<?php

if(!defined('AOWOW_REVISION'))
    die("illegal access");

abstract class Filter
{
    private static $pattern   = "/[^\p{L}0-9\s_\-\'\?\*]/ui";// delete any char not in unicode, number, space, underscore, hyphen, single quote or common wildcard
    private static $wildcards = ['*' => '%', '?' => '_'];
    private static $criteria  = ['cr', 'crs', 'crv'];       // [cr]iterium, [cr].[s]ign, [cr].[v]alue

    private        $fiData    = ['c' => [], 'v' =>[]];
    private        $query     = '';
    private        $form      = [];                         // unsanitized: needed to preselect form-fields
    private        $setCr     = [];                         // unsanitized: needed to preselect criteria

    public         $error     = false;                      // erronous search fields

    // parse the provided request into a usable format; recall self with GET-params if nessecary
    public function init()
    {
        // prefer POST over GET, translate to url
        if (!empty($_POST))
        {
            foreach ($_POST as $k => $v)
            {
                if (is_array($v))                           // array -> max depths:1
                {
                    if ($k == 'cr' && empty($v[0]))
                        continue;

                    $sub = [];
                    foreach ($v as $sk => $sv)
                        $sub[$sk] = is_numeric($sv) ? (int)$sv : urlencode($sv);

                    if (!empty($sub) && in_array($k, Filter::$criteria))
                        $this->fiData['c'][$k] = $sub;
                    else if (!empty($sub))
                        $this->fiData['v'][$k] = $sub;
                }
                else                                        // stings and integer
                {
                    if (in_array($k, Filter::$criteria))
                        $this->fiData['c'][$k] = is_numeric($v) ? (int)$v : urlencode($v);
                    else
                        $this->fiData['v'][$k] = is_numeric($v) ? (int)$v : urlencode($v);
                }
            }

            // create get-data
            $tmp = [];
            foreach (array_merge($this->fiData['c'], $this->fiData['v']) as $k => $v)
            {
                if ($v == '')
                    continue;
                else if (is_array($v))
                    $tmp[$k] = $k."=".implode(':', $v);
                else
                    $tmp[$k] = $k."=".$v;
            }

            // do get request
            $this->redirect(implode(';', $tmp));
        }
        // sanitize input and build sql
        else if (!empty($_GET['filter']))
        {
            $tmp = explode(';', $_GET['filter']);
            $cr = $crs = $crv = [];

            foreach (Filter::$criteria as $c)
            {
                foreach ($tmp as $i => $term)
                {
                    if (strpos($term, $c.'=') === 0)
                    {
                        $$c = explode(':', explode('=', $term)[1]);
                        $this->setCr[$c] = json_encode($$c, JSON_NUMERIC_CHECK);
                        unset($tmp[$i]);
                    }
                }
            }

            for ($i = 0; $i < max(count($cr), count($crv), count($crs)); $i++)
            {
                if (!isset($cr[$i])  || !isset($crs[$i]) || !isset($crv[$i]) ||
                    !intVal($cr[$i]) ||  $crs[$i] == ''  ||  $crv[$i] == '')
                {
                    $this->error = true;
                    continue;
                }

                $this->sanitize($crv[$i]);

                if ($crv[$i] != '')
                {
                    $this->fiData['c']['cr'][]  = intVal($cr[$i]);
                    $this->fiData['c']['crs'][] = $crs[$i];
                    $this->fiData['c']['crv'][] = $crv[$i];
                }
                else
                    $this->error = true;

            }

            foreach ($tmp as $v)
            {
                $w = explode('=', $v);

                if (strstr($w[1], ':'))
                {
                    $tmp2 = explode(':', $w[1]);

                    $this->form[$w[0]] = $tmp2;

                    array_walk($tmp2, function(&$v) { $v = intVal($v); });
                    $this->fiData['v'][$w[0]] = $tmp2;

                }
                else
                {
                    $this->form[$w[0]] = $w[1];

