<?php
  /**
   * ownCloud
   *
   * @author Frank Karlitschek
   * @author Jakob Sack
   * @copyright 2012 Frank Karlitschek frank@owncloud.org
   *
   * This library is free software; you can redistribute it and/or
   * modify it under the terms of the GNU AFFERO GENERAL PUBLIC LICENSE
   * License as published by the Free Software Foundation; either
   * version 3 of the License, or any later version.
   *
   * This library is distributed in the hope that it will be useful,
   * but WITHOUT ANY WARRANTY; without even the implied warranty of
   * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
   * GNU AFFERO GENERAL PUBLIC LICENSE for more details.
   *
   * You should have received a copy of the GNU Affero General Public
   * License along with this library.  If not, see <http://www.gnu.org/licenses/>.
   *
   */
  
  require_once __DIR__.'/template/functions.php';
  
  /**
   * This class provides the templates for ownCloud.
   */
  class OC_Template extends \OC\Template\Base {
  	private $renderas; // Create a full page?
  	private $path; // The path to the template
  	private $headers=array(); //custom headers
  
  	/**
  	 * @brief Constructor
  	 * @param string $app app providing the template
  	 * @param string $name of the template file (without suffix)
  	 * @param string $renderas = ""; produce a full page
  	 * @return OC_Template object
  	 *
  	 * This function creates an OC_Template object.
  	 *
  	 * If $renderas is set, OC_Template will try to produce a full page in the
  	 * according layout. For now, renderas can be set to "guest", "user" or
  	 * "admin".
  	 */
  	public function __construct( $app, $name, $renderas = "" ) {
  		// Read the selected theme from the config file
  		$theme = OC_Util::getTheme();
  
  		// Read the detected formfactor and use the right file name.
  		$fext = self::getFormFactorExtension();
  
  		$requesttoken = OC::$session ? OC_Util::callRegister() : '';
  
  		$parts = explode('/', $app); // fix translation when app is something like core/lostpassword
  		$l10n = OC_L10N::get($parts[0]);
  		$themeDefaults = new OC_Defaults();
  
  		list($path, $template) = $this->findTemplate($theme, $app, $name, $fext);
  
  		// Set the private data
  		$this->renderas = $renderas;
  		$this->path = $path;
  
  		parent::__construct($template, $requesttoken, $l10n, $themeDefaults);
  
  		// Some headers to enhance security
  		header('X-XSS-Protection: 1; mode=block'); // Enforce browser based XSS filters
  		header('X-Content-Type-Options: nosniff'); // Disable sniffing the content type for IE
  
  		// iFrame Restriction Policy
  		$xFramePolicy = OC_Config::getValue('xframe_restriction', true);
  		if($xFramePolicy) {
  			header('X-Frame-Options: Sameorigin'); // Disallow iFraming from other domains
  		}
  		
  		// Content Security Policy
  		// If you change the standard policy, please also change it in config.sample.php
  		$policy = OC_Config::getValue('custom_csp_policy',
  			'default-src \'self\'; '
  			.'script-src \'self\' \'unsafe-eval\'; '
  			.'style-src \'self\' \'unsafe-inline\'; '
  			.'frame-src *; '
  			.'img-src *; '
  			.'font-src \'self\' data:; '
  			.'media-src *');
  		header('Content-Security-Policy:'.$policy); // Standard
  
  	}
  
  	/**
  	 * autodetect the formfactor of the used device
  	 * default -> the normal desktop browser interface
  	 * mobile -> interface for smartphones
  	 * tablet -> interface for tablets
  	 * standalone -> the default interface but without header, footer and
  	 *	sidebar, just the application. Useful to use just a specific
  	 *	app on the desktop in a standalone window.
  	 */
  	public static function detectFormfactor() {
  		// please add more useragent strings for other devices
  		if(isset($_SERVER['HTTP_USER_AGENT'])) {
  			if(stripos($_SERVER['HTTP_USER_AGENT'], 'ipad')>0) {
  				$mode='tablet';
  			}elseif(stripos($_SERVER['HTTP_USER_AGENT'], 'iphone')>0) {
  				$mode='mobile';
  			}elseif((stripos($_SERVER['HTTP_USER_AGENT'], 'N9')>0)
  				and (stripos($_SERVER['HTTP_USER_AGENT'], 'nokia')>0)) {
  				$mode='mobile';
  			}else{
  				$mode='default';
  			}
  		}else{
  			$mode='default';
  		}
  		return($mode);
  	}
  
  	/**
  	 * @brief Returns the formfactor extension for current formfactor
  	 */
  	static public function getFormFactorExtension()
  	{
  		if (!\OC::$session) {
  			return '';
  		}
  		// if the formfactor is not yet autodetected do the
  		// autodetection now. For possible formfactors check the
  		// detectFormfactor documentation
  		if (!\OC::$session->exists('formfactor')) {
  			\OC::$session->set('formfactor', self::detectFormfactor());
  		}
  		// allow manual override via GET parameter
  		if(isset($_GET['formfactor'])) {
  			\OC::$session->set('formfactor', $_GET['formfactor']);
  		}
  		$formfactor = \OC::$session->get('formfactor');
  		if($formfactor==='default') {
  			$fext='';
  		}elseif($formfactor==='mobile') {
  			$fext='.mobile';
  		}elseif($formfactor==='tablet') {
  			$fext='.tablet';
  		}elseif($formfactor==='standalone') {
  			$fext='.standalone';
  		}else{
  			$fext='';
  		}
  		return $fext;
  	}
  
