<?php
    /**
     *
     * (c) Copyright Ascensio System SIA 2021
     *
     * Licensed under the Apache License, Version 2.0 (the "License");
     * you may not use this file except in compliance with the License.
     * You may obtain a copy of the License at
     *
     *     http://www.apache.org/licenses/LICENSE-2.0
     *
     * Unless required by applicable law or agreed to in writing, software
     * distributed under the License is distributed on an "AS IS" BASIS,
     * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
     * See the License for the specific language governing permissions and
     * limitations under the License.
     *
     */

    require_once( dirname(__FILE__) . '/config.php' );
    require_once( dirname(__FILE__) . '/common.php' );
    require_once( dirname(__FILE__) . '/functions.php' );
    require_once( dirname(__FILE__) . '/jwtmanager.php' );
    require_once( dirname(__FILE__) . '/users.php' );

    $filename;

    $user = getUser($_GET["user"]);

    // get the file url and upload it
    $externalUrl = $_GET["fileUrl"];
    if (!empty($externalUrl))
    {
        $filename = DoUpload($externalUrl);
    }
    // if the file url doesn't exist, get file name and file extension
    else
    {
        $filename = basename($_GET["fileID"]);
    }
    $createExt = $_GET["fileExt"];

    if (!empty($createExt))
    {
        // and get demo file name by the extension
        $filename = tryGetDefaultByType($createExt, $user);

        // create the demo file url
        $new_url = "doceditor.php?fileID=" . $filename . "&user=" . $_GET["user"];
        header('Location: ' . $new_url, true);
        exit;
    }

    $fileuri = FileUri($filename, true);
    $fileuriUser = realpath($GLOBALS['STORAGE_PATH']) === $GLOBALS['STORAGE_PATH'] ? getDownloadUrl($filename) . "&dmode=emb" : FileUri($filename);
    $directUrl = getDownloadUrl($filename, FALSE);
    $docKey = getDocEditorKey($filename);
    $filetype = strtolower(pathinfo($filename, PATHINFO_EXTENSION));

    $ext = strtolower('.' . pathinfo($filename, PATHINFO_EXTENSION));
    $editorsMode = empty($_GET["action"]) ? "edit" : $_GET["action"];  // get the editors mode
    $canEdit = in_array($ext, $GLOBALS['DOC_SERV_EDITED']);  // check if the file can be edited
    if ((!$canEdit && $editorsMode == "edit" || $editorsMode == "fillForms") && in_array($ext, $GLOBALS['DOC_SERV_FILLFORMS'])) {
        $editorsMode = "fillForms";
        $canEdit = true;
    }
    $submitForm = $editorsMode == "fillForms" && $user->id == "uid-1" && !1;  // check if the Submit form button is displayed or not
    $mode = $canEdit && $editorsMode != "view" ? "edit" : "view";  // define if the editing mode is edit or view
    $type = empty($_GET["type"]) ? "desktop" : $_GET["type"];

    $templatesImageUrl = getTemplateImageUrl($filename); // templates image url in the "From Template" section
    $createUrl = getCreateUrl($filename, $user->id, $type);
    $templates = array(
        array (
            "image" => "",
            "title" => "Blank",
            "url" => $createUrl
        ),
        array (
            "image" => $templatesImageUrl,
            "title" => "With sample content",
            "url" => $createUrl . "&sample=true"
        )
    );

