

                $linked_software[] = $software_id;

                ?>
                <div class="ms-2">
                    <a href="software.php?client_id=<?= $client_id ?>&q=<?= $software_name ?>" target="_blank"><?= $software_name ?></a>
                    <a class="confirm-link float-end" href="post.php?unlink_software_from_document&software_id=<?= $software_id ?>&document_id=<?= $document_id ?>&csrf_token=<?= $_SESSION['csrf_token'] ?>">
                        <i class="fas fa-fw fa-unlink text-secondary" title="Unlink License"></i>
                    </a>
                </div>
                <?php
                }
                ?>
            <h6>
                <i class="fas fa-fw fa-building text-secondary me-2 mt-3"></i>Vendors
                <button type="button" class="btn btn-link btn-sm ajax-modal"
                    data-modal-url="modals/document/document_link_vendor.php?document_id=<?= $document_id ?>">
                    <i class="fas fa-fw fa-plus"></i>
                </button>
            </h6>
            <?php
            $sql_vendors = mysqli_query($mysqli, "SELECT vendors.vendor_id, vendor_name FROM vendors, vendor_documents
                WHERE vendors.vendor_id = vendor_documents.vendor_id
                AND vendor_documents.document_id = $document_id
                ORDER BY vendor_name ASC"
            );

            $associated_vendors = array();

            while ($row = mysqli_fetch_assoc($sql_vendors)) {
                $vendor_id = intval($row['vendor_id']);
                $vendor_name = escapeHtml($row['vendor_name']);

                $associated_vendors[] = $vendor_id;

                ?>
                <div class="ms-2">
                    <a class="ajax-modal" href="#" data-modal-url="modals/vendor/vendor.php?id=<?= $vendor_id ?>">
                        <?= $vendor_name ?>
                    </a>
                    <a class="confirm-link float-end" href="post.php?unlink_vendor_from_document&vendor_id=<?= $vendor_id ?>&document_id=<?= $document_id ?>&csrf_token=<?= $_SESSION['csrf_token'] ?>">
                        <i class="fas fa-fw fa-unlink text-secondary" title="Unlink Vendor"></i>
                    </a>
                </div>
            <?php
            }
            ?>
        </div>

        <?php if ($config_client_portal_enable) { ?>
            <div class="card card-body bg-light mb-3">
                <h6><i class="fas fa-handshake me-2"></i>Portal Collaboration</h6>
                <div class="mt-1">
                    <i class="fa fa-fw fa-eye<?php if (!$document_client_visible) { echo '-slash'; } ?> text-secondary me-2"></i>Document is
                    <a class="ajax-modal" href="#"
                        data-modal-url="modals/document/document_edit_visibility.php?document_id=<?= $document_id ?>">
                        <?php
                        if ($document_client_visible) {
                            echo "<span class='text-bold text-dark'>visible</span>";
                        } else {
                            echo "<span class='text-muted'>not visible</span>";
                        }
                        ?>
                    </a>
                </div>
            </div>
        <?php } ?>

        <div class="card card-body bg-light">
            <h6><i class="fas fa-history me-2"></i>Revisions</h6>
            <?php

            $sql_document_versions = mysqli_query($mysqli, "SELECT document_version_created_at, document_version_description, document_version_id,
                document_version_name, user_name FROM document_versions
                LEFT JOIN users ON document_version_created_by = user_id
                WHERE document_version_document_id = $document_id
                ORDER BY document_version_created_at DESC"
            );

            while ($row = mysqli_fetch_assoc($sql_document_versions)) {
                $document_version_id = intval($row['document_version_id']);
                $document_version_name = escapeHtml($row['document_version_name']);
                $document_version_description = escapeHtml($row['document_version_description']);
                $document_version_author = escapeHtml($row['user_name']);
                $document_version_created_date = escapeHtml($row['document_version_created_at']);

                ?>
                <div class="mt-1 <?php if($document_id === $document_version_id){ echo "text-bold"; } ?>">
                    <i class="fas fa-fw fa-history text-secondary me-2"></i>
                    <a class="ajax-modal" href="#"
                        data-modal-size="lg"
                        data-modal-url="modals/document/document_version_view.php?id=<?= $document_version_id ?>">
                        <?= "$document_version_created_date | $document_version_author" ?>
                    </a>
                    <a class="confirm-link float-end" href="post.php?delete_document_version=<?= $document_version_id ?>&csrf_token=<?= $_SESSION['csrf_token'] ?>">
                        <i class="fas fa-fw fa-trash-alt text-secondary"></i>
                    </a>
                </div>
                <?php
                }
                ?>
        </div>

    </div>

</div>

<script src="../js/pretty_content.js"></script>

<?php

require_once "modals/share_modal.php";
require_once "../includes/footer.php";
