using System;
using System.Data;
using System.Configuration;
using System.Web;
using System.Web.Security;
using System.Web.UI;
using System.Web.UI.WebControls;
using System.Web.UI.WebControls.WebParts;
using System.Web.UI.HtmlControls;
using System.Collections;

public partial class _Default : System.Web.UI.Page
{
    string uid = "-2";
    string curID = "-2";
    string error = "";
    string oldComment = "";
    string fullPath = "";
    string fileLoc = "";
    /**
     * This is called when the page request is made.
     * This will replace contentRating, vote, and displayComment
     * tags if they exist.
     */
    protected void Page_Init(object sender, EventArgs e)
    {

        if (FindControl("config") != null)
        {
            fileLoc = ((Label)FindControl("config")).Text;
            ((Label)FindControl("config")).Text = "";
        }
        fullPath = Request.ServerVariables.Get("PATH_TRANSLATED");
        fullPath = fullPath.Substring(0, fullPath.LastIndexOf("\\") + 1);
        //load the config. file
        Hashtable hash;
        hash = tools.parser.hashXML(fullPath + fileLoc);
        string dataPath = fullPath + fileLoc;
        dataPath = dataPath.Replace("/", "\\");
        dataPath = dataPath.Substring(0, dataPath.LastIndexOf("\\") + 1);
        dataPath += tools.parser.getVariable("<system-data-structure>/<add>/<data>", hash, false);
        if (Request.RequestType == "POST")
        {
            string curID = Request.Form["curID"];
            string vote = Request.Form["vote[]"];
            string uid = Request.Form["uid"];
            string action = Request.Form["action"];
            string comment = Request.Form["comment"];
            if (vote != null)
            {
                string[] voteParts = vote.Split(',');
                int voteNum = -1;
                for (int i = 0; i < voteParts.Length; i++)
                {
                    try
                    {
                        if (Convert.ToInt32(voteParts[i]) > 0
                            && Convert.ToInt32(voteParts[i]) < 11)
                        {
                            voteNum = Convert.ToInt32(voteParts[i]);
                        }
                    }
                    catch
                    {

