<?php

$trace = "";

// PHP "reference card" and indexing system

/* Read in from $_REQUEST (POST, GET and COOKIE)
   Also in from $_SESSION to see how we're doing

   Write back out to $_SESSION
   Set up outputs for display in $fill */

require("stdsess.inc"); /* Web helpers */

/* next line sets up $fill for required look and feel */
require("style.inc"); /* Style sheet handlers */
$page = $fill[pagename] = $_REQUEST[pagename];

/* Some fallbacks that may get overridden */
////////////////////////////////////////////

$fill[lhtop] = "wiwb23";
$fill[rhtop] = "wiwb40";
$fill[mimage] = "tramm3";
$fill[stuff] = "<p>Hear the birds sing on the Marlbrough".
" Downs and the Wurzels sing at the Three Magpies</p>";
$fill[title] = "All Around Wiltshire";
$fill[linkon] = "";

/* Read in the main stuff here */
/////////////////////////////////

// Connect to the database

@mysql_connect("localhost","trainee","abc123");
@mysql_select_db("wellho");
/* Following line fails silently if the table
already exists! */
@mysql_query("create table refcards (".
        "pagename text, ".
        "lhtop text, ".
        "rhtop text, ".
        "mimage text, ".
        "title text, ".
        "body text, ".
        "id int primary key not null auto_increment)");

// Read in the current record to display

//////////////////////////////////////////////////
/* The updating and logging is stuff goes here */
//////////////////////////////////////////////////

/* Simple first scheme - hard code password and account */

$logname = "bourne";
$passcode = "enruob";
$fill[login] = "<p><form method=POST>".
        "To logout: ".
        "<input type=submit name=off value=logout></form></p>";

/* Right ... are we logged in, etc - what state are we in? */

session_start();
// Set up for a newcomer or find our where oldcomer is.
if (! $_SESSION[current]) {
   $current = 0;
} else {
   $current = $_SESSION[current];
}
if ($_REQUEST[off] == "logout") {
        $current = 0;
        session_destroy();
        }

######################### Handler responses from previous page

$error = 0;

$trace .= "current = $current";

switch ($current) {

case 0: // Finish up from initialisation with possible log in
        if ($_REQUEST[name] == $logname and
                $_REQUEST[pcode] == $passcode) {
                $current = 1;
        }
        break;
case 1: // Read back and store the edited text
        if ($_REQUEST[update_completed]) {
        mysql_query("delete from refcards where pagename = '$page'");
        $query = "insert into refcards ".
                "(pagename,body,title,lhtop,rhtop,mimage) values (".
                "\"$_REQUEST[pagename]\",".
                "\"$_REQUEST[body]\",".
                "\"$_REQUEST[title]\",".
                "\"$_REQUEST[lhtop]\",".
                "\"$_REQUEST[rhtop]\",".
                "\"$_REQUEST[mimage]\")";
        $trace .= "<br>$query";
        mysql_query($query);
        }
        break;
}

$_SESSION[current] = $current;

// Read in the page from the database for display
/////////////////////////////////////////////////

$rs = @mysql_query("select * from refcards where pagename = '$page'");
$info = @mysql_fetch_assoc($rs);
if ($info) {
        if ($info[lhtop]) $fill[lhtop] = $info[lhtop];
        if ($info[rhtop]) $fill[rhtop] = $info[rhtop];
        if ($info[mimage]) $fill[mimage] = $info[mimage];

// Take the body line by line ..
// .. deal with web special chars ..
        $paragraphs = explode("\n",htmlentities($info[body]));
// .. eliminate blank lines and join into <p> tags
        $live = preg_grep('/\S/',$paragraphs);
        $taggled = "<p>".implode("</p>\n<p>",$live)."</p>\n";

// .. Underlined, bold, italic support

        $taggled = preg_replace("/\[([u])\]/",'<\1>',$taggled);
        $taggled = preg_replace("!\[/([u])\]!",'</\1>',$taggled);

        $taggled = preg_replace("/\[([b])\]/",'<strong>',$taggled);
        $taggled = preg_replace("!\[/([b])\]!",'</strong>',$taggled);

        $taggled = preg_replace("/\[([i])\]/",'<em>',$taggled);
        $taggled = preg_replace("!\[/([i])\]!",'</em>',$taggled);

        $fill[stuff] = $taggled;
        $fill[title] = htmlentities($info[title]);
        }

// Read in all the other records in the system to make links

$rs = @mysql_query("select pagename,title from refcards where pagename != '$page'");
$fill[nlinks]=0;
while ($info = @mysql_fetch_assoc($rs)) {
        $fill[nlinks]++;
        $fill[linkon] .= "<p class=lynx>Link on to <a href=$info[pagename].html>".
                "$info[pagename]</a>$info[title]</p>";
        }

######################### Prepare for next form

switch ($current) {

case 0: // Not logged in. Just give them the page
        $fill[login] = "<p><form method=POST>".
        "To edit, give name <input name=name> and ".
        "password <input name=pcode type=password>".
        " and <input type=submit value=login></form></p>";
        $fill[form] = "";
    break;
case 1: // Logged in - offer the text for edit.
        $rs = @mysql_query("select * from refcards where pagename = '$page'");
        $info = @mysql_fetch_assoc($rs);
        if (! $info) $info = array();
        $fields = array (
           array("title","Page title",$info[title],$xttl),
           array("lhtop","Top left image",$info[lhtop],$xttl),
           array("rhtop","Top right image",$info[rhtop],$xttl),
           array("mimage","Main image",$info[mimage],$xttl),
           array("body","Page body",$info[body],$xbody,type=>"textarea")) ;
        $fill[form] = makeform($fields);
    break;
}
/* Ancilliary parameters */
///////////////////////////

$fill[year] = date("F Y");
$fill[trace] = "";
/* $fill[trace] = $trace; */ # Uncomment for analysis report

/* Complete the template */

$fh = fopen ("page.htp","r");
$html = fread($fh,filesize("page.htp"));
foreach (array_keys($fill) as $k) {
        $html = preg_replace("/%$k%/",$fill[$k],$html);
}
print $html;

?>