<?php
/**
* @copyright (C) 2013 iJoomla, Inc. - All rights reserved.
* @license GNU General Public License, version 2 (http://www.gnu.org/licenses/gpl-2.0.html)
* @author iJoomla.com <webmaster@ijoomla.com>
* @url https://www.jomsocial.com/license-agreement
* The PHP code portions are distributed under the GPL license. If not otherwise stated, all images, manuals, cascading style sheets, and included JavaScript *are NOT GPL, and are released under the IJOOMLA Proprietary Use License v1.0
* More info at https://www.jomsocial.com/license-agreement
*/

use Joomla\CMS\Factory;
use Joomla\CMS\Language\LanguageHelper;
use Joomla\CMS\Plugin\PluginHelper;
use Joomla\CMS\Session\Session;
use Joomla\CMS\Uri\Uri;

defined( '_JEXEC' ) or die( 'Restricted access' );

$jaxRoot    = JPATH_ROOT;

// In certain Joomla! 1.6 installation, tthe  pc_includes will be inside
// jomsocial.system/ folder. Need 1 more strip directory by 1 more level
if(!file_exists($jaxRoot .'/components'))
{
    $jaxRoot = dirname($jaxRoot);
}

define('JAX_SITE_ROOT', $jaxRoot);
define('AZRUL_SYSTEM' , '1.5');

/** Define some constants that can be used by the system **/
if( !defined( 'AZRUL_SYSTEM_PATH' ) )
{
    // Get the real system path.
    $system = rtrim(  dirname( dirname( __FILE__ ) ), '/' );

    define( 'AZRUL_SYSTEM_PATH' , $system );
}
$helper = AZRUL_SYSTEM_PATH . '/pc_includes/helper.php';

// Test if file exists before trying to include and generate errors on the entire site.
if( file_exists( $helper ) )
{
    include_once( $helper );
}
else
{
    // If file doesn't exists, just quit it now.
    return;
}

global $jaxFuncNames;
$jaxFuncNames  = array();

if(!class_exists('JAXResponse')){

class JAXResponse
{

    var $_response = null;

    function __construct(){
        $this->_response = array();

        //Add dummy response so we can easily track for errro
        $this->addClear('ajax_calls', 'd');
    }

    function object_to_array($obj) {
       $_arr = is_object($obj) ? get_object_vars($obj) : $obj;
       $arr = array();
       foreach ($_arr as $key => $val) {
               $val = (is_array($val) || is_object($val)) ? $this->object_to_array($val) : $val;
               $arr[$key] = $val;
       }
       return $arr;
    }

    /**
     * Assign new sData to the $sTarget's $sAttribute property
     */
    function addAssign($sTarget,$sAttribute,$sData){
        //$sData = $this->_hackString($sData);
        //$sData = preg_replace("((\r\n)+)", '', $sData);
        $this->_response[] = array('as', $sTarget, $sAttribute, $sData);
    }

    /**
     * Clear the given target property
     */
    function addClear($sTarget,$sAttribute){
        $this->_response[] = array('as', $sTarget, $sAttribute, "");
    }

    function addCreate($sParent, $sTag, $sId, $sType=""){
        $this->_response[] = array('ce', $sParent, $sTag, $sId);
    }

    function addRemove($sTarget){
        $this->_response[] = array('rm', $sTarget);
    }

    /**
     * Assign new sData to the $sTarget's $sAttribute property
     */
    function addAlert($sData){
        $this->_response[] = array('al', "", "", $sData);
    }

    function _hackString($str){
        # Convert '{' and '}' to 0x7B and 0x7D
        //$str = str_replace(array('{', '}'), array('&#123;', '&#125;'), $str);
        return $str;
    }

    /**
     * Add a script call
     */
    function addScriptCall($func){
        $size = func_num_args();
        $response = "";

        if($size > 1){
            $response = array();

            for ($i = 1; $i < $size; $i++) {
                $arg = func_get_arg($i);
                $response[] = $arg;
            }
        }


        $this->_response[] = array('cs', $func, "", $response);
    }

    function encodeString($contents){
        $ascii = '';
        $strlen_var = strlen($contents);

       /*
        * Iterate over every character in the string,
        * escaping with a slash or encoding to UTF-8 where necessary
        */
        for ($c = 0; $c < $strlen_var; ++$c) {