    // specify the document config
    $config = [
        "type" => $type,
        "documentType" => getDocumentType($filename),
        "document" => [
            "title" => $filename,
            "url" => getDownloadUrl($filename),
            "directUrl" => $directUrl,
            "fileType" => $filetype,
            "key" => $docKey,
            "info" => [
                "owner" => "Me",
                "uploaded" => date('d.m.y'),
                "favorite" => $user->favorite
            ],
            "permissions" => [  // the permission for the document to be edited and downloaded or not
                "comment" => $editorsMode != "view" && $editorsMode != "fillForms" && $editorsMode != "embedded" && $editorsMode != "blockcontent",
                "copy" => !in_array("copy", $user->deniedPermissions),
                "download" => !in_array("download", $user->deniedPermissions),
                "edit" => $canEdit && ($editorsMode == "edit" || $editorsMode == "view" || $editorsMode == "filter" || $editorsMode == "blockcontent"),
                "print" => !in_array("print", $user->deniedPermissions),
                "fillForms" => $editorsMode != "view" && $editorsMode != "comment" && $editorsMode != "embedded" && $editorsMode != "blockcontent",
                "modifyFilter" => $editorsMode != "filter",
                "modifyContentControl" => $editorsMode != "blockcontent",
                "review" => $canEdit && ($editorsMode == "edit" || $editorsMode == "review"),
                "chat" => $user->id != "uid-0",
                "reviewGroups" => $user->reviewGroups,
                "commentGroups" => $user->commentGroups,
                "userInfoGroups" => $user->userInfoGroups
            ]
        ],
        "editorConfig" => [
            "actionLink" => empty($_GET["actionLink"]) ? null : json_decode($_GET["actionLink"]),
            "mode" => $mode,
            "lang" => empty($_COOKIE["ulang"]) ? "en" : $_COOKIE["ulang"],
            "callbackUrl" => getCallbackUrl($filename),  // absolute URL to the document storage service
            "coEditing" => $editorsMode == "view" && $user->id == "uid-0" ? [
                "mode" => "strict", 
                "change" => false
            ] : null,
            "createUrl" => $user->id != "uid-0" ? $createUrl : null,
            "templates" => $user->templates ? $templates : null,
            "user" => [  // the user currently viewing or editing the document
                "id" => $user->id != "uid-0" ? $user->id : null,
                "name" => $user->name,
                "group" => $user->group
            ],
            "embedded" => [  // the parameters for the embedded document type
                "saveUrl" => $directUrl,  // the absolute URL that will allow the document to be saved onto the user personal computer
                "embedUrl" => $directUrl,  // the absolute URL to the document serving as a source file for the document embedded into the web page
                "shareUrl" => $directUrl,  // the absolute URL that will allow other users to share this document
                "toolbarDocked" => "top",  // the place for the embedded viewer toolbar (top or bottom)
            ],
            "customization" => [  // the parameters for the editor interface
                "about" => true,  // the About section display
                "comments" => true,
                "feedback" => true,  // the Feedback & Support menu button display
                "forcesave" => false,  // adds the request for the forced file saving to the callback handler when saving the document
                "submitForm" => $submitForm,  // if the Submit form button is displayed or not
                "goback" => [  // settings for the Open file location menu button and upper right corner button
                    "url" => serverPath(),  // the absolute URL to the website address which will be opened when clicking the Open file location menu button
                ]
            ]
        ]
    ];

    // an image for inserting
    $dataInsertImage = [
        "fileType" => "png",
        "url" => serverPath(true) . "/css/images/logo.png",
        "directUrl" => serverPath(false) . "/css/images/logo.png"
    ];

    // a document for comparing
    $dataCompareFile = [
        "fileType" => "docx",
        "url" => serverPath(true) . "/webeditor-ajax.php?type=assets&name=sample.docx",
        "directUrl" => serverPath(false) . "/webeditor-ajax.php?type=assets&name=sample.docx"
    ];

    // recipients data for mail merging
    $dataMailMergeRecipients = [
        "fileType" =>"csv",
        "url" => serverPath(true) . "/webeditor-ajax.php?type=csv",
        "directUrl" => serverPath(false) . "/webeditor-ajax.php?type=csv"
    ];
    
    // users data for mentions
    $usersForMentions = $user->id != "uid-0" ? getUsersForMentions($user->id) : null;