                    $this->sanitize($w[1]);

                    if ($w[1] != '')
                        $this->fiData['v'][$w[0]] = is_numeric($w[1]) ? (int)$w[1] : $w[1];
                    else
                        $this->error = true;
                }
            }

            return $this->fiData;
        }
    }

    public function buildQuery()
    {
        if (!empty($this->query))
            return $this->query;

        $parts = [];

        // values
        $parts = $this->createSQLForValues($this->fiData['v']);

        // criteria
        $c = &$this->fiData['c'];
        if (!empty($c))
        {
            if (is_array($c['cr']))
            {
                for ($i = 0; $i < count($c['cr']); $i++)
                    $parts[] = $this->createSQLForCriterium(array($c['cr'][$i], $c['crs'][$i], $c['crv'][$i]));
            }
            else
                $parts[] = $this->createSQLForCriterium(array($c['cr'], $c['crs'], $c['crv']));
        }

        $this->query = empty($parts) ? '' : '('.implode(empty($this->fiData['v']['ma']) ? ' AND ' : ' OR ', $parts).')';
        return $this->query;
    }

    public function getQuery()
    {
        return $this->query;
    }

    public function getForm()
    {
        return $this->form;
    }

    public function getSetCriteria()
    {
        if (!empty($this->setCr['cr']))
            return sprintf(Util::$setCriteriaString, $this->setCr['cr'], $this->setCr['crs'], $this->setCr['crv']);
        else
            return null;
    }

    // santas little helper..
    protected function int2Op($int)
    {
        switch ($int)
        {
            case 1: return '>';
            case 2: return '>=';
            case 3: return '=';
            case 4: return '<=';
            case 5: return '<';
            default: die('invalid op');
        }
    }

    protected function int2Bool($int)
    {
        switch ($int)
        {
            case 1: return true;
            case 2: return false;
            default: die('invalid op');
        }
    }

    protected function list2Mask($list, $noOffset = false)
    {
        $mask = 0x0;
        $o    = $noOffset ? 0 : 1;                          // schoolMask requires this..?

        if (is_array($list))
        {
            foreach ($list as $itm)
                $mask += (1 << (intVal($itm) - $o));
        }
        else
            $mask = (1 << (intVal($list) - $o));

        return $mask;
    }

    private function sanitize(&$str)
    {
        $str = preg_replace(Filter::$pattern, '', trim($str));
        $str = strtr($str, Filter::$wildcards);
    }

    // if called with POST-data, convert to GET request and call self
    private function redirect($get)
    {
        header('Location: http://'.$_SERVER['SERVER_NAME'].str_replace('index.php', '', $_SERVER['PHP_SELF']).'?'.$_SERVER['QUERY_STRING'].'='.$get);
    }

    // TODO: wrong wrong wrong!!
    // 1) filter-Ids are different for each type; 2) (NOT) IN - subqueries will eat the mysql-server alive!
    protected function createSQLForCommunity($cr)
    {
        switch ($cr[0])
        {
            case 14:                                        // has Comments [y|n]
                return '';                                  // IN / NOT IN (select Ids FROM aowow_comments ON type = X AND id Y and flags = valid)
            case 15:                                        // has Screenshots [y|n]
                return '';                                  // IN / NOT IN (select Ids FROM aowow_screenshots ON type = X AND id Y and flags = valid)
            case 16:                                        // has Videos [y|n]
                return '';                                  // IN / NOT IN (select Ids FROM aowow_videos ON type = X AND id Y and flags = valid)
        }
    }

    // apply Util::sqlEscape() and intVal() in the implementation of these
    abstract protected function createSQLForCriterium($cr);
    abstract protected function createSQLForValues($vl);
}


class AchievementListFilter extends Filter
{
    protected function createSQLForCriterium($cr)
    {
        if ($r = $this->createSQLForCommunity($cr))
            return $r;