            $ord_var_c = ord($contents[$c]);

            switch ($ord_var_c) {
                case 0x08:  $ascii .= '\b';  break;
                case 0x09:  $ascii .= '\t';  break;
                case 0x0A:  $ascii .= '\n';  break;
                case 0x0C:  $ascii .= '\f';  break;
                case 0x0D:  $ascii .= '\r';  break;

                default:
                    $ascii .= $contents[$c];
              }
        }


        return $ascii;

        //return $this->_hackString($ascii);
    }

    /**
     * Flush the output back
     */
    function sendResponse(){
        $mainframe  = Factory::getApplication();
        $jinput     = $mainframe->input;

        $obEnabled  = ini_get('output_buffering');

        if($obEnabled == "1" || $obEnabled == 'On')
        {
            $ob_active = ob_get_length () !== FALSE;
            if($ob_active)
            {
                while (@ ob_end_clean());
                    if(function_exists('ob_clean'))
                    {
                        @ob_clean();
                    }
            }
            ob_start();
        }

        // Send text/html if we're using iframe
        if(isset($_GET['func']))
        {
            header("Content-type: text/html; charset=utf-8");
        }else{
            header('Content-type: text/plain');
        }

        if(!defined('SERVICES_JSON_SLICE')) {
            include_once(AZRUL_SYSTEM_PATH . '/system/pc_includes/JSON.php');
        }

        // Encode response
        $output = json_encode($this->_response);


        if(isset($_GET['func'])) {
            $output = "<body onload=\"parent.jax_iresponse();\">" . htmlentities($output) . "</body>";
        }
        // Replace all _QQQ_ to "
        // Language file now uses new _QQQ_ to maintain Joomla 1.6 compatibility
        $output = str_replace('_QQQ_','\"', $output);
        echo($output);
        exit;
    }
}

class JAX
{
    var $_html = "";
    var $_funct = null;
    var $_path = "";
    var $livePath = "";
    var $_reqURL = "";
    var $_param = null;
    var $_livePath = '';

    function __construct($livepath, $param= null){
        $this->_funct = array();
        $this->_path  = dirname(__FILE__);
        $this->_livePath = $livepath;
        $this->_param = $param;

    }

    function registerFunction($mFunction){
        $this->_funct[] = $mFunction;
    }

    function addAssign(){
    }

    function setReqURI($reqURL){
        $this->_reqURL = $this->_fixHTTPS($reqURL);
    }

    function _fixHTTPS($content){
        $mainframe  = Factory::getApplication();
        $jinput     = $mainframe->input;

        $reqURI     = AZRUL_BASE_LIVE;
        //$reqURI   = $mainframe->getCfg('live_site');

        # if host have wwww, but mosConfig doesn't
        if(isset($_SERVER['HTTP_HOST']))
        {
            if((substr_count($_SERVER['HTTP_HOST'], "www.") != 0) && (substr_count($reqURI, "www.") == 0))
            {
                $reqURI = str_replace("://", "://www.", $reqURI);
            } else if((substr_count($_SERVER['HTTP_HOST'], "www.") == 0) && (substr_count($reqURI, "www.") != 0))
            {
                // host do not have 'www' but mosConfig does
                $reqURI = str_replace("www.", "", $reqURI);
            }
        }



        /* Check for HTTPS */
        if(isset($_SERVER))
        {
            if(isset($_SERVER['HTTPS']))
            {
                if(strtolower($_SERVER['HTTPS']) == "on" )
                {
                    $reqURI = str_replace("http://", "https://", $reqURI);
                }
            }
        }
        else if(isset($_SERVER['REQUEST_URI']))
        {
            // use REQUEST_URI method
            if(strpos($_SERVER['REQUEST_URI'], 'https://') === FALSE)
            {
                // not a https
            }
            else
            {
                $reqURI = str_replace("http://", "https://", $reqURI);
            }
        }

        return str_replace( AZRUL_BASE_LIVE , $reqURI, $content);
    }

    function _fixLangSwitcher($reqURI){
        $isLangFilter = PluginHelper::isEnabled("system","languagefilter");
        if (!$isLangFilter){
            return $reqURI;
        }
        $uri = Uri::getInstance();
        $app = Factory::getApplication();
        $router = $app->getRouter();
        if ($app->isClient('site')) {
            // setup language data
            $config = Factory::getConfig();
            $mode_sef   = $config->get('sef') ? true : false;
            $default_lang = LanguageHelper::getLanguages('lang_code');

            if ($mode_sef) {
                // Get the route path from the request.
                $path = JString::substr($uri->toString(), JString::strlen($uri->base()));

