<?php
class ControllerCommonSecurity extends Controller {
	public function index() {
		$this->load->language('common/security');

		$data['text_instruction'] = $this->language->get('text_instruction');
	
		$data['user_token'] = $this->session->data['user_token'];
		
		$data['storage'] = DIR_SYSTEM . 'storage/';
		
		$path = '';
		
		$data['paths'] = array();
		
		$parts = explode('/', str_replace('\\', '/', rtrim(DIR_SYSTEM, '/')));	
		
		foreach ($parts as $part) {
			$path .= $part . '/';
			
			$data['paths'][] = $path;
		}
		
		rsort($data['paths']);	
			
		$data['document_root'] = str_replace('\\', '/', realpath($this->request->server['DOCUMENT_ROOT'] . '/../') . '/');

		return $this->load->view('common/security', $data);
	}
	
	public function move() {
		$this->load->language('common/security');

		$json = array();
		
		if ($this->request->post['path']) {
			$path = $this->request->post['path'];
		} else {
			$path = '';
		}
				
		if ($this->request->post['directory']) {
			$directory = $this->request->post['directory'];
		} else {
			$directory = '';
		}
		
		if (!$this->user->hasPermission('modify', 'common/developer')) {
			$json['error'] = $this->language->get('error_permission');
		} else {
			if (DIR_STORAGE != DIR_SYSTEM . 'storage/') {
				$data['error'] = $this->language->get('error_path');		
			}
			
			if (!$path || str_replace('\\', '/', realpath($path)) . '/' != str_replace('\\', '/', substr(DIR_SYSTEM, 0, strlen($path)))) {
				$json['error'] = $this->language->get('error_path');
			}
					
			if (!$directory || !preg_match('/^[a-zA-Z0-9_-]+$/', $directory)) {
				$json['error'] = $this->language->get('error_directory');
			}
						
			if (is_dir($path . $directory)) {
				$json['error'] = $this->language->get('error_exists');
			}
			
			if (!is_writable(realpath(DIR_APPLICATION . '/../') . '/config.php') || !is_writable(DIR_APPLICATION . 'config.php')) {
				$json['error'] = $this->language->get('error_writable');
			}
									
			if (!$json) {
				$files = array();
	
				// Make path into an array
				$source = array(DIR_SYSTEM . 'storage/');
	
				// While the path array is still populated keep looping through
				while (count($source) != 0) {
					$next = array_shift($source);
	
					foreach (glob($next) as $file) {
						// If directory add to path array
						if (is_dir($file)) {
							$source[] = $file . '/*';
						}
	
						// Add the file to the files to be deleted array
						$files[] = $file;
					}
				}
	
				// Create the new storage folder
				if (!is_dir($path . $directory)) {
					mkdir($path . $directory, 0777);
				}			
	
				// Copy the 
				foreach ($files as $file) {
					$destination = $path . $directory . substr($file, strlen(DIR_SYSTEM . 'storage/'));
					
					if (is_dir($file) && !is_dir($destination)) {
						mkdir($destination, 0777);
					}
									
					if (is_file($file)) {
						copy($file, $destination);
					}
				}
				
				// Modify the config files
				$files = array(
					DIR_APPLICATION . 'config.php',
					realpath(DIR_APPLICATION . '/../') . '/config.php'
				);
							
				foreach ($files as $file) {
					$output = '';
					
					$lines = file($file);
					
					foreach ($lines as $line_id => $line) {
						if (strpos($line, 'define(\'DIR_STORAGE') !== false) {
							$output .= 'define(\'DIR_STORAGE\', \'' . $path . $directory . '/\');' . "\n";
						} else {
							$output .= $line;
						}
					}
		
					$file = fopen($file, 'w');
		
					fwrite($file, $output);
		
					fclose($file);
				}
				
				$json['success'] = $this->language->get('text_success');
			}
		}
			
		$this->response->addHeader('Content-Type: application/json');
		$this->response->setOutput(json_encode($json));		
	}
}