                    }
                }
                if (voteNum != -1 && curID != null)
                {
                    addVote(voteNum, Request.UserHostAddress, curID, dataPath);
                }
            }
            if (action == "delete" && uid != null)
            {
                deleteComment(uid, dataPath);
            }
            if (comment != null && uid != null)
            {
                if (comment.Trim().Length > 0)
                {
                    error = postComment(comment, uid, curID, dataPath);
                    if (error != "")
                    {
                        this.uid = uid;
                        this.curID = curID;
                        this.oldComment = comment;
                    }
                }
            }
        }
        else if (Request.RequestType == "GET")
        {
            if (Request.QueryString["uid"] != null)
            {
                this.uid = Request.QueryString["uid"];
                if (Request.QueryString["curID"] != null)
                {
                    this.curID = Request.QueryString["curID"];
                }
            }
        }
        if (FindControl("contentRating") != null)
        {
            ((Label)FindControl("contentRating")).Text = displayRating(dataPath, ((Label)FindControl("contentRating")).Text);
        }
        if (FindControl("vote") != null)
        {
            ((Label)FindControl("vote")).Text = displayVoteForm(dataPath, ((Label)FindControl("vote")).Text, Request.UserHostAddress);
        }
        if (FindControl("displayComments") != null)
        {
            ((Label)FindControl("displayComments")).Text = displayCommments(((Label)FindControl("displayComments")).Text, dataPath, Request.UserHostAddress);
        }
    }
    /**
     * Adds the comment to the data file if it is a valid comment
     * @comment the comment to be added
     * @uid the unique id of the comment being commented on
     * @curID the current ID of the page beign commented on
     * @data the location of the data file where comments are stored
     * @return any errors if applicable
     */
    public string postComment(string comment, string uid, string curID, string data)
    {
        //first, validate the comment--it must be standard XHTML, and
        //cannot have any of our tags in it(comment, uid, etc.)
        string comments = "<mainTagForXHTML>" + comment + "</mainTagForXHTML>";
        comment = comment.Replace(" ", "&#160;");
        comment = comment.Replace("\r\n", "<br />");
        System.IO.StringReader stream = new System.IO.StringReader(comments);
        try
        {
            System.Xml.XmlReader reader = System.Xml.XmlReader.Create(stream);
            while (reader.Read())
            {
                ;
            }
        }
        catch
        {
            return "not valid xhtml";
        }
        if (comment.Contains("<comment>"))
        {
            return "comments are not allowed to contain \"&lt;comment&gt;\" tags";
        }
        else if (comment.Contains("<?"))
        {
            return "comments are not allowed to contain \"&lt;?\" tags";
        }
        else if (comment.Contains("<%"))
        {
            return "comments are not allowed to contain \"&lt;%\" tags";
        }
        else if (comment.Contains("<script"))
        {
            return "comments are not allowed to contain \"&lt;script\" tags";
        }
        else if (comment.Contains("<frame"))
        {
            return "comments are not allowed to contain \"&lt;frame\" tags";
        }
        else if (comment.Contains("<style"))
        {
            return "comments are not allowed to contain \"&lt;style\" tags";
        }
        else if (comment.Contains("<meta"))
        {
            return "comments are not allowed to contain \"&lt;meta&gt;\" tags";
        }
        else if (comment.Contains("<comments"))
        {
            return "comments are not allowed to contain \"&lt;comments&gt;\" tags";
        }
        else if (comment.Contains("<page"))
        {
            return "comments are not allowed to contain \"&lt;page&gt;\" tags";
        }
        else if (comment.Contains("<uid>"))
        {
            return "comments are not allowed to contain \"&lt;uid&gt;\" tags";
        }
        else if (comment.Contains("]]>"))
        {
            return "comments are not allowed to contain CDATA tags";
        }
        else if (comment.Contains("name=\"curLoc\""))
        {
            return "comments are not allowed to contain &lt;a name=\"curLoc\"/&gt; tags";
        }
        //no we're commenting on something that already exists--find it
        //and append the comment
        if (Convert.ToInt32(uid) >= 0)
        {
            System.IO.StreamReader stream2 = new System.IO.StreamReader(data);
            string result = stream2.ReadToEnd();
            stream2.Close();
            int oldID = Convert.ToInt32(tools.parser.subParse(result, "curID=\"", "\""));
            result = result.Replace("<comments curID=\"" + oldID + "\">", "<comments curID=\"" + ++oldID + "\">");
            string needle = "<uid>" + uid + "</uid>";
            string part1 = result.Substring(0, result.IndexOf(needle) + needle.Length) + "\r\n";
            string part2 = result.Substring(part1.Length);
            int count = 0;
            while (true)
            {
                if (part2.IndexOf("<comment>") > 0
                    && part2.IndexOf("<comment>") < part2.IndexOf("</comment>")
                    && (part2.IndexOf("<comment>") < part2.IndexOf("</page>")
                        && part2.IndexOf("<comment>") > 0))
                {
                    part1 += part2.Substring(0, part2.IndexOf("<comment>") + 11);
                    part2 = result.Substring(part1.Length);
                    count++;
                }
                else
                {
                    if (count == 0)
                    {
                        break;
                    }
                    part1 += part2.Substring(0, part2.IndexOf("</comment>") + 12);
                    part2 = result.Substring(part1.Length);
                    count--;
                }
            }
            string tabs = "\t";
            while (part2.StartsWith("\t"))
            {
                tabs += "\t";
                part2 = part2.Substring(1);
            }
            part2 = tabs.Substring(1) + part2;
            string addPart = tabs + "<comment>\r\n";
            addPart += tabs + "\t<![CDATA[" + comment + "]]>\r\n";
            addPart += tabs + "\t<uid>" + --oldID + "</uid>\r\n";
            addPart += tabs + "</comment>\r\n";
            string finalResult = part1 + addPart + part2;
            System.IO.StreamWriter writer = new System.IO.StreamWriter(data);
            writer.Write(finalResult);
            writer.Flush();
            writer.Close();
        }
        else if (Convert.ToInt32(uid) == -2)
        {
            System.IO.StreamReader stream2 = new System.IO.StreamReader(data);
            string result = stream2.ReadToEnd();
            stream2.Close();
            int oldID = Convert.ToInt32(tools.parser.subParse(result, "curID=\"", "\""));
            int newID = oldID + 2;
            result = result.Replace("<comments curID=\"" + oldID + "\">", "<comments curID=\"" + newID + "\">");
            string subsection = result.Substring(result.IndexOf("<page id=\"" + curID));
            subsection = subsection.Substring(0, subsection.IndexOf("</page>"));
            string newSection = subsection.Replace("<uid>-2</uid>", "<uid>" + oldID + "</uid>");
            string commentData = "\t<comment>\r\n";
            commentData += "\t\t\t<![CDATA[" + comment + "]]>\r\n";
            commentData += "\t\t\t<uid>" + ++oldID + "</uid>\r\n";
            commentData += "\t\t</comment>\r\n\t";
            newSection += commentData;
            result = result.Replace(subsection, newSection);
            System.IO.StreamWriter writer = new System.IO.StreamWriter(data);
            writer.Write(result);
            writer.Flush();
            writer.Close();
        }
        else if (Convert.ToInt32(uid) == -1)
        {
            System.IO.StreamReader stream2 = new System.IO.StreamReader(data);
            string result = stream2.ReadToEnd();
            stream2.Close();
            int oldID = Convert.ToInt32(tools.parser.subParse(result, "curID=\"", "\""));
            int newID = oldID + 2;
            result = result.Replace("<comments curID=\"" + oldID + "\">", "<comments curID=\"" + newID + "\">");
            string commentData = "\t<page id=\"" + curID + "\" total=\"0\" votes=\"0\">\r\n";
            commentData += "\t\t<uid>" + oldID + "</uid>\r\n";
            commentData += "\t\t<comment>\r\n";
            commentData += "\t\t\t<![CDATA[" + comment + "]]>\r\n";
            commentData += "\t\t\t<uid>" + ++oldID + "</uid>\r\n";
            commentData += "\t\t</comment>\r\n";
            commentData += "\t</page>\r\n";
            commentData += "</comments>";
            result = result.Replace("</comments>", commentData);
            System.IO.StreamWriter writer = new System.IO.StreamWriter(data);
            writer.Write(result);
            writer.Flush();
            writer.Close();
        }
        return "";
    }