                // Apache mod_rewrite is Off
                //$path = Factory::getConfig()->get('sef_rewrite') ? $path : JString::substr($path, 10);
                $path = Factory::getConfig()->get('sef_rewrite') ? $path : JString::substr($path, 10);

                // Trim any spaces or slashes from the ends of the path and explode into segments.
                $path  = JString::trim($path, '/ ');
                $parts = explode('/', $path);

                // The language segment is always at the beginning of the route path if it exists.
                $langcode = $uri->getVar('lang');

                if (!empty($parts) && empty($langcode)) {
                    $langcode = reset($parts);
                }
                //set to default language
                if(empty($langcode)){
                    //$langcode = $default_lang;
                    // @since 4.0 we get default language from here
                    $lang = Factory::getLanguage();
                    $langcode = $lang->getDefault();
                }

                //append language code to the request
                $reqURI = $reqURI . '/'. $langcode . '/';
            }
            else {
                $langcode= $uri->getVar('lang',$default_lang);
                //append language code to the request
                $tmpURI = new Uri($reqURI);
                $tmpURI->setVar('lang', $langcode);
                $reqURI = $tmpURI->toString();
            }
        }
        return $reqURI;
    }
    /**
     * Return the script thatshould be added to the <head> section
     */
    function getScript()
    {
        $mainframe  = Factory::getApplication();;

        $reqURI = $this->_reqURL;
        $compress   = $mainframe->getCfg('gzip');

        # if host have wwww, but mosConfig doesn't
        //if (substr($_SERVER['HTTP_HOST'], 0, 4) == "www.") {
        if((substr_count(@$_SERVER['HTTP_HOST'], "www.") != 0) && (substr_count($reqURI, "www.") == 0))
        {
            $reqURI = str_replace("://", "://www.", $reqURI);
        } else if((substr_count(@$_SERVER['HTTP_HOST'], "www.") == 0) && (substr_count($reqURI, "www.") != 0))
        {
            // host do not have 'www' but mosConfig does
            $reqURI = str_replace("www.", "", $reqURI);
        }

        /* Check for HTTPS */
        if(isset($HTTP_SERVER_VARS))
        {
            if(isset($HTTP_SERVER_VARS['HTTPS']))
            {
                if($HTTP_SERVER_VARS['HTTPS'] == "ON" )
                {
                    $reqURI = str_replace("http://", "https://", $reqURI);
                }
            }
        }

        $reqURI = $this->_fixLangSwitcher($reqURI);

        $session = Factory::getSession();
        $tokenStr = $session->getFormToken(false);

        $html =
                "<script type='text/javascript'>
                /*<![CDATA[*/
                    var jax_live_site = '$reqURI';
                    var jax_token_var='$tokenStr';
                /*]]>*/
                </script>";

        $html .= "<script type=\"text/javascript\" src=\"$this->_livePath/ajax_" . AZRUL_SYSTEM . ".pack.js\"></script>\n";
        return $this->_fixHTTPS($html);
    }

    function nl2brStrict($text) {
        return preg_replace("/\r\n|\n|\r/", " <br />", $text);
    }

    function br2nl($text){
        $text = str_replace(' <br />', "\n", $text);
        return $this->_fixQuote($text);
    }

    function _fixQuote($text){
        return str_replace('&quot;', '"', $text);
    }

    function singleLineIt($text){
        return preg_replace("((\r\n)+)", '', $text);
    }

    /**
     *
     */
    function process()
    {
        $mainframe  = Factory::getApplication();

        //backward compatible with Jomcomment component.
        //The Jomcomment component uses $my as global variable so we need to declare $my as global
        //The global declearation is only added if com_jomcomment folder is existing
        //@Todo: A standard fix should remove the $my global in Jomcomment. For now we use this fix solution to minimize the effort
        if(file_exists(JAX_SITE_ROOT .'/components/com_jomcomment'))
        {
            global $my;
        }

        $my         = Factory::getUser();

        if(!defined('SERVICES_JSON_SLICE'))
        {
            include_once( AZRUL_SYSTEM_PATH . '/pc_includes/JSON.php');
        }

        $json = new Services_JSON();

        if(@isset($_REQUEST['task']) && ($_REQUEST['task'] == 'azrul_ajax'))
        {
            if(!isset($my))
                $my = $mainframe->getUser();

            $func = @$_REQUEST['func'];