        switch ($cr[0])
        {
            case 2:                                         // gives a reward [y|n]
                return 'reward_loc0 '.($this->int2Bool($cr[1]) ? '<>' : '=').' \'\'';
            case 3:                                         // reward text [str]
                return 'reward_loc'.User::$localeId.' LIKE \'%'.Util::sqlEscape($cr[2]).'%\'';
         // case 4:                                         // location [int]
             // return '';                                  // no plausible locations parsed yet
            case 5:                                         // first in series [y|n]
                return $this->int2Bool($cr[1]) ? '(series <> 0 AND (series & 0xFFFF0000) = 0)' : '(series & 0xFFFF0000) <> 0';
            case 6:                                         // last in series [y|n]
                return $this->int2Bool($cr[1]) ? '(series <> 0 AND (series & 0xFFFF) = 0)' : '(series & 0xFFFF) <> 0';
            case 7:                                         // part of series [y|n]
                return 'series '.($this->int2Bool($cr[1]) ? '<>' : '=').' 0';
            case 9:                                         // Id [op] [int]
                return 'id '.$this->int2Op($cr[1]).' '.intVal($cr[2]);
            case 10:                                        // Icon [str]
                return 'iconString LIKE \'%'.Util::sqlEscape($cr[2]).'%\'';
         // case 11:                                        // Related Event [int]
             // return '';                                  // >0:holidayId; -2323:any; -2324:none
            case 18:                                        // flags (staff only)
                if (User::isInGroup(U_GROUP_STAFF))
                    return 'flags &'.(1 << max($cr[1] - 1, 0)) ;
            default:
                return '1';
        }
    }

    protected function createSQLForValues($vl)
    {
        $parts = [];

        // name ex: +description, +rewards
        if (isset($vl['na']))
        {
            if (isset($vl['ex']) && $vl['ex'] == 'on')
                $parts[] = '(name_loc'.User::$localeId.' LIKE "%'.Util::sqlEscape($vl['na']).'%" OR description_loc'.User::$localeId.' LIKE "%'.Util::sqlEscape($vl['na']).'%" OR reward_loc'.User::$localeId.' LIKE "%'.Util::sqlEscape($vl['na']).'%")';
            else
                $parts[] = 'name_loc'.User::$localeId.' LIKE "%'.Util::sqlEscape($vl['na']).'%"';
        }

        // points min
        if (isset($vl['minpt']))
            $parts[] = 'points >= '.intVal($vl['minpt']);

        // points max
        if (isset($vl['maxpt']))
            $parts[] = 'points <= '.intVal($vl['maxpt']);

        // faction (side)
        if (isset($vl['si']))
        {
            if ($vl['si'] == 3)                             // both
                $parts[] = 'faction = '.intVal($vl['si']);
            else if ($vl['si'] > 0)                         // faction, inclusive both
                $parts[] = '(faction = 3 OR faction = '.intVal($vl['si']).')';
            else if ($vl['si'] < 0)                         // faction, exclusive both
                $parts[] = 'faction = '.intVal(-$vl['si']);

        }

        return $parts;
    }
}


class SpellListFilter extends Filter
{
    // sources in filter and general use different indizes
    private static $fiSource  = array(
        1  => -2,                                           // Any
        2  => -1,                                           // None
        3  =>  1,                                           // Crafted
        4  =>  2,                                           // Drop
        6  =>  4,                                           // Quest
        7  =>  5,                                           // Vendor
        8  =>  6,                                           // Trainer
        9  =>  7,                                           // Discovery
        10 =>  9                                            // Talent
    );

    protected function createSQLForCriterium($cr)
    {
        if ($r = $this->createSQLForCommunity($cr))
            return $r;

        switch ($cr[0])
        {
            case 1:                                         // costAbs [op] [int]
                return 's.powerCost '.$this->int2Op($cr[1]).' IF(s.powerType IN (1, 6),  10 * '.intVal($cr[2]).', '.intVal($cr[2]).')';
            case 2:                                         // costPct [op] [int]
                return 's.powerCostPercent '.$this->int2Op($cr[1]).' '.intVal($cr[2]);
            case 3:                                         // requires FocusGO [y|n]
                return $this->int2Bool($cr[1]) ? 's.spellFocusObject > 0' : 's.spellFocusObject = 0';
            case 4:                                         // trainingcost [op] [int]
                return 's.trainingcost '.$this->int2Op($cr[1]).' '.intVal($cr[2]);
            case 5:                                         // Profession Specialitation [y|n]
                return 's.reqSpellId '.($this->int2Bool($cr[1]) ? ' > ' : ' = ').' 0';
            case 9:                                         // Source [int]
                if ($foo = self::$fiSource[$cr[1]])
                {
                    if ($foo > 0)                           // specific
                        return 's.source LIKE "%'.$foo.':%"';
                    else if ($foo == -2)                    // any
                        return 's.source <> ""';
                    else if ($foo == -1)                    // none
                        return 's.source = ""';
                }