    /**
     * Deletes the comment with the given unique ID
     * @uid the unique ID of the comment to be deleted
     * @data the location of the XML data file
     */
    public void deleteComment(string uid, string data)
    {
        System.IO.StreamReader stream = new System.IO.StreamReader(data);
        string result = stream.ReadToEnd();
        string needle = "<uid>" + uid + "</uid>";
        string part1 = result.Substring(0, result.IndexOf(needle));
        string trim = part1;
        while (trim.IndexOf("<comment>") >= 0)
        {
            trim = trim.Substring(trim.IndexOf("<comment>") + 1);
        }
        trim = "<" + trim + "</end>";
        part1 += "</end>";
        part1 = part1.Substring(0, part1.IndexOf(trim));
        string part2 = result.Substring(part1.Length);
        int depth = 0;
        while (true)
        {
            if ((part2.IndexOf("<comment>") < part2.IndexOf("</comment>"))
                && part2.IndexOf("<comment>") >= 0)
            {
                depth++;
                part2 = part2.Substring(part2.IndexOf("<comment>") + 9);
            }
            else
            {
                depth--;
                part2 = part2.Substring(part2.IndexOf("</comment>") + 10);
                if (depth == 0)
                {
                    break;
                }
            }
        }
        stream.Close();
        System.IO.StreamWriter writer = new System.IO.StreamWriter(data);
        writer.Write(part1 + part2);
        writer.Flush();
        writer.Close();
    }

    /**
     * displays the comments for the current page
     * @param curID = the page ID of the current page
     * @param data the data storage file
     * @param ip the ip address of the current user
     */
    public string displayCommments(string curID, string data, string ip)
    {
        Hashtable hash;
        hash = tools.parser.hashXML(fullPath + fileLoc);
        string pageLayout = tools.parser.getVariable("<system-data-structure>/<view>/<playout>", hash, false);
        string commentLayout = tools.parser.getVariable("<system-data-structure>/<view>/<layout>", hash, false);
        string addButton = tools.parser.getVariable("<system-data-structure>/<view>/<add>", hash, false);
        string deleteButton = tools.parser.getVariable("<system-data-structure>/<view>/<delete>", hash, false);
        hash = tools.parser.hashXML(data);
        string pageXML = tools.parser.getVariable("<comments/<page id=\"" + curID + "\"", hash, true);
        if (!pageXML.Contains("<page id=\"" + curID + "\""))
        {
            pageXML = "";
        }
        int uid = -1;
        try
        {
            uid = Convert.ToInt32(tools.parser.subParse(pageXML, "<uid>", "</uid>"));
        }
        catch
        {

