<?php
session_start();

require_once("include.php");		// handles all the stuff that needs to be included

if(!isset($_SESSION["login"])){
	$_SESSION["login"] = false;
}

if(!isset($_SESSION["login_attempts"])){
	$_SESSION["login_attempts"] = 6;
}

if(check_if_banned($db)){
	banned();
} 

if(empty($_GET)){
	if(!$_SESSION["login"]){
		print_login(constant("EMPTY"));
	} else {
		header("Refresh: 0; ".$scheme.$_SERVER["HTTP_HOST"]."/" . $_SESSION["username"]);
		exit;
	}
} else {

	/* checks for specific site url's */

	if(empty($_GET["name"])){
		switch($_GET["task"]){
			case("login"):
				if($_SESSION["login"]){
					header("Refresh: 0; ".$scheme.$_SERVER["HTTP_HOST"]."/".$_SESSION["username"]);
					exit;
				}

				if($_SERVER['REQUEST_METHOD'] == 'POST'){
					$var = login($db);
					if($var == LOGIN_SUCCESSFULL){
						$_SESSION["login_attempts"] = 6;
						header("Refresh: 0; ".$scheme.$_SERVER["HTTP_HOST"]."/".$_SESSION["username"]);
					} elseif ($var == LOGIN_PASSWORD){
						brutforce_protection($db);
						print_login($var);

					} else {
						print_login($var);
					}
				} else {
					print_login(constant("EMPTY"));
				}
				break;

			case("logout"):
				if(!$_SESSION["login"]){
					print_login(constant("EMPTY"));
					exit;
				}

				$var = logout();
				if($var == LOGOUT_SUCCESSFULL){
					print_login($var);
				} else {
					header("Refresh: 0; ".$scheme.$_SERVER["HTTP_HOST"]."/httperror.php?e=500");
				}
				break;

			case("invite"):
				if(!$_SESSION["login"]){
					print_login(constant("EMPTY"));
					exit;
				}

				if($_SERVER['REQUEST_METHOD'] == 'POST'){
					$var = invite($db);
					if($var == INVITE_SUCCESSFULL){
						header("Refresh: 0; ".$scheme.$_SERVER["HTTP_HOST"]."/"); //TODO Direct link to the file browser.
					} else {
						print_invite($var);
					}
				} else {
					print_invite(constant("EMPTY"));
				}
				break;

			case("register"):
				if($_SESSION["login"]){
					header("Refresh: 0; ".$scheme.$_SERVER["HTTP_HOST"]."/" . $_SESSION["username"]);
					exit;
				}

				if($_SERVER['REQUEST_METHOD'] == 'POST'){
					$var = register($db);
					if($var == REGISTER_SUCCESSFULL){
						account($db);
					} else {
						print_register($var);
					}
				} else {
					print_register(constant("EMPTY"));
				}
				break;

			case("download"):
				if(!isset($_GET["hash"])){
					$download_hash = "empty";
				} else {
					$download_hash = $_GET["hash"];
				}
				$var = check_file_hash($db, $_GET["id"], $download_hash);
				if($var == DOWNLOAD_NOT_FILE){
					get_404("/", "File id: ".$_GET['id']);
				} elseif ($var == DOWNLOAD_PRIVATE_FILE){
					$_GET["e"]="401";
					include("httperror.php");
				} elseif($var == DOWNLOAD_FALSE_ID){
					$_GET["e"]="403";
					include("httperror.php");
				}
				break;

			case("user"):
				account($db);
				break;

			case("password_recover"):
				if($_SERVER['REQUEST_METHOD'] == 'POST'){
					$var = recover_password($db);	//TODO: Print error message
					if($var == RECOVER_PROHIBITED || $var = RECOVER_EMAIL){
						echo $var;
						exit;
					}
				} else {
					print_recover_password();
				}
				break;

			default:
				get_404($_GET["task"], $_GET["task"]); 	//TODO: Commit EMPTY constant
				break;
		}
	} else {

	/* shows the user content, downloads files, main function */
		
		$f = new file();

		if(rewrite($db)){
			if($f->isFile()){
				start_file_download($_GET["name"], $_GET["folder"]);
			} else {
				if($f->NotFound()){
					$content = get_path_to_wrong_folder($db, $_GET["name"], $_GET["folder"]);
					print_wrong_folder($content);
				} elseif ($f->isEmpty()){
					print_browser($f);
					//TODO: echo "print: folder_is_empty"; exit;
				} else {
					print_browser($f);
				}
			}
		} else {
			get_404($_GET["name"], $_GET["name"]);
		}
	}
}