                return '1';
            case 10:                                        // First Rank [y|n]
                return $this->int2Bool($cr[1]) ? 's.cuFlags & '.SPELL_CU_FIRST_RANK : '(s.cuFlags & '.SPELL_CU_FIRST_RANK.') = 0' ;
            case 12:                                        // Last Rank [y|n]
                return $this->int2Bool($cr[1]) ? 's.cuFlags & '.SPELL_CU_LAST_RANK : '(s.cuFlags & '.SPELL_CU_LAST_RANK.') = 0' ;
            case 13:                                        // Rank# [op] [int]
                return 's.rankId '.$this->int2Op($cr[1]).' '.intVal($cr[2]);
            case 14:                                        // spellId [op] [int]
                return 's.id '.$this->int2Op($cr[1]).' '.intVal($cr[2]);
            case 15:                                        // iconString [string]
                return 's.iconString LIKE "%'.Util::sqlEscape($cr[2]).'%"';
            case 19:                                        // scales /W level [y|n] 0x80000 = SPELL_ATTR0_LEVEL_DAMAGE_CALCULATION
                return $this->int2Bool($cr[1]) ? 's.attributes0 & 0x80000' : '(s.attributes0 & 0x80000) = 0';
            case 20:                                        // has Reagents [y|n]
                return $this->int2Bool($cr[1]) ? 's.reagent1 > 0 OR s.reagent2 > 0 OR s.reagent3 > 0 OR s.reagent4 > 0 OR s.reagent5 > 0 OR s.reagent6 > 0 OR s.reagent7 > 0 OR s.reagent8 > 0' : 's.reagents1 = 0 AND s.reagents2 = 0 AND s.reagents3 = 0 AND s.reagents4 = 0 AND s.reagents5 = 0 AND s.reagents6 = 0 AND s.reagents7 = 0 AND s.reagents8 = 0';
            case 25:                                        // rewards skill points [y|n]
                return $this->int2Bool($cr[1]) ? 's.skillLevelYellow > 1' : 's.skillLevelYellow <= 1';
            default:
                return '1';
        }
    }

    protected function createSQLForValues($vl)
    {
        $parts = [];

        //string (extended)
        if (isset($vl['na']))
        {
            if (isset($vl['ex']) && $vl['ex'] == 'on')
                $parts[] = '(s.name_loc'.User::$localeId.' LIKE "%'.Util::sqlEscape($vl['na']).'%" OR buff_loc'.User::$localeId.' LIKE "%'.Util::sqlEscape($vl['na']).'%" OR description_loc'.User::$localeId.' LIKE "%'.Util::sqlEscape($vl['na']).'%")';
            else
                $parts[] = 's.name_loc'.User::$localeId.' LIKE "%'.Util::sqlEscape($vl['na']).'%"';
        }

        // spellLevel min
        if (isset($vl['minle']))
            $parts[] = 's.spellLevel >= '.intVal($vl['minle']);

        // spellLevel max
        if (isset($vl['maxle']))
            $parts[] = 's.spellLevel <= '.intVal($vl['maxle']);

        // skillLevel min
        if (isset($vl['minrs']))
            $parts[] = 's.learnedAt >= '.intVal($vl['minrs']);

        // skillLevel max
        if (isset($vl['maxrs']))
            $parts[] = 's.learnedAt <= '.intVal($vl['maxrs']);

        // race
        if (isset($vl['ra']))
            $parts[] = 's.reqRaceMask & '.$this->list2Mask($vl['ra']);