        }
        if ((!this.curID.Equals(this.uid)) && ("" + uid).Equals(this.uid))
        {
            string form = this.error + "<a name=\"curLoc\"> </a><br />";
            form += "<form method=\"POST\" action=\"#curLoc\">";
            form += "<input name=\"uid\" type=\"hidden\" value=\"" + this.uid + "\"/>";
            form += "<input name=\"curID\" type=\"hidden\" value=\"" + this.curID + "\"/>";
            form += "<textarea cols=\"80\" name=\"comment\" rows=\"20\">" + this.oldComment + "</textarea>";
            form += addButton.Replace("<form>", "").Replace("</form>", "");
            form += "</form>";
            pageLayout = pageLayout.Replace("#add", form);
        }
        else
        {
            string firstButton = "<form method=\"GET\" action=\"#curLoc\">";
            firstButton += "<input name=\"uid\" type=\"hidden\" value=\"" + uid + "\"/>";
            firstButton += "<input name=\"curID\" type=\"hidden\" value=\"" + curID + "\"/>";
            firstButton += addButton.Replace("<form>", "").Replace("</form>", "");
            firstButton += "</form>";
            pageLayout = pageLayout.Replace("#add", firstButton);
        }

        pageLayout = pageLayout.Replace("#displayRating", displayRating(data, curID));
        pageLayout = pageLayout.Replace("#voteRating", displayVoteForm(data, curID, ip));
        if (pageXML.IndexOf("<comment>") < 0)
        {
            pageLayout = pageLayout.Replace("#comments", "");
            return pageLayout;
        }
        pageXML = tools.parser.getVariable("<comments/<page id=\"" + curID + "\"", hash, true);
        pageXML = pageXML.Replace("<page" + tools.parser.subParse(pageXML, "<page", "<comment"), "");
        while (pageXML.IndexOf("<comment>") >= 0)
        {
            string oldNeedle = pageXML.Substring(0, pageXML.IndexOf("</comment>") + 10);
            while (oldNeedle.IndexOf("<comment>") >= 0)
            {
                oldNeedle = oldNeedle.Substring(oldNeedle.IndexOf("<comment>") + 1);
            }
            oldNeedle = "<" + oldNeedle;
            int curUID = Convert.ToInt32(tools.parser.subParse(oldNeedle, "<uid>", "</uid>"));
            string stringID = "" + curUID;
            string shinyNeedle;
            if ((!this.curID.Equals(this.uid)) && stringID.Equals(this.uid))
            {

                string form = this.error + "<a name=\"curLoc\"> </a><br />";
                form += "<form method=\"POST\" action=\"#curLoc\">";
                form += "<input name=\"uid\" type=\"hidden\" value=\"" + this.uid + "\"/>";
                form += "<input name=\"curID\" type=\"hidden\" value=\"" + this.curID + "\"/>";
                form += "<textarea cols=\"80\" name=\"comment\" rows=\"20\">" + this.oldComment + "</textarea>";
                form += addButton.Replace("<form>", "").Replace("</form>", "");
                form += "</form>";
                shinyNeedle = "<start-comments>" + commentLayout.Replace("#add", form) + "</end-comments>";
            }
            else
            {
                string curAdd = "<form method=\"GET\" action=\"#curLoc\">";
                curAdd += "<input name=\"uid\" type=\"hidden\" value=\"" + curUID + "\"/>";
                curAdd += addButton.Replace("<form>", "").Replace("</form>", "");
                curAdd += "</form>";
                shinyNeedle = "<start-comments>" + commentLayout.Replace("#add", curAdd) + "</end-comments>";
            }
            string curDel = "<form method=\"POST\">";
            curDel += "<input name=\"uid\" type=\"hidden\" value=\"" + curUID + "\"/>";
            curDel += "<input name=\"action\" type=\"hidden\" value=\"delete\">";
            curDel += deleteButton.Replace("<form>", "").Replace("</form>", "");
            curDel += "</form>";
            shinyNeedle = shinyNeedle.Replace("#delete", curDel);
            string subComments = "ERROR";
            if (oldNeedle.IndexOf("<start-comments>") > 0)
            {
                subComments = oldNeedle.Substring(oldNeedle.IndexOf("<start-comments>"));
                string temp = subComments;
                while (temp.IndexOf("</end-comments>") > 0)
                {
                    temp = temp.Substring(temp.IndexOf("</end-comments>") + 15);
                }
                temp += "#END";
                subComments += "#END";
                subComments = subComments.Substring(0, subComments.IndexOf(temp));
            }
            if (subComments == "ERROR")
            {
                subComments = "";
            }
            string mainComment = tools.parser.subParse(oldNeedle, "<comment>", "<uid>");
            shinyNeedle = shinyNeedle.Replace("#comments", subComments);
            shinyNeedle = shinyNeedle.Replace("#comment", mainComment);
            pageXML = pageXML.Replace(oldNeedle, shinyNeedle);
        }
        pageXML = pageXML.Replace("<start-comments>", "");
        pageXML = pageXML.Replace("</end-comments>", "");
        pageLayout = pageLayout.Replace("#comments", pageXML);
        return pageLayout;
    }