    // check if the secret key to generate token exists
    if (isJwtEnabled()) {
        $config["token"] = jwtEncode($config);  // encode config into the token
        $dataInsertImage["token"] = jwtEncode($dataInsertImage);  // encode the dataInsertImage object into the token
        $dataCompareFile["token"] = jwtEncode($dataCompareFile);  // encode the dataCompareFile object into the token
        $dataMailMergeRecipients["token"] = jwtEncode($dataMailMergeRecipients);  // encode the dataMailMergeRecipients object into the token
    }

    // get demo file name by the extension
    function tryGetDefaultByType($createExt, $user) {
        $demoName = ($_GET["sample"] ? "sample." : "new.") . $createExt;
        $demoPath = "assets" . DIRECTORY_SEPARATOR . ($_GET["sample"] ? "sample" : "new") . DIRECTORY_SEPARATOR;
        $demoFilename = GetCorrectName($demoName);

        if(!@copy(dirname(__FILE__) . DIRECTORY_SEPARATOR . $demoPath . $demoName, getStoragePath($demoFilename)))
        {
            sendlog("Copy file error to ". getStoragePath($demoFilename), "common.log");
            // Copy error!!!
        }

        // create demo file meta information
        createMeta($demoFilename, $user->id, $user->name);

        return $demoFilename;
    }

    // get the callback url
    function getCallbackUrl($fileName) {
        return serverPath(TRUE) . '/'
                    . "webeditor-ajax.php"
                    . "?type=track"
                    . "&fileName=" . urlencode($fileName)
                    . "&userAddress=" . getClientIp();
    }

    // get url to the created file
    function getCreateUrl($fileName, $uid, $type) {
        $ext = trim(getInternalExtension($fileName),'.');
        return serverPath(false) . '/'
                . "doceditor.php"
                . "?fileExt=" . $ext
                . "&user=" . $uid 
                . "&type=" . $type;
    }

    function getHistoryDownloadUrl($fileName, $version, $file, $isServer = TRUE) {
        $userAddress = $isServer ? "&userAddress=" . getClientIp() : "";
        return serverPath($isServer) . '/'
            . "webeditor-ajax.php"
            . "?type=history"
            . "&fileName=" . urlencode($fileName)
            . "&ver=" . $version
            . "&file=" . urlencode($file)
            . $userAddress;
    }

    // get url to download a file
    function getDownloadUrl($fileName, $isServer = TRUE) {
        $userAddress = $isServer ? "&userAddress=" . getClientIp() : "";
        return serverPath($isServer) . '/'
            . "webeditor-ajax.php"
            . "?type=download"
            . "&fileName=" . urlencode($fileName)
            . $userAddress;
    }

    // get document history
    function getHistory($filename, $filetype, $docKey, $fileuri) {
        $storagePath = $GLOBALS['STORAGE_PATH'];
        $histDir = getHistoryDir(getStoragePath($filename));  // get the path to the file history

        if (getFileVersion($histDir) > 0) {  // check if the file was modified (the file version is greater than 0)
            $curVer = getFileVersion($histDir);

            $hist = [];
            $histData = [];

            for ($i = 1; $i <= $curVer; $i++) {  // run through all the file versions
                $obj = [];
                $dataObj = [];
                $verDir = getVersionDir($histDir, $i);  // get the path to the file version

                $key = $i == $curVer ? $docKey : file_get_contents($verDir . DIRECTORY_SEPARATOR . "key.txt");  // get document key
                $obj["key"] = $key;
                $obj["version"] = $i;

                if ($i == 1) {  // check if the version number is equal to 1
                    $createdInfo = file_get_contents($histDir . DIRECTORY_SEPARATOR . "createdInfo.json");  // get meta data of this file
                    $json = json_decode($createdInfo, true);  // decode the meta data from the createdInfo.json file

                    $obj["created"] = $json["created"];
                    $obj["user"] = [
                        "id" => $json["uid"],
                        "name" => $json["name"]
                    ];
                }