  	/**
  	 * @brief find the template with the given name
  	 * @param string $name of the template file (without suffix)
  	 *
  	 * Will select the template file for the selected theme and formfactor.
  	 * Checking all the possible locations.
  	 */
  	protected function findTemplate($theme, $app, $name, $fext) {
  		// Check if it is a app template or not.
  		if( $app !== '' ) {
  			$dirs = $this->getAppTemplateDirs($theme, $app, OC::$SERVERROOT, OC_App::getAppPath($app));
  		} else {
  			$dirs = $this->getCoreTemplateDirs($theme, OC::$SERVERROOT);
  		}
  		$locator = new \OC\Template\TemplateFileLocator( $fext, $dirs );
  		$template = $locator->find($name);
  		$path = $locator->getPath();
  		return array($path, $template);
  	}
  
  	/**
  	 * @brief Add a custom element to the header
  	 * @param string $tag tag name of the element
  	 * @param array $attributes array of attributes for the element
  	 * @param string $text the text content for the element
  	 */
  	public function addHeader( $tag, $attributes, $text='') {
  		$this->headers[]=array('tag'=>$tag,'attributes'=>$attributes, 'text'=>$text);
  	}
  
  	/**
  	 * @brief Process the template
  	 * @return bool
  	 *
  	 * This function process the template. If $this->renderas is set, it
  	 * will produce a full page.
  	 */
  	public function fetchPage() {
  		$data = parent::fetchPage();
  
  		if( $this->renderas ) {
  			$page = new OC_TemplateLayout($this->renderas);
  
  			// Add custom headers
  			$page->assign('headers', $this->headers, false);
  			foreach(OC_Util::$headers as $header) {
  				$page->append('headers', $header);
  			}
  
  			$page->assign( "content", $data, false );
  			return $page->fetchPage();
  		}
  		else{
  			return $data;
  		}
  	}
  
  	/**
  	 * @brief Include template
  	 * @return string returns content of included template
  	 *
  	 * Includes another template. use <?php echo $this->inc('template'); ?> to
  	 * do this.
  	 */
  	public function inc( $file, $additionalparams = null ) {
  		return $this->load($this->path.$file.'.php', $additionalparams);
  	}
  
  	/**
  	 * @brief Shortcut to print a simple page for users
  	 * @param string $application The application we render the template for
  	 * @param string $name Name of the template
  	 * @param array $parameters Parameters for the template
  	 * @return bool
  	 */
  	public static function printUserPage( $application, $name, $parameters = array() ) {
  		$content = new OC_Template( $application, $name, "user" );
  		foreach( $parameters as $key => $value ) {
  			$content->assign( $key, $value );
  		}
  		print $content->printPage();
  	}
  
  	/**
  	 * @brief Shortcut to print a simple page for admins
  	 * @param string $application The application we render the template for
  	 * @param string $name Name of the template
  	 * @param array $parameters Parameters for the template
  	 * @return bool
  	 */
  	public static function printAdminPage( $application, $name, $parameters = array() ) {
  		$content = new OC_Template( $application, $name, "admin" );
  		foreach( $parameters as $key => $value ) {
  			$content->assign( $key, $value );
  		}
  		return $content->printPage();
  	}
  
  	/**
  	 * @brief Shortcut to print a simple page for guests
  	 * @param string $application The application we render the template for
  	 * @param string $name Name of the template
  	 * @param string $parameters Parameters for the template
  	 * @return bool
  	 */
  	public static function printGuestPage( $application, $name, $parameters = array() ) {
  		$content = new OC_Template( $application, $name, "guest" );
  		foreach( $parameters as $key => $value ) {
  			$content->assign( $key, $value );
  		}
  		return $content->printPage();
  	}
  
  	/**
  		* @brief Print a fatal error page and terminates the script
  		* @param string $error_msg The error message to show
  		* @param string $hint An optional hint message
  		* Warning: All data passed to $hint needs to get sanitized using OC_Util::sanitizeHTML
  		*/
  	public static function printErrorPage( $error_msg, $hint = '' ) {
  		$content = new OC_Template( '', 'error', 'error' );
  		$errors = array(array('error' => $error_msg, 'hint' => $hint));
  		$content->assign( 'errors', $errors );
  		$content->printPage();
  		die();
  	}
  	
  	/**
  	 * print error page using Exception details
  	 * @param Exception $exception
  	 */
  	
  	public static function printExceptionErrorPage(Exception $exception) {
  		$error_msg = $exception->getMessage();
  		if ($exception->getCode()) {
  			$error_msg = '['.$exception->getCode().'] '.$error_msg;
  		}
  		if (defined('DEBUG') and DEBUG) {
  			$hint = $exception->getTraceAsString();
  			if (!empty($hint)) {
  				$hint = '<pre>'.$hint.'</pre>';
  			}
  			$l = OC_L10N::get('lib');
  			while (method_exists($exception, 'previous') && $exception = $exception->previous()) {
  				$error_msg .= '<br/>'.$l->t('Caused by:').' ';
  				if ($exception->getCode()) {
  					$error_msg .= '['.$exception->getCode().'] ';
  				}
  				$error_msg .= $exception->getMessage();
  			};
  		} else {
  			$hint = '';
  			if ($exception instanceof \OC\HintException) {
  				$hint = $exception->getHint();
  			}
  		}
  		self::printErrorPage($error_msg, $hint);
  	}
  }