    /**
     * Adds the given vote to the page, and adds the ip and a current
     * timestamp into the log file to avoid abuse
     * @param voteNum the vote number
     * @param ip the ip address of the current user
     * @param curID the id of the page
     * @param dataPath the xml file where the data is stored
     */
    public void addVote(int voteNum, string ip, string curID, string dataPath)
    {
        System.IO.StreamReader stream = new System.IO.StreamReader(dataPath);
        string result = stream.ReadToEnd();
        string needle = tools.parser.subParse(result, "<page id=\"" + curID + "\"", "<comment>");
        if (needle != "ERROR")
        {
            string shinyNeedle = needle.Replace("</uid>", "</uid>\r\n\t\t<vote url=\"" + ip + "\" time=\"" + DateTime.UtcNow.ToOADate() + "\"/>");
            int oldTotal = Convert.ToInt32(tools.parser.subParse(shinyNeedle, "total=\"", "\""));
            int oldVotes = Convert.ToInt32(tools.parser.subParse(shinyNeedle, "votes=\"", "\""));
            shinyNeedle = shinyNeedle.Replace("total=\"" + oldTotal + "\" votes=\"" + oldVotes + "\"", "total=\"" + (oldTotal + voteNum) + "\" votes=\"" + ++oldVotes + "\"");
            result = result.Replace(needle, shinyNeedle);
        }
        else
        {
            needle = "</comments>";
            string shinyNeedle = "\t<page id=\"" + curID + "\" total=\"" + voteNum + "\" votes=\"" + 1 + "\">\r\n";
            shinyNeedle += "\t\t<uid>-2</uid>\r\n";
            shinyNeedle += "\t\t<vote url=\"" + ip + "\" time=\"" + DateTime.UtcNow.ToOADate() + "\"/>\r\n";
            shinyNeedle += "\t</page>\r\n";
            shinyNeedle += "</comments>";
            result = result.Replace(needle, shinyNeedle);

        }
        stream.Close();
        System.IO.StreamWriter writer = new System.IO.StreamWriter(dataPath);
        writer.Write(result);
        writer.Flush();
        writer.Close();
    }
    /**
     * displays the form for the current page if the
     * current user has not voted in 24 hours
     * @param layout the layout of the vote form
     * @param id the ID for the current page
     * @param ip the ip address for the current user
     * @return the vote form
     */
    public string displayVoteForm(string data, string id, string ip)
    {
        Hashtable hash;
        hash = tools.parser.hashXML(data);
        string votes = tools.parser.getVariable("<comments/<page id=\"" + id + "\"", hash, true);
        if (!votes.Contains("<page id=\"" + id + "\""))
        {
            votes = "";
        }
        ArrayList ips = new ArrayList();
        while (votes.Contains("<vote url"))
        {
            string curVote = tools.parser.subParse(votes, "<vote", "</vote>");
            if (Convert.ToDouble(tools.parser.subParse(curVote, "time=\"", "\"")) + 1 > DateTime.UtcNow.ToOADate())
            {
                ips.Add(tools.parser.subParse(curVote, "url=\"", "\""));
            }
            votes = votes.Substring(votes.IndexOf("<vote url") + 1);
        }
        if (!(ips.Contains(ip)))
        {
            hash = tools.parser.hashXML(fullPath + fileLoc);
            string voteLayout = tools.parser.getVariable("<system-data-structure>/<view>/<vote>", hash, false);
            voteLayout = voteLayout.Replace("<input", "<input name=\"vote[]\"");
            string extra = "<input name=\"curID\" type=\"hidden\" value=\"" + id + "\"/>";
            voteLayout = voteLayout.Replace("</form", extra + "</form");
            voteLayout = voteLayout.Replace("<form", "<form method=\"POST\"");
            return voteLayout;
        }
        return "";
    }
    /**
     * displays the rating for the current page
     * @data the xml file where the data is stored
     * @id the ID for the page
     * @return the rating
     */
    public string displayRating(string data, string id)
    {
        Hashtable hash;
        hash = tools.parser.hashXML(data);
        string rating = tools.parser.getVariable("<comments/<page id=\"" + id + "\"", hash, true);
        if (rating.Contains("<page id=\"" + id + "\""))
        {
            int total = Convert.ToInt32(tools.parser.subParse(rating, "total=\"", "\""));
            int votes = Convert.ToInt32(tools.parser.subParse(rating, "votes=\"", "\""));
            if (total > 0 && votes > 0)
            {
                return "" + ((int)(10 * (total * 1.0) / (votes * 1.0))) / 10.0;
            }
            else
            {
                return "0";
            }
        }
        else
        {
            return "0.0";
        }
    }



}