                $fileExe = strtolower(pathinfo($filename, PATHINFO_EXTENSION));

                $prevFileName = $verDir . DIRECTORY_SEPARATOR . "prev." . $filetype;
                $prevFileName = substr($prevFileName, strlen(getStoragePath("")));
                $dataObj["fileType"] = $fileExe;
                $dataObj["key"] = $key;

                $directUrl =  $i == $curVer ? FileUri($filename, FALSE) : getHistoryDownloadUrl($filename, $i, "prev.".$fileExe, FALSE);
                $prevFileUrl = $i == $curVer ? $fileuri : getHistoryDownloadUrl($filename, $i, "prev.".$fileExe);
                if (realpath($storagePath) === $storagePath) {
                    $prevFileUrl = $i == $curVer ? getDownloadUrl($filename) : getHistoryDownloadUrl($filename, $i, "prev.".$fileExe);
                    $directUrl =  $i == $curVer ? getDownloadUrl($filename, FALSE) : getHistoryDownloadUrl($filename, $i, "prev.".$fileExe, FALSE);
                }

                $dataObj["url"] = $prevFileUrl;  // write file url to the data object
                $dataObj["directUrl"] = $directUrl;  // write direct url to the data object
                $dataObj["version"] = $i;

                if ($i > 1) {  // check if the version number is greater than 1 (the document was modified)
                    $changes = json_decode(file_get_contents(getVersionDir($histDir, $i - 1) . DIRECTORY_SEPARATOR . "changes.json"), true);  // get the path to the changes.json file
                    $change = $changes["changes"][0];

                    $obj["changes"] = $changes ? $changes["changes"] : null;  // write information about changes to the object
                    $obj["serverVersion"] = $changes["serverVersion"];
                    $obj["created"] = $change ? $change["created"] : null;
                    $obj["user"] = $change ? $change["user"] : null;

                    $prev = $histData[$i - 2];  // get the history data from the previous file version
                    $dataObj["previous"] = [  // write information about previous file version to the data object
                        "fileType" => $prev["fileType"],
                        "key" => $prev["key"],
                        "url" => $prev["url"],
                        "directUrl" => $prev["directUrl"]
                    ];

                    // write the path to the diff.zip archive with differences in this file version
                    $dataObj["changesUrl"] = getHistoryDownloadUrl($filename, $i - 1, "diff.zip");

                }

                if (isJwtEnabled()) {
                    $dataObj["token"] = jwtEncode($dataObj);
                }

                array_push($hist, $obj);  // add object dictionary to the hist list
                $histData[$i - 1] = $dataObj;  // write data object information to the history data
            }

            // write history information about the current file version
            $out = [];
            array_push($out, [
                    "currentVersion" => $curVer,
                    "history" => $hist
                ],
                $histData);
            return $out;
        }
    }

?>

<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
<html>
<head>
    <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
    <meta name="viewport" content="width=device-width, initial-scale=1, maximum-scale=1, minimum-scale=1, user-scalable=no, minimal-ui" />
    <meta name="apple-mobile-web-app-capable" content="yes" />
    <meta name="mobile-web-app-capable" content="yes" />
    <link rel="icon" href="css/images/<?php echo getDocumentType($filename) ?>.ico" type="image/x-icon" />
    <title>ONLYOFFICE</title>

    <style>
        html {
            height: 100%;
            width: 100%;
        }

        body {
            background: #fff;
            color: #333;
            font-family: Arial, Tahoma,sans-serif;
            font-size: 12px;
            font-weight: normal;
            height: 100%;
            margin: 0;
            overflow-y: hidden;
            padding: 0;
            text-decoration: none;
        }

        form {
            height: 100%;
        }

        div {
            margin: 0;
            padding: 0;
        }
    </style>

    <script type="text/javascript" src="<?php echo $GLOBALS["DOC_SERV_SITE_URL"].$GLOBALS["DOC_SERV_API_URL"] ?>"></script>