        // class [list]
        if (isset($vl['cl']))
            $parts[] = 's.reqClassMask & '.$this->list2Mask($vl['cl']);

        // school [list]
        if (isset($vl['sc']))
            $parts[] = 's.schoolMask & '.$this->list2Mask($vl['sc'], true);

        // glyph type [list]                                wonky, admittedly, but consult SPELL_CU_* in defines and it makes sense
        if (isset($vl['gl']))
            $parts[] = 's.cuFlags & '.($this->list2Mask($vl['gl']) << 6);

        // dispel type
        if (isset($vl['dt']))
            $parts[] = 's.dispelType = '.intVal($vl['dt']);

        // mechanic
        if (isset($vl['me']))
            $parts[] = 's.mechanic = '.intVal($vl['me']).' OR s.effect1Mechanic = '.intVal($vl['me']).' OR s.effect2Mechanic = '.intVal($vl['me']).' OR s.effect3Mechanic = '.intVal($vl['me']);

        return $parts;
    }
}


// missing filter: "Available to Players"
class ItemsetListFilter extends Filter
{
    protected function createSQLForCriterium($cr)
    {
        if ($r = $this->createSQLForCommunity($cr))
            return $r;

        switch ($cr[0])
        {
            case 2:                                         // Id
                return 'id '.$this->int2Op($cr[1]).' '.intVal($cr[2]);
            case 3:                                         // pieces [int]
                return '(IF(item1 > 0, 1, 0) + IF(item2 > 0, 1, 0) + IF(item3 > 0, 1, 0) + IF(item4 > 0, 1, 0) + IF(item5 > 0, 1, 0) +
                         IF(item6 > 0, 1, 0) + IF(item7 > 0, 1, 0) + IF(item8 > 0, 1, 0) + IF(item9 > 0, 1, 0) + IF(item10 > 0, 1, 0)) ' .$this->int2Op($cr[1]).' '.intVal($cr[2]);
            case 4:                                         // bonustext [str]
                return 'bonusText_loc'.User::$localeId.' LIKE \'%'.Util::sqlEscape($cr[2]).'%\'';
            case 5:                                         // heroic [y|n]
                return 'heroic = '.($cr[1] == 1 ? '1' : '0');
            case 6:                                         // related event [int]
                $hId = intVal($cr[1]);                      // >0:holidayId; -2323:any; -2324:none
                if ($hId == -2323)
                    return 'holidayId <> 0';

                if ($hId == -2324)
                    $hId = 0;

                return 'holidayId = '.$hId;
         // case 12:                                        // available to players [y|n]
             // return '';                                  // ugh .. scan loot, quest and vendor templates and write to ?_itemset
            default:
                return '1';
        }
    }

    protected function createSQLForValues($vl)
    {
        $parts = [];

        //string (extended)
        if (isset($vl['na']))
            $parts[] = 'name_loc'.User::$localeId.' LIKE "%'.Util::sqlEscape($vl['na']).'%"';

        // quality [list]
        if (isset($vl['qu']))
            $parts[] = 'quality IN ('.implode(', ', (array)$vl['qu']).')';

        // type
        if (isset($vl['ty']))
            $parts[] = 'type IN ('.implode(', ', (array)$vl['ty']).')';

        // itemLevel min
        if (isset($vl['minle']))
            $parts[] = 'minLevel >= '.intVal($vl['minle']);

        // itemLevel max
        if (isset($vl['maxle']))
            $parts[] = 'maxLevel <= '.intVal($vl['maxle']);

        // reqLevel min
        if (isset($vl['minrl']))
            $parts[] = 'i.reqLevel <= '.intVal($vl['minle']);

        // reqLevel max
        if (isset($vl['maxrl']))
            $parts[] = 'i.reqLevel <= '.intVal($vl['maxle']);

        // class
        if (isset($vl['cl']))
            $parts[] = 'classMask & '.$this->list2Mask($vl['cl']);

        // tag
        if (isset($vl['ta']))
            $parts[] = 'contentGroup = '.$vl['ta'];

        return $parts;
    }
}

?>