            // Security fix.
            // 1. check if user are trying to run an eval

            # build an array of args
            $args = array();
            $argCount = 0;

            # All POST data that are meant to be send to the function will
            # be appended by 'arg' keyword. Only pass this vars to the function
            foreach($_REQUEST as $key => $postData)
            {
                if(substr($key, 0, 3) == 'arg' )
                {
                    //if ( get_magic_quotes_gpc() ) {
                    if(is_array($postData)){
                        foreach($postData as &$data){
                            $data = stripcslashes($data);
                        }
                    }else{
                        $postData = stripcslashes($postData);
                    }

                    //}

                    $postData = ($this->nl2brStrict($postData));

                    if(!is_array($postData)){
                        $decoded = $json->decode($postData);
                    }else{
                        //array input decode need to be implemented in the future
                        $decoded = $postData;
                    }

                    $key = "";
                    $val = "";

                    # if the args is an array, we need to pass it as an array
                    # todo@ we need to expand this array further. We now assume,
                    # if an array is passed, it comes in a pair of (key/value)
                    if(is_array($decoded))
                    {
                        foreach($decoded as $index => $value)
                        {
                            $tempArray  = array();

                            if( is_array($value) )
                            {
                                foreach($value as $val)
                                {


                                    // The value is an array so we need to chuck them in
                                    // a multidimensional array instead
                                    if( is_array($val) )
                                    {
                                        // Since the values here are array, we will
                                        // always assume that the index 0 is always the key
                                        $key    = $val[0];
                                        $data   = $this->br2nl( rawurldecode($val[1]) );

                                        // We will also always assume that the index 1 will be the value
                                        $decoded[$key][]    = $data;
                                    }
                                    else
                                    {
                                        // We always assume that the index 0 is the key of the array.
                                        $key    = $value[0];

                                        // We always assume that the index 1 is the data of the array.
                                        $data   = $this->br2nl(rawurldecode($value[1]));

                                        if( substr($value[0], 0, 6) == '_d_' )
                                        {
                                            $decoded = array($val);
                                        }
                                        else
                                        {
                                            $newArray   = array( $key => $data );
                                            $decoded    = array_merge( $decoded, $newArray );
                                            //$newA     = array($key => $val);
                                            //$decoded  = array_merge($decoded, $newA);
                                        }
                                    }
                                }
                            } else{
                                // If data passed is not array we treat
                                if($value != '_d_' ){
                                    $decoded = $this->br2nl(rawurldecode($value));
                                }
                            }
                        }

                        $args[] = $decoded;
                    } else {
                        $args[] = $this->br2nl(rawurldecode($decoded));
                    }
                    $argCount++;
                }
            }



            # Include the main component file
            $comName = $_REQUEST['option'];

            ob_start();

            global $jaxFuncNames;

            //check if user is in the admin interface or not
            if(Factory::getApplication()->isClient('administrator')){
                include_once(JAX_SITE_ROOT . "/administrator/components/com_$comName/$comName.php");
                // Test, and make sure $my object is valid
                if(!$my->id){
                    echo "Invalid access";
                    exit;
                }
            }
            else {
                include_once(JAX_SITE_ROOT . "/components/com_$comName/$comName.php");
            }

            @ob_end_clean();

            $jaxFilename = JAX_SITE_ROOT . "/components/com_$comName/jax.$comName.php";
            if(file_exists($jaxFilename)){
                include_once($jaxFilename);
            }
            // check and make sure the fucntion name is actually registered
            if(!in_array($func, $jaxFuncNames)){
                echo 'Invalid Function Calls';
                exit;
            }

            $funcArray = explode(',', $func);

            // Joomla post session token checking
            if ( ! Session::checkToken('post') ) {
                $func = $_REQUEST['func'];
                $list = explode(',',$func);
                if( $list[0] !== 'register' && $list[0] !== 'connect' && $list[1] !== 'ajaxUpdate' && $list[1] !== 'ajaxGetLoginFormToken' && $list[1] !== 'ajaxFetchCard' && $func !== 'search,ajaxSearch' && $list[1] !== 'ajaxGetTotalNotifications')
                {
                    require_once(JPATH_ROOT .'/components/com_community/controllers/controller.php');
                    $controller = new CommunityBaseController();
                    echo $controller->ajaxBlockUnregister();
                }
            }

            // Object call
            if(count($funcArray) > 1){
                //$response = call_user_func_array($funcArray, $args);
                $entryPoint = $comName.'AjaxEntry';
                $arg = array();
                $arg[] = $func;
                $arg[] = $args;

                $response = call_user_func_array($entryPoint, $arg);
            } else
                $response = call_user_func_array($func, $args);
            //header('Content-type: text/plain');
            //echo $response;
            //exit;
        }
    }

}

}