    <script type="text/javascript">

        var docEditor;
        var config;

        var innerAlert = function (message, inEditor) {
            if (console && console.log)
                console.log(message);
            if (inEditor && docEditor)
                docEditor.showMessage(message);
        };

        // the application is loaded into the browser
        var onAppReady = function () {
            innerAlert("Document editor ready");
        };

        // the document is modified
        var onDocumentStateChange = function (event) {
            var title = document.title.replace(/\*$/g, "");
            document.title = title + (event.data ? "*" : "");
        };

        // the user is trying to switch the document from the viewing into the editing mode
        var onRequestEditRights = function () {
            location.href = location.href.replace(RegExp("action=view\&?", "i"), "");
        };

        // an error or some other specific event occurs
        var onError = function (event) {
            if (event)
                innerAlert(event.data);
        };

        // the document is opened for editing with the old document.key value
        var onOutdatedVersion = function (event) {
            location.reload(true);
        };

        // replace the link to the document which contains a bookmark
        var replaceActionLink = function(href, linkParam) {
            var link;
            var actionIndex = href.indexOf("&actionLink=");
            if (actionIndex != -1) {
                var endIndex = href.indexOf("&", actionIndex + "&actionLink=".length);
                if (endIndex != -1) {
                    link = href.substring(0, actionIndex) + href.substring(endIndex) + "&actionLink=" + encodeURIComponent(linkParam);
                } else {
                    link = href.substring(0, actionIndex) + "&actionLink=" + encodeURIComponent(linkParam);
                }
            } else {
                link = href + "&actionLink=" + encodeURIComponent(linkParam);
            }
            return link;
        }

        // the user is trying to get link for opening the document which contains a bookmark, scrolling to the bookmark position
        var onMakeActionLink = function (event) {
            var actionData = event.data;
            var linkParam = JSON.stringify(actionData);
            docEditor.setActionLink(replaceActionLink(location.href, linkParam));  // set the link to the document which contains a bookmark
        };

        // the meta information of the document is changed via the meta command
        var onMetaChange = function (event) {
            if (event.data.favorite) {
                var favorite = !!event.data.favorite;
                var title = document.title.replace(/^\☆/g, "");
                document.title = (favorite ? "☆" : "") + title;
                docEditor.setFavorite(favorite);  // change the Favorite icon state
            }

            innerAlert("onMetaChange: " + JSON.stringify(event.data));
        };

        // the user is trying to insert an image by clicking the Image from Storage button
        var onRequestInsertImage = function(event) {
            docEditor.insertImage({  // insert an image into the file
                "c": event.data.c,
                <?php echo mb_strimwidth(json_encode($dataInsertImage), 1, strlen(json_encode($dataInsertImage)) - 2)?>
            })
        };

        // the user is trying to select document for comparing by clicking the Document from Storage button
        var onRequestCompareFile = function() {
            docEditor.setRevisedFile(<?php echo json_encode($dataCompareFile)?>);  // select a document for comparing
        };

        // the user is trying to select recipients data by clicking the Mail merge button
        var onRequestMailMergeRecipients = function (event) {
            docEditor.setMailMergeRecipients(<?php echo json_encode($dataMailMergeRecipients) ?>);  // insert recipient data for mail merge into the file
        };

        var onRequestSaveAs = function (event) {  //  the user is trying to save file by clicking Save Copy as... button
            var title = event.data.title;
            var url = event.data.url;
            var data = {
                title: title,
                url: url
            };
            let xhr = new XMLHttpRequest();
            xhr.open("POST", "webeditor-ajax.php?type=saveas");
            xhr.setRequestHeader('Content-Type', 'application/json');
            xhr.send(JSON.stringify(data));
            xhr.onload = function () {
                innerAlert(xhr.responseText);
                innerAlert(JSON.parse(xhr.responseText.substring(xhr.responseText.indexOf("{"))).file, true);
            }
        };

