<?php

/**
 * Delete open questions.
 *
 * This Source Code Form is subject to the terms of the Mozilla Public License,
 * v. 2.0. If a copy of the MPL was not distributed with this file, You can
 * obtain one at http://mozilla.org/MPL/2.0/.
 *
 * @package phpMyFAQ
 * @author Thorsten Rinne <thorsten@phpmyfaq.de>
 * @copyright 2003-2022 phpMyFAQ Team
 * @license http://www.mozilla.org/MPL/2.0/ Mozilla Public License Version 2.0
 * @link https://www.phpmyfaq.de
 * @since 2003-02-24
 */

use phpMyFAQ\Category;
use phpMyFAQ\Date;
use phpMyFAQ\Filter;
use phpMyFAQ\Question;
use phpMyFAQ\Strings;

if (!defined('IS_VALID_PHPMYFAQ')) {
    http_response_code(400);
    exit();
}
?>
<div class="d-flex justify-content-between flex-wrap flex-md-nowrap align-items-center pt-3 pb-2 mb-3 border-bottom">
  <h1 class="h2">
    <i aria-hidden="true" class="fa fa-question-circle-o"></i>
      <?= $PMF_LANG['msgOpenQuestions'] ?>
  </h1>
</div>

<div class="row">
  <div class="col-lg-12">
      <?php
      if ($user->perm->hasPermission($user->getUserId(), 'delquestion')) {
          $category = new Category($faqConfig, [], false);
          $question = new Question($faqConfig);
          $category->setUser($currentAdminUser);
          $category->setGroups($currentAdminGroups);
          $date = new Date($faqConfig);
          $questionId = Filter::filterInput(INPUT_GET, 'id', FILTER_VALIDATE_INT);
          $csrfToken = Filter::filterInput(INPUT_GET, 'csrf', FILTER_UNSAFE_RAW);

          if (!isset($_SESSION['phpmyfaq_csrf_token']) || $_SESSION['phpmyfaq_csrf_token'] !== $csrfToken) {
              $csrfChecked = false;
          } else {
              $csrfChecked = true;
          }

          $toggle = Filter::filterInput(INPUT_GET, 'is_visible', FILTER_UNSAFE_RAW);
          if ($csrfChecked && $toggle === 'toggle') {
              $isVisible = $question->getVisibility($questionId);
              if (!is_null($isVisible)) {
                  $question->setVisibility($questionId, ($isVisible == 'N' ? 'Y' : 'N'));
              }
          }

            echo '<div id="returnMessage"></div>';

            $openQuestions = $question->getAllOpenQuestions();

            if (count($openQuestions) > 0) {
                ?>
            <form id="questionSelection" name="questionSelection" method="post" accept-charset="utf-8">
              <input type="hidden" name="csrf" value="<?= $user->getCsrfTokenFromSession() ?>">
              <table class="table table-striped">
                <thead>
                <tr>
                  <th></th>
                  <th><?= $PMF_LANG['ad_entry_author'] ?></th>
                  <th><?= $PMF_LANG['ad_entry_theme'] ?></th>
                  <th colspan="2"><?= $PMF_LANG['ad_entry_visibility'] ?>?</th>
                </tr>
                </thead>
                <tbody>
                <?php
                foreach ($openQuestions as $openQuestion) {
                    ?>
                  <tr>
                    <td>
                      <label>
                        <input id="questions[]" name="questions[]" value="<?= $openQuestion->getId() ?>" type="checkbox">
                      </label>
                    </td>
                    <td>
                        <?= $date->format(Date::createIsoDate($openQuestion->getCreated())) ?>
                      <br>
                      <a href="mailto:<?= $openQuestion->getEmail() ?>">
                          <?= Strings::htmlentities($openQuestion->getUsername()) ?>
                      </a>
                    </td>
                    <td>
                      <strong><?= $category->categoryName[$openQuestion->getCategoryId()]['name'] ?></strong>
                      <br>
                        <?= Strings::htmlentities($openQuestion->getQuestion()) ?>
                    </td>
                    <td>
                      <a href="?action=question&amp;id=<?= $openQuestion->getId() ?>&amp;is_visible=toggle&csrf=<?= $user->getCsrfTokenFromSession() ?>"
                         class="btn btn-info">
                          <?= ('Y' === $openQuestion->isVisible()) ? $PMF_LANG['ad_gen_yes'] : $PMF_LANG['ad_gen_no'] ?>
                      </a>
                    </td>
                    <td>
                        <?php if ($faqConfig->get('records.enableCloseQuestion') && $openQuestion->getAnswerId()) { ?>
                        <a href="?action=editentry&amp;id=<?= $openQuestion->getAnswerId() ?>&amp;lang=<?= $faqLangCode ?>"
                           class="btn btn-success">
                            <?= $PMF_LANG['msg2answerFAQ'] ?>
                        </a>
                        <?php } else { ?>
                        <a href="?action=takequestion&amp;id=<?= $openQuestion->getId() ?>" class="btn btn-success">
                            <?= $PMF_LANG['ad_ques_take'] ?>
                        </a>
                        <?php } ?>
                    </td>
                  </tr>
                <?php } ?>
                </tbody>
              </table>

              <div class="text-right">
                <button class="btn btn-danger" id="submitDeleteQuestions" type="submit">
                    <?= $PMF_LANG['ad_entry_delete'] ?>
                </button>
              </div>

            </form>
            <script src="assets/js/record.js"></script>
                <?php
            } else {
                echo $PMF_LANG['msgNoQuestionsAvailable'];
            }
        } else {
            echo $PMF_LANG['err_NotAuth'];
        }
        ?>
  </div>
</div>