        var onRequestRename = function(event) { //  the user is trying to rename file by clicking Rename... button
            innerAlert("onRequestRename: " + JSON.stringify(event.data));

            var newfilename = event.data;
            var data = {
                newfilename: newfilename,
                dockey: config.document.key,
                ext: config.document.fileType
            };

            let xhr = new XMLHttpRequest();
            xhr.open("POST", "webeditor-ajax.php?type=rename");
            xhr.setRequestHeader('Content-Type', 'application/json');
            xhr.send(JSON.stringify(data));
            xhr.onload = function () {
                innerAlert(xhr.responseText);
            }
        };

        var сonnectEditor = function () {

            <?php
                if (!file_exists(getStoragePath($filename))) {
                    echo "alert('File not found'); return;";
                }
            ?>

            config = <?php echo json_encode($config) ?>;

            config.width = "100%";
            config.height = "100%";

            config.events = {
                'onAppReady': onAppReady,
                'onDocumentStateChange': onDocumentStateChange,
                'onRequestEditRights': onRequestEditRights,
                'onError': onError,
                'onOutdatedVersion': onOutdatedVersion,
                'onMakeActionLink': onMakeActionLink,
                'onMetaChange': onMetaChange,
                'onRequestInsertImage': onRequestInsertImage,
                'onRequestCompareFile': onRequestCompareFile,
                'onRequestMailMergeRecipients': onRequestMailMergeRecipients,
            };

            <?php
                $out = getHistory($filename, $filetype, $docKey, $fileuri);
                $history = $out[0];
                $historyData = $out[1];
            ?>

            <?php if ($user->id != "uid-0"): ?>
                <?php if ($history != null && $historyData != null): ?>
                    // the user is trying to show the document version history
                    config.events['onRequestHistory'] = function () {
                        docEditor.refreshHistory(<?php echo json_encode($history) ?>);  // show the document version history
                    };
                    // the user is trying to click the specific document version in the document version history
                    config.events['onRequestHistoryData'] = function (event) {
                        var ver = event.data;
                        var histData = <?php echo json_encode($historyData) ?>;
                        docEditor.setHistoryData(histData[ver - 1]);  // send the link to the document for viewing the version history
                    };
                    // the user is trying to go back to the document from viewing the document version history
                    config.events['onRequestHistoryClose'] = function () {
                        document.location.reload();
                    };
                <?php endif; ?>
                // add mentions for not anonymous users
                config.events['onRequestUsers'] = function () {
                    docEditor.setUsers({  // set a list of users to mention in the comments
                        "users": <?php echo json_encode($usersForMentions) ?>
                    });
                };
                // the user is mentioned in a comment
                config.events['onRequestSendNotify'] = function (event) {
                    event.data.actionLink = replaceActionLink(location.href, JSON.stringify(event.data.actionLink));
                    var data = JSON.stringify(event.data);
                    innerAlert("onRequestSendNotify: " + data);
                };
                // prevent file renaming for anonymous users
                config.events['onRequestRename'] = onRequestRename;
            <?php endif; ?>

            if (config.editorConfig.createUrl) {
                config.events.onRequestSaveAs = onRequestSaveAs;
            };

            if ((config.document.fileType === "docxf" || config.document.fileType === "oform")
                && DocsAPI.DocEditor.version().split(".")[0] < 7) {
                innerAlert("Please update ONLYOFFICE Docs to version 7.0 to work on fillable forms online.");
                return;
            }

            docEditor = new DocsAPI.DocEditor("iframeEditor", config);
        };

        if (window.addEventListener) {
            window.addEventListener("load", сonnectEditor);
        } else if (window.attachEvent) {
            window.attachEvent("load", сonnectEditor);
        }

    </script>
</head>
<body>
    <form id="form1">
        <div id="iframeEditor">
        </div>
    </form>
</body>
</html>